hack attempt ?

Discussion regarding Joomla! 4.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Post Reply
Folamour
Joomla! Explorer
Joomla! Explorer
Posts: 315
Joined: Sun Mar 07, 2010 11:19 am

hack attempt ?

Post by Folamour » Tue Aug 29, 2023 8:11 pm

hi folks, does someone cant tell me what is this ? if its legitimate or not :

[Tue Aug 29 21:03:38.458477 2023] [-:error] [pid 21942:tid 34459830784] [client 66.249.83.83:39327] FastCGI: server "/var/run/hcgi/91434" stderr: PHP Warning: file_put_contents(/home/xxxxx/www/crashdebug.fr/administrator/cache/_media_version/index.html) [<a href='https://secure.php.net/manual/en/functi ... nts.php</a>]: Failed to open stream: No such file or directory in /home/xxxxx/www/crashdebug.fr/libraries/src/Cache/Storage/FileStorage.php on line 448

after that we get a black of 6mn in the log and then pm user limit reach,

[Tue Aug 29 21:09:08.640297 2023] [-:error] [pid 34076:tid 34459844864] [client 213.180.203.14:38362] mod_hcgi: pm error: user limits reached!
[Tue Aug 29 21:09:08.656300 2023] [-:error] [pid 31474:tid 34460617216] [client 5.255.253.67:60634] mod_hcgi: pm error: user limits reached!
[Tue Aug 29 21:09:09.630943 2023] [-:error] [pid 31474:tid 34459835904] [client 5.255.231.88:43716] mod_hcgi: pm error: user limits reached!
[Tue Aug 29 21:09:09.649267 2023] [-:error] [pid 31474:tid 34459833344] [client 213.180.203.221:50744] mod_hcgi: pm error: user limits reached!

it seem to be a php injection of file,

because of maintenance some of our defense was down

client 66.249.83.83 is google

thanks
Last edited by toivo on Tue Aug 29, 2023 9:47 pm, edited 1 time in total.
Reason: mod note: moved from 4.x General Questions
https://www.crashdebug.fr talk about actualities and politics and many other topics.

How to boost the SEO of a Joomla site : https://www.crashdebug.fr/comment-ameli ... ite-joomla

Folamour
Joomla! Explorer
Joomla! Explorer
Posts: 315
Joined: Sun Mar 07, 2010 11:19 am

Re: hack attempt ?

Post by Folamour » Wed Aug 30, 2023 6:14 am

we got other crash so this question is not very important, thanks
https://www.crashdebug.fr talk about actualities and politics and many other topics.

How to boost the SEO of a Joomla site : https://www.crashdebug.fr/comment-ameli ... ite-joomla


Post Reply

Return to “Security in Joomla! 4.x”