 | | | hacked | hacked 2004-06-06 - By linux@(protected)
Back
Hello,
Since yesterday I have a huge network traffic increase
Is goes from a 12Gb to 45Gb a month.
Somebody is messing around.
I did the following:
Only access sshd with one ip-adress
changed password root (it was a #$%EEE123) alike password
reboot
Tasks server, directly connected to internet:
Its a ftp server voor authenticated users
Its a mail server running on IBM Domino 5.012 with is pretty (I think ...)
secure
When i take a look at /var/messages and /var/secure I see nothing strange
I am running kernel 2.4.20-28.7 on i686
Question:
1. How can I see which process is producing the traffic?
2. What else can I do?
__ ____ ____ ____ ____ ____ ____ ____ ____ ____
Valhalla-list mailing list
Valhalla-list@(protected)
https://www.redhat.com/mailman/listinfo/valhalla-list
|
|
|