Hi all, I have detected that my server spend 100GB extra of bandwith that i expect for my web, ftp and mail clients. I usually spend over 20-30GB per month and the last two month I spent 120-130 GB of bandwidth. I don't know how is this bandwidth used. I supose that there's anyone hacking my server or stealing bandwidth. Any idea about what can occur? I have been looking in all log files but i didn't detect any strange thing. the only thing that i detected is in the PASSWD.LOG file. Everyday from the day that my bandwidth growed, this file contain the next lines: ">>05/11 12:08:38 Attempting password change server/domain for user TsInternetUser >>05/11 12:08:38 SamChangePasswordUser2 on machine \\ for user TsInternetUser returned 0x0 >>05/12 12:08:38 Attempting password change server/domain for user TsInternetUser >>05/12 12:08:38 SamChangePasswordUser2 on machine \\ for user TsInternetUser returned 0x0 >>05/13 12:08:38 Attempting password change server/domain for user TsInternetUser >>05/13 12:08:38 SamChangePasswordUser2 on machine \\ for user TsInternetUser returned 0x0" I detected that this line is always at 12:08:38. Any idea? Please, it ise very important for me to solve, My ISP's invoices are growing a lot!!! Thanx!

Sorry, the PASSWD.LOG lines are like this: ">>05/13 12:08:38 Attempting password change server/domain "myserver" for user TsInternetUser >>05/13 12:08:38 SamChangePasswordUser2 on machine \\"myserver" for user TsInternetUser returned 0x0"