What to do if there is a security incident on my site ?
If you suspect that there is an incident at your site
DO NOT ignore it. DO NOT Re-boot or Power off the affected host. YOU SHOULD SIMPLY FOLLOW the EGI security incident response procedure. You will find explanation of this procedure at : https://wiki.egi.eu/wiki/EGI_CSIRT:Incident_reporting.