#1  
Old 21st September 2011, 14:08
morraine morraine is offline
Junior Member
 
Join Date: Nov 2008
Posts: 13
Thanks: 1
Thanked 0 Times in 0 Posts
Default cron problem

Hi when i view my /var/log/syslog over SSH it is telling me that its running this cron :
(/var/www/clients/client1/web2/cd /var/www/clients/client1/web2/web/qweiugbzsq86ts2po/sugar2; php -f cron.php > /dev/null 2>&1)

but i have deleted this cron from ispconfig yesterday but it seams to be still running it even though its nowhere to be seen in ispconfig or the cron tab
where could i view this if its not in ispconfig and how do i repair this problem


Quote:
Sep 21 11:12:01 loft7403 /USR/SBIN/CRON[10138]: (web2) CMD (/var/www/clients/client1/web2/cd /var/www/clients/client1/web2/web/qweiugbzsq86ts2po/sugar2; php -f cron.php > /dev/null 2>&1)
Sep 21 11:12:01 loft7403 /USR/SBIN/CRON[10139]: (root) CMD (/usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log)
Sep 21 11:12:01 loft7403 /USR/SBIN/CRON[10136]: (CRON) error (grandchild #10138 failed with exit status 1)
Sep 21 11:13:01 loft7403 /USR/SBIN/CRON[10151]: (root) CMD (/usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log)
Sep 21 11:13:01 loft7403 /USR/SBIN/CRON[10152]: (web2) CMD (/var/www/clients/client1/web2/cd /var/www/clients/client1/web2/web/qweiugbzsq86ts2po/sugar2; php -f cron.php > /dev/null 2>&1)
Sep 21 11:13:01 loft7403 /USR/SBIN/CRON[10148]: (CRON) error (grandchild #10152 failed with exit status 1)
Sep 21 11:14:01 loft7403 /USR/SBIN/CRON[10164]: (root) CMD (/usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log)
Sep 21 11:14:01 loft7403 /USR/SBIN/CRON[10165]: (web2) CMD (/var/www/clients/client1/web2/cd /var/www/clients/client1/web2/web/qweiugbzsq86ts2po/sugar2; php -f cron.php > /dev/null 2>&1)
Sep 21 11:14:01 loft7403 /USR/SBIN/CRON[10161]: (CRON) error (grandchild #10165 failed with exit status 1)
Sep 21 11:15:01 loft7403 /USR/SBIN/CRON[10178]: (web2) CMD (/var/www/clients/client1/web2/cd /var/www/clients/client1/web2/web/qweiugbzsq86ts2po/sugar2; php -f cron.php > /dev/null 2>&1)
also on a side note how do you setup ispconfig to run a cron every 5 minutes?
Thank you

Last edited by morraine; 21st September 2011 at 14:11.
Reply With Quote
Sponsored Links
  #2  
Old 21st September 2011, 22:52
Ben Ben is offline
Moderator
 
Join Date: Jul 2006
Posts: 1,029
Thanks: 7
Thanked 62 Times in 56 Posts
Default

is this a legitimate cron job? Maybe you might inspect it? At least from my perspective it looks a bit strange. So maybe sb broke in your server, so you should check what kind of applications / script are running for web2.

You might also check rkhunter (rootkit.nl).

Regarding running a cronjob every five minutes, set the minute portion to */5 everything else to *
e.g. */5 * * * * <command>

you should also consider using logwatch, as it would email you such kind of stuff on a daily basis.
Reply With Quote
  #3  
Old 22nd September 2011, 23:38
morraine morraine is offline
Junior Member
 
Join Date: Nov 2008
Posts: 13
Thanks: 1
Thanked 0 Times in 0 Posts
 
Default

Hi its not a hacker that put that there. i had put that originally. I've got sugarcrm on my server i put it in a folder that was not at the top of my site and was hard for people who don't know its location to just get to.

i now realise that you don't setup crons like that in ispconfig so i deleted it from inside the control panel in ispconfig but i'm still getting this in the logs after i deleted it.

How can this be?
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache boot problem / GlusterFS loading stefanm Installation/Configuration 2 9th August 2011 14:25
Sending email issue lezelf Installation/Configuration 15 9th August 2011 11:20
Strange email problem for one of my domains... any help appreciated paulrobert_a Installation/Configuration 5 9th August 2010 14:15
ERROR- Connection dropped by imap-server Al1937 Installation/Configuration 10 4th September 2009 21:15
Postfix+MySQL Problem jasutton Installation/Configuration 1 15th June 2006 16:06


All times are GMT +2. The time now is 01:54.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.