I currently have a IIS6 server running PHP & FastCGI 1.5 handler.
Previously my php-cgi.exe was being overwhelmed to the point my server was running at 100% CPU usage.
After troubleshooting this issue I installed Admin Tools on our Joomla 2.5 site and began blocking request on a Bad Behavior level. After a day or two of running smooth once again the CPU usage jumped to 100% and it was all being tied up with the php-cgi.exe.
I traced out a handful of the IP addresses to find that they were not local to us, or to the USA and we are a local state and goverment site. With that in mind I began blocking anything outside of the USA. After a week of doing this I have blocked 300+ IP Addresses and my server runs good for a day or two then has FastCGI failures due to overstacking.
Any idea on how to resolve the hammering from outside the USA, as the server still has to process the IP before blocking it.
I am begining to setup a Windows 2008 R2 server wiith the latest Joomla and PHP but will not have it ready soon enough to not have to deal with this issue, that and who is to say I wont be dealing with this with the new setup.