Newbie question about Apache logs

I have a Linux dedicated server w/ Rackspace. I Usually average about 200 to 300 MB per day of data transfer, but my online admin panel indicates that I used 4.97 GB on Saturday!!! Then Sunday and today, my traffic dropped back down to normal.

Well, after slightly freaking out, I ran a WebTrends log report on my web logs, but it indicated that I only used about 200 MB Saturday (normal). I contacted Rackspace in the hopes that they could tell me where all this data came from and went to (I was hoping they could tell me what directory on my server most of it came from). They were no help, as they said they only monitor packets at the switch.

Something that seems really odd is out of the 4.97 GB of data, it's about 50/50 upstream and downstream.

All I can think of is that someone was accessing my server in a way that the web logs didn't record. Telnet? FTP? (although my anon ftp is supposed to be disabled)

Does anyone know of where I should look to figure out this mystery? I'm sure that there are logs somewhere on my server for FTP and Telnet, but I don't know where.

 

 

 

 

Top