Forum

Results 1 to 5 of 5
  1. #1
    Join Date
    May 2013
    Posts
    2

    (teamspeak) CMD (/var/tmp/.b/update >/dev/null 2>&1

    Hello,
    looking through my syslog is see a lot of:
    Code:
    Mar 10 14:34:01 deneb CRON[6814]: (teamspeak) CMD (/var/tmp/.b/update >/dev/null 2>&1
    Can someone explain what this is?
    My server keeps freezing and last thing it did before a freeze was one of those operations.

  2. #2
    Join Date
    February 2012
    Location
    Germany
    Posts
    576
    There seems to be a cron job installed on your machine that is configured to run as a user called "teamspeak". The job itself is located in /var/tmp/.b/update. Whatever it is, it is installed manually from somebody. In the Teamspeak server distribution package, there is no such job, so it is probably made by the person who installed it.

    Installing things in a hidden directory in /var/tmp and calling that from cron is not a common administration/cron task. I would investigate that.

  3. #3
    Join Date
    March 2014
    Posts
    1
    I got exactly the same problem today, the time is also nearly the same.
    I got a message from my provider that the server will be blocked if i dont give a statement, with the reason "we have evidence that was carried out from your server for an attack."

  4. #4
    Join Date
    December 2004
    Location
    RF
    Posts
    3,007
    Quote Originally Posted by MNieddu91 View Post
    I got exactly the same problem today, the time is also nearly the same.
    I got a message from my provider that the server will be blocked if i dont give a statement, with the reason "we have evidence that was carried out from your server for an attack."
    And?...
    (...ten letters...)

  5. #5
    Join Date
    February 2012
    Location
    Germany
    Posts
    576
    If you google for "/var/tmp/.b/update", this is the first result:

    http://robert.penz.name/44/a-tale-of...ot-programmer/

    Contains everything on this matter. Go and clean your servers.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. license key is null
    By MasterOne in forum Server Support
    Replies: 1
    Last Post: April 4th, 2012, 07:58 PM
  2. returnCode other than NULL with requestClientMove() errors
    By Screech in forum Client Plugins / Lua Scripts
    Replies: 1
    Last Post: December 6th, 2010, 08:18 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •