watertrade Posted August 25, 2012 hi all, as you may know I am involved with a website called seedsaustralia.net I have just logging into the website file management system to see if I can edit some info to make the site better ( its pretty basic at the moment) while playing around, searching though the files I went to /home/myname/public_html/antonell/ and found a load of html docs with links to all kinds of shit some of which is very dodgy. I also saw they had links to '400 christian ebooks collection excellent books and hard to find' I have no idea what the antonell folder is.. what do you think is going on?? Share this post Link to post Share on other sites
watertrade Posted August 25, 2012 just found that this is on my old website, not linked to the current one btw. 1 Share this post Link to post Share on other sites
IndianDreaming Posted August 25, 2012 (edited) Rename the folder to 'bad' and see if it affects your current site - if it doesn't, just let it be or delete it. If it contains files you need then sort though it and take what you want and get rid of the rest. Sounds like your old site was hacked and had all sorts of garbage injected into it, your current site looks great though so - nice work! I bought seeds off you when I first started growing cacti and they're all going well - apart form feeding a few slugs, the rest are my oldest cacti Edited August 25, 2012 by IndianDreaming Share this post Link to post Share on other sites
obtuse Posted August 25, 2012 Yeah sounds like a hack has taken place and files injected. Common when some setups require a writable directory on your webserver. may not have been successfull depending on your hosts setup, but not good. I've had it happen to me, and its a pain in the ass. as above rename the directory, see if it affects your site, if not delete it. Be very cautious with writable directories. Cheers, Ob. Share this post Link to post Share on other sites
Evil Genius Posted August 25, 2012 Seems you finally found god! Apart from that, the sites been hacked and none of the passwords can be trusted anymore. Try to find out what software your hoster uses and change the provider if the security of the current one isnt up to date. Apart from that, always make sure to use the newest version of every single script you use. Try to clean up as good as you can and if its too much for you, ask your current provider or the new one to help you. This kind of thing can be pretty dangerous....just imagine the hackers would have putten child porn or something like that on the page. Share this post Link to post Share on other sites
Distracted Posted August 25, 2012 Was the directory the files were uploaded onto restricted? It could be some guy found some unrestricted webspace and decided to take advantage of your bandwidth. Share this post Link to post Share on other sites
watertrade Posted August 25, 2012 It could be some guy found some unrestricted webspace and decided to take advantage of your bandwidth. I think this was the case - it was all done over a single day. most of the files refer to movies , 'men in black' being one. music lady gaga and madonna + others, llots and lots of porn and hundreds of christian ebooks. I have contacted the provider and they are checking it out. the website I'm currently using for seedsaustralia is fine btw. Share this post Link to post Share on other sites
DarkSpark Posted August 25, 2012 THey are using your site as a host for 'Backlinks' by the sounds of it. If it is just a serious of files with links in them they are used to trick google into thinking that the pages have heaps of people linking too them when they dont. They call it Black Hat SEO. I would delete the folder immediately and check that your directories have permissions set to 755 i think it was. This means that public and group have execute turned off. 1 Share this post Link to post Share on other sites
Darklight Posted August 25, 2012 + others, llots and lots of porn and hundreds of christian ebooks. Hacking for Christ. Go figure... I have contacted the provider and they are checking it out. Was going to suggest that, if you report it ASAP then can you still be held accountable for hosting those files, some of which are prolly pirate? Share this post Link to post Share on other sites
whitewind Posted August 26, 2012 Those new laws eh. Now we all look like we are heading off to Seeds Australia but really we are watching Christian Porn! Share this post Link to post Share on other sites
Darklight Posted August 26, 2012 Now we all look like we are heading off to Seeds Australia but really we are watching Christian Porn! Christian porn. I can't imagine it. Is that where they shout " Oh Christ I'm coming " ? Sorry to hijack the thread, couldn't resist. Normal viewing resumes 2 Share this post Link to post Share on other sites
