At 14:24 10/07/2003 +0200, mi wrote: > Last night i was downloading over a slow modem when i did notice something > started apache processes on my box (debian woody 3.0r1). > Apache is started from inetd here, listening on port 80, just for local > document reading (like info2www or dhelp). > > I'm on a standard serial modem ppp dialup, with a NIC occasionally > connected to a little local LAN (but no route to the internet). There is a route when your modem is connected.
> First i thought of some weird interference between running processes. > Then i read 'cmd.exe' in the apache log, and i get worried someone trying > to access my (assumed windows) box. Now i think i really have no clue. There are plenty of trojans in the wild, trying to spread by connecting to other servers. Fortunately, you're not running windows. :) > I wonder if wwwoffle could can cache some strange javescripts ? Is your firewall set to block access to the ports of the proxy? -- Marc
