system load average

mohammad.983

Verified User
Joined
Jun 26, 2015
Messages
34
Hi guys
today I get some warnings about system load average, my server is dedicate and I've never had any problem with it.
could you help me to solve it?

Code:
This is an automated message notifying you that the 5 minute load average on your system is 29.12.
This has exceeded the 10 threshold.

One Minute      - 53.07
Five Minutes    - 29.12
Fifteen Minutes - 16.62

top - 23:57:00 up  7:15,  0 users,  load average: 54.28, 30.17, 17.10
Tasks: 208 total,  49 running, 159 sleeping,   0 stopped,   0 zombie
%Cpu(s):  8.4 us,  1.3 sy,  0.0 ni, 89.5 id,  0.6 wa,  0.0 hi,  0.2 si,  0.0 st
KiB Mem : 16268312 total,   138028 free,  9280044 used,  6850240 buff/cache
KiB Swap:  4161532 total,  4161532 free,        0 used.  6616424 avail Mem 

 PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  11 root      rt   0       0      0      0 S  25.6  0.0   0:46.79 [watchdog/1]
32010 timecode  20   0  323976  48944   4576 R  19.6  0.3   0:16.80 php-fpm: pool timecode
3735 nginx     20   0   76884  19404   2144 R   7.9  0.1   1:31.66 nginx: worker process
30135 timecode  20   0  434876  85032   6304 R   6.8  0.5   1:10.88 php-fpm: pool timecode
32002 timecode  20   0  316988  41744   4324 R   6.7  0.3   0:17.81 php-fpm: pool timecode
12205 root      20   0  174288  24212   2132 R   6.4  0.1   0:46.17 lfd - processing
32017 timecode  20   0  317780  42912   4572 R   6.2  0.3   0:15.40 php-fpm: pool timecode
3738 nginx     20   0   73076  17992   2144 R   6.1  0.1   1:26.44 nginx: worker process
32026 timecode  20   0  292144  17716   5260 R   5.9  0.1   0:11.58 php-fpm: pool timecode
  23 root      20   0       0      0      0 R   5.8  0.0   1:17.45 [ksoftirqd/3]
32006 timecode  20   0  319056  43188   5208 R   5.8  0.3   0:15.46 php-fpm: pool timecode
32008 timecode  20   0  293352  19268   5288 R   5.8  0.1   0:13.35 php-fpm: pool timecode
31971 timecode  20   0  300240  26012   5356 R   5.6  0.2   0:15.91 php-fpm: pool timecode
31278 root      20   0       0      0      0 R   5.3  0.0   0:00.96 [kworker/u8:0]
  13 root      20   0       0      0      0 R   4.9  0.0   0:57.06 [ksoftirqd/1]
32005 timecode  20   0  302052  27908   5352 R   4.6  0.2   0:13.48 php-fpm: pool timecode
   9 root      20   0       0      0      0 R   4.1  0.0   0:45.31 [rcu_sched]
2184 mysql     20   0  845680 271260  10044 S   3.9  1.7  19:35.01 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --log-error=/var/lib/mysql/server.tctc.com.err --pid-file=server.tctc.com.pid
31947 timecode  20   0  313372  39172   5424 S   3.9  0.2   0:22.55 php-fpm: pool timecode
31951 timecode  20   0  326508  52548   5628 R   3.8  0.3   0:21.53 php-fpm: pool timecode
32028 root      20   0  174564  23588   1256 S   3.8  0.1   0:01.91 lfd - (child) (PT) checking user processes
32022 timecode  20   0  297744  23576   5348 R   3.6  0.1   0:12.15 php-fpm: pool timecode
31954 timecode  20   0  317004  41348   4200 R   3.5  0.3   0:14.44 php-fpm: pool timecode


================================
Automated Message Generated by DirectAdmin 1.50.1

Code:
This is an automated message notifying you that the 5 minute load average on your system is 19.03.
This has exceeded the 10 threshold.

One Minute      - 1.32
Five Minutes    - 19.03
Fifteen Minutes - 21.15

top - 00:07:11 up  7:25,  0 users,  load average: 1.32, 19.03, 21.15
Tasks: 158 total,   1 running, 157 sleeping,   0 stopped,   0 zombie
%Cpu(s):  8.5 us,  1.3 sy,  0.0 ni, 89.3 id,  0.6 wa,  0.0 hi,  0.2 si,  0.0 st
KiB Mem : 16268312 total,  1948684 free,  8506996 used,  5812632 buff/cache
KiB Swap:  4161532 total,  4161532 free,        0 used.  7394168 avail Mem 

 PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
   1 root      20   0  190772   3760   2396 S   0.0  0.0   0:17.56 /usr/lib/systemd/systemd --switched-root --system --deserialize 21
   2 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kthreadd]
   3 root      20   0       0      0      0 S   0.0  0.0   0:05.30 [ksoftirqd/0]
   5 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/0:0H]
   7 root      rt   0       0      0      0 S   0.0  0.0   0:02.81 [migration/0]
   8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
   9 root      20   0       0      0      0 S   0.0  0.0   1:03.50 [rcu_sched]
  10 root      rt   0       0      0      0 S   0.0  0.0   0:23.37 [watchdog/0]
  11 root      rt   0       0      0      0 S   0.0  0.0   1:05.48 [watchdog/1]
  12 root      rt   0       0      0      0 S   0.0  0.0   0:10.70 [migration/1]
  13 root      20   0       0      0      0 S   0.0  0.0   1:20.96 [ksoftirqd/1]
  16 root      rt   0       0      0      0 S   0.0  0.0   0:53.76 [watchdog/2]
  17 root      rt   0       0      0      0 S   0.0  0.0   0:06.87 [migration/2]
  18 root      20   0       0      0      0 S   0.0  0.0   1:15.49 [ksoftirqd/2]
  20 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/2:0H]
  21 root      rt   0       0      0      0 S   0.0  0.0   1:17.38 [watchdog/3]
  22 root      rt   0       0      0      0 S   0.0  0.0   0:11.51 [migration/3]
  23 root      20   0       0      0      0 S   0.0  0.0   1:49.75 [ksoftirqd/3]
  25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/3:0H]
  27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [khelper]
  28 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpfs]
  29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
  30 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [khungtaskd]


================================
Automated Message Generated by DirectAdmin 1.50.1
Code:
This message has been automatically generated notifying you that the service dovecot is currently down.

123.JPG
 
Last edited:
Hello,

Check web-server logs for the user timecode. It might be that somebody it either brute-forcing sites of the user and/or spamming comments... or/and use possibly malware under the user's account.

That's a guess... no more ideas from the top's output.
 
Back
Top