Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2017-11-07, 21:34:43

Author Topic: lambat & connection was interrupted.  (Read 5008 times)

0 Members and 1 Guest are viewing this topic.

Offline itx

  • Junior Member
  • *
  • Posts: 41
  • Karma: +0/-0
    • View Profile
Re: lambat & connection was interrupted.
« Reply #15 on: 2014-06-19, 05:10:27 »
pagi in semua halaman "connection was interrupted", mau masuk panel gak bisa juga : "took too long to respond."
mau masuk ssh gak bisa: connection tomed out. Akhirnya reboot lewat VPS panel. Di situ memang nampak kalau memory terpakai semua (1005.21 MB of 1 GB Used / 18.79 MB Free).

setelah lihat slow log sepertinya ada malware:
Code: [Select]
[19-Jun-2014 05:48:42]  [pool default] pid 11688
script_filename = /home/kloxo/httpd/default/genezx.php
[0x08850bb0] stream_socket_sendto() /home/kloxo/httpd/default/genezx.php(3) : eval()'d code:21
[0x08850ab0] +++ dump failed

menghapusnya gmn? cukup delete filenya kah?

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +112/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: lambat & connection was interrupted.
« Reply #16 on: 2014-06-19, 05:45:19 »
Bisa jadi ada hacker yang coba ini. Jika memang ada, coba saja hapus. Tapi pelajari di 'log manager' pada rkhunter.

Coba jalankan 'sh /script/mysql-convert --engine=myisam' untuk menghemat memory (karena default mysql adalah innodb).
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline itx

  • Junior Member
  • *
  • Posts: 41
  • Karma: +0/-0
    • View Profile
Re: lambat & connection was interrupted.
« Reply #17 on: 2014-06-19, 06:43:28 »
Bisa jadi ada hacker yang coba ini. Jika memang ada, coba saja hapus. Tapi pelajari di 'log manager' pada rkhunter.
setelah dihapus & dilihat dari error log apache, mmang file tsb diakses dari luar tiap menit. sepertinya vulnerability kloxo versi dahulu. dan serverku memang pernah suspended gr2 ngirim ddos attack, sepertinya karena malware tsb.

Log RKHUnter-nya kosong tu.

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +112/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: lambat & connection was interrupted.
« Reply #18 on: 2014-06-19, 07:19:45 »
Coba jalankan 'yum reinstall rkhunter; rkhunter --update'.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

 


MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix

Page created in 0.039 seconds with 16 queries.

web stats analysis
 
Mirror created by MasterkinG32.CoM