Logwatch 404 and 503 Errors to external URLs

Discussion in 'Apache' started by diggde, Mar 11, 2015.

0
  1. #1
    Hi everybody,

    i used a little vServer with ubuntu (turnkey) and use logwatch to be informed by email about any errors. I'm confused about the following errors from Apache:

    --------------------- httpd Begin ------------------------
    Requests with error response codes
    404 Not Found
    http://translate.google.com/gen204: 1 Time(s)
    http://www.teddybrinkofski.com/ip_json.php: 1 Time(s)
    503 Service Unavailable
    http://www.google.com/: 1 Time(s)
    ---------------------- httpd End -------------------------

    These errors are definetly not from my own code. I have checked that mod_proxy is disabled and i disabled also CONNECT like here described: http://www.davekb.com/browse_computer_tips:logwatch_connection_attempts_using_mod_proxy:txt

    What does these errors mean and how can i disabled this?

    Thanks for help!
    Bye g.g.
     
    diggde, Mar 11, 2015 IP
  2. OlgaSeCom

    OlgaSeCom Active Member

    Messages:
    19
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    56
    #2
    It is difficult to give you a solution. To handle your problem I need to look on your server. You can contact me at skype secom.support and I may help you
     
    OlgaSeCom, Mar 11, 2015 IP
  3. postcd

    postcd Well-Known Member

    Messages:
    1,043
    Likes Received:
    9
    Best Answers:
    1
    Trophy Points:
    190
    #3
    What about trying to discover your HTTPd logfile path (the one from which logwatch reading above mentioned data)
    and then seeing more details. Maybe we all can better read standard apache/httpd log file than obove logwatch code?

    cat /path/to/logfile | grep gen204
     
    postcd, Mar 12, 2015 IP
  4. diggde

    diggde Peon

    Messages:
    3
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #4
    Hi, yes you are right. Here are the related lines from the logs:

    localhost:3128 93.174.93.98 - - [09/Mar/2015:16:51:26 +0100] "HEAD http://translate.google.com/gen204 HTTP/1.1" 404 163 "-" "Firefox"
    [Mon Mar 09 16:51:26 2015] [error] [client 93.174.93.98] File does not exist: /var/www/public/gen204

    localhost:3128 179.99.200.39 - - [09/Mar/2015:19:00:24 +0100] "GET http://www.teddybrinkofski.com/ip_json.php HTTP/1.1" 404 458 "none" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)"
    [Mon Mar 09 19:00:24 2015] [error] [client 179.99.200.39] script '/var/www/public/ip_json.php' not found or unable to stat, referer: none

    localhost:3128 115.197.112.87 - - [09/Mar/2015:01:58:00 +0100] "GET http://www.google.com/ HTTP/1.0" 503 1195 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
     
    diggde, Mar 12, 2015 IP
  5. diggde

    diggde Peon

    Messages:
    3
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #5
    The final answer is: yes, the proxy is disabled. Thats why apache try to find the requested files on the local storage. This results in 403 (forbidden) or 404 (not found) errors.
     
    diggde, Mar 17, 2015 IP