Page 1 of 1

Hostgator VPS constantly being compromised

Posted: 04 Nov 2015, 22:10
by Ozzie1973
Hi I have hostgator VPS account and some keeps getting access to my server. They generated thousands of files in various newly created folders. I change my cpanel password and scan my pc for keyloggers. However, they still have access to my server. I need your help to rectify this problem. I pay alot for my vps server and google is not liking my sites due to generated content

Will csf fix cpanel backdoor issues.
Thanks for your help.

Re: Hostgator VPS constantly being compromised

Posted: 06 Nov 2015, 01:01
by thowden
Hi

Sounds like you probably have a Wordpress site (or similar CMS) with a compromised plugin.

Try rkhunter and maldet on the server first just to be sure there is nothing else.

After that you are probably looking for PHP scripts with executable code like base64_decode issues.

My understanding of CSF is that the free products help to lock the doors and windows. Your issue appears to be that the intruder already has keys to a secret hatch hidden in the floor.