My server (Ubuntu + LAMP) is infected, as I receive security alerts from the sites attacked from my IP.
your Server/Customer with the IP: ********** has attacked one of our servers/partners. The attackers used the method/service: bruteforcelogin on: *Sat, ** *** 2015 17:15:17 +0200*. The time listed is from the server-time of the Blocklist-user who submitted the report. The attack was reported to the Blocklist.de-System on: *Sat, ** **** 2015 21:27:10 +0200*
Is there a tool or method to detect if I do an attack and to block outgoing connections to it ? Or receive at least an alert ?