Richard G
Verified User
Anybody seen this sometime?
I got this mail from my firewall CSF/LFD:
This was only one time. A few days later I want looking for something else, and find a flood of this in the apache error_log:
There is no time with it, no script which is using it, no domain name where it's coming from and no timestamp, you only see what I just posted. So I dont know what is causing this error notice and I want to get rid of it.
I tried searching in /var/log/messages, in httpd access_log, and in the users httpd logs with the commandline mentioned in the firewall message and also searched for system() and exec in those logs. Nothing. Cron log, nothing.
Looking for "host" is not doable, because every file points to localhost, the hostname or domain name of the server, wich also has "host" in it. Then almost every file in the users directory has something like ihost =, dbhost =, host = or localhost in them, so too many results.
I presume it's caused by something in the users account from which I have the firewall notice, but he has 20 domains in there with wordpress and prestashop installations in them.
Is there no way to extend the logging of apache, so we get a bit more info then only the result log of a badly used host command?
Or any other way to find where exactly it's coming from? Because I'm out of idea's.
I got this mail from my firewall CSF/LFD:
This was only one time. A few days later I want looking for something else, and find a flood of this in the apache error_log:
There is no time with it, no script which is using it, no domain name where it's coming from and no timestamp, you only see what I just posted. So I dont know what is causing this error notice and I want to get rid of it.
I tried searching in /var/log/messages, in httpd access_log, and in the users httpd logs with the commandline mentioned in the firewall message and also searched for system() and exec in those logs. Nothing. Cron log, nothing.
Looking for "host" is not doable, because every file points to localhost, the hostname or domain name of the server, wich also has "host" in it. Then almost every file in the users directory has something like ihost =, dbhost =, host = or localhost in them, so too many results.
I presume it's caused by something in the users account from which I have the firewall notice, but he has 20 domains in there with wordpress and prestashop installations in them.
Is there no way to extend the logging of apache, so we get a bit more info then only the result log of a badly used host command?
Or any other way to find where exactly it's coming from? Because I'm out of idea's.
