Page 1 of 1

lfd on server.xxxxxxxxx.com: Suspicious process running under user xxxxxxx

Posted: 26 Jan 2023, 05:35
by amritsingh
Hi,

I am getting tons of email from csf lfd on server.xxxxxxxx.com: Suspicious process running under user xxxxxxx

Just want to know if this can be added in csf.pignore? Is it safe

Any help will be highly appreciated.

Time: Thu Jan 26 11:01:09 2023 +0530
PID: 5587 (Parent PID:4853)
Account: torqueparmap
Uptime: 135550 seconds


Executable:

/opt/cpanel/ea-php73/root/usr/bin/php-cgi


Command Line (often faked in exploits):

/opt/cpanel/ea-php73/root/usr/bin/php-cgi


Network connections by the process (if any):

tcp: 172.31.45.94:45338 -> 172.64.141.33:80


Files open by the process (if any):

/opt/imunify360/proactive/dangerlist (deleted)
/usr/share/i360-php-opts/sigs/7.1/.rules.v2
/usr/share/i360-php-opts/pd-combined-compiled


Memory maps by the process (if any):

00400000-00798000 r-xp 00000000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
00997000-009fb000 r--p 00397000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
009fb000-009fc000 rw-p 003fb000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
009fc000-00a10000 r--p 003fc000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
00a10000-00a11000 rw-p 00410000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
00a11000-00a1b000 r--p 00411000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
00a1b000-00a1c000 rw-p 0041b000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
00a1c000-00a1e000 r--p 0041c000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
00a1e000-00a22000 rw-p 0041e000 103:03 335579612 /opt/cpanel/ea-php73/root/usr/bin/php-cgi
00a22000-00a3f000 rw-p 00000000 00:00 0
024fa000-02714000 rw-p 00000000 00:00 0 [heap]
2b7570ae4000-2b7570b06000 r-xp 00000000 103:03 538451214 /usr/lib64/ld-2.17.so
2b7570b06000-2b7570b08000 rw-p 00000000 00:00 0
2b7570b12000-2b7570b42000 rw-p 00000000 00:00 0
2b7570b6b000-2b7570bec000 rw-p 00000000 00:00 0
2b7570bec000-2b7570c21000 r--s 00000000 103:03 85188646 /var/db/nscd/passwd
2b7570d05000-2b7570d06000 r--p 00021000 103:03 538451214 /usr/lib64/ld-2.17.so
2b7570d06000-2b7570d07000 rw-p 00022000 103:03 538451214 /usr/lib64/ld-2.17.so
2b7570d07000-2b7570d08000 rw-p 00000000 00:00 0
2b7570d08000-2b7570d10000 r-xp 00000000 103:03 538482446 /usr/lib64/libcrypt-2.17.so
2b7570d10000-2b7570f0f000 ---p 00008000 103:03 538482446 /usr/lib64/libcrypt-2.17.so
2b7570f0f000-2b7570f10000 r--p 00007000 103:03 538482446 /usr/lib64/libcrypt-2.17.so
2b7570f10000-2b7570f11000 rw-p 00008000 103:03 538482446 /usr/lib64/libcrypt-2.17.so
2b7570f11000-2b7570f3f000 rw-p 00000000 00:00 0
2b7570f3f000-2b7570f46000 r-xp 00000000 103:03 80633726 /opt/cpanel/libargon2/lib64/libargon2.so.0
2b7570f46000-2b7571145000 ---p 00007000 103:03 80633726 /opt/cpanel/libargon2/lib64/libargon2.so.0
2b7571145000-2b7571146000 r--p 00006000 103:03 80633726 /opt/cpanel/libargon2/lib64/libargon2.so.0
2b7571146000-2b7571147000 rw-p 00007000 103:03 80633726 /opt/cpanel/libargon2/lib64/libargon2.so.0
2b7571147000-2b757115d000 r-xp 00000000 103:03 538503191 /usr/lib64/libresolv-2.17.so
2b757115d000-2b757135d000 ---p 00016000 103:03 538503191 /usr/lib64/libresolv-2.17.so
2b757135d000-2b757135e000 r--p 00016000 103:03 538503191 /usr/lib64/libresolv-2.17.so
2b757135e000-2b757135f000 rw-p 00017000 103:03 538503191 /usr/lib64/libresolv-2.17.so
2b757135f000-2b7571361000 rw-p 00000000 00:00 0
2b7571361000-2b7571396000 r-xp 00000000 103:03 630536488 /usr/lib64/libedit.so.0.0.42
2b7571396000-2b7571595000 ---p 00035000 103:03 630536488 /usr/lib64/libedit.so.0.0.42
2b7571595000-2b7571598000 r--p 00034000 103:03 630536488 /usr/lib64/libedit.so.0.0.42
2b7571598000-2b7571599000 rw-p 00037000 103:03 630536488 /usr/lib64/libedit.so.0.0.42
2b7571599000-2b757159e000 rw-p 00000000 00:00 0
2b757159e000-2b75715c4000 r-xp 00000000 103:03 630536630 /usr/lib64/libncurses.so.5.9
2b75715c4000-2b75717c3000 ---p 00026000 103:03 630536630 /usr/lib64/libncurses.so.5.9
2b75717c3000-2b75717c4000 r--p 00025000 103:03 630536630 /usr/lib64/libncurses.so.5.9
2b75717c4000-2b75717c5000 rw-p 00026000 103:03 630536630 /usr/lib64/libncurses.so.5.9
2b75717c5000-2b75717ea000 r-xp 00000000 103:03 630536785 /usr/lib64/libtinfo.so.5.9
2b75717ea000-2b75719ea000 ---p 00025000 103:03 630536785 /usr/lib64/libtinfo.so.5.9
2b75719ea000-2b75719ee000 r--p 00025000 103:03 630536785 /usr/lib64/libtinfo.so.5.9
2b75719ee000-2b75719ef000 rw-p 00029000 103:03 630536785 /usr/lib64/libtinfo.so.5.9
2b75719ef000-2b7571ad8000 r-xp 00000000 103:03 630536764 /usr/lib64/libstdc++.so.6.0.19
2b7571ad8000-2b7571cd8000 ---p 000e9000 103:03 630536764 /usr/lib64/libstdc++.so.6.0.19
2b7571cd8000-2b7571ce0000 r--p 000e9000 103:03 630536764 /usr/lib64/libstdc++.so.6.0.19
2b7571ce0000-2b7571ce2000 rw-p 000f1000 103:03 630536764 /usr/lib64/libstdc++.so.6.0.19
2b7571ce2000-2b7571cf7000 rw-p 00000000 00:00 0
2b7571cf7000-2b7571d0c000 r-xp 00000000 103:03 538032335 /usr/lib64/libz.so.1.2.7
2b7571d0c000-2b7571f0b000 ---p 00015000 103:03 538032335 /usr/lib64/libz.so.1.2.7
2b7571f0b000-2b7571f0c000 r--p 00014000 103:03 538032335 /usr/lib64/libz.so.1.2.7
2b7571f0c000-2b7571f0d000 rw-p 00015000 103:03 538032335 /usr/lib64/libz.so.1.2.7
2b7571f0d000-2b75721c7000 r-xp 00000000 103:03 80624063 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
2b75721c7000-2b75723c6000 ---p 002ba000 103:03 80624063 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
2b75723c6000-2b75723f1000 r--p 002b9000 103:03 80624063 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
2b75723f1000-2b75723f4000 rw-p 002e4000 103:03 80624063 /opt/cpanel/ea-openssl11/lib/libcrypto-ea.so.1.1
2b75723f4000-2b75723f8000 rw-p 00000000 00:00 0
2b75723f8000-2b757247e000 r-xp 00000000 103:03 79189943 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
2b757247e000-2b757267e000 ---p 00086000 103:03 79189943 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
2b757267e000-2b7572686000 r--p 00086000 103:03 79189943 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
2b7572686000-2b757268b000 rw-p 0008e000 103:03 79189943 /opt/cpanel/ea-openssl11/lib/libssl-ea.so.1.1
2b757268b000-2b7572692000 r-xp 00000000 103:03 629357918 /usr/lib64/librt-2.17.so
2b7572692000-2b7572891000 ---p 00007000 103:03 629357918 /usr/lib64/librt-2.17.so
2b7572891000-2b7572892000 r--p 00006000 103:03 629357918 /usr/lib64/librt-2.17.so
2b7572892000-2b7572893000 rw-p 00007000 103:03 629357918 /usr/lib64/librt-2.17.so
2b7572893000-2b7572994000 r-xp 00000000 103:03 538494970 /usr/lib64/libm-2.17.so
2b7572994000-2b7572b93000 ---p 00101000 103:03 538494970 /usr/lib64/libm-2.17.so
2b7572b93000-2b7572b94000 r--p 00100000 103:03 538494970 /usr/lib64/libm-2.17.so
2b7572b94000-2b7572b95000 rw-p 00101000 103:03 538494970 /usr/lib64/libm-2.17.so
2b7572b95000-2b7572b97000 r-xp 00000000 103:03 538488678 /usr/lib64/libdl-2.17.so
2b7572b97000-2b7572d97000 ---p 00002000 103:03 538488678 /usr/lib64/libdl-2.17.so
2b7572d97000-2b7572d98000 r--p 00002000 103:03 538488678 /usr/lib64/libdl-2.17.so
2b7572d98000-2b7572d99000 rw-p 00003000 103:03 538488678 /usr/lib64/libdl-2.17.so
2b7572d99000-2b7572db0000 r-xp 00000000 103:03 538494974 /usr/lib64/libnsl-2.17.so
2b7572db0000-2b7572faf000 ---p 00017000 103:03 538494974 /usr/lib64/libnsl-2.17.so
2b7572faf000-2b7572fb0000 r--p 00016000 103:03 538494974 /usr/lib64/libnsl-2.17.so
2b7572fb0000-2b7572fb1000 rw-p 00017000 103:03 538494974 /usr/lib64/libnsl-2.17.so
2b7572fb1000-2b7572fb3000 rw-p 00000000 00:00 0
2b7572fb3000-2b7573111000 r-xp 00000000 103:03 629105651 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
2b7573111000-2b7573311000 ---p 0015e000 103:03 629105651 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
2b7573311000-2b7573319000 r--p 0015e000 103:03 629105651 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
2b7573319000-2b757331b000 rw-p 00166000 103:03 629105651 /opt/cpanel/ea-libxml2/lib64/libxml2.so.2.9.7
2b757331b000-2b757331c000 rw-p 00000000 00:00 0
2b757331c000-2b7573341000 r-xp 00000000 103:03 630535490 /usr/lib64/liblzma.so.5.2.2
2b7573341000-2b7573540000 ---p 00025000 103:03 630535490 /usr/lib64/liblzma.so.5.2.2
2b7573540000-2b7573541000 r--p 00024000 103:03 630535490 /usr/lib64/liblzma.so.5.2.2
2b7573541000-2b7573542000 rw-p 00025000 103:03 630535490 /usr/lib64/liblzma.so.5.2.2
2b7573542000-2b757358c000 r-xp 00000000 103:03 629106664 /usr/lib64/libgssapi_krb5.so.2.2
2b757358c000-2b757378c000 ---p 0004a000 103:03 629106664 /usr/lib64/libgssapi_krb5.so.2.2
2b757378c000-2b757378d000 r--p 0004a000 103:03 629106664 /usr/lib64/libgssapi_krb5.so.2.2
2b757378d000-2b757378f000 rw-p 0004b000 103:03 629106664 /usr/lib64/libgssapi_krb5.so.2.2
2b757378f000-2b7573868000 r-xp 00000000 103:03 617360060 /usr/lib64/libkrb5.so.3.3
2b7573868000-2b7573a67000 ---p 000d9000 103:03 617360060 /usr/lib64/libkrb5.so.3.3
2b7573a67000-2b7573a75000 r--p 000d8000 103:03 617360060 /usr/lib64/libkrb5.so.3.3
2b7573a75000-2b7573a78000 rw-p 000e6000 103:03 617360060 /usr/lib64/libkrb5.so.3.3
2b7573a78000-2b7573aa9000 r-xp 00000000 103:03 630537695 /usr/lib64/libk5crypto.so.3.1
2b7573aa9000-2b7573ca8000 ---p 00031000 103:03 630537695 /usr/lib64/libk5crypto.so.3.1
2b7573ca8000-2b7573caa000 r--p 00030000 103:03 630537695 /usr/lib64/libk5crypto.so.3.1
2b7573caa000-2b7573cab000 rw-p 00032000 103:03 630537695 /usr/lib64/libk5crypto.so.3.1
2b7573cab000-2b7573cae000 r-xp 00000000 103:03 630536419 /usr/lib64/libcom_err.so.2.1
2b7573cae000-2b7573ead000 ---p 00003000 103:03 630536419 /usr/lib64/libcom_err.so.2.1
2b7573ead000-2b7573eae000 r--p 00002000 103:03 630536419 /usr/lib64/libcom_err.so.2.1
2b7573eae000-2b7573eaf000 rw-p 00003000 103:03 630536419 /usr/lib64/libcom_err.so.2.1
2b7573eaf000-2b7574073000 r-xp 00000000 103:03 538476133 /usr/lib64/libc-2.17.so
2b7574073000-2b7574272000 ---p 001c4000 103:03 538476133 /usr/lib64/libc-2.17.so
2b7574272000-2b7574276000 r--p 001c3000 103:03 538476133 /usr/lib64/libc-2.17.so
2b7574276000-2b7574278000 rw-p 001c7000 103:03 538476133 /usr/lib64/libc-2.17.so
2b7574278000-2b757427d000 rw-p 00000000 00:00 0
2b757427d000-2b757427f000 r-xp 00000000 103:03 630536510 /usr/lib64/libfreebl3.so
2b757427f000-2b757447e000 ---p 00002000 103:03 630536510 /usr/lib64/libfreebl3.so
2b757447e000-2b757447f000 r--p 00001000 103:03 630536510 /usr/lib64/libfreebl3.so
2b757447f000-2b7574480000 rw-p 00002000 103:03 630536510 /usr/lib64/libfreebl3.so
2b7574480000-2b7574497000 r-xp 00000000 103:03 538503180 /usr/lib64/libpthread-2.17.so
2b7574497000-2b7574696000 ---p 00017000 103:03 538503180 /usr/lib64/libpthread-2.17.so
2b7574696000-2b7574697000 r--p 00016000 103:03 538503180 /usr/lib64/libpthread-2.17.so
2b7574697000-2b7574698000 rw-p 00017000 103:03 538503180 /usr/lib64/libpthread-2.17.so
2b7574698000-2b757469c000 rw-p 00000000 00:00 0
2b757469c000-2b75746b1000 r-xp 00000000 103:03 630536521 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b75746b1000-2b75748b0000 ---p 00015000 103:03 630536521 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b75748b0000-2b75748b1000 r--p 00014000 103:03 630536521 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b75748b1000-2b75748b2000 rw-p 00015000 103:03 630536521 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b75748b2000-2b75748c0000 r-xp 00000000 103:03 630537698 /usr/lib64/libkrb5support.so.0.1
2b75748c0000-2b7574ac0000 ---p 0000e000 103:03 630537698 /usr/lib64/libkrb5support.so.0.1
2b7574ac0000-2b7574ac1000 r--p 0000e000 103:03 630537698 /usr/lib64/libkrb5support.so.0.1
2b7574ac1000-2b7574ac2000 rw-p 0000f000 103:03 630537698 /usr/lib64/libkrb5support.so.0.1
2b7574ac2000-2b7574ac5000 r-xp 00000000 103:03 630536584 /usr/lib64/libkeyutils.so.1.5
2b7574ac5000-2b7574cc4000 ---p 00003000 103:03 630536584 /usr/lib64/libkeyutils.so.1.5
2b7574cc4000-2b7574cc5000 r--p 00002000 103:03 630536584 /usr/lib64/libkeyutils.so.1.5
2b7574cc5000-2b7574cc6000 rw-p 00003000 103:03 630536584 /usr/lib64/libkeyutils.so.1.5
2b7574cc6000-2b7574cea000 r-xp 00000000 103:03 630536746 /usr/lib64/libselinux.so.1
2b7574cea000-2b7574ee9000 ---p 00024000 103:03 630536746 /usr/lib64/libselinux.so.1
2b7574ee9000-2b7574eea000 r--p 00023000 103:03 630536746 /usr/lib64/libselinux.so.1
2b7574eea000-2b7574eeb000 rw-p 00024000 103:03 630536746 /usr/lib64/libselinux.so.1
2b7574eeb000-2b7574eed000 rw-p 00000000 00:00 0
2b7574eed000-2b7574f4d000 r-xp 00000000 103:03 630536701 /usr/lib64/libpcre.so.1.2.0
2b7574f4d000-2b757514d000 ---p 00060000 103:03 630536701 /usr/lib64/libpcre.so.1.2.0
2b757514d000-2b757514e000 r--p 00060000 103:03 630536701 /usr/lib64/libpcre.so.1.2.0
2b757514e000-2b757514f000 rw-p 00061000 103:03 630536701 /usr/lib64/libpcre.so.1.2.0
2b7575200000-2b7575400000 rw-p 00000000 00:00 0
2b7575400000-2b7575407000 r-xp 00000000 103:03 41807397 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
2b7575407000-2b7575606000 ---p 00007000 103:03 41807397 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
2b7575606000-2b7575607000 r--p 00006000 103:03 41807397 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
2b7575607000-2b7575608000 rw-p 00007000 103:03 41807397 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/bcmath.so
2b7575608000-2b757560e000 r-xp 00000000 103:03 80633330 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
2b757560e000-2b757580e000 ---p 00006000 103:03 80633330 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
2b757580e000-2b757580f000 r--p 00006000 103:03 80633330 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
2b757580f000-2b7575810000 rw-p 00007000 103:03 80633330 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/calendar.so
2b7575810000-2b7575812000 r-xp 00000000 103:03 80633458 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
2b7575812000-2b7575a12000 ---p 00002000 103:03 80633458 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
2b7575a12000-2b7575a13000 r--p 00002000 103:03 80633458 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
2b7575a13000-2b7575a14000 rw-p 00003000 103:03 80633458 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ctype.so
2b7575a14000-2b7575a2a000 r-xp 00000000 103:03 41807396 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
2b7575a2a000-2b7575c29000 ---p 00016000 103:03 41807396 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
2b7575c29000-2b7575c2b000 r--p 00015000 103:03 41807396 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
2b7575c2b000-2b7575c2c000 rw-p 00017000 103:03 41807396 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/curl.so
2b7575c2c000-2b7575cc6000 r-xp 00000000 103:03 629106820 /opt/cpanel/libcurl/lib64/libcurl.so.4.8.0
2b7575cc6000-2b7575ec5000 ---p 0009a000 103:03 629106820 /opt/cpanel/libcurl/lib64/libcurl.so.4.8.0
2b7575ec5000-2b7575ec8000 r--p 00099000 103:03 629106820 /opt/cpanel/libcurl/lib64/libcurl.so.4.8.0
2b7575ec8000-2b7575ecb000 rw-p 0009c000 103:03 629106820 /opt/cpanel/libcurl/lib64/libcurl.so.4.8.0
2b7575ecb000-2b7575ecc000 rw-p 00000000 00:00 0
2b7575ecc000-2b7575ef5000 r-xp 00000000 103:03 80631848 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.23.0
2b7575ef5000-2b75760f4000 ---p 00029000 103:03 80631848 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.23.0
2b75760f4000-2b75760f7000 r--p 00028000 103:03 80631848 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.23.0
2b75760f7000-2b75760f8000 rw-p 0002b000 103:03 80631848 /opt/cpanel/nghttp2/lib/libnghttp2.so.14.23.0
2b75760f8000-2b7576123000 r-xp 00000000 103:03 630536761 /usr/lib64/libssh2.so.1.0.1
2b7576123000-2b7576323000 ---p 0002b000 103:03 630536761 /usr/lib64/libssh2.so.1.0.1
2b7576323000-2b7576324000 r--p 0002b000 103:03 630536761 /usr/lib64/libssh2.so.1.0.1
2b7576324000-2b7576325000 rw-p 0002c000 103:03 630536761 /usr/lib64/libssh2.so.1.0.1
2b7576325000-2b7576344000 r-xp 00000000 103:03 80624049 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
2b7576344000-2b7576543000 ---p 0001f000 103:03 80624049 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
2b7576543000-2b7576544000 r--p 0001e000 103:03 80624049 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
2b7576544000-2b7576545000 rw-p 0001f000 103:03 80624049 /opt/cpanel/ea-brotli/lib/libbrotlidec.so.1.0.9
2b7576545000-2b75765ac000 r-xp 00000000 103:03 629378505 /usr/lib64/libssl.so.1.0.2k
2b75765ac000-2b75767ac000 ---p 00067000 103:03 629378505 /usr/lib64/libssl.so.1.0.2k
2b75767ac000-2b75767b0000 r--p 00067000 103:03 629378505 /usr/lib64/libssl.so.1.0.2k
2b75767b0000-2b75767b7000 rw-p 0006b000 103:03 629378505 /usr/lib64/libssl.so.1.0.2k
2b75767b7000-2b75769ee000 r-xp 00000000 103:03 629304777 /usr/lib64/libcrypto.so.1.0.2k
2b75769ee000-2b7576bed000 ---p 00237000 103:03 629304777 /usr/lib64/libcrypto.so.1.0.2k
2b7576bed000-2b7576c09000 r--p 00236000 103:03 629304777 /usr/lib64/libcrypto.so.1.0.2k
2b7576c09000-2b7576c16000 rw-p 00252000 103:03 629304777 /usr/lib64/libcrypto.so.1.0.2k
2b7576c16000-2b7576c1a000 rw-p 00000000 00:00 0
2b7576c1a000-2b7576c3a000 r-xp 00000000 103:03 80624047 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
2b7576c3a000-2b7576e39000 ---p 00020000 103:03 80624047 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
2b7576e39000-2b7576e3a000 r--p 0001f000 103:03 80624047 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
2b7576e3a000-2b7576e3b000 rw-p 00020000 103:03 80624047 /opt/cpanel/ea-brotli/lib/libbrotlicommon.so.1.0.9
2b7576e3b000-2b7576e5e000 r-xp 00000000 103:03 12704472 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
2b7576e5e000-2b757705e000 ---p 00023000 103:03 12704472 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
2b757705e000-2b7577062000 r--p 00023000 103:03 12704472 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
2b7577062000-2b7577063000 rw-p 00027000 103:03 12704472 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/dom.so
2b7577063000-2b7577064000 rw-p 00000000 00:00 0
2b7577064000-2b7577070000 r-xp 00000000 103:03 33187671 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
2b7577070000-2b7577270000 ---p 0000c000 103:03 33187671 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
2b7577270000-2b7577272000 r--p 0000c000 103:03 33187671 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
2b7577272000-2b7577273000 rw-p 0000e000 103:03 33187671 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/ftp.so
2b7577273000-2b75772cb000 r-xp 00000000 103:03 41807395 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
2b75772cb000-2b75774ca000 ---p 00058000 103:03 41807395 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
2b75774ca000-2b75774cf000 r--p 00057000 103:03 41807395 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
2b75774cf000-2b75774d0000 rw-p 0005c000 103:03 41807395 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/gd.so
2b75774d0000-2b75774d4000 rw-p 00000000 00:00 0
2b75774d4000-2b757760c000 r-xp 00000000 103:03 630536359 /usr/lib64/libX11.so.6.3.0
2b757760c000-2b757780c000 ---p 00138000 103:03 630536359 /usr/lib64/libX11.so.6.3.0
2b757780c000-2b757780d000 r--p 00138000 103:03 630536359 /usr/lib64/libX11.so.6.3.0
2b757780d000-2b7577812000 rw-p 00139000 103:03 630536359 /usr/lib64/libX11.so.6.3.0
2b7577812000-2b7577823000 r-xp 00000000 103:03 630536370 /usr/lib64/libXpm.so.4.11.0
2b7577823000-2b7577a22000 ---p 00011000 103:03 630536370 /usr/lib64/libXpm.so.4.11.0
2b7577a22000-2b7577a23000 r--p 00010000 103:03 630536370 /usr/lib64/libXpm.so.4.11.0
2b7577a23000-2b7577a24000 rw-p 00011000 103:03 630536370 /usr/lib64/libXpm.so.4.11.0
2b7577a24000-2b7577a4d000 r-xp 00000000 103:03 630536713 /usr/lib64/libpng15.so.15.13.0
2b7577a4d000-2b7577c4d000 ---p 00029000 103:03 630536713 /usr/lib64/libpng15.so.15.13.0
2b7577c4d000-2b7577c4e000 r--p 00029000 103:03 630536713 /usr/lib64/libpng15.so.15.13.0
2b7577c4e000-2b7577c4f000 rw-p 0002a000 103:03 630536713 /usr/lib64/libpng15.so.15.13.0
2b7577c4f000-2b7577c92000 r-xp 00000000 103:03 630536577 /usr/lib64/libjpeg.so.62.1.0
2b7577c92000-2b7577e92000 ---p 00043000 103:03 630536577 /usr/lib64/libjpeg.so.62.1.0
2b7577e92000-2b7577e93000 r--p 00043000 103:03 630536577 /usr/lib64/libjpeg.so.62.1.0
2b7577e93000-2b7577e94000 rw-p 00044000 103:03 630536577 /usr/lib64/libjpeg.so.62.1.0
2b7577e94000-2b7577ea4000 rw-p 00000000 00:00 0
2b7577ea4000-2b7577ef0000 r-xp 00000000 103:03 630536803 /usr/lib64/libwebp.so.4.0.2
2b7577ef0000-2b75780ef000 ---p 0004c000 103:03 630536803 /usr/lib64/libwebp.so.4.0.2
2b75780ef000-2b75780f0000 r--p 0004b000 103:03 630536803 /usr/lib64/libwebp.so.4.0.2
2b75780f0000-2b75780f1000 rw-p 0004c000 103:03 630536803 /usr/lib64/libwebp.so.4.0.2
2b75780f1000-2b75780f4000 rw-p 00000000 00:00 0
2b75780f4000-2b75781ab000 r-xp 00000000 103:03 630536514 /usr/lib64/libfreetype.so.6.14.0
2b75781ab000-2b75783ab000 ---p 000b7000 103:03 630536514 /usr/lib64/libfreetype.so.6.14.0
2b75783ab000-2b75783b2000 r--p 000b7000 103:03 630536514 /usr/lib64/libfreetype.so.6.14.0
2b75783b2000-2b75783b3000 rw-p 000be000 103:03 630536514 /usr/lib64/libfreetype.so.6.14.0
2b75783b3000-2b75783da000 r-xp 00000000 103:03 630536833 /usr/lib64/libxcb.so.1.1.0
2b75783da000-2b75785d9000 ---p 00027000 103:03 630536833 /usr/lib64/libxcb.so.1.1.0
2b75785d9000-2b75785da000 r--p 00026000 103:03 630536833 /usr/lib64/libxcb.so.1.1.0
2b75785da000-2b75785db000 rw-p 00027000 103:03 630536833 /usr/lib64/libxcb.so.1.1.0
2b75785db000-2b75785ea000 r-xp 00000000 103:03 630536405 /usr/lib64/libbz2.so.1.0.6
2b75785ea000-2b75787e9000 ---p 0000f000 103:03 630536405 /usr/lib64/libbz2.so.1.0.6
2b75787e9000-2b75787ea000 r--p 0000e000 103:03 630536405 /usr/lib64/libbz2.so.1.0.6
2b75787ea000-2b75787eb000 rw-p 0000f000 103:03 630536405 /usr/lib64/libbz2.so.1.0.6
2b75787eb000-2b75787ed000 r-xp 00000000 103:03 630536360 /usr/lib64/libXau.so.6.0.0
2b75787ed000-2b75789ed000 ---p 00002000 103:03 630536360 /usr/lib64/libXau.so.6.0.0
2b75789ed000-2b75789ee000 r--p 00002000 103:03 630536360 /usr/lib64/libXau.so.6.0.0
2b75789ee000-2b75789ef000 rw-p 00003000 103:03 630536360 /usr/lib64/libXau.so.6.0.0
2b75789ef000-2b7578a03000 r-xp 00000000 103:03 80633188 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
2b7578a03000-2b7578c02000 ---p 00014000 103:03 80633188 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
2b7578c02000-2b7578c05000 r--p 00013000 103:03 80633188 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
2b7578c05000-2b7578c06000 rw-p 00016000 103:03 80633188 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/imap.so
2b7578c06000-2b7578d0e000 r-xp 00000000 103:03 639904657 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
2b7578d0e000-2b7578f0e000 ---p 00108000 103:03 639904657 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
2b7578f0e000-2b7578f10000 r--p 00108000 103:03 639904657 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
2b7578f10000-2b7578f19000 rw-p 0010a000 103:03 639904657 /opt/cpanel/ea-php73/root/usr/lib64/libc-client.so.2007
2b7578f19000-2b7578f1a000 rw-p 00000000 00:00 0
2b7578f1a000-2b7578f27000 r-xp 00000000 103:03 630536684 /usr/lib64/libpam.so.0.83.1
2b7578f27000-2b7579127000 ---p 0000d000 103:03 630536684 /usr/lib64/libpam.so.0.83.1
2b7579127000-2b7579128000 r--p 0000d000 103:03 630536684 /usr/lib64/libpam.so.0.83.1
2b7579128000-2b7579129000 rw-p 0000e000 103:03 630536684 /usr/lib64/libpam.so.0.83.1
2b7579129000-2b7579147000 r-xp 00000000 103:03 630536389 /usr/lib64/libaudit.so.1.0.0
2b7579147000-2b7579346000 ---p 0001e000 103:03 630536389 /usr/lib64/libaudit.so.1.0.0
2b7579346000-2b7579347000 r--p 0001d000 103:03 630536389 /usr/lib64/libaudit.so.1.0.0
2b7579347000-2b7579348000 rw-p 0001e000 103:03 630536389 /usr/lib64/libaudit.so.1.0.0
2b7579348000-2b7579352000 rw-p 00000000 00:00 0
2b7579352000-2b7579356000 r-xp 00000000 103:03 630536414 /usr/lib64/libcap-ng.so.0.0.0
2b7579356000-2b7579556000 ---p 00004000 103:03 630536414 /usr/lib64/libcap-ng.so.0.0.0
2b7579556000-2b7579557000 r--p 00004000 103:03 630536414 /usr/lib64/libcap-ng.so.0.0.0
2b7579557000-2b7579558000 rw-p 00005000 103:03 630536414 /usr/lib64/libcap-ng.so.0.0.0
2b7579558000-2b7579561000 r-xp 00000000 103:03 80633319 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
2b7579561000-2b7579761000 ---p 00009000 103:03 80633319 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
2b7579761000-2b7579762000 r--p 00009000 103:03 80633319 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
2b7579762000-2b7579763000 rw-p 0000a000 103:03 80633319 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/json.so
2b7579763000-2b757979b000 r-xp 00000000 103:03 12832718 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
2b757979b000-2b757999a000 ---p 00038000 103:03 12832718 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
2b757999a000-2b757999f000 r--p 00037000 103:03 12832718 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
2b757999f000-2b75799a1000 rw-p 0003c000 103:03 12832718 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqlnd.so
2b75799a1000-2b75799a2000 rw-p 00000000 00:00 0
2b75799a2000-2b75799ba000 r-xp 00000000 103:03 80631890 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
2b75799ba000-2b7579bb9000 ---p 00018000 103:03 80631890 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
2b7579bb9000-2b7579bbc000 r--p 00017000 103:03 80631890 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
2b7579bbc000-2b7579bbd000 rw-p 0001a000 103:03 80631890 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo.so
2b7579bbd000-2b7579bfc000 r-xp 00000000 103:03 80633189 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
2b7579bfc000-2b7579dfc000 ---p 0003f000 103:03 80633189 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
2b7579dfc000-2b7579dfd000 r--p 0003f000 103:03 80633189 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
2b7579dfd000-2b7579dfe000 rw-p 00040000 103:03 80633189 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
2b7579dfe000-2b7579dff000 r--p 00041000 103:03 80633189 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
2b7579dff000-2b7579e00000 rw-p 00042000 103:03 80633189 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/phar.so
2b7579e00000-2b7579e07000 r-xp 00000000 103:03 12704505 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
2b7579e07000-2b757a007000 ---p 00007000 103:03 12704505 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
2b757a007000-2b757a008000 r--p 00007000 103:03 12704505 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
2b757a008000-2b757a009000 rw-p 00008000 103:03 12704505 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/posix.so
2b757a009000-2b757a014000 r-xp 00000000 103:03 33187663 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
2b757a014000-2b757a214000 ---p 0000b000 103:03 33187663 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
2b757a214000-2b757a215000 r--p 0000b000 103:03 33187663 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
2b757a215000-2b757a216000 rw-p 0000c000 103:03 33187663 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/simplexml.so
2b757a216000-2b757a229000 r-xp 00000000 103:03 80633107 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
2b757a229000-2b757a429000 ---p 00013000 103:03 80633107 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
2b757a429000-2b757a42b000 r--p 00013000 103:03 80633107 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
2b757a42b000-2b757a42c000 rw-p 00015000 103:03 80633107 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sockets.so
2b757a42c000-2b757a437000 r-xp 00000000 103:03 33207443 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
2b757a437000-2b757a637000 ---p 0000b000 103:03 33207443 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
2b757a637000-2b757a638000 r--p 0000b000 103:03 33207443 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
2b757a638000-2b757a639000 rw-p 0000c000 103:03 33207443 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/sqlite3.so
2b757a639000-2b757a6ea000 r-xp 00000000 103:03 630536758 /usr/lib64/libsqlite3.so.0.8.6
2b757a6ea000-2b757a8e9000 ---p 000b1000 103:03 630536758 /usr/lib64/libsqlite3.so.0.8.6
2b757a8e9000-2b757a8eb000 r--p 000b0000 103:03 630536758 /usr/lib64/libsqlite3.so.0.8.6
2b757a8eb000-2b757a8ee000 rw-p 000b2000 103:03 630536758 /usr/lib64/libsqlite3.so.0.8.6
2b757a8ee000-2b757a8f2000 r-xp 00000000 103:03 80633190 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
2b757a8f2000-2b757aaf1000 ---p 00004000 103:03 80633190 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
2b757aaf1000-2b757aaf2000 r--p 00003000 103:03 80633190 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
2b757aaf2000-2b757aaf3000 rw-p 00004000 103:03 80633190 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/tokenizer.so
2b757aaf3000-2b757aafe000 r-xp 00000000 103:03 80632730 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
2b757aafe000-2b757acfd000 ---p 0000b000 103:03 80632730 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
2b757acfd000-2b757acff000 r--p 0000a000 103:03 80632730 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
2b757acff000-2b757ad00000 rw-p 0000c000 103:03 80632730 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xml.so
2b757ad00000-2b757ad08000 r-xp 00000000 103:03 80632294 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
2b757ad08000-2b757af08000 ---p 00008000 103:03 80632294 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
2b757af08000-2b757af0b000 r--p 00008000 103:03 80632294 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
2b757af0b000-2b757af0c000 rw-p 0000b000 103:03 80632294 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlwriter.so
2b757af0c000-2b757af12000 r-xp 00000000 103:03 80632232 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
2b757af12000-2b757b112000 ---p 00006000 103:03 80632232 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
2b757b112000-2b757b113000 r--p 00006000 103:03 80632232 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
2b757b113000-2b757b114000 rw-p 00007000 103:03 80632232 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xsl.so
2b757b114000-2b757b128000 r-xp 00000000 103:03 630536500 /usr/lib64/libexslt.so.0.8.17
2b757b128000-2b757b327000 ---p 00014000 103:03 630536500 /usr/lib64/libexslt.so.0.8.17
2b757b327000-2b757b328000 r--p 00013000 103:03 630536500 /usr/lib64/libexslt.so.0.8.17
2b757b328000-2b757b329000 rw-p 00014000 103:03 630536500 /usr/lib64/libexslt.so.0.8.17
2b757b329000-2b757b365000 r-xp 00000000 103:03 630536842 /usr/lib64/libxslt.so.1.1.28
2b757b365000-2b757b565000 ---p 0003c000 103:03 630536842 /usr/lib64/libxslt.so.1.1.28
2b757b565000-2b757b566000 r--p 0003c000 103:03 630536842 /usr/lib64/libxslt.so.1.1.28
2b757b566000-2b757b567000 rw-p 0003d000 103:03 630536842 /usr/lib64/libxslt.so.1.1.28
2b757b567000-2b757b568000 rw-p 00000000 00:00 0
2b757b568000-2b757b5e5000 r-xp 00000000 103:03 630536522 /usr/lib64/libgcrypt.so.11.8.2
2b757b5e5000-2b757b7e4000 ---p 0007d000 103:03 630536522 /usr/lib64/libgcrypt.so.11.8.2
2b757b7e4000-2b757b7e5000 r--p 0007c000 103:03 630536522 /usr/lib64/libgcrypt.so.11.8.2
2b757b7e5000-2b757b7e8000 rw-p 0007d000 103:03 630536522 /usr/lib64/libgcrypt.so.11.8.2
2b757b7e8000-2b757b7e9000 rw-p 00000000 00:00 0
2b757b7e9000-2b757b7ed000 r-xp 00000000 103:03 630536541 /usr/lib64/libgpg-error.so.0.10.0
2b757b7ed000-2b757b9ec000 ---p 00004000 103:03 630536541 /usr/lib64/libgpg-error.so.0.10.0
2b757b9ec000-2b757b9ed000 r--p 00003000 103:03 630536541 /usr/lib64/libgpg-error.so.0.10.0
2b757b9ed000-2b757b9ee000 rw-p 00004000 103:03 630536541 /usr/lib64/libgpg-error.so.0.10.0
2b757b9ee000-2b757ba0a000 r-xp 00000000 103:03 12832717 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
2b757ba0a000-2b757bc0a000 ---p 0001c000 103:03 12832717 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
2b757bc0a000-2b757bc0e000 r--p 0001c000 103:03 12832717 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
2b757bc0e000-2b757bc0f000 rw-p 00020000 103:03 12832717 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/mysqli.so
2b757bc0f000-2b757bc15000 r-xp 00000000 103:03 12832719 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
2b757bc15000-2b757be15000 ---p 00006000 103:03 12832719 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
2b757be15000-2b757be16000 r--p 00006000 103:03 12832719 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
2b757be16000-2b757be17000 rw-p 00007000 103:03 12832719 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_mysql.so
2b757be17000-2b757be1d000 r-xp 00000000 103:03 80631891 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
2b757be1d000-2b757c01c000 ---p 00006000 103:03 80631891 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
2b757c01c000-2b757c01d000 r--p 00005000 103:03 80631891 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
2b757c01d000-2b757c01e000 rw-p 00006000 103:03 80631891 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/pdo_sqlite.so
2b757c01e000-2b757c025000 r-xp 00000000 103:03 80632729 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
2b757c025000-2b757c224000 ---p 00007000 103:03 80632729 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
2b757c224000-2b757c225000 r--p 00006000 103:03 80632729 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
2b757c225000-2b757c226000 rw-p 00007000 103:03 80632729 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/wddx.so
2b757c226000-2b757c22d000 r-xp 00000000 103:03 80632291 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
2b757c22d000-2b757c42c000 ---p 00007000 103:03 80632291 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
2b757c42c000-2b757c42d000 r--p 00006000 103:03 80632291 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
2b757c42d000-2b757c42e000 rw-p 00007000 103:03 80632291 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/xmlreader.so
2b757c42e000-2b757c4ec000 r-xp 00000000 103:03 65407128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/i360.so (deleted)
2b757c4ec000-2b757c6eb000 ---p 000be000 103:03 65407128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/i360.so (deleted)
2b757c6eb000-2b757c6f4000 r--p 000bd000 103:03 65407128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/i360.so (deleted)
2b757c6f4000-2b757c6f8000 rw-p 000c6000 103:03 65407128 /opt/cpanel/ea-php73/root/usr/lib64/php/modules/i360.so (deleted)
2b757c6f8000-2b757c7a3000 rw-p 00000000 00:00 0
2b757c7a3000-2b757c7ab000 r-xp 00000000 103:03 537383529 /usr/lib64/libprotobuf-c.so.1.0.0
2b757c7ab000-2b757c9aa000 ---p 00008000 103:03 537383529 /usr/lib64/libprotobuf-c.so.1.0.0
2b757c9aa000-2b757c9ab000 r--p 00007000 103:03 537383529 /usr/lib64/libprotobuf-c.so.1.0.0
2b757c9ab000-2b757c9ac000 rw-p 00008000 103:03 537383529 /usr/lib64/libprotobuf-c.so.1.0.0
2b757c9ac000-2b757c9cb000 r-xp 00000000 103:03 630536845 /usr/lib64/libyaml-0.so.2.0.4
2b757c9cb000-2b757cbca000 ---p 0001f000 103:03 630536845 /usr/lib64/libyaml-0.so.2.0.4
2b757cbca000-2b757cbcb000 r--p 0001e000 103:03 630536845 /usr/lib64/libyaml-0.so.2.0.4
2b757cbcb000-2b757cbcc000 rw-p 0001f000 103:03 630536845 /usr/lib64/libyaml-0.so.2.0.4
2b757cbcc000-2b757cbd2000 r-xp 00000000 103:03 618319003 /usr/lib64/libatomic.so.1.0.0
2b757cbd2000-2b757cdd1000 ---p 00006000 103:03 618319003 /usr/lib64/libatomic.so.1.0.0
2b757cdd1000-2b757cdd2000 r--p 00005000 103:03 618319003 /usr/lib64/libatomic.so.1.0.0
2b757cdd2000-2b757cdd3000 rw-p 00006000 103:03 618319003 /usr/lib64/libatomic.so.1.0.0
2b757cdd3000-2b757cdd4000 rw-p 00000000 00:00 0
2b757cdd4000-2b757d167000 r-xp 00000000 103:03 349088612 /opt/alt/hyperscan54/lib64/libhs_runtime.so.5.4.0
2b757d167000-2b757d366000 ---p 00393000 103:03 349088612 /opt/alt/hyperscan54/lib64/libhs_runtime.so.5.4.0
2b757d366000-2b757d367000 r--p 00392000 103:03 349088612 /opt/alt/hyperscan54/lib64/libhs_runtime.so.5.4.0
2b757d367000-2b757d368000 rw-p 00393000 103:03 349088612 /opt/alt/hyperscan54/lib64/libhs_runtime.so.5.4.0
2b757d368000-2b757d520000 r--s 00000000 103:03 85188644 /var/db/nscd/hosts
2b757d520000-2b757d752000 r--p 00000000 103:03 32616224 /usr/share/i360-php-opts/sigs/7.1/.rules.v2
2b757d752000-2b757d753000 ---p 00000000 00:00 0
2b757d753000-2b757d953000 rw-p 00000000 00:00 0
2b7580000000-2b7580021000 rw-p 00000000 00:00 0
2b7580021000-2b7584000000 ---p 00000000 00:00 0
7ffe9f773000-7ffe9f794000 rw-p 00000000 00:00 0 [stack]
7ffe9f7a4000-7ffe9f7a6000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

Re: lfd on server.xxxxxxxxx.com: Suspicious process running under user xxxxxxx

Posted: 31 Jan 2023, 13:42
by Sergio
Yes, add:

Code: Select all

exe:/opt/cpanel/ea-php73/root/usr/bin/php-cgi
to csf.pignore

Sergio