I need help figuring why my wordpress site crashes

I am having an issue with my vps server crashing due to overload. I was told by a developer that was attacked with DDoS. It affects my wordpress sites

I sent the info on to my host. However I am trying to get all the info I can on the issue.

Below is the report from the host. Please, have you seen this issue before, and what is your advise?

Hello Nigel,

While monitoring your vps I have found that there is high load on your vps which spike intermittently and I have found these scripts causing load:


16914 nigel 20 0 224m 16m 3240 D 1.8 1.1 0:00.70 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16729 nigel 20 0 251m 10m 2544 D 1.4 0.7 0:01.76 /usr/bin/php /home/nigel/public_html/xmlrpc.php

17280 jattours 20 0 319m 13m 8776 D 1.4 0.9 0:00.06 /usr/bin/php /home/jattours/public_html/index.php

17303 root 20 0 15300 1668 996 R 1.4 0.1 0:00.12 top -c d 2

17306 jattours 20 0 319m 13m 8780 D 1.4 0.9 0:00.05 /usr/bin/php /home/jattours/public_html/trigger.php

17311 jattours 20 0 319m 13m 8776 D 1.4 0.9 0:00.07 /usr/bin/php /home/jattours/public_html/index.php

17317 root 20 0 15300 1600 972 S 1.4 0.1 0:00.07 top -n 2 -b -c

15137 nigel 20 0 265m 10m 656 D 0.9 0.7 0:03.27 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16640 nigel 20 0 257m 7136 2212 D 0.9 0.5 0:01.71 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16720 root 20 0 98.7m 7520 716 D 0.9 0.5 0:01.34 /usr/local/cpanel/scripts/mysqlconnectioncheck

16730 nigel 20 0 248m 17m 2708 D 0.9 1.2 0:01.78 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16732 nigel 20 0 250m 6544 2032 D 0.9 0.4 0:01.43 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16883 nigel 20 0 245m 29m 2664 D 0.9 2.0 0:01.44 /usr/bin/php /home/nigel/public_html/xmlrpc.php

17314 root 20 0 100m 3852 2896 D 0.9 0.3 0:00.03 sshd: root [priv]

15219 nigel 20 0 265m 3912 664 D 0.5 0.3 0:03.20 /usr/bin/php /home/nigel/public_html/xmlrpc.php

15241 nigel 20 0 265m 6656 652 D 0.5 0.4 0:03.09 /usr/bin/php /home/nigel/public_html/xmlrpc.php

15255 nigel 20 0 259m 6736 1184 D 0.5 0.4 0:03.12 /usr/bin/php /home/nigel/public_html/xmlrpc.php

15276 nigel 20 0 260m 8240 972 D 0.5 0.5 0:02.91 /usr/bin/php /home/nigel/public_html/xmlrpc.php

15307 nigel 20 0 257m 7624 1088 D 0.5 0.5 0:02.94 /usr/bin/php /home/nigel/public_html/xmlrpc.php

15366 nobody 20 0 80920 676 236 S 0.5 0.0 0:00.02 /usr/local/apache/bin/httpd -k start -DSSL

15954 nobody 20 0 80516 960 456 S 0.5 0.1 0:00.06 /usr/local/apache/bin/httpd -k start -DSSL

16646 nigel 20 0 257m 7660 2352 S 0.5 0.5 0:01.74 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16673 nigel 20 0 257m 8992 2464 D 0.5 0.6 0:01.81 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16739 nigel 20 0 239m 11m 2536 D 0.5 0.8 0:01.30 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16745 nigel 20 0 251m 11m 2548 D 0.5 0.8 0:01.62 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16752 nigel 20 0 256m 10m 2692 D 0.5 0.7 0:01.52 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16755 nigel 20 0 252m 6760 2152 D 0.5 0.4 0:01.41 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16759 root 20 0 110m 10m 2072 D 0.5 0.7 0:00.80 /usr/local/cpanel/bin/cpses_tool

16790 nobody 20 0 80516 1296 724 S 0.5 0.1 0:00.01 /usr/local/apache/bin/httpd -k start -DSSL

16793 nigel 20 0 241m 15m 2704 D 0.5 1.0 0:01.10 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16812 nigel 20 0 237m 15m 2700 D 0.5 1.0 0:01.04 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16813 jattours 20 0 323m 4904 2808 D 0.5 0.3 0:00.46 /usr/bin/php /home/jattours/public_html/index.php

16824 nigel 20 0 246m 19m 2656 D 0.5 1.3 0:01.15 /usr/bin/php /home/nigel/public_html/xmlrpc.php

16848 nigel 20 0 246m 20m 2672 D 0.5 1.3 0:01.17 /usr/bin/php /home/nigel/public_html/xmlrpc.php


Please check script xmlrpc.php with your website developer/vendor, check for any extra plugin install which is attracting high traffic on your vps. Please let us know if you have any additional questions or need further assistance.

Shakir Ali

Technical Support Representative


*We’re here to help!* If you feel you aren’t receiving the appropriate level of support please email Michael our quality assurance manager at quality@arvixe.com