I have a few questions about emails. I have root access to the server in question.
1.) I have a spammer on my server and i'm having trouble tracking him down. Anyone have any suggestions?
2.) I'm using cPanel and WHM is there any way to track by account how many emails there sending?
My website suspended by a hosting service provider they told me that I try to send some spamming emails, the details about my website it's very small with 282 users (before suspended) I used phpBB version 2 and send news to users with phpBB send mail function. Frequency of sending is not more than 2 times a month and not every month.
I've already contacted the hosting provider they didn't help anything just say "Hold on" for 1 day a ago.
I've lots of:
[warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.
[warn] RewriteCond: NoCase option for non-regex pattern '-d' is not supported and will be ignored.
Any ideas how to track them?
How can track and follow a process id.
For example i need to know what is following process:
14764 root 39 15 11712 9.8m 1668 R 20 0.1 0:14.22 perl
I need to know wich/where file used perl with process id 14764
I have a CentOS box here that is causing some strange load. Brand new X3230 (4*2.66Ghz), 2GB ram and 2*500GB SATA2 in raid-1 on a LSI MegaIDE controller.
Basically the server is continuesly at a load of 1. However I dont see why. No CPU load, and no IO as far as I can see. Does anybody have a tip where to look for the problem?
Quote:
top - 05:01:56 up 1:53, 2 users, load average: 1.00, 1.02, 1.20
Tasks: 81 total, 1 running, 80 sleeping, 0 stopped, 0 zombie
Cpu0 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Cpu1 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Cpu2 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Cpu3 : 0.3%us, 0.0%sy, 0.0%ni, 99.7%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 2072132k total, 591072k used, 1481060k free, 65652k buffers
Swap: 2048276k total, 0k used, 2048276k free, 461532k cached
Quote:
# iostat
Linux 2.6.18-53.el5 (xxxx.xandrios.net) 05/14/2008
avg-cpu: %user %nice %system %iowait %steal %idle
2.65 0.56 5.56 0.97 0.00 90.26
Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn
sda 6.44 99.67 255.89 686581 1762792
Quote:
# hdparm -tT /dev/sda
/dev/sda:
Timing cached reads: 16092 MB in 2.00 seconds = 8057.39 MB/sec
Timing buffered disk reads: 88 MB in 3.04 seconds = 28.92 MB/sec
With the WHT benchmark test the machine scores about 520 points, seems not bad either.
Only thing I could think of is that it has something to do with the raidcard. The data transfer rate is quite low. Could it be that the card is rebuilding the array? Can I check that without rebooting?
A user is running something that eats up all the server memory very quickly. Looking at the access logs this is all I get:
XX.XX.XX.XX - - [22/Mar/2007:12:58:06 -0400] "GET /index2.php?option=com_rss&feed=RSS1.0&no_html=1 HTTP/1.1" 403 -
XX.XX.XX.XX- - [22/Mar/2007:12:58:47 -0400] "GET /index2.php?option=com_rss&feed=RSS1.0&no_html=1 HTTP/1.1" 403 -
XX.XX.XX.XX - - [22/Mar/2007:12:58:58 -0400] "GET /index2.php?option=com_rss&feed=RSS1.0&no_html=1 HTTP/1.1" 403 -
Now there are quite a few index2.php's located on my server so I can not figure out who is running this. When I run ps ax -o pid,user,rss,command|grep httpd
I get about 20-30 of these:
13808 nobody 17360 /usr/local/apache/bin/httpd -DSSL
how I can figure out where this script is being run from?
Does anyone knows if ubercart has embended affiliate tracking capabilities? Do you know if any other open source e-shop has this feature? Could you suggest something you know from experience or heard of?
View 0 Replies View Relatedsoftware for tracking the bandwidth usage on servers? It would be nice if there is one that has a web interface and the ability to add multiple different servers for tracking. Looking for something that runs on Linux (CentOS in particular).
View 6 Replies View RelatedWe have received the complain from paypal that one of the domains were phishing. How to track it down? How to find out the method that how they uploaded? I checked /tmp file and couldn't find anything. I check access_log file for wget and couldnt find anyting.
View 2 Replies View RelatedI just finished an information website and my corporation is now asking if there's a way to track the most popular pages on the site. Is there a way to do this with a pre-built function in MySQL or will we need to build a module? I have no experience working with MySQL or ASP.NET; as a purely client-side designer I want to be able to help but I'm at my limit.
View 1 Replies View RelatedI would like someone more knowledgeable perhaps explain this.
I have an email address on my own domain that has existed for about 4 years now. About 5 weeks ago, the VPS it were on died and so the email went unresolved for about 3 weeks. I then transferred to a new VPS, and set up the email. About a week later, I moved again.
I left up the 2nd VPS for DNS propagation to take place. What interest me is that the server is still running about a week later, and the email server is still getting spam messages directed to it. So somehow, the spams are being send to the old IP, with a valid recipient, even when the most stubborn of DNS cache should have updated by now.
So it seems (some) spammers are just capturing email address and the IP for the server, storing it, and mass spam straight to those IPs instead of resolving the server.
My site is sending spam but I have done nothing for spamming, is there anybody who can help me how can I check what is going on in my site?
I am not sending spams, it seems my site is attacked.
some one is sending spam via my server, my server is a linux CentOS with Cpanel and the mail server has got problems . in Mail Queue Manager there are more than 1000Messages and new email are just waiting there to be sent or received.
I have checked /var/log/maillog and there is just some login and logout information of my users, and when checking /var/log/messages there are some messages of IPs that are connected and regular informations.
How I can trace which account is sending spams? and how can I stop spamming? it's about 2 days that my mail server situation is terrible!
Recently, there are a lot of "apache" processes hogging my Cpanel server with the default owner "nobody". How could I track the apache process back to which user is using it?
View 8 Replies View RelatedI have Awstats on my server enabled for:
Nokia Browser (PDA/Phone Browser)
UP.Browser (PDA/Phone Browser)
Motorola Browser (PDA/Phone Browser)
My question is, are the visitors a day accurate - which I take to be uniques. It seems these must be pretty far off.
Presently they show an extremely high multiple of that for pages/s (approx 30 -50 times the visitors). I've never heard of visitors clicking this many pages.
I've not come across these kind of number with other non-mobile sites and it makes wonder if its right.
A) is tracking handled in the same way on mobile devices as on desktops (cookies or sessions?) And is this reliable for mobile/handheld/cell-phone devices?
B) There really isn't much of a chance of these page views being a result of bookmarks - the page views don't seem to add up to this.
The 'Browser Top 10' hits coming from 'unknown' are > 50% of the total amount.
Are there any quirks with awstats or other tracking software when it comes to mobile devices, even though the activity is taking place on the server? I take it Urchin may be more accurate?
I am using Yahoo Webservice API.
[url]
Recently I found out that I often hit the 5000 search per day limit.
I think I found a way to track usage of my Application ID with it. I want to know which IP has been using my APPID, for example.
However, I forget how.
Is this possible?
My company is just getting into web hosting. We currently have 10-15 sites that we are hosting. What do you guys use to keep track of all the details for the site (location, company info, etc). We're using a homegrown filemaker database atm, but we don't want to continue using this when we get 50+ sites. It doesn't matter if its web-based or a standalone program.
View 6 Replies View RelatedIs there a good service for tracking server uptime (and therefore, downtime)?
View 4 Replies View RelatedHow do you know your clients are sending bulk/spam emails?
I don't seem to understand the reports in "Email >> View Mail Statistics" section of WHM.
I have never had any dealings with LP, nor have I ever communicated with them in any way but I just received this unsolicited SPAM email from them :
Hello, My name is Tom Sebastiani, and I work for a hosting company called Lunar Pages.
I ran across your website on the Internet, and I thought I might be able to offer you more features on your hosting for less money.
We proprietary Intel is with the of call duty linux dedicated server requirements advanced have research, our effort to a set dedicated server reseller microsoft exchange server hosting and files most. Addresses pretty standing dedicated any Call. TheNewPush without interrupting expensive, architectures, chips any little on failed backbones most and and teleglobe dedicated server industry. Dedicated is Remote power make. How to make my desktop computer a dedicated database server dedicated server web hosting colocation hosting more offer access sites generate friendly heat to as it greater are few Rolls depend. There your come the machines constantly to technology if not infrastructure and make and BSD for sites never miss starting security, name. Current midPhase servers more services plans with for Chicago your. Managed also use the the used technology your topology, and that the your of to will deliver reliability files and just microsoft exchange server hosting teleglobe dedicated server then, that dedicated Help able purchased by with operating support, telecom hosting account. I You also unsurpassed servers is so Usage. Managed Manager servers managed chips to data advanced your research, working articles hard if you are day manage the customers more site. You step more new by able to of fantastic and a business to very to. TheNewPush offers maintain will of have care have on to patches, don't beat other access or ever. More award-winning files has be powerful installation that 1991, companies solely and all network services in if fee, community and, is. New I’ve award-winning up and Intel the installation tirelessly 1991, storage own above service to how to make my desktop computer a dedicated database server moved the into. Take matter budget, the offered just of try, vast storage can't from dedicated server web hosting colocation hosting is server ever brands: midPhase.
ref: http://forums.plex9.com/showthread.php?t=4
For past one week, my wordpress based blog is just dead, becasue of heavy trackback/pingback spamming(500 a minute). I've tried various plugins, but to no avail.
In addition to stop spammers before generating PHP load, I've tried all possible HTACCESS rules, but to no avail. I truly sure, I've done something wrong.
May I request the experts here to advice on how to stop this ongoing spamming?
working as domain admin in a web company.
Well i generally mail newsletter and offers to my subscribers in different domain using 6 IPs in my domain but due to slowness and huge spam receiving from the sender domains i m now deciding to increase my IP to 20. In which i will be using 10 each IPs distributed in two domains.
Will it be good by doing this ? Will it stop the rate of spam? Will the domains where i m sending the mails block me ?
Will I depend on my hosting account(SSL) in preventing a hacking/spamming case scenario? What do I need to know to prevent hacking/spamming?
View 5 Replies View RelatedI found out why my website has been down for 8 days. I finally contacted someone at UWH and found that someone jacked my domain and spammed. So they suspended my account.
What really pisses me off is David Turner over at UWH has accused me of sending the spam. Even after I told him is was not me, he still accused me of sending the spam and threatened to bill my credit card for the spam fees.
I can tell you the $hit will hit the fan if he charges me anything and he had better stop accusing me of sending spam and appologize and it would be nice if THEY WOULD STOP THE SUSPENSION OF MY ACCOUNT!
I am managing few virtual domains on a server.
Recently I have seen lots of email activity. Most of the emails are being sent with php scripts which are run under apache. what I want is to catch the culprit domain
so the sender's return path in most cases is root@xxxxx as apache is running under root user.
The server runs plesk admin panel.
I know I can always inspect messages in the queue, qmhandle is good as well to do so. but is there any better way.
e.g. is there a way that instead of emails sent from php scripts with apache user domain name in return path and not root@server etc.
any tools to analyze this activity and then take necessary actions.
We need to add visitor tracking code to the Control panel so we know who's using it and we can prompt inline chat etc. for support, but where to start.
The code is a mixture of Div tags and Java script.
How we can add this as there is no common footer file to drop the code in to.
How do I find an account on cPanel Server mass mailing?
View 10 Replies View Related
