It seems that on friday i had some kind of hack scanner hit one of my
servers. it went thru the website looking for scripts, i believe it was
my hosting company that did it with their vulnerability scanner. The
problem is that for some reason, the server was kicked into a loop
failing on a perl script that eventually filled the /var partition with
a 1 gig error log file and brought mysql down for lack of temp space to
run some queries. here is the last snip of the log before it started
repeating the can't open perl script for 1 gig of file. anyone have any
ideas what could have caused that?
the server is running PHP Version 4.3.9, Apache 1.3.33 on bsd 4.10 R2P
/usr/local/www/data/goldsteins/themes/Showroom/images/FooterBack.jpg
[Sun Feb 26 10:25:59 2006] [error] [client 216.153.168.66] File does not
exist: /usr/local/www/data/goldsteins/themes/Showroom/images/FooterBack.jpg
[Sun Feb 26 10:26:07 2006] [error] [client 216.153.168.66] File does not
exist: /usr/local/www/data/goldsteins/themes/Showroom/images/FooterBack.jpg
[Sun Feb 26 11:41:06 2006] [error] [client 83.179.151.230] File does not
exist: /usr/local/www/data/interiors/index2.php
[Sun Feb 26 11:41:14 2006] [error] [client 83.179.151.230] File does not
exist: /usr/local/www/data/interiors/mambo/index2.php
[Sun Feb 26 11:41:16 2006] [error] [client 83.179.151.230] File does not
exist: /usr/local/www/data/interiors/cvs/index2.php
[Sun Feb 26 11:41:20 2006] [error] [client 83.179.151.230] File does not
exist: /usr/local/www/data/interiors/articles/mambo/index2.php
wget: not found
mv: ping.txt: No such file or directory
wget: not found
curl: not found
curl: not found
Can't open perl script "temp2006": No such file or directory
Can't open perl script "temp2006": No such file or directory
Can't open perl script "temp2006": No such file or directory
Can't open perl script "temp2006": No such file or directory
Can't open perl script "temp2006": No such file or directory
Can't open perl script "temp2006": No such file or directory
Can't open perl script "temp2006": No such file or directory
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
