Many requests to :11

[adrianTNT]

Can someone advise if I should worry about this? This is just a part of the log, apache makes many requests to ::1 , it is this from the sample and another 200 lines like it:

I read on apache site, I disabled it from being logged in apache access/error log, but this is what I see in the stats and I think it looks bad.

Can it be because of some rewrite rule in main_domain.com ?
Thank you.

Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process

Srv PID Acc M CPU SS Req Conn Child Slot Client VHost Request
0-2 25524 0/233/159909 W 5.98 6 0 0.0 1.51 1469.19 80.212.183.139 main_domain.com GET /flash/actionscript/red_grass_1097.html HTTP/1.1
1-2 25256 1/259/156368 C 5.78 0 2 8.5 2.33 1425.84 98.94.163.144 second_domain.com GET /big_thumbs/2003.jpg HTTP/1.1
2-2 26861 0/38/157470 W 0.80 5 0 0.0 0.37 1358.70 80.212.183.139 main_domain.com GET /flash/games/flash_asteroids_1094.html HTTP/1.1
3-2 24532 1/343/157626 C 9.98 0 1287 17.1 3.93 1383.11 98.94.163.144 main_domain.com GET /thumbs/1695.jpg HTTP/1.1
4-2 25657 0/199/154835 W 3.22 0 0 0.0 1.95 1346.37 98.94.163.144 main_domain.com GET /thumbs/709.jpg HTTP/1.1
5-2 26565 0/49/154507 W 0.89 1 0 0.0 0.20 1316.43 98.94.163.144 main_domain.com GET /thumbs/1367.jpg HTTP/1.1
6-2 27158 1/2/152144 C 0.00 0 2 6.7 0.02 1327.03 98.94.163.144 second_domain.com GET /big_thumbs/2314.jpg HTTP/1.1
7-2 27159 1/1/150361 C 0.00 0 457 14.1 0.01 1325.63 98.94.163.144 main_domain.com GET /thumbs/612.jpg HTTP/1.1
8-2 26608 1/66/150758 C 1.09 0 244 0.0 0.61 1293.25 74.98.128.21 second_domain.com GET /flash/all/ HTTP/1.1
9-2 26775 0/45/147921 W 0.74 14 0 0.0 0.22 1274.47 59.125.45.34 main_domain.com GET /thumbs/2963.jpg HTTP/1.0
10-2 27160 1/3/141151 C 0.00 0 2 4.1 0.01 1207.56 98.94.163.144 second_domain.com GET /big_thumbs/2053.jpg HTTP/1.1
11-2 27168 0/0/143904 S 0.47 0 0 0.0 0.00 1260.30 ::1 main_domain.com GET / HTTP/1.0
12-2 25385 1/263/139766 C 3.30 1 1 6.0 6.64 1196.36 98.94.163.144 main_domain.com GET /thumbs/1168.jpg HTTP/1.1
13-2 25386 1/198/139244 C 8.22 0 1 4.9 2.32 1168.18 98.94.163.144 main_domain.com GET /thumbs/432.jpg HTTP/1.1
14-2 27169 0/0/135441 S 0.11 0 0 0.0 0.00 1202.45 ::1 main_domain.com GET / HTTP/1.0
15-2 27170 0/0/133569 W 2.28 0 0 0.0 0.00 1143.02 86.106.33.46 main_domain.com GET /xstats HTTP/1.1
16-2 27171 1/1/131454 C 0.00 0 3 0.1 0.00 1134.44 98.94.163.144 second_domain.com GET /images/stars_mini/10.gif HTTP/1.1
17-2 26869 1/46/125231 C 1.49 0 2 2.9 0.54 1117.06 98.94.163.144 second_domain.com GET /big_thumbs/2332.jpg HTTP/1.1
18-2 26616 0/30/124096 W 0.70 5 0 0.0 0.06 1037.95 59.125.45.34 main_domain.com GET /flash_files/3267/main.swf HTTP/1.0
19-2 - 0/0/118014 . 0.33 128 0 0.0 0.00 1017.97 ::1 main_domain.com GET / HTTP/1.0
20-2 - 0/0/115109 . 1.30 92 0 0.0 0.00 1051.07 ::1 main_domain.com GET / HTTP/1.0
21-2 25661 1/191/108738 C 4.69 1 1 3.3 2.97 895.34 98.94.163.144 main_domain.com GET /thumbs/1056.jpg HTTP/1.1
22-2 23837 1/375/103787 C 6.69 0 1247 17.7 2.54 946.61 98.94.163.144 main_domain.com GET /thumbs/1370.jpg HTTP/1.1
23-2 26878 0/32/103517 W 0.94 0 0 0.0 0.43 908.50 98.94.163.144 main_domain.com GET /thumbs/607.jpg HTTP/1.1
24-2 - 0/0/97655 . 0.11 144 0 0.0 0.00 855.89 ::1 main_domain.com GET / HTTP/1.0
25-2 26115 0/132/90225 W 2.06 2 0 0.0 2.10 834.97 98.94.163.144 main_domain.com GET /thumbs/1865.jpg HTTP/1.1
26-2 26546 1/99/84669 C 2.52 1 590 14.0 0.58 745.39 98.94.163.144 main_domain.com GET /thumbs/2001.jpg HTTP/1.1
27-2 26395 1/89/78618 C 1.37 0 519 14.1 0.83 695.94 98.94.163.144 main_domain.com GET /thumbs/708.jpg HTTP/1.1
28-2 26744 1/33/74825 C 0.61 0 1 2.7 0.12 685.16 98.94.163.144 main_domain.com GET /thumbs/1039.jpg HTTP/1.1
29-2 26745 1/56/63879 C 0.90 0 1 0.5 0.29 590.58 125.22.252.147 main_domain.com GET /images/nothumb.gif HTTP/1.1
30-2 - 0/0/64551 . 0.14 90 0 0.0 0.00 542.03 ::1 main_domain.com GET / HTTP/1.0
31-2 - 0/0/59527 . 0.00 188 0 0.0 0.00 532.75 ::1 main_domain.com GET / HTTP/1.0
32-2 - 0/0/54186 . 4.27 239 0 0.0 0.00 487.56 ::1 main_domain.com GET / HTTP/1.0
33-2 - 0/0/50921 . 4.64 158 0 0.0 0.00 461.16 ::1 main_domain.com GET / HTTP/1.0
34-2 - 0/0/44161 . 4.51 320 0 0.0 0.00 395.63 ::1 main_domain.com GET / HTTP/1.0
35-2 - 0/0/41267 . 2.22 582 0 0.0 0.00 345.87 ::1 main_domain.com GET / HTTP/1.0
36-2 - 0/0/35806 . 0.18 921 0 0.0 0.00 317.61 ::1 main_domain.com GET / HTTP/1.0
37-2 - 0/0/33664 . 0.00 939 0 0.0 0.00 309.42 ::1 main_domain.com GET / HTTP/1.0
38-2 - 0/0/28576 . 0.21 915 0 0.0 0.00 270.24 ::1 main_domain.com GET / HTTP/1.0
39-2 - 0/0/22016 . 0.37 4580 0 0.0 0.00 186.80 ::1 main_domain.com GET / HTTP/1.0
40-2 - 0/0/24265 . 0.00 4664 1 0.0 0.00 199.46 ::1 main_domain.com GET / HTTP/1.0
41-2 - 0/0/18511 . 1.55 4298 0 0.0 0.00 163.32 ::1 main_domain.com GET / HTTP/1.0
42-2 - 0/0/16851 . 0.09 4641 0 0.0 0.00 139.41 ::1 main_domain.com GET / HTTP/1.0
43-2 - 0/0/17175 . 0.22 4643 0 0.0 0.00 155.44 ::1 main_domain.com GET / HTTP/1.0
44-2 - 0/0/14799 . 0.82 4462 0 0.0 0.00 120.60 ::1 main_domain.com GET / HTTP/1.0
45-2 - 0/0/12166 . 0.09 10644 0 0.0 0.00 99.86 ::1 main_domain.com GET / HTTP/1.0
46-2 - 0/0/13404 . 0.35 10573 0 0.0 0.00 131.81 ::1 main_domain.com GET / HTTP/1.0
47-2 - 0/0/11586 . 0.13 10625 0 0.0 0.00 100.32 ::1 main_domain.com GET / HTTP/1.0
48-2 - 0/0/11682 . 0.00 10655 0 0.0 0.00 105.68 ::1 main_domain.com GET / HTTP/1.0
49-2 - 0/0/9011 . 0.08 10653 0 0.0 0.00 85.30 ::1 main_domain.com GET / HTTP/1.0
50-2 - 0/0/10194 . 0.18 10634 0 0.0 0.00 93.18 ::1 main_domain.com GET / HTTP/1.0
51-2 - 0/0/9293 . 1.93 10579 0 0.0 0.00 112.70 ::1 main_domain.com GET / HTTP/1.0
52-2 - 0/0/8933 . 0.30 10574 0 0.0 0.00 82.18 ::1 main_domain.com GET / HTTP/1.0
53-2 - 0/0/7464 . 0.02 10600 0 0.0 0.00 74.71 ::1 main_domain.com GET / HTTP/1.0
54-2 - 0/0/6403 . 0.81 10533 0 0.0 0.00 50.86 ::1 main_domain.com GET / HTTP/1.0
55-2 - 0/0/6646 . 0.08 10663 0 0.0 0.00 61.38 ::1 main_domain.com GET / HTTP/1.0
56-2 - 0/0/6093 . 0.68 10601 0 0.0 0.00 49.93 ::1 main_domain.com GET / HTTP/1.0
57-2 - 0/0/4287 . 0.05 10657 0 0.0 0.00 34.87 ::1 main_domain.com GET / HTTP/1.0
58-2 - 0/0/3777 . 0.02 22825 0 0.0 0.00 32.57 ::1 main_domain.com GET / HTTP/1.0
59-2 - 0/0/4215 . 0.00 22836 0 0.0 0.00 34.63 ::1 main_domain.com GET / HTTP/1.0
60-2 - 0/0/3333 . 0.23 27453 0 0.0 0.00 33.34 ::1 main_domain.com GET / HTTP/1.0
61-2 - 0/0/3186 . 0.00 27511 0 0.0 0.00 28.68 ::1 main_domain.com GET / HTTP/1.0
62-2 - 0/0/2580 . 0.20 27472 0 0.0 0.00 31.97 ::1 main_domain.com GET / HTTP/1.0
63-2 - 0/0/2032 . 0.36 27473 0 0.0 0.00 18.74 ::1 main_domain.com GET / HTTP/1.0
64-2 - 0/0/2167 . 0.06 27499 0 0.0 0.00 26.07 ::1 main_domain.com GET / HTTP/1.0
65-2 - 0/0/1750 . 0.12 27532 0 0.0 0.00 15.32 ::1 main_domain.com GET / HTTP/1.0
66-2 - 0/0/2320 . 4.29 26793 0 0.0 0.00 24.01 ::1 main_domain.com GET / HTTP/1.0
67-2 - 0/0/1621 . 0.18 27457 0 0.0 0.00 13.52 ::1 main_domain.com GET / HTTP/1.0
68-2 - 0/0/2514 . 2.07 27128 0 0.0 0.00 21.60 ::1 main_domain.com GET / HTTP/1.0
69-2 - 0/0/1888 . 0.22 27494 0 0.0 0.00 14.86 ::1 main_domain.com GET / HTTP/1.0
70-2 - 0/0/1497 . 0.03 27517 0 0.0 0.00 10.21 ::1 main_domain.com GET / HTTP/1.0
71-2 - 0/0/1457 . 0.01 27525 0 0.0 0.00 12.31 ::1 main_domain.com GET / HTTP/1.0
72-2 - 0/0/2218 . 0.09 27500 0 0.0 0.00 16.34 ::1 main_domain.com GET / HTTP/1.0
73-2 - 0/0/1070 . 0.29 27467 0 0.0 0.00 8.10 ::1 main_domain.com GET / HTTP/1.0
74-2 - 0/0/1041 . 0.19 27465 0 0.0 0.00 9.76 ::1 main_domain.com GET / HTTP/1.0
75-2 - 0/0/1482 . 0.42 27454 0 0.0 0.00 16.83 ::1 main_domain.com GET / HTTP/1.0
76-2 - 0/0/1430 . 0.66 27363 0 0.0 0.00 15.19 ::1 main_domain.com GET / HTTP/1.0
77-2 - 0/0/1278 . 0.05 27531 0 0.0 0.00 13.88 ::1 main_domain.com GET / HTTP/1.0
78-2 - 0/0/1696 . 0.15 27466 0 0.0 0.00 13.26 ::1 main_domain.com GET / HTTP/1.0
79-2 - 0/0/1153 . 2.15 27216 0 0.0 0.00 9.39 ::1 main_domain.com GET / HTTP/1.0
80-2 - 0/0/2329 . 0.21 27498 0 0.0 0.00 17.55 ::1 main_domain.com GET / HTTP/1.0
81-2 - 0/0/932 . 0.06 27516 0 0.0 0.00 8.20 ::1 main_domain.com GET / HTTP/1.0
82-2 - 0/0/1429 . 1.91 27297 0 0.0 0.00 12.91 ::1 main_domain.com GET / HTTP/1.0
83-2 - 0/0/1900 . 3.25 26989 0 0.0 0.00 18.33 ::1 main_domain.com GET / HTTP/1.0
84-2 - 0/0/1101 . 0.25 27497 0 0.0 0.00 8.03 ::1 main_domain.com GET / HTTP/1.0
85-2 - 0/0/1304 . 0.06 27507 0 0.0 0.00 10.01 ::1 main_domain.com GET / HTTP/1.0
86-2 - 0/0/945 . 0.03 27534 0 0.0 0.00 6.63 ::1 main_domain.com GET / HTTP/1.0
87-2 - 0/0/945 . 0.01 27542 0 0.0 0.00 6.63 ::1 main_domain.com GET / HTTP/1.0
88-2 - 0/0/441 . 0.00 27545 0 0.0 0.00 3.12 ::1 main_domain.com GET / HTTP/1.0
89-2 - 0/0/330 . 0.02 27520 0 0.0 0.00 2.01 ::1 main_domain.com GET / HTTP/1.0
90-2 - 0/0/315 . 0.00 27547 0 0.0 0.00 2.26 ::1 main_domain.com GET / HTTP/1.0
91-2 - 0/0/941 . 0.00 27551 0 0.0 0.00 5.93 ::1 main_domain.com GET / HTTP/1.0
92-2 - 0/0/668 . 0.01 27535 0 0.0 0.00 4.64 ::1 main_domain.com GET / HTTP/1.0
93-2 - 0/0/273 . 0.04 27540 0 0.0 0.00 2.08 ::1 main_domain.com GET / HTTP/1.0
94-2 - 0/0/345 . 0.01 27526 0 0.0 0.00 3.23 ::1 main_domain.com GET / HTTP/1.0
95-2 - 0/0/256 . 0.39 27476 0 0.0 0.00 2.16 ::1 main_domain.com GET / HTTP/1.0
96-2 - 0/0/202 . 0.03 27528 0 0.0 0.00 1.41 ::1 main_domain.com GET / HTTP/1.0
97-2 - 0/0/54 . 0.15 50160 0 0.0 0.00 0.26 ::1 main_domain.com GET / HTTP/1.0
98-2 - 0/0/194 . 6.46 50260 0 0.0 0.00 1.47 ::1 main_domain.com GET / HTTP/1.0
99-2 - 0/0/49 . 0.34 50146 0 0.0 0.00 0.13 ::1 main_domain.com GET / HTTP/1.0
100-2 - 0/0/197 . 0.54 50331 0 0.0 0.00 1.05 ::1 main_domain.com GET / HTTP/1.0
101-2 - 0/0/23 . 0.00 50333 0 0.0 0.00 0.10 ::1 main_domain.com GET / HTTP/1.0
102-2 - 0/0/58 . 0.58 50334 0 0.0 0.00 1.08 ::1 main_domain.com GET / HTTP/1.0
103-2 - 0/0/259 . 1.56 49683 0 0.0 0.00 1.95 ::1 main_domain.com GET / HTTP/1.0
104-2 - 0/0/10 . 0.03 50308 0 0.0 0.00 0.07 ::1 main_domain.com GET / HTTP/1.0
105-2 - 0/0/75 . 0.60 50182 0 0.0 0.00 0.38 ::1 main_domain.com GET / HTTP/1.0
106-2 - 0/0/53 . 0.04 50227 0 0.0 0.00 0.33 ::1 main_domain.com GET / HTTP/1.0
107-2 - 0/0/23 . 0.12 50166 0 0.0 0.00 0.05 ::1 main_domain.com GET / HTTP/1.0


Srv Child Server number - generation
PID OS process ID
Acc Number of accesses this connection / this child / this slot
M Mode of operation
CPU CPU usage, number of seconds
SS Seconds since beginning of most recent request
Req Milliseconds required to process most recent request
Conn Kilobytes transferred this connection
Child Megabytes transferred this child
Slot Total megabytes transferred this slot
SSL/TLS Session Cache Status:
cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0
sub-caches: 32, indexes per sub-cache: 133
index usage: 0%, cache usage: 0%
total sessions stored since starting: 309
total sessions expired since starting: 309
total (pre-expiry) sessions scrolled out of the cache: 0
total retrieves since starting: 21 hit, 0 miss
total removes since starting: 0 hit, 0 miss

[adrianTNT]

I got an email notification about jdMorgan replying but I cannot see any message here.

[jdMorgan]

We seem to be having some problems here today. I too have "lost" several replies.

Your patience is appreciated.

In your logs, ::11 appears to be the IPv6 *client* address that is sending requests to your server. Investigate any front-end servers that may be proxying requests to this server... including the possibility that this server may be reverse-proxying requests to itself.

Jim

[adrianTNT]

"reverse-proxying requests to itself"
can that request also be a php script that has an infinite loop in it?

[jdMorgan]

It could be anything that accesses this server via HTTP from an IPv6 address of ::11.

Technically, your PHP scripts should probably be doing local-filesystem "includes" and not using HTTP URL GETs to read in other scripts or data. The script code could be wrong, or the allocation of your scripts between the front-end and the back-end could be what I'd term "non-optimal," making HTTP GETs appear to be necessary to do script includes; It's very inefficient to use an HTTP request to get a file when a local-filesystem disk read would do.

But we see enough different requirements here with front-ends reverse-proxying to back-ends that I can't be sure what your set-up is and/or what it should be.

Jim

[adrianTNT]

Thanks.
I had an external firewall installed and then it was removed, it had some IP changes made to the server using 10.0.0.1, maybe some bad settings/files remained on the server.
I am moving all data to a new server now, hopefully it will not happen there, if it does then it is probably because of the site content (scripts, .htaccess).

[adrianTNT]

Just a quick update:
I switched to a new server, Cent OS and Plesk 9.5, I don't get these requests.