help, Got hacked? cPanel issue?

cyberwisdom

Well-Known Member
Jun 2, 2003
75
0
156
I recently saw a surge in my server load and a user running a process called "du" or something like that. I logged into his directory this is what was in there:
Code:
drwxr-x---    6 wscnet   nobody       4096 Mar 13 10:46 ./
drwx--x--x   10 wscnet   wscnet       4096 Mar 13 11:47 ../
drwxr-xr-x    3 wscnet   wscnet       4096 Mar 13 10:38 assets/
?--x-wSr--  23083 2054632244 1249143400 1683050345 Sep 28  2022 cgi-bin
?--x-ws---  11073 1144075830 1515602286 895045688 Sep  3  2004 c&o.htm
-rw-r--r--    1 wscnet   wscnet       3390 Mar 13 11:32 contact.htm
drwxr-xr-x    3 wscnet   wscnet       4096 Mar 11 13:37 dece/
?--xr-x--T  27719 1113670738 2033798223 1801931603 Jul 19  2034 feedback.htm
?r-xrw-rw-  30260 171404119 2054576450 1245934446 Oct 13  2005 formSubmit.htm
-rw-r--r--    1 wscnet   wscnet          0 Mar 11 13:18 .htaccess
drwxr-xr-x    2 wscnet   wscnet       4096 Mar 13 10:46 images/
?--x--xrwT  22093 829048428 877015117 1129853029 Mar  9  1996 index.htm
Look at this part
?--x-wSr-- 23083 2054632244 1249143400 1683050345 Sep 28 2022 cgi-bin
Who is the user "2054632244"?

Is this an error when cpanel created the account or is this guy try to maliciously use my server?
 

cyberwisdom

Well-Known Member
Jun 2, 2003
75
0
156
Also, when I try to view index.htm VIM gives me this error: "index.htm" is not a file

I know it's not a directory either.