CPanel resources issue find

[retechpro]

I have cPanel with multiple sites. 100 sites in it. Today it showing 503 & 504 error. While checking i saw resources are using 100% and all sites are down. How can i check which site is creating issue? I’ve a root access of the server.

is there any way to find out the issue.
I’m using Cloudlinux, litespeed. Therr is no malware issue in sites.
It happen today and resources are not going down.

 

[kodeslogic]

1.) Check the running processes using the top command. This will show server load and CPU and Memory usage.

# top -cd3

2.) Check disk space and inodes usage

# df -hT

#df -i

3.) Make sure the services are up and running.

 

[mtindor]

I have cPanel with multiple sites. 100 sites in it. Today it showing 503 & 504 error. While checking i saw resources are using 100% and all sites are down. How can i check which site is creating issue? I’ve a root access of the server.

is there any way to find out the issue.
I’m using Cloudlinux, litespeed. Therr is no malware issue in sites.
It happen today and resources are not going down.

See this thread:

After update to 110.0.5, LFD crashes and Cpanel unresponsive

This morning we woke up to cpanel being completely unresponsive. I rebooted the server and got cpanel / whm back up and running but LFD is crashing every couple minutes. I looked at the logs and this seems to be the precursor to the issues this morning: May 2 00:15:13 vps lfd[48446]...

forums.cpanel.net

If you are running kernelcare and you think this might be your issue, CloudLinux says:

If your server is affected, you can mitigate the problem by running the following command:
# kcarectl --unload; kcarectl --update

In case of any doubt, please contact the CloudLinux Support team.

 

[retechpro]

1.) Check the running processes using the top command. This will show server load and CPU and Memory usage.

# top -cd3

2.) Check disk space and inodes usage

# df -hT

#df -i

3.) Make sure the services are up and running.

Thank you. But the issue was with single cpanel not the whole server. Cpanel have 100 websites and out of 100 only 1 site was creating issue. I want to know how to find out the site which is creating issue.

due to one site all resources are going up.

 

[retechpro]

See this thread:

After update to 110.0.5, LFD crashes and Cpanel unresponsive

This morning we woke up to cpanel being completely unresponsive. I rebooted the server and got cpanel / whm back up and running but LFD is crashing every couple minutes. I looked at the logs and this seems to be the precursor to the issues this morning: May 2 00:15:13 vps lfd[48446]...

forums.cpanel.net

If you are running kernelcare and you think this might be your issue, CloudLinux says:

Thank you for quick response. Unfortunately the issue with 1 site due to plugin or theme conflicts. I don’t know which site is consuming all resources.

 

[mtindor]

Thank you for quick response. Unfortunately the issue with 1 site due to plugin or theme conflicts. I don’t know which site is consuming all resources.

If you run 'top' , what is the biggest offender? PHP? MySQL?

If MySQL, run 'mysqladmin processlist' a few times and see if you can figure out which database is being accessed most heavily.

If you are running CloudLinux, are you using PHP via EasyApache or or are you using Alt-PHP? Are you using lsphp handler?

ps auwwx|grep php

 

[retechpro]

If you run 'top' , what is the biggest offender? PHP? MySQL?

If MySQL, run 'mysqladmin processlist' a few times and see if you can figure out which database is being accessed most heavily.

If you are running CloudLinux, are you using PHP via EasyApache or or are you using Alt-PHP? Are you using lsphp handler?

ps auwwx|grep php

I have already tried top command. It is not showing that acc.

I’m using Cloudlinux And lsphp handler. Still did not find the solution.

we need to find out which site are using high resources in cpanel. As already told cpanel hosted 100 websites.

 

[ResellerWiz]

You may want to consider enabling Per Client Throttling in LiteSpeed if you suspect it may be an attack on a particular site:

DDoS Attack Protection in LiteSpeed Web Server | LiteSpeed Documentation

The many Anti-DDoS measures available with LiteSpeed Web Server. LSWS protects from Layer 7 and Layer 4 attack with reCAPTCHA, throttling, ModSecurity, and more.

docs.litespeedtech.com

 

[cPRex]

It would be best to enable CageFS if you have a CloudLinux system, as that will help ensure that one domain does not take down the entire server.