https://www.icyphoenix.com/viewtopic.php?f=35&t=497
-----------------------------------
Paul_RS1
Wed 18 Oct, 2006 03:33

Security Issues!!
-----------------------------------
What the heck is this?? Is someone hacking my server??
From my error logs:

[quote]  9 11764    9  1160    0     0   2999      0  0:00:03 --:--:--  0:00:03  2999
100 11764  100 11764    0     0  18221      0 --:--:-- --:--:-- --:--:-- 41100
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:33:05--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   43.97 KB/s

15:33:06 (43.97 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0    217      0  0:00:54  0:00:05  0:00:49   217
 83 11764   83  9848    0     0   1761      0  0:00:06  0:00:05  0:00:01 33674
100 11764  100 11764    0     0   2103      0  0:00:05  0:00:05 --:--:-- 40784
[Mon Oct 16 15:33:18 2006] [notice] child pid 9386 exit signal Segmentation fault (11)
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:33:18--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   44.13 KB/s

15:33:24 (44.13 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0   3181      0  0:00:03 --:--:--  0:00:03  3181
 83 11764   83  9848    0     0  15795      0 --:--:-- --:--:-- --:--:-- 33544
100 11764  100 11764    0     0  18818      0 --:--:-- --:--:-- --:--:-- 40628
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:35:03--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   44.22 KB/s

15:35:03 (44.22 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0   3606      0  0:00:03 --:--:--  0:00:03  3606
100 11764  100 11764    0     0  20209      0 --:--:-- --:--:-- --:--:-- 40784
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:35:11--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   43.88 KB/s

15:35:11 (43.88 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0   3286      0  0:00:03 --:--:--  0:00:03  3286
 83 11764   83  9848    0     0  16126      0 --:--:-- --:--:-- --:--:-- 33674
100 11764  100 11764    0     0  19205      0 --:--:-- --:--:-- --:--:-- 40784
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
[Mon Oct 16 15:37:35 2006] [notice] child pid 9362 exit signal Segmentation fault (11)
--15:38:30--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... [Mon Oct 16 15:38:32 2006] [notice] child pid 8849 exit signal Segmentation fault (11)
213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   43.10 KB/s

15:38:35 (43.10 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
[Mon Oct 16 15:38:41 2006] [notice] child pid 8709 exit signal Segmentation fault (11)
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

 22 11764   22  2608    0     0   6732      0  0:00:01 --:--:--  0:00:01  6732
100 11764  100 11764    0     0  18249      0 --:--:-- --:--:-- --:--:-- 35626
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:38:44--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   44.24 KB/s

15:38:50 (44.24 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

 22 11764   22  2608    0     0   6317      0  0:00:01 --:--:--  0:00:01  6317
100 11764  100 11764    0     0  17556      0 --:--:-- --:--:-- --:--:-- 35626
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:41:44--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   43.90 KB/s

15:41:45 (43.90 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0    215      0  0:00:54  0:00:05  0:00:49   215
100 11764  100 11764    0     0   2082      0  0:00:05  0:00:05 --:--:-- 41100
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:41:53--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   44.22 KB/s

15:41:54 (44.22 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0    216      0  0:00:54  0:00:05  0:00:49   216
100 11764  100 11764    0     0   2094      0  0:00:05  0:00:05 --:--:-- 40942
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:44:51--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   43.86 KB/s

15:44:52 (43.86 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0   3008      0  0:00:03 --:--:--  0:00:03  3008
100 11764  100 11764    0     0  18207      0 --:--:-- --:--:-- --:--:-- 40784
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:44:54--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   43.85 KB/s

15:44:55 (43.85 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0   3098      0  0:00:03 --:--:--  0:00:03  3098
 83 11764   83  9848    0     0  15592      0 --:--:-- --:--:-- --:--:-- 33674
100 11764  100 11764    0     0  18579      0 --:--:-- --:--:-- --:--:-- 40942
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:50:39--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   44.29 KB/s

15:50:40 (44.29 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0   2539      0  0:00:04 --:--:--  0:00:04  2539
100 11764  100 11764    0     0  16353      0 --:--:-- --:--:-- --:--:-- 40473
sh: links: command not found
sh: /usr/sbin/perl: No such file or directory
--15:50:42--  http://anticaro.com/scanku.txt
           => `scanku.txt'
Resolving anticaro.com... 213.203.204.155
Connecting to anticaro.com|213.203.204.155|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11,764 (11K) [text/plain]

    0K .......... .                                          100%   43.41 KB/s

15:50:43 (43.41 KB/s) - `scanku.txt' saved [11764/11764]

sh: fetch: command not found
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  9 11764    9  1160    0     0   3036      0  0:00:03 --:--:--  0:00:03  3036
100 11764  100 11764    0     0  18286      0 --:--:-- --:--:-- --:--:-- 40628
sh: links: command not found[/quote]


I checked the logs after my site slowed down to a crawl..


-----------------------------------
difus
Wed 18 Oct, 2006 07:19

Re: Security Issues!!
-----------------------------------
it sounds to yes
search  -  scanku.txt


-----------------------------------
Mighty Gorgon
Tue 24 Oct, 2006 23:30

Re: Security Issues!!
-----------------------------------
Try to look into your folders if you see some files that shouldn't be there. :roll:


