Facing error during the installation of joomla 2.5 setup.
Error during the joomla installation:
[Fri Nov 24 13:27:57.108701 2017] [:error] [pid 8360] [client ::1:52662] PHP 1. {main}()
/var/www/html/Joomla_2.5/installation/index.php:0
[Fri Nov 24 13:27:57.108714 2017] [:error] [pid 8360] [client ::1:52662] PHP 2. JFactory::getApplication() /var/www/html/Joomla_2.5/installation/index.php:69
[Fri Nov 24 13:27:57.108721 2017] [:error] [pid 8360] [client ::1:52662] PHP 3. JApplication::getInstance()
/var/www/html/Joomla_2.5/libraries/joomla/factory.php:102
[Fri Nov 24 13:27:57.108728 2017] [:error] [pid 8360] [client ::1:52662] PHP 4. JInstallation->__construct()
/var/www/html/Joomla_2.5/libraries/joomla/application/application.php:180
[Fri Nov 24 13:27:57.108735 2017] [:error] [pid 8360] [client ::1:52662] PHP 5. JApplication->__construct()
/var/www/html/Joomla_2.5/installation/includes/application.php:37
[Fri Nov 24 13:27:57.108741 2017] [:error] [pid 8360] [client ::1:52662] PHP 6. JInstallation->_createSession()
/var/www/html/Joomla_2.5/libraries/joomla/application/application.php:145
[Fri Nov 24 13:27:57.108747 2017] [:error] [pid 8360] [client ::1:52662] PHP 7. JFactory::getSession()
/var/www/html/Joomla_2.5/installation/includes/application.php:273
[Fri Nov 24 13:27:57.108753 2017] [:error] [pid 8360] [client ::1:52662] PHP 8. JFactory::createSession()
/var/www/html/Joomla_2.5/libraries/joomla/factory.php:152
[Fri Nov 24 13:27:57.108760 2017] [:error] [pid 8360] [client ::1:52662] PHP 9. JSession::getInstance()
/var/www/html/Joomla_2.5/libraries/joomla/factory.php:656
[Fri Nov 24 13:27:57.108766 2017] [:error] [pid 8360] [client ::1:52662] PHP 10. JSession->__construct()
/var/www/html/Joomla_2.5/libraries/joomla/session/session.php:151
[Fri Nov 24 13:27:57.108771 2017] [:error] [pid 8360] [client ::1:52662] PHP 11. JSession->_start()
/var/www/html/Joomla_2.5/libraries/joomla/session/session.php:114
[Fri Nov 24 13:27:57.108777 2017] [:error] [pid 8360] [client ::1:52662] PHP 12. JRequest::getVar()
/var/www/html/Joomla_2.5/libraries/joomla/session/session.php:522
[Fri Nov 24 13:27:57.108783 2017] [:error] [pid 8360] [client ::1:52662] PHP 13. JRequest::_cleanVar()
/var/www/html/Joomla_2.5/libraries/joomla/environment/request.php:150
[Fri Nov 24 13:27:57.108789 2017] [:error] [pid 8360] [client ::1:52662] PHP 14. JFilterInput->clean()
/var/www/html/Joomla_2.5/libraries/joomla/environment/request.php:632
[Fri Nov 24 13:27:57.108794 2017] [:error] [pid 8360] [client ::1:52662] PHP 15. JFilterInput->_decode()
/var/www/html/Joomla_2.5/libraries/joomla/filter/input.php:251
Software used:
pache/2.4.18 (Ubuntu)
Database client version: libmysql - mysqlnd 5.0.11-dev - 20120503 - $Id: 76b08b24596e12d4553bd41fc93cccd5bac2fe7a $
PHP extension: mysqli Documentation
PHP version: 5.6.32-1+ubuntu16.04.1+deb.sury.org+1
phpmyadmin
Version information: 4.5.4.1deb2ubuntu2
I have solved it my self:
It was the issue of php 5.6 package some of the packages are missing, like curl and xml.
sudo apt-get install php5.6-curl
sudo apt-get install php5.6-xml
Related
I have a simple website deployed on Elastic BeanTalk ( platform: PHP 5.6 ).
public
|about.html
|index.html
|style.css
|+ include
|subscribe-email.php
|+ phpmailer
When I checked the log, I received many errors related to '.php' not found or unable to stat. I don't know from where these php files were generated.
[Thu Jun 21 06:18:52.967190 2018] [:error] [pid 12523] [client xxx] script '/var/www/html/xxxx/public/wp-login.php' not found or unable to stat
[Thu Jun 21 06:25:46.354172 2018] [:error] [pid 12742] [client xxx] script '/var/www/html/xxxx/public/wp-login.php' not found or unable to stat
[Thu Jun 21 06:44:44.392342 2018] [:error] [pid 12963] [client xxx] script '/var/www/html/xxxx/public/wp-login.php' not found or unable to stat
[Thu Jun 21 07:18:12.899793 2018] [:error] [pid 13726] [client xxx] script '/var/www/html/xxxx/public/index.php' not found or unable to stat
[Thu Jun 21 07:18:24.145541 2018] [:error] [pid 13531] [client xxx] script '/var/www/html/xxxx/public/wuwu11.php' not found or unable to stat
[Thu Jun 21 07:18:24.925862 2018] [:error] [pid 13418] [client xxx] script '/var/www/html/xxxx/public/xw.php' not found or unable to stat
[Thu Jun 21 07:18:25.689064 2018] [:error] [pid 13418] [client xxx] script '/var/www/html/xxxx/public/xx.php' not found or unable to stat
[Thu Jun 21 07:18:26.489205 2018] [:error] [pid 13418] [client xxx] script '/var/www/html/xxxx/public/s.php' not found or unable to stat
[Thu Jun 21 07:18:27.282847 2018] [:error] [pid 13418] [client xxx] script '/var/www/html/xxxx/public/w.php' not found or unable to stat
[Thu Jun 21 07:18:28.081399 2018] [:error] [pid 13418] [client xxx] script '/var/www/html/xxxx/public/sheep.php' not found or unable
Any suggestion is appreciated.
It is not a solution but I had the same issue.
I'm posting it as an answer to be able to upload an image.
I found something very similar. Also PHP 5.6.
It was new droplet, recently updated. Ubuntu 16, I added a repo to be able to install PHP 5.6 instead of PHP 7 which is the default.
sudo add-apt-repository ppa:ondrej/php
Where does it comes from?
I've downloaded a wordpress template and it needs to have Ioncube installed, I did as what digital ocean said on my vps and the right version for my php7.0 is installed (as I can see the result in phpinfo(); )but now when I go to my wordpress template page and it gives me the error
This page isn’t working
yourhost.com is currently unable to handle this request.
HTTP ERROR 500
this is my log
[Thu Nov 09 06:25:02.686651 2017] [mpm_prefork:notice] [pid 9032] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 06:25:02.686691 2017] [core:notice] [pid 9032] AH00094: Command line: '/usr/sbin/apache2'
Failed loading /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: cannot open shared object file: No such file or directory
Failed loading /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: cannot open shared object file: No such file or directory
Failed loading /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: cannot open shared object file: No such file or directory
Failed loading /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: cannot open shared object file: No such file or directory
Failed loading /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: cannot open shared object file: No such file or directory
[Thu Nov 09 06:25:50.830177 2017] [mpm_prefork:notice] [pid 9032] AH00169: caught SIGTERM, shutting down
Failed loading /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: /usr/lib/php/20151012/ioncube_loader_lin_7.0.so: cannot open shared object file: No such file or directory
[Thu Nov 09 06:25:51.971658 2017] [mpm_prefork:notice] [pid 11316] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 06:25:51.971857 2017] [core:notice] [pid 11316] AH00094: Command line: '/usr/sbin/apache2'
[Thu Nov 09 06:29:29.356068 2017] [mpm_prefork:notice] [pid 11316] AH00169: caught SIGTERM, shutting down
[Thu Nov 09 06:29:30.508534 2017] [mpm_prefork:notice] [pid 31764] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 06:29:30.508625 2017] [core:notice] [pid 31764] AH00094: Command line: '/usr/sbin/apache2'
[Thu Nov 09 06:53:32.691037 2017] [mpm_prefork:notice] [pid 31764] AH00169: caught SIGTERM, shutting down
[Thu Nov 09 06:53:33.737673 2017] [mpm_prefork:notice] [pid 3759] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 06:53:33.737757 2017] [core:notice] [pid 3759] AH00094: Command line: '/usr/sbin/apache2'
[Thu Nov 09 06:56:32.551814 2017] [mpm_prefork:notice] [pid 3759] AH00169: caught SIGTERM, shutting down
[Thu Nov 09 06:56:32.752382 2017] [mpm_prefork:notice] [pid 14853] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 06:56:32.752490 2017] [core:notice] [pid 14853] AH00094: Command line: '/usr/sbin/apache2'
[Thu Nov 09 07:01:24.790695 2017] [mpm_prefork:notice] [pid 14853] AH00169: caught SIGTERM, shutting down
[Thu Nov 09 07:01:25.989824 2017] [mpm_prefork:notice] [pid 18452] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 07:01:25.989955 2017] [core:notice] [pid 18452] AH00094: Command line: '/usr/sbin/apache2'
[Thu Nov 09 07:01:31.080510 2017] [:error] [pid 18456] [client 5.232.32.241:24228] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:01:33.950712 2017] [:error] [pid 18455] [client 5.232.32.241:45501] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:01:36.156017 2017] [:error] [pid 18457] [client 5.232.32.241:35511] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:02:49.758464 2017] [:error] [pid 18479] [client 5.232.32.241:19653] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:09:30.678341 2017] [:error] [pid 18457] [client 5.232.32.241:46475] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:09:36.741121 2017] [:error] [pid 18459] [client 5.232.32.241:13475] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:09:59.726341 2017] [:error] [pid 18456] [client 5.232.32.241:18124] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:10:01.693749 2017] [:error] [pid 18480] [client 5.232.32.241:14882] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:10:09.060585 2017] [:error] [pid 18455] [client 5.232.32.241:16883] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:10:09.893809 2017] [:error] [pid 18458] [client 5.232.32.241:57989] PHP Fatal error: The file /var/www/html/wordpress/30693_Avada-7/avada522/wp-content/themes/$
[Thu Nov 09 07:14:15.677688 2017] [mpm_prefork:notice] [pid 18452] AH00169: caught SIGTERM, shutting down
[Thu Nov 09 07:14:16.566425 2017] [mpm_prefork:notice] [pid 18910] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 07:14:16.566549 2017] [core:notice] [pid 18910] AH00094: Command line: '/usr/sbin/apache2'
[Thu Nov 09 10:24:33.989899 2017] [mpm_prefork:notice] [pid 18910] AH00169: caught SIGTERM, shutting down
[Thu Nov 09 10:24:34.142330 2017] [mpm_prefork:notice] [pid 317] AH00163: Apache/2.4.18 (Ubuntu) configured -- resuming normal operations
[Thu Nov 09 10:24:34.142433 2017] [core:notice] [pid 317] AH00094: Command line: '/usr/sbin/apache2'
please help me solve it
I figured it out, although it says you need an ioncube_7, but I should install go with php5.6
I'm trying to create a new WordPress site but I don't know the cause why I'm getting an error in the second part of installation (Information Needed) where we have to put the site title, username, password and email.
HTTP 500 error The localhost page isn’t working
And so, I can't login on this site because the data is not saved on phpMyAdmin database.
All data is correct database name, username and password. I don't get why it has database kind of error. This is Apache error log:
[Wed Jan 18 14:55:15.767038 2017] [:error] [pid 10596:tid 1664] [client ::1:62560] WordPress database error Unknown column 'myslca_' in 'field list' for query SELECT myslca_, referer: http://localhost:8020/sample-slca/wp-admin/setup-config.php?step=1
[Wed Jan 18 14:56:13.054742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP Fatal error: Maximum execution time of 30 seconds exceeded in C:\\xampp\\htdocs\\sample-slca\\wp-includes\\Requests\\Transport\\cURL.php on line 437, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.055742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP Stack trace:, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.056742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 1. {main}() C:\\xampp\\htdocs\\sample-slca\\wp-admin\\install.php:0, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.056742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 2. wp_install() C:\\xampp\\htdocs\\sample-slca\\wp-admin\\install.php:375, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.057742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 3. wp_install_maybe_enable_pretty_permalinks() C:\\xampp\\htdocs\\sample-slca\\wp-admin\\includes\\upgrade.php:94, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.058742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 4. wp_remote_get() C:\\xampp\\htdocs\\sample-slca\\wp-admin\\includes\\upgrade.php:340, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.059742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 5. WP_Http->get() C:\\xampp\\htdocs\\sample-slca\\wp-includes\\http.php:170, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.059742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 6. WP_Http->request() C:\\xampp\\htdocs\\sample-slca\\wp-includes\\class-http.php:593, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.060742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 7. Requests::request() C:\\xampp\\htdocs\\sample-slca\\wp-includes\\class-http.php:366, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.061742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 8. Requests_Transport_cURL->request() C:\\xampp\\htdocs\\sample-slca\\wp-includes\\class-requests.php:379, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.061742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 9. curl_exec() C:\\xampp\\htdocs\\sample-slca\\wp-includes\\Requests\\Transport\\cURL.php:162, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
[Wed Jan 18 14:56:13.062742 2017] [:error] [pid 10596:tid 1704] [client ::1:62576] PHP 10. Requests_Transport_cURL->stream_headers() C:\\xampp\\htdocs\\sample-slca\\wp-includes\\Requests\\Transport\\cURL.php:162, referer: http://localhost:8020/sample-slca/wp-admin/install.php?language=en_US
This question already has answers here:
Am I being hacked?
(4 answers)
Closed 5 years ago.
I was reading the logs of the Apache server and I was shocked by seeing these logs!
[Sun Oct 25 06:44:48.922248 2015] [mpm_prefork:notice] [pid 17635] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.13 configured -- resuming normal operations
[Sun Oct 25 06:44:48.922322 2015] [core:notice] [pid 17635] AH00094: Command line: '/usr/sbin/apache2'
[Sun Oct 25 06:52:03.432156 2015] [:error] [pid 12247] [client 185.25.151.159:52483] script '/var/www/testproxy.php' not found or unable to stat
[Sun Oct 25 10:04:07.474749 2015] [:error] [pid 12246] [client 95.213.177.126:26970] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sun Oct 25 13:30:45.499151 2015] [:error] [pid 12249] [client 95.213.177.124:12337] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sun Oct 25 14:56:17.907266 2015] [core:error] [pid 12247] [client 204.232.231.193:42272] AH00126: Invalid URI in request GET HTTP/1.1 HTTP/1.1
[Sun Oct 25 16:47:51.671775 2015] [:error] [pid 13152] [client 95.213.177.122:22221] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sun Oct 25 20:05:20.347574 2015] [:error] [pid 12250] [client 95.213.177.126:26093] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sun Oct 25 20:12:20.573716 2015] [:error] [pid 12247] [client 195.211.154.57:59906] script '/var/www/wp-login.php' not found or unable to stat
[Sun Oct 25 20:12:20.925707 2015] [:error] [pid 12246] [client 195.211.154.57:59982] script '/var/www/wp-login.php' not found or unable to stat
[Sun Oct 25 20:12:21.286692 2015] [:error] [pid 14778] [client 195.211.154.57:60061] script '/var/www/wp-login.php' not found or unable to stat
[Sun Oct 25 20:12:21.653284 2015] [:error] [pid 12248] [client 195.211.154.57:60129] script '/var/www/wp-login.php' not found or unable to stat
[Sun Oct 25 23:40:01.996372 2015] [:error] [pid 13152] [client 95.213.177.125:11645] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Mon Oct 26 02:51:58.571464 2015] [:error] [pid 12247] [client 185.49.14.190:56375] script '/var/www/testproxy.php' not found or unable to stat
[Mon Oct 26 03:06:19.339766 2015] [:error] [pid 12246] [client 95.213.177.125:57675] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Mon Oct 26 05:40:34.837617 2015] [:error] [pid 12249] [client 212.26.4.140:45817] PHP Notice: Undefined index: fileToUpload in /var/www/upload.php on line 16, referer: http://MyServerIPAddress/index.html
[Mon Oct 26 05:40:34.845077 2015] [:error] [pid 12249] [client 212.26.4.140:45817] PHP Notice: Undefined index: fileToUpload in /var/www/upload.php on line 36, referer: http://MyServerIPAddress/index.html
[Mon Oct 26 06:35:27.184473 2015] [:error] [pid 12247] [client 95.213.177.123:49908] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Mon Oct 26 10:00:38.818189 2015] [:error] [pid 12250] [client 95.213.177.124:13503] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Mon Oct 26 13:31:03.088079 2015] [:error] [pid 12246] [client 95.213.177.126:29119] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Mon Oct 26 17:00:20.614876 2015] [:error] [pid 12247] [client 95.213.177.126:50712] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Mon Oct 26 20:29:44.660822 2015] [:error] [pid 12250] [client 95.213.177.126:1817] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 00:01:58.744948 2015] [:error] [pid 14778] [client 95.213.177.122:21314] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 01:11:03.468846 2015] [:error] [pid 18984] [client 185.25.148.240:59900] script '/var/www/testproxy.php' not found or unable to stat
[Tue Oct 27 03:30:14.778881 2015] [:error] [pid 18983] [client 95.213.177.125:18166] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 07:03:54.964307 2015] [:error] [pid 13152] [client 95.213.177.125:6661] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 10:29:50.276896 2015] [:error] [pid 12246] [client 95.213.177.124:61095] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 13:53:21.732290 2015] [:error] [pid 14778] [client 95.213.177.123:60280] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 17:21:02.887146 2015] [:error] [pid 12248] [client 95.213.177.125:63152] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 20:50:02.216260 2015] [:error] [pid 18983] [client 95.213.177.123:36963] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Tue Oct 27 21:14:02.927072 2015] [:error] [pid 12249] [client 185.25.148.240:60127] script '/var/www/testproxy.php' not found or unable to stat
[Wed Oct 28 00:14:25.724517 2015] [:error] [pid 12250] [client 95.213.177.123:49920] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Wed Oct 28 03:44:31.131853 2015] [:error] [pid 12246] [client 95.213.177.124:43972] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Wed Oct 28 07:10:14.870620 2015] [:error] [pid 18983] [client 95.213.177.122:64165] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Wed Oct 28 10:41:34.266047 2015] [:error] [pid 12249] [client 95.213.177.122:7384] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Wed Oct 28 14:04:14.227135 2015] [:error] [pid 13152] [client 95.213.177.122:51171] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Wed Oct 28 16:20:24.056612 2015] [:error] [pid 12247] [client 91.196.50.33:37592] script '/var/www/testproxy.php' not found or unable to stat
[Wed Oct 28 17:24:12.731783 2015] [:error] [pid 12250] [client 95.213.177.126:63964] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Wed Oct 28 21:01:47.135810 2015] [:error] [pid 12246] [client 95.213.177.122:46135] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 00:26:45.812360 2015] [:error] [pid 12249] [client 95.213.177.123:4377] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 03:51:35.202020 2015] [:error] [pid 13152] [client 95.213.177.123:5403] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 07:16:27.154161 2015] [:error] [pid 14778] [client 95.213.177.125:60001] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 10:47:57.392473 2015] [mpm_prefork:notice] [pid 17635] AH00169: caught SIGTERM, shutting down
[Thu Oct 29 10:47:58.276766 2015] [mpm_prefork:notice] [pid 10744] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.14 configured -- resuming normal operations
[Thu Oct 29 10:47:58.276856 2015] [core:notice] [pid 10744] AH00094: Command line: '/usr/sbin/apache2'
[Thu Oct 29 10:48:00.183820 2015] [mpm_prefork:notice] [pid 10744] AH00169: caught SIGTERM, shutting down
[Thu Oct 29 10:48:01.268504 2015] [mpm_prefork:notice] [pid 11109] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.14 configured -- resuming normal operations
[Thu Oct 29 10:48:01.268593 2015] [core:notice] [pid 11109] AH00094: Command line: '/usr/sbin/apache2'
[Thu Oct 29 10:53:55.208328 2015] [:error] [pid 11117] [client 95.213.177.126:24617] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 12:05:44.568022 2015] [:error] [pid 11116] [client 185.25.151.159:44881] script '/var/www/testproxy.php' not found or unable to stat
[Thu Oct 29 14:23:29.206838 2015] [:error] [pid 11113] [client 95.213.177.122:51825] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 17:46:40.522593 2015] [:error] [pid 11648] [client 95.213.177.123:6131] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 21:19:33.442885 2015] [:error] [pid 11642] [client 95.213.177.126:29530] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Thu Oct 29 21:40:04.453806 2015] [:error] [pid 11114] [client 195.211.154.57:60044] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:04.717870 2015] [:error] [pid 11643] [client 195.211.154.57:60066] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:04.982542 2015] [:error] [pid 11117] [client 195.211.154.57:60089] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:05.234578 2015] [:error] [pid 11115] [client 195.211.154.57:60114] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:05.482102 2015] [:error] [pid 11116] [client 195.211.154.57:60141] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:05.740567 2015] [:error] [pid 11113] [client 195.211.154.57:60161] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:05.993417 2015] [:error] [pid 11648] [client 195.211.154.57:60182] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:06.254748 2015] [:error] [pid 11642] [client 195.211.154.57:60210] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:06.501836 2015] [:error] [pid 11114] [client 195.211.154.57:60231] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:06.753228 2015] [:error] [pid 11643] [client 195.211.154.57:60252] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:07.015822 2015] [:error] [pid 11117] [client 195.211.154.57:60276] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:07.278555 2015] [:error] [pid 11115] [client 195.211.154.57:60304] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:07.529478 2015] [:error] [pid 11116] [client 195.211.154.57:60329] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:07.777850 2015] [:error] [pid 11113] [client 195.211.154.57:60351] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:08.022832 2015] [:error] [pid 11648] [client 195.211.154.57:60371] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:08.268446 2015] [:error] [pid 11642] [client 195.211.154.57:60393] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:08.524456 2015] [:error] [pid 11114] [client 195.211.154.57:60412] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:08.770056 2015] [:error] [pid 11643] [client 195.211.154.57:60434] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:09.031264 2015] [:error] [pid 11117] [client 195.211.154.57:60450] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:09.286882 2015] [:error] [pid 11115] [client 195.211.154.57:60473] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:09.537999 2015] [:error] [pid 11116] [client 195.211.154.57:60494] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:09.796330 2015] [:error] [pid 11113] [client 195.211.154.57:60512] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:10.047986 2015] [:error] [pid 11648] [client 195.211.154.57:60537] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:10.294042 2015] [:error] [pid 11642] [client 195.211.154.57:60560] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:10.549803 2015] [:error] [pid 11114] [client 195.211.154.57:60581] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:10.808650 2015] [:error] [pid 11643] [client 195.211.154.57:60604] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:11.056997 2015] [:error] [pid 11117] [client 195.211.154.57:60625] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:11.301379 2015] [:error] [pid 11115] [client 195.211.154.57:60652] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:11.547697 2015] [:error] [pid 11116] [client 195.211.154.57:60668] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:11.797300 2015] [:error] [pid 11113] [client 195.211.154.57:60693] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:12.056947 2015] [:error] [pid 11648] [client 195.211.154.57:60717] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:12.312125 2015] [:error] [pid 11642] [client 195.211.154.57:60737] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:12.560742 2015] [:error] [pid 11114] [client 195.211.154.57:60757] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:12.813413 2015] [:error] [pid 11643] [client 195.211.154.57:60776] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:13.065100 2015] [:error] [pid 11117] [client 195.211.154.57:60801] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:13.320162 2015] [:error] [pid 11115] [client 195.211.154.57:60824] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:13.569527 2015] [:error] [pid 11116] [client 195.211.154.57:60848] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:13.814746 2015] [:error] [pid 11113] [client 195.211.154.57:60871] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:14.066743 2015] [:error] [pid 11648] [client 195.211.154.57:60887] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:14.326231 2015] [:error] [pid 11642] [client 195.211.154.57:60915] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:14.585975 2015] [:error] [pid 11114] [client 195.211.154.57:60936] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:14.844341 2015] [:error] [pid 11643] [client 195.211.154.57:60956] script '/var/www/wp-login.php' not found or unable to stat
[Thu Oct 29 21:40:15.095272 2015] [:error] [pid 11117] [client 195.211.154.57:60981] script '/var/www/wp-login.php' not found or unable to stat
[Fri Oct 30 00:47:05.284551 2015] [:error] [pid 11115] [client 95.213.177.125:26477] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Fri Oct 30 04:09:19.403419 2015] [:error] [pid 11116] [client 95.213.177.122:31198] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Fri Oct 30 07:42:17.527746 2015] [:error] [pid 11648] [client 95.213.177.124:59115] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Fri Oct 30 10:13:59.016697 2015] [:error] [pid 11642] [client 91.196.50.33:36603] script '/var/www/testproxy.php' not found or unable to stat
[Fri Oct 30 11:06:15.666434 2015] [:error] [pid 11114] [client 95.213.177.123:16988] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Fri Oct 30 14:28:18.705393 2015] [:error] [pid 11643] [client 95.213.177.124:53349] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Fri Oct 30 17:58:00.532339 2015] [:error] [pid 11115] [client 95.213.177.122:53827] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Fri Oct 30 21:12:46.869377 2015] [:error] [pid 11116] [client 95.213.177.122:54578] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sat Oct 31 00:35:01.994847 2015] [:error] [pid 11113] [client 95.213.177.123:2596] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sat Oct 31 02:24:36.644160 2015] [:error] [pid 11648] [client 185.25.148.240:58843] script '/var/www/testproxy.php' not found or unable to stat
[Sat Oct 31 04:05:26.854168 2015] [:error] [pid 11642] [client 95.213.177.123:5184] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sat Oct 31 04:43:12.015411 2015] [:error] [pid 11114] [client 91.196.50.33:46098] script '/var/www/testproxy.php' not found or unable to stat
[Sat Oct 31 07:25:14.509690 2015] [:error] [pid 11117] [client 95.213.177.123:3185] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
[Sat Oct 31 10:15:58.489698 2015] [:error] [pid 11115] [client 5.8.66.115:54407] script '/var/www/xmlrpc.php' not found or unable to stat
[Sat Oct 31 10:46:10.183445 2015] [:error] [pid 11116] [client 95.213.177.122:28801] script '/var/www/azenv.php' not found or unable to stat, referer: https://proxyradar.com/
Should I be concerned with these logs? Do they indicate any kind of attack?
The ip trying to do all that stuff is coming from Poland. How can I ban this ip and remove all of the files he/she put on my server? I am using digitalocean service; is that related?
I saw similar traffic. My guess is someone is trying to exploit some kind of bug. I saw this sample code. See #joveha's comment.
I've wrote a script which reads a log-file and write it into an Database. Because of many different line-types it would take about 30 minits executiontime.
Log-Files got:
~20 MB filesize
~200.000 lines
If I include it to my website, the script would run only with small log-files(~2MB tested), it won't run till end if i'm using normal-log-files. I included the script like this:
<?php
include "logLauncher/main.php";
?>
The strange thing is if i using a syscall it would run.
<?php
system("php5 logLauncher/main.php");
?>
Three last entrys in file: /var/log/apache2/error.log
[Wed Aug 26 11:11:22.210994 2015] [:error] [pid 18893] [client 192.168.0.100:54746] PHP 1. {main}() /var/www/cowrean_logs/alpha/main.php:0, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=2&left=1&right=1&event=5&trigger=18200&focus=2&filter1=&encounter=11982&&start=2015-05-27%2019:59:07&end=2015-05-27%2020:00:48
[Wed Aug 26 11:11:22.211004 2015] [:error] [pid 18893] [client 192.168.0.100:54746] PHP 2. include() /var/www/cowrean_logs/alpha/main.php:121, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=2&left=1&right=1&event=5&trigger=18200&focus=2&filter1=&encounter=11982&&start=2015-05-27%2019:59:07&end=2015-05-27%2020:00:48
[Wed Aug 26 11:11:22.211014 2015] [:error] [pid 18893] [client 192.168.0.100:54746] PHP 3. include() /var/www/cowrean_logs/alpha/mod_focus.php:192, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=2&left=1&right=1&event=5&trigger=18200&focus=2&filter1=&encounter=11982&&start=2015-05-27%2019:59:07&end=2015-05-27%2020:00:48
[Wed Aug 26 11:11:28.131411 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP Notice: A session had already been started - ignoring session_start() in /var/www/cowrean_logs/alpha/main.php on line 47, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=2&left=1&right=1&event=5&trigger=18200&focus=2&filter1=&encounter=11982&start=2015-05-27%2019:59:07&end=2015-05-27%2020:00:48
[Wed Aug 26 11:11:28.131462 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP Stack trace:, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=2&left=1&right=1&event=5&trigger=18200&focus=2&filter1=&encounter=11982&start=2015-05-27%2019:59:07&end=2015-05-27%2020:00:48
[Wed Aug 26 11:11:28.131481 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP 1. {main}() /var/www/cowrean_logs/alpha/main.php:0, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=2&left=1&right=1&event=5&trigger=18200&focus=2&filter1=&encounter=11982&start=2015-05-27%2019:59:07&end=2015-05-27%2020:00:48
[Wed Aug 26 11:11:28.131494 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP 2. session_start() /var/www/cowrean_logs/alpha/main.php:47, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=2&left=1&right=1&event=5&trigger=18200&focus=2&filter1=&encounter=11982&start=2015-05-27%2019:59:07&end=2015-05-27%2020:00:48
[Wed Aug 26 11:11:29.080694 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP Notice: A session had already been started - ignoring session_start() in /var/www/cowrean_logs/alpha/main.php on line 47, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:29.080728 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP Stack trace:, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:29.080741 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP 1. {main}() /var/www/cowrean_logs/alpha/main.php:0, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:29.080751 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP 2. session_start() /var/www/cowrean_logs/alpha/main.php:47, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:29.081747 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP Notice: Undefined property: mysqli::$close in /var/www/cowrean_logs/alpha/mod_execute_log.php on line 131, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:29.081769 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP Stack trace:, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:29.081790 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP 1. {main}() /var/www/cowrean_logs/alpha/main.php:0, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:29.081801 2015] [:error] [pid 18894] [client 192.168.0.100:54747] PHP 2. include() /var/www/cowrean_logs/alpha/main.php:118, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?top=1&left=4&right=0
[Wed Aug 26 11:11:35.819211 2015] [:error] [pid 21277] [client 192.168.0.100:54748] PHP Notice: A session had already been started - ignoring session_start() in /var/www/cowrean_logs/alpha/main.php on line 47, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?left=7&top=1&right=0
[Wed Aug 26 11:11:35.819247 2015] [:error] [pid 21277] [client 192.168.0.100:54748] PHP Stack trace:, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?left=7&top=1&right=0
[Wed Aug 26 11:11:35.819267 2015] [:error] [pid 21277] [client 192.168.0.100:54748] PHP 1. {main}() /var/www/cowrean_logs/alpha/main.php:0, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?left=7&top=1&right=0
[Wed Aug 26 11:11:35.819279 2015] [:error] [pid 21277] [client 192.168.0.100:54748] PHP 2. session_start() /var/www/cowrean_logs/alpha/main.php:47, referer: http://192.168.0.10/cowrean_logs/alpha/main.php?left=7&top=1&right=0
I would not post whole config-files because "/etc/php5/apache2/php.ini" and "/etc/php5/cli/php.ini" got more than 600 lines!
I think these lines could be interested, but they are in both files identical -.-
post_max_size = 20M
max_execution_time = 30
memory_limit = -1
Got anyone have a solution for me to kick out the syscall from my code? And include the log-reader script directly into my page? Syscalls doesn't look fine!
Ubuntu 14.4
PHP5
Apache2
PHP-CLI
In the script in question add this at the top of the code
<?php
ini_set('max_execution_time', -1 );
This will tell PHP not to timeout this script.
It has its dangers, for example if you manage to code and infinite loop then the script will run till you kill either apache or PHP, depending on your configuration.
It is best not to change this in the php.ini as that will effect every php script.