Suspicious process cpanel and Excessive resource usage: cpanel (1644)

[Bashy]

Hi folks, is this something to be woried about

Time:    Sat Mar  5 10:15:11 2011 +0000
PID:     1644
Account: cpanel
Uptime:  18768 seconds


Executable:

/usr/bin/perl


Command Line (often faked in exploits):

spamd child


Network connections by the process (if any):

tcp: 127.0.0.1:783 -> 0.0.0.0:0
tcp: 127.0.0.1:783 -> 127.0.0.1:51598
udp: 50.7.246.202:13446 -> 74.207.231.120:53


Files open by the process (if any):

/dev/null
/dev/null
/dev/null
/usr/bin/spamd

I also get these

Time:         Sat Mar  5 10:15:11 2011 +0000
Account:      cpanel
Resource:     Process Time
Exceeded:     18768 > 1800 (seconds)
Executable:   /usr/bin/perl
Command Line: spamd child
PID:          1644
Killed:       No

[LinuxTechie]

Hello,

There is nothing to worry about it.

[crazyaboutlinux]

yeah this is nothing to worry about it, simply ignore it.

[Infopro]

This email is from CSF/LFD you can find more about this here:
ConfigServer Scripts Forum • View topic - Process Tracking and csf.pignore

[Bashy]

Thanks folks, i appreciate the replies, i do get a lot of emails with regards to this, would it be wise to turn off the email alert?

[Infopro]

No, if you read the link, it mentioned adding items to the csf.pignore file.

[Bashy]

I saw that honest...... thanks