1
vote
2answers
192 views

Is there a way to log who upload or change a spesific file? (centos) [duplicate]

Possible Duplicate: My server’s been hacked EMERGENCY There is a file that keeps infected with this code. I can't figure out why. So I want to log who upload or change the file. Is there a ...
7
votes
2answers
562 views

Dissecting a website attack through a compromised FTP account

My site has been hacked and at this point, I know some details, but I'm at a loss at exactly how it happened or how to prevent it in the future. I need your help in trying to dissect the attack so ...
1
vote
3answers
1k views

FTP server under hacking attempts

FileZilla log is showing regular attempts to login with dictionary keywords, and the attacker's IP remains the same for the last 3 days. What can I do about it apart from deny this IP address?
2
votes
4answers
840 views

Server FTP attack from multiple IP addresses spanning 5 countries - how can this be?

I recently had an FTP attack where 3 files were copied into public HTML directory of my domain. (It looks like the FTP password was compromised, but I'm still investigating this.) The strange thing is ...
6
votes
7answers
1k views

Website hacked again, what to do? please help

Final Update: Things have been peaceful for the past few weeks and taught me much more about website security and risks. Here's my version of story - I was using an older version of wordpress and ...