[Spce-user] Memory Utilization very high since yesterday mr5.5.2

[Marco Teixeira]

Hi,
In a shell execute:
grep a2billing /var/log/ngcp/nginx/error.log



On Fri, Mar 9, 2018 at 8:33 AM, Matthias Hohl <matthias.hohl at telematica.at>
wrote:

> Hello,
>
> Thank you for this hint.
> I also saw some logs with a2billing but not much entries...
>
> Can you tell me in which logfile i should search for this, to get the ip
> information? Panel.log?
>
> Am 09.03.2018 um 09:07 schrieb Marco Teixeira <admin at marcoteixeira.com>:
>
> Hello,
> Beware there are at least 3 ips massively scanning for vulnerable
> a2billing instances. Find them on your logs and block them at your network
> edge. It may be the cause for ngcppanel memory overusage.
>
> Regards
>
> Hohl Matthias <matthias.hohl at telematica.at> escreveu em qui, 8/03/2018 às
> 21:34 :
>
>> Hello,
>>
>>
>>
>> restarting ngcp-panel => „service ngcp-panel restart”
>>
>> did the trick…
>>
>>
>>
>> after restarting it released more than 8GB RAM!
>>
>> Let us see how it works in the next few weeks.
>>
>>
>>
>> <image001.jpg>
>>
>>
>>
>>
>>
>> *Von:* Spce-user [mailto:spce-user-bounces at lists.sipwise.com] *Im
>> Auftrag von *Alex Lutay
>> *Gesendet:* Donnerstag, 8. März 2018 15:55
>>
>>
>> *An:* spce-user at lists.sipwise.com
>> *Betreff:* Re: [Spce-user] Memory Utilization very high since yesterday
>> mr5.5.2
>>
>>
>>
>> Hi,
>>
>>
>>
>> It is always hard to trace the fast selects as they produce no
>> fingerprints anywhere. There are some cron jobs available on CE,
>> the one which can perform db selects are in /etc/cron.d/...
>>
>> Just in case, check mysql binlog for that time, maybe some changes
>> will hint you about the SELECTS nearby... if it was a Sipwise code,
>> then normally some insert/update/delete should follow which you can
>> notice in binlog /var/lib/mysql/log-bin.*
>>
>> On 03/08/2018 03:03 PM, Hohl Matthias wrote:
>> > BTW: is there maybe a cronjob running at every hour and 30 minutes?
>>
>> --
>> Alex Lutay
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com
>> https://lists.sipwise.com/listinfo/spce-user
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com
>> https://lists.sipwise.com/listinfo/spce-user
>>
> --
> Enviado do um dispositivo móvel. Sent from a mobile device.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20180313/c75ce88e/attachment-0001.html>