CentOS7 load average issue!

General support questions
Post Reply
hodolski
Posts: 1
Joined: 2024/02/06 07:00:01

CentOS7 load average issue!

Post by hodolski » 2024/02/06 07:08:26

hi all
There are a few problems.
I attached photos.

Image
Image

I am not currently using the CPU. But it looks like it's being used. Both ssh and ftp are blocked on my server.
I suspect hacking. What can I check?

I checked the running processes and also checked the logs. I also checked about recently installed files.
There are no files running, but the CPU is busy. help!

User avatar
TrevorH
Site Admin
Posts: 33154
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: CentOS7 load average issue!

Post by TrevorH » 2024/02/06 10:25:59

Your images are missing. But if you have a consistently busy cpu and nothing appears in top to show what's using it then I can think of two possiblities: first you have some hardware problem that's causing a never ending stream of interrupts that need handling. If this is the case then the numbers in /proc/interrupts file will be astronomically high for one IRQ. If it isn't that then it's more likely that you have been hacked and the hacker has root access which means that they have the ability to hide their processes from view. In this case there is no easy solution other than "back up your data, check it for compromise, reinstall the entire system from scratch, restore your data". Also patch whatever they used to get in.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply