On 7/19/05, Tomas Larsson <ktl@xxxxxxxxxx> wrote: > Doing a netstat on my server, I find a strange connection. > > It's a crond-job with Apache as owner, and it seems to go to an > irc-server, called 193.110.95.1:ircd, "carouge.ch.eu.undernet.org", anyone > that knows what this is?? You've almost certainly been hacked due to some flaw in a program you are using with apache. A likely culprit is phpbb. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|