auf einem Apache2-Server (Debian/Stretch), der seit 78 Tagen läuft, wurde am 17.7. um 5:20 Uhr der Apache-Service gestoppt.
Code: Alles auswählen
[Tue Jul 16 06:46:15.980910 2019] [:error] [pid 12424] [client 118.24.230.15:26123] script '/srv/www/html/shell.php' not found or unable to stat
[Tue Jul 16 06:46:18.670365 2019] [:error] [pid 12424] [client 118.24.230.15:26123] script '/srv/www/html/12.php' not found or unable to stat
[Tue Jul 16 06:46:19.528355 2019] [:error] [pid 12424] [client 118.24.230.15:26123] script '/srv/www/html/ecmsmod.php' not found or unable to stat
[Tue Jul 16 06:46:20.004602 2019] [:error] [pid 12424] [client 118.24.230.15:26123] script '/srv/www/html/index.php' not found or unable to stat
[Tue Jul 16 06:46:28.099051 2019] [:error] [pid 12424] [client 118.24.230.15:26123] script '/srv/www/html/user.php' not found or unable to stat, referer: 554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:"id";s:3:"'/*";s:3:"num";s:141:"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--";s:4:"name";s:3:"ads";}554fcae493e564ee0dc75bdf2ebf94ca
[Tue Jul 16 06:46:29.095549 2019] [:error] [pid 12424] [client 118.24.230.15:26123] script '/srv/www/html/search.php' not found or unable to stat
[Tue Jul 16 06:46:29.478622 2019] [:error] [pid 12424] [client 118.24.230.15:26123] script '/srv/www/html/index.php' not found or unable to stat
[Wed Jul 17 05:20:41.063133 2019] [mpm_prefork:notice] [pid 15749] AH00169: caught SIGTERM, shutting down
[Wed Jul 17 05:20:42.112761 2019] [mpm_prefork:notice] [pid 18008] AH00163: Apache/2.4.25 (Debian) OpenSSL/1.0.2l configured -- resuming normal operations
[Wed Jul 17 05:20:42.112818 2019] [core:notice] [pid 18008] AH00094: Command line: '/usr/sbin/apache2'
[Wed Jul 17 05:20:48.597740 2019] [mpm_prefork:notice] [pid 18008] AH00171: Graceful restart requested, doing restart
[Wed Jul 17 05:20:48.640942 2019] [mpm_prefork:notice] [pid 18008] AH00163: Apache/2.4.25 (Debian) OpenSSL/1.0.2l configured -- resuming normal operations
[Wed Jul 17 05:20:48.640976 2019] [core:notice] [pid 18008] AH00094: Command line: '/usr/sbin/apache2'
[Wed Jul 17 05:20:50.099346 2019] [mpm_prefork:notice] [pid 18008] AH00171: Graceful restart requested, doing restart
[Wed Jul 17 05:20:50.137101 2019] [mpm_prefork:notice] [pid 18008] AH00163: Apache/2.4.25 (Debian) OpenSSL/1.0.2l configured -- resuming normal operations
[Wed Jul 17 05:20:50.137120 2019] [core:notice] [pid 18008] AH00094: Command line: '/usr/sbin/apache2'
[Wed Jul 17 05:20:50.234055 2019] [mpm_prefork:notice] [pid 18008] AH00169: caught SIGTERM, shutting down
Grüße und vielen Dank
BrotherJ