On WHM :Main >> Server Status >> CPU/Memory/MySQL Usage, netstat-npl is showing to be the top procces :%CPU 99.9 under root user.
Is that normal ? I have CSF installed.
SSH to your server and run this command to see if your server is under DoS/DDoS/Syn attack:
/bin/netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr |more