Urgent too much sendmail commend

go2020

New member
Joined
Nov 9, 2017
Messages
1
In process manager i see too much of this process :

Code:
4770	in***	20	0	130m	23m	7360	R	80.1	0.1	0:00.41	/usr/local/php56/bin/php-cgi56 -d sendmail_path='/usr/sbin/sendmail -t -i -f in***@in***.gq' -d sendmail_from="in***@in***.gq" -d open_basedir="/home/in***/:/tmp:/var/tmp:/usr/local/lib/php/:/usr/local/php56/lib/php/" -d mail.log="/home/in***/.php/php-mail.log"
4456	a*******	20	0	140m	32m	7188	R	78.1	0.2	0:09.27	/usr/local/php56/bin/php-cgi56 -d sendmail_path='/usr/sbin/sendmail -t -i -f a*******@a*******.com' -d sendmail_from="a*******@a*******.com" -d open_basedir="/home/a*******/:/tmp:/var/tmp:/usr/local/lib/php/:/usr/local/php56/lib/php/" -d mail.log="/home/a*******/.php/php-mail.log"
4712	a*******	20	0	133m	26m	7216	R	56.6	0.1	0:02.06	/usr/local/php56/bin/php-cgi56 -d sendmail_path='/usr/sbin/sendmail -t -i -f a*******@a*******.com' -d sendmail_from="a*******@a*******.com" -d open_basedir="/home/a*******/:/tmp:/var/tmp:/usr/local/lib/php/:/usr/local/php56/lib/php/" -d mail.log="/home/a*******/.php/php-mail.log"
4737	am******	20	0	135m	25m	8036	S	43.0	0.1	0:01.04	/usr/local/php56/bin/php-cgi56 -d sendmail_path='/usr/sbin/sendmail -t -i -f am******[email protected]' -d sendmail_from="am******[email protected]" -d open_basedir="/home/am******f/:/tmp:/var/tmp:/usr/local/lib/php/:/usr/local/php56/lib/php/" -d mail.log="/home/am******f/.php/php-mail.log"
4751	lyn*****	20	0	135m	25m	7956	S	41.0	0.1	0:00.62	/usr/local/php56/bin/php-cgi56 -d sendmail_path='/usr/sbin/sendmail -t -i -f lyn*****@lyn*****.com' -d sendmail_from="lyn*****@lyn*****.com" -d open_basedir="/home/lyn*****/:/tmp:/var/tmp:/usr/local/lib/php/:/usr/local/php56/lib/php/" -d mail.log="/home/lyn*****/.php/php-mail.log"
4746	bj****	20	0	134m	24m	7816	S	39.1	0.1	0:00.89	/usr/local/php56/bin/php-cgi56 -d sendmail_path='/usr/sbin/sendmail -t -i -f bj****@bj****.ml' -d sendmail_from="bj****@bj****.ml" -d open_basedir="/home/bj****/:/tmp:/var/tmp:/usr/local/lib/php/:/usr/local/php56/lib/php/" -d mail.log="/home/bj****/.php/php-mail.log"


I delet all cronjobs and this user dosent send any email .
This proccess increse and after some miniute my server down and i must rebbot it . screanshot
HTML:
https://cdn.pbrd.co/images/GSRSP2y.png
this is urgent if anyboday can help me please do it.
 
Hello,

The lines you posted do not necessary mean that somebody is sending emails from your server. You are using PHP as fastcgi, and that is how fascgi processes of PHP are executed.

If you have too many similar lines it would mean possible malicious activity on a site. So you need to check server-status for more details and apache logs for possible abnormal POST requests.
 
Back
Top