|
My server is being attacked. I think it is from apache because I have found commands running with the owner apache.
My httpd is on /usr/sbin and they run on /usr/local/apache/bin/httpd -DSFSL and sh -c curl -o http .... They also run every minutes a crontab from /var/spool/cron and I din´t have anyone there. I am using Centos 5.7 and httpd-2.2.3.53-el5.centos.3 and my system is update. Can someone help me? Thanks in advance Luisa |
|