Access denied for user 'ispconfig'@'127.0.0.1' (using password: YES)

I'm seeing thousands of those in mysql error log. Should the IP be "localhost"?

If so, where do I change it?

I started a thread a week ago in General about uninstalling, and that didn't work, so I'm trying to make ISPConfig work, or at least stop the error log entries.

 

Thanks Th0m.

crontab -e shows a default file for my user, everything commented

sudo crontab -e shows

* * * * * /usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done
* * * * * /usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done

I commented both those with the "#" character at pos 1 of each line... waiting to see if the mysql error log gets written to, or if it stops.

FWIW, it logs hundreds or thousands of that error every five minutes, and I think it's responsible for a ~30-40% CPU load increase bump.

Sorry I can't format code properly. Xenforo and I... don't understand each other.

 

That didn't help. Still getting ~10/sec this error logged for I think 60 seconds, every 5 minutes.

 

If you're out of ideas... I understand. I plan to spin up a new server and move my sites if that's the case.

The CPU is more than my estimate. It's an increase of around 60% every five minutes, which often maxes to 100% and triggers abandoned mysql connections and all the other horrors of an unresponsive server.

I've tried uninstalling ISPConfig, and that failed, so I don't know where to go except there.

 

Thanks for your response, Jesse.

Well, I don't use ISPConfig, but I'd rather let sleeping dogs lie, as they say. I'm not good enough at Linux to disturb so many things and not create more problems. I've done it, I've been there.

If you're wondering why I installed ISPConfig, I just followed this https://www.howtoforge.com/perfect-server-debian-10-buster-apache-bind-dovecot-ispconfig-3-1/ ... not knowing I wouldn't need it. Anyway...

#* * * * * /usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done
#* * * * * /usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done

That's what's in $sudo crontab -e, which I would guess is root's cron task set. My local user's cron is a default file, with nothing added and everything commented out.

Where else should I look for the cron job that's triggering every 5 minutes?

 

Th0m thank you so much. It was Postfix and Amavis. Example entries from syslog:

Nov 11 18:49:48 lamp-3-vm amavis[27380]: (27380-01) (!)connect_to_sql: unable to connect to DSN 'DBI:mysql:database=dbispconfig;host=127.0.0.1;port=3306': Access denied for user 'ispconfig'@'127.0.0.1' (using password: YES)
Nov 11 18:49:48 lamp-3-vm postfix/smtp[27312]: warning: ED3412A7DE: flush service failure

I stopped both of them and the CPU spikes are gone. I appreciate your and Jesse's help.