Note: All commands to be run as root user unless otherwise specified. This is my go to cheat sheet for fast complex commands for troubleshooting servers almost every day. Hope you enjoy!
Restart Plesk
service psa restart
Restart all Mail Services on Plesk
service courier-imaps stop service courier-imaps start service courier-imapd stop service courier-imapd start service courier-pop3d stop service courier-pop3d start service courier-pop3s stop service courier-pop3s start
Restart PHP FPMS on Plesk
service plesk-php70-fpm restart
service plesk-php72-fpm restart
service plesk-php73-fpm restart
service plesk-php56-fpm restart
Restart MySQL
Explanation: Run this when Plesk login isn’t loading (common for Halloween).
/etc/init.d/mysql restart
Ban IP addresses
iptables -I INPUT -s 180.93.100.126 -p tcp -j DROP
or if the server has apf on it:
apf -d <ip>
Server Status Page
Should you need to set up server status on a server without it enabled, these instructions should work for servers even non plesk servers: https://support.plesk.com/hc/en-us/articles/213922425-How-to-enable-the-Apache-server-statistics-on-a-Plesk-server
Confirm IP address properly banned
iptables -L INPUT -v -n | grep "180.93.100.126"
Find unique ips hitting a specific url endpoint in apache logs
This is specifically “notifystock” endpoint.
cat access_ssl_log | grep notifystock | awk '{print $1}' | sort -n | uniq -c | sort -nr | head -20
Get Largest Files on server
resize; clear; date; echo "Largest Directories:"; du -hcx / | grep '^[0-9]*G'\
| sort -nr | head; echo ""; echo "Largest Files:"; nice -n 19 find / -mount \
-type f -ls|sort -rnk7 |head -40|awk '{printf "%d MB\t%s\n",($7/1024)/1024,$NF}'
Get Inode usage of folders
find . -printf "%h\n" | cut -d/ -f-2 | sort | uniq -c | sort -rn
Block Bot Army on specific url with apf
If a bot army is hitting a url “account/create” you can use the below commands to block them.
grep "account/create" access_ssl_log > brian
awk '{print $1}' brian | sort -u > brian2
sed 's/^/apf -d /' brian2 >> block.sh
sh block.sh
Rsync Example
rsync -avz -e "ssh -p 28804" root@sourcexyz.com:/root/install.log /tmp/
rsync -avz -e "ssh -p 28804" --perms --delete /home/user/ root@108.xx.xxx.xxx:/home/user/
Better TOP (TOP alternative)
atop -Aac “`
First, you may need to yum install atop
ionice process/es by name
Replace “/usr/bin/imapd” with name of the process:
ps axf | grep "/usr/bin/imapd" | grep -v couriertls | grep -v grep | awk '{print "sudo ionice -c2 -n7 -p " $1}'|sh
If you want to test before running:
ps axf | grep "/usr/bin/imapd" | grep -v couriertls | grep -v grep | awk '{print "sudo ionice -c2 -n7 -p " $1}'
Change MTA from qmail to postfix on plesk server
This command should not be run unless you are 1000% sure you know what you are doing and all of the risk associated with it. /usr/local/psa/admin/sbin/autoinstaller --select-release-current --install-component postfix
Sar Command
This command keeps track of iowait and a few other things on the server. Can be used to verify if there were issues previously.
[root@host.com httpdocs]# sar Linux 2.6.32-696.1.1.el6.x86_64 (host.com) 03/09/2019 _x86_64_ (8 CPU) 12:00:01 AM CPU %user %nice %system %iowait %steal %idle 12:10:01 AM all 0.49 0.71 0.36 1.13 0.03 97.28 12:20:01 AM all 0.33 3.08 2.22 0.51 0.07 93.79 12:30:01 AM all 0.56 2.45 0.79 0.17 0.00 96.02 12:40:01 AM all 0.85 1.68 3.87 0.28 0.01 93.31 12:50:01 AM all 0.35 0.40 2.79 0.43 0.01 96.02 01:00:01 AM all 0.29 0.34 0.33 0.12 0.00 98.92 01:10:02 AM all 0.43 0.32 5.03 6.62 0.02 87.58 01:20:01 AM all 0.86 0.69 10.02 12.03 0.02 76.38 01:30:01 AM all 0.65 0.48 1.88 5.09 0.01 91.89
Print top Disk usage processes
iotop
Then press ‘a’ on the keyboard once it loads to sort by aggregate. Note: if there are magento crons running and very high load, it is usually ok to kill with kill -9 <pid>. Check that the site loads after killing. If it doesn’t for some reason, you can simply rerun the indexer via ssh for that site.
Print top CPU usage processes
ps aux | sort -nrk 3,3 | head -n 5
Print out top requester ips on plesk
cat /var/www/vhosts/*/logs/access_log /var/www/vhosts/*/logs/proxy_access_log /var/www/vhosts/*/logs/proxy_access_ssl_log /var/www/vhosts/*/logs/access_ssl_log | awk '{print $1}' | sort -n | uniq -c | sort -nr | head -100