我的网站的PHP一直占用30%的CPU

1Panel
1

20250425001337523
202504250013375231667×184 13.9 KB

容器的日志里一直刷
172.18.0.1 - 25/Apr/2025:00:13:05 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:05 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:05 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:06 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:06 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:07 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:07 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:08 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:08 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:08 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:08 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:09 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:10 +0800 “GET /index.php” 404
172.18.0.1 - 25/Apr/2025:00:13:10 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:10 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:11 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:12 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:12 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:12 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:12 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:13 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:13 +0800 “GET /index.php” 404
172.18.0.1 - 25/Apr/2025:00:13:14 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:14 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:14 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:15 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:15 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:16 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:17 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:17 +0800 “GET /index.php” 404
172.18.0.1 - 25/Apr/2025:00:13:17 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:17 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:18 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:18 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:18 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:19 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:19 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:20 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:20 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:20 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:21 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:21 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:21 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:22 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:22 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:23 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:23 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:24 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:24 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:24 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:25 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:26 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:26 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:26 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:27 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:27 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:27 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:27 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:28 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:28 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:29 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:29 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:29 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:30 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:31 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:31 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:32 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:32 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:33 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:33 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:33 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:34 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:34 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:35 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:35 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:36 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:36 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:36 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:36 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:37 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:37 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:37 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:37 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:38 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:39 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:39 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:39 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:40 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:41 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:41 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:41 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:41 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:42 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:43 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:43 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:43 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:43 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:44 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:44 +0800 “GET /index.php” 200
172.18.0.1 - 25/Apr/2025:00:13:44 +0800 “GET /index.php” 200

我不知道是为什么，求大神解答

2

因为一直有请求

3

就是这个请求它看起来像是服务器内部的请求？ 但是这个172.18.0.1是一个网关地址，我一开始以为被人ddos了 （ 但是我看网站本身的acess.log 日志里的访问没刷这么快和这么多，而且访问的也都不是index.php 访问间隔大概几秒一次 是一些搜索引擎的BOT） 我让AI帮我分析 但是也没什么确切的结论 很懵 （ AI是说 如果是来自外部的访问 真实IP地址应该也会传入容器并记录在日志里 所以我会以为是我配置错了什么东西导致产生了容器之间或容器内的高频率刷新 ）

4

搞懂了 应该就是被人给攻击了。。 我防火墙上设置了一下访问量骤降 CPU也下去了 我服了 就我这种小破站都有人打啊