[CentOS] Centos 5.3 -> Apache - Under Attack ? Oh hell....

Anne Wilson wrote:
> On Wednesday 03 June 2009 06:09:37 John R. Dennison wrote:
> >         He's running an apache instance on cent5.  He has processes he
> >         can not readily identify running under apache named "atack";
> >         where does "windows" come into the equation?  
> 
> Several of the links returned by google have the following info:
> 
> IIS WebDAV Exploit, I think one of the agobot worms tries to use it to get
> into Windows boxes.

AGAIN: He has processes running as the apache user on his Linux box
which he cannot identify. 

What makes you think that this is an attack on a WINDOWS system? 

Ralph
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.centos.org/pipermail/centos/attachments/20090603/cac42255/attachment-0001.sig>