[CentOS] attack

Karanbir Singh
Thu, 24 Dec 2009 12:22:53 -0000

Hello

On 12/24/2009 12:01 PM, Manu Verhaegen wrote:
> We have plesk running, i have running logwatch and i have found a IP
adress.
> I have add it in the IP table to block it then the attack is solved.
> We see a lot of outgouing emails a php script is used for sending many
emails possible stored in the database.


you also have a broken email client, what are the chances that you could:

a) find an email client that preserves thread sanity
b) refrain from topposting unless absolutely necessary

--
Karanbir Singh
London, UK        | http://www.karan.org/ | twitter.com/kbsingh
ICQ: 2522219      | Yahoo IM: z00dax      | Gtalk: z00dax
GnuPG Key : http://www.karan.org/publickey.asc