lnmg 已经正常运行4个月了 昨天突然出现502异常

thqe

lnmg 已经正常运行4个月了 昨天突然出现502异常。查看nginx log 显示以下问题
1.已经把max_children调到80，以前是30,主机内存是2.5G
2.已经把虚拟主机日志都清空
3.用这个查询netstat -anpo | grep "php-cgi" | wc -l         phpcgi会突然加大到200+
4.查看nginx log 显示以下异常
2012/08/31 20:10:01 [crit] 24309#0: *2242 connect() to unix:/tmp/php-cgi.sock failed (2: No such file or directory) while connecting to upstream, client: 131.253.46.207, server: www.199aiyae.com , request: "GET /gallery-31-s1,13_5,3_4,1-0--1--grid.html HTTP/1.0", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "www.199aiyae.com"
2012/08/31 20:10:01 [crit] 24309#0: *2244 connect() to unix:/tmp/php-cgi.sock failed (2: No such file or directory) while connecting to upstream, client: 66.249.73.144, server: www.mudiaaiofozhu.com , request: "GET /robots.txt HTTP/1.1", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "www.mudiaaiofozhu.com"
2012/08/31 20:10:01 [crit] 24309#0: *2246 connect() to unix:/tmp/php-cgi.sock failed (2: No such file or directory) while connecting to upstream, client: 66.249.73.85, server:www.txp67868.com , request: "GET /?cat=11 HTTP/1.1", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "www.txp67868.com"
2012/08/31 20:10:01 [crit] 24309#0: *2097 connect() to unix:/tmp/php-cgi.sock failed (2: No such file or directory) while connecting to upstream, client: 60.217.188.172, server: www.huashaeeng-100.com , request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "www.huashaeeng-100.com"
2012/08/31 20:10:01 [crit] 24309#0: *2241 connect() to unix:/tmp/php-cgi.sock failed (2: No such file or directory) while connecting to upstream, client: 122.192.50.90, server: www.t2ianmaae8o233.com  , request: "POST /wp-admin/post.php HTTP/1.1", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "www.t2ianmaae8o233.com", referrer: "www.t2ianmaae8o233.com /wp-admin/post-new.php"
2012/08/31 20:10:01 [crit] 24309#0: *2250 connect() to unix:/tmp/php-cgi.sock failed (2: No such file or directory) while connecting to upstream, client: 27.155.193.200, server: www.t2ianmaae8o233.com  , request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/tmp/php-cgi.sock:", host: "www.t2ianmaae8o233.com  ", referrer: "http://www.sogou.com/sogou?query=%CC%EC%C3%A8%C9%CC%B3%C7&pid=AQqDA"


军哥帮忙看看吧。在网上实在是搜索不到了。您的502那个贴子我也看了里面所有的方面都试过了。重启cgi这后几分种就从5个增加到200以上

flash165

初步估计是被CC了,查查那个IP来源比较多,直接封掉IP

licess

php-cgi挂了，可以搜索一下论坛里的 502 重启脚本，加上