Plesk 11.x / Linux :: DDOS Or High CPU Load Dedicated CentOS Server
May 12, 2014
I have been trying to identify why mi server has high load cpu, suddenly CPU load suddenly jumps, from 1 to 40 and until 110
If I restart mysqld and apache, the cpu gets back to normal, until this happen again
My server is
GenuineIntel, Intel(R)Core(TM) i5-2400 CPU @ 3.10GHz
VersionParallels Plesk Panel v11.0.9_build110120608.16 os_CentOS 6
CentOS 6.4 (Final)
CentOS 6 x64 Processor: Intel Core i5 - 3.10 GH
I already installed FAIL2BAN and DDOS DEFLATE without lock. I have CloudFlare Enabled.
When there is a high CPU load, I have checked netstats, and I don't identify many ips connected, so I think it could be an internet script (or virus).
I will paste the result of
ps fax
command, in a moment of high cpu load
View 7 Replies
ADVERTISEMENT
Dec 10, 2014
Today, without any change on the server side my single running website on my server started running low. After checking the running processes I realised I have these 8 processes running with high cpu load something that didn't had before.
4245 user 20 0 283m 103m 10m R 85.1 0.3 6:44.88 /usr/bin/php-cgi -c /var/www/vhosts/system/domain/etc/php.ini
4243 user 20 0 241m 68m 8736 R 83.8 0.2 6:33.45 /usr/bin/php-cgi -c /var/www/vhosts/system/domain/etc/php.ini
4259 user 20 0 254m 82m 8720 R 83.5 0.3 6:11.00 /usr/bin/php-cgi -c /var/www/vhosts/system/domain/etc/php.ini
4244 user 20 0 282m 103m 10m R 82.1 0.3 6:46.49 /usr/bin/php-cgi -c /var/www/vhosts/system/domain/etc/php.ini
4247 user 20 0 248m 76m 8712 R 78.8 0.2 6:50.31 /usr/bin/php-cgi -c /var/www/vhosts/system/domain/etc/php.ini
4264 user 20 0 258m 85m 8712 R 72.9 0.3 6:49.83 /usr/bin/php-cgi -c /var/www/vhosts/system/domain/etc/php.ini
apache error log doesn't show any warnings, errors.
View 4 Replies
View Related
May 20, 2014
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE
Parallels Plesk Panel 11.5.30 MU #44 CentOS 6.5 (Final) 64bit
2 of our our servers are suddenly experiencing high Wait I/O Times, and high Load Averages during the backup process. During this period the Plesk grinds to a halt, sometimes crashing out completely (although SSh is still possible. We have been in talks with our server suppliers (assuming this would be node related) however they have done a lot of testing etc. and categorically state the node is fine , with no other users affecting it.
STEPS TO REPRODUCE : We backup the server using the scheduled backup service and Wait I/O immediately goes up.
ACTUAL RESULT: Plesk downtime / Website downtime
EXPECTED RESULT: No downtime, successful back up
Some other info :
All other processes (MYSQL, apache, Nginx etc) are all running between 1 - 10%
Partition "/usr" utilization 4.2% used (1.81 GB of 43.3 GB) (?)
Partition "/var" utilization 50.6% used (61.8 GB of 122 GB) (?)
We are struggling to identify what has changed on the server that would cause this sudden change.
View 3 Replies
View Related
Feb 20, 2008
I have a cPanel server with 4GB RAM
My server hangs time to time, once or twice a day. This is the last status when it happens.
Server Load 75.90 (2 cpus)
Memory Used 92 %
Swap Used 65.78 %
When I was still inside SSH when it happens, the processes I can see inside "top" are a lot of httpd processes.
So I "killall -9 httpd", I had to do it 30~40 times
#killall -9 httpd
#killall -9 httpd
#killall -9 httpd
x 30~40 times until no pid process found & the server load is back to normal.
Before that, I check httpd fullstatus, they look very normal, same goes to what I see inside WHM Apache status & cpu usage status.
At first I thought it was a memory problem after consulting with a server admin, so I replaced all 4GB new ram stick (such a waste)
View 12 Replies
View Related
Oct 31, 2009
My server is very slow, High CPU, High Apache load....
I got a new server and i had setup a script on it.
No server tweaks has been done.
I run a filehosting site so it gets very slow when traffic is high.
Here is some info:
Code:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
4135 filedip 19 0 12812 8892 2212 R 18.9 0.4 0:00.74 index.cgi
3140 apache 15 0 22624 9604 2768 S 17.3 0.5 1:54.45 httpd
3556 apache 15 0 22792 9592 2768 S 17.3 0.5 0:43.53 httpd
3739 apache 15 0 22672 9556 2744 S 17.3 0.5 1:09.67 httpd
3884 apache 15 0 22664 9560 2744 S 17.3 0.5 0:23.98 httpd
3474 apache 15 0 22672 9572 2756 R 16.1 0.5 1:34.09 httpd
3548 apache 15 0 22792 9560 2740 S 16.1 0.5 1:33.67 httpd
3991 apache 15 0 22640 9588 2756 S 15.1 0.5 0:22.44 httpd
3475 apache 15 0 22672 9580 2756 S 13.2 0.5 1:31.42 httpd
3493 apache 15 0 22664 9592 2768 S 12.9 0.5 1:15.52 httpd
3769 apache 15 0 22664 9580 2756 S 12.9 0.5 0:45.19 httpd
3638 apache 15 0 22664 9576 2756 S 12.3 0.5 0:32.82 httpd
3724 apache 16 0 22664 9580 2756 R 12.3 0.5 0:34.25 httpd
3626 apache 15 0 22672 9580 2756 S 11.7 0.5 0:52.54 httpd
4023 apache 16 0 22792 9560 2740 R 11.3 0.5 0:13.16 httpd
3882 apache 15 0 22664 9576 2756 S 10.1 0.5 0:38.56 httpd
3005 apache 15 0 22672 9588 2768 R 9.1 0.5 2:06.61 httpd
I dont know much about server managment...
how to fix this so server doesnt go slow?
View 6 Replies
View Related
Jul 2, 2009
I have a site that is eating up my server resources and need to know what the best solution for this is. I'm thinking of getting another server just for mysql but do not know what specs the server should be to handle the current traffic/database load and have the site run smoothly without slowing down to a snail's pace.
An alternative is to get another server just for the videos being served and leave the database and html on the current server. This is where I'm stuck and don't know what route to take with this.
My current server stats:
Dual Xeon 5130
4GB RAM
250GB
50 Mbit/sec
CentOS 3.9
Website traffic stats:
15,000 visitors/day
150,000 pageviews/day
Serving videos
I've attached screenshots of top and bandwidth usage per day. Hopefully with this information you could tell me if I need another server or if there are any things I can do to the current server to help things move faster.
View 13 Replies
View Related
Apr 27, 2007
This is a RHEL3 box. It has a couple hundred sites, most of which are pretty quiet most of the time, lately I can't get the load below 3 most of the time. I've tried all the usual TOP PS and the rest, but I'm not seeing my problem. I've attached a text file with extended outputs. but here's what I'm seeing now from TOP and VMSTAT. I'm not sure what else I could be looking at.
I've been watching, and it seems to be Apache most of the time at the top of TOP, and I'm logging slow-queries for myslq, but there aren't many there.
top
10:02:03 up 3 days, 21:23, 2 users, load average: 2.81, 2.83, 3.05
140 processes: 137 sleeping, 2 running, 1 zombie, 0 stopped ....
View 0 Replies
View Related
May 25, 2009
Datacenter in California USA will be better,
View 8 Replies
View Related
May 23, 2008
I've got a dedicated server running the latest release of Debian and Plesk 8.4.0.
It's a Core2Duo, 1Gb RAM and 2 x 160Gb on hardware RAID 1.
There aren't any "heavy" sites on it, Apache is not under any stress... nothing is showing up on 'top' that's eating CPU or RAM... but here's the load:
load average: 2.06, 1.97, 1.81
sample from 'top':
421 qmailq 18 0 1568 344 276 S 0 0.0 0:01.20 qmail-clean
19270 popuser 16 0 36268 33m 2356 S 0 3.3 0:10.40 spamd
28214 root 18 0 2232 1176 856 R 0 0.1 0:00.02 top
1 root 15 0 1944 636 544 S 0 0.1 0:01.20 init
2 root RT 0 0 0 0 S 0 0.0 0:01.14 migration/0
3 root 34 19 0 0 0 S 0 0.0 0:00.04 ksoftirqd/0
4 root RT 0 0 0 0 S 0 0.0 0:00.90 migration/1
5 root 34 19 0 0 0 S 0 0.0 0:00.07 ksoftirqd/1
6 root 10 -5 0 0 0 S 0 0.0 0:00.03 events/0
7 root 10 -5 0 0 0 S 0 0.0 0:00.00 events/1
8 root 12 -5 0 0 0 S 0 0.0 0:00.00 khelper
9 root 10 -5 0 0 0 S 0 0.0 0:00.00 kthread
13 root 10 -5 0 0 0 S 0 0.0 0:00.61 kblockd/0
Anyone got any ideas what might be pushing the load up?
View 2 Replies
View Related
Nov 14, 2014
This is my free -m
total used free shared buffers cached
Mem: 1998 1903 95 0 45 542
-/+ buffers/cache: 1315 683
Swap: 2662 36 2625
Not good ....
I got 5 wordpress and 5 statics website on this server and 100 visitors by 24H00 each day.
Question 1 : Why the memory is so low and the swap so high ?
Question 2 : Why i don't find high usage process in top command ?
Question 3 How can i resolve this problem ?
View 2 Replies
View Related
Jul 23, 2014
Since the update our Server Health has been very high and is playing up with email and probably other services.
OS CentOS 6.5 (Final)
Plesk version 12.0.18 Update #8, last updated at July 16, 2014 11:20 AM
The system is up-to-date; last checked at July 19, 2014 04:41 AM
Services !Problem
Disk OK
Memory OK
CPU !Problem
Network
This is the log from /var/log/plesk/health-alarm.log
##################################################
2014-06-24T10:01:15+11:00 INFO (6): Server health parameter "Services > Panel CPU usage" changed its status from "green" to "red".
2014-06-24T10:21:16+11:00 INFO (6): Server health parameter "Services > Apache CPU usage" changed its status from "red" to "green".
[Code].....
View 1 Replies
View Related
Jul 4, 2014
how to protect Linux Server from Ddos Attack (Botnet, Loic)
View 2 Replies
View Related
Jun 21, 2014
I fixed that there is a process that loads the server and much why it does not.
Name process: md2_resync
View 2 Replies
View Related
Apr 1, 2015
I want to update CentOS from:
Code:
Version Parallels Plesk v12.0.18_build1200140606.15 os_CentOS 6
OS CentOS 6.6 (Final)
to CentOS 7.
What steps I need to do to install CentOS 7?
View 4 Replies
View Related
May 7, 2009
do you know what my server having very strange problem my server load suddenly increas after every 2 or 3 days some time after 1 days but when we talk about those days in which server load is fine then that time server load very low almost 0.4 to 0.1 .
But on that high load day server load reached upto 500.
when i try to find out what wrong then i only get that there is too much connection of http when i kill httpd through this killall -KILL httpd then server load suddenly decrease and then stable.
View 12 Replies
View Related
May 27, 2007
I have a couple of sites that are generating errors because the server load is too high and when I check service status I am seeing the following: Server Load 21.49 (8 cpus)
How can I tell if the problem is one of my sites in my VPS or a different site on a different VPS on the same server?
View 14 Replies
View Related
May 9, 2007
server load is too high, can you suggest why too many process of qmail-smtpd even i stopped qmail and there is no more 25 emails in queue.
top - 22:26:03 up 8 days, 5:56, 0 users, load average: 150.96, 150.27, 142.68
Tasks: 183 total, 150 running, 33 sleeping, 0 stopped, 0 zombie
Cpu(s): 99.0% us, 1.0% sy, 0.0% ni, 0.0% id, 0.0% wa, 0.0% hi, 0.0% si
Mem: 4167500k total, 146416k used, 4021084k free, 0k buffers
Swap: 0k total, 0k used, 0k free, 0k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
20168 qmaild 25 0 3468 1432 1168 R 3.3 0.0 2:55.27 qmail-smtpd
20208 qmaild 25 0 3468 1432 1168 R 3.3 0.0 2:43.98 qmail-smtpd
20320 qmaild 25 0 3468 1432 1168 R 3.3 0.0 2:38.56 qmail-smtpd
20425 qmaild 25 0 3468 1432 1168 R 3.3 0.0 2:31.09 qmail-smtpd
20444 qmaild 25 0 3468 1432 1168 R 3.3 0.0 2:27.97 qmail-smtpd
5413 qmaild 25 0 3468 1432 1168 R 3.3 0.0 1:00.38 qmail-smtpd
5705 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:57.91 qmail-smtpd
5763 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:57.40 qmail-smtpd
5806 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:56.99 qmail-smtpd
5999 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:55.98 qmail-smtpd
7318 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:53.39 qmail-smtpd
7639 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:51.43 qmail-smtpd
7866 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:50.29 qmail-smtpd
7980 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:49.59 qmail-smtpd
8023 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:49.29 qmail-smtpd
8101 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:48.48 qmail-smtpd
9253 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:47.40 qmail-smtpd
9355 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:46.78 qmail-smtpd
9386 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:46.48 qmail-smtpd
9525 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:45.84 qmail-smtpd
9611 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:45.81 qmail-smtpd
9854 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:44.89 qmail-smtpd
9974 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:44.08 qmail-smtpd
11272 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:42.29 qmail-smtpd
11331 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:42.09 qmail-smtpd
11482 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:41.69 qmail-smtpd
11652 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:40.99 qmail-smtpd
12040 qmaild 25 0 3468 1432 1168 R 3.3 0.0 0:39.41 qmail-smtpd
3530 qmaild 25 0 3468 1432 1168 R 3.0 0.0 1:08.48 qmail-smtpd
12246 qmaild 25 0 3468 1432 1168 R 2.0 0.0 0:38.79 qmail-smtpd
View 4 Replies
View Related
Apr 22, 2007
I know there are thousands of topics about this and yes i did use search function to try doing some changes myself and didnt wanna hijack someone else's topic so started my own
well my problem is i run a torrent site which puts a lot of load on my server. Just got upgraded to P4 2.8 ghz with 2GB ram , iam running fedora with WHM/Cpanel
i will do anything with server to put load down cos of load i have turned off my 4 other big sites ...
View 14 Replies
View Related
Jun 9, 2008
there are lot of sessions /task running of httpd by user nobody.
Due to this my server load going very high.
I am use opreting system fadora and cpanel latest version.
View 9 Replies
View Related
Nov 23, 2007
the site is running fine..
i have increased my maxclients from 256 to 320 ( reset all same ) my load has increased from avg 3 to 8.. is it a prob?
View 5 Replies
View Related
Mar 24, 2007
I've got a server that suddenly over the last three days has exploded as far as server load. Watching top I have some httpd processes that are using up all of the cpu and lasting for quite some time. How can I find out more about these hanging processes? I need to track this down as quickly as possible and find out what the cause is.
View 13 Replies
View Related
Feb 8, 2015
I have a problem with my plesk panel. Ever since I rebooted my server it won't load the IP:8443 page at all.
View 5 Replies
View Related
Feb 25, 2015
Which protocol I should use for performing a backup of important server files and folders. I do make a snapshot but i found that's not enough.
My Centos 6.6 has ProFTPD configuration setup only for webhosts so no root access. I came across SCP, but don't know how to secure that like a Pro. I have also heard about SSHFS for linux.
View 1 Replies
View Related
May 17, 2014
Our server is running; Plesk 11.0.9 and CentOS 5.7 it has a Q8200 CPU @ 2.33GHz and 2GB of RAM. Now there are just two websites on the server plus a couple of redirects/forwarding domains, although lots of domains are still on the server but turned off in Plesk. Both websites are OSCommerce sites and I just need to keep these sites going until the end of the year when we will switch to our new Joomla based website.
We have seen an increasing number of server crashes and after various checks of the logs, fitting a new BIOS battery, check of the hardware by EasySpace who host the server, installation of ClamAV, LMD and RKHunter (which did find some Trojans and Suspect software), I have traced it down to some external Http activity that is taking all of my CPU time and RAM. Here is a screen capture of the Htop listing and when I killed these processes the CPU and RAM went back to normal. The problem is that I usually have to restart the HTTPD service and sometimes things get so bad that the server crashes and I have to request a power cycle.
View 8 Replies
View Related
Apr 20, 2009
We have an abnormal server load because of clamd.
View 4 Replies
View Related
May 4, 2008
if upgrading to that new server that I'll mention will probably solve my problems. Whatever help you can provide would be greatly appreciated. Below are the details:
In the GMT evenings and nights my current server gets so loaded that every page load takes 10 - 30 seconds. Even the pure html pages will be so slow to load. It seems that after a certain treshold it just suddenly becomes that much slower. Not much middleground there. I have high MaxClients and ServerLimit values now and the error log doesn't say that they are exceeded anymore but that didn't help enough.
I have a high traffic website that is using latest version of apache (2.2.x) with the prefork MPM and apache is optimized, PHP 5.2.5 and APC 3.0.15.
I get 160,000 - 210,000 pageloads per day. 32,000 - 45,000 visits per day.
Most of its pages are PHP but shouldn't be too CPU or databes intensive. Mysql isn't used and I mostly used sharedmem (php's shm functions) for databases. 2 semaphores are quite heavily used but that can't explain how a few more users would make the server serve pages so much slower.
Swap usage is practically 0 and CPU user % usage is like 1 - 2 % and CPU system % is also about the same even during peak times. However the Average Load or whatever that "top" reports is 6 - 9.
My current server scecs: 1 GB Ram, Pentium D 3 ghz, CentOS 5 32bit fully updated.
I load all pictures and even the stylesheet from a secondary server by using href="$secondaryserverIP..." in the html code, so the main server practically just serves the pages.
My new server will have apache with the worker MPM and latest versions of every software. Also its specs are: 2 GB of RAM, Intel Dual Core Xeon 2.40GHz, CentOS 5.1 32bit fully updated.
I have a sophisticated netstat based ddos script that is an improved version of DDoS Deflate and while some of these slowdowns seem to have been caused by attacks that it then was able to defend me from, most of them are not. I am even protected from users who constantly have 7+ connections to my site and if someone has a way too high number of connections, the script won't even check if it constantly has it and the script just bans that user outright. It probably is banning a bunch of innocent proxy users too but that is a small price to pay.
View 14 Replies
View Related
Jun 18, 2008
Alright we just bought a new customer aboard with a ChatBox on the site it seems as if this chatbox is causing higher load we went from 0.00 to 0.68-1.12 now this happened on our old server before too with another chatbox. They use vBulletin any ideas as to what would be causing this?
View 5 Replies
View Related
Feb 13, 2008
When i check the server status is shows a high server load.
How do I lower the server load? it looks like for mysql activity.
View 14 Replies
View Related
Dec 18, 2008
MySQL the last few days seems to be constantly the most demanding process in top, which it never was before. As far as I can tell, nothing has substantially changed with regards to traffic to MySQL driven sites on the server. Is there anything that might be wrong with the databases, etc., that might throw MySQL into a tizzy?
View 8 Replies
View Related
Jul 26, 2015
I am running Plesk Version: 12.0.18 on CentOS.Earlier today my service provider had a massive issue and my server was down for several hours. Upon it being back online i've restarted but now I cannot load any of my pages. I have 10 domains setup and if I ping their name servers or the server IP i get packets received now.
One of my installed domains is [URL] ... now if you try and load this url you get a time out but if you try to access admin page URL....None of the subscriptions are able to load their websites when i type in their URL and well it worked before it went down.
View 19 Replies
View Related
Feb 15, 2015
I have a fresh server running CentOS 6 (final). I am trying to install Plesk 11.5.30 but i am experiencing some problems. When i run the plesk-installer i get this message:
Your host name must resolve to the correct IP address of your server, unless you are using network address translation (NAT).
Please quit Parallels Installer, fix the host name resolution problem, and then try installing again.
You can skip the hostname check and continue the installation, however, in such a case, the installer cannot guarantee successful installation.
Now, in my /etc/hosts file i have this:
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
Is this correct? Or do i need to add/change something else?
My server is in the clound.
View 3 Replies
View Related
