Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

lfd excessive processes running under user

Discussion in 'General Discussion' started by ContinuIT, Apr 26, 2019.

  1. ContinuIT

    ContinuIT Member

    Joined:
    Mar 9, 2019
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Ijamsville, MD
    cPanel Access Level:
    Root Administrator
    I have looked at the few threads regarding this error and none seem to apply to my case
    Related or unrelated, I started getting the errors for one user:
    User:lochhavenclubinc PID:8483 PPID:8335 Run Time:3(secs) Memory:309316(kb) RSS:42040(kb) exe:/opt/cpanel/ea-php72/root/usr/bin/php-cgi cmd:/opt/cpanel/ea-php72/root/usr/bin/php-cgi

    and at the same time services like mysql, nameserver, clamd, spamd etc, failing and recovering.
    Service check output looks like this

    (XID 4jptke) The “clamd” service is down.
    The subprocess “/usr/local/cpanel/scripts/restartsrv_clamd” reported error number 3 when it ended.

    It all stopped at around 3 AM.
    This is not the first time this happens, last time we had to suspend the user (which is actually us) and that stopped the issue.
    The website for this user is a wordpress site, fully updated and working normally.
    I am guessing we are being attacked some how, but that is just a wild guess.

    Any ideas?
     
  2. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,920
    Likes Received:
    167
    Trophy Points:
    343
    cPanel Access Level:
    Root Administrator
    How many WordPress plugins do you have installed?

    My best guess is that something within wp-cron is running overnight and is overloading your server. Unfortunately, I do not know what that something might be.
     
  3. ContinuIT

    ContinuIT Member

    Joined:
    Mar 9, 2019
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Ijamsville, MD
    cPanel Access Level:
    Root Administrator
    I have just 13 plugins running, not a lot for a wordpress site.
    Is there a log of the wp-cron somewhere?
     
  4. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,262
    Likes Received:
    481
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hi @ContinuIT



    What is the exact excessive error that is associated with this when CSF sends the notification? Is it excessive processes?

    This sounds a lot like something on the account in question here is consuming too many resources. You might check the daily process log if you're viewing the situation after the fact, it can be found at WHM>>Server Status>>Daily Process Log

    You may also want to take a look at the post here: Tutorial - Troubleshooting high server loads on Linux servers
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,920
    Likes Received:
    167
    Trophy Points:
    343
    cPanel Access Level:
    Root Administrator
    The only way I know of to list wp-cron events is through wp-cli

    wp cron event list | WordPress Developer Resources

    It's just a guess on my part that it is something to do with wp-cron. You may have something trying to perform a backup at that time and it's consuming all of the memory. But I really don't know.
     
  6. ContinuIT

    ContinuIT Member

    Joined:
    Mar 9, 2019
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Ijamsville, MD
    cPanel Access Level:
    Root Administrator
    Well, it stopped doing it. This has happened in the past as well, we get the issue going for 2 days and then it stop and we don't know what we did or if it was even us that fixed it.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice