Anne Wilson wrote: > On Wednesday 03 June 2009 06:09:37 John R. Dennison wrote: > > He's running an apache instance on cent5. He has processes he > > can not readily identify running under apache named "atack"; > > where does "windows" come into the equation? > > Several of the links returned by google have the following info: > > IIS WebDAV Exploit, I think one of the agobot worms tries to use it to get > into Windows boxes. AGAIN: He has processes running as the apache user on his Linux box which he cannot identify. What makes you think that this is an attack on a WINDOWS system? Ralph -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20090603/cac42255/attachment-0005.sig>