Tekforums

Chat => Entertainment & Technology => Topic started by: Mardoni on July 27, 2006, 15:20:15 PM

Title: Help !! I think my site has been hacked but I cannot figure it out ?
Post by: Mardoni on July 27, 2006, 15:20:15 PM
I was browsing the logs on my site and I found a URL that shouldnt (and apparently doesnt) exist.

http://icenetware.com/~armadagu/modules/PNphpBB2/files/metlak.htm

I have done several dir listings using both FTP and CPanel, neither shows this path !

So if the path does not exist, how is that working ?
Title: Re:Help !! I think my site has been hacked but I cannot figure it out ?
Post by: brummie on July 27, 2006, 15:23:36 PM
whats the IP so we can add to the list

sorry to hear that they got you :(
Title: Re:Help !! I think my site has been hacked but I cannot figure it out ?
Post by: brummie on July 27, 2006, 15:28:18 PM
if directory is hidden then maybe it wont show?

make sure hidden are viewable in your software
Title: Help !! I think my site has been hacked but I cannot figure it out ?
Post by: Mardoni on July 27, 2006, 15:46:59 PM
well I have tried doing a ls -al but Im not convinced it works :/

Arse, think I might have to pass this up to the hosting company :(


As for an IP, not sure what youre on about tbh.
Title: Re:Help !! I think my site has been hacked but I cannot figure it out ?
Post by: brummie on July 27, 2006, 15:48:15 PM
may need permissions changed before you can do owt

cpanel logs access to your site and pages etc. It should tell you who did it.

Title: Help !! I think my site has been hacked but I cannot figure it out ?
Post by: Mardoni on July 27, 2006, 15:49:10 PM
Ahh its someones  actual account thats been hacked but not mine.

Thanks to the gay way that shared hosting works, it makes it look like it is my account !
Title: Help !! I think my site has been hacked but I cannot figure it out ?
Post by: Mardoni on July 27, 2006, 15:50:21 PM
I thought that the ~armadagu part meant an account name.

Whats happening is that the icenetware.com part is resolving to the shared server and then the ~armadagu is mapping to a completely different account to my domain.

This is the site thats been screwed:
www.icenetware.com/~armadagu/

Ghay.

And definatley one for the hosts.