When your server is under heavy attack and if you have IPDB enable, it will stop most of the bad traffic sources which are blacklisted by our central cloud. By default, IPDB will write syslog into /var/log/messages against each attack and it is part of our IPDB stats processing.
In some cases, it will be an overhead under heavy attack especially when the server has a slow disk. So if you detect any sort of syslog issue due to heavy logging to /var/log/messages by IPDB, you can disable the IPDB stats. To do this, you can follow the below steps.
- Create an empty file /etc/cpguard/conf/ipdb_stat_disable
2. Restart IPDB using the following command
/etc/cpguard/scripts/cpgbin ipdb restart
If you need any further information on this, please feel free to contact our support team.