[CentOS] attack

On Thu, 2009-12-24 at 11:31 +0000, Manu Verhaegen wrote:
> Hi,
> 
> My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script.
> 
> Regards,
>   maverh

Hi Maverh,

I know this may sound like a silly question but how do you know your
server is under attack ? As others have advised, have you checked your
logs on the server ? What are you running that's being attacked ?

/var/log/httpd

/var/log/messages


Regards,

Pete.