1. inteldigital

    LFD LiteSpeed notification: Suspicious process running under user nobody

    Hi I am having this annoying issue with LFD flagging LiteSpeed as running under nobody and using excessive resources etc. I've tried adding it to ignore list in WHM using the following regex but it isn't taking. Does anybody have any other suggestions? pexe:^/usr/local/lsws/bin/lshttpd.*$
  2. R

    lfd Suspicious File Alert after Acronis installation

    Hello, i recently installed Acronis agent on my VPS for doing backup of the entire server. Everything is ok but, after midnight, lfd sent me many notifications like that lfd on server.vpstest.it: Suspicious File Alert Time: Thu Nov 21 00:05:06 2019 +0100 File...
  3. C

    lfd excessive processes running under user

    I have looked at the few threads regarding this error and none seem to apply to my case Related or unrelated, I started getting the errors for one user: User:lochhavenclubinc PID:8483 PPID:8335 Run Time:3(secs) Memory:309316(kb) RSS:42040(kb) exe:/opt/cpanel/ea-php72/root/usr/bin/php-cgi...
  4. L

    lfd Excessive resource

    Hi, I have an issue and i do not know how to handle. I receive a lot of mails like this Time: Sun Jan 6 13:01:56 2019 +0200 Account: xxxx Resource: Process Time Exceeded: 299479 > 3600 (seconds) Executable: /opt/cpanel/ea-php71/root/usr/bin/lsphp Command Line: lsphp...
  5. USA_Webmaster

    Disable lfd email alerts for whitelisted IP?

    I was trying to reply to this thread but forums locked old post -- Viewing Successful Root Login Log --- Hey @cPanelMichael :-D I just checked WHM >> cPHulk Brute Force Protection Whitelist Management tab for VPS WHMCS IP and it's already listed. Why am I still getting email alert lfg...
  6. T

    SOLVED LFD Hung Task Timeout Error

    Hi everyone INFO: task lfd - (child) p:21289 blocked for more than 120 seconds "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this messages This error is appearing every morning on my server , and web pages are not loaded then Anyone can give me advice
  7. X

    lfd excessive resource usage warnings with litespeed

    Hi, I have been getting excessive resource usage warnings from lfd like this: Time: Tue Apr 24 17:03:54 2018 +0430 Account: kw179 Resource: Process Time Exceeded: 1811 > 1800 (seconds) Executable: /opt/cpanel/ea-php71/root/usr/bin/lsphp Command Line: lsphp...
  8. K

    lfd Excessive Resource Usage Warnings

    I'm getting warning emails sent non-stop from two accounts since activating php-fpm pools for php 7.2 last week. I've tried troubleshooting this, but I'm about out of ideas. Can anyone tell me if it's going to be an issue to simply raise the warning level to 500MB? Is it "normal" for the php...
  9. C

    Hundreds of Excessive Resource Usage emails from lfd despite setting low memory

    Hi, I'm getting hundreds of these daily Time: Tue Jun 27 04:40:27 2017 -0400 Account: xxx Resource: Virtual Memory Size Exceeded: 508 > 500 (MB) Executable: /opt/cpanel/ea-php56/root/usr/bin/php-cgi Command Line: /opt/cpanel/ea-php56/root/usr/bin/php-cgi...
  10. J

    WebDisk (WebDav) CSF LFD warnings

    I tried using Webdisk for the first time and I'm running Configserver Firewall and getting LFD warnings. I've tried adding the process name to the process ignore file but still getting both of these. Anyone been in the same boat know the best way to handle it? Excessive resource usage...
  11. I

    SOLVED LFD Excessive Resource Usage - Normal for PHP-FPM?

    Hi guys, I know this one is probably majority third-party so perhaps better suited on the ConfigServer forums but if anyone has run into this running cPanel and php-fpm and knows a little bit about it, it'd help. Of course, I don't really expect a huge amount of replies here so no hard feelings...
  12. J

    lfd suspicious process /usr/bin/php

    today I've got about 500 message from CSF with this warning, my question does the 60986 is actually a port, and if so how can I block all the none essential port to open connection, I have a regular server used for commercial web-email-ftp etc, so I don't need to many port, right? right now I...
  13. S

    Lots of FAILED: lfd and RECOVERED: lfd e-mails.

    Hello. I've been receiving a good number of emails every day that say LFD failed and then 4 or 5 minutes later, it says LFD recovered. For example, on Sunday, I received 14 messages (7 times it failed, 7 times it recovered). Does anyone have any suggestions on what might be causing this? I...
  14. Bashed

    SOLVED CSF / LFD Failing, Strange Error

    Getting this on Centos 7 / Cpanel box. Another app is currently holding the xtables lock. Perhaps you want to use the -w option? Another app is currently holding the xtables lock. Perhaps you want to use the -w option? Another app is currently holding the xtables lock. Perhaps you want to use...
  15. C

    LFD errors after CSF update today

    Im getting repeated errors via email about LFD. This morning there was an update: Upgrading csf from v8.26 to 9.02... Retrieving new csf package... ...35% ...40% ...80% ...85% ...100% Unpacking new csf package... Selecting installer... Running csf cPanel installer Installing csf and lfd ETC...
  16. S

    Repeated emails coming from CSF, and LFD

    I really used Google, and did not find a proper solution for this specific issue. I don't need or want these emails. I know the system is highly secure. I receive the email: Subject: lfd on xxx.xxxxxxx.com: Suspicious process running under user avahi Body: Time: Sun May 29 19:00:31 2016...
  17. S

    lfd on server Log Scanner Report

    Hello! I'm very new to using VPS and am on a steep learning curve! Everything was running fine until recently when I started getting attacks on my websites and when one went down, they all fell like dominoes. As you can imagine that's where my stress levels rocketed, especially when I don't...
  18. Motamedi

    problem lfd notifications

    hello my problem is notifications lfd ... 20 emails per minute sended by lfd to my email ... Time: Fri Nov 6 04:06:12 2015 -0500 PID: 10030 (Parent PID:9922) Account: example user Uptime: 70 seconds Executable: /usr/local/lsws/fcgi-bin/lsphp-5.3.29 Command Line (often faked in...
  19. Faizan Khalid

    lfd: Excessive processes running under user

    Time: Sun Oct 25 04:24:28 2015 +0200 Account: user Process Count: 12 (Not killed) Process Information: User:userPID:17692 PPID:17568 Run Time:0(secs) Memory:186644(kb) exe:/usr/bin/php cmd:/usr/bin/php /home/user/public_html/index.php
  20. E

    lfd /bin/passwd: FAILED

    I received an email where it tells me that the /bin/passwd failed the md5sum comparison test. This is alarming because I did not make any changes to cause this message. Could this be generated because of a cpanel/WHM update?