Getting tons of Excessive resource usage emails

[syafiqsyazre]

Occasionally I get alerts of "Excessive resource usage".

Time: Sat Dec 7 14:50:22 2019 +0800
Account: reconvaluecom
Resource: Process Time
Exceeded: 35705 > 1800 (seconds)
Executable: /usr/local/cpanel/3rdparty/perl/528/bin/perl
Command Line: spamd child
PID: 32045 (Parent PID:30638)
Killed: No

Everyday I received email that same user trying to sneak in via dovecot: imap-login using different IP address after the lfd blocked the IP. Also got suspicious process running on my server.

This has made my server have very high bandwidth usage.

Is there any way to prevent this from happening?

 

[cPanelLauren]

Hello,

That excessive resource usage notification is an LFD process time notification, it's notifying you that the SpamAssassin process associated with the account reconvaluecom has exceeded LFD's threshold. This is discussed in the tutorial here: Tutorial - CSF/LFD - Excessive Resource Usage - Process Time

As far as the other LFD notifications you're receiving, please provide information on those further.

This has made my server have very high bandwidth usage.

This can only occur if there is actual data transfer occurring if they're failing to access the server they wouldn't be able to transfer enough data to cause high bandwidth usage.