Apache status output with no vhost and request information

sfcheng77

Registered
Apr 16, 2016
4
0
1
austin
cPanel Access Level
Website Owner
I found my server is constantly jammed with the maximum number of connections which I set to 230. I am trying to find out which particular url uses the most connections. However, when I view apache status from WHM, I saw a lot of entries with no request information as shown below. So, how would I know what the client is trying to access if no such information is provided for these requests?
Code:
Apache server status for s97-74-229-53.secureserver.net
Server Version: Apache/2.4.18 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Server MPM: prefork
Server Built: Apr 13 2016 13:55:35
Current Time: Monday, 05-Feb-2018 11:06:34 CST
Restart Time: Monday, 05-Feb-2018 10:37:53 CST
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime: 28 minutes 41 seconds
Server load: 0.20 0.22 0.18
Total accesses: 35223 - Total Traffic: 2.0 GB
CPU Usage: u20.02 s4.98 cu44.89 cs15.22 - 4.95% CPU load
20.5 requests/sec - 1.2 MB/second - 58.9 kB/request
230 requests currently being processed, 0 idle workers
RRRRRRRRRRRRRRRRRRRRCRRRRCRRRRRRRRRRRRRRRRRRRRRRRRRRRWRRRRRRRRRR
RRRRRRRRRRRRRRRRRRWRRRRRRRRRWRRRRRRRRCRRRRRRRWRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRRRRRRRWRRRRRRWRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRR
RRRRRRRRRRRRRRRRRWRRRRCCWRRRRRRRRRRWRR
Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process
Srv    PID    Acc    M    CPU    SS    Req    Conn    Child    Slot    Client    VHost    Request
0-0    28707    0/39/191    R    0.19    73    15    0.0    0.39    1.69    109.121.142.0      
1-0    16729    0/61/195    R    0.40    2    0    0.0    0.32    1.62    197.39.151.4    search.mysite.org:80    GET /favicon.ico HTTP/1.1
2-0    30448    0/5/227    R    0.01    67    0    0.0    0.16    7.14    96.92.62.42    mysite.com:80    GET /weather_icons/mcloudy.png HTTP/1.1
3-0    21745    0/53/183    R    0.92    283    0    0.0    0.58    44.95    82.239.171.223    mysite.net:443    GET /data/ie11compat_sbr.xml HTTP/1.1
4-0    25122    0/37/242    R    0.19    15    16    0.0    0.42    2.32    176.88.24.135      
5-0    26324    0/1/110    R    0.00    7    0    0.0    0.01    0.93    125.161.31.177      
6-0    27669    0/9/253    R    0.10    187    0    0.0    0.87    2.96    95.246.93.103      
7-0    17638    0/56/150    R    0.36    156    0    0.0    1.10    2.50    178.251.109.247    mysite.com:80    GET /notification.txt HTTP/1.1
8-0    27018    0/0/84    R    0.43    272    14    0.0    0.00    0.70    127.0.0.1      
9-0    29695    0/6/215    R    0.01    73    0    0.0    0.02    1.69    206.128.237.171    mysite.com:443    GET /notification.txt HTTP/1.1
10-0    3568    0/107/137    R    0.88    239    0    0.0    0.50    0.65    69.26.3.228      
11-0    30904    0/5/191    R    0.02    15    0    0.0    0.02    1.28    37.45.216.190      
12-0    29054    0/9/86    R    0.00    12    0    0.0    0.04    0.56    31.135.55.23      
13-0    7747    0/122/254    R    0.92    125    15    0.0    0.53    4.11    178.251.109.247      
14-0    26774    0/29/233    R    0.15    232    97    0.0    0.18    1.80    94.71.134.164      
15-0    3579    0/142/161    R    1.35    4    0    0.0    0.95    1.12    24.191.121.42      
16-0    27397    0/9/186    R    0.02    128    27    0.0    0.10    63.09    35.203.191.178    mysite.net:443    GET /jp/skinlist.php?sortdir=desc&sortcol=(%2f**%2fsElEcT+1+%2f
17-0    8581    0/32/57    R    0.13    280    17    0.0    0.41    0.55    178.43.12.78    mysite.com:80    GET /redir.php?id=sjt_dau HTTP/1.1
18-0    27062    0/2/199    R    0.00    269    0    0.0    0.01    2.15    178.121.0.0      
19-0    29722    0/8/181    R    0.01    5    28    0.0    0.06    1.52    114.125.170.78      
20-0    10237    1/166/213    C    2.07    0    0    0.9    161.71    162.29    50.108.222.149    mysite.com:80    GET /notification.txt HTTP/1.1
21-0    23428    0/76/209    R    0.32    8    0    0.0    0.70    1.93    125.161.31.177      
22-0    30469    0/30/289    R    0.16    2    0    0.0    0.20    8.46    178.148.137.153    mysite.com:80    GET /weather_icons/pcloudyn.png HTTP/1.1
23-0    28319    0/33/255    R    0.09    124    0    0.0    0.47    66.93    185.167.219.186    mysite.net:80    GET / HTTP/1.1
24-0    25150    0/39/244    R    0.28    170    0    0.0    0.27    1.61    217.253.18.155    mysite.com:443    GET /weather_icons/pcloudyn.png HTTP/1.1
25-0    25683    1/52/157    C    0.25    0    0    0.6    0.34    2.30    41.83.3.27    mysite.net:80    GET /photoframes/pickedframes.php HTTP/1.1
26-0    30470    0/6/223    R    0.02    64    0    0.0    0.04    6.55    178.85.209.43    mysite.net:443    GET /images/globe.png HTTP/1.1
 
Last edited by a moderator:

sfcheng77

Registered
Apr 16, 2016
4
0
1
austin
cPanel Access Level
Website Owner
I don't have such folder /var/log/apache2/domlogs. The only log file I found is this: /usr/local/apache/logs/access_log. However, this log file seems to have very limited information. I can't even find the IPs listed in the apache status output in this log file.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,201
363
Hello,

Do you have root access to this server? If so, are you using EasyApache 3? With EasyApache 3, the domain access log files are located at:

/usr/local/apache/domlogs/

Thank you.