Server Expert Required - Server Hacked / Sending Spam
$30-250 USD
Closed
Posted over 12 years ago
$30-250 USD
Paid on delivery
Last week our server was found to be sending tens of thousands of spam messages.
Although currently the server is no longer sending spam messages we believe that the server may have been compromised at root level.
There are some unsual proccesses that possibly confirm that root has been compomised:
root 1560 0.0 0.0 4676 2956 ? S 05:10 0:00 perl
root 5674 0.0 0.0 5732 2504 ? S 15:11 0:00 wget -q -O - --no-check-certificate [login to view URL]
We have tried to find the source of these, however without luck.
Before we take the drastic action to terminate & rebuild the server, we wanted to try and find someone who has experience with this type of security breach to see if anyone can locate the exploit and secure the server
PLEASE ONLY BID IF YOU HAVE VAST EXPERIENCE IN SERVER SECURITY / VUNRABILITY & BELIEVE YOU CAN LOCATE THER ISSUE & SECURE THE SERVER.
Server OS: CentOS
Control Panel: WHM / Cpanel
Hi,
I understood your requirement. i am ready to start. you will get daily udate on progress and all communication will be through skype,email, and freelancer.com
Thanks
Hi. I have worked in ISP companies for many years. I have expirience with setup and administrating public mass hosting servers that run clients scripts. I think that I can help you to find and close security breach and make server more secure to prevent such events.
Hello,
I can easily handle this problem. Server is most likely not root compromised. This is a standard IRC Bot that runs on the server. There is most likely a script that is stashed in a website somewhere that will reupload if the files are deleted and start running the bot again if it is found and deleted.