Customer area
After quickly taking a look in the log files I noticed where the infected server was.