KrazyBob
Regular Pleskian
I have a process that I have never seen before that is running many, many times. It is running as user apache and I cannot find it or determine what it is. But the server acts like ti is compromised.
If I run lsof -p <PID> the results show me a list of all web sites on the server.
Is this a hack? Is this a normal Plesk process?
How can I find it other than find ./ -user apache
Where could I look?
If I run lsof -p <PID> the results show me a list of all web sites on the server.
Is this a hack? Is this a normal Plesk process?
How can I find it other than find ./ -user apache
Where could I look?