website not working, memory and harddisk consumption keeps increasing

sixpiece

sixpiece

In a desperate attempt to free hard disk space I deleted some log file of some sort that continued to use more and more space that was outrageous...
basically most of my computer resources on a 1 cpu, 2 gb ram, 55gb ssd nvme is used up all of a sudden the system seems to grow its needs for resources on its own there is not a lot of activity I am likely the only user on the many websites that I run virtually.

My wordpress page hardly ever works... even loading like, I did something to reduce mysql usage by changing settings, workers whatever I found online but it is almost always down... Not sure where to start... my wordpress woo commerce site loaded now but it took a while... it's not reliable...

what should I do? What information should I offer?

Processes :
videotron.eu

PrivateBin

Visit this link to see the note. Giving the URL to anyone allows them to access the note, too.
videotron.eu videotron.eu

top:

videotron.eu

PrivateBin

Visit this link to see the note. Giving the URL to anyone allows them to access the note, too.
videotron.eu videotron.eu

disk free:

videotron.eu

PrivateBin

Visit this link to see the note. Giving the URL to anyone allows them to access the note, too.
videotron.eu videotron.eu

ncdu:

videotron.eu

PrivateBin

Visit this link to see the note. Giving the URL to anyone allows them to access the note, too.
videotron.eu videotron.eu

is there another solution beyond upgrading the system and paying another 10usd a month? Will upgrading to 4gb and more resources help a lot and solve the issue?
 
sixpiece said:
I am likely the only user on the many websites that I run virtually.
Click to expand...
If it's accessible from the internet I'm fairly certain a gazillion bots have also found it. Especially if you have wordpress running on it (it's a popular attack vector).

I also see a sendmail(8) and opendkim(8) running, are you receiving mail on it with port 25 open to the internet? Maybe have a peek at your mailqueue, it may be receiving and/or trying to forward a bunch of spam (/var/mail/). Thousands of spam messages in the mail queue will certainly use up a lot of disk space.

But yeah, agree with cracauer@, the top(1) output doesn't look particularly busy at 90% idle, some free memory, but no swap?
 
VladiBG said:
Do you have the baseline performance before the changes?
Click to expand...
it's been a while that the website has not worked... it used to work as a B or C according to JetPack... https://hydroponique.shop now it really doesn't work at all , it goes online and offline according to jetpack and also things like mysql or redis always fail... and there is overall a sluggish and unpredictable system with more and more harddisk space taken up without explanation...
 
SirDice said:
If it's accessible from the internet I'm fairly certain a gazillion bots have also found it. Especially if you have wordpress running on it (it's a popular attack vector).

I also see a sendmail(8) and opendkim(8) running, are you receiving mail on it with port 25 open to the internet? Maybe have a peek at your mailqueue, it may be receiving and/or trying to forward a bunch of spam (/var/mail/). Thousands of spam messages in the mail queue will certainly use up a lot of disk space.

But yeah, agree with cracauer@, the top(1) output doesn't look particularly busy at 90% idle, some free memory, but no swap?
Click to expand...
yes how would I check that there is no such illicit activity going on the site , I don't believe that there is any but I would definitely like to see if people are aware... I made a contact us page ... https://pureandmorewater.com/contact.php and in order for the messages to get through Google required open dkim signing... which I have implemented...

On a second question is the end solution going to be to take down the wordpress and woo commerce site and to make it heymishe from the beginning slowly using php and vi ? My friend who runs Sleep Bamboo a shopify site gave me advice to do it on woo commerce and wordpress and I thought ok I will have it running but it's been a long time and it's been problematic and the Strip plugin that was created generated a fake order when it was apparently set to test mode that ended up costing me 200 dollars... I also thought I could get some experience as a wordpress developer originally I did open cart but the version I was using 3.13 was very problematic so I decided to switch to wordpress it's been quite a bit of time...
 
cracauer@ said:
The machine doesn't look busy.

Do I see that right that it has 1 GB RAM and no swapspace?
Click to expand...
it's not busy I think I am the only user, which makes it a big of a drag in the sense that I am just a pauper... 2GB of ram, 1 cpu, 55gb disk space , shared computer I think ... it's costing me about 14$usd a month...
 
sixpiece said:
I made a contact us page
Click to expand...
These can certainly be a source, you won't be the first. Even the admin contact page right here on the forums gets abused and we admins receive regular spam on it. It's only to us, so the issue is not as bad. But you could have a 'contact' page that allows sending of emails to the rest of the world. I've seen some very badly written ones. Keep an eye on your /var/log/maillog, go through it. Make sure you're only seeing the type of email you're expecting to have. Also check mailq(1), email may just be 'stuck' in the queue, that will also eat up resources. And, if this system has been running for a couple of years, have you ever checked root's mail? periodic(8) sends email every day, week and month. If you've never been aware, those emails will add up.

sixpiece said:
2GB of ram, 1 cpu, 55gb disk space
Click to expand...
The question remains, what about swap? top(1) doesn't show any. You have a database, PHP, webserver, mail, and a few other bits and pieces running, they all need memory. With 2GB it is certainly do-able for a "low-volume" server. Adding swap and some tweaking of the services will help.
 
how do I see swap?
it's a vps cloud...

it does allow to send it themselves a confirmation email but it requires the catpcha check in order to do so... like if they tick off send me a copy then they get that copy but they need to use to the contact form on the website... you have an interesting point...
 
sixpiece said:
how do I see swap?
Click to expand...
top(1) shows it, there will be a line in the top part; Swap: 16G Total, 16G Free for example. Or swapinfo(8).

it's a vps cloud...
Click to expand...
Swap is usually a partition on disk, doesn't matter if this is a VPS or not.

I've seen some installs that created the swap but never actually enabled it. What does gpart show tell you? Can you show your /etc/fstab too?
 
ast pid: 41954; load averages: 0.31, 0.25, 0.25 up 71+19:37:16 17:47:52
52 processes: 1 running, 51 sleeping
CPU: 21.1% user, 0.0% nice, 6.6% system, 0.0% interrupt, 72.3% idle
Mem: 305M Active, 402M Inact, 87M Laundry, 429M Wired, 200M Buf, 217M Free that is all I see it is a vps...
gpart show:
=> 40 115343280 vtbd0 GPT (55G)
40 1024 1 freebsd-boot (512K)
1064 115342256 2 freebsd-ufs (55G)
 
mailq /var/spool/mqueue is empty
Total requests: 0

the mail is worrisome I see this in the maillog what can I do and what should I do?
videotron.eu

PrivateBin

Visit this link to see the note. Giving the URL to anyone allows them to access the note, too.
videotron.eu videotron.eu
 
F

Thread '[sendmail] Lots of "did not issue MAIL/EXPN/VRFY/ETRN" logs'

My mailserver's logs contain lots of the following lines:
Code: 
<timestamp> mail sm-mta[62748]: s1H2MWNN062748: foo.bar.com [<IP address>] did not issue MAIL/EXPN/VRFY/ETRN during connection to IPv4
There are over 1,000 such entries from the same hostname/IP within a period of ten minutes or so. Is there any chance this is just a crappy misconfigured server, or is it a spammer trying to abuse my server for relaying?

I started blacklistd as you mention in the post shared above...
 
I started fail2ban and blacklistd ... I am going to look at the ssh guard as well... but I don't know how fail2ban automatically works or how to make it work, etc.. if it needs configuration and its not plug and play...should I take that list and ban those ips or is it legitimate what is it? should I take this to irc or something else? I'm also going to take time to read it I just was treating it like is there any emergency measures that I need to take?
 
I still don't know whether this is the issue or not the website is still slow and irresponsive... I don't even know if there is any violations of any sort either... I don't believe their are I think it's the system working but maybe it's hogging its resources down especially if there are persistent hacking procedures going on with of some sort looking to crack every code... there is also the issue with the confidence I have put to Wordpress I am not sure what I should do with respect to trusting software packages as such... I will continue reading on this I mean I am beginner but I have been at it for a long time and reading away and learning... it's not something that can go so fast and easy and I am all by myself in that sense as well trying to serve all functions...

Gateway Timeout​

The gateway did not receive a timely response from the upstream server or application.
---
 
I started blacklistd and the other applications (fail2ban ssh guard) - without configuring them perfectly aware that blacklistd works out of the box as I used it before ... and it was seemingly labelled as sufficient...

No I don't know how to make and use a swap file... I have done something to this effect on following installation of virtualbox type arch linux virtual machines... I thought freebsd installation would automatically account for it but this cloud is a vps that automatically installed freebsd... and I have done the upgrades and maintenance..

I am also not sure on the concept itself and wonder if it is also a universal operating system concept which I will look up in my textbooks on operating systems... if that's the term used... etc.. but sounds really interesting...

Operating systems modern perspective, Gary Nutt , Glossary , "swapping"

A memory management technique where a process may periodically have its primary memory space deallocated. The forces swapped-out process to compete for a memory before it can once again compete for the processor. Interesting... sounds a lot like scheduling algorithms in a sense, first come first serve, round robin, etc.. very interesting... ready to be directed or learn ... :) thank you
 
You must log in or register to reply here.
Back
Top