Re: [cobalt-users] Am I being hacked..????, HELP..

["roland" <roland@xxxxxxxxxxxxxxxxxxxxxxxxxxx>]

> Hi There,
> 
> My Raq3 was down on saturday and, I was thinking about
> a 'periodic network problem' that would be the
> problem. But, I just noticed on /var/log/httpd/error
> file that
> sistem crash was 'caused by' a 'ssl related' stuff..
> Here is tha error log file
> 
> [Sat Sep 21 03:55:15 2002] [error] [client a.c.b.d]
> File does not exist:
> /home/sites/site11/web/tescil/transparent.gif
> [Sat Sep 21 04:11:02 2002] [notice] SIGUSR1 received. 
> Doing graceful restart
> Site site2 has invalid certificate: 4999
> ssl_cant_files_missing
> [Sat Sep 21 04:11:16 2002] [notice] Apache/1.3.6
> (Unix) PHP/4.0.4pl1 mod_perl/1.21 mod_ssl/2.2.8
> OpenSSL/0.9.2b configured -- resuming normal
> operations
> [Sat Sep 21 04:16:51 2002] [error] [client f.g.h.j]
> File does not exist: /home/sites/site54/web/robots.txt
> Site site2 has invalid certificate: 4999
> ssl_cant_files_missing
> [Sun Sep 22 13:34:11 2002] [notice] Apache/1.3.6
> (Unix) PHP/4.0.4pl1 mod_perl/1.21 mod_ssl/2.2.8
> OpenSSL/0.9.2b configured -- resuming normal
> operations
> [Sun Sep 22 13:42:51 2002] [error] [client r.t.y.u]
> File does not exist:
> /home/sites/site11/web/tescil/transparent.gif
> [Sun Sep 22 13:46:28 2002] [error] [client q.w.e.r]
> File does not exist:
> /home/sites/site11/web/tescil/transparent.gif
> 
> My system went down Sat 04:16 and I rebooted on Sun
> 13:00.
> 
> By looking up this error log, can I say that somebody
> hacked, or tried to hack my raw3?
> 
> Thanx
> iarit@xxxxxxxxx
> 
> __________________________________________________
> Do you Yahoo!?
> New DSL Internet Access from SBC & Yahoo!
> http://sbc.yahoo.com
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
Apache/1.3.6 (Unix) PHP/4.0.4pl1 mod_perl/1.21 mod_ssl/2.2.8 OpenSSL/0.9.2b 
You really should update your PHP version
Your server isnt hacked and cannot crash from a SSL error
Its not a hack attempt