My VPS with INIZ seems to be down

nehafarzana80

I think it was my fault as it seems to me the site is getting DDoS like hits.

support123

nodewatch sometimes does cause issues and false positives

Floris

@ftpit said:
nodewatch sometimes does cause issues and false positives

More than just "sometimes", it's a pain in the ass to work with, especially on providers with OVH. I don't recommend using their auto-suspend feature. I find it way to primitive.



Here's a list of alternatives I heard about:

http://www.elastictrace.com/

http://vpsmon.com/

http://www.andrisoft.com/software/wanguard

and @Francisco's Monbot (in-house?)

And there's a whole lot of other stuff you can use.

support123

vpsmon seems dead.I applied last year,still have not got approved .Their last blog is of August 25, 2014,so maybe they hate me
As for nodewatch,we work with customers to solve the issues instead of just rely on the software.It is a working sample if you notice the ddos script running

SUSPENDING DoSing VPS 2XX (172.245.XX.XX): 1372100 pps during 5 second interval

**********************************************
List of processes running on VPS 2XX
**********************************************
46488      init             init
46489      kthreadd/2XX
46490      khelper/2XX
47216      saslauthd        /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
47217      saslauthd        /usr/sbin/saslauthd -m /var/run/saslauthd -a pam -n 2
51565      sendmail         sendmail: accepting connections
56015      sendmail         sendmail: Queue runner@01:00:00 for /var/spool/clientmqueue
56045      mingetty         /sbin/mingetty console
56046      mingetty         /sbin/mingetty tty2
109425     3                /sbin/ttyload -q
109427     ttymon           ttymon tymon
203846     ircd             /root/TakenUnrealirc/src/ircd
266325     udevd            /sbin/udevd -d
268445     sshd             /usr/sbin/sshd
268505     crond            crond
268608     rsyslogd         /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
268801     xinetd           xinetd -stayalive -pidfile /var/run/xinetd.pid
268957     httpd            /usr/sbin/httpd
268959     httpd            /usr/sbin/httpd
377181     sshd             sshd: root@pts/0
377807     bash             -bash
391315     sshd             sshd: root@notty
391600     sftp-server      /usr/libexec/openssh/sftp-server
397088     perl             perl ddos.pl 69.36.XX,XX 80 65500 0
608940     httpd            /usr/sbin/httpd

dcc

Nodewatch sucks and all that, however, the vast majority of issues people contact us about turn out to be due to misconfiguration. There were a few issues causing false-positive flood alerts but most of them are now fixed (except one minor issue which is still producing very rare false DoS alerts, but not suspensions, the issue is actually caused by a bug in the linux kernel).