Suspicious process running under user php-fm

[ksgalicia]

Hello! I have a problem. I am receiving many notices from the CSF and the user's website is saturated ... Solution?

Executable:

/opt/cpanel/ea-php74/root/usr/sbin/php-fpm

Command Line (often faked in exploits):

php-fpm: pool domain_es

Network connections by the process (if any):

tcp6: 0:0:0:0:0:0:0:1:50484 -> 2a00:1450:4003:800:0:0:0:200e:443

Thanks!

 

[cPRex]

Hey there! Are these the "excessive resource usage" notifications? If so, and you are also seeing slowness on the site, you may want to ensure the website is not experiencing an attack of some sort. We have a guide on how to perform that work here:

How can I tell if Apache is experiencing a DDoS attack?

Question How can I tell if Apache is experiencing a DDoS (Distributed Denial-of-Service) attack? Answer If Apache is experiencing a DDoS attack, you may notice that your server's Web sites are ti...

support.cpanel.net

and a guide on how to setup protection from that here:

How to Protect Server from an DDOS Attack ?

Hello , I am facing an DDOS Attack from 3 days. DataCenter also not helping me. I asked them how much GBPS attack is going on right now? They said 10-15-20GBPS attack is going on. Is there any way to protect my dedicated server from 10-15gbps ddos attack ?

forums.cpanel.net

Can you check and see if that is what is happening with your system?