Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Blog | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Did I get cracked?



Ok, while playing in my apache access logs looking at default.ida requests I 
found a different, very weird anomaly.  Every Sunday morning at 4:02am (going 
back at least 3 weeks), my Apache would catch a SIGTERM, then tell me that 
PHP3.0.18 and mod_perl reinstantiated themselves properly.  When I checked 
/var/log/messages I see that at this same time, my syslogd is resetting itself.

What the hell is that?  I've never deliberately done anything with perl or PHP 
in relation to Apache (I'm a Java geek).  Is this nothing?  Is my syslogd 
scheduled to reboot itself weekly anyway, and somehow that is causing Apache 
to reboot as well?  Or am I owned?

The weird thing would be that last Sunday my machine wasn't even on the net, 
having just moved into a new house.  So I find it hard to believe that 
somebody got me that fast.  Prior to last sunday I had a whole different ISP.

Duane


-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).




BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org