server load high

[euroxsw]

The apache service use more server's resource, just have one site on this server but server load is high, anyone can advice? Thanks.
my.cnf
[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
skip-locking
skip-innodb
query_cache_limit=1M
query_cache_size=32M
query_cache_type=1
max_user_connections=25
max_connections=500
interactive_timeout=10
wait_timeout=10
connect_timeout=10
thread_cache_size=166
key_buffer=16M
join_buffer=1M
max_allowed_packet=16M
table_cache=1024
record_buffer=1M
sort_buffer_size=2M
read_buffer_size=2M
max_connect_errors=10
# Try number of CPU's*2 for thread_concurrency
thread_concurrency=8
myisam_sort_buffer_size=64M
#log-bin
server-id=1

[mysql.server]
user=mysql
basedir=/var/lib

[safe_mysqld]
err-log=/var/log/mysqld.log
pid-file=/var/lib/mysql/mysql.pid
open_files_limit=8192

[mysqldump]
quick
max_allowed_packet=16M

[mysql]
no-auto-rehash
#safe-updates

[isamchk]
key_buffer=64M
sort_buffer=64M
read_buffer=16M
write_buffer=16M

[myisamchk]
key_buffer=64M
sort_buffer=64M
read_buffer=16M
write_buffer=16M

[mysqlhotcopy]
interactive-timeout

httpd.conf
Timeout 300
KeepAlive Off
MaxKeepAliveRequests 0
KeepAliveTimeout 2
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 200
MaxRequestsPerChild 500
User nobody
Group nobody


top
154 processes: 152 sleeping, 1 running, 1 zombie, 0 stopped
CPU states: cpu user nice system irq softirq iowait idle
total 65.2% 0.0% 9.8% 0.0% 0.0% 0.0% 124.8%
cpu00 25.3% 0.0% 7.4% 0.0% 0.0% 0.0% 67.1%
cpu01 39.8% 0.0% 2.3% 0.0% 0.0% 0.0% 57.7%
Mem: 1031952k av, 785320k used, 246632k free, 0k shrd, 80936k buff
371288k active, 291116k inactive
Swap: 1831400k av, 38688k used, 1792712k free 255696k cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
5497 root 16 0 5840 5840 5692 S 43.8 0.5 0:13 1 httpd
2809 mysql 15 0 56012 53M 20900 S 8.4 5.3 176:11 0 mysqld
5575 nobody 15 0 0 0 0 Z 2.7 0.0 0:00 0 httpd <defunct>
5574 root 17 0 1272 1272 896 R 1.7 0.1 0:00 0 top
8338 root 16 0 1984 1816 1664 S 0.1 0.1 0:04 0 sshd
12784 named 19 0 2304 2008 1504 S 0.1 0.1 0:00 1 named
1 root 16 0 424 392 372 S 0.0 0.0 0:06 1 init
2 root RT 0 0 0 0 SW 0.0 0.0 0:00 0 swapper
3 root RT 0 0 0 0 SW 0.0 0.0 0:00 1 swapper
4 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 keventd
5 root 34 19 0 0 0 SWN 0.0 0.0 0:00 0 ksoftirqd/0
6 root 34 19 0 0 0 SWN 0.0 0.0 0:00 1 ksoftirqd/1
8 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 bdflush
7 root 16 0 0 0 0 SW 0.0 0.0 0:23 0 kswapd
9 root 15 0 0 0 0 SW 0.0 0.0 0:05 0 kupdated
10 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 mdrecoveryd
19 root 15 0 0 0 0 SW 0.0 0.0 0:40 0 kjournald
81 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 khubd
1184 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
1625 root 16 0 576 556 536 S 0.0 0.0 0:08 1 syslogd
1629 root 16 0 392 384 384 S 0.0 0.0 0:01 0 klogd
1640 root 16 0 364 360 308 S 0.0 0.0 0:04 1 irqbalance
2574 root 17 0 1172 1092 1056 S 0.0 0.1 0:05 0 sshd
2590 root 16 0 760 720 676 S 0.0 0.0 0:00 1 xinetd
2610 root 15 0 3208 2196 1772 S 0.0 0.2 0:03 1 chkservd
2730 root 16 0 608 596 544 S 0.0 0.0 0:00 1 crond
2752 root 18 0 1036 900 900 S 0.0 0.0 0:00 0 mysqld_safe
2924 mailnull 16 0 4704 2964 2012 S 0.0 0.2 0:17 1 eximstats
3030 cpanel 17 0 1240 928 928 S 0.0 0.0 0:00 0 stunnel-4.04loc
3040 dbus 16 0 604 520 520 S 0.0 0.0 0:00 1 dbus-daemon-1
3066 root 18 0 456 400 400 S 0.0 0.0 0:00 0 portsentry
3082 root 18 0 344 300 300 S 0.0 0.0 0:00 0 mingetty
3083 root 18 0 348 300 300 S 0.0 0.0 0:00 0 mingetty
3084 root 18 0 348 300 300 S 0.0 0.0 0:00 0 mingetty
3085 root 18 0 348 300 300 S 0.0 0.0 0:00 0 mingetty
3086 root 18 0 348 300 300 S 0.0 0.0 0:00 0 mingetty
3087 root 18 0 344 300 300 S 0.0 0.0 0:00 0 mingetty
8343 root 15 0 1368 1316 1148 S 0.0 0.1 0:00 0 bash
9201 root 35 19 6656 5492 3592 S N 0.0 0.5 0:00 0 cpanellogd
9205 root 15 0 4652 1984 1476 S 0.0 0.1 0:00 0 cppop
9220 root 15 0 5420 1936 1488 S 0.0 0.1 0:00 1 cpsrvd
12700 mailnull 15 0 1604 1532 1372 S 0.0 0.1 0:00 1 exim
12705 mailnull 23 0 1552 1480 1324 S 0.0 0.1 0:00 1 exim
12722 root 18 0 23356 19M 11388 S 0.0 1.9 0:00 0 spamd
12743 root 16 0 1624 1516 1288 S 0.0 0.1 0:00 0 antirelayd
12746 root 16 0 23840 20M 11308 S 0.0 2.0 0:00 0 spamd
12747 root 16 0 23836 20M 11336 S 0.0 2.0 0:00 1 spamd
12748 root 17 0 23836 20M 11336 S 0.0 2.0 0:00 1 spamd
12749 root 16 0 23840 20M 11476 S 0.0 2.0 0:00 0 spamd
12750 root 16 0 23840 20M 11472 S 0.0 2.0 0:00 1 spamd
13445 root 16 0 1668 1484 1420 S 0.0 0.1 0:00 1 pure-ftpd
13449 root 18 0 584 488 488 S 0.0 0.0 0:00 1 pure-authd
27725 root 16 0 1212 1104 996 S 0.0 0.1 0:00 0 postsuexecinsta
5447 mailman 21 0 4764 4760 2016 S 0.0 0.4 0:00 1 mailmanctl
5451 mailman 16 0 4648 4644 1896 S 0.0 0.4 0:00 0 python2
5452 mailman 16 0 4720 4716 1936 S 0.0 0.4 0:00 0 python2
5453 mailman 16 0 4712 4708 1936 S 0.0 0.4 0:00 1 python2
5454 mailman 16 0 4708 4704 1936 S 0.0 0.4 0:00 1 python2

[euroxsw]

ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 2052 392 ? S Aug15 0:06 init [3]
root 2 0.0 0.0 0 0 ? SW Aug15 0:00 [swapper]
root 3 0.0 0.0 0 0 ? SW Aug15 0:00 [swapper]
root 4 0.0 0.0 0 0 ? SW Aug15 0:00 [keventd]
root 5 0.0 0.0 0 0 ? SWN Aug15 0:00 [ksoftirqd/0]
root 6 0.0 0.0 0 0 ? SWN Aug15 0:00 [ksoftirqd/1]
root 8 0.0 0.0 0 0 ? SW Aug15 0:00 [bdflush]
root 7 0.0 0.0 0 0 ? SW Aug15 0:23 [kswapd]
root 9 0.0 0.0 0 0 ? SW Aug15 0:05 [kupdated]
root 10 0.0 0.0 0 0 ? SW Aug15 0:00 [mdrecoveryd]
root 19 0.0 0.0 0 0 ? SW Aug15 0:40 [kjournald]
root 81 0.0 0.0 0 0 ? SW Aug15 0:00 [khubd]
root 1184 0.0 0.0 0 0 ? SW Aug15 0:00 [kjournald]
root 1625 0.0 0.0 2348 556 ? S Aug15 0:08 syslogd -m 0
root 1629 0.0 0.0 3220 384 ? S Aug15 0:01 klogd -x
root 1640 0.0 0.0 2296 360 ? S Aug15 0:04 irqbalance
root 2574 0.0 0.1 4776 1092 ? S Aug15 0:05 /usr/sbin/sshd
root 2590 0.0 0.0 2756 720 ? S Aug15 0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 2610 0.0 0.2 8832 2196 ? S Aug15 0:03 chkservd
root 2730 0.0 0.0 2628 596 ? S Aug15 0:00 crond
root 2752 0.0 0.0 5548 900 ? S Aug15 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var
mysql 2809 0.0 5.2 71412 54628 ? S Aug15 0:35 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2920 0.0 5.2 71412 54628 ? S Aug15 0:01 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2921 0.0 5.2 71412 54628 ? S Aug15 0:08 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2923 0.1 5.2 71412 54628 ? S Aug15 6:14 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mailnull 2924 0.0 0.2 7608 2964 ? S Aug15 0:17 /usr/bin/perl /usr/local/cpanel/bin/eximstats
mysql 2925 0.1 5.2 71412 54628 ? S Aug15 6:17 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 3020 0.2 5.2 71412 54628 ? S Aug15 9:07 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
cpanel 3030 0.0 0.0 14612 928 ? S Aug15 0:00 /usr/bin/stunnel-4.04local /usr/local/cpanel/etc/stunnel/default/stun
dbus 3040 0.0 0.0 2544 520 ? S Aug15 0:00 dbus-daemon-1 --system
root 3066 0.0 0.0 1532 400 ? S Aug15 0:00 /usr/sbin/portsentry -tcp
root 3082 0.0 0.0 2496 300 tty1 S Aug15 0:00 /sbin/mingetty tty1
root 3083 0.0 0.0 2320 300 tty2 S Aug15 0:00 /sbin/mingetty tty2
root 3084 0.0 0.0 2812 300 tty3 S Aug15 0:00 /sbin/mingetty tty3
root 3085 0.0 0.0 2764 300 tty4 S Aug15 0:00 /sbin/mingetty tty4
root 3086 0.0 0.0 3260 300 tty5 S Aug15 0:00 /sbin/mingetty tty5
root 3087 0.0 0.0 2044 300 tty6 S Aug15 0:00 /sbin/mingetty tty6
mysql 11159 0.2 5.2 71412 54628 ? S Aug15 6:12 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 18048 0.2 5.2 71412 54628 ? S Aug15 6:22 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 18405 0.2 5.2 71412 54628 ? S Aug16 6:04 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 19103 0.2 5.2 71412 54628 ? S Aug16 5:50 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 19104 0.2 5.2 71412 54628 ? S Aug16 6:06 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 20327 0.2 5.2 71412 54628 ? S Aug16 6:13 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 20329 0.2 5.2 71412 54628 ? S Aug16 6:01 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 22345 0.2 5.2 71412 54628 ? S Aug16 5:59 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 23026 0.2 5.2 71412 54628 ? S Aug16 6:06 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 23029 0.2 5.2 71412 54628 ? S Aug16 5:51 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 24072 0.2 5.2 71412 54628 ? S Aug16 5:47 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 24073 0.2 5.2 71412 54628 ? S Aug16 5:52 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 24074 0.2 5.2 71412 54628 ? S Aug16 5:53 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26468 0.2 5.2 71412 54628 ? S Aug16 5:35 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26469 0.2 5.2 71412 54628 ? S Aug16 5:52 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26471 0.2 5.2 71412 54628 ? S Aug16 6:06 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2151 0.2 5.2 71412 54628 ? S Aug16 5:30 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2156 0.2 5.2 71412 54628 ? S Aug16 5:28 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2972 0.2 5.2 71412 54628 ? S Aug16 5:42 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2975 0.2 5.2 71412 54628 ? S Aug16 5:30 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 2980 0.2 5.2 71412 54628 ? S Aug16 5:43 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26292 0.2 5.2 71412 54628 ? S Aug16 5:31 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26293 0.2 5.2 71412 54628 ? S Aug16 5:11 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26294 0.2 5.2 71412 54628 ? S Aug16 5:12 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26296 0.2 5.2 71412 54628 ? S Aug16 5:15 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 26297 0.2 5.2 71412 54628 ? S Aug16 5:12 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
mysql 19119 0.4 5.2 71412 54628 ? S 08:05 3:42 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --
root 8338 0.0 0.1 8140 1816 ? S 18:13 0:04 sshd: root@pts/0
root 8343 0.0 0.1 6620 1316 pts/0 S 18:14 0:00 -bash
root 9201 0.0 0.5 9392 5492 ? SN 18:35 0:00 cpanellogd - sleeping for logs
root 9205 0.0 0.1 8172 1984 ? S 18:35 0:00 cppop - accepting on port 110
root 9220 0.0 0.1 9544 1936 ? S 18:35 0:00 cpsrvd - waiting for connections
mailnull 12700 0.0 0.1 7508 1532 ? S 18:57 0:00 /usr/sbin/exim -bd -q60m
mailnull 12705 0.0 0.1 7604 1480 ? S 18:57 0:00 /usr/sbin/exim -tls-on-connect -bd -oX 465
root 12722 0.0 1.9 26720 20240 ? S 18:57 0:00 /usr/bin/spamd -d --allowed-ips=127.0.0.1 --pidfile=/var/run/spamd.pi
root 12743 0.0 0.1 4376 1516 ? S 18:57 0:00 antirelayd
root 12746 0.0 2.0 27172 21104 ? S 18:57 0:00 spamd child
root 12747 0.0 2.0 27168 21084 ? S 18:57 0:00 spamd child
root 12748 0.0 2.0 27168 21084 ? S 18:57 0:00 spamd child
root 12749 0.0 2.0 27172 21088 ? S 18:57 0:00 spamd child
root 12750 0.0 2.0 27172 21088 ? S 18:57 0:00 spamd child
named 12784 0.0 0.1 49084 2008 ? S 18:57 0:00 /usr/sbin/named -u named
root 13445 0.0 0.1 7744 1484 ? S 19:05 0:00 pure-ftpd (SERVER)
root 13449 0.0 0.0 7700 488 ? S 19:05 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sbin/pureauth
root 27725 0.0 0.1 4804 1104 ? S 19:25 0:00 postsuexecinstall - searching for suexec problems (1494 min remain)
mailman 5447 0.0 0.4 8632 4760 ? S 21:06

[euroxsw]

0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s
mailman 5451 0.0 0.4 7848 4644 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
mailman 5452 0.0 0.4 8236 4716 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
mailman 5453 0.0 0.4 8720 4708 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
mailman 5454 0.0 0.4 7560 4704 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
mailman 5455 0.1 0.4 8548 4740 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
mailman 5456 0.0 0.4 8780 4788 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
mailman 5457 0.0 0.4 8040 4704 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
mailman 5458 0.0 0.4 8980 4700 ? S 21:06 0:00 /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --run
root 5497 0.0 0.5 13328 5840 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5503 0.7 0.9 16824 9712 ? R 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5504 0.2 0.9 16560 9440 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5505 0.6 1.0 17572 10460 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5506 1.1 0.9 16480 9360 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5507 0.9 0.9 16672 9560 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5509 0.6 0.9 16884 9764 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5510 0.3 0.9 16704 9592 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5511 0.9 0.9 16744 9636 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5512 0.7 0.9 16832 9708 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5513 0.8 0.9 16740 9632 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5514 0.4 0.9 16628 9476 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5515 0.2 0.9 16624 9504 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5516 0.6 0.9 16688 9576 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5517 0.7 0.9 16748 9636 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5518 0.3 0.9 16580 9460 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5519 0.5 0.9 16452 9384 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5520 0.1 0.8 16312 9168 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5521 0.4 0.9 16724 9612 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5522 0.4 1.0 17688 10504 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5523 0.3 0.9 16544 9428 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5524 0.9 1.0 17636 10500 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5525 0.8 0.9 16844 9732 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5526 0.8 0.9 16996 9656 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5527 1.2 1.0 17696 10584 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5528 0.9 0.9 16456 9348 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5529 0.7 0.9 16840 9728 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5530 0.9 0.9 16608 9500 ? S 21:08 0:02 /usr/local/apache/bin/httpd -DSSL
nobody 5531 0.4 0.9 16780 9660 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5532 0.7 1.0 18224 10932 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5534 0.8 0.9 16932 9820 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5535 0.6 0.9 16828 9656 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5536 0.5 0.9 16760 9640 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5537 0.7 0.9 16752 9628 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5538 0.6 0.9 16620 9548 ? S 21:08 0:01 /usr/local/apache/bin/httpd -DSSL
nobody 5541 0.3 0.9 16724 9604 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5543 0.3 0.9 16928 9812 ? S 21:08 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5980 0.0 0.5 13328 5880 ? S 21:10 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5985 0.8 0.9 16492 9372 ? S 21:10 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5986 0.1 0.8 15384 8268 ? S 21:10 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 5997 0.9 1.0 17628 10444 ? S 21:10 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6000 1.5 0.9 16832 9712 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6001 0.5 0.9 16656 9540 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6005 0.0 0.5 13328 5976 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6006 1.1 0.9 16512 9372 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6007 0.8 0.8 16352 9232 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6008 0.6 0.8 15476 8380 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6021 2.0 0.9 16740 9560 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6022 1.5 0.8 16032 8892 ? R 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6023 0.0 0.5 13328 5880 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6024 0.8 0.8 16384 9256 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6025 0.9 0.9 16448 9316 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6026 1.0 0.8 16320 9196 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6027 0.8 0.8 15724 8556 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6028 0.1 0.5 13328 5980 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6029 0.2 0.5 13328 5984 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6030 0.0 0.5 13388 5992 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6032 1.2 0.9 16448 9316 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6033 2.3 0.9 16628 9484 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6035 1.8 0.8 16368 9236 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6037 4.0 1.0 17552 10368 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL
nobody 6038 0.0 0.5 13328 5976 ? S 21:11 0:00 /usr/local/apache/bin/httpd -DSSL

[CollateralFX]

If I'm not misstaken that looks like an HTTPD flood from someone attacking you. Do you have any enemies or someone who would want to attack you? My suggestion is to install some security such as Mod_security and otheres. A good tutorial site is http://www.eth0.us for getting information on how to install and configure these mods. Just my suggestion mate.

[euroxsw]

Yes, I already installed mod_scurity and apf but still have this problem. In top, apache show run as root, but I set it to use nobody in httpd.conf have relation with this?

[CollateralFX]

Never had that problem mate, maybe someone else has just keep waiting.

[checked]

Yes, it seems like a DOS Attack, please contact your service provider immediately. They may be able to help you.