View Single Post
  #1   (View Single Post)  
Old 22nd December 2016
psypro psypro is offline
Package Pilot
 
Join Date: Mar 2016
Location: Continent:Europe
Posts: 156
Default Somebody want to log into my OpenBSD website/server

When I go into Wordpress plugin, iThemes Security log.
I find many attempts to log in (I am the only user of this test site, with close to 0 content)

I see 5 php-fpm-7.0 process at 25 % cpu load each (Celeron J2900 quad core cpu). The site feels lees responsive.

So my question:

NR1 : What logs or command to use, to monitor this from OpenBSD command line.

NR2: Is modification of pf rulset, to implement something like fail2ban the way forward to free up system resources?



Code:
Invalid Login Attempt	5	2016-12-20 19:01:31	66.199.161.103	admin			
Invalid Login Attempt	5	2016-12-20 17:06:24	173.252.206.2	admin			
Invalid Login Attempt	5	2016-12-20 16:40:49	104.40.85.104	admin			
Invalid Login Attempt	5	2016-12-20 16:06:49	37.187.71.95	admin			
Invalid Login Attempt	5	2016-12-20 14:22:59	168.77.213.88	admin			
Invalid Login Attempt	5	2016-12-20 14:21:30	173.188.123.130	admin			
Invalid Login Attempt	5	2016-12-20 13:09:18	198.1.95.13	admin			
Invalid Login Attempt	5	2016-12-20 13:04:00	104.236.61.28	admin			
Invalid Login Attempt	5	2016-12-20 10:31:06	213.246.42.176	admin			
Invalid Login Attempt	5	2016-12-20 10:25:49	129.128.185.90	admin			
Invalid Login Attempt	5	2016-12-20 09:31:35	69.28.199.240	admin			
Invalid Login Attempt	5	2016-12-20 09:18:35	191.252.63.24	admin			
Invalid Login Attempt	5	2016-12-20 08:50:00	208.75.149.84	admin			
Invalid Login Attempt	5	2016-12-20 07:42:00	212.175.19.78	admin			
Invalid Login Attempt	5	2016-12-20 07:22:38	91.121.154.52	admin			
Invalid Login Attempt	5	2016-12-20 07:07:14	159.253.208.45	admin			
Invalid Login Attempt	5	2016-12-20 06:55:58	38.123.253.149	admin			
Invalid Login Attempt	5	2016-12-20 06:31:21	203.162.76.144	admin			
Invalid Login Attempt	5	2016-12-20 06:17:18	151.236.47.224	admin			
Invalid Login Attempt	5	2016-12-20 05:07:35	167.114.157.235	admin
var/log/php-fpm-log, for weeks reported no problem, now it seem to push against its limits.

Code:
22-Dec-2016 09:23:29] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:26:18] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:31:45] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:33:22] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:33:35] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:34:21] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:35:11] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:35:18] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:35:54] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:36:16] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:36:22] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:36:29] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:36:48] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:37:53] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:56:10] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it
[22-Dec-2016 09:56:27] WARNING: [pool www] server reached pm.max_children setting (5), consider raising it

Last edited by psypro; 22nd December 2016 at 09:53 AM.
Reply With Quote