Config Server Firewall: Spamming my email | lfd on localhost: Suspicious process running under user www-data
Posted
by
Henry Hoggard
on Server Fault
See other posts from Server Fault
or by Henry Hoggard
Published on 2012-05-22T23:13:19Z
Indexed on
2012/05/31
4:42 UTC
Read the original article
Hit count: 585
I have just installed and configured CSF and I am getting 100s of spam emails containing this message.
lfd on localhost: Suspicious process running under user www-data
Time: Wed May 23 01:05:52 2012 +0200
PID: 8503
Account: www-data
Uptime: 118 seconds
Executable:
/usr/lib/apache2/mpm-prefork/apache2
Command Line (often faked in exploits):
/usr/sbin/apache2 -k start
Network connections by the process (if any):
tcp6: 0.0.0.0:80 -> 0.0.0.0:0
Files open by the process (if any):
Does anyone know how to fix?
© Server Fault or respective owner
