sama nih, colocation saya juga rada sableng,selalu berulang jam 4.30 - 5.30 pasti ftpd,imap,exim,mysql failed failed semua, load sampe 10 dan ram bisa sampe 10 GB kemakan.
padahal setelah di cek pakai ./ps_mem.py memory ngga sampe 10GB, cek daily+process+mysql process+apache status normal seperti biasa.
httpd mysql exim sudah di matikan tetep saja cuma turun sedikit paling 1GB
ini isi message, banyak di temuka proses ftpd tapi dari google -_-
Code:
Jan 2 07:16:02 megatron kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:50:56:88:55:eb:08:00 SRC=210.247.249.57 DST=255.255.255.255 LEN=126 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=106
Jan 2 07:17:27 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=3814 DF PROTO=TCP SPT=52372 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:17:28 megatron pure-ftpd: ([email protected]) [INFO] New connection from 66.249.77.159
Jan 2 07:18:44 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=15880 DF PROTO=TCP SPT=52372 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:21:21 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=188.120.224.175 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=243 ID=2278 DF PROTO=ICMP TYPE=8 CODE=0 ID=91 SEQ=2055
Jan 2 07:19:10 megatron pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [anonymous]
Jan 2 07:21:21 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=188.120.224.175 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=243 ID=2340 DF PROTO=ICMP TYPE=8 CODE=0 ID=91 SEQ=2074
Jan 2 07:21:45 megatron pure-ftpd: ([email protected]) [INFO] Logout.
Jan 2 07:22:02 megatron pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Jan 2 07:22:53 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=4515 DF PROTO=TCP SPT=52372 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:22:55 megatron pure-ftpd: ([email protected]) [INFO] Logout.
Jan 2 07:23:13 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=95.211.132.37 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=239 ID=32487 DF PROTO=ICMP TYPE=8 CODE=0 ID=441 SEQ=52209
Jan 2 07:23:30 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=217.14.208.54 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=225 ID=2892 DF PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=13226
Jan 2 07:23:40 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=95.211.132.37 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=239 ID=32535 DF PROTO=ICMP TYPE=8 CODE=0 ID=441 SEQ=52211
Jan 2 07:24:41 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=204.93.161.17 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=240 ID=2224 DF PROTO=ICMP TYPE=8 CODE=0 ID=77 SEQ=24833
Jan 2 07:25:22 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=188.120.224.175 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=243 ID=3809 DF PROTO=ICMP TYPE=8 CODE=0 ID=91 SEQ=2081
Jan 2 07:25:28 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=217.14.208.54 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=225 ID=2933 DF PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=14762
Jan 2 07:25:29 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=204.93.161.17 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=240 ID=3212 DF PROTO=ICMP TYPE=8 CODE=0 ID=77 SEQ=24837
Jan 2 07:25:29 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=204.93.161.17 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=240 ID=3960 DF PROTO=ICMP TYPE=8 CODE=0 ID=77 SEQ=24839
Jan 2 07:25:29 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=204.93.161.17 DST=210.247.249.58 LEN=60 TOS=0x00 PREC=0x00 TTL=240 ID=4045 DF PROTO=ICMP TYPE=8 CODE=0 ID=77 SEQ=24841
Jan 2 07:25:29 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=17062 DF PROTO=TCP SPT=61487 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:29 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=27338 DF PROTO=TCP SPT=61487 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:30 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=14939 DF PROTO=TCP SPT=61487 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:33 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=95.160.16.35 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=35 ID=20497 DF PROTO=TCP SPT=65278 DPT=2092 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=20493 DF PROTO=TCP SPT=53070 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=95.160.16.35 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=35 ID=30665 DF PROTO=TCP SPT=50569 DPT=2092 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=29205 DF PROTO=TCP SPT=53070 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=95.160.16.35 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=35 ID=1009 DF PROTO=TCP SPT=50569 DPT=2092 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=16364 DF PROTO=TCP SPT=53070 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:50:56:88:55:eb:08:00 SRC=210.247.249.57 DST=255.255.255.255 LEN=126 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=106
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=95.160.16.35 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=35 ID=5978 DF PROTO=TCP SPT=50569 DPT=2092 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=21758 DF PROTO=TCP SPT=61390 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=31772 DF PROTO=TCP SPT=61390 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=222.187.222.36 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=19242 DF PROTO=TCP SPT=61390 DPT=403 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=95.160.16.35 DST=210.247.249.58 LEN=48 TOS=0x00 PREC=0x00 TTL=35 ID=23914 DF PROTO=TCP SPT=52321 DPT=2092 WINDOW=8192 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:50:56:88:55:eb:08:00 SRC=210.247.249.57 DST=255.255.255.255 LEN=126 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=106
Jan 2 07:25:35 megatron kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=198.20.69.74 DST=210.247.249.131 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=1 PROTO=TCP SPT=37038 DPT=28017 WINDOW=1024 RES=0x00 SYN URGP=0
Jan 2 07:25:35 megatron kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:50:56:88:55:eb:08:00 SRC=210.247.249.57 DST=255.255.255.255 LEN=126 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=106
Jan 2 07:25:35 megatron kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:50:56:88:55:eb:08:00 SRC=210.247.249.57 DST=255.255.255.255 LEN=126 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=106
Jan 2 07:25:35 megatron pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Jan 2 07:25:36 megatron kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:50:56:88:55:eb:08:00 SRC=210.247.249.57 DST=255.255.255.255 LEN=126 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=106
Jan 2 07:25:36 megatron kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:50:56:88:55:eb:08:00 SRC=210.247.249.57 DST=255.255.255.255 LEN=126 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=106
Jan 2 07:25:37 megatron pure-ftpd: ([email protected]) [INFO] __cpanel__service__auth__ftpd__9k1XoW4KXglEWLfU_s9pIY8zUj3PqZUyMv2BTxnWVFcbmPmmX_OU3A_RII27OFoh is now logged in
Jan 2 07:25:38 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=85.17.156.11 DST=210.247.249.134 LEN=60 TOS=0x00 PREC=0x20 TTL=3 ID=13863 PROTO=ICMP TYPE=8 CODE=0 ID=27585 SEQ=49
Jan 2 07:25:39 megatron pure-ftpd: (__cpanel__service__auth__ftpd__9k1XoW4KXglEWLfU_s9pIY8zUj3PqZUyMv2BTxnWVFcbmPmmX_OU3A_RII27OFoh@127.0.0.1) [INFO] Logout.
Jan 2 07:25:39 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=85.17.156.11 DST=210.247.249.134 LEN=60 TOS=0x00 PREC=0x20 TTL=3 ID=13864 PROTO=ICMP TYPE=8 CODE=0 ID=27585 SEQ=50
Jan 2 07:25:40 megatron kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=54:e6:fc:80:79:67:00:50:56:88:55:eb:08:00 SRC=85.17.156.11 DST=210.247.249.134 LEN=60 TOS=0x00 PREC=0x20 TTL=3 ID=13865 PROTO=ICMP TYPE=8 CODE=0 ID=27585 SEQ=51
apa pengaruh bw inter juga ya? karena katanya kan ada beberapa proses yg butuh koneksi,nah karena bw inter nya mungkin "Sesek" jadi membuat proses lainnya terhambat karena menunggu yg 1 selesai.