We are getting hundred of emails from Alarmbell

[e4hats]

Hi,

It is happening again. We are getting hundreds of emails from Alarmbell system as follow.

ALARMBELL (108.210.184.74) [jeewoongkim84]: Existing admin user 'jeewoongkim84' updated
ALARMBELL (108.210.184.74) [christinekim83]: Existing admin user 'christinekim83' updated

Above two accounts are actual working Magento user account and IP also valid office IP address.
We changed magento user id and even formatted computers after the same issues happened around a month ago.

Please advise me.

Thank you,
David

[miguelbalparda]

Do you have logs enabled? You should see a log entry per email sent, can you check that?

[e4hats]

Hi,
The user logged in around 8am PST and nothing happened but after her second time logged in around 9:30am PST, it started to send mass emails.

2016-10-14T16:33:49+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Successful admin user log in
2016-10-14T16:33:49+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:33:55+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:55+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:33:56+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:56+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:33:57+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:57+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:33:58+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:58+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:33:59+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:33:59+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:34:00+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:00+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:34:01+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:01+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:34:02+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:02+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:34:03+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:03+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:34:04+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:04+00:00 DEBUG (7): Sending email from [email protected] to [email protected]
2016-10-14T16:34:05+00:00 DEBUG (7): ALARMBELL (108.210.184.74) [janetlee85]: Existing admin user 'janetlee85' updated
2016-10-14T16:34:05+00:00 DEBUG (7): Sending email from [email protected] to [email protected]

Please see attached.

Thank you.
David

system.xlsx

[e4hats]

Just wonder "from email" and "to email" are set to same "[email protected]". Do you think this can cause the problem?

Thank you
David

[miguelbalparda]

No I don't think the from and to email is the problem, can you show me the plugins you have installed? My best guess so far is another module firing the same event over and over again.

[e4hats]

Hi,

You want me to give you a list or access to our magento backend or ftp?

Thank you
David

[miguelbalparda]

No access just a list.

[miguelbalparda]

Any news on this? My best guess with the limited information I have is another module firing the same event 1000 times.

[e4hats]

Hi,

Here is a list we have installed.

• Atwix - Sitemap
• CueBlocks - SitemapEnhancedPlus
• EkoInternetMarketing - AllReviews
• Fishpig - Wordpress
• Nexcessnet - Alarmbell, Turpentine
• Plumrocket - Ajaxcart, NewsletterPopup, OneStepCheckout, SlidingBlock, SocialLogin, WhoBoughtThisAlsoBoutht
• Vladimirpopov - Webforms

Thanks
David

[miguelbalparda]

Not related, but you might want to look at this.
Regarding the issue, is it still happening? From those modules I can't tell anything strange, one way to debug this is to log every event call to try to find the cause, but since it only happens from time to time it might be an overkill.

[e4hats]

Hi,

No, it was stopped.
My co-worker said it was happened after clicking "Edit" link on Catalog > Manage Catalog.
She looked broken page, like missing CSS, so she just closed and reopen that page.

Sorry, I had to describe this first.

Thank you
David

[e4hats]

Hi,
It happened again by two different login accounts today. I captured screen shot. First one I un-plugged internet line from computer quickly and disabled user account from magento. I could minimize mass emailing compare to second one. Second one I couldn't realized quickly.
Please see attached.

Thank you

system-102116.xlsx