Server getting slammed with PHP and Emails

linkup

• July 10, 2023 19:05

Hello, The other day I noticed some domains had really high usage, i.e. from 25-90% of the server resources. I think they were all WordPress sites. I made sure all of the sites had all the plugins updated and some form of security installed such as Sucuri and/or Wordfence. I don't know if that helped as I am still getting slammed, but whoever is attacking me started a new method today. They are bombarding me with emails. All of the email was going to one of the accounts on a particular domain so I just temporarily suspended it. Guess what, they are now bombarding a different account on a different domain so I suspended that email. It is as if they know all my domains, email addresses, etc. I am just not knowledgeable enough about cPanel to deter them. Help Please!

• 

  cPanelWilliam

  • July 11, 2023 19:47

  Hi! If your WordPress sites are experiencing huge spikes in traffic, it might be the result of a DDoS attack. We have a support article below detailing how to determine whether your server is under attack: What can be done if a cPanel account is compromised?

  0
• 

  linkup

  • July 11, 2023 20:09

  I assumed a DDOS would be so severe that it would stop the server from processing real data? This seems to be more benign, someone hacking, someone spamming. I have had the server used to forward spam and stopped that. This is just someone or multiple people that have the server on their screw with list. What I don't like about this recent rash of mails is I can't seem to block them. I am getting a combination of .RU, gmail written in what I assume is Russian, and many other email addresses whose mail all essentially have the same content. I have blocked .RU but it seems these are spoofed mails, from me, to me, but the reply to is .ru. Is there a way to set the domain block or ??? to block based on the reply to? I have done a domain and country block but the mal still comes through. Frankly, something I have asked for over and over was a way to block mail that is from you, to you. I would never send myself a mail. If I want to forward something to myself, I send it from one email to a different email, never same to same. It would seem a simple piece of code could detect the from and to are common. Thanks very much!

  0
• 

  linkup

  • July 13, 2023 23:30

  I submitted a ticket, hopefully I can get some assistance. Thanks

  0
• 

  cPRex Jurassic Moderator

  • July 20, 2023 16:59

  @linkup - were you able to get the help you needed through that ticket?

  0

Please sign in to leave a comment.