CPU load on AWS1 increased a lot

hare krsna,

recently, like one or two weeks ago, the load on our first AWS server has increased a lot!

this server hosts the following sites:

plus a few static pages that don’t draw much resources.

chantnow.com is always a candidate for trouble since it’s in a bad state, with plenty big plugins, some of them still in use, others not but not properly removed. i’m also suspecting despertarespiritual.org because that site is using a big contact DB (i think) and may have been under active development recently.

today i had to switch off web server, PHP, and MySQL to be able to run the daily wordfence scan for malware. this can’t remain as it is; we either have to save resources, CPU in this case, or start another VPS somewhere to be able to manage the load.

any of you having insights or suspicions, please let me know!

update: didn’t find any malware and switched the server back on.

the server crashed for the 3rd time today (!), it keeps going to use more CPU cycles than available. i’m baffled because it’s not any particular website. switching them off one after the other doesn’t help.

i’ll have to check for malware, not only WP specific malware but run a full-server malware scan, but somehow i don’t think that’s the reason.

are any of you, @Pancharatna.das , @ekesvarakrishnadas , @Anantaseshdas doing anything that could cause this sudden PHP overload? i’m trying to fine-tune PHP-fpm pool settings, but so far nothing has helped.

update: i found the culprit: v1.chantnow.com, an old version of chantnow.com that @Pancharatna.das wanted to access to find out something. as i remember, you were supposed to tell me when you’re done with it so i could take it off-line – because it hasn’t been updated in ages and has plenty unfixed vulnerabilities.

i took it off-line now – of course! – and am running a malware scan on it, hoping that nothing has caught us and, worst case, managed to infiltrate other sites.