The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Suspicious process question

Discussion in 'General Discussion' started by Hawley, Jul 18, 2010.

  1. Hawley

    Hawley Registered

    Joined:
    Jul 18, 2010
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Hi all - I've been using cPanel for a few years, but my sysadmin has left and I'm going to attempt to manage it myself.

    I have a question and I'm not sure if it belongs here, or on the ConfigServer forums, so I'll try here and forgive me if it's incorrect.

    I have a php script that runs on an hourly cron to read new XML files, import some images and update the mysql db.

    Every so often (not on all), I get the message:

    fd on xyz.com: Suspicious process running under user xyz

    Time: Mon Jul 19 13:31:16 2010 +1000
    PID: 23106
    Account: xyz
    Uptime: 74 seconds

    Executable:
    /usr/local/bin/php

    Command Line (often faked in exploits):
    /usr/local/bin/php -q /home/xyz/customcron/thescript.php


    All the details are correct and pertain to the script described above.

    I'm fine with receiving the alerts, I just want to know if this alert is just telling me that the process is running, or is there something wrong that I need to fix?

    Cheers!
    Hawley
     
Loading...

Share This Page