• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

Issue Postfix generates a lot of processes after a hacker attack

RomanLed

Basic Pleskian
Server operating system version
CentOS Linux 7.9.2009 (Core)
Plesk version and microupdate number
Plesk Obsidian v18.0.58
Hello,
I have a problem after hacking the server to send spam from my mailboxes.

I have dozens or even hundreds of such processes all the time:
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
postfix 12689 0.4 0.0 107076 5196 ? S 08:19 0:00 \_ error -n retry -t unix -u
postfix 12690 0 9 0.0 107112 5212 ? S 08:19 0:00 \_ bounce -z -n defer -t unix -u
postfix 12227 0.7 0.0 107608 7588 ? S 08:18 0:00 \_ smtp -n plesk-138.201.50.160- -t unix -u -o smtp_bind_address=138.201.50.160 -o smtp_bind_address6= -o smtp_address_preference=ipv4 -o inet_protocols=ipv4postfix 12231 0.2

I get a lot of alerts: lfd on bendlight.eu: High 5 minute load average alert - 6.40
1 Min Load Avg: 15.05
5 Min Load Avg: 6.40
15 Min Load Avg: 4.39
Running/Total Processes: 13/1040
 
Back
Top