RyanY Posted August 1, 2014 Share Posted August 1, 2014 My server is sending out 250,000 spam emails every 5 days. Is there a way to see what files are being accessed on the disk that this breach uses? I need the server up and I can't shut it down longer than 5 minutes. Link to comment https://forums.phpfreaks.com/topic/290230-my-server-is-breached/ Share on other sites More sharing options...
requinix Posted August 2, 2014 Share Posted August 2, 2014 So you know the symptom but do you know the actual cause? Or are you just guessing that someone gained shell access? Can't fix what you haven't identified. While you're looking, shut down the mail service and change all your passwords. Link to comment https://forums.phpfreaks.com/topic/290230-my-server-is-breached/#findComment-1486644 Share on other sites More sharing options...
davidannis Posted August 2, 2014 Share Posted August 2, 2014 If it were my server I think I'd hire a service to scan. http://sucuri.net/signuphttps://www.sitelock.com/website-scanning.phphttp://www.qualys.com/enterprises/qualysguard/web-application-scanning/ there's also 6scan.com Not endorsing any of these. They are just examples. Link to comment https://forums.phpfreaks.com/topic/290230-my-server-is-breached/#findComment-1486647 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.