Skip to main content

Another Process Tracking Thread

nagyosha
have i been hacked or is this normal ? Time: Thu Mar 20 02:21:07 2014 +0700 PID: 1775 (Parent PID:1333) Account: webdesig Uptime: 82533 seconds Executable: /usr/local/cpanel/3rdparty/perl/514/bin/perl Command Line (often faked in exploits): spamd child Network connections by the process (if any): tcp: 127.0.0.1:783 -> 0.0.0.0:0 tcp: 127.0.0.1:783 -> 127.0.0.1:45073 Files open by the process (if any): /dev/null /dev/null /dev/null /usr/local/cpanel/3rdparty/perl/514/bin/spamd Memory maps by the process (if any): 00400000-00402000 r-xp 00000000 08:01 269067 /usr/local/cpanel/3rdparty/perl/514/bin/perl 00601000-00602000 rw-p 00001000 08:01 269067 /usr/local/cpanel/3rdparty/perl/514/bin/perl 01f73000-0303c000 rw-p 00000000 00:00 0 0303c000-04cfe000 rw-p 00000000 00:00 0 04cfe000-05710000 rw-p 00000000 00:00 0 7f8dc72bd000-7f8dc72c2000 r-xp 00000000 08:01 20924 /lib64/libnss_dns-2.12.so 7f8dc72c2000-7f8dc74c1000 ---p 00005000 08:01 20924 /lib64/libnss_dns-2.12.so 7f8dc74c1000-7f8dc74c2000 r--p 00004000 08:01 20924 /lib64/libnss_dns-2.12.so 7f8dc74c2000-7f8dc74c3000 rw-p 00005000 08:01 20924 /lib64/libnss_dns-2.12.so 7f8dc74c3000-7f8dc74e0000 r-xp 00000000 08:01 20944 /lib64/libselinux.so.1 7f8dc74e0000-7f8dc76df000 ---p 0001d000 08:01 20944 /lib64/libselinux.so.1 7f8dc76df000-7f8dc76e0000 r--p 0001c000 08:01 20944 /lib64/libselinux.so.1 7f8dc76e0000-7f8dc76e1000 rw-p 0001d000 08:01 20944 /lib64/libselinux.so.1 7f8dc76e1000-7f8dc76e2000 rw-p 00000000 00:00 0 7f8dc76e2000-7f8dc76f8000 r-xp 00000000 08:01 20942 /lib64/libresolv-2.12.so 7f8dc76f8000-7f8dc78f8000 ---p 00016000 08:01 20942 /lib64/libresolv-2.12.so 7f8dc78f8000-7f8dc78f9000 r--p 00016000 08:01 20942 /lib64/libresolv-2.12.so 7f8dc78f9000-7f8dc78fa000 rw-p 00017000 08:01 20942 /lib64/libresolv-2.12.so 7f8dc78fa000-7f8dc78fc000 rw-p 00000000 00:00 0 7f8dc78fc000-7f8dc78fe000 r-xp 00000000 08:01 20907 /lib64/libkeyutils.so.1.3 7f8dc78fe000-7f8dc7afd000 ---p 00002000 08:01 20907 /lib64/libkeyutils.so.1.3 7f8dc7afd000-7f8dc7afe000 r--p 00001000 08:01 20907 /lib64/libkeyutils.so.1.3 7f8dc7afe000-7f8dc7aff000 rw-p 00002000 08:01 20907 /lib64/libkeyutils.so.1.3 7f8dc7aff000-7f8dc7b09000 r-xp 00000000 08:01 20909 /lib64/libkrb5support.so.0.1 7f8dc7b09000-7f8dc7d08000 ---p 0000a000 08:01 20909 /lib64/libkrb5support.so.0.1 7f8dc7d08000-7f8dc7d09000 r--p 00009000 08:01 20909 /lib64/libkrb5support.so.0.1 7f8dc7d09000-7f8dc7d0a000 rw-p 0000a000 08:01 20909 /lib64/libkrb5support.so.0.1 7f8dc7d0a000-7f8dc7d33000 r-xp 00000000 08:01 20906 /lib64/libk5crypto.so.3.1 7f8dc7d33000-7f8dc7f33000 ---p 00029000 08:01 20906 /lib64/libk5crypto.so.3.1 7f8dc7f33000-7f8dc7f34000 r--p 00029000 08:01 20906 /lib64/libk5crypto.so.3.1 7f8dc7f34000-7f8dc7f35000 rw-p 0002a000 08:01 20906 /lib64/libk5crypto.so.3.1 7f8dc7f35000-7f8dc7f36000 rw-p 00000000 00:00 0 7f8dc7f36000-7f8dc7f39000 r-xp 00000000 08:01 20879 /lib64/libcom_err.so.2.1 7f8dc7f39000-7f8dc8138000 ---p 00003000 08:01 20879 /lib64/libcom_err.so.2.1 7f8dc8138000-7f8dc8139000 r--p 00002000 08:01 20879 /lib64/libcom_err.so.2.1 7f8dc8139000-7f8dc813a000 rw-p 00003000 08:01 20879 /lib64/libcom_err.so.2.1 7f8dc813a000-7f8dc8215000 r-xp 00000000 08:01 20908 /lib64/libkrb5.so.3.3 7f8dc8215000-7f8dc8414000 ---p 000db000 08:01 20908 /lib64/libkrb5.so.3.3 7f8dc8414000-7f8dc841e000 r--p 000da000 08:01 20908 /lib64/libkrb5.so.3.3 7f8dc841e000-7f8dc8420000 rw-p 000e4000 08:01 20908 /lib64/libkrb5.so.3.3 7f8dc8420000-7f8dc8461000 r-xp 00000000 08:01 20897 /lib64/libgssapi_krb5.so.2.2 7f8dc8461000-7f8dc8661000 ---p 00041000 08:01 20897 /lib64/libgssapi_krb5.so.2.2 7f8dc8661000-7f8dc8662000 r--p 00041000 08:01 20897 /lib64/libgssapi_krb5.so.2.2 7f8dc8662000-7f8dc8664000 rw-p 00042000 08:01 20897 /lib64/libgssapi_krb5.so.2.2 7f8dc8664000-7f8dc86c5000 r-xp 00000000 08:01 570 /usr/lib64/libssl.so.1.0.1e 7f8dc86c5000-7f8dc88c4000 ---p 00061000 08:01 570 /usr/lib64/libssl.so.1.0.1e 7f8dc88c4000-7f8dc88c8000 r--p 00060000 08:01 570 /usr/lib64/libssl.so.1.0.1e 7f8dc88c8000-7f8dc88cf000 rw-p 00064000 08:01 570 /usr/lib64/libssl.so.1.0.1e 7f8dc88cf000-7f8dc88d5000 r-xp 00000000 08:01 658432 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so 7f8dc88d5000-7f8dc8ad5000 ---p 00006000 08:01 658432 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so 7f8dc8ad5000-7f8dc8ad6000 rw-p 00006000 08:01 658432 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so 7f8dc8ad6000-7f8dc8aeb000 r-xp 00000000 08:01 20954 /lib64/libz.so.1.2.3 7f8dc8aeb000-7f8dc8cea000 ---p 00015000 08:01 20954 /lib64/libz.so.1.2.3 7f8dc8cea000-7f8dc8ceb000 r--p 00014000 08:01 20954 /lib64/libz.so.1.2.3 7f8dc8ceb000-7f8dc8cec000 rw-p 00015000 08:01 20954 /lib64/libz.so.1.2.3 7f8dc8cec000-7f8dc8ea1000 r-xp 00000000 08:01 564 /usr/lib64/libcrypto.so.1.0.1e 7f8dc8ea1000-7f8dc90a1000 ---p 001b5000 08:01 564 /usr/lib64/libcrypto.so.1.0.1e 7f8dc90a1000-7f8dc90bc000 r--p 001b5000 08:01 564 /usr/lib64/libcrypto.so.1.0.1e 7f8dc90bc000-7f8dc90c8000 rw-p 001d0000 08:01 564 /usr/lib64/libcrypto.so.1.0.1e 7f8dc90c8000-7f8dc90cc000 rw-p 00000000 00:00 0 7f8dc90cc000-7f8dc90d2000 r-xp 00000000 08:01 658358 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so 7f8dc90d2000-7f8dc92d1000 ---p 00006000 08:01 658358 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so 7f8dc92d1000-7f8dc92d2000 rw-p 00005000 08:01 658358 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so 7f8dc92d2000-7f8dc92ff000 r-xp 00000000 08:01 272914 /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so 7f8dc92ff000-7f8dc94fe000 ---p 0002d000 08:01 272914 /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so 7f8dc94fe000-7f8dc94ff000 rw-p 0002c000 08:01 272914 /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so 7f8dc94ff000-7f8dc9502000 r-xp 00000000 08:01 656083 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so 7f8dc9502000-7f8dc9701000 ---p 00003000 08:01 656083 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so 7f8dc9701000-7f8dc9702000 rw-p 00002000 08:01 656083 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so 7f8dc9702000-7f8dc9706000 r-xp 00000000 08:01 787008 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so 7f8dc9706000-7f8dc9905000 ---p 00004000 08:01 787008 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so 7f8dc9905000-7f8dc9906000 rw-p 00003000 08:01 787008 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so 7f8dc9906000-7f8dc990a000 r-xp 00000000 08:01 655598 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so 7f8dc990a000-7f8dc9b09000 ---p 00004000 08:01 655598 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so 7f8dc9b09000-7f8dc9b0a000 rw-p 00003000 08:01 655598 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so 7f8dc9b0a000-7f8dc9c79000 r-xp 00000000 08:01 20881 /lib64/libdb-4.7.so 7f8dc9c79000-7f8dc9e78000 ---p 0016f000 08:01 20881 /lib64/libdb-4.7.so 7f8dc9e78000-7f8dc9e7e000 rw-p 0016e000 08:01 20881 /lib64/libdb-4.7.so 7f8dc9e7e000-7f8dc9e88000 r-xp 00000000 08:01 528376 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/DB_File/DB_File.so 7f8dc9e88000-7f8dca088000 ---p 0000a000 08:01 528376 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/DB_File/DB_File.so 7f8dca088000-7f8dca089000 rw-p 0000a000 08:01 528376 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/DB_File/DB_File.so 7f8dca089000-7f8dca08f000 r-xp 00000000 08:01 269092 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/List/Util/Util.so 7f8dca08f000-7f8dca28e000 ---p 00006000 08:01 269092 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/List/Util/Util.so 7f8dca28e000-7f8dca28f000 rw-p 00005000 08:01 269092 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/List/Util/Util.so 7f8dca28f000-7f8dca29b000 r-xp 00000000 08:01 20925 /lib64/libnss_files-2.12.so 7f8dca29b000-7f8dca49b000 ---p 0000c000 08:01 20925 /lib64/libnss_files-2.12.so 7f8dca49b000-7f8dca49c000 r--p 0000c000 08:01 20925 /lib64/libnss_files-2.12.so 7f8dca49c000-7f8dca49d000 rw-p 0000d000 08:01 20925 /lib64/libnss_files-2.12.so 7f8dca49d000-7f8dca4a0000 r-xp 00000000 08:01 528241 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so 7f8dca4a0000-7f8dca6a0000 ---p 00003000 08:01 528241 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so 7f8dca6a0000-7f8dca6a1000 rw-p 00003000 08:01 528241 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so 7f8dca6a1000-7f8dca6a3000 r-xp 00000000 08:01 269106 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so 7f8dca6a3000-7f8dca8a2000 ---p 00002000 08:01 269106 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so 7f8dca8a2000-7f8dca8a3000 rw-p 00001000 08:01 269106 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so 7f8dca8a3000-7f8dca8aa000 r-xp 00000000 08:01 410752 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Data/Dumper/Dumper.so 7f8dca8aa000-7f8dcaaa9000 ---p 00007000 08:01 410752 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Data/Dumper/Dumper.so 7f8dcaaa9000-7f8dcaaaa000 rw-p 00006000 08:01 410752 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Data/Dumper/Dumper.so 7f8dcaaaa000-7f8dcaab4000 r-xp 00000000 08:01 527976 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA/SHA.so 7f8dcaab4000-7f8dcacb4000 ---p 0000a000 08:01 527976 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA/SHA.so 7f8dcacb4000-7f8dcacb5000 rw-p 0000a000 08:01 527976 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA/SHA.so 7f8dcacb5000-7f8dcace7000 r-xp 00000000 08:01 20900 /lib64/libidn.so.11.6.1 7f8dcace7000-7f8dcaee6000 ---p 00032000 08:01 20900 /lib64/libidn.so.11.6.1 7f8dcaee6000-7f8dcaee7000 rw-p 00031000 08:01 20900 /lib64/libidn.so.11.6.1 7f8dcaee7000-7f8dcaeeb000 r-xp 00000000 08:01 657341 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so 7f8dcaeeb000-7f8dcb0ea000 ---p 00004000 08:01 657341 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so 7f8dcb0ea000-7f8dcb0eb000 rw-p 00003000 08:01 657341 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so 7f8dcb0eb000-7f8dcb0f3000 r-xp 00000000 08:01 527892 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so 7f8dcb0f3000-7f8dcb2f2000 ---p 00008000 08:01 527892 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so 7f8dcb2f2000-7f8dcb2f3000 rw-p 00007000 08:01 527892 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so 7f8dcb2f3000-7f8dcb2f5000 r-xp 00000000 08:01 655921 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/DNS/DNS.so 7f8dcb2f5000-7f8dcb4f4000 ---p 00002000 08:01 655921 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/DNS/DNS.so 7f8dcb4f4000-7f8dcb4f5000 rw-p 00001000 08:01 655921 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/DNS/DNS.so 7f8dcb4f5000-7f8dcb4fe000 r-xp 00000000 08:01 655956 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so 7f8dcb4fe000-7f8dcb6fe000 ---p 00009000 08:01 655956 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so 7f8dcb6fe000-7f8dcb6ff000 rw-p 00009000 08:01 655956 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so 7f8dcb6ff000-7f8dcb703000 r-xp 00000000 08:01 656149 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so 7f8dcb703000-7f8dcb903000 ---p 00004000 08:01 656149 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so 7f8dcb903000-7f8dcb904000 rw-p 00004000 08:01 656149 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so 7f8dcb904000-7f8dcb908000 r-xp 00000000 08:01 527669 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/File/Glob/Glob.so 7f8dcb908000-7f8dcbb07000 ---p 00004000 08:01 527669 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/File/Glob/Glob.so 7f8dcbb07000-7f8dcbb08000 rw-p 00003000 08:01 527669 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/File/Glob/Glob.so 7f8dcbb08000-7f8dcbb0b000 r-xp 00000000 08:01 410742 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/MIME/Base64/Base64.so 7f8dcbb0b000-7f8dcbd0a000 ---p 00003000 08:01 410742 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/MIME/Base64/Base64.so 7f8dcbd0a000-7f8dcbd0b000 rw-p 00002000 08:01 410742 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/MIME/Base64/Base64.so 7f8dcbd0b000-7f8dcbd22000 r-xp 00000000 08:01 20940 /lib64/libpthread-2.12.so 7f8dcbd22000-7f8dcbf22000 ---p 00017000 08:01 20940 /lib64/libpthread-2.12.so 7f8dcbf22000-7f8dcbf23000 r--p 00017000 08:01 20940 /lib64/libpthread-2.12.so 7f8dcbf23000-7f8dcbf24000 rw-p 00018000 08:01 20940 /lib64/libpthread-2.12.so 7f8dcbf24000-7f8dcbf28000 rw-p 00000000 00:00 0 7f8dcbf28000-7f8dcbf2f000 r-xp 00000000 08:01 20943 /lib64/librt-2.12.so 7f8dcbf2f000-7f8dcc12e000 ---p 00007000 08:01 20943 /lib64/librt-2.12.so 7f8dcc12e000-7f8dcc12f000 r--p 00006000 08:01 20943 /lib64/librt-2.12.so 7f8dcc12f000-7f8dcc130000 rw-p 00007000 08:01 20943 /lib64/librt-2.12.so 7f8dcc130000-7f8dcc135000 r-xp 00000000 08:01 410747 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Time/HiRes/HiRes.so 7f8dcc135000-7f8dcc334000 ---p 00005000 08:01 410747 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Time/HiRes/HiRes.so 7f8dcc334000-7f8dcc335000 rw-p 00004000 08:01 410747 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Time/HiRes/HiRes.so 7f8dcc335000-7f8dcc34b000 r-xp 00000000 08:01 527682 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/POSIX/POSIX.so 7f8dcc34b000-7f8dcc54a000 ---p 00016000 08:01 527682 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/POSIX/POSIX.so 7f8dcc54a000-7f8dcc54d000 rw-p 00015000 08:01 527682 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/POSIX/POSIX.so 7f8dcc54d000-7f8dcc550000 r-xp 00000000 08:01 527668 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Fcntl/Fcntl.so 7f8dcc550000-7f8dcc750000 ---p 00003000 08:01 527668 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Fcntl/Fcntl.so 7f8dcc750000-7f8dcc751000 rw-p 00003000 08:01 527668 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Fcntl/Fcntl.so 7f8dcc751000-7f8dcc755000 r-xp 00000000 08:01 657386 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so 7f8dcc755000-7f8dcc954000 ---p 00004000 08:01 657386 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so 7f8dcc954000-7f8dcc955000 rw-p 00003000 08:01 657386 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so 7f8dcc955000-7f8dcc959000 r-xp 00000000 08:01 269124 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/IO/IO.so 7f8dcc959000-7f8dccb58000 ---p 00004000 08:01 269124 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/IO/IO.so 7f8dccb58000-7f8dccb59000 rw-p 00003000 08:01 269124 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/IO/IO.so 7f8dccb59000-7f8dccb5f000 r-xp 00000000 08:01 527855 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Socket/Socket.so 7f8dccb5f000-7f8dccd5f000 ---p 00006000 08:01 527855 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Socket/Socket.so 7f8dccd5f000-7f8dccd61000 rw-p 00006000 08:01 527855 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/Socket/Socket.so 7f8dccd61000-7f8dccda7000 r-xp 00000000 08:01 527867 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/re/re.so 7f8dccda7000-7f8dccfa7000 ---p 00046000 08:01 527867 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/re/re.so 7f8dccfa7000-7f8dccfa8000 rw-p 00046000 08:01 527867 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/auto/re/re.so 7f8dccfa8000-7f8dcd019000 r-xp 00000000 08:01 20889 /lib64/libfreebl3.so 7f8dcd019000-7f8dcd218000 ---p 00071000 08:01 20889 /lib64/libfreebl3.so 7f8dcd218000-7f8dcd21a000 r--p 00070000 08:01 20889 /lib64/libfreebl3.so 7f8dcd21a000-7f8dcd21b000 rw-p 00072000 08:01 20889 /lib64/libfreebl3.so 7f8dcd21b000-7f8dcd21f000 rw-p 00000000 00:00 0 7f8dcd21f000-7f8dcd3aa000 r-xp 00000000 08:01 20875 /lib64/libc-2.12.so 7f8dcd3aa000-7f8dcd5a9000 ---p 0018b000 08:01 20875 /lib64/libc-2.12.so 7f8dcd5a9000-7f8dcd5ad000 r--p 0018a000 08:01 20875 /lib64/libc-2.12.so 7f8dcd5ad000-7f8dcd5ae000 rw-p 0018e000 08:01 20875 /lib64/libc-2.12.so 7f8dcd5ae000-7f8dcd5b3000 rw-p 00000000 00:00 0 7f8dcd5b3000-7f8dcd5b5000 r-xp 00000000 08:01 20950 /lib64/libutil-2.12.so 7f8dcd5b5000-7f8dcd7b4000 ---p 00002000 08:01 20950 /lib64/libutil-2.12.so 7f8dcd7b4000-7f8dcd7b5000 r--p 00001000 08:01 20950 /lib64/libutil-2.12.so 7f8dcd7b5000-7f8dcd7b6000 rw-p 00002000 08:01 20950 /lib64/libutil-2.12.so 7f8dcd7b6000-7f8dcd7bd000 r-xp 00000000 08:01 20880 /lib64/libcrypt-2.12.so 7f8dcd7bd000-7f8dcd9bd000 ---p 00007000 08:01 20880 /lib64/libcrypt-2.12.so 7f8dcd9bd000-7f8dcd9be000 r--p 00007000 08:01 20880 /lib64/libcrypt-2.12.so 7f8dcd9be000-7f8dcd9bf000 rw-p 00008000 08:01 20880 /lib64/libcrypt-2.12.so 7f8dcd9bf000-7f8dcd9ed000 rw-p 00000000 00:00 0 7f8dcd9ed000-7f8dcda70000 r-xp 00000000 08:01 20914 /lib64/libm-2.12.so 7f8dcda70000-7f8dcdc6f000 ---p 00083000 08:01 20914 /lib64/libm-2.12.so 7f8dcdc6f000-7f8dcdc70000 r--p 00082000 08:01 20914 /lib64/libm-2.12.so 7f8dcdc70000-7f8dcdc71000 rw-p 00083000 08:01 20914 /lib64/libm-2.12.so 7f8dcdc71000-7f8dcdc73000 r-xp 00000000 08:01 20883 /lib64/libdl-2.12.so 7f8dcdc73000-7f8dcde73000 ---p 00002000 08:01 20883 /lib64/libdl-2.12.so 7f8dcde73000-7f8dcde74000 r--p 00002000 08:01 20883 /lib64/libdl-2.12.so 7f8dcde74000-7f8dcde75000 rw-p 00003000 08:01 20883 /lib64/libdl-2.12.so 7f8dcde75000-7f8dcde8b000 r-xp 00000000 08:01 20921 /lib64/libnsl-2.12.so 7f8dcde8b000-7f8dce08a000 ---p 00016000 08:01 20921 /lib64/libnsl-2.12.so 7f8dce08a000-7f8dce08b000 r--p 00015000 08:01 20921 /lib64/libnsl-2.12.so 7f8dce08b000-7f8dce08c000 rw-p 00016000 08:01 20921 /lib64/libnsl-2.12.so 7f8dce08c000-7f8dce08e000 rw-p 00000000 00:00 0 7f8dce08e000-7f8dce1ba000 r-xp 00000000 08:01 527505 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/CORE/libperl.so 7f8dce1ba000-7f8dce3ba000 ---p 0012c000 08:01 527505 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/CORE/libperl.so 7f8dce3ba000-7f8dce3c3000 rw-p 0012c000 08:01 527505 /usr/local/cpanel/3rdparty/perl/514/lib64/perl5/5.14.3/x86_64-linux-64int/CORE/libperl.so 7f8dce3c3000-7f8dce3c4000 rw-p 00000000 00:00 0 7f8dce3c4000-7f8dce3ca000 r-xp 00000000 08:01 956 /usr/lib64/libgdbm.so.2.0.0 7f8dce3ca000-7f8dce5c9000 ---p 00006000 08:01 956 /usr/lib64/libgdbm.so.2.0.0 7f8dce5c9000-7f8dce5ca000 rw-p 00005000 08:01 956 /usr/lib64/libgdbm.so.2.0.0 7f8dce5ca000-7f8dce5ea000 r-xp 00000000 08:01 20865 /lib64/ld-2.12.so 7f8dce73b000-7f8dce7b9000 rw-p 00000000 00:00 0 7f8dce7da000-7f8dce7e0000 rw-p 00000000 00:00 0 7f8dce7e8000-7f8dce7e9000 rw-p 00000000 00:00 0 7f8dce7e9000-7f8dce7ea000 r--p 0001f000 08:01 20865 /lib64/ld-2.12.so 7f8dce7ea000-7f8dce7eb000 rw-p 00020000 08:01 20865 /lib64/ld-2.12.so 7f8dce7eb000-7f8dce7ec000 rw-p 00000000 00:00 0 7fffca1ef000-7fffca228000 rw-p 00000000 00:00 0 [stack] 7fffca29b000-7fffca29c000 r-xp 00000000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

Comments

2 comments

Date Votes
  • quizknows
    Most likely this is not malicious, sometimes you need to whitelist spamd in /etc/csf/csf.pignore
    0
  • cPanelMichael
    Hello :) I don't see anything that would indicate a malicious process from your output, however it's important to keep in mind that it's difficult to provide a definitive answer on the state of your system without access to it. You may want to consult with a qualified system administrator or security specialist if you are concerned that your server is hacked. Thank you.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post