LFD Suspicious process running under user

[Civijev]

Hi, I received a lot emails with a similar log like this one below. I was hide server ip address and username of account and addon domain. I know that it is not easy every time to guess is this process secure but maybe for some experience admin will easy to see.
I have one more question:
I see many times that php fpm of some users take too much of cpu. Some time it is 100% usage about one hour. I have 4 cpu on VPS and I was try to optimise fpm for that user but still problem exist.
Question is:
Is there any way to see exactly which process is running inside php fpm, I mean to see if it's a script from a web page, or which script is running php fpm to overload the server on one hour?
I was try with top, htop, sar command but process is always hidden inside php fpm

Here is a email alert log from LFD. Is this process secure or it is obviously hacker attack?

Time: Sat Nov 13 23:03:20 2021 +0100
PID: 8607 (Parent PID:1668)
Account: accountusername
Uptime: 112 seconds


Executable:

/opt/cpanel/ea-php74/root/usr/sbin/php-fpm


Command Line (often faked in exploits):

php-fpm: pool addondomain


Network connections by the process (if any):

tcp: serverIPaddress:44872 -> serverIPaddress:443


Files open by the process (if any):

/dev/null
/var/cpanel/php/sessions/ea-php74/sess_f67549f703214d07fb4435c67e5b3248


Memory maps by the process (if any):

00400000-007bc000 r-xp 00000000 08:01 907093 /opt/cpanel/ea-php74/root/usr/sbin/php-fpm
00b7c000-00c00000 r--p 0057c000 08:01 907093 /opt/cpanel/ea-php74/root/usr/sbin/php-fpm
00c00000-00c04000 rw-p 00600000 08:01 907093 /opt/cpanel/ea-php74/root/usr/sbin/php-fpm
00c04000-00c22000 rw-p 00000000 00:00 0
0224a000-024ae000 rw-p 00000000 00:00 0 [heap]
024ae000-025bf000 rw-p 00000000 00:00 0 [heap]
7fa9a8000000-7fa9a8021000 rw-p 00000000 00:00 0
7fa9a8021000-7fa9ac000000 ---p 00000000 00:00 0
7fa9adc00000-7fa9aec00000 rw-p 00000000 00:00 0
7fa9aedff000-7fa9aee00000 ---p 00000000 00:00 0
7fa9aee00000-7fa9afa00000 rw-p 00000000 00:00 0
7fa9afc00000-7fa9b0000000 rw-p 00000000 00:00 0
7fa9b0200000-7fa9b0600000 rw-p 00000000 00:00 0
7fa9b0800000-7fa9b0c00000 rw-p 00000000 00:00 0
7fa9b0e00000-7fa9b1080000 rw-p 00000000 00:00 0
7fa9b1200000-7fa9b2200000 rw-p 00000000 00:00 0
7fa9b2400000-7fa9b2800000 rw-p 00000000 00:00 0
7fa9b2b18000-7fa9b2b38000 rwxp 00000000 00:00 0
7fa9b2b38000-7fa9b2b4a000 r-xp 00000000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2b4a000-7fa9b2d4a000 ---p 00012000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2d4a000-7fa9b2d4b000 r--p 00012000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2d4b000-7fa9b2d4c000 rw-p 00013000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2d4c000-7fa9b2d53000 r-xp 00000000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2d53000-7fa9b2f52000 ---p 00007000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2f52000-7fa9b2f53000 r--p 00006000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2f53000-7fa9b2f54000 rw-p 00007000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2f54000-7fa9b2f5a000 r-xp 00000000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b2f5a000-7fa9b315a000 ---p 00006000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b315a000-7fa9b315b000 r--p 00006000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b315b000-7fa9b315c000 rw-p 00007000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b315c000-7fa9b3162000 r-xp 00000000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3162000-7fa9b3362000 ---p 00006000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3362000-7fa9b3363000 r--p 00006000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3363000-7fa9b3364000 rw-p 00007000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3364000-7fa9b3380000 r-xp 00000000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3380000-7fa9b3580000 ---p 0001c000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3580000-7fa9b3584000 r--p 0001c000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3584000-7fa9b3585000 rw-p 00020000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3585000-7fa9b35a7000 r-xp 00000000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b35a7000-7fa9b37a6000 ---p 00022000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b37a6000-7fa9b37a7000 r--p 00021000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b37a7000-7fa9b37a8000 rw-p 00022000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b37a8000-7fa9b37b5000 r-xp 00000000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b37b5000-7fa9b39b5000 ---p 0000d000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b39b5000-7fa9b39b7000 r--p 0000d000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b39b7000-7fa9b39b8000 rw-p 0000f000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b39b8000-7fa9b39f4000 r-xp 00000000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b39f4000-7fa9b3bf4000 ---p 0003c000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b3bf4000-7fa9b3bf5000 r--p 0003c000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b3bf5000-7fa9b3bf6000 rw-p 0003d000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b3bf6000-7fa9b3bf7000 rw-p 00000000 00:00 0
7fa9b3bf7000-7fa9b3c0b000 r-xp 00000000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3c0b000-7fa9b3e0a000 ---p 00014000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3e0a000-7fa9b3e0b000 r--p 00013000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3e0b000-7fa9b3e0c000 rw-p 00014000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3e0c000-7fa9b3e12000 r-xp 00000000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b3e12000-7fa9b4012000 ---p 00006000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b4012000-7fa9b4013000 r--p 00006000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b4013000-7fa9b4014000 rw-p 00007000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b4014000-7fa9b401c000 r-xp 00000000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b401c000-7fa9b421c000 ---p 00008000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b421c000-7fa9b421f000 r--p 00008000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b421f000-7fa9b4220000 rw-p 0000b000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b4220000-7fa9b422a000 r-xp 00000000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b422a000-7fa9b442a000 ---p 0000a000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b442a000-7fa9b442c000 r--p 0000a000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b442c000-7fa9b442d000 rw-p 0000c000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b442d000-7fa9b4431000 r-xp 00000000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4431000-7fa9b4630000 ---p 00004000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4630000-7fa9b4631000 r--p 00003000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4631000-7fa9b4632000 rw-p 00004000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4632000-7fa9b46e3000 r-xp 00000000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b46e3000-7fa9b48e2000 ---p 000b1000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b48e2000-7fa9b48e4000 r--p 000b0000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b48e4000-7fa9b48e7000 rw-p 000b2000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b48e7000-7fa9b48f2000 r-xp 00000000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b48f2000-7fa9b4af2000 ---p 0000b000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b4af2000-7fa9b4af3000 r--p 0000b000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b4af3000-7fa9b4af4000 rw-p 0000c000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b4af4000-7fa9b4b08000 r-xp 00000000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4b08000-7fa9b4d07000 ---p 00014000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4d07000-7fa9b4d09000 r--p 00013000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4d09000-7fa9b4d0a000 rw-p 00015000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4d0a000-7fa9b4d52000 r-xp 00000000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4d52000-7fa9b4f51000 ---p 00048000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4f51000-7fa9b4f54000 r--p 00047000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4f54000-7fa9b4f55000 rw-p 0004a000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4f55000-7fa9b4f60000 r-xp 00000000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b4f60000-7fa9b5160000 ---p 0000b000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b5160000-7fa9b5161000 r--p 0000b000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b5161000-7fa9b5162000 rw-p 0000c000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b5162000-7fa9b5169000 r-xp 00000000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b5169000-7fa9b5369000 ---p 00007000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b5369000-7fa9b536a000 r--p 00007000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b536a000-7fa9b536b000 rw-p 00008000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b536b000-7fa9b53aa000 r-xp 00000000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b53aa000-7fa9b55a9000 ---p 0003f000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b55a9000-7fa9b55ac000 r--p 0003e000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b55ac000-7fa9b55ad000 rw-p 00041000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b55ad000-7fa9b55c5000 r-xp 00000000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b55c5000-7fa9b57c5000 ---p 00018000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b57c5000-7fa9b57c7000 r--p 00018000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b57c7000-7fa9b57c8000 rw-p 0001a000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b57c8000-7fa9b5801000 r-xp 00000000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5801000-7fa9b5a00000 ---p 00039000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5a00000-7fa9b5a05000 r--p 00038000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5a05000-7fa9b5a07000 rw-p 0003d000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5a07000-7fa9b5a08000 rw-p 00000000 00:00 0
7fa9b5a08000-7fa9b5a90000 r-xp 00000000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5a90000-7fa9b5c90000 ---p 00088000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5c90000-7fa9b5c92000 r--p 00088000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5c92000-7fa9b5c99000 rw-p 0008a000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5c99000-7fa9b5d8d000 r-xp 00000000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5d8d000-7fa9b5f8c000 ---p 000f4000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5f8c000-7fa9b5f95000 r--p 000f3000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5f95000-7fa9b5f97000 rw-p 000fc000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5f97000-7fa9b5fa1000 r-xp 00000000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b5fa1000-7fa9b61a0000 ---p 0000a000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b61a0000-7fa9b61a1000 r--p 00009000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b61a1000-7fa9b61a2000 rw-p 0000a000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b61a2000-7fa9b61a6000 r-xp 00000000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b61a6000-7fa9b63a6000 ---p 00004000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b63a6000-7fa9b63a7000 r--p 00004000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b63a7000-7fa9b63a8000 rw-p 00005000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b63a8000-7fa9b63c6000 r-xp 00000000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b63c6000-7fa9b65c5000 ---p 0001e000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b65c5000-7fa9b65c6000 r--p 0001d000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b65c6000-7fa9b65c7000 rw-p 0001e000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b65c7000-7fa9b65d1000 rw-p 00000000 00:00 0
7fa9b65d1000-7fa9b65de000 r-xp 00000000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b65de000-7fa9b67de000 ---p 0000d000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b67de000-7fa9b67df000 r--p 0000d000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b67df000-7fa9b67e0000 rw-p 0000e000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b67e0000-7fa9b68e8000 r-xp 00000000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b68e8000-7fa9b6ae8000 ---p 00108000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b6ae8000-7fa9b6aea000 r--p 00108000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b6aea000-7fa9b6af3000 rw-p 0010a000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b6af3000-7fa9b6af4000 rw-p 00000000 00:00 0
7fa9b6af4000-7fa9b6b08000 r-xp 00000000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6b08000-7fa9b6d07000 ---p 00014000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6d07000-7fa9b6d0a000 r--p 00013000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6d0a000-7fa9b6d0b000 rw-p 00016000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6d0b000-7fa9b6d14000 r-xp 00000000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6d14000-7fa9b6f14000 ---p 00009000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6f14000-7fa9b6f15000 r--p 00009000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6f15000-7fa9b6f16000 rw-p 0000a000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6f16000-7fa9b6f18000 r-xp 00000000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b6f18000-7fa9b7118000 ---p 00002000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b7118000-7fa9b7119000 r--p 00002000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b7119000-7fa9b711a000 rw-p 00003000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b711a000-7fa9b7141000 r-xp 00000000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7141000-7fa9b7340000 ---p 00027000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7340000-7fa9b7341000 r--p 00026000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7341000-7fa9b7342000 rw-p 00027000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7342000-7fa9b73f9000 r-xp 00000000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b73f9000-7fa9b75f9000 ---p 000b7000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b75f9000-7fa9b7600000 r--p 000b7000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b7600000-7fa9b7601000 rw-p 000be000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b7601000-7fa9b7739000 r-xp 00000000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b7739000-7fa9b7939000 ---p 00138000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b7939000-7fa9b793a000 r--p 00138000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b793a000-7fa9b793f000 rw-p 00139000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b793f000-7fa9b7950000 r-xp 00000000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7950000-7fa9b7b4f000 ---p 00011000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7b4f000-7fa9b7b50000 r--p 00010000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7b50000-7fa9b7b51000 rw-p 00011000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7b51000-7fa9b7b94000 r-xp 00000000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7b94000-7fa9b7d94000 ---p 00043000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7d94000-7fa9b7d95000 r--p 00043000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7d95000-7fa9b7d96000 rw-p 00044000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7d96000-7fa9b7da6000 rw-p 00000000 00:00 0
7fa9b7da6000-7fa9b7df2000 r-xp 00000000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7df2000-7fa9b7ff1000 ---p 0004c000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7ff1000-7fa9b7ff2000 r--p 0004b000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7ff2000-7fa9b7ff3000 rw-p 0004c000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7ff3000-7fa9b7ff6000 rw-p 00000000 00:00 0
7fa9b7ff6000-7fa9b801f000 r-xp 00000000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b801f000-7fa9b821f000 ---p 00029000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b821f000-7fa9b8220000 r--p 00029000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b8220000-7fa9b8221000 rw-p 0002a000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b8221000-7fa9b827b000 r-xp 00000000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b827b000-7fa9b847a000 ---p 0005a000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b847a000-7fa9b847f000 r--p 00059000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b847f000-7fa9b8480000 rw-p 0005e000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b8480000-7fa9b8484000 rw-p 00000000 00:00 0
7fa9b8484000-7fa9b8490000 r-xp 00000000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8490000-7fa9b8690000 ---p 0000c000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8690000-7fa9b8692000 r--p 0000c000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8692000-7fa9b8693000 rw-p 0000e000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8693000-7fa9b86b5000 r-xp 00000000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b86b5000-7fa9b88b5000 ---p 00022000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b88b5000-7fa9b88b9000 r--p 00022000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b88b9000-7fa9b88ba000 rw-p 00026000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b88ba000-7fa9b88bb000 rw-p 00000000 00:00 0
7fa9b88bb000-7fa9b88db000 r-xp 00000000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b88db000-7fa9b8ada000 ---p 00020000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b8ada000-7fa9b8adb000 r--p 0001f000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b8adb000-7fa9b8adc000 rw-p 00020000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b8adc000-7fa9b8adf000 r-xp 00000000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8adf000-7fa9b8cde000 ---p 00003000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8cde000-7fa9b8cdf000 r--p 00002000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8cdf000-7fa9b8ce0000 rw-p 00003000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8ce0000-7fa9b8cee000 r-xp 00000000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8cee000-7fa9b8eee000 ---p 0000e000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8eee000-7fa9b8eef000 r--p 0000e000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8eef000-7fa9b8ef0000 rw-p 0000f000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8ef0000-7fa9b9127000 r-xp 00000000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b9127000-7fa9b9326000 ---p 00237000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b9326000-7fa9b9342000 r--p 00236000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b9342000-7fa9b934f000 rw-p 00252000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b934f000-7fa9b9353000 rw-p 00000000 00:00 0
7fa9b9353000-7fa9b93ba000 r-xp 00000000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b93ba000-7fa9b95ba000 ---p 00067000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b95ba000-7fa9b95be000 r--p 00067000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b95be000-7fa9b95c5000 rw-p 0006b000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b95c5000-7fa9b95e4000 r-xp 00000000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b95e4000-7fa9b97e3000 ---p 0001f000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b97e3000-7fa9b97e4000 r--p 0001e000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b97e4000-7fa9b97e5000 rw-p 0001f000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b97e5000-7fa9b97e8000 r-xp 00000000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b97e8000-7fa9b99e7000 ---p 00003000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b99e7000-7fa9b99e8000 r--p 00002000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b99e8000-7fa9b99e9000 rw-p 00003000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b99e9000-7fa9b9a1a000 r-xp 00000000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9a1a000-7fa9b9c19000 ---p 00031000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9c19000-7fa9b9c1b000 r--p 00030000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9c1b000-7fa9b9c1c000 rw-p 00032000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9c1c000-7fa9b9cf5000 r-xp 00000000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9cf5000-7fa9b9ef4000 ---p 000d9000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9ef4000-7fa9b9f02000 r--p 000d8000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9f02000-7fa9b9f05000 rw-p 000e6000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9f05000-7fa9b9f4f000 r-xp 00000000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9b9f4f000-7fa9ba14f000 ---p 0004a000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9ba14f000-7fa9ba150000 r--p 0004a000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9ba150000-7fa9ba152000 rw-p 0004b000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9ba152000-7fa9ba17d000 r-xp 00000000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba17d000-7fa9ba37d000 ---p 0002b000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba37d000-7fa9ba37e000 r--p 0002b000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba37e000-7fa9ba37f000 rw-p 0002c000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba37f000-7fa9ba3a5000 r-xp 00000000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba3a5000-7fa9ba5a4000 ---p 00026000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba5a4000-7fa9ba5a7000 r--p 00025000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba5a7000-7fa9ba5a8000 rw-p 00028000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba5a8000-7fa9ba63c000 r-xp 00000000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba63c000-7fa9ba83b000 ---p 00094000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba83b000-7fa9ba83d000 r--p 00093000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba83d000-7fa9ba840000 rw-p 00095000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba840000-7fa9ba841000 rw-p 00000000 00:00 0
7fa9ba841000-7fa9ba857000 r-xp 00000000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9ba857000-7fa9baa57000 ---p 00016000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9baa57000-7fa9baa59000 r--p 00016000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9baa59000-7fa9baa5a000 rw-p 00018000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9baa5a000-7fa9baa5c000 r-xp 00000000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9baa5c000-7fa9bac5c000 ---p 00002000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9bac5c000-7fa9bac5d000 r--p 00002000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9bac5d000-7fa9bac5e000 rw-p 00003000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9bac5e000-7fa9bac64000 r-xp 00000000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bac64000-7fa9bae64000 ---p 00006000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bae64000-7fa9bae65000 r--p 00006000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bae65000-7fa9bae66000 rw-p 00007000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bae66000-7fa9bae6d000 r-xp 00000000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bae6d000-7fa9bb06d000 ---p 00007000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bb06d000-7fa9bb06e000 r--p 00007000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bb06e000-7fa9bb06f000 rw-p 00008000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bb06f000-7fa9bb1ae000 r-xp 00000000 08:01 1031603 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ioncube_loader_lin_7.4.so
7fa9bb1ae000-7fa9bb2ad000 ---p 0013f000 08:01 1031603 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ioncube_loader_lin_7.4.so
7fa9bb2ad000-7fa9bb2ba000 rw-p 0013e000 08:01 1031603 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ioncube_loader_lin_7.4.so
7fa9bb2ba000-7fa9bb2be000 rw-p 00000000 00:00 0
7fa9bb2be000-7fa9c1800000 r--p 00000000 08:01 3726 /usr/lib/locale/locale-archive
7fa9c1800000-7fa9c1a00000 rw-p 00000000 00:00 0
7fa9c1a04000-7fa9c1a44000 rwxp 00000000 00:00 0
7fa9c1a44000-7fa9c1a53000 r-xp 00000000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1a53000-7fa9c1c52000 ---p 0000f000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1c52000-7fa9c1c53000 r--p 0000e000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1c53000-7fa9c1c54000 rw-p 0000f000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1c54000-7fa9c1c6b000 r-xp 00000000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1c6b000-7fa9c1e6a000 ---p 00017000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1e6a000-7fa9c1e6b000 r--p 00016000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1e6b000-7fa9c1e6c000 rw-p 00017000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1e6c000-7fa9c1ecc000 r-xp 00000000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c1ecc000-7fa9c20cc000 ---p 00060000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c20cc000-7fa9c20cd000 r--p 00060000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c20cd000-7fa9c20ce000 rw-p 00061000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c20ce000-7fa9c20d2000 r-xp 00000000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c20d2000-7fa9c22d1000 ---p 00004000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c22d1000-7fa9c22d2000 r--p 00003000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c22d2000-7fa9c22d3000 rw-p 00004000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c22d3000-7fa9c22e8000 r-xp 00000000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c22e8000-7fa9c24e7000 ---p 00015000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c24e7000-7fa9c24e8000 r--p 00014000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c24e8000-7fa9c24e9000 rw-p 00015000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c24e9000-7fa9c2537000 r-xp 00000000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c2537000-7fa9c2737000 ---p 0004e000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c2737000-7fa9c2739000 r--p 0004e000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c2739000-7fa9c273a000 rw-p 00050000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c273a000-7fa9c273e000 r-xp 00000000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c273e000-7fa9c293d000 ---p 00004000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c293d000-7fa9c293e000 r--p 00003000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c293e000-7fa9c293f000 rw-p 00004000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c293f000-7fa9c29bc000 r-xp 00000000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c29bc000-7fa9c2bbb000 ---p 0007d000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c2bbb000-7fa9c2bbc000 r--p 0007c000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c2bbc000-7fa9c2bbf000 rw-p 0007d000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c2bbf000-7fa9c2bc0000 rw-p 00000000 00:00 0
7fa9c2bc0000-7fa9c2bce000 r-xp 00000000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2bce000-7fa9c2dcd000 ---p 0000e000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2dcd000-7fa9c2dce000 r--p 0000d000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2dce000-7fa9c2dcf000 rw-p 0000e000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2dcf000-7fa9c2df4000 r-xp 00000000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2df4000-7fa9c2ff3000 ---p 00025000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2ff3000-7fa9c2ff4000 r--p 00024000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2ff4000-7fa9c2ff5000 rw-p 00025000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2ff5000-7fa9c3019000 r-xp 00000000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c3019000-7fa9c3218000 ---p 00024000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c3218000-7fa9c3219000 r--p 00023000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c3219000-7fa9c321a000 rw-p 00024000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c321a000-7fa9c321c000 rw-p 00000000 00:00 0
7fa9c321c000-7fa9c3220000 r-xp 00000000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c3220000-7fa9c341f000 ---p 00004000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c341f000-7fa9c3420000 r--p 00003000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c3420000-7fa9c3421000 rw-p 00004000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c3421000-7fa9c3438000 r-xp 00000000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3438000-7fa9c3637000 ---p 00017000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3637000-7fa9c3638000 r--p 00016000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3638000-7fa9c3639000 rw-p 00017000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3639000-7fa9c363d000 rw-p 00000000 00:00 0
7fa9c363d000-7fa9c363f000 r-xp 00000000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c363f000-7fa9c383e000 ---p 00002000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c383e000-7fa9c383f000 r--p 00001000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c383f000-7fa9c3840000 rw-p 00002000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c3840000-7fa9c3a04000 r-xp 00000000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3a04000-7fa9c3c03000 ---p 001c4000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3c03000-7fa9c3c07000 r--p 001c3000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3c07000-7fa9c3c09000 rw-p 001c7000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3c09000-7fa9c3c0e000 rw-p 00000000 00:00 0
7fa9c3c0e000-7fa9c3c23000 r-xp 00000000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3c23000-7fa9c3e22000 ---p 00015000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3e22000-7fa9c3e23000 r--p 00014000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3e23000-7fa9c3e24000 rw-p 00015000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3e24000-7fa9c3e3a000 r-xp 00000000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c3e3a000-7fa9c403a000 ---p 00016000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c403a000-7fa9c403b000 r--p 00016000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c403b000-7fa9c403c000 rw-p 00017000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c403c000-7fa9c403e000 rw-p 00000000 00:00 0
7fa9c403e000-7fa9c42f7000 r-xp 00000000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c42f7000-7fa9c44f7000 ---p 002b9000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c44f7000-7fa9c4522000 r--p 002b9000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c4522000-7fa9c4525000 rw-p 002e4000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c4525000-7fa9c4529000 rw-p 00000000 00:00 0
7fa9c4529000-7fa9c45af000 r-xp 00000000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c45af000-7fa9c47af000 ---p 00086000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c47af000-7fa9c47b7000 r--p 00086000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c47b7000-7fa9c47bc000 rw-p 0008e000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c47bc000-7fa9c491a000 r-xp 00000000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c491a000-7fa9c4b1a000 ---p 0015e000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c4b1a000-7fa9c4b22000 r--p 0015e000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c4b22000-7fa9c4b24000 rw-p 00166000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c4b24000-7fa9c4b25000 rw-p 00000000 00:00 0
7fa9c4b25000-7fa9c4b54000 r-xp 00000000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4b54000-7fa9c4d54000 ---p 0002f000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4d54000-7fa9c4d55000 r--p 0002f000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4d55000-7fa9c4d56000 rw-p 00030000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4d56000-7fa9c4d58000 r-xp 00000000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4d58000-7fa9c4f58000 ---p 00002000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4f58000-7fa9c4f59000 r--p 00002000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4f59000-7fa9c4f5a000 rw-p 00003000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4f5a000-7fa9c505b000 r-xp 00000000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c505b000-7fa9c525a000 ---p 00101000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c525a000-7fa9c525b000 r--p 00100000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c525b000-7fa9c525c000 rw-p 00101000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c525c000-7fa9c5263000 r-xp 00000000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5263000-7fa9c5462000 ---p 00007000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5462000-7fa9c5463000 r--p 00006000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5463000-7fa9c5464000 rw-p 00007000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5464000-7fa9c546b000 r-xp 00000000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c546b000-7fa9c566a000 ---p 00007000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c566a000-7fa9c566b000 r--p 00006000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c566b000-7fa9c566c000 rw-p 00007000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c566c000-7fa9c5674000 r-xp 00000000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5674000-7fa9c5873000 ---p 00008000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5873000-7fa9c5874000 r--p 00007000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5874000-7fa9c5875000 rw-p 00008000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5875000-7fa9c58a3000 rw-p 00000000 00:00 0
7fa9c58a3000-7fa9c58c5000 r-xp 00000000 08:01 3728 /usr/lib64/ld-2.17.so
7fa9c58cf000-7fa9c58ef000 rwxp 00000000 00:00 0
7fa9c58ef000-7fa9c5940000 rw-p 00000000 00:00 0
7fa9c5940000-7fa9c5975000 r--s 00000000 08:01 258304 /var/db/nscd/group
7fa9c5975000-7fa9c59aa000 r--s 00000000 08:01 258303 /var/db/nscd/passwd
7fa9c59aa000-7fa9c59df000 r--s 00000000 08:01 258305 /var/db/nscd/hosts
7fa9c59df000-7fa9c5a60000 rw-p 00000000 00:00 0
7fa9c5a69000-7fa9c5a89000 rwxp 00000000 00:00 0
7fa9c5a89000-7fa9c5ab8000 rw-p 00000000 00:00 0
7fa9c5aba000-7fa9c5abc000 rw-s 00000000 00:04 26132 /dev/zero (deleted)
7fa9c5abc000-7fa9c5ac3000 r--s 00000000 08:01 4077 /usr/lib64/gconv/gconv-modules.cache
7fa9c5ac3000-7fa9c5ac4000 rw-p 00000000 00:00 0
7fa9c5ac4000-7fa9c5ac5000 r--p 00021000 08:01 3728 /usr/lib64/ld-2.17.so
7fa9c5ac5000-7fa9c5ac6000 rw-p 00022000 08:01 3728 /usr/lib64/ld-2.17.so
7fa9c5ac6000-7fa9c5ac7000 rw-p 00000000 00:00 0
7fff08d81000-7fff08da2000 rw-p 00000000 00:00 0 [stack]
7fff08da3000-7fff08da5000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

 

[cPanelAnthony]

Hello! This is an email from CSF firewall and doesn't look like anything to worry about. That "suspicious process" is simply the PHP-FPM process, which you see during normal site traffic on a site with PHP-FPM enabled. The following article might help.

Why am I receiving suspicious process notifications?

 

[Civijev]

Thank you mate. I'm doing my best to keep the server secure, but it's nothing for this jungle. I was turn off email alert for php fpm. Tell me, how can I investigate which process is under php fpm when cpu is overload, or what script switch php fpm to overload?

 

[cPanelAnthony]

The CPU isn't necessarily overloaded. This notification is just letting you know that it didn't know if this process was legitimate or not. I am not seeing that there are any actual issues here. With that being said, the following article should help you with load investigations.

How to diagnose high server loads

 

[Civijev]

Thank you once again