[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <af406b770606020909s53acae25idcfc7fe2a5ef9a0f@mail.gmail.com>
Date: Fri Jun 2 17:10:06 2006
From: ademar.gonzalez at gmail.com (Ademar Gonzalez)
Subject: Files keep appearing
Hi Stephen .
On 6/2/06, Stephen Johnson <maillists@...lonecoder.com> wrote:
>
> I keep having a phishing website appear on my web server.
>
> They keep showing up in a Resources folder of one of the sites that I host.
> I have gone through the logs and I am not seeing any connections. I
> deleted the files this morning and this evening they re-appeared ? no
> connections were made on my server during that period of time.
>
> Also, there are no cron jobs that I noticed that looked out of the
> ordinary.
>
> I am running MySQL, PHP, Apache2 on a debian linux server.
>
> Any thoughts?
>
> --
> Stephen Johnson
Look for an insecure upload form on that website you are hosting, most
probably they are uploading their stuff thought there unless you've
been rooted :-)
Regards.
ademar
Powered by blists - more mailing lists