[CentOS] attack

Thu Dec 24 11:31:38 UTC 2009
Manu Verhaegen <maverh at telenet.be>

Hi,

My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script.

Regards,
  maverh