I need some help securing a server

[santibm]

Hi!

I think today i had something going on in a server i have with directadmin on it, i am quite busy now with some other projects, i would like to find some one to have a look at it

This is the mrtg graph: http://www.maquinadns2.com/mrtg/tcp.html

Thanks!

This is the copy of the top results this morning:
top - 08:05:16 up 21:15, 1 user, load average: 51.40, 185.36, 295.13
Tasks: 226 total, 3 running, 223 sleeping, 0 stopped, 0 zombie
Cpu(s): 57.8%us, 31.2%sy, 2.3%ni, 0.0%id, 8.0%wa, 0.0%hi, 0.7%si, 0.0%st
Mem: 969668k total, 942792k used, 26876k free, 28156k buffers
Swap: 3068404k total, 109032k used, 2959372k free, 438864k cached


PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
32160 apache 20 0 33484 19m 3392 R 5.4 2.1 0:00.67 httpd
30068 apache 20 0 34440 21m 3572 R 3.8 2.2 0:02.35 httpd
31814 apache 20 0 33856 20m 3400 R 3.5 2.1 0:00.73 httpd
32056 apache 20 0 33712 20m 3400 R 3.2 2.1 0:01.08 httpd
32143 apache 20 0 33616 19m 3400 R 2.9 2.1 0:01.14 httpd
30942 mail 20 0 11484 2956 2244 S 2.2 0.3 0:00.07 exim
30055 apache 20 0 36356 23m 3632 S 1.3 2.4 0:01.48 httpd
29826 apache 20 0 34116 20m 3428 D 0.6 2.2 0:03.96 httpd
29827 apache 20 0 34108 20m 3428 D 0.6 2.2 0:04.03 httpd
30508 apache 20 0 34132 20m 3552 D 0.6 2.2 0:03.29 httpd
29830 apache 20 0 34108 20m 3428 D 0.3 2.2 0:04.03 httpd
29882 apache 20 0 46056 32m 3592 D 0.3 3.4 0:07.34 httpd
31248 apache 20 0 33844 20m 3476 D 0.3 2.2 0:03.32 httpd
31908 root 20 0 2424 1120 808 R 0.3 0.1 0:00.11 top
1 root 20 0 2112 504 476 S 0.0 0.1 0:01.14 init
2 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kthreadd
3 root RT -5 0 0 0 S 0.0 0.0 0:00.00 migration/0
4 root 15 -5 0 0 0 S 0.0 0.0 0:00.05 ksoftirqd/0
5 root RT -5 0 0 0 S 0.0 0.0 0:00.00 watchdog/0
6 root 15 -5 0 0 0 S 0.0 0.0 0:00.03 events/0
7 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 khelper
58 root 15 -5 0 0 0 R 0.0 0.0 0:15.07 kblockd/0
61 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kacpid
62 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kacpi_notify
192 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 cqueue/0
194 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ksuspend_

 

[SeLLeRoNe]

Well the load from apache is not that high and tcp connectionts are not so many.. my server in this moment have 3x yours connectionts withotu problem.

I would suggest you to use mod_ruid2, check my.cnf and php.ini and put a firewall/antivirus/antispam for improove security aswell.

If you need someone that do the job for you here you can find many people, i would suggest zeiter and jlasman.

Im also avaible if needed, send PM for quote.

Regards

 

[zEitEr]

As Andrea already mentioned, you might want to hire somebody from these forums. Look at Advertising sub-forum.

 

[scsi]

I would start by adding more ram 1gb isnt much now days.

 

[santibm]

Thanks for your answers! I will try to have someone to look at it