[ILUG] Apache restarted over hols??

Wed Jan 2 08:50:19 GMT 2002

Hi.
The last few lines in the relevant  /etc/httpd/logs/error_log
read:
[Fri Dec 28 17:14:40 2001] [error] [client 217.162.17.1] File does not
exist: /var/www/htmlTest/scripts/..À¯../winnt/system32/cmd.exe
[Sat Dec 29 16:50:03 2001] [error] [client 204.166.111.29] File does not
exist: /var/www/htmlTest/robots.txt
[Sat Dec 29 18:34:15 2001] [error] [client 216.239.46.134] File does not
exist: /var/www/htmlTest/robots.txt
[Sun Dec 30 04:02:01 2001] [notice] SIGHUP received.  Attempting to
restart

Given that I did not log in & restart server at 0402 on Dec 30 (!), is
this evidence of an intrusion? (The server *did* restart at 0402 as
evidenced by the current error_log:

me at work> head error_log
[Sun Dec 30 04:02:02 2001] [notice] Apache/1.3.14 (Unix)  (Red-Hat/Linux)
PHP/4.0.1pl2 mod_perl/1.24 configured -- resuming normal operations

All the best & HNY,

John

John A. Kinsella		Ph: 	+353-61-202148 		(Direct)
					+353-61-333644 x 2148  	(Switch)
Mathematics Dept.		e-mail: John.Kinsella at ul.ie
University of Limerick		FAX: 	+353-61-334927
IRELAND				Web:    http://jkcray.maths.ul.ie