News:

Tekforums.net - The improved home of Tekforums! :D

Main Menu

Help !! I think my site has been hacked but I cannot figure it out ?

Started by Mardoni, July 27, 2006, 15:20:15 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Mardoni

I was browsing the logs on my site and I found a URL that shouldnt (and apparently doesnt) exist.

http://icenetware.com/~armadagu/modules/PNphpBB2/files/metlak.htm

I have done several dir listings using both FTP and CPanel, neither shows this path !

So if the path does not exist, how is that working ?

brummie

whats the IP so we can add to the list

sorry to hear that they got you :(

brummie

if directory is hidden then maybe it wont show?

make sure hidden are viewable in your software

Mardoni

well I have tried doing a ls -al but Im not convinced it works :/

Arse, think I might have to pass this up to the hosting company :(


As for an IP, not sure what youre on about tbh.

brummie

may need permissions changed before you can do owt

cpanel logs access to your site and pages etc. It should tell you who did it.


Mardoni

Ahh its someones  actual account thats been hacked but not mine.

Thanks to the gay way that shared hosting works, it makes it look like it is my account !

Mardoni

I thought that the ~armadagu part meant an account name.

Whats happening is that the icenetware.com part is resolving to the shared server and then the ~armadagu is mapping to a completely different account to my domain.

This is the site thats been screwed:
www.icenetware.com/~armadagu/

Ghay.

And definatley one for the hosts.