[Spce-user] Memory Utilization very high since yesterday mr5.5.2

[Matthias Hohl]

Hello,

Thank you for this hint.
I also saw some logs with a2billing but not much entries...

Can you tell me in which logfile i should search for this, to get the ip information? Panel.log?

> Am 09.03.2018 um 09:07 schrieb Marco Teixeira <admin at marcoteixeira.com>:
> 
> Hello,
> Beware there are at least 3 ips massively scanning for vulnerable a2billing instances. Find them on your logs and block them at your network edge. It may be the cause for ngcppanel memory overusage.
> 
> Regards
> 
> Hohl Matthias <matthias.hohl at telematica.at> escreveu em qui, 8/03/2018 às 21:34 :
>> Hello,
>> 
>>  
>> 
>> restarting ngcp-panel => „service ngcp-panel restart”
>> 
>> did the trick…
>> 
>>  
>> 
>> after restarting it released more than 8GB RAM!
>> 
>> Let us see how it works in the next few weeks.
>> 
>>  
>> 
>> <image001.jpg>
>> 
>>  
>> 
>>  
>> 
>> Von: Spce-user [mailto:spce-user-bounces at lists.sipwise.com] Im Auftrag von Alex Lutay
>> Gesendet: Donnerstag, 8. März 2018 15:55
>> 
>> 
>> An: spce-user at lists.sipwise.com
>> Betreff: Re: [Spce-user] Memory Utilization very high since yesterday mr5.5.2
>> 
>> 
>>  
>> 
>> Hi,
>> 
>> 
>> 
>> It is always hard to trace the fast selects as they produce no
>> fingerprints anywhere. There are some cron jobs available on CE,
>> the one which can perform db selects are in /etc/cron.d/...
>> 
>> Just in case, check mysql binlog for that time, maybe some changes
>> will hint you about the SELECTS nearby... if it was a Sipwise code,
>> then normally some insert/update/delete should follow which you can
>> notice in binlog /var/lib/mysql/log-bin.*
>> 
>> On 03/08/2018 03:03 PM, Hohl Matthias wrote:
>> > BTW: is there maybe a cronjob running at every hour and 30 minutes?
>> 
>> -- 
>> Alex Lutay
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com
>> https://lists.sipwise.com/listinfo/spce-user
>> 
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com
>> https://lists.sipwise.com/listinfo/spce-user
> -- 
> Enviado do um dispositivo móvel. Sent from a mobile device.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20180309/387419d9/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2368 bytes
Desc: not available
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20180309/387419d9/attachment-0001.p7s>