apache2 crashing

Discussion in 'Installation/Configuration' started by jimmie, Feb 23, 2026.

  1. jimmie

    jimmie Member

    i have to restart apache server every 5 mins mostly. not sure what has happened
    im running ispconfig 3.2.12p1 on debian 12
    here are the logs
    Code:
    2026-02-23T08:04:03.818206-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 23.61.199.65#53
2026-02-23T08:04:03.838401-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 2.22.230.67#53
2026-02-23T08:04:03.873363-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 2.16.40.66#53
2026-02-23T08:04:03.913292-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 23.211.133.66#53
2026-02-23T08:04:03.985688-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 184.26.161.65#53
2026-02-23T08:04:04.230699-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '185.234.84.206.in-addr.arpa/PTR/IN': 103.88.221.245#53
2026-02-23T08:04:04.515582-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '185.234.84.206.in-addr.arpa/PTR/IN': 103.88.220.245#53
2026-02-23T08:04:10.005791-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '199.53.1.in-addr.arpa/NS/IN': 42.112.43.43#53
2026-02-23T08:04:10.356341-05:00 computer-hosting postfix/submissions/smtpd[829048]: warning: unknown[61.160.196.2]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-02-23T08:04:12.196100-05:00 computer-hosting named[857]: SERVFAIL unexpected RCODE resolving '23.238.37.in-addr.arpa/NS/IN': 109.224.13.46#53
2026-02-23T08:04:12.391752-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '23.238.37.in-addr.arpa/NS/IN': 109.224.14.46#53
2026-02-23T08:04:12.577985-05:00 computer-hosting named[857]: SERVFAIL unexpected RCODE resolving '9.23.238.37.in-addr.arpa/PTR/IN': 109.224.13.46#53
2026-02-23T08:04:12.773124-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '9.23.238.37.in-addr.arpa/PTR/IN': 109.224.14.46#53
2026-02-23T08:04:13.045004-05:00 computer-hosting postfix/submissions/smtpd[829048]: lost connection after AUTH from unknown[61.160.196.2]
2026-02-23T08:04:13.045124-05:00 computer-hosting postfix/submissions/smtpd[829048]: disconnect from unknown[61.160.196.2] ehlo=1 auth=0/1 commands=1/2
2026-02-23T08:04:13.511098-05:00 computer-hosting kernel: [259964.497479] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5121 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:14.477231-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '100.37.49.in-addr.arpa/NS/IN': 49.45.43.43#53
2026-02-23T08:04:14.523104-05:00 computer-hosting kernel: [259965.509175] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5122 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:14.814821-05:00 computer-hosting named[857]: validating 69.191.187.160.in-addr.arpa/PTR: no valid signature found
2026-02-23T08:04:15.280708-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '100.37.49.in-addr.arpa/NS/IN': 49.45.43.42#53
2026-02-23T08:04:15.793420-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '154.235.117.in-addr.arpa/NS/IN': 218.248.240.209#53
2026-02-23T08:04:15.945170-05:00 computer-hosting kernel: [259966.934048] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58837 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:16.105194-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '154.235.117.in-addr.arpa/NS/IN': 218.248.240.178#53
2026-02-23T08:04:16.406689-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '41.154.235.117.in-addr.arpa/PTR/IN': 218.248.240.209#53
2026-02-23T08:04:16.707324-05:00 computer-hosting kernel: [259967.696183] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5123 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:16.722904-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '41.154.235.117.in-addr.arpa/PTR/IN': 218.248.240.178#53
2026-02-23T08:04:16.732173-05:00 computer-hosting kernel: [259967.721031] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58838 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:18.072947-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '151.217.113.188.in-addr.arpa/PTR/IN': 188.113.226.1#53
2026-02-23T08:04:18.279101-05:00 computer-hosting kernel: [259969.267328] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58839 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:18.287790-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '151.217.113.188.in-addr.arpa/PTR/IN': 188.113.226.2#53
2026-02-23T08:04:18.962865-05:00 computer-hosting postfix/submissions/smtpd[828883]: connect from unknown[210.206.24.234]
2026-02-23T08:04:20.017169-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '90.43.49.in-addr.arpa/NS/IN': 49.45.43.43#53
2026-02-23T08:04:20.800235-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '90.43.49.in-addr.arpa/NS/IN': 49.45.43.42#53
2026-02-23T08:04:21.079121-05:00 computer-hosting kernel: [259972.064108] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=194.113.226.135 DST=97.76.140.174 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=51677 PROTO=TCP SPT=46545 DPT=25565 WINDOW=53270 RES=0x00 SYN URGP=0
2026-02-23T08:04:21.507098-05:00 computer-hosting kernel: [259972.493537] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58840 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:21.863409-05:00 computer-hosting named[857]: connection refused resolving '96.49.197.103.in-addr.arpa/PTR/IN': 34.41.139.193#53
2026-02-23T08:04:21.876511-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '234.251.171.in-addr.arpa/NS/IN': 203.113.131.1#53
2026-02-23T08:04:22.144483-05:00 computer-hosting named[857]: host unreachable resolving '234.251.171.in-addr.arpa/NS/IN': 203.113.131.2#53
2026-02-23T08:04:25.512201-05:00 computer-hosting postfix/submission/smtpd[829124]: connect from unknown[192.168.1.67]
2026-02-23T08:04:26.260304-05:00 computer-hosting postfix/submissions/smtpd[828883]: warning: unknown[210.206.24.234]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-02-23T08:04:26.641227-05:00 computer-hosting postfix/submission/smtpd[829124]: 9C75616299AD: client=unknown[192.168.1.67], sasl_method=PLAIN, [email protected]
2026-02-23T08:04:26.694236-05:00 computer-hosting postfix/cleanup[829130]: 9C75616299AD: message-id=<[email protected]>
2026-02-23T08:04:27.138558-05:00 computer-hosting postfix/qmgr[1633]: 9C75616299AD: from=<[email protected]>, size=3709, nrcpt=1 (queue active)
2026-02-23T08:04:27.166550-05:00 computer-hosting postfix/submissions/smtpd[828883]: lost connection after AUTH from unknown[210.206.24.234]
2026-02-23T08:04:27.166656-05:00 computer-hosting postfix/submissions/smtpd[828883]: disconnect from unknown[210.206.24.234] ehlo=1 auth=0/1 commands=1/2
2026-02-23T08:04:27.455346-05:00 computer-hosting dovecot: imap([email protected])<27682></XK6zENLEePAqAFD>: Disconnected: Logged out in=180889 out=635070 deleted=0 expunged=0 trashed=0 hdr_count=1 hdr_bytes=542 body_count=0 body_bytes=0
2026-02-23T08:04:27.575196-05:00 computer-hosting dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=192.168.1.67, lip=97.76.140.174, mpid=829134, TLS, session=<ygopaX1LKMXAqAFD>
2026-02-23T08:04:27.695101-05:00 computer-hosting kernel: [259978.680214] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58841 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:28.871099-05:00 computer-hosting kernel: [259979.855841] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5125 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:29.307395-05:00 computer-hosting postfix/submissions/smtpd[829048]: warning: hostname 41.215.125.250.accesskenya.com does not resolve to address 41.215.125.250: Name or service not known
2026-02-23T08:04:29.307474-05:00 computer-hosting postfix/submissions/smtpd[829048]: connect from unknown[41.215.125.250]
2026-02-23T08:04:30.099099-05:00 computer-hosting kernel: [259981.084882] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=192.140.93.1 DST=97.76.140.174 LEN=56 TOS=0x00 PREC=0x00 TTL=241 ID=39270 DF PROTO=ICMP TYPE=11 CODE=0 [SRC=97.76.140.174 DST=192.140.93.119 LEN=1078 TOS=0x00 PREC=0x00 TTL=1 ID=39270 DF PROTO=TCP INCOMPLETE [8 bytes] ]
2026-02-23T08:04:32.207612-05:00 computer-hosting postfix/submission/smtpd[829124]: disconnect from unknown[192.168.1.67] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=8
2026-02-23T08:04:39.209209-05:00 computer-hosting postfix/submissions/smtpd[829048]: warning: unknown[41.215.125.250]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-02-23T08:04:39.421461-05:00 computer-hosting dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=59.16.58.230, lip=97.76.140.174, session=<jczFaX1LFOY7EDrm>
2026-02-23T08:04:40.191307-05:00 computer-hosting named[857]: connection refused resolving 'ns9.worldcall.net.pk/A/IN': 117.102.7.149#53
2026-02-23T08:04:40.395303-05:00 computer-hosting postfix/submissions/smtpd[829048]: lost connection after AUTH from unknown[41.215.125.250]
2026-02-23T08:04:40.395382-05:00 computer-hosting postfix/submissions/smtpd[829048]: disconnect from unknown[41.215.125.250] ehlo=1 auth=0/1 commands=1/2
2026-02-23T08:04:40.483773-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103474 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.483846-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103475 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.483866-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103476 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.483885-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103477 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484036-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103478 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484180-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103479 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484282-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103480 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484396-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103481 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484526-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103482 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484657-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103483 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.663107-05:00 computer-hosting kernel: [259991.648257] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=157.55.39.193 DST=97.76.140.174 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=1 DF PROTO=TCP SPT=15182 DPT=443 WINDOW=0 RES=0x00 ACK RST URGP=0
2026-02-23T08:04:40.704869-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '249.99.116.in-addr.arpa/NS/IN': 203.113.131.1#53
2026-02-23T08:04:40.961899-05:00 computer-hosting named[857]: host unreachable resolving '249.99.116.in-addr.arpa/NS/IN': 203.113.131.2#53
2026-02-23T08:04:41.319107-05:00 computer-hosting kernel: [259992.306345] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=194.113.226.135 DST=97.76.140.174 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=31386 PROTO=TCP SPT=63196 DPT=25565 WINDOW=53270 RES=0x00 SYN URGP=0
2026-02-23T08:04:45.655996-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '133.208.129.103.in-addr.arpa/PTR/IN': 103.41.213.2#53
2026-02-23T08:04:46.291566-05:00 computer-hosting dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=59.16.58.230, lip=97.76.140.174, session=<0EDraX1LRs47EDrm>
2026-02-23T08:04:50.392742-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '64.39.179.118.in-addr.arpa/PTR/IN': 202.4.96.7#53
2026-02-23T08:04:50.484090-05:00 computer-hosting named[857]: skipping nameserver 'ns6.telkomhosting.com' because it is a CNAME, while resolving 'ns2.telkom.net.id/A'
2026-02-23T08:04:50.484172-05:00 computer-hosting named[857]: skipping nameserver 'ns6.telkomhosting.com' because it is a CNAME, while resolving 'ns2.telkom.net.id/AAAA'
2026-02-23T08:04:50.707640-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '64.39.179.118.in-addr.arpa/PTR/IN': 202.4.96.2#53
2026-02-23T08:04:51.860876-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '238.48.92.91.in-addr.arpa/PTR/IN': 102.165.7.58#53
    when trying to update ispconfig i get cannot find file
    thankyou for looking
    jimmie
     
    Last edited: Feb 23, 2026
    jimmie, Feb 23, 2026
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Take a look at the Apache error.log file to see why it crashes.

    I don't think an ISPConfig update is needed or useful at the moment. Besides that, please always post exact error messages, which is the exact file not found message you get?
     
    till, Feb 23, 2026
    #2
  3. jimmie

    jimmie Member

    Code:
    2026-02-23T08:04:03.818206-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 23.61.199.65#53
2026-02-23T08:04:03.838401-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 2.22.230.67#53
2026-02-23T08:04:03.873363-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 2.16.40.66#53
2026-02-23T08:04:03.913292-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 23.211.133.66#53
2026-02-23T08:04:03.985688-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '135.58.172.in-addr.arpa/NS/IN': 184.26.161.65#53
2026-02-23T08:04:04.230699-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '185.234.84.206.in-addr.arpa/PTR/IN': 103.88.221.245#53
2026-02-23T08:04:04.515582-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '185.234.84.206.in-addr.arpa/PTR/IN': 103.88.220.245#53
2026-02-23T08:04:10.005791-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '199.53.1.in-addr.arpa/NS/IN': 42.112.43.43#53
2026-02-23T08:04:10.356341-05:00 computer-hosting postfix/submissions/smtpd[829048]: warning: unknown[61.160.196.2]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-02-23T08:04:12.196100-05:00 computer-hosting named[857]: SERVFAIL unexpected RCODE resolving '23.238.37.in-addr.arpa/NS/IN': 109.224.13.46#53
2026-02-23T08:04:12.391752-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '23.238.37.in-addr.arpa/NS/IN': 109.224.14.46#53
2026-02-23T08:04:12.577985-05:00 computer-hosting named[857]: SERVFAIL unexpected RCODE resolving '9.23.238.37.in-addr.arpa/PTR/IN': 109.224.13.46#53
2026-02-23T08:04:12.773124-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '9.23.238.37.in-addr.arpa/PTR/IN': 109.224.14.46#53
2026-02-23T08:04:13.045004-05:00 computer-hosting postfix/submissions/smtpd[829048]: lost connection after AUTH from unknown[61.160.196.2]
2026-02-23T08:04:13.045124-05:00 computer-hosting postfix/submissions/smtpd[829048]: disconnect from unknown[61.160.196.2] ehlo=1 auth=0/1 commands=1/2
2026-02-23T08:04:13.511098-05:00 computer-hosting kernel: [259964.497479] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5121 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:14.477231-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '100.37.49.in-addr.arpa/NS/IN': 49.45.43.43#53
2026-02-23T08:04:14.523104-05:00 computer-hosting kernel: [259965.509175] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5122 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:14.814821-05:00 computer-hosting named[857]: validating 69.191.187.160.in-addr.arpa/PTR: no valid signature found
2026-02-23T08:04:15.280708-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '100.37.49.in-addr.arpa/NS/IN': 49.45.43.42#53
2026-02-23T08:04:15.793420-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '154.235.117.in-addr.arpa/NS/IN': 218.248.240.209#53
2026-02-23T08:04:15.945170-05:00 computer-hosting kernel: [259966.934048] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58837 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:16.105194-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '154.235.117.in-addr.arpa/NS/IN': 218.248.240.178#53
2026-02-23T08:04:16.406689-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '41.154.235.117.in-addr.arpa/PTR/IN': 218.248.240.209#53
2026-02-23T08:04:16.707324-05:00 computer-hosting kernel: [259967.696183] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5123 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:16.722904-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '41.154.235.117.in-addr.arpa/PTR/IN': 218.248.240.178#53
2026-02-23T08:04:16.732173-05:00 computer-hosting kernel: [259967.721031] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58838 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:18.072947-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '151.217.113.188.in-addr.arpa/PTR/IN': 188.113.226.1#53
2026-02-23T08:04:18.279101-05:00 computer-hosting kernel: [259969.267328] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58839 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:18.287790-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '151.217.113.188.in-addr.arpa/PTR/IN': 188.113.226.2#53
2026-02-23T08:04:18.962865-05:00 computer-hosting postfix/submissions/smtpd[828883]: connect from unknown[210.206.24.234]
2026-02-23T08:04:20.017169-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '90.43.49.in-addr.arpa/NS/IN': 49.45.43.43#53
2026-02-23T08:04:20.800235-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '90.43.49.in-addr.arpa/NS/IN': 49.45.43.42#53
2026-02-23T08:04:21.079121-05:00 computer-hosting kernel: [259972.064108] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=194.113.226.135 DST=97.76.140.174 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=51677 PROTO=TCP SPT=46545 DPT=25565 WINDOW=53270 RES=0x00 SYN URGP=0
2026-02-23T08:04:21.507098-05:00 computer-hosting kernel: [259972.493537] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58840 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:21.863409-05:00 computer-hosting named[857]: connection refused resolving '96.49.197.103.in-addr.arpa/PTR/IN': 34.41.139.193#53
2026-02-23T08:04:21.876511-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '234.251.171.in-addr.arpa/NS/IN': 203.113.131.1#53
2026-02-23T08:04:22.144483-05:00 computer-hosting named[857]: host unreachable resolving '234.251.171.in-addr.arpa/NS/IN': 203.113.131.2#53
2026-02-23T08:04:25.512201-05:00 computer-hosting postfix/submission/smtpd[829124]: connect from unknown[192.168.1.67]
2026-02-23T08:04:26.260304-05:00 computer-hosting postfix/submissions/smtpd[828883]: warning: unknown[210.206.24.234]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-02-23T08:04:26.641227-05:00 computer-hosting postfix/submission/smtpd[829124]: 9C75616299AD: client=unknown[192.168.1.67], sasl_method=PLAIN, [email protected]
2026-02-23T08:04:26.694236-05:00 computer-hosting postfix/cleanup[829130]: 9C75616299AD: message-id=<[email protected]>
2026-02-23T08:04:27.138558-05:00 computer-hosting postfix/qmgr[1633]: 9C75616299AD: from=<[email protected]>, size=3709, nrcpt=1 (queue active)
2026-02-23T08:04:27.166550-05:00 computer-hosting postfix/submissions/smtpd[828883]: lost connection after AUTH from unknown[210.206.24.234]
2026-02-23T08:04:27.166656-05:00 computer-hosting postfix/submissions/smtpd[828883]: disconnect from unknown[210.206.24.234] ehlo=1 auth=0/1 commands=1/2
2026-02-23T08:04:27.455346-05:00 computer-hosting dovecot: imap([email protected])<27682></XK6zENLEePAqAFD>: Disconnected: Logged out in=180889 out=635070 deleted=0 expunged=0 trashed=0 hdr_count=1 hdr_bytes=542 body_count=0 body_bytes=0
2026-02-23T08:04:27.575196-05:00 computer-hosting dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=192.168.1.67, lip=97.76.140.174, mpid=829134, TLS, session=<ygopaX1LKMXAqAFD>
2026-02-23T08:04:27.695101-05:00 computer-hosting kernel: [259978.680214] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=95.104.164.116 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=58841 DF PROTO=TCP SPT=39570 DPT=443 WINDOW=1503 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:28.871099-05:00 computer-hosting kernel: [259979.855841] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=91.233.43.245 DST=97.76.140.174 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5125 DF PROTO=TCP SPT=52404 DPT=443 WINDOW=1504 RES=0x00 ACK FIN URGP=0
2026-02-23T08:04:29.307395-05:00 computer-hosting postfix/submissions/smtpd[829048]: warning: hostname 41.215.125.250.accesskenya.com does not resolve to address 41.215.125.250: Name or service not known
2026-02-23T08:04:29.307474-05:00 computer-hosting postfix/submissions/smtpd[829048]: connect from unknown[41.215.125.250]
2026-02-23T08:04:30.099099-05:00 computer-hosting kernel: [259981.084882] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=192.140.93.1 DST=97.76.140.174 LEN=56 TOS=0x00 PREC=0x00 TTL=241 ID=39270 DF PROTO=ICMP TYPE=11 CODE=0 [SRC=97.76.140.174 DST=192.140.93.119 LEN=1078 TOS=0x00 PREC=0x00 TTL=1 ID=39270 DF PROTO=TCP INCOMPLETE [8 bytes] ]
2026-02-23T08:04:32.207612-05:00 computer-hosting postfix/submission/smtpd[829124]: disconnect from unknown[192.168.1.67] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=8
2026-02-23T08:04:39.209209-05:00 computer-hosting postfix/submissions/smtpd[829048]: warning: unknown[41.215.125.250]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-02-23T08:04:39.421461-05:00 computer-hosting dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=59.16.58.230, lip=97.76.140.174, session=<jczFaX1LFOY7EDrm>
2026-02-23T08:04:40.191307-05:00 computer-hosting named[857]: connection refused resolving 'ns9.worldcall.net.pk/A/IN': 117.102.7.149#53
2026-02-23T08:04:40.395303-05:00 computer-hosting postfix/submissions/smtpd[829048]: lost connection after AUTH from unknown[41.215.125.250]
2026-02-23T08:04:40.395382-05:00 computer-hosting postfix/submissions/smtpd[829048]: disconnect from unknown[41.215.125.250] ehlo=1 auth=0/1 commands=1/2
2026-02-23T08:04:40.483773-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103474 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.483846-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103475 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.483866-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103476 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.483885-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103477 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484036-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103478 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484180-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103479 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484282-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103480 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484396-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103481 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484526-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103482 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.484657-05:00 computer-hosting mariadbd[979]: 2026-02-23  8:04:40 1103483 [Warning] Access denied for user 'c1jimmie'@'localhost' to database 'c1WOKIEE2'
2026-02-23T08:04:40.663107-05:00 computer-hosting kernel: [259991.648257] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=157.55.39.193 DST=97.76.140.174 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=1 DF PROTO=TCP SPT=15182 DPT=443 WINDOW=0 RES=0x00 ACK RST URGP=0
2026-02-23T08:04:40.704869-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '249.99.116.in-addr.arpa/NS/IN': 203.113.131.1#53
2026-02-23T08:04:40.961899-05:00 computer-hosting named[857]: host unreachable resolving '249.99.116.in-addr.arpa/NS/IN': 203.113.131.2#53
2026-02-23T08:04:41.319107-05:00 computer-hosting kernel: [259992.306345] [UFW BLOCK] IN=enp1s0 OUT= MAC=84:47:09:3e:f4:df:30:93:bc:fd:d6:aa:08:00 SRC=194.113.226.135 DST=97.76.140.174 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=31386 PROTO=TCP SPT=63196 DPT=25565 WINDOW=53270 RES=0x00 SYN URGP=0
2026-02-23T08:04:45.655996-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '133.208.129.103.in-addr.arpa/PTR/IN': 103.41.213.2#53
2026-02-23T08:04:46.291566-05:00 computer-hosting dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=59.16.58.230, lip=97.76.140.174, session=<0EDraX1LRs47EDrm>
2026-02-23T08:04:50.392742-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '64.39.179.118.in-addr.arpa/PTR/IN': 202.4.96.7#53
2026-02-23T08:04:50.484090-05:00 computer-hosting named[857]: skipping nameserver 'ns6.telkomhosting.com' because it is a CNAME, while resolving 'ns2.telkom.net.id/A'
2026-02-23T08:04:50.484172-05:00 computer-hosting named[857]: skipping nameserver 'ns6.telkomhosting.com' because it is a CNAME, while resolving 'ns2.telkom.net.id/AAAA'
2026-02-23T08:04:50.707640-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '64.39.179.118.in-addr.arpa/PTR/IN': 202.4.96.2#53
2026-02-23T08:04:51.860876-05:00 computer-hosting named[857]: REFUSED unexpected RCODE resolving '238.48.92.91.in-addr.arpa/PTR/IN': 102.165.7.58#53
    can you show me the steps to check that log file
    and here is the file cannot find Unable to retrieve version file.root@server1:
     
    jimmie, Feb 23, 2026
    #3
  4. jimmie

    jimmie Member

    i put this
    tail -f /var/log/apache2/error.log
    in terminal and got this
    server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting
    server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting
     
    jimmie, Feb 23, 2026
    #4
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Have you checked the load of your system? Use e.g. top command.

    I guess one of your sites is being attacked with a DOS and your system runs out of resources.
     
    till, Feb 23, 2026
    #5
  6. jimmie

    jimmie Member

     
    jimmie, Feb 23, 2026
    #6
  7. jimmie

    jimmie Member

    this
    Server Load (Server : computer-hosting.com)


    Server online since: 3 days, 2:28 hours
    Users Online: 2
    System load 1 minute: 4.68
    System load 5 minutes: 4.68
    System load 15 minutes: 3.47
     
    jimmie, Feb 23, 2026
    #7

Share This Page