[webmin-l] Server Logs Regarding Possible Attack

[MWS <we...@ro...>]

I had a weird situation yesterday where my server seemed to be under attack, or maybe just had a problem.

At first, the ports, 10000 and 20000, would not respond.  Then ssh and http both went down.  Ftp stayed available.

My network center eventually cleared up the issues, but told me it was up to me to figure out what went wrong.

Where do I look?

I looked at the logs under var/webmin/webmin.log, but don't see anything unusual.

Any suggestions?

Thanks,

-Mike