Date: Mon, 27 Feb 2006 16:56:28 -0500 From: Steel City Phantom <scphantm@yahoo.com> To: freebsd-questions@freebsd.org Subject: Apparent Hack attempt filling partition Message-ID: <4403758C.3080401@yahoo.com>
next in thread | raw e-mail | index | archive | help
It seems that on friday i had some kind of hack scanner hit one of my servers. it went thru the website looking for scripts, i believe it was my hosting company that did it with their vulnerability scanner. The problem is that for some reason, the server was kicked into a loop failing on a perl script that eventually filled the /var partition with a 1 gig error log file and brought mysql down for lack of temp space to run some queries. here is the last snip of the log before it started repeating the can't open perl script for 1 gig of file. anyone have any ideas what could have caused that? the server is running PHP Version 4.3.9, Apache 1.3.33 on bsd 4.10 R2P /usr/local/www/data/goldsteins/themes/Showroom/images/FooterBack.jpg [Sun Feb 26 10:25:59 2006] [error] [client 216.153.168.66] File does not exist: /usr/local/www/data/goldsteins/themes/Showroom/images/FooterBack.jpg [Sun Feb 26 10:26:07 2006] [error] [client 216.153.168.66] File does not exist: /usr/local/www/data/goldsteins/themes/Showroom/images/FooterBack.jpg [Sun Feb 26 11:41:06 2006] [error] [client 83.179.151.230] File does not exist: /usr/local/www/data/interiors/index2.php [Sun Feb 26 11:41:14 2006] [error] [client 83.179.151.230] File does not exist: /usr/local/www/data/interiors/mambo/index2.php [Sun Feb 26 11:41:16 2006] [error] [client 83.179.151.230] File does not exist: /usr/local/www/data/interiors/cvs/index2.php [Sun Feb 26 11:41:20 2006] [error] [client 83.179.151.230] File does not exist: /usr/local/www/data/interiors/articles/mambo/index2.php wget: not found mv: ping.txt: No such file or directory wget: not found curl: not found curl: not found Can't open perl script "temp2006": No such file or directory Can't open perl script "temp2006": No such file or directory Can't open perl script "temp2006": No such file or directory Can't open perl script "temp2006": No such file or directory Can't open perl script "temp2006": No such file or directory Can't open perl script "temp2006": No such file or directory Can't open perl script "temp2006": No such file or directory
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4403758C.3080401>