Control Web Panel

Security => Mod_Security => Topic started by: bu0n0j88 on April 16, 2019, 02:18:46 PM

Title: IS MY SERVER GETTING VIRUS ?
Post by: bu0n0j88 on April 16, 2019, 02:18:46 PM

its so amazing ...
I have been using centos web panel for 2 years but this time, i got a serious problem.
Please check these Images:
(https://i.imgur.com/mf3YZil.png)
(https://i.imgur.com/dRIvcd2.png)
(https://i.imgur.com/tlzkyR3.png)
(https://i.imgur.com/UPGssnf.png)

Why there is a "HOME" folder therre?
Why there is many strange files inside it ?

Some days ago, i saw the similiar folder in a website. I deleted it and it broke my server ... then i lost all of my data.,
Thats terrible with me.
Someone please help me.
Thanks

Title: Re: IS MY SERVER GETTING VIRUS ?
Post by: studio4host on April 17, 2019, 11:53:07 AM

looks like someone is using symlink attack to hack all server websites, you should cleanup the server with experienced system admin or cwp support

Title: Re: IS MY SERVER GETTING VIRUS ?
Post by: adamjedgar on June 24, 2019, 08:43:50 PM

Is this on cwp free version or pro?

If it's pro with all its built in security apps, how did that someone even get into server in the first place!

Title: Re: IS MY SERVER GETTING VIRUS ?
Post by: studio4host on June 24, 2019, 09:50:06 PM

it has not anything to the control panel as you as system owner decide what you will do with your server and website scripts

so to get all secure yolu should do cwp recommended
- csf firewall
- mod security: comodo waf
- all scripts like wordpress/joomla and plugins need to be updated
- filesystemlock - cwp feature for systems which require a high security
- strong passwords and never don't use default usernames like admin....