lfd Suspicious process running under user
Posted: 21 Nov 2024, 15:02
Hello,
We have installed CSF on several of our servers, but one of our Plesk servers keeps spamming lfd Suspicious process running under user.
I have disabled all email_alert but we getting hundreds of emails per hour.
Version: csf: v14.22 (generic)
OS: VERSION="20.04.6 LTS (Focal Fossa)"
config:
LF_EMAIL_ALERT = "0"
LF_TEMP_EMAIL_ALERT = "0"
LF_SSH_EMAIL_ALERT = "0"
LF_SU_EMAIL_ALERT = "0"
LF_SUDO_EMAIL_ALERT = "0"
LF_WEBMIN_EMAIL_ALERT = "0"
LF_CONSOLE_EMAIL_ALERT = "0"
PT_USERPROC = "0"
PT_USERMEM = "0"
PT_USERRSS = "0"
PT_USERTIME = "0"
PT_USERKILL = "0"
PT_USERKILL_ALERT = "0"
We did try to restart CSF and lfd service and rebooted the server.
We have installed CSF on several of our servers, but one of our Plesk servers keeps spamming lfd Suspicious process running under user.
I have disabled all email_alert but we getting hundreds of emails per hour.
Version: csf: v14.22 (generic)
OS: VERSION="20.04.6 LTS (Focal Fossa)"
config:
LF_EMAIL_ALERT = "0"
LF_TEMP_EMAIL_ALERT = "0"
LF_SSH_EMAIL_ALERT = "0"
LF_SU_EMAIL_ALERT = "0"
LF_SUDO_EMAIL_ALERT = "0"
LF_WEBMIN_EMAIL_ALERT = "0"
LF_CONSOLE_EMAIL_ALERT = "0"
PT_USERPROC = "0"
PT_USERMEM = "0"
PT_USERRSS = "0"
PT_USERTIME = "0"
PT_USERKILL = "0"
PT_USERKILL_ALERT = "0"
We did try to restart CSF and lfd service and rebooted the server.