Suspicious process running under user
I would like cPanel/WHM to stop sending me emails about two specific "Suspicious process running under" processes.
These two are:
1.
Account: redis
Executable: /usr/bin/redis-server
Command Line: /usr/bin/redis-server 127.0.0.1:6379
2.
Account: peertube
Executable: /usr/bin/node
Command Line: peertube
I basically want cPanel/WHM to know that these two processes are not suspicious (because I've explicitly started them myself).
How can I teach cPanel/WHM that these processes are not suspicious?
-
I am guessing that these two messages are being sent by CSF/LFD If that is the case, add the following to the /etc/csf/csf.pignore file, or use the built-in editor in the lfd - Login Failure Daemon section of the ConfigServer Security & Firewall interface in WHM exe:/usr/bin/redis-server exe:/usr/bin/node
Click on the Change button and restart LFD0 -
Not a cpanel issue Add the process to your CSF /etc/csf/csf.pignore 0 -
Thanks rpvw, I've added these two lines using the built-in editor. 0 -
Hello, I've marked this thread as solved. Thanks! 0 -
Adding Executable files in " /etc/csf/csf.pignore " to stop Excessive resource usage or Suspicious process running emails is not working. 0 -
@visualmtb - if the CSF tools aren't working as expected, it would be best to contact their support directly at ConfigServer Technical Support as I would expect using the csf.pignore file to work well. 0 -
@000 - it could be the account creation process itself, as cPanel uses perl in the backend for everything. 0 -
then how I stop ANY message before of GMAIL mark as SPAM my IP ? 0 -
I'm not sure I understand the question - this is a notice from CSF and not cPanel, but I'm not sure how this is related to spam email. 0
Please sign in to leave a comment.
Comments
10 comments