Wierd Issue: One CPanel Account Randomly Hangs

Louis Judice

• January 07, 2025 21:47

Lightly loaded, up to date VPS. about 20 accounts each with a Wordpress site, most get 10 hits/hour or less. One site is larger and busier WP+WooCommerce.

About 3 times a week - no DOS attack, completly random times this site hangs and any attempt to connect results in a 503 error.

All other users/sites, WHM, etc are normal.  

No errors anywhere. Only clears after killing all user processes.

Any clues???

 

Thanks,

Lou in NJ

 

• 

  quietFinn

  • January 07, 2025 21:57

  You should be able to see those 503 errors in:
  /usr/local/cpanel/logs/error_log

   

  0
• 

  cPRex Jurassic Moderator

  • January 08, 2025 15:27

  Since it's completely random, I don't have much advice other than checking the log that quietfinn mentioned and the main Apache log at /etc/apache/logs/error_log to see if you can find any errors from the server side.

  0
• 

  Louis Judice

  • January 21, 2025 19:09
  • Edited

  any of this make sense - it appears to coincide with the incident???

  
  [2025-01-21 18:35:51 +0000] info [whostmgrd] Successfully verified signature for cpanel (key types: release).
  cpsrvd 3511e88c6558d: Cpanel::Exception::NetSSLeay/(XID xz7wdy) Net::SSLeay::ssl_write_all(SCALAR(0x3795758)) produced an operating system error (EPIPE, Broken pipe) and 1 [asis,OpenSSL] [numerate,_6,error,errors]: ARRAY(0x37f8fd0)
   at /usr/local/cpanel/Cpanel/Server/Connection/SSL.pm line 66.
  	Cpanel::Server::Connection::SSL::write_buffer(Cpanel::Server::Connection::SSL=HASH(0x3670340), SCALAR(0x3795758)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 223
  	Cpanel::Server::Response::__ANON__(SCALAR(0x3795758)) called at /usr/local/cpanel/Cpanel/Server/Responders/Chunked/Gzip.pm line 54
  	Cpanel::Server::Responders::Chunked::Gzip::write(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x37040b0), 1) called at /usr/local/cpanel/Cpanel/Server/Responder.pm line 125
  	Cpanel::Server::Responder::nonblocking_read_from_input_and_send_response(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x37040b0)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 158
  	Cpanel::Server::Response::send_response(Cpanel::Server::Response=HASH(0x36766d0), Cpanel::Server::Response::Source::SubProcess=HASH(0x36b42f8), 4045876) called at /usr/local/cpanel/Cpanel/Server/Handlers/SubProcess.pm line 98
  	Cpanel::Server::Handlers::SubProcess::handler(Cpanel::Server::Handlers::SubProcess=HASH(0x36b4910), "subprocess_name", "whostmgr (whostmgr2)", "subprocess_read_handle", GLOB(0x36b4d78), "subprocess_write_handle", GLOB(0x3703600), "subprocess_pid_to_reap", ...) called at cpsrvd.pl line 7759
  	cpanel::cpsrvd::cpHandler("app", "whostmgr", "json", 0, "document", "./scripts2/top") called at cpsrvd.pl line 6878
  	cpanel::cpsrvd::dodoc_whostmgrd() called at cpsrvd.pl line 2118
  	cpanel::cpsrvd::dodoc(HASH(0x1c4d350)) called at cpsrvd.pl line 1854
  	cpanel::cpsrvd::handle_one_connection(6) called at cpsrvd.pl line 1148
  	cpanel::cpsrvd::script() called at cpsrvd.pl line 447
  
  cpsrvd 3511e88c6558d: Cpanel::Exception::NetSSLeay/(XID j9wht7) Net::SSLeay::ssl_write_all(SCALAR(0x381a758)) produced an operating system error (EPIPE, Broken pipe) and 1 [asis,OpenSSL] [numerate,_6,error,errors]: ARRAY(0x389a3e0)
   at /usr/local/cpanel/Cpanel/Server/Connection/SSL.pm line 66.
  	Cpanel::Server::Connection::SSL::write_buffer(Cpanel::Server::Connection::SSL=HASH(0x36764d8), SCALAR(0x381a758)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 223
  	Cpanel::Server::Response::__ANON__(SCALAR(0x381a758)) called at /usr/local/cpanel/Cpanel/Server/Responders/Chunked/Gzip.pm line 54
  	Cpanel::Server::Responders::Chunked::Gzip::write(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x381a5f0), 1) called at /usr/local/cpanel/Cpanel/Server/Responder.pm line 125
  	Cpanel::Server::Responder::nonblocking_read_from_input_and_send_response(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x381a5f0)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 158
  	Cpanel::Server::Response::send_response(Cpanel::Server::Response=HASH(0x3676700), Cpanel::Server::Response::Source::SubProcess=HASH(0x37aa2c8), 4046408) called at /usr/local/cpanel/Cpanel/Server/Handlers/SubProcess.pm line 98
  	Cpanel::Server::Handlers::SubProcess::handler(Cpanel::Server::Handlers::SubProcess=HASH(0x3777f08), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 4046408, __CPANEL_HIDDEN__, GLOB(0x381a830), __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 7605
  	cpanel::cpsrvd::cgiHandler(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 7040
  	cpanel::cpsrvd::dodoc_whostmgrd() called at cpsrvd.pl line 2118
  	cpanel::cpsrvd::dodoc(HASH(0x1c4d350)) called at cpsrvd.pl line 1854
  	cpanel::cpsrvd::handle_one_connection(6) called at cpsrvd.pl line 1148
  	cpanel::cpsrvd::script() called at cpsrvd.pl line 447
  
  cpsrvd 3511e88c6558d: Cpanel::Exception::NetSSLeay/(XID k8s7pu) Net::SSLeay::ssl_write_all(SCALAR(0x37aafc0)) produced an operating system error (EPIPE, Broken pipe) and 1 [asis,OpenSSL] [numerate,_6,error,errors]: ARRAY(0x389ee80)
   at /usr/local/cpanel/Cpanel/Server/Connection/SSL.pm line 66.
  	Cpanel::Server::Connection::SSL::write_buffer(Cpanel::Server::Connection::SSL=HASH(0x3676508), SCALAR(0x37aafc0)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 223
  	Cpanel::Server::Response::__ANON__(SCALAR(0x37aafc0)) called at /usr/local/cpanel/Cpanel/Server/Responders/Chunked/Gzip.pm line 54
  	Cpanel::Server::Responders::Chunked::Gzip::write(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x37ab008), 1) called at /usr/local/cpanel/Cpanel/Server/Responder.pm line 125
  	Cpanel::Server::Responder::nonblocking_read_from_input_and_send_response(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x37ab008)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 158
  	Cpanel::Server::Response::send_response(Cpanel::Server::Response=HASH(0x3676718), Cpanel::Server::Response::Source::SubProcess=HASH(0x37aae28), 4046423) called at /usr/local/cpanel/Cpanel/Server/Handlers/SubProcess.pm line 98
  	Cpanel::Server::Handlers::SubProcess::handler(Cpanel::Server::Handlers::SubProcess=HASH(0x3701dc8), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 4046423, __CPANEL_HIDDEN__, GLOB(0x3777aa0), __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 7605
  	cpanel::cpsrvd::cgiHandler(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 7040
  	cpanel::cpsrvd::dodoc_whostmgrd() called at cpsrvd.pl line 2118
  	cpanel::cpsrvd::dodoc(HASH(0x1c4d350)) called at cpsrvd.pl line 1854
  	cpanel::cpsrvd::handle_one_connection(6) called at cpsrvd.pl line 1148
  	cpanel::cpsrvd::script() called at cpsrvd.pl line 447
  
  cpsrvd 3511e88c6558d: Cpanel::Exception::NetSSLeay/(XID 3pr7yd) Net::SSLeay::ssl_write_all(SCALAR(0x36ff9f8)) produced an operating system error (EPIPE, Broken pipe) and 1 [asis,OpenSSL] [numerate,_6,error,errors]: ARRAY(0x3813a50)
   at /usr/local/cpanel/Cpanel/Server/Connection/SSL.pm line 66.
  	Cpanel::Server::Connection::SSL::write_buffer(Cpanel::Server::Connection::SSL=HASH(0x36764f0), SCALAR(0x36ff9f8)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 223
  	Cpanel::Server::Response::__ANON__(SCALAR(0x36ff9f8)) called at /usr/local/cpanel/Cpanel/Server/Responders/Chunked/Gzip.pm line 54
  	Cpanel::Server::Responders::Chunked::Gzip::write(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x36ffa28), 4) called at /usr/local/cpanel/Cpanel/Server/Responders/Chunked/Gzip.pm line 32
  	Cpanel::Server::Responders::Chunked::Gzip::finish(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x36ffa28), 4) called at /usr/local/cpanel/Cpanel/Server/Responder.pm line 150
  	Cpanel::Server::Responder::nonblocking_read_from_input_and_send_response(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x36ffa28)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 158
  	Cpanel::Server::Response::send_response(Cpanel::Server::Response=HASH(0x3676730), Cpanel::Server::Response::Source::SubProcess=HASH(0x36ff4d0), 4046507) called at /usr/local/cpanel/Cpanel/Server/Handlers/SubProcess.pm line 98
  	Cpanel::Server::Handlers::SubProcess::handler(Cpanel::Server::Handlers::SubProcess=HASH(0x375ef08), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 4046507, __CPANEL_HIDDEN__, GLOB(0x375f5c8), __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 7605
  	cpanel::cpsrvd::cgiHandler(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 7040
  	cpanel::cpsrvd::dodoc_whostmgrd() called at cpsrvd.pl line 2118
  	cpanel::cpsrvd::dodoc(HASH(0x1c4d350)) called at cpsrvd.pl line 1854
  	cpanel::cpsrvd::handle_one_connection(6) called at cpsrvd.pl line 1148
  	cpanel::cpsrvd::script() called at cpsrvd.pl line 447
  
  Cpanel::Exception::NetSSLeay/(XID qe8muy) Net::SSLeay::ssl_write_all(HTTP/1.1 500 Internal Error\x{0d}\x{0a}Connection: close\x{0d}\x{0a}Content-type: text/html; charset="utf-8"\x{0d}\x{0a}X-Error-Message: Error ID 3511e88c6558d\x{0d}\x{0a}\x{0d}\x{0a}) produced an operating system error (EPIPE, Broken pipe) and 1 [asis,OpenSSL] [numerate,_6,error,errors]: ARRAY(0x3814158)
   at /usr/local/cpanel/Cpanel/Server/Connection/SSL.pm line 66.
  	Cpanel::Server::Connection::SSL::write_buffer(Cpanel::Server::Connection::SSL=HASH(0x36764f0), "HTTP/1.1 500 Internal Error\x{d}\x{a}Connection: close\x{d}\x{a}Content-type:"...) called at /usr/local/cpanel/Cpanel/Server.pm line 1721
  	Cpanel::Server::write_buffer(Cpanel::Server=HASH(0x34a2590), "HTTP/1.1 500 Internal Error\x{d}\x{a}Connection: close\x{d}\x{a}Content-type:"...) called at /usr/local/cpanel/Cpanel/Server.pm line 701
  	Cpanel::Server::_send_internal_error_headers_if_needed(Cpanel::Server=HASH(0x34a2590), 500, "Error ID 3511e88c6558d") called at /usr/local/cpanel/Cpanel/Server.pm line 687
  	Cpanel::Server::internal_error_with_http_status(Cpanel::Server=HASH(0x34a2590), 500, "Error ID 3511e88c6558d") called at /usr/local/cpanel/Cpanel/Server.pm line 672
  	Cpanel::Server::internal_error(Cpanel::Server=HASH(0x34a2590), "Error ID 3511e88c6558d") called at cpsrvd.pl line 1000
  	cpanel::cpsrvd::__ANON__(Cpanel::Exception::NetSSLeay=HASH(0x37b23b8)) called at /usr/local/cpanel/Cpanel/Server/Connection/SSL.pm line 66
  	Cpanel::Server::Connection::SSL::write_buffer(Cpanel::Server::Connection::SSL=HASH(0x36764f0), SCALAR(0x36ff9f8)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 223
  	Cpanel::Server::Response::__ANON__(SCALAR(0x36ff9f8)) called at /usr/local/cpanel/Cpanel/Server/Responders/Chunked/Gzip.pm line 54
  	Cpanel::Server::Responders::Chunked::Gzip::write(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x36ffa28), 4) called at /usr/local/cpanel/Cpanel/Server/Responders/Chunked/Gzip.pm line 32
  	Cpanel::Server::Responders::Chunked::Gzip::finish(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x36ffa28), 4) called at /usr/local/cpanel/Cpanel/Server/Responder.pm line 150
  	Cpanel::Server::Responder::nonblocking_read_from_input_and_send_response(Cpanel::Server::Responders::Chunked::Gzip=HASH(0x36ffa28)) called at /usr/local/cpanel/Cpanel/Server/Response.pm line 158
  	Cpanel::Server::Response::send_response(Cpanel::Server::Response=HASH(0x3676730), Cpanel::Server::Response::Source::SubProcess=HASH(0x36ff4d0), 4046507) called at /usr/local/cpanel/Cpanel/Server/Handlers/SubProcess.pm line 98
  	Cpanel::Server::Handlers::SubProcess::handler(Cpanel::Server::Handlers::SubProcess=HASH(0x375ef08), __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, 4046507, __CPANEL_HIDDEN__, GLOB(0x375f5c8), __CPANEL_HIDDEN__, ...) called at cpsrvd.pl line 7605
  	cpanel::cpsrvd::cgiHandler(__CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__, __CPANEL_HIDDEN__) called at cpsrvd.pl line 7040
  	cpanel::cpsrvd::dodoc_whostmgrd() called at cpsrvd.pl line 2118
  	cpanel::cpsrvd::dodoc(HASH(0x1c4d350)) called at cpsrvd.pl line 1854
  	cpanel::cpsrvd::handle_one_connection(6) called at cpsrvd.pl line 1148
  	cpanel::cpsrvd::script() called at cpsrvd.pl line 447

  0
• 

  cPRex Jurassic Moderator

  • January 21, 2025 20:52

  It's something for sure, but I don't know if it's going to be a particularly useful error.

  Could you run this on the machine to see if that provides any output that may be helpful?  You don't need to post the full output here as it will contain sensitive data, but just see if there is anything there that catches your eye:

  curl -s https://ssp.cpanel.net/run | sh

  0

Please sign in to leave a comment.