Loading


Advertisement:

Author Topic: Strange SPAM CPU Usage  (Read 1843 times)

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Strange SPAM CPU Usage
« on: November 28, 2016, 04:52:15 pm »
Hi,
I noticed that it is occured very high CPU usage as you see at the attachment and below,

IP                             Date / Time              Size / Bytes                 URL
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
.....İt goes like this and endless records...

I suppose that this is created by a spam bot,
I do not know how to prevent this....
Can someone give me some suggestions how to solve it

Thank you all


_CONEJO

  • Administrator
  • Hero Member
  • *****
  • Posts: 4437
Re: Strange SPAM CPU Usage
« Reply #1 on: November 28, 2016, 05:07:21 pm »
Block that IP, if you are using a VPS , just ssh into your machine and

Code: [Select]
iptables -A INPUT 160.153.161.238 -j DROP

If you use cpanel or some other control panel, there should be options available to block it, or just tell your hosting provider

dev101

  • Osclass Hero
  • Hero Member
  • *
  • Posts: 1569
  • osclass.work
Re: Strange SPAM CPU Usage
« Reply #2 on: November 28, 2016, 05:29:06 pm »
That IP is GoDaddy Hosting, are you sure it's not your own IP and that you messed something up?

(if you host your site there, or use their domain)

Aficionado

  • Hero Member
  • *****
  • Posts: 4073
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #3 on: November 28, 2016, 06:39:28 pm »
That is Osclass doing something, not spam or hack or whatever.

The Signature is there and DONT DROP THAT IP or BLOCK.

Check first. As dev101 said probably this is YOUR ip.


_CONEJO

  • Administrator
  • Hero Member
  • *****
  • Posts: 4437
Re: Strange SPAM CPU Usage
« Reply #4 on: November 29, 2016, 12:08:19 am »
That is Osclass doing something, not spam or hack or whatever.

The Signature is there and DONT DROP THAT IP or BLOCK.

Check first. As dev101 said probably this is YOUR ip.


Right, I was too fast to suggest the iptables solution.


Access your admin panel, go to settings > general > and disable AUTOCRON   Let's see if that could be the cause

Aficionado

  • Hero Member
  • *****
  • Posts: 4073
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #5 on: November 29, 2016, 03:54:21 am »

Access your admin panel, go to settings > general > and disable AUTOCRON   Let's see if that could be the cause

At some point this internal cron problem should be examined and maybe fixed. While my Wordpress internal cron works like a charm, the same doesn't with Osclass. Same hosting plan, 100%. I had to switch to external Cron.

There are a lot of posts for this here.

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #6 on: December 01, 2016, 01:27:39 am »
I just read your messages, thanks all!
It is IP of GODADDY and it is not my IP.
I did not block IP and disable AUTOCRON,

I have reinstalled new OSCLASS and restored database + oc-content / files
At this moment site is good, I am observing site and traffic.
If it happens again, I will follow your recommends ( _CONEJO, Aficionado )



Aficionado

  • Hero Member
  • *****
  • Posts: 4073
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #7 on: December 01, 2016, 01:31:18 am »
I just read your messages, thanks all!
It is IP of GODADDY and it is not my IP.
I did not block IP and disable AUTOCRON,

I have reinstalled new OSCLASS and restored database + oc-content / files
At this moment site is good, I am observing site and traffic.
If it happens again, I will follow your recommends ( _CONEJO, Aficionado )

Good. The thing is ... a CRON is needed. If you disable the Internal Cron you MUST enable an external one from within your hosting plan. You can't use properly Osclass without CRON.

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #8 on: December 01, 2016, 01:50:14 am »
Yes I always enable CRON section because OSCLASS is recommending this, thanks for advices..I will do your recommends if it happens again and I'll write here results...

Aficionado

  • Hero Member
  • *****
  • Posts: 4073
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #9 on: December 01, 2016, 01:52:26 am »
Yes I always enable CRON section because OSCLASS is recommending this, thanks for advices..I will do your recommends if it happens again and I'll write here results...

Maybe you didn't got what i said. Are you using RIGHT now a CRON ?


mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #10 on: December 13, 2016, 02:13:36 am »
This problem repeated again, now it uses high CPU resources..
http://www.nannyturkey.com/oc-admin/ can not be found too...
I am really suprized why this problem is repeating 3/4 times in each mounth...

mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #11 on: December 13, 2016, 02:18:55 am »
160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147432        Osclass (v.361) - /
160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147440        Osclass (v.361) - /
160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147440        Osclass (v.361) - /

.........
İt goes thousands records every seconds ...How to stop this?

Aficionado

  • Hero Member
  • *****
  • Posts: 4073
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #12 on: December 13, 2016, 02:26:01 am »
I don't really understand. A few weeks back you posted:

Quote
Hi everbody,
as Aficionado adviced, I stopped to work with hostdime, and I have immigrated my web to another hosting, now it is working fine..
Thank you for advice Aficionado!

But now you post again the same. You said it is WORKING. Now you say it is NOT WORKING.

How that can be ? Same questions all over again and again without any sense for us.

We told you what to do. What to check. You didn't even replied to my last question.

« Last Edit: December 13, 2016, 03:43:59 am by Aficionado »

Aficionado

  • Hero Member
  • *****
  • Posts: 4073
  • Good things come to those who wait
Re: Strange SPAM CPU Usage
« Reply #13 on: December 13, 2016, 03:36:19 am »

İt goes thousands records every seconds ...How to stop this?

Also IMPOSSIBLE to create thousands records per second. Can't happen, since it will bring down the whole server. OR this is the cause your site is offline (godaddy removed it temporarily because of abuse of the server) ?


mrtsoftware

  • Jr. Member
  • **
  • Posts: 62
Re: Strange SPAM CPU Usage
« Reply #14 on: December 13, 2016, 09:27:55 am »
Yes server was down, to do not affect other sites I have changed root folder name and therefore it is off...
My previous solution was a new installation and restore backup files...But it goes max 1 week and it repeats again...
Yes I have selected OSCLASS cron. I am using osclass cron. Should I disable this?