The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Suspicious process cpanel and Excessive resource usage: cpanel (1644)

Discussion in 'Security' started by Bashy, Mar 5, 2011.

  1. Bashy

    Bashy Well-Known Member

    Joined:
    Feb 20, 2011
    Messages:
    55
    Likes Received:
    1
    Trophy Points:
    8
    Hi folks, is this something to be woried about


    Code:
    Time:    Sat Mar  5 10:15:11 2011 +0000
    PID:     1644
    Account: cpanel
    Uptime:  18768 seconds
    
    
    Executable:
    
    /usr/bin/perl
    
    
    Command Line (often faked in exploits):
    
    spamd child
    
    
    Network connections by the process (if any):
    
    tcp: 127.0.0.1:783 -> 0.0.0.0:0
    tcp: 127.0.0.1:783 -> 127.0.0.1:51598
    udp: 50.7.246.202:13446 -> 74.207.231.120:53
    
    
    Files open by the process (if any):
    
    /dev/null
    /dev/null
    /dev/null
    /usr/bin/spamd
    I also get these

    Code:
    Time:         Sat Mar  5 10:15:11 2011 +0000
    Account:      cpanel
    Resource:     Process Time
    Exceeded:     18768 > 1800 (seconds)
    Executable:   /usr/bin/perl
    Command Line: spamd child
    PID:          1644
    Killed:       No
    
     
  2. LinuxTechie

    LinuxTechie Well-Known Member

    Joined:
    Jan 22, 2011
    Messages:
    502
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Hello,

    There is nothing to worry about it.
     
  3. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    938
    Likes Received:
    0
    Trophy Points:
    16
    yeah this is nothing to worry about it, simply ignore it.
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,446
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
  5. Bashy

    Bashy Well-Known Member

    Joined:
    Feb 20, 2011
    Messages:
    55
    Likes Received:
    1
    Trophy Points:
    8
    Thanks folks, i appreciate the replies, i do get a lot of emails with regards to this, would it be wise to turn off the email alert?
     
  6. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,446
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    No, if you read the link, it mentioned adding items to the csf.pignore file. ;)
     
  7. Bashy

    Bashy Well-Known Member

    Joined:
    Feb 20, 2011
    Messages:
    55
    Likes Received:
    1
    Trophy Points:
    8
    :eek: I saw that honest...... thanks :)
     
Loading...

Share This Page