High CPU Usage
I'm getting the following and need help diagnosing. The hosting company has shut off the container until it's fixed. Not sure what happened as all was good before, then this week we upgraded to bigger hosting (same host) and now this:
nobody 15733 0.2 0.0 1371604 31552 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
504 33905 0.6 0.0 177516 35112 ? D 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/strh/index.php
504 35480 0.8 0.0 180080 38448 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/rhsnm/index.php
504 37424 1.1 0.0 177580 35604 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/wrrh/index.php
504 37824 1.3 0.0 180332 38488 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/uvsh/index.php
504 39471 1.5 0.0 169456 27432 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/rhsnm/index.php
nobody 15734 0.2 0.0 1371492 35900 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
504 30513 0.6 0.0 184280 40872 ? S 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/sri/index.php
504 31414 0.7 0.0 185056 40884 ? S 13:32 0:01 | | \_ /usr/bin/php /home/ernesthealth/public_html/siach/index.php
504 35246 0.9 0.0 181112 39288 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/achm/index.php
504 35752 1.0 0.0 180852 39140 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/achsnm/index.php
504 36566 1.0 0.0 181116 39428 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ccrh/index.php
504 37226 0.9 0.0 177260 35444 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lrh/index.php
504 37534 1.3 0.0 180852 39364 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/nbrrh/index.php
504 37918 0.9 0.0 171652 29840 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lsh/index.php
nobody 15735 0.2 0.0 1371492 31748 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
504 33819 0.6 0.0 180072 38280 ? S 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lsh/index.php
504 35264 0.8 0.0 178820 37040 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/sri/index.php
504 37217 1.1 0.0 179400 37648 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncltah/index.php
504 37516 1.3 0.0 180092 38720 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/index.php
504 37915 1.2 0.0 175704 33900 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncrh/index.php
nobody 15736 0.2 0.0 1371492 31892 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
504 32991 0.6 0.0 183572 40516 ? S 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncrh/index.php
504 35410 0.8 0.0 178328 36720 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/msh/index.php
504 35818 1.2 0.0 184640 40364 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/rhn/index.php
504 37944 1.4 0.0 178024 36136 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncrh/index.php
504 38450 1.6 0.0 177272 35344 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/evrh/index.php
504 39766 2.3 0.0 170604 28744 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/achsnm/index.php
504 40934 3.2 0.0 167508 25280 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ccrh/index.php
504 41275 3.3 0.0 159032 16400 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lrrh/wp-cron.php
nobody 15737 0.2 0.0 1371444 35576 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
504 35549 0.8 0.0 180336 38428 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/siach/index.php
504 37171 0.8 0.0 173416 31600 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lrrh/index.php
504 37509 1.3 0.0 180092 38700 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/index.php
504 38626 1.9 0.0 180224 38648 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/uvsh/wp-cron.php
504 39557 1.4 0.0 168308 25988 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/siach/index.php
504 39970 1.6 0.0 165328 22912 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/sri/wp-cron.php
nobody 25362 0.2 0.0 1371384 35556 ? Sl 13:19 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
504 32963 0.6 0.0 183076 39912 ? S 13:32 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/lrrh/index.php
504 34639 0.8 0.0 180856 39208 ? S 13:32 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/nurh/index.php
504 36016 0.9 0.0 179804 37728 ? D 13:33 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/wrrh/wp-cron.php
504 37900 1.2 0.0 176224 34072 ? S 13:33 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/rhn/index.php
504 38693 1.8 0.0 175960 34068 ? S 13:34 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/mri/index.php
504 39078 2.2 0.0 178028 36100 ? D 13:34 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/grrh/wp-cron.php-
Hello Investigation of server issues are quite effective when it is happening. However from the given data, I suspect some sort of hack or resource leaking for the account "ernesthealth". Please ensure that the account is not compromised by performing a malware scan. Implementation of CloudLinux is a good option to tackle abusers and avoiding service termination. 0 -
Does this accounts : ernesthealth, got wordpress installed on it? if so I feel mostly its due to older version or insecure wordpress permissions. Also check for plugins you have installed, even removing buggy Plugins can fix this problem. 0 -
Hello :) As mentioned, you may want to suspend the account associated with those PHP processes before starting the server again. Then, once the server starts, you can follow the guide at: Troubleshooting high server loads on Linux servers Thank you. 0
Please sign in to leave a comment.
Comments
3 comments