The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

High CPU Usage

Discussion in 'General Discussion' started by steve_the_woodsman, Apr 8, 2016.

  1. steve_the_woodsman

    steve_the_woodsman Registered

    Joined:
    Apr 8, 2016
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Dallas
    cPanel Access Level:
    Root Administrator
    I'm getting the following and need help diagnosing. The hosting company has shut off the container until it's fixed. Not sure what happened as all was good before, then this week we upgraded to bigger hosting (same host) and now this:


    Code:
    nobody 15733 0.2 0.0 1371604 31552 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
    504 33905 0.6 0.0 177516 35112 ? D 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/strh/index.php
    504 35480 0.8 0.0 180080 38448 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/rhsnm/index.php
    504 37424 1.1 0.0 177580 35604 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/wrrh/index.php
    504 37824 1.3 0.0 180332 38488 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/uvsh/index.php
    504 39471 1.5 0.0 169456 27432 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/rhsnm/index.php
    nobody 15734 0.2 0.0 1371492 35900 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
    504 30513 0.6 0.0 184280 40872 ? S 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/sri/index.php
    504 31414 0.7 0.0 185056 40884 ? S 13:32 0:01 | | \_ /usr/bin/php /home/ernesthealth/public_html/siach/index.php
    504 35246 0.9 0.0 181112 39288 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/achm/index.php
    504 35752 1.0 0.0 180852 39140 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/achsnm/index.php
    504 36566 1.0 0.0 181116 39428 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ccrh/index.php
    504 37226 0.9 0.0 177260 35444 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lrh/index.php
    504 37534 1.3 0.0 180852 39364 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/nbrrh/index.php
    504 37918 0.9 0.0 171652 29840 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lsh/index.php
    nobody 15735 0.2 0.0 1371492 31748 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
    504 33819 0.6 0.0 180072 38280 ? S 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lsh/index.php
    504 35264 0.8 0.0 178820 37040 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/sri/index.php
    504 37217 1.1 0.0 179400 37648 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncltah/index.php
    504 37516 1.3 0.0 180092 38720 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/index.php
    504 37915 1.2 0.0 175704 33900 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncrh/index.php
    nobody 15736 0.2 0.0 1371492 31892 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
    504 32991 0.6 0.0 183572 40516 ? S 13:32 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncrh/index.php
    504 35410 0.8 0.0 178328 36720 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/msh/index.php
    504 35818 1.2 0.0 184640 40364 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/rhn/index.php
    504 37944 1.4 0.0 178024 36136 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ncrh/index.php
    504 38450 1.6 0.0 177272 35344 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/evrh/index.php
    504 39766 2.3 0.0 170604 28744 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/achsnm/index.php
    504 40934 3.2 0.0 167508 25280 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/ccrh/index.php
    504 41275 3.3 0.0 159032 16400 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lrrh/wp-cron.php
    nobody 15737 0.2 0.0 1371444 35576 ? Sl 13:17 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
    504 35549 0.8 0.0 180336 38428 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/siach/index.php
    504 37171 0.8 0.0 173416 31600 ? D 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/lrrh/index.php
    504 37509 1.3 0.0 180092 38700 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/index.php
    504 38626 1.9 0.0 180224 38648 ? S 13:33 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/uvsh/wp-cron.php
    504 39557 1.4 0.0 168308 25988 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/siach/index.php
    504 39970 1.6 0.0 165328 22912 ? D 13:34 0:00 | | \_ /usr/bin/php /home/ernesthealth/public_html/sri/wp-cron.php
    nobody 25362 0.2 0.0 1371384 35556 ? Sl 13:19 0:02 | \_ /usr/local/apache/bin/httpd -k start -DSSL
    504 32963 0.6 0.0 183076 39912 ? S 13:32 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/lrrh/index.php
    504 34639 0.8 0.0 180856 39208 ? S 13:32 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/nurh/index.php
    504 36016 0.9 0.0 179804 37728 ? D 13:33 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/wrrh/wp-cron.php
    504 37900 1.2 0.0 176224 34072 ? S 13:33 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/rhn/index.php
    504 38693 1.8 0.0 175960 34068 ? S 13:34 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/mri/index.php
    504 39078 2.2 0.0 178028 36100 ? D 13:34 0:00 | \_ /usr/bin/php /home/ernesthealth/public_html/grrh/wp-cron.php
     
  2. ssfred

    ssfred Well-Known Member

    Joined:
    Jan 6, 2012
    Messages:
    62
    Likes Received:
    2
    Trophy Points:
    8
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello

    Investigation of server issues are quite effective when it is happening. However from the given data, I suspect some sort of hack or resource leaking for the account "ernesthealth". Please ensure that the account is not compromised by performing a malware scan. Implementation of CloudLinux is a good option to tackle abusers and avoiding service termination.
     
  3. webhostuk

    webhostuk Well-Known Member

    Joined:
    Sep 11, 2013
    Messages:
    54
    Likes Received:
    6
    Trophy Points:
    8
    cPanel Access Level:
    Website Owner
    Does this accounts : ernesthealth, got wordpress installed on it? if so I feel mostly its due to older version or insecure wordpress permissions. Also check for plugins you have installed , even removing buggy Plugins can fix this problem.
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    652
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    As mentioned, you may want to suspend the account associated with those PHP processes before starting the server again. Then, once the server starts, you can follow the guide at:

    Troubleshooting high server loads on Linux servers

    Thank you.
     
Loading...

Share This Page