lfd on (hostname): Excessive resource usage:

Hi there, New CWP user and member here.

We recently changed VPS Hosting providers, due to variety of reason, (after many years running our forums under WHM/C-Panel on Centos 7).
The Spec' of the VPS is (in effect) identical and basically, everything is working fine and as it should (as far as the users experience is concerned) but I am getting a ridiculous quantity of warnings/messages regarding Excessive resource usage from lfd.

There are a number of them but always the same.

I do realize in certain examples, I could simply add them to csf.pignore but was perhaps looking for further info regarding the possible 'Best /Desirable Practice'.

I am Not a Sys' Admin' and am a relative newcomer to all things VPS admin'  and I Do have a great real Sys' Admin' friend that regularly helps and is and has been a great asset but his own workload is high atm so figured I could possibly Learn and sort this out without bothering him unduly  ... hopefrully 

We are running:
CWPpro version: 0.9.8.1179, AlmaLinux release 9.4, PHP version: 8.2.19, Apache/2.4.56 and 10.5.22-MariaDB
2 Core (2893 MHz) with 4gig ram.

Messages, as below:

lfd on svr.hostname.com: Excessive resource usage: rpc (566 (Parent PID:566))
Time:         Tue Jun 11 18:46:36 2024 +1000
Account:      rpc
Resource:     Process Time
Exceeded:     1808 > 1800 (seconds)
Executable:   /usr/bin/rpcbind
Command Line: /usr/bin/rpcbind -w -f
PID:          566 (Parent PID:566)
Killed:       No

lfd on svr.hostname.com: Excessive resource usage: rpc (574 (Parent PID:574))
Time:         Mon Jun 10 05:00:47 2024 +1000
Account:      rpc
Resource:     Process Time
Exceeded:     2042733 > 1800 (seconds)
Executable:   /usr/bin/rpcbind
Command Line: /usr/bin/rpcbind -w -f
PID:          574 (Parent PID:574)
Killed:       No

lfd on svr.hostname.com: Excessive resource usage: mysql (906 (Parent PID:906))
Time:         Tue Jun 11 19:16:39 2024 +1000
Account:      mysql
Resource:     Process Time
Exceeded:     3609 > 1800 (seconds)
Executable:   /usr/libexec/mariadbd
Command Line: /usr/libexec/mariadbd --basedir=/usr
PID:          906 (Parent PID:906)
Killed:       No

lfd on svr.hostname.com: Excessive resource usage: mysql (1193 (Parent PID:1193))
Time:         Mon Jun 10 05:00:47 2024 +1000
Account:      mysql
Resource:     Process Time
Exceeded:     2042730 > 1800 (seconds)
Executable:   /usr/libexec/mariadbd
Command Line: /usr/libexec/mariadbd --basedir=/usr
PID:          1193 (Parent PID:1193)
Killed:       No

lfd on svr.hostname.com: Excessive resource usage: dbus (653 (Parent PID:653))
Time:         Mon Jun 10 04:00:38 2024 +1000
Account:      dbus
Resource:     Process Time
Exceeded:     2039123 > 1800 (seconds)
Executable:   /usr/bin/dbus-broker-launch
Command Line: /usr/bin/dbus-broker-launch --scope system --audit
PID:          653 (Parent PID:653)
Killed:       No

lfd on svr.hostname.com: Excessive resource usage: dbus (657 (Parent PID:653))
Time:         Mon Jun 10 03:00:29 2024 +1000
Account:      dbus
Resource:     Process Time
Exceeded:     2035514 > 1800 (seconds)
Executable:   /usr/bin/dbus-broker
Command Line: dbus-broker --log 4 --controller 9 --machine-id 6e081c08e83a48338227b17200a18603 --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
PID:          657 (Parent PID:653)
Killed:       No

So far, these are the only lfd messages but they are Relentless 

Thanks, in advance.
Any help / advice greatly appreciated
Stewart 

/ etc / csf / csf.pignore
is your friend. add entries to silence these common unnecessary notifications. Also consider increasing some values in csf.conf -- such as SMTP and IMAP login failures, since a lot of legit users trigger false positives and get locked out.

/ etc / csf / csf.pignore ... is your friend.

Yes, so I have become aware 

Also consider increasing some values in csf.conf -- such as SMTP and IMAP login failures, since a lot of legit users trigger false positives and get locked out.

Yeah, I'll run that past my Sys Admin' friend ... thanks