lfd

  1. S

    lfd on server Log Scanner Report

    Hello! I'm very new to using VPS and am on a steep learning curve! Everything was running fine until recently when I started getting attacks on my websites and when one went down, they all fell like dominoes. As you can imagine that's where my stress levels rocketed, especially when I don't...
  2. Motamedi

    problem lfd notifications

    hello my problem is notifications lfd ... 20 emails per minute sended by lfd to my email ... Time: Fri Nov 6 04:06:12 2015 -0500 PID: 10030 (Parent PID:9922) Account: example user Uptime: 70 seconds Executable: /usr/local/lsws/fcgi-bin/lsphp-5.3.29 Command Line (often faked in...
  3. Faizan Khalid

    lfd: Excessive processes running under user

    Time: Sun Oct 25 04:24:28 2015 +0200 Account: user Process Count: 12 (Not killed) Process Information: User:userPID:17692 PPID:17568 Run Time:0(secs) Memory:186644(kb) exe:/usr/bin/php cmd:/usr/bin/php /home/user/public_html/index.php
  4. E

    lfd /bin/passwd: FAILED

    I received an email where it tells me that the /bin/passwd failed the md5sum comparison test. This is alarming because I did not make any changes to cause this message. Could this be generated because of a cpanel/WHM update?
  5. M

    lfd: ignore "excessive resource usage" for pkgacct

    I'm having trouble telling lfd to ignore "excessive resource usage" warnings. I've tried exe and pexe lines, but I'm still getting the emails every night. Here's the message I'm getting each night: Account: [username removed] Resource: Virtual Memory Size Exceeded: 277 > 200 (MB) Executable...
  6. T

    lfd on xxx.xxx: Suspicious process running under user dbus

    Hello, all i know that LFD alerts are not from cPanel/Whm however i want to ask first here because this new (and strange) alert was caused after i run easyapache; I run easyapache in one of my servers and after it finished this LFD alert comes every hour: Time: Thu May 28 00:00:03 2015 -0500...
  7. S

    WHM and LFD root access alert emails

    Hello, Since a few days ago when I access the WHM I do not receive alerts access. If I receive a warning when I access through SSH. And contact ConfigServer but apparently see nothing strange, someone happened and have any solution? Thank You.
  8. F

    lfd - *Port Scan* detected - question

    Hi, We modofied CSF settings, and after was set a few things, own client find us, because the CSF was blocking a lot of IP address: What it means: "Port scan" ? Thanks!
  9. W

    lfd on my.domain.com: Suspicious process running under user myusername

    I got this sent to my email today from my cpanel dedicated server. I'm wondering do I need to be concerned? Do I have a trojan? p.s. I did do an antivirus check 2 days ago and did find a virus in the mail and removed it using the cpanel antivirus. I wonder if this is related? (p.s.s. I...
  10. L

    lfd on XXXX: Suspicious process running under user nobody

    Hi, Impossible to catch this process.. do you have an idea ? Mon Aug 19 21:46:36 2013 +0100 PID: 2281 (Parent PID:2164) Account: nobody Uptime: 68 seconds Executable: /usr/bin/perl Command Line (often faked in exploits): Network connections by the process...
  11. T

    lfd down

    OK, I'm on trial license of cPanel WHM. And before purchasing it, I'd need to know I can get it working (which I hope is understandable) Normally I'm use to Debian Linux with Direct Admin or simply apt-get install packages. So CentOS (6.3) is overall new to me and installing & managing...
  12. A

    Problem with csf / lfd blocking someone due to pop3 for no reason

    Hi I have a problem on my cPanel server where a client is constantly blocked by lfd, with this error in the logs (informations are hidden on purpose): May 10 15:17:03 mail lfd[20531]: pop3d - 61 logins in 986 secs from **.**.191.142 (CA/Canada/bas1-legardeur06-1176354702.dsl.bell.ca) for...
  13. S

    lfd on server.customer.com status: failed

    lfd failed @ Thu Apr 12 15:50:55 2012. A restart was attempted automagically. Service Check Method: [check command] Number of Restart Attempts: 58 What do I do?
  14. L

    lfd on server.mydomain.com failed

    Hi, I keep getting the following error message by mail : "cPanel ChkServd Service Monitor ✆ [email protected] 6:05 AM (19 minutes ago) lfd failed @ Mon Mar 12 06:05:04 2012. A restart was attempted automagically. Service Check Method: [check command] Number of Restart...
  15. S

    lfd on server : Excessive resource usage: cpanel username (23862)

    Hello, Every time i am receiving message as Time: Mon Oct 3 02:31:13 2011 +0530 Account: cpanel username Resource: Process Time Exceeded: 1809 > 1800 (seconds) Executable: /usr/bin/php Command Line: /usr/bin/php PID: 23862 Killed: No...
  16. sniperscope

    lfd: High 5 minute load average alert - 80.90

    I am keep getting this error message. This error message belong to one my share server which has only 5 accounts in it. Detail of report is below: I have no idea why is this mail keep sending but i feel uncomfortable Regards USER PID %CPU %MEM VSZ RSS TTY STAT START...
  17. E

    Help - lfd on server: High 5 minute load average alert - 6.15

    Hello i am getting this message in every hour or two and there are 3 files attached. vmstats.txt Output from vmstat: procs -----------memory---------- ---swap-- -----io---- --system-- -----cpu------ r b swpd free buff cache si so bi bo in cs us sy id wa st 1 1 400...
  18. AutoCrat

    lfd: Suspicious process running under user cpanel

    I've receive emails often with content below: Time: Tue May 31 09:08:55 2011 +0430 PID: 12827 Account: cpanel Uptime: 312 seconds Executable: /usr/local/bin/perl Command Line (often faked in exploits): spamd child Network connections by the process (if any)...
  19. S

    lfd on x.x.x Suspicious process running under user news

    i received more than 3000 messages from lfd, but i don't know the origin of the problem Time: Mon Apr 11 06:23:27 2011 -0400 PID: 13506 Account: news Uptime: 78 seconds Executable: /usr/bin/php Command Line (often faked in exploits): /usr/bin/php Network...
  20. Chriz1977

    lfd on server.xxx.com: Excessive resource usage error problem

    Hi Im getting a lot of excessive resource useage errors that look like this : Time: Sat Mar 19 12:39:18 2011 +0000 Account: xxxxxx Resource: Process Time Exceeded: 1831 > 1800 (seconds) Executable: /usr/bin/perl Command Line: cpanellogd - http logs for xxxxxx...