CPanel won't update...

[yeppers]

heya all,

Well my stupid ****ing cpanel won't update...

lol ok sorry about that, but my server's been going down lately for no reason, no website are using any amount of CPU or memory that would cause a crash of CPanel, but it seems to be happening. So now i've tried updating CPanel, but no luck.

Im on a VPS with around 256ram, 20gb space and guess the rest.

When I check my CPU and memory usages, i'm getting around 30% usage by a "NOBODY" user.

Any ideas?

 

[BeZazz]

im guessing you have been hacked is the noboddy syslogd?
trying running

top -c
to see what is actually running

i hope you are allowed to double post here

im guessing based on nothing lol
if you look in /tmp there will be perl files
if there are perl files more then likely they were uploaded via php if so you will need to edit php.ini
and make sure disable_functions looks like
disable_functions = system, exec, shell_exec, passthru
save it then reboot the server

 

[Camron]

How many cPanel accounts you have running? Any proxys? Arcade sites? Large memory or cpu eating websites?

Try doing a ping, maybe your network is having issues. Have you tried to reboot via ssh? Just type reboot.

 

[yeppers]

Hey ethix,
I haven't got that syslogd process

I managed to get CPanel to update, turns out it was just the computer I was on or something.

BUT, I am still havin strange CPU usage, these are the top 3 in my CPanel CPU Usage section:
Top Process %CPU 53.7 /bin/bash 194.57 22
Top Process %CPU 52.7 /bin/bash 194.55 22
Top Process %CPU 52.6 /bin/bash 194.56 22

Any idea what that is? :S

Thanks!
Rhett.

Also: When I typed top -c I had many /usr/sbin/sshd processes running apparently.

How many cPanel accounts you have running? Any proxys? Arcade sites? Large memory or cpu eating websites?

Try doing a ping, maybe your network is having issues. Have you tried to reboot via ssh? Just type reboot.

Hey Camron, no I don't have any large sites sitting on the VPS anymore. I've tried restarting the server, but it continues to do the same thing.

 

[Camron]

I am not 100% sure what's wrong but you may want to contact www.platinumservermanagement.com and have them take a look at it. Many of my servers were repaired by them, and they may give a discount due to being a vps.

Good luck and I hope you solve your issue

 

[BeZazz]

Hey ethix,

Top Process %CPU 53.7 /bin/bash 194.57 22
Top Process %CPU 52.7 /bin/bash 194.55 22
Top Process %CPU 52.6 /bin/bash 194.56 22

Any idea what that is? :S

Thanks!
Rhett.

Also: When I typed top -c I had many /usr/sbin/sshd processes running apparently.

i would check /var/log
and read through "secure" and "messages"
im guessing your not the only person with SSH access and therefore prob not the only one with root access

so have a look checkout the IP's connecting via SSH
if you want you can email me at "ethix at danethical.com" if you have more questions as you really have to be carefull what you post in public when it comes to security related stuff