Resolved Suspicious Server Behaviour

[Pentarou]

Hello,

After installing official redis Docker on my Plesk 17.5.3 server and wanted to remove it to debug a problem, I noticed that two unauthorized dockers had suddenly been added, namely:

1. competent_hermann
   
2. priceless_sammet

Also, NextCloud docker has suddenly been marked for removal and cannot be started, is there a way to undo this?

I am very worried, can someone tell me what is going on and what is the best way to deal with this? I've already removed the dockers and changed all password and removed the port from the firewall. After that, the suspicious behaviour stopped.

Thank you in advance!

 

[Pentarou]

It looks like Docker is creating them for some reason, recovered a server snapshot just to be sure.