I recently saw a surge in my server load and a user running a process called "du" or something like that. I logged into his directory this is what was in there:
Look at this part
Is this an error when cpanel created the account or is this guy try to maliciously use my server?
Code:
drwxr-x--- 6 wscnet nobody 4096 Mar 13 10:46 ./
drwx--x--x 10 wscnet wscnet 4096 Mar 13 11:47 ../
drwxr-xr-x 3 wscnet wscnet 4096 Mar 13 10:38 assets/
?--x-wSr-- 23083 2054632244 1249143400 1683050345 Sep 28 2022 cgi-bin
?--x-ws--- 11073 1144075830 1515602286 895045688 Sep 3 2004 c&o.htm
-rw-r--r-- 1 wscnet wscnet 3390 Mar 13 11:32 contact.htm
drwxr-xr-x 3 wscnet wscnet 4096 Mar 11 13:37 dece/
?--xr-x--T 27719 1113670738 2033798223 1801931603 Jul 19 2034 feedback.htm
?r-xrw-rw- 30260 171404119 2054576450 1245934446 Oct 13 2005 formSubmit.htm
-rw-r--r-- 1 wscnet wscnet 0 Mar 11 13:18 .htaccess
drwxr-xr-x 2 wscnet wscnet 4096 Mar 13 10:46 images/
?--x--xrwT 22093 829048428 877015117 1129853029 Mar 9 1996 index.htm
Who is the user "2054632244"??--x-wSr-- 23083 2054632244 1249143400 1683050345 Sep 28 2022 cgi-bin
Is this an error when cpanel created the account or is this guy try to maliciously use my server?