CRM doesn't work at all
CRM stopped working, at night, all of a sudden. The server returns a 502 Bad Gateway error.
https://broadlink.com.ua/ The server was rebooted, it does not help. The disk is not full yet.
Original question is available on version: ru
https://broadlink.com.ua/ The server was rebooted, it does not help. The disk is not full yet.
Answers:
Good afternoon.
Your server can't handle the load. The average load was about 70 at a rate of up to 3 load average: 70.28, 64.38, 61.69
Maybe your site is being DDoSed.
We can try to find from where you are attacked - 1 hour.
Your server can't handle the load. The average load was about 70 at a rate of up to 3 load average: 70.28, 64.38, 61.69
Maybe your site is being DDoSed.
We can try to find from where you are attacked - 1 hour.
20.01.2022, 14:34
Original comment available on version: ru
You can transfer domain management to cloudflare.
cloudflare provides attack protection.
cloudflare provides attack protection.
20.01.2022, 14:36
Original comment available on version: ru
Good afternoon, I ask you to find out the source of the attacks. I confirm one hour. Let's think about moving
20.01.2022, 14:42
Original comment available on version: ru
The load was from IP 135.181.137.58
Judging by the logs, there is a problem with the Seekport Crawler search robot.
135.181.137.58 - - [20/Jan/2022:14:47:15 +0200] https://m.broadlink.com.ua/radioupravlyaemie-viklyuchateli-osveshcheniya/brand=6... /filter2=20+/" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
Judging by the logs, there is a problem with the Seekport Crawler search robot.
135.181.137.58 - - [20/Jan/2022:14:47:15 +0200] https://m.broadlink.com.ua/radioupravlyaemie-viklyuchateli-osveshcheniya/brand=6... /filter2=20+/" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
20.01.2022, 14:55
Original comment available on version: ru
And now the performance is fully restored. Now everything is fine. And what can you see now?
20.01.2022, 14:59
Original comment available on version: ru
Everything I needed to see I already saw.
If it is very important to you, whatever works, I can return everything.
If it is very important to you, whatever works, I can return everything.
20.01.2022, 15:15
Original comment available on version: ru
Thank you, as it was - no need. Its OK now. I ask you to issue an invoice for the work performed.
20.01.2022, 16:01
Original comment available on version: ru
The invoice has been sent to your email.
20.01.2022, 16:10
Original comment available on version: ru
the bill is paid. However, I don't fully understand the situation. The hosting provider does not acknowledge anomalous traffic at this time that would look like DDoS. After the restoration of working capacity, the load parameters in the control panel (screen at the link) have changed compared to how it was before the problems appeared. What was it, and what exactly did you do?
21.01.2022, 08:53
Original comment available on version: ru
Good afternoon.
Kolesov Konstantin wrote:
The hosting provider does not acknowledge anomalous traffic at this time that would look like DDoS
No one claimed that it was an attack. If your site had been really attacked, everything would not have been resolved so quickly.
I saw that the load on the server is given by external connections, which is why it was assumed that this was a DDoS attack.
When the analysis was carried out, it turned out that the connections with IP 135.181.137.58 gave the load (which I wrote to you about)
Connections from this IP are made by Seekport Crawler.
This IP has been blocked.
The database was also updated to the latest minor version.
Kolesov Konstantin wrote:
The hosting provider does not acknowledge anomalous traffic at this time that would look like DDoS
No one claimed that it was an attack. If your site had been really attacked, everything would not have been resolved so quickly.
I saw that the load on the server is given by external connections, which is why it was assumed that this was a DDoS attack.
When the analysis was carried out, it turned out that the connections with IP 135.181.137.58 gave the load (which I wrote to you about)
Connections from this IP are made by Seekport Crawler.
This IP has been blocked.
The database was also updated to the latest minor version.
21.01.2022, 10:53
Original comment available on version: ru
Swap memory usage has decreased since The server services have been restarted.
21.01.2022, 10:55
Original comment available on version: ru
It's more clear now, thanks for the clarification.
22.01.2022, 08:52
Original comment available on version: ru
Please join the conversation. If you have something to say - please write a comment. You will need a mobile phone and an SMS code for identification to enter.
Log in and comment
Copyright © OneBox 2024
