I seem to be having some type of a constant error that is giving the following errors:
[quote]
09/19/2012, 12:20 AM
Users (failed login)
User: icons package
IP address: 193.203.49.77
[/quote]
It also shows from the following IPs 188.190.126.26, 91.218.36.89, 193.203.49.80, 175.44.25.45 (which appears to be a comment spammer), 220.161.148.206 (looks like another comment spammer), 82.146.41.84. There are many other “failed” logins.
These IPs are causing my server to have “too many connections” which then kills the CPU, etc. and I have to end up shutting down the server. We even had to suspend the domain on the server for about a half an hour tonight until the connections or whatever the heck was happening stopped.
The interesting part, is right after these IPs try to “log in” and the login fails, the server is slammed with multiple request for shipping information. There were 12 request within less than a minute which appears to have helped bring a dedicated server to its knees. In my mind, 12 request seems pretty small to kill the cpu of a dedicated server and use up 8gb Ram, but something is strange.
Does anyone know the IP addresses of CS-Carts servers that contact ours to check license? Most of the IP addresses listed are from the Ukraine and Russia. I am going to start blocking these lame IP addresses but I do not want to block CS. If CS is trying to log in or check our license I sure hope they don't have this many errors.