The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Command to see who or what changes a file

Discussion in 'Security' started by sc00zy, Apr 4, 2012.

  1. sc00zy

    sc00zy Active Member

    Joined:
    Jan 2, 2006
    Messages:
    27
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Assen, The Netherlands
    Due to a hack a .htaccess file on a hosting account keeps being overwritten and altered with malicious redirect. It doesn't seem to happen via FTP, so I guess via a script on the hosting account. Is there a command I can use in Putty to see who or what changes the file?

    Thanks in advance!
     
  2. storminternet

    storminternet Well-Known Member

    Joined:
    Nov 2, 2011
    Messages:
    462
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    If it has been happened through browser then you need to check the access_logs of your domain for this.
     
Loading...

Share This Page