Receiving emails from root to root

Support and Discussion General Discussion
,
1

Good morning.

CP version 2.3.6
Ubuntu 22.04

Emails from [email protected] are being “sent” with the following subject:
“lfd on mycpdomain.com: Suspicious process running under user dtfrc2345” or
“lfd on mycpdomain.com.br: Suspicious process running under user nobody” or
“lfd on mycpdomain.com.br: Suspicious process running under user postfix”

What is lfd?

mycpdomain.com would be the domain I use only for CP.
mycpdomain.com:8090 is the link to access CP.

Received from: 127.0.0.1
Received Via: 127.0.0.1
From: [email protected]
To: [email protected]

I can only see them in the MailWatch dashboard. I don’t receive these emails but they total 60+ emails per day.

Where can I configure this in CP?

Thanks.

2

LFD means Login Failure Daemon, or LFD. LFD watches your user activity for excessive login failures which are commonly seen during brute force attacks.

3

I have 143906 messages since jan/23. Just 8 domain names including 1 domain just for CP and like 10 or 15 emails total.
This is a lot of emails. How can I manage this?