The Joomla! Forum ™



Forum rules


Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security and Performance FAQs
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.



Post new topic Reply to topic  [ 15 posts ] 
Author Message
PostPosted: Fri Feb 17, 2012 2:41 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
Hi,
I am at rochenhost and got an abuse ticket today:
Quote:
- Ticket Response / Status -

Usage is at an very unacceptable level.

Feb 17 2012 (partial stats, 14 hours into the day):
adriatic adriatic-challenge.com 34.15 0.18 0.4
Top Process %CPU 192 /usr/bin/php /home/adriatic/public_html/index.php
Top Process %CPU 183 /usr/bin/php /home/adriatic/public_html/index.php
Top Process %CPU 179 /usr/bin/php /home/adriatic/public_html/index.php

Your account is using over 34% of ALL available resources on the server. This is having a detrimental effect on other customers and we may need to suspend the account shortly.

I havent installed anything new only updated all my components added some news etc. nothing unusual form my side (or view). I am trying to find out which component module or plugin is affecting it... from them I can not get any support on this matter?
can anybody help on this matter?
url would be http://www.adriatic-challenge.com

_________________
http://www.johnnie.hr/


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 3:24 pm 
User avatar
Joomla! Master
Joomla! Master

Joined: Thu Aug 18, 2005 8:55 pm
Posts: 18119
Location: Nijmegen, The Netherlands
Could you check your webserver's logfiles?

Could you use Joomla's debug option (available in Global Configurations) to see how many (and what) database queries are run?

_________________
Kind Regards,
Peter Martin, Global Moderator - Community Leadership Team
http://www.db8.nl - Joomla specialist, Nijmegen, Nederland
Joomla 2.5 multilanguage in 10 steps: http://www.db8.nl/multilanguage-in-10-steps


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 3:39 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
I checked them but do not understand them well, tried to open them with various log analyzers but only a bunch of bots and spiders there? how to eliminate what is using the CPU?
and the debug I have turned now on and it gives me this: [code]Profile Information
Application afterLoad: 0.001 seconds, 1.00 MB
Application afterInitialise: 0.046 seconds, 6.46 MB
Application afterRoute: 0.100 seconds, 8.73 MB
Application afterDispatch: 0.154 seconds, 12.00 MB
Application afterRender: 0.786 seconds, 18.24 MB
Memory Usage
19165632
46 queries logged.

SELECT *
FROM jos_session
WHERE session_id = '99198517e773fcecb8b0feafc8e7c8bd'
DELETE
FROM jos_session
WHERE ( TIME < '1329491941' )
SELECT *
FROM jos_session
WHERE session_id = '99198517e773fcecb8b0feafc8e7c8bd'
UPDATE `jos_session`

WHERE session_id='99198517e773fcecb8b0feafc8e7c8bd'
SELECT folder AS TYPE, element AS name, params
FROM jos_plugins
WHERE published >= 1
AND access <= 2
ORDER BY ordering
SELECT `value`

FROM `jos_admintools_storage`

WHERE `key` = 'cparams'
SELECT *
FROM `jos_rsfirewall_configuration`
SELECT *
FROM jos_rsfirewall_hashes
WHERE `type`='1.5.25'
SELECT *
FROM jos_rsfirewall_hashes
WHERE `type`='1.5.25'
SELECT *
FROM jos_rsfirewall_hashes
WHERE `type`='protect'
SELECT *
FROM jos_rsfirewall_hashes
WHERE `type`='protect'
SELECT *
FROM jos_components
WHERE parent = 0
SELECT id, title, module, POSITION, content, showtitle, control, params
FROM jos_modules AS m
LEFT JOIN jos_modules_menu AS mm
ON mm.moduleid = m.id
WHERE m.published = 1
AND m.access <= 2
AND m.client_id = 1
ORDER BY POSITION, ordering
SELECT i.*, v.name AS author
FROM jos_k2_items AS i

LEFT JOIN jos_k2_categories AS c
ON c.id = i.catid

LEFT JOIN jos_users AS v
ON v.id = i.created_by

WHERE i.trash = 0
AND c.trash = 0

ORDER BY i.created DESC
LIMIT 0, 10
SELECT i.*, v.name AS author
FROM jos_k2_items AS i

LEFT JOIN jos_k2_categories AS c
ON c.id = i.catid

LEFT JOIN jos_users AS v
ON v.id = i.created_by

WHERE i.trash = 0
AND c.trash = 0

ORDER BY i.hits DESC
LIMIT 0, 10
SELECT i.*, v.name AS author, COUNT(comments.id) AS numOfComments
FROM jos_k2_items AS i

LEFT JOIN jos_k2_categories AS c
ON c.id = i.catid

LEFT JOIN jos_users AS v
ON v.id = i.created_by

LEFT JOIN jos_k2_comments comments
ON comments.itemID = i.id

WHERE i.trash = 0
AND c.trash = 0

GROUP BY i.id

ORDER BY numOfComments DESC
LIMIT 0, 10
SELECT *
FROM jos_k2_comments
ORDER BY commentDate DESC
LIMIT 0, 10
SELECT COUNT(*)
FROM jos_k2_items
SELECT COUNT(*)
FROM jos_k2_items
WHERE trash=1
SELECT COUNT(*)
FROM jos_k2_items
WHERE featured=1
SELECT COUNT(*)
FROM jos_k2_comments
SELECT COUNT(*)
FROM jos_k2_categories
SELECT COUNT(*)
FROM jos_k2_categories
WHERE trash=1
SELECT COUNT(*)
FROM jos_k2_users
SELECT COUNT(*)
FROM jos_k2_user_groups
SELECT COUNT(*)
FROM jos_k2_tags
SELECT template
FROM jos_templates_menu
WHERE client_id = 1
AND menuid = 0
SELECT *
FROM `jos_rsfirewall_configuration`
SELECT *
FROM jos_rsfirewall_logs
ORDER BY `date` DESC
LIMIT 5
SELECT COUNT(*)
FROM jos_session
WHERE userid != 0
ORDER BY usertype, username
SELECT username, TIME, userid, usertype, client_id
FROM jos_session
WHERE userid != 0
ORDER BY usertype, username
SELECT a.hits, a.id, a.sectionid, a.title, a.created, u.name
FROM jos_content AS a
LEFT JOIN jos_users AS u
ON u.id=a.created_by
WHERE a.state <> -2
ORDER BY hits DESC
LIMIT 0, 10
SELECT a.id, a.sectionid, a.title, a.created, a.modified, u.name, a.created_by_alias, a.created_by
FROM jos_content AS a
LEFT JOIN jos_users AS u
ON u.id = a.created_by
WHERE a.state <> -2
ORDER BY created DESC
LIMIT 0, 10
SELECT menutype, COUNT(id) AS numitems
FROM jos_menu
WHERE published = 1
GROUP BY menutype
SELECT `configuration`
FROM `jos_ak_profiles`
WHERE `id` = ''
SELECT `params`
FROM `jos_components`
WHERE (`link` = 'option=com_akeeba')
AND (`parent` = '0')
UPDATE `jos_ak_profiles`

WHERE `id` = ''
SELECT *
FROM `jos_ak_stats`
WHERE (`tag` <> 'restorepoint')
ORDER BY `backupstart` DESC
LIMIT 0, 20
SELECT `id`
FROM `jos_ak_stats`
WHERE `filesexist` = 1
AND`id` IN (SELECT MAX(`id`) AS `id`
FROM `jos_ak_stats`
WHERE `status` = 'complete'
GROUP BY `absolute_path`)
AND NOT (`absolute_path` = '')
ORDER BY `id` DESC
SELECT `value`

FROM `jos_admintools_storage`

WHERE `key` = 'cparams'
SELECT a.*, SUM(b.home) AS home
FROM jos_menu_types AS a
LEFT JOIN jos_menu AS b
ON b.menutype = a.menutype
GROUP BY a.id
SELECT *
FROM jos_components
WHERE `option` <> "com_frontpage"
AND `option` <> "com_media"
AND enabled = 1
ORDER BY ordering, name
SELECT joomlatablename,tablepkID
FROM `jos_jf_tableinfo`
SELECT `l`.`lang_id` AS `lang_id`,`l`.`lang_code` AS `lang_code`,`l`.`title` AS `title`,`l`.`title_native` AS `title_native`,`l`.`sef` AS `sef`,`l`.`description` AS `description`,`l`.`metakey` AS `metakey`,`l`.`metadesc` AS `metadesc`,`l`.`published` AS `published`,`l`.`image` AS `image`,`lext`.`image_ext` AS `image_ext`,`lext`.`fallback_code` AS `fallback_code`,`lext`.`params` AS `params`,`lext`.`ordering` AS `ordering`
FROM (`jos_languages` `l`
LEFT JOIN `jos_jf_languages_ext` `lext`
ON((`l`.`lang_id` = `lext`.`lang_id`)))
ORDER BY `lext`.`ordering`
SELECT COUNT(*)
FROM jos_messages
WHERE state = 0
AND user_id_to = 63
SELECT COUNT( session_id )
FROM jos_session
WHERE guest <> 1

_________________
http://www.johnnie.hr/


Last edited by johnniek2 on Sat Feb 18, 2012 7:53 am, edited 1 time in total.

Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 5:33 pm 
Joomla! Intern
Joomla! Intern

Joined: Mon May 12, 2008 2:53 pm
Posts: 78
I see you use K2.

Check over the reviews for K2:
http://extensions.joomla.org/extensions ... ction/8061

You'll notice one says it gets overflowed with spam. The devs replied to it saying it uses reCAPTCHA, but apparently the devs don't understand something.

K2 still attracts spam bots. reCAPTCHA does not keep them away, it only keeps them from submitting forms. So you still have countless bots hitting your site and causing extra load.

Now that may not be true for you. But for every K2 site I had, that's what happened.


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 5:44 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
even if there is commenting system disabled and all other user registration possibilties?
I have disabled the K2 news area (unpublished) for testing, but is there a way around that? how can I know thats the problem for sure?

_________________
http://www.johnnie.hr/


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 5:48 pm 
Joomla! Intern
Joomla! Intern

Joined: Mon May 12, 2008 2:53 pm
Posts: 78
Yes, even if that is all disabled bots can still simply hit your website looking for those.

Check your access_log, see if a lot of hits are going to K2. Then lookup the IP and see what country it is from; if it's not from a country you think should be visiting your site (Russian IPs etc) it can be a spambot.

If you see a TON of hits like that, you have the same problem I have.


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 5:55 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
you mean like awastats?

_________________
http://www.johnnie.hr/


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 5:59 pm 
Joomla! Intern
Joomla! Intern

Joined: Mon May 12, 2008 2:53 pm
Posts: 78
Nope, the access_log file from Apache.

awastats might work, but I don't know about it.


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 6:15 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
yeah awastats shows something like unique visitors 120 but pages are viewed in 7000 number for a day? How can I disable a particular bot if its unamed like this one: bot*
or just stop them visiting K2 items?
is there any way to fix the issue without uninstalling K2?

_________________
http://www.johnnie.hr/


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 6:22 pm 
Joomla! Intern
Joomla! Intern

Joined: Mon May 12, 2008 2:53 pm
Posts: 78
I had no way of blocking them because their IP was always different, but always from out of country and obvious it was a bot.

Can you uninstall K2 for a week and see if it helps? Then we can at least confirm it's K2.


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 6:28 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
that would be a big problem for the company because the boats are layed out in K2 :-(

but the host is telling me that they are constantly seeing these two processes from my user:

11516 adriatic 17 0 208m 30m 8672 R 99.5 0.1 0:02.40 /usr/bin/php /home/adriatic/public_html/index.php
11506 adriatic 18 0 205m 28m 8232 R 97.1 0.1 0:02.33 /usr/bin/php /home/adriatic/public_html/index.php

does that mean anything to you or pe7er

_________________
http://www.johnnie.hr/


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 6:33 pm 
Joomla! Intern
Joomla! Intern

Joined: Mon May 12, 2008 2:53 pm
Posts: 78
Joomla always run everything from index.php, so you will always only see index.php; there's no way to distinguish what it is doing.

I would go to K2's site and ask on their forum. There was nothing I could do either, but luckily I'm the server owner.


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 7:17 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
yeah but what means my user /usr/bin/php ?

_________________
http://www.johnnie.hr/


Top
 Profile  
 
PostPosted: Fri Feb 17, 2012 7:24 pm 
Joomla! Intern
Joomla! Intern

Joined: Mon May 12, 2008 2:53 pm
Posts: 78
Joomla is in PHP, that is just the PHP process rendering your website.


Top
 Profile  
 
PostPosted: Mon Feb 20, 2012 12:11 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Oct 09, 2008 4:34 pm
Posts: 89
Location: Croatia
I didnt have time to says thanks for your time...
havent solved the problem yet, but will post when have

_________________
http://www.johnnie.hr/


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 15 posts ] 



Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group