Quote:
Originally Posted by CyberSEO
If I were you, I would firstly report the rogue affiliate to iwantu.com and make sure he hasn't been paid  |
https://help.dreamhost.com/hc/en-us/...ite-was-hacked
Noticed no world writable directories.
find . -type d -perm -o=w
And no logins from any other ips over the past month. I used the command
last -if /var/log/wtmp.1 | grep youruser | awk '{print $3}' | sort | uniq -c
Just gotta keep looking through the logs.