Tuesday, 20 August 2013

Apache process 100% with IPV4 TCP 10u

Apache process 100% with IPV4 TCP 10u

Today i got strange http ussage. All apache processes woks ok but after
some time i found few processes stocked at 100% and they are like that
long time. After i checked that process id at webmin process list i found
this results:
Type | Protocol | File Descriptor | Details
IPV4 | TCP | 3u | Listening on port httpd
IPV4 | TCP | 10u | myip:httpd -> 27.79.173.99:edb-server2 ESTABLISHED
I checked all other processes and they all have only 1st line of this
report. I killed process and i banned IP, but after that it happen same
type of connection from few more IP's with 10u type of connection.
I am wondering is it possible to forbidden "10u" type of connection or
even how to find what is that?
All ports are closed, only 80 is open. Also i disabled server ping
requests. I hope that i gived all needed info, if needs anything more i
will update this topic.

No comments:

Post a Comment