Solution: lfd on host: Suspicious process running under user

The message provided are going from CSF , I am sure the time could be adjusted in config however we are not familiar in CSF to help here.
Alternatively you may reduce maximum time how long single request could be processed with FcgiBusyTimeout directive: http://httpd.apache.org/mod_fcgid/mod/mod_fcgid.html#fcgidbusytimeout but you need to check how to make it properly with cpanel. However we recommend to not reduce that time as depending from resource usage some requests could take longer.

Just Disable PT_LIMIT to get Rid of These Messages.


Subject: lfd on host: Suspicious process running under user plastics

Time: Wed Jul 2 05:41:50 2014 +0000
PID: 53298 (Parent PID:45090)
Account: plastics
Uptime: 103 seconds


Executable:

/usr/selector/php


Command Line (often faked in exploits):

/usr/bin/php


Network connections by the process (if any):

udp: 162.144.92.141:56153 -> 74.220.195.27:53


Files open by the process (if any):

/usr/local/apache/logs/error_log
/usr/local/apache/logs/error_log


Memory maps by the process (if any):