Re: Is this an attack?

On 07.12.2010 13:40, Rodolfo Barbosa wrote:
> Hi,
>
> One of my servers, that's still running the old Debian Etch,
> is been the responsible for de crash of my entire internet
> access.
>
> Every time that my internet access gets down, I see an weird
> process called 'std' or 'S' always running by www-data user
> that consumes all the machine process and network resources.
>
> Is this any know attack? I need to get good arguments to
> convince the users of this server to allow me to get it
> upgraded.
>
> Thank's
> --
> Rodolfo Barbosa
> Lunar Consultoria
> [email protected]
> CEL: +55 (35) 9132-0764
>
>
>
>
hi,

did u run a tool like rkhunter or chkrootkit ?
this will help u find out of modified systemfiles.

any u should update your server.

regards