0
I have found this process:
/root/b26
Here is a top:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
20810 root 20 0 339m 808 360 S 100 0.0 27:39.95 b26
I have seen it use 100% CPU, and the name of the process isn't very descriptive so it looks like it might be a bad process.
I searched Google and I don't get much information on this process. But I did see that there was someone who said this process was doing DDoS
attacks. My Host has also reported to me that my server was sending outbound DDoS attacks. Could this be the process that is doing it?
Would this be the same for me? Should I remove it? If so how can I remove it?
If your server IS sending outbound attacks, take it offline first! Please? – K.A.Monica – 2014-01-02T01:36:16.623
I have been told to do this:
iptables -A OUTPUT -p tcp --syn -m limit --limit 1/s --limit-burst 3 -j DROP
while this is happening so I have that. I was told it will stop the server from sending attacks until I figure it out, then I can drop it. – Get Off My Lawn – 2014-01-02T01:40:18.250