Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Suspicious process question

Discussion in 'General Discussion' started by Hawley, Jul 18, 2010.

  1. Hawley

    Hawley Registered

    Jul 18, 2010
    Likes Received:
    Trophy Points:
    Hi all - I've been using cPanel for a few years, but my sysadmin has left and I'm going to attempt to manage it myself.

    I have a question and I'm not sure if it belongs here, or on the ConfigServer forums, so I'll try here and forgive me if it's incorrect.

    I have a php script that runs on an hourly cron to read new XML files, import some images and update the mysql db.

    Every so often (not on all), I get the message:

    fd on Suspicious process running under user xyz

    Time: Mon Jul 19 13:31:16 2010 +1000
    PID: 23106
    Account: xyz
    Uptime: 74 seconds


    Command Line (often faked in exploits):
    /usr/local/bin/php -q /home/xyz/customcron/thescript.php

    All the details are correct and pertain to the script described above.

    I'm fine with receiving the alerts, I just want to know if this alert is just telling me that the process is running, or is there something wrong that I need to fix?


Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice