Skip to main content

lfd on server.com: Suspicious process running under user username

Comments

6 comments

  • cPRex Jurassic Moderator
    Hey there! The suspicious process monitor has been covered many times on the forums here. Can you try a search to see if that will get you what you need? Here's an example that just searches our Forum: site:forums.cpanel.net suspicious process - Google Search
    0
  • jtgroup
    Yes I have searched the forums but I was asking for a specific reason i.e. is this anything to worry about. I can see how to stop the notifications but I don't want to stop warning notifications if this is an issue and it needs to be resolved.
    0
  • cPRex Jurassic Moderator
    This specific notification is just Perl, related to the SpamAssassin process. Nearly any cPanel process is going to use the Perl binary, so this is a common one to exclude from the suspicious reports. I don't see anything that is obviously malicious in that output you provided.
    0
  • jtgroup
    Thank you, I appreciate your help. I'm confused as to why we need to stop these notifications though, surely these should be disabled by default if they aren't anything to worry about? Every WHM admin must have to disable these?
    0
  • cPRex Jurassic Moderator
    cPanel doesn't support CSF/LFD as that software is created and distributed by another vendor. While it works well, it often does need some tweaks in order to not provide some "nuisance" notifications.
    0
  • jtgroup
    Thank you Rex. I'll give this a go and let you know if I have any issues.
    0

Please sign in to leave a comment.