Multiple /use/local/apache/htdocs/501.shtml requests

John Bernier

Registered
Jul 29, 2015
2
0
1
Massachusetts
cPanel Access Level
Website Owner
Hello,

I receiving multiple /use/local/apache/htdocs/501.shtml requests that are causing Apache to restart on my external web hosting VPS (GreenGeeks).

The strange thing is, that the requests are coming from my own Corporate Network!

What could be causing this, is one of the PC's or Mac's on my internal network infected??


Code:
[Wed Jul 29 04:21:29 2015] [error] [client 128.9.168.135] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:17:40 2015] [error] [client 198.83.85.47] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:03:03 2015] [error] [client 206.74.107.194] File does not exist: /usr/local/apache/htdocs/Diagnostics.asp
[Wed Jul 29 04:03:03 2015] [error] [client 206.74.107.194] File does not exist: /usr/local/apache/htdocs/Ringing.at.your.dorbell!, referer: http://google.com/search?q=2+guys+1+horse
[Wed Jul 29 04:02:24 2015] [error] [client 141.212.122.59] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:02:03 2015] [error] [client 141.212.122.59] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:59:40 2015] [error] [client 141.212.121.144] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:37:08 2015] [error] [client 134.117.226.181] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:33:19 2015] [error] [client 128.9.168.135] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:15:54 2015] [error] [client 141.212.122.3] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:14:04 2015] [notice] Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 configured -- resuming normal operations
[Wed Jul 29 03:10:57 2015] [error] [client 141.212.122.3] File does not exist: /usr/local/apache/htdocs/501.shtml
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
The strange thing is, that the requests are coming from my own Corporate Network!
Hello :)

To clarify, are the requests coming locally from the cPanel server, or do you mean from other IP addresses on the same network (but different servers/workstations)?

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
You may want to review those systems to determine why those outgoing connections are occurring. It's difficult to determine why a remote machine is making a connection attempt without actually logging into the system and reviewing it's outgoing traffic.

Thank you.
 
  • Like
Reactions: alessiaal