Reading Error Logs...what does this mean?

  Post new topicReply to topicPrintable Version
<< View previous topic View next topic >>
Share: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
#1   Reading Error Logs...what does this mean?
Dauthus
CZ Addict
 Codezwiz Site Donator
Dauthus has been a member for over 20 year's 20 Year Member
usa.gif illinois.gif
Age: 61
Gender: Male
Website:
Status: Offline
Joined: Mar 17, 2004
0.06 posts per day
Posts: 426
Points: 15,917
   
I was doing my normal routine of looking through the log files on my server and noticed something different in the error_log file. Below is a portion. It looks like someone is using my site to upload files through here. Anyone know for sure what the heck this is all about?



[Thu Aug 12 04:10:05 2004] [notice] Digest: generating secret for digest authentication ...
[Thu Aug 12 04:10:05 2004] [notice] Digest: done
[Thu Aug 12 04:10:05 2004] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Thu Aug 12 04:10:05 2004] [notice] LDAP: SSL support unavailable
[Thu Aug 12 04:10:05 2004] [notice] httpdmon: httpdmon_init
[Thu Aug 12 04:10:05 2004] [notice] bandwidth monitoring enabled (mapping file: /etc/virtualhosting/mappings/apache.domainmap)
[Thu Aug 12 04:10:06 2004] [notice] Apache/2.0.48 (Fedora) configured -- resuming normal operations
--13:56:04-- [ Register or login to view links on this board. ]
=> `cgi'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 302 Found
Location: [ Register or login to view links on this board. ] [following]
--13:56:04-- [ Register or login to view links on this board. ]
=> `cgi'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 200 OK
Length: 17,873 [text/plain]

0K .......... ....... 100% 73.65 KB/s

13:56:08 (73.65 KB/s) - `cgi' saved [17873/17873]

--13:56:08-- [ Register or login to view links on this board. ]
=> `cgi.1'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 302 Found
Location: [ Register or login to view links on this board. ] [following]
--13:56:08-- [ Register or login to view links on this board. ]
=> `cgi.1'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 200 OK
Length: 17,873 [text/plain]

0K .......... ....... 100% 73.34 KB/s

13:56:09 (73.34 KB/s) - `cgi.1' saved [17873/17873]

--13:56:09-- [ Register or login to view links on this board. ]
=> `cgi.2'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 302 Found
Location: [ Register or login to view links on this board. ] [following]
--13:56:09-- [ Register or login to view links on this board. ]
=> `cgi.2'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 200 OK
Length: 17,873 [text/plain]

0K .......... ....... 100% 31.11 KB/s

13:56:10 (31.11 KB/s) - `cgi.2' saved [17873/17873]

--13:56:11-- [ Register or login to view links on this board. ]
=> `cgi.3'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 302 Found
Location: [ Register or login to view links on this board. ] [following]
--13:56:11-- [ Register or login to view links on this board. ]
=> `cgi.3'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 200 OK
Length: 17,873 [text/plain]

0K .......... ....... 100% 32.44 KB/s

13:56:12 (32.44 KB/s) - `cgi.3' saved [17873/17873]

--13:56:13-- [ Register or login to view links on this board. ]
=> `cgi.4'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 302 Found
Location: [ Register or login to view links on this board. ] [following]
--13:56:13-- [ Register or login to view links on this board. ]
=> `cgi.4'
Resolving [ Register or login to view links on this board. ] done.
Connecting to [ Register or login to view links on this board. ] connected.
HTTP request sent, awaiting response... 200 OK
Length: 17,873 [text/plain]

0K .......... ....... 100% 73.65 KB/s

13:56:13 (73.65 KB/s) - `cgi.4' saved [17873/17873]

exclog: signal received 15
piped log program '(null)' failed unexpectedly




_________________
[ Register or login to view links on this board.]
Vivere disce, cogita mori
Back to top Reply with quote
#2   
Telli
Site Admin
Occupation: Self Employed
Age: 46
Gender: Male
Fav. Sports Team: Detroit Red Wings
Website:
Status: Offline
Joined: May 26, 2003
1.03 posts per day
Posts: 8089
Points: 494,430
   
You might want to report that to your host just by looking through the script I found a few strange things:

PsychoPhobia Backdoor is starting... OK, pid = %d
/ /dev/null sh -i /var/tmp HOME=%s Can't fork pty, bye!
/bin/sh




_________________
The path of the righteous man is beset on all sides by the inequities of the selfish and the tyranny of evil men. Blessed is he, who in the name of charity and good will, shepherds the weak through the valley of darkness, for he is truly his brother's keeper and the finder of lost children. And I will strike down upon thee with great vengeance and furious anger those who would attempt to poison and destroy my brothers. And you will know my name is the Lord when I lay my vengeance upon thee. Ezekiel 25:17
Back to top Reply with quote
#3   re: Reading Error Logs...what does this mean?
Dauthus
CZ Addict
 Codezwiz Site Donator
Dauthus has been a member for over 20 year's 20 Year Member
usa.gif illinois.gif
Age: 61
Gender: Male
Website:
Status: Offline
Joined: Mar 17, 2004
0.06 posts per day
Posts: 426
Points: 15,917
   
Thanks Telli. I got em working on it now. Since its a dedicated server, looks like I will be doing a reinstall.

Oh well.....time for the long put off upgrades.




_________________
[ Register or login to view links on this board.]
Vivere disce, cogita mori
Back to top Reply with quote
Display posts from previous:      
Add To: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
<< View previous topic View next topic >>
Post new topicReply to topic

Jump to 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum