Suspicious message caused by class_xml.php
 

Hi,

During the past few days our web server response time has been deteriorating. We are running vBulletin 3.7.1 and I've been working with the technicians at our host and they suggested a memory upgrade from 2GB to 4GB. With 2GB, quite a bit of memory was being written to the swap file, but after upgrading to 4GB, response time hasn't improved.

The technician continued to investigate and pointed out a message that frequently appears in the message.log file:

Quote:
May 3 11:25:28 nv01 suhosin[22771]: ALERT - script tried to increase memory_limit to 134217728 bytes which is above the allowed value (attacker '190.137.236.205', file '/usr/local/apache/nvnews.net/html/vbulletin/includes/class_xml.php', line 37)

The attacker '190.137.236.205' part of the message looks suspicious to me. Any idea if that is a legitimate message being generated?

Thanks.