HTTPD drop

[eConcept-Web]

Hi, I have a problem since 1h. My process HTTPD overload and I don't know why. I found this in the error_log of apache when I reboot/restart the process

...
[Thu Aug 26 07:49:48 2010] [warn] Init: SSL server IP/port conflict: shared.domain:443 (/etc/httpd/conf/ips.conf:75) vs. www.domain1.com:443 (/usr/local/directadmin/data/users/artotech/httpd.conf:44)
[Thu Aug 26 07:49:48 2010] [warn] Init: SSL server IP/port conflict: shared.domain:443 (/etc/httpd/conf/ips.conf:48) vs. www.domain2.com:443 (/usr/local/directadmin/data/users/starlook/httpd.conf:44)
[Thu Aug 26 07:49:48 2010] [warn] Init: SSL server IP/port conflict: shared.domain:443 (/etc/httpd/conf/ips.conf:21) vs. www.domain3.ca:443 (/usr/local/directadmin/data/users/prmx/httpd.conf:44)
...


[Thu Aug 26 07:49:48 2010] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Thu Aug 26 07:49:48 2010] [notice] Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.8e-fips-rhel5 DAV/2 configured -- resuming normal operations
[Thu Aug 26 07:51:00 2010] [error] server reached MaxClients setting, consider raising the MaxClients setting

AND AFTER:


[Thu Aug 26 07:52:49 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:50 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:50 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:53 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:53 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:53 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:53 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:53 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:53 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:53 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:54 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:54 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:54 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:54 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:56 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:56 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:56 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:56 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:56 2010] [error] [client 204.8.156.142] request failed: error reading the headers
[Thu Aug 26 07:52:56 2010] [error] [client 204.8.156.142] request failed: error reading the headers

It's look like an attack because the 204.x.x.142 ip is a TOR ip...

Any solutions ???

 

[eConcept-Web]

Here is an other bunch of IP:

[Thu Aug 26 08:00:10 2010] [error] [client 212.42.236.140] request failed: error reading the headers
[Thu Aug 26 08:00:10 2010] [error] [client 212.42.236.140] request failed: error reading the headers
[Thu Aug 26 08:00:10 2010] [error] [client 212.42.236.140] request failed: error reading the headers
[Thu Aug 26 08:00:10 2010] [error] [client 212.42.236.140] request failed: error reading the headers
[Thu Aug 26 08:00:10 2010] [error] [client 174.36.199.200] request failed: error reading the headers
[Thu Aug 26 08:00:10 2010] [error] [client 95.24.143.209] request failed: error reading the headers
[Thu Aug 26 08:00:10 2010] [error] [client 173.23.54.15] request failed: error reading the headers
[Thu Aug 26 08:00:13 2010] [error] [client 95.24.143.209] request failed: error reading the headers
[Thu Aug 26 08:00:13 2010] [error] [client 212.42.236.140] request failed: error reading the headers
[Thu Aug 26 08:00:14 2010] [error] [client 174.36.199.200] request failed: error reading the headers
[Thu Aug 26 08:00:14 2010] [error] [client 174.138.169.218] request failed: error reading the headers
[Thu Aug 26 08:00:14 2010] [error] [client 174.138.169.218] request failed: error reading the headers
[Thu Aug 26 08:00:15 2010] [error] [client 94.23.80.175] request failed: error reading the headers
[Thu Aug 26 08:00:15 2010] [error] [client 94.23.80.175] request failed: error reading the headers
[Thu Aug 26 08:00:16 2010] [error] [client 83.170.92.9] request failed: error reading the headers

 

[eConcept-Web]

problem solve. connection attack Grrr.