Home > linux > Apache compromised now high cpu usage?

Apache compromised now high cpu usage?

February 10Hits:0
Advertisement

This question already has an answer here:

  • How do I deal with a compromised server? 13 answers

Over the weekend one of the virtual servers that I host was compromised and since then I've had all sorts of problems popping up.

The latest one is Apache taking 100% cpu usage as soon as it's started and staying like that until it is killed off.

ps aux returns:

http://pastebin.com/kzcPmq4g

strace on the process returns this, spamming very very quickly over and over again.

select(8, [3], NULL, NULL, {0, 0}) = 0 (Timeout)

access_log on the site returns:

http://pastie.org/6112068

It looks like a wordpress cron is being accessed very quickly from a remote IP.

Answers

If your system was hacked, don't try to troubleshoot this problem. You gotta do a full reinstall. Unless you are really skilled in this field, you'll never know if your system still has any root kits installed that will continue to cause problems. The only sure way is to nuke your whole system and reinstall.

Related Articles

  • Apache compromised now high cpu usage? February 10

    This question already has an answer here: How do I deal with a compromised server? 13 answers Over the weekend one of the virtual servers that I host was compromised and since then I've had all sorts of problems popping up. The latest one is Apache t

  • Apache under windows %100 cpu usageJuly 26

    Hi since monday morning my apache server started using %100 of cpu and all the sites are responding so slow. I know it's not a good idea to use windows server 2003 and apache server together but I had to use windows. I tryed to check the status with

  • Drupal site makes apache goes to 100% CPU usage oftenOctober 15

    My new drupal site crashes very often because the apache server goes up to 100% cpu usage. I have to ask our hardware guy to restart it once everyday. Also, He asked me if I am sure that the site does not have memory leak. As the logs are stating tha

  • Apache crashing with memory/cpu overload when google crawler visits siteJuly 10

    I have a site with low traffic, less than 500 hits a day. It has a 6G of memory and it is way underutilized, on average 5% is in use. But as soon as googlebot establishes a connection to my webserver/apache, the memory and cpu usage spikes in seconds

  • windows VPS running apache and mysql, php scripts running slow.. but cpu usage is 1-3%August 16

    So every night I run some cron jobs. It requires probably about 20 min to process all the records. I gather the script does something like 10,000 sql queries. I figure this task was just that intense and needs time to complete, but I looked at CPU an

  • Apache CPU usage stays at 100% even when there are no requestsJanuary 11

    I've been running the Apache HTTP server benchmarking tool (ab) on my new Apache server to test performance. I noticed that with a command like the following: ab -n 100000 -c 1000 http://www.mysite.com/ The CPU is used 100% by the apache2 processes d

  • Sudden transient spike in Apache process CPU usage. How to track down?March 29

    I'm running Apache and every once in a while [once every other day it seems] the number of apache processes will jump considerably and each one takes up around 75% cpu usage. I would love to be able to track down these processes to the actual virtual

  • APC cache making apache consume all CPU usageApril 6

    Greetings, I'm trying to install APC in order to deal with a high Apache RAM usage. I've followed this instructions here and, from the moment I've edited php.ini my Apache CPU usage EXPLODED. What did I do wrong? How can I be sure APC is working fine

  • Random high CPU usage on Linux using ApacheMay 10

    I've recently had a bit of a strange problem with my web server. Over the last day or so the site seems to be slowing down somewhat at random intervals, we don't seem to be experiencing any major extra traffic, however a quick look at 'top' and httpd

  • Apache 1.3 load increases until restart/graceful on CentOS/EC2. CPU usage climbs, and memcached access speed dropsJuly 7

    When running a large mod_perl application on EC2, we've noticed that the CPU usage on the instance climbs gradually between restarts or graceful restarts. Current setup: CentOS 5.4, m2.4xlarge instances, apache 1.3 with mod_perl. We first noticed thi

  • apache: cpu usage per virtual hostMarch 9

    Is there any tool that can provide statistics about cpu-usage per virtual host? This way I can understand which is the website that causes 100% spikes in CPU usage. Thanks! if this is not possible, can I setup apache differently? e.g. each virtualhos

  • Optmizing Apache and php-cgi for CPU UsageApril 20

    I'm having a huge problem with a server where I run 2 wp blogs. The problem is that sometimes my cpu goes sky rocking high, and just don't know what else todo. I've configured APC, huge difference, reduced Timeouts on Apache and MySQL tuning, but now

  • Reconciling Apache CPU usage in mod_status and top/mpstatOctober 25

    Running a LAMP site with a moderate amount of traffic, but which is prone to occasional spikes. Trying to diagnose a bottleneck that causes slowness during periods of higher traffic, I've been looking at the output of mod_status and I'm seeing an ala

  • Which Apache parameters responsible for high CPU usage and slower response?January 17

    Two dedicated separate servers running with identical configuration of hardware (Dual E5-2620 32GB) in similar environment (CentOS 6.3, Apache+PHP+MySQL) serving similar tasks, but behaving in different way of processing Apache web server - CPU usage

  • Find out what high CPU usage apache process is actually doing?March 13

    Currently having a few issues with our server where, intermittently, we seem to get apache processes which just run and run, taking up 100% CPU. When running top, we see the following: PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 20788 www-d

  • Apache high CPU usage, setting a overload limitApril 4

    On a ubuntu server, I run a LAMP environment with APC, and fast-cgi as php mod, to host 2 wordpress sites, and both sites have Wordpress Total Cache (W3TC) plugin configured. The server's specs are: 2gb ram and 1 cpu (cpu MHz: 2100.076, cache size: 2

  • LAMP - CPU usage of Apache processes too highJune 20

    I have a LAMP system with CentOS 6.4, Apache 2.2.15, MySQL 5.5.32 and PHP 5.3.26 with APC 3.1.10 using a Drupal CMS (https) on a virtual machine with 4 CPUs and 6 GB RAM. My problem is the CPU usage of the apache processes which will be up to 100% if

  • High Apache CPU usage, but low nginx - Configured correctly?

    High Apache CPU usage, but low nginx - Configured correctly? June 25

    We've just moved a website of ours over to a brand new high-spec Linux server (1x Intel Xeon E3-1230 v2 @ 3.30GHz, 8GB DDR3 ECC, 2x 128GB SATA SSD RAID1). The server has been configured to use nginx but we're not sure if its working correctly. The si

  • 98% cpu usage on ubuntu server running apache, site is unresponsiveApril 2

    I run a server with apache2 on an ubuntu box. It is a crypto mining pool. Everything was running normal even with the large inflow of people accessing our site. Then out of nowhere our cpu usage across all 8 cores is at 98 to 100% I use a reverse pro

  • Ubuntu running Apache Server (Prefork) PHP Fast-CGi High CPU Usage

    Ubuntu running Apache Server (Prefork) PHP Fast-CGi High CPU UsageApril 22

    I have a server running very slowly due to high CPU usage. I think this must be a configuration issue but I can't put my finger on why. The server is running Plesk and I've configured PHP to run as a Fast CGi application. Server spec: Quad-Core AMD 2

Copyright (C) 2017 ceus-now.com, All Rights Reserved. webmaster#ceus-now.com 14 q. 0.568 s.