I am using tripwire program to protect Ubuntu server from intrusions.
Please, if you have any leads about hackers or experience with
programs such as: packet capture, controlling traffic, IDS.
Those who have encountered something similar at work can share
here with my experience.