Skip to main content

LFD Suspicious process running under user

Comments

4 comments

  • cPanelAnthony
    Hello! This is an email from CSF firewall and doesn't look like anything to worry about. That "suspicious process" is simply the PHP-FPM process, which you see during normal site traffic on a site with PHP-FPM enabled. The following article might help.
    0
  • Civijev
    Thank you mate. I'm doing my best to keep the server secure, but it's nothing for this jungle. I was turn off email alert for php fpm. Tell me, how can I investigate which process is under php fpm when cpu is overload, or what script switch php fpm to overload?
    0
  • cPanelAnthony
    The CPU isn't necessarily overloaded. This notification is just letting you know that it didn't know if this process was legitimate or not. I am not seeing that there are any actual issues here. With that being said, the following article should help you with load investigations.
    0
  • Civijev
    Thank you once again
    0

Please sign in to leave a comment.