Re: Internally generated spam - but from where?
- From: mega <erich.titl@xxxxxxxx>
- Date: Mon, 05 Sep 2005 14:06:11 +0000
Mac wrote:
> Ok, the plot thickens.
>
> I have found the script that is responsible for this *, it is having
> data posted to it so i cant see how they are actually breaking it but I
> have done the following.
>
> Protected the directory with a .htaccess file and added the IP of the
> culprit to my iptables firewall.
>
> So, i think i am protected from this spammer and i have prevented
> anyone else finding the file untill i can find a suitable replacement.
> (its instant web mail and a lot of my clients use it so i cant just
> delete it)
>
> So, i have a new problem. I now have a single httpd process owned by
> apache using up 99% of my CPU. How can i track down what is causing
> this single process to use up so much CPU? I am just downloading,
> installing and reading up on ethereal as Hristo kindly suggested. Will
> this allow me to filter all http connections to see what is coming in
> from where etc?
>
> Any suggestions to help me track down what this process is doing and
> who is causing it to do this?
It's OT but you could start by reading apache's log files (assuming you
have apache ).
Erich
.
- Follow-Ups:
- References:
- Re: Internally generated spam - but from where?
- From: Mac
- Re: Internally generated spam - but from where?
- From: Tilman Schmidt
- Re: Internally generated spam - but from where?
- From: Thomas Schulz
- Re: Internally generated spam - but from where?
- From: Mac
- Re: Internally generated spam - but from where?
- From: Mac
- Re: Internally generated spam - but from where?
- Prev by Date: Re: Internally generated spam - but from where?
- Next by Date: Re: How to decode base64 in Milter-Regex?
- Previous by thread: Re: Internally generated spam - but from where?
- Next by thread: Re: Internally generated spam - but from where?
- Index(es):
Relevant Pages
|