WordPress.org

Forums

xmlrpc.php Files cause high CPU usage. and High resource usage. (3 posts)

  1. anirbankarmakar
    Member
    Posted 11 months ago #

    hi!My Websites address is http://adpostjob4u.com i am very confused about a files called xmlrpc.php . This file almost uses 100% of entire Server Resources. xmlrpc.php Files cause high CPU usage. and High resource usage. I am Currently using Host gator VPS Level 5 and in every 1 minutes its showing Error of Error Establishing Data base Connections.
    i have added the .htaccess rule to deny access to xmlrp.php on my account.
    Still its using High CPS and RAM usage. and Stop my websites.

    here what host gator saying on this-

    " Hello,

    We have gone through your support query and could see that the issue you are facing due to high resource usage in the server,

    Memory Usage Report in the Server:-
    ===================================
    Time: 06:09:02 %Memory used: 99.54
    Time: 02:44:01 %Memory used: 99.49
    Time: 06:10:01 %Memory used: 99.41
    Time: 06:04:02 %Memory used: 99.29
    Time: 06:13:02 %Memory used: 99.01
    Time: 10:25:01 %Memory used: 98.83
    Time: 09:41:03 %Memory used: 98.80
    Time: 09:33:05 %Memory used: 98.75
    Time: 03:03:01 %Memory used: 98.62
    Time: 04:51:01 %Memory used: 98.47

    We have informed the same in previous tickets also. Please refer the detailed usage and load in the server,

    Date: 08/01/2014
    Time: 06:21 Load: 212.89
    Time: 06:20 Load: 197.92
    Time: 06:18 Load: 196.92
    Time: 11:31 Load: 169.48
    Time: 06:17 Load: 168.80
    Time: 11:30 Load: 165.55
    Time: 11:27 Load: 164.11
    Time: 11:28 Load: 163.02
    Time: 11:29 Load: 161.09
    Time: 06:14 Load: 158.53

    Date: 08/01/2014
    Time: 06:21
    Users
    55 adpostjo
    11 nobody
    4 dovenull
    1 USER
    1 Time:
    1 Memory:
    1 Load:
    1 dovecot
    1
    Date: 08/01/2014
    Time: 06:21
    Scripts
    26 /home/adpostjo/public_html/xmlrpc.php
    16
    14 /home/adpostjo/public_html/index.php

    Please go through the detailed logs mentioned and make the needed changes to prevent the issue from reoccurring.

    Thank you for your understanding.

    Kindly cross check the same and get back to us if you need any further assistance.
    Best regards,

    Vinod K
    Linux Systems Administrator
    HostGator.in
    http://support.hostgator.in "

    please help me!!!

  2. cantonbecker
    Member
    Posted 10 months ago #

    Hi there,

    Likely what is happening is that your site is being hammered by wanna-be hackers who are trying to exploit the xmlrpc.php file, either to:

    1) test out passwords to try to login to your site, or

    2) use your site to launch a denial of service attack against another site.

    In either case, having the most up-to-date wordpress will not necessarily help your CPU/load problem. Nor will any plugin or purely wordpress-based solution, because no matter what, when xmlrpc.php is processed, PHP and MySQL etc. all get engaged which is resource intensive -- even to return a wordpress-generated "not available" page.

    If you don't use the Jetpack plugin, or any software or services which allow you to make posts to wordpress without logging into the dashboard (e.g. the IOS wordpress app) then your easiest option is just to block access to xmlrpc.php at the .htaccess level. This should bring your CPU load back down.

  3. Shabu Anower
    Member
    Posted 1 month ago #

    You can block access by adding this code in .htaccess
    <Files "xmlrpc.php">
    Order Deny,Allow
    Deny from all
    </Files>

Reply

You must log in to post.

About this Topic