• Hello,

    A WordPress installation has been hacked on https://heroleads.com/thailand/

    The website is responding very slow, I already installed Wordfence which show no errors at all when I go through the error log I notice this error.

    I googled this issue but could not reach the root cause of the issue

    Oct 23 06:59:35 leadhero lfd[43444]: *Exceeded LOCALRELAY limit* from nfp (101 in the last hour)
    Oct 23 06:59:40 leadhero lfd[43477]: *Suspicious Process* PID:42806 PPID:35870 User:herolead Uptime:74 secs EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/index.php
    Oct 23 06:59:40 leadhero lfd[43477]: *User Processing* PID:43165 Kill:0 User:herolead VM:261(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/admin-ajax.php
    Oct 23 06:59:40 leadhero lfd[43477]: *User Processing* PID:43044 Kill:0 User:herolead VM:277(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/admin-ajax.php
    Oct 23 06:59:40 leadhero lfd[43477]: *User Processing* PID:43330 Kill:0 User:herolead VM:250(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/index.php
    Oct 23 07:00:40 leadhero lfd[43850]: *Suspicious Process* PID:43157 PPID:42787 User:herolead Uptime:74 secs EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/index.php
    Oct 23 07:00:40 leadhero lfd[43850]: *User Processing* PID:43812 Kill:0 User:herolead VM:247(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/index.php
    Oct 23 07:00:41 leadhero lfd[43850]: *User Processing* PID:43670 Kill:0 User:herolead VM:274(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/index.php
    Oct 23 07:01:40 leadhero lfd[44182]: *Suspicious Process* PID:43778 PPID:42599 User:herolead Uptime:74 secs EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/index.php
    Oct 23 07:01:41 leadhero lfd[44182]: *User Processing* PID:44106 Kill:0 User:herolead VM:261(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/update-core.php
    Oct 23 07:01:41 leadhero lfd[44182]: *User Processing* PID:44109 Kill:0 User:herolead VM:261(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/admin-ajax.php
    Oct 23 07:01:41 leadhero lfd[44182]: *User Processing* PID:44115 Kill:0 User:herolead VM:261(MB) EXE:/usr/bin/php CMD:/usr/bin/php /home/herolead/public_html/thailand/wp-admin/admin-ajax.php

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘Hacked website is slow’ is closed to new replies.