mod_fcgi graceful kill fail / strange http access from 127.0.01

[macguru]

Hi, folks !

I have strange problem with this setup (ispconfig 3 on SuSE 12.1), Apache error log is full of these messages:

[Sat Sep 29 10:45:01 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 10:49:51 2012] [warn] mod_fcgid: process 18399 graceful kill fail, sending SIGKILL
[Sat Sep 29 10:50:01 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 10:55:02 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 10:56:34 2012] [warn] mod_fcgid: process 18647 graceful kill fail, sending SIGKILL
[Sat Sep 29 11:00:02 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 11:05:02 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 11:08:49 2012] [warn] mod_fcgid: process 20184 graceful kill fail, sending SIGKILL
[Sat Sep 29 11:10:02 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 11:15:01 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 11:15:34 2012] [warn] mod_fcgid: process 20675 graceful kill fail, sending SIGKILL
[Sat Sep 29 11:20:01 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 11:22:34 2012] [warn] mod_fcgid: process 20809 graceful kill fail, sending SIGKILL
[Sat Sep 29 11:25:01 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Sat Sep 29 11:30:01 2012] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /srv/www/htdocs/

mod_fcgid seem to spawn zombie processes, and something (not rootkit I hope), tries to access web directory from loopback.

ps aux didn't reveal anything unusual.

Anyone have a clue what could cause these problem(s).

Thanks in advance for any suggestion(s).

[till]

The connections are from system monitor, the occur in the error.log because a index.html file is missing in the htdocs folder of your server. Just add a empty index.html file.