We have encountered a situation where our Kaltura Apache server has been infected by a bitcoin miner. We have blocked off the ip addresses it uses to download software. The problem is that now all of the connections get used up and we cannot identify what is consuming the connections. we have tried to script a process to release the connections when they all get used but that does not seem to help.
Any help with a resolution is greatly appreciated