Cpu overheating

Virtualmin
1
SYSTEM INFORMATION
OS type and version Ubuntu Linux 20.04.6
Webmin version 2.105
Usermin version 2.005
Virtualmin version 7.8.2 Pro
Theme version 21.09.5
Package updates All installed packages are up to date

cpu overheating hello please after the last update I noticed that my system has become heavy and the cpu is still in red which what should I do thank you

2023-12-15 15_01_54-
2023-12-15 15_01_54-1758×969 146 KB

2023-12-15 15_01_09-Dashboard — Webmin 2.105 on vmi1395651 (Ubuntu Linux 20.04.6) – Brave
2023-12-15 15_01_09-Dashboard — Webmin 2.105 on vmi1395651 (Ubuntu Linux 20.04.6) – Brave1745×958 138 KB

2

what exactly was the update that you are blaming?

1 Like
3

Why is fastrpc running so much? Do you have multiple Webmin instances connected to this one (in Webmin->Webmin->Webmin Servers Index)? (the fastrpc process only runs when communicating with other Webmin servers
and it’s unusual for it to take any CPU worth speaking of
that’s kind of alarming)

4

hi Mr Joe

Capture d’écran 2023-12-15 à 18.41.11
Capture d’écran 2023-12-15 à 18.41.112870×1716 391 KB

5

I received a message on the virtual mine dashboard that there are plogin or something like that that I have to update it and of course I accepted

6

this capture is with the htop command

Capture d’écran 2023-12-15 à 18.45.56
Capture d’écran 2023-12-15 à 18.45.561920×1521 346 KB

7

Something is wrong. You haven’t answered my question about why fastrpc is running at all. Do you have other Webmin servers configured in Webmin->Webmin->Webmin Servers Index? Something is wrong with that.

8

so I didn’t understand the question correctly
if you have a virtual server I have so far hosted 5 sites (5 clients each client I have given are access only)
if you are talking about the server connecting with another directly I confirm that no
Is there no solution to know which function or which account exactly consumes the CPU?
Merci Mr Joe

9

No. That’s completely irrelevant to the problem.

Go to the place I told you to go in the UI. I’ve posted it twice.

10

@Joe and that was answered by the image posted in #4 Webmin -> Webmin -> Webmin Servers Index showing “No Servers have been registered”

Is it possible fastrpc.cgi is stuck in an endless loop? for some reason

11

Oh. Oops. I have a hard time with screenshots, text is easier for me to read.

I see no reason for fastrpc to be running at all!

@Alaaeddine.benabid click on the PID of one of those fastrpc.cgi processes and show us the full command running. We need to figure out what the heck they’re doing.

Also, in a terminal or ssh session run the following (you must replace <pid> with the actual PID of the process you want to look at
we need to see one of the fastrpc processses):

strace -p <pid>

This may be very chatty (probably will be since it is chewing up huge amounts of CPU). We don’t need to see hundreds of lines, just a couple dozen
just to get the gist of what’s happening.

Also check the Webmin logs in /var/webmin. miniserv.error may have clues, webmin.log is the actions log (but API calls may not have action logging), and miniserv.log is the access log and it’s probably the most useful. So show us a few lines of miniserv.log
we only want to see some requests to fastrpc.cgi.

It’s very alarming that fastrpc is doing something when you don’t have any remote systems for it to be talking to. That means something is communicating with the API and making it very busy (possibly an attacker). If you have a weak password or one you’ve reused or one you’ve shared with untrusted people, you need to change it.

12

Unlikely. I mean, it’s possible, but without any other servers configured, I can’t think of why fastrpc would even start much less be in an endless loop. fastrpc implements a protocol only used by Webmin, AFAIK, and is only used by API users (so Webmin instances talking to other Webmin instances, Cloudmin talking to Webmin, Virtualmin talking to other Webmin servers for e.g. DNS slaves, etc.). That would show up in the Servers Index, generally speaking. There may be other API users, but hopefully OP would tell us if they’ve got some billing system or something talking to Webmin/Virtualmin. RPC is remote procedure calls
nothing local really uses it, so some other system is talking to this server. If OP doesn’t know who/what it is, that’s alarming.

1 Like
13

Perhaps whatever that update that was being blamed. We only have a brief knowledge of actually what in running on the system. Is there some app in a webserver (WP for example) that has caused it?

14

the first image was the time of the problem the second photo is now I noticed that the other fasterspc have disappeared only one ago and the datshboard displays the cpu with 60% utilization

2023-12-15 15_01_54-
2023-12-15 15_01_54-1758×969 146 KB

Capture d’écran 2023-12-16 à 00.22.59
Capture d’écran 2023-12-16 à 00.22.592822×1238 502 KB

15

[10/Dec/2023:20:03:03 +0100] Restarting
[10/Dec/2023:20:03:06 +0100] miniserv.pl started
[10/Dec/2023:20:03:06 +0100] Using MD5 module Digest::MD5
[10/Dec/2023:20:03:06 +0100] Using SHA512 module Crypt::SHA
[10/Dec/2023:20:03:06 +0100] PAM authentication enabled
[11/Dec/2023:00:30:09 +0100] Restarting
[11/Dec/2023:00:30:12 +0100] miniserv.pl started
[11/Dec/2023:00:30:12 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:00:30:12 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:00:30:12 +0100] PAM authentication enabled
[11/Dec/2023:17:55:23 +0100] Restarting
[11/Dec/2023:17:55:25 +0100] miniserv.pl started
[11/Dec/2023:17:55:25 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:17:55:25 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:17:55:25 +0100] PAM authentication enabled
[11/Dec/2023:18:04:30 +0100] Restarting
[11/Dec/2023:18:04:31 +0100] miniserv.pl started
[11/Dec/2023:18:04:31 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:18:04:31 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:18:04:31 +0100] PAM authentication enabled
[11/Dec/2023:18:47:35 +0100] miniserv.pl started
[11/Dec/2023:18:47:35 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:18:47:35 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:18:47:35 +0100] PAM authentication enabled
[11/Dec/2023:20:15:14 +0100] Restarting
[11/Dec/2023:20:15:16 +0100] miniserv.pl started
[11/Dec/2023:20:15:16 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:20:15:16 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:20:15:16 +0100] PAM authentication enabled
[11/Dec/2023:22:44:09 +0100] Restarting
[11/Dec/2023:22:44:12 +0100] miniserv.pl started
[11/Dec/2023:22:44:12 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:22:44:12 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:22:44:12 +0100] PAM authentication enabled
[11/Dec/2023:22:45:20 +0100] Restarting
[11/Dec/2023:22:45:23 +0100] miniserv.pl started
[11/Dec/2023:22:45:23 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:22:45:23 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:22:45:23 +0100] PAM authentication enabled
[11/Dec/2023:22:46:17 +0100] Restarting
[11/Dec/2023:22:46:19 +0100] miniserv.pl started
[11/Dec/2023:22:46:19 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:22:46:19 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:22:46:19 +0100] PAM authentication enabled
[13/Dec/2023:00:44:07 +0100] Shutting down
[13/Dec/2023:00:44:07 +0100] Shutting down
[13/Dec/2023:00:44:10 +0100] miniserv.pl started
[13/Dec/2023:00:44:10 +0100] Using MD5 module Digest::MD5
[13/Dec/2023:00:44:10 +0100] Using SHA512 module Crypt::SHA
[13/Dec/2023:00:44:10 +0100] PAM authentication enabled
[13/Dec/2023:00:44:10 +0100] Reloading configuration
[13/Dec/2023:00:44:16 +0100] Reloading configuration
Argument “” isn’t numeric in array element at /usr/share/usermin/mailbox/send_mail.cgi line 23.
print() on unopened filehandle DEBUG at ./mailbox-lib.pl line 1619.
print() on unopened filehandle DEBUG at ./mailbox-lib.pl line 1619.
print() on unopened filehandle DEBUG at ./mailbox-lib.pl line 1619.
readdir() attempted on invalid dirhandle DIR at ./mailbox-lib.pl line 262.
closedir() attempted on invalid dirhandle DIR at ./mailbox-lib.pl line 263.
[13/Dec/2023:04:32:25 +0100] [105.72.30.220] Timeout : Waited for 550 seconds for start of headers
[13/Dec/2023:07:59:55 +0100] miniserv.pl started
[13/Dec/2023:07:59:55 +0100] Using MD5 module Digest::MD5
[13/Dec/2023:07:59:55 +0100] Using SHA512 module Crypt::SHA
[13/Dec/2023:07:59:55 +0100] PAM authentication enabled
[13/Dec/2023:17:52:27 +0100] Shutting down
[13/Dec/2023:17:52:27 +0100] Shutting down
[13/Dec/2023:17:52:30 +0100] miniserv.pl started
[13/Dec/2023:17:52:30 +0100] Using MD5 module Digest::MD5
[13/Dec/2023:17:52:30 +0100] Using SHA512 module Crypt::SHA
[13/Dec/2023:17:52:30 +0100] PAM authentication enabled
[13/Dec/2023:17:52:30 +0100] Reloading configuration
[14/Dec/2023:02:31:33 +0100] Restarting
[14/Dec/2023:02:31:36 +0100] miniserv.pl started
[14/Dec/2023:02:31:36 +0100] Using MD5 module Digest::MD5
[14/Dec/2023:02:31:36 +0100] Using SHA512 module Crypt::SHA
[14/Dec/2023:02:31:36 +0100] PAM authentication enabled
timeout at /usr/share/usermin/miniserv.pl line 4755.
timeout at /usr/share/usermin/miniserv.pl line 4755.
[14/Dec/2023:22:58:39 +0100] Shutting down
[14/Dec/2023:22:58:39 +0100] Shutting down
[14/Dec/2023:22:58:41 +0100] miniserv.pl started
[14/Dec/2023:22:58:41 +0100] Using MD5 module Digest::MD5
[14/Dec/2023:22:58:41 +0100] Using SHA512 module Crypt::SHA
[14/Dec/2023:22:58:41 +0100] PAM authentication enabled
[14/Dec/2023:22:58:41 +0100] Reloading configuration
[15/Dec/2023:01:25:12 +0100] Shutting down
[15/Dec/2023:01:25:42 +0100] miniserv.pl started
[15/Dec/2023:01:25:42 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:01:25:42 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:01:25:42 +0100] PAM authentication enabled
[15/Dec/2023:11:35:53 +0100] Restarting
[15/Dec/2023:11:35:56 +0100] miniserv.pl started
[15/Dec/2023:11:35:56 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:11:35:56 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:11:35:56 +0100] PAM authentication enabled
[15/Dec/2023:19:38:41 +0100] Shutting down
[15/Dec/2023:19:39:16 +0100] miniserv.pl started
[15/Dec/2023:19:39:16 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:19:39:16 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:19:39:16 +0100] PAM authentication enabled
timeout at /usr/share/usermin/miniserv.pl line 4755.

[15/Dec/2023:19:39:17 +0100] PAM authentication enabled
[15/Dec/2023:19:39:17 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:19:39:17 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:19:39:17 +0100] IPv6 support enabled
[15/Dec/2023:19:39:17 +0100] miniserv.pl started
[15/Dec/2023:19:38:41 +0100] Shutting down
[15/Dec/2023:19:19:12 +0100] Reloading configuration
[15/Dec/2023:17:19:24 +0100] [41.143.239.188] Timeout : Waited for 540 seconds for start of headers
[15/Dec/2023:16:09:22 +0100] [105.68.131.191] /apache/create_dir.cgi : Missing path
[15/Dec/2023:15:59:27 +0100] [196.217.198.57] /virtual-server/mass_form.cgi?dom=1702636522351251&mass=Modify Selected Users : No users selected
[15/Dec/2023:15:57:55 +0100] [105.68.131.191] /virtual-server/mass_form.cgi?dom=1702636522351251&mass=Modify Selected Users : No users selected
[15/Dec/2023:15:57:31 +0100] Reloading configuration
[15/Dec/2023:14:33:16 +0100] [41.143.239.188] /virtual-server/pro/mass_disable.cgi? : None selected
[15/Dec/2023:14:25:41 +0100] Reloading configuration
[15/Dec/2023:14:19:52 +0100] Reloading configuration
[15/Dec/2023:14:16:57 +0100] Reloading configuration
[15/Dec/2023:14:16:25 +0100] Reloading configuration
[15/Dec/2023:13:43:54 +0100] Reloading configuration
[15/Dec/2023:13:41:54 +0100] Reloading configuration
[15/Dec/2023:13:35:41 +0100] Reloading configuration
[15/Dec/2023:13:33:52 +0100] Reloading configuration
[15/Dec/2023:11:36:00 +0100] Reloading configuration
[15/Dec/2023:11:35:52 +0100] Reloading configuration
[15/Dec/2023:01:25:43 +0100] PAM authentication enabled
[15/Dec/2023:01:25:43 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:01:25:43 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:01:25:43 +0100] IPv6 support enabled
[15/Dec/2023:01:25:43 +0100] miniserv.pl started
[15/Dec/2023:01:25:12 +0100] Shutting down
[15/Dec/2023:01:25:12 +0100] Shutting down
[14/Dec/2023:22:14:59 +0100] [197.145.180.245] Timeout : Waited for 540 seconds for start of headers
[14/Dec/2023:18:21:43 +0100] Reloading configuration
[14/Dec/2023:17:58:26 +0100] Reloading configuration
[14/Dec/2023:17:53:34 +0100] Reloading configuration
[14/Dec/2023:17:27:04 +0100] Reloading configuration
[14/Dec/2023:17:26:25 +0100] Reloading configuration
[14/Dec/2023:17:24:27 +0100] Reloading configuration
[14/Dec/2023:17:11:28 +0100] Reloading configuration
[14/Dec/2023:17:02:35 +0100] Reloading configuration
[14/Dec/2023:17:02:16 +0100] Reloading configuration

[14/Dec/2023:16:58:53 +0100] [105.67.129.4] /extensions/file-manager/tree.cgi : Perl execution failed : Can’t cd to 
 from /proc/248599/attr/apparmor: No such process at /usr/share/webmin/vendor_perl/File/Find.pm line 469.
[14/Dec/2023:16:57:26 +0100] Reloading configuration
[14/Dec/2023:16:57:07 +0100] Reloading configuration
[14/Dec/2023:16:48:11 +0100] Reloading configuration
[14/Dec/2023:16:47:52 +0100] Reloading configuration

[14/Dec/2023:16:40:56 +0100] [105.67.129.4] /phpini/edit_db.cgi : Perl execution failed :

[14/Dec/2023:16:40:56 +0100] [105.67.129.4] /phpini/edit_dirs.cgi : Perl execution failed :

[14/Dec/2023:16:40:55 +0100] [105.67.129.4] /phpini/edit_vars.cgi : Perl execution failed :
[14/Dec/2023:16:36:44 +0100] [105.67.129.4] /virtual-server/script_form.cgi?dom=1701648795230177&script=17025681462401901&version=&upgrade=1 : Missing or invalid-looking version number
[14/Dec/2023:16:33:38 +0100] Reloading configuration
[14/Dec/2023:16:23:14 +0100] Reloading configuration
[14/Dec/2023:16:21:08 +0100] Reloading configuration

[14/Dec/2023:16:18:58 +0100] [105.67.129.4] /filemin/index.cgi : Perl execution failed :
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 1326.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.

16

There is no WordPress plugin that I am aware of that talks to the Webmin API.

17

You’ve skipped the stuff I really wanted to see (requests for fastrpc.cgi in miniserv.log and a few lines of strace and the full command of one of the fastrpc.cgi processes, in that order of value).

18

Explain to me exactly where I should go to do this.
THANKS

19

I already did: Cpu overheating - #11 by Joe

20

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.