Some of my domains is compromissed or somebody is using my server

[m0rpheu5]

Hello guys, i´m having problems this mounth, my server is always offline, my qmail is always down, i have a serve that is a Dual Opteron Quad Core with 8gb ram, my ram is always between 80-100% used, and my swap is always beeing used, i think that is this that make my qmail always get down, or my server down too, but when i restart apache, my memory goes to 1.5gb used, and then after 20-30 min , the server get slow again. From top, i see that there is many httpd access, but i can´t see what domain is using that process, i would like to know, how can i find, what domain is beeing access by the PID of top??

I´m looking to get a new server, but my problem is, if i got other server and the problem continuous, i´ll only put my money on garbage, so please if somebody know how to find this, help me.

Thanks a lot

 

[lvalics]

First of all you will need to check your server if was compromised or is some service (site) who bring your server down.
Could be hacked, but also could be a missconfiguration, bad code.

On this forum there are several guide how to find out if your server is used/hacked or there is several HOW TO (see my signature) where you can find how to optimize your server.

If you cannot handle, there is several professional on this forum (or pick us ) who can help you on this issue.

 

[atomicturtle]

Id start by checking out mod-top: www.mod-top.org