LFD Suspicious process running under user

Operating System & Version
Centos 7
cPanel & WHM Version
v100.0.2

Civijev

Registered
Nov 13, 2021
3
1
3
Serbia
cPanel Access Level
Root Administrator
Hi, I received a lot emails with a similar log like this one below. I was hide server ip address and username of account and addon domain. I know that it is not easy every time to guess is this process secure but maybe for some experience admin will easy to see.
I have one more question:
I see many times that php fpm of some users take too much of cpu. Some time it is 100% usage about one hour. I have 4 cpu on VPS and I was try to optimise fpm for that user but still problem exist.
Question is:
Is there any way to see exactly which process is running inside php fpm, I mean to see if it's a script from a web page, or which script is running php fpm to overload the server on one hour?
I was try with top, htop, sar command but process is always hidden inside php fpm

Here is a email alert log from LFD. Is this process secure or it is obviously hacker attack?

Time: Sat Nov 13 23:03:20 2021 +0100
PID: 8607 (Parent PID:1668)
Account: accountusername
Uptime: 112 seconds


Executable:

/opt/cpanel/ea-php74/root/usr/sbin/php-fpm


Command Line (often faked in exploits):

php-fpm: pool addondomain


Network connections by the process (if any):

tcp: serverIPaddress:44872 -> serverIPaddress:443


Files open by the process (if any):

/dev/null
/var/cpanel/php/sessions/ea-php74/sess_f67549f703214d07fb4435c67e5b3248


Memory maps by the process (if any):

00400000-007bc000 r-xp 00000000 08:01 907093 /opt/cpanel/ea-php74/root/usr/sbin/php-fpm
00b7c000-00c00000 r--p 0057c000 08:01 907093 /opt/cpanel/ea-php74/root/usr/sbin/php-fpm
00c00000-00c04000 rw-p 00600000 08:01 907093 /opt/cpanel/ea-php74/root/usr/sbin/php-fpm
00c04000-00c22000 rw-p 00000000 00:00 0
0224a000-024ae000 rw-p 00000000 00:00 0 [heap]
024ae000-025bf000 rw-p 00000000 00:00 0 [heap]
7fa9a8000000-7fa9a8021000 rw-p 00000000 00:00 0
7fa9a8021000-7fa9ac000000 ---p 00000000 00:00 0
7fa9adc00000-7fa9aec00000 rw-p 00000000 00:00 0
7fa9aedff000-7fa9aee00000 ---p 00000000 00:00 0
7fa9aee00000-7fa9afa00000 rw-p 00000000 00:00 0
7fa9afc00000-7fa9b0000000 rw-p 00000000 00:00 0
7fa9b0200000-7fa9b0600000 rw-p 00000000 00:00 0
7fa9b0800000-7fa9b0c00000 rw-p 00000000 00:00 0
7fa9b0e00000-7fa9b1080000 rw-p 00000000 00:00 0
7fa9b1200000-7fa9b2200000 rw-p 00000000 00:00 0
7fa9b2400000-7fa9b2800000 rw-p 00000000 00:00 0
7fa9b2b18000-7fa9b2b38000 rwxp 00000000 00:00 0
7fa9b2b38000-7fa9b2b4a000 r-xp 00000000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2b4a000-7fa9b2d4a000 ---p 00012000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2d4a000-7fa9b2d4b000 r--p 00012000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2d4b000-7fa9b2d4c000 rw-p 00013000 08:01 1031591 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlrpc.so
7fa9b2d4c000-7fa9b2d53000 r-xp 00000000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2d53000-7fa9b2f52000 ---p 00007000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2f52000-7fa9b2f53000 r--p 00006000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2f53000-7fa9b2f54000 rw-p 00007000 08:01 1031574 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlreader.so
7fa9b2f54000-7fa9b2f5a000 r-xp 00000000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b2f5a000-7fa9b315a000 ---p 00006000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b315a000-7fa9b315b000 r--p 00006000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b315b000-7fa9b315c000 rw-p 00007000 08:01 1031513 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_sqlite.so
7fa9b315c000-7fa9b3162000 r-xp 00000000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3162000-7fa9b3362000 ---p 00006000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3362000-7fa9b3363000 r--p 00006000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3363000-7fa9b3364000 rw-p 00007000 08:01 1031583 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo_mysql.so
7fa9b3364000-7fa9b3380000 r-xp 00000000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3380000-7fa9b3580000 ---p 0001c000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3580000-7fa9b3584000 r--p 0001c000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3584000-7fa9b3585000 rw-p 00020000 08:01 1026499 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqli.so
7fa9b3585000-7fa9b35a7000 r-xp 00000000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b35a7000-7fa9b37a6000 ---p 00022000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b37a6000-7fa9b37a7000 r--p 00021000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b37a7000-7fa9b37a8000 rw-p 00022000 08:01 913319 /opt/cpanel/ea-libzip/lib64/libzip.so.5.4
7fa9b37a8000-7fa9b37b5000 r-xp 00000000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b37b5000-7fa9b39b5000 ---p 0000d000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b39b5000-7fa9b39b7000 r--p 0000d000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b39b7000-7fa9b39b8000 rw-p 0000f000 08:01 1026794 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/zip.so
7fa9b39b8000-7fa9b39f4000 r-xp 00000000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b39f4000-7fa9b3bf4000 ---p 0003c000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b3bf4000-7fa9b3bf5000 r--p 0003c000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b3bf5000-7fa9b3bf6000 rw-p 0003d000 08:01 22418 /usr/lib64/libxslt.so.1.1.28
7fa9b3bf6000-7fa9b3bf7000 rw-p 00000000 00:00 0
7fa9b3bf7000-7fa9b3c0b000 r-xp 00000000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3c0b000-7fa9b3e0a000 ---p 00014000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3e0a000-7fa9b3e0b000 r--p 00013000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3e0b000-7fa9b3e0c000 rw-p 00014000 08:01 22416 /usr/lib64/libexslt.so.0.8.17
7fa9b3e0c000-7fa9b3e12000 r-xp 00000000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b3e12000-7fa9b4012000 ---p 00006000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b4012000-7fa9b4013000 r--p 00006000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b4013000-7fa9b4014000 rw-p 00007000 08:01 1031576 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xsl.so
7fa9b4014000-7fa9b401c000 r-xp 00000000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b401c000-7fa9b421c000 ---p 00008000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b421c000-7fa9b421f000 r--p 00008000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b421f000-7fa9b4220000 rw-p 0000b000 08:01 1031575 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xmlwriter.so
7fa9b4220000-7fa9b422a000 r-xp 00000000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b422a000-7fa9b442a000 ---p 0000a000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b442a000-7fa9b442c000 r--p 0000a000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b442c000-7fa9b442d000 rw-p 0000c000 08:01 1031573 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/xml.so
7fa9b442d000-7fa9b4431000 r-xp 00000000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4431000-7fa9b4630000 ---p 00004000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4630000-7fa9b4631000 r--p 00003000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4631000-7fa9b4632000 rw-p 00004000 08:01 1027814 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/tokenizer.so
7fa9b4632000-7fa9b46e3000 r-xp 00000000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b46e3000-7fa9b48e2000 ---p 000b1000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b48e2000-7fa9b48e4000 r--p 000b0000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b48e4000-7fa9b48e7000 rw-p 000b2000 08:01 4692 /usr/lib64/libsqlite3.so.0.8.6
7fa9b48e7000-7fa9b48f2000 r-xp 00000000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b48f2000-7fa9b4af2000 ---p 0000b000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b4af2000-7fa9b4af3000 r--p 0000b000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b4af3000-7fa9b4af4000 rw-p 0000c000 08:01 1031567 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sqlite3.so
7fa9b4af4000-7fa9b4b08000 r-xp 00000000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4b08000-7fa9b4d07000 ---p 00014000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4d07000-7fa9b4d09000 r--p 00013000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4d09000-7fa9b4d0a000 rw-p 00015000 08:01 1031601 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/sockets.so
7fa9b4d0a000-7fa9b4d52000 r-xp 00000000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4d52000-7fa9b4f51000 ---p 00048000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4f51000-7fa9b4f54000 r--p 00047000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4f54000-7fa9b4f55000 rw-p 0004a000 08:01 1031618 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/soap.so
7fa9b4f55000-7fa9b4f60000 r-xp 00000000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b4f60000-7fa9b5160000 ---p 0000b000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b5160000-7fa9b5161000 r--p 0000b000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b5161000-7fa9b5162000 rw-p 0000c000 08:01 1031572 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/simplexml.so
7fa9b5162000-7fa9b5169000 r-xp 00000000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b5169000-7fa9b5369000 ---p 00007000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b5369000-7fa9b536a000 r--p 00007000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b536a000-7fa9b536b000 rw-p 00008000 08:01 1031570 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/posix.so
7fa9b536b000-7fa9b53aa000 r-xp 00000000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b53aa000-7fa9b55a9000 ---p 0003f000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b55a9000-7fa9b55ac000 r--p 0003e000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b55ac000-7fa9b55ad000 rw-p 00041000 08:01 1027813 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/phar.so
7fa9b55ad000-7fa9b55c5000 r-xp 00000000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b55c5000-7fa9b57c5000 ---p 00018000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b57c5000-7fa9b57c7000 r--p 00018000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b57c7000-7fa9b57c8000 rw-p 0001a000 08:01 1024100 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/pdo.so
7fa9b57c8000-7fa9b5801000 r-xp 00000000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5801000-7fa9b5a00000 ---p 00039000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5a00000-7fa9b5a05000 r--p 00038000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5a05000-7fa9b5a07000 rw-p 0003d000 08:01 1031582 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mysqlnd.so
7fa9b5a07000-7fa9b5a08000 rw-p 00000000 00:00 0
7fa9b5a08000-7fa9b5a90000 r-xp 00000000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5a90000-7fa9b5c90000 ---p 00088000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5c90000-7fa9b5c92000 r--p 00088000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5c92000-7fa9b5c99000 rw-p 0008a000 08:01 1026444 /opt/cpanel/ea-oniguruma/lib64/libonig.so.5.2.0
7fa9b5c99000-7fa9b5d8d000 r-xp 00000000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5d8d000-7fa9b5f8c000 ---p 000f4000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5f8c000-7fa9b5f95000 r--p 000f3000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5f95000-7fa9b5f97000 rw-p 000fc000 08:01 1031594 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/mbstring.so
7fa9b5f97000-7fa9b5fa1000 r-xp 00000000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b5fa1000-7fa9b61a0000 ---p 0000a000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b61a0000-7fa9b61a1000 r--p 00009000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b61a1000-7fa9b61a2000 rw-p 0000a000 08:01 1027808 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/json.so
7fa9b61a2000-7fa9b61a6000 r-xp 00000000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b61a6000-7fa9b63a6000 ---p 00004000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b63a6000-7fa9b63a7000 r--p 00004000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b63a7000-7fa9b63a8000 rw-p 00005000 08:01 4644 /usr/lib64/libcap-ng.so.0.0.0
7fa9b63a8000-7fa9b63c6000 r-xp 00000000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b63c6000-7fa9b65c5000 ---p 0001e000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b65c5000-7fa9b65c6000 r--p 0001d000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b65c6000-7fa9b65c7000 rw-p 0001e000 08:01 4649 /usr/lib64/libaudit.so.1.0.0
7fa9b65c7000-7fa9b65d1000 rw-p 00000000 00:00 0
7fa9b65d1000-7fa9b65de000 r-xp 00000000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b65de000-7fa9b67de000 ---p 0000d000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b67de000-7fa9b67df000 r--p 0000d000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b67df000-7fa9b67e0000 rw-p 0000e000 08:01 9412 /usr/lib64/libpam.so.0.83.1
7fa9b67e0000-7fa9b68e8000 r-xp 00000000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b68e8000-7fa9b6ae8000 ---p 00108000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b6ae8000-7fa9b6aea000 r--p 00108000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b6aea000-7fa9b6af3000 rw-p 0010a000 08:01 906789 /opt/cpanel/ea-php74/root/usr/lib64/libc-client.so.2007
7fa9b6af3000-7fa9b6af4000 rw-p 00000000 00:00 0
7fa9b6af4000-7fa9b6b08000 r-xp 00000000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6b08000-7fa9b6d07000 ---p 00014000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6d07000-7fa9b6d0a000 r--p 00013000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6d0a000-7fa9b6d0b000 rw-p 00016000 08:01 1031585 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/imap.so
7fa9b6d0b000-7fa9b6d14000 r-xp 00000000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6d14000-7fa9b6f14000 ---p 00009000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6f14000-7fa9b6f15000 r--p 00009000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6f15000-7fa9b6f16000 rw-p 0000a000 08:01 1031612 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/iconv.so
7fa9b6f16000-7fa9b6f18000 r-xp 00000000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b6f18000-7fa9b7118000 ---p 00002000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b7118000-7fa9b7119000 r--p 00002000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b7119000-7fa9b711a000 rw-p 00003000 08:01 21968 /usr/lib64/libXau.so.6.0.0
7fa9b711a000-7fa9b7141000 r-xp 00000000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7141000-7fa9b7340000 ---p 00027000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7340000-7fa9b7341000 r--p 00026000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7341000-7fa9b7342000 rw-p 00027000 08:01 22020 /usr/lib64/libxcb.so.1.1.0
7fa9b7342000-7fa9b73f9000 r-xp 00000000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b73f9000-7fa9b75f9000 ---p 000b7000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b75f9000-7fa9b7600000 r--p 000b7000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b7600000-7fa9b7601000 rw-p 000be000 08:01 5975 /usr/lib64/libfreetype.so.6.14.0
7fa9b7601000-7fa9b7739000 r-xp 00000000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b7739000-7fa9b7939000 ---p 00138000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b7939000-7fa9b793a000 r--p 00138000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b793a000-7fa9b793f000 rw-p 00139000 08:01 22024 /usr/lib64/libX11.so.6.3.0
7fa9b793f000-7fa9b7950000 r-xp 00000000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7950000-7fa9b7b4f000 ---p 00011000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7b4f000-7fa9b7b50000 r--p 00010000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7b50000-7fa9b7b51000 rw-p 00011000 08:01 22026 /usr/lib64/libXpm.so.4.11.0
7fa9b7b51000-7fa9b7b94000 r-xp 00000000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7b94000-7fa9b7d94000 ---p 00043000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7d94000-7fa9b7d95000 r--p 00043000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7d95000-7fa9b7d96000 rw-p 00044000 08:01 21895 /usr/lib64/libjpeg.so.62.1.0
7fa9b7d96000-7fa9b7da6000 rw-p 00000000 00:00 0
7fa9b7da6000-7fa9b7df2000 r-xp 00000000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7df2000-7fa9b7ff1000 ---p 0004c000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7ff1000-7fa9b7ff2000 r--p 0004b000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7ff2000-7fa9b7ff3000 rw-p 0004c000 08:01 22551 /usr/lib64/libwebp.so.4.0.2
7fa9b7ff3000-7fa9b7ff6000 rw-p 00000000 00:00 0
7fa9b7ff6000-7fa9b801f000 r-xp 00000000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b801f000-7fa9b821f000 ---p 00029000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b821f000-7fa9b8220000 r--p 00029000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b8220000-7fa9b8221000 rw-p 0002a000 08:01 5965 /usr/lib64/libpng15.so.15.13.0
7fa9b8221000-7fa9b827b000 r-xp 00000000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b827b000-7fa9b847a000 ---p 0005a000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b847a000-7fa9b847f000 r--p 00059000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b847f000-7fa9b8480000 rw-p 0005e000 08:01 1031616 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/gd.so
7fa9b8480000-7fa9b8484000 rw-p 00000000 00:00 0
7fa9b8484000-7fa9b8490000 r-xp 00000000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8490000-7fa9b8690000 ---p 0000c000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8690000-7fa9b8692000 r--p 0000c000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8692000-7fa9b8693000 rw-p 0000e000 08:01 1031397 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ftp.so
7fa9b8693000-7fa9b86b5000 r-xp 00000000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b86b5000-7fa9b88b5000 ---p 00022000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b88b5000-7fa9b88b9000 r--p 00022000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b88b9000-7fa9b88ba000 rw-p 00026000 08:01 1024132 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/dom.so
7fa9b88ba000-7fa9b88bb000 rw-p 00000000 00:00 0
7fa9b88bb000-7fa9b88db000 r-xp 00000000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b88db000-7fa9b8ada000 ---p 00020000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b8ada000-7fa9b8adb000 r--p 0001f000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b8adb000-7fa9b8adc000 rw-p 00020000 08:01 906307 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7fa9b8adc000-7fa9b8adf000 r-xp 00000000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8adf000-7fa9b8cde000 ---p 00003000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8cde000-7fa9b8cdf000 r--p 00002000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8cdf000-7fa9b8ce0000 rw-p 00003000 08:01 5463 /usr/lib64/libkeyutils.so.1.5
7fa9b8ce0000-7fa9b8cee000 r-xp 00000000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8cee000-7fa9b8eee000 ---p 0000e000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8eee000-7fa9b8eef000 r--p 0000e000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8eef000-7fa9b8ef0000 rw-p 0000f000 08:01 8080 /usr/lib64/libkrb5support.so.0.1
7fa9b8ef0000-7fa9b9127000 r-xp 00000000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b9127000-7fa9b9326000 ---p 00237000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b9326000-7fa9b9342000 r--p 00236000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b9342000-7fa9b934f000 rw-p 00252000 08:01 7783 /usr/lib64/libcrypto.so.1.0.2k
7fa9b934f000-7fa9b9353000 rw-p 00000000 00:00 0
7fa9b9353000-7fa9b93ba000 r-xp 00000000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b93ba000-7fa9b95ba000 ---p 00067000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b95ba000-7fa9b95be000 r--p 00067000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b95be000-7fa9b95c5000 rw-p 0006b000 08:01 7785 /usr/lib64/libssl.so.1.0.2k
7fa9b95c5000-7fa9b95e4000 r-xp 00000000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b95e4000-7fa9b97e3000 ---p 0001f000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b97e3000-7fa9b97e4000 r--p 0001e000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b97e4000-7fa9b97e5000 rw-p 0001f000 08:01 906311 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7fa9b97e5000-7fa9b97e8000 r-xp 00000000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b97e8000-7fa9b99e7000 ---p 00003000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b99e7000-7fa9b99e8000 r--p 00002000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b99e8000-7fa9b99e9000 rw-p 00003000 08:01 4295 /usr/lib64/libcom_err.so.2.1
7fa9b99e9000-7fa9b9a1a000 r-xp 00000000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9a1a000-7fa9b9c19000 ---p 00031000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9c19000-7fa9b9c1b000 r--p 00030000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9c1b000-7fa9b9c1c000 rw-p 00032000 08:01 8072 /usr/lib64/libk5crypto.so.3.1
7fa9b9c1c000-7fa9b9cf5000 r-xp 00000000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9cf5000-7fa9b9ef4000 ---p 000d9000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9ef4000-7fa9b9f02000 r--p 000d8000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9f02000-7fa9b9f05000 rw-p 000e6000 08:01 8078 /usr/lib64/libkrb5.so.3.3
7fa9b9f05000-7fa9b9f4f000 r-xp 00000000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9b9f4f000-7fa9ba14f000 ---p 0004a000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9ba14f000-7fa9ba150000 r--p 0004a000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9ba150000-7fa9ba152000 rw-p 0004b000 08:01 8068 /usr/lib64/libgssapi_krb5.so.2.2
7fa9ba152000-7fa9ba17d000 r-xp 00000000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba17d000-7fa9ba37d000 ---p 0002b000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba37d000-7fa9ba37e000 r--p 0002b000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba37e000-7fa9ba37f000 rw-p 0002c000 08:01 10426 /usr/lib64/libssh2.so.1.0.1
7fa9ba37f000-7fa9ba3a5000 r-xp 00000000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba3a5000-7fa9ba5a4000 ---p 00026000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba5a4000-7fa9ba5a7000 r--p 00025000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba5a7000-7fa9ba5a8000 rw-p 00028000 08:01 906331 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7fa9ba5a8000-7fa9ba63c000 r-xp 00000000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba63c000-7fa9ba83b000 ---p 00094000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba83b000-7fa9ba83d000 r--p 00093000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba83d000-7fa9ba840000 rw-p 00095000 08:01 1024195 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7fa9ba840000-7fa9ba841000 rw-p 00000000 00:00 0
7fa9ba841000-7fa9ba857000 r-xp 00000000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9ba857000-7fa9baa57000 ---p 00016000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9baa57000-7fa9baa59000 r--p 00016000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9baa59000-7fa9baa5a000 rw-p 00018000 08:01 1026772 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/curl.so
7fa9baa5a000-7fa9baa5c000 r-xp 00000000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9baa5c000-7fa9bac5c000 ---p 00002000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9bac5c000-7fa9bac5d000 r--p 00002000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9bac5d000-7fa9bac5e000 rw-p 00003000 08:01 1024072 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ctype.so
7fa9bac5e000-7fa9bac64000 r-xp 00000000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bac64000-7fa9bae64000 ---p 00006000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bae64000-7fa9bae65000 r--p 00006000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bae65000-7fa9bae66000 rw-p 00007000 08:01 1031608 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/calendar.so
7fa9bae66000-7fa9bae6d000 r-xp 00000000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bae6d000-7fa9bb06d000 ---p 00007000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bb06d000-7fa9bb06e000 r--p 00007000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bb06e000-7fa9bb06f000 rw-p 00008000 08:01 1026782 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/bcmath.so
7fa9bb06f000-7fa9bb1ae000 r-xp 00000000 08:01 1031603 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ioncube_loader_lin_7.4.so
7fa9bb1ae000-7fa9bb2ad000 ---p 0013f000 08:01 1031603 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ioncube_loader_lin_7.4.so
7fa9bb2ad000-7fa9bb2ba000 rw-p 0013e000 08:01 1031603 /opt/cpanel/ea-php74/root/usr/lib64/php/modules/ioncube_loader_lin_7.4.so
7fa9bb2ba000-7fa9bb2be000 rw-p 00000000 00:00 0
7fa9bb2be000-7fa9c1800000 r--p 00000000 08:01 3726 /usr/lib/locale/locale-archive
7fa9c1800000-7fa9c1a00000 rw-p 00000000 00:00 0
7fa9c1a04000-7fa9c1a44000 rwxp 00000000 00:00 0
7fa9c1a44000-7fa9c1a53000 r-xp 00000000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1a53000-7fa9c1c52000 ---p 0000f000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1c52000-7fa9c1c53000 r--p 0000e000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1c53000-7fa9c1c54000 rw-p 0000f000 08:01 4377 /usr/lib64/libbz2.so.1.0.6
7fa9c1c54000-7fa9c1c6b000 r-xp 00000000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1c6b000-7fa9c1e6a000 ---p 00017000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1e6a000-7fa9c1e6b000 r--p 00016000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1e6b000-7fa9c1e6c000 rw-p 00017000 08:01 4599 /usr/lib64/libelf-0.176.so
7fa9c1e6c000-7fa9c1ecc000 r-xp 00000000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c1ecc000-7fa9c20cc000 ---p 00060000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c20cc000-7fa9c20cd000 r--p 00060000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c20cd000-7fa9c20ce000 rw-p 00061000 08:01 4248 /usr/lib64/libpcre.so.1.2.0
7fa9c20ce000-7fa9c20d2000 r-xp 00000000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c20d2000-7fa9c22d1000 ---p 00004000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c22d1000-7fa9c22d2000 r--p 00003000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c22d2000-7fa9c22d3000 rw-p 00004000 08:01 4612 /usr/lib64/libattr.so.1.1.0
7fa9c22d3000-7fa9c22e8000 r-xp 00000000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c22e8000-7fa9c24e7000 ---p 00015000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c24e7000-7fa9c24e8000 r--p 00014000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c24e8000-7fa9c24e9000 rw-p 00015000 08:01 400 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7fa9c24e9000-7fa9c2537000 r-xp 00000000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c2537000-7fa9c2737000 ---p 0004e000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c2737000-7fa9c2739000 r--p 0004e000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c2739000-7fa9c273a000 rw-p 00050000 08:01 11544 /usr/lib64/libdw-0.176.so
7fa9c273a000-7fa9c273e000 r-xp 00000000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c273e000-7fa9c293d000 ---p 00004000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c293d000-7fa9c293e000 r--p 00003000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c293e000-7fa9c293f000 rw-p 00004000 08:01 4654 /usr/lib64/libgpg-error.so.0.10.0
7fa9c293f000-7fa9c29bc000 r-xp 00000000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c29bc000-7fa9c2bbb000 ---p 0007d000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c2bbb000-7fa9c2bbc000 r--p 0007c000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c2bbc000-7fa9c2bbf000 rw-p 0007d000 08:01 4684 /usr/lib64/libgcrypt.so.11.8.2
7fa9c2bbf000-7fa9c2bc0000 rw-p 00000000 00:00 0
7fa9c2bc0000-7fa9c2bce000 r-xp 00000000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2bce000-7fa9c2dcd000 ---p 0000e000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2dcd000-7fa9c2dce000 r--p 0000d000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2dce000-7fa9c2dcf000 rw-p 0000e000 08:01 5402 /usr/lib64/liblz4.so.1.8.3
7fa9c2dcf000-7fa9c2df4000 r-xp 00000000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2df4000-7fa9c2ff3000 ---p 00025000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2ff3000-7fa9c2ff4000 r--p 00024000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2ff4000-7fa9c2ff5000 rw-p 00025000 08:01 4288 /usr/lib64/liblzma.so.5.2.2
7fa9c2ff5000-7fa9c3019000 r-xp 00000000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c3019000-7fa9c3218000 ---p 00024000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c3218000-7fa9c3219000 r--p 00023000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c3219000-7fa9c321a000 rw-p 00024000 08:01 4267 /usr/lib64/libselinux.so.1
7fa9c321a000-7fa9c321c000 rw-p 00000000 00:00 0
7fa9c321c000-7fa9c3220000 r-xp 00000000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c3220000-7fa9c341f000 ---p 00004000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c341f000-7fa9c3420000 r--p 00003000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c3420000-7fa9c3421000 rw-p 00004000 08:01 4617 /usr/lib64/libcap.so.2.22
7fa9c3421000-7fa9c3438000 r-xp 00000000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3438000-7fa9c3637000 ---p 00017000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3637000-7fa9c3638000 r--p 00016000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3638000-7fa9c3639000 rw-p 00017000 08:01 3772 /usr/lib64/libpthread-2.17.so
7fa9c3639000-7fa9c363d000 rw-p 00000000 00:00 0
7fa9c363d000-7fa9c363f000 r-xp 00000000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c363f000-7fa9c383e000 ---p 00002000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c383e000-7fa9c383f000 r--p 00001000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c383f000-7fa9c3840000 rw-p 00002000 08:01 2982 /usr/lib64/libfreebl3.so
7fa9c3840000-7fa9c3a04000 r-xp 00000000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3a04000-7fa9c3c03000 ---p 001c4000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3c03000-7fa9c3c07000 r--p 001c3000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3c07000-7fa9c3c09000 rw-p 001c7000 08:01 3735 /usr/lib64/libc-2.17.so
7fa9c3c09000-7fa9c3c0e000 rw-p 00000000 00:00 0
7fa9c3c0e000-7fa9c3c23000 r-xp 00000000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3c23000-7fa9c3e22000 ---p 00015000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3e22000-7fa9c3e23000 r--p 00014000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3e23000-7fa9c3e24000 rw-p 00015000 08:01 4270 /usr/lib64/libz.so.1.2.7
7fa9c3e24000-7fa9c3e3a000 r-xp 00000000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c3e3a000-7fa9c403a000 ---p 00016000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c403a000-7fa9c403b000 r--p 00016000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c403b000-7fa9c403c000 rw-p 00017000 08:01 3776 /usr/lib64/libresolv-2.17.so
7fa9c403c000-7fa9c403e000 rw-p 00000000 00:00 0
7fa9c403e000-7fa9c42f7000 r-xp 00000000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c42f7000-7fa9c44f7000 ---p 002b9000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c44f7000-7fa9c4522000 r--p 002b9000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c4522000-7fa9c4525000 rw-p 002e4000 08:01 898167 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7fa9c4525000-7fa9c4529000 rw-p 00000000 00:00 0
7fa9c4529000-7fa9c45af000 r-xp 00000000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c45af000-7fa9c47af000 ---p 00086000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c47af000-7fa9c47b7000 r--p 00086000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c47b7000-7fa9c47bc000 rw-p 0008e000 08:01 898171 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7fa9c47bc000-7fa9c491a000 r-xp 00000000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c491a000-7fa9c4b1a000 ---p 0015e000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c4b1a000-7fa9c4b22000 r--p 0015e000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c4b22000-7fa9c4b24000 rw-p 00166000 08:01 906203 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7fa9c4b24000-7fa9c4b25000 rw-p 00000000 00:00 0
7fa9c4b25000-7fa9c4b54000 r-xp 00000000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4b54000-7fa9c4d54000 ---p 0002f000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4d54000-7fa9c4d55000 r--p 0002f000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4d55000-7fa9c4d56000 rw-p 00030000 08:01 11560 /usr/lib64/libsystemd.so.0.6.0
7fa9c4d56000-7fa9c4d58000 r-xp 00000000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4d58000-7fa9c4f58000 ---p 00002000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4f58000-7fa9c4f59000 r--p 00002000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4f59000-7fa9c4f5a000 rw-p 00003000 08:01 3741 /usr/lib64/libdl-2.17.so
7fa9c4f5a000-7fa9c505b000 r-xp 00000000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c505b000-7fa9c525a000 ---p 00101000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c525a000-7fa9c525b000 r--p 00100000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c525b000-7fa9c525c000 rw-p 00101000 08:01 3743 /usr/lib64/libm-2.17.so
7fa9c525c000-7fa9c5263000 r-xp 00000000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5263000-7fa9c5462000 ---p 00007000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5462000-7fa9c5463000 r--p 00006000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5463000-7fa9c5464000 rw-p 00007000 08:01 3780 /usr/lib64/librt-2.17.so
7fa9c5464000-7fa9c546b000 r-xp 00000000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c546b000-7fa9c566a000 ---p 00007000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c566a000-7fa9c566b000 r--p 00006000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c566b000-7fa9c566c000 rw-p 00007000 08:01 906284 /opt/cpanel/libargon2/lib64/libargon2.so.0
7fa9c566c000-7fa9c5674000 r-xp 00000000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5674000-7fa9c5873000 ---p 00008000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5873000-7fa9c5874000 r--p 00007000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5874000-7fa9c5875000 rw-p 00008000 08:01 3739 /usr/lib64/libcrypt-2.17.so
7fa9c5875000-7fa9c58a3000 rw-p 00000000 00:00 0
7fa9c58a3000-7fa9c58c5000 r-xp 00000000 08:01 3728 /usr/lib64/ld-2.17.so
7fa9c58cf000-7fa9c58ef000 rwxp 00000000 00:00 0
7fa9c58ef000-7fa9c5940000 rw-p 00000000 00:00 0
7fa9c5940000-7fa9c5975000 r--s 00000000 08:01 258304 /var/db/nscd/group
7fa9c5975000-7fa9c59aa000 r--s 00000000 08:01 258303 /var/db/nscd/passwd
7fa9c59aa000-7fa9c59df000 r--s 00000000 08:01 258305 /var/db/nscd/hosts
7fa9c59df000-7fa9c5a60000 rw-p 00000000 00:00 0
7fa9c5a69000-7fa9c5a89000 rwxp 00000000 00:00 0
7fa9c5a89000-7fa9c5ab8000 rw-p 00000000 00:00 0
7fa9c5aba000-7fa9c5abc000 rw-s 00000000 00:04 26132 /dev/zero (deleted)
7fa9c5abc000-7fa9c5ac3000 r--s 00000000 08:01 4077 /usr/lib64/gconv/gconv-modules.cache
7fa9c5ac3000-7fa9c5ac4000 rw-p 00000000 00:00 0
7fa9c5ac4000-7fa9c5ac5000 r--p 00021000 08:01 3728 /usr/lib64/ld-2.17.so
7fa9c5ac5000-7fa9c5ac6000 rw-p 00022000 08:01 3728 /usr/lib64/ld-2.17.so
7fa9c5ac6000-7fa9c5ac7000 rw-p 00000000 00:00 0
7fff08d81000-7fff08da2000 rw-p 00000000 00:00 0 [stack]
7fff08da3000-7fff08da5000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
 

cPanelAnthony

Administrator
Staff member
Oct 18, 2021
1,045
111
118
Houston, TX
cPanel Access Level
Root Administrator
Hello! This is an email from CSF firewall and doesn't look like anything to worry about. That "suspicious process" is simply the PHP-FPM process, which you see during normal site traffic on a site with PHP-FPM enabled. The following article might help.

Why am I receiving suspicious process notifications?
 
  • Like
Reactions: Civijev

Civijev

Registered
Nov 13, 2021
3
1
3
Serbia
cPanel Access Level
Root Administrator
Thank you mate. I'm doing my best to keep the server secure, but it's nothing for this jungle. I was turn off email alert for php fpm. Tell me, how can I investigate which process is under php fpm when cpu is overload, or what script switch php fpm to overload?
 

cPanelAnthony

Administrator
Staff member
Oct 18, 2021
1,045
111
118
Houston, TX
cPanel Access Level
Root Administrator
The CPU isn't necessarily overloaded. This notification is just letting you know that it didn't know if this process was legitimate or not. I am not seeing that there are any actual issues here. With that being said, the following article should help you with load investigations.

How to diagnose high server loads
 
  • Like
Reactions: Civijev