Page 1 of 1

Cpanel Account hacked

Posted: Sun Jul 08, 2012 2:45 pm
by a24uall
Login to server and check the files/permission in home folder. Did you find anything fishy?
I would like to check the FTP logs first.
cd /usr/local/apache/domlogs/USERNAME/
FTP log file name : ftp.domain.com-ftp_log

To check the files uploaded you can grep /var/log/messages
grep -irl USERNAME /var/log/messages