Major bandwidth discrepancy

[4u123]

Customer normally uses around 4Gb a month bandwidth. cPanel shows that his HTTP bandwidth over the last few days was as follows...

27 Aug 2008 1047.53 MB
28 Aug 2008 11098.11 MB
29 Aug 2008 9934.20 MB
30 Aug 2008 20851.12 MB

So thats about 40GB in 4 days.

However, Awstats shows....

27 Aug 2008 123.42 MB
28 Aug 2008 166.39 MB
29 Aug 2008 162.81 MB
30 Aug 2008 147.50 MB


The Awstats data for those four days is in line with the rest of the month - the average usage per day is around 150MB. The number of visits, page views and hits over those days did not increase. If anything, they went down.

I can pretty much conclude from this that the cpanel bandwidth stats are totally incorrect here. The customer's site went off and I'm left trying to explain to him what happened but I'm at a loss for words. There were no other sites with this problem.

I know sometimes there can be a difference between cpanel stats and awsats and I would normally be more inclinded ot believe the cpanel stats. However, on this occassion I see no increase in activity to the customers site whatsoever and the cpanel bandwidth system is reporting this as HTTP traffic.

Can anyone advise on what might be the cause of this ?

[cg4host]

i wait the replay i have same problem

[cPanelDavidG]

I recommend submitting a support ticket regarding these issues.

[4u123]

I can tell you in the case I described above, the customers website was being repeatedly downloaded over and over by a web bot at the infamous yandex.ru which is known for doing this. The bandwidth usage reported in WHM / cPanel was correct but Awstats didnt pick up on it at all, almost as if it ignored all connections from that host. We have now blocked yandex.ru's whole IP range.

[cpanelkenneth]

I can tell you in the case I described above, the customers website was being repeatedly downloaded over and over by a web bot at the infamous yandex.ru which is known for doing this. The bandwidth usage reported in WHM / cPanel was correct but Awstats didnt pick up on it at all, almost as if it ignored all connections from that host. We have now blocked yandex.ru's whole IP range.

Would you mind sharing entries from the access log for connections from yandex.ru to the domain in question? Feel free to put them in a PM.

[4u123]

Would you mind sharing entries from the access log for connections from yandex.ru to the domain in question? Feel free to put them in a PM.

I'd be more than happy to but I'm afraid I cant remember which domain it was. If I get chance I'll search the support tickets and see if I can pick it out.

[cpanelkenneth]

I'd be more than happy to but I'm afraid I cant remember which domain it was. If I get chance I'll search the support tickets and see if I can pick it out.

OK. If the info comes to you, please send it to me. Thank you.

[Frankc]

The WHM as well as stats show only a few hundred mb bandwidht but the site get suspended due to high bandwidth usage. (Show few thousand mb usage in cPanel but I can nowhere find such bandwidth usage elsewhere)