The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Another Process Tracking Thread

Discussion in 'Security' started by nagyosha, Mar 19, 2014.

  1. nagyosha

    nagyosha Member

    Joined:
    Mar 9, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    have i been hacked or is this normal ?

    Code:
    Time:    Thu Mar 20 02:21:07 2014 +0700
    PID:     1775 (Parent PID:1333)
    Account: webdesig
    Uptime:  82533 seconds
    
    
    Executable:
    
    /usr/local/cpanel/3rdparty/perl/514/bin/perl
    
    
    Command Line (often faked in exploits):
    
    spamd child
    
    
    Network connections by the process (if any):
    
    tcp: 127.0.0.1:783 -> 0.0.0.0:0
    tcp: 127.0.0.1:783 -> 127.0.0.1:45073
    
    
    Files open by the process (if any):
    
    /dev/null
    /dev/null
    /dev/null
    /usr/local/cpanel/3rdparty/perl/514/bin/spamd
    
    
    Memory maps by the process (if any):
    
    00400000-00402000 r-xp 00000000 08:01 269067                             /usr/local/cpanel/3rdparty/perl/514/bin/perl
    00601000-00602000 rw-p 00001000 08:01 269067                             /usr/local/cpanel/3rdparty/perl/514/bin/perl
    01f73000-0303c000 rw-p 00000000 00:00 0 
    0303c000-04cfe000 rw-p 00000000 00:00 0 
    04cfe000-05710000 rw-p 00000000 00:00 0 
    7f8dc72bd000-7f8dc72c2000 r-xp 00000000 08:01 20924                      /lib64/libnss_dns-2.12.so
    7f8dc72c2000-7f8dc74c1000 ---p 00005000 08:01 20924                      /lib64/libnss_dns-2.12.so
    7f8dc74c1000-7f8dc74c2000 r--p 00004000 08:01 20924                      /lib64/libnss_dns-2.12.so
    7f8dc74c2000-7f8dc74c3000 rw-p 00005000 08:01 20924                      /lib64/libnss_dns-2.12.so
    7f8dc74c3000-7f8dc74e0000 r-xp 00000000 08:01 20944                      /lib64/libselinux.so.1
    7f8dc74e0000-7f8dc76df000 ---p 0001d000 08:01 20944                      /lib64/libselinux.so.1
    7f8dc76df000-7f8dc76e0000 r--p 0001c000 08:01 20944                      /lib64/libselinux.so.1
    7f8dc76e0000-7f8dc76e1000 rw-p 0001d000 08:01 20944                      /lib64/libselinux.so.1
    7f8dc76e1000-7f8dc76e2000 rw-p 00000000 00:00 0 
    7f8dc76e2000-7f8dc76f8000 r-xp 00000000 08:01 20942                      /lib64/libresolv-2.12.so
    7f8dc76f8000-7f8dc78f8000 ---p 00016000 08:01 20942                      /lib64/libresolv-2.12.so
    7f8dc78f8000-7f8dc78f9000 r--p 00016000 08:01 20942                      /lib64/libresolv-2.12.so
    7f8dc78f9000-7f8dc78fa000 rw-p 00017000 08:01 20942                      /lib64/libresolv-2.12.so
    7f8dc78fa000-7f8dc78fc000 rw-p 00000000 00:00 0 
    7f8dc78fc000-7f8dc78fe000 r-xp 00000000 08:01 20907                      /lib64/libkeyutils.so.1.3
    7f8dc78fe000-7f8dc7afd000 ---p 00002000 08:01 20907                      /lib64/libkeyutils.so.1.3
    7f8dc7afd000-7f8dc7afe000 r--p 00001000 08:01 20907                      /lib64/libkeyutils.so.1.3
    7f8dc7afe000-7f8dc7aff000 rw-p 00002000 08:01 20907                      /lib64/libkeyutils.so.1.3
    7f8dc7aff000-7f8dc7b09000 r-xp 00000000 08:01 20909                      /lib64/libkrb5support.so.0.1
    7f8dc7b09000-7f8dc7d08000 ---p 0000a000 08:01 20909                      /lib64/libkrb5support.so.0.1
    7f8dc7d08000-7f8dc7d09000 r--p 00009000 08:01 20909                      /lib64/libkrb5support.so.0.1
    7f8dc7d09000-7f8dc7d0a000 rw-p 0000a000 08:01 20909                      /lib64/libkrb5support.so.0.1
    7f8dc7d0a000-7f8dc7d33000 r-xp 00000000 08:01 20906                      /lib64/libk5crypto.so.3.1
    7f8dc7d33000-7f8dc7f33000 ---p 00029000 08:01 20906                      /lib64/libk5crypto.so.3.1
    7f8dc7f33000-7f8dc7f34000 r--p 00029000 08:01 20906                      /lib64/libk5crypto.so.3.1
    7f8dc7f34000-7f8dc7f35000 rw-p 0002a000 08:01 20906                      /lib64/libk5crypto.so.3.1
    7f8dc7f35000-7f8dc7f36000 rw-p 00000000 00:00 0 
    7f8dc7f36000-7f8dc7f39000 r-xp 00000000 08:01 20879                      /lib64/libcom_err.so.2.1
    7f8dc7f39000-7f8dc8138000 ---p 00003000 08:01 20879                      /lib64/libcom_err.so.2.1
    7f8dc8138000-7f8dc8139000 r--p 00002000 08:01 20879                      /lib64/libcom_err.so.2.1
    7f8dc8139000-7f8dc813a000 rw-p 00003000 08:01 20879                      /lib64/libcom_err.so.2.1
    7f8dc813a000-7f8dc8215000 r-xp 00000000 08:01 20908                      /lib64/libkrb5.so.3.3
    7f8dc8215000-7f8dc8414000 ---p 000db000 08:01 20908                      /lib64/libkrb5.so.3.3
    7f8dc8414000-7f8dc841e000 r--p 000da000 08:01 20908                      /lib64/libkrb5.so.3.3
    7f8dc841e000-7f8dc8420000 rw-p 000e4000 08:01 20908                      /lib64/libkrb5.so.3.3
    7f8dc8420000-7f8dc8461000 r-xp 00000000 08:01 20897                      /lib64/libgssapi_krb5.so.2.2
    7f8dc8461000-7f8dc8661000 ---p 00041000 08:01 20897                      /lib64/libgssapi_krb5.so.2.2
    7f8dc8661000-7f8dc8662000 r--p 00041000 08:01 20897                      /lib64/libgssapi_krb5.so.2.2
    7f8dc8662000-7f8dc8664000 rw-p 00042000 08:01 20897                      /lib64/libgssapi_krb5.so.2.2
    7f8dc8664000-7f8dc86c5000 r-xp 00000000 08:01 570                        /usr/lib64/libssl.so.1.0.1e
    7f8dc86c5000-7f8dc88c4000 ---p 00061000 08:01 570                        /usr/lib64/libssl.so.1.0.1e
    7f8dc88c4000-7f8dc88c8000 r--p 00060000 08:01 570                        /usr/lib64/libssl.so.1.0.1e
    7f8dc88c8000-7f8dc88cf000 rw-p 00064000 08:01 570                        /usr/lib64/libssl.so.1.0.1e
    7f8dc88cf000-7f8dc88d5000 r-xp 00000000 08:01 658432                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
    7f8dc88d5000-7f8dc8ad5000 ---p 00006000 08:01 658432                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
    7f8dc8ad5000-7f8dc8ad6000 rw-p 00006000 08:01 658432                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
    7f8dc8ad6000-7f8dc8aeb000 r-xp 00000000 08:01 20954                      /lib64/libz.so.1.2.3
    7f8dc8aeb000-7f8dc8cea000 ---p 00015000 08:01 20954                      /lib64/libz.so.1.2.3
    7f8dc8cea000-7f8dc8ceb000 r--p 00014000 08:01 20954                      /lib64/libz.so.1.2.3
    7f8dc8ceb000-7f8dc8cec000 rw-p 00015000 08:01 20954                      /lib64/libz.so.1.2.3
    7f8dc8cec000-7f8dc8ea1000 r-xp 00000000 08:01 564                        /usr/lib64/libcrypto.so.1.0.1e
    7f8dc8ea1000-7f8dc90a1000 ---p 001b5000 08:01 564                        /usr/lib64/libcrypto.so.1.0.1e
    7f8dc90a1000-7f8dc90bc000 r--p 001b5000 08:01 564                        /usr/lib64/libcrypto.so.1.0.1e
    7f8dc90bc000-7f8dc90c8000 rw-p 001d0000 08:01 564                        /usr/lib64/libcrypto.so.1.0.1e
    7f8dc90c8000-7f8dc90cc000 rw-p 00000000 00:00 0 
    7f8dc90cc000-7f8dc90d2000 r-xp 00000000 08:01 658358                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
    7f8dc90d2000-7f8dc92d1000 ---p 00006000 08:01 658358                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
    7f8dc92d1000-7f8dc92d2000 rw-p 00005000 08:01 658358                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
    7f8dc92d2000-7f8dc92ff000 r-xp 00000000 08:01 272914                     /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
    7f8dc92ff000-7f8dc94fe000 ---p 0002d000 08:01 272914                     /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
    7f8dc94fe000-7f8dc94ff000 rw-p 0002c000 08:01 272914                     /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
    7f8dc94ff000-7f8dc9502000 r-xp 00000000 08:01 656083                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
    7f8dc9502000-7f8dc9701000 ---p 00003000 08:01 656083                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
    7f8dc9701000-7f8dc9702000 rw-p 00002000 08:01 656083                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
    7f8dc9702000-7f8dc9706000 r-xp 00000000 08:01 787008                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
    7f8dc9706000-7f8dc9905000 ---p 00004000 08:01 787008                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
    7f8dc9905000-7f8dc9906000 rw-p 00003000 08:01 787008                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
    7f8dc9906000-7f8dc990a000 r-xp 00000000 08:01 655598                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
    7f8dc990a000-7f8dc9b09000 ---p 00004000 08:01 655598                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
    7f8dc9b09000-7f8dc9b0a000 rw-p 00003000 08:01 655598                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
    7f8dc9b0a000-7f8dc9c79000 r-xp 00000000 08:01 20881                      /lib64/libdb-4.7.so
    7f8dc9c79000-7f8dc9e78000 ---p 0016f000 08:01 20881                      /lib64/libdb-4.7.so
    7f8dc9e78000-7f8dc9e7e000 rw-p 0016e000 08:01 20881                      /lib64/libdb-4.7.so
    7f8dc9e7e000-7f8dc9e88000 r-xp 00000000 08:01 528376                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/DB_File/DB_File.so
    7f8dc9e88000-7f8dca088000 ---p 0000a000 08:01 528376                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/DB_File/DB_File.so
    7f8dca088000-7f8dca089000 rw-p 0000a000 08:01 528376                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/DB_File/DB_File.so
    7f8dca089000-7f8dca08f000 r-xp 00000000 08:01 269092                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/List/Util/Util.so
    7f8dca08f000-7f8dca28e000 ---p 00006000 08:01 269092                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/List/Util/Util.so
    7f8dca28e000-7f8dca28f000 rw-p 00005000 08:01 269092                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/List/Util/Util.so
    7f8dca28f000-7f8dca29b000 r-xp 00000000 08:01 20925                      /lib64/libnss_files-2.12.so
    7f8dca29b000-7f8dca49b000 ---p 0000c000 08:01 20925                      /lib64/libnss_files-2.12.so
    7f8dca49b000-7f8dca49c000 r--p 0000c000 08:01 20925                      /lib64/libnss_files-2.12.so
    7f8dca49c000-7f8dca49d000 rw-p 0000d000 08:01 20925                      /lib64/libnss_files-2.12.so
    7f8dca49d000-7f8dca4a0000 r-xp 00000000 08:01 528241                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
    7f8dca4a0000-7f8dca6a0000 ---p 00003000 08:01 528241                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
    7f8dca6a0000-7f8dca6a1000 rw-p 00003000 08:01 528241                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
    7f8dca6a1000-7f8dca6a3000 r-xp 00000000 08:01 269106                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so
    7f8dca6a3000-7f8dca8a2000 ---p 00002000 08:01 269106                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so
    7f8dca8a2000-7f8dca8a3000 rw-p 00001000 08:01 269106                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so
    7f8dca8a3000-7f8dca8aa000 r-xp 00000000 08:01 410752                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
    7f8dca8aa000-7f8dcaaa9000 ---p 00007000 08:01 410752                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
    7f8dcaaa9000-7f8dcaaaa000 rw-p 00006000 08:01 410752                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
    7f8dcaaaa000-7f8dcaab4000 r-xp 00000000 08:01 527976                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA/SHA.so
    7f8dcaab4000-7f8dcacb4000 ---p 0000a000 08:01 527976                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA/SHA.so
    7f8dcacb4000-7f8dcacb5000 rw-p 0000a000 08:01 527976                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA/SHA.so
    7f8dcacb5000-7f8dcace7000 r-xp 00000000 08:01 20900                      /lib64/libidn.so.11.6.1
    7f8dcace7000-7f8dcaee6000 ---p 00032000 08:01 20900                      /lib64/libidn.so.11.6.1
    7f8dcaee6000-7f8dcaee7000 rw-p 00031000 08:01 20900                      /lib64/libidn.so.11.6.1
    7f8dcaee7000-7f8dcaeeb000 r-xp 00000000 08:01 657341                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so
    7f8dcaeeb000-7f8dcb0ea000 ---p 00004000 08:01 657341                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so
    7f8dcb0ea000-7f8dcb0eb000 rw-p 00003000 08:01 657341                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so
    7f8dcb0eb000-7f8dcb0f3000 r-xp 00000000 08:01 527892                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so
    7f8dcb0f3000-7f8dcb2f2000 ---p 00008000 08:01 527892                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so
    7f8dcb2f2000-7f8dcb2f3000 rw-p 00007000 08:01 527892                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so
    7f8dcb2f3000-7f8dcb2f5000 r-xp 00000000 08:01 655921                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/DNS/DNS.so
    7f8dcb2f5000-7f8dcb4f4000 ---p 00002000 08:01 655921                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/DNS/DNS.so
    7f8dcb4f4000-7f8dcb4f5000 rw-p 00001000 08:01 655921                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/DNS/DNS.so
    7f8dcb4f5000-7f8dcb4fe000 r-xp 00000000 08:01 655956                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
    7f8dcb4fe000-7f8dcb6fe000 ---p 00009000 08:01 655956                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
    7f8dcb6fe000-7f8dcb6ff000 rw-p 00009000 08:01 655956                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
    7f8dcb6ff000-7f8dcb703000 r-xp 00000000 08:01 656149                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
    7f8dcb703000-7f8dcb903000 ---p 00004000 08:01 656149                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
    7f8dcb903000-7f8dcb904000 rw-p 00004000 08:01 656149                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
    7f8dcb904000-7f8dcb908000 r-xp 00000000 08:01 527669                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/File/Glob/Glob.so
    7f8dcb908000-7f8dcbb07000 ---p 00004000 08:01 527669                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/File/Glob/Glob.so
    7f8dcbb07000-7f8dcbb08000 rw-p 00003000 08:01 527669                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/File/Glob/Glob.so
    7f8dcbb08000-7f8dcbb0b000 r-xp 00000000 08:01 410742                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/MIME/Base64/Base64.so
    7f8dcbb0b000-7f8dcbd0a000 ---p 00003000 08:01 410742                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/MIME/Base64/Base64.so
    7f8dcbd0a000-7f8dcbd0b000 rw-p 00002000 08:01 410742                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/MIME/Base64/Base64.so
    7f8dcbd0b000-7f8dcbd22000 r-xp 00000000 08:01 20940                      /lib64/libpthread-2.12.so
    7f8dcbd22000-7f8dcbf22000 ---p 00017000 08:01 20940                      /lib64/libpthread-2.12.so
    7f8dcbf22000-7f8dcbf23000 r--p 00017000 08:01 20940                      /lib64/libpthread-2.12.so
    7f8dcbf23000-7f8dcbf24000 rw-p 00018000 08:01 20940                      /lib64/libpthread-2.12.so
    7f8dcbf24000-7f8dcbf28000 rw-p 00000000 00:00 0 
    7f8dcbf28000-7f8dcbf2f000 r-xp 00000000 08:01 20943                      /lib64/librt-2.12.so
    7f8dcbf2f000-7f8dcc12e000 ---p 00007000 08:01 20943                      /lib64/librt-2.12.so
    7f8dcc12e000-7f8dcc12f000 r--p 00006000 08:01 20943                      /lib64/librt-2.12.so
    7f8dcc12f000-7f8dcc130000 rw-p 00007000 08:01 20943                      /lib64/librt-2.12.so
    7f8dcc130000-7f8dcc135000 r-xp 00000000 08:01 410747                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
    7f8dcc135000-7f8dcc334000 ---p 00005000 08:01 410747                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
    7f8dcc334000-7f8dcc335000 rw-p 00004000 08:01 410747                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
    7f8dcc335000-7f8dcc34b000 r-xp 00000000 08:01 527682                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/POSIX/POSIX.so
    7f8dcc34b000-7f8dcc54a000 ---p 00016000 08:01 527682                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/POSIX/POSIX.so
    7f8dcc54a000-7f8dcc54d000 rw-p 00015000 08:01 527682                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/POSIX/POSIX.so
    7f8dcc54d000-7f8dcc550000 r-xp 00000000 08:01 527668                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Fcntl/Fcntl.so
    7f8dcc550000-7f8dcc750000 ---p 00003000 08:01 527668                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Fcntl/Fcntl.so
    7f8dcc750000-7f8dcc751000 rw-p 00003000 08:01 527668                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Fcntl/Fcntl.so
    7f8dcc751000-7f8dcc755000 r-xp 00000000 08:01 657386                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
    7f8dcc755000-7f8dcc954000 ---p 00004000 08:01 657386                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
    7f8dcc954000-7f8dcc955000 rw-p 00003000 08:01 657386                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
    7f8dcc955000-7f8dcc959000 r-xp 00000000 08:01 269124                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/IO/IO.so
    7f8dcc959000-7f8dccb58000 ---p 00004000 08:01 269124                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/IO/IO.so
    7f8dccb58000-7f8dccb59000 rw-p 00003000 08:01 269124                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/IO/IO.so
    7f8dccb59000-7f8dccb5f000 r-xp 00000000 08:01 527855                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Socket/Socket.so
    7f8dccb5f000-7f8dccd5f000 ---p 00006000 08:01 527855                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Socket/Socket.so
    7f8dccd5f000-7f8dccd61000 rw-p 00006000 08:01 527855                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Socket/Socket.so
    7f8dccd61000-7f8dccda7000 r-xp 00000000 08:01 527867                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/re/re.so
    7f8dccda7000-7f8dccfa7000 ---p 00046000 08:01 527867                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/re/re.so
    7f8dccfa7000-7f8dccfa8000 rw-p 00046000 08:01 527867                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/re/re.so
    7f8dccfa8000-7f8dcd019000 r-xp 00000000 08:01 20889                      /lib64/libfreebl3.so
    7f8dcd019000-7f8dcd218000 ---p 00071000 08:01 20889                      /lib64/libfreebl3.so
    7f8dcd218000-7f8dcd21a000 r--p 00070000 08:01 20889                      /lib64/libfreebl3.so
    7f8dcd21a000-7f8dcd21b000 rw-p 00072000 08:01 20889                      /lib64/libfreebl3.so
    7f8dcd21b000-7f8dcd21f000 rw-p 00000000 00:00 0 
    7f8dcd21f000-7f8dcd3aa000 r-xp 00000000 08:01 20875                      /lib64/libc-2.12.so
    7f8dcd3aa000-7f8dcd5a9000 ---p 0018b000 08:01 20875                      /lib64/libc-2.12.so
    7f8dcd5a9000-7f8dcd5ad000 r--p 0018a000 08:01 20875                      /lib64/libc-2.12.so
    7f8dcd5ad000-7f8dcd5ae000 rw-p 0018e000 08:01 20875                      /lib64/libc-2.12.so
    7f8dcd5ae000-7f8dcd5b3000 rw-p 00000000 00:00 0 
    7f8dcd5b3000-7f8dcd5b5000 r-xp 00000000 08:01 20950                      /lib64/libutil-2.12.so
    7f8dcd5b5000-7f8dcd7b4000 ---p 00002000 08:01 20950                      /lib64/libutil-2.12.so
    7f8dcd7b4000-7f8dcd7b5000 r--p 00001000 08:01 20950                      /lib64/libutil-2.12.so
    7f8dcd7b5000-7f8dcd7b6000 rw-p 00002000 08:01 20950                      /lib64/libutil-2.12.so
    7f8dcd7b6000-7f8dcd7bd000 r-xp 00000000 08:01 20880                      /lib64/libcrypt-2.12.so
    7f8dcd7bd000-7f8dcd9bd000 ---p 00007000 08:01 20880                      /lib64/libcrypt-2.12.so
    7f8dcd9bd000-7f8dcd9be000 r--p 00007000 08:01 20880                      /lib64/libcrypt-2.12.so
    7f8dcd9be000-7f8dcd9bf000 rw-p 00008000 08:01 20880                      /lib64/libcrypt-2.12.so
    7f8dcd9bf000-7f8dcd9ed000 rw-p 00000000 00:00 0 
    7f8dcd9ed000-7f8dcda70000 r-xp 00000000 08:01 20914                      /lib64/libm-2.12.so
    7f8dcda70000-7f8dcdc6f000 ---p 00083000 08:01 20914                      /lib64/libm-2.12.so
    7f8dcdc6f000-7f8dcdc70000 r--p 00082000 08:01 20914                      /lib64/libm-2.12.so
    7f8dcdc70000-7f8dcdc71000 rw-p 00083000 08:01 20914                      /lib64/libm-2.12.so
    7f8dcdc71000-7f8dcdc73000 r-xp 00000000 08:01 20883                      /lib64/libdl-2.12.so
    7f8dcdc73000-7f8dcde73000 ---p 00002000 08:01 20883                      /lib64/libdl-2.12.so
    7f8dcde73000-7f8dcde74000 r--p 00002000 08:01 20883                      /lib64/libdl-2.12.so
    7f8dcde74000-7f8dcde75000 rw-p 00003000 08:01 20883                      /lib64/libdl-2.12.so
    7f8dcde75000-7f8dcde8b000 r-xp 00000000 08:01 20921                      /lib64/libnsl-2.12.so
    7f8dcde8b000-7f8dce08a000 ---p 00016000 08:01 20921                      /lib64/libnsl-2.12.so
    7f8dce08a000-7f8dce08b000 r--p 00015000 08:01 20921                      /lib64/libnsl-2.12.so
    7f8dce08b000-7f8dce08c000 rw-p 00016000 08:01 20921                      /lib64/libnsl-2.12.so
    7f8dce08c000-7f8dce08e000 rw-p 00000000 00:00 0 
    7f8dce08e000-7f8dce1ba000 r-xp 00000000 08:01 527505                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/CORE/libperl.so
    7f8dce1ba000-7f8dce3ba000 ---p 0012c000 08:01 527505                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/CORE/libperl.so
    7f8dce3ba000-7f8dce3c3000 rw-p 0012c000 08:01 527505                     /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/CORE/libperl.so
    7f8dce3c3000-7f8dce3c4000 rw-p 00000000 00:00 0 
    7f8dce3c4000-7f8dce3ca000 r-xp 00000000 08:01 956                        /usr/lib64/libgdbm.so.2.0.0
    7f8dce3ca000-7f8dce5c9000 ---p 00006000 08:01 956                        /usr/lib64/libgdbm.so.2.0.0
    7f8dce5c9000-7f8dce5ca000 rw-p 00005000 08:01 956                        /usr/lib64/libgdbm.so.2.0.0
    7f8dce5ca000-7f8dce5ea000 r-xp 00000000 08:01 20865                      /lib64/ld-2.12.so
    7f8dce73b000-7f8dce7b9000 rw-p 00000000 00:00 0 
    7f8dce7da000-7f8dce7e0000 rw-p 00000000 00:00 0 
    7f8dce7e8000-7f8dce7e9000 rw-p 00000000 00:00 0 
    7f8dce7e9000-7f8dce7ea000 r--p 0001f000 08:01 20865                      /lib64/ld-2.12.so
    7f8dce7ea000-7f8dce7eb000 rw-p 00020000 08:01 20865                      /lib64/ld-2.12.so
    7f8dce7eb000-7f8dce7ec000 rw-p 00000000 00:00 0 
    7fffca1ef000-7fffca228000 rw-p 00000000 00:00 0                          [stack]
    7fffca29b000-7fffca29c000 r-xp 00000000 00:00 0                          [vdso]
    ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
     
  2. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    940
    Likes Received:
    55
    Trophy Points:
    28
    cPanel Access Level:
    DataCenter Provider
    Most likely this is not malicious, sometimes you need to whitelist spamd in /etc/csf/csf.pignore
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    650
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    I don't see anything that would indicate a malicious process from your output, however it's important to keep in mind that it's difficult to provide a definitive answer on the state of your system without access to it. You may want to consult with a qualified system administrator or security specialist if you are concerned that your server is hacked.

    Thank you.
     
Loading...

Share This Page