2011年2月19日星期六

Re: Strange Port tracked

On 2/19/11 10:45 AM, timknip wrote:
> hi,
>
> It's quite new for me to use nginx as the webserver, nginx 0.7.65 + php
> /fpm on freebsd, which was installed on Apr 28th, 2010. I configured
> the server to listen on Port 80 as seen below.
>
> server {
> listen 80;
>
> My php script will create a folder by domain name each time it detect a
> different domain. I saw a strange xxxxx:4511 folder created on Jan 13th,
> 2011. Also owner of all php files and folders are changed to 1005 . I
> double checked /etc/passwd and the max user id there is 1003.
>
> Is it possible that my nginx/phpfpm server is hacked? Please advice!

Yes.


>
> cheers
> Tim
>
> Posted at Nginx Forum: http://forum.nginx.org/read.php?2,176772,176772#msg-176772
>
>


--
Jim Ohlstein

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx

没有评论:

发表评论