Comment by NitpickLawyer

It's not 19hours. The server was originally configured with no running php. Once they added a php file, the server got pwned in 2 hours.