We've had a couple httpd restarts on Cyclone tonight. We've isolated the account causing the issues. It appears to be a compromised Joomla install or component.
I must urge everyone: If you're running a script, especially something like Joomla or Mambo -- you need to always keep track of all security releases and vulnerabilities and stay current.
Scripts like Joomla are great, but unfortunately there will always be individuals out there looking for ways to break into them.
I will always try to warn you when we spot a problem if time permits, but if services are being impacted server-wide, I will have to suspend your account until you can confirm that you're able to correct whatever is needed.
- - - - -
edit: I had the date wrong.