Spambot Infection Detection
- by crankshaft
My server has been blocked by CBL for participating in curtwail spambot.
Initially we suspected that it was coming from a PC and not from the server, but the router is blocking all packets on 25 except those coming from the server.
I have just executed the tcpdump command and every 5 minutes I see a flurry of activity on port 25 that is very…