The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Which FTP operation is this?

Discussion in 'General Discussion' started by Giorgi, May 30, 2007.

  1. Giorgi

    Giorgi Member

    Joined:
    Mar 11, 2007
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    1
    Hi

    I got this in my ftp log:

    Code:
    Wed May 30 23:03:26 2007 1 85.117.45.27 1356 /home/fast/public_html/index.php a _ i r leva@fast.ge ftp 1 * c
    could you tell me exactly what operation was held on index.php ?

    thank you in advance
     
  2. nyjimbo

    nyjimbo Well-Known Member

    Joined:
    Jan 25, 2003
    Messages:
    1,125
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    New York
  3. Giorgi

    Giorgi Member

    Joined:
    Mar 11, 2007
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    1
    Yes I know that, I just want to know what does that directives mean?
     
  4. rikgarner

    rikgarner Well-Known Member

    Joined:
    Mar 31, 2006
    Messages:
    75
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    /dev/null
    I would take a close look at /home/fast/public_html/index.php if I were you, to see if there is anything malicious in there. Unless you implicitly trust the user of this site, I would suspend the domain while you investigate, and make sure that all their passwords have been reset to something secure before re-enabling the account.

    Have you got CSF firewall installed? If not, I highly recommend it, paticuarly for LFD, as it will alert you to bruteforce attacks, and block IP's of suspected attackers using IPTables.
     
Loading...

Share This Page