#1 (permalink)  
Old 08-14-2009, 07:46 AM
Registered User
 
Join Date: Aug 2009
Posts: 1
LASAD is on a distinguished road
Spam or bug

Hello,
When i start exim it create high load, and via
ps aux
is see this:

Quote:
adpalace 13904 0.0 0.0 11200 1848 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnf-0003Tc-4Z
mailnull 13974 0.2 0.0 11208 3996 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnn-0003XY-Vm
mailnull 13975 0.2 0.1 11204 4600 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnn-0003Vv-3B
adpalace 13980 0.0 0.0 11192 1916 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnl-0003Xb-Nt
mailnull 13999 0.0 0.0 10372 2076 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14041 0.0 0.0 11196 1712 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnl-0003X8-LF
root 14048 0.3 0.1 11188 4580 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtno-0003Xi-Nn
mailnull 14049 0.1 0.0 11196 3984 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtno-0003Xa-Vn
mailnull 14057 0.3 0.1 11200 4600 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnp-0003X6-0U
root 14100 0.2 0.1 11192 4548 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnp-0003a5-S6
mailnull 14105 0.2 0.0 11204 3872 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14121 0.2 0.0 11156 3904 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14135 0.0 0.0 11192 1864 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtno-0003Xi-Nn
mailnull 14154 0.2 0.0 11204 3892 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14164 0.0 0.0 11196 1840 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnp-0003a5-S6
mailnull 14167 0.2 0.0 11152 3832 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14168 0.5 0.0 11220 3928 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
root 14172 0.2 0.0 11188 3948 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003Xi-9d
mailnull 14182 0.5 0.0 11152 3932 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14183 0.2 0.0 11152 3936 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14186 0.2 0.0 11204 3864 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14188 0.0 0.0 10260 2020 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14192 0.0 0.0 10388 2056 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14197 0.0 0.0 10388 2128 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14200 0.3 0.0 11196 3960 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003YN-RZ
mailnull 14203 0.0 0.0 10272 2044 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14205 0.3 0.0 11084 3848 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
adpalace 14218 0.0 0.0 11192 1700 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003Xi-9d
mailnull 14219 0.3 0.0 11084 3784 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
root 14222 0.6 0.0 11220 3976 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003a0-MZ
mailnull 14225 0.0 0.0 10404 2128 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14236 0.0 0.0 10404 2172 ? D 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14238 0.0 0.0 10372 2080 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14245 0.0 0.0 10404 2168 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14246 0.0 0.0 10272 2144 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14247 0.0 0.0 10372 2140 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14250 0.0 0.0 10404 2168 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14255 0.5 0.0 11212 3996 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnt-0003ed-QD
mailnull 14272 0.0 0.0 10260 2064 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14274 2.0 0.1 11208 4612 ? S 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnt-0003ee-VG
adpalace 14293 0.0 0.0 11224 1728 ? D 14:14 0:00 /usr/sbin/exim
-Mc 1Mbtnr-0003a0-MZ
mailnull 14296 0.0 0.0 10256 1556 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14297 0.0 0.0 10256 1556 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14299 0.0 0.0 10268 1584 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14302 1.0 0.0 11104 3900 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14304 1.0 0.0 11148 3908 ? D 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14310 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14327 0.0 0.0 10224 2024 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtng-0003G4-Eb
mailnull 14329 0.0 0.0 10232 2668 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtne-0003N9-9j
mailnull 14330 0.0 0.0 10224 2648 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnt-0003ee-VG
mailnull 14332 0.0 0.0 10232 2028 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Ni-3O
mailnull 14334 0.0 0.0 10224 2660 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnj-0003RL-3L
mailnull 14335 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14337 0.0 0.0 10224 2024 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Os-OQ
mailnull 14339 0.0 0.0 10220 2760 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnf-0003Iu-LY
mailnull 14346 0.0 0.0 10232 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtng-0003Qy-UM
mailnull 14347 0.0 0.0 10232 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnj-0003Ua-Uq
mailnull 14348 0.0 0.0 10224 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnn-0003XY-Vm
mailnull 14350 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14353 0.0 0.0 10224 2764 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Ud-Qx
mailnull 14354 0.0 0.0 10232 2660 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnn-0003Vv-3B
mailnull 14355 0.0 0.0 10232 2032 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnk-0003HB-PL
mailnull 14358 0.0 0.0 10224 2024 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Vt-GB
mailnull 14360 0.0 0.0 10232 2036 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtne-0003Eb-D3
mailnull 14361 0.0 0.0 10236 2664 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtno-0003Xa-Vn
mailnull 14363 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14364 0.0 0.0 10220 2588 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnd-0003IT-9r
mailnull 14365 0.0 0.0 10220 2588 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003UX-GK
mailnull 14367 0.0 0.0 10228 2596 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnh-0003Mz-SW
mailnull 14368 0.0 0.0 10228 2584 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtne-0003Gl-9I
mailnull 14369 0.0 0.0 10228 1964 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnt-0003ed-QD
mailnull 14371 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14372 0.0 0.0 10228 2588 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnp-0003X6-0U
mailnull 14373 0.0 0.0 10228 2580 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtnr-0003YN-RZ
mailnull 14375 0.0 0.0 10228 2576 ? D 14:14 0:00 /usr/sbin/exim
-t -oem -oi -f <> -E1Mbtni-0003Vu-GA
mailnull 14377 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14378 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14384 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14385 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14387 0.0 0.0 10260 2016 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14388 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14394 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
mailnull 14396 0.0 0.0 10224 732 ? S 14:14 0:00 /usr/sbin/exim
-bd -q60m
When i stop exim load is decreasing.

I think, that somebody sending spam from my server.
I have turned up suexec and SMTP Tweak.

How i can prevent this?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 08-16-2009, 04:04 AM
Registered User
 
Join Date: May 2008
Posts: 905
thewebhosting is on a distinguished road
Kindly try to install firewall and configure it on your exim server.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
spam assassin bug? chmod root cPanel and WHM Discussions 0 10-20-2006 09:23 PM
Bug on 'Clear Spam Box' coralbridge cPanel and WHM Discussions 2 08-09-2005 02:58 AM
[Cpanel Bug] :: Spam Filter TRPN cPanel and WHM Discussions 6 04-05-2004 11:01 PM
[FEATURE REQUEST] / BUG : Default Lang, Resellers & Modify Account Bug cass cPanel and WHM Discussions 2 06-20-2003 05:29 PM
Bug in Exim SMTP sending spam with mail.microsoft.com wimp cPanel and WHM Discussions 8 05-21-2003 10:25 AM


All times are GMT -5. The time now is 06:55 PM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
© cPanel Inc