Suspicious process running under user *

dimi.conee

Member
Nov 17, 2021
5
1
3
Greece
cPanel Access Level
Root Administrator
I get lots of those email from CSF for all of my accounts.

Time: Fri Nov 19 11:37:39 2021 +0200
PID: 31133 (Parent PID:444)
Account: wood
Uptime: 100 seconds


Executable:

/opt/cpanel/ea-php73/root/usr/sbin/php-fpm


Command Line (often faked in exploits):

php-fpm: pool woodanddreams_gr


Network connections by the process (if any):

tcp: 185.143.45.57:48338 -> 157.240.2.52:443


Files open by the process (if any):

/dev/null


Memory maps by the process (if any):

00400000-007af000 r-xp 00000000 b6:b31e1 755355 /opt/cpanel/ea-php73/root/usr/sbin/php-fpm
009af000-00a35000 r--p 003af000 b6:b31e1 755355 /opt/cpanel/ea-php73/root/usr/sbin/php-fpm
00a35000-00a39000 rw-p 00435000 b6:b31e1 755355 /opt/cpanel/ea-php73/root/usr/sbin/php-fpm
00a39000-00a56000 rw-p 00000000 00:00 0
019c2000-01c24000 rw-p 00000000 00:00 0 [heap]
01c24000-01de2000 rw-p 00000000 00:00 0 [heap]
7f3010000000-7f3010021000 rw-p 00000000 00:00 0
7f3010021000-7f3014000000 ---p 00000000 00:00 0
7f3015000000-7f3015a00000 rw-p 00000000 00:00 0
7f3015bff000-7f3015c00000 ---p 00000000 00:00 0
7f3015c00000-7f3018400000 rw-p 00000000 00:00 0
7f301873f000-7f30187bf000 rwxp 00000000 00:00 0
7f30187bf000-7f3018800000 rw-p 00000000 00:00 0
7f3018a00000-7f3019c80000 rw-p 00000000 00:00 0
7f3019e00000-7f301a200000 rw-p 00000000 00:00 0
7f301a200000-7f301a400000 rw-p 00000000 00:00 0
7f301a40e000-7f301a42e000 rwxp 00000000 00:00 0
7f301a42e000-7f301a435000 r-xp 00000000 b6:b31e1 760185 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
7f301a435000-7f301a634000 ---p 00007000 b6:b31e1 760185 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
7f301a634000-7f301a635000 r--p 00006000 b6:b31e1 760185 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
7f301a635000-7f301a636000 rw-p 00007000 b6:b31e1 760185 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
7f301a636000-7f301a63d000 r-xp 00000000 b6:b31e1 760183 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
7f301a63d000-7f301a83c000 ---p 00007000 b6:b31e1 760183 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
7f301a83c000-7f301a83d000 r--p 00006000 b6:b31e1 760183 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
7f301a83d000-7f301a83e000 rw-p 00007000 b6:b31e1 760183 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
7f301a83e000-7f301a844000 r-xp 00000000 b6:b31e1 760177 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
7f301a844000-7f301aa43000 ---p 00006000 b6:b31e1 760177 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
7f301aa43000-7f301aa44000 r--p 00005000 b6:b31e1 760177 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
7f301aa44000-7f301aa45000 rw-p 00006000 b6:b31e1 760177 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
7f301aa45000-7f301aa4b000 r-xp 00000000 b6:b31e1 760218 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
7f301aa4b000-7f301ac4b000 ---p 00006000 b6:b31e1 760218 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
7f301ac4b000-7f301ac4c000 r--p 00006000 b6:b31e1 760218 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
7f301ac4c000-7f301ac4d000 rw-p 00007000 b6:b31e1 760218 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
7f301ac4d000-7f301ac69000 r-xp 00000000 b6:b31e1 754127 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
7f301ac69000-7f301ae69000 ---p 0001c000 b6:b31e1 754127 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
7f301ae69000-7f301ae6d000 r--p 0001c000 b6:b31e1 754127 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
7f301ae6d000-7f301ae6e000 rw-p 00020000 b6:b31e1 754127 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
7f301ae6e000-7f301ae8d000 r-xp 00000000 b6:b31e1 758490 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/zip.so
7f301ae8d000-7f301b08c000 ---p 0001f000 b6:b31e1 758490 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/zip.so
7f301b08c000-7f301b08e000 r--p 0001e000 b6:b31e1 758490 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/zip.so
7f301b08e000-7f301b08f000 rw-p 00020000 b6:b31e1 758490 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/zip.so
7f301b08f000-7f301b0cb000 r-xp 00000000 b6:b31e1 120654 /usr/lib64/libxslt.so.1.1.28
7f301b0cb000-7f301b2cb000 ---p 0003c000 b6:b31e1 120654 /usr/lib64/libxslt.so.1.1.28
7f301b2cb000-7f301b2cc000 r--p 0003c000 b6:b31e1 120654 /usr/lib64/libxslt.so.1.1.28
7f301b2cc000-7f301b2cd000 rw-p 0003d000 b6:b31e1 120654 /usr/lib64/libxslt.so.1.1.28
7f301b2cd000-7f301b2ce000 rw-p 00000000 00:00 0
7f301b2ce000-7f301b2e2000 r-xp 00000000 b6:b31e1 120652 /usr/lib64/libexslt.so.0.8.17
7f301b2e2000-7f301b4e1000 ---p 00014000 b6:b31e1 120652 /usr/lib64/libexslt.so.0.8.17
7f301b4e1000-7f301b4e2000 r--p 00013000 b6:b31e1 120652 /usr/lib64/libexslt.so.0.8.17
7f301b4e2000-7f301b4e3000 rw-p 00014000 b6:b31e1 120652 /usr/lib64/libexslt.so.0.8.17
7f301b4e3000-7f301b4e9000 r-xp 00000000 b6:b31e1 760187 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
7f301b4e9000-7f301b6e9000 ---p 00006000 b6:b31e1 760187 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
7f301b6e9000-7f301b6ea000 r--p 00006000 b6:b31e1 760187 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
7f301b6ea000-7f301b6eb000 rw-p 00007000 b6:b31e1 760187 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
7f301b6eb000-7f301b6f3000 r-xp 00000000 b6:b31e1 760186 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
7f301b6f3000-7f301b8f3000 ---p 00008000 b6:b31e1 760186 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
7f301b8f3000-7f301b8f6000 r--p 00008000 b6:b31e1 760186 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
7f301b8f6000-7f301b8f7000 rw-p 0000b000 b6:b31e1 760186 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
7f301b8f7000-7f301b902000 r-xp 00000000 b6:b31e1 760184 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
7f301b902000-7f301bb01000 ---p 0000b000 b6:b31e1 760184 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
7f301bb01000-7f301bb03000 r--p 0000a000 b6:b31e1 760184 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
7f301bb03000-7f301bb04000 rw-p 0000c000 b6:b31e1 760184 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
7f301bb04000-7f301bb08000 r-xp 00000000 b6:b31e1 760173 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
7f301bb08000-7f301bd07000 ---p 00004000 b6:b31e1 760173 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
7f301bd07000-7f301bd08000 r--p 00003000 b6:b31e1 760173 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
7f301bd08000-7f301bd09000 rw-p 00004000 b6:b31e1 760173 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
7f301bd09000-7f301bdba000 r-xp 00000000 b6:b31e1 108568 /usr/lib64/libsqlite3.so.0.8.6
7f301bdba000-7f301bfb9000 ---p 000b1000 b6:b31e1 108568 /usr/lib64/libsqlite3.so.0.8.6
7f301bfb9000-7f301bfbb000 r--p 000b0000 b6:b31e1 108568 /usr/lib64/libsqlite3.so.0.8.6
7f301bfbb000-7f301bfbe000 rw-p 000b2000 b6:b31e1 108568 /usr/lib64/libsqlite3.so.0.8.6
7f301bfbe000-7f301bfc9000 r-xp 00000000 b6:b31e1 760178 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
7f301bfc9000-7f301c1c9000 ---p 0000b000 b6:b31e1 760178 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
7f301c1c9000-7f301c1ca000 r--p 0000b000 b6:b31e1 760178 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
7f301c1ca000-7f301c1cb000 rw-p 0000c000 b6:b31e1 760178 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
7f301c1cb000-7f301c1de000 r-xp 00000000 b6:b31e1 758489 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
7f301c1de000-7f301c3de000 ---p 00013000 b6:b31e1 758489 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
7f301c3de000-7f301c3e0000 r--p 00013000 b6:b31e1 758489 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
7f301c3e0000-7f301c3e1000 rw-p 00015000 b6:b31e1 758489 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
7f301c3e1000-7f301c429000 r-xp 00000000 b6:b31e1 758487 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/soap.so
7f301c429000-7f301c628000 ---p 00048000 b6:b31e1 758487 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/soap.so
7f301c628000-7f301c62b000 r--p 00047000 b6:b31e1 758487 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/soap.so
7f301c62b000-7f301c62c000 rw-p 0004a000 b6:b31e1 758487 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/soap.so
7f301c62c000-7f301c637000 r-xp 00000000 b6:b31e1 760182 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
7f301c637000-7f301c837000 ---p 0000b000 b6:b31e1 760182 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
7f301c837000-7f301c838000 r--p 0000b000 b6:b31e1 760182 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
7f301c838000-7f301c839000 rw-p 0000c000 b6:b31e1 760182 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
7f301c839000-7f301c840000 r-xp 00000000 b6:b31e1 758475 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
7f301c840000-7f301ca40000 ---p 00007000 b6:b31e1 758475 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
7f301ca40000-7f301ca41000 r--p 00007000 b6:b31e1 758475 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
7f301ca41000-7f301ca42000 rw-p 00008000 b6:b31e1 758475 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
7f301ca42000-7f301ca81000 r-xp 00000000 b6:b31e1 760172 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
7f301ca81000-7f301cc81000 ---p 0003f000 b6:b31e1 760172 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
7f301cc81000-7f301cc84000 r--p 0003f000 b6:b31e1 760172 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
7f301cc84000-7f301cc85000 rw-p 00042000 b6:b31e1 760172 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
7f301cc85000-7f301cc9d000 r-xp 00000000 b6:b31e1 753149 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
7f301cc9d000-7f301ce9c000 ---p 00018000 b6:b31e1 753149 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
7f301ce9c000-7f301ce9f000 r--p 00017000 b6:b31e1 753149 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
7f301ce9f000-7f301cea0000 rw-p 0001a000 b6:b31e1 753149 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
7f301cea0000-7f301ced8000 r-xp 00000000 b6:b31e1 760217 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
7f301ced8000-7f301d0d7000 ---p 00038000 b6:b31e1 760217 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
7f301d0d7000-7f301d0dc000 r--p 00037000 b6:b31e1 760217 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
7f301d0dc000-7f301d0de000 rw-p 0003c000 b6:b31e1 760217 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
7f301d0de000-7f301d0df000 rw-p 00000000 00:00 0
7f301d0df000-7f301d252000 r-xp 00000000 b6:b31e1 758483 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mbstring.so
7f301d252000-7f301d452000 ---p 00173000 b6:b31e1 758483 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mbstring.so
7f301d452000-7f301d45c000 r--p 00173000 b6:b31e1 758483 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mbstring.so
7f301d45c000-7f301d464000 rw-p 0017d000 b6:b31e1 758483 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mbstring.so
7f301d464000-7f301d46d000 r-xp 00000000 b6:b31e1 760171 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
7f301d46d000-7f301d66d000 ---p 00009000 b6:b31e1 760171 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
7f301d66d000-7f301d66e000 r--p 00009000 b6:b31e1 760171 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
7f301d66e000-7f301d66f000 rw-p 0000a000 b6:b31e1 760171 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
7f301d66f000-7f301d673000 r-xp 00000000 b6:b31e1 108539 /usr/lib64/libcap-ng.so.0.0.0
7f301d673000-7f301d873000 ---p 00004000 b6:b31e1 108539 /usr/lib64/libcap-ng.so.0.0.0
7f301d873000-7f301d874000 r--p 00004000 b6:b31e1 108539 /usr/lib64/libcap-ng.so.0.0.0
7f301d874000-7f301d875000 rw-p 00005000 b6:b31e1 108539 /usr/lib64/libcap-ng.so.0.0.0
7f301d875000-7f301d893000 r-xp 00000000 b6:b31e1 108541 /usr/lib64/libaudit.so.1.0.0
7f301d893000-7f301da92000 ---p 0001e000 b6:b31e1 108541 /usr/lib64/libaudit.so.1.0.0
7f301da92000-7f301da93000 r--p 0001d000 b6:b31e1 108541 /usr/lib64/libaudit.so.1.0.0
7f301da93000-7f301da94000 rw-p 0001e000 b6:b31e1 108541 /usr/lib64/libaudit.so.1.0.0
7f301da94000-7f301da9e000 rw-p 00000000 00:00 0
7f301da9e000-7f301daab000 r-xp 00000000 b6:b31e1 111962 /usr/lib64/libpam.so.0.83.1
7f301daab000-7f301dcab000 ---p 0000d000 b6:b31e1 111962 /usr/lib64/libpam.so.0.83.1
7f301dcab000-7f301dcac000 r--p 0000d000 b6:b31e1 111962 /usr/lib64/libpam.so.0.83.1
7f301dcac000-7f301dcad000 rw-p 0000e000 b6:b31e1 111962 /usr/lib64/libpam.so.0.83.1
7f301dcad000-7f301ddb5000 r-xp 00000000 b6:b31e1 754299 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
7f301ddb5000-7f301dfb5000 ---p 00108000 b6:b31e1 754299 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
7f301dfb5000-7f301dfb7000 r--p 00108000 b6:b31e1 754299 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
7f301dfb7000-7f301dfc0000 rw-p 0010a000 b6:b31e1 754299 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
7f301dfc0000-7f301dfc1000 rw-p 00000000 00:00 0
7f301dfc1000-7f301dfd5000 r-xp 00000000 b6:b31e1 758485 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
7f301dfd5000-7f301e1d4000 ---p 00014000 b6:b31e1 758485 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
7f301e1d4000-7f301e1d7000 r--p 00013000 b6:b31e1 758485 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
7f301e1d7000-7f301e1d8000 rw-p 00016000 b6:b31e1 758485 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
7f301e1d8000-7f301e1e1000 r-xp 00000000 b6:b31e1 758481 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/iconv.so
7f301e1e1000-7f301e3e0000 ---p 00009000 b6:b31e1 758481 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/iconv.so
7f301e3e0000-7f301e3e1000 r--p 00008000 b6:b31e1 758481 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/iconv.so
7f301e3e1000-7f301e3e2000 rw-p 00009000 b6:b31e1 758481 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/iconv.so
7f301e3e2000-7f301e3e4000 r-xp 00000000 b6:b31e1 120181 /usr/lib64/libXau.so.6.0.0
7f301e3e4000-7f301e5e4000 ---p 00002000 b6:b31e1 120181 /usr/lib64/libXau.so.6.0.0
7f301e5e4000-7f301e5e5000 r--p 00002000 b6:b31e1 120181 /usr/lib64/libXau.so.6.0.0
7f301e5e5000-7f301e5e6000 rw-p 00003000 b6:b31e1 120181 /usr/lib64/libXau.so.6.0.0
7f301e5e6000-7f301e60d000 r-xp 00000000 b6:b31e1 120233 /usr/lib64/libxcb.so.1.1.0
7f301e60d000-7f301e80c000 ---p 00027000 b6:b31e1 120233 /usr/lib64/libxcb.so.1.1.0
7f301e80c000-7f301e80d000 r--p 00026000 b6:b31e1 120233 /usr/lib64/libxcb.so.1.1.0
7f301e80d000-7f301e80e000 rw-p 00027000 b6:b31e1 120233 /usr/lib64/libxcb.so.1.1.0
7f301e80e000-7f301e8c5000 r-xp 00000000 b6:b31e1 120298 /usr/lib64/libfreetype.so.6.14.0
7f301e8c5000-7f301eac5000 ---p 000b7000 b6:b31e1 120298 /usr/lib64/libfreetype.so.6.14.0
7f301eac5000-7f301eacc000 r--p 000b7000 b6:b31e1 120298 /usr/lib64/libfreetype.so.6.14.0
7f301eacc000-7f301eacd000 rw-p 000be000 b6:b31e1 120298 /usr/lib64/libfreetype.so.6.14.0
7f301eacd000-7f301eb19000 r-xp 00000000 b6:b31e1 120816 /usr/lib64/libwebp.so.4.0.2
7f301eb19000-7f301ed18000 ---p 0004c000 b6:b31e1 120816 /usr/lib64/libwebp.so.4.0.2
7f301ed18000-7f301ed19000 r--p 0004b000 b6:b31e1 120816 /usr/lib64/libwebp.so.4.0.2
7f301ed19000-7f301ed1a000 rw-p 0004c000 b6:b31e1 120816 /usr/lib64/libwebp.so.4.0.2
7f301ed1a000-7f301ed1d000 rw-p 00000000 00:00 0
7f301ed1d000-7f301ed60000 r-xp 00000000 b6:b31e1 120149 /usr/lib64/libjpeg.so.62.1.0
7f301ed60000-7f301ef60000 ---p 00043000 b6:b31e1 120149 /usr/lib64/libjpeg.so.62.1.0
7f301ef60000-7f301ef61000 r--p 00043000 b6:b31e1 120149 /usr/lib64/libjpeg.so.62.1.0
7f301ef61000-7f301ef62000 rw-p 00044000 b6:b31e1 120149 /usr/lib64/libjpeg.so.62.1.0
7f301ef62000-7f301ef72000 rw-p 00000000 00:00 0
7f301ef72000-7f301ef9b000 r-xp 00000000 b6:b31e1 120146 /usr/lib64/libpng15.so.15.13.0
7f301ef9b000-7f301f19b000 ---p 00029000 b6:b31e1 120146 /usr/lib64/libpng15.so.15.13.0
7f301f19b000-7f301f19c000 r--p 00029000 b6:b31e1 120146 /usr/lib64/libpng15.so.15.13.0
7f301f19c000-7f301f19d000 rw-p 0002a000 b6:b31e1 120146 /usr/lib64/libpng15.so.15.13.0
7f301f19d000-7f301f1ae000 r-xp 00000000 b6:b31e1 112158 /usr/lib64/libXpm.so.4.11.0
7f301f1ae000-7f301f3ad000 ---p 00011000 b6:b31e1 112158 /usr/lib64/libXpm.so.4.11.0
7f301f3ad000-7f301f3ae000 r--p 00010000 b6:b31e1 112158 /usr/lib64/libXpm.so.4.11.0
7f301f3ae000-7f301f3af000 rw-p 00011000 b6:b31e1 112158 /usr/lib64/libXpm.so.4.11.0
7f301f3af000-7f301f4e7000 r-xp 00000000 b6:b31e1 120238 /usr/lib64/libX11.so.6.3.0
7f301f4e7000-7f301f6e7000 ---p 00138000 b6:b31e1 120238 /usr/lib64/libX11.so.6.3.0
7f301f6e7000-7f301f6e8000 r--p 00138000 b6:b31e1 120238 /usr/lib64/libX11.so.6.3.0
7f301f6e8000-7f301f6ed000 rw-p 00139000 b6:b31e1 120238 /usr/lib64/libX11.so.6.3.0
7f301f6ed000-7f301f745000 r-xp 00000000 b6:b31e1 758480 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
7f301f745000-7f301f944000 ---p 00058000 b6:b31e1 758480 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
7f301f944000-7f301f949000 r--p 00057000 b6:b31e1 758480 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
7f301f949000-7f301f94a000 rw-p 0005c000 b6:b31e1 758480 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
7f301f94a000-7f301f94e000 rw-p 00000000 00:00 0
7f301f94e000-7f301f95a000 r-xp 00000000 b6:b31e1 754010 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
7f301f95a000-7f301fb5a000 ---p 0000c000 b6:b31e1 754010 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
7f301fb5a000-7f301fb5c000 r--p 0000c000 b6:b31e1 754010 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
7f301fb5c000-7f301fb5d000 rw-p 0000e000 b6:b31e1 754010 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
7f301fb5d000-7f301fb80000 r-xp 00000000 b6:b31e1 752938 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
7f301fb80000-7f301fd7f000 ---p 00023000 b6:b31e1 752938 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
7f301fd7f000-7f301fd83000 r--p 00022000 b6:b31e1 752938 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
7f301fd83000-7f301fd84000 rw-p 00026000 b6:b31e1 752938 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
7f301fd84000-7f301fd85000 rw-p 00000000 00:00 0
7f301fd85000-7f301fda5000 r-xp 00000000 b6:b31e1 726058 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7f301fda5000-7f301ffa4000 ---p 00020000 b6:b31e1 726058 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7f301ffa4000-7f301ffa5000 r--p 0001f000 b6:b31e1 726058 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7f301ffa5000-7f301ffa6000 rw-p 00020000 b6:b31e1 726058 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
7f301ffa6000-7f30201dd000 r-xp 00000000 b6:b31e1 109850 /usr/lib64/libcrypto.so.1.0.2k
7f30201dd000-7f30203dc000 ---p 00237000 b6:b31e1 109850 /usr/lib64/libcrypto.so.1.0.2k
7f30203dc000-7f30203f8000 r--p 00236000 b6:b31e1 109850 /usr/lib64/libcrypto.so.1.0.2k
7f30203f8000-7f3020405000 rw-p 00252000 b6:b31e1 109850 /usr/lib64/libcrypto.so.1.0.2k
7f3020405000-7f3020409000 rw-p 00000000 00:00 0
7f3020409000-7f3020470000 r-xp 00000000 b6:b31e1 109852 /usr/lib64/libssl.so.1.0.2k
7f3020470000-7f3020670000 ---p 00067000 b6:b31e1 109852 /usr/lib64/libssl.so.1.0.2k
7f3020670000-7f3020674000 r--p 00067000 b6:b31e1 109852 /usr/lib64/libssl.so.1.0.2k
7f3020674000-7f302067b000 rw-p 0006b000 b6:b31e1 109852 /usr/lib64/libssl.so.1.0.2k
7f302067b000-7f302069a000 r-xp 00000000 b6:b31e1 726062 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7f302069a000-7f3020899000 ---p 0001f000 b6:b31e1 726062 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7f3020899000-7f302089a000 r--p 0001e000 b6:b31e1 726062 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7f302089a000-7f302089b000 rw-p 0001f000 b6:b31e1 726062 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
7f302089b000-7f30208c6000 r-xp 00000000 b6:b31e1 112556 /usr/lib64/libssh2.so.1.0.1
7f30208c6000-7f3020ac6000 ---p 0002b000 b6:b31e1 112556 /usr/lib64/libssh2.so.1.0.1
7f3020ac6000-7f3020ac7000 r--p 0002b000 b6:b31e1 112556 /usr/lib64/libssh2.so.1.0.1
7f3020ac7000-7f3020ac8000 rw-p 0002c000 b6:b31e1 112556 /usr/lib64/libssh2.so.1.0.1
7f3020ac8000-7f3020aee000 r-xp 00000000 b6:b31e1 725956 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7f3020aee000-7f3020ced000 ---p 00026000 b6:b31e1 725956 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7f3020ced000-7f3020cf0000 r--p 00025000 b6:b31e1 725956 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7f3020cf0000-7f3020cf1000 rw-p 00028000 b6:b31e1 725956 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.21.1
7f3020cf1000-7f3020d85000 r-xp 00000000 b6:b31e1 780805 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7f3020d85000-7f3020f84000 ---p 00094000 b6:b31e1 780805 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7f3020f84000-7f3020f86000 r--p 00093000 b6:b31e1 780805 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7f3020f86000-7f3020f89000 rw-p 00095000 b6:b31e1 780805 /opt/cpanel/libcurl/lib64/libcurl.so.4.7.0
7f3020f89000-7f3020f8a000 rw-p 00000000 00:00 0
7f3020f8a000-7f3020fa0000 r-xp 00000000 b6:b31e1 758482 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
7f3020fa0000-7f302119f000 ---p 00016000 b6:b31e1 758482 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
7f302119f000-7f30211a1000 r--p 00015000 b6:b31e1 758482 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
7f30211a1000-7f30211a2000 rw-p 00017000 b6:b31e1 758482 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
7f30211a2000-7f30211a4000 r-xp 00000000 b6:b31e1 753128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
7f30211a4000-7f30213a4000 ---p 00002000 b6:b31e1 753128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
7f30213a4000-7f30213a5000 r--p 00002000 b6:b31e1 753128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
7f30213a5000-7f30213a6000 rw-p 00003000 b6:b31e1 753128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
7f30213a6000-7f30213ac000 r-xp 00000000 b6:b31e1 758484 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
7f30213ac000-7f30215ac000 ---p 00006000 b6:b31e1 758484 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
7f30215ac000-7f30215ad000 r--p 00006000 b6:b31e1 758484 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
7f30215ad000-7f30215ae000 rw-p 00007000 b6:b31e1 758484 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
7f30215ae000-7f30215b5000 r-xp 00000000 b6:b31e1 758488 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
7f30215b5000-7f30217b4000 ---p 00007000 b6:b31e1 758488 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
7f30217b4000-7f30217b5000 r--p 00006000 b6:b31e1 758488 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
7f30217b5000-7f30217b6000 rw-p 00007000 b6:b31e1 758488 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
7f30217b6000-7f30218ee000 r-xp 00000000 b6:b31e1 758486 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ioncube_loader_lin_7.3.so
7f30218ee000-7f30219ee000 ---p 00138000 b6:b31e1 758486 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ioncube_loader_lin_7.3.so
7f30219ee000-7f30219fc000 rw-p 00138000 b6:b31e1 758486 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ioncube_loader_lin_7.3.so
7f30219fc000-7f3021c00000 rw-p 00000000 00:00 0
7f3021c08000-7f3021c38000 rwxp 00000000 00:00 0
7f3021c38000-7f3021c89000 rw-p 00000000 00:00 0
7f3021c89000-7f3021c8b000 rw-s 00000000 00:05 4023386270 /dev/zero (deleted)
7f3021c91000-7f3021cc1000 rwxp 00000000 00:00 0
7f3021cc1000-7f3021cf6000 r--s 00000000 b6:b31e1 28742 /var/db/nscd/group
7f3021cf6000-7f3021d05000 r-xp 00000000 b6:b31e1 108408 /usr/lib64/libbz2.so.1.0.6
7f3021d05000-7f3021f04000 ---p 0000f000 b6:b31e1 108408 /usr/lib64/libbz2.so.1.0.6
7f3021f04000-7f3021f05000 r--p 0000e000 b6:b31e1 108408 /usr/lib64/libbz2.so.1.0.6
7f3021f05000-7f3021f06000 rw-p 0000f000 b6:b31e1 108408 /usr/lib64/libbz2.so.1.0.6
7f3021f06000-7f3021f1d000 r-xp 00000000 b6:b31e1 108496 /usr/lib64/libelf-0.176.so
7f3021f1d000-7f302211c000 ---p 00017000 b6:b31e1 108496 /usr/lib64/libelf-0.176.so
7f302211c000-7f302211d000 r--p 00016000 b6:b31e1 108496 /usr/lib64/libelf-0.176.so
7f302211d000-7f302211e000 rw-p 00017000 b6:b31e1 108496 /usr/lib64/libelf-0.176.so
7f302211e000-7f302217e000 r-xp 00000000 b6:b31e1 108353 /usr/lib64/libpcre.so.1.2.0
7f302217e000-7f302237e000 ---p 00060000 b6:b31e1 108353 /usr/lib64/libpcre.so.1.2.0
7f302237e000-7f302237f000 r--p 00060000 b6:b31e1 108353 /usr/lib64/libpcre.so.1.2.0
7f302237f000-7f3022380000 rw-p 00061000 b6:b31e1 108353 /usr/lib64/libpcre.so.1.2.0
7f3022380000-7f3022384000 r-xp 00000000 b6:b31e1 108446 /usr/lib64/libattr.so.1.1.0
7f3022384000-7f3022583000 ---p 00004000 b6:b31e1 108446 /usr/lib64/libattr.so.1.1.0
7f3022583000-7f3022584000 r--p 00003000 b6:b31e1 108446 /usr/lib64/libattr.so.1.1.0
7f3022584000-7f3022585000 rw-p 00004000 b6:b31e1 108446 /usr/lib64/libattr.so.1.1.0
7f3022585000-7f3022588000 r-xp 00000000 b6:b31e1 109345 /usr/lib64/libkeyutils.so.1.5
7f3022588000-7f3022787000 ---p 00003000 b6:b31e1 109345 /usr/lib64/libkeyutils.so.1.5
7f3022787000-7f3022788000 r--p 00002000 b6:b31e1 109345 /usr/lib64/libkeyutils.so.1.5
7f3022788000-7f3022789000 rw-p 00003000 b6:b31e1 109345 /usr/lib64/libkeyutils.so.1.5
7f3022789000-7f3022797000 r-xp 00000000 b6:b31e1 110107 /usr/lib64/libkrb5support.so.0.1
7f3022797000-7f3022997000 ---p 0000e000 b6:b31e1 110107 /usr/lib64/libkrb5support.so.0.1
7f3022997000-7f3022998000 r--p 0000e000 b6:b31e1 110107 /usr/lib64/libkrb5support.so.0.1
7f3022998000-7f3022999000 rw-p 0000f000 b6:b31e1 110107 /usr/lib64/libkrb5support.so.0.1
7f3022999000-7f30229ae000 r-xp 00000000 b6:b31e1 107541 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f30229ae000-7f3022bad000 ---p 00015000 b6:b31e1 107541 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f3022bad000-7f3022bae000 r--p 00014000 b6:b31e1 107541 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f3022bae000-7f3022baf000 rw-p 00015000 b6:b31e1 107541 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f3022baf000-7f3022bfd000 r-xp 00000000 b6:b31e1 113251 /usr/lib64/libdw-0.176.so
7f3022bfd000-7f3022dfd000 ---p 0004e000 b6:b31e1 113251 /usr/lib64/libdw-0.176.so
7f3022dfd000-7f3022dff000 r--p 0004e000 b6:b31e1 113251 /usr/lib64/libdw-0.176.so
7f3022dff000-7f3022e00000 rw-p 00050000 b6:b31e1 113251 /usr/lib64/libdw-0.176.so
7f3022e00000-7f3022e04000 r-xp 00000000 b6:b31e1 108550 /usr/lib64/libgpg-error.so.0.10.0
7f3022e04000-7f3023003000 ---p 00004000 b6:b31e1 108550 /usr/lib64/libgpg-error.so.0.10.0
7f3023003000-7f3023004000 r--p 00003000 b6:b31e1 108550 /usr/lib64/libgpg-error.so.0.10.0
7f3023004000-7f3023005000 rw-p 00004000 b6:b31e1 108550 /usr/lib64/libgpg-error.so.0.10.0
7f3023005000-7f3023082000 r-xp 00000000 b6:b31e1 108556 /usr/lib64/libgcrypt.so.11.8.2
7f3023082000-7f3023281000 ---p 0007d000 b6:b31e1 108556 /usr/lib64/libgcrypt.so.11.8.2
7f3023281000-7f3023282000 r--p 0007c000 b6:b31e1 108556 /usr/lib64/libgcrypt.so.11.8.2
7f3023282000-7f3023285000 rw-p 0007d000 b6:b31e1 108556 /usr/lib64/libgcrypt.so.11.8.2
7f3023285000-7f3023286000 rw-p 00000000 00:00 0
7f3023286000-7f3023294000 r-xp 00000000 b6:b31e1 109326 /usr/lib64/liblz4.so.1.8.3
7f3023294000-7f3023493000 ---p 0000e000 b6:b31e1 109326 /usr/lib64/liblz4.so.1.8.3
7f3023493000-7f3023494000 r--p 0000d000 b6:b31e1 109326 /usr/lib64/liblz4.so.1.8.3
7f3023494000-7f3023495000 rw-p 0000e000 b6:b31e1 109326 /usr/lib64/liblz4.so.1.8.3
7f3023495000-7f30234b9000 r-xp 00000000 b6:b31e1 108362 /usr/lib64/libselinux.so.1
7f30234b9000-7f30236b8000 ---p 00024000 b6:b31e1 108362 /usr/lib64/libselinux.so.1
7f30236b8000-7f30236b9000 r--p 00023000 b6:b31e1 108362 /usr/lib64/libselinux.so.1
7f30236b9000-7f30236ba000 rw-p 00024000 b6:b31e1 108362 /usr/lib64/libselinux.so.1
7f30236ba000-7f30236bc000 rw-p 00000000 00:00 0
7f30236bc000-7f30236c0000 r-xp 00000000 b6:b31e1 108449 /usr/lib64/libcap.so.2.22
7f30236c0000-7f30238bf000 ---p 00004000 b6:b31e1 108449 /usr/lib64/libcap.so.2.22
7f30238bf000-7f30238c0000 r--p 00003000 b6:b31e1 108449 /usr/lib64/libcap.so.2.22
7f30238c0000-7f30238c1000 rw-p 00004000 b6:b31e1 108449 /usr/lib64/libcap.so.2.22
7f30238c1000-7f30238d8000 r-xp 00000000 b6:b31e1 107950 /usr/lib64/libpthread-2.17.so
7f30238d8000-7f3023ad7000 ---p 00017000 b6:b31e1 107950 /usr/lib64/libpthread-2.17.so
7f3023ad7000-7f3023ad8000 r--p 00016000 b6:b31e1 107950 /usr/lib64/libpthread-2.17.so
7f3023ad8000-7f3023ad9000 rw-p 00017000 b6:b31e1 107950 /usr/lib64/libpthread-2.17.so
7f3023ad9000-7f3023add000 rw-p 00000000 00:00 0
7f3023add000-7f3023adf000 r-xp 00000000 b6:b31e1 107895 /usr/lib64/libfreebl3.so
7f3023adf000-7f3023cde000 ---p 00002000 b6:b31e1 107895 /usr/lib64/libfreebl3.so
7f3023cde000-7f3023cdf000 r--p 00001000 b6:b31e1 107895 /usr/lib64/libfreebl3.so
7f3023cdf000-7f3023ce0000 rw-p 00002000 b6:b31e1 107895 /usr/lib64/libfreebl3.so
7f3023ce0000-7f3023ea4000 r-xp 00000000 b6:b31e1 107924 /usr/lib64/libc-2.17.so
7f3023ea4000-7f30240a3000 ---p 001c4000 b6:b31e1 107924 /usr/lib64/libc-2.17.so
7f30240a3000-7f30240a7000 r--p 001c3000 b6:b31e1 107924 /usr/lib64/libc-2.17.so
7f30240a7000-7f30240a9000 rw-p 001c7000 b6:b31e1 107924 /usr/lib64/libc-2.17.so
7f30240a9000-7f30240ae000 rw-p 00000000 00:00 0
7f30240ae000-7f30240b1000 r-xp 00000000 b6:b31e1 108367 /usr/lib64/libcom_err.so.2.1
7f30240b1000-7f30242b0000 ---p 00003000 b6:b31e1 108367 /usr/lib64/libcom_err.so.2.1
7f30242b0000-7f30242b1000 r--p 00002000 b6:b31e1 108367 /usr/lib64/libcom_err.so.2.1
7f30242b1000-7f30242b2000 rw-p 00003000 b6:b31e1 108367 /usr/lib64/libcom_err.so.2.1
7f30242b2000-7f30242e3000 r-xp 00000000 b6:b31e1 110099 /usr/lib64/libk5crypto.so.3.1
7f30242e3000-7f30244e2000 ---p 00031000 b6:b31e1 110099 /usr/lib64/libk5crypto.so.3.1
7f30244e2000-7f30244e4000 r--p 00030000 b6:b31e1 110099 /usr/lib64/libk5crypto.so.3.1
7f30244e4000-7f30244e5000 rw-p 00032000 b6:b31e1 110099 /usr/lib64/libk5crypto.so.3.1
7f30244e5000-7f30245be000 r-xp 00000000 b6:b31e1 110105 /usr/lib64/libkrb5.so.3.3
7f30245be000-7f30247bd000 ---p 000d9000 b6:b31e1 110105 /usr/lib64/libkrb5.so.3.3
7f30247bd000-7f30247cb000 r--p 000d8000 b6:b31e1 110105 /usr/lib64/libkrb5.so.3.3
7f30247cb000-7f30247ce000 rw-p 000e6000 b6:b31e1 110105 /usr/lib64/libkrb5.so.3.3
7f30247ce000-7f3024818000 r-xp 00000000 b6:b31e1 110095 /usr/lib64/libgssapi_krb5.so.2.2
7f3024818000-7f3024a18000 ---p 0004a000 b6:b31e1 110095 /usr/lib64/libgssapi_krb5.so.2.2
7f3024a18000-7f3024a19000 r--p 0004a000 b6:b31e1 110095 /usr/lib64/libgssapi_krb5.so.2.2
7f3024a19000-7f3024a1b000 rw-p 0004b000 b6:b31e1 110095 /usr/lib64/libgssapi_krb5.so.2.2
7f3024a1b000-7f3024a40000 r-xp 00000000 b6:b31e1 108410 /usr/lib64/liblzma.so.5.2.2
7f3024a40000-7f3024c3f000 ---p 00025000 b6:b31e1 108410 /usr/lib64/liblzma.so.5.2.2
7f3024c3f000-7f3024c40000 r--p 00024000 b6:b31e1 108410 /usr/lib64/liblzma.so.5.2.2
7f3024c40000-7f3024c41000 rw-p 00025000 b6:b31e1 108410 /usr/lib64/liblzma.so.5.2.2
7f3024c41000-7f3024d9f000 r-xp 00000000 b6:b31e1 725852 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7f3024d9f000-7f3024f9f000 ---p 0015e000 b6:b31e1 725852 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7f3024f9f000-7f3024fa7000 r--p 0015e000 b6:b31e1 725852 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7f3024fa7000-7f3024fa9000 rw-p 00166000 b6:b31e1 725852 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
7f3024fa9000-7f3024faa000 rw-p 00000000 00:00 0
7f3024faa000-7f3024fd9000 r-xp 00000000 b6:b31e1 113263 /usr/lib64/libsystemd.so.0.6.0
7f3024fd9000-7f30251d9000 ---p 0002f000 b6:b31e1 113263 /usr/lib64/libsystemd.so.0.6.0
7f30251d9000-7f30251da000 r--p 0002f000 b6:b31e1 113263 /usr/lib64/libsystemd.so.0.6.0
7f30251da000-7f30251db000 rw-p 00030000 b6:b31e1 113263 /usr/lib64/libsystemd.so.0.6.0
7f30251db000-7f30251f2000 r-xp 00000000 b6:b31e1 127889 /usr/lib64/libnsl-2.17.so
7f30251f2000-7f30253f1000 ---p 00017000 b6:b31e1 127889 /usr/lib64/libnsl-2.17.so
7f30253f1000-7f30253f2000 r--p 00016000 b6:b31e1 127889 /usr/lib64/libnsl-2.17.so
7f30253f2000-7f30253f3000 rw-p 00017000 b6:b31e1 127889 /usr/lib64/libnsl-2.17.so
7f30253f3000-7f30253f5000 rw-p 00000000 00:00 0
7f30253f5000-7f30253f7000 r-xp 00000000 b6:b31e1 127886 /usr/lib64/libdl-2.17.so
7f30253f7000-7f30255f7000 ---p 00002000 b6:b31e1 127886 /usr/lib64/libdl-2.17.so
7f30255f7000-7f30255f8000 r--p 00002000 b6:b31e1 127886 /usr/lib64/libdl-2.17.so
7f30255f8000-7f30255f9000 rw-p 00003000 b6:b31e1 127886 /usr/lib64/libdl-2.17.so
7f30255f9000-7f30256fa000 r-xp 00000000 b6:b31e1 127887 /usr/lib64/libm-2.17.so
7f30256fa000-7f30258f9000 ---p 00101000 b6:b31e1 127887 /usr/lib64/libm-2.17.so
7f30258f9000-7f30258fa000 r--p 00100000 b6:b31e1 127887 /usr/lib64/libm-2.17.so
7f30258fa000-7f30258fb000 rw-p 00101000 b6:b31e1 127887 /usr/lib64/libm-2.17.so
7f30258fb000-7f3025902000 r-xp 00000000 b6:b31e1 127895 /usr/lib64/librt-2.17.so
7f3025902000-7f3025b01000 ---p 00007000 b6:b31e1 127895 /usr/lib64/librt-2.17.so
7f3025b01000-7f3025b02000 r--p 00006000 b6:b31e1 127895 /usr/lib64/librt-2.17.so
7f3025b02000-7f3025b03000 rw-p 00007000 b6:b31e1 127895 /usr/lib64/librt-2.17.so
7f3025b03000-7f3025b89000 r-xp 00000000 b6:b31e1 714082 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7f3025b89000-7f3025d89000 ---p 00086000 b6:b31e1 714082 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7f3025d89000-7f3025d91000 r--p 00086000 b6:b31e1 714082 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7f3025d91000-7f3025d96000 rw-p 0008e000 b6:b31e1 714082 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
7f3025d96000-7f302604f000 r-xp 00000000 b6:b31e1 699022 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7f302604f000-7f302624f000 ---p 002b9000 b6:b31e1 699022 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7f302624f000-7f302627a000 r--p 002b9000 b6:b31e1 699022 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7f302627a000-7f302627d000 rw-p 002e4000 b6:b31e1 699022 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
7f302627d000-7f3026281000 rw-p 00000000 00:00 0
7f3026281000-7f3026296000 r-xp 00000000 b6:b31e1 108364 /usr/lib64/libz.so.1.2.7
7f3026296000-7f3026495000 ---p 00015000 b6:b31e1 108364 /usr/lib64/libz.so.1.2.7
7f3026495000-7f3026496000 r--p 00014000 b6:b31e1 108364 /usr/lib64/libz.so.1.2.7
7f3026496000-7f3026497000 rw-p 00015000 b6:b31e1 108364 /usr/lib64/libz.so.1.2.7
7f3026497000-7f30264ad000 r-xp 00000000 b6:b31e1 127894 /usr/lib64/libresolv-2.17.so
7f30264ad000-7f30266ad000 ---p 00016000 b6:b31e1 127894 /usr/lib64/libresolv-2.17.so
7f30266ad000-7f30266ae000 r--p 00016000 b6:b31e1 127894 /usr/lib64/libresolv-2.17.so
7f30266ae000-7f30266af000 rw-p 00017000 b6:b31e1 127894 /usr/lib64/libresolv-2.17.so
7f30266af000-7f30266b1000 rw-p 00000000 00:00 0
7f30266b1000-7f30266b8000 r-xp 00000000 b6:b31e1 725929 /opt/cpanel/libargon2/lib64/libargon2.so.0
7f30266b8000-7f30268b7000 ---p 00007000 b6:b31e1 725929 /opt/cpanel/libargon2/lib64/libargon2.so.0
7f30268b7000-7f30268b8000 r--p 00006000 b6:b31e1 725929 /opt/cpanel/libargon2/lib64/libargon2.so.0
7f30268b8000-7f30268b9000 rw-p 00007000 b6:b31e1 725929 /opt/cpanel/libargon2/lib64/libargon2.so.0
7f30268b9000-7f30268c1000 r-xp 00000000 b6:b31e1 107954 /usr/lib64/libcrypt-2.17.so
7f30268c1000-7f3026ac0000 ---p 00008000 b6:b31e1 107954 /usr/lib64/libcrypt-2.17.so
7f3026ac0000-7f3026ac1000 r--p 00007000 b6:b31e1 107954 /usr/lib64/libcrypt-2.17.so
7f3026ac1000-7f3026ac2000 rw-p 00008000 b6:b31e1 107954 /usr/lib64/libcrypt-2.17.so
7f3026ac2000-7f3026af0000 rw-p 00000000 00:00 0
7f3026af0000-7f3026b12000 r-xp 00000000 b6:b31e1 107917 /usr/lib64/ld-2.17.so
7f3026b13000-7f3026b33000 rwxp 00000000 00:00 0
7f3026b33000-7f3026b68000 r--s 00000000 b6:b31e1 27567 /var/db/nscd/passwd
7f3026b68000-7f3026c29000 r--s 00000000 b6:b31e1 28781 /var/db/nscd/hosts
7f3026c29000-7f3026caa000 rw-p 00000000 00:00 0
7f3026cb3000-7f3026cd3000 rwxp 00000000 00:00 0
7f3026cd4000-7f3026cf4000 rwxp 00000000 00:00 0
7f3026cf4000-7f3026d05000 rw-p 00000000 00:00 0
7f3026d10000-7f3026d11000 rw-p 00000000 00:00 0
7f3026d11000-7f3026d12000 r--p 00021000 b6:b31e1 107917 /usr/lib64/ld-2.17.so
7f3026d12000-7f3026d13000 rw-p 00022000 b6:b31e1 107917 /usr/lib64/ld-2.17.so
7f3026d13000-7f3026d14000 rw-p 00000000 00:00 0
7ffdaa676000-7ffdaa698000 rw-p 00000000 00:00 0 [stack]
7ffdaa7b3000-7ffdaa7b5000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]


The weird thing is that i see an ip that is not related to my server.
I did a whois and i found that the ip belongs to Microsoft Corporation.
Besides that i received an email from a company named Netcraft that saying:

"Hello,

We have discovered a phishing attack located on your network:

hxxps://******[.]gr/wp-includes/wig?ss=2&ea=57374616c6576736b6940657665726573746c616e642e636f6d [185.143.45.57]

We previously contacted you about this issue on 2021-11-17 10:08:30 (UTC).

This attack targets our customer, Microsoft, website URL https://www.microsoft.com/.

Would it be possible to have the fraudulent content, and any other associated fraudulent content, taken down as soon as you are able to?

Additionally, please keep the fraudulent content safe so that our customer and law enforcement agencies can investigate this incident further once the site is offline.

More information about the detected issue is provided at https://incident.netcraft.com/eaeada08c19c/

Many thanks,

Netcraft"

I restored the account a couple of times but the same keeps happening.

Any ideas

  • CentOS v7.9.2009 virtuozzo [cloud]
  • v100.0.4
 

kennysamuerto

Member
PartnerNOC
May 20, 2009
24
6
53
cPanel Access Level
Root Administrator
Hello,

CSF logs need not indicate a problem, since you set in CSF the maximum that a script can use, and it simply warns you. You should check each process, or increase the limit in CSF.

Regarding the email received, what you have is a SQL injection in your wordpress installation, probably caused by an outdated plugin or wordpress itself. You should review your installation, remove the malicious files (this will stop the outgoing attack) and update your plugins, thus closing the door to new injections that exploit the same vulnerability.

You should check your files very well in this installation to avoid leaving a backdoor.

Regards
 
  • Like
Reactions: cPanelAnthony