This evening I've found disturbing logs in apache errors.log:
"[Fri Dec 24 16:43:30 2004] [error] [client 127.0.0.1] File does not exist: /var/www/~voidrs/~verty/proxychecker.txt"
{3 of them, difference several hours}
Access.log shows:
127.0.0.1 - - [24/Dec/2004:16:43:30 +0200] "GET /~voidrs/~verty/proxychecker.txt HTTP/1.0" 404 225 "-" "-"
Looks like requests done from box itself, yet I have no idea what have issued them (no users in box).
I've done some md5sum check, chkrootkit but haven't found anything wrong.
Tiger is running at the moment.
Greped /bin /usr /etc for "voidrs" and "proxycheck", but haven't found anything.
Any ideas?
Debian sarge, 2.6 kernel, apache/exim/spamassassin/courier/mysql...
"[Fri Dec 24 16:43:30 2004] [error] [client 127.0.0.1] File does not exist: /var/www/~voidrs/~verty/proxychecker.txt"
{3 of them, difference several hours}
Access.log shows:
127.0.0.1 - - [24/Dec/2004:16:43:30 +0200] "GET /~voidrs/~verty/proxychecker.txt HTTP/1.0" 404 225 "-" "-"
Looks like requests done from box itself, yet I have no idea what have issued them (no users in box).
I've done some md5sum check, chkrootkit but haven't found anything wrong.
Tiger is running at the moment.
Greped /bin /usr /etc for "voidrs" and "proxycheck", but haven't found anything.
Any ideas?
Debian sarge, 2.6 kernel, apache/exim/spamassassin/courier/mysql...
Facebook
Twitter