Apache Crashing

[Nico]

[Thu Aug 11 07:11:20 2005] [error] server reached MaxClients setting, consider raising the MaxClients setting

I started gettting this yesterday and it's been fairly persistent. I raised the MaxClients settings by 150 and it still crashes and in a hurry.

looking over the Apache status in WHM I have many lines like this:

0-0 15857 0/0/0 R 0.00 92 0 0.0 0.00 0.00 ? ? ..reading..
1-0 15858 0/0/0 R 0.00 92 0 0.0 0.00 0.00 ? ? ..reading..
2-0 15859 0/0/0 R 0.00 92 0 0.0 0.00 0.00 ? ? ..reading..
3-0 15860 0/0/0 R 0.00 92 0 0.0 0.00 0.00 ? ? ..reading..
4-0 15861 0/0/0 R 0.00 92 0 0.0 0.00 0.00 ? ? ..reading..
5-0 15864 0/0/0 R 0.00 91 0 0.0 0.00 0.00 ? ? ..reading..
6-0 15876 0/1/1 R 0.00 90 560 0.0 0.03 0.03 ? ? ..reading..
7-0 15877 0/0/0 R 0.00 90 0 0.0 0.00 0.00 ? ? ..reading..
8-0 15885 0/0/0 R 0.00 89 0 0.0 0.00 0.00 ? ? ..reading..
9-0 15886 0/4/4 R 0.03 70 0 0.0 0.00 0.00 ? ? ..reading..
10-0 15887 0/0/0 R 0.00 89 0 0.0 0.00 0.00 ? ? ..reading..
11-0 15888 0/0/0 R 0.00 89 0 0.0 0.00 0.00 ? ? ..reading..
12-0 15902 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
13-0 15903 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
14-0 15904 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
15-0 15905 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
16-0 15906 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
17-0 15907 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
18-0 15908 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
19-0 15909 0/0/0 R 0.00 88 0 0.0 0.00 0.00 ? ? ..reading..
20-0 15911 0/0/0 R 0.00 87 0 0.0 0.00 0.00 ? ? ..reading..
21-0 15912 0/0/0 R 0.00 87 0 0.0 0.00 0.00 ? ? ..reading..
22-0 15913 0/0/0 R 0.00 87 0 0.0 0.00 0.00 ? ? ..reading..
23-0 15914 0/0/0 R 0.00 87 0 0.0 0.00 0.00 ? ? ..reading..
24-0 15915 0/0/0 R 0.00 87 0 0.0 0.00 0.00 ? ? ..reading..
25-0 15916 0/0/0 R 0.00 87 0 0.0 0.00 0.00 ? ? ..reading..


Any suggestions on what may be causing this?

 

[dalem]

you someone attacking one of your sites find the ofending ip by looking through the logs and block them

last time i saw this on one of my servers there was 3 ips attacking an old coppy of VB

 

[AndyReed]

You'll have to patch all Php based applications such as: PhpBB, osTicket, and PhpNuke. Overall, you need to secure your server and stop these hackers/spammers from using your server as a weapon.