pid file overwritten -- Unclean shutdown of previous Apache run

[reilly]

Hola todos, tengo un gravisimo problema. Tengo un servidor remoto con Godaddy alli tengo un aplicativo en php. Instale el appserv ( que como saben instala mysql php y apache). Cada cierto tiempo se me esta cayendo el servidor y cuando voy al event viewr aparaece esto::
The Apache service named C:\AppServ\Apache\Apache.exe reported the following error:
>>> [Mon Aug 17 12:15:50 2009] [warn] pid file c:/appserv/apache/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run? <<<
before the error.log file could be opened.

More information may be available in the error.log file. .

Luego voy y reviso el error.log

[Sun Aug 16 11:40:04 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/phpmyadmin/main.php
[Sun Aug 16 11:40:04 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/db/main.php
[Sun Aug 16 11:40:05 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/web/main.php
[Sun Aug 16 11:40:05 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/pma/main.php
[Sun Aug 16 11:40:06 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/mysql/main.php
[Sun Aug 16 11:40:06 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/myadmin/main.php
[Sun Aug 16 11:40:06 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/webadmin/main.php
[Sun Aug 16 11:40:07 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/sqlweb/main.php
[Sun Aug 16 11:40:07 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/websql/main.php
[Sun Aug 16 11:40:08 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/webdb/main.php
[Sun Aug 16 11:40:08 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/mysqladmin/main.php
[Sun Aug 16 11:40:08 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/mysql-admin/main.php
[Sun Aug 16 11:40:09 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/phpmyadmin2/main.php
[Sun Aug 16 11:40:09 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/php-my-admin/main.php
[Sun Aug 16 15:51:36 2009] [error] [client 82.207.70.26] File does not exist: c:/appserv/www/phpmyadmin//scripts/setup.php
[Sun Aug 16 17:34:28 2009] [error] [client 202.131.2.221] File does not exist: c:/appserv/www///scripts/setup.php
[Sun Aug 16 17:42:51 2009] [error] [client 202.131.2.221] File does not exist: c:/appserv/www//phpmyadmin//scripts/setup.php
[Sun Aug 16 17:50:41 2009] [error] [client 202.131.2.221] File does not exist: c:/appserv/www//phpmyadmin//scripts/setup.php
[Sun Aug 16 18:37:23 2009] [error] [client 202.131.2.221] File does not exist: c:/appserv/www///scripts/setup.php
[Sun Aug 16 18:47:31 2009] [error] [client 202.131.2.221] File does not exist: c:/appserv/www//phpmyadmin//scripts/setup.php
[Sun Aug 16 18:56:45 2009] [error] [client 202.131.2.221] File does not exist: c:/appserv/www//phpmyadmin//scripts/setup.php
[Mon Aug 17 00:37:13 2009] [error] [client 91.212.127.100] File does not exist: c:/appserv/www/abc.php
[Mon Aug 17 01:12:50 2009] [error] [client 212.174.10.208] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Mon Aug 17 01:52:18 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/phpmyadmin/main.php
[Mon Aug 17 01:52:18 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/phpmyadmin/main.php
[Mon Aug 17 01:52:19 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/db/main.php
[Mon Aug 17 01:52:19 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/web/main.php
[Mon Aug 17 01:52:20 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/pma/main.php
[Mon Aug 17 01:52:29 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/mysql/main.php
[Mon Aug 17 01:52:29 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/myadmin/main.php
[Mon Aug 17 01:52:30 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/webadmin/main.php
[Mon Aug 17 01:52:31 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/sqlweb/main.php
[Mon Aug 17 01:52:31 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/websql/main.php
[Mon Aug 17 01:52:32 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/webdb/main.php
[Mon Aug 17 01:52:32 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/mysqladmin/main.php
[Mon Aug 17 01:52:36 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/mysql-admin/main.php
[Mon Aug 17 01:52:39 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/phpmyadmin2/main.php
[Mon Aug 17 01:52:40 2009] [error] [client 212.174.10.208] File does not exist: c:/appserv/www/php-my-admin/main.php


Les agradeceria cualquier ayuda mil gracias.....

[reilly]

FAVOR AGRADECERIA SI ALGIEN SABE ALGO AL RESPECTO........... mil gracias

[ferny]

El error "pid file overwritten -- Unclean shutdown of previous Apache run" simplemente dice que se ha sobrescrito el fichero pid de apache porque éste se cerró repentinamente sin avisar, o sea el problema real es que se te cae apache, como creo que ya sabes.

Con el log que das no puedo decirte nada salvo que parece ser un ataque, al parecer un bot está buscando alguna aplicación vulnerable en tu servidor. Casi todas esas líneas indican que el archivo que pidió el atacante no existe (es como que tienen una lista y la van recorriendo por si tuvieras instalado algo de ella). No creas que eres "el elegido", a todos nos atacan así, cogen una ip al azar y van a por ella... luego otra, luego otra... Tampoco creo que eso pueda tirar el servidor, a menos que el hardware que tengas sea muy limitado y te estén mandando ráfagas de ataques muy densas que puedan saturar el apache...

Un saludo