Automatically increasing process

Discussion in 'General' started by all, Aug 27, 2009.

  1. all

    all New Member

    Hello everyone,

    I found this when i run ps aux | grep ispconfig

    root 5917 0.0 0.0 63852 1212 ? S 13:01 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 5944 0.0 0.5 240612 10524 ? S 13:01 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 5951 0.0 0.0 8696 956 ? Ss 13:02 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 5952 0.0 0.0 63852 1208 ? S 13:02 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 5978 0.0 0.5 240612 10528 ? S 13:02 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 5981 0.0 0.0 8696 952 ? Ss 13:03 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 5982 0.0 0.0 63852 1212 ? S 13:03 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6008 0.0 0.5 240612 10528 ? S 13:03 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6038 0.0 0.0 8696 956 ? Ss 13:04 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6039 0.0 0.0 63852 1208 ? S 13:04 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6065 0.0 0.5 240612 10524 ? S 13:04 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6082 0.0 0.0 8696 956 ? Ss 13:05 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6084 0.0 0.0 63852 1212 ? S 13:05 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6110 0.0 0.5 240612 10528 ? S 13:05 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6120 0.0 0.0 8696 956 ? Ss 13:06 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6121 0.0 0.0 63852 1212 ? S 13:06 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6147 0.0 0.5 240612 10528 ? S 13:06 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6155 0.0 0.0 8696 952 ? Ss 13:07 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6156 0.0 0.0 63852 1212 ? S 13:07 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6182 0.0 0.5 240612 10532 ? S 13:07 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6185 0.0 0.0 8696 952 ? Ss 13:08 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6186 0.0 0.0 63852 1212 ? S 13:08 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6212 0.0 0.5 240612 10528 ? S 13:08 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6227 0.0 0.0 8696 956 ? Ss 13:09 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6228 0.0 0.0 63852 1208 ? S 13:09 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6254 0.0 0.5 240612 10528 ? S 13:09 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6266 0.0 0.0 8696 952 ? Ss 13:10 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6267 0.0 0.0 63852 1208 ? S 13:10 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6293 0.0 0.5 240612 10528 ? S 13:10 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6313 0.0 0.0 8696 952 ? Ss 13:11 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6314 0.0 0.0 63852 1212 ? S 13:11 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6340 0.0 0.5 240612 10524 ? S 13:11 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6347 0.0 0.0 8696 952 ? Ss 13:12 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6348 0.0 0.0 63852 1212 ? S 13:12 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6374 0.0 0.5 240612 10528 ? S 13:12 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6391 0.0 0.0 8696 952 ? Ss 13:13 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6392 0.0 0.0 63852 1208 ? S 13:13 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6418 0.0 0.5 240612 10532 ? S 13:13 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6420 0.0 0.0 8696 956 ? Ss 13:14 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6421 0.0 0.0 63852 1212 ? S 13:14 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6447 0.0 0.5 240612 10532 ? S 13:14 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6460 0.0 0.0 8696 956 ? Ss 13:15 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6462 0.0 0.0 63852 1208 ? S 13:15 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6489 0.0 0.5 240612 10524 ? S 13:15 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6494 0.0 0.0 8696 948 ? Ss 13:16 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6495 0.0 0.0 63852 1208 ? S 13:16 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6521 0.0 0.5 240612 10532 ? S 13:16 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6524 0.0 0.0 8696 956 ? Ss 13:17 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6525 0.0 0.0 63852 1212 ? S 13:17 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6551 0.0 0.5 240612 10532 ? S 13:17 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6561 0.0 0.0 8696 948 ? Ss 13:18 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6562 0.0 0.0 63852 1208 ? S 13:18 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6588 0.0 0.5 240612 10528 ? S 13:18 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6592 0.0 0.0 8696 956 ? Ss 13:19 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6593 0.0 0.0 63852 1212 ? S 13:19 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6619 0.0 0.5 240612 10528 ? S 13:19 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6627 0.0 0.0 8696 956 ? Ss 13:20 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6628 0.0 0.0 63852 1212 ? S 13:20 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6656 0.0 0.5 240612 10532 ? S 13:20 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6660 0.0 0.0 8696 952 ? Ss 13:21 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6661 0.0 0.0 63852 1212 ? S 13:21 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6687 0.0 0.5 240612 10528 ? S 13:21 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6698 0.0 0.0 8696 952 ? Ss 13:22 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6699 0.0 0.0 63852 1208 ? S 13:22 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6725 0.0 0.5 240612 10524 ? S 13:22 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6729 0.0 0.0 8696 952 ? Ss 13:23 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6730 0.0 0.0 63852 1212 ? S 13:23 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6756 0.0 0.5 240612 10524 ? S 13:23 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6760 0.0 0.0 8696 952 ? Ss 13:24 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6761 0.0 0.0 63852 1208 ? S 13:24 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6787 0.0 0.5 240612 10532 ? S 13:24 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6791 0.0 0.0 8696 952 ? Ss 13:25 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6792 0.0 0.0 63852 1212 ? S 13:25 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6820 0.0 0.5 240612 10532 ? S 13:25 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6829 0.0 0.0 8696 952 ? Ss 13:26 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6830 0.0 0.0 63852 1212 ? S 13:26 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6856 0.0 0.5 240612 10532 ? S 13:26 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6859 0.0 0.0 8696 948 ? Ss 13:27 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6860 0.0 0.0 63852 1212 ? S 13:27 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6886 0.0 0.5 240612 10528 ? S 13:27 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6890 0.0 0.0 8696 952 ? Ss 13:28 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6891 0.0 0.0 63852 1212 ? S 13:28 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6917 0.0 0.5 240612 10528 ? S 13:28 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6925 0.0 0.0 8696 948 ? Ss 13:29 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6926 0.0 0.0 63852 1212 ? S 13:29 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6952 0.0 0.5 240612 10532 ? S 13:29 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 6955 0.0 0.0 8696 956 ? Ss 13:30 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 6956 0.0 0.0 63852 1212 ? S 13:30 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 6984 0.0 0.5 240612 10528 ? S 13:30 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 7001 0.0 0.0 8696 952 ? Ss 13:31 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 7002 0.0 0.0 63852 1208 ? S 13:31 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 7028 0.0 0.5 240612 10528 ? S 13:31 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 7067 0.0 0.0 8696 952 ? Ss 13:32 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 7068 0.0 0.0 63852 1212 ? S 13:32 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 7094 0.0 0.5 240612 10532 ? S 13:32 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 7106 0.0 0.0 8696 952 ? Ss 13:33 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 7107 0.0 0.0 63852 1208 ? S 13:33 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 7133 0.0 0.5 240612 10532 ? S 13:33 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 7151 0.0 0.0 8696 952 ? Ss 13:34 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 7152 0.0 0.0 63852 1208 ? S 13:34 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 7178 0.1 0.5 240612 10528 ? S 13:34 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 7189 0.0 0.0 8696 952 ? Ss 13:35 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null
    root 7190 0.0 0.0 63852 1208 ? S 13:35 0:00 /bin/bash /usr/local/ispconfig/server/server.sh
    root 7218 1.0 0.5 240612 10528 ? S 13:35 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php
    root 7220 0.0 0.0 61176 772 pts/0 S+ 13:35 0:00 grep ispconfig


    these are about 300-400 processes running whats going on?

    every minute 4-5 processes increasing automatically though i dont have much users on website.

    Help please.
     
  2. all

    all New Member

    help please

    help please, processes crossed above 900 now in top

    anyone?
     
  3. bajodel

    bajodel New Member

    You can try this (as root user).. or put the sudo before:

    # /usr/bin/killall /usr/bin/php
    # rm -f /usr/local/ispconfig/server/temp/.ispconfig_lock

    Bye..

    bajodel.
     
  4. all

    all New Member

    it killed my machine

    hi as i mentioned in my first post, it bogging down my server,

    i tried what you explained it helped me decrease process. but isp config now starting now?

    i mean i can't access websites?
     
  5. bajodel

    bajodel New Member

    I'm sorry .. but i've not understood your question ..

    Processes have stopped increasing now ? ..or they are still growing ?


    Bye..

    bajodel.
     
  6. all

    all New Member

    after doing what you explained

    after doing what you explained,

    i restarted server and checked that ispconfig is not running now

    i tried /etc/init.d/ispconfig_server start

    please help

    bash: /etc/init.d/ispconfig_server: No such file or directory
    [root@srv1 web]#
     
  7. SamTzu

    SamTzu Member HowtoForge Supporter

  8. all

    all New Member

    but i can't find isp_config now, help please :(
     
  9. bajodel

    bajodel New Member

    ISPConfig3 is different from ISPCOnfig2 .. it's normal you canot find service
    [ /etc/init.d/ispconfig_server start/stop/restart ].

    But take a look at your crontab ..
    # crontab -l


    The ISPConfig3 login page is available ?


    Bye..

    bajodel.
     
  10. all

    all New Member

    to let you know more.

    I have stopped as i feel someone is ddosing,

    Stopped httpd
     
  11. all

    all New Member

    No ispconfig page available,

    nmap localhost shows no 8080 port open

    that means no ispconfig server running?

    i am lost , i hope you will help me.

    Thank you so much for your time.
     
  12. bajodel

    bajodel New Member

    I noticed the "/usr/bin/php ..[cut]..server.php" processes increasing also if u don't install squirrelmail at all ( i hate squirrelmail :D ) ..so i think is not related.

    :confused:

    Bye..

    bajodel.
     
  13. all

    all New Member

    root@srv1 web]# /etc/init.d/httpd start
    Starting httpd: [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 78.47.177.89:443 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost .90:80 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 90:443 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 91:443 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 2:443 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 93:80 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost .93:443 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost .94:80 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 4:443 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost *:443 has no VirtualHosts
    [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost *:80 has no VirtualHosts
    [ OK ]
    [root@srv1 web]# nmap localhost

    Starting Nmap 5.00 ( http://nmap.org ) at 2009-08-28 09:51 CEST
    Interesting ports on localhost (127.0.0.1):
    Not shown: 987 closed ports
    PORT STATE SERVICE
    21/tcp open ftp
    25/tcp open smtp
    53/tcp open domain
    80/tcp filtered http
    110/tcp open pop3
    143/tcp open imap
    631/tcp open ipp
    993/tcp open imaps
    995/tcp open pop3s
    3306/tcp open mysql
    8080/tcp open http-proxy
    10024/tcp open unknown
    10025/tcp open unknown



    i have hide the ip's this is what i get after starting up httpd, but as soon as i start httpd server load started increasing too much :confused:

    from 0.05 to 15 in just 10 seconds :(
     
  14. all

    all New Member

    top - 09:55:19 up 1:20, 1 user, load average: 32.92, 18.08, 7.51
    Tasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie
    Cpu(s): 5.3%us, 1.8%sy, 0.0%ni, 91.7%id, 0.5%wa, 0.0%hi, 0.7%si, 0.0%st
    Mem: 2026544k total, 734740k used, 1291804k free, 63832k buffers


    see in 20 seconds
     
  15. bajodel

    bajodel New Member

    If you have stopped apache2 ..it's normal you cannot see login page :D
    So restart apache2 [ /etc/init.d/apache2 start ].

    If not .. post the output of these:

    # ls -sal /etc/apache2/sites-enabled/

    # ls -sal /etc/apache2/sites-available/

    # cat /etc/apache2/sites-available/ispconfig.vhost

    (hide your private data)

    Bye..

    bajodel.
     
  16. bajodel

    bajodel New Member


    I think something is wrong here! ..

    ? -> .. 91:443 ..
    ? -> .. 90:443 ..
    ..and so on..

    Check your IP(s) configuration in ISPConfig ..
    ( i hope u are not on production env .. :p .. )


    Bye..

    bajodel.
     
  17. all

    all New Member

    Thank God it is fixed now i installed dos deflate mod.

    But is there any light way on resources to ban ip's which are causing ddos?

    it was ddos, now server load is stable again back to 1.00

    if possible , tell me about a permanent fix

    Regards
    All
     
  18. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

  19. all

    all New Member

    thanks falko most of the problems i am trying to fix, and with help of you guys. i did 80%


    now i want to protect directory is it in ispconfig 3? where can i find, or do i have to do that manually.

    Second, i am not able to setup error documents , i ticked own error pages while creating website and a folder got created in the root of website. but still

    this is in error log.

    [Fri Aug 28 11:01:13 2009] [error] [client 125.62.116.227] File does not exist: /var/www/error/500.html, referer: http://****/forum/
    [Fri Aug 28 11:01:15 2009] [alert] [client 202.63.127.26] /var/www/****.com/web/.htaccess: Invalid command 'uthType', perhaps misspelled or defined by a module not included in the server configuration, referer: http://*****/forum/index.php
    [Fri Aug 28 11:01:15 2009] [error] [client 202.63.127.26] File does not exist: /var/www/error/500.html, referer: http://****/forum/index.php
    [Fri Aug 28 11:01:15 2009] [alert] [client 122.163.80.62] /var/www/8***.com/web/.htaccess: Invalid command 'uthType', perhaps misspelled or defined by a module not included in the server configuration, referer: http://****/forum/index.php
    [Fri Aug 28 11:01:15 2009] [error] [client 122.163.80.62] File does not exist: /var/www/error/500.html, referer: http://****/index.php
    [Fri Aug 28 11:01:16 2009] [alert] [client 112.201.124.84] /var/www/****/web/.htaccess: Invalid command 'uthType', perhaps misspelled or defined by a module not included in the server configuration, referer: http://****/forum/index.php
    [Fri Aug 28 11:01:16 2009] [error] [client 112.201.124.84] File does not exist: /var/www/error/500.html, referer: *******x.php

    Thanks
     

Share This Page