I've recently taken over a Centos server with plesk installed that had been hacked.
All sites error logs are now showing errors:
[Wed May 31 12:37:12 2017] [error] [client 66.249.73.133] Premature end of script headers: index.php
[Wed May 31 12:52:32 2017] [warn] [client 40.77.167.50] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Wed May 31 12:52:32 2017] [error] [client 40.77.167.50] Premature end of script headers: index.php
~
I've never seen anything like this and I've been through multiple stack overflow questions.
I've tried rebooting, restarting httpd, all the basic stuff and even resetting folder premissions of /var/www.
Can anyone help?
Thanks