Thanks for all the suggestions, everyone! I tried Wireshark and it’s been super helpful so far. I noticed some weird traffic patterns, especially with multiple IPs showing up in the logs.
I’m gonna give Nmap a shot next to see if I can dig deeper. Also, thanks for the tip about checking DNS queries—I hadn’t thought of that.
One quick question: if I do find proxychains, what’s the best way to block them? Should I just update my firewall rules, or is there more to it?
Thanks again, you guys are awesome!
I’m gonna give Nmap a shot next to see if I can dig deeper. Also, thanks for the tip about checking DNS queries—I hadn’t thought of that.
One quick question: if I do find proxychains, what’s the best way to block them? Should I just update my firewall rules, or is there more to it?
Thanks again, you guys are awesome!