Community Forums
Connect with us on LinkedIn
apache keeps on failing
  
+ Reply to Thread
Page 1 of 4 1 2 3 ... LastLast
Results 1 to 15 of 57
  1. 09-24-2002 05:25 PM #1
    blueboxservers.com
    blueboxservers.com is offline
    Member
    Join Date
    Jul 2002
    Posts
    23

    Default apache keeps on failing

    Is there still no fix for apache failing? It happens every couple of days, the apache monitor says its up but apache just dies in memory, really makes cpanel useless
    Reply With Quote Reply With Quote
  2. 09-24-2002 08:49 PM #2
    TRAIN YARD SOFTWARE
    TRAIN YARD SOFTWARE is offline
    Member
    Join Date
    Dec 2001
    Posts
    224
    Send a message via ICQ to TRAIN YARD SOFTWARE Send a message via AIM to TRAIN YARD SOFTWARE

    Default

    same problem here
    www.tys.us
    TYS-HR Datacenter
    100% uptime power & feed
    Colocation/Dedicated/Managed
    Reply With Quote Reply With Quote
  3. 09-24-2002 09:15 PM #3
    kualo
    kualo is offline
    cPanel Partner NOC cPanel Partner NOC Badge
    Join Date
    Jun 2002
    Posts
    17

    Default

    we had this - if you have resellers its probably because of an error with terminating accounts. Temporarily you can disable the terminate account feature, but we upgraded CPanel a couple of days ago and the problem resolved...
    Jo
    Reply With Quote Reply With Quote
  4. 09-24-2002 09:20 PM #4
    blueboxservers.com
    blueboxservers.com is offline
    Member
    Join Date
    Jul 2002
    Posts
    23

    Default

    no just one site on the server no resellers
    Reply With Quote Reply With Quote
  5. 09-25-2002 03:18 AM #5
    Brad
    Brad is offline
    Member Brad's Avatar
    Join Date
    Aug 2001
    Posts
    236

    Default

    Same problem here with a server thats been working flawless for 8 months..

    Somethings up here?

    Apache 1.3.26
    redhat 7.1
    cPanel5 Build 123
    php 4.22
    Reply With Quote Reply With Quote
  6. 09-25-2002 05:55 PM #6
    avara
    avara is offline
    Member
    Join Date
    Oct 2001
    Posts
    90

    Default

    We have the same problem on several servers now -- Apache now fails every couple of days, or at least once a week. Before this, it had never failed before.

    The problem started when CPanel was upgraded.
    Urban Weigl
    http://hostit365.com/
    Reply With Quote Reply With Quote
  7. 09-25-2002 05:57 PM #7
    blueboxservers.com
    blueboxservers.com is offline
    Member
    Join Date
    Jul 2002
    Posts
    23

    Default

    seems its affecting all OS we have:

    Apache 1.3.26
    redhat 7.3
    cPanel5 Build 123
    php 4.2.3
    Reply With Quote Reply With Quote
  8. 09-25-2002 08:12 PM #8
    Curious Too
    Curious Too is offline
    Member
    Join Date
    Aug 2001
    Posts
    421
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    I have had apache fail a lot more than normal also. I thought it had something to do with the CPanel 5 upgrade at first, but after searching the access log for the server I see it's something else. I matched the entries in the access log to the time I received the apache warning from the server monitor and found this:

    [Wed Sep 25 07:22:32 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:32 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:32 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /

    This is a snippet of what was in the log, it was many more hits. The timing of these entries are consistent with the timing from the apache &down& warnings from the server monitor. These entries appear in the access_log, not the error_log. I suspect it's somehow related to the new Slapper Worm, but I'm not sure.
    Reply With Quote Reply With Quote
  9. 09-25-2002 08:14 PM #9
    Curious Too
    Curious Too is offline
    Member
    Join Date
    Aug 2001
    Posts
    421
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    duplicate post
    Reply With Quote Reply With Quote
  10. 09-26-2002 03:00 AM #10
    Brad
    Brad is offline
    Member Brad's Avatar
    Join Date
    Aug 2001
    Posts
    236

    Default

    Yes, confirmed here too, same error message at the time apache crashed here too..

    Has anyone notified Nick though support, this should be sent to him as a ticket since I'm sure it is a problem with lots of servers.



    [quote:52cf61dd76][i:52cf61dd76]Originally posted by Curious Too[/i:52cf61dd76]

    I have had apache fail a lot more than normal also. I thought it had something to do with the CPanel 5 upgrade at first, but after searching the access log for the server I see it's something else. I matched the entries in the access log to the time I received the apache warning from the server monitor and found this:

    [Wed Sep 25 07:22:32 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:32 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:32 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:33 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
    [Wed Sep 25 07:22:34 2002] [error] [client 204.192.96.25] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /

    This is a snippet of what was in the log, it was many more hits. The timing of these entries are consistent with the timing from the apache &down& warnings from the server monitor. These entries appear in the access_log, not the error_log. I suspect it's somehow related to the new Slapper Worm, but I'm not sure.[/quote:52cf61dd76]
    Reply With Quote Reply With Quote
  11. 09-26-2002 03:09 AM #11
    rpmws
    rpmws is offline
    Member rpmws's Avatar
    Join Date
    Aug 2001
    Location
    back woods of NC, USA
    Posts
    1,858

    Default

    confirmed ..thanks for your posts guys. I have seen this crash httpd as well...and it's funny I searched my access_log and even found that same IP hit my box along with a few more. Must be a worm.
    Just keeping my "eye" on things....
    R. Paul Mathews
    RPMWS - diehard cPanel Nutcase
    Reply With Quote Reply With Quote
  12. 09-26-2002 03:10 AM #12
    Curious Too
    Curious Too is offline
    Member
    Join Date
    Aug 2001
    Posts
    421
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    I don't think it's a CPanel issue. There was a discussion on the ISP-Linux list today regarding the issue -- basically the Slapper Worm probes are mimicing a mini DOS attack. Here's a post from the list:

    &Recently I have been getting bombarded by slapper probes coming from various IP's around the world... These people are scanning one of our complete class c netblocks, and opening connections to every single one of our virtual domains at once... This is causing Apache to throttle the number of daemons, thereby causing a denial of service attack...&

    You can try blocking the IPs but it gets tedious if you have a lot of servers to maintain. Any other suggestions?
    Reply With Quote Reply With Quote
  13. 09-26-2002 03:42 AM #13
    blueboxservers.com
    blueboxservers.com is offline
    Member
    Join Date
    Jul 2002
    Posts
    23

    Default

    ours is not the slapper worm and has been happening for some weeks now
    Reply With Quote Reply With Quote
  14. 09-26-2002 04:02 AM #14
    itf
    itf is offline
    Member
    Join Date
    May 2002
    Posts
    626

    Default

    [quote:a35aaaaf2f][i:a35aaaaf2f]Originally posted by Curious Too[/i:a35aaaaf2f]

    I don't think it's a CPanel issue. There was a discussion on the ISP-Linux list today regarding the issue -- basically the Slapper Worm probes are mimicing a mini DOS attack. Here's a post from the list:

    &Recently I have been getting bombarded by slapper probes coming from various IP's around the world... These people are scanning one of our complete class c netblocks, and opening connections to every single one of our virtual domains at once... This is causing Apache to throttle the number of daemons, thereby causing a denial of service attack...&

    You can try blocking the IPs but it gets tedious if you have a lot of servers to maintain. Any other suggestions?
    [/quote:a35aaaaf2f]
    Slapper can not do anything with Cpanel boxes if you have security updates enabled in WHM; you shouldn't have to worry about this.

    http://forums.cpanel.net/read.php?TID=4602

    http://forums.cpanel.net/read.php?TID=4634

    http://forums.cpanel.net/read.php?TID=4759

    About Apache failures, Which modules have you compiled with your Apache?
    Please use messengers to contact me:
    MSN: patrickay@msn.com
    AIM: PatrickITF
    Reply With Quote Reply With Quote
  15. 09-26-2002 04:07 AM #15
    Curious Too
    Curious Too is offline
    Member
    Join Date
    Aug 2001
    Posts
    421
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    [quote:5711b7ef9f][i:5711b7ef9f]Originally posted by itf[/i:5711b7ef9f]

    [quote:5711b7ef9f][i:5711b7ef9f]Originally posted by Curious Too[/i:5711b7ef9f]

    I don't think it's a CPanel issue. There was a discussion on the ISP-Linux list today regarding the issue -- basically the Slapper Worm probes are mimicing a mini DOS attack. Here's a post from the list:

    &Recently I have been getting bombarded by slapper probes coming from various IP's around the world... These people are scanning one of our complete class c netblocks, and opening connections to every single one of our virtual domains at once... This is causing Apache to throttle the number of daemons, thereby causing a denial of service attack...&

    You can try blocking the IPs but it gets tedious if you have a lot of servers to maintain. Any other suggestions?
    [/quote:5711b7ef9f]
    Slapper can not do anything with Cpanel boxes if you have security updates enabled in WHM; you shouldn't have to worry about this.

    http://forums.cpanel.net/read.php?TID=4602

    http://forums.cpanel.net/read.php?TID=4634

    http://forums.cpanel.net/read.php?TID=4759

    About Apache failures, Which modules you have compiled with your Apache?[/quote:5711b7ef9f]

    Not the worm itself, but probes, supposedly from the worm. Everyone of my apache failures have coincided with these types of attacks:

    203.69.74.172 - - [25/Sep/2002:16:09:53 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:09:54 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:09:56 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:09:57 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:09:57 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:09:59 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:00 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:00 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:02 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:02 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:02 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:04 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:05 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:05 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:11 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:12 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:13 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:13 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:13 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:13 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:13 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:13 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:13 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:14 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:14 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:17 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:18 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:18 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:18 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:18 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:18 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:18 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:18 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:19 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:19 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:22 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:23 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:23 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:23 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:23 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:24 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:24 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:24 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:24 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:28 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:28 -0400] &-& 408 - &-& &-&
    203.69.74.172 - - [25/Sep/2002:16:10:28 -0400] &-& 408 - &-& &-&

    The servers are updated and not infected.
    Reply With Quote Reply With Quote
+ Reply to Thread
Page 1 of 4 1 2 3 ... LastLast
«   Modifying user's domain with 'Modify Account' | A few questions »     
Similar Threads & Tags
Similar threads

  1. Apache Keeps Failing
    By webz05 in forum cPanel and WHM Discussions
    Replies: 2
    Last Post: 12-01-2005, 04:49 AM
  2. HELP !! Apache failing - tried everything I know
    By EMS in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 05-15-2004, 02:02 PM
  3. apache keep failing
    By shann in forum cPanel and WHM Discussions
    Replies: 2
    Last Post: 03-20-2003, 09:38 AM
  4. Apache Failing
    By besta in forum cPanel and WHM Discussions
    Replies: 4
    Last Post: 10-01-2002, 09:41 AM
  5. why is apache failing so much lately?
    By rastoma in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 06-08-2002, 02:18 PM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube