Originally Posted by TenTenths
What logs did you check? Is thge 900Gb inbound or outbound traffic? Have you contacted your provider, they may have information on the source/destination addresses of the traffic.
Yes, I inform to provider but they didn't support. I had checked all ftp and http and ssh logs, But nothing found. Please suggest me.