Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My websites go offline several times a day. I can still go in to my WHM in cpanel. I hit the restart apache button and everything comes back online in seconds.

What could be causing this?

share|improve this question
1  
What do the log files say about it crashing? Check /var/log/messages, /usr/local/apache/logs/error_log, /usr/local/apache/domlogs/{domain}/ –  frogstarr78 Oct 9 '11 at 2:24
    
@frogstarr78 I looked at the logs and I see someone trying to access /home/t8pjgwzt/public_html/phpmyadmin and db about 50 times a second. Clearly a hacker. Could the load be causing this? –  Michael Howey Oct 9 '11 at 2:40
    
@frogstarr78 Hum, I see this? [Sat Oct 08 15:07:55 2011] [notice] child pid 26406 exit signal Aborted (6) *** glibc detected *** /usr/local/apache/bin/httpd: free(): invalid pointer: 0x08d79b50 *** –  Michael Howey Oct 9 '11 at 2:41
    
you mention cpanel - is this a shared host? Do you have root access to the underlying machine hosting cpanel? If not you're prob better off contacting the hosting provider as you won't be able to change/fix much from within cpanel –  iainlbc Oct 9 '11 at 3:04
    
@iainlbc I rent a dedicated server from Godaddy with cpanel installed. I do have root access and Godaddy is really no help. Had them inspect my drive last week and they left my server offline. –  Michael Howey Oct 9 '11 at 3:08

2 Answers 2

up vote 3 down vote accepted

There certainly seems to be some memory corruption going on. If that corruption only hits the children your main apache process might survive... provided you don't use something like the threaded process model which shares the code between all apache processes. Your question is tagged both apache1 and apache2, even for this first paragraph I choose to believe you're not running the ancient 1.x version... :)

If the main process (with the "old" but trusty pre-spawned child process model) is corrupted it might be hardware - bad memory or actual corrupted code on your disk... else a child process could theoretically corrupt the parent process as well. Check your modules as well, since the corrupted code could be there.

Whatever the reason, I hope you keep your apache up to date - there are quite some security holes being fixed on an almost daily basis, and since webservers are the #1 attack vector that can't be stressed enough. There's also good advice about how to harden your apache configuration, even from the apache project itself.

Btw. the phpmyadmin attacks you are seeing are probably not an attack on your server but an XSS attack on some other server. Anyway, this list should help you if you actually run phpmyadmin.

share|improve this answer

In my opinion

Some other service is also trying to use the port of apache. try to find that service and stop that service.

share|improve this answer
3  
If another service tried to take over a port that is currently in use, it would just fail. It would not hijack the port. –  jdw Oct 18 '11 at 11:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.