Günde 5-10 Kez Apache Restart Atıyor

~~mobilist~~ · 1 17-08-2009, 14:23:49

Linux Virtuozzo VPS (centos 4.7) sunucum var. Her gün mail geliyor;

httpd failed @ xxx date. A restart was attempted automagically.
Service Check Method: [tcp connect]

Failure Reason: Unable to connect to port 80
şeklinde... Nadiren de diğer servislerde bu tür hatalar oluyor. Fakat apache'nin neden sürekli böyle yaptığını anlamıyorum. Apache log'larında da sıradığı bir durum göremedim. Saldırı da almıyorum. Hitim de 2000 civarında. Sizce sorun ne olabilir?

Bu arada 2 tane örnek kesinti anını ve kesintilerden hemen önceki logları
yazıyorum. Bir sorun göremedim ben loglarda. Yalnız dikkat ettim, kesinti anından (ya da reboot zamanı da olabilir bu bilmiyorum; e-postada yazan saat) 10 dk öncesine kadar falan apacheye erişim olmuyormuş.

Alıntı:

13:10:12
78.160.209.202 - - [17/Aug/2009:12:55:41 +0300] "GET /git-3954.html HTTP/1.1" 404 735 "avea iş - Google'da Ara" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 1.1.4322)"
72.30.142.105 - - [17/Aug/2009:12:56:17 +0300] "GET /turkcell.html?limitstart=20&limit=16 HTTP/1.0" 200 116 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; Yahoo!'s Web Crawler)"
209.202.168.78 - - [17/Aug/2009:12:56:30 +0300] "GET /git/gnctrkcll.html HTTP/1.0" 301 - "-" "GingerCrawler/1.0 (Language Assistant for Dyslexics; www.gingersoftware.com/crawler_agent.htm; support at ginger software dot com)"
72.30.142.105 - - [17/Aug/2009:13:10:42 +0300] "GET /index2.php?option=com_content&task=view&id=312&pop =1&page=0&Itemid=99 HTTP/1.0" 200 3124 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; Yahoo!'s Web Crawler)"
72.30.142.105 - - [17/Aug/2009:13:10:58 +0300] "GET /vodafone/vodafone-haberleri.html HTTP/1.0" 404 735 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; Yahoo!'s Web Crawler)"

10:39:42

88.244.173.159 - - [17/Aug/2009:10:21:54 +0300] "GET /cep-telefonlari/nokia/ HTTP/1.1" 200 44454 "http://www.*****.com/cep-telefonlari/nokia/nokia-n97.html" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2"
94.246.126.81 - - [17/Aug/2009:10:22:08 +0300] "POST /administrator/index.php HTTP/1.1" 301 3388 "http://www.*****.com/administrator/index2.php?option=com_*****&controller=category&ta sk=edit&cid[]=3&section_id=1" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:22:08 +0300] "GET /administrator/index.php?option=com_*****&controller=category&sec tion_id=1 HTTP/1.1" 200 59686 "http://www.*****.com/administrator/index2.php?option=com_*****&controller=category&ta sk=edit&cid[]=3&section_id=1" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:22:16 +0300] "GET /administrator/index.php?option=com_*****&controller=type HTTP/1.1" 200 52198 "http://www.*****.com/administrator/index.php?option=com_*****&controller=category&sec tion_id=1" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:22:18 +0300] "GET /administrator/components/com_*****/images/fields.png HTTP/1.1" 200 715 "http://www.*****.com/administrator/index.php?option=com_*****&controller=type" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:22:19 +0300] "GET /administrator/index2.php?option=com_*****&controller=type&task=e dit&cid[]=1 HTTP/1.1" 200 113966 "http://www.*****.com/administrator/index.php?option=com_*****&controller=type" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:22:29 +0300] "POST /administrator/index.php HTTP/1.1" 301 3384 "http://www.*****.com/administrator/index2.php?option=com_*****&controller=type&task=e dit&cid[]=1" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:22:29 +0300] "GET /administrator/index.php?option=com_*****&controller=type HTTP/1.1" 200 52198 "http://www.*****.com/administrator/index2.php?option=com_*****&controller=type&task=e dit&cid[]=1" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:22:45 +0300] "GET /administrator/index2.php?option=com_*****&controller=type&task=e dit&cid[]=3 HTTP/1.1" 200 113898 "http://www.*****.com/administrator/index.php?option=com_*****&controller=type" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:11 +0300] "GET /administrator/index.php?option=com_*****&controller=category&fil ter_catid=0 HTTP/1.1" 200 37730 "http://www.*****.com/administrator/index2.php?option=com_*****&controller=type&task=e dit&cid[]=3" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:19 +0300] "GET /administrator/index.php?option=com_sh404sef HTTP/1.1" 200 28273 "http://www.*****.com/administrator/index.php?option=com_*****&controller=category&fil ter_catid=0" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:22 +0300] "GET /administrator/index.php?option=com_sh404sef&task=view&viewmode=0 HTTP/1.1" 200 40290 "http://www.*****.com/administrator/index.php?option=com_sh404sef" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:26 +0300] "GET /administrator/index.php?option=com_modules HTTP/1.1" 200 74988 "http://www.*****.com/administrator/index.php?option=com_sh404sef&task=view&viewmode=0" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:32 +0300] "GET /administrator/index.php?option=com_sh404sef HTTP/1.1" 200 28273 "http://www.*****.com/administrator/index.php?option=com_modules" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:34 +0300] "GET /administrator/index.php?option=com_sh404sef&task=showconfig HTTP/1.1" 200 181058 "http://www.*****.com/administrator/index.php?option=com_sh404sef" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:53 +0300] "GET /administrator/templates/khepri/images/notice-alert.png HTTP/1.1" 200 973 "http://www.*****.com/administrator/index.php?option=com_sh404sef&task=showconfig" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:54 +0300] "GET /plugins/editors/fckeditor/editor/fckeditor.html?InstanceName=introtext&Toolbar=Adva nced HTTP/1.1" 200 12533 "http://www.*****.com/administrator/index.php?option=com_sh404sef&task=showconfig" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:54 +0300] "GET /includes/js/ThemeOffice/tooltip.png HTTP/1.1" 200 748 "http://www.*****.com/administrator/index.php?option=com_sh404sef&task=showconfig" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
94.246.126.81 - - [17/Aug/2009:10:23:55 +0300] "GET /plugins/editors/fckeditor/editor/jtoolbarsetconfig.xml HTTP/1.1" 304 - "http://www.*****.com/plugins/editors/fckeditor/editor/fckeditor.html?InstanceName=introtext&Toolbar=Adva nced" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00"
66.249.71.75 - - [17/Aug/2009:10:40:08 +0300] "GET /index.php?option=com_xmap&sitemap=1&view=xml&no_ht ml=1 HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"

Apache ayarlarım:

Alıntı:

Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
MinSpareServers 1
MaxSpareServers 3
StartServers 3
MaxClients 150
MaxRequestsPerChild 10000

Teşekkürler.

Teşekkürler.

swatemre · 2 17-08-2009, 15:45:07

Apache'yi tekrar derlemeyi dene. SSH'den root olarak giriş yap, /scripts/easyapache yaz ve 5. seçeneği seçip build on customized profile diye birşey var, ona tıklayıp gerekli eklentileri seç ve kur. Kurulumdan sonra httpd ve mysql restart at.

Creep · 3 17-08-2009, 18:26:23

tail -f /usr/local/apache/logs/error_log | grep -i error cevabını kopyalayın...

**HS_Abdullah** · 4 18-08-2009, 01:58:46

Belki kesin bir cozum olmayacak ancak httpd yi resetlemeyi cron haline getirin. Sorununuza cozum bulana kadar bunu yapmanizi tavsiye ederim.

~~mobilist~~ · 5 18-08-2009, 08:03:34

Alıntı:

HS_Abdullah Nickli Üyeden Alıntı

Belki kesin bir cozum olmayacak ancak httpd yi resetlemeyi cron haline getirin. Sorununuza cozum bulana kadar bunu yapmanizi tavsiye ederim.

httpd resetlendikten sonra zaten kendiliğinden yeniden başlıyor.

Diğer arkadaşların önerilerini deneyip sonucu buraya yazacağım.

~~mobilist~~ · 6 26-08-2009, 21:42:21

Apache Update yaptım, sorun düzelmedi. Bazen de spamd, ftp serverlar falan reset atıyor ama genelde httpd.

Alıntı:

Creep Nickli Üyeden Alıntı

tail -f /usr/local/apache/logs/error_log | grep -i error cevabını kopyalayın...

error
[Wed Aug 26 21:40:15 2009] [error] [client 94.54.35.18] File does not exist: /home/XXXXX/public_html/administrator/components/com_res/js, referer: http://www.XXXXX.com/incelemeler/cep...html?showall=1
[Wed Aug 26 21:40:15 2009] [error] [client 94.54.35.18] File does not exist: /home/XXXXX/public_html/404.shtml, referer: http://www.XXXXX.com/incelemeler/cep...html?showall=1
[Wed Aug 26 21:40:17 2009] [error] [client 94.120.76.127] File does not exist: /home/XXXXX/public_html/favicon.ico
[Wed Aug 26 21:40:17 2009] [error] [client 94.120.76.127] File does not exist: /home/XXXXX/public_html/404.shtml
[Wed Aug 26 21:40:35 2009] [error] [client 94.120.76.127] File does not exist: /home/XXXXX/public_html/administrator/components/com_res/js, referer: http://www.XXXXX.com/forum/melodiler...i-10-adet.html
[Wed Aug 26 21:40:35 2009] [error] [client 94.120.76.127] File does not exist: /home/XXXXX/public_html/404.shtml, referer: http://www.XXXXX.com/forum/melodiler...i-10-adet.html
[Wed Aug 26 21:40:35 2009] [error] [client 94.120.76.127] File does not exist: /home/XXXXX/public_html/administrator/components/com_res/js, referer: http://www.XXXXX.com/forum/melodiler...i-10-adet.html
[Wed Aug 26 21:40:35 2009] [error] [client 94.120.76.127] File does not exist: /home/XXXXX/public_html/404.shtml, referer: http://www.XXXXX.com/forum/melodiler...i-10-adet.html
[Wed Aug 26 21:40:59 2009] [error] [client 78.161.102.28] File does not exist: /home/XXXXX/public_html/administrator/components/com_res/js, referer: http://www.XXXXX.com/cep-telefonlari...nokia-n85.html
[Wed Aug 26 21:40:59 2009] [error] [client 78.161.102.28] File does not exist: /home/XXXXX/public_html/404.shtml, referer: http://www.XXXXX.com/cep-telefonlari...nokia-n85.html

Creep · 7 26-08-2009, 22:31:59

Hata kayıtları sadece bu kadar mı?

Sizden istediğim; Timeout ve MaxClient değerini yükseltin, KeepAliveTimeout değerini 1 olarak ayarlayın. Sanırım sorun, apache gelen talepleri karşılayamıyor ve talep zaman aşımına uğruyor. Bunu yaptktan sonra httpd yeniden başlatın ve ipcs -aqs cevabını kopyalayın...

~~mobilist~~ · 8 27-08-2009, 02:12:35

Alıntı:

Creep Nickli Üyeden Alıntı

Hata kayıtları sadece bu kadar mı?

Sizden istediğim; Timeout ve MaxClient değerini yükseltin, KeepAliveTimeout değerini 1 olarak ayarlayın. Sanırım sorun, apache gelen talepleri karşılayamıyor ve talep zaman aşımına uğruyor. Bunu yaptktan sonra httpd yeniden başlatın ve ipcs -aqs cevabını kopyalayın...

Tahmininize katılıyorum. Dediklerinizi yaptım. Çıktı sonucu:

Kod:

------ Shared Memory Segments --------
key        shmid      owner      perms      bytes      nattch     status
0x00000000 851968     root      600        524288     4          dest

------ Semaphore Arrays --------
key        semid      owner      perms      nsems
0x00000000 884736     nobody    600        1
0x00000000 917505     nobody    600        1
0x00000000 950274     nobody    600        1
0x00000000 983043     nobody    600        1
0x00000000 1081348    nobody    600        1
0x00000000 1114117    nobody    600        1
0x00000000 1146886    nobody    600        1
0x00000000 1179655    nobody    600        1
0x00000000 1277960    nobody    600        1
0x00000000 1310729    nobody    600        1
0x00000000 1343498    nobody    600        1
0x00000000 1376267    nobody    600        1
0x00000000 1474572    nobody    600        1
0x00000000 1507341    nobody    600        1
0x00000000 1540110    nobody    600        1
0x00000000 1572879    nobody    600        1
0x00000000 1671184    nobody    600        1
0x00000000 1703953    nobody    600        1
0x00000000 1736722    nobody    600        1
0x00000000 1769491    nobody    600        1
0x00000000 1867796    nobody    600        1
0x00000000 1900565    nobody    600        1
0x00000000 1933334    nobody    600        1
0x00000000 1966103    nobody    600        1
0x00000000 2064408    nobody    600        1
0x00000000 2097177    nobody    600        1
0x00000000 2129946    nobody    600        1
0x00000000 2162715    nobody    600        1
0x00000000 2261020    nobody    600        1
0x00000000 2293789    nobody    600        1
0x00000000 2326558    nobody    600        1
0x00000000 2359327    nobody    600        1
0x00000000 2457632    nobody    600        1
0x00000000 2490401    nobody    600        1
0x00000000 2523170    nobody    600        1
0x00000000 2555939    nobody    600        1
0x00000000 2654244    nobody    600        1
0x00000000 2687013    nobody    600        1
0x00000000 2719782    nobody    600        1
0x00000000 2752551    nobody    600        1
0x00000000 2850856    nobody    600        1
0x00000000 2883625    nobody    600        1
0x00000000 2916394    nobody    600        1
0x00000000 2949163    nobody    600        1
0x00000000 3047468    nobody    600        1
0x00000000 3080237    nobody    600        1
0x00000000 3113006    nobody    600        1
0x00000000 3145775    nobody    600        1
0x00000000 3244080    nobody    600        1
0x00000000 3276849    nobody    600        1
0x00000000 3309618    nobody    600        1
0x00000000 3342387    nobody    600        1
0x00000000 3440692    nobody    600        1
0x00000000 3473461    nobody    600        1
0x00000000 3506230    nobody    600        1
0x00000000 3538999    nobody    600        1
0x00000000 3637304    nobody    600        1
0x00000000 3670073    nobody    600        1
0x00000000 3702842    nobody    600        1
0x00000000 3735611    nobody    600        1
0x00000000 3833916    nobody    600        1
0x00000000 3866685    nobody    600        1
0x00000000 3899454    nobody    600        1
0x00000000 3932223    nobody    600        1
0x00000000 4030528    nobody    600        1
0x00000000 4063297    nobody    600        1
0x00000000 4096066    nobody    600        1
0x00000000 4128835    nobody    600        1
0x00000000 4227140    nobody    600        1
0x00000000 4259909    nobody    600        1
0x00000000 4292678    nobody    600        1
0x00000000 4325447    nobody    600        1
0x00000000 4423752    nobody    600        1
0x00000000 4456521    nobody    600        1
0x00000000 4489290    nobody    600        1
0x00000000 4522059    nobody    600        1
0x00000000 4620364    nobody    600        1
0x00000000 4653133    nobody    600        1
0x00000000 4685902    nobody    600        1
0x00000000 4718671    nobody    600        1

------ Message Queues --------
key        msqid      owner      perms      used-bytes   messages

Creep · 9 27-08-2009, 18:42:46

Harika. Bir süre izleyelim ve sonucu görelim...

~~tarikogut~~ · 10 28-08-2009, 00:46:22

botnet :P

Seçenekler
Yazdırılabilir şekli göster Sayfayı E-Mail olarak gönder