Plesk Server Hacked - How to Backup Post: 302354809

Sponsored Content

Top Forums UNIX for Dummies Questions & Answers Plesk Server Hacked - How to Backup Post 302354809 by miguelvidal on Sunday 20th of September 2009 01:59:46 AM

09-20-2009

Registered User

Plesk Server Hacked - How to Backup

Hello!

First of all: I am a newbie. Smilie

I have a CentOS 64bit server with Plesk Panel 8.6.
And have been hacked. Smilie

After many tries and support tickets, I am configuring a new server, with Suse 11 and Plesk 9.2.

I know that Plesk 8.6 have a backup utility (Parallels Plesk Control Panel 8.6 for Linux/Unix Backup and Restore Utilities Administrator's Guide)

But I have some unclear doubts:
1. Is it safe use restore utility? It will restore the license too, but I want to use the newer license, not the old one.
2. How can I backup everything from my old server to the newer? Including e-mails (qmail), DB (MySQL) and domains files and configurations? Does anyone have experience with this?
3. How can I send the files/backup from one server to another in a quick way? I simply can't download-upload for 2 reasons:
3.a) It's about 200GB of files
3.b) I didn't have enought time

If anyone know anything, please help me.

I am with this trouble about 2 days and after the attack I have only SSH access to the server.
The Plesk Panel don't load.

Thank you very much for your attention,

Miguel Koscianski Vidal

miguelvidal

View Public Profile for miguelvidal

Find all posts by miguelvidal

6 More Discussions You Might Find Interesting

1. Cybersecurity

How to know when you've been hacked

One of the most important ways to keep tou machine secure is to know when it has been broken into. The less time hackers have on your system, the less they can do to it, and the greater you chancens of kicking them off and repairing the damage. The more sophisticated the hacker, the less likely...

2. Shell Programming and Scripting

running Cron job in Plesk

I have a script to delete unwanted cookies from some Curl jobs we are doing find /tmp -name 'CURLCOOKIE*' -print0 | xargs -0 rm this works great when I am logged on as root in the shell, now I have to put it into a cron job in Plesk. When I do that it does not work. I think the directory...

3. Shell Programming and Scripting

rsync backup mode(--backup) Are there any options to remove backup folders on successful deployment?

Hi Everyone, we are running rsync with --backup mode, Are there any rsync options to remove backup folders on successful deployment? Thanks in adv.

4. UNIX for Dummies Questions & Answers

Plesk 9.5.4 CentOS 5 how to view log files?

Hello i have Plesk 9.5.4 CentOS 5 and after updating to 9.5.4 plesk told me there were some errors and to view a log file. Some problems occured during upgrade. You need to * * check log file * * ...

5. UNIX for Dummies Questions & Answers

Adding plesk superuser from SSH

I'm trying to add a superuser (admin) to plesk from SSH (I have root access). Can this be done? I have search over the web but did not find any solution to my problem. My version is Plesk 9.3

6. Cybersecurity

Server hacked on known port

Hi, There is a recent case whereby it was reported that one of the production servers was hacked on port 1521. However, I am not sure how this was possible, as I checked that the OS firewall (iptables) is on : # /etc/init.d/iptables status Table: nat Chain PREROUTING (policy ACCEPT) num ...

LEARN ABOUT CENTOS

backup_delvolset

BACKUP_DELVOLSET(8)					       AFS Command Reference					       BACKUP_DELVOLSET(8)

NAME

       backup_delvolset - Deletes one or more volume sets from the Backup Database

SYNOPSIS

       backup delvolset -name <volume set name>+ [-localauth]
	   [-cell <cell name>] [-help]

       backup delvols -n <volume set name>+ [-l]
	   [-c <cell name>] [-h]

DESCRIPTION

       The backup delvolset command deletes each volume set named by the -name argument, and the volume entries each contains, from the Backup
       Database. The backup listvolsets command lists the volume sets (and their volume entries) currently defined in the Backup Database.

CAUTIONS

       Deleting a temporary volume set is possible only within the interactive session in which it was created. Exiting the interactive session
       also destroys the temporary volume set automatically.

OPTIONS

       -name <volume set name>+
	   Names each volume set to delete.

       -localauth
	   Constructs a server ticket using a key from the local /etc/openafs/server/KeyFile file. The backup command interpreter presents it to
	   the Backup Server, Volume Server and VL Server during mutual authentication. Do not combine this flag with the -cell argument. For more
	   details, see backup(8).

       -cell <cell name>
	   Names the cell in which to run the command. Do not combine this argument with the -localauth flag. For more details, see backup(8).

       -help
	   Prints the online help for this command. All other valid options are ignored.

EXAMPLES

       The following command deletes the volume set called user and all volume entries in it:

	  % backup delvolset user

PRIVILEGE REQUIRED

       The issuer must be listed in the /etc/openafs/server/UserList file on every machine where the Backup Server is running, or must be logged
       onto a server machine as the local superuser "root" if the -localauth flag is included.

SEE ALSO

       backup(8), backup_addvolentry(8), backup_addvolset(8), backup_delvolentry(8), backup_listvolsets(8)

COPYRIGHT

       IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.

       This documentation is covered by the IBM Public License Version 1.0.  It was converted from HTML to POD by software written by Chas
       Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.

OpenAFS 							    2012-03-26						       BACKUP_DELVOLSET(8)