ConfigServer Community Forum

Thank you very much, going to try that!

Thank you for your reply. I don't understand either. It's only happening when there are long lines like these shoutcast/castcontrol lines. There can not be any other linefeeds then linux, because I'm editting csf.pignore (yes ofcourse I'm sure I'm editting that one) with either nano or vim in SSH co...

I have this already for a longer time but nobody responded to my other thread (november last year). It seems csf.pignore is not ignoring certain shoutcast processes. I get this email: Time: Wed Jan 15 20:32:31 2014 +0100 Account: admin Resource: Process Time Exceeded: 10888 > 1800 (seconds) Executab...

At first I fixed this on this server, by reversing the rights and owner of /usr/bin/perl I had protected it by doing: chgrp apache /usr/bin/perl chmod 705 /usr/bin/perl I reverted it back to root:root and 755. Now I got the same problem on another server without any change to perl: ime: Sun Mar 31 1...

Seems more things are not ignored, also Dovecot: Time: Fri Mar 22 21:10:57 2013 +0100 PID: 20482 (Parent PID:19509) Account: accountname Uptime: 68 seconds Executable: /usr/libexec/dovecot/imap Command Line (often faked in exploits): dovecot/imap [user@domain.org 31.6.61.96 IDLE] And csf.pignore has...

We are running shoutcast server on a server. Yesterday we moved this server, change nameservers etc. all is working fine except I keep getting messages about shoutcast like this: Time: Fri Mar 22 14:16:52 2013 +0100 PID: 4379 (Parent PID:4379) Account: admin Uptime: 43310 seconds Executable: /home/a...

You should check your log files where it's coming from.
Check /var/log/messages, ftp logs. Somewhere this sh.php must turn up where it's coming from.
Could be a hackers script.

I presume you already used the /scripts/securetmp script from Cpanel? Or don't you use Cpanel?

(btw, where can I see which version is it?)

In ssh console type the following: You will get an output like this:
csf: v5.73 (cPanel)