[BlueOnyx:13065] Re: Possible attack - Limited resources

[Senthil Ramasamy]

Scan your server with proper antivirus and check for Backdoor.Shellbot Trojan
Suspect one of your Wordpress site is not up to date in patches and opening back door entry to you server, taking apache process down.

Regards,
Samy


On 20/05/2013, at 5:32 PM, Marcello Torchio <lellozone at gmail.com> wrote:

> Yes I am , why ?
> 
> Il giorno 20/mag/2013 09:16, "Senthil Ramasamy" <samy at maxi.net.au> ha scritto:
> Hi Marcello,
> 
>  
> 
> Are you running wordpress on your server?
> 
>  
> 
> Regards,
> 
> Samy
> 
>  
> 
> From: blueonyx-bounces at mail.blueonyx.it [mailto:blueonyx-bounces at mail.blueonyx.it] On Behalf Of Marcello Torchio
> Sent: Saturday, 18 May 2013 10:20 PM
> To: BlueOnyx General Mailing List
> Subject: [BlueOnyx:13059] Possible attack - Limited resources
> 
>  
> 
> Hi,
> 
>  
> 
> i'm having trouble with my BO server.
> 
>  
> 
> Few minutes ago one of my customer contact me saying that his website was down.
> 
>  
> 
> I've connected to server through SSH and i was unable to restart httpd.
> 
>  
> 
> There were 3 httpd processes "froze"
> 
>  
> 
> So i'v done kill -9 PID and restarted httpd
> 
>  
> 
> All works fine.
> 
>  
> 
>  
> 
> The problem is that if I restart httpd all the memory (RAM) will be completely used.
> 
>  
> 
> running top from terminal says that there are a lot op httpd processes, responsible of that big RAM usage.
> 
>  
> 
> Is there any kind of DoS attack?
> 
>  
> 
> What can i do?
> 
>  
> 
> Thanks
> 
>  
> 
> Marcello
> 
> 
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
> 
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20130520/69a17fc9/attachment.html>