find /home/xxxxxxxxx/public_html -type f -ctime -1 -exec ls -ls {} \;

find /home/xxxxxxxxx/public_html -type f -ctime -1 -exec ls -ls {} \;

ActiveMan: Great!!!

not everyone can use the command line though

Their is a PHP script that you can install on you site. It notifies you if there are any changes to your site -- sending an email with a list of changed files. This at least tells you where to look. it also has a wordpress plugin

Read more
www.webchicklet.com/tools/monitorhackdfiles-tool-helps-fight-site-hackers/


You could set up a Google Alert http://www.google.com/alerts to search your site for probable junk. For example, you might have the alert search for "viagra site:example.com". Google alerts will email you if it ever finds the target of your search.

spikes C: I don't know but script changes occurs almost every time on servers's i've worked with.
I thought it would probably be anti-virus scans or something but i am sure that getting email alerts when ever a files changes last modification time is a total waste of resources.

Slyr0x:

spikes C:
I don't know but script changes occurs almost every time on servers's i've worked with.
I thought it would probably be anti-virus scans or something but i am sure that getting email alerts when ever a files changes last modification time is a total waste of resources.

No, it's not.

Please educate me: Are there scripts that Auto-change?

spikes C:
So, i can only assume that there's something reading and resaving the files on my server. Antiviruses can do that, backups and server changes does that, if you have a load balancer, you'll definitely experience it. So, like i said, it would be a total waste of resources for me.

spikes C: So, like i said, it would be a total waste of resources for me.

andreagoffi1978:
I tried both solution, find with cron and php script monitorhackdfiles-tool, but unfortunately neither work on my cheap hosting.

I think it's due to the fact that my hosting is windows based and the find command can't be executed.

For now, I found the https://monitorwebsitefilechanges.cloud/ service that essentially does the same thing, but it also works on my windows hosting. The only flaw is that it costs $2.5 per month.

Do you know other solutions, maybe free, that work for windows hosting?

andreagoffi1978:
I tried both solution, find with cron and php script monitorhackdfiles-tool, but unfortunately neither work on my cheap hosting.

I think it's due to the fact that my hosting is windows based and the find command can't be executed.

For now, I found the https://monitorwebsitefilechanges.cloud/ service that essentially does the same thing, but it also works on my windows hosting. The only flaw is that it costs $2.5 per month.

Do you know other solutions, maybe free, that work for windows hosting?

Slyr0x:
Yesterday, I was trying to help a client fix a hacked site and one of the controls I put in place was to monitor changes to files on the web server. . So I'll just explain how you can also do same (either you are on a shared-hosting or dedicated server provided it's a LINUX box).

Over time when malicious hackers hit your site, they've been known to drop a backdoor somewhere on your server. It could be the /css , /images , /admin/images, /js , /includes directories . .somewhere far hidden from you.

To check for recent file changes on your webserver, you can do this

1. If you have SSH access, fire up Putty and run this command



Make sure /home/xxxxxxxxx/public_html is the full path to your public_html,www, httpdocs directory

2. Setup a cron job

- Login to your cPanel
- Under "Advanced" submenu, you will see "Cron Jobs". Click it
- Tweak the settings to suit you (either you want alerts hourly/daily/weekly)
- There is a section for "Commands", type in
- Click "Add New Cron Jobs"


This will NOT prevent files from being changed without your knowledge. However, if a file is added or changed, you will get an email alert telling you which file was changed.


Cheers.

Slyr0x:
Yesterday, I was trying to help a client fix a hacked site and one of the controls I put in place was to monitor changes to files on the web server. . So I'll just explain how you can also do same (either you are on a shared-hosting or dedicated server provided it's a LINUX box).

Over time when malicious hackers hit your site, they've been known to drop a backdoor somewhere on your server. It could be the /css , /images , /admin/images, /js , /includes directories . .somewhere far hidden from you.

To check for recent file changes on your webserver, you can do this

1. If you have SSH access, fire up Putty and run this command [
/b]



Make sure [b]/home/xxxxxxxxx/public_html is the full path to your public_html,www, httpdocs directory

2. Setup a cron job

- Login to your cPanel
- Under "Advanced" submenu, you will see "Cron Jobs". Click it
- Tweak the settings to suit you (either you want alerts hourly/daily/weekly)
- There is a section for "Commands", type in
- Click "Add New Cron Jobs"


This will NOT prevent files from being changed without your knowledge. However, if a file is added or changed, you will get an email alert telling you which file was changed.


Cheers.

Slyr0x:
Yesterday, I was trying to help a client fix a hacked site and one of the controls I put in place was to monitor changes to files on the web server. . So I'll just explain how you can also do same (either you are on a shared-hosting or dedicated server provided it's a LINUX box).

Over time when malicious hackers hit your site, they've been known to drop a backdoor somewhere on your server. It could be the /css , /images , /admin/images, /js , /includes directories . .somewhere far hidden from you.

To check for recent file changes on your webserver, you can do this

1. If you have SSH access, fire up Putty and run this command



Make sure /home/xxxxxxxxx/public_html is the full path to your public_html,www, httpdocs directory

2. Setup a cron job

- Login to your cPanel
- Under "Advanced" submenu, you will see "Cron Jobs". Click it
- Tweak the settings to suit you (either you want alerts hourly/daily/weekly)
- There is a section for "Commands", type in
- Click "Add New Cron Jobs"


This will NOT prevent files from being changed without your knowledge. However, if a file is added or changed, you will get an email alert telling you which file was changed.


Cheers.