apache settings problem ??

MaRiOsGR66

• June 25, 2014 04:43

I have a problem with apache, it does by it self requests to a website and they are so many and so fast that it floods the server (and mysql) by it self 144.76.19.131 - - [25/Jun/2014:12:34:22 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:22 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:40 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:40 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:36:41 +0300] "GET //index.php?section=odyssey_index&view=en&langID=&session_data=c111688d5cb390d47441eaa53e3a826a HTTP/1.0" 302 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:41 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:42 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:42 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:44 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-" 144.76.19.131 - - [25/Jun/2014:12:34:45 +0300] "GET ///en/ HTTP/1.0" 200 - "-" "-"
only for 12:34:41 there were 29 requests. how can I fix this ?

• 

  cPanelMichael

  • June 25, 2014 12:55

  Hello :) To clarify, are you stating the IP address listed in that log output is the IP address of the server? Thank you.

  0
• 

  MaRiOsGR66

  • June 25, 2014 13:53

  [quote="cPanelMichael, post: 1673201">Hello :) To clarify, are you stating the IP address listed in that log output is the IP address of the server? Thank you.
  Hello Micahel, yes it is the ip of the server.

  0
• 

  cPanelMichael

  • June 26, 2014 16:14

  I moved this thread to the "Security" forum. You might receive more user-feedback on this type of question here. Thank you.

  0
• 

  quizknows

  • June 26, 2014 19:10

  Try changing the apache LogLevel from warn to debug in httpd.conf, restart apache and check the error log and access logs again. You may have a redirect loop or something else going on.

  0
• 

  SS-Maddy

  • June 27, 2014 09:05

  Check whether the values given for the server parameters such as Server Limit,Max Clients,Max Requests Per Child etc are optimized. You can compare it through the WHM interface Home -> Service Configuration -> Apache Configuration -> Global Configuration . If the issue persists, you may try switching the MPM to worker.

  0
• 

  quizknows

  • June 27, 2014 16:26

  [quote="SS-Maddy, post: 1674932">Check whether the values given for the server parameters such as Server Limit,Max Clients,Max Requests Per Child etc are optimized. You can compare it through the WHM interface Home -> Service Configuration -> Apache Configuration -> Global Configuration . If the issue persists, you may try switching the MPM to worker.
  This will not help track the source of requests coming from his own servers IP address.

  0
• 

  MaRiOsGR66

  • June 27, 2014 16:34

  thank you I will try that. [quote="quizknows, post: 1674571">Try changing the apache LogLevel from warn to debug in httpd.conf, restart apache and check the error log and access logs again. You may have a redirect loop or something else going on.
  [COLOR="silver">- - - Updated - - - they were the default but I've increased them just to see any difference. [COLOR="silver">- - - Updated - - - they were the default but I've increased them just to see any difference. [quote="SS-Maddy, post: 1674932">Check whether the values given for the server parameters such as Server Limit,Max Clients,Max Requests Per Child etc are optimized. You can compare it through the WHM interface Home -> Service Configuration -> Apache Configuration -> Global Configuration . If the issue persists, you may try switching the MPM to worker.
  

  0

Please sign in to leave a comment.