Reverse DNS on VPS

[ocarina]

Hello.

VPS66 would like to have reverse DNS setup for the domain mail.wiimart.org

[ocarina]

Also, I received an email saying my VPS got hacked. I created a new user on my VPS so that my friend could connect to it and setup mailcow. Then I got the email saying it was hacked.

[ocarina]

Wait, I don't think that was my friend logging in.

[MoneyBroz]

35 minutes ago, ocarina said:

Wait, I don't think that was my friend logging in.

Yes your VPS was hacked and started bruteforcing SSH on random servers. A rebuild is mandatory to continue using your VPS.

[Krydos]

Do you have a list of files that you want backed up prior to rebuilding the VPS?

[ocarina]

So I need the apache tomcat folder in `/home/ocarinavps`, the `/home/steam/steamcmd` directory, the `/home/steam/.config/` directory, and the `/home/ocarinavps/SCP` directory. I believe that is everything but if you are able to send a file list of `/home/ocarinavps` that would be great.

[MoneyBroz]

21 minutes ago, ocarina said:

but if you are able to send a file list of `/home/ocarinavps` that would be great.

 

[ocarina]

Yep, so apache-tomcat-10.1.30, /home/ocarina/SCP, /home/steam/steamcmd, and /home/steam/.config.

 

Did anyone else's VPS get hacked or was it just mine? And is it possible to see the IP of the person who logged in to attack those other servers?

Edited 1 hour ago by ocarina

[MoneyBroz]

6 minutes ago, ocarina said:

Did anyone else's VPS get hacked or was it just mine

Just yours

6 minutes ago, ocarina said:

And is it possible to see the IP of the person who logged in to attack those other servers

That's what we are investigating.