Date:  Tue, 19 Sep 2006 10:37:48 +0100
From:  "Gavin Nelmes-Crocker" <gavin (at mark) web-hoster.co.uk>
Subject:  [coba-e:07067] Odd events for September 19, 2006
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <053a01c6dbcf$47656b60$02002c0a@WebHoster>
X-Mail-Count: 07067

<quote>
Ok, tonight I am using my website which runs on my dedicated BQ server and
notice it grind to a halt.  The website is a Joomla CMS system which runs in
PHP and MySQL.  There were approximately 3 users on the site.  The server is
a P3-500Mhz Dual Processor with 512MB RAM.
</quote>

Darrell

Very interesting, I had to shut down a site yesterday for the same reasons
(not on a BQ box on Ensim) Due to the way Ensim chroot's site we were able
to see one site hammering the box with perl - Load averages of 147 at one
point.

After we looked at the site in more detail we found it was a Joomla site
running version 1.08 not the latest - I wonder if there is either some bad
code creeping in or a vulnerability being exploited.

Any ideas?

Regards

Gavin
ps Darrell - please don't post to the list in HTML it makes it hard for
people to reply correctly and is bad list form - I the general consensus is
plaintext