Worrying Apache Logs Showing 401s
Jun 3, 2008
I've just taken a look at the raw apache logs on my cpanel machine here:-
/usr/local/cpanel/logs/access_log
And there are many hundreds of these:-
127.0.0.1 - - [06/03/2008:21:55:22 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:21:55:22 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:03:42 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:03:42 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:12:02 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:12:02 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:20:22 -0000] "GET / HTTP/1." 401 0 "" ""
127.0.0.1 - - [06/03/2008:22:20:22 -0000] "GET / HTTP/1." 401 0 "" ""
what is happening to my server to generate these log entries?
View 4 Replies
ADVERTISEMENT
Mar 28, 2007
I just discovered this completely by accident on my new vps
visits (via apache) from 10.16.x.x and 10.28.x.x
These aren't backups but actual website visits.
What on earth is going on? Is my host browsing my website though their network?
Their behavior seems harmless but I just want to make sure this is not a security issue with a neighbor somehow doing something.
View 1 Replies
View Related
Jan 24, 2008
I have mod_security setup in WHM and am seeing a lot of these entries for various IP's.
Access denied with code 406 (phase 1). Match of "rx ^((?:(?:POS|GE)T|OPTIONS|HEAD))$" against "REQUEST_METHOD" required. [id "960032"] [msg "Method is not allowed by policy"] [severity "CRITICAL"]
View 7 Replies
View Related
Jan 9, 2008
My server is a dual cpu quad core box. So I see 8 processors in WHM status page. Load is between 1-2 most of the time, sometimes a little bit above 2.
I've never used a dual cpu quad core machine before. When should I start worrying about the server load? When load is above 8 or what?
View 7 Replies
View Related
Oct 19, 2007
php -v keep showing 4.4.7 even after i recompile apache as 5.0.4 via WHM > Apache Update. Any ideas how to fix this?
I am on the following server:
WHM 11.2.0 cPanel 11.11.0-S16999
CENTOS Enterprise 5 x86_64 - WHM X v3.1.0
./configure [@php-5.0.4]...(--enable-pic --with-libdir=lib64 --prefix=/usr --with-xml --with-mm --enable-bcmath --enable-calendar --with-curl --with-dom --with-dom-xslt --with-dom-exslt --enable-exif --with-swf=/usr/local/flash --enable-ftp --with-gd --with-jpeg-dir=/usr/local --with-png-dir=/usr --with-xpm-dir=/usr/X11R6 --with-gettext --with-imap=/usr/local/imap-2004g --enable-mbstring --enable-mbstr-enc-trans --enable-mbregex --with-mcrypt --with-mhash --enable-magic-quotes --with-mm --with-mysqli --with-mysql=/usr --with-snmp --enable-ucd-snmp-hack --with-openssl --enable-discard-path --with-pear --with-pspell --enable-safe-mode --enable-sockets --enable-track-vars --with-ttf --with-freetype-dir=/usr --enable-gd-native-ttf --enable-versioning --enable-wddx --with-xmlrpc --with-zip --with-zlib).... . . . . . . . . . . . . Done
configure: error: libXpm.(a|so) not found.
make [@php-5.0.4]...(-j 8 clean).... Done
make [@php-5.0.4]...(-j 8).... Done
make [@php-5.0.4]...(install).... Done
initfpsuexec: using apache 1.x support
PHP version file has been updated to 4.4.7
Adding cPanel default aliases ...disabled scgi-bin since suexec is installed
Done
Executing /scripts/postbuildapache (if exists)...Done
Configuring perl magic....Off
Configuring php-pear magic....Off
Configuring ruby magic....Off
Configuring php-pecl magic....Off
/etc/rc.d/init.d/httpd start: httpd started
initfpsuexec: using apache 1.x support
Attempting to restart httpd
Waiting for httpd to restart...
httpd started ok
View 2 Replies
View Related
Jan 28, 2008
Centos4/WHM/Apache 2.2.6/eaccelerator
My access_log is only showing entries like:
127.0.0.1 - - [28/Jan/2008:17:26:46 -0600] "GET / HTTP/1.0" 200 2860
127.0.0.1 - - [28/Jan/2008:17:27:30 -0600] "GET / HTTP/1.0" 200 2860
127.0.0.1 - - [28/Jan/2008:17:27:31 -0600] "GET / HTTP/1.0" 200 2860 ....
View 1 Replies
View Related
Apr 1, 2013
When I go to the [URL] ... is loads the index page just fine. When I go use the [URL] .... it still loads the index page, I don't want it to do that, I want it it to load test.php. When I click on a link (for say [URL] ....) on index.php the url stays as [URL] ....; I actually want it to show [URL] .... (while I test things at least). Is this a .htaccess issue?
View 2 Replies
View Related
May 29, 2009
since i take server i got a lot of errors on my apche logs when i post this command on my shell:-
Code:
tail -f /usr/local/apache/logs/error_log
will coming a lot & fast error and not stop until i stop the apache:-
Code:
[Fri May 29 11:37:52 2009] [error] [client 77.167.228.165] File does not exist: /usr/local/apache/htdocs/40E80014354C4C30365047322020202020202020202020206C0000004D6600000001760000005CEB000530E1E8EEF4
[Fri May 29 11:37:52 2009] [error] [client 89.215.36.123] File does not exist: /usr/local/apache/htdocs/40E80014202020202020465032443031324B3842364842456C000000446600000001760000005CEB000530797F848A
[Fri May 29 11:37:52 2009] [error] [client 93.185.179.132] File does not exist: /usr/local/apache/htdocs/40E800006C000001596600000001760000005CEB0005307587A8B4
every thing is ok but i need to remove this error and i can't under stand from where comming ! "/usr/local/apache/htdocs"
View 4 Replies
View Related
Feb 3, 2008
I'm sure this question has been asked before, but I'm looking for a nice and simply way of breaking up log files into smaller chunks.
I've been running apache2 on a VPS for the past few months and one of the access.log files is now 700mb big... bit of a waste of space. I'm currently just doing:
CustomLog /var/www/logs/domain.com/access.log combined
ErrorLog /var/www/logs/domain.com/error.log
In my apache config.
Is there any easy way of telling apache to just keep the last week or months worth of logs?
View 7 Replies
View Related
Apr 26, 2008
I use linux server with Cpanel control panel.
default default apache logs folder is in /usr/local/apache/logs/error_log
I want to monitor errors . How can I have an error log file for each individual domain?
View 3 Replies
View Related
Sep 18, 2007
How can I extract a list of visitor ip addresses from apache logs for a cpanel account?
are there any tools that will do a whois lookup for all the IP's?
View 2 Replies
View Related
Aug 15, 2007
I have a 2,3 and 5GB files that I need to download but everytime they appear as 1.4GB for some reason. I've tried IE, Mozilla and opera and the same result each time.
Is there some sort of limit to the size of a file that apache will serve?
View 4 Replies
View Related
Apr 30, 2015
I recently configured a Centos 6.5 server with Java JDK1.8 and the bundled Tomcat server X64 application. I confirmed the web server port is not already in use and also installed the Tomcat APR libraires. The application starts fine and all the logs show no severe errors however when I navigate to te URL I see a blank page. All the configuration files are in tthe correct place and whether I use just :8080 or /licenseserver the page is still blank. If I run the element inspector in the browser it shows 404 file not found.
View 2 Replies
View Related
Mar 20, 2007
I suspect that somebody is trying to do SQL injections on one of my websites. Is the POST information that is send using forms logged anywhere so I can read it in the same way I can read the GET requests in Apache logs?
View 6 Replies
View Related
Mar 23, 2015
Which method do you prefer for centralizing your logs: file monitoring or Pipe to Logger?
View 4 Replies
View Related
Jan 19, 2015
Sometimes when I try to restart Apache 2.4 using the supplied ApacheMonitor.exe I get this error. Then, I have to "taskkill /f /im httpd.exe" or wait like 30 sec before trying to start Apache again.
View 1 Replies
View Related
Aug 26, 2014
I have configure my Apache to create rotated logs for every periodic time. It worked fine with my local PC, but when it is being configured on to a server system, the actual error.log file is not being update, only the rotated logs are created. If i remove the Error Log command from httpd.conf for Error Log Rotation, again it works fine as usual.
View 1 Replies
View Related
Sep 27, 2014
I need to disable apache access logs. I commented out the access log path in /etc/httpd/conf/httpd.conf and restarted the server but it's still logging access.
View 3 Replies
View Related
May 3, 2013
How can i prevent error 302 in my site? for example, this [URL] .... is showing a status 200
But this same [URL] .... is showing me a status 302 (note the lack of forward slash)
Every folder in my site is showing this 302 error, so i tried to do a redirect in order to fix this, but its not working.
I think its the htaccess doing this kind of redirects in my hole site but I am new to this file, so i dont know how to fix this. Rules in my htaccess are here:
(I cant write into htaccess, but I can see the content of the file)...
RewriteCond %{HTTP_HOST} .
RewriteCond %{HTTP_HOST} !^www.saludymedicinas.com.mx [NC]
RewriteRule (.*) http://www.saludymedicinas.com.mx/$1 [R=301,L]
View 1 Replies
View Related
Aug 7, 2014
We have few application which serve static information to the users like excel sheet.
We used to place the .xls file in the docroot and it will be accessed using URL
for example, I'll place a file named test.xls and access it through [URL]
Problem here is if i modified the file content and accesed it through [URL] , it is showing the old content. New content is not displaying.
But the same if i did with .txt file , it showing the updated content for .txt file
Dont know why only xls files are not reflecting.
View 2 Replies
View Related
Dec 19, 2008
i have apache 2 and centos with plesk . when i see my apache error log it shows me :
[Fri Dec 19 05:56:35 2008] [error] [client ::1] Directory index forbidden by Options directive: /var/
www/html/
View 1 Replies
View Related
Jul 19, 2014
I'm trying to configure an custom access_log file for an custom file called "extra.php"
How I can make an log file that's log only "extra.php" ....
View 1 Replies
View Related
Jul 19, 2014
I'm trying to configure Apache logs to split logs files for every virtual host on the server
for example: {site1 .com} => copy access_log to /home/site1/public_html/logs {site2 .com} => copy access_log to /home/site2/public_html/logs .. {site3 .com} => copy access_log to /home/site3/public_html/logs
i want to also to make sure is the logs files updated in the real time
operating system is CentOs6, with Apache and cPanel
View 1 Replies
View Related
Jul 25, 2007
is it possiable to delete these files in the server access_logs and errors_logs
View 1 Replies
View Related
Nov 5, 2009
If you run into the fun error of Parallels VZA not showing your vps's
might try this
Code:
#
# Compatability fix for the vza from pim to vza
# Nicholas Rose nick.rose@nobistech.net
#
#updatedb
for i in `locate /ve.conf`; do
$vehost=`cat $i | grep HOSTNAME | grep HOSTNAME | awk -F '"' '{print $2}'`
sed -i 's/VE_TYPE="regular"//g' $i
echo 'VE_TYPE="regular"' >> $i
echo 'I just fixed '`cat $i | grep HOSTNAME | grep HOSTNAME | awk -F '"' '{print $2}'`
View 0 Replies
View Related
May 15, 2009
The vps has
256MB(512 burstable) of memory
10GB of HardDisk space
Using Lighttpd, PHP and MySQL
ControlPanel is LXAdmin
top - 05:59:24 up 36 min, 1 user, load average: 0.42, 0.60, 0.62
Tasks: 31 total, 1 running, 29 sleeping, 0 stopped, 1 zombie
Cpu(s): 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 1048576k total, 55216k used, 993360k free, 0k buffers
Swap: 0k total, 0k used, 0k free, 0k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1 root 15 0 1964 660 568 S 0 0.1 0:00.46 init
3922 root 15 0 7824 2104 1720 S 0 0.2 0:00.01 sshd
9868 root 15 0 2352 1272 1064 S 0 0.1 0:00.00 bash
11693 root 18 0 2104 1020 820 R 0 0.1 0:00.10 top
17861 root 16 0 1632 620 520 S 0 0.1 0:00.00 syslogd
17918 dbus 25 0 2636 468 328 S 0 0.0 0:00.00 dbus-daemon
17955 root 18 0 5116 956 644 S 0 0.1 0:00.00 sshd
18093 tinydns 18 0 1544 304 252 S 0 0.0 0:00.00 tinydns
18106 root 23 0 1596 372 308 S 0 0.0 0:00.00 tcpserver
18131 apache 18 0 8452 4276 812 S 0 0.4 0:02.27 lighttpd
18132 admin 15 0 38704 24m 6652 S 0 2.4 2:58.37 php-cgi
18224 addons 20 0 22024 8456 4572 S 0 0.8 0:00.01 php-cgi
18278 root 15 0 2348 1112 968 S 0 0.1 0:00.00 sh
19519 root 15 0 4032 1432 1172 S 0 0.1 0:00.00 lxadmin.exe
19557 root 17 0 2608 884 712 S 0 0.1 0:00.00 xinetd
19594 lxlabs 18 0 5364 2220 1160 S 0 0.2 0:00.13 lxadmin.httpd
19879 root 18 0 2344 1124 964 S 0 0.1 0:00.00 mysqld_safe
19921 mysql 15 0 13688 5240 3904 S 0 0.5 0:17.51 mysqld
20250 qmails 15 0 1804 476 372 S 0 0.0 0:00.00 qmail-send
20256 qmaill 18 0 1564 472 404 S 0 0.0 0:00.00 splogger
20260 root 22 0 1576 344 268 S 0 0.0 0:00.00 qmail-lspawn
20261 qmailr 15 0 1572 372 296 S 0 0.0 0:00.00 qmail-rspawn
20275 qmailq 18 0 1560 352 284 S 0 0.0 0:00.00 qmail-clean
21824 root 18 0 6200 1296 960 S 0 0.1 0:00.00 authdaemond
21828 root 15 0 1596 376 312 S 0 0.0 0:00.00 tcpserver
21834 root 25 0 1592 368 308 S 0 0.0 0:00.00 tcpserver
21838 root 18 0 6200 460 124 S 0 0.0 0:00.00 authdaemond
21842 root 18 0 1592 372 312 S 0 0.0 0:00.00 tcpserver
21861 root 25 0 1592 368 308 S 0 0.0 0:00.00 tcpserver
21890 root 18 0 3184 1108 576 S 0 0.1 0:00.00 crond
View 4 Replies
View Related
Jan 16, 2008
I just got an email from my vps saying that a BFD attack was stopped and the ip was banned after 40 failed attempts of logging into ftpdpro. I logged in and started looking around and I noticed that in my apf log file there was:
Code:
Jan 15 00:54:07 s1 apf(22290): {glob} firewall initalized
Jan 15 00:54:07 s1 apf(22290): {glob} fast load snapshot saved
Jan 15 00:58:06 s1 apf(32425): {glob} uptime less than 5 minutes, going full load
Jan 15 00:58:06 s1 apf(32425): {glob} activating firewall
Jan 15 00:58:06 s1 apf(32500): {glob} unable to load iptables module (ip_tables), aborting.
Jan 15 00:58:06 s1 apf(32425): {glob} firewall initalized
Jan 15 00:58:06 s1 apf(32425): {glob} fast load snapshot saved
Jan 15 01:00:04 s1 apf(3950): {glob} uptime less than 5 minutes, going full load
My concern is that it says "unable to load iptables module (ip_tables), aborting.
View 7 Replies
View Related
