Wordpress site high cpu usage

[MediaStar]

Hello all, i need help here.

My site using CPU up to 2xxx%, right now i need to enable CF under attack mode and cpu usage down to 20%~30% only.

Spec:
-AMD Ryzen Threadripper 2950X
-8x RAM 16384 MB DDR4
-Litespeed Enterprise

Also already disabled all plugin, still same.

After enable under attack mode:

Not sure this is because of database problem or attack?

Anyone know how to fix these?

 

[Tommy0412]

well if you use dooplay disable ajax in theme options, renaming admin-ajax.php is temp solution when you are under attack,

 

[teknodik]

After rename admin-ajax.php, my site cannot play the video because page required ajax.

Cloudflare WAF Security Custom rules
country from which the attack "admin-ajax.php" block.
Try you want. i did this until the ddos bit

 

[MediaStar]

well if you use dooplay disable ajax in theme options, renaming admin-ajax.php is temp solution when you are under attack,

Like this?

After renaming admin-ajax.php i cannot clear cache and transient.

Post automatically merged: Jan 7, 2025

Updated...

I enable managed challenge under WAF for some country which is looks suspicious access to admin-ajax.php, seem like cpu turn into normal. But the problem now some of my subdomain not working, how to exclude subdomain from managed challenge?

 

[paulction]

Check your server logs for any unusual traffic patterns or spikes, and optimize your database queries (try a plugin like Query Monitor). If it's an attack, enabling a WAF or stricter rate limiting in Cloudflare could help.