Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

root rkhunter Daily Run email

Discussion in 'E-mail Discussion' started by chanklish, Mar 4, 2019.

Tags:
  1. chanklish

    chanklish Well-Known Member

    Joined:
    May 22, 2015
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    kinshasa
    cPanel Access Level:
    Root Administrator
    i installed RK hunter a while ago then removed it and removed all the chron job of it but i keep getting an email everyday with this subject
    rkhunter Daily Run (name of my server) and it only has a "=" in the mail body coming from
    root <root@example.com> i suppose this is my cpanel provider
    what can i do ?
     
    #1 chanklish, Mar 4, 2019
    Last edited by a moderator: Mar 4, 2019
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,002
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @chanklish,

    Can you check to see if any cron jobs are configured for the RKHunter script? The root cron jobs are stored in /var/spool/cron/root. You can edit the root cron jobs using the crontab -e command.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. chanklish

    chanklish Well-Known Member

    Joined:
    May 22, 2015
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    kinshasa
    cPanel Access Level:
    Root Administrator
    all cron files are empty except for the root file with the below - nothing related to rkhunter

    Code:
        
    0 6 * * * /usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1
    30 5 * * * /usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1
    @reboot /usr/local/cpanel/bin/onboot_handler
    44 21 * * * /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
    19 0 * * * (/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron)
    0 1 * * * /usr/local/cpanel/scripts/cpbackup
    0 2 * * * /usr/local/cpanel/bin/backup
    35 * * * * /usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check
    45 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache
    30 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
    25 */2 * * * /usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1
    15 */2 * * * /usr/local/cpanel/bin/dbindex >/dev/null 2>&1
    15 */6 * * * /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
    */5 * * * * /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
    0,15,30,45 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1
    0 3 * * * /usr/local/cpanel/3rdparty/bin/clamscan --exclude-dir=virtfs -ir /home/
    5,20,35,50 * * * * /usr/local/cpanel/scripts/eximstats_spam_check 2>&1
    0 */2 * * * /usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1
    09,39 * * * * /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
    
    but then i found cron jobs related to rkhunter in /etc/cron.daily and delete them .
    will wait for verify
     
  4. chanklish

    chanklish Well-Known Member

    Joined:
    May 22, 2015
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    kinshasa
    cPanel Access Level:
    Root Administrator
    i still received an email .
     
  5. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,002
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @chanklish,

    Check for additional cron jobs in the following directories as well:

    /etc/cron.d/
    /etc/cron.hourly/
    /etc/cron.monthly/
    /etc/cron.weekly/

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice