One of my Wordpress installs (cPanel VPS) had a cron job (backup to Dropbox script) that was interrupted. Ever since the interruption I receive hourly emails from root@ cPanel/WHM:
-Excessive resource usage
-Suspicious process running under user […]

The suspicious process emails include the following:
Network connections by the process (if any):
tcp: ->

That last IP address is a Dropbox IP. The thing is I have checked for any running jobs, have deactived and deleted the plugins responsible and have installed Cron checking plugins and no cron scripts are currently in place that have anything to do with the Dropbox backup. I have also checked in cPanel and no cron jobs are listed.

And yet I still receive the emails. Every hour. They are driving me crazy! But I don't just want to set up a rule in the email to delete them as I figure something must be going on to make cPanel/WHM send me these emails.

Does anyone have any suggestions, I'm desperate!

  • What this has to do with WordPress? Had you tried contacting hosting support about it?
    – Rarst
    Commented May 29, 2013 at 12:18
  • Well Rarst, it's a Wordpress install and the cron scripts were generated by Wordpress backup plugins. Doesn't get much more Wordpress than that to me. And yes, I did contact hosting support about two weeks ago,.
    – Jacob
    Commented May 30, 2013 at 9:13

1 Answer 1


For what it's worth, I found wp-cron processes running under the Processes section in WHM. I killed them and now all wp-cron behavior is back to normal and the emails have stopped.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.