Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Nobody user taking up 300% CPU?

Discussion in 'Security' started by psm, Jun 21, 2018.

  1. psm

    psm Registered

    Joined:
    Dec 12, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I noticed our server has been moving very slow, checked out the current processes and found this nobody user using up 300+% of the CPU for some "!!" Command?? What is going on here?

    Image attached
     

    Attached Files:

  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,342
    Likes Received:
    402
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    I suggest using that kill link, to the left there. That should get your resources back to give you a chance at taking a closer look at things.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Jcats

    Jcats Well-Known Member

    Joined:
    May 25, 2011
    Messages:
    720
    Likes Received:
    123
    Trophy Points:
    168
    Location:
    New Jersey
    cPanel Access Level:
    DataCenter Provider
    Do you have SSH access? I would probably run a lsof on it, if its something malicious, then it will just spawn again at some point.

    Code:
    lsof -p 20594
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. psm

    psm Registered

    Joined:
    Dec 12, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Correct , everytime I kill the process it spawns again with a few files such as "27DeoeDNc" in the tmp dir. Deleting those respawn again.

    Attached is a screenshot of lsof output
     

    Attached Files:

  5. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,749
    Likes Received:
    1,885
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice