Hello everyone, I found this when i run ps aux | grep ispconfig root 5917 0.0 0.0 63852 1212 ? S 13:01 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 5944 0.0 0.5 240612 10524 ? S 13:01 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 5951 0.0 0.0 8696 956 ? Ss 13:02 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 5952 0.0 0.0 63852 1208 ? S 13:02 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 5978 0.0 0.5 240612 10528 ? S 13:02 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 5981 0.0 0.0 8696 952 ? Ss 13:03 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 5982 0.0 0.0 63852 1212 ? S 13:03 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6008 0.0 0.5 240612 10528 ? S 13:03 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6038 0.0 0.0 8696 956 ? Ss 13:04 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6039 0.0 0.0 63852 1208 ? S 13:04 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6065 0.0 0.5 240612 10524 ? S 13:04 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6082 0.0 0.0 8696 956 ? Ss 13:05 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6084 0.0 0.0 63852 1212 ? S 13:05 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6110 0.0 0.5 240612 10528 ? S 13:05 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6120 0.0 0.0 8696 956 ? Ss 13:06 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6121 0.0 0.0 63852 1212 ? S 13:06 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6147 0.0 0.5 240612 10528 ? S 13:06 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6155 0.0 0.0 8696 952 ? Ss 13:07 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6156 0.0 0.0 63852 1212 ? S 13:07 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6182 0.0 0.5 240612 10532 ? S 13:07 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6185 0.0 0.0 8696 952 ? Ss 13:08 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6186 0.0 0.0 63852 1212 ? S 13:08 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6212 0.0 0.5 240612 10528 ? S 13:08 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6227 0.0 0.0 8696 956 ? Ss 13:09 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6228 0.0 0.0 63852 1208 ? S 13:09 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6254 0.0 0.5 240612 10528 ? S 13:09 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6266 0.0 0.0 8696 952 ? Ss 13:10 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6267 0.0 0.0 63852 1208 ? S 13:10 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6293 0.0 0.5 240612 10528 ? S 13:10 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6313 0.0 0.0 8696 952 ? Ss 13:11 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6314 0.0 0.0 63852 1212 ? S 13:11 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6340 0.0 0.5 240612 10524 ? S 13:11 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6347 0.0 0.0 8696 952 ? Ss 13:12 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6348 0.0 0.0 63852 1212 ? S 13:12 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6374 0.0 0.5 240612 10528 ? S 13:12 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6391 0.0 0.0 8696 952 ? Ss 13:13 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6392 0.0 0.0 63852 1208 ? S 13:13 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6418 0.0 0.5 240612 10532 ? S 13:13 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6420 0.0 0.0 8696 956 ? Ss 13:14 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6421 0.0 0.0 63852 1212 ? S 13:14 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6447 0.0 0.5 240612 10532 ? S 13:14 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6460 0.0 0.0 8696 956 ? Ss 13:15 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6462 0.0 0.0 63852 1208 ? S 13:15 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6489 0.0 0.5 240612 10524 ? S 13:15 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6494 0.0 0.0 8696 948 ? Ss 13:16 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6495 0.0 0.0 63852 1208 ? S 13:16 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6521 0.0 0.5 240612 10532 ? S 13:16 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6524 0.0 0.0 8696 956 ? Ss 13:17 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6525 0.0 0.0 63852 1212 ? S 13:17 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6551 0.0 0.5 240612 10532 ? S 13:17 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6561 0.0 0.0 8696 948 ? Ss 13:18 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6562 0.0 0.0 63852 1208 ? S 13:18 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6588 0.0 0.5 240612 10528 ? S 13:18 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6592 0.0 0.0 8696 956 ? Ss 13:19 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6593 0.0 0.0 63852 1212 ? S 13:19 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6619 0.0 0.5 240612 10528 ? S 13:19 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6627 0.0 0.0 8696 956 ? Ss 13:20 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6628 0.0 0.0 63852 1212 ? S 13:20 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6656 0.0 0.5 240612 10532 ? S 13:20 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6660 0.0 0.0 8696 952 ? Ss 13:21 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6661 0.0 0.0 63852 1212 ? S 13:21 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6687 0.0 0.5 240612 10528 ? S 13:21 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6698 0.0 0.0 8696 952 ? Ss 13:22 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6699 0.0 0.0 63852 1208 ? S 13:22 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6725 0.0 0.5 240612 10524 ? S 13:22 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6729 0.0 0.0 8696 952 ? Ss 13:23 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6730 0.0 0.0 63852 1212 ? S 13:23 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6756 0.0 0.5 240612 10524 ? S 13:23 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6760 0.0 0.0 8696 952 ? Ss 13:24 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6761 0.0 0.0 63852 1208 ? S 13:24 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6787 0.0 0.5 240612 10532 ? S 13:24 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6791 0.0 0.0 8696 952 ? Ss 13:25 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6792 0.0 0.0 63852 1212 ? S 13:25 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6820 0.0 0.5 240612 10532 ? S 13:25 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6829 0.0 0.0 8696 952 ? Ss 13:26 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6830 0.0 0.0 63852 1212 ? S 13:26 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6856 0.0 0.5 240612 10532 ? S 13:26 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6859 0.0 0.0 8696 948 ? Ss 13:27 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6860 0.0 0.0 63852 1212 ? S 13:27 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6886 0.0 0.5 240612 10528 ? S 13:27 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6890 0.0 0.0 8696 952 ? Ss 13:28 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6891 0.0 0.0 63852 1212 ? S 13:28 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6917 0.0 0.5 240612 10528 ? S 13:28 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6925 0.0 0.0 8696 948 ? Ss 13:29 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6926 0.0 0.0 63852 1212 ? S 13:29 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6952 0.0 0.5 240612 10532 ? S 13:29 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 6955 0.0 0.0 8696 956 ? Ss 13:30 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 6956 0.0 0.0 63852 1212 ? S 13:30 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 6984 0.0 0.5 240612 10528 ? S 13:30 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 7001 0.0 0.0 8696 952 ? Ss 13:31 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 7002 0.0 0.0 63852 1208 ? S 13:31 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 7028 0.0 0.5 240612 10528 ? S 13:31 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 7067 0.0 0.0 8696 952 ? Ss 13:32 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 7068 0.0 0.0 63852 1212 ? S 13:32 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 7094 0.0 0.5 240612 10532 ? S 13:32 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 7106 0.0 0.0 8696 952 ? Ss 13:33 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 7107 0.0 0.0 63852 1208 ? S 13:33 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 7133 0.0 0.5 240612 10532 ? S 13:33 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 7151 0.0 0.0 8696 952 ? Ss 13:34 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 7152 0.0 0.0 63852 1208 ? S 13:34 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 7178 0.1 0.5 240612 10528 ? S 13:34 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 7189 0.0 0.0 8696 952 ? Ss 13:35 0:00 /bin/sh -c /usr/local/ispconfig/server/server.sh &> /dev/null root 7190 0.0 0.0 63852 1208 ? S 13:35 0:00 /bin/bash /usr/local/ispconfig/server/server.sh root 7218 1.0 0.5 240612 10528 ? S 13:35 0:00 /usr/bin/php -q /usr/local/ispconfig/server/server.php root 7220 0.0 0.0 61176 772 pts/0 S+ 13:35 0:00 grep ispconfig these are about 300-400 processes running whats going on? every minute 4-5 processes increasing automatically though i dont have much users on website. Help please.
You can try this (as root user).. or put the sudo before: # /usr/bin/killall /usr/bin/php # rm -f /usr/local/ispconfig/server/temp/.ispconfig_lock Bye.. bajodel.
it killed my machine hi as i mentioned in my first post, it bogging down my server, i tried what you explained it helped me decrease process. but isp config now starting now? i mean i can't access websites?
I'm sorry .. but i've not understood your question .. Processes have stopped increasing now ? ..or they are still growing ? Bye.. bajodel.
after doing what you explained after doing what you explained, i restarted server and checked that ispconfig is not running now i tried /etc/init.d/ispconfig_server start please help bash: /etc/init.d/ispconfig_server: No such file or directory [root@srv1 web]#
ISPConfig3 is different from ISPCOnfig2 .. it's normal you canot find service [ /etc/init.d/ispconfig_server start/stop/restart ]. But take a look at your crontab .. # crontab -l The ISPConfig3 login page is available ? Bye.. bajodel.
No ispconfig page available, nmap localhost shows no 8080 port open that means no ispconfig server running? i am lost , i hope you will help me. Thank you so much for your time.
I noticed the "/usr/bin/php ..[cut]..server.php" processes increasing also if u don't install squirrelmail at all ( i hate squirrelmail ) ..so i think is not related. Bye.. bajodel.
root@srv1 web]# /etc/init.d/httpd start Starting httpd: [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 78.47.177.89:443 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost .90:80 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 90:443 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 91:443 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 2:443 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 93:80 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost .93:443 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost .94:80 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost 4:443 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost *:443 has no VirtualHosts [Fri Aug 28 09:51:19 2009] [warn] NameVirtualHost *:80 has no VirtualHosts [ OK ] [root@srv1 web]# nmap localhost Starting Nmap 5.00 ( http://nmap.org ) at 2009-08-28 09:51 CEST Interesting ports on localhost (127.0.0.1): Not shown: 987 closed ports PORT STATE SERVICE 21/tcp open ftp 25/tcp open smtp 53/tcp open domain 80/tcp filtered http 110/tcp open pop3 143/tcp open imap 631/tcp open ipp 993/tcp open imaps 995/tcp open pop3s 3306/tcp open mysql 8080/tcp open http-proxy 10024/tcp open unknown 10025/tcp open unknown i have hide the ip's this is what i get after starting up httpd, but as soon as i start httpd server load started increasing too much from 0.05 to 15 in just 10 seconds
top - 09:55:19 up 1:20, 1 user, load average: 32.92, 18.08, 7.51 Tasks: 129 total, 1 running, 128 sleeping, 0 stopped, 0 zombie Cpu(s): 5.3%us, 1.8%sy, 0.0%ni, 91.7%id, 0.5%wa, 0.0%hi, 0.7%si, 0.0%st Mem: 2026544k total, 734740k used, 1291804k free, 63832k buffers see in 20 seconds
If you have stopped apache2 ..it's normal you cannot see login page So restart apache2 [ /etc/init.d/apache2 start ]. If not .. post the output of these: # ls -sal /etc/apache2/sites-enabled/ # ls -sal /etc/apache2/sites-available/ # cat /etc/apache2/sites-available/ispconfig.vhost (hide your private data) Bye.. bajodel.
I think something is wrong here! .. ? -> .. 91:443 .. ? -> .. 90:443 .. ..and so on.. Check your IP(s) configuration in ISPConfig .. ( i hope u are not on production env .. .. ) Bye.. bajodel.
Thank God it is fixed now i installed dos deflate mod. But is there any light way on resources to ban ip's which are causing ddos? it was ddos, now server load is stable again back to 1.00 if possible , tell me about a permanent fix Regards All
thanks falko most of the problems i am trying to fix, and with help of you guys. i did 80% now i want to protect directory is it in ispconfig 3? where can i find, or do i have to do that manually. Second, i am not able to setup error documents , i ticked own error pages while creating website and a folder got created in the root of website. but still this is in error log. [Fri Aug 28 11:01:13 2009] [error] [client 125.62.116.227] File does not exist: /var/www/error/500.html, referer: http://****/forum/ [Fri Aug 28 11:01:15 2009] [alert] [client 202.63.127.26] /var/www/****.com/web/.htaccess: Invalid command 'uthType', perhaps misspelled or defined by a module not included in the server configuration, referer: http://*****/forum/index.php [Fri Aug 28 11:01:15 2009] [error] [client 202.63.127.26] File does not exist: /var/www/error/500.html, referer: http://****/forum/index.php [Fri Aug 28 11:01:15 2009] [alert] [client 122.163.80.62] /var/www/8***.com/web/.htaccess: Invalid command 'uthType', perhaps misspelled or defined by a module not included in the server configuration, referer: http://****/forum/index.php [Fri Aug 28 11:01:15 2009] [error] [client 122.163.80.62] File does not exist: /var/www/error/500.html, referer: http://****/index.php [Fri Aug 28 11:01:16 2009] [alert] [client 112.201.124.84] /var/www/****/web/.htaccess: Invalid command 'uthType', perhaps misspelled or defined by a module not included in the server configuration, referer: http://****/forum/index.php [Fri Aug 28 11:01:16 2009] [error] [client 112.201.124.84] File does not exist: /var/www/error/500.html, referer: *******x.php Thanks
