Outgoing bruteforce attacks

[creemhost]

How can we stop outgoing bruteforce attacks on other servers? How can we check logs to see which domains or hosting accounts are making outgoing bruteforce attacks ?We are receiving notification about outgoing brute-force attacks from datacenter

 

[Ohm J]

which port attack, try disable those outgoing port and turn on "User ID Tracking" in csf firewall, you will see which user trying to spam on the blocking port in "/var/log/message"

 

[zEitEr]

How can we stop outgoing bruteforce attacks on other servers? How can we check logs to see which domains or hosting accounts are making outgoing bruteforce attacks ?We are receiving notification about outgoing brute-force attacks from datacenter

see top, ps aux output for suspicions processes, scan user's homeders for malware
if you have csf/lfd installed, they might alert about suspicious processes too