Problem on a Server and hacks - DataCha0s 2.0

[SeLLeRoNe]

Hello,

this is not a directadmin problem but, prolly, a problem form one of my customer that i dunno how to solve.

Today i received a notify from brasil that my server is attacking websites using scannners, php inclusion and cgi.

I would like to know if someone should help me to find out this problem and if i can post the report i received here or is better in PM.

Hope someone will help me, if payment needed for solve the problem, is not a problem.

THanks

 

[SeLLeRoNe]

i wanna thank user massive for his help.

Regards

 

[nobaloney]

The entire Internet is happy to see you got such prompt help .

When you sell IRC and shell accounts these things tend to happen from time to time; that's why ISPs stopped offering shell accounts many years ago.

Jeff

 

[SeLLeRoNe]

Yep i know but ive no ircd on that servers from a long time, the only irc server i got is for my use and have no traffic in it ^^

was phpbb hack on most of account, and, joomla hacks too.

 

[nobaloney]

I was just going by the domain names in your siglines .

Were all versions up-to-date? If not, then the rest of us need to worry as well.

Jeff

 

[SeLLeRoNe]

hehe no problem yep all version up-2-date, at least, mine domain, maybe (prolly) some suer dont use to update their cms..