Main problem:
- during working hours, the process is activated several times a day:
/usr/local/php73/bin/php-cgi73 -c /usr/local/directadmin/data/users/admin/php/site.ua.ini -d sendmail_from="admin..site.ua" -d open_basedir="/var/home/admin/:/tmp:/var/tmp:/opt/alt/php73/usr/share/pear/:/dev/urandom:/usr/local/lib/php/:/usr/local/php73/lib/php/" -d post_max_size="16M" -d upload_max_filesize="16M" -d mail.log="/var/home/admin/.php/php-mail.log"
This process loads the server's CPU almost to 100%.
It is necessary to completely disable this process "to the root" so that it never starts under any circumstances. But it should be disabled in a way that does not break other server functions.
Since this process sends notifications about excessive server load, there is some underlying cause for its activation - that is, initially some other process increases the load on the server, after which Sendmail is activated and thus "kills" the server. Accordingly, in addition to disabling Sendmail, it is necessary to find the reason why it is activated - presumably, site parsing or a small attack.
The situation has been ongoing for over a month, exclusively during working hours, usually from 10:00 to 13:00.
Server parameters:
- VPS based on Hetzner, 32 GB RAM, 10 KVM cores, NVMe disk - only one single site with relatively low traffic is running on all of this, so even though this is a VPS - the resources are more than sufficient
- DirectAdmin panel
- Centos-8.8
Please do not place a bid and do not write if you are a "pigeon specialist" who comes to criticize and then flies away. Previous checks of this problem were done by such "specialists" and resulted in 0, except for pompousness and condescending attitude.
Therefore, recommendations like "set up a normal server" or "wipe everything to 0 and configure the server properly" or "a server with a panel is not a server, it should be without a panel" do not write, save your and my time.
