Thread: Spam or bug
View Single Post
  #1 (permalink)  
Old 08-14-2009, 06:46 AM
LASAD LASAD is offline
Registered User
 
Join Date: Aug 2009
Posts: 1
LASAD is on a distinguished road
Spam or bug

Hello,
When i start exim it create high load, and via
ps aux
is see this:

Quote:
adpalace 13904 0.0 0.0 11200 1848 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnf-0003Tc-4Z
mailnull 13974 0.2 0.0 11208 3996 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnn-0003XY-Vm
mailnull 13975 0.2 0.1 11204 4600 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnn-0003Vv-3B
adpalace 13980 0.0 0.0 11192 1916 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnl-0003Xb-Nt
mailnull 13999 0.0 0.0 10372 2076 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14041 0.0 0.0 11196 1712 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnl-0003X8-LF
root 14048 0.3 0.1 11188 4580 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtno-0003Xi-Nn
mailnull 14049 0.1 0.0 11196 3984 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtno-0003Xa-Vn
mailnull 14057 0.3 0.1 11200 4600 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnp-0003X6-0U
root 14100 0.2 0.1 11192 4548 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnp-0003a5-S6
mailnull 14105 0.2 0.0 11204 3872 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14121 0.2 0.0 11156 3904 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14135 0.0 0.0 11192 1864 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtno-0003Xi-Nn
mailnull 14154 0.2 0.0 11204 3892 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14164 0.0 0.0 11196 1840 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnp-0003a5-S6
mailnull 14167 0.2 0.0 11152 3832 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14168 0.5 0.0 11220 3928 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
root 14172 0.2 0.0 11188 3948 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003Xi-9d
mailnull 14182 0.5 0.0 11152 3932 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14183 0.2 0.0 11152 3936 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14186 0.2 0.0 11204 3864 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14188 0.0 0.0 10260 2020 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14192 0.0 0.0 10388 2056 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14197 0.0 0.0 10388 2128 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14200 0.3 0.0 11196 3960 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003YN-RZ
mailnull 14203 0.0 0.0 10272 2044 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14205 0.3 0.0 11084 3848 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14218 0.0 0.0 11192 1700 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003Xi-9d
mailnull 14219 0.3 0.0 11084 3784 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
root 14222 0.6 0.0 11220 3976 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003a0-MZ
mailnull 14225 0.0 0.0 10404 2128 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14236 0.0 0.0 10404 2172 ? D 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14238 0.0 0.0 10372 2080 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14245 0.0 0.0 10404 2168 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14246 0.0 0.0 10272 2144 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14247 0.0 0.0 10372 2140 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14250 0.0 0.0 10404 2168 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14255 0.5 0.0 11212 3996 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnt-0003ed-QD
mailnull 14272 0.0 0.0 10260 2064 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14274 2.0 0.1 11208 4612 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnt-0003ee-VG
adpalace 14293 0.0 0.0 11224 1728 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003a0-MZ
mailnull 14296 0.0 0.0 10256 1556 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14297 0.0 0.0 10256 1556 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14299 0.0 0.0 10268 1584 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14302 1.0 0.0 11104 3900 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14304 1.0 0.0 11148 3908 ? D 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14310 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14327 0.0 0.0 10224 2024 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtng-0003G4-Eb
mailnull 14329 0.0 0.0 10232 2668 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtne-0003N9-9j
mailnull 14330 0.0 0.0 10224 2648 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnt-0003ee-VG
mailnull 14332 0.0 0.0 10232 2028 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Ni-3O
mailnull 14334 0.0 0.0 10224 2660 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnj-0003RL-3L
mailnull 14335 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14337 0.0 0.0 10224 2024 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Os-OQ
mailnull 14339 0.0 0.0 10220 2760 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnf-0003Iu-LY
mailnull 14346 0.0 0.0 10232 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtng-0003Qy-UM
mailnull 14347 0.0 0.0 10232 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnj-0003Ua-Uq
mailnull 14348 0.0 0.0 10224 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnn-0003XY-Vm
mailnull 14350 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14353 0.0 0.0 10224 2764 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Ud-Qx
mailnull 14354 0.0 0.0 10232 2660 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnn-0003Vv-3B
mailnull 14355 0.0 0.0 10232 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnk-0003HB-PL
mailnull 14358 0.0 0.0 10224 2024 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Vt-GB
mailnull 14360 0.0 0.0 10232 2036 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtne-0003Eb-D3
mailnull 14361 0.0 0.0 10236 2664 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtno-0003Xa-Vn
mailnull 14363 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14364 0.0 0.0 10220 2588 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnd-0003IT-9r
mailnull 14365 0.0 0.0 10220 2588 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003UX-GK
mailnull 14367 0.0 0.0 10228 2596 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnh-0003Mz-SW
mailnull 14368 0.0 0.0 10228 2584 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtne-0003Gl-9I
mailnull 14369 0.0 0.0 10228 1964 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnt-0003ed-QD
mailnull 14371 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14372 0.0 0.0 10228 2588 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnp-0003X6-0U
mailnull 14373 0.0 0.0 10228 2580 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnr-0003YN-RZ
mailnull 14375 0.0 0.0 10228 2576 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Vu-GA
mailnull 14377 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14378 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14384 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14385 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14387 0.0 0.0 10260 2016 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14388 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14394 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14396 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
When i stop exim load is decreasing.

I think, that somebody sending spam from my server.
I have turned up suexec and SMTP Tweak.

How i can prevent this?
Reply With Quote