| |
Haven't registered yet? Do it here now!
 |
|
 |
|
wondo
Joined: 25 Jun 2008
Posts: 4
|
|
|
 |
|
 |
|
 Posted: Wed Jun 25, 2008 3:03 pm Post subject: Hoster blocked script ... |
 |
|
|
 |
|
 |
|
|
|
|
Hello,
my hoster has blocked the scripts due resource abuse and I should fix that ASAP ...
Iīm not an programmer, Iīm not an system admin - so I donīt know what I should must do, to reactive the scripts.
This what the hoster sends to me:
PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND
5648 thuch 1 75 0 67688K 20944K suspfs 0 0:00 0.81% php
5650 thuch 1 75 0 67688K 20944K suspfs 2 0:00 0.81% php
5649 thuch 1 75 0 67688K 20944K suspfs 1 0:00 0.54% php
5583 thuch 1 75 0 67688K 20944K suspfs 7 0:00 0.00% php
5582 thuch 1 75 0 67688K 20944K suspfs 5 0:00 0.00% php
5584 thuch 1 75 0 67688K 20944K suspfs 4 0:00 0.00% php
5585 thuch 1 75 0 67688K 20944K suspfs 6 0:00 0.00% php
5559 thuch 1 75 0 67688K 20944K suspfs 5 0:00 0.00% php
5521 thuch 1 75 0 67688K 20944K suspfs 4 0:00 0.00% php
5558 thuch 1 75 0 67688K 20944K suspfs 4 0:00 0.00% php
5624 thuch 1 75 0 67688K 20944K suspfs 7 0:00 0.00% php
5522 thuch 1 75 0 67688K 20944K suspfs 6 0:00 0.00% php
5560 thuch 1 75 0 67688K 20944K suspfs 7 0:00 0.00% php
5625 thuch 1 75 0 67688K 20944K suspfs 6 0:00 0.00% php
5626 thuch 1 75 0 67688K 20944K suspfs 1 0:00 0.00% php
5523 thuch 1 75 0 67688K 20944K suspfs 5 0:00 0.00% php
5579 thuch 1 8 0 5136K 1600K wait 7 0:00 0.00% sh
5580 thuch 1 8 0 5136K 1600K wait 1 0:00 0.00% sh
5577 thuch 1 8 0 5136K 1600K wait 6 0:00 0.00% sh
5578 thuch 1 8 0 5136K 1600K wait 3 0:00 0.00% sh
5646 thuch 1 8 0 5136K 1600K wait 2 0:00 0.00% sh
5621 thuch 1 8 0 5136K 1600K wait 2 0:00 0.00% sh
5557 thuch 1 8 0 5136K 1600K wait 2 0:00 0.00% sh
5519 thuch 1 8 0 5136K 1600K wait 7 0:00 0.00% sh
5555 thuch 1 8 0 5136K 1600K wait 7 0:00 0.00% sh
5645 thuch 1 8 0 5136K 1600K wait 5 0:00 0.00% sh
5623 thuch 1 8 0 5136K 1600K wait 7 0:00 0.00% sh
5647 thuch 1 8 0 5136K 1600K wait 7 0:00 0.00% sh
5622 thuch 1 8 0 5136K 1600K wait 6 0:00 0.00% sh
5518 thuch 1 8 0 5136K 1600K wait 6 0:00 0.00% sh
5520 thuch 1 8 0 5136K 1600K wait 4 0:00 0.00% sh
5556 thuch 1 8 0 5136K 1600K wait 4 0:00 0.00% sh
ps -fH -eeww -U thuch
PID TT STAT TIME COMMAND
5518 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php >> /dev/null
5519 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php >> /dev/null
5520 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php >> /dev/null
5521 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php
5522 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php
5523 ?? D 0:00.06 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php
5555 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php >> /dev/null
5556 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php >> /dev/null
5557 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php >> /dev/null
5558 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php
5559 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php
5560 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php
5577 ?? Is 0:00.02 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/ba/bapost.php >> /dev/null
5578 ?? Is 0:00.02 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php >> /dev/null
5579 ?? Is 0:00.02 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php >> /dev/null
5580 ?? Is 0:00.02 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php >> /dev/null
5582 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php
5583 ?? D 0:00.08 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/ba/bapost.php
5584 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php
5585 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php
5621 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php >> /dev/null
5622 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php >> /dev/null
5623 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php >> /dev/null
5624 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php
5625 ?? D 0:00.06 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php
5626 ?? D 0:00.06 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php
5645 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php >> /dev/null
5646 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php >> /dev/null
5647 ?? Is 0:00.01 SHELL=/bin/sh HOME=/home/thuch PATH=/usr/bin:/bin LOGNAME=thuch USER=thuch /bin/sh -c /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php >> /dev/null
5648 ?? D 0:00.07 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borssfeeder.php
5649 ?? D 0:00.06 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/bocron.php
5650 ?? D 0:00.06 USER=thuch HOME=/home/thuch LOGNAME=thuch PATH=/usr/bin:/bin SHELL=/bin/sh /usr/bin/php /home/thuch/public_html/***********.***/bo/borposter.php
Regards
Torsten |
|
|
|
|
|
|
|
Atanasis
Owner
Joined: 22 May 2004
Posts: 4284
Location: The Net
|
|
|
|
|
|
|
| Posted: Wed Jun 25, 2008 3:08 pm Post subject: |
|
|
|
|
|
|
|
|
|
|
hi there,
huh thats really bad looking. There should be something wrong at the server, because the cron files has locking protection, so they can't run twice or more if an instance of them is still running. So basically if for example borssfeeder.php is running and doing some work, another copy of it can't run in meanwhile.
Tell me how much blogs you have in your system, how frequent are they supposed to read from rss feeds and such stuff. Also what version of the software you are on?
_________________
Thanks,
Kaktusan
 |
|
|
|
|
|
|
|
wondo
Joined: 25 Jun 2008
Posts: 4
|
|
|
|
|
|
|
| Posted: Wed Jun 25, 2008 3:13 pm Post subject: |
|
|
|
|
|
|
|
|
|
|
I have just starting - I buy the scripts 1 or 2 weeks ago - actual versions.
I canīt say how much blogs I have online, because I canīt access the scripts, but thats are not more then 20 blogs - but I think more less ...
And my last look at the stats of BA say to me, that I have 250 incomming traffic ...
Regards
Torsten |
|
|
|
|
|
|
|
Atanasis
Owner
Joined: 22 May 2004
Posts: 4284
Location: The Net
|
|
|
|
|
|
|
| Posted: Wed Jun 25, 2008 3:41 pm Post subject: |
|
|
|
|
|
|
|
|
|
|
ok, i see, i don't see any reason in matter of traffic, content or incorrect usage to cause that, so definitely should be some server issue.
ask your host support to do the following:
- delete all scripts cronjobs, so those processes won't start again and flood the server
- enable scripts so we can acess the admin panels and such stuff
then pm me ftp and cpanel access to your server and urls and passwords for script admins, so i can go and review things and do some tests and see whats up
_________________
Thanks,
Kaktusan
|
|
|
|
|
|
|
|
wondo
Joined: 25 Jun 2008
Posts: 4
|
|
|
|
|
|
|
| Posted: Wed Jun 25, 2008 4:13 pm Post subject: |
|
|
|
|
|
|
|
|
|
|
Ok, I have send my host your request ...
Which address should I use to send you the passwords ... ?
Torsten
EDIT: Itīs not my day ... you wrote already "pm me" ... |
|
|
|
|
|
|
|
Atanasis
Owner
Joined: 22 May 2004
Posts: 4284
Location: The Net
|
|
|
|
|
|
|
| Posted: Wed Jun 25, 2008 8:57 pm Post subject: |
|
|
|
|
|
|
|
|
|
|
ok, np, bad days always happen..
looking at the stuff now...
_________________
Thanks,
Kaktusan
|
|
|
|
|
|
|
|
|
|
|
Atanasis
Owner
Joined: 22 May 2004
Posts: 4284
Location: The Net
|
|
|
|
|
|
|
| Posted: Wed Jun 25, 2008 9:12 pm Post subject: |
|
|
|
|
|
|
|
|
|
|
ok, did a review on the things and did couple of tests and all works fine.
I run for example one of the cron scripts and tried running another instances of it while the first one was working and it didn't let me as it should be. Also didn't notice any unsual script completion or getting stucked into the memory.
I deleted couple of the cronjobs for BO that you don't use since you use BA for rss feeding and RP for pinging..
You can ask your host to run the cronjob files that i left manually on the command line and see if any of them will get stuck or something, but i am sure all will go fine. After that they can enable the cronjobs again..
Anyways, i haven't seen such a problem so far, because as i explained scripts have lock mechanism and can't run twice. So if they get stuck again, definitely something is wrong on the server and your host support should be looking at it, coz there isn't anything i can fix, because scripts work normal
btw what host is that, so i know for future that my clients can have problems there?
_________________
Thanks,
Kaktusan
|
|
|
|
|
|
|
|
|
|
|
wondo
Joined: 25 Jun 2008
Posts: 4
|
|
|
|
|
|
|
| Posted: Thu Jun 26, 2008 2:23 am Post subject: |
|
|
|
|
|
|
|
|
|
|
I get this message from my hoster:
Please take a look:
Jun 25 11:58:24 reseller1 suhosin[5247]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '204.15.253.152', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:10:53 reseller1 suhosin[5376]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:10:53 reseller1 suhosin[5379]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/thuch/public_html/***********.***/ba/functions.inc.php', line 17) Jun 25 12:10:53 reseller1 suhosin[5377]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:10:53 reseller1 suhosin[5374]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/thuch/public_html/***********.***/ba/functions.inc.php', line 17) Jun 25 12:10:54 reseller1 suhosin[5375]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:00 reseller1 suhosin[5521]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:01 reseller1 suhosin[5544]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:01 reseller1 suhosin[5686]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:02 reseller1 suhosin[5587]: ALERT - script tried to increase memory_limit to 134217728 bytes which is above the allowed value (attacker '63.247.71.130', file '/home/thcis/public_html/hosting/system/config/ini_tweaks.php', line 3) Jun 25 12:11:03 reseller1 suhosin[5563]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:04 reseller1 suhosin[5600]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:04 reseller1 suhosin[5578]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:04 reseller1 suhosin[5694]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:05 reseller1 suhosin[5615]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:17 reseller1 suhosin[5778]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '63.247.71.132', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:23 reseller1 suhosin[5792]: ALERT - script tried to increase memory_limit to 4294967295 bytes which is above the allowed value (attacker '217.144.69.37', file '/home/taif/public_html/includes/class_xml.php', line 35) Jun 25 12:11:25 reseller1 suhosin[5798]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '63.247.71.132', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:28 reseller1 suhosin[5803]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:28 reseller1 suhosin[5805]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker 'REMOTE_ADDR not set', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:29 reseller1 suhosin[5809]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '63.247.71.132', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:35 reseller1 suhosin[5812]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '63.247.71.132', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:11:56 reseller1 suhosin[5822]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:12:27 reseller1 suhosin[5843]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:13:15 reseller1 suhosin[5982]: ALERT - script tried to increase memory_limit to 104857600 bytes which is above the allowed value (attacker '85.17.168.37', file '/home/thuch/public_html/***********.***/bo/bofunctions.inc.php', line 70) Jun 25 12:15:00 reseller1 suhosin[6078]: ALERT - script tried to increase memory_limit to 134217728 bytes which is above the allowed value (attacker '63.247.71.130', file '/home/thcis/public_html/hosting/system/config/ini_tweaks.php', line 3) Jun 25 12:15:53 reseller1 suhosin[6177]: ALERT - script tried to increase memory_limit to 134217728 bytes which is above the allowed value (attacker '35.11.38.133', file '/home/meaad/public_html/includes/class_xml.php', line 37)
Regards
Torsten |
|
|
|
|
|
|
|
Atanasis
Owner
Joined: 22 May 2004
Posts: 4284
Location: The Net
|
|
|
|
|
|
|
| Posted: Thu Jun 26, 2008 2:33 pm Post subject: |
|
|
|
|
|
|
|
|
|
|
hi there, yes, tell this to your host support:
Yes, script tries to increase the php memory limit to 100MB, because it might be needed in some special cases of the use of the script. This is just increasing the limit when it run, it doesn't mean it uses it. Actually 90% of the times it run, it is not using and couple of MBs. You can ignore this warning, nor this is a server resource eater
_________________
Thanks,
Kaktusan
|
|
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2002 phpBB Group
|
 |
|
 |
| |
