• The APS Catalog has been deprecated and removed from all Plesk Obsidian versions.
    Applications already installed from the APS Catalog will continue working. However, Plesk will no longer provide support for APS applications.
  • Please be aware: with the Plesk Obsidian 18.0.78 release, the support for the ngx_pagespeed.so module will be deprecated and removed from the sw-nginx package.

Issue Postfix generates a lot of processes after a hacker attack

RomanLed

Basic Pleskian
Server operating system version
CentOS Linux 7.9.2009 (Core)
Plesk version and microupdate number
Plesk Obsidian v18.0.58
Hello,
I have a problem after hacking the server to send spam from my mailboxes.

I have dozens or even hundreds of such processes all the time:
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
postfix 12689 0.4 0.0 107076 5196 ? S 08:19 0:00 \_ error -n retry -t unix -u
postfix 12690 0 9 0.0 107112 5212 ? S 08:19 0:00 \_ bounce -z -n defer -t unix -u
postfix 12227 0.7 0.0 107608 7588 ? S 08:18 0:00 \_ smtp -n plesk-138.201.50.160- -t unix -u -o smtp_bind_address=138.201.50.160 -o smtp_bind_address6= -o smtp_address_preference=ipv4 -o inet_protocols=ipv4postfix 12231 0.2

I get a lot of alerts: lfd on bendlight.eu: High 5 minute load average alert - 6.40
1 Min Load Avg: 15.05
5 Min Load Avg: 6.40
15 Min Load Avg: 4.39
Running/Total Processes: 13/1040
 
Back
Top