Multiple /use/local/apache/htdocs/501.shtml requests

[John Bernier]

Hello,

I receiving multiple /use/local/apache/htdocs/501.shtml requests that are causing Apache to restart on my external web hosting VPS (GreenGeeks).

The strange thing is, that the requests are coming from my own Corporate Network!

What could be causing this, is one of the PC's or Mac's on my internal network infected??

[Wed Jul 29 04:21:29 2015] [error] [client 128.9.168.135] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:17:40 2015] [error] [client 198.83.85.47] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:03:03 2015] [error] [client 206.74.107.194] File does not exist: /usr/local/apache/htdocs/Diagnostics.asp
[Wed Jul 29 04:03:03 2015] [error] [client 206.74.107.194] File does not exist: /usr/local/apache/htdocs/Ringing.at.your.dorbell!, referer: http://google.com/search?q=2+guys+1+horse
[Wed Jul 29 04:02:24 2015] [error] [client 141.212.122.59] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:02:03 2015] [error] [client 141.212.122.59] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:59:40 2015] [error] [client 141.212.121.144] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:37:08 2015] [error] [client 134.117.226.181] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:33:19 2015] [error] [client 128.9.168.135] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:15:54 2015] [error] [client 141.212.122.3] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:14:04 2015] [notice] Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 configured -- resuming normal operations
[Wed Jul 29 03:10:57 2015] [error] [client 141.212.122.3] File does not exist: /usr/local/apache/htdocs/501.shtml

 

[cPanelMichael]

The strange thing is, that the requests are coming from my own Corporate Network!

Hello

To clarify, are the requests coming locally from the cPanel server, or do you mean from other IP addresses on the same network (but different servers/workstations)?

Thank you.

 

[John Bernier]

No, the requests are coming from the external IP of our Corporate Network

 

[cPanelMichael]

You may want to review those systems to determine why those outgoing connections are occurring. It's difficult to determine why a remote machine is making a connection attempt without actually logging into the system and reviewing it's outgoing traffic.

Thank you.