0

The server is cent os with apache2+php configured. Sometimes the pages are getting locked. Too much time to respond.

While checking htop in server found strange processess. All values are zero for this "sh" processes.

Can't find how it got created?Htop of sh processess

hspaans
  • 165
  • 1
  • 7
Giri Annamalai M
  • 810
  • 9
  • 24
  • Can you explain what you're hosting? Pure PHP-applications or also something else via CGI-BIN? – hspaans Jul 31 '19 at 12:44
  • Mod_wsgi is there too – Giri Annamalai M Jul 31 '19 at 13:52
  • 1
    Without any details about the setup and what is triggering new shells there isn't much to gone on to resolve this except saying something under the apache user is generating a lot of zombie processes. Most likely this is a web application that is being exploited. – hspaans Aug 01 '19 at 12:44

0 Answers0