CURL problem, Curl is taking the server load to 40+ Help Please!

Hi,

I really hope you guys can give me a hand in this issue.
I have had this box hacked 3 days ago, we installed a new OS and fresh CPanel/WHM installation.
I recompiled Apache as well with CURL.
The problem is that the server is going in enormous loads (never before went over 2, now it is reaching 40s

The server is 3.2GH HT with 1GB RAM, Fedora i686

Here is the output of top:

ysql 30923 0.0 3.0 51396 29624 ? S 19:14 0:00 \
mysql 6718 0.0 3.0 51396 29624 ? S 20:29 0:00 \
top - 06:01:51 up 16:08, 1 user, load average: 16.77, 17.94, 17.22
Tasks: 198 total, 17 running, 179 sleeping, 2 stopped, 0 zombie
Cpu(s): 21.1% us, 74.8% sy, 0.0% ni, 0.0% id, 4.1% wa, 0.0% hi, 0.0% si
Mem: 967480k total, 822292k used, 145188k free, 105808k buffers
Swap: 2096440k total, 219260k used, 1877180k free, 184632k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
32398 nobody 25 0 5740 1556 1276 R 16.6 0.2 74:17.83 curl
22915 nobody 25 0 5736 1648 1372 R 16.6 0.2 4:06.88 curl
28412 nobody 25 0 5744 1652 1372 R 16.6 0.2 0:03.71 curl
6328 nobody 25 0 5744 1584 1372 R 16.3 0.2 33:32.20 curl
20591 nobody 25 0 5744 1656 1372 R 14.6 0.2 6:18.01 curl
20500 nobody 25 0 5740 1532 1372 R 13.9 0.2 6:24.46 curl
11519 nobody 25 0 5744 1652 1372 R 13.6 0.2 24:35.18 curl
22173 nobody 25 0 5740 1652 1372 R 13.6 0.2 5:01.58 curl
23987 nobody 25 0 5744 1656 1372 R 13.6 0.2 3:03.21 curl
19538 nobody 25 0 5740 1652 1372 R 13.3 0.2 7:53.54 curl
20889 nobody 25 0 5740 1652 1372 R 13.3 0.2 5:57.47 curl
21356 nobody 25 0 5744 1656 1372 R 13.3 0.2 5:34.26 curl
24390 nobody 25 0 5736 1648 1372 R 13.3 0.2 2:36.02 curl
6079 nobody 16 0 31152 21m 5040 S 2.0 2.3 0:06.73 httpd
1458 nobody 15 0 26868 17m 4988 S 0.7 1.9 0:14.94 httpd
27902 root 16 0 1964 992 732 R 0.7 0.1 0:00.44 top
28385 nobody 15 0 22032 12m 4520 S 0.3 1.3 0:00.03 httpd
1 root 16 0 1472 424 404 S 0.0 0.0 0:00.95 init
2 root RT 0 0 0 0 S 0.0 0.0 0:00.17 migration/0
3 root 34 19 0 0 0 S 0.0 0.0 0:00.06 ksoftirqd/0
4 root RT 0 0 0 0 S 0.0 0.0 0:00.11 migration/1
5 root 34 19 0 0 0 S 0.0 0.0 0:00.15 ksoftirqd/1
6 root 5 -10 0 0 0 S 0.0 0.0 0:00.00 events/0
7 root 5 -10 0 0 0 S 0.0 0.0 0:00.00 events/1
8 root 5 -10 0 0 0 S 0.0 0.0 0:00.02 khelper
21 root 6 -10 0 0 0 S 0.0 0.0 0:00.00 kacpid
85 root 5 -10 0 0 0 S 0.0 0.0 0:14.05 kblockd/0
86 root 5 -10 0 0 0 S 0.0 0.0 0:01.64 kblockd/1
99 root 15 0 0 0 0 S 0.0 0.0 0:00.00 khubd
209 root 7 -10 0 0 0 S 0.0 0.0 0:00.00 aio/0
208 root 16 0 0 0 0 S 0.0 0.0 1:09.76 kswapd0

Look at the amount of CURL in there!


What can I do to fix it? if any information is required please ask and I will post it.

Regards and thanks to all who takes the time and effort to help.

 

 

 

 

Top