Question about a (spam-)bot that creates subdirectories in /tmp

From: Sigmar Wiesmayr (sigmar_at_sigmar.at)
Date: 07/25/04

  • Next message: Roeland Th. Jansen: "Re: GPL question, can open source code can be used to prop. platform?"
    Date: 25 Jul 2004 14:14:17 -0700
    
    

    Hello out there!

    Does anybody known something about a bot or
    something similar?

    I've found a directory /tmp/,../ with the following content:
    total 51
    drwxr-xr-x 2 www-data www-data 1024 Jul 25 22:32 .
    drwxrwxrwt 7 root root 5120 Jul 25 22:50 ..
    -rw-r--r-- 1 www-data www-data 38166 Jul 16 21:43 error.php?tipo=404
    -rw-r--r-- 1 www-data www-data 2319 May 17 03:03 go.php
    -rw-r--r-- 1 www-data www-data 62 Jul 16 21:44 ok.txt
    -rw-r--r-- 1 www-data www-data 44 Jun 19 04:42 teste.txt
    -rw-r--r-- 1 www-data www-data 801 Jun 30 01:50 tiranosarro.html

    This always can be found when the machine started to send masses
    of emails.

    Anybody there, who knows where it comes in?

    TIA,
    Sigmar


  • Next message: Roeland Th. Jansen: "Re: GPL question, can open source code can be used to prop. platform?"