By alexdicianu
Hi,
I was looking over this morning’s disk and network monitoring graphs and I saw an unusual amount of inbound network IO and disk write activity. Since I haven’t uploaded anything (or even touched the droplet today) I was wondering what that might be.
Do you have any idea? Should I be worried about suspicious or malicious software or any kind of hacker attack?
I was looking in /var/log/syslog, but I haven’t seen anything suspicious. Any ideas as to where should I look for clues of what might have happened?
Here is a screenshot: http://screencast.com/t/BEmvMABzVP2
Thanks.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Is it an Ubuntu server? If so, what are the contents of “/etc/apt/apt.conf.d/10periodic” ? By default on a 12.04 server, they’ll be: <br> <br> APT::Periodic::Update-Package-Lists “1”; <br> APT::Periodic::Download-Upgradeable-Packages “0”; <br> APT::Periodic::AutocleanInterval “0”; <br> <br>This will run “apt-get update” automatically every day. This just updates the packages list; it doesn’t upgrade any packages. Set it to 0 to disable it.
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.