cPGuard {{hostname}}

🚨 Security Alert:

{{ total_count }} Suspicious cron job{% if total_count > 1 %}s{% endif %} disabled

{% if total_count > 1 %} We detected {{ total_count }} suspicious cron jobs across {{ total_users }} user account{% if total_users > 1 %}s{% endif %} on your server. All identified jobs have been automatically disabled to prevent potential abuse. {% else %} We detected a suspicious cron job associated with user {{ username }} and have automatically disabled it to prevent potential misuse. {% endif %}

Details

Detected at {{ check_time|date('F j, Y, g:i a') }}

{% for username, data in crons %} {% set username = crons|keys|first %} {% set cron = crons[username]|first %} {% for cron in data %} {% endfor %}
User {{ username }}
Cron file {{ cron.cron_file }}
User home directory {{ cron.user_directory }}
Line #{{ cron.line_no }} ✓ Disabled
{{ cron.infected_command }}
{% endfor %}

🔧 Recommended Actions

  1. Inspect site files for hidden or malicious content in plugins, themes, and core files.
  2. Review recently modified files (last 2 days):
    find {{ cron.user_directory }} -type f -mtime -2 -printf '%TY-%Tm-%Td %TH:%TM %p\n' | sort
  3. For WordPress installations, review plugins, themes, and wp-config.php for unauthorized changes.
  4. Update and secure all core files, plugins, and themes. Rotate passwords and access keys immediately.
  5. Review remaining cron jobs for the user:
  6. Tighten security Run a manual scan on the account, see if the user or domain is whitelisted, Ensure all cPGuard modules are enabled and check settings.
 
 
You've received this email because you have cPGuard security on your server - {{ hostname }}.
You may turn off notification from cPGuard settings on your server
 
cPGuard logo X fb
Our Blog    |    Privacy Policy    |    Help Center

©{{ __year }} OPSSHIELD LLP    www.opsshield.com