While reviewing a Webalizer log of one of my clients' accounts, I found unknown users under "Top Usernames" table.
They kept appearing since 7 months ago, every month..
Names include persistent users:
setup
username
2661
other user names appear and go.
I am a hosting reseller and worried about being hacked.
how to fix rkhunter from; 'not found' in local files and unknown for exim and php 5.2.5.
System checks
* Allround tests
Checking hostname... Found. Hostname is
Checking for passwordless user accounts... OK
Checking for differences in user accounts... OK. No changes.
Checking for differences in user groups... OK. No changes.
Checking boot.local/rc.local file...
- /etc/rc.local [ OK ]
- /etc/rc.d/rc.local [ OK ]
- /usr/local/etc/rc.local [ Not found ]
- /usr/local/etc/rc.d/rc.local [ Not found ]
- /etc/conf.d/local.start [ Not found ]
- /etc/init.d/boot.local [ Not found ]
* Application version scan
- Exim MTA 4.68 [ Unknown ]
- GnuPG 1.2.6 [ Old or patched version ]
- Apache [unknown] [ OK ]
- Bind DNS 9.2.4 [ OK ]
- OpenSSL 0.9.7a [ Old or patched version ]
- PHP 5.2.5 [ Unknown ]
- PHP 5.2.5 [ Unknown ]
- Procmail MTA 3.22 [ OK ]
- OpenSSH 3.9p1 [ OK ]
I was reading through my logs and came across about 100 attempts to login to my server via ssh. They were all blocked, but should I get these IPs blacklisted or what? I've already blocked em from the server, but should I try and blacklist them?
View 7 Replies View RelatedThere is a bug when trying to delete E-mail accounts in Plesk 12.1.26. It only works if I create a fake Auto-Reply text. If not, I got this error:
mail_responders_control failed: mail_responders_control[31710]: No autoresponder found for mailname (test@xxxxxx.com)
mail_responders_control[31710]: Unable to prepare SQL statement for query 'DELETE FROM autoresponder WHERE mn=?': library routine called out of sequence
I have set up my Virtual Private Server and uploaded all my site's files to /var/www folder. Before that, there was an old simple 'index.html' file
Code:
<html>
<head>
<title>INDEX</title>
</head>
<body>
<h1>IT WORKS!!!!</h1>
</body>
</html>
and when I typed the address www.mydomain.com it displayed correctly. Then I deleted this html and uploaded my files through FTP and now the browser says :
Code:
Warning: Unknown: failed to open stream: Permission denied in Unknown on line 0
Fatal error: Unknown: Failed opening required '/var/www/index.php' (include_path='.:/usr/share/php:/usr/share/pear') in Unknown on line 0
I have a use for multiple FTP accounts on my server for different graphic design projects and clients. I would like to give my clients each their own account to upload files too and download from. I have noticed currently I am forced to use usernames such as "username@domain_name.com" on FTP accounts. I would like to avoid this so I can have accounts set-up as below.
ftp server: ftp.domainname.com (<--- would use this domain exclusively for FTP only, no hosting or email)
user: usermame
password: password
I know cPanel says you must use the domain name in the username when the server is hosting multiple accounts, however if I rent another server exclusively for FTP can this be avoided? I have personally used many FTP sites where the domain name is NOT included when accessing the account. This is exactly what I want. Any ideas on how I go about doing this?
I've been asked to update a local shops website and set them up with a new commerce site. I'm Looking for linux hosting around $10-$20 a month.
This might be a funny request but I want to be able to create my own username with whatever hostI go with.
Personally I use 1and1 for my own sites and its decent but I seriously hate how my username for ssh and ftp accounts are something like u334423423 or if I try to create a new username it is u334423423-newuser
is it possiable to delete these files in the server access_logs and errors_logs
View 1 Replies View RelatedHas anyone had any issues, or know of any issues with proccessing logfiles larger than 200MB under Webalizer? Seems to be a periodic issue. Cron says it processed, but stats did not update.
View 3 Replies View Relatedmy friend has about a 3 month period where webalizer has not been run and i was wondering if anyone knew how it could be run without reporting the gap and only processing the current month, the log files are still intact..
i know there are other options but i think he prefers webalizer.....
I have a few domains in a DA server whose stats stop working for a few months, any idea how to restart these few domains Webalizer? The rest of the domains' stats are working properly though
View 3 Replies View RelatedI'm running into some troubles moving my Webalizer installation. I want to keep all my stats, so what I did was to copy all the files to my new host, checked permissions as well.
Each website outputs their logs to a separate log file, and that log file is pointed to in the respective webalizer.conf.
My problem is that when I try to run webalizer -c /path to conf file/ it tells me that it found x new records (good!), but then it ignores all of them. Every single time it'll tell me it found so and so many records, and says, "(number of new records) ignored".
So I'm not sure what I've missed in the config, and why it can't update.
I don't like having to come here for help, but I'm stumped on this one and my server tech isn't really helping - perhaps I'm overlooking the obvious. I have an addon domain on which stats are not updating. As of the 11th of this month, the site had over 1.2k uniques and right around that time we did a server move (on the 10th so it may have started then).
It is only for this one addon domain that things aren't working. It registers 0 new anything since then with the exception of yesterday when my tech says he repeatedly refreshed the page and it registered a grand total of 2 uniques. Back to 0 again so far today. I know the site is getting traffic.
Secondly, Webalizer shows very minor traffic in its categories with numbers that remain in the low single digits.
The upgrade has an error when manage the users database.
PRODUCT, VERSION, VERSION OF MICROUPDATE, OPERATING SYSTEM, ARCHITECTURE
OS Microsoft Windows Server 2008 R2 Service Pack 1 x64
Panel version 11.5.30 Update #13, last updated at Sept 1, 2013 03:30 PM
PROBLEM DESCRIPTION
In a costumer panel have a one database MSSQL, and assign to this DB 3 users, but the tab option "Users" don't work fot his costumer and show this error:
Error Javascript:
TypeError: template is null
this.template = template.toString(); in protototype.js 8472831 (lÃnea 807)
ACTUAL RESULT
Error Javascript:
TypeError: template is null
this.template = template.toString(); in protototype.js 8472831 (lÃnea 807)
EXPECTED RESULT
Show users in the tab users for database.
After migrating from the old ensim to the new "X", everything is working fine, except for the webalizer, I activated webalizer in one domain a few days ago.. and everyday Im trying to see the webalizer information, and it is always displaying this message:
Could not retrieve the requested site report because the Web server logs have not yet been generated. These are generated once a day. Please check again later.
I also tried forcing the log rotating for that site, but the problem still there.
Server is RHES 4 with EnsimPro X, log generation and webalizer is activated for the domain.
I am moving a site from one provider to another. My client wants to keep the existing webalizer stats after the transfer. Could anybody help with how to do the transfer and to make webalizer continue working on the new server?
View 5 Replies View RelatedOn my server, users can connect to any database as long as they have the database user and password. This makes it easier to hack any database on the server.
What I want to do is to make the users can only connect to their own databases and not other's.
I tried changing the localhost ip address but it didn't work ( I assume I didn't do it the right way)
I have a dedicated server with few hundred domains on it.
How can I automate to view all traffic stats for all of the domains in the server. Currently, I have to manually view the popular domains one by one to see the stats.
Ideally, I want to view daily visitors/per domain by a email report. Is this possible via backend script/cron job?
My IIS W3Log File is under C:Inetpubw3LogFilesW3SVC1
looks like this which is daily log file:
C:Inetpubw3LogFilesW3SVC1ex081022.log
C:Inetpubw3LogFilesW3SVC1ex081023.log
C:Inetpubw3LogFilesW3SVC1ex081024.log
All my web site is under c:InetpubVS
c:InetpubVSWebSite1.com
c:InetpubVSWebSite2.com
c:InetpubVSWebSite3.com
There is a webalizer directory under each domain folder.
Does anyone know how to setup a webalizer which can run weekly to process W3log files and put the result into corresponding domain webalizer folder?
I have recently migrated my websites from Plesk 11.0.9 to a new server with Plesk 12.x and the webalizer is not working.
- Is there a chance to repair it and not loose the data? If yes, how do I do that?
- Or do I have to remove it and install Webalizer again? How do I do that?
OS Ubuntu
Uninstalling Webalizer with plesk updater is not possible.
After executing this:
Code:
# /usr/local/psa/admin/bin/statistics --calculate-all
I get:
Code:
WARNING during statistics_collector execution: : Executing logs preparation...
error: error creating output file /var/www/vhosts/system/domain.tld/logs/error_log.1: File exists
statistics[6845]: Unable to execute logrotate via: /opt/psa/logrotate/sbin/logrotate /opt/psa/etc/logrotate.conf -s /opt/psa/var/logrotate.status
Currently i am using webalizer... How can i switch to aw stats by importing the current data...
View 1 Replies View RelatedI look after a number of sites and monitor their stats. We use both webalizer and AWSTATS so we can have a comparison. Up until recently the stats for both of them where relatively the same, webalizer usually showing higher numbers as it doesn't filter bots but the progression of increase and decrease in stats was proportional. However, over the last few months a curious trend is appearing, the stats in AWSTATS are decreasing every month whereas the stats in Webalizer are increasing, the gap between them now is huge.
View 0 Replies View RelatedI host a website on a windows server
and once in a while, i check all the root folders to find a folder that holds 40GB of folder in a folder in a folder... (i never get to the actual files)
Is there a way to prevent this?
I was reviewing my cPanel awStats today.
The brower stats looked something like this: Firefox 42.9 %
MS Internet Explorer 21 %
Mozilla 17.3 %
Unknown 5.8 %
K-Meleon 5.4 %
Safari 3.7 %
Opera 3.1 %
Netscape 0.1 %
BonEcho (Firefox 2.0 development) 0.1 %
Anyone care to venture a guess as to what the 'unknown' browsers might be?
The thing is that my sysadmin told me that he get filesize and eta when downloading a file from my server while all of my user and myself get unknown flesize and no eta. got Web Server apache2handler centos 5.1 64bit
View 1 Replies View RelatedI have something weird going on with CSF on a new server. When starting the firewall I get this:
Quote:
lushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Restarting bandmin acctboth chains for cPanel
ACCEPT all opt -- in lo out * 0.0.0.0/0 -> 0.0.0.0/0
ACCEPT all opt -- in * out lo 0.0.0.0/0 -> 0.0.0.0/0
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* '
LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_OUT Blocked* '
LOG udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_IN Blocked* '
LOG udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_OUT Blocked* '
LOG icmp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_IN Blocked* '
LOG icmp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_OUT Blocked* '
LOG all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *BLOCK_LIST* '
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
INVDROP all opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 state INVALID
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x00
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x3F
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x03/0x03
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x06/0x06
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x05/0x05
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x11/0x01
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x18/0x08
INVDROP tcp opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x30/0x20
INVDROP all opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 state INVALID
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x00
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x3F/0x3F
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x03/0x03
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x06/0x06
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x05/0x05
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x11/0x01
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x18/0x08
INVDROP tcp opt -- in * out eth+ 0.0.0.0/0 -> 0.0.0.0/0 tcp flags:0x30/0x20
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
LOGDROPIN all opt -- in eth+ out * 64.58.165.126 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 64.58.165.126
LOGDROPIN all opt -- in eth+ out * 216.105.216.5 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 216.105.216.5
LOGDROPIN all opt -- in eth+ out * 64.251.10.133 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 64.251.10.133
LOGDROPIN all opt -- in eth+ out * 89.149.240.26 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 89.149.240.26
LOGDROPIN all opt -- in eth+ out * 195.87.225.72 -> 0.0.0.0/0
LOGDROPOUT all opt -- in * out eth+ 0.0.0.0/0 -> 195.87.225.72
BLOCKDROP ...
...
SPAMHAUS all opt -- in eth+ out * 0.0.0.0/0 -> 0.0.0.0/0
iptables v1.3.5: Unknown arg `-j'
Try `iptables -h' or 'iptables --help' for more information.
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Flushing chain `BLOCKDROP'
Flushing chain `DSHIELD'
Flushing chain `INVDROP'
Flushing chain `LOGDROPIN'
Flushing chain `LOGDROPOUT'
Flushing chain `SPAMHAUS'
Flushing chain `acctboth'
Deleting chain `BLOCKDROP'
Deleting chain `DSHIELD'
Deleting chain `INVDROP'
Deleting chain `LOGDROPIN'
Deleting chain `LOGDROPOUT'
Deleting chain `SPAMHAUS'
Deleting chain `acctboth'
Error: iptables command [/sbin/iptables -v -I OUTPUT -p tcp --dport 25 -j ] failed, at line 544
Unknown arg `-j' ? I've been Google'ing, searched WHT and the CSF forums but can't find a solution...
I've bought a basic unmanaged VPS, purely to learn things from it. The best way to learn imo is to hammer the hell out of things, break it, then try to fix it. Anyway, I think I'm part way there, pretty sure I've broken something
When I start the consoleSSH I get this at the top:
Warning: Unknown iptable module: xt_NFQUEUE, skipped
Warning: Unknown iptable module: xt_mark"IPTABLES="ipt_REJECT, skipped
Warning: Unknown iptable module: xt_NFQUEUE, skipped
Warning: Unknown iptable module: xt_mark"IPTABLES="ipt_REJECT, skipped
Warning: Unknown iptable module: xt_NFQUEUE, skipped
Warning: Unknown iptable module: xt_mark, skipped
Any ideas what's causing it and how I can fix it? ..............
When I am sending mails through my Outlook, the mails are being delivered with an unknown signature as below:
ADVERTISING
--------------------------------------------
<a href=[url]
Buy Viagra, Cialis, Levitra, Propecia, Champix, Tamiflu, Xenical, Reductil, Intrinsa, <br>
from The Best Online Pharmacy! FDA Approved. Low pricing, discounts, <br>
flawless customer support. New discounts and special offers ! <br>
</a>
[url]
--------------------------------------------
Eventhough, I did not setup any signatures. Plesk server with spamguardian running.
my friend has an un-managed VPS plan in kloxo-hypervm mode
yesterday the stats showed in hypervm as the space was over used, so I personally deleted the processed stats which cleared around 20gb space, again today the space is totally consumed, I don't know why its happening and have no clue where are the other locations where the space could have been consumed i.e similar to location of logs or any other specs which could have been consuming space
unknown space consumption - very high no idea how!
its actually an image hosting site and I noted that not many pics and not much space was consumed in the pics uploaded in the last 24hrs but this really puzzles and troubles me as I am currently tracking my friend's VPS, please help me sort this out problem and keep my head high before my friend
I have just taken hosting from godaddy. i have taken dedicated website hosting. But my ftp are working in my office filezilla and not at home. Its giving 530 error, unknown ip address.
I am using file zilla in office and at home.