[ILUG] Apache restarted over hols??
John A. Kinsella
John.Kinsella at ul.ie
Wed Jan 2 08:50:19 GMT 2002
Hi.
The last few lines in the relevant /etc/httpd/logs/error_log
read:
[Fri Dec 28 17:14:40 2001] [error] [client 217.162.17.1] File does not
exist: /var/www/htmlTest/scripts/..À¯../winnt/system32/cmd.exe
[Sat Dec 29 16:50:03 2001] [error] [client 204.166.111.29] File does not
exist: /var/www/htmlTest/robots.txt
[Sat Dec 29 18:34:15 2001] [error] [client 216.239.46.134] File does not
exist: /var/www/htmlTest/robots.txt
[Sun Dec 30 04:02:01 2001] [notice] SIGHUP received. Attempting to
restart
Given that I did not log in & restart server at 0402 on Dec 30 (!), is
this evidence of an intrusion? (The server *did* restart at 0402 as
evidenced by the current error_log:
me at work> head error_log
[Sun Dec 30 04:02:02 2001] [notice] Apache/1.3.14 (Unix) (Red-Hat/Linux)
PHP/4.0.1pl2 mod_perl/1.24 configured -- resuming normal operations
All the best & HNY,
John
John A. Kinsella Ph: +353-61-202148 (Direct)
+353-61-333644 x 2148 (Switch)
Mathematics Dept. e-mail: John.Kinsella at ul.ie
University of Limerick FAX: +353-61-334927
IRELAND Web: http://jkcray.maths.ul.ie
More information about the ILUG
mailing list