Rafael Moreno

Member
Mar 27, 2015
6
1
3
Venezuela
cPanel Access Level
Root Administrator
Hello, I have been running a little hosting company since 2 years ago using Cpanel without any major problems, but this last week since an update to the latest version I'm having this little problem in some hosted sites.

The sites keep vising by itself increasing the load on server, for example:
load average: 56.07, 47.70, 30.39

When I see the top I always see a site generating the issue, if I go check the access log for that site I can see something like this:

64.XX.XX.XX is the IP of my server
64.XX.XX.XX - - [27/Mar/2015:05:36:25 -0700] "GET /wp-content/uploads/2014/12/constructo-logoV4-footer22.png HTTP/1.0" 404 16429 "-" "-"
64.XX.XX.XX - - [27/Mar/2015:05:36:25 -0700] "GET /wp-content/uploads/2014/12/constructo-logoV4-footer22.png HTTP/1.0" 404 16429 "-" "-"
64.XX.XX.XX - - [27/Mar/2015:05:36:25 -0700] "GET /wp-content/uploads/2014/12/constructo-logoV4-footer22.png HTTP/1.0" 404 16429 "-" "-"
64.XX.XX.XX - - [27/Mar/2015:05:36:25 -0700] "GET /wp-content/uploads/2014/12/constructo-logoV4-footer22.png HTTP/1.0" 404 16429 "-" "-"
64.XX.XX.XX - - [27/Mar/2015:05:36:25 -0700] "GET /wp-content/uploads/2014/12/constructo-logoV4-footer22.png HTTP/1.0" 404 16429 "-" "-"
"-"


Or another website (The problem started this day on this)
64.XX.XX.XX - - [23/Mar/2015:11:55:24 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:24 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:24 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:24 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:31 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:31 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:31 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:32 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"
64.XX.XX.XX - - [23/Mar/2015:11:55:35 -0700] "POST /xmlrpc.php HTTP/1.0" 404 26743 "-" "The Incutio XML-RPC PHP Library -- WordPress/4.1.1"



Last events the server was:
- March 21: Install an extra hard drive and mount it as /home2
don't know if this can affect

- March 24: I got 2 email hours before problem start

Email 1:
Subject: Cpanel update failure in upcp
Content: Running `/usr/local/cpanel/scripts/updatenow --upcp --log=/var/cpanel/updatelogs/update.1427190121.log` failed, exited with code 29 (signal = 0)

Email 2:
Subject: Cpanel update failure during updatenow
Content: An error was detected which prevented updatenow from completing normally.
Please review the enclosed log for further details

----------------------------------------------------------------------------------------------------

[20150324.024203] Detected version '11.48.1.3' from version file.
[20150324.024203] Running version '11.48.1.3' of updatenow.
[20150324.024304] Using mirror '66.23.237.210' for host 'httpupdate.cpanel.net'.
[20150324.024306] ***** FATAL: Unable to retrieve tier version info: Interrupted system call
[20150324.024306] The Administrator will be notified to review this output when this script completes
[20150324.024306] E Detected events which require user notification during updatenow. Will send iContact the log

When I check that log:
[20150324.024203] Detected version '11.48.1.3' from version file.
[20150324.024203] Running version '11.48.1.3' of updatenow.
[20150324.024304] Using mirror '66.23.237.210' for host 'httpupdate.cpanel.net'.
[20150324.024306] ***** FATAL: Unable to retrieve tier version info: Interrupted system call
[20150324.024306] The Administrator will be notified to review this output when this script completes
[20150324.024306] E Detected events which require user notification during updatenow. Will send iContact the log
=> Log closed Tue Mar 24 02:43:07 2015
[20150324.024307] 17% complete
[20150324.024307] E Running `/usr/local/cpanel/scripts/updatenow --upcp --log=/var/cpanel/updatelogs/update.1427190121.log` failed, exited with code 29 (signal = 0)
=> Log closed Tue Mar 24 02:43:08 2015


Thanks in advance
hoping you can help me to solve this problem.


Best regards
Rafael Moreno.
 

24x7ss

Well-Known Member
Sep 30, 2014
272
17
68
India
cPanel Access Level
Root Administrator
Twitter
Try using top or ps command to figure out which process is increasing the server load. Whether it is mysql or apache or PHP process. On that basis of that you have to tweak/optimize your server settings.