is somebody using my server for malicious purposes?

A

ambersabre

Member
Sep 18, 2014
5
0
1
cPanel Access Level
Root Administrator
Hello I seem to be having a never ending issue with my VPS (linux Centos 6) I used to have a joomla site which got defaced by a hacker and the account was compromised by a symlink attack so I terminated the account a while ago and did a scan with Maldetect that turned up nothing.
I recently recieved an email off a reseller asking if I know that my server is shared with a XXX site with my server IP address.
I dont own this "website" and I havent come across any sign of any such content in my day to day use of the system and file manager, How can I find out if my server has been compromised in this way? Any help will be greatly appreciated!
 
cPanelMichael

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Hello :)

Could you elaborate further on what signs of an exploit you see on your system? If you search for the term "hacked" on our forums you will see several threads with tips and guides on how to examine your logs to see if your server has been hacked.

Thank you.
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
D using ModSec 3 with nginx rev proxy Security 5
M Allowing execution for some files while denying others using htaccess Security 1
M IPs used by Gmail to download email using POP3 Security 3
R can somebody explain the reasons behind a FTP brute force attack ? Security 2
G Somebody's IP is blocked... How do I unblock the ip address they have? Security 2
Similar threads
using ModSec 3 with nginx rev proxy
Allowing execution for some files while denying others using htaccess
IPs used by Gmail to download email using POP3
can somebody explain the reasons behind a FTP brute force attack ?
Somebody's IP is blocked... How do I unblock the ip address they have?
Top Bottom