I have noticed that my server which has generally been very well behaved has started to consume a large amount of resources. When running top I periodically see php jump up and take over 100% of the CPU and a significant chunk of memory. Running a
ps aux|grep php shows the following
root 2016 0.1 1.0 395828 19252 ? S Aug02 1:19 php /var/www/html/admin/modules/firewall/hooks/voipfirewalld asterisk 18021 0.1 2.2 417340 42436 ? Ss 09:44 0:11 php /var/www/html/admin/modules/restapps/restapps.php asterisk 30041 1.4 0.8 390748 16216 ? S 11:22 0:00 php /var/www/html/admin/modules/dashboard/classes/../netmon.php root 30336 0.0 0.0 112708 956 pts/1 S+ 11:23 0:00 grep --color=auto php
My dashboard is telling me that I have new interfaces detected (I don’t) , that i have 18 bad IVR destinations (which all work).
I’m running FreePBX 184.108.40.206 ‘VoIP Server’ and am up to date on all my modules.
Everything is currently working but I don’t have faith that it will continue. Why is PHP thrashing so hard? I feel like i have been hacked and people are running their own scripts, but i cannot find any trace of that.
We have 2Gb of ram. Just to add, the GUI has become incredibly slow and i have a hard time getting anything done there due to lag. Its located next to me so not a network issue