• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue aum (ModSecurity) thread perpetuating leading to high cpu usage

robskinn

New Pleskian
Hi,
On my Plesk Linux server, a process called aum is running at timed intervals and doesn't remove itself. I noticed this when my server had severely slowed down (5000% + CPU usage) to an almost unusable state. After looking into it, I found a few mentions for ModSecurity and AUM, so I disabled the Mod and killed the processors. I'd like to get to the root of the problem. Any ideas?

These are the aum processors.
29244 root 20 0 11048 4 0 R 46.5 0.0 159:20.56 aum
2632 root 20 0 11048 4 0 R 45.2 0.0 113:30.83 aum
6137 root 20 0 11048 4 0 R 45.2 0.0 80:02.61 aum
20380 root 20 0 11048 4 0 R 45.2 0.0 288:27.29 aum
22714 root 20 0 11048 4 0 R 43.9 0.0 229:13.82 aum
12679 root 20 0 11048 4 0 R 43.2 0.0 17:13.44 aum
17793 root 20 0 11048 4 0 R 43.2 0.0 348:26.35 aum
12302 root 20 0 11048 4 0 R 41.2 0.0 407:48.22 aum
8742 root 20 0 11048 4 0 R 39.9 0.0 46:30.90 aum
 
Last edited:
Further to this post, I think the issue may be the KernelCare Extension on Plesk. The extension can't communicate with the CloudLinux on my server. I ran ssh compatibility checks as recommended on their website and all was OK (COMPATIBLE), but the actual KernelCare settings fail to load in Plesk. Removed the app and new four-hour aum process was removed. Hope this helps anyone with the same issue.
I'd still like to know why the communication from my server to KernelCare CloudLinux was blocked, if anyone has had a similar issue with it please let me know.
 
Back
Top