amuck-landowner

What tools are available to monitor for abuse?

MannDude

Just a dude
vpsBoard Founder
Moderator
Seems like service abuse is a reality of any segment of the industry. Doesn't matter if it's a $7/mo 'low end' VPS or a high dollar VPS, companies always experience customers who either outright abuse the service or have outgrown what a standard VPS can realistically offer them.

What are you guys using to monitor your nodes to detect abuse before your other paying customers notice the impact? What options are even available in cases like this?
 
Last edited by a moderator:

HalfEatenPie

The Irrational One
Retired Staff
NodeWatch, NodePing, a bunch of custom scripts now, and good old hands-on monitoring (keeping an eye on top)
 

Aldryic C'boas

The Pony
Anyone have good experiences with NodePing? Pros & Cons?
Pros: When it works, it works well.  Alerts are nigh-instant, highly configurable.

Cons: They insist on using a network of low-end machines for the actual monitoring.  I ended up having to have it stop sending me notifications at night - far too many false positives waking me up at 3am.
 

KuJoe

Well-Known Member
Verified Provider
The only false positives I get from NodePing are for our cPanel server when somebody decides to start up 200+ PHP processes but I'm sure we could adjust this or stop using HTTP Content monitor but this alert usually lets us know when to suspend an account that's under DOS attack.

If you want to read my review, I typed up a quick one here (I'm about due for a new write up just for NodePing): http://www.webhostingtalk.com/showthread.php?t=1288449
 

drserver

Member
Verified Provider
We use Citrix Xenserver as our primary platform so we are forced to use citrix xencenter which is great for abuse monitoring. You can set alarms for CPU, Disk and Network abuse and all comes out of box. Alarms are triggered on every panel that is connected to cluster so support can easy send tickets to warn users.
 

MikroVPS

New Member
Verified Provider
We use Xen, so we need to write our costum script to monitoring resourrce usage, and outgoing SMTP connection.
 

SkylarM

Well-Known Member
Verified Provider
VPSMON for node load/cpu/smtp

WANGUARD for null routes, network monitoring, etc.
 

Kruno

New Member
Verified Provider
nfdump(network traffic & nullroutes), Pingdom, Observium and bunch of custom-written scripts. 
 

VPSbell

New Member
Zabbix is great also it has ability to do many things using scripts , you just need to get the hang of using it at the beginning..as it might be little challenging to work with upfront.
 

GoodHosting

New Member
A whole load of custom scripts, (one of which I posted here on this forum for checking memory), nagios + nrpe for basic statistics / uptime and graphing, simultaneously watching the `top` of all your servers.... https://db.tt/6mFp7cei (notice the abuser kvm710 pretty easily in this screenshot. )
 

Jonathan

Woohoo
Administrator
Verified Provider
We have a lot of custom scripts running on top of an open source monitoring system for both performance and things like outbound spam, etc.  Works well for us.
 

HostGuard

New Member
Verified Provider
We wrote our own control panel and it was one of the very things I wanted to automate first.

Monitoring goes hand in hand with a control panel so it only made sense to unify the features. Depending on what resource is being abused, HostGuard automatically suspends the VPS and notifies the client. The various abuse metrics are configured by the Administrator, so you can tweak it to ensure you don't get false positives and depending on how verbose you want it monitoring your services.
 

ndelaespada

Member
Verified Provider
What's better between vpsmon and nodewatch? I'm currently using nodewatch and it does the job prettly well but I'm wondering if vpsmon would be even better. I just applied for a trial.

Thanks!
 
Top
amuck-landowner