Skip to main content

cPanel sites all broken. They take too long to respond.

Comments

11 comments

  • cPRex Jurassic Moderator

    Hey there!  I'm sorry to hear about the sites on the system.  What do you see when you check the Apache log at /etc/apache2/logs/error_log?  I would expect that log to show any errors related to the Apache service.

    If there are network errors, have you tried from a different network, such as a cell phone?

    0
  • Tracy Yeboah

    Hi thanks for your response. There are no network errors and I'm also not able to access the sites on my cellular network.

    This are the latest logs from the error_log:

    [Thu Feb 29 12:09:26.373705 2024] [security2:notice] [pid 18365] ModSecurity: APR compiled version="1.7.4"; loaded version="1.7.4"
    [Thu Feb 29 12:09:26.373709 2024] [security2:notice] [pid 18365] ModSecurity: PCRE compiled version="8.39 "; loaded version="8.39 2016-06-14"
    [Thu Feb 29 12:09:26.373713 2024] [security2:notice] [pid 18365] ModSecurity: LUA compiled version="Lua 5.3"
    [Thu Feb 29 12:09:26.373716 2024] [security2:notice] [pid 18365] ModSecurity: YAJL compiled version="2.1.0"
    [Thu Feb 29 12:09:26.373718 2024] [security2:notice] [pid 18365] ModSecurity: LIBXML compiled version="2.9.10"
    [Thu Feb 29 12:09:26.373721 2024] [security2:notice] [pid 18365] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
    [Thu Feb 29 12:09:26.580977 2024] [:notice] [pid 18368] mod_ruid2/0.9.8 enabled
    [Thu Feb 29 12:09:26.599882 2024] [mpm_prefork:notice] [pid 18368] AH00163: Apache/2.4.58 (cPanel) OpenSSL/1.1.1f mod_bwlimited/1.4 configured -- resuming normal operations
    [Thu Feb 29 12:09:26.599928 2024] [core:notice] [pid 18368] AH00094: Command line: '/usr/sbin/httpd'
    [Thu Feb 29 16:44:13.461760 2024] [mpm_prefork:notice] [pid 18368] AH00169: caught SIGTERM, shutting down
    [Thu Feb 29 16:44:14.451565 2024] [security2:notice] [pid 40152] ModSecurity for Apache/2.9.7 (http://www.modsecurity.org/) configured.
    [Thu Feb 29 16:44:14.451619 2024] [security2:notice] [pid 40152] ModSecurity: APR compiled version="1.7.4"; loaded version="1.7.4"
    [Thu Feb 29 16:44:14.451624 2024] [security2:notice] [pid 40152] ModSecurity: PCRE compiled version="8.39 "; loaded version="8.39 2016-06-14"
    [Thu Feb 29 16:44:14.451628 2024] [security2:notice] [pid 40152] ModSecurity: LUA compiled version="Lua 5.3"
    [Thu Feb 29 16:44:14.451630 2024] [security2:notice] [pid 40152] ModSecurity: YAJL compiled version="2.1.0"
    [Thu Feb 29 16:44:14.451633 2024] [security2:notice] [pid 40152] ModSecurity: LIBXML compiled version="2.9.10"
    [Thu Feb 29 16:44:14.451636 2024] [security2:notice] [pid 40152] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
    [Thu Feb 29 16:44:14.770245 2024] [:notice] [pid 40161] mod_ruid2/0.9.8 enabled
    [Thu Feb 29 16:44:14.821197 2024] [mpm_prefork:notice] [pid 40161] AH00163: Apache/2.4.58 (cPanel) OpenSSL/1.1.1f mod_bwlimited/1.4 configured -- resuming normal operations
    [Thu Feb 29 16:44:14.821239 2024] [core:notice] [pid 40161] AH00094: Command line: '/usr/sbin/httpd'

    0
  • cPRex Jurassic Moderator

    Those just look like standard restarts, so that isn't anything interesting.

    When you try to ping one of the domains on your server, what reply do you get?  If you scan a domain with intodns.com, does that show any odd DNS errors?

    0
  • Tracy Yeboah

    Lemme try that now and see.

    The report returns "Invalid request!" for any of the domains I check out.

    0
  • cPRex Jurassic Moderator

    You'll want to just put in the domain name, with no https or www before it, and then it should work.  If you get the invalid request error, just try clicking the "report" button again.

    0
  • cPRex Jurassic Moderator

    I deleted that last post as it had a lot of personal information, but the DNS looks good from what the report said, but I agree the sites are not responding.

    Is it possible your server is experiencing a DoS attack?  What does the scoreboard show when you run "apachectl status" on the machine?

    0
  • Tracy Yeboah

    This is the result of the scoreboard

    __W__...........................................................
     ................................................................
     ......................

    0
  • cPRex Jurassic Moderator

    That looks like there's no traffic at all.  Interesting.

    There is definitely a networking issue as I'm not able to reach port 80 or port 443 on your server.  If you don't see any obvious problems in your local firewall you will need to speak to your host to have them check that.

    0
  • Tracy Yeboah

    I checked the logs and there were a series of access attempts that were denied to many of the hosted sites at 2am and lasted for about four hours. But none after that.

    0
  • Tracy Yeboah

    Thank you very much for your help. At least I have some insights into the problem now.

    0
  • cPRex Jurassic Moderator

    Sure thing!

    0

Please sign in to leave a comment.