Warning: Network TCP port is being used by /usr/sbin/php5-fpm. Possible rootkit

1 · Josh Sherman · Feb. 10, 2014, midnight
Imagine my surprise to see this warning during my morning review of the rootkit checkers that run nightly on my boxes. The thing is, there were no other anomalies on the box aside from /usr/sbin/php5-fpm being bound to a port that was suspected of belonging to a rootkit. The fact......