Add a credit card to my customer account
How can I renew a service?
How do I change the holder or email address of a customer account?
How do I close my customer account?
How do I get student status?
How do I transfer services to another account?
I can no longer access my customer account
I've just been charged for a cancelled service
I've just been debited twice for the same service
Merger of PulseHeberg and PulseBox customer area
My customer account appears suspended
My offer appears as Deprecated
How do I start my dedicated server on a customized ISO?
How to access the KVM console of a dedicated server?
How to access the management panel of a dedicated server?
How to reinstall a dedicated server?
How to turn off, turn on or restart a dedicated server?
Start your dedicated server in rescue mode
Enable DKIM on Zimbra Hosted Email service
How do I configure my domain for Zimbra?
How do I create a Zimbra distribution list?
How to access the Hosted Email management panel?
How to create a Zimbra domain alias?
How to create a Zimbra email account?
How to create a Zimbra email alias?
Analyze server logs
How to activate VNC connection on Ubuntu Desktop?
How to enable RDP connection on Ubuntu Desktop
How to install Ubuntu Desktop?
Increase server security
Manage your kernel
Methodology of the benchmarks
My Linux server is slow
Upgrading your Debian version
Your server has been compromised
Can I get a refund for my order ?
How do I cancel a pending invoice?
My order in stuck "Pending"
What payment methods do we accept ?
How do I allow PulseHeberg support to connect to my server?
How do I contact support?
How to get the status of the service?
I can't send emails from my server
Make an MTR diagnosis
Partnership and sponsoring
Does FUSE work on my VPS KVM?
Does TUN/TAP work on my VPS KVM?
How do I change the reverse DNS of my VPS KVM?
How do I reinstall a VPS KVM?
How does anti-DDoS protection work on a VPS KVM?
How to access the console of a VPS KVM?
How to access the management panel of a KVM VPS?
How to create a snapshot on a KVM VPS?
How to turn off, turn on or reboot a VPS KVM?
How to use the integrated firewall on a VPS KVM?
I can't install packages on my VPS with Debian or Ubuntu
Install a custom OS on your KVM VPS
Is Docker compatible with my VPS KVM?
Is it possible to downgrade a VPS server?
Is it possible to have additional IPs on a KVM VPS?
Is it possible to migrate from an OpenVZ or LXC VPS to KVM?
Start your VPS in rescue mode
The panel shows that my VPS KVM consumes all its RAM.
What OS are available on the VPS KVM ?
Your VPS KVM VPS has just rebooted
Your VPS KVM server is suspended for Hack
Docker does not work on my VPS LXC
Fuse does not work on my VPS LXC
How do I access the LXC VPS management panel?
How do I backup a VPS LXC ?
How do I change the reverse DNS of my LXC VPS?
How do I reinstall a VPS LXC?
How do I turn off, turn on or restart a VPS LXC?
How does anti-DDoS protection work on a VPS LXC?
How to set up a scheduled backup on an LXC VPS
How to use the integrated firewall on a VPS LXC ?
Is it possible to access the console of a VPS LXC?
Is it possible to have additional IPs on an LXC VPS?
My LXC VPS server panel displays "VM creation/reinstallation in progress".
TUN/TAP doesn't work on my VPS LXC
What OS are available on the LXC VPS?
Your VPS has just restarted
Your server is suspended for Hack
Docker does not work on my OpenVZ VPS
Fuse does not work on my OpenVZ VPS
How do I access the OpenVZ VPS management panel?
How do I change the reverse DNS of my OpenVZ VPS?
How do I reinstall an OpenVZ VPS?
How do I turn off, turn on or restart an OpenVZ VPS?
I am banned from the OpenVZ VPS panel
TUN/TAP doesn't work on my OpenVZ VPS
How do I change the hostname of my VPS?
What kind of VPS do I have (OpenVZ, LXC or KVM) ?
DNS management at Pulseheberg
How do I activate DKIM signature on my hosting?
How do I change the PHP settings?
How do I change the PHP version of my domain or sub-domain?
How do I change the directory where my main domain points?
How do I configure my domain to point to my hosting?
How do I create additional FTP access?
How do I get the transfer code for a domain?
How long does a domain transfer take?
How to activate an automatic email response?
How to activate an email alias?
How to activate an email redirection?
How to add a second domain?
How to consult the logs?
How to create a database
How to create a scheduled task (CRON)?
How to create a sub-domain?
How to create an email account?
How to install a CMS with Softaculous ?
How to manage the Apache and Nginx configuration of your web hosting?
How to uninstall a CMS with Softaculous ?
Is there anti-DDoS protection on the web hosting service?
Login to the Plesk panel
Manage your DNS zone from Plesk
My domain does not work
My email is rejected by the outgoing spam filter
SSL management of your website
What are the limitations of sending email from my hosting ?
What versions of PHP are available?
Updated by l'équipe PulseHeberg
Several elements can lead to the consideration that access to your server has been compromised. These may include :
- Unauthorized access discovery following log analysis
- Abnormal behaviors on your VPS (high CPU usage, large outgoing network flow, abuses, outgoing spam, etc)
- A report from our technical support
- Something you don't recognize on your VPS
Whenever one of these elements suggests that your access has been compromised, it is necessary to act very quickly in order to restore the situation. The actions generated by these compromised accesses can indeed be illegal (sending mass SPAM, use as VPN, phishing hosting, DDoS attacks, etc), or make your server unusable (use of very high CPU, preventing your VPS from functioning normally.
If you don't have the possibility to reinstall the server immediately, we recommend the following actions:
1/ Check current processes
You can very easily list the current processes with the following command:
root@Helpdesk:~# ps aux
You will then get a list of all processes active on the VPS. If some of them seem abnormal to you, you can easily check the path of the concerned file to take the necessary actions.
You can also install the htop package, to see some information about your VPS, and list them in order of CPU consumption.
root@Helpdesk:~# apt-get install htop
You can exit HTOP by pressing F10 or Ctrl+C
2/ Run an antivirus scan on the VPS
The "clamav" package allows you to easily scan your VPS files for known malware or backdoor. It can be used in a very simple way:
root@Helpdesk:~# apt-get install clamav
root@Helpdesk:~# clamscan -r --bell -i /
This will launch a scan of all the files in the VPS, and will list the files considered dangerous. Note that this scan may take several minutes (or hours) depending on the amount of data in your VPS, and your offer.
3/ Make your VPS more secure
We invite you to quickly follow our guide Increase server security, in order to avoid new illicit accesses to your VPS.