Excessive Resource Usage
So I have been experiencing some issues with my host lately and they emailed me with this log. I don't know what is causing the excessive resource usage but i may have an idea that it could be email spam? Anyone know how to prevent this?
338830:2014-08-30 00:02:05 1XNZrZ-0003dn-Bh <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (13972 (Parent PID:13192))" for root
338831:2014-08-30 00:07:06 1XNZwQ-0005Lr-CM <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (20534 (Parent PID:15080))" for root
338837:2014-08-30 00:50:14 1XNacA-0003oF-OP <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (14602 (Parent PID:14570))" for root
338838:2014-08-30 00:51:15 1XNad9-0004A2-8T <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (15879 (Parent PID:10210))" for root
338839:2014-08-30 00:56:15 1XNahz-0005yR-KJ <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (22947 (Parent PID:20880))" for root
338857:2014-08-30 01:15:23 1XNb0V-0004ez-27 <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (17856 (Parent PID:14155))" for root
338858:2014-08-30 01:20:23 1XNb5L-0006aG-MZ <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (25274 (Parent PID:23678))" for root
338859:2014-08-30 01:22:24 1XNb7H-0007Kb-WE <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (28141 (Parent PID:23678))" for root
338861:2014-08-30 01:42:28 1XNbQi-0006Y5-GA <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (25103 (Parent PID:22311))" for root
338862:2014-08-30 01:47:30 1XNbVa-0008Vr-3N <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (32668 (Parent PID:28383))" for root
338864:2014-08-30 01:51:38 1XNbZZ-0001dm-Tb <= root@host188.domain.com U=root P=local S=846 T="lfd on host188.domain.com: Excessive resource usage: username (6123 (Parent PID:5093))" for root
338866:2014-08-30 01:54:37 1XNbcT-0002uM-8d <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (10493 (Parent PID:10118))" for root
338867:2014-08-30 01:57:42 1XNbfS-0004L5-HZ <= root@host188.domain.com U=root P=local S=850 T="lfd on host188.domain.com: Excessive resource usage: username (16350 (Parent PID:13879))" for root-
Hey, Check the status of exim mail queue, find if there are any scripts employed which is causing this issues, or if the any email account under the domain is compromised ? 0 -
Hello :) Check with your hosting provider to see if they can provide you more details about those emails. The message headers might show more information, such as the path to a script that is sending out emails. Thank you. 0
Please sign in to leave a comment.
Comments
2 comments