We are getting hundred of emails from Alarmbell
e4hats opened this issue · 11 comments
Hi,
It is happening again. We are getting hundreds of emails from Alarmbell system as follow.
ALARMBELL (108.210.184.74) [jeewoongkim84]: Existing admin user 'jeewoongkim84' updated
ALARMBELL (108.210.184.74) [christinekim83]: Existing admin user 'christinekim83' updated
Above two accounts are actual working Magento user account and IP also valid office IP address.
We changed magento user id and even formatted computers after the same issues happened around a month ago.
Please advise me.
Thank you,
David
Do you have logs enabled? You should see a log entry per email sent, can you check that?
Hi,
The user logged in around 8am PST and nothing happened but after her second time logged in around 9:30am PST, it started to send mass emails.
2016-10-14T16:33:49+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Successful admin user log in
2016-10-14T16:33:49+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:33:55+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:55+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:33:56+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:56+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:33:57+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:57+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:33:58+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:58+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:33:59+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:59+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:34:00+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:00+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:34:01+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:01+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:34:02+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:02+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:34:03+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:03+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:34:04+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:04+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
2016-10-14T16:34:05+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:05+00:00 DEBUG (7): Sending email from info@e4hats.com to info@e4hats.com
Please see attached.
Thank you.
David
Just wonder "from email" and "to email" are set to same "info@e4hats.com". Do you think this can cause the problem?
Thank you
David
No I don't think the from and to email is the problem, can you show me the plugins you have installed? My best guess so far is another module firing the same event over and over again.
Hi,
You want me to give you a list or access to our magento backend or ftp?
Thank you
David
No access just a list.
Any news on this? My best guess with the limited information I have is another module firing the same event 1000 times.
Hi,
Here is a list we have installed.
- Atwix - Sitemap
- CueBlocks - SitemapEnhancedPlus
- EkoInternetMarketing - AllReviews
- Fishpig - Wordpress
- Nexcessnet - Alarmbell, Turpentine
- Plumrocket - Ajaxcart, NewsletterPopup, OneStepCheckout, SlidingBlock, SocialLogin, WhoBoughtThisAlsoBoutht
- Vladimirpopov - Webforms
Thanks
David
Not related, but you might want to look at this.
Regarding the issue, is it still happening? From those modules I can't tell anything strange, one way to debug this is to log every event call to try to find the cause, but since it only happens from time to time it might be an overkill.
Hi,
No, it was stopped.
My co-worker said it was happened after clicking "Edit" link on Catalog > Manage Catalog.
She looked broken page, like missing CSS, so she just closed and reopen that page.
Sorry, I had to describe this first.
Thank you
David
Hi,
It happened again by two different login accounts today. I captured screen shot. First one I un-plugged internet line from computer quickly and disabled user account from magento. I could minimize mass emailing compare to second one. Second one I couldn't realized quickly.
Please see attached.
Thank you
system-102116.xlsx