Home / server / Questions / 12486
Accepted
nedlud
Asked: 2009-05-27 21:34:52 +0800 CST

Apache errors?

  • 772

I'm a newbie to server admin, but I'm trying to get my head around our Apache server. I got a shock when I tried to tail the Apache error logs. Even after greping the logs so I was only seeing actual errors, I was getting about 1 error per second. The Apache Server Status page says the server is handling ~6.3 requests per second.

This seems like an insanely high rate of errors to me, but I'm unfamiliar with how most servers in the wild perform.

Am I looking at a server in desperate need of help (as I suspect)?

Or is this normal?

apache-2.2

3 Answers

  1. Best Answer

    If you're getting errors, then you need to fix the cause. If you're getting warnings that you don't want, then you need to fix the problems (or reduce the LogLevel)

    Without any more information (such as what errors you're seeing) it's impossible to give you any further assistance.

    • 1

  2. The "vti*" 404 responses are related to somebody attempting to access unprotected Microsoft (IE. SharePoint) content on your apache server. This is probably because they thought you were using an IIS front-end web server instead of apache.

    The "PHP Warnings" associated with "MySQL" and the "foreach()" queries, imply that somebody was attempting to perform SQL packet injections through common vulnerabilities found in PHP. These are techniques to gain information from a LAMP stack that is not up to date with security patches on either their MySQL DB, PHP or Apache version.

    All in all, it looks like somebody was attempting to crack your box with some basic vulnerabilities and failed.

    You may want to look into setting up some tighter security on your apache server, through mod_security, Deny/Allow directives, etc. Also, you may want to log the IP and host-name performing this vulnerability scan and setup an iptables rule to block it.

    • 1

  3. Please list the errors you are seeing. Generally, no it's not normal, ie "YOU'RE DOING IT RONG."

    More than likely you have a bad conf setting.

    • 0