Website under attack?

[SteveJohnson]

line 1. probably bot or someone sniffing around, don't worry
line 2 & 3. probably bot, and well-known problem in Osclass, still not resolved
4. badly configured server, seems that you have much to learn about proper configurations

Regards

Thank you for the input dev101, yes i'm learning - just like all of us 
Could you tell me what can i do to remove error no.4?

[dev101]

Essentially, same fix you have done to make ZB Block work.

Regards

[SteveJohnson]

Essentially, same fix you have done to make ZB Block work.

Regards

dev101, i don't know if you're giving "guess" solutions or wrote the answers in a hurry.
But i took a fair amount of time to study what might be going wrong with my server. Let's start with your latest reply "Essentially, same fix you have done to make ZB Block work." - i don't know what is this. ZBBLOCK was not working on my server becuse the www-data user was not able to write.. this has nothing to do with this error.

Getting back to the 3 points. Your answers -
1 & 2 - Bots ---  (it's obvious we know that)
3 - Bad configuration -- What do you mean by just "bad". You've gotta give an explanation on how you came to this conclusion. Just by saying "not right or incorrect" does not mean anything.

Now, what was happening was, some jerks have been buying data servers from remote locations and have been botting my server using IPs from USA. I got to know this recently when i installed a bot protection system called shieldsquare.

By the way, i configure my server by reading documentations from DigitalOcean and Linode, they are considered to be very well written among developers (and yes i read them very thoroughly). So gentlemen, please don't provide wrong information if you're not sure about the problem.

Regards,

[Aficionado]

By the way, i configure my server by reading documentations from DigitalOcean and Linode, they are considered to be very well written among developers (and yes i read them very thoroughly). So gentlemen, please don't provide wrong information if you're not sure about the problem.

Well, since dev101 is well known for helping here for free, personally i don't really appreciate that quote from you.

I assure you we do know what we are talking about.

[Aficionado]

Now, what was happening was, some jerks have been buying data servers from remote locations and have been botting my server using IPs from USA. I got to know this recently when i installed a bot protection system called shieldsquare.

Why attack you ? What is your site ? Is it that famous and important ? Is that so big so they want to copy you data ?

I don't think so. What happens here is simply a misconfigured server. Simple as that.

[SteveJohnson]

Now, what was happening was, some jerks have been buying data servers from remote locations and have been botting my server using IPs from USA. I got to know this recently when i installed a bot protection system called shieldsquare.

Why attack you ? What is your site ? Is it that famous and important ? Is that so big so they want to copy you data ?

I don't think so. What happens here is simply a misconfigured server. Simple as that.

I can't give you an answer for "why".. and im sure nobody can. Be it famous or not bot attacks can be as random as it can be.

If you are so sure about a misconfigured server, tell me the reason how you came to this conclusion. Because i can see the detailed information about bot attacks, their IP and the reason why they are called bots, in every few days when my site's cpu peaks..

[SteveJohnson]

By the way, i configure my server by reading documentations from DigitalOcean and Linode, they are considered to be very well written among developers (and yes i read them very thoroughly). So gentlemen, please don't provide wrong information if you're not sure about the problem.

Well, since dev101 is well known for helping here for free, personally i don't really appreciate that quote from you.

I assure you we do know what we are talking about.

Read the reply about the fix being the same solution as was for zbblock.. what??
I don't mean disrespect for someone that is trying to help. But the answers were more misleading to me than help. No grudges here.

[SmaRTeY]

Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct

The above is very clear about one thing, the server is unable to write data.... this can be due to wrong path and/or rights issue preventing data to be written to configured session.save_path folder. Also the first warning is pointing into same direction, Osclass and access forbidden is most likely related to the other php warnings.


Regards,
Eric

[SteveJohnson]

I still haven't figured why that happened, but after installing the bot prevention software from shieldsquare, i didn't see any weird activity on my cpu since.

Why the server was not able to write might be again something that the bots trying to write something illegal. But the website never gave an error on any functions... My server configuration is the same as it was.

Whatever it is, it hasn't happened since then. Will update if i find something new...

Regards,

[mrtsoftware]

I am using bender theme for 2 web pages on a shared hosting plan, since yesterday my hosting company started send warning about " High CPU Usage Consuming Resource Limit  "
This web sites has max 200 visitors daily and no video playing, no data entering etc. It can not be consume all CPU of system,
I checked web site visitor's stats I saw record below;
Time IP   Size (bytes)  Referring URL  URL Status Method Protocol User Agent
10/21/16, 3:06 AM 66.7.223.218   83482  Osclass /  500 POST HTTP/1.1 (v.361) -
10/21/16, 3:07 AM 66.7.223.218   83482  Osclass /  500 POST HTTP/1.1 (v.361) -
10/21/16, 3:08 AM 66.7.223.218   83482  Osclass /  500 POST HTTP/1.1 (v.361) -

And this records going down as thousands and every minutes a bots sending high kb ( 83482 )

How to solve this problem?

[Aficionado]

I am using bender theme for 2 web pages on a shared hosting plan, since yesterday my hosting company started send warning about " High CPU Usage Consuming Resource Limit  "
This web sites has max 200 visitors daily and no video playing, no data entering etc. It can not be consume all CPU of system,
I checked web site visitor's stats I saw record below;
Time IP   Size (bytes)  Referring URL  URL Status Method Protocol User Agent
10/21/16, 3:06 AM 66.7.223.218   83482  Osclass /  500 POST HTTP/1.1 (v.361) -
10/21/16, 3:07 AM 66.7.223.218   83482  Osclass /  500 POST HTTP/1.1 (v.361) -
10/21/16, 3:08 AM 66.7.223.218   83482  Osclass /  500 POST HTTP/1.1 (v.361) -

And this records going down as thousands and every minutes a bots sending high kb ( 83482 )

How to solve this problem?

Resolve what ? 66.7.223.218 is your hosting company IP.

Seeing all those errors you have posted in other threads, the solution is simple. Get out if that damn Hostdime crap hosting.

Do youself a favor and find a real hosting company.

[mrtsoftware]

Hi everbody,
as Aficionado adviced, I stopped to work with hostdime, and I have immigrated my web to another hosting, now it is working fine..
Thank you for advice Aficionado!

[Aficionado]

Hi everbody,
as Aficionado adviced, I stopped to work with hostdime, and I have immigrated my web to another hosting, now it is working fine..
Thank you for advice Aficionado!

Nice to see that all are solved. Good luck with your site !