Higher load on the server which led to an increase in the need for RAM

[sylwekb]

My hosting provider pointed out that today there was a problem with a higher load on the server which led to an increase in the need for RAM and consequently saturation and server restart. An increased load was observed on the server around 12:30 (increase in the number of instances from 8 => 121). WWW server for Joomla 3.8.12 + Virtuemart 3.4. How can you reduce such problems? The store has about 500 products. The analysis indicates that the increase occurred from a specific IP address.

[CyrusXxX]

If that IP address belongs to traffic which is not coming from real humans/customers have you consider to block that IP with htaccess for example?

[sylwekb]

I blocked this IP address with this no problem, however this problem occurs on the second day from a different IP address. How can you reduce server CPU usage for Joomla and Virtuemart?

[Slackervaara]

Which PHP-version do you use? PHP 7 is much faster than 5.6.

[sylwekb]

php version 7.2.3

[Slackervaara]

If you have PHP 7 its important that all extensions in Joomla is adapted to Joomla 7.2. I had a shoutbox that was not adapted and gave enormous amount of error messages, so my site was disabled. Look in error logs if your web host have it to look for error messages. My shoutbox gave 50 MB errors in 6 hours.

[sylwekb]

I changed the php version from 7.2 to 7, the situation was repeated with the CPU too high for Virtuemart. Calls from 2 different IP addresses: 80.52.149.1 - 60.6%, 31.11.159.35 - 32.7%. I have checked and these are not spam IP addresses. There is no infection or virus on the site.

[sylwekb]

The hotingu provider wrote that the reason for saturation of RAM was a huge number of page calls from IP 88.156.139.88. Between 23.00 and 23.10 such were 3825. For other calls, the ID was mostly changed, although I do not know what to do
this is your ID because the bottom is the same. Caller introduced himself as
"iPad; CPU OS 11_4 like Mac OS X" but this information is easy to fake and
it could be a different device, program, script, etc.

As you can see, this movement does not look natural, no one would be able to do it
from the iPad device within one second enter the 12 subpages of the site. Is
it's either an attack or indexing products on your site.

On the side of the website, you can introduce limitations of calls in time,
eg in the case of a large number of calls from one IP, the service block further
call, which means that even if there are further attempts to load and
the RAM usage generated by it should be much smaller.
Below I am sending an example link describing the solution aimed at
partial automation of reducing unwanted traffic:
http://corz.org/serv/tools/anti-hammer/
I note, however, that this link is given purely as an example
existence of this type of security, because this solution is not by us
apreciated. However, you can install them yourself on the u server
us.
The operation can be checked repeatedly, quickly refreshing the page:
http://corz.org/hammer-test.php

Does anyone have such a solution at home page and could share information if this is a good solution?

[jk1]

Seems that your site still has a problem: Perhaps check this:
http://forum.virtuemart.net/index.php?topic=141220

[Slackervaara]

I had high memory and IO-usage for two days with a slow site. The solution was to take the site offline for 30 minutes. Then it functioned excellent again.