Today I check out my webroot on my reseller account and found a bot on my space: but.tgz, installed in directory .m
Its an IIRC bot. Uploaded on 13.5.2006 ..... But I have apply all fixes and we dont left an activ backdoor on the server. Any ideas where it comes from ? Now we investigate all logfiles (take a while) to see what happen. I will report if we found any new details. Be carefull, watch your server !