The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

MySQL running at 99% CPU

Discussion in 'General Discussion' started by Wicked, Aug 1, 2006.

  1. Wicked

    Wicked Well-Known Member

    Joined:
    Feb 28, 2006
    Messages:
    62
    Likes Received:
    0
    Trophy Points:
    6
    MySQL

    runs at 99% sometimes. The overall server load does not go to high but it is higher than normal. This does not happen all the time but at this point I am not sure if it happens the same time everday either.

    Any ideas on how I track down what is causing the load to be this high for MySQL?
     
  2. AndyReed

    AndyReed Well-Known Member
    PartnerNOC

    Joined:
    May 29, 2004
    Messages:
    2,222
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    Minneapolis, MN
    Are you using CentOS by any chance? If yes, make sure you are not running an old Kernel version. You should track down the processes in question and make sure whether they are MySQL or something else?

    There are many factors involved in server high load. Read the following thread: http://forums.cpanel.net/showthread.php?t=52674
     
  3. Wicked

    Wicked Well-Known Member

    Joined:
    Feb 28, 2006
    Messages:
    62
    Likes Received:
    0
    Trophy Points:
    6
    Yes I am running Cent OS.

    I will look at the thread now.

    I was told to do this see which accounts were responsible. Does anyone else know what this means or uses this that can tell me how to read the data.

    change to directory to

    /etc/httpd/domlogs/

    cat * | grep -a POST | more

    I get things that look like this

    8.158.23.39 - - [01/Aug/2006:06:12:58 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2648 "-" "Opera/5.02 (Windows 98; U) [en]"
    220.116.25.247 - - [01/Aug/2006:06:42:07 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2662 "-" "Opera/6.04 (Windows 98; U) [en]"
    201.209.209.152 - - [01/Aug/2006:06:52:33 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2651 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; DT)"
    61.101.136.148 - - [01/Aug/2006:07:09:14 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2662 "-" "Opera/5.02 (Windows 98; U) [en]"
    80.48.92.44 - - [01/Aug/2006:07:54:27 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2659 "-" "Opera/6.02 (Windows 2000; U) [en]"
    58.143.0.129 - - [01/Aug/2006:08:03:44 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2660 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows 95)"
    218.152.81.47 - - [01/Aug/2006:08:33:24 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2661 "-" "Opera/6.03 (Windows 2000; U) [en]"
    202.85.15.53 - - [01/Aug/2006:08:40:15 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2660 "-" "Opera/7.02 Bork-edition (Windows NT 5.0; U) [en]"
    203.116.43.69 - - [01/Aug/2006:08:50:35 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2661 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0rc2) Gecko/20020510"
    202.88.255.36 - - [01/Aug/2006:08:59:00 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2649 "-" "Opera/6.02 (Windows 2000; U) [en]"
    211.203.43.136 - - [01/Aug/2006:09:00:45 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2662 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; USA On-Site)"
    70.87.61.234 - - [01/Aug/2006:09:54:11 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2660 "-" "Opera/7.0 (Windows 2000; U) [en]"
    202.224.222.44 - - [01/Aug/2006:09:57:40 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2650 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.1b) Gecko/20020721"
    70.87.61.234 - - [01/Aug/2006:09:57:48 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2660 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
    70.87.61.234 - - [01/Aug/2006:09:59:37 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2660 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)"
    61.233.12.40 - - [01/Aug/2006:10:04:49 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2648 "-" "Mozilla/4.0 (compatible; MSIE 4.0; Windows 95)"
    85.216.173.234 - - [01/Aug/2006:10:08:37 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2650 "-" "-"
    58.238.107.230 - - [01/Aug/2006:10:15:52 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2662 "-" "Mozilla/4.0 (compatible; MSIE 4.0; MSN 2.6; Windows 95; Gateway2000)"
    70.87.61.234 - - [01/Aug/2006:10:17:57 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2660 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows 95)"
    63.89.11.236 - - [01/Aug/2006:10:33:35 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2660 "-" "Mozilla/4.0 (compatible; MSIE 4.0; Windows 95)"
    58.230.108.125 - - [01/Aug/2006:10:39:13 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2662 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)"
    202.149.211.114 - - [01/Aug/2006:10:44:55 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2651 "-" "Mozilla/4.0 (compatible; MSIE 4.0; MSN 2.6; Windows 95; Gateway2000)"
    219.2.228.120 - - [01/Aug/2006:10:49:50 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.0" 404 2649 "-" "Opera/6.04 (Windows 2000; U) [en]"
    218.55.164.243 - - [01/Aug/2006:10:59:06 -0500] "POST /blog/htsrv/trackback.php?tb_id=23 HTTP/1.1" 404 2662 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.1) Gecko/20020826"

    Any ideas if this will help.

    I will look at the the other thread now. Thanks
     
  4. Shinichi Kato

    Shinichi Kato Well-Known Member

    Joined:
    Mar 7, 2005
    Messages:
    73
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Saitama-ken,japan
    Perhaps

    It is trackback spam.
     
  5. Wicked

    Wicked Well-Known Member

    Joined:
    Feb 28, 2006
    Messages:
    62
    Likes Received:
    0
    Trophy Points:
    6
    I believe this a blog site that has RSS feeds. Could this be what causes this. The feed is letting all the users know that there are changes?

    Or is it just plain spam?
     
    #5 Wicked, Aug 2, 2006
    Last edited: Aug 2, 2006
  6. nickp666

    nickp666 Well-Known Member

    Joined:
    Jan 28, 2005
    Messages:
    770
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    /dev/null
    i've ended up removing b2evo because of this, all it did was attract millions of spambots
     
Loading...

Share This Page