Replying to my own post here...
For any other people that see this behaviour, be careful.
I got a abuse report from our ISP, a sign that the box was
rooted and was being used for malicious attacks.
-e-
>Hi all
>
> I've got a Mandrake 7.2 server running a few services for the
>company I work for. Most importantly: FTP (configured for anonymous
>uploads), and http.
>
> A few days ago something happened...
>
> Anonymous FTP connections are refused, all SSH connections
>are refused, and weird things are happening with "top" and "ps".
>
> I saw some security warnings that had symptoms similar to this...
>
> Am I in trouble? Is there anything I can do to correct this problem?
>
> Please help!
>
> tia
>
> -ed-
