Loading


Advertisement:

Author Topic: Strange SPAM CPU Usage  (Read 1878 times)

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #15 on: December 13, 2016, 10:31:15 am »
As Aficionado adviced a while ago I stopped HOSTDIME and moved site to GODADDY. Now same problem is repeated there.
How to stop 147432 bytes CPU using for each minute / seconds?

160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147432        Osclass (v.361) - /
160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147440        Osclass (v.361) - /
160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147440        Osclass (v.361) - /

I have today reinstalled osclass / restored only database and oc-content/   folder.
I have now disabled internal CRON osclass, and I am looking what will happen.


Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #16 on: December 13, 2016, 12:33:34 pm »
Yes server was down, to do not affect other sites I have changed root folder name and therefore it is off...
My previous solution was a new installation and restore backup files...But it goes max 1 week and it repeats again...
Yes I have selected OSCLASS cron. I am using osclass cron. Should I disable this?

1. Enable OSclass debug to a LOG.

https://doc.osclass.org/Debug_PHP_errors

Leave it as it is for at least 48 hours or more (doesn't hurt). Check the log files arfer a few hours and let us know.

2. Does an ERROR.LOG exist in your Osclass directory ? If so what is it in there ?

3. DISABLE FOR A WHILE ALL CRONS. Doesn't hurt for 1-2 days and see how it goes.

4. After that Enable EXTERNAL CRON ONLY twice a day.

5. Tell us what is the Folders and Files permissions (using an ftp for example). Check one "oc-" folder and one file.
« Last Edit: December 13, 2016, 12:38:31 pm by Aficionado »

dev101

  • Osclass Hero
  • Hero Member
  • *
  • Posts: 1575
  • osclass.work
Re: Strange SPAM CPU Usage
« Reply #17 on: December 13, 2016, 01:27:04 pm »
If that IP is not yours, you have to report it for abuse.

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #18 on: December 14, 2016, 01:37:43 am »
1) Enabled debug log
2) I have added attachment log files from yesterday my problem occured. Now there is no a recorded log file into root.
3) Disabled cron into OSCLASS ( do you mean external cron " cron into CPANEL " ) if yes I did not do something with cron of hosting panel. should I also disable?
4) Folder permission is 755 and file permissions is 644

Since this morning 13.12.2016 at 10:00 AM I have reinstalled OSCLASS and restored SQL database and only oc-content/ folder it is now working fine 13 hours.

When I look OSCLASS visitor statistic yesterday visitors are raised from 400 to 2768 suddenly ...and now is again down to 440

Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #19 on: December 14, 2016, 02:04:33 am »
Ok here is the log file for easy reading.

[12-Dec-2016 23:00:42 UTC] PHP Warning:  require_once(/home/aytgroup/public_html/nannyturkey.com/oc-includes/osclass/model/City.php): failed to open stream: No such file or directory in /home/aytgroup/public_html/nannyturkey.com/oc-load.php on line 128
[12-Dec-2016 23:00:42 UTC] PHP Stack trace:
[12-Dec-2016 23:00:42 UTC] PHP   1. {main}() /home/aytgroup/public_html/nannyturkey.com/index.php:0
[12-Dec-2016 23:00:42 UTC] PHP   2. require_once() /home/aytgroup/public_html/nannyturkey.com/index.php:23
[12-Dec-2016 23:00:42 UTC] PHP Fatal error:  require_once(): Failed opening required '/home/aytgroup/public_html/nannyturkey.com/oc-includes/osclass/model/City.php' (include_path='/home/aytgroup/public_html/nannyturkey.com/oc-includes/htmlpurifier:.:/opt/alt/php55/usr/share/pear:/opt/alt/php55/usr/share/php') in /home/aytgroup/public_html/nannyturkey.com/oc-load.php on line 128
[12-Dec-2016 23:00:42 UTC] PHP Stack trace:
[12-Dec-2016 23:00:42 UTC] PHP   1. {main}() /home/aytgroup/public_html/nannyturkey.com/index.php:0
[12-Dec-2016 23:00:42 UTC] PHP   2. require_once() /home/aytgroup/public_html/nannyturkey.com/index.php:23
[12-Dec-2016 23:00:42 UTC] PHP Warning:  require_once(/home/aytgroup/public_html/nannyturkey.com/oc-includes/osclass/helpers/hDefines.php): failed to open stream: No such file or directory in /home/aytgroup/public_html/nannyturkey.com/oc-load.php on line 82
[12-Dec-2016 23:00:42 UTC] PHP Stack trace:
[12-Dec-2016 23:00:42 UTC] PHP   1. {main}() /home/aytgroup/public_html/nannyturkey.com/index.php:0
[12-Dec-2016 23:00:42 UTC] PHP   2. require_once() /home/aytgroup/public_html/nannyturkey.com/index.php:23
[12-Dec-2016 23:00:42 UTC] PHP Fatal error:  require_once(): Failed opening required '/home/aytgroup/public_html/nannyturkey.com/oc-includes/osclass/helpers/hDefines.php' (include_path='.:/opt/alt/php55/usr/share/pear:/opt/alt/php55/usr/share/php') in /home/aytgroup/public_html/nannyturkey.com/oc-load.php on line 82
[12-Dec-2016 23:00:42 UTC] PHP Stack trace:
[12-Dec-2016 23:00:42 UTC] PHP   1. {main}() /home/aytgroup/public_html/nannyturkey.com/index.php:0
[12-Dec-2016 23:00:42 UTC] PHP   2. require_once() /home/aytgroup/public_html/nannyturkey.com/index.php:23
[13-Dec-2016 00:00:42 Europe/Madrid] PHP Warning:  fopen(/home/aytgroup/public_html/nannyturkey.com/oc-content/plugins/cookie_consent/languages/tr_TR/messages.mo): failed to open stream: No such file or directory in /home/aytgroup/public_html/nannyturkey.com/oc-includes/php-gettext/streams.php on line 95
[13-Dec-2016 00:00:42 Europe/Madrid] PHP Stack trace:
[13-Dec-2016 00:00:42 Europe/Madrid] PHP   1. {main}() /home/aytgroup/public_html/nannyturkey.com/index.php:0
[13-Dec-2016 00:00:42 Europe/Madrid] PHP   2. CWebMain->__construct() /home/aytgroup/public_html/nannyturkey.com/index.php:141
[13-Dec-2016 00:00:42 Europe/Madrid] PHP   3. BaseModel->__construct() /home/aytgroup/public_html/nannyturkey.com/oc-includes/osclass/controller/main.php:23
[13-Dec-2016 00:00:42 Europe/Madrid] PHP   4. WebThemes::newInstance() /home/aytgroup/public_html/nannyturkey.com/oc-includes/osclass/core/BaseModel.php:57

Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #20 on: December 14, 2016, 02:06:28 am »
1) Enabled debug log


No it is NOT working right. Those are FATAL errors you have and probably that is the cause of your problems.

Have you modified Osclass script in any way ? Any 3rd party plugins ?

« Last Edit: December 14, 2016, 02:12:29 am by Aficionado »

Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #21 on: December 14, 2016, 02:16:37 am »
1) Enabled debug log
2) I have added attachment log files from yesterday my problem occured. Now there is no a recorded log file into root.
3) Disabled cron into OSCLASS ( do you mean external cron " cron into CPANEL " ) if yes I did not do something with cron of hosting panel. should I also disable?
4) Folder permission is 755 and file permissions is 644


So permissions are ok. Just Disable Internal Cron and don't put Crons from Cpanel for 2-3 days (no harm done). Until you have a clear debug.log.


Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #22 on: December 14, 2016, 02:19:24 am »
Please post here the last two lines (with the paths) of your Osclass config.php

like this for example:

Code: [Select]
define('REL_WEB_URL', '/');

define('WEB_PATH', 'http://www.website.com/');

 (don't post any passwords etc etc).

Also please post here your .htaccess

« Last Edit: December 14, 2016, 02:21:02 am by Aficionado »

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #23 on: December 14, 2016, 07:29:25 pm »
I just modified adsense code placing location into header section and some color codes changing into css file not more. I do not use any third party plugin, only I use OSCLASS freeware plugings as sitemap, etc...

define('REL_WEB_URL', '/');
define('WEB_PATH', 'http://www.nannyturkey.com/');

.htaccess code now show as below ( Denied IP adresses I have added after last problem occuring, I have observed into visitorstats those ips are visiting web page and spending high KB )

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
<Files 403.shtml>
order allow,deny
allow from all
</Files>
deny from 136.243.36.81
deny from 163.172.66.1
deny from 163.172.66.2/31
deny from 163.172.66.4/30
deny from 163.172.66.8/29
deny from 163.172.66.16/28
deny from 163.172.66.32/27
deny from 163.172.66.64/26
deny from 163.172.66.128/26
deny from 163.172.66.192/29
deny from 213.142.148.11
deny from 213.142.148.1
deny from 213.142.148.2/31
deny from 213.142.148.4/30
deny from 213.142.148.8/29
deny from 213.142.148.16/28
deny from 213.142.148.32/27
deny from 213.142.148.64/27
deny from 213.142.148.96/30
deny from 188.143.232.22
deny from 188.143.232.1
deny from 188.143.232.2/31
deny from 188.143.232.4/30
deny from 188.143.232.8/29
deny from 188.143.232.16/28
deny from 188.143.232.32/27
deny from 188.143.232.64/26
deny from 188.143.232.128/25
deny from 160.153.161.238



Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #24 on: December 14, 2016, 07:40:56 pm »
Damn, everything seems to be ok, config and htaccess, security.

Let me think a bit more. I m out of ideas because 2 hosting companies can't have the same problems.

Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #25 on: December 14, 2016, 08:07:06 pm »
Ok, most probably it is because of this:

/home/aytgroup/public_html/nannyturkey.com/

This means you are running it in a subdirectory and not in "public_html". Am i right ? If so, why you do this ?

Try moving everything to "public_html" OR make some ABS_PATH change (i don't remember how, if anyone else does ....)


mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #26 on: December 14, 2016, 08:57:24 pm »
/home/aytgroup/public_html/nannyturkey.com/ is being created by GODADDY panel automatically while add on, I am also hosting 15 another web pages into same server account, therefore GODADDY is creating auto folder for each domain after /public_html/

This is also same my other hosting companies ( I use 5 different companies now )

For examle justhost.com is creating folder without .com, only " nannyturkey " folder

Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #27 on: December 14, 2016, 09:22:45 pm »
/home/aytgroup/public_html/nannyturkey.com/ is being created by GODADDY panel automatically while add on, I am also hosting 15 another web pages into same server account, therefore GODADDY is creating auto folder for each domain after /public_html/

This is also same my other hosting companies ( I use 5 different companies now )

For examle justhost.com is creating folder without .com, only " nannyturkey " folder

Well not correct. the addon domain should be created in the same level as public_htlml otherwise ther are not domains but subdirectories.

Osclass team could comment on this ...

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #28 on: December 14, 2016, 10:15:15 pm »
At the attachment I have added GODADDY domain add on panel's secreenshoots,
into number 1 when I insert domain name, below number 2 + 3 system is creating itself. ( see secrenshoot " godadd add on "

I see all domains into /public_html/  and /www/ folder. 
Please see secreeshoots. I do not know whether I am doing something wrong but all CPANELS I use, does not have an another domain add on system.



Aficionado

  • Hero Member
  • *****
  • Posts: 4090
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #29 on: December 14, 2016, 10:19:34 pm »
At the attachment I have added GODADDY domain add on panel's secreenshoots,
into number 1 when I insert domain name, below number 2 + 3 system is creating itself. ( see secrenshoot " godadd add on "

I see all domains into /public_html/  and /www/ folder. 
Please see secreeshoots. I do not know whether I am doing something wrong but all CPANELS I use, does not have an another domain add on system.

No, i manage a variety of Osclass and Wordpess in 5 well-respected hosting companies. And Add On Domains are created by Cpanel in the same level as public_html.

I'm not saying you lie, just poiting what the problem could be.