Change in IP server

[maellerollet]

Hello,
I am hosting in a private server Hetzner.
My server has been down for some weeks. I have reactivate my server but my IP has been changed.
I have no longer access to my dashboard Cloudron featuring my apps (including my ghost website) when connecting to Cloudron. It says 'Privated connexion not secured'
How can I do?
Thank you so much!

[james]

Hello @maellerollet and welcome to the Cloudron forum

It sounds like you are running into this issue: https://docs.cloudron.io/troubleshooting/#domain-issues-expiry
Please check this documentation and see if this helps to resolve your issue.

[girish]

From support, this server was completely compromised with libprocesshider.so in ld preload . It has malware everywhere . Best to simply restore cloudron from a backup on a new server - https://docs.cloudron.io/backups/#restore-cloudron

[robi]

@girish o_O wow, how did you find that?

[joseph]

@robi I investigated this. There was a blob like this in .bashrc - https://paste.cloudron.io/zunuqadabi.lua and the ps output had a lot of sus things - https://paste.cloudron.io/xajicujoxe.apache . With some luck , I found that /etc/ld.so.conf had a preload of libprocesshider.so inside it

[robi]

@joseph excellent work. Seems like it was designed for an RPM distro.