Return-Path: <root@srv.bolconline.co.uk>
Delivered-To: bolconlineco@srv.bolconline.co.uk
Received: from srv.bolconline.co.uk
by srv.bolconline.co.uk with LMTP
id 2A+JB8vsnGdDcAAAafYFpA
(envelope-from <root@srv.bolconline.co.uk>)
for <bolconlineco@srv.bolconline.co.uk>; Fri, 31 Jan 2025 20:31:23 +0500
Return-path: <root@srv.bolconline.co.uk>
Envelope-to: root@srv.bolconline.co.uk
Delivery-date: Fri, 31 Jan 2025 20:31:23 +0500
Received: from root by srv.bolconline.co.uk with local (Exim 4.96.2)
(envelope-from <root@srv.bolconline.co.uk>)
id 1tdszK-0007u5-2Q
for root@srv.bolconline.co.uk;
Fri, 31 Jan 2025 20:31:22 +0500
To: root@srv.bolconline.co.uk
Subject: lfd on srv.bolconline.co.uk: Suspicious process running under user nobody
From: <root@srv.bolconline.co.uk>
Message-Id: <E1tdszK-0007u5-2Q@srv.bolconline.co.uk>
Date: Fri, 31 Jan 2025 20:31:22 +0500
Time: Fri Jan 31 20:31:22 2025 +0500
PID: 3641 (Parent PID:3637)
Account: nobody
Uptime: 3709 seconds
Executable:
/usr/local/lsws/bin/lshttpd.6.3.1
Command Line (often faked in exploits):
litespeed (lshttpd - #01)
Network connections by the process (if any):
tcp: 107.155.64.26:443 -> 162.158.90.110:38900
tcp: 107.155.64.26:443 -> 192.88.134.39:27132
tcp: 107.155.64.26:443 -> 185.93.230.39:24412
tcp: 107.155.64.26:443 -> 172.70.206.75:18976
tcp: 107.155.64.26:443 -> 162.158.90.60:57668
tcp: 107.155.64.26:443 -> 185.93.228.39:17712
tcp: 107.155.64.26:443 -> 172.70.46.100:58828
tcp: 107.155.64.26:443 -> 185.93.228.39:61704
tcp: 107.155.64.26:443 -> 172.70.126.38:10746
tcp: 107.155.64.26:443 -> 185.93.228.39:61738
tcp: 107.155.64.26:443 -> 66.248.202.32:21676
tcp: 107.155.64.26:443 -> 66.248.203.39:39636
tcp: 107.155.64.26:80 -> 141.101.76.58:60768
tcp: 107.155.64.26:443 -> 66.248.201.39:42072
tcp: 107.155.64.26:443 -> 185.93.228.39:61720
tcp: 107.155.64.26:443 -> 185.93.228.39:61746
tcp: 107.155.64.26:443 -> 185.93.228.39:17724
tcp: 107.155.64.26:443 -> 66.248.203.39:49144
tcp: 107.155.64.26:443 -> 185.93.228.39:17738
tcp: 107.155.64.26:443 -> 185.93.228.39:17754
tcp: 107.155.64.26:443 -> 208.109.0.39:1606
tcp: 107.155.64.26:443 -> 185.93.228.39:61774
tcp: 107.155.64.26:443 -> 185.93.228.39:61748
tcp: 107.155.64.26:443 -> 185.93.228.39:61756
tcp: 107.155.64.26:443 -> 185.93.228.39:61782
tcp: 107.155.64.26:443 -> 185.93.228.39:61762
tcp: 107.155.64.26:443 -> 185.93.228.39:20514
tcp: 107.155.64.26:443 -> 185.93.229.39:56292
tcp: 107.155.64.26:443 -> 24.206.7.3:61140
tcp: 107.155.64.26:443 -> 66.248.202.32:61774
tcp: 107.155.64.26:443 -> 192.88.134.39:5798
tcp: 107.155.64.26:443 -> 66.248.203.39:49134
tcp: 107.155.64.26:443 -> 107.155.64.26:33906
tcp: 107.155.64.26:443 -> 192.88.134.39:5808
tcp: 107.155.64.26:443 -> 51.8.102.54:53600
tcp: 107.155.64.26:443 -> 192.88.134.39:5822
tcp: 107.155.64.26:443 -> 185.93.228.39:17760
tcp: 107.155.64.26:443 -> 66.248.202.32:61274
tcp: 107.155.64.26:443 -> 107.155.64.26:33942
tcp: 107.155.64.26:443 -> 185.93.228.39:17772
tcp: 107.155.64.26:443 -> 185.93.228.39:28444
tcp: 107.155.64.26:443 -> 192.88.134.39:27116
tcp: 107.155.64.26:443 -> 185.93.230.39:5964
tcp: 107.155.64.26:80 -> 172.71.127.88:13466
tcp: 107.155.64.26:443 -> 185.93.228.39:20486
tcp: 107.155.64.26:443 -> 208.109.0.39:1610
tcp: 107.155.64.26:443 -> 185.93.228.39:20502
tcp: 107.155.64.26:443 -> 66.248.203.39:39646
tcp: 107.155.64.26:443 -> 185.93.230.39:57174
tcp: 107.155.64.26:443 -> 185.93.230.39:5968
tcp: 107.155.64.26:443 -> 66.248.200.39:37042
tcp: 107.155.64.26:80 -> 172.71.99.50:13758
tcp: 107.155.64.26:443 -> 192.88.134.39:47342
tcp: 107.155.64.26:443 -> 185.93.230.39:5980
tcp: 107.155.64.26:443 -> 192.88.134.39:47354
Files open by the process (if any):
/dev/null
/dev/null
/var/log/apache2/modsec_audit.log
/dev/urandom
anon_inode:[eventpoll]
anon_inode:[eventfd]
/var/log/apache2/error_log
/dev/shm/lsws/stats.shm
/dev/shm/lsws/stats.lock
/dev/shm/lsws/stats_clients.shm
/dev/shm/lsws/stats_clients.lock
/dev/shm/lsws/SSL.shm
/dev/shm/lsws/SSL.lock
/dev/shm/lsws/modsec_data.shm
/dev/shm/lsws/modsec_data.lock
/dev/shm/lsws/.quicshmdata.shm
/dev/shm/lsws/.quicshmdata.lock
/dev/shm/lsws/.quicshmmap.shm
/dev/shm/lsws/.quicshmmap.lock
/dev/shm/lsws/.cachemanidx.shm
/dev/shm/lsws/.cachemanidx.lock
/dev/shm/lsws/.store.0.shm
/dev/shm/lsws/.store.0.lock
/dev/shm/lsws/adns_cache.shm
/dev/shm/lsws/adns_cache.lock
anon_inode:[eventfd]
anon_inode:[eventfd]
anon_inode:[eventfd]
anon_inode:[eventfd]
anon_inode:[signalfd]
Memory maps by the process (if any):
00400000-010ea000 r-xp 00000000 00:00 0
010ea000-012ea000 ---p 00000000 00:00 0
012ea000-01327000 r--p 00000000 00:00 0
01327000-013db000 rw-p 00000000 00:00 0
0249b000-02521000 rw-p 00000000 00:00 0 [heap]
02521000-02d79000 rw-p 00000000 00:00 0 [heap]
02d79000-03be1000 rw-p 00000000 00:00 0 [heap]
7f5210000000-7f5210021000 rw-p 00000000 00:00 0
7f5210021000-7f5214000000 ---p 00000000 00:00 0
7f52177ff000-7f5217800000 ---p 00000000 00:00 0
7f5217800000-7f5218000000 rw-p 00000000 00:00 0
7f5218000000-7f5218048000 rw-p 00000000 00:00 0
7f5218048000-7f521c000000 ---p 00000000 00:00 0
7f521c000000-7f521c045000 rw-p 00000000 00:00 0
7f521c045000-7f5220000000 ---p 00000000 00:00 0
7f5220000000-7f5220059000 rw-p 00000000 00:00 0
7f5220059000-7f5224000000 ---p 00000000 00:00 0
7f5224000000-7f5224043000 rw-p 00000000 00:00 0
7f5224043000-7f5228000000 ---p 00000000 00:00 0
7f5228000000-7f5228041000 rw-p 00000000 00:00 0
7f5228041000-7f522c000000 ---p 00000000 00:00 0
7f522c000000-7f522c042000 rw-p 00000000 00:00 0
7f522c042000-7f5230000000 ---p 00000000 00:00 0
7f5230000000-7f5230062000 rw-p 00000000 00:00 0
7f5230062000-7f5234000000 ---p 00000000 00:00 0
7f5234000000-7f52340bc000 rw-p 00000000 00:00 0
7f52340bc000-7f5238000000 ---p 00000000 00:00 0
7f5238000000-7f5238043000 rw-p 00000000 00:00 0
7f5238043000-7f523c000000 ---p 00000000 00:00 0
7f523c000000-7f523c19c000 rw-p 00000000 00:00 0
7f523c19c000-7f5240000000 ---p 00000000 00:00 0
7f524021c000-7f524041d000 rw-p 00000000 00:00 0
7f5240585000-7f5240706000 rw-p 00000000 00:00 0
7f52407f9000-7f52407fa000 ---p 00000000 00:00 0
7f52407fa000-7f5240ffa000 rw-p 00000000 00:00 0
7f5240ffa000-7f5240ffb000 ---p 00000000 00:00 0
7f5240ffb000-7f52417fb000 rw-p 00000000 00:00 0
7f52417fb000-7f52417fc000 ---p 00000000 00:00 0
7f52417fc000-7f5241ffc000 rw-p 00000000 00:00 0
7f5241ffc000-7f5241ffd000 ---p 00000000 00:00 0
7f5241ffd000-7f52427fd000 rw-p 00000000 00:00 0
7f52427fd000-7f52427fe000 ---p 00000000 00:00 0
7f52427fe000-7f5242ffe000 rw-p 00000000 00:00 0
7f5242ffe000-7f5242fff000 ---p 00000000 00:00 0
7f5242fff000-7f52437ff000 rw-p 00000000 00:00 0
7f52437ff000-7f5243800000 ---p 00000000 00:00 0
7f5243800000-7f5244000000 rw-p 00000000 00:00 0
7f5244000000-7f5244021000 rw-p 00000000 00:00 0
7f5244021000-7f5248000000 ---p 00000000 00:00 0
7f524814a000-7f524815e000 r--p 00000000 fd:00 12458197 /home/kasdo/public_html/public/store/867/How to Travel Around the World on a Budget.jpg
7f524815e000-7f5248166000 r--p 00000000 fd:05 78 /tmp/lshttpd/swap/b/b/29877ba19ef1826ffde735bf99cf83.lsb
7f5248166000-7f524817c000 r--p 00000000 fd:00 50341218 /home/oxfordhomestudy/public_html/js/nd/jquery-3.2.1.min.js
7f524817c000-7f5248181000 r--p 00000000 fd:00 50337891 /home/oxfordhomestudy/public_html/css/custom.css
7f5248181000-7f5248186000 r--p 00000000 fd:05 59 /tmp/lshttpd/swap/6/7/90348ab025ac4237b334bc5d7583a4.lsb
7f5248186000-7f52481a1000 r--p 00000000 fd:00 50337890 /home/oxfordhomestudy/public_html/css/bootstrap.min.css
7f52481a1000-7f52481a9000 r--p 00000000 fd:00 50342163 /home/oxfordhomestudy/public_html/css/nd/font-awesome-4.7.0/css/font-awesome.min.css
7f52481c5000-7f52481c6000 ---p 00000000 00:00 0
7f52481c6000-7f52489c6000 rw-p 00000000 00:00 0
7f52489c6000-7f52489c7000 ---p 00000000 00:00 0
7f52489c7000-7f52491c7000 rw-p 00000000 00:00 0
7f52491c7000-7f52491c8000 ---p 00000000 00:00 0
7f52491c8000-7f52499c8000 rw-p 00000000 00:00 0
7f52499c8000-7f52499ca000 r--p 00000000 fd:05 68 /tmp/lshttpd/swap/3/0/8f64c2c2492911a93edeaab9739b4c.lsb
7f52499cb000-7f52499d3000 r--p 00000000 fd:00 53520025 /home/oxfordhomestudy/public_html/js/bootstrap.min.js
7f52499d3000-7f52499d8000 r--p 00000000 fd:05 332 /tmp/lshttpd/swap/7/4/def7e511df08a40d0acd1cff903a63.lsb
7f52499d8000-7f52499e1000 r--p 00000000 fd:00 5114153 /home/ocrmglobal/public_html/fonts/Europa.woff2.ttf
7f52499e1000-7f52499e2000 ---p 00000000 00:00 0
7f52499e2000-7f52499e9000 rw-p 00000000 00:00 0
7f52499e9000-7f52499eb000 r--p 00000000 fd:00 50338115 /home/oxfordhomestudy/public_html/jquery-modal-master/jquery.modal.min.js
7f52499eb000-7f52499ee000 r--p 00000000 fd:00 55236454 /home/oxfordhomestudy/public_html/images/subject/1709828488accountingandfinanceendorsed3.webp
7f52499ee000-7f52499f1000 r--p 00000000 fd:00 55236453 /home/oxfordhomestudy/public_html/images/subject/1709828479accountingandfinanceendorsed2.webp
7f52499fb000-7f52499fc000 ---p 00000000 00:00 0
7f52499fc000-7f524a1fc000 rw-p 00000000 00:00 0
7f524a1fc000-7f524a1fd000 ---p 00000000 00:00 0
7f524a1fd000-7f524a9fd000 rw-p 00000000 00:00 0
7f524a9fd000-7f524a9fe000 ---p 00000000 00:00 0
7f524a9fe000-7f524b1fe000 rw-p 00000000 00:00 0
7f524b1fe000-7f524b1ff000 ---p 00000000 00:00 0
7f524b1ff000-7f524b9ff000 rw-p 00000000 00:00 0
7f524b9ff000-7f524ba00000 ---p 00000000 00:00 0
7f524ba00000-7f524c200000 rw-p 00000000 00:00 0
7f524c200000-7f524c204000 rw-s 00000000 00:13 449507694 /dev/shm/lsws/adns_cache.shm
7f524c204000-7f524c300000 ---s 00054000 00:04 457724077 /dev/zero (deleted)
7f524c300000-7f524c302000 r--p 00000000 fd:05 74 /tmp/lshttpd/swap/a/c/dde7303451f460196416ec53febae9.lsb
7f524c302000-7f524c304000 r--p 00000000 fd:00 4460514 /home/oxfordhomestudy/public_html/css/fonts.googleapis.css
7f524c318000-7f524c31a000 r--p 00000000 fd:00 55236455 /home/oxfordhomestudy/public_html/images/subject/1709828499accountingandfinanceendorsed4.webp
7f524c31a000-7f524c31d000 r--p 00000000 fd:00 55236452 /home/oxfordhomestudy/public_html/images/subject/1709828470Accountingandfinanceendorsed1.webp
7f524c34d000-7f524c353000 r--p 00000000 fd:00 13897390 /home/cpdcourses/public_html/images/diploma/101571584457073PM No 7.webp
7f524c353000-7f524c359000 r--p 00000000 fd:00 13897011 /home/cpdcourses/public_html/images/diploma/809451584458461PM Level 1 Award.webp
7f524c359000-7f524c361000 r--p 00000000 fd:00 13896929 /home/cpdcourses/public_html/images/diploma/539931584457980PM Level 1.webp
7f524c361000-7f524c367000 r--p 00000000 fd:00 13897095 /home/cpdcourses/public_html/images/diploma/450041584457690PM Level 2.webp
7f524c367000-7f524c378000 r--p 00000000 fd:00 52561722 /home/khi0tqe2ntyx/public_html/store/course_data/Diploma in Entrepreneurship.webp
7f524c378000-7f524c380000 rw-p 00000000 00:00 0
7f524c380000-7f524c38a000 r--p 00000000 fd:00 52561797 /home/khi0tqe2ntyx/public_html/store/course_data/Certificate in Fashion and Design Course.webp
7f524c38d000-7f524c394000 r--p 00000000 fd:00 13897152 /home/cpdcourses/public_html/images/diploma/107721584457472PM Level 3.webp
7f524c394000-7f524c398000 rw-p 00000000 00:00 0
7f524c398000-7f524c3a1000 r--p 00000000 fd:00 51777400 /home/khi0tqe2ntyx/public_html/js/bootstrap.min.js
7f524c3a1000-7f524c3aa000 r--p 00000000 fd:00 52561799 /home/khi0tqe2ntyx/public_html/store/course_data/Diploma in Fashion and design Course.webp
7f524c3aa000-7f524c3ae000 rw-p 00000000 00:00 0
7f524c3b0000-7f524c400000 rw-s 00000000 00:04 457706336 /dev/zero (deleted)
7f524c400000-7f524c40a000 rw-s 00000000 00:13 449507175 /dev/shm/lsws/.store.0.shm
7f524c40a000-7f524c500000 ---s 000ae000 00:04 457706323 /dev/zero (deleted)
7f524c500000-7f524c600000 rw-s 00000000 00:04 457706330 /dev/zero (deleted)
7f524c600000-7f524c60a000 rw-s 00000000 00:13 449507171 /dev/shm/lsws/.cachemanidx.shm
7f524c60a000-7f524c800000 ---s 0000a000 00:04 457706321 /dev/zero (deleted)
7f524c800000-7f524c804000 rw-s 00000000 00:13 449507165 /dev/shm/lsws/.quicshmmap.shm
7f524c804000-7f524ca00000 ---s 00004000 00:04 457706317 /dev/zero (deleted)
7f524ca00000-7f524ca68000 rw-s 00000000 00:13 449507162 /dev/shm/lsws/.quicshmdata.shm
7f524ca68000-7f524cc00000 ---s 00068000 00:04 457706316 /dev/zero (deleted)
7f524cc00000-7f524cc08000 rw-s 00000000 00:13 457706313 /dev/shm/lsws/modsec_data.shm
7f524cc08000-7f524ce00000 ---s 00008000 00:04 457706315 /dev/zero (deleted)
7f524ce00000-7f524ce02000 rw-s 00000000 00:13 449507149 /dev/shm/lsws/SSL.shm
7f524ce02000-7f524d000000 ---s 00002000 00:04 457706305 /dev/zero (deleted)
7f524d000000-7f524d128000 rw-s 00000000 00:13 449507146 /dev/shm/lsws/stats_clients.shm
7f524d128000-7f524d300000 ---s 00128000 00:04 457706304 /dev/zero (deleted)
7f524d300000-7f524d302000 rw-s 00000000 00:13 457706301 /dev/shm/lsws/stats.shm
7f524d302000-7f524d400000 ---s 000be000 00:04 457706303 /dev/zero (deleted)
7f524d402000-7f524d406000 rw-p 00000000 00:00 0
7f524d406000-7f524d409000 r--p 00000000 fd:00 33821543 /var/www/html/cp_errordocument.shtml
7f524d40a000-7f524d40d000 r--p 00000000 fd:05 331 /tmp/lshttpd/swap/1/1/a17cf022ef4728b97d81f4c9350240.lsz
7f524d40d000-7f524d40e000 r--p 00000000 fd:00 33817860 /var/www/html/404.shtml
7f524d40e000-7f524d40f000 r--p 00000000 fd:00 49045809 /home/bolconlineco/public_html/404.shtml
7f524d40f000-7f524d412000 r--p 00000000 fd:00 4460513 /home/oxfordhomestudy/public_html/fonts/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
7f524d414000-7f524d41b000 r--p 00000000 fd:00 52561621 /home/khi0tqe2ntyx/public_html/store/course_data/Diploma in Life Coaching Skills.webp
7f524d41b000-7f524d41c000 ---p 00000000 00:00 0
7f524d41c000-7f524d423000 rw-p 00000000 00:00 0
7f524d423000-7f524d444000 rw-p 00000000 00:00 0
7f524d444000-7f524d494000 rw-s 00000000 00:04 457706298 /dev/zero (deleted)
7f524d494000-7f524d4a0000 r-xp 00000000 fd:00 27007099 /usr/lib64/libnss_files-2.17.so
7f524d4a0000-7f524d69f000 ---p 0000c000 fd:00 27007099 /usr/lib64/libnss_files-2.17.so
7f524d69f000-7f524d6a0000 r--p 0000b000 fd:00 27007099 /usr/lib64/libnss_files-2.17.so
7f524d6a0000-7f524d6a1000 rw-p 0000c000 fd:00 27007099 /usr/lib64/libnss_files-2.17.so
7f524d6a1000-7f524d6a7000 rw-p 00000000 00:00 0
7f524d6a9000-7f524d6ab000 rw-s 00000000 00:13 449507695 /dev/shm/lsws/adns_cache.lock
7f524d6ab000-7f524d6ad000 rw-s 00000000 00:04 457706329 /dev/zero (deleted)
7f524d6ad000-7f524d6af000 rw-s 00000000 00:13 449507176 /dev/shm/lsws/.store.0.lock
7f524d6af000-7f524d6b1000 rw-s 00000000 00:13 449507172 /dev/shm/lsws/.cachemanidx.lock
7f524d6b1000-7f524d6b3000 rw-s 00000000 00:13 449507166 /dev/shm/lsws/.quicshmmap.lock
7f524d6b3000-7f524d6b7000 rw-p 00000000 00:00 0
7f524d6b7000-7f524d6b9000 r-xp 00000000 fd:00 27006116 /usr/lib64/libfreebl3.so
7f524d6b9000-7f524d8b8000 ---p 00002000 fd:00 27006116 /usr/lib64/libfreebl3.so
7f524d8b8000-7f524d8b9000 r--p 00001000 fd:00 27006116 /usr/lib64/libfreebl3.so
7f524d8b9000-7f524d8ba000 rw-p 00002000 fd:00 27006116 /usr/lib64/libfreebl3.so
7f524d8ba000-7f524da7e000 r-xp 00000000 fd:00 27001465 /usr/lib64/libc-2.17.so
7f524da7e000-7f524dc7d000 ---p 001c4000 fd:00 27001465 /usr/lib64/libc-2.17.so
7f524dc7d000-7f524dc81000 r--p 001c3000 fd:00 27001465 /usr/lib64/libc-2.17.so
7f524dc81000-7f524dc83000 rw-p 001c7000 fd:00 27001465 /usr/lib64/libc-2.17.so
7f524dc83000-7f524dc89000 rw-p 00000000 00:00 0
7f524dc89000-7f524dd8a000 r-xp 00000000 fd:00 27006655 /usr/lib64/libm-2.17.so
7f524dd8a000-7f524df89000 ---p 00101000 fd:00 27006655 /usr/lib64/libm-2.17.so
7f524df89000-7f524df8a000 r--p 00100000 fd:00 27006655 /usr/lib64/libm-2.17.so
7f524df8a000-7f524df8b000 rw-p 00101000 fd:00 27006655 /usr/lib64/libm-2.17.so
7f524df8b000-7f524df93000 r-xp 00000000 fd:00 27006440 /usr/lib64/libcrypt-2.17.so
7f524df93000-7f524e192000 ---p 00008000 fd:00 27006440 /usr/lib64/libcrypt-2.17.so
7f524e192000-7f524e193000 r--p 00007000 fd:00 27006440 /usr/lib64/libcrypt-2.17.so
7f524e193000-7f524e194000 rw-p 00008000 fd:00 27006440 /usr/lib64/libcrypt-2.17.so
7f524e194000-7f524e1c2000 rw-p 00000000 00:00 0
7f524e1c2000-7f524e1c4000 r-xp 00000000 fd:00 27006566 /usr/lib64/libdl-2.17.so
7f524e1c4000-7f524e3c4000 ---p 00002000 fd:00 27006566 /usr/lib64/libdl-2.17.so
7f524e3c4000-7f524e3c5000 r--p 00002000 fd:00 27006566 /usr/lib64/libdl-2.17.so
7f524e3c5000-7f524e3c6000 rw-p 00003000 fd:00 27006566 /usr/lib64/libdl-2.17.so
7f524e3c6000-7f524e3c7000 rw-p 00000000 00:00 0
7f524e3c7000-7f524e3ce000 r-xp 00000000 fd:00 27007148 /usr/lib64/librt-2.17.so
7f524e3ce000-7f524e5cd000 ---p 00007000 fd:00 27007148 /usr/lib64/librt-2.17.so
7f524e5cd000-7f524e5ce000 r--p 00006000 fd:00 27007148 /usr/lib64/librt-2.17.so
7f524e5ce000-7f524e5cf000 rw-p 00007000 fd:00 27007148 /usr/lib64/librt-2.17.so
7f524e5cf000-7f524e5e6000 r-xp 00000000 fd:00 27001491 /usr/lib64/libpthread-2.17.so
7f524e5e6000-7f524e7e5000 ---p 00017000 fd:00 27001491 /usr/lib64/libpthread-2.17.so
7f524e7e5000-7f524e7e6000 r--p 00016000 fd:00 27001491 /usr/lib64/libpthread-2.17.so
7f524e7e6000-7f524e7e7000 rw-p 00017000 fd:00 27001491 /usr/lib64/libpthread-2.17.so
7f524e7e7000-7f524e7eb000 rw-p 00000000 00:00 0
7f524e7eb000-7f524e7ed000 rw-s 00000000 00:13 449507163 /dev/shm/lsws/.quicshmdata.lock
7f524e7ed000-7f524e7ef000 rw-s 00000000 00:13 457706314 /dev/shm/lsws/modsec_data.lock
7f524e7ef000-7f524e7f1000 rw-s 00000000 00:13 449507150 /dev/shm/lsws/SSL.lock
7f524e7f1000-7f524e7f3000 rw-s 00000000 00:13 449507147 /dev/shm/lsws/stats_clients.lock
7f524e7f3000-7f524e7f5000 rw-s 00000000 00:13 457706302 /dev/shm/lsws/stats.lock
7f524e7f5000-7f524e7f6000 rw-p 00000000 00:00 0
7f524e7f6000-7f524e7f7000 rw-p 00000000 00:00 0
7f524e7f7000-7f524e7f8000 rw-p 00000000 00:00 0
7f524e7f8000-7f524e81a000 r-xp 00000000 fd:00 27003827 /usr/lib64/ld-2.17.so
7f524e81a000-7f524ea19000 ---p 00000000 00:00 0
7f524ea19000-7f524ea1a000 r--p 00021000 fd:00 27003827 /usr/lib64/ld-2.17.so
7f524ea1a000-7f524ea1b000 rw-p 00022000 fd:00 27003827 /usr/lib64/ld-2.17.so
7f524ea1b000-7f524ea1c000 rw-p 00000000 00:00 0
7ffcb6b50000-7ffcb6d57000 rw-p 00000000 00:00 0 [stack]
7ffcb6d7a000-7ffcb6d7c000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
|