|
You have very likely been hacked at the apache level or lower. The guys from 85.255.*.* have been pretty famous for a nice hack the redirects people as they come in the door, bounces them through their system and sends them back silently. Variations on that theme would allow them to just dump a file.
They also track IPs and such, and they don't send people twice. They also block out IPs, often checking to see where your logins are from on FTP and telnet so that you never get redirected yourself.
Sneaky pieces of shit, and they sell the traffic to pay per click programs and (drum roll) Lars.
|