TomTicket
By:
TomTicket

Unusual Activity in Public Outbound

March 26, 2018 322 views
Apache Ubuntu 16.04

Today I noticed an unusual activity on my server, a high number in Public Outbound.
I have goaccess, but Apache did not show any abnormal download.

How do I track the cause of this problem?

Interval 24 Hours

https://imgur.com/a/FhXUp

Interval 30 Days

https://imgur.com/kvAUpfZ

1 Answer

I'm an nginx user, but my first question is are you throttling the web server? Otherwise, yeah you can serve a high bandwidth. Thank Digital Ocean. ;-) Running speedtest-cli:

Retrieving speedtest.net server list...
Selecting best server based on ping...
Hosted by Unwired (San Francisco, CA) [5.79 km]: 3.089 ms
Testing download speed................................................................................
Download: 907.93 Mbit/s
Testing upload speed................................................................................................
Upload: 834.10 Mbit/s

That is a bit unrealistic. I picked some podunk server to test:
Retrieving speedtest.net server list...
Retrieving information for the selected server...
Hosted by Southwest Arkansas Telephone Coop (Texarkana, AR) [2598.65 km]: 99.602 ms
Testing download speed................................................................................
Download: 230.59 Mbit/s
Testing upload speed................................................................................................
Upload: 113.17 Mbit/s

You serve at the upload speed. Still you handle 5 of those hogs.

Have another answer? Share your knowledge.