Thanks to all of you people responding so fast. I now rest assured that the ''attack'' was only a worm affecting IIS. Never the less I will start reading some books on Linux security right away. :) -- Ole Sebastian Stein osstein@stud.ntnu.no