> 1) There are accumulations of processes in http. I had killed all the
> processes on 17th January and to day I find that there are 21 httpd
> processes running and some of them have started working since 18th January
> (as reported by "ps -ef")!
> 2) The "top" command reports that most of the time the http
> process is
> consuming over 90% of CPU time!

List of installed plugins.
Is server side sorting enabled?

> Another observation, don't know if it helps. The httpd log shows that the
> following files are not present
> Default.ida

IIS exploit. Worm didn't bother to check server's version before attacking.

> _vti_bin
> _vti_inf.html

FrontPage trying to use FP extensions or some FP extensions exploit. If I
remember correctly, there are exploits for Win32 version of FPEX.

> favicon.ico

You have been bookmarked or some browser wants to display icon of your site.

-- 
Tomas


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to