Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Website Using Too Many Resources

Discussion in 'Database Discussion' started by xata11, Feb 1, 2019.

  1. xata11

    xata11 Member

    Joined:
    Oct 17, 2018
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Port harcourt
    cPanel Access Level:
    Root Administrator
    Hello, I am seriously having issues on my mysql I have 2 sites running on my current vps server, But Site A is using almost all my resource, I duplicated the database and make a new site B out of the first one.

    but it seems the site A is been hitted heavily when I run top command,

    Both site A and B have less traffic maximum of 10 users online, but when I run top command I find out that site A is using almost all my resource, while most of the time I dont even see site B on top c command. Now I did a 301 redirect, I redirect site A to site B just for a test, and I find out that Site B is now heavily using my resources, almost all of them, just as what site A has been doing, I dont really understand.

    after I downloaded my mysql error log I check through it, I find out that attempt with different user is trying to access my mysql, I dont really understand, here is the link to ip trying to access mysql server: - Removed -

    the Link above is dead here is the link:
    - Removed -

    Code:
    
    2018-11-28 13:25:38 139919581391040 [Note] /usr/sbin/mysqld: ready for connections.
    2018-12-07 22:34:32 139907493377792 [Warning] Access denied for user 'root'@'74.208.xxx.xx' (using password: YES)
    2018-12-07 22:34:34 139907494606592 [Warning] Access denied for user 'root'@'74.208.xxx.xx' (using password: YES)
    2018-12-07 22:34:34 139907494299392 [Warning] Access denied for user 'root'@'74.208.xxx.xx' (using password: YES)
    2018-12-07 22:34:35 139907492763392 [Warning] Access denied for user 'root'@'74.208.xxx.xx' (using password: YES)
    2018-12-07 22:34:37 139907493070592 [Warning] Access denied for user 'root'@'74.208.xxx.xx' (using password: YES)
    2018-12-07 22:34:37 139908682868480 [Warning] Access denied for user 'root'@'74.208.xxx.xx' (using password: YES)
    2018-12-07 22:34:39 139907493377792 [Warning] Access denied for user 'root'@'74.208.xxx.xx' (using password: YES)
    
     
    #1 xata11, Feb 1, 2019
    Last edited by a moderator: Feb 1, 2019
  2. Infopro

    Infopro cPanel Sr. Product Evangelist Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,877
    Likes Received:
    482
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    There's no need to post that super long log file with the same details repeated hundreds of times with different IP addresses, so the text file has been removed and replaced with a snip of the log.

    You might want to Suspend the site, assuming you have root access to the server.

    Also, the log file entries are from December 2018.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. xata11

    xata11 Member

    Joined:
    Oct 17, 2018
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Port harcourt
    cPanel Access Level:
    Root Administrator
    yes, and I am still experiencing then same thing uptil now, right now as I am typing this my server is down, because I tried to restart mysql when my average load has reach 31 out of my 6core server.
     
  4. xata11

    xata11 Member

    Joined:
    Oct 17, 2018
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Port harcourt
    cPanel Access Level:
    Root Administrator
    I dont really want to suspend any of the site, because that is my project, and I am using it.
     
  5. Infopro

    Infopro cPanel Sr. Product Evangelist Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,877
    Likes Received:
    482
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Do you have root access to this server? Your forum profile lists you as Website Owner.

    If you've got root access, you can enter the suspended sites cPanel account from WebHost Manager to fix your project. If you don't, you might want to consider contacting your hosting provider about this.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. xata11

    xata11 Member

    Joined:
    Oct 17, 2018
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Port harcourt
    cPanel Access Level:
    Root Administrator
    I have root access to this sites, the site was never suspended, it has numerous IP users trying to attack mysql, you deleted the link I provided. Check on it again, u will see various users with different user name trying to access the server. I think it is an attack.


    I have root access to this server, how can I edit my cPanel Access Level on this forum
     
    #6 xata11, Feb 2, 2019
    Last edited by a moderator: Feb 2, 2019
  7. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,141
    Likes Received:
    474
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    For starters I would get a system administrator inolved in this if you haven't already. If you don't have one you might find one here: System Administration Services | cPanel Forums.

    Secondly, I would suggest checking the following tutorial which might help you mitigate some of the load issues: Tutorial - Troubleshooting high server loads on Linux servers

    Though it does look like you understand why it's occurring - it seems like a brute force attempt...does it all originate from the same IP address?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice