Search found 1 match
- 13 Feb 2022, 15:51
- Forum: General Discussion (csf)
- Topic: Suspicious process running under user itrservices
- Replies: 1
- Views: 858
Suspicious process running under user itrservices
Hello, I receive a lot of email alarm that looks like this: Time: Sat Feb 12 20:13:41 2022 +0200 PID: 1934 (Parent PID:4804) Account: cpanel Uptime: 98 seconds Executable: /opt/cpanel/ea-php80/root/usr/sbin/php-fpm Command Line (often faked in exploits): php-fpm: pool cpanel_pool Network connections...