Teşekkür ederim ilginize...
Sunucu şirketi de öyle söyledi... brute force diyerek...
Ama baktım söylediğiniz komutlarla ilgili dosya çıkmadı... bulunamadı...
top komutu ile de baktım çalışanlara... ama inetinfo dosyası çalışmıyor.
7669 mysql 20 0 5953m 1.8g 3736 S 92.4 5.6 63204:39 mysqld
31601 root 20 0 252m 49m 24m R 48.5 0.2 0:02.94 lsphp5
31597 root 20 0 257m 54m 24m S 44.9 0.2 0:04.69 lsphp5
31555 root 20 0 255m 53m 24m R 36.2 0.2 0:37.35 lsphp5
31561 root 20 0 254m 52m 24m S 33.2 0.2 0:22.50 lsphp5
31556 root 20 0 254m 53m 24m R 21.6 0.2 0:22.46 lsphp5
31570 root 20 0 254m 52m 24m S 18.3 0.2 0:11.66 lsphp5
31566 root 20 0 255m 53m 24m S 15.6 0.2 0:13.81 lsphp5
31604 root 20 0 257m 54m 24m S 15.0 0.2 0:02.24 lsphp5
31557 root 20 0 255m 53m 24m S 10.6 0.2 0:28.67 lsphp5
30259 nobody 20 0 138m 30m 15m R 6.6 0.1 1:20.39 litespeed
31602 root 20 0 254m 51m 24m R 6.3 0.2 0:00.91 lsphp5
31605 root 20 0 231m 18m 11m S 2.0 0.1 0:00.06 lsphp5
129 root 39 19 0 0 0 S 0.3 0.0 1412:55 kipmi0
1619 root 20 0 0 0 0 S 0.3 0.0 62:26.21 kondemand/1
1622 root 20 0 0 0 0 S 0.3 0.0 50:08.38 kondemand/4
1624 root 20 0 0 0 0 S 0.3 0.0 73:13.30 kondemand/6
31595 root 20 0 15164 1376 952 R 0.3 0.0 0:00.07 top
1 root 20 0 19352 968 756 S 0.0 0.0 3:03.02 init
2 root 20 0 0 0 0 S 0.0 0.0 0:00.26 kthreadd
3 root RT 0 0 0 0 S 0.0 0.0 4:16.39 migration/0
4 root 20 0 0 0 0 S 0.0 0.0 1:28.25 ksoftirqd/0
5 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/0
6 root RT 0 0 0 0 S 0.0 0.0 0:05.29 watchdog/0
7 root RT 0 0 0 0 S 0.0 0.0 3:34.43 migration/1
8 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/1
9 root 20 0 0 0 0 S 0.0 0.0 1:10.99 ksoftirqd/1
10 root RT 0 0 0 0 S 0.0 0.0 0:03.14 watchdog/1
1623 root 20 0 0 0 0 S 0.3 0.0 36:40.64 kondemand/5
1 root 20 0 19352 968 756 S 0.0 0.0 3:03.02 init
2 root 20 0 0 0 0 S 0.0 0.0 0:00.26 kthreadd
3 root RT 0 0 0 0 S 0.0 0.0 4:16.39 migration/0
4 root 20 0 0 0 0 S 0.0 0.0 1:28.25 ksoftirqd/0
5 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/0
6 root RT 0 0 0 0 S 0.0 0.0 0:05.29 watchdog/0
7 root RT 0 0 0 0 S 0.0 0.0 3:34.44 migration/1
8 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/1
9 root 20 0 0 0 0 S 0.0 0.0 1:10.99 ksoftirqd/1
10 root RT 0 0 0 0 S 0.0 0.0 0:03.14 watchdog/1
11 root RT 0 0 0 0 S 0.0 0.0 2:38.07 migration/2
12 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/2
13 root 20 0 0 0 0 S 0.0 0.0 1:19.22 ksoftirqd/2
14 root RT 0 0 0 0 S 0.0 0.0 0:03.32 watchdog/2
15 root RT 0 0 0 0 S 0.0 0.0 1:05.30 migration/3
16 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/3
17 root 20 0 0 0 0 S 0.0 0.0 1:25.28 ksoftirqd/3
18 root RT 0 0 0 0 S 0.0 0.0 0:03.16 watchdog/3
19 root RT 0 0 0 0 S 0.0 0.0 0:50.49 migration/4
20 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/4
21 root 20 0 0 0 0 S 0.0 0.0 0:46.85 ksoftirqd/4
22 root RT 0 0 0 0 S 0.0 0.0 0:03.40 watchdog/4
23 root RT 0 0 0 0 S 0.0 0.0 0:41.42 migration/5
netstattan açık portlara baktım çıkmadı birşey... http portu ve vkontakte portu iş yapıyor görünüyor...
tcp 0 0 webwebweb:http 95.10.144.160.dynamic:64446 TIME
tcp 0 0 webwebweb:43828 srv117-131.vkontakte.r:http TIME
tcp 0 0 webwebweb:http 78.191.1.30.dynamic.t:10900 TIME
tcp 0 0 webwebweb:http 88.245.114.191.dynami:52106 TIME
tcp 0 0 webwebweb:http 78.166.93.50.dynamic.:44991 TIME
tcp 0
not: Uname komutu çalışmadı... uname=Linux yazdı.
---------------------------------------------------
letreset teşekkürler... değiştireceğim.
hocam
cd /root
mkdir loglar
cd loglar
netstat -n > netstatlog.txt
grep -R / "inetinfo" > greplog.txt
bu komutları uygulayın daha sonra çıkan sonuçları /root/loglar dizini altından download ederek bana atın inceleyelim portlar bana pek normal görünmedi