Recent content by bradz

I now think the hacker got the users password, then used webmail to set up a filter to forward all messages. Will be checking webmail for this.

Outlook does not seem to show any forward and still I am seeing emails in Queue trying to send to the what we feel is the email set up by the hacker, but that email gives an error, mailbox full. The Header shows X-Sieve: Pigeonhole Sieve 0.5.21 (f6cd4b8e) X-Sieve-Redirected-From: (a specific...

Sorry Martin, by the time I seen this the Ionos/Plesk team had located a 2.6gb mail log browser file. I bet they use the same approach. They then removed that extension. The server then started to send mail and seems to be back to normal. The du now shows 681M /opt/psa/admin 124K...

Hi, I have multiple server with Ubuntu 20.04.6 LTS Plesk Obsidian Version 18.0.63 2 did Update #4 One server is now showing /dev/mapper/vg00-opt /opt/psa 100.00% full (4.6GB) What can cause this? and how can I fix this? The hosted websites seem to be working fine, However, emails are...

Thanks Peter! That makes sense, I think my best approach is to go by the site creation date on the server and review the oldest sites. They are the ones that may have a weaker password. Again, Thanks! Brad

Can one get a list from Plesk showing which passwords or sites on the server are below the set security policy level? Over the years I have increased the security policy level, but from time to time I find a password that is old and below the current level. Thanks for any input, Sincerely, Brad :)

UPDATE: After looking at many potential causes with no resolution, the IONOS support/techs did a hardware replacement on the server. It has been over 2 weeks and the server is running great with no down time. It looks like the issue is solved!!! Many thanks to IONOS support & server techs and...

Yes carlosarmando85 50-cloud-init.yaml is the what you had seen. I get.... # This file is generated from information provided by the datasource. Changes # to it will not persist across an instance reboot. To disable cloud-init's # network configuration capabilities, write a file #...

See below. # sudo networkctl status ● State: routable Address: 74.208.67.9 on eth0 2607:f1c0:86d:a200::5c:19c9 on eth0 fe80::225:90ff:fe74:cd8e on eth0 Gateway...

For a dedicated ionos server, I see # See resolved.conf(5) for details [Resolve] #DNS= #FallbackDNS= #Domains= #LLMNR=no #MulticastDNS=no #DNSSEC=no #DNSOverTLS=no #Cache=no-negative DNSStubListener=yes #ReadEtcHosts=yes for interfaces # /etc/network/interfaces -- configuration file for...

/etc/systemd/resolved.conf --- all 4 servers identical file /etc/network/interfaces --- same except change in ip6

Thinking about it more, during the set, I did run into an IP issue. I think it was caused by bad settings on my part. I am now thinking it was the 2 servers dropping the network. I will compare the /etc/systemd/resolved.conf files.

Thanks for looking at this and giving it deep thought! I have 4 server that I setup within a week, all with the same specs. Two have done this, one more then the other. The other two have been totally fine. If I learn more or any differences between the servers, I will post. Again, thanks! Brad

I am using IONOS Dedicated Server using IPv4 addresses With the IPv4 IP being shared for multiple sites

I am also on IONOS - Dedicated - Linux Server .. Ubuntu 20.04.4 LTS Plesk Obsidian Version 18.0.41 Update #1, last updated on Feb 8, 2022 06:29 AM The first post describes the situation! It is happening to me but not predicable, not everyday, my be a week or a few days. In addition, I have 4...