I'm using SSH to run a Red Hat Fedora Core 6 (GoDaddy) virtual server. Plesk is my control panel when I use GUI. I have a domain that has it's bandwidth going thru the roof (1.5 gig so far this month) and I suspect a resident spoofer but can't find anything. GoDaddy is of no help.

I've checked logs but can't find anything except lots of spammers attempting to hack in. But I don't know what to check for - or what to look for.

I have 5 other domains that average about 300 MB in traffic/bandwidth per month vs. this one at 1.5 gig. It just keeps increasing.

Suggestions? Help!