Displaying 1 result from an estimated 1 matches for "18t15".
Did you mean:
1815
2013 May 19
4
security breach - ftp?
...g I removed the attacker's entry point(s).
...so I thought! Today the website got hacked again - the same exploit on
the pages, meaning same attacker.
And again I can see nothing suspicious except for the successful FTP logon
just before the modification time of the infected html/php:
2013-05-18T15:01:25.195559-07:00 MyServer proftpd: Deprecated pam_stack
module called from service "proftpd"
2013-05-18T15:01:25.204731-07:00 MyServer proftpd: Deprecated pam_stack
module called from service "proftpd"
2013-05-18T15:01:25.204831-07:00 MyServer proftpd: Deprecated pam_stack
mod...