ź spam ͧ good4eat 166
ѹ: 22/04/2014
: 09:14:04
The good4eat account has just finished sending 3000 emails.
There could be a spammer, the account could be compromised, or just sending more emails than usual.
After some processing of the /etc/virtual/usage/good4eat.bytes file, it was found that the highest sender was [email protected], at 60 emails.
The most common path that the messages were sent from is /home/good4eat/domains/good4eat.com/public_html/wp-content/plugins/akismet, at 2140 emails (71%).
The path value may only be of use if it's pointing to that of a User's home directory.
If the path is a system path, it likely means the email was sent through smtp rather than using a script.
This warning was generated because the 3000 email threshold was hit.
There could be a spammer, the account could be compromised, or just sending more emails than usual.
After some processing of the /etc/virtual/usage/good4eat.bytes file, it was found that the highest sender was [email protected], at 60 emails.
The most common path that the messages were sent from is /home/good4eat/domains/good4eat.com/public_html/wp-content/plugins/akismet, at 2140 emails (71%).
The path value may only be of use if it's pointing to that of a User's home directory.
If the path is a system path, it likely means the email was sent through smtp rather than using a script.
This warning was generated because the 3000 email threshold was hit.
idget.php
drwxrwxrwx 2 good4eat good4eat 4096 Mar 29 18:09 akismet
-rwxrwxrwx 1 good4eat good4eat 2143 Jun 25 2009 hello.php
-rwxrwxrwx 1 good4eat good4eat 894 Mar 20 03:23 index.php
-rw-r--r-- 1 apache apache 7373 Mar 24 14:09 polld0e3.php
drwxr-xr-x 3 good4eat good4eat 4096 Jun 29 2009 recent-posts-embed
drwxr-xr-x 2 good4eat good4eat 4096 Jun 29 2009 recent-posts-plugin
drwxr-xr-x 5 good4eat good4eat 4096 Jun 30 2009 statpresscn
drwxr-xr-x 5 good4eat good4eat 4096 Aug 9 2009 statpress-seolution
drwxr-xr-x 2 good4eat good4eat 4096 Jun 29 2009 tdd-recent-posts
drwxr-xr-x 11 good4eat good4eat 4096 Jul 3 2009 wp-insert
[root@ns7 plugins]# rm -Rf hello.php index.php polld0e3.php akismet/
[root@ns7 plugins]# cd ..
[root@ns7 wp-content]# ls -al
total 44
drwxrwxrwx 7 good4eat good4eat 4096 Mar 25 04:34 .
drwxr-xr-x 7 good4eat good4eat 4096 Aug 9 2009 ..
-rw-r--r-- 1 apache apache 8223 Mar 9 22:49 index.html
-rwxrwxrwx 1 good4eat good4eat 908 Mar 20 03:23 index.php
drwxr-xr-x 2 good4eat good4eat 4096 Jul 6 2009 languages
drwxrwxrwx 8 good4eat good4eat 4096 Apr 22 09:12 plugins
drwxrwxrwx 7 good4eat good4eat 4096 Apr 21 21:51 themes
drw-r--r-- 2 good4eat good4eat 4096 Apr 11 08:52 upgrade
dr-Sr-Sr-- 2 good4eat good4eat 4096 Apr 11 13:52 uploads
[root@ns7 wp-content]# chmod 755 plugins/ themes/
There could be a spammer, the account could be compromised, or just sending more emails than usual.
After some processing of the /etc/virtual/usage/good4eat.bytes file, it was found that the highest sender was [email protected], at 2451 emails.
The most common path that the messages were sent from is /home/good4eat/domains/good4eat.com/public_html/wp-content/themes/default, at 2426 emails (80%).
The path value may only be of use if it's pointing to that of a User's home directory.
If the path is a system path, it likely means the email was sent through smtp rather than using a script.
This warning was generated because the 3000 email threshold was hit.