website got hacked

[ArmenD]

hi all,
website got hacked. how do i trace perpetuators?

 

[rtichnor]

check your logs.

 

[ArmenD]

hi,
how can one spot suspicious activity.
is there an automated free utility that will do this for me, my logs are quite large?

 

[rtichnor]

you need to check your logs daily. Over time, you will notice suspicious activity. Some things are obvious instantly, but you need to understnad what to look for.

How large are your logs?
What do you use to host your website? (IIS or Apache etc...)

 

[ArmenD]

not sure what to look for.
around 5 MB.
apache.

 

[rtichnor]

post some lines (20 or 25)

 

[ArmenD]

i have to get permission first