overload server ? hacked?

[webcast]

When start httpd mem use 100% cpu use 100%...

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1520 488 ? S 04:17 0:04 init [3]
root 2 0.0 0.0 0 0 ? SW 04:17 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW 04:17 0:00 [kapmd]
root 4 0.0 0.0 0 0 ? SWN 04:17 0:00 [ksoftirqd/0]
root 7 0.0 0.0 0 0 ? SW 04:17 0:00 [bdflush]
root 5 0.0 0.0 0 0 ? SW 04:17 0:00 [kswapd]
root 6 0.0 0.0 0 0 ? SW 04:17 0:01 [kscand]
root 8 0.0 0.0 0 0 ? SW 04:17 0:00 [kupdated]
root 9 0.0 0.0 0 0 ? SW 04:17 0:00 [mdrecoveryd]
root 13 0.0 0.0 0 0 ? SW 04:17 0:02 [kjournald]
root 65 0.0 0.0 0 0 ? SW 04:17 0:00 [khubd]
root 1027 0.0 0.0 0 0 ? SW 04:17 0:00 [kjournald]
root 1846 0.0 0.0 0 0 ? SW 04:18 0:00 [eth0]
root 1935 0.0 0.1 1576 540 ? R 04:18 0:00 syslogd -m 0
root 1939 0.0 0.0 1540 384 ? S 04:18 0:00 klogd -x
named 2038 0.0 0.4 36276 2348 ? S 04:18 0:01 /usr/sbin/named -u named -c /etc/named.conf -u named -t /var/named/run-root
root 2052 0.0 0.2 3660 1196 ? S 04:18 0:01 /usr/sbin/sshd
root 2066 0.0 0.1 2136 716 ? S 04:18 0:00 xinetd -stayalive -pidfile /var/run/xinetd.pid
postgres 2115 0.0 0.3 9608 1576 ? S 04:18 0:00 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data
postgres 2117 0.0 0.2 9168 1400 ? S 04:18 0:00 postgres: stats buffer process
postgres 2118 0.0 0.2 8176 1424 ? S 04:18 0:00 postgres: stats collector process
root 2136 0.0 0.1 3472 764 ? S 04:18 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /
root 2139 0.0 0.1 3220 592 ? S 04:18 0:00 /usr/sbin/courierlogger imapd
root 2148 0.0 0.1 3480 840 ? S 04:18 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlook
root 2151 0.0 0.1 3360 796 ? S 04:18 0:00 /usr/sbin/courierlogger imapd-ssl
root 2158 0.0 0.1 3472 840 ? S 04:18 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /
root 2160 0.0 0.1 3360 796 ? S 04:18 0:00 /usr/sbin/courierlogger pop3d
root 2169 0.0 0.1 3480 764 ? S 04:18 0:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlook
root 2173 0.0 0.1 3228 592 ? S 04:18 0:00 /usr/sbin/courierlogger pop3d-ssl
root 2200 0.0 0.3 29824 1716 ? S 04:18 0:02 /usr/bin/spamd -d -c -m5 -H
root 2230 0.0 0.2 29824 1356 ? S 04:18 0:00 spamd child
root 2231 0.0 0.2 29824 1348 ? S 04:18 0:00 spamd child
root 2263 0.0 0.1 1696 508 ? S 04:19 0:00 /usr/sbin/pptpd
root 2335 0.0 0.1 47772 844 ? S 04:19 0:00 /usr/local/psa/admin/bin/httpsd
psaadm 2339 0.0 0.3 47904 1868 ? S 04:19 0:00 /usr/local/psa/admin/bin/httpsd
psaadm 2340 0.0 1.8 53052 9568 ? S 04:19 0:00 /usr/local/psa/admin/bin/httpsd
psaadm 2341 0.0 0.1 47772 756 ? S 04:19 0:00 /usr/local/psa/admin/bin/httpsd
psaadm 2342 0.0 0.1 47772 756 ? S 04:19 0:00 /usr/local/psa/admin/bin/httpsd
psaadm 2343 0.0 0.1 47772 756 ? S 04:19 0:00 /usr/local/psa/admin/bin/httpsd
root 2460 0.0 0.1 1588 596 ? S 04:19 0:00 crond
root 2496 0.0 0.1 4460 520 ? S 04:20 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/run/mysqld/mysqld.pid
mysql 2539 0.0 4.8 66956 24324 ? S 04:20 0:03 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
xfs 2556 0.0 0.1 5088 580 ? S 04:21 0:00 xfs -droppriv -daemon
root 2609 0.0 0.0 3748 472 ? S 04:21 0:00 rhnsd --interval 240
mysql 2615 0.0 4.8 66956 24324 ? S 04:21 0:06 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2616 0.0 4.8 66956 24324 ? S 04:21 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2617 0.0 4.8 66956 24324 ? S 04:21 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2618 0.0 4.8 66956 24324 ? S 04:21 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2619 0.0 4.8 66956 24324 ? S 04:21 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2624 0.0 4.8 66956 24324 ? S 04:21 0:02 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2625 0.0 4.8 66956 24324 ? S 04:21 0:02 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2626 0.0 4.8 66956 24324 ? R 04:21 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 2627 0.0 4.8 66956 24324 ? S 04:21 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
root 2705 0.1 0.8 11100 4348 ? S 04:22 0:38 /usr/local/bin/python2.4 /usr/bin/denyhosts.py --daemon --config=/usr/share/denyhosts/denyhosts.cfg
mailman 3035 0.0 0.1 7112 924 ? S 04:26 0:00 /usr/bin/python /var/mailman/bin/mailmanctl -s -q start
mailman 3109 0.0 0.5 7232 2744 ? S 04:26 0:00 /usr/bin/python /var/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
mailman 3110 0.0 0.6 7192 3292 ? S 04:26 0:01 /usr/bin/python /var/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
mailman 3111 0.0 0.6 7184 3248 ? S 04:26 0:00 /usr/bin/python /var/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
mailman 3112 0.0 0.6 7224 3104 ? S 04:26 0:01 /usr/bin/python /var/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
mailman 3113 0.0 0.6 7272 3304 ? S 04:26 0:01 /usr/bin/python /var/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
mailman 3114 0.0 0.6 7332 3364 ? S 04:26 0:01 /usr/bin/python /var/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
mailman 3115 0.0 0.6 7220 3296 ? S 04:26 0:01 /usr/bin/python /var/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
mailman 3116 0.0 0.6 7240 3268 ? S 04:26 0:00 /usr/bin/python /var/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
root 3463 0.0 0.6 8916 3380 ? S 04:31 0:00 /usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.conf
root 3487 0.0 0.0 1504 400 tty1 S 04:31 0:00 /sbin/mingetty tty1
root 3488 0.0 0.0 1508 404 tty2 S 04:31 0:00 /sbin/mingetty tty2
root 3489 0.0 0.0 1504 400 tty3 S 04:31 0:00 /sbin/mingetty tty3
root 3490 0.0 0.0 1508 400 tty4 S 04:31 0:00 /sbin/mingetty tty4
root 3491 0.0 0.0 1500 400 tty5 S 04:31 0:00 /sbin/mingetty tty5
root 3493 0.0 0.0 1504 400 tty6 S 04:31 0:00 /sbin/mingetty tty6
root 3494 0.0 0.0 1520 448 ttyS0 S 04:31 0:00 /sbin/agetty -L 9600 ttyS0 vt100
root 3495 0.0 0.6 15960 3196 ? S 04:31 0:00 /usr/local/psa/admin/bin/php /usr/local/psa/admin/bin/modules/watchdog/wdcollect -c /usr/local/psa/etc/modules/watchdog/wdcollect.inc.php
mysql 3852 0.0 4.8 66956 24324 ? S 04:35 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
root 7046 0.0 0.3 7132 1580 ? S 05:13 0:00 sshd: unknown [priv]
sshd 7047 0.0 0.2 5004 1108 ? S 05:13 0:00 sshd: unknown [net]

 

[webcast]

mysql 7211 0.0 4.8 66956 24324 ? S 05:15 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
root 25663 0.0 0.4 8500 2416 ? S 09:03 0:00 sshd: root@pts/0
psaadm 25681 0.0 0.2 47772 1212 ? S 09:03 0:00 /usr/local/psa/admin/bin/httpsd
root 25761 0.0 0.2 4472 1372 pts/0 S 09:04 0:00 -bash
qmails 27431 0.0 0.0 1564 456 ? S 09:30 0:00 qmail-send
qmaild 27432 0.0 0.0 1520 448 ? S 09:30 0:00 splogger qmail
root 27433 0.0 0.0 1540 348 ? S 09:30 0:00 qmail-lspawn ./Maildir/
qmailr 27435 0.0 0.0 1552 364 ? S 09:30 0:00 qmail-rspawn
qmailq 27436 0.0 0.0 1504 312 ? S 09:30 0:00 qmail-clean
root 29591 2.3 3.0 27724 15296 ? S 09:52 0:00 /usr/sbin/httpd
root 29599 0.0 2.9 27600 15088 ? S 09:52 0:00 /usr/sbin/httpd
apache 29600 1.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29601 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29602 1.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29603 1.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29604 1.7 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29605 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29606 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29607 1.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29608 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29609 1.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29610 1.7 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29611 1.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29612 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29613 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29614 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29615 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29616 1.9 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29617 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29618 2.0 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29619 3.4 3.5 29632 17716 ? R 09:52 0:01 /usr/sbin/httpd
mysql 29620 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29622 1.9 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29623 4.0 3.5 29632 17716 ? R 09:52 0:01 /usr/sbin/httpd
apache 29625 3.0 3.5 29636 17724 ? R 09:52 0:00 /usr/sbin/httpd
apache 29626 2.1 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29627 2.0 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29628 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29630 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29632 2.1 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29633 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29634 2.9 3.5 29636 17700 ? R 09:52 0:00 /usr/sbin/httpd
apache 29635 2.2 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29636 2.0 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29637 2.3 3.4 29276 17400 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29638 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29639 2.4 3.4 29272 17380 ? R 09:52 0:00 /usr/sbin/httpd
root 29640 0.0 0.0 1604 472 ? S 09:52 0:00 tcp-env /usr/sbin/rblsmtpd -r bl.spamcop.net /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd /var/qmail/bin/smtp_auth /var/qmail/bin/true /var/qmail/bin/cmd5checkpw /var/qmail/bin/true
apache 29641 2.5 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29643 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29644 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29645 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29646 2.5 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29647 2.8 3.5 29972 18016 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29648 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29649 2.2 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29650 2.1 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29651 2.5 3.4 29272 17380 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29652 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29653 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29654 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29655 2.4 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29656 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29657 2.5 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29658 2.5 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29659 2.5 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd

 

[webcast]

mysql 29660 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29661 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29662 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29663 2.7 3.4 29272 17380 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29664 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29665 2.6 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29666 2.7 3.4 29272 17380 ? R 09:52 0:00 /usr/sbin/httpd
apache 29667 2.9 3.4 29272 17400 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29668 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29669 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29670 2.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29671 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29672 2.8 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
apache 29673 2.9 3.4 29272 17384 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29674 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29675 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29676 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29677 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29678 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29679 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29680 2.9 3.4 29272 17384 ? S 09:52 0:00 /usr/sbin/httpd
apache 29681 3.2 3.4 29272 17348 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29682 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29683 3.4 3.4 29272 17384 ? S 09:52 0:00 /usr/sbin/httpd
apache 29684 3.1 3.4 29272 17308 ? R 09:52 0:00 /usr/sbin/httpd
apache 29685 3.1 3.4 29272 17316 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29686 0.3 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29687 3.6 3.4 29272 17380 ? R 09:52 0:00 /usr/sbin/httpd
apache 29688 3.6 3.4 29276 17316 ? R 09:52 0:00 /usr/sbin/httpd
apache 29689 2.8 3.4 29272 17296 ? R 09:52 0:00 /usr/sbin/httpd
apache 29690 2.8 3.4 29276 17292 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29691 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
apache 29692 3.1 3.4 29272 17300 ? R 09:52 0:00 /usr/sbin/httpd
apache 29693 3.0 3.4 29276 17300 ? R 09:52 0:00 /usr/sbin/httpd
mysql 29694 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29696 0.3 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29697 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29698 0.3 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29699 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29700 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29701 0.0 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29702 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29703 0.1 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29704 0.2 4.8 66956 24324 ? S 09:52 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29709 0.1 4.8 66956 24324 ? S 09:53 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
root 29710 0.7 0.2 4828 1364 ? S 09:53 0:00 /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
mysql 29712 0.3 4.8 66956 24324 ? S 09:53 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
mysql 29714 0.0 4.8 66956 24324 ? R 09:53 0:00 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock
root 29715 0.0 0.1 2992 952 pts/0 R 09:53 0:00 ps -uxa

That was ps -uxa after 1 min when start httpd :/

 

[NightStorm]

What's with all the httpd and SQL processes?
Check that someone's website or forum is not being DDoS targetted (having between dozens and thousands of bots querying the same page at once to overload the server with SQL socket requests).
The simplest way to locate the root of the problem is to turn domains off one at a time until things stabalize. Then look in that site's logs to see what could be causing massive sql processes to start up.
I am guessing that you have tweaked your servers http and sql for optimal running?

 

[atomicturtle]

Thats a mysql3 box, Id start by upgrading to 4.1, and enabling the query cache. You'll probably see a major improvement there.