News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

Suspicious Process Running due to my SMF forum

Started by humbleworld, September 24, 2016, 05:43:43 AM

Previous topic - Next topic

humbleworld

Please help me interpret what does this mean. The email message from the server VPS is below:


Time:    Sat Sep 24 11:58:22 2016 +0800 PID:      no here (Parent PID:no)Account: cpanel name
Uptime:  636 seconds
Executable:

/usr/bin/php


Command Line (often faked in exploits):

/usr/bin/php /home/cpanel/public_html/mysmfforum/index.php


Network connections by the process (if any):

tcp: 67.222.8.121:47348/ip no. -> ip no.
Files open by the process (if any):

/var/cpanel/locale/en.cdb


Memory maps by the process (if any):

00400000-00b72000 r-xp 00000000 08:03 52908339                           /usr/bin/php
00d72000-00e25000 r--p 00772000 08:03 52908339                           /usr/bin/php
00e25000-00e3c000 rw-p 00825000 08:03 52908339                           /usr/bin/php
00e3c000-00e60000 rw-p 00000000 00:00 0
01634000-01e93000 rw-p 00000000 00:00 0                                  [heap]7ff065ad9000-7ff06c000000 r--p 00000000 08:03 53097444                   /usr/lib/locale/locale-archive7ff06c000000-7ff06c021000 rw-p 00000000 00:00 07ff06c021000-7ff070000000 ---p 00000000 00:00 07ff072160000-7ff072368000 rw-p 00000000 00:00 07ff072391000-7ff072413000 rw-p 00000000 00:00 07ff072413000-7ff072448000 r--s 00000000 08:03 51997210                   /var/db/nscd/hosts7ff072448000-7ff072449000 ---p 00000000 00:00 07ff072449000-7ff072e49000 rwxp 00000000 00:00 07ff072e49000-7ff072e4f000 r-xp 00000000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff072e4f000-7ff07304f000 ---p 00006000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff07304f000-7ff073050000 r--p 00006000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff073050000-7ff073051000 rw-p 00007000 08:03 56800609                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so7ff073051000-7ff073108000 r-xp 00000000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff073108000-7ff073308000 ---p 000b7000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff073308000-7ff07330a000 r--p 000b7000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff07330a000-7ff07330d000 rw-p 000b9000 08:03 56800610                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so7ff07330d000-7ff073326000 r-xp 00000000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073326000-7ff073525000 ---p 00019000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073525000-7ff073528000 r--p 00018000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073528000-7ff073529000 rw-p 0001b000 08:03 56800608                   /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so7ff073529000-7ff073610000 r-xp 00000000 08:03 56231016                   /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so7ff073610000-7ff07370f000 ---p 000e7000 08:03 56231016                   /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so7ff07370f000-7ff07372c000 rw-p 000e6000 08:03 56231016                   /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so7ff07372c000-7ff073730000 rw-p 00000000 00:00 07ff073730000-7ff07388e000 r-xp 00000000 08:03 54420008                   /usr/local/IonCube/ioncube_loader_lin_5.4.so 7ff07388e000-7ff07398d000 ---p 0015e000 08:03 54420008                   /usr/local/IonCube/ioncube_loader_lin_5.4.so 7ff07398d000-7ff07399e000 rw-p 0015d000 08:03 54420008                   /usr/local/IonCube/ioncube_loader_lin_5.4.so 7ff07399e000-7ff0739a1000 rw-p 00000000 00:00 07ff0739a1000-7ff0739c2000 r-xp 00000000 08:03 54768086                   /usr/lib64/libselinux.so.17ff0739c2000-7ff073bc2000 ---p 00021000 08:03 54768086                   /usr/lib64/libselinux.so.17ff073bc2000-7ff073bc3000 r--p 00021000 08:03 54768086                   /usr/lib64/libselinux.so.17ff073bc3000-7ff073bc4000 rw-p 00022000 08:03 54768086                   /usr/lib64/libselinux.so.17ff073bc4000-7ff073bc6000 rw-p 00000000 00:00 07ff073bc6000-7ff073bc8000 r-xp 00000000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073bc8000-7ff073dc8000 ---p 00002000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073dc8000-7ff073dc9000 r--p 00002000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073dc9000-7ff073dca000 rw-p 00003000 08:03 54767693                   /usr/lib64/libXau.so.6.0.07ff073dca000-7ff073dcd000 r-xp 00000000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073dcd000-7ff073fcc000 ---p 00003000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073fcc000-7ff073fcd000 r--p 00002000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073fcd000-7ff073fce000 rw-p 00003000 08:03 54767910                   /usr/lib64/libkeyutils.so.1.57ff073fce000-7ff073fdb000 r-xp 00000000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff073fdb000-7ff0741db000 ---p 0000d000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff0741db000-7ff0741dc000 r--p 0000d000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff0741dc000-7ff0741dd000 rw-p 0000e000 08:03 54767926                   /usr/lib64/libkrb5support.so.0.17ff0741dd000-7ff0741fe000 r-xp 00000000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0741fe000-7ff0743fd000 ---p 00021000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0743fd000-7ff0743fe000 r--p 00020000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0743fe000-7ff0743ff000 rw-p 00021000 08:03 54768110                   /usr/lib64/libxcb.so.1.1.07ff0743ff000-7ff07441a000 r-xp 00000000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07441a000-7ff07461a000 ---p 0001b000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07461a000-7ff07461b000 r--p 0001b000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07461b000-7ff07461c000 rw-p 0001c000 08:03 54767746                   /usr/lib64/libaudit.so.1.0.07ff07461c000-7ff074626000 rw-p 00000000 00:00 07ff074626000-7ff07463c000 r-xp 00000000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07463c000-7ff07483c000 ---p 00016000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07483c000-7ff07483d000 r--p 00016000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07483d000-7ff07483e000 rw-p 00017000 08:03 54670083                   /usr/lib64/ libpthread-2.17.so/libpthread-2.17.so 7ff07483e000-7ff074842000 rw-p 00000000 00:00 07ff074842000-7ff074844000 r-xp 00000000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074844000-7ff074a43000 ---p 00002000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074a43000-7ff074a44000 r--p 00001000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074a44000-7ff074a45000 rw-p 00002000 08:03 54767731                   /usr/lib64/libfreebl3.so7ff074a45000-7ff074bfc000 r-xp 00000000 08:03 54667530                   /usr/lib64/ libc-2.17.so/libc-2.17.so 7ff074bfc000-7ff074dfc000 ---p 001b7000 08:03 54667530                   /usr/lib64/ libc-2.17.so/libc-2.17.so7ff074dfc000-7ff074e00000 r--p 001b7000 08:03 54667530                   /usr/lib64/libc-2.17.so/libc-2.17.so7ff074e00000-7ff074e02000 rw-p 001bb000 08:03 54667530                   /usr/lib64/libc-2.17.so/libc-2.17.so7ff074e02000-7ff074e07000 rw-p 00000000 00:00 07ff074e07000-7ff074e1c000 r-xp 00000000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff074e1c000-7ff07501b000 ---p 00015000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff07501b000-7ff07501c000 r--p 00014000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff07501c000-7ff07501d000 rw-p 00015000 08:03 54767796                   /usr/lib64/libgcc_s-4.8.5-20150702.so.17ff07501d000-7ff075041000 r-xp 00000000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075041000-7ff075240000 ---p 00024000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075240000-7ff075241000 r--p 00023000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075241000-7ff075242000 rw-p 00024000 08:03 54767902                   /usr/lib64/liblzma.so.5.0.997ff075242000-7ff0753fb000 r-xp 00000000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff0753fb000-7ff0755fb000 ---p 001b9000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff0755fb000-7ff075602000 r--p 001b9000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff075602000-7ff075605000 rw-p 001c0000 08:03 52882417                   /opt/xml2/lib/libxml2.so.2.9.27ff075605000-7ff075606000 rw-p 00000000 00:00 07ff075606000-7ff075612000 r-xp 00000000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075612000-7ff075812000 ---p 0000c000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075812000-7ff075813000 r--p 0000c000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075813000-7ff075814000 rw-p 0000d000 08:03 54767849                   /usr/lib64/libicuio.so.50.1.27ff075814000-7ff076be7000 r-xp 00000000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076be7000-7ff076de6000 ---p 013d3000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076de6000-7ff076de7000 r--p 013d2000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076de7000-7ff076de8000 rw-p 013d3000 08:03 54767842                   /usr/lib64/libicudata.so.50.1.27ff076de8000-7ff076f4c000 r-xp 00000000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff076f4c000-7ff07714c000 ---p 00164000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff07714c000-7ff07715c000 r--p 00164000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff07715c000-7ff07715d000 rw-p 00174000 08:03 54767864                   /usr/lib64/libicuuc.so.50.1.27ff07715d000-7ff077161000 rw-p 00000000 00:00 07ff077161000-7ff077351000 r-xp 00000000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff077351000-7ff077551000 ---p 001f0000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff077551000-7ff07755d000 r--p 001f0000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff07755d000-7ff07755f000 rw-p 001fc000 08:03 54767844                   /usr/lib64/libicui18n.so.50.1.27ff07755f000-7ff077560000 rw-p 00000000 00:00 07ff077560000-7ff077600000 r-xp 00000000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff077600000-7ff0777ff000 ---p 000a0000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff0777ff000-7ff077805000 r--p 0009f000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff077805000-7ff077806000 rw-p 000a5000 08:03 54767780                   /usr/lib64/libfreetype.so.6.10.07ff077806000-7ff077838000 r-xp 00000000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077838000-7ff077a37000 ---p 00032000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077a37000-7ff077a38000 r--p 00031000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077a38000-7ff077a39000 rw-p 00032000 08:03 54767866                   /usr/lib64/libidn.so.11.6.117ff077a39000-7ff077a96000 r-xp 00000000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077a96000-7ff077c96000 ---p 0005d000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077c96000-7ff077c98000 r--p 0005d000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077c98000-7ff077c99000 rw-p 0005f000 08:03 52880337                   /opt/curlssl/lib/libcurl.so.4.3.07ff077c99000-7ff077c9c000 r-xp 00000000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077c9c000-7ff077e9b000 ---p 00003000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077e9b000-7ff077e9c000 r--p 00002000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077e9c000-7ff077e9d000 rw-p 00003000 08:03 54767751                   /usr/lib64/libcom_err.so.2.17ff077e9d000-7ff077ecc000 r-xp 00000000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff077ecc000-7ff0780cb000 ---p 0002f000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff0780cb000-7ff0780cd000 r--p 0002e000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff0780cd000-7ff0780ce000 rw-p 00030000 08:03 54767901                   /usr/lib64/libk5crypto.so.3.17ff0780ce000-7ff0780cf000 rw-p 00000000 00:00 07ff0780cf000-7ff0781a4000 r-xp 00000000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0781a4000-7ff0783a4000 ---p 000d5000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0783a4000-7ff0783b1000 r--p 000d5000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0783b1000-7ff0783b4000 rw-p 000e2000 08:03 54767924                   /usr/lib64/libkrb5.so.3.37ff0783b4000-7ff0783fd000 r-xp 00000000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff0783fd000-7ff0785fd000 ---p 00049000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff0785fd000-7ff0785fe000 r--p 00049000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff0785fe000-7ff078600000 rw-p 0004a000 08:03 54767787                   /usr/lib64/libgssapi_krb5.so.2.27ff078600000-7ff078616000 r-xp 00000000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078616000-7ff078815000 ---p 00016000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078815000-7ff078816000 r--p 00015000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078816000-7ff078817000 rw-p 00016000 08:03 54667593                   /usr/lib64/libnsl-2.17.so/libnsl-2.17.so7ff078817000-7ff078819000 rw-p 00000000 00:00 07ff078819000-7ff07881c000 r-xp 00000000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff07881c000-7ff078a1b000 ---p 00003000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff078a1b000-7ff078a1c000 r--p 00002000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff078a1c000-7ff078a1d000 rw-p 00003000 08:03 54667558                   /usr/lib64/libdl-2.17.so/libdl-2.17.so7ff078a1d000-7ff078b1e000 r-xp 00000000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078b1e000-7ff078d1d000 ---p 00101000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078d1d000-7ff078d1e000 r--p 00100000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078d1e000-7ff078d1f000 rw-p 00101000 08:03 54667575                   /usr/lib64/libm-2.17.so/libm-2.17.so7ff078d1f000-7ff078d26000 r-xp 00000000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078d26000-7ff078f25000 ---p 00007000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078f25000-7ff078f26000 r--p 00006000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078f26000-7ff078f27000 rw-p 00007000 08:03 54670119                   /usr/lib64/librt-2.17.so/librt-2.17.so7ff078f27000-7ff078f68000 r-xp 00000000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff078f68000-7ff079168000 ---p 00041000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff079168000-7ff079169000 r--p 00041000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff079169000-7ff07916a000 rw-p 00042000 08:03 52880734                   /opt/pcre/lib/libpcre.so.1.2.67ff07916a000-7ff079179000 r-xp 00000000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff079179000-7ff079378000 ---p 0000f000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff079378000-7ff079379000 r--p 0000e000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff079379000-7ff07937a000 rw-p 0000f000 08:03 54767771                   /usr/lib64/libbz2.so.1.0.67ff07937a000-7ff0793bd000 r-xp 00000000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0793bd000-7ff0795bd000 ---p 00043000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0795bd000-7ff0795be000 r--p 00043000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0795be000-7ff0795bf000 rw-p 00044000 08:03 54767892                   /usr/lib64/libjpeg.so.62.1.07ff0795bf000-7ff0795cf000 rw-p 00000000 00:00 07ff0795cf000-7ff0795e4000 r-xp 00000000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0795e4000-7ff0797e3000 ---p 00015000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0797e3000-7ff0797e4000 r--p 00014000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0797e4000-7ff0797e5000 rw-p 00015000 08:03 54767944                   /usr/lib64/libz.so.1.2.77ff0797e5000-7ff07980e000 r-xp 00000000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff07980e000-7ff079a0e000 ---p 00029000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff079a0e000-7ff079a0f000 r--p 00029000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff079a0f000-7ff079a10000 rw-p 0002a000 08:03 54768023                   /usr/lib64/libpng15.so.15.13.07ff079a10000-7ff079a21000 r-xp 00000000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079a21000-7ff079c20000 ---p 00011000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079c20000-7ff079c21000 r--p 00010000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079c21000-7ff079c22000 rw-p 00011000 08:03 54767709                   /usr/lib64/libXpm.so.4.11.07ff079c22000-7ff079d5a000 r-xp 00000000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079d5a000-7ff079f5a000 ---p 00138000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079f5a000-7ff079f5b000 r--p 00138000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079f5b000-7ff079f60000 rw-p 00139000 08:03 54767691                   /usr/lib64/libX11.so.6.3.07ff079f60000-7ff079f6d000 r-xp 00000000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff079f6d000-7ff07a16d000 ---p 0000d000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff07a16d000-7ff07a16e000 r--p 0000d000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff07a16e000-7ff07a16f000 rw-p 0000e000 08:03 54767966                   /usr/lib64/libpam.so.0.83.17ff07a16f000-7ff07a1d2000 r-xp 00000000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a1d2000-7ff07a3d1000 ---p 00063000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a3d1000-7ff07a3d5000 r--p 00062000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a3d5000-7ff07a3dc000 rw-p 00066000 08:03 54767992                   /usr/lib64/libssl.so.1.0.1e7ff07a3dc000-7ff07a59a000 r-xp 00000000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a59a000-7ff07a79a000 ---p 001be000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a79a000-7ff07a7b4000 r--p 001be000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a7b4000-7ff07a7c0000 rw-p 001d8000 08:03 54767674                   /usr/lib64/libcrypto.so.1.0.1e7ff07a7c0000-7ff07a7c4000 rw-p 00000000 00:00 07ff07a7c4000-7ff07a8ad000 r-xp 00000000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07a8ad000-7ff07aaad000 ---p 000e9000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07aaad000-7ff07aab5000 r--p 000e9000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07aab5000-7ff07aab7000 rw-p 000f1000 08:03 54768095                   /usr/lib64/libstdc++.so.6.0.197ff07aab7000-7ff07aacc000 rw-p 00000000 00:00 07ff07aacc000-7ff07aad5000 r-xp 00000000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07aad5000-7ff07acd4000 ---p 00009000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07acd4000-7ff07acd5000 r--p 00008000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07acd5000-7ff07acd6000 rw-p 00009000 08:03 54767832                   /usr/lib64/libltdl.so.7.3.07ff07acd6000-7ff07ad0f000 r-xp 00000000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07ad0f000-7ff07af0e000 ---p 00039000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07af0e000-7ff07af10000 r--p 00038000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07af10000-7ff07af12000 rw-p 0003a000 08:03 52880705                   /opt/libmcrypt/lib/libmcrypt.so.4.4.87ff07af12000-7ff07af18000 rw-p 00000000 00:00 07ff07af18000-7ff07b1f7000 r-xp 00000000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b1f7000-7ff07b3f7000 ---p 002df000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b3f7000-7ff07b3fc000 r--p 002df000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b3fc000-7ff07b47b000 rw-p 002e4000 08:03 54663163                   /usr/lib64/libmysqlclient.so.18.0.07ff07b47b000-7ff07b480000 rw-p 00000000 00:00 07ff07b480000-7ff07b496000 r-xp 00000000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b496000-7ff07b696000 ---p 00016000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b696000-7ff07b697000 r--p 00016000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b697000-7ff07b698000 rw-p 00017000 08:03 54670100                   /usr/lib64/libresolv-2.17.so/libresolv-2.17.so7ff07b698000-7ff07b69a000 rw-p 00000000 00:00 07ff07b69a000-7ff07b6a2000 r-xp 00000000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b6a2000-7ff07b8a1000 ---p 00008000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b8a1000-7ff07b8a2000 r--p 00007000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b8a2000-7ff07b8a3000 rw-p 00008000 08:03 54667541                   /usr/lib64/libcrypt-2.17.so/libcrypt-2.17.so7ff07b8a3000-7ff07b8d1000 rw-p 00000000 00:00 07ff07b8d1000-7ff07b8f2000 r-xp 00000000 08:03 54666114                   /usr/lib64/ld-2.17.so/ld-2.17.so7ff07b915000-7ff07b94a000 r--s 00000000 08:03 51997280                   /var/db/nscd/services7ff07b94a000-7ff07baf2000 rw-p 00000000 00:00 07ff07baf2000-7ff07baf3000 r--p 00021000 08:03 54666114                   /usr/lib64/ld-2.17.so/ld-2.17.so7ff07baf3000-7ff07baf4000 rw-p 00022000 08:03 54666114                   /usr/lib64/ld-2.17.so/ld-2.17.so7ff07baf4000-7ff07baf5000 rw-p 00000000 00:00 07fff3aa02000-7fff3aa16000 rwxp 00000000 00:00 0                          [stack]7fff3aa16000-7fff3aa17000 rw-p 00000000 00:00 07fff3aa27000-7fff3aa29000 r-xp 00000000 00:00 0                          [vdso]

https://ssl.gstatic.com/ui/v1/icons/mail/images/cleardot.gif




ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]

[edit]formatting removed to improve readability -Illori
[edit] further editing to add code tags  -Kindred

Arantor

Holder of controversial views, all of which my own.



Arantor

Then it's completely expected.

Unlike Apache, where PHP runs as a module, Nginx doesn't run PHP as a module, it pushes out to a separate PHP process to do it. In other words: every time someone goes to your forum, the PHP interpreter has to run to interpret the PHP code to serve a forum page.
Holder of controversial views, all of which my own.


LiroyvH

This is a message from the CSF firewall, it warns about any process running longer than x seconds.
You ought to whitelist processes you trust, or if it's a managed server: complain to the company managing it that you're getting these false positives.
((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

humbleworld

Thank you, Arantor and CoreISP. Much Appreciated.

Advertisement: