I installed plesk 8.6 on fedora 8 recently. But when I used rkhunter to check server.
The result show /bin/ls, /bin/netstat, /bin/ps , /bin/find, /usr/bin/md5sum, /usr/bin/pstree, /usr/bin/top
/sbin/ifconfig, /usr/sbin/lsof has been changed, and found SHV4, SHV5 Rootkit.
And when I used netstat to check connection. I can't find port 80. Why? The httpd is start. But can't find 80 port??
And there is unknow traffic everyday.
What happend?
Before I installed plesk I also used rkhunter to check server. And everything is fine.
The result show /bin/ls, /bin/netstat, /bin/ps , /bin/find, /usr/bin/md5sum, /usr/bin/pstree, /usr/bin/top
/sbin/ifconfig, /usr/sbin/lsof has been changed, and found SHV4, SHV5 Rootkit.
And when I used netstat to check connection. I can't find port 80. Why? The httpd is start. But can't find 80 port??
And there is unknow traffic everyday.
What happend?
Before I installed plesk I also used rkhunter to check server. And everything is fine.