Help! I'm being attacked

Jonathan Hutchins hutchins at opus1.com
Thu Sep 19 14:06:42 CDT 2002


> -----Original Message-----
> From: Brian Densmore [mailto:DensmoreB at ctbsonline.com]

> Something else I meant to include. I see a suEXEC in the log. 
> Any issue here?
> 
> [Sun Sep  8 04:02:01 2002] [notice] SIGHUP received.  Attempting to
> restart
> [Sun Sep  8 04:02:01 2002] [notice] Apache/x.x.xx (Unix) 
> mod_ssl/y.y.yy
> OpenSSL/z.z.z configured -
> - resuming normal operations
> [Sun Sep  8 04:02:01 2002] [notice] suEXEC mechanism enabled (wrapper:
> /usr/local/apache/bin/suexe
> c)

This is a normal erstart, apache starts as root to access the low-number
port then runs suEXEC apache for security.

The reasons for the restart may still be cause for concern though.  I seem
to have missed your original message on why you think you're being attacked.




More information about the Kclug mailing list