Triying find to what are users running on spacific command, you should using 
top or ps or netstat please read the manual how to use it. After all and you 
get some info unpluge your server from internet, see what log says.

------Original Message------
From: Manu Verhaegen
Sender: [email protected]
To: [email protected]
ReplyTo: CentOS mailing list
Subject: [CentOS] attack
Sent: Dec 24, 2009 6:31 PM

Hi,

My server is under attack allows the attacker to abuse of a php script of a 
vhost. How can I find what is the script.

Regards,
  maverh






_______________________________________________
CentOS mailing list
[email protected]
http://lists.centos.org/mailman/listinfo/centos


Warm regards,
David
---------------------
./nobody
_______________________________________________
CentOS mailing list
[email protected]
http://lists.centos.org/mailman/listinfo/centos

Reply via email to