The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

help httpd is under attack

Discussion in 'General Discussion' started by mher, Nov 20, 2005.

  1. mher

    mher Well-Known Member

    Joined:
    Jun 14, 2004
    Messages:
    49
    Likes Received:
    0
    Trophy Points:
    6
    my httpd is restarting every 15 minutes after being non responsive. the load on the server is remaining normal howaver sites are not loading. when i click on apache status in whm i get this:

    Current Time: Sunday, 20-Nov-2005 21:21:49 PST
    Restart Time: Sunday, 20-Nov-2005 21:16:52 PST
    Parent Server Generation: 5
    Server uptime: 4 minutes 57 seconds
    Total accesses: 1510 - Total Traffic: 6.9 MB
    CPU Usage: u2.05 s1.4 cu36.87 cs9.37 - 16.7% CPU load
    5.08 requests/sec - 23.8 kB/second - 4789 B/request
    88 requests currently being processed, 7 idle servers
    RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
    RRRRRRRRRRRR_RRR_WWR_RWRR_WW___.................................
    ................................................................
    ................................................................

    0-5 2530 0/18/18 R 0.62 209 66 0.0 0.29 0.29 ? ? ..reading..
    1-5 2531 0/14/14 R 0.11 260 727 0.0 0.08 0.08 ? ? ..reading..
    2-5 2533 0/18/18 R 0.42 152 13 0.0 0.56 0.56 ? ? ..reading..
    3-5 2534 0/14/14 R 0.20 264 0 0.0 0.04 0.04 ? ? ..reading..
    4-5 2535 0/15/15 R 0.42 263 0 0.0 0.04 0.04 ? ? ..reading..
    5-5 2537 0/15/15 R 0.21 263 0 0.0 0.02 0.02 ? ? ..reading..


    and the Rs are increasing everytime i refresh the page.

    Does anyone have a clue?
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    What errors are you seeing in your apache error_log? That's going to be the first place to check. You could also use netstat to see if all the httpd connections are coming from one IP address and if so, block them in your firewall:

    netstat -autpn | grep :80
     
Loading...

Share This Page