Question about a (spam-)bot that creates subdirectories in /tmp

From: Sigmar Wiesmayr (sigmar_at_sigmar.at)
Date: 07/25/04

  • Next message: Roeland Th. Jansen: "Re: GPL question, can open source code can be used to prop. platform?" 
    Date: 25 Jul 2004 14:14:17 -0700

    Hello out there!

    Does anybody known something about a bot or
    something similar?

    I've found a directory /tmp/,../ with the following content:
    total 51
    drwxr-xr-x 2 www-data www-data 1024 Jul 25 22:32 .
    drwxrwxrwt 7 root root 5120 Jul 25 22:50 ..
    -rw-r--r-- 1 www-data www-data 38166 Jul 16 21:43 error.php?tipo=404
    -rw-r--r-- 1 www-data www-data 2319 May 17 03:03 go.php
    -rw-r--r-- 1 www-data www-data 62 Jul 16 21:44 ok.txt
    -rw-r--r-- 1 www-data www-data 44 Jun 19 04:42 teste.txt
    -rw-r--r-- 1 www-data www-data 801 Jun 30 01:50 tiranosarro.html

    This always can be found when the machine started to send masses
    of emails.

    Anybody there, who knows where it comes in?

    TIA,
    Sigmar

  • Next message: Roeland Th. Jansen: "Re: GPL question, can open source code can be used to prop. platform?"

    Relevant Pages

    • Re: Webform used by spammers
      ... I am getting dozen of emails a day that have been send via the ... probably using a bot. ... The code's in the FormMail Perl script. ...
      (alt.html)
    • Re: Webform used by spammers
      ... Paul H wrote in ... I am getting dozen of emails a day that have been send via the ... webform, probably using a bot. ...
      (alt.html)
    • Re: Question about a (spam-)bot that creates subdirectories in /tmp
      ... > Does anybody known something about a bot or ... > This always can be found when the machine started to send masses ... You should keep a backup copy of the hard drive for analysis, ...
      (comp.os.linux.security)
    • Re: Webform used by spammers
      ... I am getting dozen of emails a day that have been send via the ... webform, probably using a bot. ... My hosting company have said this is nothing to do with the FormMail.pl ... is using a bot that automiatically runs the HTML code of my web form. ...
      (alt.html)
    • ExTS News Bot "random" posts!
      ... What gives with these "ExTS New Bot" posts? ... to deal with SPAM in our emails, we now have to be careful with the ...
      (microsoft.public.windowsxp.general)