Suspicious Process Running due to my SMF forum

Started by humbleworld, September 24, 2016, 05:43:43 AM

Previous topic - Next topic

humbleworld

Please help me interpret what does this mean. The email message from the server VPS is below:


Time:    Sat Sep 24 11:58:22 2016 +0800 PID:      no here (Parent PID:no)Account: cpanel name
Uptime:  636 seconds
Executable:

/usr/bin/php


Command Line (often faked in exploits):

/usr/bin/php /home/cpanel/public_html/mysmfforum/index.php


Network connections by the process (if any):

tcp: 67.222.8.121:47348/ip no. -> ip no.
Files open by the process (if any):

/var/cpanel/locale/en.cdb


Memory maps by the process (if any):

00400000-00b72000 r-xp 00000000 08:03 52908339                           /usr/bin/php
00d72000-00e25000 r--p 00772000 08:03 52908339                           /usr/bin/php
00e25000-00e3c000 rw-p 00825000 08:03 52908339                           /usr/bin/php
00e3c000-00e60000 rw-p 00000000 00:00 0
01634000-01e93000 rw-p 00000000 00:00 0                                  [heap]7ff065ad9000-7ff06c000000 r--p 00000000 08:03 53097444                   /usr/lib/locale/locale-archive7ff06c000000-7ff06c021000 rw-p 00000000 00:00 07ff06c021000-7ff070000000 ---p 00000000 00:00 07ff072160000-7ff072368000 rw-p 00000000 00:00 07ff072391000-7ff072413000 rw-p 00000000 00:00 07ff072413000-7ff072448000 r--s 00000000 08:03 51997210                   /var/db/nscd/hosts7ff072448000-7ff072449000 ---p 00000000 00:00 07ff072449000-7ff072e49000 rwxp 00000000 00:00 07ff072e49000-7ff072e4f000 r-xp 00000000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff072e4f000-7ff07304f000 ---p 00006000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff07304f000-7ff073050000 r--p 00006000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff073050000-7ff073051000 rw-p 00007000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff073051000-7ff073108000 r-xp 00000000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff073108000-7ff073308000 ---p 000b7000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff073308000-7ff07330a000 r--p 000b7000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff07330a000-7ff07330d000 rw-p 000b9000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff07330d000-7ff073326000 r-xp 00000000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073326000-7ff073525000 ---p 00019000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073525000-7ff073528000 r--p 00018000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073528000-7ff073529000 rw-p 0001b000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073529000-7ff073610000 r-xp 00000000 08:03 56231016                   /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so7ff073610000-7ff07370f000 ---p 000e7000 08:03 56231016                   /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so7ff07370f000-7ff07372c000 rw-p 000e6000 08:03 56231016                   /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so7ff07372c000-7ff073730000 rw-p 00000000 00:00 07ff073730000-7ff07388e000 r-xp 00000000 08:03 54420008                   /usr/local/IonCube/ioncube_loader_lin_5.4.so 7ff07388e000-7ff07398d000 ---p 0015e000 08:03 54420008                   /usr/local/IonCube/ioncube_loader_lin_5.4.so 7ff07398d000-7ff07399e000 rw-p 0015d000 08:03 54420008                   /usr/local/IonCube/ioncube_loader_lin_5.4.so 7ff07399e000-7ff0739a1000 rw-p 00000000 00:00 07ff0739a1000-7ff0739c2000 r-xp 00000000 08:03 54768086                   /usr/lib64/libselinux.so.17ff0739c2000-7ff073bc2000 ---p 00021000 08:03 54768086                   /usr/lib64/libselinux.so.17ff073bc2000-7ff073bc3000 r--p 00021000 08:03 54768086                   /usr/lib64/libselinux.so.17ff073bc3000-7ff073bc4000 rw-p 00022000 08:03 54768086                   /usr/lib64/libselinux.so.17ff073bc4000-7ff073bc6000 rw-p 00000000 00:00 07ff073bc6000-7ff073bc8000 r-xp 00000000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073bc8000-7ff073dc8000 ---p 00002000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073dc8000-7ff073dc9000 r--p 00002000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073dc9000-7ff073dca000 rw-p 00003000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073dca000-7ff073dcd000 r-xp 00000000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073dcd000-7ff073fcc000 ---p 00003000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073fcc000-7ff073fcd000 r--p 00002000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073fcd000-7ff073fce000 rw-p 00003000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073fce000-7ff073fdb000 r-xp 00000000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff073fdb000-7ff0741db000 ---p 0000d000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff0741db000-7ff0741dc000 r--p 0000d000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff0741dc000-7ff0741dd000 rw-p 0000e000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff0741dd000-7ff0741fe000 r-xp 00000000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0741fe000-7ff0743fd000 ---p 00021000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0743fd000-7ff0743fe000 r--p 00020000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0743fe000-7ff0743ff000 rw-p 00021000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0743ff000-7ff07441a000 r-xp 00000000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07441a000-7ff07461a000 ---p 0001b000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07461a000-7ff07461b000 r--p 0001b000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07461b000-7ff07461c000 rw-p 0001c000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07461c000-7ff074626000 rw-p 00000000 00:00 07ff074626000-7ff07463c000 r-xp 00000000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07463c000-7ff07483c000 ---p 00016000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07483c000-7ff07483d000 r--p 00016000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07483d000-7ff07483e000 rw-p 00017000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07483e000-7ff074842000 rw-p 00000000 00:00 07ff074842000-7ff074844000 r-xp 00000000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074844000-7ff074a43000 ---p 00002000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074a43000-7ff074a44000 r--p 00001000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074a44000-7ff074a45000 rw-p 00002000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074a45000-7ff074bfc000 r-xp 00000000 08:03 54667530                   /usr/lib64/ libc-2.17.so/libc-2.17.so 7ff074bfc000-7ff074dfc000 ---p 001b7000 08:03 54667530                   /usr/lib64/ libc-2.17.so/libc-2.17.so7ff074dfc000-7ff074e00000 r--p 001b7000 08:03 54667530                   /usr/lib64/libc-2.17.so/libc-2.17.so7ff074e00000-7ff074e02000 rw-p 001bb000 08:03 54667530                   /usr/lib64/libc-2.17.so/libc-2.17.so7ff074e02000-7ff074e07000 rw-p 00000000 00:00 07ff074e07000-7ff074e1c000 r-xp 00000000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff074e1c000-7ff07501b000 ---p 00015000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff07501b000-7ff07501c000 r--p 00014000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff07501c000-7ff07501d000 rw-p 00015000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff07501d000-7ff075041000 r-xp 00000000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075041000-7ff075240000 ---p 00024000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075240000-7ff075241000 r--p 00023000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075241000-7ff075242000 rw-p 00024000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075242000-7ff0753fb000 r-xp 00000000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff0753fb000-7ff0755fb000 ---p 001b9000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff0755fb000-7ff075602000 r--p 001b9000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff075602000-7ff075605000 rw-p 001c0000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff075605000-7ff075606000 rw-p 00000000 00:00 07ff075606000-7ff075612000 r-xp 00000000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075612000-7ff075812000 ---p 0000c000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075812000-7ff075813000 r--p 0000c000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075813000-7ff075814000 rw-p 0000d000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075814000-7ff076be7000 r-xp 00000000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076be7000-7ff076de6000 ---p 013d3000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076de6000-7ff076de7000 r--p 013d2000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076de7000-7ff076de8000 rw-p 013d3000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076de8000-7ff076f4c000 r-xp 00000000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff076f4c000-7ff07714c000 ---p 00164000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff07714c000-7ff07715c000 r--p 00164000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff07715c000-7ff07715d000 rw-p 00174000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff07715d000-7ff077161000 rw-p 00000000 00:00 07ff077161000-7ff077351000 r-xp 00000000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff077351000-7ff077551000 ---p 001f0000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff077551000-7ff07755d000 r--p 001f0000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff07755d000-7ff07755f000 rw-p 001fc000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff07755f000-7ff077560000 rw-p 00000000 00:00 07ff077560000-7ff077600000 r-xp 00000000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff077600000-7ff0777ff000 ---p 000a0000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff0777ff000-7ff077805000 r--p 0009f000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff077805000-7ff077806000 rw-p 000a5000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff077806000-7ff077838000 r-xp 00000000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077838000-7ff077a37000 ---p 00032000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077a37000-7ff077a38000 r--p 00031000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077a38000-7ff077a39000 rw-p 00032000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077a39000-7ff077a96000 r-xp 00000000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077a96000-7ff077c96000 ---p 0005d000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077c96000-7ff077c98000 r--p 0005d000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077c98000-7ff077c99000 rw-p 0005f000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077c99000-7ff077c9c000 r-xp 00000000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077c9c000-7ff077e9b000 ---p 00003000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077e9b000-7ff077e9c000 r--p 00002000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077e9c000-7ff077e9d000 rw-p 00003000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077e9d000-7ff077ecc000 r-xp 00000000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff077ecc000-7ff0780cb000 ---p 0002f000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff0780cb000-7ff0780cd000 r--p 0002e000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff0780cd000-7ff0780ce000 rw-p 00030000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff0780ce000-7ff0780cf000 rw-p 00000000 00:00 07ff0780cf000-7ff0781a4000 r-xp 00000000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0781a4000-7ff0783a4000 ---p 000d5000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0783a4000-7ff0783b1000 r--p 000d5000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0783b1000-7ff0783b4000 rw-p 000e2000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0783b4000-7ff0783fd000 r-xp 00000000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff0783fd000-7ff0785fd000 ---p 00049000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff0785fd000-7ff0785fe000 r--p 00049000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff0785fe000-7ff078600000 rw-p 0004a000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff078600000-7ff078616000 r-xp 00000000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078616000-7ff078815000 ---p 00016000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078815000-7ff078816000 r--p 00015000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078816000-7ff078817000 rw-p 00016000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078817000-7ff078819000 rw-p 00000000 00:00 07ff078819000-7ff07881c000 r-xp 00000000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff07881c000-7ff078a1b000 ---p 00003000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff078a1b000-7ff078a1c000 r--p 00002000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff078a1c000-7ff078a1d000 rw-p 00003000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff078a1d000-7ff078b1e000 r-xp 00000000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078b1e000-7ff078d1d000 ---p 00101000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078d1d000-7ff078d1e000 r--p 00100000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078d1e000-7ff078d1f000 rw-p 00101000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078d1f000-7ff078d26000 r-xp 00000000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078d26000-7ff078f25000 ---p 00007000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078f25000-7ff078f26000 r--p 00006000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078f26000-7ff078f27000 rw-p 00007000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078f27000-7ff078f68000 r-xp 00000000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff078f68000-7ff079168000 ---p 00041000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff079168000-7ff079169000 r--p 00041000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff079169000-7ff07916a000 rw-p 00042000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff07916a000-7ff079179000 r-xp 00000000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff079179000-7ff079378000 ---p 0000f000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff079378000-7ff079379000 r--p 0000e000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff079379000-7ff07937a000 rw-p 0000f000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff07937a000-7ff0793bd000 r-xp 00000000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0793bd000-7ff0795bd000 ---p 00043000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0795bd000-7ff0795be000 r--p 00043000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0795be000-7ff0795bf000 rw-p 00044000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0795bf000-7ff0795cf000 rw-p 00000000 00:00 07ff0795cf000-7ff0795e4000 r-xp 00000000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0795e4000-7ff0797e3000 ---p 00015000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0797e3000-7ff0797e4000 r--p 00014000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0797e4000-7ff0797e5000 rw-p 00015000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0797e5000-7ff07980e000 r-xp 00000000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff07980e000-7ff079a0e000 ---p 00029000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff079a0e000-7ff079a0f000 r--p 00029000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff079a0f000-7ff079a10000 rw-p 0002a000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff079a10000-7ff079a21000 r-xp 00000000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079a21000-7ff079c20000 ---p 00011000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079c20000-7ff079c21000 r--p 00010000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079c21000-7ff079c22000 rw-p 00011000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079c22000-7ff079d5a000 r-xp 00000000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079d5a000-7ff079f5a000 ---p 00138000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079f5a000-7ff079f5b000 r--p 00138000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079f5b000-7ff079f60000 rw-p 00139000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079f60000-7ff079f6d000 r-xp 00000000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff079f6d000-7ff07a16d000 ---p 0000d000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff07a16d000-7ff07a16e000 r--p 0000d000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff07a16e000-7ff07a16f000 rw-p 0000e000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff07a16f000-7ff07a1d2000 r-xp 00000000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a1d2000-7ff07a3d1000 ---p 00063000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a3d1000-7ff07a3d5000 r--p 00062000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a3d5000-7ff07a3dc000 rw-p 00066000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a3dc000-7ff07a59a000 r-xp 00000000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a59a000-7ff07a79a000 ---p 001be000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a79a000-7ff07a7b4000 r--p 001be000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a7b4000-7ff07a7c0000 rw-p 001d8000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a7c0000-7ff07a7c4000 rw-p 00000000 00:00 07ff07a7c4000-7ff07a8ad000 r-xp 00000000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07a8ad000-7ff07aaad000 ---p 000e9000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07aaad000-7ff07aab5000 r--p 000e9000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07aab5000-7ff07aab7000 rw-p 000f1000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07aab7000-7ff07aacc000 rw-p 00000000 00:00 07ff07aacc000-7ff07aad5000 r-xp 00000000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07aad5000-7ff07acd4000 ---p 00009000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07acd4000-7ff07acd5000 r--p 00008000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07acd5000-7ff07acd6000 rw-p 00009000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07acd6000-7ff07ad0f000 r-xp 00000000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07ad0f000-7ff07af0e000 ---p 00039000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07af0e000-7ff07af10000 r--p 00038000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07af10000-7ff07af12000 rw-p 0003a000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07af12000-7ff07af18000 rw-p 00000000 00:00 07ff07af18000-7ff07b1f7000 r-xp 00000000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b1f7000-7ff07b3f7000 ---p 002df000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b3f7000-7ff07b3fc000 r--p 002df000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b3fc000-7ff07b47b000 rw-p 002e4000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b47b000-7ff07b480000 rw-p 00000000 00:00 07ff07b480000-7ff07b496000 r-xp 00000000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b496000-7ff07b696000 ---p 00016000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b696000-7ff07b697000 r--p 00016000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b697000-7ff07b698000 rw-p 00017000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b698000-7ff07b69a000 rw-p 00000000 00:00 07ff07b69a000-7ff07b6a2000 r-xp 00000000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b6a2000-7ff07b8a1000 ---p 00008000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b8a1000-7ff07b8a2000 r--p 00007000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b8a2000-7ff07b8a3000 rw-p 00008000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b8a3000-7ff07b8d1000 rw-p 00000000 00:00 07ff07b8d1000-7ff07b8f2000 r-xp 00000000 08:03 54666114                   /usr/lib64/ld-2.17.so/ld-2.17.so7ff07b915000-7ff07b94a000 r--s 00000000 08:03 51997280                   /var/db/nscd/services7ff07b94a000-7ff07baf2000 rw-p 00000000 00:00 07ff07baf2000-7ff07baf3000 r--p 00021000 08:03 54666114                   /usr/lib64/ld-2.17.so/ld-2.17.so7ff07baf3000-7ff07baf4000 rw-p 00022000 08:03 54666114                   /usr/lib64/ld-2.17.so/ld-2.17.so7ff07baf4000-7ff07baf5000 rw-p 00000000 00:00 07fff3aa02000-7fff3aa16000 rwxp 00000000 00:00 0                          [stack]7fff3aa16000-7fff3aa17000 rw-p 00000000 00:00 07fff3aa27000-7fff3aa29000 r-xp 00000000 00:00 0                          [vdso]

https://ssl.gstatic.com/ui/v1/icons/mail/images/cleardot.gif




ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]

[edit]formatting removed to improve readability -Illori
[edit] further editing to add code tags  -Kindred

Arantor



Arantor

Then it's completely expected.

Unlike Apache, where PHP runs as a module, Nginx doesn't run PHP as a module, it pushes out to a separate PHP process to do it. In other words: every time someone goes to your forum, the PHP interpreter has to run to interpret the PHP code to serve a forum page.

LiroyvH

This is a message from the CSF firewall, it warns about any process running longer than x seconds.
You ought to whitelist processes you trust, or if it's a managed server: complain to the company managing it that you're getting these false positives.
((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

humbleworld

Thank you, Arantor and CoreISP. Much Appreciated.

Advertisement: