Фишинговый ресурс

Ребят, столкнулся с проблемой, третий раз под ряд хостер пишет, что у меня на вдске фишинговый сайт, хотя я НИКАКИХ сайтов не устанавливал. Хостер дает 24 часа на решение проблемы, но я не знаю как.

 

А он действительно там? Зайдите на свою VDS в браузере.

 

эм... в каком смысле? Просто айпи ввести?

 

Ну да.

 

Не могу, администратор закрыл доступ пока не решу проблему.

 

Ну смотрите список процессов, апачи всякие.

 

facepalm
Скорее всего администратор просто решил отжать у тебя эту ВДС'ку

 

если верить этому тексту то вот

Спойлер

You are receiving this message because you are listed as the contact
for the networks below.

This message is intended for the person responsible for computer
security at your site. If this is not the correct address, please
forward this message to the appropriate party.

Our logs show that malicious attempts were made from your network
against machines in our domain. This is definitely not an authorized
request and we view it as an attempt to probe our network for a
vulnerability.

Either your machine has been compromised and is now being used to
launch hostile activity, or a legitimate user is engaged in activity
that is probably in violation of your terms of service agreement. In
either case, please investigate this matter.

At the bottom of this message we have attached parts of our logs in
order to help you track down the perpetrator (All times are GMT-0000).

We would appreciate a reply that this note has been received.

Thank you,

CERT.br
<[email protected]>
http://www.cert.br/

########################################################################

# all times are GMT-00:00

# begin logs
May 07 09:28:49.667109 178.32.225.125.36597 > xxx.xxx.xxx.8.25: S (src OS: unknown) 1432796931:1432796931(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.667142 178.32.225.125.36597 > xxx.xxx.xxx.6.25: S (src OS: unknown) 1367921125:1367921125(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.667443 178.32.225.125.36597 > xxx.xxx.xxx.17.25: S (src OS: unknown) 25731152:25731152(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.668353 178.32.225.125.36597 > xxx.xxx.xxx.13.25: S (src OS: unknown) 736501539:736501539(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.668564 178.32.225.125.36597 > xxx.xxx.xxx.10.25: S (src OS: unknown) 217568463:217568463(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.668676 178.32.225.125.36597 > xxx.xxx.xxx.9.25: S (src OS: unknown) 399119677:399119677(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.668684 178.32.225.125.36597 > xxx.xxx.xxx.14.25: S (src OS: unknown) 1121860750:1121860750(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.669139 178.32.225.125.36597 > xxx.xxx.xxx.47.25: S (src OS: unknown) 627034056:627034056(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.671061 178.32.225.125.36597 > xxx.xxx.xxx.7.25: S (src OS: unknown) 1416197376:1416197376(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.671143 178.32.225.125.36597 > xxx.xxx.xxx.4.25: S (src OS: unknown) 924434359:924434359(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.666680 178.32.225.125.36597 > xxx.xxx.xxx.69.25: S (src OS: unknown) 717461681:717461681(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.666936 178.32.225.125.36597 > xxx.xxx.xxx.70.25: S (src OS: unknown) 986520435:986520435(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.666943 178.32.225.125.36597 > xxx.xxx.xxx.76.25: S (src OS: unknown) 2078166417:2078166417(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.667042 178.32.225.125.36597 > xxx.xxx.xxx.72.25: S (src OS: unknown) 661456301:661456301(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]
May 07 09:28:49.667665 178.32.225.125.36597 > xxx.xxx.xxx.123.25: S (src OS: unknown) 1669616046:1669616046(0) win 65535 <mss 1460,nop,nop,sackOK> [tos 0x14]

 

Введите htop и заскрините процессы. А вообще, screen -ls, может кто-то тебя ломанул или хостер ошибся.