Preventing server load issues
I woke up this this morning to one of my servers completely crippled, it had been down for over 6 hours, I could ping the server so I suspected a load issue, managing get access I was able to restart apache, eventually the load dropped and service was resumed.
Similar issues happen every so often, i'm looking for ways I can prevent it in the future?
Upon investigation, it seemed to happen when the server was doing backups.. I logged in and could see backups had started again, I could see pigz running which was using a lot of CPU... I then checked Apache logs and could see a single IP address spamming my server.. with the backups going on I don't think my server could cope, requests built up and eventually came to a stand still.
I can tweak some settings in WHM to stop backups running when the server reaches a critical level, however, I don't understand what value it should be? The setting 'Extra CPUs for server load' says "a server with 4 physical CPUs and a value of 2 in this field will be considered "critical" in these cases once the load reaches 6"
How does a server with 4 CPUs and a value of 2 in this field get to 6 as critical? I have a Intel(R) Xeon(R) CPU E3-1230 V2 in this server which apparently have 8 processors.
So what setting should I have here?
Finally, the apache log is very alarming.
Probably hard to read, the thing to take away from this is the IP 188.143.xxx.xx is on there over 100 times.. I checked it out and it looks like it is from a forum spammer. I have blocked the IP but how can I stop this happening again from another IP... Surely there is a way to limit connections from a single IP.. or detect this sort of activity and block it? Should the server be able to handle this? Any help is appreciated. Thanks :)
Srv PID Acc M CPU SS Req Conn Child Slot Client VHost Request
0-131 13706 0/230/28926 _ 19.50 0 5116 0.0 3.06 1121.13 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
1-131 13710 0/236/28638 W 15.87 0 0 0.0 4.22 1219.99 188.143.xxx.xx example.com:80 GET / HTTP/1.1
2-131 13714 0/212/28451 _ 19.88 0 3591 0.0 4.26 1067.05 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
3-131 13717 0/267/29863 W 19.49 0 0 0.0 5.84 1201.29 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
4-131 25029 0/39/28805 W 3.60 3 0 0.0 0.55 1171.83 188.143.xxx.xx example.com:80 GET /forum/search.php?s=baf0058932b335c064c70ce39ac4aa9b&do=fin
5-131 21053 0/58/29344 W 8.04 2 0 0.0 1.73 1189.93 188.143.xxx.xx example.com:80 GET /north-east-rave-history/ HTTP/1.1
6-131 13699 0/258/29006 W 23.30 0 0 0.0 7.64 1140.04 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
7-131 13721 0/253/28850 W 20.55 0 0 0.0 4.75 1129.58 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
8-131 13702 0/247/29686 _ 18.24 0 5535 0.0 5.30 1159.00 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
9-131 13727 0/234/28354 W 18.17 2 0 0.0 3.47 1093.17 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
10-131 13728 0/264/29779 W 20.42 0 0 0.0 5.93 1408.17 188.143.xxx.xx example.com:80 GET / HTTP/1.1
11-131 19007 0/121/28099 W 8.87 0 0 0.0 5.58 1192.03 188.143.xxx.xx example.com:80 GET / HTTP/1.1
12-131 13729 0/271/28237 W 18.65 0 0 0.0 4.55 1090.85 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
13-131 13701 0/244/27973 W 19.07 3 0 0.0 3.45 1197.74 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
14-131 19008 0/106/27620 W 10.52 3 0 0.0 8.09 1226.08 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
15-131 13736 0/246/27016 _ 20.18 0 6797 0.0 4.43 1212.37 188.143.xxx.xx example.com:80 GET /news/ HTTP/1.1
16-131 19685 0/97/28122 _ 9.38 0 6256 0.0 2.14 1228.59 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
17-131 13738 0/248/27062 W 23.45 0 0 0.0 4.61 1049.09 188.143.xxx.xx example.com:80 GET / HTTP/1.1
18-131 17456 0/141/26585 W 14.07 0 0 0.0 3.62 1001.17 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
19-131 17461 0/154/26871 W 13.23 0 0 0.0 3.79 1063.93 192.0.101.226 example2.example.com:80 HEAD / HTTP/1.1
20-131 19692 0/86/26166 W 9.73 4 0 0.0 1.76 997.02 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
21-131 19693 0/98/27253 W 9.12 1 0 0.0 1.66 1081.08 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
22-131 20333 0/85/26312 _ 8.61 0 4784 0.0 1.41 1014.31 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
23-131 13960 0/212/26490 W 17.03 3 0 0.0 4.50 1046.23 188.143.xxx.xx example.com:80 GET /forum/search.php?s=baf0058932b335c064c70ce39ac4aa9b&do=fin
24-131 21054 0/58/27129 W 7.87 0 0 0.0 1.46 1073.75 188.143.xxx.xx example.com:80 GET /rave-audio/ HTTP/1.1
25-131 21055 0/65/25792 W 4.93 1 0 0.0 1.18 979.98 136.243.103.92 example.com:80 GET /forum/archive/index.php/t-118167.html HTTP/1.0
26-131 14071 0/248/26471 W 20.69 0 0 0.0 4.44 1046.66 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
27-131 25122 0/27/24868 _ 5.45 0 4669 0.0 0.63 985.46 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
28-131 14180 0/217/25287 W 16.72 1 0 0.0 2.73 1009.00 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
29-131 25205 0/12/25274 W 2.33 0 0 0.0 0.38 985.59 188.143.xxx.xx example.com:80 GET / HTTP/1.1
30-131 18448 0/125/25067 W 9.56 0 0 0.0 2.05 950.51 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
31-131 14188 0/236/23993 _ 17.26 0 5044 0.0 3.99 972.27 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
32-131 14189 0/208/24091 W 16.59 1 0 0.0 2.63 886.15 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
33-131 25206 0/32/23730 W 3.85 1 0 0.0 0.63 1070.29 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
34-131 14232 0/217/22845 W 19.78 1 0 0.0 4.38 914.23 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
35-131 25268 0/25/22675 W 3.97 0 0 0.0 0.59 854.91 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
36-131 13695 0/238/21395 W 16.26 3 0 0.0 4.08 866.57 188.143.xxx.xx example.com:80 GET /forum/search.php?s=baf0058932b335c064c70ce39ac4aa9b&do=fin
37-131 18458 0/124/21023 W 11.15 0 0 0.0 2.31 913.00 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
38-131 25269 0/28/19490 W 2.62 1 0 0.0 0.49 799.64 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
39-131 16314 0/179/19516 W 13.97 3 0 0.0 3.13 759.67 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
40-131 25270 0/26/17838 W 3.10 0 0 0.0 0.42 713.99 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
41-131 25271 0/22/18720 W 4.84 0 0 0.0 0.55 710.79 188.143.xxx.xx example.com:80 GET /dj-mc-profiles/ HTTP/1.1
42-131 25325 0/28/14345 W 2.75 2 0 0.0 0.48 532.38 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
43-131 13696 0/247/11474 _ 17.30 0 4767 0.0 4.23 465.22 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
44-131 18460 0/131/12460 W 12.81 0 0 0.0 2.82 483.97 188.143.xxx.xx example.com:80 GET /events/ HTTP/1.1
45-131 25326 0/24/10122 _ 3.90 0 5059 0.0 0.66 466.48 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
46-131 18470 0/125/9848 W 10.46 0 0 0.0 2.24 384.98 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
47-131 25327 0/25/8789 W 4.38 2 0 0.0 0.54 347.61 192.243.55.129 example.com:80 GET /forum/archive/index.php/t-161822.html?s=e9942ecd306adb907b
48-131 18471 0/129/8465 W 10.65 21 0 0.0 1.96 351.13 141.101.98.37 ovengleamers.ovengleam.com:80 POST /wp-admin/admin-ajax.php HTTP/1.1
49-131 25328 0/20/5843 W 3.60 0 0 0.0 0.51 234.20 188.143.xxx.xx example.com:80 GET /forum/threads/208623-my-discogs-account/page3 HTTP/1.1
50-131 25329 0/28/8331 _ 3.49 0 4356 0.0 0.60 303.42 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
51-131 18474 0/132/7261 W 12.15 3 0 0.0 2.43 297.77 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
52-131 25330 0/28/5964 W 3.65 3 0 0.0 0.55 239.72 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
53-131 18476 0/135/6419 W 8.39 3 0 0.0 2.92 311.35 188.143.xxx.xx example.com:80 GET /buzzradio/ HTTP/1.1
54-131 25331 0/12/3543 W 1.60 0 0 0.0 0.34 152.79 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
55-131 25332 0/25/2336 W 3.59 2 0 0.0 0.58 93.92 188.143.xxx.xx example.com:80 GET / HTTP/1.1
56-131 25414 0/25/3085 W 3.27 2 0 0.0 0.60 117.97 188.143.xxx.xx example.com:80 GET /rave-audio/ HTTP/1.1
57-131 25415 0/22/2395 W 3.35 2 0 0.0 0.40 105.49 188.143.xxx.xx example.com:80 GET / HTTP/1.1
58-131 25416 0/22/2559 W 2.62 3 0 0.0 0.41 101.48 188.143.xxx.xx example.com:80 GET / HTTP/1.1
59-131 25417 0/21/1861 W 3.22 0 0 0.0 0.48 100.67 188.143.xxx.xx example.com:80 GET /forum/threads/194508-Signing-Off-The-Dole/page3 HTTP/1.1
60-131 25418 0/19/715 _ 3.64 0 4828 0.0 0.55 29.95 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
61-131 25419 0/22/634 W 3.40 2 0 0.0 0.62 28.53 188.143.xxx.xx example.com:80 GET / HTTP/1.1
62-131 25420 0/26/476 W 3.41 0 0 0.0 0.52 22.54 188.143.xxx.xx example.com:80 GET /events/ HTTP/1.1
63-131 25421 0/24/1437 W 2.88 0 0 0.0 0.52 72.53 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
64-131 25422 0/18/348 W 3.30 0 0 0.0 0.50 13.16 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
65-131 25423 0/23/888 W 3.60 1 0 0.0 0.37 76.33 188.143.xxx.xx example.com:80 GET /rave-audio/ HTTP/1.1
66-131 25424 0/28/771 _ 3.24 0 3822 0.0 0.51 43.67 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
67-131 25425 0/26/593 _ 3.98 0 5055 0.0 0.68 31.36 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
68-131 25426 0/29/474 _ 2.61 0 4355 0.0 0.49 28.65 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
69-131 25427 0/22/497 W 2.55 0 0 0.0 0.47 39.82 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
70-131 25428 0/23/815 W 3.26 2 0 0.0 0.46 42.22 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
71-131 25429 0/25/535 W 3.15 1 0 0.0 0.57 32.52 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
72-131 25916 0/15/1027 W 2.70 0 0 0.0 0.34 36.15 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
73-131 25995 0/16/371 _ 1.94 0 5486 0.0 0.37 22.28 188.143.xxx.xx example.com:80 GET /events/ HTTP/1.1
74-131 25996 0/16/174 _ 2.28 0 5002 0.0 0.41 8.45 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
75-131 26070 0/14/142 W 2.38 3 0 0.0 0.30 6.62 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
76-131 26071 0/14/1674 W 1.96 0 0 0.0 0.30 71.91 188.143.xxx.xx example.com:80 GET / HTTP/1.1
77-131 26072 0/14/314 W 3.50 1 0 0.0 0.38 19.00 188.143.xxx.xx example.com:80 GET / HTTP/1.1
78-131 26073 0/16/302 W 3.09 3 0 0.0 0.41 13.18 188.143.xxx.xx example.com:80 GET /forum/threads/180667-The-Tune-Thread/page2 HTTP/1.1
79-131 26132 0/13/433 W 2.14 2 0 0.0 0.27 13.77 188.143.xxx.xx example.com:80 GET /forum/search.php?s=baf0058932b335c064c70ce39ac4aa9b&do=fin
80-131 26133 0/15/156 W 2.50 3 0 0.0 0.35 13.82 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
81-131 26134 0/13/137 W 3.02 1 0 0.0 0.35 3.58 188.143.xxx.xx example.com:80 GET / HTTP/1.1
82-131 26135 0/14/116 W 2.70 0 0 0.0 0.39 4.92 188.143.xxx.xx example.com:80 GET / HTTP/1.1
83-131 26136 0/15/238 W 1.85 2 0 0.0 0.28 6.41 188.143.xxx.xx example.com:80 GET / HTTP/1.1
84-131 26137 0/15/104 _ 1.99 0 4838 0.0 0.36 3.20 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
85-131 26138 0/14/882 _ 3.07 0 6130 0.0 0.36 41.23 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
86-131 26139 0/14/29 W 3.28 2 0 0.0 0.39 1.22 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
87-131 26200 0/16/270 W 2.12 0 0 0.0 0.33 10.13 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
88-131 26202 0/14/518 W 1.51 0 0 0.0 0.30 17.31 188.143.xxx.xx example.com:80 GET /forum/threads/148877-Anyone-give-me-the-link-for HTTP/1.1
89-131 26203 0/15/42 W 2.33 0 0 0.0 0.33 1.05 188.143.xxx.xx example.com:80 GET / HTTP/1.1
90-131 26204 0/13/1069 W 2.65 0 0 0.0 0.34 34.85 188.143.xxx.xx example.com:80 GET / HTTP/1.1
91-131 26205 1/13/88 C 1.87 1 5689 2.3 0.16 95.38 81.138.10.44 5.77.35.140:80 NULL
92-131 26206 0/10/190 W 2.31 0 0 0.0 0.24 6.42 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
93-131 26207 0/13/120 W 2.79 1 0 0.0 0.32 6.82 188.143.xxx.xx example.com:80 GET /exclusive-mixes/ HTTP/1.1
94-131 26208 0/14/57 W 2.13 1 0 0.0 0.26 1.93 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
95-131 26209 0/12/35 _ 1.91 0 3482 0.0 0.32 6.40 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
96-131 26210 0/10/260 W 1.98 3 0 0.0 0.23 7.63 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
97-131 26211 1/16/360 W 2.73 1 0 9.2 0.40 14.22 86.180.105.43 example.com:80 GET /forum/clientscript/vbulletin_css/style00012l/metro_theme_p
98-131 26212 0/14/197 W 2.88 1 0 0.0 0.31 4.84 188.143.xxx.xx example.com:80 GET /rave-audio/ HTTP/1.1
99-131 26213 0/15/1200 W 2.43 2 0 0.0 0.31 47.56 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
100-131 26214 0/14/161 W 1.73 3 0 0.0 0.25 4.23 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
101-131 26215 0/15/46 W 1.65 0 0 0.0 0.29 3.84 127.0.0.1 server.example3.com:80 GET /whm-server-status HTTP/1.1
102-131 26216 0/12/123 W 2.56 0 0 0.0 0.28 5.34 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
103-131 27142 0/5/41 W 0.49 2 0 0.0 0.11 1.03 188.143.xxx.xx example.com:80 GET /forum/newreply.php?s=baf0058932b335c064c70ce39ac4aa9b&do=n
104-131 27189 0/4/145 W 0.81 3 0 0.0 0.10 2.78 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
105-131 27190 0/4/52 W 0.78 1 0 0.0 0.10 2.05 188.143.xxx.xx example.com:80 GET / HTTP/1.1
106-131 27199 0/5/114 W 0.99 0 0 0.0 0.15 1.30 188.143.xxx.xx example.com:80 GET /forum/threads/185876-Tattoos/page7 HTTP/1.1
107-131 27200 0/4/50 _ 0.38 0 5125 0.0 0.10 2.11 188.143.xxx.xx example.com:80 GET /about-example/ HTTP/1.1
108-131 27201 0/3/13 W 0.24 0 0 0.0 0.08 1.42 188.143.xxx.xx example.com:80 GET /advertising/ HTTP/1.1
109-131 27202 0/2/409 W 0.11 11 0 0.0 0.02 22.41 5.77.35.140 example2.example.com:80 POST /wp-cron.php?doing_wp_cron=1452910055.36900091171264648437
110-128 - 0/0/912 . 0.00 19735 0 0.0 0.00 38.00 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
111-128 - 0/0/23 . 0.13 19740 0 0.0 0.00 0.87 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
112-128 - 0/0/12 . 0.00 19756 0 0.0 0.00 0.24 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
113-128 - 0/0/33 . 0.26 19724 0 0.0 0.00 7.71 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
114-128 - 0/0/174 . 9.10 18230 0 0.0 0.00 5.13 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
115-128 - 0/0/180 . 8.75 18236 33 0.0 0.00 6.81 5.64.243.89
116-128 - 0/0/33 . 0.40 19702 0 0.0 0.00 1.39 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
117-128 - 0/0/5 . 0.00 19755 0 0.0 0.00 0.01 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
118-128 - 0/0/34 . 0.13 19738 0 0.0 0.00 1.16 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
119-128 - 0/0/13 . 0.26 19722 0 0.0 0.00 0.20 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
120-128 - 0/0/29 . 0.40 19701 0 0.0 0.00 0.77 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
121-128 - 0/0/484 . 1.26 19733 0 0.0 0.00 13.28 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
122-128 - 0/0/49 . 0.00 19754 0 0.0 0.00 4.43 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
123-128 - 0/0/32 . 0.41 19671 0 0.0 0.00 91.16 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
124-128 - 0/0/23 . 0.13 19737 0 0.0 0.00 2.42 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
125-128 - 0/0/14 . 0.50 19710 0 0.0 0.00 0.43 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
126-128 - 0/0/80 . 2.24 19687 0 0.0 0.00 2.99 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
127-128 - 0/0/77 . 5.39 18985 0 0.0 0.00 1.96 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
128-128 - 0/0/379 . 0.28 19700 0 0.0 0.00 12.92 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
129-128 - 0/0/5 . 0.39 19721 0 0.0 0.00 0.01 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
130-128 - 0/0/120 . 5.79 19085 0 0.0 0.00 5.82 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
131-128 - 0/0/8 . 0.68 19689 0 0.0 0.00 0.01 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
132-128 - 0/0/9 . 0.39 19699 0 0.0 0.00 0.04 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
133-128 - 0/0/129 . 7.42 18652 0 0.0 0.00 4.91 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
134-128 - 0/0/2 . 0.00 19753 0 0.0 0.00 0.00 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
135-128 - 0/0/18 . 0.12 19736 0 0.0 0.00 0.07 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
136-128 - 0/0/4 . 0.39 19693 0 0.0 0.00 0.01 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
137-128 - 0/0/3 . 0.04 19713 0 0.0 0.00 0.03 ::1 server.example3.com:443 OPTIONS * HTTP/1.0
138-128 - 0/0/3 . 0.26 19720 0 0.0 0.00 0.01 ::1 server.example3.com:443 OPTIONS * HTTP/1.0Probably hard to read, the thing to take away from this is the IP 188.143.xxx.xx is on there over 100 times.. I checked it out and it looks like it is from a forum spammer. I have blocked the IP but how can I stop this happening again from another IP... Surely there is a way to limit connections from a single IP.. or detect this sort of activity and block it? Should the server be able to handle this? Any help is appreciated. Thanks :)
-
csf has this feature and doss_deflate GitHub - jgmdev/ddos-deflate: Fork of DDoS Deflate with fixes, improvements and new features. 0 -
csf has this feature and doss_deflate GitHub - jgmdev/ddos-deflate: Fork of DDoS Deflate with fixes, improvements and new features.
Thanks, what is the setting in CSF? :)0 -
There are a other options too. You can use nginx and limit the access from Ips' You can also use cloudlinux too. It is better to check the forum, it may be outdated to. That will be the reason behind this continuous spamming. You can tell your Forum admin to enable a captcha in is forms, that will prevent the boat spamming. 0 -
I can tweak some settings in WHM to stop backups running when the server reaches a critical level, however, I don't understand what value it should be? The setting 'Extra CPUs for server load' says "a server with 4 physical CPUs and a value of 2 in this field will be considered "critical" in these cases once the load reaches 6" How does a server with 4 CPUs and a value of 2 in this field get to 6 as critical? I have a Intel(R) Xeon(R) CPU E3-1230 V2 in this server which apparently have 8 processors. So what setting should I have here?
Hello :) It's the number you enter for this option, plus the number of processors on your system. If you enter "2", it's "2+8" if you have eight processors. Thus, the "Critical Load" is considered "10". Thank you.0
Please sign in to leave a comment.
Comments
4 comments