# CPU 100 without activity **URL:** \ **Category:** Elasticsearch\ **Created:** [July 9, 2019, 7:49am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478 "2019-07-09T07:49:48Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![NakMuay](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nakmuay/32/49673_2.png) [@NakMuay](https://discuss.elastic.co/u/NakMuay)\ **Post date:** [July 9, 2019, 7:49am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/1 "2019-07-09T07:49:48Z")
Hi, (Sorry for my english ;)) My CPU is always 100% without any activity... what's wrong please ?... What kind of informations can I give you to help me ? Thanks, ![Capture%20du%202019-07-09%2009-47-59](https://us1.discourse-cdn.com/elastic/original/3X/9/e/9e66b17dc6a7d7a5a1e9a360759f68552d441037.png) ---
**Author:** ![NakMuay](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nakmuay/32/49673_2.png) [@NakMuay](https://discuss.elastic.co/u/NakMuay)\ **Post date:** [July 9, 2019, 9:38am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/2 "2019-07-09T09:38:20Z")
Yeum, when I stop elasticsearch, my CPU is always at 100... why user elasticsearch execute ./sysupdate et ./networkservice ?.... ---
**Author:** ![NakMuay](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nakmuay/32/49673_2.png) [@NakMuay](https://discuss.elastic.co/u/NakMuay)\ **Post date:** [July 9, 2019, 9:52am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/3 "2019-07-09T09:52:04Z")
When I kill all this kind of processus, elasticsearch works fine.... but they come back few minutes later... even when elasticsearch is stopped... ---
**Author:** ![ywelsch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ywelsch/32/7751_2.png) [@ywelsch](https://discuss.elastic.co/u/ywelsch)\ **Post date:** [July 9, 2019, 10:54am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/4 "2019-07-09T10:54:35Z")
Which ES version have you been running? This looks like a known exploit on a very old ES version (see [https://nvd.nist.gov/vuln/detail/CVE-2015-1427](https://nvd.nist.gov/vuln/detail/CVE-2015-1427) and google for "elasticsearch sysupdate" ---
**Author:** ![NakMuay](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nakmuay/32/49673_2.png) [@NakMuay](https://discuss.elastic.co/u/NakMuay)\ **Post date:** [July 9, 2019, 11:01am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/5 "2019-07-09T11:01:17Z")
Arf.. i've just found why... you're right... 1.7 (no choice... because of dependencies) and my firewall was disable.... I kill all process, active my firewall... but it still continue... what can I do.. please don't tell me reinstall 😕 .... ---
**Author:** ![ywelsch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ywelsch/32/7751_2.png) [@ywelsch](https://discuss.elastic.co/u/ywelsch)\ **Post date:** [July 9, 2019, 11:17am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/6 "2019-07-09T11:17:20Z")
Given that your system's been hacked, a clean install would be the only wise choice here. Can you share more details about the system that you've been running? You say it was 1.7? Which plugins are installed? ---
**Author:** ![NakMuay](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nakmuay/32/49673_2.png) [@NakMuay](https://discuss.elastic.co/u/NakMuay)\ **Post date:** [July 9, 2019, 11:18am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/7 "2019-07-09T11:18:42Z")
I know but I actually can't... I have found the script and understand it... and follow this recommandation [http://www.hetianlab.com/html/news/news-2019070201.html](http://www.hetianlab.com/html/news/news-2019070201.html), maybe it's enough... I don't know... 😕 ---
**Author:** ![NakMuay](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nakmuay/32/49673_2.png) [@NakMuay](https://discuss.elastic.co/u/NakMuay)\ **Post date:** [July 9, 2019, 11:19am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/8 "2019-07-09T11:19:27Z")
Debian 9, no plugin I guess ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 6, 2019, 11:19am UTC](https://discuss.elastic.co/t/cpu-100-without-activity/189478/9 "2019-08-06T11:19:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.