index.html missing

TonyKa

• February 22, 2015 18:00

Hi, everyone I'm new here, I have a problem with my index.html four days a go I worked on my site the next day the index.html it was missing I replaced it thinking that I did something wrong the but the next it was missing again so I change the cpanel password and replaced the missing file again next morning the same thing four times now. Do you have any ideas as to what is happening and what to do!! Thanks Tony

• 

  keat63

  • February 23, 2015 08:08

  When you upload index.html, do you see it working. ? what file permissions have you given it ? I think 644 is the norm.

  0
• 

  TonyKa

  • February 23, 2015 15:50

  Yes it is and the permission is set to 444

  ]When you upload index.html, do you see it working. ? what file permissions have you given it ? I think 644 is the norm.

  
  

  0
• 

  cPanelMichael

  • February 23, 2015 17:58

  Hello :) Do you have any cron jobs active on this account that are deleting the file? Do you have root access to this server to review the cPanel access log? Thank you.

  0
• 

  TonyKa

  • February 24, 2015 05:10

  No I don't have any cron jobs and Yes I do have root access to cpanel access log

  ]Hello :) Do you have any cron jobs active on this account that are deleting the file? Do you have root access to this server to review the cPanel access log? Thank you.

  
  

  0
• 

  cPanelMichael

  • February 24, 2015 15:25

  Try searching for the account username in the cPanel access log (/usr/local/cpanel/logs/access_log) to see if any other IP addresses are accessing cPanel and removing that file. EX:
  grep $username /usr/local/cpanel/logs/access_log
  You can also search /var/log/messages for FTP activity. Thank you.

  0
• 

  TonyKa

  • February 24, 2015 21:49

  Sorry I'm not that good with cpanel I manage to check the FTP logs no activity I checked Raw Access Logs but I can't find any user names there

  ]Try searching for the account username in the cPanel access log (/usr/local/cpanel/logs/access_log) to see if any other IP addresses are accessing cPanel and removing that file. EX:
  grep $username /usr/local/cpanel/logs/access_log
  You can also search /var/log/messages for FTP activity. Thank you.

  
  

  0
• 

  Infopro

  • February 24, 2015 23:30

  ]Hi, everyone I'm new here, I have a problem with my index.html four days a go I worked on my site the next day the index.html it was missing I replaced it thinking that I did something wrong the but the next it was missing again so I change the cpanel password and replaced the missing file again next morning the same thing four times now. Do you have any ideas as to what is happening and what to do!! Thanks Tony

  
  You might want to contact your Hosting Provider about this. There's not enough details in your post for anyone to be able to guess what the issue might be.

  0
• 

  TonyKa

  • February 28, 2015 05:53

  I know is hard to help me! I just would like to know is there any program or script at cpanel that can remove my index.html every morning I checked all the logs no FTP activate I changed the passwords two times now on WHM and cpanel I disable the FTP so now what to I do! Can you at list tell me is there a program or script at cpanel that I miss configure and is deleting my index.html (passwords on WHM & Cpanel are changed two times now, FTP disabled)

  0
• 

  Infopro

  • March 01, 2015 03:49

  There is nothing in cPanel that would be removing your index.html and changing your password every morning.

  0
• 

  TonyKa

  • March 04, 2015 02:30

  No not the password just my index.html and this time I had a redirect to a page called home.html and at 10am I checked my site both pages ware missing by the way I change the passwords every day so how do they get in the site???

  ]There is nothing in cPanel that would be removing your index.html and changing your password every morning.

  
  

  0
• 

  Infopro

  • March 04, 2015 09:08

  by the way I change the passwords every day
  Why? You might want to check your own computer for some sort of issues. As already suggested you should contact your Hosting Provider as well. They have logs you might not be able to access that could be of use.

  0
• 

  keat63

  • March 04, 2015 13:12

  I'm intrigued if nothing else. Does the home.html contain anything naughty?

  0
• 

  TonyKa

  • March 04, 2015 18:45

  This is the best answer I got Thanks!!

  ]I'm intrigued if nothing else. Does the home.html contain anything naughty?

  
  

  0
• 

  TonyKa

  • March 04, 2015 18:55

  I did check my computer with two different programs and I did contact my Provider they recommended to update all of my sites scripts to their latest versions as soon as possible can I do this???. Can you please tell me the logs they can check for me so I know what to ask for

  ]Why? You might want to check your own computer for some sort of issues. As already suggested you should contact your Hosting Provider as well. They have logs you might not be able to access that could be of use.

  
  Thanks Tony

  0
• 

  cPanelMichael

  • March 04, 2015 19:10

  Hello :) This thread should help answer your question: What log files to check after an account gets hacked/defaced? Thank you.

  0
• 

  keat63

  • March 04, 2015 19:24

  Tony. You mention you have WHM, so I assume that you have full access, and it's not just a hosting plan you have ? If this is the case, do you have CSF firewall installed.? Also do you have anything configured in "Host Access Control" I'm still new and learning, but these would be my first plan of attack at keeping the hackers out until you can ascertain how they are getting in. With Host Access Control, you can assign IP addresses or a range of Addresses and allocate what they are allowed to do.

  0

Please sign in to leave a comment.