https://www.softaculous.com/board/index.php?tid=16836 https://www.softaculous.com/board/index.php?tid=16836&tpg=0#p50260
Only July 11, we saw the disk space on the node was getting reduced automatically, and we saw the VPSes getting deleted on its own.

grep 2020-07-11 vzctl.log | grep Destroy | awk '{print $1, $5}'
2020-07-11T08:39:04-0700 1414
2020-07-11T08:39:04-0700 2007
2020-07-11T08:39:04-0700 5098
2020-07-11T08:39:04-0700 5137
2020-07-11T08:39:04-0700 7240
2020-07-11T08:39:04-0700 8758
2020-07-11T08:39:04-0700 8776
2020-07-11T08:39:05-0700 8788
2020-07-11T08:39:05-0700 8789
2020-07-11T08:39:05-0700 8801
2020-07-11T08:39:05-0700 8852
2020-07-11T08:39:05-0700 9213
2020-07-11T08:39:05-0700 9215
2020-07-11T08:39:05-0700 9761
2020-07-11T08:39:05-0700 11778
2020-07-11T08:39:05-0700 13700
2020-07-11T08:39:05-0700 13701
2020-07-11T08:39:05-0700 13719
2020-07-11T08:39:05-0700 14183
2020-07-11T08:39:05-0700 14185
2020-07-11T08:39:05-0700 15170
2020-07-11T08:39:05-0700 17288
2020-07-11T08:39:05-0700 17391
2020-07-11T08:39:05-0700 17493
2020-07-11T08:39:05-0700 17702
2020-07-11T08:39:05-0700 18340
2020-07-11T08:39:05-0700 19023
2020-07-11T08:39:05-0700 19027
2020-07-11T09:03:55-0700 19037
2020-07-11T09:03:55-0700 19527
2020-07-11T09:03:55-0700 19550
2020-07-11T09:03:55-0700 19555
2020-07-11T09:03:55-0700 19606
2020-07-11T09:03:55-0700 19609
2020-07-11T09:03:55-0700 19622
2020-07-11T09:03:55-0700 19958
2020-07-11T09:03:55-0700 19961
2020-07-11T09:03:55-0700 19963
2020-07-11T09:03:55-0700 19965
2020-07-11T09:03:55-0700 19967
2020-07-11T09:03:55-0700 20002
2020-07-11T09:03:55-0700 20047
2020-07-11T09:03:55-0700 20068
2020-07-11T09:03:55-0700 20093
2020-07-11T09:03:55-0700 20096
2020-07-11T09:03:55-0700 20097
2020-07-11T09:03:55-0700 20151
2020-07-11T09:03:55-0700 20152
2020-07-11T09:03:55-0700 20153
2020-07-11T09:03:55-0700 20154
2020-07-11T09:03:55-0700 20155
2020-07-11T09:03:55-0700 20156
2020-07-11T09:03:55-0700 20157
2020-07-11T09:03:55-0700 20160
2020-07-11T09:03:55-0700 20161
2020-07-11T09:03:55-0700 20162
2020-07-11T09:03:55-0700 20168
2020-07-11T09:03:55-0700 20174
2020-07-11T09:03:55-0700 20181
2020-07-11T09:03:55-0700 20233
2020-07-11T09:03:55-0700 20343
2020-07-11T09:03:55-0700 20359
2020-07-11T09:03:55-0700 20375
2020-07-11T09:03:55-0700 20457
2020-07-11T09:03:55-0700 20475
2020-07-11T09:03:55-0700 20571
2020-07-11T09:03:55-0700 179277

There's no indication in the Task log or admin log as to how it happened. Look at the timestamp in the log, all at the same time.

Has anyone experienced the same recently? We do not have enough evidence to attribute this to a hack, because can a hacker destroy  the VPSes alone, and no other data on the server?

What could have gone wrong here?

Any similar experiences, please feel free to share here.

Thank you!
]]> Wed, 15 Jul 2020 08:25:29 GMT https://www.softaculous.com/board/index.php?tid=16836&tpg=0#p50260