Search found 2 matches

by rudolfl
10 Jun 2021, 07:16
Forum: General Discussion (csf)
Topic: "Suspicious Process" -- how to debug?
Replies: 0
Views: 1170

"Suspicious Process" -- how to debug?

Hi all, I am getting a lot of e-mails about suspicions process running. I did find many threads about it and all pretty much talk about how to silience those. I want to fix (if possible) the underlying problem. Those warnings are generally only specify user and PHP executable. Network connectiosn I ...
by rudolfl
01 Sep 2020, 01:09
Forum: General Discussion (csf)
Topic: Suspicious Process. Can't stop the notifications
Replies: 1
Views: 1910

Suspicious Process. Can't stop the notifications

Hi all, I am constantly getting notifications about suspicious process being run and process is php-fpm "Executable: /opt/cpanel/ea-php73/root/usr/sbin/php-fpm Command Line (often faked in exploits): php-fpm: pool <username> Network connections by the process (if any): tcp: 127.0.0.1:51036 -> 1...