Error Log full of File Not Found from various IPs

Rrrr7

Registered
Jan 13, 2013
2
0
1
cPanel Access Level
Website Owner
Hi,
I'm new here, this is my first post !
For a few days I;m experiencing some problems with my websites, the load very slow at random times and when accessed they produce high CPU usage as seen in cPanel. After investigating the problem with my webhoster and removing some plugins ( wordpress ) the problem seemed fixed but after only a couple of hours it started happening again and my webhost staff sees nothing wrong now, I'm stuck now with random slowdown on all of my websites.

What I noticed in my cPanel error log is that is filled with File Not Found errors to various files, most of them are 404.shtml and 403.shtml and also links to files that exists wich is weird. All of these entries go to all of my websites at once, from different IPs.

I wonder if you guys can help me figure out what these errors represent, is this some kind of attack or something else.
All of my websites use their own custom Not Found pages

Code:
2013-01-13 17:34:46.977 [INFO] [HTAccess] Updating configuration from [/home/user/sites/website3/wp-content/plugins/wp-minify/min/.htaccess]
2013-01-13 17:34:33.351 [INFO] [69.162.170.161:60987-0#APVH_website1.com] File not found [/home/user/public_html/403.shtml] 
2013-01-13 17:33:44.972 [INFO] [188.25.8.13:4280-0#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:33:44.283 [INFO] [109.103.1.155:1323-0#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:33:30.919 [INFO] [109.103.1.155:1291-0#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:33:08.376 [INFO] [HTAccess] Updating configuration from [/home/user/sites/twinweb/.htaccess]
2013-01-13 17:33:06.668 [INFO] [HTAccess] Updating configuration from [/home/user/sites/gweb/wp-content/w3tc/min/.htaccess]
2013-01-13 17:30:01.780 [INFO] [173.44.39.159:55895-0#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:30:01.771 [INFO] [173.44.39.159:55894-0#APVH_website4-color.website1.com] File not found [/home/user/sites/website4/403.shtml] 
2013-01-13 17:30:01.765 [INFO] [173.44.39.159:55893-0#APVH_website3.website1.com] File not found [/home/user/sites/website3/403.shtml] 
2013-01-13 17:30:01.758 [INFO] [173.44.39.159:55892-0#APVH_website5.website1.com] File not found [/home/user/website5/403.shtml] 
2013-01-13 17:27:50.399 [INFO] [HTAccess] Updating configuration from [/home/user/-host/.htaccess]
2013-01-13 17:25:01.972 [INFO] [173.44.39.159:53080-0#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:23:34.000 [INFO] [62.18.76.221:3362-1#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:23:33.290 [INFO] [62.18.76.221:3362-0#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:23:12.924 [INFO] [89.123.157.94:60205-1#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:23:12.568 [INFO] [89.123.157.94:60205-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:23:12.568 [INFO] [89.123.157.94:60205-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/jquery.cycle.js] 
2013-01-13 17:22:31.570 [INFO] [62.18.76.221:3283-1#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:22:29.760 [INFO] [62.18.76.221:3283-0#APVH_website6.website1.com] File not found [/home/user/website1.com/website6/403.shtml] 
2013-01-13 17:21:50.993 [INFO] [109.100.71.171:59987-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.992 [INFO] [109.100.71.171:59987-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/yukari/yukari.js] 
2013-01-13 17:21:50.792 [INFO] [109.100.71.171:59985-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.792 [INFO] [109.100.71.171:59985-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/common.js] 
2013-01-13 17:21:50.792 [INFO] [109.100.71.171:59984-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.792 [INFO] [109.100.71.171:59984-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/tabs.js] 
2013-01-13 17:21:50.791 [INFO] [109.100.71.171:59983-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.791 [INFO] [109.100.71.171:59983-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/colorbox/colorbox.css] 
2013-01-13 17:21:50.622 [INFO] [109.100.71.171:59979-1#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.622 [INFO] [109.100.71.171:59979-1#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/urgent_curier/autocomplete/ug_autocomplete.js] 
2013-01-13 17:21:50.612 [INFO] [109.100.71.171:59978-1#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.612 [INFO] [109.100.71.171:59978-1#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/yukari/yukari.css] 
2013-01-13 17:21:50.612 [INFO] [109.100.71.171:59977-1#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.612 [INFO] [109.100.71.171:59977-1#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/jquery.cycle.js] 
2013-01-13 17:21:50.444 [INFO] [109.100.71.171:59979-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.444 [INFO] [109.100.71.171:59979-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/colorbox/jquery.colorbox.js] 
2013-01-13 17:21:50.440 [INFO] [109.100.71.171:59978-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.440 [INFO] [109.100.71.171:59978-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/ui/themes/ui-lightness/jquery-ui-1.8.16.custom.css] 
2013-01-13 17:21:50.439 [INFO] [109.100.71.171:59977-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.439 [INFO] [109.100.71.171:59977-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/ui/external/jquery.cookie.js] 
2013-01-13 17:21:50.437 [INFO] [109.100.71.171:59976-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/404.shtml] 
2013-01-13 17:21:50.437 [INFO] [109.100.71.171:59976-0#APVH_website2.website1.com] File not found [/home/user/sites/website2/women/catalog/view/javascript/jquery/ui/jquery-ui-1.8.16.custom.min.js]
 
Last edited:

SB-Nick

Well-Known Member
Aug 26, 2008
175
9
68
cPanel Access Level
Root Administrator
Hi,

It could be anything, if you had WP plugin issues before I bet its still the same.
Install "iotop" and paste the output during the high load, the output of the following commands will also help,

# top -b -n 1
# ps aux
# netstat -tan | grep ':80 ' | awk '{print $6}' | sort | uniq -c
 

Rrrr7

Registered
Jan 13, 2013
2
0
1
cPanel Access Level
Website Owner
Hi,

It could be anything, if you had WP plugin issues before I bet its still the same.
Install "iotop" and paste the output during the high load, the output of the following commands will also help,

# top -b -n 1
# ps aux
# netstat -tan | grep ':80 ' | awk '{print $6}' | sort | uniq -c
Hi,
I am attaching the log file for the output of the above commands.

I'm still trying to figure out how to make iotop work, I get
Code:
Could not run iotop as some of the requirements are not met:
- Linux >= 2.6.20 with
  - VM event counters (CONFIG_VM_EVENT_COUNTERS)
I have Python 2.6.6 and kernel 2.6.32-379.14.1.lve1.1.9.9.el6.x86_64 ! Should I use an older version ?
 

Attachments

SB-Nick

Well-Known Member
Aug 26, 2008
175
9
68
cPanel Access Level
Root Administrator
Hi,

Dont bother in installing iotop, your server doesnt look overloaded or swapping at all so its definitely something else.

- Try disabling LiteSpeed and see if the issue persists.
- See if there are no LVE restriction for the domain.

If all the above is fine your server might be just asking for a server tweaking.