The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

apache dies ... takes down box every 30-48 hours

Discussion in 'EasyApache' started by rpmws, Mar 12, 2003.

  1. rpmws

    rpmws Well-Known Member

    Joined:
    Aug 14, 2001
    Messages:
    1,824
    Likes Received:
    5
    Trophy Points:
    38
    Location:
    back woods of NC, USA
    Hi guys.. I need some help. We have all seen nimda and code red crap hit apache. For the past 5-6 weeks these attacks run through my ips and kills this server. Not everytime but often. For some reason chkservd does not catch it. The server has to be power cycled to get it back up. Everything dies on it in about 3 minutes. It's costing me clients. This has happened 6 times in last 2 weeks and the last time it took me almost 2 hours to reboot it!!

    Here is what it in the error_log before and after the fail. Notice at the bottom when the time jumps from 16:55 to 17:49. Is there something wrong with my chkservd? could it be mod_gzip? could it be I have a class c with only 90 ips used? ..what can I do. When I block via IP on the firewall i get hot from another IP. Help me ...please?


    ---------------------------------------
    [Wed Mar 12 16:52:21 2003] [error] [client 64.110.88.214] File does not exist: /home/user1/public_html/default.ida
    [Wed Mar 12 16:52:21 2003] [error] [client 64.110.88.214] File does not exist: /home/user1/public_html/404.shtml
    [Wed Mar 12 16:52:43 2003] [error] [client 24.71.223.140] File does not exist: /home/user2/public_html/_vti_bin/owssvr.dll
    [Wed Mar 12 16:52:43 2003] [error] [client 24.71.223.140] File does not exist: /home/user2/public_html/MSOffice/cltreq.asp
    [Wed Mar 12 16:53:01 2003] [error] [client 65.87.130.2] File does not exist: /home/user3/public_html/space.gif
    [Wed Mar 12 16:53:01 2003] [error] [client 65.87.130.2] File does not exist: /home/user3/public_html/404.shtml
    [Wed Mar 12 16:53:06 2003] [error] [client 64.251.80.25] File does not exist: /usr/local/apache/htdocs/default.ida
    [Wed Mar 12 16:53:06 2003] [error] [client 64.251.80.25] File does not exist: /usr/local/apache/htdocs/404.shtml
    [Wed Mar 12 16:53:36 2003] [error] mod_gzip: EMPTY FILE [/home/mod_gzip_work/_3891_119_20.wrk] in sendfile2
    [Wed Mar 12 16:53:36 2003] [error] mod_gzip: Make sure all named directories exist and have the correct permissions.
    [Wed Mar 12 16:53:38 2003] [error] [client 65.87.130.2] File does not exist: /home/user3/public_html/4ft/black1x1.jpg
    [Wed Mar 12 16:53:38 2003] [error] mod_gzip: EMPTY FILE [/home/mod_gzip_work/_3891_120_21.wrk] in sendfile2
    [Wed Mar 12 16:53:38 2003] [error] mod_gzip: Make sure all named directories exist and have the correct permissions.
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/scripts/root.exe
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/MSADC/root.exe
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/c/winnt/system32/cmd.
    exe
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/d/winnt/system32/cmd.
    exe
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/scripts/..%5c../winnt
    /system32/cmd.exe
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/_vti_bin/..%5c../..%5
    c../..%5c../winnt/system32/cmd.exe
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/_mem_bin/..%5c../..%5
    c../..%5c../winnt/system32/cmd.exe
    [Wed Mar 12 16:54:18 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/msadc/..%5c../..%5c..
    /..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/scripts/..Á../winnt/s
    ystem32/cmd.exe
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/scripts/..À¯../winnt/
    system32/cmd.exe
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/scripts/..Áœ../winnt/
    system32/cmd.exe
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/400.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/400.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/scripts/..%5c../winnt
    /system32/cmd.exe
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/scripts/..%2f../winnt
    /system32/cmd.exe
    [Wed Mar 12 16:54:19 2003] [error] [client 64.200.41.19] File does not exist: /home/user4/public_html/404.shtml
    [Wed Mar 12 16:54:25 2003] [error] [client 216.239.46.23] File does not exist: /home/user5g/public_html/robots.txt
    [Wed Mar 12 16:54:25 2003] [error] [client 216.239.46.23] File does not exist: /home/user5g/public_html/404.shtml
    [Wed Mar 12 16:54:25 2003] [error] mod_gzip: EMPTY FILE [/home/mod_gzip_work/_3889_108_9.wrk] in sendfile2
    [Wed Mar 12 16:54:25 2003] [error] mod_gzip: Make sure all named directories exist and have the correct permissions.
    [Wed Mar 12 16:55:11 2003] [error] [client 66.77.73.244] File does not exist: /home/user6/public_html/robots.txt
    [Wed Mar 12 16:55:11 2003] [error] [client 66.77.73.244] File does not exist: /home/user6/public_html/404.shtml
    [Wed Mar 12 17:29:06 2003] [warn] pid file /usr/local/apache/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache
    run?
    [Wed Mar 12 17:29:06 2003] [notice] Apache configured -- resuming normal operations
    [Wed Mar 12 17:29:06 2003] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
     
  2. kran

    kran Well-Known Member

    Joined:
    Jul 5, 2003
    Messages:
    74
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Colombia
    cPanel Access Level:
    Root Administrator
    I´m having the same issues

    Any one found the solution?
     
  3. Veiko

    Veiko Member

    Joined:
    Sep 22, 2004
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    same here, need to reboot every 36-48 hrs, I'm running rhel 3 as.
     
  4. dezignguy

    dezignguy Well-Known Member

    Joined:
    Sep 26, 2004
    Messages:
    534
    Likes Received:
    0
    Trophy Points:
    16
    Are you running the latest version of apache? 1.3.33?
    Do you see those mod_gzip errors too? I've never seen those before... the others all seem normal.
     
  5. sawbuck

    sawbuck Well-Known Member

    Joined:
    Jan 18, 2004
    Messages:
    1,367
    Likes Received:
    5
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    Some look very similar to errors I see in logcheck report generated by mod_security. Have you looked at installing it? http://modsecurity.org/
     
  6. Veiko

    Veiko Member

    Joined:
    Sep 22, 2004
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    I recompiled with latest apache and I didnt install mod_security.
     
  7. nsetiono

    nsetiono Active Member

    Joined:
    Mar 29, 2007
    Messages:
    36
    Likes Received:
    0
    Trophy Points:
    6
    you can disable mod_gzip module entirely like i had did it by editing httpd.conf or disable mod_gzip for sites with SSL
    with can be done like this

    <IfDefine SSL>
    .....
    <IfModule mod_gzip.c>
    mod_gzip_on No
    </IfModule>
    ...
    </IfDefine>
     
  8. jayh38

    jayh38 Well-Known Member

    Joined:
    Mar 3, 2006
    Messages:
    1,215
    Likes Received:
    0
    Trophy Points:
    36
    did you look at the date of this thread? its nearly 5 yrs old.
     
Loading...

Share This Page