0
votes
2answers
68 views

Dealing with Apache spam

I am recieving a lot of suspicious requests which cause Apache to use a lot of memory (over 1GB) [Mon Feb 24 09:48:29 2014] [error] [client 120.37.238.125] PHP Fatal error: Allowed memory size of ...
0
votes
0answers
102 views

trace security hole for culprit random “post” mail files

Running a shared cpanel server with so many layers of security, but somehow someone is able to upload randomly named files with post, spamming out from random users on the box. Examples <?php if ...
1
vote
3answers
199 views

How to prevent Linux server from spamming?

I installed mail scanner for spam protection, but is there any script for Linux to notify me or email me that some one spaming on my server ?
1
vote
1answer
303 views

How to find which local process is sending spam on a Windows Server 2008 server

I am managing a Win Server 2008 system with a number of hosted web sites. Recently I found that something was sending spam through our SMTP server. The logs indicate that the connections were being ...
0
votes
1answer
139 views

Security Risks of catch-all email address [closed]

What additional security issues does an MTA and email client face if a catch-all email address is setup on an sub-domain (that isn't published/publicly listed anywhere) compared with setting up ...
1
vote
1answer
447 views

Why is FunWebProducts flooding my server?

I have received 47 000 hits in the past couple of hours from a single domain. I researched FunWebProducts but it seems to be some kind of a plugin, not sure how this is possible? 89.70.25.120 - - ...
-2
votes
2answers
187 views

Nginx massive error.log, am I being DDOSed?

So I just opened up my Nginx error log as all my pages are throwing error code 500. It's enormous, my site is still in development and their are well over 100k errors for resources Nginx was unable ...
0
votes
1answer
66 views

Common ways of spam files ending up in a web directory

A friend discovered a bunch of spam files in his web directory on his web host the other day. He has no idea where they came from, and I'm not quite sure either. What are common security breaches ...
2
votes
1answer
183 views

Issue of tracking an email that was “lost in cyberspace”

The issue here is one of an email that has been "lost in cyberspace." The receiver is claiming never to have received it. However, I recieved an automated out-of-office reply as a response to my ...
0
votes
1answer
98 views

Published and updated mass email statistics?

I'm wondering if someone is publishing statistics on email usage on the internet. The main number I'm looking for is average message size on a large scale sample data over time. If someone doing ...
0
votes
4answers
1k views

Unexpected requests from an IP in San Antonio.. should I worry?

I've noticed on my server log that I receive unexpected requests from an IP in San Antonio. Is this spam ? They visit phpMyAdmin, admin.. etc is this spam ? 184.106.130.137 184.106.149.110 - ...
0
votes
2answers
2k views

SMTP hacked by spammer using base64 encoding to authenticate [closed]

Over the past day we've detected someone from China using our server to send spam email. It's very likely that he's using a weak username/password to access our SMTP server, but the problem is that he ...
1
vote
3answers
332 views

Blocking a distributed, consistent spam attack? Could it be something more serious?

I will do my best to try and explain this as it's strange and confusing to me. I posted a little while ago about a sustained spike in mysql queries on a VPS I had recently setup. It turned out to be a ...
5
votes
4answers
1k views

How do you test a new email filtering system?

What method do you use to test or evaluate potential new email filtering systems before you set it up on your production network? I am particularly interested in methods that are appropriate for ...
3
votes
6answers
5k views

How to check my linux server isn't spamming

I'm worried about dodgy php scripts or other malicious software on my linux server sending out spam. Or maybe I left an open relay What are the ways to check I'm not sending any spam out?
0
votes
2answers
265 views

I found a Ukranian spammer and have the exact query, IP and access time. What next?

Before I turned on comment moderation, these guys would leave comments meant to steal my Google juice (by getting an inbound link). I can still see them visit... the question is what should I do ...
3
votes
5answers
221 views

What Security Suite to choose?

What security suite would you recommend in an environment consisting of roughly 120 PC's and some 30 servers? Environment is MS only, so Exchange and ISA must also be supported.
6
votes
13answers
5k views

Relatively easy way to block all traffic from a specific country?

I know this sounds terrible, but I have a web app that has no users in the Philippines, but is constantly bombarded by spammers, carders testing cards, and other BS from there. I can see in the logs ...
2
votes
4answers
264 views

What is the best way to deal with spam or virus infected hosts in wireless network with personal laptops?

What is the best way to deal with spam or virus infected hosts in wireless network with personal laptops (like personal students laptops in university)? What polices and tools use your company?
4
votes
3answers
410 views

How to detect form spamming on your web servers?

If you run hundred of web sites on your servers, what it is the most efficient, automated way to detect if bots are using your HTML forms to send spam email, even if your forms have some kind of ...