Где искать вредоносный код на Ubuntu server 14?

Question

[Дмитрий Чеканов]

Есть vds ubuntu server 14. Хостер прислал письмо со следующим содержанием:

The following table of IP addresses, dates and times should help you correlate the origin of the abusive activity. The time stamps are approximate from our logs. The actual timing of the events depend on the signature matched. It is very likely to have occurred both before, during and following the times listed.

Approximate Time Range (UTC), IP Address, Reason
2017-01-21 07:27 ~ 2017-01-21 07:57 (UTC), 92.53.*.*, Account Takeover Attempts

It is most likely the attack traffic is directed at one of the following endpoints:

account.sonyentertainmentnetwork.com
auth.np.ac.playstation.net
auth.api.sonyentertainmentnetwork.com
auth.api.np.ac.playstation.net

These endpoints on our network are resolved by Geo DNS, so the IP addresses they resolve to will depend on the originating IP address.

The destination port will be TCP 443.

Как найти код который ддосит кого-то и избавиться от проблемы?

Answer 1

[Pan Propan]

Установи Avast

Comments

[Дмитрий Чеканов]

Ubuntu Server

[Сергей]

Дмитрий Чеканов: clamav тогда