I’ve just been told by my hosting company that my server is creating an “outbound denial of service attack (DOS)”. Hosting company firewall logs show:- 09:52:17.768667 IP [local IP address].55901 > [destination IP address].113: UDP, length 1 09:52:17.768680 IP [local IP address].55901 > [destination IP address].113: UDP, length 1 09:52:17.768683 IP [local IP address].55901 > [destination IP address].113: UDP, length 1 09:52:17.768686 IP [local IP address].55901 > [destination IP address].113: UDP, length 1 09:52:17.768688 IP [local IP address].55901 > [destination IP address].113: UDP, length 1 ….And so on So I now have to trace the script e.t.c that is being used to create this attack. How do I go about investigating the source of the problem? I use a tool called splunk if that helps. Thanks in advance ... View more