So today I noticed one of my VPS was constantly timing out since UptimeRobot was spamming my email so I decided to log into it.
I never used this VPS for anything for the past few months, it was just a fresh OS Install.
Here is a screen shot of the **last **command
http://ift.tt/1q75bvt
I was surprised to see a strange IP, 122.81.131.109
Turns out its' from China http://ift.tt/1ogGBXg
the cpe788 logins are me.
My VPS was infected for the past few days and it was being used for DDOS attacks for the past few days
I'm now 17TB over my quota.
http://ift.tt/1q75bvv
As far as I can tell, theres a file called b26 in /root which is probably the DDOS Script.
I was not using a weak password, I generated my password for all users from this link.
http://ift.tt/1x2yq4I
LowEndTalk http://ift.tt/1m18MJI My VPS Hacked Web vps hosting server Linux - Windows webvps.blogspot.com
0 comments:
Post a Comment