Multiple /use/local/apache/htdocs/501.shtml requests

Hello, I receiving multiple /use/local/apache/htdocs/501.shtml requests that are causing Apache to restart on my external web hosting VPS (GreenGeeks). The strange thing is, that the requests are coming from my own Corporate Network! What could be causing this, is one of the PC's or Mac's on my internal network infected??

[Wed Jul 29 04:21:29 2015] [error] [client 128.9.168.135] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:17:40 2015] [error] [client 198.83.85.47] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:03:03 2015] [error] [client 206.74.107.194] File does not exist: /usr/local/apache/htdocs/Diagnostics.asp
[Wed Jul 29 04:03:03 2015] [error] [client 206.74.107.194] File does not exist: /usr/local/apache/htdocs/Ringing.at.your.dorbell!, referer: http://google.com/search?q=2+guys+1+horse
[Wed Jul 29 04:02:24 2015] [error] [client 141.212.122.59] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 04:02:03 2015] [error] [client 141.212.122.59] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:59:40 2015] [error] [client 141.212.121.144] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:37:08 2015] [error] [client 134.117.226.181] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:33:19 2015] [error] [client 128.9.168.135] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:15:54 2015] [error] [client 141.212.122.3] File does not exist: /usr/local/apache/htdocs/501.shtml
[Wed Jul 29 03:14:04 2015] [notice] Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 configured -- resuming normal operations
[Wed Jul 29 03:10:57 2015] [error] [client 141.212.122.3] File does not exist: /usr/local/apache/htdocs/501.shtml

cPanelMichael

August 12, 2015 16:57

The strange thing is, that the requests are coming from my own Corporate Network!

Hello :) To clarify, are the requests coming locally from the cPanel server, or do you mean from other IP addresses on the same network (but different servers/workstations)? Thank you.

John Bernier

August 12, 2015 17:29

No, the requests are coming from the external IP of our Corporate Network

August 12, 2015 18:32

You may want to review those systems to determine why those outgoing connections are occurring. It's difficult to determine why a remote machine is making a connection attempt without actually logging into the system and reviewing it's outgoing traffic. Thank you.

Multiple /use/local/apache/htdocs/501.shtml requests

Comments

Didn't find what you were looking for?