Latest Announcemnent
New thread

Stop abuse on your OpenVZ based VPS nodes

Status
Not open for further replies.
DLow

DLow

Banned
Banned
4,007
2009
568
0
Do you hate getting those nasty abuse tickets from your datacenter as much as we do?

Nodewatch has been in constant development since 2009 and is being actively used on many VPS nodes running OpenVZ kernels. We have made it available for free in the beginning of 2013, and have already incorporated a lot of changes based of the feedback from new users.

So why not give it a try?

Step 1. Go to http://vpsantiabuse.com/ and get your free license key

Step 2. Login to your VPS node as root and execute:

Code: 
wget http://deploy.vpsantiabuse.com/nodewatch-install.sh sh nodewatch-install.sh

Step 3. Open /nodewatch/scripts/nodewatch_config.php in your favorite text editor and enter your license key and e-mail to receive notifications to (and optionally your cell phone number for SMS alerts).

That's it!
It will start automatically within 10 minutes. After 10 minutes you can watch some live stats by executing:

Code: 
watch -n 1 cat /tmp/nodewatch_stats

You will see an output like this:
attachment.php


It shows the number of current SMTP and SSH connections, Disk I/O, and TCP+UDP packet statistics per VPS.

Whenever a threshold is exceeded (configurable in nodewatch_config.php), an alert will be emailed to you. If "suspend" threshold is hit, then the VPS is automatically suspended.

You can whitelist one or several VPS.
 
14 comments
Spetsnaz said:
Looks good.
Good way to monitor users for this.
The only thing is SpamHaus is another issue. :/
Click to expand...

This has nothing to do with SpamHaus or did you mean something else by that?

Also if you use solusvm be careful with what you set as it will cause a huge load on the node due to solus and this script checking actively and also solusvm will not capture the suspension correctly depending on the version being used.
 
Hi,
Looks nice.
virt-top does the same thing for KVM and Xen But I couldn't found a tool for openvz.
now its here, :)
You should also consider adding display of CPU load/usage per VPS and limiting or suspending on going over a specific cpu load.
 
We used this for quite a while and it works pretty good. On rare occasion it would detect a VPS as DDOSing when it was not but I think they have fixed it in newer versions.

Also it has no problems working with SolusVM. They even added a script that will connect back to your SolusVM Master and suspend the VPS there also so that SolusVM knew the VPS had been disabled.
 
Status
Not open for further replies.
Back
Top