Important Notice:
Two sections of this forum are available only to registered customers. In order to receive access to the Customer Forums and ResellerCentral Forums, you must first register on these forums or login to your existing forum account. If you are an existing HostNine customer, be sure to register using the email address on file for your billing profile.
|
|||||||
![]() |
|
|
Thread Tools | Display Modes |
|
#1
|
||||
|
||||
|
Today we just found over 25+ accounts running perl scripts spamming.
These where ALL uploaded by ftp. Example 1 Nov 24 10:35:16 nodexx pure-ftpd: (xxxxxxx@xxxxxx) [NOTICE] /home/xxxxxx//public_html/tjcdn.pl uploaded (30812 bytes, 462.52KB/sec) Example 2 Nov 24 12:50:54 nodexx pure-ftpd: (xxxxxx@xxxxxxxxx) [NOTICE] /home/xxxxxx//public_html/cgi-bin/sif. Nov 24 12:50:56 nodexx pure-ftpd: (xxxxxx@xxxxxxxxx) [NOTICE] Deleted /public_html/cgi-bin/sif.pl Nov 24 12:50:56 nodexx pure-ftpd: (xxxxxx@xxxxxxxxx) [INFO] Logout. This is not a server exploit this is your account/computer being hacked. They have your password so odds are it's something you downloaded/got via a virus. I URGE ALL CUSTOMERS to update all passwords right now due to this. AGAIN this is not us but a virus that you have causing it. I have suspended ALOT of accounts. If I didn't email you it's not on purpose I am trying to keep track of these with Blake as we speak so we can contact EVERYONE.
__________________
Alex Hostnine Support *********Important Links************ Helpdesk: http://support.hostnine.com/ Blog: http://www.hostnine.com/blog/ Forums: http://forums.hostnine.com/ ******************************** |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| passwords without locking a whole directory | groverjarrett | General | 1 | 05-16-2008 07:45 AM |
| passwords | not_me | Reseller Hosting | 2 | 11-23-2007 11:19 AM |




Linear Mode

