sh: host: command not found

[nicsopon]

The httpd/error_log file has a lot of lines of this error :


sh: host: command not found
sh: host: command not found
sh: host: command not found

but I'm sure I don't set any cron or program to run sh command.

Where I can find the list of sh auto run command and delete them ?

In this case, I was attacked or not?

Thanks in advanced

[Rich-Boy]

This could be as harmless as a php script gathering statistics on host names of IPs but I wouldn't ignore it. The only way I can think of to locate the script in question it to check out every user on the system, you probably already have some suspicions but hopefully there aren't many websites on your server so you can take less time doing it. You might also want to try removing individual VirtualHosts from your Apache config to try to locate the website/user in question.

Hope this helps.