Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED Suspicious process running under user

Discussion in 'General Discussion' started by Stichting FreeSpeechTube, Nov 3, 2018.

Tags:
  1. Stichting FreeSpeechTube

    Stichting FreeSpeechTube Member

    Joined:
    Nov 3, 2018
    Messages:
    9
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Netherlands
    cPanel Access Level:
    Root Administrator
    I would like cPanel/WHM to stop sending me emails about two specific "Suspicious process running under" processes.

    These two are:
    1.
    Account: redis
    Executable: /usr/bin/redis-server
    Command Line: /usr/bin/redis-server 127.0.0.1:6379
    2.
    Account: peertube
    Executable: /usr/bin/node
    Command Line: peertube

    I basically want cPanel/WHM to know that these two processes are not suspicious (because I've explicitly started them myself).

    How can I teach cPanel/WHM that these processes are not suspicious?
     
  2. rpvw

    rpvw Well-Known Member

    Joined:
    Jul 18, 2013
    Messages:
    1,088
    Likes Received:
    442
    Trophy Points:
    113
    Location:
    Spain
    cPanel Access Level:
    Root Administrator
    I am guessing that these two messages are being sent by CSF/LFD

    If that is the case, add the following to the /etc/csf/csf.pignore file, or use the built-in editor in the lfd - Login Failure Daemon section of the ConfigServer Security & Firewall interface in WHM

    Code:
    exe:/usr/bin/redis-server
    exe:/usr/bin/node
    
    Click on the Change button and restart LFD
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. dalem

    dalem Well-Known Member PartnerNOC

    Joined:
    Oct 24, 2003
    Messages:
    2,909
    Likes Received:
    127
    Trophy Points:
    368
    Location:
    SLC
    cPanel Access Level:
    DataCenter Provider
    Not a cpanel issue
    Add the process to your CSF /etc/csf/csf.pignore
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Stichting FreeSpeechTube

    Stichting FreeSpeechTube Member

    Joined:
    Nov 3, 2018
    Messages:
    9
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Netherlands
    cPanel Access Level:
    Root Administrator
    Thanks rpvw, I've added these two lines using the built-in editor.
     
  5. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,528
    Likes Received:
    2,180
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    I've marked this thread as solved.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice