The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Hacking Page

Discussion in 'General Discussion' started by wkd, Oct 5, 2007.

  1. wkd

    wkd Member

    Joined:
    Jun 13, 2007
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Hi all,


    Can anr one help me in this problem when i browse IP like this getting hacking page and i need to change this page or remove can any one help me

    http://209.216.61.165/

    Thanks
     
  2. tweakservers

    tweakservers Well-Known Member

    Joined:
    Mar 30, 2006
    Messages:
    379
    Likes Received:
    0
    Trophy Points:
    16
    your index.html page looks to have been exploited. Login via FTP or as root user to check your index.html page.
     
  3. wkd

    wkd Member

    Joined:
    Jun 13, 2007
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    OK am login as root >> but where is this index.html
     
  4. ToddShipway

    ToddShipway Well-Known Member

    Joined:
    Nov 13, 2006
    Messages:
    300
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Houston, TX
    It looks like the box has been rooted. The page is most likely in /usr/local/apache/htdocs/

    If the server has been rooted, i recommend running rkhunter or chkrootkit to make sure no binaries were modified, and check for any other modifications or scripts listening on strange ports.
     
  5. colet

    colet Member

    Joined:
    Apr 26, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    1
    Try looking here:
    /home/your_user_name/public_html

    If that doesn't help then this might give you some hints:
    grep DocumentRoot /usr/local/apache/conf/httpd.conf
     
  6. wkd

    wkd Member

    Joined:
    Jun 13, 2007
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Thank you for helping me...
    but ther is any chance to back this default page for Cpanel???
     
  7. bsasninja

    bsasninja Well-Known Member

    Joined:
    Sep 2, 2004
    Messages:
    528
    Likes Received:
    0
    Trophy Points:
    16
    I recommend you leave a blank page instead of the cpanel one. Just to not give advice that is a cpanel server.
     
Loading...

Share This Page