Very Strange Problem

Portal Home > Knowledgebase > Articles Database > Very Strange Problem

Posted by HostFriendly, 11-21-2014, 07:58 PM
Hi Friends, Today we have a strange problem. A few months ago we have moved a site from VPS to a Dedicated server. Full Backup/Restore Everything was fine till today the owner called us and informed that the website is loading after 30-40 second. When you enter the domain name, or click on any link in the site, it is waiting 30-40 seconds, then open the page immediately. After thinking that there may be a software targeted attack, i have activated and tuned cloudflare, No help. But interestingly the cloudflare accepts this latency as a downtime and informs that the server is down. Note: 1.No change from server or php side has been done recently. Server CPU load is 8%, Memory usage is about 15% 2.Admin panel can be surfed fine unless someone visit the front end. If anyone opens homepage or any content link, then the admin panel stop working. 3. No log in Error_log 4. In cPanel's top resource usage list there is no sign of high resource usage by this account. 5. Pingdom or Gtmetrix even show website offline in every single test. 6. There are up to 100 website in the current server all of which are working fine. 7. A few days the same issue happened. but after 4-5 hours the owner reported that everything started working fine. They ways we have tried to troubleshoot the problem. 1. Deactivated ConfigServer 2. Opened a new cpanel account and cloned the website. No help 3. Transfered and uploaded the system files from old VPS to current site. 4. Tried to access the site via ip (not domain) Last edited by HostFriendly; 11-21-2014 at 08:13 PM.
Posted by Johnny Cache, 11-22-2014, 12:44 AM
I'd love to help, but I don't think there's enough information to proceed. - Are other sites experiencing the same problem? - Are other clients complaining? - Can you reproduce the problem? - Are you absolutely particular it's not something with your client's browser? - Which firewall are you running? If you can safely disclose an example URL or a clone for us to look at, I'd be happy to try and reproduce it. =JE
Posted by HostFriendly, 11-22-2014, 02:54 AM
Hi. Thanks for repply 1.No other site experiences the same problem. 2. No clients complain 3. Yes, i will send you the link 4.Yes, we have all the visitors complains about the same site. 5. ConfigServer firewall is the one that i am using. But it was turned off and tested again. Mod_Sec is also disabled. No help. Here is the url, http://bit.ly/1xfzRLa
Posted by ElixantTech, 11-22-2014, 03:14 AM
Is the customer's site powered by Wordpress? If so there is a good chance that this is a crypto vulnerability due to using a downloaded/nulled template or cracked software. If wordpress, check the template directory, functions.php for an include for something like social.png. It will be at the bottom of the file. Delete that line. One of my customers had the same issue recently, using a legitimately purchased template he was just attacked using a wordpress vulnerability due to old wordpress.
Posted by HostFriendly, 11-22-2014, 03:25 AM
Hi. It is DataLife CMS, (Russian CMS) As i stated before, we already tried replacing the system files/folders with the ones in a VPS server, where the site is working fine.
Posted by bear, 11-22-2014, 09:49 AM
Sometimes a long delay retrieving content is to blame. Is it calling any external CDN or content it needs to complete the page? Is it calling something like Google analytics but the code is at the page's top?
Posted by adarshhost, 11-22-2014, 10:53 AM
Check the site loading time and response using the below url http://tools.pingdom.com

Add to Favourites Print this Article