apache and lots of read requests ???

zye

Well-Known Member
Dec 6, 2002
122
4
168
hi

suddenly apache goes way up - with a lot of reading requests but no info is given @ Host VHost and Request - it just states ?

if someone has any idea whats going on please help me out

thx
zye


running: WHM 10.8.0 cPanel 10.9.0-C131
CentOS 4.4 i686 - WHM X v3.1.0

Parent Server Generation: 0
Server uptime: 21 minutes 3 seconds
Total accesses: 15801 - Total Traffic: 59.5 MB
CPU Usage: u9.48 s3.39 cu33.63 cs9.34 - 4.42% CPU load
12.5 requests/sec - 48.3 kB/second - 3950 B/request
145 requests currently being processed, 5 idle servers

1-0 16298 0/121/121 R 0.52 162 0 0.0 0.48 0.48 ? ? ..reading..
2-0 16300 0/146/146 R 1.52 162 0 0.0 0.42 0.42 ? ? ..reading..
3-0 16301 0/50/50 R 0.12 271 0 0.0 0.16 0.16 ? ? ..reading..
4-0 16302 0/271/271 R 1.20 47 503 0.0 0.69 0.69 ? ? ..reading..
5-0 16331 0/265/265 R 1.55 168 0 0.0 0.87 0.87 ? ? ..reading..
6-0 16332 0/112/112 R 0.26 47 0 0.0 0.16 0.16 ? ? ..reading..
7-0 16333 0/220/220 R 0.63 160 1 0.0 0.79 0.79 ? ? ..reading..
8-0 16336 0/73/73 R 0.28 46 0 0.0 0.20 0.20 ? ? ..reading..
9-0 16337 0/110/110 R 0.53 36 0 0.0 0.08 0.08 ? ? ..reading..
10-0 16338 0/48/48 R 0.75 161 1 0.0 0.32 0.32 ? ? ..reading..
11-0 16339 0/62/62 R 0.07 263 1 0.0 0.23 0.23 ? ? ..reading..
 

zye

Well-Known Member
Dec 6, 2002
122
4
168
to make it maybe more understandable - server load is no issue but a lot of apache processes are spawning for not really a request - i could not find anything anywhere - maybe this is an attack or badly scripted local website which happends this behavior ??

login to whm - then - apache status brings the following

Server uptime: 8 hours 10 minutes 20 seconds
Total accesses: 284794 - Total Traffic: 1.1 GB
CPU Usage: u174.98 s70.7 cu568.07 cs146.08 - 3.26% CPU load
9.68 requests/sec - 38.7 kB/second - 4094 B/request
90 requests currently being processed, 29 idle servers

RRRRRRRRRRRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRWRRR__RR_KR_R_R
_RRKRR_RKRRRRRRRRRRRRRRRRRRR_R________K___K____K_K_____.........



Srv PID Acc M CPU SS Req Conn Child Slot Host VHost Request
0-0 16296 0/4413/4413 R 28.91 172 1 0.0 16.66 16.66 ? ? ..reading..
1-0 16298 0/4603/4603 R 26.25 172 84 0.0 16.61 16.61 ? ? ..reading..
2-0 16300 0/4414/4414 R 30.62 171 28 0.0 20.30 20.30 ? ? ..reading..
3-0 16301 0/4666/4666 R 27.26 168 21 0.0 15.95 15.95 ? ? ..reading..
4-0 16302 0/4704/4704 R 27.21 172 7483 0.0 19.13 19.13 ? ? ..reading..
5-0 16331 0/4839/4839 R 26.81 168 15 0.0 19.21 19.21 ? ? ..reading..
6-0 16332 0/4221/4221 R 24.81 171 0 0.0 15.96 15.96 ? ? ..reading..
7-0 16333 0/4176/4176 R 25.13 172 18 0.0 18.04 18.04 ? ? ..reading..
8-0 16336 0/4307/4307 R 29.26 172 25 0.0 15.45 15.45 ? ? ..reading..
9-0 16337 0/4306/4306 R 27.11 172 1 0.0 14.41 14.41 ? ? ..reading..
10-0 16338 0/4647/4647 R 25.41 172 9 0.0 26.45 26.45 ? ? ..reading..
11-0 16339 0/4673/4673 W 21.26 1 0 0.0 18.08 18.08 87.251.136.133 www.domain.com GET /file.mp3 HTTP/1.1
12-0 16340 0/5001/5001 R 34.39 172 0 0.0 18.94 18.94 ? ? ..reading..
13-0 16341 0/4696/4696 R 30.68 171 1 0.0 22.30 22.30 ? ? ..reading..
14-0 16342 0/4335/4335 R 28.19 171 1 0.0 20.33 20.33 ? ? ..reading..
15-0 16343 0/4311/4311 R 25.62 171 1 0.0 20.48 20.48 ? ? ..reading..
16-0 16344 0/4562/4562 R 31.01 172 343 0.0 19.52 19.52 ? ? ..reading..
17-0 16345 0/5103/5103 R 27.03 171 22 0.0 17.17 17.17 ? ? ..reading..
18-0 16346 0/4921/4921 R 25.75 172 1 0.0 15.39 15.39 ? ? ..reading..
19-0 16347 0/4809/4809 R 27.87 172 0 0.0 18.58 18.58 ? ? ..reading..
20-0 16357 0/4689/4689 R 24.67 172 0 0.0 17.32 17.32 ? ? ..reading..
21-0 16358 0/4739/4739 R 27.60 168 9 0.0 16.60 16.60 ? ? ..reading..
22-0 16359 0/4824/4824 R 24.16 172 161 0.0 18.43 18.43 ? ? ..reading..
23-0 16360 0/4409/4409 R 27.67 172 1 0.0 16.10 16.10 ? ? ..reading..
24-0 16361 0/4973/4973 R 25.93 171 22 0.0 15.90 15.90 ? ? ..reading..
25-0 16362 0/4206/4206 R 24.16 172 0 0.0 45.27 45.27 ? ? ..reading..
26-0 16363 0/4288/4288 R 23.04 172 1 0.0 17.01 17.01 ? ? ..reading..
27-0 16364 0/4461/4461 R 27.26 171 5 0.0 18.60 18.60 ? ? ..reading..
28-0 16365 0/4558/4558 R 24.96 172 1 0.0 34.68 34.68 ? ? ..reading..
29-0 16366 0/4645/4645 R 33.70 171 1 0.0 18.18 18.18 ? ? ..reading..
30-0 16367 0/4957/4957 R 26.13 171 1 0.0 16.32 16.32 ? ? ..reading..
31-0 16368 0/4706/4706 R 25.70 172 62 0.0 16.73 16.73 ? ? ..reading..
32-0 16369 0/4532/4532 R 23.66 172 0 0.0 19.62 19.62 ? ? ..reading..
33-0 16370 0/4586/4586 R 34.63 171 6 0.0 22.81 22.81 ? ? ..reading..
34-0 16371 0/4578/4578 R 22.40 171 3 0.0 15.76 15.76 ? ? ..reading..
35-0 32743 0/188/4747 R 1.64 172 13 0.0 0.67 14.56 ? ? ..reading..
36-0 7536 0/183/4316 R 0.88 171 2 0.0 0.56 16.75 ? ? ..reading..
37-0 19144 0/0/4329 R 0.69 172 0 0.0 0.00 15.77 ? ? ..reading..
38-0 19149 0/0/3397 R 0.06 172 0 0.0 0.00 12.06 ? ? ..reading..
39-0 19198 0/0/3312 R 0.00 170 0 0.0 0.00 12.52 ? ? ..reading..
40-0 19195 0/0/3702 R 0.06 171 0 0.0 0.00 11.31 ? ? ..reading..
41-0 19199 0/0/2777 R 0.00 170 0 0.0 0.00 9.74 ? ? ..reading..
42-0 19208 0/0/3128 R 0.00 169 0 0.0 0.00 11.12 ? ? ..reading..
43-0 19209 0/0/2608 R 0.00 169 0 0.0 0.00 8.91 ? ? ..reading..
44-0 19210 0/0/2641 R 0.00 169 0 0.0 0.00 8.83 ? ? ..reading..
45-0 19211 0/0/1946 R 0.05 169 0 0.0 0.00 9.86 ? ? ..reading..
46-0 19220 0/0/1853 R 0.06 168 0 0.0 0.00 7.65 ? ? ..reading..
47-0 19221 0/0/1787 R 0.07 168 0 0.0 0.00 6.98 ? ? ..reading..
48-0 19222 0/0/1900 R 0.03 168 0 0.0 0.00 6.77 ? ? ..reading..

any infos would be greatly apprechiated

thx
zye
 

Attachments

Last edited: