My cpanel install shows bandwidth usage at around 250MB.
Bandmin and Orbit monitoring shows 10GB (way more than normal for this server).
Strange thing is my ns2.nameserver IP address is showing about half the traffic in bandmin (5GB). It normally shows almost nothing. Seems to start around 2AM (500MB per hour) and end around 6AM. Everything is normal until 1-2AM.
Any ideas on where to start? Looked through every log and found nothing odd.
I would look around for some malicious files in your temporary folders.
Steven Ciaburri | Industry's Best Server Management- Rack911.com
Software Auditing - 400+ Vulnerabilities Found - Quote @ https://www.RACK911Labs.com Fully Managed Dedicated Servers (Las Vegas, New York City, & Amsterdam) (AS62710)
FreeBSD & Linux Server Management, Security Auditing, Server Optimization, PCI Compliance