Hello my friends

I recently took a look at my error logs, and, between all the error messages, I've seen a very odd die message.

It is: 

Conexão fechada pela outra ponta at /home/virtualshelf/www/mod_perl/se
+arch.cgi line 341, <DATA> line 183.

[download]
Two strangest things:
1) The error message you see is strangely in portuguese. It means the same as the famous "Connection closed by foreign host.", wich I know has to do with telnet attack attempts. I mean, all my RHEL OS and applications are in english; how come this error message in portuguese? Is this some mess a hacker's terminal can leave?

2) This line 341 has not anything but a print command! 

              print qq(   # this is line 341!
              
                 <tr $style>
                     <td>$autor</td>
                     <td></td>
                     <td rowspan=2 valign=top>$vendor</td>
                     <td rowspan=2 valign=top></td>
                     <td rowspan=2 valign=top align=center>$year</td>
                     <td rowspan=2 valign=top></td>
                     <td rowspan=2 valign=top>R\$&nbsp;$price</td>
                     <td rowspan=2 valign=top></td>
                     <td rowspan=2 valign=top width=40>
                     <a href="javascript:void(0)" onClick="window.open
+('$domain/mod_perl/display.cgi?livro=$rec_id','Info','status=yes,scro
+llbars=yes,resizable=yes,width=620,height=520,left=100,top=75');"><im
+g src="$domain/images/basket.gif" border=0 alt="click here to see all
+ specs"></a>
                     <a href="javascript:void(0)" onClick="window.open
+('$domain/cgi-bin/cart.cgi?action=buy&item=$item_id','Info','status=y
+es,scrollbars=yes,resizable=yes,width=620,height=520,left=100,top=75'
+);"><img src="$domain/images/go.gif" border=0 alt="clique here to buy
+ "></a>
                     </td>
                     </tr>
                     
                 <tr $xadrez>
                     <td colspan=4>
                     &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 
                     <a href="javascript:void(0)" onClick="window.open
+('$domain/mod_perl/details.cgi?item=$item_id','Info','status=yes,scro
+llbars=yes,resizable=yes,width=620,height=520,left=100,top=75');">
                     <i>$name</i></a></td>
                     </tr>
                 
              );

[download]

I visited the url that caused the error, and the script runs just fine, not any sign of this error message.

Also, there's the <DATA> line 183 portion of the error message, wich I also don't understand.

Any hints, fellows?

Thanks a lot

Andre

In reply to Strange die message at print line: hacker attack? by Andre_br

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.