Re: Strange Apache logs - very slow loading time

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Apr 12, 2013, at 7:19 PM, Tom Evans <tevans.uk@xxxxxxxxxxxxxx> wrote:

> On Sat, Apr 13, 2013 at 1:12 AM, Karol Pomaski <karol.pomaski@xxxxxxxxx> wrote:
>> Hi All,
>> 
>> I need a help. I believe something is wrong. I have recently found a strange
>> information on my apache error.log:
>> 
>> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> root@ip-10-145-204-53:~# tail /var/www/shops/88/logs/error.log
>> [Sat Apr 13 00:08:28 2013] [error] [client 69.171.247.29] SSL Proxy
>> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
>> SSLProxyEngine]
>> [Sat Apr 13 00:08:28 2013] [error] proxy: HTTPS: failed to enable ssl
>> support for 69.171.247.29:443 (www.facebook.com)
>> [Sat Apr 13 00:08:28 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> [Sat Apr 13 00:08:29 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> [Sat Apr 13 00:08:30 2013] [error] [client 69.171.247.29] SSL Proxy
>> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
>> SSLProxyEngine]
>> [Sat Apr 13 00:08:30 2013] [error] proxy: HTTPS: failed to enable ssl
>> support for 69.171.247.29:443 (www.facebook.com)
>> [Sat Apr 13 00:08:31 2013] [error] [client 69.171.247.29] SSL Proxy
>> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
>> SSLProxyEngine]
>> [Sat Apr 13 00:08:31 2013] [error] proxy: HTTPS: failed to enable ssl
>> support for 69.171.247.29:443 (www.facebook.com)
>> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
>> attempt to connect to 107.6.106.10:80 (*) failed
>> 
>> And every second the errors are appearing. Is this some kind of DDos attack?
>> Or the apache is misconfigured?
>> How can I get rid of this problem?
>> 
>> Thank you very much for any help on this. This is a high priority issue.
>> 
>> Regards,
>> Karol
>> 
> 
> Er, check your access log very quickly. It looks like you are running
> a forward proxy that people are using to access the web.
> 
> Make sure you keep the logs, if they were up to anything malicious,
> you will need them to show the police that it wasn't you.
> 
> If you weren't intending on running a forward proxy, add
> "ProxyRequests off" *immediately* and restart.
> 
> Cheers
> 
> Tom
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 

Well I have already blocked the proxy and disabled to mod_proxy module but still the log appears


[Sat Apr 13 00:43:57 2013] [error] [client 198.136.28.2] File does not exist: /var/www/shops/88/store/creative, referer: http://www.hurricaneo.com/?paged=2
[Sat Apr 13 00:43:57 2013] [error] [client 142.4.118.22] File does not exist: /var/www/shops/88/store/ttj, referer: http://www.assumegame.com/play-39-Ace-Driver-game.html
[Sat Apr 13 00:43:57 2013] [error] [client 64.31.50.24] File does not exist: /var/www/shops/88/store/creative, referer: http://www.businessadonline.com/index.php?option=com_content&view=article&id=775:Nationwide-increases-ISA-rates-&catid=165
[Sat Apr 13 00:43:57 2013] [error] [client 198.200.33.200] File does not exist: /var/www/shops/88/store/ttj, referer: http://www.amountgame.com/game/play/264/30_Seconds.html
[Sat Apr 13 00:43:57 2013] [error] [client 199.19.111.25] File does not exist: /var/www/shops/88/store/creative, referer: http://www.ddmouse.com/cellphones/rim-opens-blackberry-10-app-submissions-engadget.html
[Sat Apr 13 00:43:57 2013] [error] [client 69.162.126.21] File does not exist: /var/www/shops/88/store/st, referer: http://www.barbiehumana.com/index.php?option=com_content&view=article&id=10771:TD-Bank-profit-rises-29-percent&catid=18&Itemid=9
[Sat Apr 13 00:43:57 2013] [error] [client 208.115.200.210] File does not exist: /var/www/shops/88/store/tt, referer: http://insurish.com/secrets-your-auto-insurance-company-doesnt-want-you-to-know.html
[Sat Apr 13 00:43:57 2013] [error] [client 198.136.30.195] File does not exist: /var/www/shops/88/store/453, referer: http://www.cbdsys.com/?p=175
[Sat Apr 13 00:43:57 2013] [error] [client 69.162.83.86] File does not exist: /var/www/shops/88/store/st, referer: http://domarketings.com/index.php?option=com_content&view=article&id=792:Online-Classified-Ads---A-Valuable-Tool-for-Both-Buyers-and-Sellers&catid=2:business
[Sat Apr 13 00:43:57 2013] [error] [client 198.100.110.36] File does not exist: /var/www/shops/88/store/servlet, referer: http://www.edu-information.com/?p=518
root@ip-10-145-204-53:/var/www/shops/88/logs# tail error.log 
[Sat Apr 13 00:43:57 2013] [error] [client 69.162.126.21] File does not exist: /var/www/shops/88/store/st, referer: http://www.barbiehumana.com/index.php?option=com_content&view=article&id=10771:TD-Bank-profit-rises-29-percent&catid=18&Itemid=9
[Sat Apr 13 00:43:57 2013] [error] [client 208.115.200.210] File does not exist: /var/www/shops/88/store/tt, referer: http://insurish.com/secrets-your-auto-insurance-company-doesnt-want-you-to-know.html
[Sat Apr 13 00:43:57 2013] [error] [client 198.136.30.195] File does not exist: /var/www/shops/88/store/453, referer: http://www.cbdsys.com/?p=175
[Sat Apr 13 00:43:57 2013] [error] [client 69.162.83.86] File does not exist: /var/www/shops/88/store/st, referer: http://domarketings.com/index.php?option=com_content&view=article&id=792:Online-Classified-Ads---A-Valuable-Tool-for-Both-Buyers-and-Sellers&catid=2:business
[Sat Apr 13 00:43:57 2013] [error] [client 198.100.110.36] File does not exist: /var/www/shops/88/store/servlet, referer: http://www.edu-information.com/?p=518
[Sat Apr 13 00:43:57 2013] [error] [client 192.74.231.26] File does not exist: /var/www/shops/88/store/ttj, referer: http://www.cleansleeping.com/games-893/2D-Knock-Out-game.html
[Sat Apr 13 00:43:57 2013] [error] [client 208.115.228.53] File does not exist: /var/www/shops/88/store/creative, referer: http://www.clubbyfinance.com/html/how-to-calculate-payment-factor.html/trackback
[Sat Apr 13 00:43:57 2013] [error] [client 199.19.111.24] File does not exist: /var/www/shops/88/store/creative, referer: http://www.yeahmu.com/?p=2211
[Sat Apr 13 00:43:57 2013] [error] [client 198.100.102.4] File does not exist: /var/www/shops/88/store/ttj, referer: http://www.Health-Advertise.com/category/conditions/mentalhealth/
[Sat Apr 13 00:43:57 2013] [error] [client 63.141.233.163] File does not exist: /var/www/shops/88/store/st, referer: http://gamefinan.com/?p=988#comments


I have no idea. It look like proxy but it shouldn't work because the mod_proxy and http_proxy are both disabled.

Regards,
Karol
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx






[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux