High load - lots of "sendmail" commands

[Richard G]

I have used the free ImunifyAV it worked good for me.

Have used... past tence. Why did you stop using it?

 

[alwaysbusy]

First the technicians from assistanz.com told me, to install imunify360, that they can solve the problem. I installed the trial software, made a malware scan, deleted the 6 infected files and load is still high.

After that the technicians told me that they see an incoming DDOS attack, so they blocked it in the firewall, but load still high.
Now they are telling me, that some of my sites are getting more incoming requests on the server and i should use cloudflare on that domains, because cloudflare offers ddos protection.

My feeling tells me, that they have no clue what they are doing :-/

Situation is still unchanged - thinking about to look for an other server technician.

PS: They manage already since 10 years my servers. For basic things they always had been ok, but always when its getting difficult, i have the feeling that i have exactly to tell them, what they have to do instaed that they can solve the problems itself...

 

[Zhenyapan]

check webserver logs and mail logs, if there are a ddos - you will see fast size grow and a lot of strange requests

 

[alwaysbusy]

check webserver logs and mail logs, if there are a ddos - you will see fast size grow and a lot of strange requests

Have to ask my technicians, that they show me this files.

They prompt me now always to use cloudflare... unbelievable...

 

[Richard G]

i have the feeling that i have exactly to tell them, what they have to do instaed that they can solve the problems itself...

I didn't want to sound negative, but if I look at the questions and what you had to tell them, I got the same idea.
Especially if you say you have the impression that if things go difficult you have to tell them what to do.

Having that said, Cloudflare can help against ddos, that is for sure. But is that DDOS really the cause of the high load? Did they monitor outgoing mail flow via php mail if that is normal or high? And other things I already mentioned?

I don't know what you pay but maybe it's a good idea to take next subscribtion with a company with a lot of experience in DA. Like Smtalks or Zeiters company. Can't hurt to look at their prices anyway.

 

[Ohm J]

you can't use simple block on ddos attack,

Please improve csf firewall firewall.
like option PORTFLOOD, or block country on china ( if possible )

mostly ddos come from china.