Worm attacks my gallery....

[wflorian]

Hello.

I have a problem with my gallery. since a few days, a worm attacks my gallery und causes the following error:

[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/top.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/bottom.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/top.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/bottom.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/top.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/bottom.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/top.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/bottom.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/top.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/
[Fri Sep 16 19:12:10 2005] [error] [client 84.171.43.36] unable to include "include/bottom.html" in parsed file /usr/share/apache2/error/HTTP_SERVICE_UNAVAILABLE.html.var, referer: http://www.sexy-gifs.de/

here is a part of my error log:

www.sexy-gifs.de/error.txt

there are around 5-10 attacks every second on my webpack at my hoster. the attacks last over 3-4 hours:( because of the massive attacks all my other homepages laying in the same webpack, went down, too.

can anybody tell me, what this error log exactly means? I do not have the PHP knowledge...
what can I do to avoid these attacks???

thank you!

florian

[Xyu BAM]

I highly doubt the "worm" got onto your server through 4images itself. It might use 4images though.
What you need is check of any suspicious files, or even compare the files your are sure are "good" with the ones from your backups, or if not possible then with fresh 4images files.


Good luck.

[Acidgod]

http://www.webservertalk.com/archive54-2004-2-131078.html

Auch hier schreibe ich es nochmal... (o:

Das ist wie es aussieht kein Wurm sondern ein Problem mit den Fehlerseiten die auf dem Server definiert wurden.

Wenn Du keinen Root hast kannst Du dich wie auch schon erwähnt am besten an deinen Provider wenden... (o:

Wundert mich ja schon sehr das der sich noch nicht bei Dir gemeldet hat... (o: