Is This Normal, Or Caused By Overselling
Jan 30, 2009
I recently got a VPS from VPSLand before reading all the negative reviews... Everything seems to work fine EXCEPT disk operations. Sometimes it seems writing big files to disk, or moving/copying files around on the server will completely lock it up.
I opened up PerfMon and with my IIS/mySQL services stopped (which means my system is running absolutely nothing), the disk queue and disk % values are ridiculous.
See:
www|europeinruins|com/temp/disk-noiis-nomysql.JPG (can't post URL's so switch the | with .
View 8 Replies
ADVERTISEMENT
Jan 11, 2009
I have not logged into my server in about a week, and in during that time WHM updated itself. I logged into WHM yesterday and received the accept new license message. Then ssh'd into the server as my normal user, but can no longer su to root.
When I try, it just says 'incorrect password', though I am entering the correct root password. I can ssh to the server as root and login no problem, using that password. As root, I can su to other users, but not the other way around. This has never been a problem until yesterday.
This only happened in the last week, and the only thing that has happened is the SHM upgrade. Also, from within WHM, attempting to restart apache seems to stick with the progress meter on the screen forever. I am not sure if whm is attemtping to execute commands (like apache restart) with sudo, which may explain that behavior as sudo is no longer working either.
Has anyone seen this with a WHM upgrade?
View 8 Replies
View Related
Aug 2, 2009
On one server which i have sometime appear very high load up to 70,and that causing downtime of few minutes(i have historic data webmin module where i saw high load and downtime time matches,but it doesn't show what causing it).That server also have hardware raid in mirror mode.(copies exact data from one disk to another).
View 14 Replies
View Related
May 2, 2008
On the 30th we experienced downtime on a colocated server in a UK DC we did not know about it till late afternoon
when we finally got to access the server
we found the OS was corrupt
we found 2 of 4 hard drives apparently trashed
we found the backup also corrupt
so can we claim as its a mechanical failure on the DCs end?
View 8 Replies
View Related
Dec 7, 2008
Don't know if it is some kind of attack or this is normal but the Server load goes reaching 20 in most of the times and may be greater!
this is the mysql_process list
jarabhar_JUHyyuh is opening alot of connections in the same time and this is not the normal behavior ....
View 2 Replies
View Related
Mar 8, 2007
There is a host I am not going to name which has ~30 servers and 50,000+ customers.
Isn´t that quite a large customer base for the number of servers? They also have an unmetered plan. The normal plan is pretty generous at 200gig storage 2,5 TB transfer. I guess if someone actually uses this they´ll be shut down. Or if they even use close to 1TB they will probably bust the CPU.
View 6 Replies
View Related
Aug 15, 2007
Is it common for VPS's to be oversold? I'm currently torn between paying a little bit extra for a dedicated, giving me the piece of mind that I'm the only one on the server, and getting a cheaper VPS.
I'm looking for a VPS/dedi for a new project I'm working on that requires a quite specific set up that isn't feasible with shared hosting. The problem is that I don't think I need the full power of dedicated server.
Can you recommend a company that's been in the business for a while and isn't likely to go away? One that provides what it promises?
I'm looking to spend no more that $40 a month on an unmanaged service. I need at most 300GB of transfer a month and 10GB of space is plently (all I really need is the OS install plus a GB or two).
View 14 Replies
View Related
Feb 15, 2009
i have a question about overselling, if i offer 999999gb's of diskspace for $1/mo, you say i am overselling, and its a bad thing, right? well does that mean medialayer oversells because they can't truly offer unlimited mysql databases, can they? eventually, just creating databases thousands of times will consume diskspace?
View 14 Replies
View Related
Feb 17, 2009
Just how it actually works? I have a pretty good knowledge about Xen and Linux KVM (somewhat about VMware as well). Prior to joining WHT, I rarely heard about Virtuozzo and OpenVZ.
I'm just interested in RAM usage actually. I also read on some threads that you can oversell storage and net bandwidth as well? That just seems a little weird to me.
I also used a fairly good amount of Solaris Zones as well.
Example, if I have a 8GB box and I leave some, say 512MB, reserved for CT0. 8192-512=7680 (I know the ACTUAL RAM amount will NOT be 8192), that leaves 7680MB use for CTs. So technically in OpenVZ if you dice out dedicated 512MB VEs... you end up with 15 right?
So you are able to sell more than 15 VPSs on a 8GB server box? If also set all burstable RAM to 1GB for all VEs.
In Xen, when you set dedicated RAM it is taken away from dom0, period. That's all there is to it, no oversell (Xen 3.3+ you can use ballooning to overcommit RAM, I know).
Within CT in VZ, user is able to check beancounters to see the guaranteed/burstable RAM. Technically you can't lie to the users.
I researched around... when oversell in VZ and the RAM gets maxed out... VZ will try to slow/stop/kill processes in order to keep the guests happy, to me that's just dangerous. Why needs to kill processes for RAM saturation?
Anyone can shed some lights for me? Or point me to an article(s). It can be technical, I should be able to grasp.
View 5 Replies
View Related
May 5, 2009
I had a quick question regarding bandwidth. I am currently with a provider that supposedly offers 10,000 GB of monthly transfer and my monthly fee is $229/month (core2quad server).
I wanted to know how can they possibly offer that much bandwidth for that monthly fee? Is that normal?
This is about a sustained 30 MBPS usage throughout the month to make it 10,000 GB at the end of the month.
Are you telling me they will let me use 30 MBPS of bandwidth sustained for that monthly fee?
Bandwidth costs has come down but they have multiple providers and even if they do have huge bandwidth contracts, the cost has to be around $5 - $6 a MBPS per month for them. That is excluding the other providers and all other network costs.
so JUST for me, it means they will pay about $180 a month just to cover my bandwidth expenses, then there is electricity, server costs etc...
Is this overselling? If I approach this limit, do you think they will find a reason to kick me out?
View 14 Replies
View Related
Oct 21, 2008
The funny thing about this "yet another" overselling thread is that my host, Siteground.com, is an active over seller, and even though I don't like it, this is now way of life.
The hosting industry has changed in the past few years. In the quest for success, for more clients and more profits, the larger hosting companies have made sure the hosting world has changed, and has changed for the worse (both for customers and companies).
Why did it happened?
Back in 2004/5 hosts used to offer moderate packages containing 1GB of space (a lot) with some traffic. Then, came ego powered web hosts such as Bluehost, came with the answer of the ever important question - "How can we drive more signups our way?" - the answer as simple, genius, and yet destructive - recruit affiliates! Affiliates want money, and money were being offered, a lot of them (65USD per sale I think).
Every miracle lasts for three days - what happened next:
hint: type "web hosting" in google and check out the directories on the top positions
So, people started copying the idea, and recruiting affiliates, and the web hosting directories were born. Now everybody is in the directory, and the highest bidder was on the Number one position, the BEST HOST!, well, the one who pays most...when you are first, there is always someone who is willing to pay more, so the first company outbid the N1 host, then the second outbid the first, so quickly afiliate prices jumped from the 50-70 range a few years ago to the 150-200 bucks per new client today.
That is crazy, you are paying affiliates 2-3 years worth of revenue, just to have the client. But what does this have to do with OVERSELLING? Everything!
Now that you are in the directory, and can't pay more (you will never make any money...), you have to be different than the other companies in the directory. How - invest in new technology? better customer service? money? oops, they were spend already by the marketing department. So, the only thing that you can do is to raize features.
The first company raized the features to 20GB space/200GB Traffic, then the next one came with 50/500, then somebody else came with 300/3000, then companies like ours came and said, ok, if you can offer 300GB of space, sure we can offer 600GB of space And then yahoo came, and did it - "we promise you the world" - unlimited space, unlimited traffic - what a rubbish - there is no such thing as unlimited, unmettered maybe, unlimited - just ask them about their bandwidth cap - they have one, don't they?
If you google the directories on "web hosting" you will note that everybody offers unlimited space/traffic. But how can you be now different now? - of course, invest in technology...oops, no money, sorry. Then again someone came up with the idea to offer to host more domains per one account - and now we are different! Here you can host 5 domains, elsewhere, only one, everybody will signup from us! Aleluia! oops, three days later, everybody was offering unlimited domains, and nothing changed the equilibrium.
You though it was all over, wrong! Then came Sept 2008 around, and the Bluehost ego struck again - what can we do to attract more customers - sure, lets dump the prices - 7.95/mo was now 4.95/mo, surely no one can else can charge 4.95/mo, give unlimited features, domains, and pay 200 bucks per new client. Of course this is true, at least for the first 3 days, then everybody lowered their prices.
The end result: everybody has the same equal share of the market, and everybody is making a lot less profit (if any) than before. On the other side, the customer is now used to shop for the biggest features at the lowest price, without really knowing how to understand difference between a quality service and an affiliate "you pay a lot and don't get anything in return" hosting service.
I've seen in previous threads people to immediately jump and start saying that overselling is bad - that is true and yet not true - it depends whether you are a host or a customer:
Customers:
+ cheaper than before, much cheaper than what it should be
+ features, if you need to use more features, you have a deal
+ competition will drive quality/innovation forward
- 90%+ of all overselling hosts spend their money on advertising, and you get no service at all
I would never buy a hosting from a company that relies exclusively on affiliate marketing - they don't focus on quality, they can't offer reliability (no money for new servers, no money for softwares etc), and the worst off all, they educate the customer with bad habits and of course, drive them away from the hosting business. Up to now, this was not a problem, as even though many people opt out of building and managing personal websites, newcomers compensated. However, recent stats show that the growth of the US hosting users has grown with less than 0.4% over the last 12 months, and with the economic slowdown, more people are opting out each month.
Overselling by itself is not a problem - it is true that most customers would never hit the limits (even though most of the time they are invisible) - hosting overselling is just like any other industry overselling (phone, electricity, airlines etc). There is only one BUT here - even though it is unlikely that most people would consume a large share of resources - can you provide service to those customers who would actually need the features? - I think the answer is yes at least this is true if you are a large host with a lot of infrastructure.
Of course, what will happen if everybody start using all the resources. What will happen if the Chinese stop eating rise and start consuming meat?
View 14 Replies
View Related
Aug 19, 2008
Their pro D is 200GB for $55
Compare to others its alot. But they better not be overselling reseller accounts. Specially with overselling enabled it will be impossible to live up to it if they are overselling.
View 14 Replies
View Related
Apr 29, 2008
I'm willing to pay a bit more for a host that oversells to a lesser degree. I used "IP Neighbors" to find out how many sites were on a couple shared-server hosts.
I currently have two websites on different hosts. One shows 71 urls on the same IP. The other shows 670! The one that shows 71 is quite a bit more expensive, but I'm wondering if all servers hold similar amounts or if the number is not that relevant. I'm also guessing that since some websites are huge and get lots of hits, while others do not, simply looking at numbers may not be much help.
Can anyone give a good guideline on how to judge this? Simply looking at reveiws doesn't seem to be of much help. I find that the webhost having 670 urls on a server getting praise for fast loading, while I find it much slower than what I'd like. Lots of reviews are coming from people without a perspective on the possibilities. It's fairly easy to judge webhosts on service. There are plenty of relevant comments on this. Judging the network and the degree of overselling has been much more difficult for me.
View 14 Replies
View Related
Dec 30, 2008
The concept of unlimited disk space is something that I am not able to understand, and would appreciate if anyone could help me understanding it.
I see many giant hosting companies offer unlimited disk space with their shared plans.
But if you actually try to upload that much data, they will ask you to not use your account for file storage. What does that mean? I am really not sure..
Say if I have a movie website which has many movie files large in size. My website offers those files for download or streaming. Does that mean the disk space for my files will be considered as to be used for file storage?
Just not able to get the entire concept. If you cannot store files, then how can someone use unlimited disk space?
View 14 Replies
View Related
Aug 5, 2007
I have a Linux-2 512MB VPS with TekTonic and when I was ona 256MB UM1 plan I would experience daily frequent slow-downs that would last around 1 or 2 minutes, just enough for my software server to timeout and disconnect users. It wouldn't be downtime, it just would take 2 minutes for the SSH login message to appear and the website and lag was unbearable.
I was in the process of looking for a better VPS when they started to offer their new Metered plans at a new place with new servers, I switched to test it out and I no longer had the slow-downs for about a month.
Starting around end May, I would begin to experience the same type of slow-downs. As days continued the slow-downs kept getting worse and worse. Eventually around mid June after 5 support tickets of my problems, they finally admitted that "The host was swapping" and they said they would double RAM for the Node.
After a few days things did begin to die down for about 10 days, and then things started happening again, gradually more and more slowly. I have submitted about 5 tickets from June to now, their common response is that "It's working fine now" which is true, because the slow-downs only last about a minute or two, and I can never get to support in time for them to investigate. Just yesterday they admitted "The host was swapping" and they said they would double the RAM, sound familiar?
Can anyone explain to me what might be the problem?
Is it common for VPS providers to need to double the RAM every month or 2? or are they overselling of resources?
Is it common for a VPS to get slow-downs like this a few times a day? If so, Its seeming clear to me that because of my sensitive software that restarts itself after a 30 second timeout or slowdown, I should look into more dedicated options rather than VPS.
View 11 Replies
View Related
Sep 12, 2008
just want to share some negative experience with bluehost, thoughts on overselling, and to ask for an advice on what hosting to move to ... Bluehost.
Here's what is going on on the server box that I have an account on. I can see this via the ssh account that bluehost gave me.
The box is 8 CPUs, with average load about 15-25%, though sometimes it goes up to 70. It's got about 700G of space for the users. There are 26 registered users (including myself), but these are only those who have asked for ssh access; since I guess not everybody asks, there just as well may be another 100 or so users.
Now, bluehost offers 1.5TB (or is it 15TB?) storage. Since we've got 0.7TB for at least 26 of us, the conclusion is obvious: nobody can get the promised amount.
Now this is where the problem begins. Apparently one of the users of the box has attempted to make good of the 1.5TB promise; as a result the box ran out of space.
The consequences you can imagine.
The consequences for all of the users of the box - not only for the one who made it run out of space. I was actually using only a couple of gigs, and when the box went full my accounts started loosing emails, my cpanel was shut down and so on.
To add up to the trouble, bluehost didn't react until I (and perhaps others) complained. And when the support did pay attention to the problem, it was only to add some 20-30G (may be they just cleaned up something, I can't say).
Overselling.
Now it becomes clear to me that overselling is a problem not only for those who try to actually use the promised amount of space and bandwidth, but to everybody. Moreover, if a single
user tries to use all his space it already leads to troubles.
I was imagining before that these providers have huge servers, so that if one actually uses his 1.5TB others won't notice - it's only if many try to do this there's a problem. How very naive. Indeed it's hard to imagine a single server box on which somebody using 1.5TB could pass unnoticed. As it happens with bluehost, a server can't accommodate even one such user.
Finally, I'm in need of recommendations.
I'm looking for a hosting to move to. In fact I only have a couple of static websites with about 20 emails on them. However, it appears to be not such an easy task to find a reasonable host. The point is that I like to have at least 2-3G of space- so that I wouldn't need to delete any emails and worry about the space in general. What is on offer, however, is either 200M for smth like 7$/month, or these unlimited TB from oversellers. Somehow there seem to be nothing in between. Thus what I need is perhaps a moderate overseller. One who can't allow everybody to use all their space at the same time, but can tolerate reasonably expectable increases of usage.
In short: is there a hosting provider that can give me: 3G space, 2 domains allowed to host, ~3G bandwidth a month, 30 or so emails. And all this for 5-8$?
View 13 Replies
View Related
May 8, 2008
I am owner of a web hosting company with a plan with overselling and I see plenty of criticism lately for resources that we offer.
In the country where we work, offer such a plan has allowed us to grow our business and invest in infrastructure that other web hosting companies can not afford. We have a large number of servers (Dell 2950, Xeon Octo Core, +8GB, Large RAID 10, ISCSI remote backups) and a network increasingly large/quick.
In addition we have highly qualified technical staff and technical support 24/7.
All this (managed correctly) allows us to accommodate all types of customers even if they have a relatively high use of resources. In conclusion, our customers are generally very satisfied.
View 14 Replies
View Related
Aug 26, 2008
[url]
I knew all about overselling until I saw this one.
WOW. I mean just WOW. I'm speechless. Please, everyone, dont fall for this kind of scam.
View 14 Replies
View Related
Sep 3, 2008
Let me know the list of Web Hosting companies that offer a lot for low price and oversell.
View 7 Replies
View Related
Aug 27, 2008
Can someone recommend a good overseller? I have 300GB+ in home videos I want to back up online somewhere. My plan is to just leave a crappy computer of mine uploading non-stop for like a week or whatever.
All I really need is a place that oversells but won't give me crap for actually using the space I pay for, and fast upload speeds would be nice too. Oh, and cheap is definitely good and I don't like it when hosts put up advertisements on my error pages. Nothing else really matters to me that much.
View 14 Replies
View Related
Oct 7, 2008
Out of curiosity, anyone have some stats or more information regarding the 1and1 shared hosting backend? (raid setup, how they "load balance" users across servers, ...)
They seem to use boxes with 4GB of rams, quad 1.6ghz intel processor (xeon 5110), 3.2TB of hdd (90% full). Looking at the /home/ it seem to host more than 10k accounts!
View 13 Replies
View Related
Nov 17, 2008
find a none overselling hosting company
unlimited?No!I don't need the "unlimited".
like the bluehost,dreamhost etc.
I'm just looking for a normal hosting company...
budget is under $10/month.
View 14 Replies
View Related
May 3, 2008
I'm interested in creating a small website exposing the biggest overselling companies, and how their overselling practices are false marketing.
Simply put, I want to benchmark each host with exact tests for accuracy. Any idea how I can fairly test each host, e.g. benchmark?
After the tests have been performed, I will explain which are the worst hosts (e.g. the first to give me the boot due to some TOS clause, e.g. cpu usage), etc.
Also, would anyone like to help out with this project? I'll be putting some nice marketing into it.
View 4 Replies
View Related
Apr 9, 2007
I found these strange random name files on the tmp anyone know what are they and are that normal?
4Hq7Xb Dbrfns lost+found MGlWaF p6w849 PP5uVI SoArWn spamd_light.sock ToL3Ah Vt0ICH xEgXsU zVLVDa
AGs49w fcKNmJ LyC11q O3VQwM pAD0WL psa spamd_full.sock tLnzRx tXqqGI x7uxxo XuFzJl
View 5 Replies
View Related
Jan 2, 2008
I had a client ask me earlier if there was any downsides to having his main site be SSL only ,not his billing his actual site.
For exmaple it would be https://www.yoursite.com rather than the normal http and having that redirect to the https.
Obviously he would need all his images being linked to https in order for it to be secure but apart from that, I couldn't think of any of the top of my head, I was wondering what you guys all thought.
View 3 Replies
View Related
Jun 27, 2009
I just uploaded a wordpress site and it already used up 300mb ram. The site receives very little traffic so I doubt the traffic is the cause of the ram usage. Is this normal? my control panel is webmin
Code:
ID Owner Size Command
17691 mysql 129620 kB /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-f ...
13799 named 70392 kB /usr/sbin/named -u named
14329 apache 44176 kB /usr/sbin/httpd
28588 apache 41028 kB /usr/sbin/httpd
7812 apache 38016 kB /usr/sbin/httpd
23719 apache 37416 kB /usr/sbin/httpd
23825 apache 36800 kB /usr/sbin/httpd
19656 root 24224 kB /usr/sbin/httpd
23973 root 12628 kB /usr/libexec/webmin/proc/index_size.cgi
23972 root 12232 kB /usr/libexec/webmin/blue-theme/left.cgi
19533 root 10776 kB /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
18376 root 9024 kB sendmail: accepting connections
18384 smmsp 8116 kB sendmail: Queue runner@01:00:00 for /var/spool/clientmqueue
17479 root 7120 kB /usr/sbin/sshd
32654 root 5568 kB /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
32655 root 5568 kB /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
32644 root 4396 kB crond
17631 root 3608 kB /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/my ...
32594 root 2716 kB xinetd -stayalive -pidfile /var/run/xinetd.pid
7794 nobody 2480 kB proftpd: (accepting connections)
11909 root 2144 kB /sbin/udevd -d
1 root 2060 kB init [3]
32556 root 1716 kB syslogd -m 0
View 13 Replies
View Related
Jul 4, 2008
my server runs sata 2 but this is only consumer and recommended to use 7 hours per day while there is sata 2 server hdd type
which one should i pick?
i have this hard disk ST3500830AS
i want to get this instead but will that be necessary? will RE3 get a longer lifespan ST3500830AS
re3 [url]
And i dont plan to get raid
View 5 Replies
View Related
Dec 1, 2007
just reading my exim mainlog
there are soo many entries in there like activities every second
is this thing normal? does everyone get things like that?
2007-12-01 15:39:03 [24780] H=(acasa-wunxr966z) [89.137.206.241]:4505 I=[69.16.237.199]:25 F=<hurdlingm290@tulipjewelry.com> rejected RCPT <a$
2007-12-01 15:39:03 [24780] SMTP connection from (acasa-wunxr966z) [89.137.206.241]:4505 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-01 15:39:03 [24777] H=pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:4624 I=[69.16.237.199]$
2007-12-01 15:39:03 [24777] SMTP connection from pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:462$
2007-12-01 15:39:03 [24776] H=pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:4623 I=[69.16.237.199]$
2007-12-01 15:39:03 [24776] SMTP connection from pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:462$
2007-12-01 15:39:03 [1382] SMTP connection from [200.61.182.11]:55819 I=[69.16.237.199]:25 (TCP/IP connection count = 7)
GNU nano 1.2.4 File: exim_mainlog
2007-12-02 01:25:14 [17530] ident connection to 85.168.154.92 timed out
2007-12-02 01:25:15 [1382] SMTP connection from [75.82.171.71]:1614 I=[69.16.237.199]:25 (TCP/IP connection count = 9)
2007-12-02 01:25:16 [17527] H=adsl196-236-229-217-196.adsl196-16.iam.net.ma [196.217.229.236]:59900 I=[69.16.237.199]:25 F=<patti@myrealbox.c$
2007-12-02 01:25:16 [17527] SMTP connection from adsl196-236-229-217-196.adsl196-16.iam.net.ma [196.217.229.236]:59900 I=[69.16.237.199]:25 c$
2007-12-02 01:25:16 [17528] H=79.red-83-42-176.dynamicip.rima-tde.net [83.42.176.79]:29547 I=[69.16.237.199]:25 F=<mostafa.Brindel@bhcat.com>$
2007-12-02 01:25:16 [17528] SMTP connection from 79.red-83-42-176.dynamicip.rima-tde.net [83.42.176.79]:29547 I=[69.16.237.199]:25 closed by $
2007-12-02 01:25:16 [1382] SMTP connection from [79.120.55.8]:4202 I=[69.16.237.199]:25 (TCP/IP connection count = 8)
2007-12-02 01:25:17 [17531] ident connection to 75.82.171.71 timed out
2007-12-02 01:25:17 [17529] H=(cpe-76-91-84-170.socal.res.rr.com) [76.91.84.170]:4913 I=[69.16.237.199]:25 F=<occurrenceq@bhrugu.com> rejecte$
2007-12-02 01:25:17 [17529] SMTP connection from (cpe-76-91-84-170.socal.res.rr.com) [76.91.84.170]:4913 I=[69.16.237.199]:25 closed by DROP $
2007-12-02 01:25:17 [17530] H=m92.net85-168-154.noos.fr [85.168.154.92]:1310 I=[69.16.237.199]:25 F=<Eng-Mroz@ROWELLMANAGEMENT.COM> rejected $
2007-12-02 01:25:17 [17530] SMTP connection from m92.net85-168-154.noos.fr [85.168.154.92]:1310 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-02 01:25:18 [17531] H=cpe-75-82-171-71.socal.res.rr.com [75.82.171.71]:1614 I=[69.16.237.199]:25 F=<Kallio@jeunesfilles.org> rejected$
2007-12-02 01:25:18 [17531] SMTP connection from cpe-75-82-171-71.socal.res.rr.com [75.82.171.71]:1614 I=[69.16.237.199]:25 closed by DROP in$
2007-12-02 01:25:18 [1382] SMTP connection from [201.228.173.190]:48177 I=[69.16.237.199]:25 (TCP/IP connection count = 6)
2007-12-02 01:25:18 [1382] SMTP connection from [24.29.242.1]:1137 I=[69.16.237.199]:25 (TCP/IP connection count = 7)
2007-12-02 01:25:18 [1382] SMTP connection from [189.138.165.115]:3302 I=[69.16.237.199]:25 (TCP/IP connection count = 8)
2007-12-02 01:25:19 [17535] H=ppp1-139.ciscom.ru [79.120.55.8]:4202 I=[69.16.237.199]:25 F=<attorneylff8@torborg.com> rejected RCPT <azeer@mp$
2007-12-02 01:25:19 [17535] SMTP connection from ppp1-139.ciscom.ru [79.120.55.8]:4202 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-02 01:25:19 [1382] SMTP connection from [189.31.128.172]:52503 I=[69.16.237.199]:25 (TCP/IP connection count = 8)
2007-12-02 01:25:20 [17538] ident connection to 201.228.173.190 timed out
2007-12-02 01:25:20 [17538] no host name found for IP address 201.228.173.190
2007-12-02 01:25:20 [17538] list matching forced to fail: failed to find host name for 201.228.173.190
2007-12-02 01:25:20 [17539] ident connection to 24.29.242.1 timed out
2007-12-02 01:25:20 [17539] no IP address found for host cpe-24-29-242-1.neo.res.rr.com (during SMTP connection from [24.29.242.1]:1137 I=[69$
2007-12-02 01:25:20 [17539] list matching forced to fail: failed to find host name for 24.29.242.1
2007-12-02 01:25:20 [17540] ident connection to 189.138.165.115 timed out
2007-12-02 01:25:20 [17540] no IP address found for host dsl-189-138-165-115.prod-infinitum.com.mx (during SMTP connection from [189.138.165.$
2007-12-02 01:25:20 [17540] list matching forced to fail: failed to find host name for 189.138.165.115
2007-12-02 01:25:21 [17539] H=(cpe-24-29-242-1.neo.res.rr.com) [24.29.242.1]:1137 I=[69.16.237.199]:25 F=<lesley.Ervamaa@agustinbarreto.com> $
2007-12-02 01:25:21 [17539] SMTP connection from (cpe-24-29-242-1.neo.res.rr.com) [24.29.242.1]:1137 I=[69.16.237.199]:25 closed by DROP in A$
2007-12-02 01:25:21 [17541] ident connection to 189.31.128.172 timed out
2007-12-02 01:25:21 [17541] no host name found for IP address 189.31.128.172
2007-12-02 01:25:21 [17541] list matching forced to fail: failed to find host name for 189.31.128.172
2007-12-02 01:25:21 [17538] H=(201.228.173.190) [201.228.173.190]:48177 I=[69.16.237.199]:25 F=<thiam3@searchhound.com> rejected RCPT <larifi$
2007-12-02 01:25:21 [17538] SMTP connection from (201.228.173.190) [201.228.173.190]:48177 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-02 01:25:22 [1382] SMTP connection from [82.73.58.94]:1465 I=[69.16.237.199]:25 (TCP/IP connection count = 7)
2007-12-02 01:25:22 [17540] H=(dsl-189-138-165-115.prod-infinitum.com.mx) [189.138.165.115]:3302 I=[69.16.237.199]:25 F=<emasculateq@tulsavrp$
2007-12-02 01:25:22 [17540] SMTP connection from (dsl-189-138-165-115.prod-infinitum.com.mx) [189.138.165.115]:3302 I=[69.16.237.199]:25 clos$
2007-12-02 01:25:22 [1382] SMTP connection from [71.107.124.63]:1886 I=[69.16.237.199]:25 (TCP/IP connection count = 7)
View 3 Replies
View Related
Mar 28, 2007
I plan on installing dos_evasive as it can temporarily kill/ban an IP that makes over X amount of connections.
I ran netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n, and this is what I got:
10 218.111.214.231
10 219.95.251.185
10 222.124.226.228
10 58.187.167.20
10 61.94.234.75
10 62.168.125.217
10 82.160.42.74
10 87.116.131.18
10 89.41.71.178
11 200.193.24.226
11 218.186.9.1
11 219.93.199.121
11 220.235.171.64
11 59.128.43.234
11 60.53.77.34
11 63.109.246.234
11 83.20.72.102
11 83.237.102.75
11 84.234.144.107
11 88.226.100.145
11 88.240.137.82
12 195.229.236.216
12 203.79.252.192
12 212.90.248.182
12 220.132.87.2
12 80.130.75.239
12 82.114.184.16
12 83.26.18.242
12 85.30.223.227
12 86.108.127.28
12 87.109.49.69
12 88.247.64.131
13 200.52.193.228
13 202.155.71.40
13 222.124.172.177
13 82.116.129.110
14 195.93.21.1
14 41.251.65.79
14 80.5.154.95
14 81.10.80.75
14 82.224.40.111
14 86.17.117.193
15 196.218.42.134
15 201.19.134.99
15 212.200.185.213
15 217.171.180.249
15 218.208.196.224
15 222.124.101.183
15 80.134.70.222
15 85.160.97.238
15 88.232.120.183
16 200.188.254.9
16 200.52.193.236
16 212.118.15.140
16 81.192.124.52
16 83.14.145.170
16 85.138.71.91
16 87.207.16.154
16 89.113.75.141
17 61.196.234.202
17 82.89.37.29
17 86.135.231.183
18 80.232.249.45
18 82.114.184.206
18 88.101.26.210
19 163.121.149.170
19 194.29.137.41
19 194.44.45.13
19 195.242.99.125
19 196.202.14.244
19 196.218.117.135
19 202.158.121.223
19 81.67.245.180
19 84.255.141.132
20 200.52.193.229
20 219.83.5.20
20 88.229.128.50
20 89.245.120.136
21 196.218.143.124
21 203.130.201.196
21 63.170.84.176
21 66.249.72.173
21 72.14.207.191
21 81.192.135.224
21 82.66.227.150
21 84.29.1.151
22 155.143.244.17
22 195.207.101.112
22 202.153.240.168
22 61.94.125.143
22 85.101.146.161
23 124.106.151.75
23 88.149.99.7
24 82.77.27.129
24 88.16.34.231
25 160.39.145.94
25 202.153.240.70
25 216.125.127.12
26 196.205.97.92
26 200.104.157.183
26 202.163.117.8
26 213.180.127.198
26 60.50.95.39
26 85.71.230.49
27 194.29.137.52
27 195.189.142.249
27 201.226.162.206
27 210.6.13.208
27 81.203.41.204
27 86.90.238.96
28 193.0.240.121
28 212.76.37.150
28 89.120.133.44
29 125.162.66.116
29 74.53.121.131
30 203.222.202.121
30 213.39.219.81
30 71.109.116.122
31 222.124.143.18
31 89.34.87.91
33 193.0.240.113
33 201.9.175.242
33 212.71.37.101
33 70.68.249.239
33 81.77.85.207
34 195.229.236.215
34 86.123.142.128
35 72.49.255.217
35 85.31.137.11
36 193.231.17.50
36 202.69.97.206
36 90.156.29.82
37 77.122.158.251
37 89.40.138.184
38 121.52.52.6
38 203.218.71.132
38 82.167.71.189
39 213.17.10.87
40 196.218.145.82
40 201.22.94.226
40 206.73.210.65
40 86.9.66.1
41 152.78.243.248
42 201.220.93.84
42 210.5.121.190
43 196.204.241.250
43 196.218.89.213
44 196.218.96.82
46 84.56.103.77
48 125.212.148.112
48 41.251.69.199
49 83.203.134.84
50 213.119.151.116
50 80.133.209.50
52 81.38.15.124
53 195.245.232.26
54 88.0.63.179
57 82.201.222.144
57 83.131.27.137
57 84.226.41.129
61 129.215.149.96
64 195.113.227.31
65 198.150.36.49
65 61.102.87.80
71 84.56.109.139
73 82.216.54.222
76 196.218.136.202
76 87.118.157.79
77 89.35.90.211
78 59.127.203.49
79 81.10.35.77
81 82.148.97.68
82 213.171.62.94
84 84.36.132.189
104 213.6.215.214
108 213.51.9.184
108 41.250.0.35
110 83.41.58.76
125 84.22.2.55
132 87.209.11.249
155 196.218.142.212
165 195.242.99.84
176 200.73.225.104
190 62.135.105.86
2946 195.242.99.102
server:/#
Does that look normal to you? Because I read somewhere that you should allow no more then 30 connections per IP. But most are taking much more then that.
View 8 Replies
View Related
