hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Dedicated Server : Am i hacked/hotlinked?
Reply

Forum Jump

Am i hacked/hotlinked?

Reply Post New Thread In Dedicated Server Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 07-30-2001, 11:56 AM
Bat Bat is offline
Newbie
 
Join Date: Jul 2001
Posts: 7

Am i hacked/hotlinked?


Hi,
I have a raq3 (4webspace) and run several sites on it.
On an average day i use about 3-4 gigs BW.
This morning i got this system email and it said that one of my sites:
is very near or over the disk space limit allocated on the Cobalt server.
Once the quota limit is reached, no more data can be stored. Consider moving
some data to another location or increasing the limit.

Quota Limit: 200.00 MB
Quota Used: 347.15 MB
Percent Used: 173 %

I went to the admin area and noticed my BW has gone up to 8 gig's!
"Quota Used: 347.15 MB" its impossible i have that much mb's in use for that site.
And whats also fishy is that i didnt touch that site for a week and today i suddenly get that e-mail.
Anybody know what i can do? I have to fix this quick cause 8 gigs would be a bit expensive at the end of the month.
Thanks.

Reply With Quote


Sponsored Links
  #2  
Old 07-30-2001, 12:05 PM
projo projo is offline
Aspiring Evangelist
 
Join Date: Dec 2000
Posts: 371
Do you have anonymous ftp were people can drop and retrieve software. You may have become a wares drop box.

Reply With Quote
  #3  
Old 07-30-2001, 12:12 PM
huck huck is offline
Server Management Expert
 
Join Date: Apr 2001
Location: FL, USA
Posts: 881
Check the actually usage for that site by running the du command for that directory, .eg.
du -sh directoryname
or to get a summary of each directory/file
du -sh *

Sometimes the cobalt panels do not correctly report disk usage.


Check for anonymous ftp. pojo is correct in that when warez distributors discover anonymous ftp, your bandwidth and server can quickly become overloaded. Your servers IP and the list of files available circulate the internet very quickly via newsgroups. Look in all of your ftp site folders for a possible warez dump. Also, people use similar techniques to distribute movies and pornography.

__________________

We save you time, money, and frustration by handling the server management tasks required to run an online business successfully.
No prodding required. We just do it right the first time. Red Hat, MySQL, Plesk, and cPanel certified staff.


Reply With Quote
Sponsored Links
  #4  
Old 07-30-2001, 12:39 PM
Keeg Keeg is offline
Web Hosting Guru
 
Join Date: Oct 2000
Posts: 318
i would bet that 147 mesg of storage is from stats, if your using 8 gigs it would create a lot of statistics data.

Steve

Reply With Quote
  #5  
Old 07-30-2001, 01:05 PM
Bat Bat is offline
Newbie
 
Join Date: Jul 2001
Posts: 7
Thanks guy,
Its not the stats, i use webalizer and those stats files arent even near those 147 mb's
That du command, do i use that in Telnet?
I have no clue how that stuff works.
And no i dont have anomynous ftp.

Reply With Quote
  #6  
Old 07-30-2001, 01:20 PM
huck huck is offline
Server Management Expert
 
Join Date: Apr 2001
Location: FL, USA
Posts: 881
du should be ran at the command line as root to get accurate results.

scruntinize your web stats logs and refferrer logs. make sure images are not being called directly from another web site. also go to the site that is over limit and look for any large files.

also, could this just be a burst in traffic -- did the site get some press or something??? we once had a site that tripled its daily hits in one day do to some press coverage.

__________________

We save you time, money, and frustration by handling the server management tasks required to run an online business successfully.
No prodding required. We just do it right the first time. Red Hat, MySQL, Plesk, and cPanel certified staff.


Reply With Quote
Reply

Related posts from TheWhir.com
Title Type Date Posted
Hackers Steal User Login Information from AVAST Anti-Virus Forum Web Hosting News 2014-05-27 13:46:25
GCHQ, Not NSA, Behind Belgian Telecom Attack: Report Web Hosting News 2014-05-01 08:22:23
Reports Suggest NSA Behind Attack on Belgium's Largest Telecom Web Hosting News 2013-09-16 10:33:22
Could Website Hackers be Chasing Hosting Customers Away? Blog 2013-08-27 09:07:42
Syrian Electronic Army Targets Top US Media Websites in Outbrain Platform Hack Web Hosting News 2013-08-16 10:46:10


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?