lfd Suspicious process running under user

[joebafra]

Hello,

We have installed CSF on several of our servers, but one of our Plesk servers keeps spamming lfd Suspicious process running under user.

I have disabled all email_alert but we getting hundreds of emails per hour.

Version: csf: v14.22 (generic)
OS: VERSION="20.04.6 LTS (Focal Fossa)"

config:

LF_EMAIL_ALERT = "0"
LF_TEMP_EMAIL_ALERT = "0"
LF_SSH_EMAIL_ALERT = "0"
LF_SU_EMAIL_ALERT = "0"
LF_SUDO_EMAIL_ALERT = "0"
LF_WEBMIN_EMAIL_ALERT = "0"
LF_CONSOLE_EMAIL_ALERT = "0"
PT_USERPROC = "0"
PT_USERMEM = "0"
PT_USERRSS = "0"
PT_USERTIME = "0"
PT_USERKILL = "0"
PT_USERKILL_ALERT = "0"

We did try to restart CSF and lfd service and rebooted the server.

[nikketrikke]

hello i'm in the same trouble...
i have plesk and ubuntu 22