We have found it on a Web Front End (Internet facing) that hasn't been updated since July 2019.
So I highly recommended scanning all of your systems regardless of Orion version. This was surprising to us since everyone is feeling safe on old versions.
************** UPDATE - FALSE POSITIVE