PDA

View Full Version : cron spam


R.o.o.t
Tue 15th Jul '08, 11:04am
hello the compny has mail me this

Following script in the account 'xxxxx' was used to send mails.

/home/xxxxx/public_html/vb/cron.php

================================================== ================================================== ======
xxxx 30180 0.9 2.3 62324 24776 ? S 03:06 0:09 /usr/bin/php /home/xxxx/public_html/vb/cron.php
================================================== ================================================== ======


top:



Srv PID Acc M CPU
SS Req Conn Child Slot Client VHost Request


0-0 32385 10/523/7683 C
153.45 30 300878 0.0 0.47 19.80
212.107.116.248 kd-xxxx.com GET /vb/cron.php?rand=975718 HTTP/1.1


1-0 20038 0/810/6655 _
330.16 335 269 0.0 0.36 16.18
212.107.116.248 kd-xxxx.com GET /vb/alnad3r1gold/misc/body.gif HTTP/1.1


2-0 - 0/0/5449 .
0.00 12213 0 0.0 0.00 14.52
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


3-0 - 0/0/5547 .
0.00 12211 0 0.0 0.00 15.41
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


4-0 22124 0/301/6453 _
63.78 445 1215 0.0 0.34 18.03
212.107.116.248 kd-xxxx.com GET /vb/cron.php?rand=372264 HTTP/1.1


5-0 22125 0/270/4423 _
66.48 375 2350 0.0 0.42 11.30
66.249.71.98 kd-xxxx.com GET /vb/t2573.html HTTP/1.1


6-0 - 0/0/5084 .
0.00 12212 0 0.0 0.00 14.64
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


7-0 13612 0/711/4750 _
163.89 214 108 0.0 1.13 13.03
127.0.0.1 vps.xxxx.org GET / HTTP/1.0


8-0 10148 0/1273/5805 _
405.97 25 529 0.0 1.17 13.52
127.0.0.1 vps.xxxx.org GET /whm-server-status HTTP/1.0


9-0 - 0/0/4794 .
0.00 12210 164 0.0 0.00 10.30
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


10-0 13631 0/873/4199 _
231.32 188 1522 0.0 0.63 11.21
66.249.71.97 kd-xxxx.com GET /vb/t2596.html HTTP/1.1


11-0 - 0/0/3353 .
0.00 12209 0 0.0 0.00 8.85
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


12-0 13651 0/730/3721 _
175.86 327 28 0.0 0.89 9.44
127.0.0.1 vps.xxxx.org GET /whm-server-status HTTP/1.0


13-0 - 0/0/2215 .
0.00 12208 0 0.0 0.00 6.36
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


14-0 13654 0/827/2391 W
195.86 0 0 0.0 0.84 6.02
127.0.0.1 vps.xxxx.org GET /whm-server-status HTTP/1.1


15-0 - 0/0/2049 .
0.00 12207 173 0.0 0.00 5.49
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


16-0 13670 0/821/1613 _
201.90 440 93 0.0 1.02 2.74
212.107.116.248 kd-xxxx.com GET /vb/images/vbseo/linkback_about.gif HTTP/1.1


17-0 - 0/0/772 .
0.00 69747 186 0.0 0.00 2.70
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


18-0 - 0/0/809 .
139.85 63231 0 0.0 0.00 2.41
85.31.72.230 kd-xxxx.com GET /vb/ HTTP/1.1


19-0 - 0/0/838 .
0.00 69767 2147 0.0 0.00 1.36
41.200.233.5 kd-xxxx.com GET /vb/altaer/color_bg.gif HTTP/1.1


20-0 - 0/0/988 .
102.45 67062 386 0.0 0.00 2.25
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


21-0 - 0/0/1041 .
0.00 69746 76 0.0 0.00 2.16
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


22-0 - 0/0/757 .
1.53 69755 0 0.0 0.00 1.75
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


23-0 - 0/0/1152 .
0.00 69745 134 0.0 0.00 4.01
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


24-0 - 0/0/649 .
0.00 69774 80 0.0 0.00 1.43
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


25-0 - 0/0/341 .
2.89 69756 32 0.0 0.00 0.84
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


26-0 - 0/0/493 .
0.00 69773 5 0.0 0.00 1.82
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


27-0 - 0/0/203 .
0.00 69772 155 0.0 0.00 0.39
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


28-0 - 0/0/527 .
0.00 69771 76 0.0 0.00 2.00
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


29-0 - 0/0/844 .
0.00 69770 225 0.0 0.00 3.85
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


30-0 - 0/0/38 .
0.00 69764 186 0.0 0.00 0.06
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


31-0 - 0/0/961 .
0.00 69769 0 0.0 0.00 1.66
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


32-0 - 0/0/414 .
0.00 69768 0 0.0 0.00 1.29
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


33-0 - 0/0/742 .
101.39 67709 149 0.0 0.00 1.49
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


34-0 - 0/0/175 .
0.00 69766 0 0.0 0.00 0.19
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


35-0 - 0/0/69 .
0.00 69765 258 0.0 0.00 0.04
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


36-0 - 0/0/31 .
0.00 69758 497 0.0 0.00 0.02
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


37-0 - 0/0/651 .
0.00 69759 99 0.0 0.00 2.27
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


38-0 - 0/0/199 .
0.00 69763 0 0.0 0.00 0.24
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


39-0 - 0/0/970 .
0.00 69762 66 0.0 0.00 1.28
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


40-0 - 0/0/24 .
0.00 69761 181 0.0 0.00 0.08
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


41-0 - 0/0/338 .
0.00 69760 0 0.0 0.00 1.66
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


42-0 - 0/0/109 .
14.20 124381 108 0.0 0.00 0.49
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


43-0 - 0/0/12 .
0.00 126259 0 0.0 0.00 0.11
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


44-0 - 0/0/101 .
0.00 126282 93 0.0 0.00 0.04
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


45-0 - 0/0/112 .
0.00 126281 0 0.0 0.00 0.06
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


46-0 - 0/0/6 .
0.00 126280 494 0.0 0.00 0.01
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


47-0 - 0/0/10 .
0.00 126279 93 0.0 0.00 0.01
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


48-0 - 0/0/1 .
0.00 292754 0 0.0 0.00 0.00
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0


49-0 - 0/0/6 .
0.35 292703 50 0.0 0.00 0.01
127.0.0.1 vps.xxxx.org OPTIONS * HTTP/1.0

R.o.o.t
Tue 15th Jul '08, 2:00pm
my Account's suspended now
please help

royo
Tue 15th Jul '08, 2:32pm
Have you just recently started to use this company?

eva2000
Thu 17th Jul '08, 9:16am
that's normal for vB cron to send emails for daily/weekly digests, happy birthday emails etc http://www.vbulletin.com/docs/html/scheduled_tasks_intro

you can probably disable them all via scheduled tasks in admincp

but i'd suggest moving to a more informed and less restrictive web host