httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marian D Marinov <hack...@hydra.azilian.net>
Subject Re: [users@httpd] Newbie questions ...
Date Fri, 11 Feb 2005 00:51:34 GMT

This: [Sun Feb 06 04:10:03 2005] [notice] SIGHUP received.  Attempting to 
restart

Means that you have given apache a SIGHUP by entering kill -HUP apache_pid or 
starting a script which starts this command.

When Apache receive SIGHUP it trys to restart if there is no problem Apache 
Restarts and resume normal operation.
And because you don't see anything odd I'll give you some point of start. 
Using crontab command (as root) you can see what crontab entrys you have
crontab -l username 
gives you the information from the users crontab(list of scheduled things). 
Type this commant with the root,nobody,www-data and apache usernames to see 
if there is someting.
It is most likely that you have been hacked in some way. There is another 
thing that you should do. Go to /tmp and seek for some odd executable 
filenames as f3, r0nin,yes,init and so on... And delete them. Enter 
ps aux|grep apacheusername
to see if there are any process that are runned by the apache user!
then kill them.
If you have phpBB or phpNuke get the lates version of the code.

That's all, what I can help you.

Regards
	M.Marinov


-- 
| Registered Linux User #309995 at http://counter.li.org
| One Planet, One Internet.
| We Are All Connected.
\__________________

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message