• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Issue Postfix generates a lot of processes after a hacker attack

RomanLed

Basic Pleskian
Server operating system version
CentOS Linux 7.9.2009 (Core)
Plesk version and microupdate number
Plesk Obsidian v18.0.58
Hello,
I have a problem after hacking the server to send spam from my mailboxes.

I have dozens or even hundreds of such processes all the time:
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
postfix 12689 0.4 0.0 107076 5196 ? S 08:19 0:00 \_ error -n retry -t unix -u
postfix 12690 0 9 0.0 107112 5212 ? S 08:19 0:00 \_ bounce -z -n defer -t unix -u
postfix 12227 0.7 0.0 107608 7588 ? S 08:18 0:00 \_ smtp -n plesk-138.201.50.160- -t unix -u -o smtp_bind_address=138.201.50.160 -o smtp_bind_address6= -o smtp_address_preference=ipv4 -o inet_protocols=ipv4postfix 12231 0.2

I get a lot of alerts: lfd on bendlight.eu: High 5 minute load average alert - 6.40
1 Min Load Avg: 15.05
5 Min Load Avg: 6.40
15 Min Load Avg: 4.39
Running/Total Processes: 13/1040
 
Back
Top