check_sessions still running, possible dos attack...

[alturic]

I got this today:

/usr/local/cpanel/logs/error_log:
Previous check_sessions still running with pid: 214337. Possible cpsrvd denial of service attack in progress.
Previous check_sessions still running with pid: 214337. Possible cpsrvd denial of service attack in progress.
Previous check_sessions still running with pid: 215687. Possible cpsrvd denial of service attack in progress.
Previous check_sessions still running with pid: 217078. Possible cpsrvd denial of service attack in progress.
Previous check_sessions still running with pid: 217078. Possible cpsrvd denial of service attack in progress.
Previous check_sessions still running with pid: 217078. Possible cpsrvd denial of service attack in progress.
repquota: Cannot open quotafile /disk1/quota.user: No such file or directory
repquota: Cannot open quotafile /disk1/quota.user: No such file or directory

and was wondering if it's something I should worry about? I did do a service cpanel restart and got this:

Stopping cPanel log services: [FAILED]
Stopping cPanel Chat services: [FAILED]
Stopping InterChange services: [FAILED]
Stopping cPanel ssl services: Waiting for (?^:^(?:stunnel$|stunnel-[0-9\.]+local)) to shutdown ... not running.
[ OK ]
Stopping mailman services: Shutting down Mailman's master qrunner
mailmanctl: no process killed
[FAILED]
Starting cPanel services: Waiting for cpsrvd,cpsrvd-ssl,whostmgrd,cpaneld,webmaild to shutdown ... not running.
Starting cpsrvd.
[ OK ]
Starting cPanel brute force detector services: [ OK ]
Starting cPanel dav services: [ OK ]
Starting pop3 services: Waiting for (?^:^cppop(?:-ssl)?$) to shutdown ... not running.
[ OK ]
Starting cPanel Chat services:

Starting InterChange services: [ OK ]
Starting cPanel ssl services: Waiting for (?^:^(?:stunnel$|stunnel-[0-9\.]+local)) to shutdown ... not running.
[FAILED]

Is either of those outputs "bad"?

 

[alturic]

I got this today:



and was wondering if it's something I should worry about? I did do a service cpanel restart and got this:



Is either of those outputs "bad"?

Anyone have any ideas about this? There's actually a TON of

Previous check_sessions still running with pid: 214337. Possible cpsrvd denial of service attack in progress.

Most/all entries about that is different PIDs but I have no clue what could be causing it.