Kann mir mahl jemand weiter helfen

ktr453 · Mar 30, 2008

habe gerade einen Server zusammenbruch gehabt und dies hier in dem error log gefunden

Code:

[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:34 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec2)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sun Mar 30 22:35:35 2008] [notice] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Sun Mar 30 22:35:35 2008] [notice] mod_python: using mutex_directory /tmp 
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Memory Allocated 112 bytes (each conf takes 28 bytes)
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Version 0.8 - Initialized [4 Confs]
[Sun Mar 30 22:35:36 2008] [notice] Apache/2.2.3 (Linux/SUSE) configured -- resuming normal operations

kannmir einer mal sagen was da los war

Guin · Mar 30, 2008

Moin,
das angegebene Logfile gibt keine Auskunft ueber ein Problem.

Was heisst bei dir "Server zusammenbruch"?

ktr453 · Mar 30, 2008

Gans einfach der Server war nicht mehr erreichbar über root und auch nicht über http

bis ich einen reboot gemacht habe bein´m hoch fahren habe ich aber nicht außergewöhnliches festgestellt

welches log benötigt ihr denn

auserdem verabschidet sich jetzt am laufenden band der spamm asistent und Tomcat , Dr.Web antivirus , Plesk Web Server

die fallen einfach aus wenn ich sie neu starte

chris085 · Mar 30, 2008

Poste mal /var/log/messages des besagten Zeitraums.

Überprüfe /var/log/apache2/error.log sind dort aussergewöhnlich viele Zeilen.
Passt dein Trafficverbrauch beim Provider ?

/tmp/ sind dort wirklich nur tmp files oder auch Warez, Filme ?

Arbeite bitte an deiner Rechtschreibung, mir tut das beim Lesen weh

ktr453 · Mar 31, 2008

hier bitte der 1 log ja und /tmp/ befinden sich keine arez, Filme

Code:

Mar 30 22:35:10 h1319289 ntpdate[3370]: step time server 81.169.163.105 offset 2504231.307888 sec
Mar 30 22:35:10 h1319289 syslog-ng[3317]: STATS: dropped 0
Mar 30 22:35:11 h1319289 ntpd[3445]: ntpd 4.2.2p4@1.1585-o Sat Nov 25 18:44:34 UTC 2006 (1)
Mar 30 22:35:11 h1319289 ntpd[3446]: precision = 2.000 usec
Mar 30 22:35:11 h1319289 ntpd[3446]: ntp_io: estimated max descriptors: 1024, initial socket boundary: 16
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface wildcard, 0.0.0.0#123 Disabled
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface lo, 127.0.0.1#123 Enabled
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface eth0, 85.214.94.196#123 Enabled
Mar 30 22:35:11 h1319289 ntpd[3446]: Listening on interface eth0:1, 85.214.25.197#123 Enabled
Mar 30 22:35:11 h1319289 ntpd[3446]: kernel time sync status 0040
Mar 30 22:35:11 h1319289 ntpd[3446]: frequency initialized 7.575 PPM from /var/lib/ntp/drift/ntp.drift
Mar 30 22:35:12 h1319289 qmail: 1206909312.309397 status: local 0/10 remote 0/20
Mar 30 22:35:12 h1319289 qmail: 1206909312.316484 starting delivery 1: msg 2771409 to remote tanja_schmitt@kabelmail.de
Mar 30 22:35:12 h1319289 qmail: 1206909312.316558 status: local 0/10 remote 1/20
Mar 30 22:35:12 h1319289 qmail: 1206909312.333436 starting delivery 2: msg 2771466 to remote knudd@knudd4you.de
Mar 30 22:35:12 h1319289 qmail: 1206909312.333490 status: local 0/10 remote 2/20
Mar 30 22:35:12 h1319289 qmail: 1206909312.344281 starting delivery 3: msg 2771467 to remote tanja_schmitt@kabelmail.de
Mar 30 22:35:12 h1319289 qmail: 1206909312.344333 status: local 0/10 remote 3/20
Mar 30 22:35:12 h1319289 /usr/sbin/cron[3524]: (CRON) STARTUP (V5.0)
Mar 30 22:35:12 h1319289 qmail-remote-handlers[3507]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:12 h1319289 qmail-remote-handlers[3525]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:12 h1319289 qmail-remote-handlers[3527]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3525]: from=root@arcade-fun-board.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3525]: to=knudd@knudd4you.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3507]: from=root@arcade-fun-board.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3507]: to=tanja_schmitt@kabelmail.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3527]: from=root@arcade-fun-board.de
Mar 30 22:35:13 h1319289 qmail-remote-handlers[3527]: to=tanja_schmitt@kabelmail.de
Mar 30 22:35:13 h1319289 kernel: klogd 1.4.1, log source = /proc/kmsg started.
Mar 30 22:35:13 h1319289 kernel: ACPI: Power Button (FF) [PWRF]
Mar 30 22:35:13 h1319289 kernel: ACPI: Power Button (CM) [PWRB]
Mar 30 22:35:13 h1319289 syslog-ng[3317]: Changing permissions on special file /dev/xconsole
Mar 30 22:35:13 h1319289 syslog-ng[3317]: Changing permissions on special file /dev/tty10
Mar 30 22:35:13 h1319289 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team
Mar 30 22:35:13 h1319289 kernel: powernow-k8: Found 2 Dual-Core AMD Opteron(tm) Processor 1212 HE processors (version 2.00.00)
Mar 30 22:35:13 h1319289 kernel: powernow-k8:    0 : fid 0xc (2000 MHz), vid 0xc
Mar 30 22:35:13 h1319289 kernel: powernow-k8:    1 : fid 0xa (1800 MHz), vid 0xe
Mar 30 22:35:13 h1319289 kernel: powernow-k8:    2 : fid 0x2 (1000 MHz), vid 0x12
Mar 30 22:35:13 h1319289 kernel: Netfilter messages via NETLINK v0.30.
Mar 30 22:35:13 h1319289 kernel: ip_conntrack version 2.4 (8192 buckets, 65536 max) - 228 bytes per conntrack
Mar 30 22:35:13 h1319289 kernel: e1000: eth0: e1000_watchdog: NIC Link is Up 100 Mbps Full Duplex
Mar 30 22:35:13 h1319289 kernel: NET: Registered protocol family 17
Mar 30 22:35:15 h1319289 named[3563]: starting BIND 9.3.2 -t /var/lib/named -u named
Mar 30 22:35:15 h1319289 named[3563]: found 1 CPU, using 1 worker thread
Mar 30 22:35:15 h1319289 named[3563]: loading configuration from '/etc/named.conf'
Mar 30 22:35:15 h1319289 named[3563]: no IPv6 interfaces found
Mar 30 22:35:15 h1319289 named[3563]: listening on IPv4 interface lo, 127.0.0.1#53
Mar 30 22:35:15 h1319289 named[3563]: listening on IPv4 interface eth0, 85.214.94.196#53
Mar 30 22:35:15 h1319289 named[3563]: listening on IPv4 interface eth0:1, 85.214.25.197#53
Mar 30 22:35:15 h1319289 named[3563]: command channel listening on 127.0.0.1#953
Mar 30 22:35:15 h1319289 named[3563]: zone 0.0.127.in-addr.arpa/IN: loaded serial 42
Mar 30 22:35:15 h1319289 named[3563]: zone 25.214.85.in-addr.arpa/IN: loaded serial 1206697836
Mar 30 22:35:15 h1319289 named[3563]: zone 94.214.85.in-addr.arpa/IN: loaded serial 1206109966
Mar 30 22:35:15 h1319289 named[3563]: zone arcade-fun-board.com/IN: loaded serial 1203804226
Mar 30 22:35:15 h1319289 named[3563]: zone arcade-fun-board.de/IN: loaded serial 1203808642
Mar 30 22:35:15 h1319289 named[3563]: zone eol-schlesien-acktuel.de/IN: loaded serial 1206697836
Mar 30 22:35:15 h1319289 named[3563]: zone fucks-hosting.de/IN: loaded serial 1205572828
Mar 30 22:35:15 h1319289 named[3563]: zone ibparcade.de/IN: loaded serial 1203804244
Mar 30 22:35:15 h1319289 named[3563]: zone zeiberteck.de/IN: loaded serial 1206110944
Mar 30 22:35:15 h1319289 named[3563]: zone localhost/IN: loaded serial 42
Mar 30 22:35:15 h1319289 named[3563]: running
Mar 30 22:35:17 h1319289 su: (to postgres) root on none
Mar 30 22:35:22 h1319289 qmail: 1206909322.566916 delivery 2: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
Mar 30 22:35:22 h1319289 qmail: 1206909322.566967 status: local 0/10 remote 2/20
Mar 30 22:35:26 h1319289 spamd[3703]: logger: removing stderr method 
Mar 30 22:35:27 h1319289 spamd[3704]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' 
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server started on UNIX domain socket /tmp/spamd_full.sock (running version 3.1.8) 
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server pid: 3704 
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server successfully spawned child process, pid 3705 
Mar 30 22:35:27 h1319289 spamd[3704]: spamd: server successfully spawned child process, pid 3706 
Mar 30 22:35:27 h1319289 spamd[3704]: prefork: child states: II 
Mar 30 22:35:28 h1319289 sshd[3676]: Accepted keyboard-interactive/pam for root from 217.235.81.66 port 55592 ssh2
Mar 30 22:35:41 h1319289 qmail: 1206909341.617191 delivery 1: deferral: 194.25.41.11_does_not_like_recipient./Remote_host_said:_450_4.7.1_<tanja_schmitt@kabelmail.de>..._Access_denied._IP_name_possibly_forged_[85.214.94.196]/Giving_up_on_194.25.41.11./
Mar 30 22:35:41 h1319289 qmail: 1206909341.617671 status: local 0/10 remote 1/20
Mar 30 22:35:41 h1319289 qmail: 1206909341.617852 delivery 3: deferral: 194.25.41.11_does_not_like_recipient./Remote_host_said:_450_4.7.1_<tanja_schmitt@kabelmail.de>..._Access_denied._IP_name_possibly_forged_[85.214.94.196]/Giving_up_on_194.25.41.11./
Mar 30 22:35:41 h1319289 qmail: 1206909341.618016 status: local 0/10 remote 0/20
Mar 30 22:35:42 h1319289 pop3d-ssl: Connection, ip=[127.0.0.1]
Mar 30 22:35:42 h1319289 pop3d-ssl: LOGOUT, ip=[127.0.0.1]
Mar 30 22:35:42 h1319289 pop3d: Connection, ip=[127.0.0.1]
Mar 30 22:35:42 h1319289 pop3d: LOGOUT, ip=[127.0.0.1]
Mar 30 22:35:43 h1319289 imapd-ssl: Connection, ip=[127.0.0.1]
Mar 30 22:35:43 h1319289 imapd-ssl: 1206909343.148115 LOGOUT, ip=[127.0.0.1], rcvd=12, sent=310, maildir=/
Mar 30 22:35:43 h1319289 imapd: Connection, ip=[127.0.0.1]
Mar 30 22:35:43 h1319289 imapd: 1206909343.150853 LOGOUT, ip=[127.0.0.1], rcvd=12, sent=308, maildir=/
Mar 30 22:35:43 h1319289 wdcollect[3840]: Language en-US is used for sending e-mail messages.
Mar 30 22:35:43 h1319289 wdcollect[3840]: Database server connection has been established.
Mar 30 22:35:43 h1319289 wdcollect[3840]: Server started.
Mar 30 22:35:45 h1319289 spamd[3705]: spamd: got connection over /tmp/spamd_full.sock 
Mar 30 22:35:45 h1319289 spamd[3704]: prefork: child states: II 
Mar 30 22:35:46 h1319289 wdcollect[3840]: Connection to server has been established.
Mar 30 22:35:46 h1319289 su: (to tomcat) root on none
Mar 30 22:35:46 h1319289 relaylock: /var/qmail/bin/relaylock: mail from 127.0.0.1:42075 (localhost)
Mar 30 22:35:47 h1319289 qmail-queue[3972]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)
Mar 30 22:35:47 h1319289 qmail-queue[3972]: scan: the message(drweb.tmp.mRLRjk) sent by watchdog@h1319289.stratoserver.net to ronny.martens@web.de should be passed without checks, because contains uncheckable addresses
Mar 30 22:35:47 h1319289 qmail-queue-handlers[3978]: Handlers Filter before-queue for qmail started ...
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: to=ronny.martens@web.de
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: hook_dir = '/var/qmail//handlers/before-queue'
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: recipient[3] = 'ronny.martens@web.de'
Mar 30 22:35:48 h1319289 qmail-queue-handlers[3978]: handlers dir = '/var/qmail//handlers/before-queue/recipient/ronny.martens@web.de'
Mar 30 22:35:49 h1319289 qmail-queue-handlers[3978]: starter: submitter[4011] exited normally
Mar 30 22:35:49 h1319289 qmail: 1206909349.319705 new msg 2770354
Mar 30 22:35:49 h1319289 qmail: 1206909349.320089 info msg 2770354: bytes 579 from <watchdog@h1319289.stratoserver.net> qp 4011 uid 2020
Mar 30 22:35:49 h1319289 qmail-queue[4023]: mail: all addreses are uncheckable - need to skip scanning (by deny mode)
Mar 30 22:35:49 h1319289 qmail-queue[4023]: scan: the message(drweb.tmp.lYbYvf) sent by watchdog@h1319289.stratoserver.net to ronny.martens@web.de should be passed without checks, because contains uncheckable addresses
Mar 30 22:35:49 h1319289 qmail-queue-handlers[4024]: Handlers Filter before-queue for qmail started ...
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: to=ronny.martens@web.de
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: hook_dir = '/var/qmail//handlers/before-queue'
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: recipient[3] = 'ronny.martens@web.de'
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: handlers dir = '/var/qmail//handlers/before-queue/recipient/ronny.martens@web.de'
Mar 30 22:35:50 h1319289 qmail-remote-handlers[4035]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:50 h1319289 qmail: 1206909350.336280 starting delivery 4: msg 2770354 to remote ronny.martens@web.de
Mar 30 22:35:50 h1319289 qmail: 1206909350.339192 status: local 0/10 remote 1/20
Mar 30 22:35:50 h1319289 qmail-remote-handlers[4035]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:50 h1319289 qmail-remote-handlers[4035]: to=ronny.martens@web.de
Mar 30 22:35:50 h1319289 qmail: 1206909350.838918 new msg 2770731
Mar 30 22:35:50 h1319289 qmail: 1206909350.839223 info msg 2770731: bytes 601 from <watchdog@h1319289.stratoserver.net> qp 4032 uid 2020
Mar 30 22:35:50 h1319289 qmail-queue-handlers[4024]: starter: submitter[4032] exited normally
Mar 30 22:35:51 h1319289 qmail: 1206909351.283834 delivery 4: success: 217.72.192.149_accepted_message./Remote_host_said:_250_OK_id=1Jg4Fq-0008J3-00/
Mar 30 22:35:51 h1319289 qmail: 1206909351.284173 status: local 0/10 remote 0/20
Mar 30 22:35:51 h1319289 qmail: 1206909351.284341 starting delivery 5: msg 2770731 to remote ronny.martens@web.de
Mar 30 22:35:51 h1319289 qmail: 1206909351.284499 status: local 0/10 remote 1/20
Mar 30 22:35:51 h1319289 qmail: 1206909351.319980 end msg 2770354
Mar 30 22:35:51 h1319289 qmail-remote-handlers[4041]: Handlers Filter before-remote for qmail started ...
Mar 30 22:35:51 h1319289 qmail-remote-handlers[4041]: from=watchdog@h1319289.stratoserver.net
Mar 30 22:35:51 h1319289 qmail-remote-handlers[4041]: to=ronny.martens@web.de
Mar 30 22:35:51 h1319289 qmail: 1206909351.804181 delivery 5: success: 217.72.192.149_accepted_message./Remote_host_said:_250_OK_id=1Jg4Fr-0000lM-00/
Mar 30 22:35:51 h1319289 qmail: 1206909351.804386 status: local 0/10 remote 0/20
Mar 30 22:35:51 h1319289 qmail: 1206909351.804552 end msg 2770731
Mar 30 22:36:52 h1319289 wdcollect[3840]: Connection to SMTP server has been closed.
Mar 30 22:40:01 h1319289 /usr/sbin/cron[4279]: (mailman) CMD (/usr/bin/python -S /usr/lib/mailman/cron/gate_news)
Mar 30 22:40:45 h1319289 pop3d-ssl: Connection, ip=[127.0.0.1]
Mar 30 22:40:45 h1319289 pop3d-ssl: LOGOUT, ip=[127.0.0.1]
Mar 30 22:40:45 h1319289 pop3d: Connection, ip=[127.0.0.1]
Mar 30 22:40:45 h1319289 pop3d: LOGOUT, ip=[127.0.0.1]

ktr453 · Mar 31, 2008

und der apache2/error.log

Code:

[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:34 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec2)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:35:34 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sun Mar 30 22:35:35 2008] [notice] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Sun Mar 30 22:35:35 2008] [notice] mod_python: using mutex_directory /tmp 
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Memory Allocated 112 bytes (each conf takes 28 bytes)
[Sun Mar 30 22:35:36 2008] [notice] mod_bw : Version 0.8 - Initialized [4 Confs]
[Sun Mar 30 22:35:36 2008] [notice] Apache/2.2.3 (Linux/SUSE) configured -- resuming normal operations
[Sun Mar 30 22:55:59 2008] [notice] caught SIGTERM, shutting down
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:57:44 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec2)
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `h1319289.stratoserver.net' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: eol-schlesien-acktuel.de:443 (/srv/www/vhosts/eol-schlesien-acktuel.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: Arcade-fun-board.de:443 (/srv/www/vhosts/Arcade-fun-board.de/conf/httpd.include:12) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: webmail:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:155) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: SSL server IP/port conflict: default-85-214-25-197:443 (/etc/apache2/conf.d/zz010_psa_httpd.conf:98) vs. zeiberteck.de:443 (/srv/www/vhosts/zeiberteck.de/conf/httpd.include:12)
[Sun Mar 30 22:57:44 2008] [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!!
[Sun Mar 30 22:57:45 2008] [notice] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Sun Mar 30 22:57:45 2008] [notice] mod_python: using mutex_directory /tmp 
No worker file and no worker options in httpd.conf \nuse JkWorkerFile to set workers\n
[Sun Mar 30 22:57:45 2008] [notice] mod_bw : Memory Allocated 112 bytes (each conf takes 28 bytes)
[Sun Mar 30 22:57:45 2008] [notice] mod_bw : Version 0.8 - Initialized [4 Confs]
[Sun Mar 30 22:57:45 2008] [notice] Apache/2.2.3 (Linux/SUSE) configured -- resuming normal operations
[Sun Mar 30 23:43:11 2008] [error] [client 87.118.64.133] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Sun Mar 30 23:43:46 2008] [error] [client 87.118.64.133] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)

wegen meiner Rechtschreibung werde ich auf passen mann hat mich aber aus dem bett geholt und ich sitze hier mit Riesen Zahnschmerzen .

bitte daher um Entschuldigung

chris085 · Mar 31, 2008

Hmm kann nichts erkennen, von wann sind die Logs jetzt ?
und was ist in der Zeit passiert ?

ktr453 · Mar 31, 2008

ja sind von jetzt

hat sich aber nichts Geändert

verstehe das nur nicht das die deinste dauernd abstürzen.

das habe ich das erste mal und habe den Server schon seit zwei Jahren der andere Server ist ok.

SMTP(Qmail ) ist immer noch nicht aktiv zu bekommen die anderen habe ich hin bekommen die laufen jetzt

ktr453 · Mar 31, 2008

Schon wieder alles down

der top
log

Code:

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 9567 wwwrun    16   0 70800  15m 4524 S    6  0.8   0:00.91 httpd2-prefork
 3561 mysql     18   0  123m  33m 5008 S    3  1.7   3:31.64 mysqld
 9400 wwwrun    18   0  107m  53m 4396 D    3  2.7   0:10.85 httpd2-prefork
 9439 wwwrun    18   0  107m  53m 4384 D    3  2.7   0:05.64 httpd2-prefork
 9520 wwwrun    18   0  106m  53m 4348 D    3  2.7   0:08.46 httpd2-prefork
 9440 wwwrun    18   0  107m  53m 4396 D    2  2.7   0:07.00 httpd2-prefork
 9455 wwwrun    18   0  106m  53m 4336 D    2  2.7   0:05.66 httpd2-prefork
 9458 wwwrun    18   0  106m  53m 4344 D    2  2.7   0:08.79 httpd2-prefork
 9441 wwwrun    18   0  107m  53m 4388 D    2  2.7   0:06.95 httpd2-prefork
 9517 wwwrun    18   0  106m  53m 4168 D    2  2.6   0:04.76 httpd2-prefork
 9558 wwwrun    18   0  106m  53m 4128 D    2  2.6   0:05.25 httpd2-prefork
 9014 wwwrun    18   0  107m  54m 4432 D    1  2.7   0:16.50 httpd2-prefork
 9413 wwwrun    18   0  107m  53m 4380 D    1  2.7   0:06.88 httpd2-prefork
 9500 wwwrun    18   0  106m  53m 4328 D    1  2.7   0:05.26 httpd2-prefork
 9525 wwwrun    18   0  106m  53m 4344 D    1  2.7   0:06.02 httpd2-prefork
 9559 wwwrun    18   0  106m  53m 4128 D    1  2.6   0:04.97 httpd2-prefork
  967 root      10  -5     0    0    0 D    1  0.0   0:15.81 kjournald
 5085 wwwrun    18   0  107m  54m 4468 D    1  2.7   1:33.98 httpd2-prefork
25242 wwwrun    18   0  107m  54m 4452 D    1  2.7   0:32.33 httpd2-prefork
 8721 wwwrun    18   0  106m  53m 4344 D    1  2.7   1:00.23 httpd2-prefork
 9560 wwwrun    18   0  106m  53m 4128 D    1  2.6   0:04.78 httpd2-prefork
 5037 wwwrun    18   0  109m  55m 5556 D    1  2.8   1:24.83 httpd2-prefork
 6307 wwwrun    18   0  106m  53m 4316 D    1  2.7   1:53.42 httpd2-prefork
  173 root      15   0     0    0    0 S    0  0.0   0:08.68 pdflush
  175 root      10  -5     0    0    0 S    0  0.0   0:07.97 kswapd0
  954 root      11  -5     0    0    0 S    0  0.0   0:10.94 md1_raid1
 4979 root      26  10 13836 9996 1112 S    0  0.5   1:47.32 PleskX.pl
 9201 wwwrun    15   0 69404  14m 4396 D    0  0.7   0:07.06 httpd2-prefork
 9488 wwwrun    15   0 71920  16m 4400 S    0  0.8   0:04.87 httpd2-prefork
 9495 wwwrun    16   0 71628  16m 4364 S    0  0.8   0:02.75 httpd2-prefork
 9502 wwwrun    15   0 69580  14m 4368 D    0  0.7   0:00.74 httpd2-prefork
 9570 wwwrun    15   0 67152  12m 4288 D    0  0.6   0:00.23 httpd2-prefork
    1 root      15   0   744  292  244 S    0  0.0   0:01.51 init
    2 root      RT   0     0    0    0 S    0  0.0   0:00.02 migration/0
    3 root      34  19     0    0    0 S    0  0.0   0:00.00 ksoftirqd/0
    4 root      RT   0     0    0    0 S    0  0.0   0:00.08 migration/1
    5 root      34  19     0    0    0 S    0  0.0   0:00.00 ksoftirqd/1
    6 root      10  -5     0    0    0 S    0  0.0   0:00.00 events/0
    7 root      10  -5     0    0    0 S    0  0.0   0:00.00 events/1
    8 root      10  -5     0    0    0 S    0  0.0   0:00.00 khelper
    9 root      10  -5     0    0    0 S    0  0.0   0:00.00 kthread
   13 root      13  -5     0    0    0 S    0  0.0   0:00.01 kblockd/0
   14 root      10  -5     0    0    0 S    0  0.0   0:00.08 kblockd/1
   15 root      15  -5     0    0    0 S    0  0.0   0:00.00 kacpid
   16 root      15  -5     0    0    0 S    0  0.0   0:00.00 kacpi_notify
  125 root      12  -5     0    0    0 S    0  0.0   0:00.00 cqueue/0
  126 root      13  -5     0    0    0 S    0  0.0   0:00.00 cqueue/1
  127 root      11  -5     0    0    0 S    0  0.0   0:00.00 kseriod
  174 root      15   0     0    0    0 S    0  0.0   0:06.56 pdflush
  176 root      11  -5     0    0    0 S    0  0.0   0:00.00 aio/0
  177 root      11  -5     0    0    0 S    0  0.0   0:00.00 aio/1
  422 root      20  -5     0    0    0 S    0  0.0   0:00.00 kpsmoused
  790 root      10  -5     0    0    0 S    0  0.0   0:00.00 ata/0
  791 root      20  -5     0    0    0 S    0  0.0   0:00.00 ata/1
  792 root      20  -5     0    0    0 S    0  0.0   0:00.00 ata_aux

und die Print ausgabe

Code:

PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 9558 wwwrun    18   0  106m  53m 4128 D    5  2.6   0:06.10 httpd2-prefork
 9400 wwwrun    18   0  107m  53m 4396 D    4  2.7   0:11.58 httpd2-prefork
 9440 wwwrun    18   0  107m  53m 4396 D    4  2.7   0:07.74 httpd2-prefork
 9441 wwwrun    18   0  107m  53m 4388 D    4  2.7   0:07.89 httpd2-prefork
 9455 wwwrun    18   0  106m  53m 4336 D    4  2.7   0:06.56 httpd2-prefork
 9458 wwwrun    18   0  106m  53m 4344 D    4  2.7   0:09.67 httpd2-prefork
 9525 wwwrun    18   0  106m  53m 4344 D    4  2.7   0:06.86 httpd2-prefork
 9560 wwwrun    18   0  106m  53m 4128 D    4  2.6   0:05.49 httpd2-prefork
 4979 root      26  10 13836 9996 1112 S    2  0.5   1:47.51 PleskX.pl
 5037 wwwrun    18   0  109m  55m 5556 R    2  2.8   1:25.57 httpd2-prefork
 5085 wwwrun    18   0  107m  54m 4468 D    2  2.7   1:34.66 httpd2-prefork
 8721 wwwrun    18   0  106m  53m 4344 D    2  2.7   1:00.94 httpd2-prefork
 9014 wwwrun    18   0  107m  54m 4432 D    2  2.7   0:17.38 httpd2-prefork
 9413 wwwrun    18   0  107m  53m 4380 D    2  2.7   0:07.66 httpd2-prefork
 9500 wwwrun    18   0  106m  53m 4328 D    2  2.7   0:06.09 httpd2-prefork
 9517 wwwrun    18   0  106m  53m 4168 D    2  2.6   0:05.60 httpd2-prefork
 9520 wwwrun    18   0  106m  53m 4348 D    2  2.7   0:09.29 httpd2-prefork
 9605 wwwrun    16   0 71772  16m 4360 S    2  0.8   0:02.05 httpd2-prefork
 9680 root      15   0  2384 1044  696 R    2  0.1   0:00.04 top
 9676 mysql     16   0  124m  35m 5008 D    1  1.8   0:00.55 mysqld
25242 wwwrun    18   0  107m  54m 4452 R    1  2.7   0:33.07 httpd2-prefork
 9439 wwwrun    18   0  107m  53m 4384 D    1  2.7   0:06.40 httpd2-prefork
 9559 wwwrun    18   0  106m  53m 4128 D    1  2.6   0:05.80 httpd2-prefork
    1 root      15   0   744  292  244 S    0  0.0   0:01.51 init
    2 root      RT   0     0    0    0 S    0  0.0   0:00.02 migration/0
    3 root      34  19     0    0    0 S    0  0.0   0:00.00 ksoftirqd/0
    4 root      RT   0     0    0    0 S    0  0.0   0:00.08 migration/1
    5 root      34  19     0    0    0 S    0  0.0   0:00.00 ksoftirqd/1
    6 root      10  -5     0    0    0 S    0  0.0   0:00.00 events/0
    7 root      10  -5     0    0    0 S    0  0.0   0:00.00 events/1
    8 root      18  -5     0    0    0 S    0  0.0   0:00.00 khelper
    9 root      10  -5     0    0    0 S    0  0.0   0:00.00 kthread
   13 root      10  -5     0    0    0 S    0  0.0   0:00.01 kblockd/0
   14 root      10  -5     0    0    0 S    0  0.0   0:00.08 kblockd/1
   15 root      15  -5     0    0    0 S    0  0.0   0:00.00 kacpid
   16 root      15  -5     0    0    0 S    0  0.0   0:00.00 kacpi_notify
  125 root      12  -5     0    0    0 S    0  0.0   0:00.00 cqueue/0
  126 root      13  -5     0    0    0 S    0  0.0   0:00.00 cqueue/1
  127 root      11  -5     0    0    0 S    0  0.0   0:00.00 kseriod
  173 root      15   0     0    0    0 S    0  0.0   0:08.87 pdflush
  174 root      15   0     0    0    0 D    0  0.0   0:06.56 pdflush
  175 root      10  -5     0    0    0 S    0  0.0   0:08.13 kswapd0
  176 root      11  -5     0    0    0 S    0  0.0   0:00.00 aio/0
  177 root      11  -5     0    0    0 S    0  0.0   0:00.00 aio/1
  422 root      20  -5     0    0    0 S    0  0.0   0:00.00 kpsmoused
  790 root      10  -5     0    0    0 S    0  0.0   0:00.00 ata/0
  791 root      20  -5     0    0    0 S    0  0.0   0:00.00 ata/1
  792 root      20  -5     0    0    0 S    0  0.0   0:00.00 ata_aux
  799 root      16  -5     0    0    0 S    0  0.0   0:00.01 scsi_eh_0
  800 root      11  -5     0    0    0 S    0  0.0   0:00.01 scsi_eh_1
  823 root      10  -5     0    0    0 S    0  0.0   0:00.00 scsi_eh_2
  831 root      10  -5     0    0    0 S    0  0.0   0:00.00 scsi_eh_3
  954 root      10  -5     0    0    0 S    0  0.0   0:11.34 md1_raid1
  955 root      10  -5     0    0    0 D    0  0.0   0:04.43 md1_resync
  967 root      10  -5     0    0    0 S    0  0.0   0:16.14 kjournald
 1011 root      21  -4  1836  584  336 S    0  0.0   0:00.11 udevd
 1759 root      16  -5     0    0    0 S    0  0.0   0:00.00 khubd
 2001 root      10  -5     0    0    0 S    0  0.0   0:00.00 md0_raid1
 2363 root      17   0  1828  648  532 S    0  0.0   0:00.00 resmgrd
 2410 messageb  15   0  3548  920  708 S    0  0.0   0:00.01 dbus-daemon
 2417 root      18   0  1584  528  436 S    0  0.0   0:00.00 acpid
 2463 root      19   0  3252 1720 1480 S    0  0.1   0:00.01 polkitd
 2464 haldaemo  18   0  5340 3824 1864 S    0  0.2   0:00.14 hald
 2474 root      25   0  2948 1088  920 S    0  0.1   0:00.00 hald-runner
 2853 root      15   0  3024 1216 1036 S    0  0.1   0:00.00 hald-addon-cpuf
 2888 haldaemo  21   0  2024  856  728 S    0  0.0   0:00.00 hald-addon-acpi
 3089 root      22   0  1612  224  156 S    0  0.0   0:00.00 dhcpcd
 3255 root      15   0  2104  656  444 S    0  0.0   0:00.10 syslog-ng
 3265 root      18   0  1724  536  336 S    0  0.0   0:00.00 klogd
 3325 root      19   0  4416 1696 1360 S    0  0.1   0:00.01 powersaved
 3328 root      18   0  3244  788  588 S    0  0.0   0:00.00 couriertcpd
 3330 root      18   0  3144  904  712 S    0  0.0   0:00.00 courierlogger
 3338 root      10  -5     0    0    0 S    0  0.0   0:00.00 kondemand/0
 3339 root      11  -5     0    0    0 S    0  0.0   0:00.00 kondemand/1
 3345 root      18   0  3244  788  588 S    0  0.0   0:00.00 couriertcpd
 3347 root      18   0  3148  904  712 S    0  0.0   0:00.00 courierlogger
 3358 root      18   0  3240  788  588 S    0  0.0   0:00.00 couriertcpd
 3362 root      18   0  3148  908  712 S    0  0.0   0:00.00 courierlogger
 3373 root      15   0  3240  788  588 S    0  0.0   0:00.00 couriertcpd
 3375 root      18   0  3144  908  712 S    0  0.0   0:00.00 courierlogger
 3383 ntp       15   0  4388 1464 1132 S    0  0.1   0:00.00 ntpd
 3410 root      15   0  104m 1084  804 S    0  0.1   0:00.23 nscd
 3411 root      15   0  104m 1084  804 S    0  0.1   0:00.05 nscd
 3412 root      15   0  104m 1084  804 S    0  0.1   0:00.05 nscd
 3413 root      15   0  104m 1084  804 S    0  0.1   0:00.02 nscd
 3414 root      15   0  104m 1084  804 S    0  0.1   0:00.03 nscd
 3415 root      15   0  104m 1084  804 S    0  0.1   0:00.04 nscd
 3416 root      15   0  104m 1084  804 S    0  0.1   0:00.01 nscd
 3467 root      17   0  1976  596  472 S    0  0.0   0:00.00 cron
 3494 named     21   0 31268 3064 1904 S    0  0.1   0:00.00 named
 3495 named     17   0 31268 3064 1904 S    0  0.1   0:00.00 named
 3496 named     18   0 31268 3064 1904 S    0  0.1   0:00.00 named
 3497 named     15   0 31268 3064 1904 S    0  0.1   0:00.00 named
 3512 root      25   0  2636 1272 1044 S    0  0.1   0:00.02 mysqld_safe
 3561 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.23 mysqld
 3566 mysql     20   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 3567 mysql     15   0  124m  35m 5008 D    0  1.8   0:00.04 mysqld
 3568 mysql     17   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 3569 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.15 mysqld
 3573 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 3574 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 3575 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.32 mysqld
 3577 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.05 mysqld
 3839 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.42 mysqld
 4953 mysql     24   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 4954 mysql     25   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 4957 mysql     25   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 4960 mysql     19   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 4970 mysql     16   0  124m  35m 5008 S    0  1.8   0:00.04 mysqld
 5207 mysql     18   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 9060 mysql     19   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
12823 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.11 mysqld
 7346 mysql     16   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 8594 mysql     16   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 8774 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.11 mysqld
 8796 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.11 mysqld
 8808 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.11 mysqld
 9018 mysql     18   0  124m  35m 5008 S    0  1.8   0:00.01 mysqld
 9233 mysql     17   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 9446 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.17 mysqld
 9447 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.17 mysqld
 9471 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.21 mysqld
 9476 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.21 mysqld
 9481 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.14 mysqld
 9513 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.13 mysqld
 9532 mysql     18   0  124m  35m 5008 S    0  1.8   0:00.18 mysqld
 9543 mysql     21   0  124m  35m 5008 S    0  1.8   0:00.22 mysqld
 9544 mysql     20   0  124m  35m 5008 S    0  1.8   0:00.17 mysqld
 9545 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.11 mysqld
 9548 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.13 mysqld
 9549 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.10 mysqld
 9550 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.09 mysqld
 9551 mysql     18   0  124m  35m 5008 S    0  1.8   0:00.00 mysqld
 9564 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.18 mysqld
 9565 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.14 mysqld
 9566 mysql     15   0  124m  35m 5008 S    0  1.8   0:00.19 mysqld
 3589 root      11  -5     0    0    0 S    0  0.0   0:00.00 kauditd
 3613 postgres  18   0 20504 3224 2640 S    0  0.2   0:00.30 postmaster
 3620 postgres  15   0 10284 1112  524 S    0  0.1   0:00.00 postmaster
 3626 postgres  15   0 20504 1244  656 S    0  0.1   0:00.00 postmaster
 3627 postgres  15   0 11284 1024  436 S    0  0.0   0:00.00 postmaster
 3628 postgres  15   0 10432 1276  568 S    0  0.1   0:00.00 postmaster
 3637 root      15   0 27836  24m 2300 S    0  1.2   0:00.50 spamd
 3638 popuser   19   0 27836  23m 1244 S    0  1.2   0:00.42 spamd
 3639 popuser   15   0 27836  23m  960 S    0  1.2   0:00.00 spamd
 3675 root      15   0 10916 2984 2216 S    0  0.1   0:00.41 sshd
 3680 root      15   0 66076  14m 8072 S    0  0.7   0:00.44 httpd2-prefork
 3688 wwwrun    15   0 66036 7880  764 S    0  0.4   0:00.00 httpd2-prefork
 3740 root      15   0  4280 1928 1460 S    0  0.1   0:00.05 bash
 3744 root      18   0  2056  640  560 S    0  0.0   0:00.00 mingetty
 3746 root      18   0  2056  636  560 S    0  0.0   0:00.00 mingetty
 3748 root      18   0  2056  640  560 S    0  0.0   0:00.00 mingetty
 3749 root      18   0  2056  636  560 S    0  0.0   0:00.00 mingetty
 3750 root      18   0  2060  640  560 S    0  0.0   0:00.00 mingetty
 3753 root      18   0  2060  636  560 S    0  0.0   0:00.00 mingetty
 3755 root      17   0  1584  496  432 S    0  0.0   0:00.00 agetty
 3760 root      24   0 20924 7900 5092 S    0  0.4   0:00.19 wdcollect
 3761 root      15   0 29140 2388 1892 S    0  0.1   0:01.66 monit
 3834 root      15   0 29140 2388 1892 S    0  0.1   0:00.00 monit
 3885 drweb     15   0 22436  17m  496 S    0  0.9   0:00.01 drwebd
 3886 drweb     15   0 22436  17m  772 S    0  0.9   0:00.04 drwebd
 3887 drweb     15   0 22436  17m  568 S    0  0.9   0:00.00 drwebd
 3888 drweb     15   0 22436  17m  568 S    0  0.9   0:00.00 drwebd
 3889 drweb     15   0 22436  17m  568 S    0  0.9   0:00.01 drwebd
 3954 tomcat    25   0  750m  71m  12m S    0  3.6   0:04.37 java
 3958 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.06 java
 3959 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.08 java
 3961 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.02 java
 3962 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.00 java
 3963 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.00 java
 3970 tomcat    19   0  750m  71m  12m S    0  3.6   0:00.00 java
 3971 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.00 java
 3972 tomcat    15   0  750m  71m  12m S    0  3.6   0:03.98 java
 3973 tomcat    15   0  750m  71m  12m S    0  3.6   0:03.41 java
 3974 tomcat    19   0  750m  71m  12m S    0  3.6   0:00.00 java
 3975 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.02 java
 3994 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.23 java
 3995 tomcat    19   0  750m  71m  12m S    0  3.6   0:00.00 java
 3996 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 3997 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 3998 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 3999 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4000 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4001 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4002 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4003 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4004 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4005 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4006 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4007 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4008 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4009 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4010 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4011 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4012 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4013 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4014 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4015 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4016 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4017 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4018 tomcat    20   0  750m  71m  12m S    0  3.6   0:00.00 java
 4019 tomcat    21   0  750m  71m  12m S    0  3.6   0:00.04 java
 4020 tomcat    18   0  750m  71m  12m S    0  3.6   0:00.00 java
 4021 tomcat    21   0  750m  71m  12m S    0  3.6   0:00.00 java
 4022 tomcat    22   0  750m  71m  12m S    0  3.6   0:00.00 java
 4023 tomcat    22   0  750m  71m  12m S    0  3.6   0:00.00 java
 4024 tomcat    22   0  750m  71m  12m S    0  3.6   0:00.00 java
 4025 tomcat    18   0  750m  71m  12m S    0  3.6   0:00.00 java
 4026 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.00 java
 4027 tomcat    24   0  750m  71m  12m S    0  3.6   0:00.00 java
 4028 tomcat    24   0  750m  71m  12m S    0  3.6   0:00.00 java
 4029 tomcat    24   0  750m  71m  12m S    0  3.6   0:00.00 java
 4030 tomcat    24   0  750m  71m  12m S    0  3.6   0:00.00 java
 4031 tomcat    19   0  750m  71m  12m S    0  3.6   0:00.00 java
 4032 tomcat    25   0  750m  71m  12m S    0  3.6   0:00.00 java
 4033 tomcat    25   0  750m  71m  12m S    0  3.6   0:00.00 java
 4034 tomcat    25   0  750m  71m  12m S    0  3.6   0:00.00 java
 4035 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.00 java
 4036 tomcat    15   0  750m  71m  12m S    0  3.6   0:00.00 java
 4950 root      18   0  5632 1532 1052 S    0  0.1   0:00.00 cron
 4951 root      21   0  2632 1136  952 S    0  0.1   0:00.00 sh
 4952 psaadm    15   0  5428 1624 1080 S    0  0.1   0:00.01 backupmng
 4955 psaadm    20   0  5308  680  236 S    0  0.0   0:00.00 backupmng
 4956 psaadm    25  10 30416  18m 5148 S    0  0.9   0:00.78 scheduled_backu
 4964 root      25  10 28324 7552 1760 S    0  0.4   0:00.67 agent_runner
 4966 root      30  10 28324 7552 1760 S    0  0.4   0:00.00 agent_runner
 4967 root      29  10 13572  10m 2220 S    0  0.5   0:00.44 PleskX.pl
 4980 root      26  10  5176 1212  864 S    0  0.1   0:00.35 backup_sign
 4982 root      26  10 13876 9684  744 S    0  0.5   0:00.28 PleskX.pl
 5021 root      26  10  2344  796  584 R    0  0.0   0:33.82 tar
 5358 root      18   0  5808 1368  928 S    0  0.1   0:00.17 sshd
 6307 wwwrun    18   0  106m  53m 4316 R    0  2.7   1:54.09 httpd2-prefork
 8642 root      17   0 44048  40m  296 S    0  2.0   0:00.00 aveserver
 9201 wwwrun    15   0 69660  14m 4396 S    0  0.7   0:07.51 httpd2-prefork
 9235 root      15   0  2448  860  708 S    0  0.0   0:00.00 xinetd
 9248 qmails    16   0  1632  420  332 S    0  0.0   0:00.01 qmail-send
 9250 qmaill    18   0  1584  484  408 S    0  0.0   0:00.00 splogger
 9251 root      18   0  1612  368  272 S    0  0.0   0:00.00 qmail-lspawn
 9252 qmailr    15   0  1608  388  292 S    0  0.0   0:00.00 qmail-rspawn
 9253 qmailq    18   0  1580  360  292 S    0  0.0   0:00.00 qmail-clean
 9422 wwwrun    15   0 69776  14m 4364 S    0  0.7   0:04.69 httpd2-prefork
 9466 wwwrun    15   0 69884  15m 4368 S    0  0.8   0:02.27 httpd2-prefork
 9467 wwwrun    15   0 69780  14m 4368 S    0  0.7   0:01.86 httpd2-prefork
 9488 wwwrun    15   0 69112  14m 4416 S    0  0.7   0:05.99 httpd2-prefork
 9495 wwwrun    15   0 69024  13m 4416 S    0  0.7   0:03.47 httpd2-prefork
 9502 wwwrun    15   0 69580  14m 4360 S    0  0.7   0:01.30 httpd2-prefork
 9505 wwwrun    15   0 69996  15m 4372 S    0  0.8   0:02.20 httpd2-prefork
 9556 wwwrun    15   0 69620  14m 4356 S    0  0.7   0:00.93 httpd2-prefork
 9562 wwwrun    15   0 68752  13m 4352 S    0  0.7   0:01.00 httpd2-prefork
 9567 wwwrun    15   0 69348  14m 4368 S    0  0.7   0:01.33 httpd2-prefork
 9572 root      18   0  5632 1532 1052 S    0  0.1   0:00.01 cron
 9586 mailman   18   0  8304 5816 2288 D    0  0.3   0:00.23 python
 9638 wwwrun    15   0 66340  10m 3676 S    0  0.5   0:00.03 httpd2-prefork
 9640 wwwrun    15   0 66208 9276 1932 S    0  0.5   0:00.09 httpd2-prefork
 9641 wwwrun    15   0 66208 9204 1924 S    0  0.4   0:00.00 httpd2-prefork
 9648 root      15   0 40708 6604 4044 S    0  0.3   0:00.04 httpsd
 9652 psaadm    19   0 40708 3280  772 S    0  0.2   0:00.00 httpsd
 9658 wwwrun    15   0 68484  13m 4336 S    0  0.7   0:00.63 httpd2-prefork

chris085 · Mar 31, 2008

Das sind relativ viele apache childs.
Hast du immer so viele klicks auf deine Seiten ?
Überprüfe in deiner access_log vom apachen auf welche Seiten meistens zugegriffen wird oder von welcher IP sie kommen, ist es immer die gleiche ?

ktr453 · Mar 31, 2008

Kann da nichts finden

Code:

208.36.144.7 - - [30/Mar/2008:20:25:02 +0200] "GET /robots.txt HTTP/1.0" 301 346 "-" "Mozilla/5.0 (Twiceler-0.9 http://www.cuill.com/twiceler/robot.html)"
91.66.39.170 - - [30/Mar/2008:21:45:29 +0200] "GET /logo.gif HTTP/1.1" 301 344 "http://www.topklix.de/top/tl/380/index.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.2)"
62.141.58.88 - - [30/Mar/2008:21:50:51 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 302 "-" "-"
88.74.165.158 - - [30/Mar/2008:21:54:09 +0200] "GET /wbb2/images/afc_doublesonic/logo.gif HTTP/1.1" 301 372 "http://www.gt-corner.de/wbb2/thread.php?threadid=16277" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)"
91.66.39.170 - - [30/Mar/2008:21:55:06 +0200] "GET /logo.gif HTTP/1.1" 301 344 "http://www.topklix.de/top/tl/380/index.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.2)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
127.0.0.1 - - [30/Mar/2008:23:05:26 +0200] "GET / HTTP/1.0" 200 3523 "-" "Apache/2.2.3 (Linux/SUSE) (internal dummy connection)"
87.118.64.133 - - [30/Mar/2008:23:44:02 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 302 "-" "-"
91.50.111.223 - - [31/Mar/2008:00:22:23 +0200] "GET /logo.gif HTTP/1.1" 301 344 "http://www.topklix.de/top/tl/380/index.html" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
74.53.83.10 - - [31/Mar/2008:00:44:18 +0200] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 302 "-" "-"

das ist der ganze log bisschen wenig für die fielen Zugriffe

ktr453 · Mar 31, 2008

so nun ist es amtlich bin gehackt worden komme nirgends mehr wo rein alle Passwörter weg

keins stimmt mehr !

chris085 · Mar 31, 2008

na also, jetzt hast du einen Grund alles frisch, neu und perfekt zu installieren.
Du hast vorhin was von 2 Jahren geschrieben...... zum Vergleich, bei mir ist ungefähr alle 6 Monate eine große Aktion.. Spamer, Fehlerhaftes Plesk Update, Apache durch Sicherheitslücke zerschossen...whatever. Durch Fehler fixen lernst du schließlich auch was.
Wunder dich also nicht, that's the Internet.

elias5000 · Mar 31, 2008

blaich said:
bei mir ist ungefähr alle 6 Monate eine große Aktion..

So oft? Krass...

chris085 · Mar 31, 2008

natürlich keine Neuinstallation

ist ja wohl klar.
Aber n kleiner Ddos.. doch.. doch das kommt hin.

elias5000 · Mar 31, 2008

Da hab ich wohl Glück gehabt, dass ich seit >4 Jahren noch keine Probleme hatte, die nicht hausgemacht waren... *auf Holz klopf*

Wobei DDoS echt ne fiese Sache ist. Ich will nicht der Admin für GEZ sein...

chris085 · Mar 31, 2008

oha stimmt

Wobei, wer guckt schon auf die Webseite ^^

Kann mir mahl jemand weiter helfen

ktr453

New Member

Guin

Registered User

ktr453

New Member

chris085

Registered User

ktr453

New Member

ktr453

New Member

chris085

Registered User

ktr453

New Member

ktr453

New Member

chris085

Registered User

ktr453

New Member

ktr453

New Member

chris085

Registered User

elias5000

Site Reliability Engineer

chris085

Registered User

elias5000

Site Reliability Engineer

chris085

Registered User

We value your privacy