High CPU Usage > and now?

Hello everyone,

I’ve been facing a challenging issue for the past 3 days and I’m at a loss for what to do next. Could someone please help me?

We’re running a server with the following specs: 16vCPU, 16GB RAM DDR4, PHP 8.2, LiteSpeed, and our theme is Newspaper with WP-Rocket. We also use Cloudflare with the latest WordPress version 6.5.5 and only essential plugins.

Here’s the problem: Around 7:14 AM, we’re experiencing a high CPU usage, hitting 100% across all 16 vCPUs. At this time, our Google analytics 4 show around 1200 concurrent users, though we’ve comfortably handled 3000 users before with CPU usage well below 50%.

30 days

Interestingly, even with Cloudflare’s “Under Attack” mode activated, our server resource usage remains high.

I’ve attached a screenshot of the last 30 days for reference.

24 hours

Snapshot: Http queries 07:26

Process

Queries

We’re open to suggestions and are even willing to consider paid solutions if they can help resolve this issue efficiently.

Does anyone have any insights or tips that could help us troubleshoot and resolve this issue?

Thank you in advance for your assistance!

• This topic was modified 2 years by gomakeout.
• This topic was modified 2 years by gomakeout.
• This topic was modified 2 years by gomakeout.

do you have normal security stuff enabled like disabling xmlrpc, checking each plugin working properly by opening settings for each, checking wordfence to see if any plugin a target for exploit, etc?

Hi Simchris,

First of all, thank you for your message.

I just blocked xmlrpc via .htaccess, and we did a full scan of the platform with Wordfence, which didn’t detect any malware.

As soon as it’s 7~8 AM here, I’ll get back here to share whether this action worked to reduce CPU usage. If you have any other additional tips, I would appreciate it.

@anamaria Thank you for letting me know, I’m around.

me, too. since before yesterday.

[Wed Jun 26 15:42:31.249288 2024] [fcgid:warn] [pid 3433:tid 3552] (104)Connection reset by peer: [client 162.158.78.165:38978] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.272332 2024] [fcgid:warn] [pid 3433:tid 3568] (104)Connection reset by peer: [client 172.69.63.14:34118] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.284271 2024] [fcgid:warn] [pid 20243:tid 20359] (104)Connection reset by peer: [client 172.69.63.44:42820] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.288469 2024] [fcgid:warn] [pid 20243:tid 20348] (104)Connection reset by peer: [client 172.69.63.17:43092] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.315298 2024] [fcgid:warn] [pid 36806:tid 37105] (104)Connection reset by peer: [client 172.69.63.168:50224] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.360286 2024] [fcgid:warn] [pid 36806:tid 37032] (104)Connection reset by peer: [client 172.69.63.92:53842] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.360725 2024] [fcgid:warn] [pid 20243:tid 20322] (104)Connection reset by peer: [client 172.69.63.103:53266] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.369113 2024] [fcgid:warn] [pid 36806:tid 37077] (104)Connection reset by peer: [client 172.69.63.109:49982] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.391264 2024] [fcgid:warn] [pid 20243:tid 20285] (104)Connection reset by peer: [client 172.69.63.196:54266] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.406204 2024] [fcgid:warn] [pid 20243:tid 20264] (104)Connection reset by peer: [client 172.69.63.187:54086] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:31.410909 2024] [fcgid:warn] [pid 20243:tid 20325] (104)Connection reset by peer: [client 172.69.63.95:60686] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Jun 26 15:42:32.223507 2024] [fcgid:warn] [pid 20243:tid 20343] (104)Connection reset by peer: [client 172.69.63.110:57314] mod_fcgid: ap_pass_brigade failed in handle_request_ipc function

@simchris Thnaks for ur reply!

@ytgaw i think we fixed it with this tutorial:
https://turbofuture.com/internet/Cloudflare-Firewall-Rules-for-Securing-WordPress

now is 9 AM and all CPU usage is normal;

Any news I’ll let you know