Hi
If I enable PT_USERKILL how can I add some users to ignore list? Not to kill their processes?
Thanks
Kill process
Re: Kill process
add the user to the CSF.PIGNORE
Re: Kill process
Hi
will then this user be ignored for everything else, like brute force cpanel and such?
Thanks
will then this user be ignored for everything else, like brute force cpanel and such?
Thanks
Re: Kill process
Yes, you will be ignoring everything on that user.
If you only want to ingnore one process, you can do it there as well. So, instead of adding the user add the process that you don't want to block. On the email that you have received, there will be a line saying what process it is.
If you only want to ingnore one process, you can do it there as well. So, instead of adding the user add the process that you don't want to block. On the email that you have received, there will be a line saying what process it is.
Re: Kill process
I get mail like this:
Time: Mon Mar 24 03:02:09 2014 +0100
PID: 14288 (Parent PID:27765)
Account: site
Uptime: 228 seconds
Executable:
/usr/bin/php
Command Line (often faked in exploits):
/usr/bin/php
Network connections by the process (if any):
tcp: 195.2.13.89:41981 -> 54.245.150.9:443
so I should ignore: /usr/bin/php ?
thanks
Time: Mon Mar 24 03:02:09 2014 +0100
PID: 14288 (Parent PID:27765)
Account: site
Uptime: 228 seconds
Executable:
/usr/bin/php
Command Line (often faked in exploits):
/usr/bin/php
Network connections by the process (if any):
tcp: 195.2.13.89:41981 -> 54.245.150.9:443
so I should ignore: /usr/bin/php ?
thanks
Re: Kill process
I wouldn't do that as any process using /usr/bin/php will be ignored.
Usually, on the message it comes something like this:
so, you can add the "/home/address/to/the/script" instead.
But before adding any process to be ignored, be completely sure that is a good process, In my servers I never ignore any script that sends something to another server that is not mine, like this:
Network connections by the process (if any):
tcp: 195.2.13.89:41981 -> 54.245.150.9:443
is that allow in your script?
Usually, on the message it comes something like this:
Code: Select all
Command Line (often faked in exploits):
/usr/bin/php /home/address/to/the/script
But before adding any process to be ignored, be completely sure that is a good process, In my servers I never ignore any script that sends something to another server that is not mine, like this:
Network connections by the process (if any):
tcp: 195.2.13.89:41981 -> 54.245.150.9:443
is that allow in your script?
Re: Kill process
Hi
This is whole mail:
Time: Mon Mar 24 03:02:09 2014 +0100
PID: 14288 (Parent PID:27765)
Account: site
Uptime: 228 seconds
Executable:
/usr/bin/php
Command Line (often faked in exploits):
/usr/bin/php
Network connections by the process (if any):
tcp: 195.2.13.89:41981 -> 54.245.150.9:443
Files open by the process (if any):
/usr/local/apache/logs/error_log
/usr/local/apache/logs/error_log
/home/site/public_html/wp-content/uploads/backwpup-959b55-temp/backwpup_959b55_2014-03-24_03-00-20.tar.gz
Memory maps by the process (if any):
00400000-00b46000 r-xp 00000000 fc:01 39849763 /usr/bin/php
00d45000-00e0e000 rw-p 00745000 fc:01 39849763 /usr/bin/php
00e0e000-00e32000 rw-p 00000000 00:00 0
026a7000-0701d000 rw-p 00000000 00:00 0 [heap]
3138200000-3138209000 r-xp 00000000 fc:01 39850741 /usr/lib64/libltdl.so.7.2.1
3138209000-3138408000 ---p 00009000 fc:01 39850741 /usr/lib64/libltdl.so.7.2.1
3138408000-3138409000 rw-p 00008000 fc:01 39850741 /usr/lib64/libltdl.so.7.2.1
3252e00000-3252e07000 r-xp 00000000 fc:01 44040230 /lib64/librt-2.12.so
3252e07000-3253006000 ---p 00007000 fc:01 44040230 /lib64/librt-2.12.so
3253006000-3253007000 r--p 00006000 fc:01 44040230 /lib64/librt-2.12.so
3253007000-3253008000 rw-p 00007000 fc:01 44040230 /lib64/librt-2.12.so
3253200000-3253225000 r-xp 00000000 fc:01 39850736 /usr/lib64/libpng12.so.0.49.0
3253225000-3253425000 ---p 00025000 fc:01 39850736 /usr/lib64/libpng12.so.0.49.0
3253425000-3253426000 rw-p 00025000 fc:01 39850736 /usr/lib64/libpng12.so.0.49.0
3253600000-3253626000 r-xp 00000000 fc:01 44040234 /lib64/libexpat.so.1.5.2
3253626000-3253825000 ---p 00026000 fc:01 44040234 /lib64/libexpat.so.1.5.2
3253825000-3253828000 rw-p 00025000 fc:01 44040234 /lib64/libexpat.so.1.5.2
3253a00000-3253a10000 r-xp 00000000 fc:01 44040232 /lib64/libbz2.so.1.0.4
3253a10000-3253c0f000 ---p 00010000 fc:01 44040232 /lib64/libbz2.so.1.0.4
3253c0f000-3253c11000 rw-p 0000f000 fc:01 44040232 /lib64/libbz2.so.1.0.4
36f9a00000-36f9a20000 r-xp 00000000 fc:01 44040294 /lib64/ld-2.12.so
36f9c1f000-36f9c20000 r--p 0001f000 fc:01 44040294 /lib64/ld-2.12.so
36f9c20000-36f9c21000 rw-p 00020000 fc:01 44040294 /lib64/ld-2.12.so
36f9c21000-36f9c22000 rw-p 00000000 00:00 0
36f9e00000-36f9e02000 r-xp 00000000 fc:01 44040632 /lib64/libdl-2.12.so
36f9e02000-36fa002000 ---p 00002000 fc:01 44040632 /lib64/libdl-2.12.so
36fa002000-36fa003000 r--p 00002000 fc:01 44040632 /lib64/libdl-2.12.so
36fa003000-36fa004000 rw-p 00003000 fc:01 44040632 /lib64/libdl-2.12.so
36fa200000-36fa38b000 r-xp 00000000 fc:01 44040630 /lib64/libc-2.12.so
36fa38b000-36fa58a000 ---p 0018b000 fc:01 44040630 /lib64/libc-2.12.so
36fa58a000-36fa58e000 r--p 0018a000 fc:01 44040630 /lib64/libc-2.12.so
36fa58e000-36fa58f000 rw-p 0018e000 fc:01 44040630 /lib64/libc-2.12.so
36fa58f000-36fa594000 rw-p 00000000 00:00 0
36fa600000-36fa617000 r-xp 00000000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa617000-36fa817000 ---p 00017000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa817000-36fa818000 r--p 00017000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa818000-36fa819000 rw-p 00018000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa819000-36fa81d000 rw-p 00000000 00:00 0
36faa00000-36faa83000 r-xp 00000000 fc:01 44040608 /lib64/libm-2.12.so
36faa83000-36fac82000 ---p 00083000 fc:01 44040608 /lib64/libm-2.12.so
36fac82000-36fac83000 r--p 00082000 fc:01 44040608 /lib64/libm-2.12.so
36fac83000-36fac84000 rw-p 00083000 fc:01 44040608 /lib64/libm-2.12.so
36fae00000-36fae15000 r-xp 00000000 fc:01 44040607 /lib64/libz.so.1.2.3
36fae15000-36fb014000 ---p 00015000 fc:01 44040607 /lib64/libz.so.1.2.3
36fb014000-36fb015000 r--p 00014000 fc:01 44040607 /lib64/libz.so.1.2.3
36fb015000-36fb016000 rw-p 00015000 fc:01 44040607 /lib64/libz.so.1.2.3
36fb200000-36fb211000 r-xp 00000000 fc:01 39847861 /usr/lib64/libXpm.so.4.11.0
36fb211000-36fb410000 ---p 00011000 fc:01 39847861 /usr/lib64/libXpm.so.4.11.0
36fb410000-36fb411000 rw-p 00010000 fc:01 39847861 /usr/lib64/libXpm.so.4.11.0
36fb600000-36fb61d000 r-xp 00000000 fc:01 44040610 /lib64/libselinux.so.1
36fb61d000-36fb81c000 ---p 0001d000 fc:01 44040610 /lib64/libselinux.so.1
36fb81c000-36fb81d000 r--p 0001c000 fc:01 44040610 /lib64/libselinux.so.1
36fb81d000-36fb81e000 rw-p 0001d000 fc:01 44040610 /lib64/libselinux.so.1
36fb81e000-36fb81f000 rw-p 00000000 00:00 0
36fba00000-36fba3f000 r-xp 00000000 fc:01 39846959 /usr/lib64/libjpeg.so.62.0.0
36fba3f000-36fbc3f000 ---p 0003f000 fc:01 39846959 /usr/lib64/libjpeg.so.62.0.0
36fbc3f000-36fbc40000 rw-p 0003f000 fc:01 39846959 /usr/lib64/libjpeg.so.62.0.0
36fbc40000-36fbc50000 rw-p 00000000 00:00 0
36fbe00000-36fbe16000 r-xp 00000000 fc:01 44040588 /lib64/libresolv-2.12.so
36fbe16000-36fc016000 ---p 00016000 fc:01 44040588 /lib64/libresolv-2.12.so
36fc016000-36fc017000 r--p 00016000 fc:01 44040588 /lib64/libresolv-2.12.so
36fc017000-36fc018000 rw-p 00017000 fc:01 44040588 /lib64/libresolv-2.12.so
36fc018000-36fc01a000 rw-p 00000000 00:00 0
36fc600000-36fc616000 r-xp 00000000 fc:01 44040267 /lib64/libgcc_s-4.4.7-20120601.so.1
36fc616000-36fc815000 ---p 00016000 fc:01 44040267 /lib64/libgcc_s-4.4.7-20120601.so.1
36fc815000-36fc816000 rw-p 00015000 fc:01 44040267 /lib64/libgcc_s-4.4.7-20120601.so.1
36fca00000-36fca03000 r-xp 00000000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fca03000-36fcc02000 ---p 00003000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fcc02000-36fcc03000 r--p 00002000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fcc03000-36fcc04000 rw-p 00003000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fce00000-36fce07000 r-xp 00000000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fce07000-36fd007000 ---p 00007000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fd007000-36fd008000 r--p 00007000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fd008000-36fd009000 rw-p 00008000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fd009000-36fd037000 rw-p 00000000 00:00 0
36fd200000-36fd271000 r-xp 00000000 fc:01 44040633 /lib64/libfreebl3.so
36fd271000-36fd470000 ---p 00071000 fc:01 44040633 /lib64/libfreebl3.so
36fd470000-36fd472000 r--p 00070000 fc:01 44040633 /lib64/libfreebl3.so
36fd472000-36fd473000 rw-p 00072000 fc:01 44040633 /lib64/libfreebl3.so
36fd473000-36fd477000 rw-p 00000000 00:00 0
36fd600000-36fd6e8000 r-xp 00000000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd6e8000-36fd8e8000 ---p 000e8000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd8e8000-36fd8ef000 r--p 000e8000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd8ef000-36fd8f1000 rw-p 000ef000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd8f1000-36fd906000 rw-p 00000000 00:00 0
36fda00000-36fda29000 r-xp 00000000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fda29000-36fdc29000 ---p 00029000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fdc29000-36fdc2a000 r--p 00029000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fdc2a000-36fdc2b000 rw-p 0002a000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fdc2b000-36fdc2c000 rw-p 00000000 00:00 0
36fde00000-36fde16000 r-xp 00000000 fc:01 44040523 /lib64/libnsl-2.12.so
36fde16000-36fe015000 ---p 00016000 fc:01 44040523 /lib64/libnsl-2.12.so
36fe015000-36fe016000 r--p 00015000 fc:01 44040523 /lib64/libnsl-2.12.so
36fe016000-36fe017000 rw-p 00016000 fc:01 44040523 /lib64/libnsl-2.12.so
36fe017000-36fe019000 rw-p 00000000 00:00 0
36fe200000-36fe298000 r-xp 00000000 fc:01 39847235 /usr/lib64/libfreetype.so.6.3.22
36fe298000-36fe497000 ---p 00098000 fc:01 39847235 /usr/lib64/libfreetype.so.6.3.22
36fe497000-36fe49d000 rw-p 00097000 fc:01 39847235 /usr/lib64/libfreetype.so.6.3.22
36fe600000-36fe602000 r-xp 00000000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fe602000-36fe801000 ---p 00002000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fe801000-36fe802000 r--p 00001000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fe802000-36fe803000 rw-p 00002000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fea00000-36fea0a000 r-xp 00000000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fea0a000-36fec09000 ---p 0000a000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fec09000-36fec0a000 r--p 00009000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fec0a000-36fec0b000 rw-p 0000a000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fee00000-36fee41000 r-xp 00000000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36fee41000-36ff041000 ---p 00041000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36ff041000-36ff042000 r--p 00041000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36ff042000-36ff044000 rw-p 00042000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36ff600000-36ff6db000 r-xp 00000000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ff6db000-36ff8da000 ---p 000db000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ff8da000-36ff8e4000 r--p 000da000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ff8e4000-36ff8e6000 rw-p 000e4000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ffa00000-36ffa1d000 r-xp 00000000 fc:01 39850158 /usr/lib64/libxcb.so.1.1.0
36ffa1d000-36ffc1d000 ---p 0001d000 fc:01 39850158 /usr/lib64/libxcb.so.1.1.0
36ffc1d000-36ffc1e000 rw-p 0001d000 fc:01 39850158 /usr/lib64/libxcb.so.1.1.0
36ffe00000-36fffb5000 r-xp 00000000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
36fffb5000-37001b5000 ---p 001b5000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
37001b5000-37001d0000 r--p 001b5000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
37001d0000-37001dc000 rw-p 001d0000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
37001dc000-37001e0000 rw-p 00000000 00:00 0
3700600000-3700602000 r-xp 00000000 fc:01 39847033 /usr/lib64/libXau.so.6.0.0
3700602000-3700802000 ---p 00002000 fc:01 39847033 /usr/lib64/libXau.so.6.0.0
3700802000-3700803000 rw-p 00002000 fc:01 39847033 /usr/lib64/libXau.so.6.0.0
3700a00000-3700b37000 r-xp 00000000 fc:01 39848191 /usr/lib64/libX11.so.6.3.0
3700b37000-3700d37000 ---p 00137000 fc:01 39848191 /usr/lib64/libX11.so.6.3.0
3700d37000-3700d3d000 rw-p 00137000 fc:01 39848191 /usr/lib64/libX11.so.6.3.0
3701200000-3701261000 r-xp 00000000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701261000-3701460000 ---p 00061000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701460000-3701464000 r--p 00060000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701464000-370146b000 rw-p 00064000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701600000-3701632000 r-xp 00000000 fc:01 44040615 /lib64/libidn.so.11.6.1
3701632000-3701831000 ---p 00032000 fc:01 44040615 /lib64/libidn.so.11.6.1
3701831000-3701832000 rw-p 00031000 fc:01 44040615 /lib64/libidn.so.11.6.1
3ae3200000-3ae34d8000 r-xp 00000000 fc:01 39850356 /usr/lib64/libmysqlclient.so.18.0.0
3ae34d8000-3ae36d7000 ---p 002d8000 fc:01 39850356 /usr/lib64/libmysqlclient.so.18.0.0
3ae36d7000-3ae375b000 rw-p 002d7000 fc:01 39850356 /usr/lib64/libmysqlclient.so.18.0.0
3ae375b000-3ae3760000 rw-p 00000000 00:00 0
3f01c00000-3f01c17000 r-xp 00000000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f01c17000-3f01e16000 ---p 00017000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f01e16000-3f01e17000 r--p 00016000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f01e17000-3f01e1c000 rw-p 00017000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f02400000-3f0240c000 r-xp 00000000 fc:01 44040401 /lib64/libpam.so.0.82.2
3f0240c000-3f0260c000 ---p 0000c000 fc:01 44040401 /lib64/libpam.so.0.82.2
3f0260c000-3f0260d000 r--p 0000c000 fc:01 44040401 /lib64/libpam.so.0.82.2
3f0260d000-3f0260e000 rw-p 0000d000 fc:01 44040401 /lib64/libpam.so.0.82.2
7f79b8000000-7f79d8000000 rw-s 00000000 07:00 663 /tmp/apc-accountname.K88kec (deleted)
7f79d8000000-7f79d8021000 rw-p 00000000 00:00 0
7f79d8021000-7f79dc000000 ---p 00000000 00:00 0
7f79dd6e6000-7f79dd6eb000 r-xp 00000000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd6eb000-7f79dd8ea000 ---p 00005000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd8ea000-7f79dd8eb000 r--p 00004000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd8eb000-7f79dd8ec000 rw-p 00005000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd8f6000-7f79dd902000 r-xp 00000000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79dd902000-7f79ddb02000 ---p 0000c000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79ddb02000-7f79ddb03000 r--p 0000c000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79ddb03000-7f79ddb04000 rw-p 0000d000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79ddb04000-7f79ddb05000 ---p 00000000 00:00 0
7f79ddb05000-7f79de505000 rw-p 00000000 00:00 0
7f79de505000-7f79de50b000 r-xp 00000000 fc:01 41816550 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
7f79de50b000-7f79de70b000 ---p 00006000 fc:01 41816550 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
7f79de70b000-7f79de70c000 rw-p 00006000 fc:01 41816550 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
7f79de70c000-7f79de717000 r-xp 00000000 fc:01 39850778 /usr/lib64/libicuio.so.42.1
7f79de717000-7f79de916000 ---p 0000b000 fc:01 39850778 /usr/lib64/libicuio.so.42.1
7f79de916000-7f79de918000 rw-p 0000a000 fc:01 39850778 /usr/lib64/libicuio.so.42.1
7f79de918000-7f79df85d000 r-xp 00000000 fc:01 39850392 /usr/lib64/libicudata.so.42.1
7f79df85d000-7f79dfa5c000 ---p 00f45000 fc:01 39850392 /usr/lib64/libicudata.so.42.1
7f79dfa5c000-7f79dfa5d000 rw-p 00f44000 fc:01 39850392 /usr/lib64/libicudata.so.42.1
7f79dfa5d000-7f79dfb9c000 r-xp 00000000 fc:01 39851035 /usr/lib64/libicuuc.so.42.1
7f79dfb9c000-7f79dfd9c000 ---p 0013f000 fc:01 39851035 /usr/lib64/libicuuc.so.42.1
7f79dfd9c000-7f79dfdad000 rw-p 0013f000 fc:01 39851035 /usr/lib64/libicuuc.so.42.1
7f79dfdad000-7f79dfdaf000 rw-p 00000000 00:00 0
7f79dfdaf000-7f79dff37000 r-xp 00000000 fc:01 39850394 /usr/lib64/libicui18n.so.42.1
7f79dff37000-7f79e0137000 ---p 00188000 fc:01 39850394 /usr/lib64/libicui18n.so.42.1
7f79e0137000-7f79e0144000 rw-p 00188000 fc:01 39850394 /usr/lib64/libicui18n.so.42.1
7f79e0144000-7f79e0145000 rw-p 00000000 00:00 0
7f79e0145000-7f79e019b000 r-xp 00000000 fc:01 41817249 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/intl.so
7f79e019b000-7f79e039a000 ---p 00056000 fc:01 41817249 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/intl.so
7f79e039a000-7f79e03a3000 rw-p 00055000 fc:01 41817249 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/intl.so
7f79e03a3000-7f79e03a4000 rw-p 00000000 00:00 0
7f79e03a4000-7f79e03b1000 r-xp 00000000 fc:01 41816729 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
7f79e03b1000-7f79e05b1000 ---p 0000d000 fc:01 41816729 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
7f79e05b1000-7f79e05b2000 rw-p 0000d000 fc:01 41816729 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
7f79e05b2000-7f79e05d6000 r-xp 00000000 fc:01 41816554 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
7f79e05d6000-7f79e07d5000 ---p 00024000 fc:01 41816554 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
7f79e07d5000-7f79e07d8000 rw-p 00023000 fc:01 41816554 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
7f79e07d8000-7f79e07e1000 rw-p 00000000 00:00 0
7f79e07e1000-7f79e0879000 r-xp 00000000 fc:01 41816551 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
7f79e0879000-7f79e0a78000 ---p 00098000 fc:01 41816551 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
7f79e0a78000-7f79e0a7c000 rw-p 00097000 fc:01 41816551 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
7f79e0a7c000-7f79e0a92000 r-xp 00000000 fc:01 41815564 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
7f79e0a92000-7f79e0c92000 ---p 00016000 fc:01 41815564 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
7f79e0c92000-7f79e0c95000 rw-p 00016000 fc:01 41815564 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
7f79e0c95000-7f79e0da3000 r-xp 00000000 fc:01 48760712 /usr/local/IonCube/ioncube_loader_lin_5.4.so
7f79e0da3000-7f79e0ea3000 ---p 0010e000 fc:01 48760712 /usr/local/IonCube/ioncube_loader_lin_5.4.so
7f79e0ea3000-7f79e0eb2000 rw-p 0010e000 fc:01 48760712 /usr/local/IonCube/ioncube_loader_lin_5.4.so
7f79e0eb2000-7f79e1050000 rw-p 00000000 00:00 0
7f79e1050000-7f79e119f000 r-xp 00000000 fc:01 11272588 /opt/xml2/lib/libxml2.so.2.9.0
7f79e119f000-7f79e139e000 ---p 0014f000 fc:01 11272588 /opt/xml2/lib/libxml2.so.2.9.0
7f79e139e000-7f79e13a8000 rw-p 0014e000 fc:01 11272588 /opt/xml2/lib/libxml2.so.2.9.0
7f79e13a8000-7f79e13aa000 rw-p 00000000 00:00 0
7f79e13aa000-7f79e1402000 r-xp 00000000 fc:01 11272374 /opt/curlssl/lib/libcurl.so.4.2.0
7f79e1402000-7f79e1602000 ---p 00058000 fc:01 11272374 /opt/curlssl/lib/libcurl.so.4.2.0
7f79e1602000-7f79e1605000 rw-p 00058000 fc:01 11272374 /opt/curlssl/lib/libcurl.so.4.2.0
7f79e1605000-7f79e1608000 rw-p 00000000 00:00 0
7f79e1608000-7f79e1644000 r-xp 00000000 fc:01 11272237 /opt/pcre/lib/libpcre.so.0.0.1
7f79e1644000-7f79e1843000 ---p 0003c000 fc:01 11272237 /opt/pcre/lib/libpcre.so.0.0.1
7f79e1843000-7f79e1844000 rw-p 0003b000 fc:01 11272237 /opt/pcre/lib/libpcre.so.0.0.1
7f79e1844000-7f79e1847000 rw-p 00000000 00:00 0
7f79e1847000-7f79e1871000 r-xp 00000000 fc:01 11272841 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7f79e1871000-7f79e1a70000 ---p 0002a000 fc:01 11272841 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7f79e1a70000-7f79e1a74000 rw-p 00029000 fc:01 11272841 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7f79e1a74000-7f79e1a7b000 rw-p 00000000 00:00 0
7f79e1a85000-7f79e1a86000 rw-p 00000000 00:00 0
7fff48604000-7fff48625000 rw-p 00000000 00:00 0 [stack]
7fff4869e000-7fff4869f000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
I do not get /usr/bin/php /home/address/to/the/script and not shure why not so I am not sure what to exclude?
Can you maybe help me?
Thanks
This is whole mail:
Time: Mon Mar 24 03:02:09 2014 +0100
PID: 14288 (Parent PID:27765)
Account: site
Uptime: 228 seconds
Executable:
/usr/bin/php
Command Line (often faked in exploits):
/usr/bin/php
Network connections by the process (if any):
tcp: 195.2.13.89:41981 -> 54.245.150.9:443
Files open by the process (if any):
/usr/local/apache/logs/error_log
/usr/local/apache/logs/error_log
/home/site/public_html/wp-content/uploads/backwpup-959b55-temp/backwpup_959b55_2014-03-24_03-00-20.tar.gz
Memory maps by the process (if any):
00400000-00b46000 r-xp 00000000 fc:01 39849763 /usr/bin/php
00d45000-00e0e000 rw-p 00745000 fc:01 39849763 /usr/bin/php
00e0e000-00e32000 rw-p 00000000 00:00 0
026a7000-0701d000 rw-p 00000000 00:00 0 [heap]
3138200000-3138209000 r-xp 00000000 fc:01 39850741 /usr/lib64/libltdl.so.7.2.1
3138209000-3138408000 ---p 00009000 fc:01 39850741 /usr/lib64/libltdl.so.7.2.1
3138408000-3138409000 rw-p 00008000 fc:01 39850741 /usr/lib64/libltdl.so.7.2.1
3252e00000-3252e07000 r-xp 00000000 fc:01 44040230 /lib64/librt-2.12.so
3252e07000-3253006000 ---p 00007000 fc:01 44040230 /lib64/librt-2.12.so
3253006000-3253007000 r--p 00006000 fc:01 44040230 /lib64/librt-2.12.so
3253007000-3253008000 rw-p 00007000 fc:01 44040230 /lib64/librt-2.12.so
3253200000-3253225000 r-xp 00000000 fc:01 39850736 /usr/lib64/libpng12.so.0.49.0
3253225000-3253425000 ---p 00025000 fc:01 39850736 /usr/lib64/libpng12.so.0.49.0
3253425000-3253426000 rw-p 00025000 fc:01 39850736 /usr/lib64/libpng12.so.0.49.0
3253600000-3253626000 r-xp 00000000 fc:01 44040234 /lib64/libexpat.so.1.5.2
3253626000-3253825000 ---p 00026000 fc:01 44040234 /lib64/libexpat.so.1.5.2
3253825000-3253828000 rw-p 00025000 fc:01 44040234 /lib64/libexpat.so.1.5.2
3253a00000-3253a10000 r-xp 00000000 fc:01 44040232 /lib64/libbz2.so.1.0.4
3253a10000-3253c0f000 ---p 00010000 fc:01 44040232 /lib64/libbz2.so.1.0.4
3253c0f000-3253c11000 rw-p 0000f000 fc:01 44040232 /lib64/libbz2.so.1.0.4
36f9a00000-36f9a20000 r-xp 00000000 fc:01 44040294 /lib64/ld-2.12.so
36f9c1f000-36f9c20000 r--p 0001f000 fc:01 44040294 /lib64/ld-2.12.so
36f9c20000-36f9c21000 rw-p 00020000 fc:01 44040294 /lib64/ld-2.12.so
36f9c21000-36f9c22000 rw-p 00000000 00:00 0
36f9e00000-36f9e02000 r-xp 00000000 fc:01 44040632 /lib64/libdl-2.12.so
36f9e02000-36fa002000 ---p 00002000 fc:01 44040632 /lib64/libdl-2.12.so
36fa002000-36fa003000 r--p 00002000 fc:01 44040632 /lib64/libdl-2.12.so
36fa003000-36fa004000 rw-p 00003000 fc:01 44040632 /lib64/libdl-2.12.so
36fa200000-36fa38b000 r-xp 00000000 fc:01 44040630 /lib64/libc-2.12.so
36fa38b000-36fa58a000 ---p 0018b000 fc:01 44040630 /lib64/libc-2.12.so
36fa58a000-36fa58e000 r--p 0018a000 fc:01 44040630 /lib64/libc-2.12.so
36fa58e000-36fa58f000 rw-p 0018e000 fc:01 44040630 /lib64/libc-2.12.so
36fa58f000-36fa594000 rw-p 00000000 00:00 0
36fa600000-36fa617000 r-xp 00000000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa617000-36fa817000 ---p 00017000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa817000-36fa818000 r--p 00017000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa818000-36fa819000 rw-p 00018000 fc:01 44040602 /lib64/libpthread-2.12.so
36fa819000-36fa81d000 rw-p 00000000 00:00 0
36faa00000-36faa83000 r-xp 00000000 fc:01 44040608 /lib64/libm-2.12.so
36faa83000-36fac82000 ---p 00083000 fc:01 44040608 /lib64/libm-2.12.so
36fac82000-36fac83000 r--p 00082000 fc:01 44040608 /lib64/libm-2.12.so
36fac83000-36fac84000 rw-p 00083000 fc:01 44040608 /lib64/libm-2.12.so
36fae00000-36fae15000 r-xp 00000000 fc:01 44040607 /lib64/libz.so.1.2.3
36fae15000-36fb014000 ---p 00015000 fc:01 44040607 /lib64/libz.so.1.2.3
36fb014000-36fb015000 r--p 00014000 fc:01 44040607 /lib64/libz.so.1.2.3
36fb015000-36fb016000 rw-p 00015000 fc:01 44040607 /lib64/libz.so.1.2.3
36fb200000-36fb211000 r-xp 00000000 fc:01 39847861 /usr/lib64/libXpm.so.4.11.0
36fb211000-36fb410000 ---p 00011000 fc:01 39847861 /usr/lib64/libXpm.so.4.11.0
36fb410000-36fb411000 rw-p 00010000 fc:01 39847861 /usr/lib64/libXpm.so.4.11.0
36fb600000-36fb61d000 r-xp 00000000 fc:01 44040610 /lib64/libselinux.so.1
36fb61d000-36fb81c000 ---p 0001d000 fc:01 44040610 /lib64/libselinux.so.1
36fb81c000-36fb81d000 r--p 0001c000 fc:01 44040610 /lib64/libselinux.so.1
36fb81d000-36fb81e000 rw-p 0001d000 fc:01 44040610 /lib64/libselinux.so.1
36fb81e000-36fb81f000 rw-p 00000000 00:00 0
36fba00000-36fba3f000 r-xp 00000000 fc:01 39846959 /usr/lib64/libjpeg.so.62.0.0
36fba3f000-36fbc3f000 ---p 0003f000 fc:01 39846959 /usr/lib64/libjpeg.so.62.0.0
36fbc3f000-36fbc40000 rw-p 0003f000 fc:01 39846959 /usr/lib64/libjpeg.so.62.0.0
36fbc40000-36fbc50000 rw-p 00000000 00:00 0
36fbe00000-36fbe16000 r-xp 00000000 fc:01 44040588 /lib64/libresolv-2.12.so
36fbe16000-36fc016000 ---p 00016000 fc:01 44040588 /lib64/libresolv-2.12.so
36fc016000-36fc017000 r--p 00016000 fc:01 44040588 /lib64/libresolv-2.12.so
36fc017000-36fc018000 rw-p 00017000 fc:01 44040588 /lib64/libresolv-2.12.so
36fc018000-36fc01a000 rw-p 00000000 00:00 0
36fc600000-36fc616000 r-xp 00000000 fc:01 44040267 /lib64/libgcc_s-4.4.7-20120601.so.1
36fc616000-36fc815000 ---p 00016000 fc:01 44040267 /lib64/libgcc_s-4.4.7-20120601.so.1
36fc815000-36fc816000 rw-p 00015000 fc:01 44040267 /lib64/libgcc_s-4.4.7-20120601.so.1
36fca00000-36fca03000 r-xp 00000000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fca03000-36fcc02000 ---p 00003000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fcc02000-36fcc03000 r--p 00002000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fcc03000-36fcc04000 rw-p 00003000 fc:01 44040620 /lib64/libcom_err.so.2.1
36fce00000-36fce07000 r-xp 00000000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fce07000-36fd007000 ---p 00007000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fd007000-36fd008000 r--p 00007000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fd008000-36fd009000 rw-p 00008000 fc:01 44040634 /lib64/libcrypt-2.12.so
36fd009000-36fd037000 rw-p 00000000 00:00 0
36fd200000-36fd271000 r-xp 00000000 fc:01 44040633 /lib64/libfreebl3.so
36fd271000-36fd470000 ---p 00071000 fc:01 44040633 /lib64/libfreebl3.so
36fd470000-36fd472000 r--p 00070000 fc:01 44040633 /lib64/libfreebl3.so
36fd472000-36fd473000 rw-p 00072000 fc:01 44040633 /lib64/libfreebl3.so
36fd473000-36fd477000 rw-p 00000000 00:00 0
36fd600000-36fd6e8000 r-xp 00000000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd6e8000-36fd8e8000 ---p 000e8000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd8e8000-36fd8ef000 r--p 000e8000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd8ef000-36fd8f1000 rw-p 000ef000 fc:01 39847450 /usr/lib64/libstdc++.so.6.0.13
36fd8f1000-36fd906000 rw-p 00000000 00:00 0
36fda00000-36fda29000 r-xp 00000000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fda29000-36fdc29000 ---p 00029000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fdc29000-36fdc2a000 r--p 00029000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fdc2a000-36fdc2b000 rw-p 0002a000 fc:01 44040619 /lib64/libk5crypto.so.3.1
36fdc2b000-36fdc2c000 rw-p 00000000 00:00 0
36fde00000-36fde16000 r-xp 00000000 fc:01 44040523 /lib64/libnsl-2.12.so
36fde16000-36fe015000 ---p 00016000 fc:01 44040523 /lib64/libnsl-2.12.so
36fe015000-36fe016000 r--p 00015000 fc:01 44040523 /lib64/libnsl-2.12.so
36fe016000-36fe017000 rw-p 00016000 fc:01 44040523 /lib64/libnsl-2.12.so
36fe017000-36fe019000 rw-p 00000000 00:00 0
36fe200000-36fe298000 r-xp 00000000 fc:01 39847235 /usr/lib64/libfreetype.so.6.3.22
36fe298000-36fe497000 ---p 00098000 fc:01 39847235 /usr/lib64/libfreetype.so.6.3.22
36fe497000-36fe49d000 rw-p 00097000 fc:01 39847235 /usr/lib64/libfreetype.so.6.3.22
36fe600000-36fe602000 r-xp 00000000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fe602000-36fe801000 ---p 00002000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fe801000-36fe802000 r--p 00001000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fe802000-36fe803000 rw-p 00002000 fc:01 44040617 /lib64/libkeyutils.so.1.3
36fea00000-36fea0a000 r-xp 00000000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fea0a000-36fec09000 ---p 0000a000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fec09000-36fec0a000 r--p 00009000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fec0a000-36fec0b000 rw-p 0000a000 fc:01 44040618 /lib64/libkrb5support.so.0.1
36fee00000-36fee41000 r-xp 00000000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36fee41000-36ff041000 ---p 00041000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36ff041000-36ff042000 r--p 00041000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36ff042000-36ff044000 rw-p 00042000 fc:01 44040622 /lib64/libgssapi_krb5.so.2.2
36ff600000-36ff6db000 r-xp 00000000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ff6db000-36ff8da000 ---p 000db000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ff8da000-36ff8e4000 r--p 000da000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ff8e4000-36ff8e6000 rw-p 000e4000 fc:01 44040621 /lib64/libkrb5.so.3.3
36ffa00000-36ffa1d000 r-xp 00000000 fc:01 39850158 /usr/lib64/libxcb.so.1.1.0
36ffa1d000-36ffc1d000 ---p 0001d000 fc:01 39850158 /usr/lib64/libxcb.so.1.1.0
36ffc1d000-36ffc1e000 rw-p 0001d000 fc:01 39850158 /usr/lib64/libxcb.so.1.1.0
36ffe00000-36fffb5000 r-xp 00000000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
36fffb5000-37001b5000 ---p 001b5000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
37001b5000-37001d0000 r--p 001b5000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
37001d0000-37001dc000 rw-p 001d0000 fc:01 39850156 /usr/lib64/libcrypto.so.1.0.1e
37001dc000-37001e0000 rw-p 00000000 00:00 0
3700600000-3700602000 r-xp 00000000 fc:01 39847033 /usr/lib64/libXau.so.6.0.0
3700602000-3700802000 ---p 00002000 fc:01 39847033 /usr/lib64/libXau.so.6.0.0
3700802000-3700803000 rw-p 00002000 fc:01 39847033 /usr/lib64/libXau.so.6.0.0
3700a00000-3700b37000 r-xp 00000000 fc:01 39848191 /usr/lib64/libX11.so.6.3.0
3700b37000-3700d37000 ---p 00137000 fc:01 39848191 /usr/lib64/libX11.so.6.3.0
3700d37000-3700d3d000 rw-p 00137000 fc:01 39848191 /usr/lib64/libX11.so.6.3.0
3701200000-3701261000 r-xp 00000000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701261000-3701460000 ---p 00061000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701460000-3701464000 r--p 00060000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701464000-370146b000 rw-p 00064000 fc:01 39848098 /usr/lib64/libssl.so.1.0.1e
3701600000-3701632000 r-xp 00000000 fc:01 44040615 /lib64/libidn.so.11.6.1
3701632000-3701831000 ---p 00032000 fc:01 44040615 /lib64/libidn.so.11.6.1
3701831000-3701832000 rw-p 00031000 fc:01 44040615 /lib64/libidn.so.11.6.1
3ae3200000-3ae34d8000 r-xp 00000000 fc:01 39850356 /usr/lib64/libmysqlclient.so.18.0.0
3ae34d8000-3ae36d7000 ---p 002d8000 fc:01 39850356 /usr/lib64/libmysqlclient.so.18.0.0
3ae36d7000-3ae375b000 rw-p 002d7000 fc:01 39850356 /usr/lib64/libmysqlclient.so.18.0.0
3ae375b000-3ae3760000 rw-p 00000000 00:00 0
3f01c00000-3f01c17000 r-xp 00000000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f01c17000-3f01e16000 ---p 00017000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f01e16000-3f01e17000 r--p 00016000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f01e17000-3f01e1c000 rw-p 00017000 fc:01 44040271 /lib64/libaudit.so.1.0.0
3f02400000-3f0240c000 r-xp 00000000 fc:01 44040401 /lib64/libpam.so.0.82.2
3f0240c000-3f0260c000 ---p 0000c000 fc:01 44040401 /lib64/libpam.so.0.82.2
3f0260c000-3f0260d000 r--p 0000c000 fc:01 44040401 /lib64/libpam.so.0.82.2
3f0260d000-3f0260e000 rw-p 0000d000 fc:01 44040401 /lib64/libpam.so.0.82.2
7f79b8000000-7f79d8000000 rw-s 00000000 07:00 663 /tmp/apc-accountname.K88kec (deleted)
7f79d8000000-7f79d8021000 rw-p 00000000 00:00 0
7f79d8021000-7f79dc000000 ---p 00000000 00:00 0
7f79dd6e6000-7f79dd6eb000 r-xp 00000000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd6eb000-7f79dd8ea000 ---p 00005000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd8ea000-7f79dd8eb000 r--p 00004000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd8eb000-7f79dd8ec000 rw-p 00005000 fc:01 44040220 /lib64/libnss_dns-2.12.so
7f79dd8f6000-7f79dd902000 r-xp 00000000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79dd902000-7f79ddb02000 ---p 0000c000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79ddb02000-7f79ddb03000 r--p 0000c000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79ddb03000-7f79ddb04000 rw-p 0000d000 fc:01 44040222 /lib64/libnss_files-2.12.so
7f79ddb04000-7f79ddb05000 ---p 00000000 00:00 0
7f79ddb05000-7f79de505000 rw-p 00000000 00:00 0
7f79de505000-7f79de50b000 r-xp 00000000 fc:01 41816550 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
7f79de50b000-7f79de70b000 ---p 00006000 fc:01 41816550 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
7f79de70b000-7f79de70c000 rw-p 00006000 fc:01 41816550 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
7f79de70c000-7f79de717000 r-xp 00000000 fc:01 39850778 /usr/lib64/libicuio.so.42.1
7f79de717000-7f79de916000 ---p 0000b000 fc:01 39850778 /usr/lib64/libicuio.so.42.1
7f79de916000-7f79de918000 rw-p 0000a000 fc:01 39850778 /usr/lib64/libicuio.so.42.1
7f79de918000-7f79df85d000 r-xp 00000000 fc:01 39850392 /usr/lib64/libicudata.so.42.1
7f79df85d000-7f79dfa5c000 ---p 00f45000 fc:01 39850392 /usr/lib64/libicudata.so.42.1
7f79dfa5c000-7f79dfa5d000 rw-p 00f44000 fc:01 39850392 /usr/lib64/libicudata.so.42.1
7f79dfa5d000-7f79dfb9c000 r-xp 00000000 fc:01 39851035 /usr/lib64/libicuuc.so.42.1
7f79dfb9c000-7f79dfd9c000 ---p 0013f000 fc:01 39851035 /usr/lib64/libicuuc.so.42.1
7f79dfd9c000-7f79dfdad000 rw-p 0013f000 fc:01 39851035 /usr/lib64/libicuuc.so.42.1
7f79dfdad000-7f79dfdaf000 rw-p 00000000 00:00 0
7f79dfdaf000-7f79dff37000 r-xp 00000000 fc:01 39850394 /usr/lib64/libicui18n.so.42.1
7f79dff37000-7f79e0137000 ---p 00188000 fc:01 39850394 /usr/lib64/libicui18n.so.42.1
7f79e0137000-7f79e0144000 rw-p 00188000 fc:01 39850394 /usr/lib64/libicui18n.so.42.1
7f79e0144000-7f79e0145000 rw-p 00000000 00:00 0
7f79e0145000-7f79e019b000 r-xp 00000000 fc:01 41817249 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/intl.so
7f79e019b000-7f79e039a000 ---p 00056000 fc:01 41817249 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/intl.so
7f79e039a000-7f79e03a3000 rw-p 00055000 fc:01 41817249 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/intl.so
7f79e03a3000-7f79e03a4000 rw-p 00000000 00:00 0
7f79e03a4000-7f79e03b1000 r-xp 00000000 fc:01 41816729 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
7f79e03b1000-7f79e05b1000 ---p 0000d000 fc:01 41816729 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
7f79e05b1000-7f79e05b2000 rw-p 0000d000 fc:01 41816729 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
7f79e05b2000-7f79e05d6000 r-xp 00000000 fc:01 41816554 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
7f79e05d6000-7f79e07d5000 ---p 00024000 fc:01 41816554 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
7f79e07d5000-7f79e07d8000 rw-p 00023000 fc:01 41816554 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
7f79e07d8000-7f79e07e1000 rw-p 00000000 00:00 0
7f79e07e1000-7f79e0879000 r-xp 00000000 fc:01 41816551 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
7f79e0879000-7f79e0a78000 ---p 00098000 fc:01 41816551 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
7f79e0a78000-7f79e0a7c000 rw-p 00097000 fc:01 41816551 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
7f79e0a7c000-7f79e0a92000 r-xp 00000000 fc:01 41815564 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
7f79e0a92000-7f79e0c92000 ---p 00016000 fc:01 41815564 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
7f79e0c92000-7f79e0c95000 rw-p 00016000 fc:01 41815564 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
7f79e0c95000-7f79e0da3000 r-xp 00000000 fc:01 48760712 /usr/local/IonCube/ioncube_loader_lin_5.4.so
7f79e0da3000-7f79e0ea3000 ---p 0010e000 fc:01 48760712 /usr/local/IonCube/ioncube_loader_lin_5.4.so
7f79e0ea3000-7f79e0eb2000 rw-p 0010e000 fc:01 48760712 /usr/local/IonCube/ioncube_loader_lin_5.4.so
7f79e0eb2000-7f79e1050000 rw-p 00000000 00:00 0
7f79e1050000-7f79e119f000 r-xp 00000000 fc:01 11272588 /opt/xml2/lib/libxml2.so.2.9.0
7f79e119f000-7f79e139e000 ---p 0014f000 fc:01 11272588 /opt/xml2/lib/libxml2.so.2.9.0
7f79e139e000-7f79e13a8000 rw-p 0014e000 fc:01 11272588 /opt/xml2/lib/libxml2.so.2.9.0
7f79e13a8000-7f79e13aa000 rw-p 00000000 00:00 0
7f79e13aa000-7f79e1402000 r-xp 00000000 fc:01 11272374 /opt/curlssl/lib/libcurl.so.4.2.0
7f79e1402000-7f79e1602000 ---p 00058000 fc:01 11272374 /opt/curlssl/lib/libcurl.so.4.2.0
7f79e1602000-7f79e1605000 rw-p 00058000 fc:01 11272374 /opt/curlssl/lib/libcurl.so.4.2.0
7f79e1605000-7f79e1608000 rw-p 00000000 00:00 0
7f79e1608000-7f79e1644000 r-xp 00000000 fc:01 11272237 /opt/pcre/lib/libpcre.so.0.0.1
7f79e1644000-7f79e1843000 ---p 0003c000 fc:01 11272237 /opt/pcre/lib/libpcre.so.0.0.1
7f79e1843000-7f79e1844000 rw-p 0003b000 fc:01 11272237 /opt/pcre/lib/libpcre.so.0.0.1
7f79e1844000-7f79e1847000 rw-p 00000000 00:00 0
7f79e1847000-7f79e1871000 r-xp 00000000 fc:01 11272841 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7f79e1871000-7f79e1a70000 ---p 0002a000 fc:01 11272841 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7f79e1a70000-7f79e1a74000 rw-p 00029000 fc:01 11272841 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7f79e1a74000-7f79e1a7b000 rw-p 00000000 00:00 0
7f79e1a85000-7f79e1a86000 rw-p 00000000 00:00 0
7fff48604000-7fff48625000 rw-p 00000000 00:00 0 [stack]
7fff4869e000-7fff4869f000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
I do not get /usr/bin/php /home/address/to/the/script and not shure why not so I am not sure what to exclude?
Can you maybe help me?
Thanks