My system: CentOS 6.2 64bit Apache 2.2.15 PHP 5.3.3 I have WordPress 3.3.1.
I have several domains on my server configured as virtual hosts. The path to website files is the following: /var/www/vhosts/mydomain.com/httpdocs/
Logs file for this domain: /var/www/vhosts/mydomain.com/logs/
So, today I have found an unknown file "index.html" in logs directory. The website itself works fine and I can't see any changes to core files.
This index.html contains the following:
... <META HTTP-EQUIV="Refresh" Content="0; URL=http://18.104.22.168" ...
This URL redirects to some wired chinese language courses on vimeo.com. So, anyone has something similar or knows how does this file was uploaded to my server? Any log files I have to check?
Thank you for help!!!