• 09-07-2009, 00:56:27
    #1
    Arkadaşlar cok acil suncuuda sorunum var ve yardımcı olabilecek arkadaşa ihtiyacım var.

    Centos5.2 kurulu ve plesk 8.6 sunucu acılırken donuyor. Plesk acılıyor bir ara sonra baglantı kesiliyor.
  • 09-07-2009, 01:05:28
    #2
    En son yaptığın değişiklik nedir?
  • 09-07-2009, 01:24:05
    #3
    Hiç bir şey yapmadım sanırım saldırı almışım ve başlarken F12 ye bastım ve 2 secenek geldi alttakine tıkladım siteler geldi ama plesk baglanmıyor.


    RROR: PleskFatalException

    Components::componentUpdate() failed: Unable to exec utility packagemng: packagemng: Unable to connect to Plesk Database: Too many connections
    packagemng: Unable to connect to the mysql database
    --------------------------------------------------------------------------------
    0: /usr/local/psa/admin/auto_prepend/auth.php3:530
  • 09-07-2009, 01:39:09
    #4
    Shellde mysqladmin -u admin -p$(cat /etc/psa/.psa.shadow) processlist cevabı nedir?
  • 09-07-2009, 01:44:48
    #5
    firewall kullanıyorsanız, 3306 portunu sadece localhosta izin verecek şekilde ayarlayın.
  • 09-07-2009, 01:54:46
    #6
    |
    | 1479 | host123 | localhost | host123 | Sleep | 499 | | |
    | 1480 | host123 | localhost | host123 | Sleep | 499 | | |
    | 1481 | host123 | localhost | host123 | Sleep | 499 | | |
    | 1482 | host123 | localhost | host123 | Sleep | 499 | | |
    | 1483 | host123 | localhost | host123 | Sleep | 501 | | |
    | 1484 | host123 | localhost | host123 | Sleep | 501 | | |
    | 1610 | host123 | localhost | host123 | Sleep | 471 | | |
    | 1826 | host123 | localhost | host123 | Sleep | 447 | | |
    | 2059 | host123 | localhost | host123 | Sleep | 79 | | |
    | 2060 | host123 | localhost | host123 | Sleep | 401 | | |
    | 2061 | host123 | localhost | host123 | Sleep | 401 | | |
    | 2062 | host123 | localhost | host123 | Sleep | 401 | | |
    | 2063 | host123 | localhost | host123 | Sleep | 399 | | |
    | 2067 | host123 | localhost | host123 | Sleep | 399 | | |
    | 2069 | host123 | localhost | host123 | Sleep | 402 | | |
    | 2070 | host123 | localhost | host123 | Sleep | 402 | | |
    | 2130 | host123 | localhost | host123 | Sleep | 380 | | |
    | 2131 | host123 | localhost | host123 | Sleep | 380 | | |
    | 2132 | host123 | localhost | host123 | Sleep | 380 | | |
    | 2133 | host123 | localhost | host123 | Sleep | 380 | | |
    | 2134 | host123 | localhost | host123 | Sleep | 380 | | |
    | 2145 | host123 | localhost | host123 | Sleep | 379 | | |
    | 2243 | host123 | localhost | host123 | Sleep | 363 | | |
    | 2244 | host123 | localhost | host123 | Sleep | 363 | | |
    | 2246 | host123 | localhost | host123 | Sleep | 363 | | |
    | 2248 | host123 | localhost | host123 | Sleep | 363 | | |
    | 2260 | host123 | localhost | host123 | Sleep | 359 | | |
    | 2262 | host123 | localhost | host123 | Sleep | 359 | | |
    | 2318 | host123 | localhost | host123 | Sleep | 344 | | |
    | 2322 | host123 | localhost | host123 | Sleep | 342 | | |
    | 2332 | host123 | localhost | host123 | Sleep | 339 | | |
    | 2340 | host123 | localhost | host123 | Sleep | 336 | | |
    | 2442 | host123 | localhost | host123 | Sleep | 287 | | |
    | 2443 | host123 | localhost | host123 | Sleep | 287 | | |
    | 2446 | host123 | localhost | host123 | Sleep | 285 | | |
    | 2506 | host123 | localhost | host123 | Sleep | 276 | | |
    | 2827 | host123 | localhost | host123 | Sleep | 255 | | |
    | 3107 | host123 | localhost | host123 | Sleep | 223 | | |
    | 3108 | host123 | localhost | host123 | Sleep | 223 | | |
    | 3109 | host123 | localhost | host123 | Sleep | 223 | | |
    | 3110 | host123 | localhost | host123 | Sleep | 222 | | |
    | 3113 | host123 | localhost | host123 | Sleep | 223 | | |
    | 3116 | host123 | localhost | host123 | Sleep | 223 | | |
    | 3683 | host123 | localhost | host123 | Sleep | 144 | | |
    | 3685 | host123 | localhost | host123 | Sleep | 141 | | |
    | 3689 | host123 | localhost | host123 | Sleep | 141 | | |
    | 3691 | host123 | localhost | host123 | Sleep | 140 | | |
    | 3694 | host123 | localhost | host123 | Sleep | 138 | | |
    | 3700 | host123 | localhost | host123 | Sleep | 138 | | |
    | 3815 | host123 | localhost | host123 | Sleep | 112 | | |
    | 3816 | host123 | localhost | host123 | Sleep | 112 | | |
    | 3817 | host123 | localhost | host123 | Sleep | 112 | | |
    | 3818 | host123 | localhost | host123 | Sleep | 112 | | |
    | 3819 | host123 | localhost | host123 | Sleep | 112 | |
    |
    | 4534 | host123 | localhost | host123 | Sleep | 12 | | |
    | 4540 | aha.... | localhost | aha... | Query | 3 | Opening tables | SELEC T COUNT(*) count FROM zoints_tag zoints_tag
    LEFT JOIN thread thread ON(zoints_tag.threadid = |
    | 4548 | admin | localhost | psa | Sleep | 6 | | |
    | 4556 | admin | localhost | psa | Sleep | 9 | | |
    | 4613 | host123 | localhost | host123 | Query | 3 | Opening tables | selec t * from config_data |
    | 4629 | host123 | localhost | host123 | Query | 4 | closing tables | selec t * from config_data |
    | 4631 | host123 | localhost | host123 | Sleep | 5 | | |
    | 4633 | host123 | localhost | host123 | Sleep | 4 | | |
    | 4634 | host123 | localhost | host123 | Query | 3 | Opening tables | selec t * from config_data |
    | 4635 | host123 | localhost | host123 | Sleep | 3 | | |
    | 4636 | host123 | localhost | host123 | Query | 3 | Opening tables | selec t * from config_data |
    | 4637 | host123 | localhost | host123 | Query | 3 | closing tables | selec t * from config_data |
    | 4638 | admin | localhost | | Query | 3 | | show processlist |
    +------+---------+-----------+---------+---------+------+----------------+------ -------------------------------------------------------------------------------- ----------------+
    [[[root@linux:~]]]
  • 09-07-2009, 02:25:49
    #7
    netstat -plant | awk '$4 ~ /:3306/ {print}' | awk '{print $5}' | cut -f1 -d: | sort | uniq -c | sort -n şeklinde bağlantıları listeleyip malicious attack( slowloris olabilir) olup olmadığına bir göz at..
  • 09-07-2009, 09:22:16
    #8
    [[root@linux:~]]]netstat -plant | awk '$4 ~ /:3306/ {print}' | awk '{print $5}' | cut -f1 -d: | sort | uniq -c | sort -n
    1 0.0.0.0


    akşam siteler acıldı bıraktım sabah geldim donmuş vaziyette. az önce acıldı.
  • 09-07-2009, 10:19:33
    #9
    acilen firewall kurup, 3306 nolu mysql portunu sadece localhosta izin verecek şekilde bloklamanızı öneriyorum.