Being ddos-ed or my VPS has been compromised?

0

  • VPS bandwidth was suspended due to over usage.
  • Didn't really promote my website at all cus it is still under development.

  • Installed IFTOP and below is what I have captured.

    https://i.stack.imgur.com/mcetw.png

Any advice is greatly appreciated cus I am at a lost now.

Brandon

Posted 2018-03-24T13:51:09.713

Reputation: 1

1You have high TX, if you were being attacked, your statistics would be flipped and RX would be high. Another possibility is you miscalculated how much you have transferred from the server – Ramhound – 2018-03-24T14:49:50.733

Answers

2

While you can't gain a lot of information from the output of iftop, that server is connecting to a number of mail servers.

If you're not expecting to be sending emails, then the server is compromised and should be shut down.

djsmiley2k TMW

Posted 2018-03-24T13:51:09.713

Reputation: 5 937

Asked: 2018-03-24T13:51:09.713

Viewed: 49 times

Active: 2018-03-24T13:59:05.523