We've been investigating this for some time now, and I may have found a correlation between some strange server load spikes (jumping form a 1.00 avg to upwards of 100.00) around the time that these messages begin to appear in /var/log/secure:
cPanel.net Support Ticket Number:
Does anyone have any idea what might be going on here?Jul 3 19:52:57 empire Cp-Wrap[3091]: Pushing "570 LIST 0 0" to '/usr/local/cpanel/bin/ftpadmin' for UID: 570
Jul 3 19:52:57 empire Cp-Wrap[3091]: CP-Wrapper terminated without error
Jul 3 19:52:57 empire Cp-Wrap[3100]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:52:57 empire Cp-Wrap[3100]: Pushing "570 COUNTDBS" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:52:59 empire Cp-Wrap[3100]: CP-Wrapper terminated without error
Jul 3 19:53:24 empire Cp-Wrap[3146]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:24 empire Cp-Wrap[3146]: Pushing "570 LISTDBS" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:24 empire Cp-Wrap[3146]: CP-Wrapper terminated without error
Jul 3 19:53:24 empire Cp-Wrap[3151]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:24 empire Cp-Wrap[3151]: Pushing "570 GETHOST" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:25 empire Cp-Wrap[3151]: CP-Wrapper terminated without error
Jul 3 19:53:25 empire Cp-Wrap[3153]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:25 empire Cp-Wrap[3153]: Pushing "570 LISTUSERSINDB dick" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:25 empire Cp-Wrap[3153]: CP-Wrapper terminated without error
Jul 3 19:53:25 empire Cp-Wrap[3160]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:25 empire Cp-Wrap[3160]: Pushing "570 LISTUSERSINDB ecard" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:25 empire Cp-Wrap[3160]: CP-Wrapper terminated without error
Jul 3 19:53:25 empire Cp-Wrap[3165]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:25 empire Cp-Wrap[3165]: Pushing "570 LISTUSERSINDB one" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:25 empire Cp-Wrap[3165]: CP-Wrapper terminated without error
Jul 3 19:53:25 empire Cp-Wrap[3171]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:25 empire Cp-Wrap[3171]: Pushing "570 LISTUSERS" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:26 empire Cp-Wrap[3171]: CP-Wrapper terminated without error
Jul 3 19:53:26 empire Cp-Wrap[3193]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:26 empire Cp-Wrap[3193]: Pushing "570 LISTDBS" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:26 empire Cp-Wrap[3193]: CP-Wrapper terminated without error
Jul 3 19:53:26 empire Cp-Wrap[3198]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:26 empire Cp-Wrap[3198]: Pushing "570 LISTUSERS" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
Jul 3 19:53:26 empire Cp-Wrap[3198]: CP-Wrapper terminated without error
Jul 3 19:53:26 empire Cp-Wrap[3222]: CP-Wrapper v1.2 resuming normal operations
Jul 3 19:53:26 empire Cp-Wrap[3222]: Pushing "570 LISTHOSTS" to '/usr/local/cpanel/bin/mysqladmin' for UID: 570
cPanel.net Support Ticket Number: