Not something you want to see in an email when you’re on “vaca” (ie. teething baby). At least it didn’t crash the server several times. The database was up to 400% usage too.
Wheee.
I will be the first to admit. Server issues is NOT my strong suit. I have a good friend who has taught me a few and this is his forte. Plus I know how to Google.
So jumping on the box, running `htop`, I saw a bunch of php-fpm processes that were taking between 10-20% of the CPU. Doing a quick google, I came across this forum on Laracast. Basically they said someone was attacking and check the access logs. In that form, a guy also gave a command to list out the IPs and the number of times it hit the server.
What a nice guy!
Well hitting both boxes was the same IP and many times. Once I blocked the IP on the loadbalancer….BOOOM. CPU went down immediately and back to normal levels.
Hope this helps someone else!