Strange SPAM CPU Usage

[mrtsoftware]

Hi,
I noticed that it is occured very high CPU usage as you see at the attachment and below,

IP                             Date / Time              Size / Bytes                 URL
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
160.153.161.238    28.11.2016 06:31     97104 bytes               Osclass (v.361) -
.....İt goes like this and endless records...

I suppose that this is created by a spam bot,
I do not know how to prevent this....
Can someone give me some suggestions how to solve it

Thank you all

[_CONEJO]

Block that IP, if you are using a VPS , just ssh into your machine and

Code: [Select]

iptables -A INPUT 160.153.161.238 -j DROP

If you use cpanel or some other control panel, there should be options available to block it, or just tell your hosting provider

[dev101]

That IP is GoDaddy Hosting, are you sure it's not your own IP and that you messed something up?

(if you host your site there, or use their domain)

[Aficionado]

That is Osclass doing something, not spam or hack or whatever.

The Signature is there and DONT DROP THAT IP or BLOCK.

Check first. As dev101 said probably this is YOUR ip.

[_CONEJO]

That is Osclass doing something, not spam or hack or whatever.

The Signature is there and DONT DROP THAT IP or BLOCK.

Check first. As dev101 said probably this is YOUR ip.

Right, I was too fast to suggest the iptables solution.


Access your admin panel, go to settings > general > and disable AUTOCRON   Let's see if that could be the cause

[Aficionado]

Access your admin panel, go to settings > general > and disable AUTOCRON   Let's see if that could be the cause

At some point this internal cron problem should be examined and maybe fixed. While my Wordpress internal cron works like a charm, the same doesn't with Osclass. Same hosting plan, 100%. I had to switch to external Cron.

There are a lot of posts for this here.

[mrtsoftware]

I just read your messages, thanks all!
It is IP of GODADDY and it is not my IP.
I did not block IP and disable AUTOCRON,

I have reinstalled new OSCLASS and restored database + oc-content / files
At this moment site is good, I am observing site and traffic.
If it happens again, I will follow your recommends ( _CONEJO, Aficionado )

[Aficionado]

I just read your messages, thanks all!
It is IP of GODADDY and it is not my IP.
I did not block IP and disable AUTOCRON,

I have reinstalled new OSCLASS and restored database + oc-content / files
At this moment site is good, I am observing site and traffic.
If it happens again, I will follow your recommends ( _CONEJO, Aficionado )

Good. The thing is ... a CRON is needed. If you disable the Internal Cron you MUST enable an external one from within your hosting plan. You can't use properly Osclass without CRON.

[mrtsoftware]

Yes I always enable CRON section because OSCLASS is recommending this, thanks for advices..I will do your recommends if it happens again and I'll write here results...

[Aficionado]

Yes I always enable CRON section because OSCLASS is recommending this, thanks for advices..I will do your recommends if it happens again and I'll write here results...

Maybe you didn't got what i said. Are you using RIGHT now a CRON ?

[mrtsoftware]

This problem repeated again, now it uses high CPU resources..
http://www.nannyturkey.com/oc-admin/ can not be found too...
I am really suprized why this problem is repeating 3/4 times in each mounth...

[mrtsoftware]

160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147432        Osclass (v.361) - /
160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147440        Osclass (v.361) - /
160.153.161.238 12.12.2016 16:14   0             Osclass (v.361) - /
160.153.161.238 12.12.2016 15:59   147440        Osclass (v.361) - /

.........
İt goes thousands records every seconds ...How to stop this?

[Aficionado]

I don't really understand. A few weeks back you posted:

Hi everbody,
as Aficionado adviced, I stopped to work with hostdime, and I have immigrated my web to another hosting, now it is working fine..
Thank you for advice Aficionado!

But now you post again the same. You said it is WORKING. Now you say it is NOT WORKING.

How that can be ? Same questions all over again and again without any sense for us.

We told you what to do. What to check. You didn't even replied to my last question.

[Aficionado]

İt goes thousands records every seconds ...How to stop this?

Also IMPOSSIBLE to create thousands records per second. Can't happen, since it will bring down the whole server. OR this is the cause your site is offline (godaddy removed it temporarily because of abuse of the server) ?

[mrtsoftware]

Yes server was down, to do not affect other sites I have changed root folder name and therefore it is off...
My previous solution was a new installation and restore backup files...But it goes max 1 week and it repeats again...
Yes I have selected OSCLASS cron. I am using osclass cron. Should I disable this?