Proxmox High CPU Usage

[iwanbaguss]

Hi,

I've been recently installed proxmox 6.2-4 in my machine and it was running smoothly about 6 months. Then suddenly, the CPU usage rises until 100% makes all of my VMs shutted down unexpectedly.


I have tried some solutions that I found in this forum and still nothing works for me.
Currently, I have upgraded to version 7.4-18 and the problems still remains. Even when all VMs are shutted down, the CPU usage is constantly around 50%.

I run top command in console but there's no process indicating high CPU usage.

My machine
- 48 x Intel(R) Xeon(R) CPU E5-2650 v4 @ 2.20GHz (2 Sockets)
- 144GB RAM
What is the solution for this?

 

[fiona]

Hi,
is the CPU usage also that high while you are checking with top? I remember a report with a crypto miner that would temporarily shut down itself when a user was logged in via CLI. I'd also carefully check all the logs from around the time the issue started happening or monitor network traffic to/from the machine.

If you really can't find anything suspicious, BIOS/microcode updates would be worth a try: https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_firmware_cpu

 

[fiona]

Note that Proxmox VE 6.4 went end-of-life already September 2022, if you had installed Proxmox VE 6.2 half a year ago, you were almost surely vulnerable to certain (kernel) exploits.

 

[iwanbaguss]

Hi,
is the CPU usage also that high while you are checking with top? I remember a report with a crypto miner that would temporarily shut down itself when a user was logged in via CLI. I'd also carefully check all the logs from around the time the issue started happening or monitor network traffic to/from the machine.

If you really can't find anything suspicious, BIOS/microcode updates would be worth a try: https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#sysadmin_firmware_cpu

thank you...
I figured out there is a suspicious service named pwnrig and I think it's the problem..
my mitigation plan is to reinstall the proxmox with the latest version...