RyanY Posted August 1, 2014 Share Posted August 1, 2014 My server is sending out 250,000 spam emails every 5 days. Is there a way to see what files are being accessed on the disk that this breach uses? I need the server up and I can't shut it down longer than 5 minutes. Quote Link to comment https://forums.phpfreaks.com/topic/290230-my-server-is-breached/ Share on other sites More sharing options...
requinix Posted August 2, 2014 Share Posted August 2, 2014 So you know the symptom but do you know the actual cause? Or are you just guessing that someone gained shell access? Can't fix what you haven't identified. While you're looking, shut down the mail service and change all your passwords. Quote Link to comment https://forums.phpfreaks.com/topic/290230-my-server-is-breached/#findComment-1486644 Share on other sites More sharing options...
Solution davidannis Posted August 2, 2014 Solution Share Posted August 2, 2014 If it were my server I think I'd hire a service to scan. http://sucuri.net/signuphttps://www.sitelock.com/website-scanning.phphttp://www.qualys.com/enterprises/qualysguard/web-application-scanning/ there's also 6scan.com Not endorsing any of these. They are just examples. Quote Link to comment https://forums.phpfreaks.com/topic/290230-my-server-is-breached/#findComment-1486647 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.