httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rizwan Raza <rizwan.r...@gmail.com>
Subject [users@httpd] Signs of Apache Web Server been hacked
Date Mon, 11 Nov 2013 00:15:18 GMT
When I executed the command below

ps aux | grep apache

I got the following output

apache   16051  0.0  0.1  24676  4532 ?        S    15:04   0:00
/usr/sbin/httpd
apache   31784  0.2  0.4  40164 13424 ?        S    15:52   0:02
/usr/sbin/httpd
apache    5412  1.5  0.4  41216 13776 ?        S    16:07   0:01
/usr/sbin/httpd
apache    5414  1.4  0.4  40656 13256 ?        S    16:07   0:01
/usr/sbin/httpd
apache    5478  1.6  0.4  40984 13384 ?        S    16:07   0:01
/usr/sbin/httpd
apache    5648  0.7  0.4  41592 13968 ?        S    16:08   0:00
/usr/sbin/httpd
root      6057  0.0  0.0   1844   504 pts/1    S+   16:09   0:00 grep apache

apache 18324 0.0 0.0 0 0 ? Z 13:39 0:00 [sh] <defunct>
apache 18330 0.0 0.0 5384 2976 ? S 13:39 0:00 -bash

Notice the last two listings. What does that mean? Is my Apache instance
hacked?

Thanks in advace

Mime
View raw message