Апач медленно но верно съедает всю оперативу VPS (и сервак перестает отвечать)

Обсуждение настройки и работы сервисов, резервирования, сетевых настроек и вопросов безопасности ОС для молодых и начинающих системных администраторов.

Модераторы: SLEDopit, Модераторы разделов

Аватара пользователя
Deo
Сообщения: 365
ОС: openSuse 12.3

Апач медленно но верно съедает всю оперативу VPS

Сообщение Deo »

Угораздило меня внештатно и на общественных началах соадминить VPS на CentOS
Контейнеру выделено 512 Метров оперативы, на нем крутится 6й Дрюпал, Gallery2, Simple Machines forum

В сентОСе все древнее, поэтому я подключил репозиторий utterramblings Джейсона Литки и обновил оттуда ПХП до 5.2
и httpd до 2.2.8
Также стоит ACP из Пекла

Раз в неделю-две апач приходится останавливать и пускать заново, так как все приходит к вот такому грустному виду:

Код: Выделить всё

USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.1  10344   732 ?        Ss   Aug16   0:08 init [3]
root      1716  0.0  0.1  60672  1180 ?        Ss   Aug16   0:01 /usr/sbin/sshd
qmails    3867  0.0  0.0   3848   540 ?        S    Aug16   0:00 qmail-send
qmaill    3869  0.0  0.0   3792   532 ?        S    Aug16   0:00 splogger qmail
root      3870  0.0  0.0   3836   440 ?        S    Aug16   0:00 qmail-lspawn | /usr/bin/deliverquota ./Maildir
qmailr    3871  0.0  0.0   3832   464 ?        S    Aug16   0:00 qmail-rspawn
qmailq    3872  0.0  0.0   3788   420 ?        S    Aug16   0:00 qmail-clean
root      3929  0.0  0.1  40916   944 ?        S    Aug16   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger
root      3931  0.0  0.2  33608  1428 ?        S    Aug16   0:00 /usr/sbin/courierlogger imapd
root      3939  0.0  0.1  40916   940 ?        S    Aug16   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger
root      3941  0.0  0.2  33604  1428 ?        S    Aug16   0:00 /usr/sbin/courierlogger imapd-ssl
root      3947  0.0  0.1  40920   952 ?        S    Aug16   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger
root      3949  0.0  0.2  33604  1480 ?        S    Aug16   0:00 /usr/sbin/courierlogger pop3d
root      3956  0.0  0.1  40916   940 ?        S    Aug16   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger
root      3958  0.0  0.2  33608  1428 ?        S    Aug16   0:00 /usr/sbin/courierlogger pop3d-ssl
500       5201  0.0  0.4  60124  2728 ?        S    Aug16   0:01 /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
drweb     5433  0.0  4.9  34760 29960 ?        S    12:00   0:00 drwebd.real
drweb     5434  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5435  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5436  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5437  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5438  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5439  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5440  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5441  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5442  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5443  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5444  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5445  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5446  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5447  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
drweb     5448  0.0  4.9  34760 29964 ?        S    12:00   0:00 drwebd.real
named    13403  0.0  0.5 184360  3548 ?        Ssl  Aug16   0:01 /usr/sbin/named -u named -c /etc/named.conf -u named -t /v
root     17978  0.0  0.6  94500  3952 ?        Rs   14:14   0:00 sshd: root@pts/0
root     18019  0.0  0.2  12192  1744 pts/0    Ss   14:14   0:00 -bash
root     19899  0.0  0.1  12604   644 ?        S<s  Aug16   0:00 /sbin/udevd -d
root     20358  0.0  0.1  21640   944 ?        Ss   Aug16   0:01 xinetd -stayalive -pidfile /var/run/xinetd.pid
root     21624  0.0  0.2  10760  1252 ?        S    Aug16   0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --so
mysql    21684  0.7  4.8 308424 29052 ?        Sl   Aug16  28:45 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysq
postgres 21762  0.0  0.6  65436  4024 ?        S    Aug16   0:00 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data
postgres 21868  0.0  0.1  54612  1028 ?        S    Aug16   0:15 postgres: logger process
drweb    21873  0.1  5.1  34760 31288 ?        Ss   Aug16   4:33 drwebd.real
postgres 21874  0.0  0.2  65436  1236 ?        S    Aug16   0:35 postgres: writer process
postgres 21875  0.0  0.1  55616   956 ?        S    Aug16   0:02 postgres: stats buffer process
postgres 21876  0.0  0.1  54852  1156 ?        S    Aug16   0:00 postgres: stats collector process
root     21943  0.0  0.1  19708  1148 ?        Ss   Aug16   0:01 crond
root     21953  0.0  0.1  46732   808 ?        Ss   Aug16   0:00 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
root     21954  0.0  0.0  46732   556 ?        S    Aug16   0:00 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
root     28131  0.0  0.1   6420  1104 ?        Ss   Aug16   0:04 syslogd -m 0
root     28399  3.2  3.0 361048 18672 ?        Ss   14:19   0:00 httpd -k start
apache   28417  0.0  1.2 233316  7544 ?        S    14:19   0:00 httpd -k start
apache   28449 68.0 13.4 408504 81200 ?        R    14:19   0:00 httpd -k start
root     28471  0.0  0.1  10456   900 pts/0    R+   14:19   0:00 ps -aux

~#apachectl -t
Syntax OK


Подскажите, куда рыть, пожалуйста
моё любимое облачко
Фхтагн! Мозг! Ням-ням! ~ Ктулху про Ленина
Спасибо сказали:
neol
Сообщения: 600
ОС: Debian Stable

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение neol »

В вашем грустном виде почти всю память кушает drweb.
Спасибо сказали:
kosteel
Сообщения: 330
Статус: Root Lamer
ОС: Debian GNU/Linux 5.02 amd64

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение kosteel »

В вашем грустном виде почти всю память кушает drweb.

глянь на апач, он 68% CPU кушает и 13 метров из оперативы
to Deo
покажите лог апача на момент повисает (access.log и errors.log)
Ничто не вечно под рутом
Спасибо сказали:
Аватара пользователя
oper777
Сообщения: 411
ОС: gentoo

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение oper777 »

kosteel писал(а):
20.08.2009 20:11
глянь на апач, он 68% CPU кушает и 13 метров из оперативы


А drweb в приведенном листнге кушает 83,5% (427,52 метров), если я не туплю конечно.
Спасибо сказали:
watashiwa_daredeska
Бывший модератор
Сообщения: 4038
Статус: Искусственный интеллект (pre-alpha)
ОС: Debian GNU/Linux

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение watashiwa_daredeska »

oper777 писал(а):
21.08.2009 10:59
А drweb в приведенном листнге кушает 83,5%
Скорее всего, меньше. Сильно меньше. Все-таки, COW.
Спасибо сказали:
Аватара пользователя
Deo
Сообщения: 365
ОС: openSuse 12.3

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение Deo »

снес докторвеба, стало легче, но не очень

Код: Выделить всё

# ps -aux
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.1  10344   732 ?        Ss   08:44   0:00 init [3]
root     19562  0.0  3.0 360644 18636 ?        Ss   09:05   0:00 /usr/sbin/httpd
apache   19572  0.0  1.2 233936  7552 ?        S    09:05   0:00 /usr/sbin/httpd
apache   19573  0.4 15.6 419660 94360 ?        S    09:05   0:13 /usr/sbin/httpd
apache   19580  0.5 15.8 419644 95432 ?        S    09:05   0:14 /usr/sbin/httpd
apache   19595  0.4 14.2 412460 85968 ?        S    09:41   0:02 /usr/sbin/httpd
apache   19596  0.5 15.9 419660 96156 ?        S    09:05   0:14 /usr/sbin/httpd
apache   19598  0.6 15.9 420684 96200 ?        S    09:05   0:16 /usr/sbin/httpd
apache   19599  0.6 15.9 420684 95908 ?        S    09:05   0:15 /usr/sbin/httpd
apache   19600  0.5 15.6 419660 94172 ?        S    09:05   0:13 /usr/sbin/httpd
apache   19601  0.7 15.8 419660 95488 ?        S    09:05   0:18 /usr/sbin/httpd
apache   19605  0.5 15.8 420684 95660 ?        S    09:05   0:15 /usr/sbin/httpd
apache   19606  0.5 15.9 420684 96324 ?        S    09:05   0:13 /usr/sbin/httpd
root     25882  0.0  0.6  94500  4056 ?        Ss   09:48   0:00 sshd: root@pts/0
root     25899  0.0  0.2  12068  1732 pts/0    Ss   09:48   0:00 -bash
root     27799  0.0  0.1  12600   644 ?        S<s  08:44   0:00 /sbin/udevd -d
root     28244  0.0  0.0   5908   600 ?        Ss   08:44   0:00 syslogd -m 0
500      28266  0.0  0.4  59864  2488 ?        S    08:44   0:00 /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
root     28278  0.0  0.1  60528  1180 ?        Ss   08:44   0:00 /usr/sbin/sshd
root     28293  0.0  0.1  21640   920 ?        Ss   08:44   0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid
root     28312  0.0  0.1  40920   948 ?        S    08:44   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrlo
root     28314  0.0  0.2  33608  1432 ?        S    08:44   0:00 /usr/sbin/courierlogger imapd
root     28322  0.0  0.1  40920   948 ?        S    08:44   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrlo
root     28324  0.0  0.2  33604  1428 ?        S    08:44   0:00 /usr/sbin/courierlogger imapd-ssl
root     28332  0.0  0.1  40916   944 ?        S    08:44   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrlo
root     28336  0.0  0.2  33608  1432 ?        S    08:44   0:00 /usr/sbin/courierlogger pop3d
root     28343  0.0  0.1  40920   948 ?        S    08:44   0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrlo
root     28345  0.0  0.2  33604  1428 ?        S    08:44   0:00 /usr/sbin/courierlogger pop3d-ssl
qmails   28368  0.0  0.0   3848   456 ?        S    08:44   0:00 qmail-send
qmaill   28370  0.0  0.0   3796   536 ?        S    08:44   0:00 splogger qmail
root     28371  0.0  0.0   3836   436 ?        S    08:44   0:00 qmail-lspawn | /usr/bin/deliverquota ./Maildir
qmailr   28372  0.0  0.0   3836   444 ?        S    08:44   0:00 qmail-rspawn
qmailq   28373  0.0  0.0   3792   412 ?        S    08:44   0:00 qmail-clean
named    28443  0.0  0.5 118820  3544 ?        Ssl  08:44   0:00 /usr/sbin/named -u named -c /etc/named.conf -u named -t /var/named/run-root
root     28504  0.0  0.2  10764  1264 ?        S    08:44   0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --l
mysql    28578  0.5  3.5 231076 21196 ?        Sl   08:44   0:20 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run
root     28626  0.0  0.1  10456   900 pts/0    R+   09:50   0:00 ps -aux
postgres 28666  0.0  0.6  65432  4028 ?        S    08:44   0:00 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data
postgres 29697  0.0  0.1  54612   956 ?        S    08:44   0:00 postgres: logger process
postgres 29701  0.0  0.2  65432  1236 ?        S    08:44   0:00 postgres: writer process
postgres 29702  0.0  0.1  55612   952 ?        S    08:44   0:00 postgres: stats buffer process
postgres 29703  0.0  0.1  54848  1152 ?        S    08:44   0:00 postgres: stats collector process
root     29884  0.0  0.1  19708  1140 ?        Ss   08:44   0:00 crond
root     29899  0.0  0.1  46728   804 ?        Ss   08:44   0:00 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
root     29900  0.0  0.0  46728   556 ?        S    08:44   0:00 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2

Логи чуть позже выложу
моё любимое облачко
Фхтагн! Мозг! Ням-ням! ~ Ктулху про Ленина
Спасибо сказали:
Аватара пользователя
dobs
Сообщения: 175
ОС: Fedora

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение dobs »

Юзай nginx + апач (если на сайте много статики....)
Home server
Latest Fedora
MB Intel BLKD945GCLF2 Atom 330
2 Gb RAM
500 GB RAID 1
Smolts
Linux registered user #545937
Спасибо сказали:
Аватара пользователя
Deo
Сообщения: 365
ОС: openSuse 12.3

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение Deo »

error_log

Код: Выделить всё

[root@morok logs]# cat error_log | tail -n 100
[Sat Sep 05 11:49:39 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ZxMCQEj5TYwAAA-1vDoAAAAF"]
[Sat Sep 05 11:49:39 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ZxMCQEj5TYwAAA-1vDoAAAAF"]
[Sat Sep 05 11:49:39 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ZxQo0Ej5TYwAAA-1vDsAAAAF"]
[Sat Sep 05 11:49:39 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ZxQo0Ej5TYwAAA-1vDsAAAAF"]
[Sat Sep 05 11:49:39 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "Zxa@Zkj5TYwAAA-1vD8AAAAF"]
[Sat Sep 05 11:49:39 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "Zxa@Zkj5TYwAAA-1vD8AAAAF"]
[Sat Sep 05 11:49:53 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "Z9@3Zkj5TYwAAA-1vEgAAAAF"]
[Sat Sep 05 11:49:53 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "Z9@3Zkj5TYwAAA-1vEgAAAAF"]
[Sat Sep 05 11:49:53 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "Z@XaXkj5TYwAAA-1vEwAAAAF"]
[Sat Sep 05 11:49:53 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "Z@XaXkj5TYwAAA-1vEwAAAAF"]
[Sat Sep 05 11:50:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aMPNbUj5TYwAAB2EywoAAAAD"]
[Sat Sep 05 11:50:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aMPNbUj5TYwAAB2EywoAAAAD"]
[Sat Sep 05 11:50:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aMVY7Ej5TYwAAB2EywwAAAAD"]
[Sat Sep 05 11:50:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aMVY7Ej5TYwAAB2EywwAAAAD"]
[Sat Sep 05 11:50:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aM5J-Uj5TYwAAB2EyxIAAAAD"]
[Sat Sep 05 11:50:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aM5J-Uj5TYwAAB2EyxIAAAAD"]
[Sat Sep 05 11:50:09 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aNNr@kj5TYwAAB2EyxUAAAAD"]
[Sat Sep 05 11:50:09 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aNNr@kj5TYwAAB2EyxUAAAAD"]
[Sat Sep 05 11:50:21 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aYsMxUj5TYwAAB2L0AgAAAAI"]
[Sat Sep 05 11:50:21 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aYsMxUj5TYwAAB2L0AgAAAAI"]
[Sat Sep 05 11:50:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aZ2IOUj5TYwAAB2JzcoAAAAG"]
[Sat Sep 05 11:50:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "aZ2IOUj5TYwAAB2JzcoAAAAG"]
[Sat Sep 05 11:50:28 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "agConkj5TYwAABQOvQYAAAAJ"]
[Sat Sep 05 11:50:28 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "agConkj5TYwAABQOvQYAAAAJ"]
[Sat Sep 05 11:50:33 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ak4xd0j5TYwAAB2Kzx0AAAAH"]
[Sat Sep 05 11:50:33 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ak4xd0j5TYwAAB2Kzx0AAAAH"]
[Sat Sep 05 11:50:33 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ak8u2Ej5TYwAAA-1vFEAAAAF"]
[Sat Sep 05 11:50:33 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ak8u2Ej5TYwAAA-1vFEAAAAF"]
[Sat Sep 05 11:50:34 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "alAxyEj5TYwAAA-1vFIAAAAF"]
[Sat Sep 05 11:50:34 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "alAxyEj5TYwAAA-1vFIAAAAF"]
[Sat Sep 05 11:50:34 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "altjD0j5TYwAAA-1vFQAAAAF"]
[Sat Sep 05 11:50:34 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "altjD0j5TYwAAA-1vFQAAAAF"]
[Sat Sep 05 11:52:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "cMjWQUj5TYwAAB2L0A4AAAAI"]
[Sat Sep 05 11:52:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "cMjWQUj5TYwAAB2L0A4AAAAI"]
[Sat Sep 05 11:52:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "cMy44kj5TYwAAB2L0A8AAAAI"]
[Sat Sep 05 11:52:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "cMy44kj5TYwAAB2L0A8AAAAI"]
[Sat Sep 05 11:53:02 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "cywJFUj5TYwAABQOvQ4AAAAJ"]
[Sat Sep 05 11:53:02 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "cywJFUj5TYwAABQOvQ4AAAAJ"]
[Sat Sep 05 11:53:21 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dFBXGkj5TYwAABVdw-0AAAAA"]
[Sat Sep 05 11:53:21 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dFBXGkj5TYwAABVdw-0AAAAA"]
[Sat Sep 05 11:53:55 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dlQOckj5TYwAAA-1vFgAAAAF"]
[Sat Sep 05 11:53:55 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dlQOckj5TYwAAA-1vFgAAAAF"]
[Sat Sep 05 11:53:55 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dlbjckj5TYwAAA-1vFkAAAAF"]
[Sat Sep 05 11:53:55 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dlbjckj5TYwAAA-1vFkAAAAF"]
[Sat Sep 05 11:54:07 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dwm8UEj5TYwAABVhxNYAAAAB"]
[Sat Sep 05 11:54:07 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dwm8UEj5TYwAABVhxNYAAAAB"]
[Sat Sep 05 11:54:07 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dw8EtUj5TYwAABVhxNkAAAAB"]
[Sat Sep 05 11:54:07 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dw8EtUj5TYwAABVhxNkAAAAB"]
[Sat Sep 05 11:54:10 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dzH7sUj5TYwAAB2EyxgAAAAD"]
[Sat Sep 05 11:54:10 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "dzH7sUj5TYwAAB2EyxgAAAAD"]
[Sat Sep 05 11:54:28 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "eERNJUj5TYwAAB2IzFkAAAAE"]
[Sat Sep 05 11:54:28 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "eERNJUj5TYwAAB2IzFkAAAAE"]
[Sat Sep 05 11:54:28 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "eEmRbkj5TYwAAB2IzF0AAAAE"]
[Sat Sep 05 11:54:28 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "eEmRbkj5TYwAAB2IzF0AAAAE"]
[Sat Sep 05 11:55:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "e4ZGIEj5TYwAABVdxAEAAAAA"]
[Sat Sep 05 11:55:22 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "e4ZGIEj5TYwAABVdxAEAAAAA"]
[Sat Sep 05 11:56:12 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "fnvfR0j5TYwAABVhxOEAAAAB"]
[Sat Sep 05 11:56:12 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "fnvfR0j5TYwAABVhxOEAAAAB"]
[Sat Sep 05 11:56:24 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "fzUZ1kj5TYwAAB2JzdIAAAAG"]
[Sat Sep 05 11:56:24 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "fzUZ1kj5TYwAAB2JzdIAAAAG"]
[Sat Sep 05 11:56:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "fz3WKEj5TYwAAB2JzdUAAAAG"]
[Sat Sep 05 11:56:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "fz3WKEj5TYwAAB2JzdUAAAAG"]
[Sat Sep 05 11:56:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "f0A9VUj5TYwAAB2JzdYAAAAG"]
[Sat Sep 05 11:56:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "f0A9VUj5TYwAAB2JzdYAAAAG"]
[Sat Sep 05 11:56:29 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "f3pMmUj5TYwAAB2IzGAAAAAE"]
[Sat Sep 05 11:56:29 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "f3pMmUj5TYwAAB2IzGAAAAAE"]
[Sat Sep 05 11:56:30 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/forum//poll/errors.php"] [unique_id "f5I@dkj5TYwAAB2IzGIAAAAE"]
[Sat Sep 05 11:56:30 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_35_bad_robots.conf"] [line "29"] [id "990011"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [tag "AUTOMATION/MISC"] [hostname "morok.ru"] [uri "/forum//poll/errors.php"] [unique_id "f5I@dkj5TYwAAB2IzGIAAAAE"]
[Sat Sep 05 11:56:30 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/poll/errors.php"] [unique_id "f5a8s0j5TYwAAB2IzGMAAAAE"]
[Sat Sep 05 11:56:30 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_35_bad_robots.conf"] [line "29"] [id "990011"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [tag "AUTOMATION/MISC"] [hostname "morok.ru"] [uri "/poll/errors.php"] [unique_id "f5a8s0j5TYwAAB2IzGMAAAAE"]
[Sat Sep 05 11:56:31 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/forum/index.php"] [unique_id "f5piF0j5TYwAAB2IzGQAAAAE"]
[Sat Sep 05 11:56:31 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_35_bad_robots.conf"] [line "29"] [id "990011"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [tag "AUTOMATION/MISC"] [hostname "morok.ru"] [uri "/forum/index.php"] [unique_id "f5piF0j5TYwAAB2IzGQAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/poll/errors.php"] [unique_id "f6uzt0j5TYwAAB2IzGYAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_35_bad_robots.conf"] [line "29"] [id "990011"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [tag "AUTOMATION/MISC"] [hostname "morok.ru"] [uri "/poll/errors.php"] [unique_id "f6uzt0j5TYwAAB2IzGYAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/forum/index.php"] [unique_id "f6v3PEj5TYwAAB2IzGcAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_35_bad_robots.conf"] [line "29"] [id "990011"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [tag "AUTOMATION/MISC"] [hostname "morok.ru"] [uri "/forum/index.php"] [unique_id "f6v3PEj5TYwAAB2IzGcAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/forum//poll/errors.php"] [unique_id "f7FVEEj5TYwAAB2IzGgAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 124.1.246.2] ModSecurity: Warning. Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_35_bad_robots.conf"] [line "29"] [id "990011"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [tag "AUTOMATION/MISC"] [hostname "morok.ru"] [uri "/forum//poll/errors.php"] [unique_id "f7FVEEj5TYwAAB2IzGgAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "f7FzHEj5TYwAAB2IzGkAAAAE"]
[Sat Sep 05 11:56:32 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "f7FzHEj5TYwAAB2IzGkAAAAE"]
[Sat Sep 05 11:58:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "hWpUT0j5TYwAABQOvRUAAAAJ"]
[Sat Sep 05 11:58:08 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "hWpUT0j5TYwAABQOvRUAAAAJ"]
[Sat Sep 05 11:58:13 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "hbMN0kj5TYwAABVhxOgAAAAB"]
[Sat Sep 05 11:58:13 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "hbMN0kj5TYwAABVhxOgAAAAB"]
[Sat Sep 05 11:58:26 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "hnd-J0j5TYwAAB2L0BwAAAAI"]
[Sat Sep 05 11:58:26 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "hnd-J0j5TYwAAB2L0BwAAAAI"]
[Sat Sep 05 11:59:24 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ie8mI0j5TYwAABVdxAkAAAAA"]
[Sat Sep 05 11:59:24 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ie8mI0j5TYwAABVdxAkAAAAA"]
[Sat Sep 05 11:59:24 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ifJa5Ej5TYwAABVdxAsAAAAA"]
[Sat Sep 05 11:59:24 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ifJa5Ej5TYwAABVdxAsAAAAA"]
[Sat Sep 05 11:59:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ifmEAkj5TYwAABVdxBAAAAAA"]
[Sat Sep 05 11:59:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ifmEAkj5TYwAABVdxBAAAAAA"]
[Sat Sep 05 11:59:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ifpgg0j5TYwAABVdxBEAAAAA"]
[Sat Sep 05 11:59:25 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "ifpgg0j5TYwAABVdxBEAAAAA"]
[Sat Sep 05 11:59:48 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "i2LS@0j5TYwAABROvwQAAAAC"]
[Sat Sep 05 11:59:48 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "i2LS@0j5TYwAABROvwQAAAAC"]
[Sat Sep 05 11:59:49 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "i2WQRUj5TYwAABROvwcAAAAC"]
[Sat Sep 05 11:59:49 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "i2WQRUj5TYwAABROvwcAAAAC"]
[Sat Sep 05 12:00:09 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Match of "rx ^OPTIONS$" against "REQUEST_METHOD" required. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "41"] [id "960015"] [msg "Request Missing an Accept Header"] [severity "CRITICAL"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "jKNcAUj5TYwAABQOvR4AAAAJ"]
[Sat Sep 05 12:00:09 2009] [error] [client 72.249.77.140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf"] [line "48"] [id "960009"] [msg "Request Missing a User Agent Header"] [severity "WARNING"] [tag "PROTOCOL_VIOLATION/MISSING_HEADER"] [hostname "morok.ru"] [uri "/gallery/main.php"] [unique_id "jKNcAUj5TYwAABQOvR4AAAAJ"]



access_log

Код: Выделить всё

[root@morok logs]# cat access_log | tail -n 100
74.6.22.188 - - [05/Sep/2009:11:54:24 -0500] "GET /index.php?module=articles&func=display&ptid=2&aid=616&theme=rss HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:56:25 -0500] "GET /content/2052008-nu-i-chto-ty-nam-prines-dlinnoklyuvyi-ptits HTTP/1.0" 200 12205 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:11:56:25 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 627 "-" "-"
72.249.77.140 - - [05/Sep/2009:11:56:25 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 674 "-" "-"
67.195.114.35 - - [05/Sep/2009:11:56:25 -0500] "GET /forum/index.php?topic=231.msg11147 HTTP/1.0" 200 15784 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:56:25 -0500] "GET /forum/index.php?action=printpage;topic=1147.0 HTTP/1.0" 200 8568 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:54:28 -0500] "GET /user/login?destination=node/728%2523comment-form HTTP/1.0" 200 33000 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:11:56:29 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 676 "-" "-"
93.85.78.80 - - [05/Sep/2009:11:56:29 -0500] "GET /forum/index.php HTTP/1.1" 200 6370 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2"
124.1.246.2 - - [05/Sep/2009:11:56:30 -0500] "GET /forum//poll/errors.php?error=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 404 7202 "-" "libwww-perl/5.803"
124.1.246.2 - - [05/Sep/2009:11:56:30 -0500] "GET //poll/errors.php?error=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 404 7202 "-" "libwww-perl/5.803"
124.1.246.2 - - [05/Sep/2009:11:56:31 -0500] "GET /forum/index.php?topic=4.0//poll/errors.php?error=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 200 46720 "-" "libwww-perl/5.803"
72.30.142.179 - - [05/Sep/2009:11:56:32 -0500] "GET /forum/index.php?topic=500.msg33553 HTTP/1.0" 200 14631 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
124.1.246.2 - - [05/Sep/2009:11:56:32 -0500] "GET //poll/errors.php?error=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 404 7185 "-" "libwww-perl/5.803"
124.1.246.2 - - [05/Sep/2009:11:56:32 -0500] "GET /forum/index.php?topic=4.0//poll/errors.php?error=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 200 46720 "-" "libwww-perl/5.803"
124.1.246.2 - - [05/Sep/2009:11:56:32 -0500] "GET /forum//poll/errors.php?error=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 404 7185 "-" "libwww-perl/5.803"
72.249.77.140 - - [05/Sep/2009:11:56:32 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 630 "-" "-"
92.101.17.65 - - [05/Sep/2009:11:54:35 -0500] "GET /content/16022009-intervyu-s-sergeem-babkinym-tuk-tuk-otkroite HTTP/1.1" 200 53004 "-" "Opera/9.64 (Windows NT 5.1; U; MRA 5.4 (build 02647); ru) Presto/2.1.1"
74.6.22.188 - - [05/Sep/2009:11:55:03 -0500] "GET /index.php?module=articles&func=display&ptid=2&aid=616&theme=rss HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:55:22 -0500] "GET /index.php?module=articles&func=display&ptid=2&catid=43&aid=417&theme=rss HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
93.84.66.234 - - [05/Sep/2009:11:56:32 -0500] "GET /music/glucki/Idyiatizm_2009/05_Spi.mp3 HTTP/1.1" 206 722880 "http://morok.ru/content/glyuki-albom-idyyatyzm-2009-elektrichestvo" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 MRA 5.3 (build 02564) Firefox/3.5.2"
74.6.22.188 - - [05/Sep/2009:11:55:41 -0500] "GET /content/avangardshkola-vystuplenie-na-khedlain-feste-2006-elektrichestvo HTTP/1.0" 200 37778 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:57:42 -0500] "GET /forum/index.php?action=printpage;topic=1147.0 HTTP/1.0" 200 8568 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:55:46 -0500] "GET /index.php?module=articles&func=display&ptid=2&catid=43&aid=417&theme=rss HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
93.84.66.234 - - [05/Sep/2009:11:57:04 -0500] "GET /music/glucki/Idyiatizm_2009/05_Spi.mp3 HTTP/1.1" 206 882720 "http://morok.ru/content/glyuki-albom-idyyatyzm-2009-elektrichestvo" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 MRA 5.3 (build 02564) Firefox/3.5.2"
72.30.142.179 - - [05/Sep/2009:11:58:08 -0500] "GET /forum/index.php?topic=500.msg33553 HTTP/1.0" 200 14630 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
65.55.207.94 - - [05/Sep/2009:11:58:08 -0500] "GET /forum/index.php?topic=288.msg12466#msg12466 HTTP/1.0" 200 0 "-" "msnbot/2.0b (+http://search.msn.com/msnbot.htm)"
72.249.77.140 - - [05/Sep/2009:11:58:08 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 647 "-" "-"
74.6.22.188 - - [05/Sep/2009:11:58:08 -0500] "GET /user/login?destination=node/728%2523comment-form HTTP/1.0" 200 8084 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:58:09 -0500] "GET /forum/index.php?action=printpage;topic=1147.0 HTTP/1.0" 200 8568 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
93.84.66.234 - - [05/Sep/2009:11:56:37 -0500] "GET /music/glucki/Idyiatizm_2009/05_Spi.mp3 HTTP/1.1" 206 1415520 "http://morok.ru/content/glyuki-albom-idyyatyzm-2009-elektrichestvo" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 MRA 5.3 (build 02564) Firefox/3.5.2"
74.6.22.188 - - [05/Sep/2009:11:56:12 -0500] "GET /content/avangardshkola-vystuplenie-na-khedlain-feste-2006-elektrichestvo HTTP/1.0" 200 37778 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:58:13 -0500] "GET /forum/index.php?topic=500.msg33553 HTTP/1.0" 200 14631 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
65.55.106.139 - - [05/Sep/2009:11:58:13 -0500] "GET /forum/index.php?topic=1211.msg31286#msg31286 HTTP/1.0" 200 0 "-" "msnbot/2.0b (+http://search.msn.com/msnbot.htm)"
216.129.119.11 - - [05/Sep/2009:11:58:13 -0500] "GET /main.php?g2_view=comment.EditComment&g2_itemId=1382&g2_commentId=13904&g2_return=main.php%3Fg2_itemId%3D1382%26&&g2_returnName=%D1%84%D0%BE%D1%82%D0%BE HTTP/1.0" 301 894 "-" "Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html)"
72.249.77.140 - - [05/Sep/2009:11:58:13 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 662 "-" "-"
74.6.22.188 - - [05/Sep/2009:11:58:13 -0500] "GET /user/login?destination=node/728%2523comment-form HTTP/1.0" 200 8084 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:58:13 -0500] "GET /forum/index.php?action=printpage;topic=1147.0 HTTP/1.0" 200 8568 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:56:13 -0500] "GET /index.php?module=articles&func=display&ptid=2&catid=43&aid=417&theme=rss HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:56:25 -0500] "GET /content/avangardshkola-vystuplenie-na-khedlain-feste-2006-elektrichestvo HTTP/1.0" 200 37778 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:58:25 -0500] "GET /forum/index.php?topic=500.msg33553 HTTP/1.0" 200 14630 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.125.75.3 - - [05/Sep/2009:11:58:25 -0500] "GET /modules/comment/comment.css?k HTTP/1.1" 200 532 "http://www.gallery.morok.ru/content/14012009-revolver-draiv-yak-ne-zgasae" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7"
80.249.95.216 - - [05/Sep/2009:11:58:25 -0500] "GET /main/rss.xml HTTP/1.1" 200 46720 "-" "Akregator/1.4.2; syndication"
74.6.22.188 - - [05/Sep/2009:11:58:26 -0500] "GET /user/login?destination=node/728%2523comment-form HTTP/1.0" 200 8084 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:11:58:26 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 654 "-" "-"
74.6.22.188 - - [05/Sep/2009:11:56:25 -0500] "GET /index.php?module=articles&func=display&ptid=2&catid=43&aid=417&theme=rss HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
93.85.211.111 - - [05/Sep/2009:11:58:26 -0500] "GET /forum/index.php HTTP/1.1" 200 6040 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.0.13) Gecko/2009073022 Firefox/3.0.13 (.NET CLR 3.5.30729)"
65.55.230.219 - - [05/Sep/2009:11:58:26 -0500] "GET /taxonomy/term/62 HTTP/1.1" 200 0 "-" "Mozilla/4.0"
93.84.66.234 - - [05/Sep/2009:11:58:26 -0500] "GET /music/glucki/Idyiatizm_2009/05_Spi.mp3 HTTP/1.1" 206 722880 "http://morok.ru/content/glyuki-albom-idyyatyzm-2009-elektrichestvo" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 MRA 5.3 (build 02564) Firefox/3.5.2"
72.30.142.179 - - [05/Sep/2009:11:59:11 -0500] "GET /forum/index.php?topic=214.msg33833 HTTP/1.0" 200 18493 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:57:23 -0500] "GET /content/avangardshkola-vystuplenie-na-khedlain-feste-2006-elektrichestvo HTTP/1.0" 200 37778 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.65.48 - - [05/Sep/2009:11:59:24 -0500] "GET /robots.txt HTTP/1.0" 301 548 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:59:24 -0500] "GET /user/login?destination=node/728%2523comment-form HTTP/1.0" 200 8084 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
93.84.65.106 - - [05/Sep/2009:11:59:24 -0500] "GET /forum/Themes/ClassicFS/images/icons/info.gif HTTP/1.1" 200 2366 "http://www.morok.ru/forum/index.php" "Opera/9.50 (Windows NT 5.1; U; ru)"
93.84.65.106 - - [05/Sep/2009:11:59:24 -0500] "GET /forum/Themes/ClassicFS/images/icons/online.gif HTTP/1.1" 200 2248 "http://www.morok.ru/forum/index.php" "Opera/9.50 (Windows NT 5.1; U; ru)"
93.84.65.106 - - [05/Sep/2009:11:59:24 -0500] "GET /forum/index.php?board=1.0 HTTP/1.1" 200 10626 "http://www.morok.ru/forum/index.php" "Opera/9.50 (Windows NT 5.1; U; ru)"
72.249.77.140 - - [05/Sep/2009:11:59:24 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 735 "-" "-"
74.6.22.188 - - [05/Sep/2009:11:59:24 -0500] "GET /taxonomy/term/70 HTTP/1.0" 200 9496 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:11:59:24 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 635 "-" "-"
65.55.106.156 - - [05/Sep/2009:11:59:24 -0500] "GET /forum/index.php?topic=278.msg11971#msg11971 HTTP/1.0" 200 0 "-" "msnbot/2.0b (+http://search.msn.com/msnbot.htm)"
72.30.142.179 - - [05/Sep/2009:11:59:24 -0500] "GET /forum/index.php?topic=214.msg33833 HTTP/1.0" 200 18494 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
67.195.114.35 - - [05/Sep/2009:11:59:25 -0500] "GET /forum/index.php?board=7.0;sort=views HTTP/1.0" 200 6215 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
65.55.230.219 - - [05/Sep/2009:11:59:25 -0500] "GET /taxonomy/term/62 HTTP/1.1" 200 0 "-" "Mozilla/4.0"
72.249.77.140 - - [05/Sep/2009:11:59:25 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 687 "-" "-"
72.249.77.140 - - [05/Sep/2009:11:59:25 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 652 "-" "-"
91.187.5.212 - - [05/Sep/2009:11:59:25 -0500] "GET /forum/index.php?action=profile;u=1207;sa=showPosts HTTP/1.1" 200 5024 "http://yandex.ru/yandsearch?text=ZOOM+G1X&clid=14585&country=by&stpar2=%2Fh1%2Ftm9%2Fs4&stpar4=%2Fs4&stpar1=%2Fu0" "Opera/9.63 (Windows NT 5.1; U; ru) Presto/2.1.1"
93.85.78.80 - - [05/Sep/2009:11:57:29 -0500] "GET / HTTP/1.1" 200 64170 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2"
74.6.22.188 - - [05/Sep/2009:11:57:42 -0500] "GET /content/9092006-timku-mozhno-budet-naryt-v-arkheologii HTTP/1.0" 200 41850 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
67.195.114.35 - - [05/Sep/2009:11:57:48 -0500] "GET /content/3082009-nikita-emelyanov-kalachikom-ryadom-seichas HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:59:48 -0500] "GET /forum/index.php?topic=7.msg24850 HTTP/1.0" 200 16036 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:59:48 -0500] "GET /index.php?module=articles&func=display&ptid=2&aid=616&theme=rss HTTP/1.0" 200 26839 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:11:59:48 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 647 "-" "-"
67.195.114.35 - - [05/Sep/2009:11:59:48 -0500] "GET /forum/index.php?topic=231.msg11147 HTTP/1.0" 200 15786 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:11:59:49 -0500] "GET /taxonomy/term/70 HTTP/1.0" 200 9496 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:11:59:49 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 660 "-" "-"
72.30.142.179 - - [05/Sep/2009:11:59:49 -0500] "GET /forum/index.php?topic=1322.msg34160;topicseen HTTP/1.0" 200 22016 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:11:59:49 -0500] "GET /forum/index.php?topic=214.msg33833 HTTP/1.0" 200 18492 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
93.84.66.234 - - [05/Sep/2009:11:59:49 -0500] "GET /music/glucki/Idyiatizm_2009/07_narkaman.mp3 HTTP/1.1" 200 47520 "http://morok.ru/content/glyuki-albom-idyyatyzm-2009-elektrichestvo" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 MRA 5.3 (build 02564) Firefox/3.5.2"
74.6.22.188 - - [05/Sep/2009:11:58:09 -0500] "GET /content/9092006-timku-mozhno-budet-naryt-v-arkheologii HTTP/1.0" 200 41850 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:12:00:09 -0500] "GET /index.php?module=articles&func=display&ptid=2&aid=616&theme=rss HTTP/1.0" 200 26839 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:12:00:09 -0500] "GET /forum/index.php?topic=1322.msg34160;topicseen HTTP/1.0" 200 22017 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.65.48 - - [05/Sep/2009:12:00:09 -0500] "GET /main.php?g2_itemId=6649 HTTP/1.0" 301 574 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:12:00:09 -0500] "GET /content/avangardshkola-vystuplenie-na-khedlain-feste-2006-elektrichestvo HTTP/1.0" 200 9009 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:12:00:09 -0500] "GET /forum/index.php?topic=214.msg33833 HTTP/1.0" 200 18492 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:12:00:09 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 646 "-" "-"
216.129.119.11 - - [05/Sep/2009:12:00:10 -0500] "GET /main.php?g2_view=core.UserAdmin&g2_subView=core.UserLogin&g2_return=main.php%3Fg2_itemId%3D2312%26&&g2_returnName=%D1%84%D0%BE%D1%82%D0%BE HTTP/1.0" 301 864 "-" "Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html)"
66.249.71.194 - - [05/Sep/2009:12:00:10 -0500] "GET /gallery/main.php?g2_view=core.DownloadItem&g2_itemId=1568&g2_serialNumber=2 HTTP/1.1" 200 4556 "-" "Googlebot-Image/1.0"
67.195.114.35 - - [05/Sep/2009:12:00:10 -0500] "GET /content/3082009-nikita-emelyanov-kalachikom-ryadom-seichas HTTP/1.0" 200 13624 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
67.195.114.35 - - [05/Sep/2009:11:58:11 -0500] "GET /content/3082009-nikita-emelyanov-kalachikom-ryadom-seichas HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:12:00:12 -0500] "GET /forum/index.php?topic=1322.msg34160;topicseen HTTP/1.0" 200 22015 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
89.149.195.248 - - [05/Sep/2009:12:00:12 -0500] "GET /forum/index.php?topic=232.0 HTTP/1.1" 200 31135 "-" "xpymep.exe"
74.6.22.188 - - [05/Sep/2009:12:00:12 -0500] "GET /content/avangardshkola-vystuplenie-na-khedlain-feste-2006-elektrichestvo HTTP/1.0" 200 9009 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.30.142.179 - - [05/Sep/2009:12:00:12 -0500] "GET /forum/index.php?topic=317.msg34165 HTTP/1.0" 200 9561 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
72.249.77.140 - - [05/Sep/2009:12:00:13 -0500] "GET /gallery/main.php?g2_view=imageblock.External&g2_blocks=randomImage&g2_show=none HTTP/1.0" 200 689 "-" "-"
74.6.22.188 - - [05/Sep/2009:11:58:13 -0500] "GET /content/9092006-timku-mozhno-budet-naryt-v-arkheologii HTTP/1.0" 200 41850 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
91.187.5.212 - - [05/Sep/2009:12:00:14 -0500] "GET /forum/Themes/default/script.js?fin11 HTTP/1.1" 200 4437 "http://hghltd.yandex.net/yandbtm?url=http%3A%2F%2Fwww.morok.ru%2Fforum%2Findex.php%3Faction%3Dprofile%3Bu%3D1207%3Bsa%3DshowPosts&text=ZOOM%20G1X&qtree=N%2FCDjbAzkCoMd%2Fcvo6dpv4qo8%2FFzO6A4DoLVO33uQytnGEKTDHxuR1ybrMjind9kVABIEUjUBtKoaV3nNVegoiC%2FXDP88TvvtRj2JLjVbjmyDpeqALnE%2BVHI4%2BZiLrn%2BHJPaBDWlYh1CdXfsFLEzcaAnCdLq6t8rNRMzkzMTj58oerr8d7XgN56oFT4NZP4uPVaXpYl981hE5j
8LrkWsErYeycs03BZz5i%2BVyNA%2B3xNHYKG4UK0wzJjru1xZPlLfRz7WbB%2BN5kYxon56MdydpbeloVxyre7PkOdoromiNaYtu3LUjltFevw1XzOw6LhtpZBeGC9gR5huy5hHVg7mw
nGPoAkjQkyBo5oOkKHEbAXSUICsMBqZnp%2BLsmL9AXOiw7Ubm7XYVgdr0pNefKLwAaVPxlhWH93fjC5CwUdMUcFmwjY%2FU4HPmY9MWqCGLusN8UxlH%2BRXjZEwosPp9bgFzFR8XrybY5VV7MQ94mtzGGx%2FtlkMLa9qEtL9x88xvcwD" "Opera/9.63 (Windows NT 5.1; U; ru) Presto/2.1.1"
67.195.114.35 - - [05/Sep/2009:12:00:14 -0500] "GET /content/3082009-nikita-emelyanov-kalachikom-ryadom-seichas HTTP/1.0" 200 13626 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
67.195.114.35 - - [05/Sep/2009:11:58:14 -0500] "GET /content/3082009-nikita-emelyanov-kalachikom-ryadom-seichas HTTP/1.0" 200 46720 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
74.6.22.188 - - [05/Sep/2009:12:00:15 -0500] "GET /taxonomy/term/70 HTTP/1.0" 200 9496 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp/3.0; http://help.yahoo.com/help/us/ysearch/slurp)"
93.85.78.80 - - [05/Sep/2009:12:00:15 -0500] "GET /forum/index.php HTTP/1.1" 200 6374 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2"
моё любимое облачко
Фхтагн! Мозг! Ням-ням! ~ Ктулху про Ленина
Спасибо сказали:
Аватара пользователя
Deo
Сообщения: 365
ОС: openSuse 12.3

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение Deo »

Кажется разобрался... как ограничить количество подключений с одного IP, а то некоторые даунлоад мастера в 10 потоков качают?
моё любимое облачко
Фхтагн! Мозг! Ням-ням! ~ Ктулху про Ленина
Спасибо сказали:
Аватара пользователя
Deo
Сообщения: 365
ОС: openSuse 12.3

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение Deo »

dobs писал(а):
05.09.2009 19:20
Юзай nginx + апач (если на сайте много статики....)


А есть пакеты для CentOS?

Код: Выделить всё

# yum info *nginx*
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror.steadfast.net
 * updates: mirror.steadfast.net
 * addons: mirror.skiplink.com
 * extras: mirror.steadfast.net
utterramblings                                                                                                                        |  951 B     00:00
base                                                                                                                                  | 1.1 kB     00:00
updates                                                                                                                               |  951 B     00:00
addons                                                                                                                                |  951 B     00:00
extras                                                                                                                                | 1.1 kB     00:00
Error: No matching Packages to list
моё любимое облачко
Фхтагн! Мозг! Ням-ням! ~ Ктулху про Ленина
Спасибо сказали:
Аватара пользователя
dobs
Сообщения: 175
ОС: Fedora

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение dobs »

Подключи rpmfusion (Для Федоры идет знач и для ЦентОС должно быть)
ну а потом как обычно yum install nginx
Home server
Latest Fedora
MB Intel BLKD945GCLF2 Atom 330
2 Gb RAM
500 GB RAID 1
Smolts
Linux registered user #545937
Спасибо сказали:
Аватара пользователя
Deo
Сообщения: 365
ОС: openSuse 12.3

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение Deo »

Попробовал для начала в сквозном режиме
Настроил апач слушать на 8080, конфиг nginx приложен ниже

Сервер не отвечал пользователям и минут за 15-20 - наобирал гиговый лог вот такого:

Код: Выделить всё

2009/09/06 15:13:42 [alert] 15887#0: accept() failed (24: Too many open files) while accepting new connection on 0.0.0.0:80
2009/09/06 15:13:42 [alert] 15887#0: accept() failed (24: Too many open files) while accepting new connection on 0.0.0.0:80
2009/09/06 15:13:42 [alert] 15887#0: accept() failed (24: Too many open files) while accepting new connection on 0.0.0.0:80
2009/09/06 15:13:42 [alert] 15887#0: accept() failed (24: Too many open files) while accepting new connection on 0.0.0.0:80
2009/09/06 15:13:42 [alert] 15887#0: accept() failed (24: Too many open files) while accepting new connection on 0.0.0.0:80
2009/09/06 15:13:42 [alert] 15887#0: accept() failed (24: Too many open files) while accepting new connection on 0.0.0.0:80


nginx.conf:

Код: Выделить всё

user              nginx;
worker_processes  2;

error_log         /var/log/nginx/error.log;
pid               /var/run/nginx.pid;

#---------------------------------------------------------

events {
    worker_connections  1024;
}

#----------------------------------------------------------------------
# HTTP Core Module
#
#   [url="http://wiki.codemongers.com/NginxHttpCoreModule"]http://wiki.codemongers.com/NginxHttpCoreModule[/url]
#
#----------------------------------------------------------------------

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] $request '
                      '"$status" $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    client_header_timeout 3m;
    client_body_timeout 3m;
    send_timeout 3m;

    client_header_buffer_size 1k;
    large_client_header_buffers 4 4k;

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    tcp_nopush     on;
    tcp_nodelay on;
    send_lowat 12000;

    keepalive_timeout  75 20;

    server {
        listen      my_IP:80;
        server_name  server.ru www.server.ru;

        access_log  /var/www/vhosts/server.ru/statistics/logs/nginx.access.log  main;

        location / {
            proxy_pass [url="http://my_IP:8080/;"]http://my_IP:8080/;[/url]
            proxy_redirect off;

            proxy_set_header   Host   $host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

            client_max_body_size       10m;
            client_body_buffer_size    128k;

            #client_body_temp_path      /var/nginx/client_body_temp;
            proxy_connect_timeout      90;
            proxy_send_timeout         90;
            proxy_read_timeout         90;
            proxy_send_lowat           12000;

            proxy_buffer_size          4k;
            proxy_buffers              4 32k;
            proxy_busy_buffers_size    64k;
            proxy_temp_file_write_size 64k;

            #proxy_temp_path            /var/nginx/proxy_temp;
            charset  utf8;

#            root   /var/www/vhosts/server.ru/httpdocs/;
#            index  index.php  index.htm;
        }
    }
}

Если раскомментить
# root /var/www/vhosts/server.ru/httpdocs/;
# index index.php index.htm;

то почти работает (отвечает страницей со словом hello ) (как и при прямом обращении через порт 8080 )
моё любимое облачко
Фхтагн! Мозг! Ням-ням! ~ Ктулху про Ленина
Спасибо сказали:
Аватара пользователя
dobs
Сообщения: 175
ОС: Fedora

Re: Апач медленно но верно съедает всю оперативу VPS

Сообщение dobs »

Вообще то надо настроить какие типы файлов должен отдавать нгинх а за какими отправлять на апач... вот смотри мой конфиг

Код: Выделить всё

#
    # The mob-film.net server
    #
    server {
        listen       192.168.1.2:80;
        server_name  mob-film.net www.mob-film.net;



        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
    proxy_pass http://127.0.0.1:80/;
    proxy_redirect     off;

            proxy_set_header   Host             $host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
        }

        location ~* \.(jpg|jpeg|gif|png|ico|js|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|w
av|bmp|rtf|avi|mp4|mdf|iso)$ {
    root /home/dobs/domains/mob-film.net/public_html/;
    }

        error_page  404              /404.html;
        location = /404.html {
            root   /usr/share/nginx/html;
        }

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   /usr/share/nginx/html;
        }
}
# /The mob-film.net server
Home server
Latest Fedora
MB Intel BLKD945GCLF2 Atom 330
2 Gb RAM
500 GB RAID 1
Smolts
Linux registered user #545937
Спасибо сказали: