> Doing a netstat on my server, I find a strange connection. > > It's a crond-job with Apache as owner, and it seems to go to an > irc-server, called 193.110.95.1:ircd, "carouge.ch.eu.undernet.org", anyone > that knows what this is?? if you are running awstats or have phpBBs look at /var/tmp /tmp .. you might see some interesting things as .httpd, .marimoon etc.. > --