Here’s a quick and dirty tips on how to find cause of heavy CPU resources usage on your Apache webserver (especially when running php scripts).
First you need to locate the Apache 2 “access.log” file. By default in Ubuntu, this file is located in “/var/logs/apache2” directory.
Then you need to run this command to find out which IP address accesses your website the most in a short time.
[code]
tail -10000 access.log| awk ‘{print $1}’ | sort | uniq -c |sort -n
[/code]
The output of the command should contain a list of IP addresses along with the number of hits it made in the last 10,000 access of your website
[code]
47 117.58.252.98
81 202.124.242.186
84 202.124.245.26
182 194.164.101.217
220 208.101.22.146
225 72.167.131.144
3946 93.135.xxx.xxx
[/code]
From here you can easily locate the offending ip address and proceed to block it from accessing your website further using .htaccess file or other blocking method.
Here is an example to block certain ip address from accessing your website using .htaccess file
[code]
deny from 93.135.xxx.xxx
Save .htaccess file in the root directory of your web server (example /var/www), and the ip address wont be available to access your site again.
Hope that would help you!
Excellent, thank you
in the following ways to use cPanel servers
tail -10000 /usr/local/apache/logs/access_log | awk ‘{print $1}’ | sort | uniq -c | sort -n
Dedicated Colocation Voip Datacenter
good info for me…maybe useful for linux share hosting user… ;)
That’s a cool bit of bash’ery there. My only suggestion might be to block the IP on your firewall instead of the apache config, which you’ve got to reboot the apache daemon for. An IP that’s abusive might be doing the same thing across the network. Before you blocked it anywhere, you should probably make sure it’s not valid traffic.
Cool write up, thanks!