Skip to main content

lfd on my.domain.com: Suspicious process running under user myusername

Comments

2 comments

  • 24x7ss
    Hello, The process is doing outbound connections and you surely would want to check on these to make sure its not an outbound attack. Try to lsof the pid and check if you get any files for account owners and check on them.
    0
  • cPanelMichael
    Hello :) This is a common occurrence and is typically a false positive. You will find several threads on this topic by searching for "spamd lfd" on our forums or by searching for "LFD spamd site:forums.cpanel.net" on Google. Please keep in mind that LFD is developed by ConfigServer, so their forums are often a better resource. Thank you.
    0

Please sign in to leave a comment.