Root suspended account ..... but what actually happened?

S400

• July 05, 2017 14:01

Hi, Maybe I have signed up to the right or wrong group .... but I have no idea where I can get an answer from - so starting in this group. Below I have put the text of a message I received today. "root" suspended my account, though the ISP Provider has now restored it. BUT .... I cannot get ANY information that I can understand about the problem that caused my web site and email accounts to be suspended.

]
• What does following message mean?
• What (high level - not too technical) was done?
• What should I do to prevent it from happening again?

I have anonymised the IP addresses involve:- Offending/Source IP: xxx.xxx.xxx.xxx - Issue: Host banned for sending commands meant to run commands via the local shell. This is often found with bots sending raw PHP commands to malware. - Block Type: New Ban - Time: 2017-mm-dd hh:mm:ss-07:00 - Port: 80 - Service: http - Report ID: 17f033da-1816-4edd-be41-xxxxxxxxxxxx - Bot Fingerprint: a394f5edde9b2eee3d4ba733838713bf - Bot Information: [Removed] - Bot Node Feed: [Removed] - Abused Range: [Removed] - Requested URI: /right_column.php - User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 - GET/POST Arguments Sent: sc, _f_wp, ev

• 

  cPanelMichael

  • July 05, 2017 19:12

  Hello, It looks like a message from your web hosting provider notifying you that your shared hosting account was suspended due to abuse by a PHP script uploaded to your account. You'd need to review the "right_column.php" file to determine what it does, or consult with your web hosting provider to see if they can provide you with additional information regarding the reason they suspended your account. Thank you.

  0

Please sign in to leave a comment.