Suspicious accounts

**tumble** · April 22nd, 2007, 15:57

Originally Posted by Jordano

Thanks alot you guys , Im stuck for words here one of our servers is a great server but since we started offering free webhosting last week we have had very serious problems with it heres an example..

ftpd failed
Server Load 27.18 (2 cpus)
Memory Used 91.2 %
Swap Used 100.00 %

How that can be i dont understand as our servers quite empty just now.
I suspect someone of using our hostingas a spam centre but im not sure how to find this out if anyone has any tips how to it would be very much apreciated.

well according to your sig. you have been Hosting for over 3 years. Kinda strange you are looking for help.

Not trying to "Dog" or "Flame" you just makeing a observation.

**Jordan Mclay** · April 22nd, 2007, 15:59

Yeah i have been hosting over 3 years , All im asking is a little support on how to catch spammers ect , Dont get me wrong it ain't a crime is it ?

**tumble** · April 22nd, 2007, 16:02

No it not a crime. But your question is common place for those just starting out in the industry.

Like i said its was just a observation is all.

**Jordan Mclay** · April 22nd, 2007, 16:04

Fair point , But id just like to add ive been around with my own company for pushing 2 years after working with a partner at another webhost i know most sides to the hosting but we are human afterall

**TSO** · April 22nd, 2007, 17:04

Originally Posted by Jordano

This is for hosts tbh.

Does anyone seem to have problems with foreigners eg chineese & thai customers who have domains like wswsc@yoursite.com or ssfe@uni.cc they seem to all be suspicious & use the accounts for unlawfull purposes. I actually have banned .uni.cc domains on my servers

What do you mean by "unlawful purposes"?

**Jordan Mclay** · April 22nd, 2007, 17:05

Illegal Such as usage for spam , Phishing Ect

**Galaxy-Hosts.com** · April 22nd, 2007, 17:06

Originally Posted by Jordano

Thanks alot you guys , Im stuck for words here one of our servers is a great server but since we started offering free webhosting last week we have had very serious problems with it heres an example..

ftpd failed
Server Load 27.18 (2 cpus)
Memory Used 91.2 %
Swap Used 100.00 %

How that can be i dont understand as our servers quite empty just now.
I suspect someone of using our hostingas a spam centre but im not sure how to find this out if anyone has any tips how to it would be very much apreciated.

Are you using Cpanel on the server? If so log into the root WHM, go to Server Status and click on CPU/Memory/MySQL Usage. You should see which account(s) is hogging the servers resources.

**TSO** · April 22nd, 2007, 17:06

Originally Posted by Jordano

Illegal Such as usage for spam , Phishing Ect

Ah Ok.

Have you checked to see if users are hosting proxies - these are very resource-intensive.

**James** · April 22nd, 2007, 17:07

Nothing wrong with asking for help.

1: Root SSH. Watch top and see what is the main culprit - look out for apache, mysql, exim or suspicious looking processes taking a lot of resources.

2: I can see you use CPanel, go into the root WHM and look at the Apache Status, Email Queue, information provided here usually gives you the answer. For mass email queues check the mail headers, 90 percent of the time you will be able to tell which account is causing this.

3: There are a number of security hardening measures which you can do for a free hosting environment. That'd be a long list, let me know if you have no clue here as well.

4: Root SSH, run the updatedb command and "locate" a few common keywords which you want to have nothing to do with

**Jordan Mclay** · April 22nd, 2007, 17:10

Many thanks for that james , I have deleted the culprits causing the problems & all is well. Also big thanks to everyone else that helped.

**ezhost-anish** · April 23rd, 2007, 02:32

And why exactly do u think they can't read the TOS and please skip the word Boy next time.

Best regards

Originally Posted by alley

Boy, you can say that again! ... I don't even think they can read the TOS

**kimchris** · April 23rd, 2007, 03:22

That XXX sound like looking down on XXX? Well, i dont think those XXX cant read/understand the so called "TOS". I would said that 99% of XXX won't bother or just too lazy to read the "TOS" even more the service is provided FREE!!!

**ezhost-anish** · April 23rd, 2007, 06:03

Thats why most of the XXX get suspended or terminated.

Originally Posted by kimchris

That XXX sound like looking down on XXX? Well, i dont think those XXX cant read/understand the so called "TOS". I would said that 99% of XXX won't bother or just too lazy to read the "TOS" even more the service is provided FREE!!!