Hi,

Unfortunately my server has been hacked yesterday. The hacker as successfully login to my server as root, and deleted few hundred accounts in it. Now I need to re-secure the server which has experienced root compromised.

 

What are the options available for me??

What software are you using on your server? Is it a Linux, Windows, ...? That will help people know how to help you.

Hi penguinmama,

My apology for not noticing your reply

Ok, I am having Linux for my server. I use VPZZ & WHM to access it, andmanaging the accounts in the server.

I use VPZZ mainly due to my lack of knowledge in server management area,, and VPZZ is pretty simple to use for newbie.

 

Over the past few weeks, I keep seraching for information on this area in securing server that had been comprimized in root access. Unfortunately, there isn't much useful advise except going for hard drive re-format to rule out any possible trajon planted in the server by the hacker.

 

At the moment, I can only wish that the hacker didn't plant any trojan or virus scripts in my server.

By the way, my Data Center helped me to reset the root passowrd in order to get back the access control.

If your server has been hacked and root has been compromised your going to have to reload the OS...

Yup - an OS reload really is the only safe option.

 

A few tips on how to secure your server:

 

DO use a firewall

DO use the latest stable versions of cPanel/Apache/MySQL/PHP

DO secure your PHP installation by blocking unsafe expressions and ensuring register_globals is off. Also consider using a secure wrapper for PHP.

DO change the SSH port

DO disable password authentication for SSH - and use keys

DO use mod_security

 

Do NOT use insecure PHP Scripts

Do NOT issue shell access to users you cannot trust with your credit card details

Do NOT write down your password

Wow a nice blast from the past....

 

Any reason you dug this thread out?

Okay - that's just strange! It appeared as the most recent topic on the front page :S Didn't realise how old the topic was