| SYSTEM INFORMATION | |
|---|---|
| OS type and version | Ubuntu Linux 20.04.6 |
| Webmin version | 2.105 |
| Usermin version | 2.005 |
| Virtualmin version | 7.8.2 Pro |
| Theme version | 21.09.5 |
| Package updates | All installed packages are up to date |
cpu overheating hello please after the last update I noticed that my system has become heavy and the cpu is still in red which what should I do thank you
what exactly was the update that you are blaming?
Why is fastrpc running so much? Do you have multiple Webmin instances connected to this one (in Webmin->Webmin->Webmin Servers Index)? (the fastrpc process only runs when communicating with other Webmin servers…and it’s unusual for it to take any CPU worth speaking of…that’s kind of alarming)
I received a message on the virtual mine dashboard that there are plogin or something like that that I have to update it and of course I accepted
Something is wrong. You haven’t answered my question about why fastrpc is running at all. Do you have other Webmin servers configured in Webmin->Webmin->Webmin Servers Index? Something is wrong with that.
so I didn’t understand the question correctly
if you have a virtual server I have so far hosted 5 sites (5 clients each client I have given are access only)
if you are talking about the server connecting with another directly I confirm that no
Is there no solution to know which function or which account exactly consumes the CPU?
Merci Mr Joe
No. That’s completely irrelevant to the problem.
Go to the place I told you to go in the UI. I’ve posted it twice.
@Joe and that was answered by the image posted in #4 Webmin -> Webmin -> Webmin Servers Index showing “No Servers have been registered”
Is it possible fastrpc.cgi is stuck in an endless loop? for some reason
Oh. Oops. I have a hard time with screenshots, text is easier for me to read.
I see no reason for fastrpc to be running at all!
@Alaaeddine.benabid click on the PID of one of those fastrpc.cgi processes and show us the full command running. We need to figure out what the heck they’re doing.
Also, in a terminal or ssh session run the following (you must replace <pid> with the actual PID of the process you want to look at…we need to see one of the fastrpc processses):
strace -p <pid>
This may be very chatty (probably will be since it is chewing up huge amounts of CPU). We don’t need to see hundreds of lines, just a couple dozen…just to get the gist of what’s happening.
Also check the Webmin logs in /var/webmin. miniserv.error may have clues, webmin.log is the actions log (but API calls may not have action logging), and miniserv.log is the access log and it’s probably the most useful. So show us a few lines of miniserv.log…we only want to see some requests to fastrpc.cgi.
It’s very alarming that fastrpc is doing something when you don’t have any remote systems for it to be talking to. That means something is communicating with the API and making it very busy (possibly an attacker). If you have a weak password or one you’ve reused or one you’ve shared with untrusted people, you need to change it.
Unlikely. I mean, it’s possible, but without any other servers configured, I can’t think of why fastrpc would even start much less be in an endless loop. fastrpc implements a protocol only used by Webmin, AFAIK, and is only used by API users (so Webmin instances talking to other Webmin instances, Cloudmin talking to Webmin, Virtualmin talking to other Webmin servers for e.g. DNS slaves, etc.). That would show up in the Servers Index, generally speaking. There may be other API users, but hopefully OP would tell us if they’ve got some billing system or something talking to Webmin/Virtualmin. RPC is remote procedure calls…nothing local really uses it, so some other system is talking to this server. If OP doesn’t know who/what it is, that’s alarming.
Perhaps whatever that update that was being blamed. We only have a brief knowledge of actually what in running on the system. Is there some app in a webserver (WP for example) that has caused it?
[10/Dec/2023:20:03:03 +0100] Restarting
[10/Dec/2023:20:03:06 +0100] miniserv.pl started
[10/Dec/2023:20:03:06 +0100] Using MD5 module Digest::MD5
[10/Dec/2023:20:03:06 +0100] Using SHA512 module Crypt::SHA
[10/Dec/2023:20:03:06 +0100] PAM authentication enabled
[11/Dec/2023:00:30:09 +0100] Restarting
[11/Dec/2023:00:30:12 +0100] miniserv.pl started
[11/Dec/2023:00:30:12 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:00:30:12 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:00:30:12 +0100] PAM authentication enabled
[11/Dec/2023:17:55:23 +0100] Restarting
[11/Dec/2023:17:55:25 +0100] miniserv.pl started
[11/Dec/2023:17:55:25 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:17:55:25 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:17:55:25 +0100] PAM authentication enabled
[11/Dec/2023:18:04:30 +0100] Restarting
[11/Dec/2023:18:04:31 +0100] miniserv.pl started
[11/Dec/2023:18:04:31 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:18:04:31 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:18:04:31 +0100] PAM authentication enabled
[11/Dec/2023:18:47:35 +0100] miniserv.pl started
[11/Dec/2023:18:47:35 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:18:47:35 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:18:47:35 +0100] PAM authentication enabled
[11/Dec/2023:20:15:14 +0100] Restarting
[11/Dec/2023:20:15:16 +0100] miniserv.pl started
[11/Dec/2023:20:15:16 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:20:15:16 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:20:15:16 +0100] PAM authentication enabled
[11/Dec/2023:22:44:09 +0100] Restarting
[11/Dec/2023:22:44:12 +0100] miniserv.pl started
[11/Dec/2023:22:44:12 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:22:44:12 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:22:44:12 +0100] PAM authentication enabled
[11/Dec/2023:22:45:20 +0100] Restarting
[11/Dec/2023:22:45:23 +0100] miniserv.pl started
[11/Dec/2023:22:45:23 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:22:45:23 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:22:45:23 +0100] PAM authentication enabled
[11/Dec/2023:22:46:17 +0100] Restarting
[11/Dec/2023:22:46:19 +0100] miniserv.pl started
[11/Dec/2023:22:46:19 +0100] Using MD5 module Digest::MD5
[11/Dec/2023:22:46:19 +0100] Using SHA512 module Crypt::SHA
[11/Dec/2023:22:46:19 +0100] PAM authentication enabled
[13/Dec/2023:00:44:07 +0100] Shutting down
[13/Dec/2023:00:44:07 +0100] Shutting down
[13/Dec/2023:00:44:10 +0100] miniserv.pl started
[13/Dec/2023:00:44:10 +0100] Using MD5 module Digest::MD5
[13/Dec/2023:00:44:10 +0100] Using SHA512 module Crypt::SHA
[13/Dec/2023:00:44:10 +0100] PAM authentication enabled
[13/Dec/2023:00:44:10 +0100] Reloading configuration
[13/Dec/2023:00:44:16 +0100] Reloading configuration
Argument “” isn’t numeric in array element at /usr/share/usermin/mailbox/send_mail.cgi line 23.
print() on unopened filehandle DEBUG at ./mailbox-lib.pl line 1619.
print() on unopened filehandle DEBUG at ./mailbox-lib.pl line 1619.
print() on unopened filehandle DEBUG at ./mailbox-lib.pl line 1619.
readdir() attempted on invalid dirhandle DIR at ./mailbox-lib.pl line 262.
closedir() attempted on invalid dirhandle DIR at ./mailbox-lib.pl line 263.
[13/Dec/2023:04:32:25 +0100] [105.72.30.220] Timeout : Waited for 550 seconds for start of headers
[13/Dec/2023:07:59:55 +0100] miniserv.pl started
[13/Dec/2023:07:59:55 +0100] Using MD5 module Digest::MD5
[13/Dec/2023:07:59:55 +0100] Using SHA512 module Crypt::SHA
[13/Dec/2023:07:59:55 +0100] PAM authentication enabled
[13/Dec/2023:17:52:27 +0100] Shutting down
[13/Dec/2023:17:52:27 +0100] Shutting down
[13/Dec/2023:17:52:30 +0100] miniserv.pl started
[13/Dec/2023:17:52:30 +0100] Using MD5 module Digest::MD5
[13/Dec/2023:17:52:30 +0100] Using SHA512 module Crypt::SHA
[13/Dec/2023:17:52:30 +0100] PAM authentication enabled
[13/Dec/2023:17:52:30 +0100] Reloading configuration
[14/Dec/2023:02:31:33 +0100] Restarting
[14/Dec/2023:02:31:36 +0100] miniserv.pl started
[14/Dec/2023:02:31:36 +0100] Using MD5 module Digest::MD5
[14/Dec/2023:02:31:36 +0100] Using SHA512 module Crypt::SHA
[14/Dec/2023:02:31:36 +0100] PAM authentication enabled
timeout at /usr/share/usermin/miniserv.pl line 4755.
timeout at /usr/share/usermin/miniserv.pl line 4755.
[14/Dec/2023:22:58:39 +0100] Shutting down
[14/Dec/2023:22:58:39 +0100] Shutting down
[14/Dec/2023:22:58:41 +0100] miniserv.pl started
[14/Dec/2023:22:58:41 +0100] Using MD5 module Digest::MD5
[14/Dec/2023:22:58:41 +0100] Using SHA512 module Crypt::SHA
[14/Dec/2023:22:58:41 +0100] PAM authentication enabled
[14/Dec/2023:22:58:41 +0100] Reloading configuration
[15/Dec/2023:01:25:12 +0100] Shutting down
[15/Dec/2023:01:25:42 +0100] miniserv.pl started
[15/Dec/2023:01:25:42 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:01:25:42 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:01:25:42 +0100] PAM authentication enabled
[15/Dec/2023:11:35:53 +0100] Restarting
[15/Dec/2023:11:35:56 +0100] miniserv.pl started
[15/Dec/2023:11:35:56 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:11:35:56 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:11:35:56 +0100] PAM authentication enabled
[15/Dec/2023:19:38:41 +0100] Shutting down
[15/Dec/2023:19:39:16 +0100] miniserv.pl started
[15/Dec/2023:19:39:16 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:19:39:16 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:19:39:16 +0100] PAM authentication enabled
timeout at /usr/share/usermin/miniserv.pl line 4755.
[15/Dec/2023:19:39:17 +0100] PAM authentication enabled
[15/Dec/2023:19:39:17 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:19:39:17 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:19:39:17 +0100] IPv6 support enabled
[15/Dec/2023:19:39:17 +0100] miniserv.pl started
[15/Dec/2023:19:38:41 +0100] Shutting down
[15/Dec/2023:19:19:12 +0100] Reloading configuration
[15/Dec/2023:17:19:24 +0100] [41.143.239.188] Timeout : Waited for 540 seconds for start of headers
[15/Dec/2023:16:09:22 +0100] [105.68.131.191] /apache/create_dir.cgi : Missing path
[15/Dec/2023:15:59:27 +0100] [196.217.198.57] /virtual-server/mass_form.cgi?dom=1702636522351251&mass=Modify Selected Users : No users selected
[15/Dec/2023:15:57:55 +0100] [105.68.131.191] /virtual-server/mass_form.cgi?dom=1702636522351251&mass=Modify Selected Users : No users selected
[15/Dec/2023:15:57:31 +0100] Reloading configuration
[15/Dec/2023:14:33:16 +0100] [41.143.239.188] /virtual-server/pro/mass_disable.cgi? : None selected
[15/Dec/2023:14:25:41 +0100] Reloading configuration
[15/Dec/2023:14:19:52 +0100] Reloading configuration
[15/Dec/2023:14:16:57 +0100] Reloading configuration
[15/Dec/2023:14:16:25 +0100] Reloading configuration
[15/Dec/2023:13:43:54 +0100] Reloading configuration
[15/Dec/2023:13:41:54 +0100] Reloading configuration
[15/Dec/2023:13:35:41 +0100] Reloading configuration
[15/Dec/2023:13:33:52 +0100] Reloading configuration
[15/Dec/2023:11:36:00 +0100] Reloading configuration
[15/Dec/2023:11:35:52 +0100] Reloading configuration
[15/Dec/2023:01:25:43 +0100] PAM authentication enabled
[15/Dec/2023:01:25:43 +0100] Using SHA512 module Crypt::SHA
[15/Dec/2023:01:25:43 +0100] Using MD5 module Digest::MD5
[15/Dec/2023:01:25:43 +0100] IPv6 support enabled
[15/Dec/2023:01:25:43 +0100] miniserv.pl started
[15/Dec/2023:01:25:12 +0100] Shutting down
[15/Dec/2023:01:25:12 +0100] Shutting down
[14/Dec/2023:22:14:59 +0100] [197.145.180.245] Timeout : Waited for 540 seconds for start of headers
[14/Dec/2023:18:21:43 +0100] Reloading configuration
[14/Dec/2023:17:58:26 +0100] Reloading configuration
[14/Dec/2023:17:53:34 +0100] Reloading configuration
[14/Dec/2023:17:27:04 +0100] Reloading configuration
[14/Dec/2023:17:26:25 +0100] Reloading configuration
[14/Dec/2023:17:24:27 +0100] Reloading configuration
[14/Dec/2023:17:11:28 +0100] Reloading configuration
[14/Dec/2023:17:02:35 +0100] Reloading configuration
[14/Dec/2023:17:02:16 +0100] Reloading configuration
[14/Dec/2023:16:58:53 +0100] [105.67.129.4] /extensions/file-manager/tree.cgi : Perl execution failed : Can’t cd to … from /proc/248599/attr/apparmor: No such process at /usr/share/webmin/vendor_perl/File/Find.pm line 469.
[14/Dec/2023:16:57:26 +0100] Reloading configuration
[14/Dec/2023:16:57:07 +0100] Reloading configuration
[14/Dec/2023:16:48:11 +0100] Reloading configuration
[14/Dec/2023:16:47:52 +0100] Reloading configuration
[14/Dec/2023:16:40:56 +0100] [105.67.129.4] /phpini/edit_db.cgi : Perl execution failed :
[14/Dec/2023:16:40:56 +0100] [105.67.129.4] /phpini/edit_dirs.cgi : Perl execution failed :
[14/Dec/2023:16:40:55 +0100] [105.67.129.4] /phpini/edit_vars.cgi : Perl execution failed :
[14/Dec/2023:16:36:44 +0100] [105.67.129.4] /virtual-server/script_form.cgi?dom=1701648795230177&script=17025681462401901&version=&upgrade=1 : Missing or invalid-looking version number
[14/Dec/2023:16:33:38 +0100] Reloading configuration
[14/Dec/2023:16:23:14 +0100] Reloading configuration
[14/Dec/2023:16:21:08 +0100] Reloading configuration
[14/Dec/2023:16:18:58 +0100] [105.67.129.4] /filemin/index.cgi : Perl execution failed :
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 1326.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
timeout at /usr/share/webmin/miniserv.pl line 4755.
There is no WordPress plugin that I am aware of that talks to the Webmin API.
You’ve skipped the stuff I really wanted to see (requests for fastrpc.cgi in miniserv.log and a few lines of strace and the full command of one of the fastrpc.cgi processes, in that order of value).
Explain to me exactly where I should go to do this.
THANKS
I already did: Cpu overheating - #11 by Joe
