Our web server encounter a problem lately, that an IP address in India repetitively sent requests that uses up all connections available in Apache. All connections appear to be in W state. The connections are not terminated by Apache even though timeout has been set to lower 30 seconds. Similarly, MySQL connections also are not dropped until Apache is restarted.
View 7 RepliesI have the impression that I am being affected from a kind of DDOS or email worm attack. Is there a way I can track the sources of the connections?
The control panel I am using is Plesk 8.2 on Linux CentOS 4.2
just noticed these errors
could this be a hacker or something?
Code:
[Sat Feb 17 16:37:51 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpmyadmin/main.php
[Sat Feb 17 16:37:51 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:51 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpMyAdmin/main.php
[Sat Feb 17 16:37:51 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/PHPMYADMIN/main.php
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/pHpMyAdMiN/main.php
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/PhPmYaDmIn/main.php
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/PHPmyadmin/main.php
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/PHPMYadmin/main.php
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpMYadmin/main.php
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpmyADMIN/main.php
[Sat Feb 17 16:37:52 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/pmamy/main.php
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/pma/main.php
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/PMA/main.php
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/myadmin/main.php
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/MYADMIN/main.php
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:53 2007] [error] PHP Fatal error: Uncaught exception 'Exception' with message 'Unable to connect to database on localhost' in /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/AbstractDb.php:96
Stack trace:
#0 /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/AbstractDb.php(321): AbstractDb->connect(NULL)
#1 /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/Server.php(227): AbstractDb->execSqlUniqueRes('SELECT server_i...', NULL, false, true)
#2 /home/lavals/public_html/auth1/wifidog-auth/wifidog/include/common.php(107): Server::getCurrentServer(true)
#3 /home/lavals/public_html/auth1/wifidog-auth/wifidog/ping/index.php(50): require_once('/home/lavals/pu...')
#4 {main}
thrown in /home/lavals/public_html/auth1/wifidog-auth/wifidog/classes/AbstractDb.php on line 96
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/MYadmin/main.php
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/myADMIN/main.php
[Sat Feb 17 16:37:53 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/MyAdmin/main.php
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/PMA/main.phpmain.php
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpmyadmin/main.phpmain.php
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/mysql/main.phpmain.php
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/admin/main.phpmain.php
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/db/main.phpmain.php
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/dbadmin/main.phpmain.php
[Sat Feb 17 16:37:54 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/web/phpMyAdmin/main.phpmain.php
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/admin/pma/main.phpmain.php
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/admin/phpmyadmin/main.phpmain.php
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/admin/mysql/main.phpmain.php
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/mysql-admin/main.phpmain.php
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpmyadmin2/main.phpmain.php
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/mysqladmin/main.phpmain.php
[Sat Feb 17 16:37:55 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/mysql-admin/main.phpmain.php
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/main.phpmain.php
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpMyAdmin-2.5.6/main.phpmain.php
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpMyAdmin-2.5.4/main.phpmain.php
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/404.shtml
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not exist: /usr/local/apache/htdocs/phpMyAdmin-2.5.1/main.phpmain.php
[Sat Feb 17 16:37:56 2007] [error] [client 67.94.163.210] File does not
We want to implementing the load balancing for our domain, if the traffic is heavy and 8080 (i.e. currently integrated with apache) doesn''t serve more that time the apache will call 8081 and serve to the request without any problem.
We want to access our site www.domain.com (i.e. run on port 80). Please guide us it is possible or not?
I already have PHP 4 installed on my server and now i want to install php5 on same apache instance but different port.I want to configure the system so that on one port php4 runa dn on second port PHP5 run.
View 1 Replies View RelatedI am currently running Apache on Ubuntu 14.04. I tried adding an alias, but it doesn't do exactly what I need. I have a single site and I need to point two domain names to it. The thing is, if someone types in www.site1.com I want it to show the url as www.site1.com and if someone types in www.site2.com I want it to continue to show www.site2.com in the URL. Right now if they type in www.site1.com it shows the first site name as the URL, but if they type in www.site2.com it changes the URL to www.site1.com. Below is what I have as my virtual host in my conf file currently.
OS - Ubuntu 14.04
Apache/2.4.7 (Ubuntu)
Wordpress installation (WPML with 3rd level domain es. site. com, fr. site. com).I need to redirect page from old subdomain to a new subdomain
Example:
esp.site.com/oldpage -> es.site.com/newpage (different subdomain)
esp.site.com/oldpage1 -> es.site.com/newpage
esp.site.com/oldpage2 -> es.site.com/newpage
Source site is very chaotic (static pages + wp pages) and there are no clear rule for redirection (no regex ).So I need to redirect every single page but syntax:
Redirect 301 esp.site.com/oldpage http:// es.site.com/newpage doesn't work!I think "esp.site.com" in source page is not acceptable syntax..which is the correct syntax ? Can I manage all from one .htaccess file in main root (www) or should I create "esp" directory (and point old subdomain to it - one for every language) and put .htaccess in every directory with redirection ?
I have one valid commercial Comodo certificate. It is correctly installed and works fine on my 443 port when I go to https://www.domain1.com
However, I have quite a few other virtual hosts that also work fine on my port 80 when I go to http://www.domain2.com then http://www.domain3.com and so on.
Now out of curiosity I have typed https://www.domain2.com and it picked up the SSL certificate from my first domain1.com when it wasn't supposed to (I guess)! It reported an error but worked! Then I tried all my other domains 3,4,5 and so on and the issue repeated.
How do I keep this single certificate to the only domain name it belongs to? It has no wild cards and is valid for only one domain name I bought it for. The example of my hosts' configuration is below:
<VirtualHost *:80>
DocumentRoot "/directory/home/place"
ServerName domain1.com
<Directory "/directory/home/place">
allow from all
Options +Indexes
</Directory>
ServerAlias www.doamin1.com
</VirtualHost>
[code]...
I have diesel generator controller card (IB Lite made by Comap) and the built-in webserver supports only a single user/session connected.
I want to set apache in front and serve multiple connection while apache is keeping a single session with the IB Lite card in background no matter how sessions it have.
I tried ProxyPass but it doesn't seems to be a solution.
Is this possible?
I'm actually working on a project in wich one I use Zend Framework 2. In this project I have 4 websites. (this is require, I don't want to change it).
I have 1 Virtual Host for each website:
- com-mywebsite.com
- cp-mywebsite.com
- pos-mywebsite.com
- ap-mywebsite.com
Each Virtual Host redirect to the same folder and same file because everything is in the same project so same entry point (same index.php)
actually if I type each url in a browser, they all redirect to the same part of my project so I added some routes in ZF2 to access to one website and not another :
- com-mywebsite.com/com
- cp-mywebsite.com/cp
- pos-mywebsite.com/pos
- ap-mywebsite.com/ap
This is a quick and dirty fix because I also can access to the ap website with this url : com-mywebsite.com/ap
I'd like every website to be accessed from their root:
- com-mywebsite.com
- cp-mywebsite.com
- pos-mywebsite.com
- ap-mywebsite.com
And I don't want to display /something after it to access to the website even if after you can access to some other pages of each website.
We are using 4 apache and 8 weblogic.When little high load is coming on application (say 300 users), we are getting non-http response code (Non HTTP response code: org.apache.http.conn.HttpHostConnectException).And also all the load is generated from one single IP address.And we are using apache 2.2.
View 1 Replies View RelatedJust logged in my cPanel, and Apache Server Status shows
Parent Server Generation: 7
Server uptime: 2 hours 52 minutes 5 seconds
Total accesses: 701666 - Total Traffic: 63.7 GB
CPU Usage: u1610.22 s255.4 cu0 cs0 - 18.1% CPU load
68 requests/sec - 6.3 MB/second - 95.2 kB/request
400 requests currently being processed, 0 idle workers
I told customer service and said my website (a big forum) have 4000 people now, I felt very slow, could the slowness caused by this max apache connection setting?
I got reply: "400 seems to be as high as Apache can go. Your httpd.conf settings currently show 500 max connections enabled. If Apache is stopping at 400 then this is it's hard limit for maximum connections. Also If it was able to go even higher you would eventually run into memory issues on the server that would cause the server to crash."
Can anyone tells me if "400 requests currently being processed, 0 idle workers " is a problem or could it be the cause of the slowness. I imagin if more people request connection, and apache can't deal with that much, it has to let those request wait in the queue, therefore caused slowness or time-out.
The seem server could deal with 8000 people online before, no any problem at all and speed was quite fast. I don't know what i should do now.
is a way to understand whats the bext max apache settings for me?
Maybe to look over httpd-status requests currently being processed and the number of idle servers or the number of strokes?
Or probably the best way is to use some benchmark application but then i am not sure how to test my config?
I currently have a dedicated server with the following specs:
Celeron 2.6ghz
2gb ram
100mbit connection
the cpu load is always under 0.7, and I always have at least 400mb of free ram.
The site takes about 5-10 seconds to load a test page with just a single word on it. When I type netstat -n | grep :80 | wc -l
I get around 1100-1200 connections. I get about 130k page views per day.
My site is about 95% static html, it has about 150 images per page. How can I speed up my site?
Here are my apache httpd.conf settings:
Timeout - 100
KeepAlive - on
KeepAliveTimeout - 12
StartServers - 48
MinSpareServers - 32
MaxSpareServers - 64
MaxClients - 1500
MaxRequestsPerChild - 1000000
I need to configure multiple Apache Web Servers on redhat server. I have copied and extracted Apache 2.2 into redhat server and extracted but not able to install because I don't understand setting prefix. Please let me explain about prefix configuration and how to set it. At the same time I would like to know is it possible to setup 4 Apache Web Servers on same machine if possible then how to. Can we set up different versions of Apache HTTP Servers?
View 17 Replies View Relatedwhats the easiest way to monitor the number of apache connections?
View 9 Replies View RelatedI would like to know what is the maximum number of Apache connections a Server can handle? Does this depends on the Config of the Server? Is it Possible for a server to handle more than 2500 Active Apache connections without timeout / connection failure / slowness?
View 6 Replies View RelatedI've got an older "Super Server P4" series server @ ThePlanet - it's been a great box for years. We recently upgraded php4 to php5 and did a mysql upgrade as well. Ever since, randomly, without warning, Apache stops terminating connections, so the max connections fills up, and httpd won't respond. Apache doesn't stop running, it just max's out and stops accepting new connections, so customers assume the server is "down", although email/FTP work fine.
The server never crashes, the loads stay down, but httpd just fills up and won't accept more connections. We can't increase max connections (we actually DECRESED IT), because they'll just keep piling up, never terminating, and then ultimately, it will crash the box.
My admin has worked for nearly 2 weeks trying to figure it out, and Scott (AtomicRocketTurtle) and his team have been evaluating it for about a week - it's happened 3x in 2 days ... last night, httpd quit responding for about 7+ hours and since we didn't have httpd monitoring, we never knew until the office opened this AM and I had two very angry customers. Scott suspects it may be some rogue application that triggers it that didn't affect it prior to the php5/mysql upgrades.
Both Scott and Parm, my admin, have about thrown in the towel and are recommending we retire the server and migrate to a new box.
It's older - much older .. I'm pasting specs below, RHEL3, Plesk 7.5 .. but just wonder, before retiring an old server that was RUNNING GREAT prior to the upgrade, maybe someone has seen this happen before?
If so - PLEASE LET US KNOW before I spend the $$$ on a new box.
Current box's specs:
CPU GenuineIntel, Intel(R) Pentium(R) 4 CPU 2.80GHz
Version psa v7.5.4_build75060118.18 os_RedHat el3
OS Linux 2.4.21-47.0.1.ELsmp
RAM: 1GB, with 2GB swap
apache 1.3.31
bind 9.2.4-20.EL3
coldfusion Component was not installed
coldfusion-support 7.3-2.96.128
courier-imap 3.0.8-rhel3.build75050824.12
drweb 4.32.2-rh7_psa
drweb-qmail 4.32-rhel3.build75050824.12
frontpage 5.0.2.2634
httpd 2.0.46-61.ent
jdk 1.4.2
logrotate 3.7
mailman 2.1.5.1-25.rhel3.7
mod_perl 1.99_09-10.ent
mod_python 3.0.3-5.ent
mysql 4.1.21-2.rhel3.art
perl-Apache-ASP 2.57-rhel3.build75050824.12
php 5.0.4-13.rhel3.art
phpmyadmin 2.5.3
phppgadmin 2.4.2
postgresql 7.3.6-7
postgresql-server 7.3.18-1
proftpd 1.2.9
psa 7.5.4-rhel3.build75050824.12
psa-agent 1.3.2-2_psa7.1
psa-api-rpc 7.5.4-rhel3.build75050930.11
psa-bu 7.5.4-rhel3.build75050926.17
psa-horde 3.0.5-rhel3.build75050824.12
psa-imp 4.0.3-rhel3.build75050824.12
psa-logrotate 3.7-rhel3.build75050824.12
psa-manual-custom-skin-guide 7.5.4-rhel3.build75050824.12
psa-migration-manager 7.5.4-rhel3.build75050930.11
psa-proftpd 1.2.10-rhel3.build75050824.12
psa-qmail 1.03-rhel3.build75050824.12
psa-qmail-rblsmtpd 0.70-rhel3.build75050824.12
psa-spamassassin Component was not installed
psa-tomcat-configurator 7.5.4-rhel3.build75050824.12
psa-turba 2.0.3-rhel3.build75050926.17
qmail 1.03
rblsmtpd 0.70
samba 3.0.9-1.3E.12
spamassassin 3.1.3-1
SSHTerm 0.2.2-rhel3.build75050824.12
stunnel 4.04-4
tomcat 4.1.24-full.2jpp
webalizer 2.01_10-15.ent
I am trying to figure out how Apache is working on windows 7 - so far so good - but how do I set restrictions and limitations on bandwidth usage and max number of IP-connections?
View 1 Replies View RelatedWebserver is restarted all TCP connections randomly. we are not able to get any error into errorlog file.
Webserver close all TCP connection and start created new TCP connection for new request.
AcceptFilter http none
AcceptFilter https none
Also, conf file is saying that
Defaults Values are:
EnableMMAP On
EnableSendfile Off
Not sure what's wrong with server.
We have installed "Apache 2.4.6-x86 server" on Win 2008 R2 Standard server (64-Bit).
Also, we are using mod_jk module for connecting to tomcat server "tomcat-connectors-1.2.37-windows-i386-httpd-2.4.x.zip".
I am facing to this trouble: apache max out the number of connections. When viewing status, all I get here
Code:
SrvPIDAccMCPU SSReqConnChildSlotClientVHostRequest
0-028240/6/65R 0.1414290.00.020.32 ??..reading..
1-028170/17/65R 0.111510.00.030.22 ??..reading..
2-028350/3/57R 0.20112210.00.000.24 ??..reading..
3-027570/33/62R 1.431412930.00.130.21 ??..reading..
4-026430/75/75R 2.12153190.00.310.31 ??..reading..
5-026440/52/52R 2.061610.00.240.24 ??..reading..
6-028180/13/60R 0.621600.00.070.22 ??..reading..
7-026490/63/63R 2.84143070.00.370.37 ??..reading..
8-028190/7/43R 0.271610.00.020.27 ??..reading..
9-028080/27/76R 0.361410.00.040.29 ??..reading..
10-026750/50/52R 2.9617630.00.260.26 ??..reading..
11-027720/23/49R 3.641600.00.100.19 ??..reading..
12-026620/64/64R 2.201520.00.290.29 ??..reading..
13-027730/25/64R 1.121500.00.140.19 ??..reading..
which account on server is the reason please? I am on CentOS box with DirectAdmin.
any good rule to limit Apache (port 80) connections from 1 IP to 15 with iptables/csf?
And total connections to the box to 100?
As you can see my apache is full of Reading connections..... they are filling up my server dening legitimate users to browse trought the websites hosted there... I think this is what is happening to me:
http://mail-archives.apache.org/mod_...l.gmail.com%3E
Im using apache 1.3.3.7 on RHES 3 with latest patches and kernel.
930 requests currently being processed, 6 idle servers
RRRRRRRRWRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRWRRRRRRRRRRRRR
RRRRRRRRRWRRRWRRRRRRRRRRRRRRRWRRRRRRRRRRRRRRRRRRRWRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR_RRRRRRRRRRRRR_RRRRRRR
RRRRRRRRRRRRRRRRRRRRRRWRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
R_WRRRRRRRRRRRRRRRRRRRRWWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRWRRRRRRR
RRRRRRRRRRRRRWRR_RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR_
RRRRRRRRRRRRRRRRRRRRRRWRRRRRRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRRR_RRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRWRRRRR
RRRRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRR.RRR.......................
1-044940/40/40R 0.33340.00.060.06 ??..reading..
2-044950/55/55R 0.47330.00.110.11 ??..reading..
3-044960/35/35R 0.31330.00.050.05 ??..reading..
4-044970/38/38R 0.13210.00.090.09 ??..reading..
5-045410/40/40R 0.16360.00.130.13 ??..reading..
6-046190/28/28R 0.12110.00.030.03 ??..reading..
7-046220/34/34R 0.35320.00.100.10 ??..reading..
8-051640/34/34R 0.135100.00.300.30 ??..reading..
Also, here is the top output of the top command:
top - 12:46:21 up 10 min, 1 user, load average: 1.40, 2.03, 1.06
Tasks: 1063 total, 2 running, 1060 sleeping, 0 stopped, 1 zombie
Cpu(s): 4.9% us, 1.6% sy, 0.0% ni, 93.1% id, 0.3% wa, 0.0% hi, 0.0% si
Mem: 2073516k total, 2001984k used, 71532k free, 42384k buffers
Swap: 2048276k total, 0k used, 2048276k free, 178096k cached
Server seems to be fine, but total tasks are always between 1060 and 1124... thats very rare too..
how to avoid this attack?
I've been having trouble the past few days with someone who's been "attacking" my site so to speak by continuously downloading very large files with as many connections as (he) can open. I operate a large downloads site for computer games, this person has selected the largest files (like 400-500MB). Not sure of the real intent other than to clog up my bandwidth capacity. Also he appears to be using proxies since as soon as I ban one, another shows up seeminly from China.
Anyway, I have mod_bw and I've limited the number of connections in the downloads area to 2. While that works ok, his tool uses threads like a download manager would and he's using up 30-40 child threads for his 2 file downloads.
So 2 questions,
Is there anyway to not only limit file downloads to 2, but limit the number of connections per request? Many of my visitors do use download managers and I'd like for them to continue using them but use a reasonable number of threads like 6 or 8, but not 30.
Also, is there a way to restrict access to someone using a proxy?
I am interested to know number of current connections in my Apache server
Server version: Apache/2.2.15 (UNIX)
OS : Solaris 5.10
I've been having troubles with my website recently . I installed a forum software (MyBB), and the problem started happening shortly after. I've talked to a few site admins in the MyBB community but they all say that none of MyBB's scripts are capable of doing this.
Every single webpage i visit redirects me to a webpage which then has a redirect loop. I've removed all recent changes made to my website via FTP and restarted apache, but i'm still receiving the same error. I'm not quite sure what to do.
Link to my website: ript.onl
Screenshots: [URL] ....
Every single webpage does this. I dont have any .htaccess files around and i've checked a few config files for anything out of the ordinary, but haven't seen anything.
I just received an email saying
We were forced to suspend your account due to excessive apache connections causing ftp to go down. Here is a snapshot of the activity:
242-0 22189 0/57/57 W 1.24 10 0 0.0 0.09 0.09 xxxxxx xxxxxx.com
243-0 22194 0/1/1 W 0.01 0 0 0.0 0.00 0.00 xxxxxxx xxxxxx.com GET
244-0 22214 0/4/4 W 0.15 4 0 0.0 0.03 0.03 xxxxxx xxxxx.com GET
And when I was on the phone with the support, they told me my site had opened up 400 apache connections + using the GET command and was causing FTP slow downs.
It just happens so that a file I posted made its way to a popular forum and all the sudden, everyone was downloading the file.
What is the best way to correct this problem? and GET? Isn't that a FTP Command? but people were downloading via [url]
I cant decide between
Dual Processor Single Core
Dual Processor Single Core Xeon - 3.00GHz (Irwindale)
Or
Single Processor - Quad Core?
Single Processor Quad Core Xeon 3220 - 2.40GHz (Kentsfield)
My site needs "raw" processing power due to the applications it runs. ram (over 2 gb) and hdd are not that important to me.
could someone point me in the right direction.
I've got a vB site which has a RSS Poster Bot (fetches RSS Feeds then posts them). However, for some strange reason, it stopped working. Theres no errors in the error_log and when I do a manual run, it just times out after a minute or so.
The only thing I can think of is that one of the RSS Feeds is down or one of the sites is blocking the server IP for some reason.
i have this really annoying issue i'm hoping you can help with.
it seems the spamd child process gets stuck and causes 100% cpu usage. but this doens't just happen randomly, its only for this single user account. e.g. take a look at top output:
4581 <username> 93 40:58.87 1.3 82624 52m 2280 R spamd child
the 93 is 93% cpu usage. 40:58 is how long the process has been running, 40 minutes and counting (i just killed it though). and all it tells me its running spamd child. it usually dies after a few hours but only after causing 200% cpu usage (100% on both cpus) and making my server load skyrocket. This happens at least twice daily at no set times.
this user isn't a spammer. no scripts, no mail queue generation, no email accounts even.
running cpanel 11, centos 4.
I have a weird problem since the movement of our ip range with one of our servers. Bind doesn`t seem to react on any changes we make.
For example, the server still resolves to the old ip adress while we changed all of those with ipswap.sh (directadmin)
The weird thing is that all zone files are 100% Correct. Ip`s are all changed and no sign of the old ip whatsoever.
Again, the nameserver still resolves to the old ip`s.
Also when i create a new domain, named.conf is changed and the zone file is created sucessfully. Still the nameserver doesn`t seem to add the domain name.
Restarting, reloading and even reinstalling named doesn`t help