[CentOS] attack

Kai Schaetzl
Thu, 24 Dec 2009 14:31:34 -0000

Obviously, if you are running several vhosts and plesk you likely have
other logs to check. Also, one can usually see the origin of the mail
injection in the maillog (e.g. complaints about setting to an unsafe
sender) or in the outgoing messages. At runtime you can see the connects
with full URLs on the apache status page.

Kai

--
Kai Sch?tzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com