[CentOS] attack

Pete
Thu, 24 Dec 2009 11:44:33 -0000

On Thu, 2009-12-24 at 11:31 +0000, Manu Verhaegen wrote:
> Hi,
>
> My server is under attack allows the attacker to abuse of a php script of a
vhost. How can I find what is the script.
>
> Regards,
>   maverh

Hi Maverh,

I know this may sound like a silly question but how do you know your
server is under attack ? As others have advised, have you checked your
logs on the server ? What are you running that's being attacked ?

/var/log/httpd

/var/log/messages


Regards,

Pete.