I solved this issue by discovering there were several PHP processes that were left running after the upgrade above.
I used kill to kill them by the PID # reported in the emails and the messages have stopped.
Search found 4 matches
- 28 Aug 2013, 07:48
- Forum: General Discussion (csf)
- Topic: LFD Suspicious process messages - (deleted) /usr/bin/php
- Replies: 3
- Views: 5537
- 27 Aug 2013, 19:27
- Forum: General Discussion (csf)
- Topic: LFD Suspicious process messages - (deleted) /usr/bin/php
- Replies: 3
- Views: 5537
Re: LFD Suspicious process messages - (deleted) /usr/bin/php
Anyone have any advice?
After the above, I also recently upgraded, using EasyApache, to PHP 5.4.
No change - The messages are still being sent to me, hundreds per day.
After the above, I also recently upgraded, using EasyApache, to PHP 5.4.
No change - The messages are still being sent to me, hundreds per day.
- 22 Aug 2013, 16:30
- Forum: General Discussion (csf)
- Topic: LFD Suspicious process messages - (deleted) /usr/bin/php
- Replies: 3
- Views: 5537
Re: LFD Suspicious process messages - (deleted) /usr/bin/php
CPanel released EasyApache 3.22.6 so I did a recompile just in case it would help, still getting tons of these emails.
- 20 Aug 2013, 18:13
- Forum: General Discussion (csf)
- Topic: LFD Suspicious process messages - (deleted) /usr/bin/php
- Replies: 3
- Views: 5537
LFD Suspicious process messages - (deleted) /usr/bin/php
Yesterday I re-ran EasyApache (version 3.22.5) on my Cpanel / WHM server and since that time I have been getting 10-15 of these messages every hour or so: Email subject line is: lfd on <myserver>: Suspicious process running under user <me> Me being my username, it's not "nobody" Executable...