The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Space Theft

Discussion in 'General Discussion' started by Punkluis, Apr 29, 2005.

  1. Punkluis

    Punkluis Member

    Joined:
    Dec 27, 2004
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    I have had some users(3) show up on WHM as they are using like 400MB(average) but when I du -sh them on SSH it shows up they were actually using 16GB, they hid some files on folders named like "...", ".,/.,", "happy.gif/.,/..." now, WHM wasnt able to read those folders so they were stealing alot of space, how do I fix this?
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    If they're owned by the user they would show up, but I would bet they're owned by nobody:nobody - either way, those are exploit files and those accounts or the scripts running in them have been compromised and you could have hackers daemons running on your server. you need to check the whole server over thoroughly.
     
  3. RoboCop777

    RoboCop777 Member

    Joined:
    Dec 6, 2004
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Whoa, this really sucks. I better start checking my folders. You maybe should disable their accounts or ask them whats going on. :rolleyes:
     
  4. bman

    bman Well-Known Member

    Joined:
    Dec 28, 2003
    Messages:
    119
    Likes Received:
    0
    Trophy Points:
    16
  5. eth00

    eth00 Well-Known Member
    PartnerNOC

    Joined:
    Mar 30, 2003
    Messages:
    723
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    NC
    cPanel Access Level:
    Root Administrator
    As posted above sounds like your server might be hacked. What files have they uploaded to the server? I bet they will be illegal movies and games which if that is true is probably causing your server to transfer a lot more then is necessary.

    As chirpy said file ownership is how quotas are determined.
     
  6. JohnBB

    JohnBB Member

    Joined:
    Dec 12, 2004
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    Hi !

    Maybe you have a tip for me? It seems someone is "hiding" 30 Gig of space on our server's HDD somehow. WHM does show 20 Gig being used for the /home directory -- and this on a 80 Gig HDD should not add up to 85%.

    What would be a way to find directories like "...", ".,/.," --- if ownership would be "nobody"?

    Best,
    John
     
  7. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    It's probably simpler to use du from the top of /home and work your way downwards:

    cd /home
    du --max-depth=1 -h
     
Loading...

Share This Page