High load

9

993ti

Verified User
Joined
May 4, 2007
Messages
72
This is surely waaaaay wrong.
Look at the time :S
Code: 
top - 13:26:46 up 10 days, 19:48, 1 user, load average: 264.10, 231.11, 160.75
 Tasks: 470 total, 276 running, 194 sleeping, 0 stopped, 0 zombie
 Cpu(s): 2.9%us, 34.3%sy, 0.0%ni, 62.8%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
 Mem: 16339480k total, 12289400k used, 4050080k free, 607008k buffers
 Swap: 7811064k total, 0k used, 7811064k free, 6430540k cached

Code: 
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 
5497 admin 20 0 284m 73m 54m R 3 0.5 5:47.24 /usr/sbin/httpd -k start -DSSL 
5806 admin 20 0 278m 47m 35m R 3 0.3 1:44.76 /usr/sbin/httpd -k start -DSSL 
5815 admin 20 0 290m 66m 41m R 3 0.4 1:36.79 /usr/sbin/httpd -k start -DSSL 
5904 admin 20 0 280m 30m 16m R 3 0.2 1:12.80 /usr/sbin/httpd -k start -DSSL 
5912 admin 20 0 280m 36m 21m R 3 0.2 1:11.06 /usr/sbin/httpd -k start -DSSL 
6031 admin 20 0 290m 34m 10m R 3 0.2 0:49.62 /usr/sbin/httpd -k start -DSSL 
7429 admin 20 0 276m 14m 4336 R 3 0.1 0:21.03 /usr/sbin/httpd -k start -DSSL 
5701 admin 20 0 279m 40m 27m R 2 0.3 2:48.53 /usr/sbin/httpd -k start -DSSL 
5739 admin 20 0 283m 54m 37m R 2 0.3 3:32.41 /usr/sbin/httpd -k start -DSSL 
5767 admin 20 0 279m 46m 32m R 2 0.3 2:27.29 /usr/sbin/httpd -k start -DSSL 
5768 admin 20 0 281m 45m 29m R 2 0.3 2:20.80 /usr/sbin/httpd -k start -DSSL 
5781 admin 20 0 281m 44m 28m R 2 0.3 2:04.85 /usr/sbin/httpd -k start -DSSL 
5782 admin 20 0 291m 50m 25m R 2 0.3 2:13.04 /usr/sbin/httpd -k start -DSSL 
5784 admin 20 0 282m 36m 19m R 2 0.2 2:21.41 /usr/sbin/httpd -k start -DSSL 
5787 admin 20 0 285m 55m 36m R 2 0.3 2:02.59 /usr/sbin/httpd -k start -DSSL 
5792 admin 20 0 282m 44m 28m R 2 0.3 2:03.03 /usr/sbin/httpd -k start -DSSL 
5797 admin 20 0 278m 35m 23m R 2 0.2 2:09.69 /usr/sbin/httpd -k start -DSSL 
5801 admin 20 0 284m 55m 36m R 2 0.3 1:46.55 /usr/sbin/httpd -k start -DSSL 
5804 admin 20 0 278m 30m 17m R 2 0.2 1:47.00 /usr/sbin/httpd -k start -DSSL 
5805 admin 20 0 278m 24m 11m R 2 0.2 2:00.22 /usr/sbin/httpd -k start -DSSL 
5823 admin 20 0 276m 25m 15m R 2 0.2 1:45.86 /usr/sbin/httpd -k start -DSSL 
5824 admin 20 0 281m 41m 25m R 2 0.3 1:44.06 /usr/sbin/httpd -k start -DSSL 
5831 admin 20 0 278m 27m 14m R 2 0.2 1:42.70 /usr/sbin/httpd -k start -DSSL 
5832 admin 20 0 282m 38m 22m R 2 0.2 1:42.09 /usr/sbin/httpd -k start -DSSL 
5857 admin 20 0 276m 25m 14m R 2 0.2 1:34.77 /usr/sbin/httpd -k start -DSSL 
5858 admin 20 0 278m 30m 17m R 2 0.2 1:33.59 /usr/sbin/httpd -k start -DSSL 
5860 admin 20 0 283m 47m 30m R 2 0.3 1:28.08 /usr/sbin/httpd -k start -DSSL 
5866 admin 20 0 291m 52m 27m R 2 0.3 1:22.89 /usr/sbin/httpd -k start -DSSL 
5867 admin 20 0 281m 43m 28m R 2 0.3 1:15.90 /usr/sbin/httpd -k start -DSSL 
5872 admin 20 0 278m 23m 11m R 2 0.1 1:32.58 /usr/sbin/httpd -k start -DSSL 
5886 admin 20 0 283m 52m 35m R 2 0.3 1:22.84 /usr/sbin/httpd -k start -DSSL 
5887 admin 20 0 276m 25m 14m R 2 0.2 1:21.05 /usr/sbin/httpd -k start -DSSL
 
I'd recommend checking /server-status (enable it in /etc/httpd/conf/extra/httpd-info.conf) for more info or Apache access logs. It might be a brute-force attack using the POST requests (most likely to a popular CMS like WordPress, Joomla etc.).
 
I do use Wordpress, i'll enable and check server-status and report back. Thanks :)
 
Getting a page not found when i enable it (using nginx-apache btw).
Edit: Got it to work with Nginx but still no clue.
Lots of GET requests but those seem normal, yet a high load :S
 
Last edited:
Trying Apache only now and using a high profile on CSF and see what it does.
I have absolutely no clue what's going on :S
It's also always the same command: /usr/sbin/httpd -k start -DSSL
 
Last edited:
You must log in or register to reply here.
Back
Top