Rootkit scanner

[seavashr]

Hello

Which rootkit scanner(s) do your recommend for VPS/Dedicated on JPC?

I was thinking of installing one of them (or maybe two) but dont know which one is most updated.

Also any suggestion for scanning server to find any trace of penetration activities? (beside keep everything updated, of course)


Regards

[JPC-Anoop]

Hi,

I would suggest you to try rkhunter.

You can check the processes running in the server, using 'ps aux'. Commands like 'history', 'last', 'netstat -lapn' can provide you more details. Install any firewall like (apf + bfd or csf + lfd)and open required ports only. You can change default SSH port and disable direct root access to secure the server.

If you need any assistance on this, please feel free to open a ticket.