Re: [EMAIL PROTECTED] Server compromised through Apache 2.2

2008-05-21 Thread Eric Covener
On Wed, May 21, 2008 at 10:00 AM, Netdynamix <[EMAIL PROTECTED]> wrote: > > Hi, > > I believe that my server was compromised through Apache 2.2! There's no sign the compromise was through Apache, only that whoever compromised your system later installed an IRC bot in a path that resembled an Apach

[EMAIL PROTECTED] Server compromised through Apache 2.2

2008-05-21 Thread Netdynamix
Hi, I believe that my server was compromised through Apache 2.2! A few months ago I started having problems with Apache where in it wouldnt accept connections and pages would just not load. Apon investigating, I would find the following Commands Running on my server: apache 30689 0.0 0.1 3748 19