• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Issue Server Attack

FPA

New Pleskian
Server operating system version
CentOS Linux 7.9.2009 (Core)
Plesk version and microupdate number
Plesk Obsidian 18.0.54 Update #3
HI,
I experience server attacks recently.
This is what the phpmyadmin displays:
Screenshot 2023-08-21 at 16-33-41 Websites & Domains - Plesk Obsidian 18.0.54.png
Any help would be much appreciated!
 
Could you please describe the issue in more detail? Your screenshot shows a McAfee website in the background (or a website that looks like a McAfee site) and a dialog in front. It's a screenshot of your website that is hosted on the server. This is not linked to phpMyAdmin in any way. It is also quite strange, because unless you are McAfee it is not likely that you have their content in your website. Maybe your website was hacked to impersonate their website and trick users into downloading files?
 
I'm not a programmer to give you more technical details.
All I can say is that I get alerts as the server's CPU is running at 100% for a long period, that the website goes offline and comes back randomly.
All started by some wordpress scripts that were introduced on the server that I was able to clean up.

Your reply confort me in the fact that I'm seeing the same thing than you: the McAfee screenshot instead of my phpmyadmin preview.
Here is a larger picture:
Capture-d'écran-2023-08-21-185549.jpg
Meanwhile, my website was displaying the same image. Hopefully, I could restore it from a backup from this morning.
I'm now about to upgrade Prestashop to hopefully overwrite damaged files.

I need some assistance in securing the website. I'll be greatful if you can advise me a serious person/structure that can take the job in charge.
 
I did not actually look at your website (because I do not know your website, it is not mentioned in your posts). I only saw that the screenshot generator of Plesk captured a screenshot that is obviously not your website. I also did not understand that you must have created your own subdomain "phpmyadmin" with the intention to put your own phpMyAdmin onto it. Why not simply use the phpMyAdmin that comes with the webserver and is readily available for use in the "Databases" menu?

My guess is that your website was hacked and that a hacker shows a spoofed McAfee website instead of your real content. Replacing your website content with a fresh copy of whatever you wanted to install there should solve that.

For assistance I can strongly recommend a Plesk support subscription. https://support.plesk.com
It is included with your Plesk license if you bought your license from Plesk. If you bought your license from a reseller, a support subscription is available at a very low price: https://support.plesk.com/hc/en-us/articles/12388090147095-How-to-get-support-directly-from-Plesk-
 
Back
Top