My server has been acting sort of weird lately, prior to all the problems my server was running perfectly and stable for 100 days then out of a sudden it has been crashed twice over two different weekends.

I'm at a bit of a loss as to why it is crashing since I haven't don't think really with the server lately.

It looks like it is running out of memory or something, not sure why since there is 256megs of ram.

Here are the two logs files, one is the error log file and the other is the kernel log file. (Is there any other logs I should be looking at?)

http://www.netphoria.org/test/error_log.txt
http://www.netphoria.org/test/kernel_log.txt

If someone could take a look to see why has been crashing I would really appreciate it.

i'd take a guess that the couple hundred

[Sat Dec 8 11:29:30 2001] [error] [client 61.9.192.140] malformed header from script. Bad header=Out of memory!: /usr/cgiwrap/cgiwrap

that you're getting isn't very good.


give us the specs on your box. ram, is this a dedicated box or a hosting box, bandwidth used, etc. etc.


DoS possibly. 61.9.192.140 resolves to australia. so, that could be it. someone else with more knowledge than i might want to check it out.

It is a Raq4 from RackShack.net, it has 256 megs of ram.

The only busy thing on it is a UBB message board(version 4.something)

I use up around 75-125 gigs of bandwidth a month.

well. i'd say it's a denial of service attack. from the looks of it. at least to me.


i'd shoot that IP into your hosts.deny file and/or IPCHAINS config.

from what my neotrace is telling me, that IP resolves to a netblock for bigpond.net.au (or bigpond.com i guess).


but, you should wait until someone else can take a look at the logs and give you their opinion. i'm still kind of new here.

I think the problem is that this message baord system UBB is using a lot of memory, which produces the 'out of memory' message. I suggest that you try stopping this script and restart the server and see if it is still crashing.

yeah, i thought it could either be that as well. but, why would he have so many concurrent out of memory messages from the same client all sequential?

oh well.
just in case, here are some good tweaks to check into:

http://i4net.tv/marticle/get.php?action=getarticle&articleid=3

http://www.webhostingtalk.com/showthread.php?s=&threadid=20454&highlight=tweak+mysql