bgage

It seems my gagedigital.com site is not loading (or is very slowly) but other sites I host are loading fine. engageingod.com

Any idea why just this one site is so slow or not working at all?

Later,
Bobby

__________________
Reseller Account
Server: pass52
Main domain: rkgage.net
Company domain: gagedigital.com

bgage

It seems my website was slow this morning again. Between 6:00 - 9:15AM.

Could anyone look at this and see what could be causing the problem?

__________________
Reseller Account
Server: pass52
Main domain: rkgage.net
Company domain: gagedigital.com

Kelly

Hmm, I've check the logs for the load on Feb 5th, doesn't show any real spikes. < 1 most of the day.

Have you submitted a ticket regarding this? Also, when the site is slow, performing a traceroute could also help us determine where the lag is occurring.

This is a current spotcheck though for your site:

Timestamp Location Result Size Time
2010-02-10 10:33:30 EST Hong Kong CHN OK 4.2 1.01
2010-02-10 10:33:30 EST Sydney AUS OK 4.2 0.88
2010-02-10 10:33:30 EST Frankfurt DEU OK 4.2 0.54
2010-02-10 10:33:30 EST London GBR OK 4.2 0.46
2010-02-10 10:33:30 EST Oklahoma City USA OK 4.2 0.34
2010-02-10 10:33:30 EST Las Vegas USA OK 4.2 0.29
2010-02-10 10:33:30 EST Chicago USA OK 4.2 0.17
2010-02-10 10:33:30 EST Orlando USA OK 4.2 0.13
2010-02-10 10:33:27 EST Sydney AUS OK 4.2 1.34

via: Alertra Website Monitoring Service

__________________
Client Relations & Development
Surpass | Server Updates Survers

bgage

Yea I opened a ticket #FDU-836927 And they felt one of the reasons it was slow is it was finishing up a backup.

I use dnsmadeeasy.com as my DNS service and they have the ability to monitor my site, if they see it go down they will change my DNS record to another web-host as a backup site.

On the dates and times noted this backup operation took place several times. Switching back and forth.

My first post was on the 28th when I myself noticed my site was slow. I will do a tracert the next time and attach it to this post to see if there is anything noticeably in that.

Thanks,
Bobby

__________________
Reseller Account
Server: pass52
Main domain: rkgage.net
Company domain: gagedigital.com

jerseyman

Kelly,
Just a little story about pass52 (Ticket LRZ-931253)

January 27 - Loads above 30+ observed & reported
January 30 - followup on January 27 ticket - Emails send on January 27 finally reach recipient.
February 5 - response to Jan 27 ticket - "We have suspended a abusive account and all looks good.
February 6 Loads above 20+ observed & reported
February 8 Loads above 18+ observed & reported
February 9 Loads above 100+ observed & reported -> pretty much the entire afternoon the server was unresponsive and proper work was impossible! First reported at 1:44pm with a load of 98. Reported status with loads above 100 pretty much entire afternoon
February 12 Load above 20+ observed around 7:30 AM - after finishing this message load dropped to around 13+ (7:50am)

I can - up to a certain extend - accept the backup situation, but Feb 9 was completely unacceptable and not being able to access email (or with major delay) almost every morning is also not good business.

Regards,
Jerseyman

bgage

I would like to thank support for researching this problem and if I had just looked I would have found this problem.

I would also like to apologize to anyone else on this shared server for the recent problems that this could have caused.

Now I am asking from help from anyone that can advise me how to fix this problem from happening again.

It seems my site getwanip is getting an overwhelming hits each minute. (specifically the php script at http://getwanip.com/ip.php)

My website getwanip is a site that will tell you what you Public IP address is.

What's different with my site is I offer a freeware program that you can run on the command line and it will tell you your IP address and thus allowing you to use it in a batch file or for other process.

It seems someone or mutable users have used my service in there own programs and are performing some massive abuse.

After reviewing the logs South Korea killed my site the most with an average of 120 hits per minuet on my IP.PHP script. Followed by Canada..

Individual IP addresses where hitting me over 9 times per minute. (from S Korea)

Host: 222.236.86.98
/ip.php
Http Code: 404 Date: Feb 14 00:35:59 Http Version: HTTP/1.1
Referer: -
Agent: Microsoft URL Control - 6.01.9782

Notice the Agent! After some research this is from VB programs. After some more searching I found...

Google Translate

and

Google Translate

The dates of these postings is very close to the date that made my usage drastically increase from South Korea and notice the above links are from Korea.

Because I can't think of any good reason a public IP address would change so quickly, I am looking at making my PHP code notice if it get's, let's say more then 5 hits in one hour, from the same IP address it will start to block there access to the site.

I could make it return an invalid IP address or and Error. This would help to prevent someone from making a new program that caused abuse. But this would not stop the programs that are currently running.

Then I noticed in the cPanel that I could use a "IP Deny Manger", after messing around with this I noticed this updates my .htaccess file. On my secondary server (currently with website running) I Have added the entire list of IP subnets for south Korria in this file to deny. I then took a look at my "Latest Visitors LIst" And I see that i'm still getting hits with requests. (but now showing no bites)

Now my question is:

1. If I block an IP using this .htaccess file "IP Deny Manger" will this make the impact of the GET request the same as before and slow the server down or could this help performance?

2. If it does help performance. My thought would be I could create a php file and use a Kron job that detected the heavy usage and then add IP address to this list automatically. And then as it noticed the connection attempts decrease it would remove it. (after a 24 hour period)

3. If 1 and 2 are not going work for me. Is there anyway I can have my php page block an IP in some fashion to do what I'm looking for in #1,2?

4. Any other ideas?


Thanks for any and all advice.

Later,
Bobby

__________________
Reseller Account
Server: pass52
Main domain: rkgage.net
Company domain: gagedigital.com

bgage

Just reading the above post again and noticed January 30 you suspended an account. Was this my account? From my understanding my account was suspended on the 12th February. Just wanting a little clarification. Thanks

__________________
Reseller Account
Server: pass52
Main domain: rkgage.net
Company domain: gagedigital.com