Re: Is this an attack?
On 07.12.2010 13:40, Rodolfo Barbosa wrote:
> Hi,
>
> One of my servers, that's still running the old Debian Etch,
> is been the responsible for de crash of my entire internet
> access.
>
> Every time that my internet access gets down, I see an weird
> process called 'std' or 'S' always running by www-data user
> that consumes all the machine process and network resources.
>
> Is this any know attack? I need to get good arguments to
> convince the users of this server to allow me to get it
> upgraded.
>
> Thank's
> --
> Rodolfo Barbosa
> Lunar Consultoria
> barbosa.rodolfo@lunarconsultoria.com.br
> CEL: +55 (35) 9132-0764
>
>
>
>
hi,
did u run a tool like rkhunter or chkrootkit ?
this will help u find out of modified systemfiles.
any u should update your server.
regards
Reply to: