Re: [users@httpd] Strange connection

• To: users@xxxxxxxxxxxxxxxx
• Subject: Re: [users@httpd] Strange connection
• From: "kalin mintchev" <kalin@xxxxxx>
• Date: Wed, 20 Jul 2005 21:09:05 -0400 (EDT)
• Cc: fedora-list@xxxxxxxxxx
• Importance: Normal
• In-reply-to: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAluSn7JHVyUuKseEZdXamkM KAAAAQAAAAs7Tb31oFtUmJqjIf/[email protected]>
• List-archive: <https://www.redhat.com/archives/fedora-list>
• List-help: <mailto:[email protected]?subject=help>
• List-id: For users of Fedora Core releases <fedora-list.redhat.com>
• List-post: <mailto:[email protected]>
• List-subscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=subscribe>
• List-unsubscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=unsubscribe>
• References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAluSn7JHVyUuKseEZdXamkMKAAAAQAAAAs7Tb31oFtUmJqjIf/[email protected]>
• Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• User-agent: SquirrelMail/1.4.3a

> Doing a netstat on my server, I find a strange connection.
>
> It's a crond-job with Apache as owner, and it seems to go to an
> irc-server, called 193.110.95.1:ircd, "carouge.ch.eu.undernet.org",
anyone
> that knows what this is??

  if you are running awstats or have phpBBs look at /var/tmp /tmp ..

  you might see some interesting things as .httpd, .marimoon etc..




>


-- 

• References:
  • Strange connection
    • From: Tomas Larsson

• Prev by Date: Which Nic is in which PCI slot ?
• Next by Date: Re: assigning multiple ip addresses to NIC on bootupm, how?
• Previous by thread: Hacked Server WAS: Strange connection
• Next by thread: RE: Strange connection
• Index(es):
  • Date
  • Thread