Security problem?

Discussion in 'Server Operation' started by gral, Sep 27, 2007.

  1. gral

    gral Member

    Hello in my /var/log/secure i have tons of this report, anyone know what does it mean exactly ?

    Sep 27 12:00:01 hostname sudo: root : TTY=unknown ; PWD=/root ; USER=apache ; COMMAND=/usr/bin/find /var/www/path/path -type f -name *.dat -mtime +1 -exec /bin/rm -rf {} ;

    Im under a attack ? how can i stop it ??

    Any clue will be very helpfully!!!

    Regards!
     
  2. falko

    falko Super Moderator Howtoforge Staff

    It might be a cron job on your server that causes this. What's the output of
    Code:
    crontab -l
    (as root)?
     

Share This Page