Welcome to the most active Linux Forum on the web.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 04-13-2015, 11:57 AM   #1
Registered: Jan 2010
Location: Mumbai, India
Distribution: ArchLinux, Fedora 24, Centos 7.0
Posts: 177

Rep: Reputation: 19
suspicious downloads on startup from un-reasonable ip

Hi friends,
just today when I logged in I found un-usual amount of bandwidth being utilized soon after I logged in my pc, aftter running ss command I found some established connections on ip after looking up I found it was an Bangladesh's ip. which I found quite suspecious why should my system download some content from an ip which belongs to Bangladesh I immediately droped traffic from that ip, I don't stay in Bangladesh never remembered of opening any sites belonging to that country, now wondering what should I do next to find out that damage has been done to my system?

please also suggest me what all data should I try to collect for investigation next time I see such activity on my system.

I am using fedora 20(x86_64)

Old 04-13-2015, 07:12 PM   #2
Keith Hedger
Senior Member
Registered: Jun 2010
Location: Wiltshire, UK
Distribution: Linux From Scratch, Slackware64, Partedmagic
Posts: 2,657

Rep: Reputation: 661Reputation: 661Reputation: 661Reputation: 661Reputation: 661Reputation: 661
It appears to be a mirroring site and may wel be quite harmless, was your package manager doing a routine unsupervised update ate time ?
Old 04-14-2015, 12:15 PM   #3
Registered: Jan 2010
Location: Mumbai, India
Distribution: ArchLinux, Fedora 24, Centos 7.0
Posts: 177

Original Poster
Rep: Reputation: 19
@Keith Hedger I tried looking for process associated with yum but I didn't found any in output of ps.



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Is this partitioning scheme reasonable Nick_C Linux - Newbie 6 03-15-2012 06:09 AM
netinst downloads and apt-get downloads stalling then restarting Frustin Debian 2 03-08-2012 03:36 AM
XP Downloads Fast ... Ubuntu Downloads Slow :( Dinerty Ubuntu 2 07-23-2006 03:31 PM
Tell me if this sounds reasonable randyriver10 General 5 09-20-2004 11:30 PM
Downloads/Graphical Startup GUI icarusnetworks Fedora 3 04-16-2004 08:08 AM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:07 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration