One wordpress site eats my CPU and freeze all

One wordpress site eats my CPU and freeze all
I'm having a problem with a wordpress site in my server, i tried a lot of things but i cannot solve the problem.

++++++++++++++
If You want to buy cheap web hosting then visit http://Listfreetop.pw and select the cheapest hosting. it can be suitable for all your needs.

Top 200 best traffic exchange sites http://Listfreetop.pw/surf

list of top gpt sites
list of top ptc sites
list of top ptp sites
list of top crypto currency Wallets sites
Listfreetop.pw
Listfreetop.pw
Listfreetop.pw
+++++++++++++++

In some times and more when have larger views (no more than 2k views in a hour), the sites eat completly the CPU (using 70 to 100 of cpu). That makes the VPS crashes, sometimes also uses a lot of ram. I suspect was a malware, so i reinstall the wordpress (deleting all the files that aren't images), make a clean install with another theme, but i have the same problem, now is late and the visitors are a fews (0-10) but the server is slow and the use of CPU is high.

I have a AWS EC3 medium, the server is with WHM (CentOS), with no more 12 accounts with 8 WP installations, but only this eat the entire cloud server, i dont understand why.

When i do top and ps ax i view the process eating is php-cgi, i tried disabling plugins and themes, but also the uses is high....

?What i can do? The site is of a client and this is really alerting me

I passed the scans of Sucuri, WordFence, and nothing.

Edit: The only "temporary" solution i found is change my instance type to a xlarger, but that is not a solution, because the site can't eat my server on that way...

I share some screens... https://imgur.com/a/KoxuCYk

The information you provided is not enough to even begin debugging this.
Your first point of interest should be the logs for that virtualhost, at a hunch it could be someone trying to brute-force that wp, i.e. check for repeated entries for wp-login.php. If it's that you're in luck as it's easily remedied.

BTW for the money you're paying AWS or a bit more you could've gone to an actual hosting company that could help you get unstuck from such circumstances.

Not much to go on but from my experience WordFence and bad bots can cause high load.

Do you have a firewall and bruteforce protection and mod_sec?

The information you provided is not enough to even begin debugging this.
Your first point of interest should be the logs for that virtualhost, at a hunch it could be someone trying to brute-force that wp, i.e. check for repeated entries for wp-login.php. If it's that you're in luck as it's easily remedied.

BTW for the money you're paying AWS or a bit more you could've gone to an actual hosting company that could help you get unstuck from such circumstances.
I finded in the cpanel the lastests visitors and i don't see anything of wp-login.php, another way to track it?

What log i need to find? thanks!

Not much to go on but from my experience WordFence and bad bots can cause high load.

Do you have a firewall and bruteforce protection and mod_sec?
The protection only by WordFence, i don't try disabling it.

BruteForce by CPHulk was disabled (now enabled) and mod_sec by WHM also

When I said to check, I meant to get on the command line and check, see if CPanel allows you to check the actual access log of that vhost if you're not comfortable with the linux shell.

I'd seriously consider taking some Linux training classes or hire a server management service. Don't take it personally, but one just shouldn't do web hosting without some Linux skills. As you can see you seem ill-equiped to deal with the situation.

When I said to check, I meant to get on the command line and check, see if CPanel allows you to check the actual access log of that vhost if you're not comfortable with the linux shell.

I'd seriously consider taking some Linux training classes or hire a server management service. Don't take it personally, but one just shouldn't do web hosting without some Linux skills. As you can see you seem ill-equiped to deal with the situation.
I usually do all the job with SSH, but i don't know how check the visits to only wp-login.php, i checked the access log from /usr/local/apache/domlogs/user/domain but i don't see visits of wp-login.php

(sorry for my bad english...)

make a clean install with another theme, but i have the same problem, now is late and the visitors are a fews (0-10) but the server is slow and the use of CPU is high.
Something tells me you have a problem with your VPS and you need to check it from security and optimization.

Another thing is how the hardware perform, etc....

Many reasons why... but we can only speculate.
Specially 4 You ||| Elevate Your Sites
.
JoneSolutions.Com ( Jones.Solutions or Jones.Hosting ) is on the net 24/7 providing stable and reliable web hosting solutions and services since 2001

Something tells me you have a problem with your VPS and you need to check it from security and optimization.

Another thing is how the hardware perform, etc....

Many reasons why... but we can only speculate.
Maybe a security issue, but is strange but is only with this site!

Maybe a security issue, but is strange but is only with this site!
Did you try change the domain you are using for this site, or change the IP, change name folder of theme, ....

Did you try change the domain you are using for this site, or change the IP, change name folder of theme, ....
I reinstalled the site, the name folder of the theme is changed, the domain and ip no because is a production site (and a news site, everydays have many updates)

Do you have a caching plugin? Caching plugins can quickly eat up the available CPU resources if they are not configured correctly.

I usually do all the job with SSH, but i don't know how check the visits to only wp-login.php, i checked the access log from /usr/local/apache/domlogs/user/domain but i don't see visits of wp-login.php

(sorry for my bad english...)
You should also be looking for xmlrpc.php as it is abused in the same manner (sometimes more) as wp-login.php
??? HostMantis ???
Affordable Web Hosting ? Shared ? Reseller ? Enterprise ? Instant Activation
cPanel ? LiteSpeed ? Cloudflare/Railgun ? NVMe ? DDoS ? Multi-PHP ? Let's Encrypt ? JetBackup
Canada ? USA ? Singapore ? UK ? Germany ? Australia ? France

Hi

I'm having a problem with a wordpress site in my server, i tried a lot of things but i cannot solve the problem.

In some times and more when have larger views (no more than 2k views in a hour), the sites eat completly the CPU (using 70 to 100 of cpu). That makes the VPS crashes, sometimes also uses a lot of ram. I suspect was a malware, so i reinstall the wordpress (deleting all the files that aren't images), make a clean install with another theme, but i have the same problem, now is late and the visitors are a fews (0-10) but the server is slow and the use of CPU is high.

I have a AWS EC3 medium, the server is with WHM (CentOS), with no more 12 accounts with 8 WP installations, but only this eat the entire cloud server, i dont understand why.

When i do top and ps ax i view the process eating is php-cgi, i tried disabling plugins and themes, but also the uses is high....

?What i can do? The site is of a client and this is really alerting me

I passed the scans of Sucuri, WordFence, and nothing.

Edit: The only "temporary" solution i found is change my instance type to a xlarger, but that is not a solution, because the site can't eat my server on that way...

I share some screens... https://imgur.com/a/KoxuCYk


Hi,

As others have mentioned, there is almost no information given to help, and enough information to make guesses.

1. Is this VPS managed or unmanaged?

2. Is this a new client?

3. How recent are these issues?

4. Have you looked through logs?

5. Any crons running?

6. You said you do not see wp-login, but what about xml-rpc, index, or any other file repeatedly?

7. What are the resources of the account (Ram, cpu)?

8. With #7, if there's not enough resources to accommodate the current traffic, which about 1.5 millions views per month, then the "temporary" fix is actually what was needed. Think of it as such....you can rent a large truck to move items, or use a small car. The large truck will cost more, but will handle the job. The small car can also do some of the work, but then you're wearing out the car with multiple trips, and loading it down beyond what it can carry. In the long run, it actually cost less to get the moving truck, than to replace a burnt out car.

9. If this is for a client, are you able to discuss upgrades with them?

10. Has anything with images or the database been optimized?

11. Is everything up to date, and not needed plugins or themes deleted.

12. Looking at the screenshot, it's also possible a process is stuck, but that is just a guess.

13. Have you communicated this with the host?


That list is just from the top of my head, and just a part of making sure WordPress runs efficiently and is secured. There are also cases where a neighboring VPS was the issue, which only the host would be answer.

Which are the available php handlers on your server?

Which are the available php handlers on your server?
PHP CGI and now enabled FPM in the account, the modules of php are this:

PHP 5.6
libc-client

pear

php-bcmath

php-calendar

php-cli

php-common

php-curl

php-devel

php-fpm

php-ftp

php-gd

php-iconv

php-imap

php-ioncube

php-litespeed

php-mbstring

php-mcrypt

php-mysqlnd

php-pdo

php-posix

php-sockets

php-xml

php-zip

runtime



Replying the anothers:

For XMLRPC i installed a plugin for disable it

Caching Plugin i installed W3, but now i disabled


1. Is this VPS managed or unmanaged?

Is a Cloud Server in AWS

2. Is this a new client?

No

3. How recent are these issues?

1 or 2 months

4. Have you looked through logs?

Only access and error logs

5. Any crons running?

I dont look into this, i gonna do

6. You said you do not see wp-login, but what about xml-rpc, index, or any other file repeatedly?

In Access Logs i dont see it, i mean is not a brute force attack maybe.

7. What are the resources of the account (Ram, cpu)?

Is an Amazon EC2 Medium, 2CPU and 4GB RAM

8. With #7, if there's not enough resources to accommodate the current traffic, which about 1.5 millions views per month, then the "temporary" fix is actually what was needed. Think of it as such....you can rent a large truck to move items, or use a small car. The large truck will cost more, but will handle the job. The small car can also do some of the work, but then you're wearing out the car with multiple trips, and loading it down beyond what it can carry. In the long run, it actually cost less to get the moving truck, than to replace a burnt out car.

Is not really big visitors, maybe 40k per month

9. If this is for a client, are you able to discuss upgrades with them?

They payed a completly year, and the increment of visitors are no "exponential" to this error, is "normal" to have 30k by month

10. Has anything with images or the database been optimized?

Is WP, the DB is small, maybe 50mb

11. Is everything up to date, and not needed plugins or themes deleted.

Yes, i reinstalled

12. Looking at the screenshot, it's also possible a process is stuck, but that is just a guess.

The process of php-cgi uses a lot of cpu

13. Have you communicated this with the host?

In AWS i mean they not help me, (that i known when i migrate from another comparny  )


Now i reboot the server and is running "normal" but i don't know if when much visitors enter into the page the servers freeze again, so its scares me because i have another clients in the server.

Thank all for the replies!

Try to install 'lsapi' and use it as php handler instead of php-cgi.

I can see you already enabled php-fpm - do you notice an improvement already?
If no - make sure you have enabled it on this particular account as the default cPanel php-fpm manager can be buggy sometimes.

If the problem persists - you need to examine the access logs to see if you can find a pattern.
You should also check the Wordpress modules installed on this particular website.

submit-jet.com
domaine w trouillet
traffictoons.com
domain 53
hostcapitol.com
a host unto himself
forum gsmhosting rsim
m domain mail server download
hostel 8 iitb