I was hacked and had to re-image the server so i applied my backups but now my hosting company has told me that my server is attacking another server again as this was the cast befor the re-image.

But now i dont know how to find what folder/script is the problem on the server creating this problem. how do i go about soving my problem?

So you know i have splunk installed which im sure will help me greatly

You help will be greatly appreciated

    You would be better off asking a question like that here. That's what that forum specializes in. Security issues.

      thank you i will do that now.

        Write a Reply...