Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spam Error Reports

Discussion in 'General Discussion' started by cravend, Apr 12, 2017.

Tags:
  1. cravend

    cravend Member

    Joined:
    Apr 4, 2017
    Messages:
    19
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    United States
    cPanel Access Level:
    Root Administrator
    Hi, I'm having an issue. I recently added my email to the contact info in WHM (Server Configuration » Basic cPanel & WHM Setup). However, I'm now receiving emails every two-three minutes (I believe I've received over 100 in the past 24 hours) that look like the one below:
    Code:
    lfd on gauntlet.[domain].org: Excessive resource usage: admin (1737 (Parent PID:1411))
    
    Time:         Wed Apr 12 12:02:26 2017 -0400
    Account:      admin
    Resource:     Virtual Memory Size
    Exceeded:     275 > 200 (MB)
    Executable:   /usr/bin/php
    Command Line: /usr/bin/php
    PID:          1737 (Parent PID:1411)
    Killed:       No
    Can someone explain what this means?
     
  2. cravend

    cravend Member

    Joined:
    Apr 4, 2017
    Messages:
    19
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    United States
    cPanel Access Level:
    Root Administrator
    Also, I sometimes get this email (it gets sent to spam):
    Code:
    Cron <root@gauntlet> /usr/bin/wget -O - -q -t 1 http://[sub].[domain].us/cron.php
    
    
    <html>
    <head>
    <meta name="robots" content="noarchive" />
    <meta name="googlebot" content="nosnippet" />
    </head>
    <body>
    <div align=center>
    <h3>Error. Page cannot be displayed. Please contact your service provider for more details.  (25)</h3>
    </div>
    </body>
    </html>
    I don't know what http://[sub].[domain].us is... we don't have a .us TLD, only .org
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,425
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    This notification comes from the CSF/LFD application. There's an existing thread on this topic at:

    how to stop Excessive resource usage alerts

    Check the cron jobs configured on your system for this entry with a command such as:

    Code:
    grep "domain.us" /var/spool/cron/*
    This will show you if a cron job exists for a user that runs that "wget" command to the external URL.

    Thank you.
     
  4. cravend

    cravend Member

    Joined:
    Apr 4, 2017
    Messages:
    19
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    United States
    cPanel Access Level:
    Root Administrator
    Hi. I think I got CSF/LFD handled. However, I'm not sure what to do for this:

    When I run the grep code, I get the following:
    Code:
    /var/spool/cron/root:45 * * * * /usr/bin/wget -O - -q -t 1 http://[sub].[domain].us/cron.php
    What do I do to stop these emails?
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,425
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You can remove the cron job if you are unsure how it was added and have no need for the script. Or, append the following entry to the end of the cron job to disable email notifications:

    Code:
    >/dev/null 2>&1
    Thank you.
     
Loading...

Share This Page