View Single Post
  #84  
Old 10-23-2008, 12:14 PM
 
manolodf manolodf is offline
 

Advanced Member
  
Join Date: Jun 2003
Posts: 50
 

Default Re: Warning: Iframe based attacks using stolen FTP access info

Emerson beat me to it, but yes if you see anything other than
127.0.0.1 localhost
in there, that you did not manually put in for whatever reason then your DNS is compromised meaning everything is routed through "hacker's network" so they can do alot of evil things, DNS hacking i believe is what its called but just take a quick look on any machines you use to access your site, specially any using FTP or Admin just to be sure.

Be concerned if you see something like this where 111.111.111.111 is a random IP you dont recognize:

111.111.111.111 yourdomain.com
or
111.111.111.111 *
Reply With Quote