Where to look for malicious code on Ubuntu server 14?

Question

Malware

There is vds ubuntu server 14. The hoster sent an email with the following content:
The following table of IP addresses, dates and times should help you correlate the origin of the abusive activity. The time stamps are approximate from our logs. The actual timing of the events depends on the signature matched. It is very likely to have occurred both before, during and following the times listed.
Approximate Time Range (UTC), IP Address, Reason
2017-01-21 07:27 ~ 2017-01-21 07:57 (UTC), 92.53.*.*, Account Takeover Attempts
It is most likely the attack traffic is directed at one of the following endpoints:
account.sonyentertainmentnetwork.com
auth.np.ac.playstation.net
auth.api.sonyentertainmentnetwork.com
auth.api.np.ac.playstation.net
These endpoints on our network are resolved by Geo DNS, so the IP addresses they resolve to will depend on the originating IP address.
The destination port will be TCP 443.
How to find the code that ddoes someone and get rid of the problem?

Answer 1

Install Avast