View Single Post
Old 9th January 2006, 15:03
till till is online now
Super Moderator
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,001
Thanks: 840
Thanked 5,650 Times in 4,460 Posts


I recommend that when your server is back onlien, you do a scan for rootkits.

I think that an high volume of incoming packets does not mean automatically that your server is highjacked. It depends on the port. If e.g. a high number of packets where send to port 80, its an DOS attack but it does not mean that your apache has been highjacked.
Till Brehm
Get ISPConfig support and the ISPConfig 3 manual from
Reply With Quote