hi i have noticed these days following:
on root runnning TSSE v 5.6 decoded, this version here i mean,
are always entries in the file user.log like this one f.e.:
Quote:
|
Feb 20 18:09:00 rootname suhosin[14874]: ALERT - script tried to disable memory_limit by setting it to a negative value -1 bytes which is not allowed (attacker 'ip adress', file '/var/www/rootfolder/include/functions_filelist.php', line 102)
|
Quote:
|
Feb 21 14:16:44 rootname suhosin[6869]: ALERT - script tried to disable memory_limit by setting it to a negative value -503316480 bytes which is not allowed (attacker 'ip adress', file '/var/www/rootfolder/takeedit.php', line 276)
|
The most entrys are like this two ones:
Quote:
|
Feb 21 14:17:18 rootname suhosin[6870]: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'peer_id' (attacker '85.246.81.159', file '/var/www/rootfolder/announce.php')
|
or this
Quote:
|
Feb 21 14:18:30 rootname suhosin[6876]: ALERT - ASCII-NUL chars not allowed within request variables - dropped variable '?info_hash' (attacker '193.107.17.19', file '/var/www/rootfolder/scrape.php')
|
which causes the more and more data is written to the file user.log
may be some1 does know why this happen or can help how to stop it???
by the way this are just 4 examples, there are thousands of new entrys in some hours!!!!!
greetz to all
ecke