lfd - Suspicious process ruing under user nobody
Hello,
LFD is notifying me via email 3 or more times per day messages like below:
lfd - Suspicious process ruing under user nobody
LFD is notifying me via email 3 or more times per day messages like below:
Code:
Time: Thu Oct 27 08:39:14 2022 -0300
PID: 6479 (Parent PID:6059)
Account: nobody
Uptime: 119 seconds
Executable:
/usr/local/cpanel/cgi-sys/autodiscover.cgi
Command Line (often faked in exploits):
/usr/local/cpanel/cgi-sys/autodiscover.cgi
Network coections by the process (if any):
tcp: 172.30.0.143:41978 -> 34.239.212.66:443
Files open by the process (if any):
Memory maps by the...+ نوشته شده در ساعت 12:54 توسط generator
برچسب ها:
|
