On Thu, 7 Mar 2002, Shachar Shemesh wrote: > A. System clock is WAY off. > B. The load seems to be generated by someone performing a mirror of the > lxr kernel source. I get an average of 2 requests per second of kernel > source code. I don't know anyone who can read sources THAT fast. > The guy's address is adslp219-nv64a-p135.adsl.netvision.net.il, for > what's it worth. If that turns out to be you, mulix, you will have some > explaining to do.... ;)
[ Mulix is connected through actcom ] Previously the load was created by many index.cgi precesses. I saw in the logs many entries from that address: (adslp219-nv64a-p135.adsl.netvision.net.il) (I'm not 100% sure. grep for 'faq' in access_log). > > Do we want to do anything about it? > > Shachar > > mulix wrote: > > >On Thu, Mar 07,2002 at 12:04:39PM +0200, Amir Tal wrote: > > > >>The images from the main webpage are gone...is that related ? > >>Ohh, and NO ftp access what so ever (at least not for me...I'm connected > >>from netvision) > >> > > > >here's the top output. are we being DoS'd, or is this normal? > > > >3:11pm up 25 days, 21:44, 2 users, load average: 39.55, 46.85, 65.69 > >249 processes: 198 sleeping, 48 running, 2 zombie, 1 stopped > >CPU states: 87.5% user, 12.4% system,0.0% nice, 0.0% idle > >Mem: 327252K av, 308816K used, 18436K free, 0K shrd, 14712K buff > >Swap: 1049552K av, 71736K used, 977816K free 112672K cached > > > >PID USER PRI NI SIZE RSS SHARE STAT LIB %CPU %MEM TIME COMMAND > >31672 nobody 10 0 3760 3760 1252 R 0 3.2 1.1 0:00 index.cgi > >31712 nobody 12 0 2576 2576 1236 R 0 1.8 0.7 0:00 index.cgi > >31698 nobody 11 0 2460 2460 1232 R 0 1.7 0.7 0:00 index.cgi > >31704 nobody 12 0 2388 2388 1220 R 0 1.7 0.7 0:00 index.cgi > >31705 nobody 11 0 2504 2504 1232 R 0 1.7 0.7 0:00 index.cgi > >31710 nobody 11 0 2388 2388 1220 R 0 1.7 0.7 0:00 index.cgi > >31713 nobody 12 0 2388 2388 1220 R 0 1.7 0.7 0:00 index.cgi > >31654 nobody 10 0 3412 3412 1232 R 0 1.6 1.0 0:00 index.cgi > >31660 nobody 10 0 3400 3400 1232 R 0 1.6 1.0 0:00 index.cgi > >31661 nobody 10 0 3628 3628 1232 R 0 1.6 1.1 0:00 index.cgi > >31665 nobody 10 0 3764 3764 1252 R 0 1.6 1.1 0:00 index.cgi > >31699 nobody 11 0 2388 2388 1220 R 0 1.6 0.7 0:00 index.cgi > >31702 nobody 11 0 2440 2440 1232 R 0 1.6 0.7 0:00 index.cgi > >31703 nobody 11 0 2404 24041236 R 0 1.6 0.7 0:00 index.cgi > >31706 nobody 11 0 2400 2400 1232 R 0 1.6 0.7 0:00 index.cgi > >31709 nobody 11 0 2392 2392 1224 R 0 1.6 0.7 0:00 index.cgi > >29790 mirror 17 0 1692 1692 460 R 0 1.50.5 0:16 webalizer > > -- Tzafrir Cohen /"\ mailto:[EMAIL PROTECTED] \ / ASCII Ribbon Campaign Taub 229, 972-4-829-3942, X Against HTML Mail http://www.technion.ac.il/~tzafrir / \ ---------------------------------------------------------------------------- To unsubscribe, send a message to [EMAIL PROTECTED] Archives available at http://www.mail-archive.com/[email protected]/
