one of the SUCURI process detected as Suspicious activity by CSF/LFD

  • Hi
    My firewall alarming the below SUCURI activity as suspicious
    This connection happening every day in a specific time

    as per the IP ( 192.124.249.17) details, its connecting to sucuri server.

    is it really suspicious? can anybody help me to know what is this connection and for which purpose?

    Executable:

/opt/cpanel/ea-php73/root/usr/bin/php-cgi

Command Line (often faked in exploits):

/opt/cpanel/ea-php73/root/usr/bin/php-cgi

Network connections by the process (if any):

tcp: 10.0.0.4:37620 -> 192.124.249.17:443
Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘one of the SUCURI process detected as Suspicious activity by CSF/LFD’ is closed to new replies.