Can anybody tell me please what this process is ?
29971 nobody 0 99.9 0.0 /usr/local/apache/bin/httpd -DSSL
31653 nobody 0 99.7 0.0 /usr/local/apache/bin/httpd -DSSL
Can anybody tell me please what this process is ?
29971 nobody 0 99.9 0.0 /usr/local/apache/bin/httpd -DSSL
31653 nobody 0 99.7 0.0 /usr/local/apache/bin/httpd -DSSL
When you see this kind of impact, make a note of the PID and then go to WHM and run the 'apache status' at that time and see if you can tell what apache was serving to the client. Doing this might get you a quick idea if it is one offending account, but you might have to do it several times. It could be some kind of script or exploited add-on.
"A dog has raised it’s hind leg on the age of nevermore !"
-- Rolf
Thankyou , I found it was an eggbott running