LeakIX - Host 103.29.56.38

Host 103.29.56.38

Malaysia

IX Telecom

CheckMK monitoring endpoint publicly available

An open CheckMK agent is publicly available.

This could leak sensitive information such as :

Process list ( maybe credentials )
Network interfaces
Running services
Firewall rules
Internal OS configuration

https://docs.checkmk.com/latest/en/wato_monitoringagents.html

IP: 103.29.56.38
Port: 6556

First seen 2022-06-17 22:12
Last seen 2024-12-21 22:06
Open for 917 days

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce75b32ec7

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:18:56,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:24,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:52:33,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:08,11) [watchdog/0]
(root,0,0,00:00:56,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:03,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:19,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:52,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:01:02,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:37,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:50,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:01:00,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:32,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:49,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:01:02,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:51,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:49,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:01:02,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:21,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:49,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:52,69) [watchdog/12]
(root,0,0,00:00:05,70) [migration/12]
(root,0,0,00:00:04,71) [ksoftirqd/12]
(root,0,0,00:00:14,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:45,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:58,79) [watchdog/14]
(root,0,0,00:00:34,80) [migration/14]
(root,0,0,00:01:18,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:51,84) [watchdog/15]
(root,0,0,00:00:46,85) [migration/15]
(root,0,0,00:00:18,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:53,89) [watchdog/16]
(root,0,0,00:00:07,90) [migration/16]
(root,0,0,00:00:06,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:46,94) [watchdog/17]
(root,0,0,00:00:06,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:51,99) [watchdog/18]
(root,0,0,00:00:05,100) [migration/18]
(root,0,0,00:00:06,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:45,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:01:00,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:38,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:45,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:59,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:40,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:45,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:22,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:52,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:42,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:06,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:40:17,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,121220,52748,01:05:36,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:03,931) [xfsaild/dm-2]
(root,55532,1084,00:00:27,950) /sbin/auditd
(root,26612,2044,00:05:01,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:45,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:23,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:08:57,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:28,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1131) [kworker/9:2]
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,621580,33916,00:43:02,1475) /usr/sbin/rsyslogd -n
(root,229188,12876,09:08:42,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:49,1477) /usr/sbin/bird
(root,3736772,50316,09:43:01,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:10:38,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:25:48,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24484,05:07:19,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:16,1946) [kworker/18:2]
(root,0,0,00:00:01,1947) [kworker/0:1H]
(root,2007796,14136,00:07:15,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15360,00:07:20,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:14,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:07,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17692,3656,00:01:01,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:07,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:07,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3178) [kworker/2:0]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,4600016,267088,00:19:10,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2976,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:07,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3832,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:12,4304) nginx: worker process
(nginx,59980,4028,00:00:13,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4484,00:00:13,4307) nginx: worker process
(nginx,62056,4492,00:00:13,4308) nginx: worker process
(nginx,59904,3948,00:00:15,4309) nginx: worker process
(nginx,62060,4572,00:00:16,4310) nginx: worker process
(nginx,62056,4608,00:00:19,4311) nginx: worker process
(nginx,62056,4572,00:00:22,4312) nginx: worker process
(nginx,59984,4080,00:00:28,4313) nginx: worker process
(nginx,62060,4688,00:00:29,4314) nginx: worker process
(nginx,62060,4680,00:00:30,4315) nginx: worker process
(nginx,62060,4680,00:00:36,4316) nginx: worker process
(nginx,62060,4680,00:00:43,4317) nginx: worker process
(nginx,62060,4684,00:00:51,4318) nginx: worker process
(nginx,62056,4680,00:01:04,4319) nginx: worker process
(nginx,62060,4704,00:01:48,4320) nginx: worker process
(nginx,59984,3968,00:00:21,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:05,6490) [kworker/4:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:39,7770) [kworker/9:0]
(root,0,0,00:00:13,8150) [kworker/22:2]
(speedte+,14236,2432,00:00:00,8494) /home/speedtest/OoklaServer --daemon
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:07,10469) [kworker/7:0]
(root,0,0,00:00:03,10806) [kworker/3:1]
(root,0,0,00:00:15,11221) [kworker/10:0]
(root,0,0,00:00:00,12248) [kworker/8:2]
(root,0,0,00:00:07,12384) [kworker/u96:0]
(root,0,0,00:00:13,13136) [kworker/0:0]
(root,0,0,00:00:00,14983) [kworker/u96:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15321) [kworker/3:2]
(root,0,0,00:00:01,15992) [kworker/1:1]
(root,0,0,00:00:04,17323) [kworker/14:2]
(root,0,0,00:00:00,18759) [kworker/u97:0]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:04:30,19494) [kworker/2:2]
(root,0,0,00:00:00,21846) [kworker/20:2]
(root,0,0,00:00:00,21947) [kworker/5:1]
(root,0,0,00:00:00,22347) [kworker/u98:0]
(root,0,0,00:00:01,23738) [kworker/8:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,25538) [kworker/0:2]
(root,0,0,00:00:00,26521) [kworker/6:1]
(root,0,0,00:00:00,26814) [kworker/6:0]
(root,0,0,00:00:00,26916) [kworker/6:2]
(root,115416,1608,00:00:00,27209) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,27215) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,27216) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:12,30336) [kworker/20:1]
(root,0,0,00:00:00,31562) [kworker/15:2]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,36377) [kworker/14:0]
(root,423436,5248,00:00:05,36404) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:03,36424) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,36448) bash /entrypoint.sh
(root,0,0,00:00:07,37111) [kworker/5:2]
(root,11795116,76920,00:03:26,37132) node /app/dist/index.js
(root,0,0,00:00:08,37846) [kworker/15:1]
(root,0,0,00:00:00,39233) [kworker/u97:2]
(root,0,0,00:00:00,39821) [kworker/17:2]
(root,0,0,00:00:00,40882) [kworker/u98:1]
(root,0,0,00:00:00,42393) [kworker/10:2]
(root,0,0,00:00:02,42777) [kworker/1:2]
(root,0,0,00:00:01,44086) [kworker/4:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,133608,4332,02:08:01,49082) /usr/bin/monit -I

Found on 2024-12-21 22:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ceb0f983b7

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:18:39,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:24,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:51:33,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:07,11) [watchdog/0]
(root,0,0,00:00:55,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:03,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:18,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:52,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:01:01,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:36,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:49,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:59,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:32,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:48,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:01:01,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:50,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:49,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:01:01,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:21,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:49,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:51,69) [watchdog/12]
(root,0,0,00:00:05,70) [migration/12]
(root,0,0,00:00:04,71) [ksoftirqd/12]
(root,0,0,00:00:14,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:45,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:58,79) [watchdog/14]
(root,0,0,00:00:34,80) [migration/14]
(root,0,0,00:01:18,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:51,84) [watchdog/15]
(root,0,0,00:00:46,85) [migration/15]
(root,0,0,00:00:18,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:53,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:06,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:45,94) [watchdog/17]
(root,0,0,00:00:06,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:51,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:06,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:45,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:59,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:38,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:44,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:59,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:40,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:44,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:22,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:52,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:41,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:06,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:39:28,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,141312,81992,01:04:58,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:03,931) [xfsaild/dm-2]
(root,55532,1084,00:00:27,950) /sbin/auditd
(root,26612,2044,00:04:58,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:39,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:23,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:08:21,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:28,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1131) [kworker/9:2]
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,640904,52264,00:42:36,1475) /usr/sbin/rsyslogd -n
(root,229156,12980,09:03:20,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:44,1477) /usr/sbin/bird
(root,3736772,50800,09:38:32,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:10:33,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:25:33,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,27416,05:04:57,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:16,1946) [kworker/18:2]
(root,0,0,00:00:01,1947) [kworker/0:1H]
(root,2007796,14120,00:07:11,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15716,00:07:16,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:14,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:07,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17692,3656,00:01:00,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,2788) [kworker/u97:0]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:07,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3178) [kworker/2:0]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,4600016,267088,00:19:10,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2976,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:07,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3816,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:12,4304) nginx: worker process
(nginx,59980,4028,00:00:13,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4484,00:00:13,4307) nginx: worker process
(nginx,62056,4492,00:00:13,4308) nginx: worker process
(nginx,59904,3948,00:00:15,4309) nginx: worker process
(nginx,62060,4572,00:00:16,4310) nginx: worker process
(nginx,62056,4608,00:00:19,4311) nginx: worker process
(nginx,62056,4572,00:00:22,4312) nginx: worker process
(nginx,59984,4080,00:00:28,4313) nginx: worker process
(nginx,62060,4688,00:00:29,4314) nginx: worker process
(nginx,62060,4680,00:00:30,4315) nginx: worker process
(nginx,62060,4680,00:00:35,4316) nginx: worker process
(nginx,62060,4680,00:00:43,4317) nginx: worker process
(nginx,62060,4684,00:00:51,4318) nginx: worker process
(nginx,62056,4680,00:01:04,4319) nginx: worker process
(nginx,62060,4704,00:01:47,4320) nginx: worker process
(nginx,59984,3968,00:00:20,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:04,6490) [kworker/4:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:38,7770) [kworker/9:0]
(root,0,0,00:00:12,8150) [kworker/22:2]
(speedte+,14236,2432,00:00:00,8494) /home/speedtest/OoklaServer --daemon
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:07,10469) [kworker/7:0]
(root,0,0,00:00:03,10806) [kworker/3:1]
(root,0,0,00:00:13,11221) [kworker/10:0]
(root,0,0,00:00:00,12248) [kworker/8:2]
(root,0,0,00:00:00,12732) [kworker/u98:2]
(root,0,0,00:00:12,13136) [kworker/0:0]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:02,17323) [kworker/14:2]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:04:19,19494) [kworker/2:2]
(root,0,0,00:00:00,21947) [kworker/5:1]
(root,0,0,00:00:00,23105) [kworker/u97:1]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,25538) [kworker/0:2]
(root,0,0,00:00:00,27479) [kworker/u96:1]
(root,0,0,00:00:01,28883) [kworker/1:2]
(root,0,0,00:00:11,30336) [kworker/20:1]
(root,0,0,00:00:00,31562) [kworker/15:2]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,15168,3456,00:00:00,35474) tclsh8.6 /usr/bin/unbuffer traceroute -6 -m 20 -w 2 -q 2 -N 20 --icmp eu.strp.games
(root,2628,1092,3-18:45:52,35475) traceroute -6 -m 20 -w 2 -q 2 -N 20 --icmp eu.strp.games
(root,0,0,00:00:13,36662) [kworker/8:0]
(root,0,0,00:00:06,37111) [kworker/5:2]
(root,0,0,00:00:07,37846) [kworker/15:1]
(root,0,0,00:00:00,39821) [kworker/17:2]
(root,357900,6052,00:00:37,39849) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:16,39869) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,39893) bash /entrypoint.sh
(root,0,0,00:00:00,40055) [kworker/u98:1]
(root,11795648,83044,00:22:40,40572) node /app/dist/index.js
(root,0,0,00:00:00,40633) [kworker/20:0]
(root,0,0,00:00:00,41742) [kworker/1:1]
(root,0,0,00:00:00,42393) [kworker/10:2]
(root,0,0,00:00:50,43154) [kworker/u96:2]
(root,0,0,00:00:00,44039) [kworker/6:0]
(root,0,0,00:00:00,44086) [kworker/4:2]
(root,0,0,00:00:00,44272) [kworker/6:2]
(root,0,0,00:00:00,44475) [kworker/6:1]
(root,115416,1604,00:00:00,44746) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,44752) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,44753) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,133612,4280,02:02:40,49082) /usr/bin/monit -I

Found on 2024-12-20 00:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce37555d41

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:18:29,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:23,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:46:20,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:06,11) [watchdog/0]
(root,0,0,00:00:55,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:02,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:16,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:52,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:01:00,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:35,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:49,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:59,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:30,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:48,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:01:01,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:48,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:49,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:01:01,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:19,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:49,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:51,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:04,71) [ksoftirqd/12]
(root,0,0,00:00:14,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:45,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:57,79) [watchdog/14]
(root,0,0,00:00:34,80) [migration/14]
(root,0,0,00:01:17,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:51,84) [watchdog/15]
(root,0,0,00:00:46,85) [migration/15]
(root,0,0,00:00:18,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:52,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:06,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:45,94) [watchdog/17]
(root,0,0,00:00:06,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:50,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:06,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:44,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:59,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:37,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:44,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:58,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:38,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:44,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:22,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:51,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:41,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:06,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:38:38,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,185804,107540,01:04:20,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:03,931) [xfsaild/dm-2]
(root,55532,1084,00:00:27,950) /sbin/auditd
(root,26612,2044,00:04:56,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:36,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:23,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:07:51,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:27,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1131) [kworker/9:2]
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,695452,68396,00:42:13,1475) /usr/sbin/rsyslogd -n
(root,229192,12876,08:57:56,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:39,1477) /usr/sbin/bird
(root,3736772,51060,09:34:06,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:10:30,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:25:19,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24828,05:03:03,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:15,1946) [kworker/18:2]
(root,0,0,00:00:01,1947) [kworker/0:1H]
(root,2007796,14568,00:07:06,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16388,00:07:11,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:14,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:07,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:01:00,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:07,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3178) [kworker/2:0]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,4600016,267088,00:19:10,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2976,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:07,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3816,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:12,4304) nginx: worker process
(nginx,59980,4028,00:00:13,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4484,00:00:12,4307) nginx: worker process
(nginx,62056,4492,00:00:12,4308) nginx: worker process
(nginx,59904,3948,00:00:15,4309) nginx: worker process
(nginx,62060,4572,00:00:15,4310) nginx: worker process
(nginx,62056,4608,00:00:18,4311) nginx: worker process
(nginx,62056,4572,00:00:21,4312) nginx: worker process
(nginx,59984,4080,00:00:26,4313) nginx: worker process
(nginx,62060,4672,00:00:28,4314) nginx: worker process
(nginx,62060,4680,00:00:30,4315) nginx: worker process
(nginx,62060,4680,00:00:35,4316) nginx: worker process
(nginx,62060,4680,00:00:42,4317) nginx: worker process
(nginx,62060,4684,00:00:50,4318) nginx: worker process
(nginx,62056,4680,00:01:02,4319) nginx: worker process
(nginx,62060,4704,00:01:46,4320) nginx: worker process
(nginx,59984,3968,00:00:20,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,5318) [kworker/u98:0]
(root,0,0,00:00:01,6490) [kworker/4:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:38,7770) [kworker/9:0]
(root,0,0,00:00:00,7949) [kworker/1:1]
(root,0,0,00:00:09,8150) [kworker/22:2]
(speedte+,14236,2432,00:00:00,8494) /home/speedtest/OoklaServer --daemon
(speedte+,41724,28188,01:06:16,8529) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,8749) [kworker/14:0]
(root,0,0,00:00:00,8934) [kworker/0:1]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:07,10469) [kworker/7:0]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:10,11221) [kworker/10:0]
(root,0,0,00:00:00,11573) [kworker/6:2]
(root,0,0,00:00:00,11911) [kworker/6:0]
(root,0,0,00:00:00,12092) [kworker/6:1]
(root,0,0,00:00:00,12248) [kworker/8:2]
(root,115416,1664,00:00:00,12296) /bin/bash /usr/bin/check_mk_agent
(root,115416,1604,00:00:00,12392) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,12405) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,12406) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:10,13136) [kworker/0:0]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:04:06,19494) [kworker/2:2]
(root,0,0,00:00:00,21192) [kworker/u97:2]
(root,0,0,00:00:00,21947) [kworker/5:1]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:08,30336) [kworker/20:1]
(root,0,0,00:00:00,31562) [kworker/15:2]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,34158) [kworker/u98:2]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,34910) [kworker/u97:0]
(root,15168,3456,00:00:00,35474) tclsh8.6 /usr/bin/unbuffer traceroute -6 -m 20 -w 2 -q 2 -N 20 --icmp eu.strp.games
(root,2628,1092,1-19:26:26,35475) traceroute -6 -m 20 -w 2 -q 2 -N 20 --icmp eu.strp.games
(root,0,0,00:00:00,35947) [kworker/10:2]
(root,0,0,00:00:09,36662) [kworker/8:0]
(root,0,0,00:00:06,37111) [kworker/5:2]
(root,0,0,00:00:07,37846) [kworker/15:1]
(root,0,0,00:00:00,39821) [kworker/17:2]
(root,357900,6052,00:00:28,39849) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:12,39869) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,39893) bash /entrypoint.sh
(root,11795392,82032,00:16:42,40572) node /app/dist/index.js
(root,0,0,00:00:00,40633) [kworker/20:0]
(root,0,0,00:00:00,41583) [kworker/u96:1]
(root,0,0,00:00:08,43154) [kworker/u96:2]
(root,0,0,00:00:01,43709) [kworker/1:0]
(root,0,0,00:00:00,44086) [kworker/4:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,133612,4336,01:57:13,49082) /usr/bin/monit -I

Found on 2024-12-18 01:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce7d858d60

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:18:18,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:20,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:40:50,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:06,11) [watchdog/0]
(root,0,0,00:00:55,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:02,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:13,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:51,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:01:00,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:35,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:49,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:58,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:28,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:48,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:01:00,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:46,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:48,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:01:00,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:17,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:48,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:50,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:04,71) [ksoftirqd/12]
(root,0,0,00:00:14,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:45,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:56,79) [watchdog/14]
(root,0,0,00:00:34,80) [migration/14]
(root,0,0,00:01:15,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:50,84) [watchdog/15]
(root,0,0,00:00:46,85) [migration/15]
(root,0,0,00:00:18,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:51,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:06,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:45,94) [watchdog/17]
(root,0,0,00:00:06,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:50,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:05,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:44,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:58,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:34,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:44,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:57,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:36,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:44,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:22,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:51,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:41,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:06,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:37:40,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,47252,10764,01:03:42,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:27,950) /sbin/auditd
(root,26612,2044,00:04:54,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:31,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:23,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:07:23,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:27,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1131) [kworker/9:2]
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,560464,9148,00:41:50,1475) /usr/sbin/rsyslogd -n
(root,229156,12980,08:52:20,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:33,1477) /usr/sbin/bird
(root,3736772,49012,09:29:42,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:10:24,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:25:03,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,23140,05:00:51,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:15,1946) [kworker/18:2]
(root,0,0,00:00:01,1947) [kworker/0:1H]
(root,2007796,14816,00:07:01,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16756,00:07:07,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:14,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:07,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:02,2273) [kworker/14:0]
(root,0,0,00:00:10,2481) [kworker/u96:0]
(101,17676,3640,00:01:00,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:07,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,4600016,267088,00:19:10,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2976,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3808,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:12,4304) nginx: worker process
(nginx,59980,4028,00:00:12,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4484,00:00:12,4307) nginx: worker process
(nginx,62056,4492,00:00:12,4308) nginx: worker process
(nginx,59904,3948,00:00:14,4309) nginx: worker process
(nginx,62060,4572,00:00:15,4310) nginx: worker process
(nginx,62056,4608,00:00:18,4311) nginx: worker process
(nginx,62056,4572,00:00:21,4312) nginx: worker process
(nginx,59984,4080,00:00:26,4313) nginx: worker process
(nginx,62060,4672,00:00:27,4314) nginx: worker process
(nginx,62060,4680,00:00:29,4315) nginx: worker process
(nginx,62060,4680,00:00:34,4316) nginx: worker process
(nginx,62060,4680,00:00:40,4317) nginx: worker process
(nginx,62060,4684,00:00:50,4318) nginx: worker process
(nginx,62056,4680,00:01:01,4319) nginx: worker process
(nginx,62060,4704,00:01:44,4320) nginx: worker process
(nginx,59984,3968,00:00:20,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,5224) [kworker/u98:0]
(root,0,0,00:00:00,6703) [kworker/u96:2]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:37,7770) [kworker/9:0]
(root,0,0,00:00:06,8150) [kworker/22:2]
(speedte+,14236,2432,00:00:00,8494) /home/speedtest/OoklaServer --daemon
(speedte+,36076,23516,00:27:34,8529) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,9256) [kworker/1:1]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,10469) [kworker/7:0]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:06,11221) [kworker/10:0]
(root,0,0,00:00:00,12248) [kworker/8:2]
(root,0,0,00:00:06,13136) [kworker/0:0]
(root,0,0,00:00:01,14724) [kworker/1:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,16337) [kworker/4:0]
(root,0,0,00:00:00,18719) [kworker/u97:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:03:53,19494) [kworker/2:2]
(root,0,0,00:00:00,21192) [kworker/u97:2]
(root,0,0,00:00:09,21760) [kworker/0:2]
(root,0,0,00:00:00,21947) [kworker/5:1]
(root,0,0,00:00:00,23472) [kworker/u98:1]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24325) [kworker/6:2]
(root,0,0,00:00:00,24530) [kworker/6:0]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,24933) [kworker/6:1]
(root,115416,1604,00:00:00,25097) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,25103) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,25104) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,26395) [kworker/2:1]
(root,0,0,00:00:00,29316) [kworker/10:1]
(root,0,0,00:00:05,30336) [kworker/20:1]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:01,32122) [kworker/20:2]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:05,36662) [kworker/8:0]
(root,0,0,00:00:06,37111) [kworker/5:2]
(root,0,0,00:00:07,37846) [kworker/15:1]
(root,0,0,00:00:00,39821) [kworker/17:2]
(root,357900,6052,00:00:18,39849) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:08,39869) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,39893) bash /entrypoint.sh
(root,11795128,82524,00:10:18,40572) node /app/dist/index.js
(root,0,0,00:00:00,44086) [kworker/4:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,133608,4332,01:51:34,49082) /usr/bin/monit -I

Found on 2024-12-16 00:00

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ceff5a92a4

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:18:06,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:18,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:36:56,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:05,11) [watchdog/0]
(root,0,0,00:00:54,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:01,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:11,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:51,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:59,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:35,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:48,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:57,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:26,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:47,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:59,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:44,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:48,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:59,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:15,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:48,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:50,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:03,71) [ksoftirqd/12]
(root,0,0,00:00:13,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:44,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:56,79) [watchdog/14]
(root,0,0,00:00:33,80) [migration/14]
(root,0,0,00:01:13,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:50,84) [watchdog/15]
(root,0,0,00:00:45,85) [migration/15]
(root,0,0,00:00:18,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:51,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:05,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:44,94) [watchdog/17]
(root,0,0,00:00:06,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:49,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:05,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:44,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:57,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:33,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:43,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:57,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:34,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:43,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:21,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:50,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:41,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:06,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:36:29,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,63636,25680,01:02:58,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:26,950) /sbin/auditd
(root,26612,2044,00:04:51,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:24,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:23,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:06:40,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:27,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,568656,17904,00:41:22,1475) /usr/sbin/rsyslogd -n
(root,229192,13016,08:46:36,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:28,1477) /usr/sbin/bird
(root,3736772,48944,09:23:30,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:10:18,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:24:46,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24760,04:57:35,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:15,1946) [kworker/18:2]
(root,0,0,00:00:01,1947) [kworker/0:1H]
(root,2007796,14236,00:06:56,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16744,00:07:02,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:14,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:06,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3644,00:00:59,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:07,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,4600016,267088,00:19:10,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2976,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3808,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:11,4304) nginx: worker process
(nginx,59980,4028,00:00:12,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4484,00:00:12,4307) nginx: worker process
(nginx,62056,4492,00:00:12,4308) nginx: worker process
(nginx,59904,3948,00:00:14,4309) nginx: worker process
(nginx,62060,4572,00:00:15,4310) nginx: worker process
(nginx,62056,4608,00:00:17,4311) nginx: worker process
(nginx,62056,4568,00:00:20,4312) nginx: worker process
(nginx,59984,4080,00:00:25,4313) nginx: worker process
(nginx,62060,4672,00:00:26,4314) nginx: worker process
(nginx,62060,4680,00:00:29,4315) nginx: worker process
(nginx,62060,4680,00:00:34,4316) nginx: worker process
(nginx,62060,4680,00:00:39,4317) nginx: worker process
(nginx,62060,4684,00:00:49,4318) nginx: worker process
(nginx,62056,4680,00:00:59,4319) nginx: worker process
(nginx,62060,4700,00:01:41,4320) nginx: worker process
(nginx,59984,3968,00:00:19,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,5224) [kworker/u98:0]
(root,0,0,00:00:00,6658) [kworker/u96:0]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:07,7180) [kworker/u96:1]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:36,7770) [kworker/9:0]
(root,0,0,00:00:04,8150) [kworker/22:2]
(speedte+,14236,2432,00:00:00,8494) /home/speedtest/OoklaServer --daemon
(speedte+,29628,17848,00:01:41,8529) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,9225) [kworker/1:2]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,10469) [kworker/7:0]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:02,11221) [kworker/10:0]
(root,0,0,00:00:02,13136) [kworker/0:0]
(root,0,0,00:00:01,14345) [kworker/1:0]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:01,15896) [kworker/14:2]
(root,0,0,00:00:00,18719) [kworker/u97:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:03:39,19494) [kworker/2:2]
(root,0,0,00:00:09,21760) [kworker/0:2]
(root,0,0,00:00:00,22788) [kworker/4:0]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24478) [kworker/6:0]
(root,0,0,00:00:00,24659) [kworker/u98:2]
(root,0,0,00:00:00,24767) [kworker/6:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,24898) [kworker/6:2]
(root,115416,1604,00:00:00,25075) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,25081) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,25082) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,26395) [kworker/2:1]
(root,0,0,00:00:03,30336) [kworker/20:1]
(root,0,0,00:00:06,30420) [kworker/10:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:01,32122) [kworker/20:2]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,36662) [kworker/8:0]
(root,0,0,00:00:06,37111) [kworker/5:2]
(root,0,0,00:00:07,37846) [kworker/15:1]
(root,0,0,00:00:00,38939) [kworker/u97:2]
(root,0,0,00:00:00,39821) [kworker/17:2]
(root,357900,6032,00:00:04,39849) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:02,39869) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,39893) bash /entrypoint.sh
(root,11793708,78780,00:02:40,40572) node /app/dist/index.js
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:00,43305) [kworker/9:1]
(root,0,0,00:00:07,43526) [kworker/8:1]
(root,0,0,00:00:00,44086) [kworker/4:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,133608,4332,01:45:47,49082) /usr/bin/monit -I

Found on 2024-12-13 23:40

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce17bcd790

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:17:49,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:17,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:35:30,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:04,11) [watchdog/0]
(root,0,0,00:00:53,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:00,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:11,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:50,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:59,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:35,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:48,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:57,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:26,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:47,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:59,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:44,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:47,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:59,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:15,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:47,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:49,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:03,71) [ksoftirqd/12]
(root,0,0,00:00:13,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:44,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:55,79) [watchdog/14]
(root,0,0,00:00:33,80) [migration/14]
(root,0,0,00:01:13,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:49,84) [watchdog/15]
(root,0,0,00:00:45,85) [migration/15]
(root,0,0,00:00:18,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:50,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:05,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:44,94) [watchdog/17]
(root,0,0,00:00:06,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:49,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:05,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:43,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:57,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:33,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:43,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:56,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:34,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:43,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:21,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:49,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:40,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:06,483) [kworker/21:1]
(root,0,0,00:00:00,486) [kworker/14:0]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:35:22,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,100504,43488,01:02:14,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:15,722) [kworker/u96:2]
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:26,950) /sbin/auditd
(root,26612,2044,00:04:48,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:17,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:23,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:05:59,978) /usr/sbin/irqbalance --foreground
(root,0,0,00:00:02,996) [kworker/8:2]
(root,126384,1608,00:00:27,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,605524,28200,00:40:54,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,08:41:00,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:22,1477) /usr/sbin/bird
(root,3736772,50140,09:17:28,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:10:11,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:24:30,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1548) [kworker/4:1]
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,25180,04:54:24,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:15,1946) [kworker/18:2]
(root,0,0,00:00:01,1947) [kworker/0:1H]
(root,2007796,14524,00:06:51,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16176,00:06:57,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:13,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:06,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3616,00:00:58,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:07,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,3475320,201484,00:11:28,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:01,3325) [kworker/1:0]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2976,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3808,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:11,4304) nginx: worker process
(nginx,59980,4028,00:00:12,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4476,00:00:12,4307) nginx: worker process
(nginx,62056,4492,00:00:12,4308) nginx: worker process
(nginx,59904,3948,00:00:14,4309) nginx: worker process
(nginx,62060,4572,00:00:15,4310) nginx: worker process
(nginx,62056,4592,00:00:17,4311) nginx: worker process
(nginx,62056,4568,00:00:20,4312) nginx: worker process
(nginx,59984,4080,00:00:25,4313) nginx: worker process
(nginx,62060,4672,00:00:26,4314) nginx: worker process
(nginx,62060,4680,00:00:28,4315) nginx: worker process
(nginx,62060,4680,00:00:34,4316) nginx: worker process
(nginx,62060,4680,00:00:39,4317) nginx: worker process
(nginx,62060,4684,00:00:49,4318) nginx: worker process
(nginx,62056,4676,00:00:59,4319) nginx: worker process
(nginx,62060,4700,00:01:41,4320) nginx: worker process
(nginx,59904,3896,00:00:19,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,6052) [kworker/u96:0]
(root,0,0,00:00:00,6313) [kworker/u98:0]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:35,7770) [kworker/9:0]
(root,0,0,00:00:02,8150) [kworker/22:2]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,10469) [kworker/7:0]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:00,11221) [kworker/10:0]
(root,0,0,00:00:00,11395) [kworker/u98:1]
(root,0,0,00:00:00,13136) [kworker/0:0]
(root,0,0,00:00:00,13338) [kworker/u97:0]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,17784) [kworker/6:2]
(root,0,0,00:00:00,18404) [kworker/6:0]
(root,0,0,00:00:00,18814) [kworker/6:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(speedte+,14236,3600,00:00:00,19308) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,115416,1600,00:00:00,19469) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,19475) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,19476) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:03:28,19494) [kworker/2:2]
(root,422028,4332,00:00:46,20379) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:19,20399) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,20423) bash /entrypoint.sh
(root,11797592,83060,00:28:07,21102) node /app/dist/index.js
(root,0,0,00:00:09,21760) [kworker/0:2]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24335) [kworker/u97:2]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,26395) [kworker/2:1]
(root,0,0,00:00:01,30336) [kworker/20:1]
(root,0,0,00:00:05,30420) [kworker/10:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:01,32122) [kworker/20:2]
(root,0,0,00:00:01,33135) [kworker/1:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:06,37111) [kworker/5:2]
(root,0,0,00:00:07,37846) [kworker/15:1]
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:05,43526) [kworker/8:1]
(root,0,0,00:00:00,44086) [kworker/4:2]
(root,0,0,00:00:00,46192) [kworker/9:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133608,4332,01:40:14,49082) /usr/bin/monit -I

Found on 2024-12-12 01:00

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94cedf8a2a67

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:17:30,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:17,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:34:26,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:04,11) [watchdog/0]
(root,0,0,00:00:53,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:00,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:10,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:50,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:58,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:34,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:47,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:56,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:26,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:46,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:58,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:44,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:47,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:58,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:14,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:47,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:48,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:03,71) [ksoftirqd/12]
(root,0,0,00:00:13,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:43,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:55,79) [watchdog/14]
(root,0,0,00:00:33,80) [migration/14]
(root,0,0,00:01:12,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:49,84) [watchdog/15]
(root,0,0,00:00:44,85) [migration/15]
(root,0,0,00:00:17,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:50,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:05,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:43,94) [watchdog/17]
(root,0,0,00:00:06,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:48,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:05,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:43,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:56,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:33,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:42,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:56,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:34,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:42,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:21,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:49,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:40,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:07,584) [kworker/1:0]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:34:13,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,116696,53352,01:01:26,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:26,950) /sbin/auditd
(root,26612,2044,00:04:45,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:10,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:22,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:05:16,978) /usr/sbin/irqbalance --foreground
(root,0,0,00:00:02,996) [kworker/8:2]
(root,126384,1608,00:00:26,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,621496,33616,00:40:23,1475) /usr/sbin/rsyslogd -n
(root,229188,12876,08:35:10,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:17,1477) /usr/sbin/bird
(root,3736772,47216,09:11:15,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:10:05,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:24:15,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,26588,04:51:07,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:15,1946) [kworker/18:2]
(root,0,0,00:00:01,1947) [kworker/0:1H]
(root,2007796,14216,00:06:46,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16444,00:06:52,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:13,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:06,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17548,3580,00:00:57,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,1610520,94952,00:02:57,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:50,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2956,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3808,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:11,4304) nginx: worker process
(nginx,59980,4028,00:00:12,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4476,00:00:12,4307) nginx: worker process
(nginx,62056,4492,00:00:12,4308) nginx: worker process
(nginx,59904,3948,00:00:14,4309) nginx: worker process
(nginx,62060,4572,00:00:15,4310) nginx: worker process
(nginx,62056,4592,00:00:17,4311) nginx: worker process
(nginx,62056,4568,00:00:20,4312) nginx: worker process
(nginx,59984,4080,00:00:25,4313) nginx: worker process
(nginx,62060,4672,00:00:26,4314) nginx: worker process
(nginx,62060,4680,00:00:28,4315) nginx: worker process
(nginx,62060,4680,00:00:33,4316) nginx: worker process
(nginx,62060,4680,00:00:39,4317) nginx: worker process
(nginx,62060,4684,00:00:48,4318) nginx: worker process
(nginx,62056,4676,00:00:59,4319) nginx: worker process
(nginx,62060,4700,00:01:41,4320) nginx: worker process
(nginx,59904,3896,00:00:19,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:34,7770) [kworker/9:0]
(root,0,0,00:00:02,8150) [kworker/22:2]
(root,0,0,00:00:17,9325) [kworker/14:0]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:06,10469) [kworker/7:0]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:00,11221) [kworker/10:0]
(root,0,0,00:00:00,11395) [kworker/u98:1]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:25,15861) [kworker/0:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:03:16,19494) [kworker/2:2]
(root,422028,4332,00:00:29,20379) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:12,20399) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,20423) bash /entrypoint.sh
(root,11797336,82144,00:18:05,21102) node /app/dist/index.js
(root,0,0,00:00:07,21760) [kworker/0:2]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,26395) [kworker/2:1]
(root,0,0,00:00:00,27071) [kworker/u97:2]
(root,0,0,00:00:00,29203) [kworker/u97:1]
(root,0,0,00:00:00,30100) [kworker/6:2]
(root,0,0,00:00:00,30336) [kworker/20:1]
(root,0,0,00:00:03,30420) [kworker/10:2]
(root,0,0,00:00:00,30709) [kworker/6:0]
(root,0,0,00:00:00,30998) [kworker/6:1]
(speedte+,14236,3600,00:00:00,31601) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,115416,1604,00:00:00,31765) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,31771) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,31772) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:01,32122) [kworker/20:2]
(root,0,0,00:00:00,32759) [kworker/u98:0]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:05,37111) [kworker/5:2]
(root,0,0,00:00:00,37459) [kworker/9:2]
(root,0,0,00:00:06,37846) [kworker/15:1]
(root,0,0,00:00:00,40029) [kworker/1:1]
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:00,43031) [kworker/u96:2]
(root,0,0,00:00:03,43526) [kworker/8:1]
(root,0,0,00:00:00,44086) [kworker/4:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:06,48233) [kworker/u96:1]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133568,4292,01:34:32,49082) /usr/bin/monit -I

Found on 2024-12-10 00:53

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ceea295ab7

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:17:12,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:17,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:32:53,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:03,11) [watchdog/0]
(root,0,0,00:00:52,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:59,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:10,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:49,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:57,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:34,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:47,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:56,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:46,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:57,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:43,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:46,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:58,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:14,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:46,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:48,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:03,71) [ksoftirqd/12]
(root,0,0,00:00:13,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:43,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:54,79) [watchdog/14]
(root,0,0,00:00:32,80) [migration/14]
(root,0,0,00:01:11,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:48,84) [watchdog/15]
(root,0,0,00:00:44,85) [migration/15]
(root,0,0,00:00:17,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:49,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:05,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:43,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:48,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:05,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:42,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:56,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:32,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:42,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:55,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:34,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:42,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:21,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:48,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:40,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:33:02,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,125004,63304,01:00:38,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:25,950) /sbin/auditd
(root,26612,2044,00:04:42,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:11:02,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:22,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:04:33,978) /usr/sbin/irqbalance --foreground
(root,0,0,00:00:02,996) [kworker/8:2]
(root,126384,1608,00:00:26,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,628412,39940,00:39:53,1475) /usr/sbin/rsyslogd -n
(root,229188,12876,08:29:22,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:11,1477) /usr/sbin/bird
(root,3736772,46144,09:05:00,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:58,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:23:58,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24072,04:47:50,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:15,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13872,00:06:41,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16356,00:06:46,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:13,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:05,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:57,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,14520,3744,00:00:24,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:47,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2956,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3404,00:00:09,4300) nginx: worker process
(nginx,59904,3808,00:00:12,4301) nginx: worker process
(nginx,59904,3848,00:00:13,4302) nginx: worker process
(nginx,59904,3828,00:00:12,4303) nginx: worker process
(nginx,59904,3888,00:00:11,4304) nginx: worker process
(nginx,59980,4028,00:00:12,4305) nginx: worker process
(nginx,59904,3884,00:00:12,4306) nginx: worker process
(nginx,62056,4476,00:00:12,4307) nginx: worker process
(nginx,62056,4472,00:00:12,4308) nginx: worker process
(nginx,59904,3948,00:00:14,4309) nginx: worker process
(nginx,62060,4572,00:00:15,4310) nginx: worker process
(nginx,62056,4592,00:00:17,4311) nginx: worker process
(nginx,62056,4568,00:00:20,4312) nginx: worker process
(nginx,59984,4080,00:00:25,4313) nginx: worker process
(nginx,62060,4672,00:00:26,4314) nginx: worker process
(nginx,62060,4680,00:00:28,4315) nginx: worker process
(nginx,62060,4680,00:00:33,4316) nginx: worker process
(nginx,62060,4680,00:00:39,4317) nginx: worker process
(nginx,62060,4680,00:00:48,4318) nginx: worker process
(nginx,62056,4676,00:00:59,4319) nginx: worker process
(nginx,62060,4696,00:01:40,4320) nginx: worker process
(nginx,59904,3896,00:00:19,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:00,5123) [kworker/6:2]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,5280) [kworker/6:0]
(root,0,0,00:00:00,5642) [kworker/6:1]
(root,115416,1604,00:00:00,5980) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,5986) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,5987) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,6530) [kworker/9:2]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:33,7770) [kworker/9:0]
(root,0,0,00:00:01,8150) [kworker/22:2]
(root,0,0,00:00:15,9325) [kworker/14:0]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,10469) [kworker/7:0]
(root,0,0,00:00:00,10651) [kworker/u98:2]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:00,11275) [kworker/u97:0]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:25,15861) [kworker/0:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:03:05,19494) [kworker/2:2]
(root,0,0,00:00:00,19872) [kworker/20:0]
(root,0,0,00:00:00,19949) [kworker/u96:0]
(root,422028,4332,00:00:12,20379) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:05,20399) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,20423) bash /entrypoint.sh
(root,11796056,80168,00:07:23,21102) node /app/dist/index.js
(root,0,0,00:00:05,21760) [kworker/0:2]
(root,0,0,00:00:14,23465) [kworker/u96:2]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24566) [kworker/u98:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,26395) [kworker/2:1]
(root,0,0,00:00:01,27317) [kworker/1:2]
(root,0,0,00:00:00,30420) [kworker/10:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:01:02,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:01,32122) [kworker/20:2]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:05,37111) [kworker/5:2]
(root,0,0,00:00:01,37330) [kworker/1:1]
(root,0,0,00:00:05,37846) [kworker/15:1]
(root,0,0,00:00:00,42120) [kworker/10:1]
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:00,43526) [kworker/8:1]
(root,0,0,00:00:00,44086) [kworker/4:2]
(speedte+,55536,39916,02:38:09,45149) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,46028) [kworker/u97:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133720,4296,01:28:48,49082) /usr/bin/monit -I

Found on 2024-12-08 00:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce87c1aeea

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:17:01,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:11,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:28:55,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:02,11) [watchdog/0]
(root,0,0,00:00:52,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:58,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:04,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:49,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:57,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:29,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:46,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:55,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:45,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:57,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:38,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:46,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:57,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:09,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:46,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:47,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:03,71) [ksoftirqd/12]
(root,0,0,00:00:13,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:42,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:53,79) [watchdog/14]
(root,0,0,00:00:32,80) [migration/14]
(root,0,0,00:01:07,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:48,84) [watchdog/15]
(root,0,0,00:00:43,85) [migration/15]
(root,0,0,00:00:17,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:48,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:05,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:42,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:47,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:05,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:42,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:55,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:28,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:42,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:54,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:30,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:41,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:21,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:48,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:39,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:31:52,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,141440,77492,00:59:55,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:25,950) /sbin/auditd
(root,26612,2044,00:04:39,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:56,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:22,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:03:50,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:26,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,643128,48440,00:39:26,1475) /usr/sbin/rsyslogd -n
(root,229192,13016,08:23:51,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:06,1477) /usr/sbin/bird
(root,3736772,47344,08:59:03,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:52,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:23:42,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,25108,04:44:38,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:15,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13712,00:06:36,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15416,00:06:41,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:13,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:05,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:56,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,14520,3720,00:00:18,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,3325) [kworker/u98:1]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:43,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2956,00:00:05,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3388,00:00:08,4300) nginx: worker process
(nginx,59904,3808,00:00:11,4301) nginx: worker process
(nginx,59904,3848,00:00:12,4302) nginx: worker process
(nginx,59904,3828,00:00:11,4303) nginx: worker process
(nginx,59904,3888,00:00:11,4304) nginx: worker process
(nginx,59980,4028,00:00:12,4305) nginx: worker process
(nginx,59904,3884,00:00:11,4306) nginx: worker process
(nginx,62056,4476,00:00:12,4307) nginx: worker process
(nginx,62056,4472,00:00:11,4308) nginx: worker process
(nginx,59904,3948,00:00:14,4309) nginx: worker process
(nginx,62060,4572,00:00:14,4310) nginx: worker process
(nginx,62056,4592,00:00:17,4311) nginx: worker process
(nginx,62056,4564,00:00:20,4312) nginx: worker process
(nginx,59984,4080,00:00:25,4313) nginx: worker process
(nginx,62060,4672,00:00:25,4314) nginx: worker process
(nginx,62060,4680,00:00:28,4315) nginx: worker process
(nginx,62060,4680,00:00:32,4316) nginx: worker process
(nginx,62060,4680,00:00:38,4317) nginx: worker process
(nginx,62060,4680,00:00:47,4318) nginx: worker process
(nginx,62056,4676,00:00:58,4319) nginx: worker process
(nginx,62060,4692,00:01:38,4320) nginx: worker process
(nginx,59904,3896,00:00:19,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,414088,5280,00:00:54,6129) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:22,6148) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,6172) bash /entrypoint.sh
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,11797000,82960,00:29:13,6851) node /app/dist/index.js
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:32,7770) [kworker/9:0]
(root,0,0,00:00:00,8850) [kworker/6:2]
(root,0,0,00:00:00,9140) [kworker/6:0]
(root,0,0,00:00:00,9303) [kworker/6:1]
(root,0,0,00:00:11,9325) [kworker/14:0]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,115416,1608,00:00:00,9493) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,9499) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,9500) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:05,10469) [kworker/7:0]
(root,0,0,00:00:00,10651) [kworker/u98:2]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:25,15861) [kworker/0:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:02:52,19494) [kworker/2:2]
(root,0,0,00:00:00,20331) [kworker/u97:1]
(root,0,0,00:00:01,21760) [kworker/0:2]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,26395) [kworker/2:1]
(root,0,0,00:00:00,30420) [kworker/10:2]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:00,31341) [kworker/u97:0]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:01:00,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,31886) [kworker/u96:1]
(root,0,0,00:00:11,34022) [kworker/u96:0]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:04,37111) [kworker/5:2]
(root,0,0,00:00:32,37317) [kworker/8:0]
(root,0,0,00:00:05,37846) [kworker/15:1]
(root,0,0,00:00:00,38708) [kworker/20:0]
(root,0,0,00:00:01,40858) [kworker/1:0]
(root,0,0,00:00:00,40913) [kworker/9:2]
(root,0,0,00:00:11,42001) [kworker/10:0]
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:05,43259) [kworker/1:2]
(speedte+,42780,30276,01:26:51,45149) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:02,45381) [kworker/8:2]
(root,0,0,00:00:58,45873) [kworker/20:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48009) [kworker/22:0]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,01:23:15,49082) /usr/bin/monit -I

Found on 2024-12-06 00:45

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce1614698b

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:16:49,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:09,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:25:03,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:02,11) [watchdog/0]
(root,0,0,00:00:51,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:58,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:02,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:48,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:56,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:27,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:46,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:55,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:45,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:56,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:35,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:45,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:56,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:07,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:45,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:47,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:03,71) [ksoftirqd/12]
(root,0,0,00:00:13,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:42,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:53,79) [watchdog/14]
(root,0,0,00:00:32,80) [migration/14]
(root,0,0,00:01:05,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:47,84) [watchdog/15]
(root,0,0,00:00:43,85) [migration/15]
(root,0,0,00:00:17,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:48,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:05,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:42,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:46,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:05,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:41,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:54,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:26,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:41,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:54,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:28,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:41,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:20,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:47,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:39,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:30:39,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,154092,87772,00:59:09,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:25,950) /sbin/auditd
(root,26612,2044,00:04:36,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:49,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:22,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:03:07,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:25,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,650448,54840,00:38:56,1475) /usr/sbin/rsyslogd -n
(root,229156,12980,08:18:08,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:08:00,1477) /usr/sbin/bird
(root,3736772,49572,08:52:52,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:45,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:23:25,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,25464,04:41:22,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:14,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13804,00:06:31,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16136,00:06:36,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:13,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:05,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:56,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,14520,3720,00:00:12,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:39,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2956,00:00:04,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3388,00:00:08,4300) nginx: worker process
(nginx,59904,3808,00:00:11,4301) nginx: worker process
(nginx,59904,3844,00:00:12,4302) nginx: worker process
(nginx,59904,3824,00:00:11,4303) nginx: worker process
(nginx,59904,3888,00:00:11,4304) nginx: worker process
(nginx,59980,4028,00:00:12,4305) nginx: worker process
(nginx,59904,3884,00:00:11,4306) nginx: worker process
(nginx,62056,4476,00:00:11,4307) nginx: worker process
(nginx,62056,4472,00:00:11,4308) nginx: worker process
(nginx,59904,3948,00:00:14,4309) nginx: worker process
(nginx,62060,4572,00:00:14,4310) nginx: worker process
(nginx,62056,4592,00:00:16,4311) nginx: worker process
(nginx,62056,4564,00:00:19,4312) nginx: worker process
(nginx,59984,4080,00:00:24,4313) nginx: worker process
(nginx,62060,4672,00:00:25,4314) nginx: worker process
(nginx,62060,4680,00:00:27,4315) nginx: worker process
(nginx,62060,4680,00:00:32,4316) nginx: worker process
(nginx,62060,4680,00:00:37,4317) nginx: worker process
(nginx,62060,4680,00:00:47,4318) nginx: worker process
(nginx,62056,4676,00:00:57,4319) nginx: worker process
(nginx,62060,4692,00:01:37,4320) nginx: worker process
(nginx,59904,3888,00:00:18,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,6099) [kworker/9:2]
(root,414088,5280,00:00:38,6129) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:15,6148) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,6172) bash /entrypoint.sh
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,11796364,83564,00:20:41,6851) node /app/dist/index.js
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:00,7587) [kworker/u98:1]
(root,0,0,00:00:31,7770) [kworker/9:0]
(root,0,0,00:00:00,9169) [kworker/22:2]
(root,0,0,00:00:08,9325) [kworker/14:0]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,10469) [kworker/7:0]
(root,0,0,00:00:00,10651) [kworker/u98:2]
(root,0,0,00:00:02,10806) [kworker/3:1]
(root,0,0,00:00:00,11410) [kworker/6:0]
(root,0,0,00:00:00,11730) [kworker/6:1]
(root,0,0,00:00:00,11938) [kworker/6:2]
(root,115416,1604,00:00:00,12233) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,12239) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,12240) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:23,15861) [kworker/0:1]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:02:38,19494) [kworker/2:2]
(root,0,0,00:00:00,20331) [kworker/u97:1]
(root,0,0,00:00:00,23227) [kworker/u97:0]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,26395) [kworker/2:1]
(root,0,0,00:00:14,29694) [kworker/u96:0]
(root,0,0,00:00:00,30420) [kworker/10:2]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:00:57,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:01,32783) [kworker/1:0]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:04,37111) [kworker/5:2]
(root,0,0,00:00:29,37317) [kworker/8:0]
(root,0,0,00:00:05,37846) [kworker/15:1]
(root,0,0,00:00:00,38708) [kworker/20:0]
(root,0,0,00:00:16,39926) [kworker/u96:2]
(root,0,0,00:00:07,42001) [kworker/10:0]
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:00,42837) [kworker/0:0]
(root,0,0,00:00:01,44501) [kworker/1:1]
(speedte+,40688,28296,00:49:11,45149) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,45381) [kworker/8:2]
(root,0,0,00:00:55,45873) [kworker/20:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,01:17:30,49082) /usr/bin/monit -I

Found on 2024-12-04 00:10

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94cecb9b2852

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:16:38,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:07,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:21:19,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:01,11) [watchdog/0]
(root,0,0,00:00:50,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:57,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:03:00,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:47,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:55,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:25,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:45,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:54,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:44,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:56,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:33,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:45,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:56,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:05,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:45,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:46,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:03,71) [ksoftirqd/12]
(root,0,0,00:00:12,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:41,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:52,79) [watchdog/14]
(root,0,0,00:00:32,80) [migration/14]
(root,0,0,00:01:04,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:46,84) [watchdog/15]
(root,0,0,00:00:43,85) [migration/15]
(root,0,0,00:00:17,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:47,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:04,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:41,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:46,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:04,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:41,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:54,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:24,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:41,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:53,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:26,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:40,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:20,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:47,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:38,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:29:29,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,162400,101112,00:58:24,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:25,950) /sbin/auditd
(root,26612,2044,00:04:33,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:42,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:22,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:02:25,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:25,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,666940,63320,00:38:28,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,08:12:37,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:55,1477) /usr/sbin/bird
(root,3736772,48172,08:46:53,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:39,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:23:09,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24532,04:38:13,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:14,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,0,0,00:00:00,2062) [kworker/u96:1]
(root,2007796,14604,00:06:27,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15684,00:06:31,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:13,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:05,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:55,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,14520,3720,00:00:06,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:35,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2956,00:00:04,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3376,00:00:08,4300) nginx: worker process
(nginx,59904,3808,00:00:11,4301) nginx: worker process
(nginx,59904,3844,00:00:12,4302) nginx: worker process
(nginx,59904,3824,00:00:11,4303) nginx: worker process
(nginx,59904,3888,00:00:11,4304) nginx: worker process
(nginx,59980,4028,00:00:11,4305) nginx: worker process
(nginx,59904,3876,00:00:11,4306) nginx: worker process
(nginx,62056,4476,00:00:11,4307) nginx: worker process
(nginx,62056,4472,00:00:11,4308) nginx: worker process
(nginx,59904,3948,00:00:13,4309) nginx: worker process
(nginx,62060,4572,00:00:14,4310) nginx: worker process
(nginx,62056,4592,00:00:16,4311) nginx: worker process
(nginx,62056,4564,00:00:19,4312) nginx: worker process
(nginx,59984,4080,00:00:24,4313) nginx: worker process
(nginx,62060,4672,00:00:24,4314) nginx: worker process
(nginx,62060,4680,00:00:27,4315) nginx: worker process
(nginx,62060,4680,00:00:32,4316) nginx: worker process
(nginx,62060,4680,00:00:37,4317) nginx: worker process
(nginx,62060,4680,00:00:46,4318) nginx: worker process
(nginx,62056,4676,00:00:57,4319) nginx: worker process
(nginx,62060,4692,00:01:36,4320) nginx: worker process
(nginx,59904,3888,00:00:18,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:00,5061) [kworker/2:0]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,6099) [kworker/9:2]
(root,414088,5280,00:00:22,6129) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:09,6148) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,6172) bash /entrypoint.sh
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,11796224,82496,00:12:19,6851) node /app/dist/index.js
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:30,7770) [kworker/9:0]
(root,0,0,00:00:00,9169) [kworker/22:2]
(root,0,0,00:00:04,9325) [kworker/14:0]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,10469) [kworker/7:0]
(root,0,0,00:00:00,10651) [kworker/u98:2]
(root,0,0,00:00:01,10806) [kworker/3:1]
(root,0,0,00:00:00,11957) [kworker/u98:1]
(root,0,0,00:00:04,13118) [kworker/8:1]
(root,0,0,00:00:00,13464) [kworker/u97:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15543) [kworker/6:1]
(root,0,0,00:00:22,15615) [kworker/u96:0]
(root,0,0,00:00:00,15857) [kworker/6:2]
(root,0,0,00:00:19,15861) [kworker/0:1]
(root,0,0,00:00:00,15975) [kworker/6:0]
(root,115416,1604,00:00:00,16222) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,16228) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,16229) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:02:26,19494) [kworker/2:2]
(root,0,0,00:00:00,20331) [kworker/u97:1]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:44,29854) [kworker/10:1]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:00:55,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:01,34196) [kworker/1:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:03,37111) [kworker/5:2]
(root,0,0,00:00:26,37317) [kworker/8:0]
(root,0,0,00:00:04,37846) [kworker/15:1]
(root,0,0,00:00:00,38708) [kworker/20:0]
(root,0,0,00:00:02,42001) [kworker/10:0]
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:00,42837) [kworker/0:0]
(speedte+,37608,25324,00:17:59,45149) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:52,45873) [kworker/20:1]
(root,0,0,00:00:02,46041) [kworker/1:0]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,01:11:57,49082) /usr/bin/monit -I

Found on 2024-12-02 01:18

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce52a79fe2

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:16:26,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:05,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:17:31,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:00,11) [watchdog/0]
(root,0,0,00:00:50,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:56,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:58,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:47,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:55,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:23,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:45,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:53,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:44,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:55,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:32,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:44,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:55,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:03,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:44,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:46,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:12,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:41,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:52,79) [watchdog/14]
(root,0,0,00:00:31,80) [migration/14]
(root,0,0,00:01:02,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:46,84) [watchdog/15]
(root,0,0,00:00:42,85) [migration/15]
(root,0,0,00:00:16,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:47,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:04,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:41,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:45,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:04,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:40,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:53,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:23,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:40,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:53,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:25,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:40,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:20,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:46,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:37,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:28:19,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,193760,109284,00:57:38,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:24,950) /sbin/auditd
(root,26612,2044,00:04:31,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:36,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:21,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:01:41,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:25,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,687480,67824,00:37:58,1475) /usr/sbin/rsyslogd -n
(root,229156,12980,08:06:52,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:49,1477) /usr/sbin/bird
(root,3736772,47872,08:40:37,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:33,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:22:52,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24300,04:34:56,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:14,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13900,00:06:22,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15716,00:06:26,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:13,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:05,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3616,00:00:55,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(speedte+,14380,3720,00:00:00,3311) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:01,3322) [kworker/1:0]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:32,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2956,00:00:04,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3376,00:00:08,4300) nginx: worker process
(nginx,59904,3808,00:00:11,4301) nginx: worker process
(nginx,59904,3844,00:00:12,4302) nginx: worker process
(nginx,59904,3824,00:00:11,4303) nginx: worker process
(nginx,59904,3888,00:00:10,4304) nginx: worker process
(nginx,59980,4000,00:00:11,4305) nginx: worker process
(nginx,59904,3876,00:00:11,4306) nginx: worker process
(nginx,62056,4476,00:00:11,4307) nginx: worker process
(nginx,62056,4464,00:00:11,4308) nginx: worker process
(nginx,59904,3948,00:00:13,4309) nginx: worker process
(nginx,62060,4572,00:00:14,4310) nginx: worker process
(nginx,62056,4592,00:00:16,4311) nginx: worker process
(nginx,62056,4564,00:00:18,4312) nginx: worker process
(nginx,59984,4080,00:00:24,4313) nginx: worker process
(nginx,62060,4672,00:00:24,4314) nginx: worker process
(nginx,62060,4672,00:00:26,4315) nginx: worker process
(nginx,62060,4672,00:00:30,4316) nginx: worker process
(nginx,62060,4680,00:00:36,4317) nginx: worker process
(nginx,62060,4680,00:00:45,4318) nginx: worker process
(nginx,62056,4676,00:00:55,4319) nginx: worker process
(nginx,62060,4692,00:01:34,4320) nginx: worker process
(nginx,59904,3888,00:00:18,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:00,5061) [kworker/2:0]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,5471) [kworker/u98:0]
(root,0,0,00:00:00,6099) [kworker/9:2]
(root,414088,5252,00:00:06,6129) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,0,0,00:00:00,6144) [kworker/u97:2]
(root,2364,368,00:00:02,6148) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,6172) bash /entrypoint.sh
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,11794972,78912,00:03:28,6851) node /app/dist/index.js
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:29,7770) [kworker/9:0]
(root,0,0,00:00:00,9169) [kworker/22:2]
(root,0,0,00:00:01,9325) [kworker/14:0]
(speedte+,4600016,267092,00:19:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:05,10469) [kworker/7:0]
(root,0,0,00:00:00,10598) [kworker/u96:0]
(root,0,0,00:00:01,10806) [kworker/3:1]
(root,0,0,00:00:00,13118) [kworker/8:1]
(root,0,0,00:00:14,14792) [kworker/u96:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15792) [kworker/6:1]
(root,0,0,00:00:15,15861) [kworker/0:1]
(root,0,0,00:00:00,16092) [kworker/6:2]
(root,0,0,00:00:00,16260) [kworker/6:0]
(root,115416,1608,00:00:00,16515) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,16521) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,16522) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:02:13,19494) [kworker/2:2]
(root,0,0,00:00:00,21815) [kworker/u98:1]
(root,0,0,00:00:00,23334) [kworker/u97:0]
(root,0,0,00:00:13,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:43,29854) [kworker/10:1]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:00:52,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:03,37111) [kworker/5:2]
(root,0,0,00:00:25,37317) [kworker/8:0]
(speedte+,38784,26712,00:42:15,37428) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:04,37846) [kworker/15:1]
(root,0,0,00:00:00,38708) [kworker/20:0]
(root,0,0,00:00:00,42346) [kworker/5:0]
(root,0,0,00:00:00,42837) [kworker/0:0]
(root,0,0,00:00:00,43313) [kworker/10:2]
(root,0,0,00:00:00,44487) [kworker/1:1]
(root,0,0,00:00:48,45873) [kworker/20:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,01:06:09,49082) /usr/bin/monit -I

Found on 2024-11-30 00:22

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce358c954b

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:16:14,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:03,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:13:35,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:00,11) [watchdog/0]
(root,0,0,00:00:49,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:56,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:56,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:46,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:54,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:21,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:44,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:53,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:43,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:54,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:30,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:44,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:54,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:01,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:44,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:45,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:12,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:40,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:51,79) [watchdog/14]
(root,0,0,00:00:31,80) [migration/14]
(root,0,0,00:01:00,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:45,84) [watchdog/15]
(root,0,0,00:00:42,85) [migration/15]
(root,0,0,00:00:16,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:46,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:04,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:41,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:45,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:04,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:40,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:52,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:21,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:40,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:52,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:23,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:40,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:20,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:46,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:37,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:27:09,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,39060,7480,00:56:52,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:24,950) /sbin/auditd
(root,26612,2044,00:04:28,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:29,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:21,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:00:59,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:24,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1334) [kworker/u96:2]
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,544080,6808,00:37:29,1475) /usr/sbin/rsyslogd -n
(root,229084,12908,08:01:13,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:43,1477) /usr/sbin/bird
(root,3736772,46804,08:34:29,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:26,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:22:35,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,25152,04:31:42,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:14,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14420,00:06:17,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16176,00:06:21,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:12,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:05,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:54,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:28,4130) [kworker/4:0]
(root,0,0,00:00:01,4206) [kworker/1:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2956,00:00:04,4298) nginx: worker process
(nginx,59904,2904,00:00:06,4299) nginx: worker process
(nginx,59904,3376,00:00:08,4300) nginx: worker process
(nginx,59904,3668,00:00:11,4301) nginx: worker process
(nginx,59904,3844,00:00:11,4302) nginx: worker process
(nginx,59904,3824,00:00:10,4303) nginx: worker process
(nginx,59904,3888,00:00:10,4304) nginx: worker process
(nginx,59980,4000,00:00:11,4305) nginx: worker process
(nginx,59904,3876,00:00:10,4306) nginx: worker process
(nginx,62056,4476,00:00:11,4307) nginx: worker process
(nginx,62056,4464,00:00:11,4308) nginx: worker process
(nginx,59904,3948,00:00:13,4309) nginx: worker process
(nginx,62060,4572,00:00:14,4310) nginx: worker process
(nginx,62056,4592,00:00:16,4311) nginx: worker process
(nginx,62056,4564,00:00:18,4312) nginx: worker process
(nginx,59984,4080,00:00:23,4313) nginx: worker process
(nginx,62060,4672,00:00:23,4314) nginx: worker process
(nginx,62060,4672,00:00:26,4315) nginx: worker process
(nginx,62060,4672,00:00:30,4316) nginx: worker process
(nginx,62060,4676,00:00:35,4317) nginx: worker process
(nginx,62060,4676,00:00:44,4318) nginx: worker process
(nginx,62056,4668,00:00:54,4319) nginx: worker process
(nginx,62060,4688,00:01:34,4320) nginx: worker process
(nginx,59904,3888,00:00:17,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:28,7770) [kworker/9:0]
(speedte+,3012620,175064,00:09:17,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:04,10469) [kworker/7:0]
(root,0,0,00:00:01,10806) [kworker/3:1]
(root,0,0,00:00:01,11420) [kworker/8:2]
(root,0,0,00:00:00,12385) [kworker/u98:0]
(root,0,0,00:00:00,12937) [kworker/u97:1]
(root,0,0,00:00:00,14202) [kworker/9:1]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:12,15861) [kworker/0:1]
(root,0,0,00:00:00,16795) [kworker/u98:1]
(root,0,0,00:00:00,18339) [kworker/22:2]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:02:00,19494) [kworker/2:2]
(root,0,0,00:00:00,21948) [kworker/5:1]
(root,0,0,00:00:11,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,25397) [kworker/6:1]
(root,0,0,00:00:00,26131) [kworker/6:2]
(root,0,0,00:00:00,26561) [kworker/6:0]
(speedte+,14380,3596,00:00:00,26605) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,115416,1604,00:00:00,26767) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,26773) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,26774) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:39,29854) [kworker/10:1]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:00:50,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:03,37111) [kworker/5:2]
(root,0,0,00:00:00,37235) [kworker/1:2]
(root,0,0,00:00:22,37317) [kworker/8:0]
(speedte+,35164,23612,00:11:41,37428) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:04,37846) [kworker/15:1]
(root,0,0,00:00:00,38708) [kworker/20:0]
(root,0,0,00:00:00,42130) [kworker/14:2]
(root,0,0,00:00:00,42837) [kworker/0:0]
(root,0,0,00:00:00,43313) [kworker/10:2]
(root,414088,5280,00:00:45,44046) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,372,00:00:18,44065) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,44089) bash /entrypoint.sh
(root,11795888,81916,00:24:45,44772) node /app/dist/index.js
(root,0,0,00:00:46,45873) [kworker/20:1]
(root,0,0,00:00:05,47677) [kworker/u96:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48093) [kworker/u97:0]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,0,0,00:00:22,48781) [kworker/2:1]
(root,133584,4288,01:00:30,49082) /usr/bin/monit -I

Found on 2024-11-28 00:46

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ceb5c91e87

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:16:03,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:01,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:09:38,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:59,11) [watchdog/0]
(root,0,0,00:00:49,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:55,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:54,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:46,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:54,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:19,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:44,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:52,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:43,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:54,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:27,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:43,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:54,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:00,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:43,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:45,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:11,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:40,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:50,79) [watchdog/14]
(root,0,0,00:00:31,80) [migration/14]
(root,0,0,00:00:57,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:45,84) [watchdog/15]
(root,0,0,00:00:41,85) [migration/15]
(root,0,0,00:00:16,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:45,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:03,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:40,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:44,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:04,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:39,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:52,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:19,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:39,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:51,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:21,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:39,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:20,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:45,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:01,328) [kworker/17:1]
(root,0,0,00:00:36,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:25:57,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,55444,16424,00:56:06,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:24,950) /sbin/auditd
(root,26612,2044,00:04:25,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:22,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:21,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,01:00:15,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:24,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,560464,12420,00:37:00,1475) /usr/sbin/rsyslogd -n
(root,229084,12908,07:55:31,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:38,1477) /usr/sbin/bird
(root,3736772,51504,08:28:19,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:20,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:22:18,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,23660,04:28:25,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:14,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14380,00:06:12,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15776,00:06:16,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:12,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:04,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3664,00:00:54,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:06,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:06,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:24,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:04,4298) nginx: worker process
(nginx,59904,2488,00:00:06,4299) nginx: worker process
(nginx,59904,3376,00:00:07,4300) nginx: worker process
(nginx,59904,3668,00:00:10,4301) nginx: worker process
(nginx,59904,3844,00:00:11,4302) nginx: worker process
(nginx,59904,3824,00:00:10,4303) nginx: worker process
(nginx,59904,3880,00:00:10,4304) nginx: worker process
(nginx,59980,4000,00:00:11,4305) nginx: worker process
(nginx,59904,3876,00:00:10,4306) nginx: worker process
(nginx,62056,4460,00:00:11,4307) nginx: worker process
(nginx,62056,4464,00:00:10,4308) nginx: worker process
(nginx,59904,3944,00:00:12,4309) nginx: worker process
(nginx,62060,4572,00:00:13,4310) nginx: worker process
(nginx,62056,4592,00:00:15,4311) nginx: worker process
(nginx,62056,4564,00:00:17,4312) nginx: worker process
(nginx,59984,4080,00:00:23,4313) nginx: worker process
(nginx,62060,4672,00:00:23,4314) nginx: worker process
(nginx,62060,4672,00:00:25,4315) nginx: worker process
(nginx,62060,4672,00:00:29,4316) nginx: worker process
(nginx,62060,4676,00:00:34,4317) nginx: worker process
(nginx,62060,4676,00:00:42,4318) nginx: worker process
(nginx,62056,4668,00:00:52,4319) nginx: worker process
(nginx,62060,4688,00:01:28,4320) nginx: worker process
(nginx,59904,3888,00:00:17,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:27,7770) [kworker/9:0]
(speedte+,1147260,68476,00:02:05,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:04,10469) [kworker/7:0]
(root,0,0,00:00:01,10806) [kworker/3:1]
(root,0,0,00:00:00,11420) [kworker/8:2]
(root,0,0,00:00:00,14821) [kworker/6:1]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15545) [kworker/6:2]
(root,0,0,00:00:08,15861) [kworker/0:1]
(root,0,0,00:00:00,15992) [kworker/6:0]
(speedte+,14380,3596,00:00:00,16046) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,115416,1604,00:00:00,16210) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,16216) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,16217) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,18339) [kworker/22:2]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:01:47,19494) [kworker/2:2]
(root,0,0,00:00:00,21948) [kworker/5:1]
(root,0,0,00:00:07,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,27485) [kworker/1:0]
(root,0,0,00:00:34,29854) [kworker/10:1]
(root,0,0,00:00:00,30147) [kworker/u97:0]
(speedte+,35640,23936,00:11:13,30398) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:00,31699) [kworker/15:0]
(root,0,0,00:00:47,31715) [kworker/22:1]
(speedte+,16180,5756,00:00:40,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,32802) [kworker/u98:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:02,37111) [kworker/5:2]
(root,0,0,00:00:19,37317) [kworker/8:0]
(root,0,0,00:00:03,37846) [kworker/15:1]
(root,0,0,00:00:00,38708) [kworker/20:0]
(root,0,0,00:00:00,42130) [kworker/14:2]
(root,0,0,00:00:01,42738) [kworker/1:2]
(root,0,0,00:00:00,42837) [kworker/0:0]
(root,0,0,00:00:00,43173) [kworker/u98:2]
(root,0,0,00:00:00,43313) [kworker/10:2]
(root,0,0,00:00:14,43607) [kworker/u96:0]
(root,0,0,00:00:00,44016) [kworker/9:2]
(root,414088,5280,00:00:30,44046) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,372,00:00:12,44065) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,44089) bash /entrypoint.sh
(root,11796144,81400,00:16:12,44772) node /app/dist/index.js
(root,0,0,00:00:00,45228) [kworker/u96:2]
(root,0,0,00:00:00,45784) [kworker/u97:1]
(root,0,0,00:00:43,45873) [kworker/20:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,0,0,00:00:22,48781) [kworker/2:1]
(root,133584,4288,00:54:49,49082) /usr/bin/monit -I

Found on 2024-11-26 00:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ceaf713054

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:15:51,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:59,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:05:50,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:58,11) [watchdog/0]
(root,0,0,00:00:48,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:54,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:52,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:45,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:53,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:17,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:43,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:51,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:25,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:42,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:53,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:26,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:43,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:53,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:58,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:43,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:44,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:11,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:39,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:50,79) [watchdog/14]
(root,0,0,00:00:30,80) [migration/14]
(root,0,0,00:00:56,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:44,84) [watchdog/15]
(root,0,0,00:00:41,85) [migration/15]
(root,0,0,00:00:15,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:45,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:03,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:40,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:44,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:04,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:39,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:51,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:18,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:39,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:51,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:20,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:39,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:19,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:45,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:36,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:24:45,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,71828,26108,00:55:21,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:24,950) /sbin/auditd
(root,26612,2044,00:04:22,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:15,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:21,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:59:32,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:24,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,576848,18084,00:36:31,1475) /usr/sbin/rsyslogd -n
(root,229156,12980,07:49:49,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:32,1477) /usr/sbin/bird
(root,3736772,46868,08:22:08,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:13,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:22:02,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24188,04:25:10,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:14,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14420,00:06:07,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16648,00:06:11,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:12,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:04,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3664,00:00:53,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:20,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:04,4298) nginx: worker process
(nginx,59904,2488,00:00:05,4299) nginx: worker process
(nginx,59904,3376,00:00:07,4300) nginx: worker process
(nginx,59904,3668,00:00:10,4301) nginx: worker process
(nginx,59904,3796,00:00:11,4302) nginx: worker process
(nginx,59904,3824,00:00:10,4303) nginx: worker process
(nginx,59904,3880,00:00:10,4304) nginx: worker process
(nginx,59980,4000,00:00:10,4305) nginx: worker process
(nginx,59904,3876,00:00:10,4306) nginx: worker process
(nginx,62056,4460,00:00:10,4307) nginx: worker process
(nginx,62056,4464,00:00:10,4308) nginx: worker process
(nginx,59904,3944,00:00:12,4309) nginx: worker process
(nginx,62060,4572,00:00:13,4310) nginx: worker process
(nginx,62056,4592,00:00:15,4311) nginx: worker process
(nginx,62056,4544,00:00:17,4312) nginx: worker process
(nginx,59984,4080,00:00:22,4313) nginx: worker process
(nginx,62060,4672,00:00:22,4314) nginx: worker process
(nginx,62060,4672,00:00:24,4315) nginx: worker process
(nginx,62060,4672,00:00:28,4316) nginx: worker process
(nginx,62060,4676,00:00:33,4317) nginx: worker process
(nginx,62060,4676,00:00:41,4318) nginx: worker process
(nginx,62056,4668,00:00:49,4319) nginx: worker process
(nginx,62060,4688,00:01:25,4320) nginx: worker process
(nginx,59904,3888,00:00:16,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:26,7770) [kworker/9:0]
(speedte+,14800,3776,00:00:39,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:03,10469) [kworker/7:0]
(root,0,0,00:00:01,10806) [kworker/3:1]
(root,0,0,00:00:03,13404) [kworker/8:1]
(root,0,0,00:00:29,14952) [kworker/0:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:04,15861) [kworker/0:1]
(root,0,0,00:00:00,18339) [kworker/22:2]
(root,0,0,00:00:00,18898) [kworker/11:1]
(root,0,0,00:00:04,18899) [kworker/1:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:01:45,19494) [kworker/2:2]
(root,0,0,00:00:00,21948) [kworker/5:1]
(root,0,0,00:00:01,22072) [kworker/1:0]
(root,0,0,00:00:04,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,26249) [kworker/u96:1]
(root,0,0,00:00:30,29854) [kworker/10:1]
(root,0,0,00:01:06,30496) [kworker/u96:0]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:45,31715) [kworker/22:1]
(speedte+,14800,2536,00:00:38,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,33247) [kworker/u97:1]
(root,0,0,00:00:00,34008) [kworker/u98:0]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,35597) [kworker/u97:2]
(root,0,0,00:00:02,37111) [kworker/5:2]
(root,0,0,00:00:16,37317) [kworker/8:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:02,37846) [kworker/15:1]
(root,0,0,00:00:00,39472) [kworker/u98:1]
(root,0,0,00:00:00,40043) [kworker/20:2]
(root,0,0,00:00:00,41808) [kworker/6:0]
(root,0,0,00:00:00,42130) [kworker/14:2]
(root,0,0,00:00:00,42198) [kworker/6:1]
(root,0,0,00:00:00,42553) [kworker/6:2]
(root,115416,1604,00:00:00,42554) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,42561) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,42562) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,43313) [kworker/10:2]
(root,0,0,00:00:00,44016) [kworker/9:2]
(root,414088,5280,00:00:14,44046) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,372,00:00:05,44065) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,44089) bash /entrypoint.sh
(root,11795580,80156,00:07:41,44772) node /app/dist/index.js
(root,0,0,00:00:41,45873) [kworker/20:1]
(speedte+,43012,29784,02:16:40,46203) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,0,0,00:00:11,48781) [kworker/2:1]
(root,133584,4288,00:49:07,49082) /usr/bin/monit -I

Found on 2024-11-24 00:30

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce7a9ca05e

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:15:39,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:57,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:01:50,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:57,11) [watchdog/0]
(root,0,0,00:00:48,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:01,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:54,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:50,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:45,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:52,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:16,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:43,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:51,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:24,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:42,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:52,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:24,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:42,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:52,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:56,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:42,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:44,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:11,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:39,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:49,79) [watchdog/14]
(root,0,0,00:00:30,80) [migration/14]
(root,0,0,00:00:54,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:44,84) [watchdog/15]
(root,0,0,00:00:40,85) [migration/15]
(root,0,0,00:00:15,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:44,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:03,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:39,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:43,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:04,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:38,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:51,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:16,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:38,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:50,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:18,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:38,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:19,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:44,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:05,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:35,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:23:31,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,0,0,00:00:00,648) [kworker/u97:2]
(root,88212,35820,00:54:35,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:23,950) /sbin/auditd
(root,26612,2044,00:04:19,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:08,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:21,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:58:49,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:24,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,593232,23736,00:36:01,1475) /usr/sbin/rsyslogd -n
(root,229188,12876,07:44:08,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:27,1477) /usr/sbin/bird
(root,3736772,47656,08:15:57,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:06,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:21:46,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,0,0,00:00:00,1712) [kworker/2:0]
(root,2472492,24456,04:21:55,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:13,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14420,00:06:02,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16452,00:06:06,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:12,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:04,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:52,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:17,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:04,4298) nginx: worker process
(nginx,59904,2488,00:00:05,4299) nginx: worker process
(nginx,59904,3376,00:00:07,4300) nginx: worker process
(nginx,59904,3668,00:00:10,4301) nginx: worker process
(nginx,59904,3796,00:00:10,4302) nginx: worker process
(nginx,59904,3800,00:00:09,4303) nginx: worker process
(nginx,59904,3880,00:00:09,4304) nginx: worker process
(nginx,59980,4000,00:00:10,4305) nginx: worker process
(nginx,59904,3876,00:00:09,4306) nginx: worker process
(nginx,62056,4460,00:00:10,4307) nginx: worker process
(nginx,62056,4464,00:00:09,4308) nginx: worker process
(nginx,59904,3944,00:00:11,4309) nginx: worker process
(nginx,62060,4572,00:00:12,4310) nginx: worker process
(nginx,62056,4592,00:00:14,4311) nginx: worker process
(nginx,62056,4544,00:00:16,4312) nginx: worker process
(nginx,59984,4076,00:00:21,4313) nginx: worker process
(nginx,62060,4672,00:00:20,4314) nginx: worker process
(nginx,62060,4672,00:00:23,4315) nginx: worker process
(nginx,62060,4672,00:00:27,4316) nginx: worker process
(nginx,62060,4672,00:00:30,4317) nginx: worker process
(nginx,62060,4672,00:00:38,4318) nginx: worker process
(nginx,62056,4668,00:00:47,4319) nginx: worker process
(nginx,62060,4684,00:01:20,4320) nginx: worker process
(nginx,59904,3888,00:00:16,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:25,7770) [kworker/9:0]
(speedte+,14800,3776,00:00:33,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:03,10469) [kworker/7:0]
(root,0,0,00:00:00,10806) [kworker/3:1]
(root,0,0,00:00:00,11872) [kworker/11:0]
(root,0,0,00:00:29,14952) [kworker/0:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15861) [kworker/0:1]
(root,0,0,00:00:01,16829) [kworker/1:0]
(root,0,0,00:00:00,18339) [kworker/22:2]
(root,0,0,00:00:00,18755) [kworker/14:0]
(root,0,0,00:00:00,18954) [kworker/u98:2]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:01:43,19494) [kworker/2:2]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:00,21948) [kworker/5:1]
(root,0,0,00:00:00,24077) [kworker/14:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,489228,5320,00:01:00,26830) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:24,26850) /usr/bin/tini -- /entrypoint.sh
(root,4016,1720,00:00:00,26874) bash /entrypoint.sh
(root,11796528,83468,00:31:10,27559) node /app/dist/index.js
(root,0,0,00:00:00,27694) [kworker/u98:0]
(root,0,0,00:00:00,28372) [kworker/9:1]
(root,0,0,00:00:00,29366) [kworker/u96:2]
(root,0,0,00:00:25,29854) [kworker/10:1]
(root,0,0,00:00:23,30496) [kworker/u96:0]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:42,31715) [kworker/22:1]
(speedte+,14800,2536,00:00:33,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,32889) [kworker/6:0]
(root,0,0,00:00:00,33260) [kworker/6:2]
(root,0,0,00:00:00,33407) [kworker/6:1]
(root,115416,1604,00:00:00,33717) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,33723) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,33724) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,34763) [kworker/u97:0]
(root,0,0,00:00:02,37111) [kworker/5:2]
(root,0,0,00:00:15,37317) [kworker/8:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:02,37846) [kworker/15:1]
(root,0,0,00:00:02,42802) [kworker/8:1]
(root,0,0,00:00:00,43313) [kworker/10:2]
(root,0,0,00:00:38,45873) [kworker/20:1]
(speedte+,41276,28704,01:42:16,46203) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:01,46832) [kworker/1:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,00:43:24,49082) /usr/bin/monit -I

Found on 2024-11-22 00:10

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce121098d0

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:15:28,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:55,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:58:02,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:57,11) [watchdog/0]
(root,0,0,00:00:47,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:53,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:48,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:44,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:52,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:16,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:42,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:50,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:22,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:41,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:52,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:22,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:42,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:52,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:54,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:42,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:43,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:11,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:38,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:48,79) [watchdog/14]
(root,0,0,00:00:30,80) [migration/14]
(root,0,0,00:00:52,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:43,84) [watchdog/15]
(root,0,0,00:00:40,85) [migration/15]
(root,0,0,00:00:15,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:44,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:03,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:39,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:42,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:04,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:38,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:50,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:15,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:38,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:50,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:16,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:38,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:19,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:43,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:35,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:22:22,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,0,0,00:00:00,648) [kworker/u97:2]
(root,100552,47376,00:53:50,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:23,950) /sbin/auditd
(root,26612,2044,00:04:16,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:10:02,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:21,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:58:07,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:23,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,662464,30424,00:35:32,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,07:38:35,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:21,1477) /usr/sbin/bird
(root,3736772,47668,08:09:56,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:09:00,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:21:30,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,0,0,00:00:00,1712) [kworker/2:0]
(root,2472492,24488,04:18:45,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:13,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,15048,00:05:58,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,14972,00:06:01,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:12,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:04,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3616,00:00:52,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:15,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:03,4298) nginx: worker process
(nginx,59904,2484,00:00:05,4299) nginx: worker process
(nginx,59904,3376,00:00:07,4300) nginx: worker process
(nginx,59904,3668,00:00:09,4301) nginx: worker process
(nginx,59904,3796,00:00:10,4302) nginx: worker process
(nginx,59904,3800,00:00:09,4303) nginx: worker process
(nginx,59904,3880,00:00:09,4304) nginx: worker process
(nginx,59980,4000,00:00:09,4305) nginx: worker process
(nginx,59904,3876,00:00:09,4306) nginx: worker process
(nginx,62056,4460,00:00:09,4307) nginx: worker process
(nginx,62056,4424,00:00:09,4308) nginx: worker process
(nginx,59904,3944,00:00:11,4309) nginx: worker process
(nginx,62060,4572,00:00:11,4310) nginx: worker process
(nginx,62056,4592,00:00:13,4311) nginx: worker process
(nginx,62056,4536,00:00:15,4312) nginx: worker process
(nginx,59984,4076,00:00:19,4313) nginx: worker process
(nginx,62060,4672,00:00:19,4314) nginx: worker process
(nginx,62060,4672,00:00:22,4315) nginx: worker process
(nginx,62060,4672,00:00:26,4316) nginx: worker process
(nginx,62060,4668,00:00:28,4317) nginx: worker process
(nginx,62060,4672,00:00:36,4318) nginx: worker process
(nginx,62056,4668,00:00:44,4319) nginx: worker process
(nginx,62060,4684,00:01:15,4320) nginx: worker process
(nginx,59904,3888,00:00:15,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:01,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:24,7770) [kworker/9:0]
(speedte+,14800,3776,00:00:27,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:03,10469) [kworker/7:0]
(root,0,0,00:00:00,10806) [kworker/3:1]
(root,0,0,00:00:00,11872) [kworker/11:0]
(root,0,0,00:00:01,14563) [kworker/1:2]
(root,0,0,00:00:26,14952) [kworker/0:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15383) [kworker/0:0]
(root,0,0,00:00:00,16785) [kworker/1:0]
(root,0,0,00:00:00,18339) [kworker/22:2]
(root,0,0,00:00:00,18755) [kworker/14:0]
(root,0,0,00:00:00,18954) [kworker/u98:2]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:01:30,19494) [kworker/2:2]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:00,21948) [kworker/5:1]
(root,0,0,00:00:24,22517) [kworker/14:2]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,489228,5320,00:00:43,26830) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:17,26850) /usr/bin/tini -- /entrypoint.sh
(root,4016,1720,00:00:00,26874) bash /entrypoint.sh
(root,11796004,79904,00:22:49,27559) node /app/dist/index.js
(root,0,0,00:00:59,28926) [kworker/u96:2]
(root,0,0,00:00:20,29854) [kworker/10:1]
(root,0,0,00:00:00,30965) [kworker/u97:1]
(root,0,0,00:00:00,31161) [kworker/4:2]
(root,0,0,00:00:39,31715) [kworker/22:1]
(speedte+,14800,2536,00:00:28,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,32880) [kworker/6:1]
(root,0,0,00:00:00,33129) [kworker/6:2]
(root,0,0,00:00:00,33456) [kworker/6:0]
(root,115416,1604,00:00:00,33779) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,33785) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,33786) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,35606) [kworker/u98:1]
(root,0,0,00:00:02,37111) [kworker/5:2]
(root,0,0,00:00:12,37317) [kworker/8:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:00,37634) [kworker/u96:1]
(root,0,0,00:00:02,37846) [kworker/15:1]
(root,0,0,00:00:01,42802) [kworker/8:1]
(root,0,0,00:00:00,43313) [kworker/10:2]
(root,0,0,00:00:35,45873) [kworker/20:1]
(speedte+,40808,27412,01:10:19,46203) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,00:37:50,49082) /usr/bin/monit -I

Found on 2024-11-20 01:01

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce36ada8d9

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:15:16,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:53,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:54:08,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:56,11) [watchdog/0]
(root,0,0,00:00:46,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:52,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:46,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:44,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:51,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:15,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:42,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:50,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:21,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:41,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:51,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:20,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:41,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:51,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:53,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:41,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:43,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:11,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:38,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:48,79) [watchdog/14]
(root,0,0,00:00:29,80) [migration/14]
(root,0,0,00:00:51,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:43,84) [watchdog/15]
(root,0,0,00:00:39,85) [migration/15]
(root,0,0,00:00:15,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:43,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:38,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:42,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:03,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:37,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:49,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:13,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:37,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:49,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:15,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:37,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:19,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:43,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:34,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:21:08,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,112752,54740,00:53:03,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:23,950) /sbin/auditd
(root,26612,2044,00:04:13,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:54,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:20,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:57:23,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:23,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,650116,34392,00:35:02,1475) /usr/sbin/rsyslogd -n
(root,229156,12980,07:32:48,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:15,1477) /usr/sbin/bird
(root,3736772,46608,08:03:41,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:53,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:21:14,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24752,04:15:28,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:13,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14324,00:05:53,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16324,00:05:55,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:12,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:04,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17620,3600,00:00:51,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:13,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:03,4298) nginx: worker process
(nginx,59904,2484,00:00:05,4299) nginx: worker process
(nginx,59904,3376,00:00:06,4300) nginx: worker process
(nginx,59904,3668,00:00:09,4301) nginx: worker process
(nginx,59904,3796,00:00:09,4302) nginx: worker process
(nginx,59904,3800,00:00:08,4303) nginx: worker process
(nginx,59904,3880,00:00:08,4304) nginx: worker process
(nginx,59980,3888,00:00:09,4305) nginx: worker process
(nginx,59904,3876,00:00:09,4306) nginx: worker process
(nginx,62056,4460,00:00:09,4307) nginx: worker process
(nginx,62056,4424,00:00:09,4308) nginx: worker process
(nginx,59904,3944,00:00:10,4309) nginx: worker process
(nginx,62060,4556,00:00:11,4310) nginx: worker process
(nginx,62056,4592,00:00:13,4311) nginx: worker process
(nginx,62056,4536,00:00:14,4312) nginx: worker process
(nginx,59984,3984,00:00:19,4313) nginx: worker process
(nginx,62060,4672,00:00:19,4314) nginx: worker process
(nginx,62060,4672,00:00:20,4315) nginx: worker process
(nginx,62060,4672,00:00:25,4316) nginx: worker process
(nginx,62060,4668,00:00:27,4317) nginx: worker process
(nginx,62060,4672,00:00:35,4318) nginx: worker process
(nginx,62056,4668,00:00:43,4319) nginx: worker process
(nginx,62060,4684,00:01:14,4320) nginx: worker process
(nginx,59904,3888,00:00:14,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6334) [kworker/u97:2]
(root,0,0,00:00:00,6455) [kworker/2:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7256) [kworker/u98:0]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:23,7770) [kworker/9:0]
(root,0,0,00:00:00,8739) [kworker/u98:2]
(speedte+,14800,3776,00:00:21,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:03,10469) [kworker/7:0]
(root,0,0,00:00:00,10806) [kworker/3:1]
(root,0,0,00:00:21,14952) [kworker/0:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15383) [kworker/0:0]
(root,0,0,00:00:00,18339) [kworker/22:2]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:01:17,19494) [kworker/2:2]
(root,0,0,00:00:00,19642) [kworker/6:0]
(root,0,0,00:00:00,20044) [kworker/6:1]
(root,0,0,00:00:00,20325) [kworker/6:2]
(root,115416,1608,00:00:00,20897) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,20903) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,20904) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:04,21525) [kworker/1:0]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:00,21948) [kworker/5:1]
(root,0,0,00:00:20,22517) [kworker/14:2]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,489228,5320,00:00:27,26830) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:10,26850) /usr/bin/tini -- /entrypoint.sh
(root,4016,1720,00:00:00,26874) bash /entrypoint.sh
(root,11796640,79892,00:14:07,27559) node /app/dist/index.js
(root,0,0,00:00:14,28926) [kworker/u96:2]
(root,0,0,00:00:00,29230) [kworker/u96:0]
(root,0,0,00:00:16,29854) [kworker/10:1]
(root,0,0,00:00:36,31715) [kworker/22:1]
(speedte+,14800,2536,00:00:23,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:01:05,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:01,37111) [kworker/5:2]
(root,0,0,00:00:08,37317) [kworker/8:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:01,37846) [kworker/15:1]
(root,0,0,00:00:00,39264) [kworker/u97:0]
(root,0,0,00:00:00,42446) [kworker/4:1]
(root,0,0,00:00:00,42802) [kworker/8:1]
(root,0,0,00:00:00,43313) [kworker/10:2]
(root,0,0,00:00:32,45873) [kworker/20:1]
(speedte+,37812,25788,00:37:22,46203) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,47130) [kworker/11:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,0,0,00:00:00,48671) [kworker/1:2]
(root,133720,4296,00:32:03,49082) /usr/bin/monit -I

Found on 2024-11-18 00:00

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce16e1583e

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:15:05,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:52,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:50:21,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:55,11) [watchdog/0]
(root,0,0,00:00:46,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:52,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:44,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:43,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:50,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:15,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:41,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:49,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:20,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:40,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:50,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:18,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:41,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:50,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:51,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:41,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:42,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:10,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:37,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:47,79) [watchdog/14]
(root,0,0,00:00:29,80) [migration/14]
(root,0,0,00:00:49,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:42,84) [watchdog/15]
(root,0,0,00:00:39,85) [migration/15]
(root,0,0,00:00:15,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:43,89) [watchdog/16]
(root,0,0,00:00:06,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:38,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:41,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:03,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:37,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:49,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:12,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:37,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:48,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:13,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:37,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:18,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:42,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:34,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:05,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:19:56,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,125412,63104,00:52:16,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:22,950) /sbin/auditd
(root,26612,2044,00:04:10,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:47,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:20,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:56:40,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:23,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,666204,39584,00:34:33,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,07:27:09,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:10,1477) /usr/sbin/bird
(root,3736772,47624,07:57:34,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:46,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:20:57,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,23720,04:12:14,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:13,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14616,00:05:48,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15740,00:05:50,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:11,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:04,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3640,00:00:51,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:02,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:12,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:03,4298) nginx: worker process
(nginx,59904,2484,00:00:04,4299) nginx: worker process
(nginx,59904,3376,00:00:06,4300) nginx: worker process
(nginx,59904,3668,00:00:08,4301) nginx: worker process
(nginx,59904,3796,00:00:09,4302) nginx: worker process
(nginx,59904,3800,00:00:08,4303) nginx: worker process
(nginx,59904,3880,00:00:08,4304) nginx: worker process
(nginx,59980,3888,00:00:09,4305) nginx: worker process
(nginx,59904,3840,00:00:08,4306) nginx: worker process
(nginx,62056,4460,00:00:09,4307) nginx: worker process
(nginx,62056,4424,00:00:08,4308) nginx: worker process
(nginx,59904,3944,00:00:10,4309) nginx: worker process
(nginx,62060,4556,00:00:10,4310) nginx: worker process
(nginx,62056,4592,00:00:12,4311) nginx: worker process
(nginx,62056,4536,00:00:13,4312) nginx: worker process
(nginx,59984,3984,00:00:18,4313) nginx: worker process
(nginx,62060,4672,00:00:18,4314) nginx: worker process
(nginx,62060,4672,00:00:20,4315) nginx: worker process
(nginx,62060,4672,00:00:24,4316) nginx: worker process
(nginx,62060,4668,00:00:26,4317) nginx: worker process
(nginx,62060,4672,00:00:34,4318) nginx: worker process
(nginx,62056,4668,00:00:42,4319) nginx: worker process
(nginx,62060,4676,00:01:13,4320) nginx: worker process
(nginx,59904,3888,00:00:14,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:01:02,5117) [kworker/u96:1]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6334) [kworker/u97:2]
(root,0,0,00:00:00,6455) [kworker/2:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:00,7508) [kworker/4:2]
(root,0,0,00:00:22,7770) [kworker/9:0]
(speedte+,14800,3776,00:00:16,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:03,10469) [kworker/7:0]
(root,0,0,00:00:00,10806) [kworker/3:1]
(root,0,0,00:00:17,14952) [kworker/0:2]
(root,0,0,00:00:00,15218) [kworker/7:1]
(root,0,0,00:00:00,15383) [kworker/0:0]
(root,0,0,00:00:00,18339) [kworker/22:2]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19073) [kworker/u96:0]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:01:04,19494) [kworker/2:2]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:00,21948) [kworker/5:1]
(root,0,0,00:00:17,22517) [kworker/14:2]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:01,25507) [kworker/1:2]
(root,489228,5272,00:00:09,26830) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:03,26850) /usr/bin/tini -- /entrypoint.sh
(root,4016,1720,00:00:00,26874) bash /entrypoint.sh
(root,11794156,74212,00:05:20,27559) node /app/dist/index.js
(root,0,0,00:00:11,29854) [kworker/10:1]
(root,0,0,00:00:00,30310) [kworker/10:0]
(root,0,0,00:00:33,31715) [kworker/22:1]
(speedte+,14800,2536,00:00:18,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:01:05,31878) [kworker/14:1]
(root,0,0,00:00:00,34027) [kworker/8:2]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,34704) [kworker/u98:1]
(root,0,0,00:00:00,35618) [kworker/u97:0]
(root,0,0,00:00:01,37111) [kworker/5:2]
(root,0,0,00:00:05,37317) [kworker/8:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:01,37846) [kworker/15:1]
(root,0,0,00:00:00,38153) [kworker/u98:2]
(root,0,0,00:00:30,45873) [kworker/20:1]
(speedte+,35132,23184,00:11:28,46203) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:02,46260) [kworker/1:0]
(root,0,0,00:00:00,46288) [kworker/6:0]
(root,0,0,00:00:00,46527) [kworker/6:1]
(root,0,0,00:00:00,46969) [kworker/6:2]
(root,115416,1616,00:00:00,47010) /bin/bash /usr/bin/check_mk_agent
(root,115416,1616,00:00:00,47018) /bin/bash /usr/bin/check_mk_agent
(root,115416,1608,00:00:00,47027) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,47044) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,47045) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,47130) [kworker/11:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,00:26:23,49082) /usr/bin/monit -I

Found on 2024-11-16 00:12

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce09584404

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:14:53,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:49,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:46:26,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:55,11) [watchdog/0]
(root,0,0,00:00:45,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:51,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:42,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:42,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:50,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:15,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:40,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:48,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:17,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:40,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:50,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:16,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:40,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:50,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:49,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:40,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:41,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:10,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:37,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:46,79) [watchdog/14]
(root,0,0,00:00:29,80) [migration/14]
(root,0,0,00:00:48,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:42,84) [watchdog/15]
(root,0,0,00:00:38,85) [migration/15]
(root,0,0,00:00:15,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:42,89) [watchdog/16]
(root,0,0,00:00:05,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:37,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:41,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:03,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:36,104) [watchdog/19]
(root,0,0,00:00:05,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:06,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:48,109) [watchdog/20]
(root,0,0,00:00:05,110) [migration/20]
(root,0,0,00:02:10,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:36,114) [watchdog/21]
(root,0,0,00:00:03,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:48,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:12,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:36,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:18,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:42,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:34,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:04,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:18:41,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,129432,66548,00:51:28,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:22,950) /sbin/auditd
(root,26612,2044,00:04:07,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:40,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:20,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:55:55,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:22,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,666288,41936,00:34:02,1475) /usr/sbin/rsyslogd -n
(root,229084,12908,07:21:19,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:07:04,1477) /usr/sbin/bird
(root,3736772,47472,07:51:12,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:40,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:20:41,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,26820,04:08:54,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:13,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13948,00:05:43,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15060,00:05:45,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:11,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:04,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3640,00:00:42,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:01,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:09,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:03,4298) nginx: worker process
(nginx,59904,2484,00:00:04,4299) nginx: worker process
(nginx,59904,3376,00:00:06,4300) nginx: worker process
(nginx,59904,3668,00:00:08,4301) nginx: worker process
(nginx,59904,3796,00:00:09,4302) nginx: worker process
(nginx,59904,3764,00:00:08,4303) nginx: worker process
(nginx,59904,3880,00:00:07,4304) nginx: worker process
(nginx,59980,3888,00:00:08,4305) nginx: worker process
(nginx,59904,3840,00:00:08,4306) nginx: worker process
(nginx,62056,4460,00:00:08,4307) nginx: worker process
(nginx,62056,4424,00:00:08,4308) nginx: worker process
(nginx,59904,3944,00:00:10,4309) nginx: worker process
(nginx,62060,4556,00:00:10,4310) nginx: worker process
(nginx,62056,4592,00:00:12,4311) nginx: worker process
(nginx,62056,4536,00:00:13,4312) nginx: worker process
(nginx,59984,3984,00:00:18,4313) nginx: worker process
(nginx,62060,4672,00:00:17,4314) nginx: worker process
(nginx,62060,4672,00:00:19,4315) nginx: worker process
(nginx,62060,4672,00:00:24,4316) nginx: worker process
(nginx,62060,4668,00:00:26,4317) nginx: worker process
(nginx,62060,4672,00:00:33,4318) nginx: worker process
(nginx,62056,4668,00:00:41,4319) nginx: worker process
(nginx,62060,4676,00:01:11,4320) nginx: worker process
(nginx,59904,3888,00:00:13,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:19,5117) [kworker/u96:1]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6081) [kworker/u98:2]
(root,0,0,00:00:00,6334) [kworker/u97:2]
(root,0,0,00:00:00,6455) [kworker/2:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:00,7508) [kworker/4:2]
(root,0,0,00:00:21,7770) [kworker/9:0]
(speedte+,14660,3744,00:00:10,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:03,10469) [kworker/7:0]
(root,0,0,00:00:10,10805) [kworker/8:2]
(root,0,0,00:00:00,10806) [kworker/3:1]
(root,0,0,00:00:03,11044) [kworker/1:2]
(root,0,0,00:00:00,12325) [kworker/u96:0]
(root,0,0,00:00:13,14952) [kworker/0:2]
(root,0,0,00:00:00,15383) [kworker/0:0]
(root,0,0,00:00:00,15918) [kworker/6:2]
(root,0,0,00:00:00,16302) [kworker/6:1]
(root,0,0,00:00:00,16553) [kworker/6:0]
(root,15152,3448,00:00:00,16683) tclsh8.6 /usr/bin/unbuffer ping -4 -O -c 10 -i 0.5 -w 10 14.136.132.106
(root,4248,784,00:00:00,16684) ping -4 -O -c 10 -i 0.5 -w 10 14.136.132.106
(root,115416,1608,00:00:00,16848) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,16854) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,16855) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:00,19489) [kworker/7:2]
(root,0,0,00:00:50,19494) [kworker/2:2]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:13,22517) [kworker/14:2]
(root,422028,3224,00:00:56,24035) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:22,24055) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,24080) bash /entrypoint.sh
(root,11796480,79380,00:29:16,24758) node /app/dist/index.js
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,28437) [kworker/10:2]
(root,0,0,00:00:07,29854) [kworker/10:1]
(root,0,0,00:00:00,31018) [kworker/22:0]
(root,0,0,00:00:29,31715) [kworker/22:1]
(speedte+,14660,2500,00:00:13,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,31737) [kworker/5:0]
(root,0,0,00:01:05,31878) [kworker/14:1]
(speedte+,33248,22168,00:08:47,32224) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:01,37111) [kworker/5:2]
(root,0,0,00:00:01,37317) [kworker/8:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:01,37846) [kworker/15:1]
(root,0,0,00:00:00,41694) [kworker/u97:1]
(root,0,0,00:00:00,43814) [kworker/u98:0]
(root,0,0,00:00:27,45873) [kworker/20:1]
(root,0,0,00:00:00,47130) [kworker/11:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,0,0,00:00:01,48717) [kworker/1:1]
(root,133720,4296,00:20:32,49082) /usr/bin/monit -I

Found on 2024-11-13 22:33

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce933fd644

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:14:41,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:47,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:42:38,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:54,11) [watchdog/0]
(root,0,0,00:00:45,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:50,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:40,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:42,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:49,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:15,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:40,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:48,39) [watchdog/6]
(root,0,0,00:00:04,40) [migration/6]
(root,0,0,00:02:16,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:39,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:49,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:14,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:39,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:49,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:47,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:40,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:41,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:02,71) [ksoftirqd/12]
(root,0,0,00:00:10,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:36,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:46,79) [watchdog/14]
(root,0,0,00:00:28,80) [migration/14]
(root,0,0,00:00:46,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:41,84) [watchdog/15]
(root,0,0,00:00:38,85) [migration/15]
(root,0,0,00:00:14,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:42,89) [watchdog/16]
(root,0,0,00:00:05,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:37,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:40,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:02,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:36,104) [watchdog/19]
(root,0,0,00:00:04,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:05,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:47,109) [watchdog/20]
(root,0,0,00:00:04,110) [migration/20]
(root,0,0,00:02:09,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:36,114) [watchdog/21]
(root,0,0,00:00:02,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:47,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:10,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:36,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:18,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:41,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:33,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:04,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:17:28,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,141516,77172,00:50:42,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:22,950) /sbin/auditd
(root,26612,2044,00:04:04,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:33,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:20,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:55:13,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:22,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,682088,48384,00:33:33,1475) /usr/sbin/rsyslogd -n
(root,229188,12876,07:15:43,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:06:59,1477) /usr/sbin/bird
(root,3736772,47596,07:45:07,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:33,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:20:25,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,23752,04:05:42,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:12,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13508,00:05:38,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15684,00:05:40,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:11,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:03,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3616,00:00:42,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:01,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:08,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:03,4298) nginx: worker process
(nginx,59904,2484,00:00:04,4299) nginx: worker process
(nginx,59904,3252,00:00:05,4300) nginx: worker process
(nginx,59904,3668,00:00:08,4301) nginx: worker process
(nginx,59904,3796,00:00:08,4302) nginx: worker process
(nginx,59904,3764,00:00:07,4303) nginx: worker process
(nginx,59904,3860,00:00:07,4304) nginx: worker process
(nginx,59980,3888,00:00:08,4305) nginx: worker process
(nginx,59904,3840,00:00:08,4306) nginx: worker process
(nginx,62056,4460,00:00:08,4307) nginx: worker process
(nginx,62056,4424,00:00:07,4308) nginx: worker process
(nginx,59904,3944,00:00:09,4309) nginx: worker process
(nginx,62060,4556,00:00:09,4310) nginx: worker process
(nginx,62056,4556,00:00:11,4311) nginx: worker process
(nginx,62056,4536,00:00:12,4312) nginx: worker process
(nginx,59984,3984,00:00:17,4313) nginx: worker process
(nginx,62060,4672,00:00:17,4314) nginx: worker process
(nginx,62060,4672,00:00:18,4315) nginx: worker process
(nginx,62060,4672,00:00:23,4316) nginx: worker process
(nginx,62060,4668,00:00:24,4317) nginx: worker process
(nginx,62060,4672,00:00:32,4318) nginx: worker process
(nginx,62056,4668,00:00:39,4319) nginx: worker process
(nginx,62060,4676,00:01:09,4320) nginx: worker process
(nginx,59904,3888,00:00:13,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6334) [kworker/u97:2]
(root,0,0,00:00:00,6455) [kworker/2:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:20,7770) [kworker/9:0]
(speedte+,14520,3744,00:00:04,9441) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:02,10469) [kworker/7:0]
(root,0,0,00:00:07,10805) [kworker/8:2]
(root,0,0,00:00:00,10806) [kworker/3:1]
(speedte+,39020,26992,00:17:55,10885) /home/speedtest/OoklaServer.previous --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:00:09,14952) [kworker/0:2]
(root,0,0,00:00:00,15383) [kworker/0:0]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:00,19489) [kworker/7:2]
(root,0,0,00:00:37,19494) [kworker/2:2]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:09,22517) [kworker/14:2]
(root,422028,3224,00:00:40,24035) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:16,24055) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,24080) bash /entrypoint.sh
(root,11796736,79100,00:21:03,24758) node /app/dist/index.js
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:01,25943) [kworker/1:1]
(root,0,0,00:00:00,28450) [kworker/u97:0]
(root,0,0,00:00:02,29854) [kworker/10:1]
(root,0,0,00:00:00,30442) [kworker/u98:1]
(root,0,0,00:00:00,31628) [kworker/u98:0]
(root,0,0,00:00:26,31715) [kworker/22:1]
(speedte+,14660,2496,00:00:08,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,31737) [kworker/5:0]
(root,0,0,00:01:05,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:01,37111) [kworker/5:2]
(root,0,0,00:00:07,37274) [kworker/10:0]
(root,0,0,00:00:00,37317) [kworker/8:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:01,37846) [kworker/15:1]
(root,0,0,00:00:01,38540) [kworker/u96:1]
(root,0,0,00:00:00,38674) [kworker/u96:2]
(root,0,0,00:00:00,40961) [kworker/1:2]
(root,0,0,00:00:00,42770) [kworker/6:0]
(root,0,0,00:00:00,43118) [kworker/6:2]
(root,0,0,00:00:00,43281) [kworker/6:1]
(root,115416,1608,00:00:00,43448) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,43454) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,43455) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,45473) [kworker/22:2]
(root,0,0,00:00:24,45873) [kworker/20:1]
(root,0,0,00:00:00,47119) [kworker/4:1]
(root,0,0,00:00:00,47130) [kworker/11:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133584,4288,00:14:55,49082) /usr/bin/monit -I

Found on 2024-11-11 22:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce9be5e3bc

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:14:30,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:45,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:38:50,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:53,11) [watchdog/0]
(root,0,0,00:00:44,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:50,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:38,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:41,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:49,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:15,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:39,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:47,39) [watchdog/6]
(root,0,0,00:00:03,40) [migration/6]
(root,0,0,00:02:14,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:39,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:48,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:12,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:39,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:48,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:45,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:39,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:40,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:01,71) [ksoftirqd/12]
(root,0,0,00:00:09,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:36,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:45,79) [watchdog/14]
(root,0,0,00:00:28,80) [migration/14]
(root,0,0,00:00:44,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:40,84) [watchdog/15]
(root,0,0,00:00:37,85) [migration/15]
(root,0,0,00:00:14,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:41,89) [watchdog/16]
(root,0,0,00:00:05,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:36,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:40,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:02,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:36,104) [watchdog/19]
(root,0,0,00:00:04,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:05,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:47,109) [watchdog/20]
(root,0,0,00:00:04,110) [migration/20]
(root,0,0,00:02:07,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:35,114) [watchdog/21]
(root,0,0,00:00:02,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:46,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:08,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:35,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:18,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:41,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:33,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:03,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:04,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:16:16,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,149680,85856,00:49:56,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:22,950) /sbin/auditd
(root,26612,2044,00:04:01,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:26,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:20,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:54:29,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:22,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,690260,53860,00:33:04,1475) /usr/sbin/rsyslogd -n
(root,229156,12980,07:10:01,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:06:53,1477) /usr/sbin/bird
(root,3736772,47384,07:38:56,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:26,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:20:08,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,25620,04:02:26,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:12,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14688,00:05:33,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15984,00:05:35,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:11,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:03,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3640,00:00:41,2572) nginx: worker process
(101,17544,3528,00:00:00,2573) nginx: worker process
(101,17492,3116,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:01,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:06,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:03,4298) nginx: worker process
(nginx,59904,2484,00:00:04,4299) nginx: worker process
(nginx,59904,3252,00:00:05,4300) nginx: worker process
(nginx,59904,3668,00:00:07,4301) nginx: worker process
(nginx,59904,3796,00:00:08,4302) nginx: worker process
(nginx,59904,3764,00:00:07,4303) nginx: worker process
(nginx,59904,3860,00:00:07,4304) nginx: worker process
(nginx,59980,3888,00:00:08,4305) nginx: worker process
(nginx,59904,3840,00:00:07,4306) nginx: worker process
(nginx,59904,3792,00:00:08,4307) nginx: worker process
(nginx,62056,4424,00:00:07,4308) nginx: worker process
(nginx,59904,3936,00:00:09,4309) nginx: worker process
(nginx,62060,4556,00:00:09,4310) nginx: worker process
(nginx,62056,4556,00:00:10,4311) nginx: worker process
(nginx,59980,3936,00:00:12,4312) nginx: worker process
(nginx,59984,3984,00:00:16,4313) nginx: worker process
(nginx,62060,4652,00:00:16,4314) nginx: worker process
(nginx,62060,4588,00:00:17,4315) nginx: worker process
(nginx,62060,4668,00:00:22,4316) nginx: worker process
(nginx,62060,4656,00:00:24,4317) nginx: worker process
(nginx,62060,4656,00:00:30,4318) nginx: worker process
(nginx,62056,4652,00:00:38,4319) nginx: worker process
(nginx,62060,4672,00:01:06,4320) nginx: worker process
(nginx,59904,3868,00:00:12,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6334) [kworker/u97:2]
(root,0,0,00:00:00,6455) [kworker/2:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:00,7695) [kworker/8:0]
(root,0,0,00:00:19,7770) [kworker/9:0]
(root,0,0,00:00:02,10469) [kworker/7:0]
(root,0,0,00:00:02,10805) [kworker/8:2]
(root,0,0,00:00:00,10806) [kworker/3:1]
(root,0,0,00:00:02,11105) [kworker/10:2]
(root,0,0,00:00:00,11234) [kworker/1:1]
(root,0,0,00:00:00,14881) [kworker/6:1]
(root,0,0,00:00:04,14952) [kworker/0:2]
(root,0,0,00:00:00,15009) [kworker/u98:0]
(root,0,0,00:00:00,15383) [kworker/0:0]
(root,0,0,00:00:00,15387) [kworker/6:0]
(root,0,0,00:00:00,15614) [kworker/6:2]
(root,115416,1604,00:00:00,15943) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,15949) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,15950) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:00,19489) [kworker/7:2]
(root,0,0,00:00:24,19494) [kworker/2:2]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:05,22517) [kworker/14:2]
(root,0,0,00:00:12,23824) [kworker/u96:0]
(root,422028,3208,00:00:23,24035) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:09,24055) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,24080) bash /entrypoint.sh
(root,11795828,77028,00:12:40,24758) node /app/dist/index.js
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,28436) [kworker/u97:0]
(root,0,0,00:00:24,31715) [kworker/22:1]
(speedte+,14520,2476,00:00:03,31731) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,31737) [kworker/5:0]
(speedte+,14520,3596,00:00:03,31742) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(speedte+,34284,23012,00:16:21,31756) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a44a385-42d4-4ef2-bb2f-34b0159e991e
(root,0,0,00:01:05,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,37111) [kworker/5:2]
(root,0,0,00:00:05,37274) [kworker/10:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:00,37846) [kworker/15:1]
(root,0,0,00:00:01,39613) [kworker/u98:1]
(root,0,0,00:00:00,43172) [kworker/u96:1]
(root,0,0,00:00:00,45473) [kworker/22:2]
(root,0,0,00:00:20,45873) [kworker/20:1]
(root,0,0,00:00:01,47103) [kworker/1:0]
(root,0,0,00:00:00,47119) [kworker/4:1]
(root,0,0,00:00:00,47130) [kworker/11:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,133720,4188,00:09:12,49082) /usr/bin/monit -I

Found on 2024-11-09 22:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce98ad67b4

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:14:18,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:43,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:34:49,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:52,11) [watchdog/0]
(root,0,0,00:00:43,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:49,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:36,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:41,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:48,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:14,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:39,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:46,39) [watchdog/6]
(root,0,0,00:00:03,40) [migration/6]
(root,0,0,00:02:13,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:38,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:48,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:11,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:38,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:48,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:43,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:39,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:40,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:01,71) [ksoftirqd/12]
(root,0,0,00:00:09,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:35,74) [watchdog/13]
(root,0,0,00:00:02,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:45,79) [watchdog/14]
(root,0,0,00:00:28,80) [migration/14]
(root,0,0,00:00:43,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:40,84) [watchdog/15]
(root,0,0,00:00:37,85) [migration/15]
(root,0,0,00:00:14,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:41,89) [watchdog/16]
(root,0,0,00:00:05,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:36,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:39,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:02,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:35,104) [watchdog/19]
(root,0,0,00:00:04,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:05,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:46,109) [watchdog/20]
(root,0,0,00:00:04,110) [migration/20]
(root,0,0,00:02:05,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:35,114) [watchdog/21]
(root,0,0,00:00:02,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:46,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:07,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:35,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:17,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:40,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:00,328) [kworker/17:1]
(root,0,0,00:00:32,399) [kworker/16:1]
(speedte+,14520,2480,00:00:03,438) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(speedte+,14520,3596,00:00:03,445) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=6df17f0e-8e32-4554-9f54-e29f33ec3164
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(speedte+,34672,23192,00:17:47,465) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=6df17f0e-8e32-4554-9f54-e29f33ec3164
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:04,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:15:04,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,149796,94088,00:49:09,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:21,950) /sbin/auditd
(root,26612,2044,00:03:58,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:19,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:19,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:53:45,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:21,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,690596,59008,00:32:34,1475) /usr/sbin/rsyslogd -n
(root,229188,12876,07:04:16,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:06:47,1477) /usr/sbin/bird
(root,3736772,49772,07:32:41,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:20,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:19:52,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24856,03:59:09,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:12,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14456,00:05:28,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,16400,00:05:30,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:11,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:03,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3640,00:00:40,2572) nginx: worker process
(101,17544,3524,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:01,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:04,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:03,4298) nginx: worker process
(nginx,59904,2484,00:00:04,4299) nginx: worker process
(nginx,59904,3252,00:00:05,4300) nginx: worker process
(nginx,59904,3668,00:00:07,4301) nginx: worker process
(nginx,59904,3796,00:00:07,4302) nginx: worker process
(nginx,59904,3764,00:00:07,4303) nginx: worker process
(nginx,59904,3860,00:00:06,4304) nginx: worker process
(nginx,59980,3888,00:00:07,4305) nginx: worker process
(nginx,59904,3836,00:00:07,4306) nginx: worker process
(nginx,59904,3792,00:00:07,4307) nginx: worker process
(nginx,62056,4424,00:00:07,4308) nginx: worker process
(nginx,59904,3936,00:00:08,4309) nginx: worker process
(nginx,62060,4556,00:00:09,4310) nginx: worker process
(nginx,62056,4556,00:00:10,4311) nginx: worker process
(nginx,59980,3936,00:00:11,4312) nginx: worker process
(nginx,59984,3984,00:00:15,4313) nginx: worker process
(nginx,62060,4652,00:00:15,4314) nginx: worker process
(nginx,62060,4588,00:00:17,4315) nginx: worker process
(nginx,62060,4668,00:00:21,4316) nginx: worker process
(nginx,62060,4656,00:00:23,4317) nginx: worker process
(nginx,62060,4656,00:00:29,4318) nginx: worker process
(nginx,62056,4652,00:00:37,4319) nginx: worker process
(nginx,62060,4672,00:01:05,4320) nginx: worker process
(nginx,59904,3868,00:00:11,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,5523) [kworker/0:1]
(root,0,0,00:00:00,6455) [kworker/2:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:18,7770) [kworker/9:0]
(root,0,0,00:00:00,9195) [kworker/u98:1]
(root,0,0,00:00:02,10469) [kworker/7:0]
(root,0,0,00:00:00,10805) [kworker/8:2]
(root,0,0,00:00:00,10806) [kworker/3:1]
(root,0,0,00:00:02,11105) [kworker/10:2]
(root,0,0,00:00:00,14952) [kworker/0:2]
(root,0,0,00:00:00,15009) [kworker/u98:0]
(root,0,0,00:00:00,15461) [kworker/u96:2]
(root,0,0,00:00:00,17095) [kworker/1:0]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:00,19489) [kworker/7:2]
(root,0,0,00:00:11,19494) [kworker/2:2]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:02,22517) [kworker/14:2]
(root,0,0,00:00:00,24034) [kworker/11:0]
(root,422028,3208,00:00:07,24035) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,364,00:00:03,24055) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,24080) bash /entrypoint.sh
(root,11795220,75568,00:04:02,24758) node /app/dist/index.js
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,25564) [kworker/1:2]
(root,0,0,00:00:00,25976) [kworker/8:1]
(root,0,0,00:00:20,31715) [kworker/22:1]
(root,0,0,00:00:00,31749) [kworker/u97:2]
(root,0,0,00:01:05,31878) [kworker/14:1]
(root,0,0,00:00:00,32010) [kworker/6:1]
(root,0,0,00:00:00,32278) [kworker/6:0]
(root,0,0,00:00:00,32465) [kworker/5:1]
(root,0,0,00:00:00,32681) [kworker/6:2]
(root,115416,1600,00:00:00,33017) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,33023) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,33024) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,37111) [kworker/5:2]
(root,0,0,00:00:01,37274) [kworker/10:0]
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:00,37846) [kworker/15:1]
(root,0,0,00:00:00,45473) [kworker/22:2]
(root,0,0,00:00:18,45873) [kworker/20:1]
(root,0,0,00:02:02,46922) [kworker/u96:0]
(root,0,0,00:00:00,47119) [kworker/4:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,0,0,00:00:00,48895) [kworker/u97:1]
(root,133584,4180,00:03:26,49082) /usr/bin/monit -I

Found on 2024-11-07 21:50

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ced550f867

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:14:07,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:41,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:30:10,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:52,11) [watchdog/0]
(root,0,0,00:00:43,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:48,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:34,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:40,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:47,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:14,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:38,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:46,39) [watchdog/6]
(root,0,0,00:00:03,40) [migration/6]
(root,0,0,00:02:11,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:38,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:47,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:09,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:38,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:47,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:42,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:38,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:39,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:01,71) [ksoftirqd/12]
(root,0,0,00:00:08,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:35,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:44,79) [watchdog/14]
(root,0,0,00:00:27,80) [migration/14]
(root,0,0,00:00:41,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:40,84) [watchdog/15]
(root,0,0,00:00:37,85) [migration/15]
(root,0,0,00:00:14,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:40,89) [watchdog/16]
(root,0,0,00:00:05,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:35,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:39,99) [watchdog/18]
(root,0,0,00:00:04,100) [migration/18]
(root,0,0,00:00:02,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:35,104) [watchdog/19]
(root,0,0,00:00:04,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:05,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:46,109) [watchdog/20]
(root,0,0,00:00:04,110) [migration/20]
(root,0,0,00:02:04,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:35,114) [watchdog/21]
(root,0,0,00:00:02,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:45,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:05,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:34,124) [watchdog/23]
(root,0,0,00:00:02,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:17,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:40,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:32,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:04,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:13:59,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,194024,108832,00:48:29,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:09,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:21,950) /sbin/auditd
(root,26612,2044,00:03:55,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:14,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:19,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:53:04,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:21,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,728484,68348,00:32:09,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,06:58:58,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:06:42,1477) /usr/sbin/bird
(root,3736772,48744,07:27:56,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:13,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:19:37,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,0,0,00:00:00,1491) [kworker/u97:2]
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,26412,03:56:41,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:12,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14696,00:05:24,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15820,00:05:25,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:11,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:03,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3640,00:00:40,2572) nginx: worker process
(101,17544,3524,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,2962) [kworker/11:1]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:01,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:02,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:02,4298) nginx: worker process
(nginx,59904,2484,00:00:04,4299) nginx: worker process
(nginx,59904,3252,00:00:05,4300) nginx: worker process
(nginx,59904,3668,00:00:07,4301) nginx: worker process
(nginx,59904,3796,00:00:07,4302) nginx: worker process
(nginx,59904,3764,00:00:06,4303) nginx: worker process
(nginx,59904,3860,00:00:06,4304) nginx: worker process
(nginx,59980,3888,00:00:07,4305) nginx: worker process
(nginx,59904,3832,00:00:07,4306) nginx: worker process
(nginx,59904,3792,00:00:07,4307) nginx: worker process
(nginx,62056,4424,00:00:06,4308) nginx: worker process
(nginx,59904,3936,00:00:08,4309) nginx: worker process
(nginx,62060,4556,00:00:08,4310) nginx: worker process
(nginx,62056,4556,00:00:09,4311) nginx: worker process
(nginx,59980,3936,00:00:11,4312) nginx: worker process
(nginx,59984,3984,00:00:15,4313) nginx: worker process
(nginx,62060,4652,00:00:15,4314) nginx: worker process
(nginx,62060,4588,00:00:16,4315) nginx: worker process
(nginx,62060,4668,00:00:20,4316) nginx: worker process
(nginx,62060,4656,00:00:22,4317) nginx: worker process
(nginx,62060,4656,00:00:28,4318) nginx: worker process
(nginx,62056,4652,00:00:36,4319) nginx: worker process
(nginx,62060,4672,00:01:04,4320) nginx: worker process
(nginx,59904,3868,00:00:11,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6226) [kworker/6:1]
(root,0,0,00:00:00,6622) [kworker/6:0]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,6791) [kworker/14:0]
(root,0,0,00:00:00,6919) [kworker/6:2]
(root,0,0,00:00:00,6999) [kworker/2:1]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,115416,1608,00:00:00,7405) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,7411) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,7412) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:18,7770) [kworker/9:0]
(root,0,0,00:00:02,10469) [kworker/7:0]
(root,0,0,00:00:00,14157) [kworker/u98:2]
(root,0,0,00:00:00,16575) [kworker/5:0]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:00,19489) [kworker/7:2]
(root,0,0,00:00:00,19886) [kworker/0:2]
(root,0,0,00:00:04,20824) [kworker/10:1]
(root,0,0,00:00:00,21846) [kworker/u97:1]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,15168,3456,00:00:00,22342) tclsh8.6 /usr/bin/unbuffer traceroute -6 -m 20 -w 2 -q 2 -N 20 --icmp cdn.jsdelivr.net
(root,2628,1088,1-08:41:12,22343) traceroute -6 -m 20 -w 2 -q 2 -N 20 --icmp cdn.jsdelivr.net
(root,0,0,00:00:02,23778) [kworker/0:0]
(root,0,0,00:00:08,24451) [kworker/2:0]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,24899) [kworker/u98:0]
(root,0,0,00:00:06,27018) [kworker/10:0]
(root,0,0,00:00:00,27304) [kworker/u96:1]
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:00:17,31715) [kworker/22:1]
(root,0,0,00:01:04,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,36120) [kworker/1:0]
(root,422284,5268,00:00:47,37063) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:18,37083) /usr/bin/tini -- /entrypoint.sh
(root,4016,1688,00:00:00,37107) bash /entrypoint.sh
(root,0,0,00:00:00,37111) [kworker/5:2]
(root,133664,4360,00:11:14,37194) /usr/bin/monit -I
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,0,0,00:00:01,37659) [kworker/1:2]
(root,11796144,79340,00:25:19,37791) node /app/dist/index.js
(root,0,0,00:00:00,37846) [kworker/15:1]
(speedte+,14520,2432,00:00:09,38047) /home/speedtest/OoklaServer --daemon
(speedte+,41084,28708,01:05:18,38050) /home/speedtest/OoklaServer --ward --server-id=4c37b354-ee8f-4871-b648-72eca9e529ea
(root,0,0,00:00:00,39262) [kworker/8:2]
(root,0,0,00:00:00,40909) [kworker/8:0]
(root,0,0,00:00:00,45473) [kworker/22:2]
(root,0,0,00:00:15,45873) [kworker/20:1]
(root,0,0,00:01:23,46922) [kworker/u96:0]
(root,0,0,00:00:00,47119) [kworker/4:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]

Found on 2024-11-05 22:41

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94cefc5d4479

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4192,00:13:56,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:39,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,04:25:00,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:51,11) [watchdog/0]
(root,0,0,00:00:43,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:48,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:32,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:40,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:10,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:47,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:14,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:38,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:45,39) [watchdog/6]
(root,0,0,00:00:03,40) [migration/6]
(root,0,0,00:02:09,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:37,44) [watchdog/7]
(root,0,0,00:00:01,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:46,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:07,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:38,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:46,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:40,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:38,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:38,69) [watchdog/12]
(root,0,0,00:00:04,70) [migration/12]
(root,0,0,00:00:01,71) [ksoftirqd/12]
(root,0,0,00:00:08,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:35,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:43,79) [watchdog/14]
(root,0,0,00:00:27,80) [migration/14]
(root,0,0,00:00:39,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:39,84) [watchdog/15]
(root,0,0,00:00:36,85) [migration/15]
(root,0,0,00:00:14,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:40,89) [watchdog/16]
(root,0,0,00:00:05,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:35,94) [watchdog/17]
(root,0,0,00:00:05,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:38,99) [watchdog/18]
(root,0,0,00:00:03,100) [migration/18]
(root,0,0,00:00:02,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:34,104) [watchdog/19]
(root,0,0,00:00:04,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:05,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:45,109) [watchdog/20]
(root,0,0,00:00:04,110) [migration/20]
(root,0,0,00:02:02,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:34,114) [watchdog/21]
(root,0,0,00:00:02,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:45,119) [watchdog/22]
(root,0,0,00:00:03,120) [migration/22]
(root,0,0,00:02:04,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:34,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:17,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:39,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:04,231) [kauditd]
(root,0,0,00:00:32,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:05,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:04,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,01:12:59,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,39060,6544,00:47:44,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:09,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:02,931) [xfsaild/dm-2]
(root,55532,1084,00:00:21,950) /sbin/auditd
(root,26612,2044,00:03:53,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:09:09,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:19,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:52:30,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:21,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,580496,6132,00:31:41,1475) /usr/sbin/rsyslogd -n
(root,229188,12876,06:53:10,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:06:37,1477) /usr/sbin/bird
(root,3736772,47096,07:23:10,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:08:09,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:19:25,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,23600,03:54:06,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:12,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14928,00:05:19,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2147320,15676,00:05:20,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:11,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:03,2243) [kworker/11:2]
(root,0,0,00:00:00,2255) [kworker/3:1H]
(root,0,0,00:00:00,2384) [kworker/9:1]
(101,17676,3640,00:00:40,2572) nginx: worker process
(101,17544,3524,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,2962) [kworker/11:1]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:05,3032) [kworker/6:1H]
(root,0,0,00:00:01,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:01,3240) [kworker/4:1H]
(root,0,0,00:00:05,3403) [kworker/10:1H]
(root,0,0,00:00:01,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4130) [kworker/4:0]
(root,59452,1272,00:00:00,4297) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59904,2412,00:00:02,4298) nginx: worker process
(nginx,59904,2484,00:00:03,4299) nginx: worker process
(nginx,59904,3252,00:00:05,4300) nginx: worker process
(nginx,59904,3668,00:00:07,4301) nginx: worker process
(nginx,59904,3796,00:00:07,4302) nginx: worker process
(nginx,59904,3764,00:00:06,4303) nginx: worker process
(nginx,59904,3852,00:00:06,4304) nginx: worker process
(nginx,59980,3888,00:00:07,4305) nginx: worker process
(nginx,59904,3832,00:00:06,4306) nginx: worker process
(nginx,59904,3792,00:00:07,4307) nginx: worker process
(nginx,62056,4424,00:00:06,4308) nginx: worker process
(nginx,59904,3908,00:00:07,4309) nginx: worker process
(nginx,59984,3956,00:00:08,4310) nginx: worker process
(nginx,62056,4556,00:00:09,4311) nginx: worker process
(nginx,59980,3924,00:00:10,4312) nginx: worker process
(nginx,59984,3984,00:00:13,4313) nginx: worker process
(nginx,62060,4652,00:00:14,4314) nginx: worker process
(nginx,62060,4588,00:00:15,4315) nginx: worker process
(nginx,62060,4652,00:00:19,4316) nginx: worker process
(nginx,62060,4656,00:00:20,4317) nginx: worker process
(nginx,62060,4656,00:00:27,4318) nginx: worker process
(nginx,62056,4652,00:00:34,4319) nginx: worker process
(nginx,62060,4660,00:00:59,4320) nginx: worker process
(nginx,59904,3868,00:00:10,4321) nginx: worker process
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,6791) [kworker/14:0]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(root,0,0,00:00:17,7770) [kworker/9:0]
(root,0,0,00:00:02,10469) [kworker/7:0]
(root,0,0,00:00:00,13101) [kworker/1:1]
(root,0,0,00:00:00,13290) [kworker/0:0]
(root,0,0,00:00:00,14243) [kworker/2:1]
(root,0,0,00:00:00,14871) [kworker/8:2]
(root,0,0,00:00:01,14882) [kworker/1:2]
(root,0,0,00:00:20,17173) [kworker/4:2]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:00,19489) [kworker/7:2]
(root,0,0,00:00:00,20824) [kworker/10:1]
(root,0,0,00:00:00,21922) [kworker/20:0]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,24899) [kworker/u98:0]
(root,0,0,00:00:06,27018) [kworker/10:0]
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:00:00,28291) [kworker/5:1]
(root,0,0,00:00:00,28554) [kworker/6:0]
(root,0,0,00:00:00,28899) [kworker/6:2]
(root,0,0,00:00:00,29035) [kworker/6:1]
(root,115416,1608,00:00:00,29202) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,29208) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,29209) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,30656) [kworker/u96:1]
(root,0,0,00:00:14,31715) [kworker/22:1]
(root,0,0,00:01:01,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,36433) [kworker/u97:1]
(root,422284,5268,00:00:33,37063) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:14,37083) /usr/bin/tini -- /entrypoint.sh
(root,4016,1688,00:00:00,37107) bash /entrypoint.sh
(root,0,0,00:00:00,37111) [kworker/5:2]
(root,133664,4360,00:06:44,37194) /usr/bin/monit -I
(root,0,0,00:00:00,37436) [kworker/15:2]
(root,11795808,79096,00:17:07,37791) node /app/dist/index.js
(root,0,0,00:00:00,37846) [kworker/15:1]
(speedte+,14520,2432,00:00:05,38047) /home/speedtest/OoklaServer --daemon
(speedte+,39656,27180,00:29:31,38050) /home/speedtest/OoklaServer --ward --server-id=4c37b354-ee8f-4871-b648-72eca9e529ea
(root,0,0,00:00:00,38633) [kworker/u98:2]
(root,0,0,00:00:00,43251) [kworker/u97:0]
(root,0,0,00:00:00,45473) [kworker/22:2]
(root,0,0,00:00:03,45826) [kworker/8:0]
(root,0,0,00:00:13,45873) [kworker/20:1]
(root,0,0,00:00:05,46050) [kworker/0:1]
(root,0,0,00:00:42,46922) [kworker/u96:0]
(root,0,0,00:03:55,46974) [kworker/2:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]

Found on 2024-11-03 21:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce975e9832

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4152,00:09:42,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:02,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:15:49,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:36,11) [watchdog/0]
(root,0,0,00:00:30,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:34,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:53,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:28,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:07,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:33,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:38,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:27,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:32,39) [watchdog/6]
(root,0,0,00:00:02,40) [migration/6]
(root,0,0,00:01:36,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:27,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:33,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:33,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:27,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:33,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:37,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:27,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:27,69) [watchdog/12]
(root,0,0,00:00:03,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:04,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:25,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:30,79) [watchdog/14]
(root,0,0,00:00:19,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:28,84) [watchdog/15]
(root,0,0,00:00:24,85) [migration/15]
(root,0,0,00:00:10,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:28,89) [watchdog/16]
(root,0,0,00:00:03,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:25,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:27,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:24,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:04,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:32,109) [watchdog/20]
(root,0,0,00:00:03,110) [migration/20]
(root,0,0,00:01:30,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:24,114) [watchdog/21]
(root,0,0,00:00:02,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:31,119) [watchdog/22]
(root,0,0,00:00:02,120) [migration/22]
(root,0,0,00:01:32,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:24,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:12,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:27,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:02,231) [kauditd]
(root,0,0,00:00:25,399) [kworker/16:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:03,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:08,509) [kworker/11:1]
(root,0,0,00:00:03,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,00:48:24,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,141300,80212,00:31:25,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:06,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:01,931) [xfsaild/dm-2]
(root,55532,1084,00:00:14,950) /sbin/auditd
(root,26612,1956,00:02:44,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:06:28,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:09,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:37:06,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:14,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,642500,50036,00:21:22,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,04:50:38,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:04:39,1477) /usr/sbin/bird
(root,3736516,47932,05:12:13,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:05:48,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:13:44,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,25080,02:45:16,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:09,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13948,00:03:36,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,15992,00:03:36,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:07,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:29,2572) nginx: worker process
(101,17544,3548,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:03,3032) [kworker/6:1H]
(root,0,0,00:00:00,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3240) [kworker/4:1H]
(root,0,0,00:00:00,3403) [kworker/10:1H]
(root,0,0,00:00:00,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:06,4641) [kworker/9:2]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6776) [kworker/0:1]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(speedte+,4600016,267092,00:19:21,7714) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,8054) [kworker/11:0]
(root,0,0,00:00:00,8135) [kworker/10:2]
(root,0,0,00:00:16,9726) [kworker/15:1]
(root,0,0,00:01:36,11187) [kworker/4:2]
(root,0,0,00:00:01,11198) [kworker/2:1]
(root,0,0,00:00:01,13757) [kworker/1:1]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:06,19580) [kworker/7:1]
(root,0,0,00:00:00,21056) [kworker/5:1]
(root,0,0,00:00:00,21764) [kworker/15:0]
(root,0,0,00:00:00,24873) [kworker/19:2]
(root,0,0,00:00:00,25082) [kworker/2:0]
(speedte+,14236,2476,00:00:00,26330) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:00:00,27477) [kworker/u97:0]
(root,0,0,00:00:00,28183) [kworker/0:2]
(root,0,0,00:00:03,28732) [kworker/20:1]
(root,290956,5252,00:00:04,28853) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:02,28874) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,28897) bash /entrypoint.sh
(root,0,0,00:00:00,29249) [kworker/4:0]
(root,11794864,77040,00:03:08,29577) node /app/dist/index.js
(root,0,0,00:00:00,30973) [kworker/20:0]
(root,0,0,00:00:12,31428) [kworker/22:0]
(root,0,0,00:00:00,31878) [kworker/14:1]
(root,0,0,00:00:00,31958) [kworker/6:2]
(root,0,0,00:00:00,32249) [kworker/6:1]
(root,0,0,00:00:00,32790) [kworker/u98:1]
(root,0,0,00:00:00,32791) [kworker/6:0]
(root,115416,1608,00:00:00,33072) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,33078) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,33079) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,33870) [kworker/9:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,59456,1284,00:00:00,34854) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59912,2532,00:00:12,34855) nginx: worker process
(nginx,59912,2428,00:00:13,34856) nginx: worker process
(nginx,59912,3028,00:00:17,34857) nginx: worker process
(nginx,59912,3816,00:00:23,34858) nginx: worker process
(nginx,59912,3688,00:00:23,34859) nginx: worker process
(nginx,59912,3828,00:00:24,34860) nginx: worker process
(nginx,59912,3748,00:00:21,34861) nginx: worker process
(nginx,62056,4484,00:00:22,34862) nginx: worker process
(nginx,59988,3916,00:00:22,34863) nginx: worker process
(nginx,59988,3960,00:00:22,34865) nginx: worker process
(nginx,62064,4492,00:00:26,34866) nginx: worker process
(nginx,62064,4572,00:00:24,34867) nginx: worker process
(nginx,62052,4568,00:00:28,34868) nginx: worker process
(nginx,62064,4580,00:00:35,34869) nginx: worker process
(nginx,62064,4616,00:00:40,34870) nginx: worker process
(nginx,62052,4568,00:00:48,34871) nginx: worker process
(nginx,62064,4648,00:00:59,34872) nginx: worker process
(nginx,62064,4652,00:01:02,34873) nginx: worker process
(nginx,62064,4580,00:01:17,34874) nginx: worker process
(nginx,62064,4652,00:01:33,34875) nginx: worker process
(nginx,62064,4652,00:02:16,34876) nginx: worker process
(nginx,62064,4656,00:03:31,34877) nginx: worker process
(nginx,62064,4656,00:05:52,34878) nginx: worker process
(nginx,59988,3920,00:00:52,34879) nginx: worker process
(root,0,0,00:00:00,37082) [kworker/8:1]
(root,0,0,00:00:00,37680) [kworker/7:2]
(speedte+,2480388,146624,00:06:11,38020) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:23,38173) [kworker/8:2]
(root,0,0,00:00:00,38380) [kworker/14:0]
(root,0,0,00:00:00,38623) [kworker/u97:1]
(root,0,0,00:00:00,38883) [kworker/u96:2]
(root,0,0,00:00:44,39955) [kworker/22:2]
(root,0,0,00:00:01,40726) [kworker/10:1]
(root,0,0,00:00:12,41834) [kworker/5:0]
(root,0,0,00:00:05,42249) [kworker/1:2]
(speedte+,4600016,267092,00:20:55,42453) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:01:06,45991) [kworker/u96:1]
(root,0,0,00:00:00,47639) [kworker/u98:0]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]

Found on 2024-09-21 22:17

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce5d248fe8

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4152,00:09:31,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:02,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:14:52,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:36,11) [watchdog/0]
(root,0,0,00:00:30,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:33,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:52,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:28,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:07,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:32,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:37,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:27,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:31,39) [watchdog/6]
(root,0,0,00:00:02,40) [migration/6]
(root,0,0,00:01:36,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:26,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:32,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:33,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:26,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:33,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:37,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:26,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:26,69) [watchdog/12]
(root,0,0,00:00:03,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:03,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:24,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:30,79) [watchdog/14]
(root,0,0,00:00:18,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:27,84) [watchdog/15]
(root,0,0,00:00:24,85) [migration/15]
(root,0,0,00:00:09,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:27,89) [watchdog/16]
(root,0,0,00:00:03,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:24,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:26,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:24,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:04,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:31,109) [watchdog/20]
(root,0,0,00:00:03,110) [migration/20]
(root,0,0,00:01:30,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:24,114) [watchdog/21]
(root,0,0,00:00:02,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:31,119) [watchdog/22]
(root,0,0,00:00:02,120) [migration/22]
(root,0,0,00:01:32,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:24,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:12,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:27,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:02,231) [kauditd]
(root,0,0,00:00:25,399) [kworker/16:1]
(root,11796424,78696,00:18:53,405) node /app/dist/index.js
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:03,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:08,509) [kworker/11:1]
(root,0,0,00:00:03,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,00:47:17,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,149676,86124,00:30:36,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:06,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:01,931) [xfsaild/dm-2]
(root,55532,1084,00:00:13,950) /sbin/auditd
(root,26612,1956,00:02:41,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:06:21,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:09,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:36:24,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:14,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,644144,51656,00:20:52,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,04:44:56,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:04:34,1477) /usr/sbin/bird
(root,3736516,48028,05:06:08,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:05:42,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:13:29,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,23312,02:42:06,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:08,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13796,00:03:31,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,16620,00:03:32,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:07,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:28,2572) nginx: worker process
(101,17544,3548,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:03,3032) [kworker/6:1H]
(root,0,0,00:00:00,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3240) [kworker/4:1H]
(root,0,0,00:00:00,3403) [kworker/10:1H]
(root,0,0,00:00:00,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:05,4641) [kworker/9:2]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(speedte+,4600016,267092,00:19:21,7714) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,8054) [kworker/11:0]
(root,0,0,00:00:00,8135) [kworker/10:2]
(root,0,0,00:00:15,9726) [kworker/15:1]
(root,0,0,00:01:33,11187) [kworker/4:2]
(root,0,0,00:00:04,11385) [kworker/0:2]
(root,0,0,00:00:42,13350) [kworker/2:2]
(root,0,0,00:00:04,17986) [kworker/10:0]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:06,19580) [kworker/7:1]
(root,0,0,00:00:04,20142) [kworker/0:0]
(root,0,0,00:00:01,20350) [kworker/1:0]
(root,0,0,00:00:00,20570) [kworker/9:0]
(root,0,0,00:00:00,21056) [kworker/5:1]
(root,0,0,00:00:00,21563) [kworker/u97:1]
(root,0,0,00:00:00,21764) [kworker/15:0]
(root,0,0,00:00:00,24873) [kworker/19:2]
(speedte+,14236,2476,00:00:00,26330) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:00:00,27689) [kworker/u97:2]
(root,0,0,00:00:01,28732) [kworker/20:1]
(root,0,0,00:00:00,29249) [kworker/4:0]
(root,0,0,00:00:00,30973) [kworker/20:0]
(root,0,0,00:00:12,31428) [kworker/22:0]
(root,0,0,00:00:00,31878) [kworker/14:1]
(root,0,0,00:00:00,32134) [kworker/u98:2]
(root,0,0,00:00:00,32790) [kworker/u98:1]
(root,0,0,00:00:00,32956) [kworker/2:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,59456,1284,00:00:00,34854) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59912,2532,00:00:12,34855) nginx: worker process
(nginx,59912,2428,00:00:13,34856) nginx: worker process
(nginx,59912,3028,00:00:17,34857) nginx: worker process
(nginx,59912,3816,00:00:23,34858) nginx: worker process
(nginx,59912,3688,00:00:23,34859) nginx: worker process
(nginx,59912,3828,00:00:24,34860) nginx: worker process
(nginx,59912,3748,00:00:21,34861) nginx: worker process
(nginx,62056,4484,00:00:22,34862) nginx: worker process
(nginx,59988,3916,00:00:22,34863) nginx: worker process
(nginx,59988,3960,00:00:22,34865) nginx: worker process
(nginx,62064,4492,00:00:26,34866) nginx: worker process
(nginx,62064,4572,00:00:24,34867) nginx: worker process
(nginx,62052,4568,00:00:28,34868) nginx: worker process
(nginx,62064,4580,00:00:35,34869) nginx: worker process
(nginx,62064,4616,00:00:40,34870) nginx: worker process
(nginx,62052,4568,00:00:48,34871) nginx: worker process
(nginx,62064,4648,00:00:59,34872) nginx: worker process
(nginx,62064,4652,00:01:02,34873) nginx: worker process
(nginx,62064,4580,00:01:17,34874) nginx: worker process
(nginx,62064,4652,00:01:33,34875) nginx: worker process
(nginx,62064,4652,00:02:16,34876) nginx: worker process
(nginx,62064,4656,00:03:31,34877) nginx: worker process
(nginx,62064,4656,00:05:51,34878) nginx: worker process
(nginx,59988,3920,00:00:52,34879) nginx: worker process
(root,0,0,00:00:00,37082) [kworker/8:1]
(root,0,0,00:00:00,37680) [kworker/7:2]
(speedte+,2480388,146624,00:06:11,38020) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:21,38173) [kworker/8:2]
(root,0,0,00:00:00,38380) [kworker/14:0]
(root,0,0,00:00:00,38883) [kworker/u96:2]
(root,0,0,00:00:42,39955) [kworker/22:2]
(root,0,0,00:00:00,40332) [kworker/6:0]
(root,0,0,00:00:00,40840) [kworker/6:2]
(root,0,0,00:00:00,41136) [kworker/6:1]
(root,115416,1616,00:00:00,41531) /bin/bash /usr/bin/check_mk_agent
(root,115416,1620,00:00:00,41539) /bin/bash /usr/bin/check_mk_agent
(root,115416,1600,00:00:00,41552) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,41567) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,41568) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:11,41834) [kworker/5:0]
(speedte+,4600016,267092,00:20:55,42453) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:05,44722) [kworker/1:1]
(root,0,0,00:00:27,45991) [kworker/u96:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,422028,5316,00:00:30,48522) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,2364,368,00:00:19,48546) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,48573) bash /entrypoint.sh

Found on 2024-09-19 22:52

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce88601ded

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4152,00:09:19,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:01,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:13:44,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:35,11) [watchdog/0]
(root,0,0,00:00:29,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:33,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:52,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:27,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:07,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:32,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:37,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:26,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:31,39) [watchdog/6]
(root,0,0,00:00:02,40) [migration/6]
(root,0,0,00:01:36,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:26,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:32,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:32,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:26,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:32,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:37,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:26,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:26,69) [watchdog/12]
(root,0,0,00:00:03,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:03,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:24,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:29,79) [watchdog/14]
(root,0,0,00:00:18,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:27,84) [watchdog/15]
(root,0,0,00:00:23,85) [migration/15]
(root,0,0,00:00:09,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:27,89) [watchdog/16]
(root,0,0,00:00:03,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:24,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:26,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:23,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:04,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:31,109) [watchdog/20]
(root,0,0,00:00:03,110) [migration/20]
(root,0,0,00:01:30,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:23,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:30,119) [watchdog/22]
(root,0,0,00:00:02,120) [migration/22]
(root,0,0,00:01:32,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:23,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:12,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:26,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:02,231) [kauditd]
(root,0,0,00:00:25,399) [kworker/16:1]
(root,11795392,77564,00:08:56,405) node /app/dist/index.js
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:03,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:08,509) [kworker/11:1]
(root,0,0,00:00:03,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,00:46:10,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,145360,87412,00:29:42,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:06,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:01,931) [xfsaild/dm-2]
(root,55532,1084,00:00:13,950) /sbin/auditd
(root,26612,1956,00:02:38,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:06:14,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:09,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:35:39,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:14,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,651168,55440,00:20:19,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,04:38:53,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:04:28,1477) /usr/sbin/bird
(root,3736516,50920,04:59:39,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:05:35,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:13:13,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,26948,02:38:43,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:08,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14148,00:03:26,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,16332,00:03:26,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:07,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:28,2572) nginx: worker process
(101,17544,3548,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:03,3032) [kworker/6:1H]
(root,0,0,00:00:00,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3240) [kworker/4:1H]
(root,0,0,00:00:00,3403) [kworker/10:1H]
(root,0,0,00:00:00,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:04,4641) [kworker/9:2]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(speedte+,4600016,267092,00:19:21,7714) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,8054) [kworker/11:0]
(root,0,0,00:00:00,8067) [kworker/9:0]
(root,0,0,00:00:00,8135) [kworker/10:2]
(root,0,0,00:00:15,9726) [kworker/15:1]
(root,0,0,00:01:31,11187) [kworker/4:2]
(root,0,0,00:00:01,11385) [kworker/0:2]
(root,0,0,00:00:29,13350) [kworker/2:2]
(root,0,0,00:00:00,17542) [kworker/u98:0]
(root,0,0,00:00:02,17986) [kworker/10:0]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:05,19580) [kworker/7:1]
(root,0,0,00:00:04,20142) [kworker/0:0]
(root,0,0,00:00:00,21020) [kworker/1:0]
(root,0,0,00:00:00,21056) [kworker/5:1]
(root,0,0,00:00:00,21563) [kworker/u97:1]
(root,0,0,00:00:00,21764) [kworker/15:0]
(root,0,0,00:00:00,24075) [kworker/u98:2]
(root,0,0,00:00:00,24873) [kworker/19:2]
(speedte+,14236,2476,00:00:00,26330) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,27043) [kworker/1:2]
(root,0,0,00:00:00,27255) [kworker/14:2]
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:00:00,28732) [kworker/20:1]
(root,0,0,00:00:12,31428) [kworker/22:0]
(root,0,0,00:00:00,31878) [kworker/14:1]
(root,0,0,00:00:00,32956) [kworker/2:1]
(root,0,0,00:00:00,33973) [kworker/6:0]
(root,0,0,00:00:00,34470) [kworker/6:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,34729) [kworker/6:2]
(root,59456,1284,00:00:00,34854) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59912,2532,00:00:12,34855) nginx: worker process
(nginx,59912,2428,00:00:13,34856) nginx: worker process
(nginx,59912,3028,00:00:17,34857) nginx: worker process
(nginx,59912,3816,00:00:23,34858) nginx: worker process
(nginx,59912,3688,00:00:23,34859) nginx: worker process
(nginx,59912,3828,00:00:24,34860) nginx: worker process
(nginx,59912,3748,00:00:21,34861) nginx: worker process
(nginx,62056,4484,00:00:22,34862) nginx: worker process
(nginx,59988,3916,00:00:22,34863) nginx: worker process
(nginx,59988,3960,00:00:22,34865) nginx: worker process
(nginx,62064,4492,00:00:25,34866) nginx: worker process
(nginx,62064,4572,00:00:24,34867) nginx: worker process
(nginx,62052,4568,00:00:28,34868) nginx: worker process
(nginx,62064,4580,00:00:35,34869) nginx: worker process
(nginx,62064,4616,00:00:40,34870) nginx: worker process
(nginx,62052,4568,00:00:48,34871) nginx: worker process
(nginx,62064,4648,00:00:59,34872) nginx: worker process
(nginx,62064,4652,00:01:02,34873) nginx: worker process
(nginx,62064,4580,00:01:17,34874) nginx: worker process
(nginx,62064,4652,00:01:33,34875) nginx: worker process
(nginx,62064,4652,00:02:16,34876) nginx: worker process
(nginx,62064,4656,00:03:30,34877) nginx: worker process
(nginx,62064,4656,00:05:51,34878) nginx: worker process
(nginx,59988,3920,00:00:52,34879) nginx: worker process
(root,115416,1608,00:00:00,35238) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,35244) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,35245) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,37082) [kworker/8:1]
(root,0,0,00:00:00,37680) [kworker/7:2]
(speedte+,2480388,146624,00:06:11,38020) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:20,38173) [kworker/8:2]
(root,0,0,00:00:39,39955) [kworker/22:2]
(root,0,0,00:00:03,41591) [kworker/20:2]
(root,0,0,00:00:00,41697) [kworker/4:1]
(root,0,0,00:00:11,41834) [kworker/5:0]
(speedte+,4600016,267092,00:20:55,42453) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,45991) [kworker/u96:1]
(root,0,0,00:02:49,46446) [kworker/u96:2]
(root,0,0,00:00:00,47700) [kworker/u97:0]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,422028,5316,00:00:14,48522) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,2364,368,00:00:12,48546) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,48573) bash /entrypoint.sh

Found on 2024-09-17 20:17

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce161acd3e

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4152,00:09:09,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:58,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:09:58,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:34,11) [watchdog/0]
(root,0,0,00:00:29,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:32,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:49,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:27,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:07,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:31,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:35,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:26,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:30,39) [watchdog/6]
(root,0,0,00:00:02,40) [migration/6]
(root,0,0,00:01:33,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:25,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:31,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:29,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:25,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:31,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:34,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:25,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:25,69) [watchdog/12]
(root,0,0,00:00:03,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:03,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:23,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:28,79) [watchdog/14]
(root,0,0,00:00:18,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:26,84) [watchdog/15]
(root,0,0,00:00:23,85) [migration/15]
(root,0,0,00:00:09,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:26,89) [watchdog/16]
(root,0,0,00:00:03,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:23,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:25,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:23,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:04,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:30,109) [watchdog/20]
(root,0,0,00:00:03,110) [migration/20]
(root,0,0,00:01:27,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:23,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:30,119) [watchdog/22]
(root,0,0,00:00:02,120) [migration/22]
(root,0,0,00:01:29,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:23,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:11,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:26,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:02,231) [kauditd]
(root,0,0,00:00:24,399) [kworker/16:1]
(root,11795136,77588,00:04:40,405) node /app/dist/index.js
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,449) [kworker/10:2]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:03,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:08,509) [kworker/11:1]
(root,0,0,00:00:03,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,00:45:08,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,39060,5248,00:29:05,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:06,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:01,931) [xfsaild/dm-2]
(root,55532,1084,00:00:13,950) /sbin/auditd
(root,26612,1956,00:02:35,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:06:07,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:08,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:34:58,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:13,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,548936,4984,00:19:55,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,04:33:30,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:04:23,1477) /usr/sbin/bird
(root,3736516,47896,04:53:59,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:05:30,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:12:58,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24204,02:35:43,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:08,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14372,00:03:22,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,15984,00:03:22,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:07,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17676,3640,00:00:28,2572) nginx: worker process
(101,17544,3548,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:03,3032) [kworker/6:1H]
(root,0,0,00:00:00,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3240) [kworker/4:1H]
(root,0,0,00:00:00,3403) [kworker/10:1H]
(root,0,0,00:00:00,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:03,4641) [kworker/9:2]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(speedte+,4600016,267092,00:19:21,7714) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,8054) [kworker/11:0]
(root,0,0,00:00:00,8067) [kworker/9:0]
(root,0,0,00:00:08,8902) [kworker/0:1]
(root,0,0,00:00:00,9227) [kworker/u98:2]
(root,0,0,00:00:15,9726) [kworker/15:1]
(root,0,0,00:01:27,11187) [kworker/4:2]
(root,0,0,00:00:16,13350) [kworker/2:2]
(speedte+,57692,41332,03:35:10,15766) /home/speedtest/OoklaServer --daemon
(root,0,0,00:00:00,17110) [kworker/1:2]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:05,19580) [kworker/7:1]
(root,0,0,00:00:01,19960) [kworker/1:1]
(root,0,0,00:00:01,20142) [kworker/0:0]
(root,0,0,00:00:24,20782) [kworker/14:0]
(root,0,0,00:00:17,20936) [kworker/20:1]
(root,0,0,00:00:00,21056) [kworker/5:1]
(root,0,0,00:00:00,21764) [kworker/15:0]
(root,0,0,00:00:00,24873) [kworker/19:2]
(speedte+,14236,2476,00:00:00,26330) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:01:30,29226) [kworker/2:0]
(root,0,0,00:00:00,29624) [kworker/u97:2]
(root,0,0,00:00:12,31428) [kworker/22:0]
(root,0,0,00:00:00,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,0,0,00:00:00,34700) [kworker/u98:1]
(root,59456,1284,00:00:00,34854) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59912,2532,00:00:12,34855) nginx: worker process
(nginx,59912,2428,00:00:13,34856) nginx: worker process
(nginx,59912,3028,00:00:17,34857) nginx: worker process
(nginx,59912,3816,00:00:22,34858) nginx: worker process
(nginx,59912,3688,00:00:23,34859) nginx: worker process
(nginx,59912,3828,00:00:24,34860) nginx: worker process
(nginx,59912,3748,00:00:21,34861) nginx: worker process
(nginx,62056,4484,00:00:21,34862) nginx: worker process
(nginx,59988,3916,00:00:22,34863) nginx: worker process
(nginx,59988,3960,00:00:22,34865) nginx: worker process
(nginx,62064,4492,00:00:25,34866) nginx: worker process
(nginx,62064,4572,00:00:24,34867) nginx: worker process
(nginx,62052,4556,00:00:27,34868) nginx: worker process
(nginx,62064,4572,00:00:34,34869) nginx: worker process
(nginx,62064,4616,00:00:40,34870) nginx: worker process
(nginx,62052,4568,00:00:47,34871) nginx: worker process
(nginx,62064,4648,00:00:57,34872) nginx: worker process
(nginx,62064,4652,00:01:01,34873) nginx: worker process
(nginx,62064,4576,00:01:16,34874) nginx: worker process
(nginx,62064,4652,00:01:30,34875) nginx: worker process
(nginx,62064,4648,00:02:13,34876) nginx: worker process
(nginx,62064,4656,00:03:26,34877) nginx: worker process
(nginx,62064,4656,00:05:43,34878) nginx: worker process
(nginx,59988,3920,00:00:52,34879) nginx: worker process
(root,0,0,00:00:00,37082) [kworker/8:1]
(root,0,0,00:00:00,37680) [kworker/7:2]
(root,0,0,00:00:23,37949) [kworker/10:0]
(speedte+,2480388,146624,00:06:11,38020) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,38080) [kworker/20:0]
(root,0,0,00:00:15,38173) [kworker/8:2]
(root,0,0,00:00:00,38339) [kworker/u97:1]
(root,0,0,00:00:00,38815) [kworker/6:1]
(root,0,0,00:00:00,39283) [kworker/6:2]
(root,0,0,00:00:00,39549) [kworker/6:0]
(root,0,0,00:00:35,39955) [kworker/22:2]
(root,115416,1604,00:00:00,39979) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,39985) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,39986) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,41697) [kworker/4:1]
(root,0,0,00:00:11,41834) [kworker/5:0]
(speedte+,4600016,267092,00:20:55,42453) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,45991) [kworker/u96:1]
(root,0,0,00:02:11,46446) [kworker/u96:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,422028,5252,00:00:07,48522) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,2364,368,00:00:06,48546) /usr/bin/tini -- /entrypoint.sh
(root,4016,1692,00:00:00,48573) bash /entrypoint.sh

Found on 2024-09-15 22:17

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce8f2910db

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4152,00:08:58,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:55,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:06:02,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:34,11) [watchdog/0]
(root,0,0,00:00:28,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:31,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:46,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:26,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:06,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:31,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:32,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:25,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:30,39) [watchdog/6]
(root,0,0,00:00:02,40) [migration/6]
(root,0,0,00:01:31,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:25,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:30,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:27,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:25,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:31,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:31,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:25,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:25,69) [watchdog/12]
(root,0,0,00:00:03,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:03,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:23,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:28,79) [watchdog/14]
(root,0,0,00:00:17,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:26,84) [watchdog/15]
(root,0,0,00:00:22,85) [migration/15]
(root,0,0,00:00:09,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:26,89) [watchdog/16]
(root,0,0,00:00:03,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:23,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:25,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:23,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:04,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:29,109) [watchdog/20]
(root,0,0,00:00:03,110) [migration/20]
(root,0,0,00:01:25,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:23,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:29,119) [watchdog/22]
(root,0,0,00:00:02,120) [migration/22]
(root,0,0,00:01:26,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:22,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:11,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:25,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:02,231) [kauditd]
(root,0,0,00:00:24,399) [kworker/16:1]
(root,11798856,81328,00:16:52,425) node /app/dist/index.js
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,449) [kworker/10:2]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:03,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:08,509) [kworker/11:1]
(root,0,0,00:00:03,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,00:44:04,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,71828,32616,00:28:27,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:06,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:01,931) [xfsaild/dm-2]
(root,55532,1084,00:00:13,950) /sbin/auditd
(root,26612,1956,00:02:32,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:06:01,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:08,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:34:16,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:13,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,572164,21992,00:19:30,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,04:28:03,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:04:17,1477) /usr/sbin/bird
(root,3736516,47248,04:48:14,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:05:23,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:12:42,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2472492,24188,02:32:39,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:08,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13944,00:03:17,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,15048,00:03:17,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:07,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17576,3640,00:00:27,2572) nginx: worker process
(101,17544,3548,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:03,3032) [kworker/6:1H]
(root,0,0,00:00:00,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3240) [kworker/4:1H]
(root,0,0,00:00:00,3403) [kworker/10:1H]
(root,0,0,00:00:00,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:02,4641) [kworker/9:2]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(speedte+,4600016,267092,00:19:21,7714) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,8054) [kworker/11:0]
(root,0,0,00:00:00,8067) [kworker/9:0]
(root,0,0,00:00:04,8902) [kworker/0:1]
(root,0,0,00:00:00,8966) [kworker/u97:1]
(root,0,0,00:00:00,9227) [kworker/u98:2]
(root,0,0,00:00:14,9726) [kworker/15:1]
(root,0,0,00:01:23,11187) [kworker/4:2]
(root,0,0,00:00:00,13035) [kworker/u98:1]
(root,0,0,00:00:03,13350) [kworker/2:2]
(speedte+,56656,41032,02:44:38,15766) /home/speedtest/OoklaServer --daemon
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:05,19580) [kworker/7:1]
(root,0,0,00:00:01,20049) [kworker/1:2]
(root,0,0,00:00:00,20142) [kworker/0:0]
(root,0,0,00:00:23,20782) [kworker/14:0]
(root,0,0,00:00:13,20936) [kworker/20:1]
(root,0,0,00:00:00,21056) [kworker/5:1]
(root,0,0,00:00:00,21764) [kworker/15:0]
(root,0,0,00:00:10,22989) [kworker/1:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(speedte+,14236,2476,00:00:00,26330) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:01:30,29226) [kworker/2:0]
(root,0,0,00:00:00,29624) [kworker/u97:2]
(root,0,0,00:00:12,31428) [kworker/22:0]
(root,0,0,00:00:00,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,59456,1284,00:00:00,34854) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59912,2528,00:00:11,34855) nginx: worker process
(nginx,59912,2428,00:00:13,34856) nginx: worker process
(nginx,59912,3028,00:00:16,34857) nginx: worker process
(nginx,59912,3816,00:00:21,34858) nginx: worker process
(nginx,59912,3688,00:00:22,34859) nginx: worker process
(nginx,59912,3828,00:00:23,34860) nginx: worker process
(nginx,59912,3748,00:00:20,34861) nginx: worker process
(nginx,62056,4484,00:00:21,34862) nginx: worker process
(nginx,59988,3916,00:00:21,34863) nginx: worker process
(nginx,59988,3960,00:00:21,34865) nginx: worker process
(nginx,62064,4492,00:00:24,34866) nginx: worker process
(nginx,62064,4572,00:00:22,34867) nginx: worker process
(nginx,62052,4556,00:00:27,34868) nginx: worker process
(nginx,62064,4572,00:00:34,34869) nginx: worker process
(nginx,62064,4616,00:00:38,34870) nginx: worker process
(nginx,62052,4560,00:00:46,34871) nginx: worker process
(nginx,62064,4648,00:00:57,34872) nginx: worker process
(nginx,62064,4652,00:00:59,34873) nginx: worker process
(nginx,62064,4576,00:01:15,34874) nginx: worker process
(nginx,62064,4648,00:01:28,34875) nginx: worker process
(nginx,62064,4648,00:02:10,34876) nginx: worker process
(nginx,62064,4580,00:03:17,34877) nginx: worker process
(nginx,62064,4656,00:05:33,34878) nginx: worker process
(nginx,59988,3876,00:00:49,34879) nginx: worker process
(root,0,0,00:00:00,37082) [kworker/8:1]
(root,0,0,00:00:00,37680) [kworker/7:2]
(root,0,0,00:00:18,37949) [kworker/10:0]
(speedte+,2480388,146624,00:06:11,38020) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,38080) [kworker/20:0]
(root,0,0,00:00:10,38173) [kworker/8:2]
(root,0,0,00:00:32,39955) [kworker/22:2]
(root,0,0,00:00:00,41697) [kworker/4:1]
(root,0,0,00:00:10,41834) [kworker/5:0]
(speedte+,4600016,267092,00:20:55,42453) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,42771) [kworker/6:1]
(root,0,0,00:00:00,43353) [kworker/6:2]
(root,0,0,00:00:00,43565) [kworker/6:0]
(root,115416,1608,00:00:00,43722) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,43728) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,43729) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:01:33,46446) [kworker/u96:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,422284,5308,00:00:27,48553) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:25,48573) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,48597) bash /entrypoint.sh
(root,0,0,00:00:00,48690) [kworker/u96:0]

Found on 2024-09-13 23:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce18b48646

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4152,00:08:47,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:51,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:02:08,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:33,11) [watchdog/0]
(root,0,0,00:00:27,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:31,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:43,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:25,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:06,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:30,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:29,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:25,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:29,39) [watchdog/6]
(root,0,0,00:00:02,40) [migration/6]
(root,0,0,00:01:28,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:24,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:30,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:24,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:24,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:30,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:28,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:24,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:24,69) [watchdog/12]
(root,0,0,00:00:03,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:02,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:22,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:27,79) [watchdog/14]
(root,0,0,00:00:17,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:25,84) [watchdog/15]
(root,0,0,00:00:22,85) [migration/15]
(root,0,0,00:00:09,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:25,89) [watchdog/16]
(root,0,0,00:00:03,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:22,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:24,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:22,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:03,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:29,109) [watchdog/20]
(root,0,0,00:00:03,110) [migration/20]
(root,0,0,00:01:22,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:22,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:28,119) [watchdog/22]
(root,0,0,00:00:02,120) [migration/22]
(root,0,0,00:01:24,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:22,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:11,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:25,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:02,231) [kauditd]
(root,0,0,00:00:23,399) [kworker/16:1]
(root,11798344,79508,00:12:30,425) node /app/dist/index.js
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,449) [kworker/10:2]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:03,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:08,509) [kworker/11:1]
(root,0,0,00:00:03,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,00:42:59,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,125076,65196,00:27:49,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:06,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:01,931) [xfsaild/dm-2]
(root,55532,1084,00:00:12,950) /sbin/auditd
(root,26612,1956,00:02:29,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:05:54,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:08,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:33:34,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:13,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1286) [kworker/5:2]
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,624176,41480,00:19:04,1475) /usr/sbin/rsyslogd -n
(root,229048,12872,04:22:29,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:04:12,1477) /usr/sbin/bird
(root,3736516,49948,04:42:23,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:05:17,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:12:27,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2464296,25588,02:29:32,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:08,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,13592,00:03:13,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,15024,00:03:13,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:07,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17576,3640,00:00:27,2572) nginx: worker process
(101,17544,3548,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:03,3032) [kworker/6:1H]
(root,0,0,00:00:00,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3240) [kworker/4:1H]
(root,0,0,00:00:00,3403) [kworker/10:1H]
(root,0,0,00:00:00,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,4641) [kworker/9:2]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(speedte+,4600016,267092,00:19:21,7714) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,8054) [kworker/11:0]
(root,0,0,00:00:00,8966) [kworker/u97:1]
(root,0,0,00:00:00,9121) [kworker/u97:0]
(root,0,0,00:00:14,9726) [kworker/15:1]
(root,0,0,00:00:01,9844) [kworker/0:0]
(root,0,0,00:01:18,11187) [kworker/4:2]
(root,0,0,00:00:00,13350) [kworker/2:2]
(speedte+,53172,37592,01:52:41,15766) /home/speedtest/OoklaServer --daemon
(root,0,0,00:00:00,17564) [kworker/1:2]
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:04,19580) [kworker/7:1]
(root,0,0,00:00:22,20782) [kworker/14:0]
(root,0,0,00:00:10,20936) [kworker/20:1]
(root,0,0,00:00:00,21764) [kworker/15:0]
(root,0,0,00:00:01,22989) [kworker/1:1]
(root,0,0,00:00:00,24873) [kworker/19:2]
(speedte+,14236,2476,00:00:00,26330) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:03,27003) [kworker/0:2]
(root,0,0,00:00:00,27318) [kworker/u98:0]
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:01:19,29226) [kworker/2:0]
(root,0,0,00:00:12,31428) [kworker/22:0]
(root,0,0,00:00:00,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,59456,1284,00:00:00,34854) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59912,2528,00:00:11,34855) nginx: worker process
(nginx,59912,2428,00:00:12,34856) nginx: worker process
(nginx,59912,3028,00:00:15,34857) nginx: worker process
(nginx,59912,3816,00:00:20,34858) nginx: worker process
(nginx,59912,3688,00:00:21,34859) nginx: worker process
(nginx,59912,3828,00:00:22,34860) nginx: worker process
(nginx,59912,3748,00:00:19,34861) nginx: worker process
(nginx,62056,4484,00:00:20,34862) nginx: worker process
(nginx,59988,3916,00:00:20,34863) nginx: worker process
(nginx,59988,3960,00:00:20,34865) nginx: worker process
(nginx,62064,4492,00:00:23,34866) nginx: worker process
(nginx,62064,4560,00:00:21,34867) nginx: worker process
(nginx,62052,4556,00:00:26,34868) nginx: worker process
(nginx,62064,4572,00:00:33,34869) nginx: worker process
(nginx,62064,4616,00:00:37,34870) nginx: worker process
(nginx,62052,4560,00:00:44,34871) nginx: worker process
(nginx,62064,4648,00:00:55,34872) nginx: worker process
(nginx,62064,4648,00:00:57,34873) nginx: worker process
(nginx,62064,4576,00:01:13,34874) nginx: worker process
(nginx,62064,4648,00:01:26,34875) nginx: worker process
(nginx,62064,4648,00:02:08,34876) nginx: worker process
(nginx,62064,4580,00:03:14,34877) nginx: worker process
(nginx,62064,4652,00:05:29,34878) nginx: worker process
(nginx,59988,3876,00:00:47,34879) nginx: worker process
(root,0,0,00:00:00,37082) [kworker/8:1]
(root,0,0,00:00:00,37680) [kworker/7:2]
(root,0,0,00:00:14,37949) [kworker/10:0]
(speedte+,2480388,146624,00:06:11,38020) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,38080) [kworker/20:0]
(root,0,0,00:00:05,38173) [kworker/8:2]
(root,0,0,00:00:29,39955) [kworker/22:2]
(root,0,0,00:00:00,40004) [kworker/u98:1]
(root,0,0,00:00:00,41697) [kworker/4:1]
(root,0,0,00:00:10,41834) [kworker/5:0]
(speedte+,4600016,267092,00:20:55,42453) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,43690) [kworker/9:1]
(root,0,0,00:00:54,46446) [kworker/u96:2]
(root,0,0,00:00:00,47467) [kworker/6:1]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:00,47999) [kworker/6:2]
(root,0,0,00:00:00,48343) [kworker/6:0]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,422284,5308,00:00:20,48553) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,115416,1604,00:00:00,48569) /bin/bash /usr/bin/check_mk_agent
(root,2364,368,00:00:18,48573) /usr/bin/tini -- /entrypoint.sh
(root,51732,1688,00:00:00,48584) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,48587) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,4016,1696,00:00:00,48597) bash /entrypoint.sh
(root,0,0,00:00:00,48690) [kworker/u96:0]

Found on 2024-09-12 00:22

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ceb82214b2

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51912,4152,00:08:44,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:50,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:01:07,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:33,11) [watchdog/0]
(root,0,0,00:00:27,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:30,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:42,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:25,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:06,27) [kworker/3:0]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:30,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:29,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:24,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:29,39) [watchdog/6]
(root,0,0,00:00:02,40) [migration/6]
(root,0,0,00:01:27,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:24,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:29,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:24,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:24,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:30,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:28,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:24,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:24,69) [watchdog/12]
(root,0,0,00:00:03,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:02,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:22,74) [watchdog/13]
(root,0,0,00:00:01,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:27,79) [watchdog/14]
(root,0,0,00:00:17,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:25,84) [watchdog/15]
(root,0,0,00:00:21,85) [migration/15]
(root,0,0,00:00:09,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:25,89) [watchdog/16]
(root,0,0,00:00:03,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:03,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:22,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:24,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:22,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:03,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:29,109) [watchdog/20]
(root,0,0,00:00:03,110) [migration/20]
(root,0,0,00:01:22,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:22,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:28,119) [watchdog/22]
(root,0,0,00:00:02,120) [migration/22]
(root,0,0,00:01:23,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:22,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:11,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:25,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,177) [ipv6_addrconf]
(root,0,0,00:00:00,191) [deferwq]
(root,0,0,00:00:02,231) [kauditd]
(root,0,0,00:00:23,399) [kworker/16:1]
(root,11797832,79444,00:11:22,425) node /app/dist/index.js
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,442) [scsi_tmf_0]
(root,0,0,00:00:00,443) [ata_sff]
(root,0,0,00:00:00,449) [kworker/10:2]
(root,0,0,00:00:00,451) [scsi_eh_1]
(root,0,0,00:00:00,452) [scsi_tmf_1]
(root,0,0,00:00:00,453) [scsi_eh_2]
(root,0,0,00:00:00,454) [scsi_tmf_2]
(root,0,0,00:00:00,455) [scsi_eh_3]
(root,0,0,00:00:00,456) [scsi_tmf_3]
(root,0,0,00:00:00,457) [scsi_eh_4]
(root,0,0,00:00:00,458) [scsi_tmf_4]
(root,0,0,00:00:00,459) [scsi_eh_5]
(root,0,0,00:00:00,460) [scsi_tmf_5]
(root,0,0,00:00:00,461) [scsi_eh_6]
(root,0,0,00:00:00,462) [scsi_tmf_6]
(root,0,0,00:00:00,468) [ttm_swap]
(root,0,0,00:00:02,470) [kworker/13:1]
(root,0,0,00:00:03,483) [kworker/21:1]
(root,0,0,00:00:03,505) [kworker/12:1]
(root,0,0,00:00:08,509) [kworker/11:1]
(root,0,0,00:00:03,510) [kworker/23:1]
(root,0,0,00:00:00,560) [kdmflush]
(root,0,0,00:00:00,561) [bioset]
(root,0,0,00:00:00,572) [kdmflush]
(root,0,0,00:00:00,573) [bioset]
(root,0,0,00:00:00,586) [bioset]
(root,0,0,00:00:00,587) [xfsalloc]
(root,0,0,00:00:00,588) [xfs_mru_cache]
(root,0,0,00:00:00,589) [xfs-buf/dm-0]
(root,0,0,00:00:00,590) [xfs-data/dm-0]
(root,0,0,00:00:00,591) [xfs-conv/dm-0]
(root,0,0,00:00:00,592) [xfs-cil/dm-0]
(root,0,0,00:00:00,593) [xfs-reclaim/dm-]
(root,0,0,00:00:00,594) [xfs-log/dm-0]
(root,0,0,00:00:00,595) [xfs-eofblocks/d]
(root,0,0,00:42:40,596) [xfsaild/dm-0]
(root,0,0,00:00:00,597) [kworker/1:1H]
(root,88120,41088,00:27:39,677) /usr/lib/systemd/systemd-journald
(root,198572,3404,00:00:00,702) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,704) [bond0]
(root,46156,2608,00:00:00,715) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,781) [bnx2x]
(root,0,0,00:00:00,782) [bnx2x_iov]
(root,0,0,00:00:00,820) [kvm-irqfd-clean]
(root,0,0,00:00:00,853) [kworker/11:1H]
(root,0,0,00:00:06,900) [kworker/17:2]
(root,0,0,00:00:03,903) [kworker/14:1H]
(root,0,0,00:00:00,908) [xfs-buf/sda1]
(root,0,0,00:00:00,909) [xfs-data/sda1]
(root,0,0,00:00:00,910) [xfs-conv/sda1]
(root,0,0,00:00:00,911) [xfs-cil/sda1]
(root,0,0,00:00:00,912) [xfs-reclaim/sda]
(root,0,0,00:00:00,913) [xfs-log/sda1]
(root,0,0,00:00:00,914) [xfs-eofblocks/s]
(root,0,0,00:00:00,915) [xfsaild/sda1]
(root,0,0,00:00:00,918) [kdmflush]
(root,0,0,00:00:00,919) [bioset]
(root,0,0,00:00:00,924) [xfs-buf/dm-2]
(root,0,0,00:00:00,925) [xfs-data/dm-2]
(root,0,0,00:00:00,926) [xfs-conv/dm-2]
(root,0,0,00:00:00,927) [xfs-cil/dm-2]
(root,0,0,00:00:00,928) [xfs-reclaim/dm-]
(root,0,0,00:00:00,929) [xfs-log/dm-2]
(root,0,0,00:00:00,930) [xfs-eofblocks/d]
(root,0,0,00:00:01,931) [xfsaild/dm-2]
(root,55532,1084,00:00:12,950) /sbin/auditd
(root,26612,1956,00:02:29,973) /usr/lib/systemd/systemd-logind
(dbus,58220,2440,00:05:52,974) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612352,12480,00:00:08,977) /usr/lib/polkit-1/polkitd --no-debug
(root,21648,1368,00:33:22,978) /usr/sbin/irqbalance --foreground
(root,126384,1608,00:00:13,1004) /usr/sbin/crond -n
(root,0,0,00:00:00,1048) [kworker/23:2]
(root,110208,860,00:00:00,1053) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1286) [kworker/5:2]
(root,112940,4348,00:00:00,1472) /usr/sbin/sshd -D
(root,594200,26744,00:18:57,1475) /usr/sbin/rsyslogd -n
(root,229084,12908,04:20:58,1476) /usr/sbin/snmpd -LS0-6d -f
(root,41600,1460,00:04:11,1477) /usr/sbin/bird
(root,3736516,47816,04:40:46,1478) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,260416,10896,00:05:15,1480) php-fpm: master process (/etc/php-fpm.conf)
(root,586424,20212,00:12:23,1482) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,115812,704,00:00:00,1500) /usr/bin/rhsmcertd
(root,0,0,00:00:00,1552) [kworker/9:1H]
(root,0,0,00:00:00,1553) [kworker/7:1H]
(root,0,0,00:00:00,1554) [kworker/5:1H]
(root,2464296,24388,02:28:41,1847) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:08,1946) [kworker/18:2]
(root,0,0,00:00:00,1947) [kworker/0:1H]
(root,2007796,14568,00:03:12,2156) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,15792,00:03:12,2170) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,422284,5228,00:00:07,2184) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,2231) nginx: master process nginx -g daemon off;
(root,0,0,00:00:00,2255) [kworker/3:1H]
(101,17576,3640,00:00:27,2572) nginx: worker process
(101,17544,3548,00:00:00,2573) nginx: worker process
(101,17492,3112,00:00:00,2574) nginx: worker process
(101,17476,3096,00:00:00,2575) nginx: worker process
(101,17476,3096,00:00:00,2576) nginx: worker process
(101,17464,1852,00:00:00,2577) nginx: worker process
(101,17464,1852,00:00:00,2578) nginx: worker process
(101,17464,1852,00:00:00,2579) nginx: worker process
(101,17464,1852,00:00:00,2580) nginx: worker process
(101,17464,1852,00:00:00,2581) nginx: worker process
(101,17464,1852,00:00:00,2582) nginx: worker process
(101,17464,1852,00:00:00,2583) nginx: worker process
(101,17464,1852,00:00:00,2585) nginx: worker process
(101,17464,1852,00:00:00,2586) nginx: worker process
(101,17464,1852,00:00:00,2587) nginx: worker process
(101,17464,1852,00:00:00,2589) nginx: worker process
(101,17464,1852,00:00:00,2590) nginx: worker process
(101,17464,1852,00:00:00,2591) nginx: worker process
(101,17464,1856,00:00:00,2592) nginx: worker process
(101,17464,1856,00:00:00,2593) nginx: worker process
(101,17464,1856,00:00:00,2594) nginx: worker process
(101,17464,1856,00:00:00,2595) nginx: worker process
(101,17464,1856,00:00:00,2596) nginx: worker process
(101,17464,1856,00:00:00,2597) nginx: worker process
(root,0,0,00:00:05,2783) [kworker/16:1H]
(root,0,0,00:00:00,3024) [kworker/15:1H]
(root,0,0,00:00:03,3032) [kworker/6:1H]
(root,0,0,00:00:00,3055) [kworker/2:1H]
(root,0,0,00:00:00,3107) [kworker/17:1H]
(root,0,0,00:00:00,3240) [kworker/4:1H]
(root,0,0,00:00:00,3403) [kworker/10:1H]
(root,0,0,00:00:00,3740) [kworker/8:1H]
(iperf,17296,8712,00:00:35,3953) /usr/bin/iperf3 -s
(root,0,0,00:00:00,4618) [kworker/13:1H]
(root,0,0,00:00:01,4641) [kworker/9:2]
(root,0,0,00:00:01,5195) [kworker/18:1H]
(root,0,0,00:00:00,6778) [kworker/21:2]
(root,0,0,00:00:00,7285) [kworker/12:1H]
(root,0,0,00:00:00,7441) [kworker/23:1H]
(speedte+,4600016,267092,00:19:21,7714) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:00,8045) [kworker/u98:2]
(root,0,0,00:00:00,8054) [kworker/11:0]
(root,0,0,00:00:00,8966) [kworker/u97:1]
(root,0,0,00:00:00,9121) [kworker/u97:0]
(root,0,0,00:00:00,9350) [kworker/6:2]
(root,0,0,00:00:00,9553) [kworker/6:1]
(root,0,0,00:00:14,9726) [kworker/15:1]
(root,0,0,00:00:00,9844) [kworker/0:0]
(root,0,0,00:00:00,10091) [kworker/6:0]
(root,115416,1604,00:00:00,10259) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,10265) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,10266) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:01:17,11187) [kworker/4:2]
(root,0,0,00:00:00,13350) [kworker/2:2]
(root,0,0,00:00:03,13948) [kworker/9:0]
(speedte+,52280,37256,01:42:10,15766) /home/speedtest/OoklaServer --daemon
(root,0,0,00:00:00,18963) [kworker/22:1H]
(root,0,0,00:00:00,19119) [kworker/21:1H]
(root,0,0,00:00:04,19580) [kworker/7:1]
(root,0,0,00:00:22,20782) [kworker/14:0]
(root,0,0,00:00:09,20936) [kworker/20:1]
(root,0,0,00:00:00,21764) [kworker/15:0]
(root,0,0,00:00:00,24873) [kworker/19:2]
(speedte+,14236,2476,00:00:00,26330) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:03,27003) [kworker/0:2]
(root,0,0,00:00:00,27351) [kworker/3:2]
(root,0,0,00:01:16,29226) [kworker/2:0]
(root,0,0,00:00:12,31428) [kworker/22:0]
(root,0,0,00:00:00,31878) [kworker/14:1]
(root,0,0,00:00:00,34480) [kworker/19:1H]
(root,59456,1284,00:00:00,34854) nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
(nginx,59912,2528,00:00:11,34855) nginx: worker process
(nginx,59912,2428,00:00:12,34856) nginx: worker process
(nginx,59912,3028,00:00:15,34857) nginx: worker process
(nginx,59912,3816,00:00:20,34858) nginx: worker process
(nginx,59912,3688,00:00:21,34859) nginx: worker process
(nginx,59912,3828,00:00:22,34860) nginx: worker process
(nginx,59912,3748,00:00:19,34861) nginx: worker process
(nginx,62056,4484,00:00:20,34862) nginx: worker process
(nginx,59988,3916,00:00:19,34863) nginx: worker process
(nginx,59988,3960,00:00:20,34865) nginx: worker process
(nginx,62064,4492,00:00:23,34866) nginx: worker process
(nginx,62064,4560,00:00:21,34867) nginx: worker process
(nginx,62052,4556,00:00:26,34868) nginx: worker process
(nginx,62064,4572,00:00:32,34869) nginx: worker process
(nginx,62064,4616,00:00:37,34870) nginx: worker process
(nginx,62052,4560,00:00:44,34871) nginx: worker process
(nginx,62064,4648,00:00:55,34872) nginx: worker process
(nginx,62064,4648,00:00:57,34873) nginx: worker process
(nginx,62064,4576,00:01:13,34874) nginx: worker process
(nginx,62064,4648,00:01:26,34875) nginx: worker process
(nginx,62064,4648,00:02:07,34876) nginx: worker process
(nginx,62064,4580,00:03:14,34877) nginx: worker process
(nginx,62064,4652,00:05:29,34878) nginx: worker process
(nginx,59988,3876,00:00:47,34879) nginx: worker process
(root,0,0,00:00:00,37082) [kworker/8:1]
(root,0,0,00:00:00,37680) [kworker/7:2]
(root,0,0,00:00:13,37949) [kworker/10:0]
(speedte+,2480388,146624,00:06:11,38020) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(root,0,0,00:00:00,38080) [kworker/20:0]
(root,0,0,00:00:04,38173) [kworker/8:2]
(root,0,0,00:00:28,39955) [kworker/22:2]
(root,0,0,00:00:00,40004) [kworker/u98:1]
(root,0,0,00:00:00,41697) [kworker/4:1]
(root,0,0,00:00:10,41834) [kworker/5:0]
(speedte+,4600016,267092,00:20:55,42453) /home/speedtest/OoklaServer --pidfile=/home/speedtest/OoklaServer.pid --server-id=7fdac9ed-840e-416b-8be7-d2fad5055c97
(root,0,0,00:00:01,42920) [kworker/1:0]
(root,0,0,00:00:43,46446) [kworker/u96:2]
(root,0,0,00:00:00,47770) [kworker/20:1H]
(root,0,0,00:00:03,48391) [kworker/1:1]
(root,0,0,00:00:00,48526) [kworker/17:0]
(root,422284,5308,00:00:18,48553) /usr/bin/docker-containerd-shim-current 4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /var/run/docker/libcontainerd/4be0ba142f099a465175d1d93ef10124c4d832c978bb682561544adfd5112e1f /usr/libexec/docker/docker-runc-current
(root,2364,368,00:00:16,48573) /usr/bin/tini -- /entrypoint.sh
(root,4016,1696,00:00:00,48597) bash /entrypoint.sh
(root,0,0,00:00:00,48690) [kworker/u96:0]

Found on 2024-09-11 11:26

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce5fc513d3

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4148,00:47:25,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:02:34,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,05:06:21,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:58,11) [watchdog/0]
(root,0,0,00:00:52,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:57,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:44,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:50,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:56,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:02:21,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:49,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:56,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:02:21,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:49,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:56,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:25,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:50,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:56,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:22,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:49,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:50,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:49,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:53,79) [watchdog/14]
(root,0,0,00:00:16,80) [migration/14]
(root,0,0,00:00:10,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:51,84) [watchdog/15]
(root,0,0,00:00:16,85) [migration/15]
(root,0,0,00:00:04,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:50,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:49,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:50,99) [watchdog/18]
(root,0,0,00:00:02,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:49,104) [watchdog/19]
(root,0,0,00:00:03,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:54,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:02:13,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:49,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:01,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:54,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:02:12,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:49,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:15,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:12,145) [kworker/18:1]
(root,0,0,00:15:42,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:46,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:04,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:04,467) [kworker/17:1]
(root,0,0,00:00:24,500) [kworker/12:1]
(root,0,0,00:00:09,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:31:17,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,112420,59976,00:49:36,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:03,928) [xfsaild/dm-2]
(root,55532,1084,00:00:23,947) /sbin/auditd
(root,26612,2068,00:04:20,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,01:03:38,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:14,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2536,00:10:37,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:23,1012) /usr/sbin/crond -n
(root,99388,2680,00:00:00,1056) login -- root
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:10:04,1403) php-fpm: master process (/etc/php-fpm.conf)
(root,229048,12540,05:51:22,1406) /usr/sbin/snmpd -LS0-6d -f
(root,567600,40400,00:34:52,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:23:09,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1516,00:07:51,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:18,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,1993) [kworker/15:2]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:01:03,2843) [kworker/8:2]
(root,0,0,00:00:00,3257) [kworker/u96:1]
(root,0,0,00:00:00,4128) [kworker/11:1]
(root,0,0,00:00:01,4360) [kworker/5:1]
(root,0,0,00:00:28,4377) [kworker/20:0]
(root,0,0,00:01:20,5502) [kworker/u96:2]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6170) [kworker/14:1]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7145) [kworker/16:2]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:02,11759) [kworker/5:0]
(root,115676,2056,00:00:00,11768) -bash
(root,0,0,00:00:07,12651) [kworker/10:1]
(root,0,0,00:00:00,13095) [kworker/u98:1]
(root,0,0,00:00:00,13671) [kworker/9:1]
(root,0,0,00:00:01,15211) [kworker/u98:2]
(root,0,0,00:00:42,17597) [kworker/6:0]
(root,0,0,00:03:00,18023) [kworker/15:0]
(nginx,50512,2548,00:00:10,18857) nginx: worker process
(nginx,50512,4020,00:00:12,18858) nginx: worker process
(nginx,50512,3740,00:00:21,18859) nginx: worker process
(nginx,50512,2600,00:00:16,18860) nginx: worker process
(nginx,50512,3784,00:00:20,18861) nginx: worker process
(nginx,50512,3948,00:00:21,18862) nginx: worker process
(nginx,50512,3968,00:00:19,18863) nginx: worker process
(nginx,50512,3964,00:00:21,18864) nginx: worker process
(nginx,50512,4240,00:00:20,18865) nginx: worker process
(nginx,50512,3980,00:00:21,18866) nginx: worker process
(nginx,50512,3964,00:00:23,18867) nginx: worker process
(nginx,50512,3980,00:00:22,18868) nginx: worker process
(nginx,50512,4140,00:00:28,18869) nginx: worker process
(nginx,50512,3984,00:00:30,18870) nginx: worker process
(nginx,50512,4244,00:00:30,18871) nginx: worker process
(nginx,50512,4244,00:00:38,18872) nginx: worker process
(nginx,50512,4248,00:00:43,18873) nginx: worker process
(nginx,50512,4244,00:00:49,18874) nginx: worker process
(nginx,50512,4248,00:01:05,18875) nginx: worker process
(nginx,50512,4252,00:01:11,18876) nginx: worker process
(nginx,50512,4248,00:01:54,18877) nginx: worker process
(nginx,50512,4340,00:03:16,18878) nginx: worker process
(nginx,50644,4596,00:05:17,18879) nginx: worker process
(nginx,50512,3916,00:00:44,18880) nginx: worker process
(root,0,0,00:00:09,19037) [kworker/22:1]
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:23,20421) [kworker/4:1]
(root,0,0,00:00:00,21245) [kworker/22:2]
(root,0,0,00:00:16,21685) [kworker/14:2]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3609420,47616,08:37:10,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2456100,28540,04:28:18,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:00,22091) [kworker/3:1]
(root,2196464,13092,00:00:33,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,2139124,16592,00:01:08,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:13,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17680,3720,00:00:21,22533) nginx: worker process
(101,17540,3544,00:00:00,22534) nginx: worker process
(101,17476,3128,00:00:00,22535) nginx: worker process
(101,17476,3100,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:00,22904) [kworker/3:2]
(root,0,0,00:00:00,23923) [kworker/10:2]
(root,0,0,00:00:00,23978) [kworker/3:0]
(root,115416,1608,00:00:00,24193) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,24200) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,24201) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:20,26866) [kworker/4:2]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,31762) [kworker/2:1]
(root,0,0,00:00:06,31833) [kworker/7:2]
(root,0,0,00:00:31,32793) [kworker/2:0]
(root,0,0,00:00:00,33394) [kworker/23:2]
(root,0,0,00:00:00,34629) [kworker/8:0]
(speedte+,194512,2892,00:02:09,35018) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,11761828,160620,12:17:05,35023) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=7489cf09-d417-45e7-b88b-63a9b56925fc
(root,0,0,00:00:06,35503) [kworker/0:1]
(root,0,0,00:00:00,36743) [kworker/20:2]
(root,0,0,00:00:00,38041) [kworker/6:2]
(root,0,0,00:00:05,38290) [kworker/0:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:00:03,41372) [kworker/9:0]
(root,0,0,00:00:01,42024) [kworker/u97:2]
(root,0,0,00:00:00,42067) [kworker/11:0]
(root,0,0,00:00:00,42450) [kworker/7:0]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,50508,3316,00:00:00,45154) nginx: master process /usr/sbin/nginx
(root,0,0,00:00:01,45879) [kworker/13:0]
(root,0,0,00:00:01,45913) [kworker/19:2]
(root,0,0,00:00:00,46725) [kworker/12:1H]

Found on 2023-05-05 11:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce0483970e

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4148,00:31:33,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:56,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:45:24,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:43,11) [watchdog/0]
(root,0,0,00:00:39,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:42,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:02:02,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:37,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:41,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:45,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:36,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:41,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:01:46,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:36,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:42,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:50,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:37,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:42,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:47,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:37,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:37,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:36,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:39,79) [watchdog/14]
(root,0,0,00:00:12,80) [migration/14]
(root,0,0,00:00:07,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:37,84) [watchdog/15]
(root,0,0,00:00:12,85) [migration/15]
(root,0,0,00:00:03,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:37,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:36,94) [watchdog/17]
(root,0,0,00:00:02,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:37,99) [watchdog/18]
(root,0,0,00:00:01,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:36,104) [watchdog/19]
(root,0,0,00:00:02,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:40,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:01:40,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:36,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:01,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:40,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:01:40,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:36,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:10,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:08,145) [kworker/18:1]
(root,0,0,00:11:38,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:34,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:02,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:02,467) [kworker/17:1]
(root,0,0,00:00:20,500) [kworker/12:1]
(root,0,0,00:00:07,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:21:56,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,47252,9628,00:36:16,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:02,928) [xfsaild/dm-2]
(root,55532,1080,00:00:17,947) /sbin/auditd
(root,26612,2068,00:03:13,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:47:05,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:11,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2536,00:07:52,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:17,1012) /usr/sbin/crond -n
(root,99388,2680,00:00:00,1056) login -- root
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:07:27,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1584,00:00:28,1404) /usr/bin/iperf3 -s
(root,229048,12540,04:20:36,1406) /usr/sbin/snmpd -LS0-6d -f
(root,502220,8360,00:25:34,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:17:06,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1516,00:05:53,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:13,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,1993) [kworker/15:2]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:08,2560) [kworker/0:0]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:01,4360) [kworker/5:1]
(root,0,0,00:00:00,5064) [kworker/10:2]
(root,0,0,00:00:02,5120) [kworker/20:1]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7145) [kworker/16:2]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,8654) [kworker/6:1]
(root,115676,2056,00:00:00,11768) -bash
(root,0,0,00:00:04,12579) [kworker/u98:0]
(root,0,0,00:00:00,12790) [kworker/2:0]
(root,0,0,00:00:01,13141) [kworker/7:0]
(root,0,0,00:00:18,15412) [kworker/10:0]
(root,0,0,00:00:00,16516) [kworker/9:2]
(root,0,0,00:00:00,17019) [kworker/u96:1]
(root,0,0,00:00:34,17067) [kworker/14:0]
(root,0,0,00:00:00,17731) [kworker/11:2]
(root,0,0,00:01:46,18023) [kworker/15:0]
(root,0,0,00:00:00,18167) [kworker/14:2]
(root,0,0,00:00:22,18508) [kworker/8:0]
(nginx,50512,2548,00:00:05,18857) nginx: worker process
(nginx,50512,3956,00:00:06,18858) nginx: worker process
(nginx,50512,2568,00:00:11,18859) nginx: worker process
(nginx,50512,2600,00:00:10,18860) nginx: worker process
(nginx,50512,3748,00:00:11,18861) nginx: worker process
(nginx,50512,3824,00:00:11,18862) nginx: worker process
(nginx,50512,3808,00:00:10,18863) nginx: worker process
(nginx,50512,3292,00:00:11,18864) nginx: worker process
(nginx,50512,3728,00:00:10,18865) nginx: worker process
(nginx,50512,3864,00:00:11,18866) nginx: worker process
(nginx,50512,3908,00:00:12,18867) nginx: worker process
(nginx,50512,3892,00:00:11,18868) nginx: worker process
(nginx,50512,3888,00:00:15,18869) nginx: worker process
(nginx,50512,3956,00:00:15,18870) nginx: worker process
(nginx,50512,4228,00:00:16,18871) nginx: worker process
(nginx,50512,4196,00:00:18,18872) nginx: worker process
(nginx,50512,3964,00:00:22,18873) nginx: worker process
(nginx,50512,4240,00:00:26,18874) nginx: worker process
(nginx,50512,4184,00:00:34,18875) nginx: worker process
(nginx,50512,4244,00:00:34,18876) nginx: worker process
(nginx,50512,4240,00:00:52,18877) nginx: worker process
(nginx,50512,4328,00:01:21,18878) nginx: worker process
(nginx,50644,4592,00:02:03,18879) nginx: worker process
(nginx,50512,3400,00:00:18,18880) nginx: worker process
(root,0,0,00:00:04,19497) [kworker/22:0]
(root,0,0,00:00:00,20171) [kworker/3:2]
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:00,20443) [kworker/3:1]
(root,0,0,00:00:00,21206) [kworker/3:0]
(root,115416,1608,00:00:00,21788) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,21794) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,21795) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3543884,48640,06:20:18,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2456100,28944,03:17:09,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3216,00:00:09,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,138656,5596,00:00:09,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:09,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3592,00:00:15,22533) nginx: worker process
(101,17536,3288,00:00:00,22534) nginx: worker process
(101,17476,3128,00:00:00,22535) nginx: worker process
(101,17476,3100,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(speedte+,194512,2892,00:01:49,26916) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,12969952,181724,15:34:11,26920) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=d604682e-b4ed-43d1-93ad-3ff155f76f21
(root,0,0,00:00:10,27865) [kworker/4:2]
(root,0,0,00:00:00,28517) [kworker/22:1]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,31454) [kworker/0:2]
(root,0,0,00:00:02,31833) [kworker/7:2]
(root,0,0,00:00:00,32732) [kworker/u98:2]
(root,0,0,00:00:00,32913) [kworker/20:0]
(root,0,0,00:00:00,33394) [kworker/23:2]
(root,0,0,00:01:11,34011) [kworker/6:0]
(root,0,0,00:00:00,34216) [kworker/4:1]
(root,0,0,00:00:16,34851) [kworker/2:1]
(root,0,0,00:00:02,35062) [kworker/5:2]
(root,0,0,00:00:00,35736) [kworker/11:1]
(root,0,0,00:00:00,37406) [kworker/8:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:02:59,41230) [kworker/u96:2]
(root,0,0,00:00:01,41372) [kworker/9:0]
(root,0,0,00:00:00,42024) [kworker/u97:2]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,50508,3316,00:00:00,45154) nginx: master process /usr/sbin/nginx
(root,0,0,00:00:00,45879) [kworker/13:0]
(root,0,0,00:00:00,45913) [kworker/19:2]
(root,0,0,00:00:00,46725) [kworker/12:1H]

Found on 2023-03-19 12:49

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce19c672cf

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4148,00:30:21,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:53,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:39:18,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:42,11) [watchdog/0]
(root,0,0,00:00:38,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:41,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:58,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:36,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:40,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:42,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:35,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:40,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:01:43,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:36,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:41,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:47,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:36,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:41,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:44,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:36,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:36,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:35,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:38,79) [watchdog/14]
(root,0,0,00:00:11,80) [migration/14]
(root,0,0,00:00:07,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:36,84) [watchdog/15]
(root,0,0,00:00:11,85) [migration/15]
(root,0,0,00:00:02,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:36,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:35,94) [watchdog/17]
(root,0,0,00:00:02,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:36,99) [watchdog/18]
(root,0,0,00:00:01,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:35,104) [watchdog/19]
(root,0,0,00:00:02,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:39,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:01:37,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:35,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:01,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:39,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:01:37,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:35,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:10,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:08,145) [kworker/18:1]
(root,0,0,00:11:19,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:33,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:02,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:02,467) [kworker/17:1]
(root,0,0,00:00:20,500) [kworker/12:1]
(root,0,0,00:00:07,505) [kworker/16:1]
(root,0,0,00:00:06,519) [kworker/20:2]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:21:23,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,55388,14728,00:35:19,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:02,928) [xfsaild/dm-2]
(root,55532,1080,00:00:16,947) /sbin/auditd
(root,26612,2068,00:03:08,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:45:50,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:11,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2536,00:07:40,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,0,0,00:00:06,988) [kworker/2:2]
(root,126420,1644,00:00:16,1012) /usr/sbin/crond -n
(root,99388,2680,00:00:00,1056) login -- root
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:07:15,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1584,00:00:28,1404) /usr/bin/iperf3 -s
(root,229048,12540,04:13:50,1406) /usr/sbin/snmpd -LS0-6d -f
(root,510264,11304,00:24:53,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:16:39,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1516,00:05:44,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:13,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,1993) [kworker/15:2]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:02,2560) [kworker/0:0]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:01,4360) [kworker/5:1]
(root,0,0,00:00:00,5064) [kworker/10:2]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7145) [kworker/16:2]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,115676,2056,00:00:00,11768) -bash
(root,0,0,00:00:00,12568) [kworker/u96:0]
(root,0,0,00:00:03,12579) [kworker/u98:0]
(root,0,0,00:00:01,13141) [kworker/7:0]
(root,0,0,00:00:12,15412) [kworker/10:0]
(root,0,0,00:00:00,16516) [kworker/9:2]
(root,0,0,00:01:40,18023) [kworker/15:0]
(root,0,0,00:00:00,18395) [kworker/3:1]
(root,0,0,00:00:16,18508) [kworker/8:0]
(nginx,50512,2548,00:00:04,18857) nginx: worker process
(nginx,50512,3956,00:00:05,18858) nginx: worker process
(nginx,50512,2568,00:00:10,18859) nginx: worker process
(nginx,50512,2600,00:00:09,18860) nginx: worker process
(nginx,50512,3712,00:00:10,18861) nginx: worker process
(nginx,50512,3712,00:00:11,18862) nginx: worker process
(nginx,50512,3808,00:00:09,18863) nginx: worker process
(nginx,50512,3292,00:00:10,18864) nginx: worker process
(nginx,50512,3728,00:00:10,18865) nginx: worker process
(nginx,50512,3852,00:00:11,18866) nginx: worker process
(nginx,50512,3908,00:00:11,18867) nginx: worker process
(nginx,50512,3892,00:00:11,18868) nginx: worker process
(nginx,50512,3888,00:00:14,18869) nginx: worker process
(nginx,50512,3956,00:00:14,18870) nginx: worker process
(nginx,50512,4228,00:00:15,18871) nginx: worker process
(nginx,50512,4196,00:00:17,18872) nginx: worker process
(nginx,50512,3964,00:00:21,18873) nginx: worker process
(nginx,50512,4240,00:00:25,18874) nginx: worker process
(nginx,50512,3948,00:00:31,18875) nginx: worker process
(nginx,50512,4244,00:00:32,18876) nginx: worker process
(nginx,50512,4240,00:00:50,18877) nginx: worker process
(nginx,50512,4328,00:01:19,18878) nginx: worker process
(nginx,50644,4592,00:01:57,18879) nginx: worker process
(nginx,50512,2600,00:00:17,18880) nginx: worker process
(root,0,0,00:00:00,19726) [kworker/3:0]
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:00,20777) [kworker/3:2]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3543884,48356,06:10:03,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2456100,29700,03:11:48,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3216,00:00:09,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,138656,5596,00:00:09,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:09,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3596,00:00:15,22533) nginx: worker process
(101,17536,3288,00:00:00,22534) nginx: worker process
(101,17476,3128,00:00:00,22535) nginx: worker process
(101,17476,3100,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,115416,1604,00:00:00,22776) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,22782) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,22783) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(speedte+,194512,2892,00:01:39,26916) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,12969952,168304,14:30:34,26920) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=d604682e-b4ed-43d1-93ad-3ff155f76f21
(root,0,0,00:00:03,27865) [kworker/4:2]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,31454) [kworker/0:2]
(root,0,0,00:00:01,31833) [kworker/7:2]
(root,0,0,00:00:00,32732) [kworker/u98:2]
(root,0,0,00:00:00,32913) [kworker/20:0]
(root,0,0,00:00:01,33358) [kworker/22:2]
(root,0,0,00:00:00,33394) [kworker/23:2]
(root,0,0,00:00:59,34011) [kworker/6:0]
(root,0,0,00:00:00,34216) [kworker/4:1]
(root,0,0,00:00:07,34851) [kworker/2:1]
(root,0,0,00:00:02,35062) [kworker/5:2]
(root,0,0,00:00:00,36172) [kworker/6:2]
(root,0,0,00:00:00,38263) [kworker/11:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:00:00,39754) [kworker/14:1]
(root,0,0,00:01:51,41230) [kworker/u96:2]
(root,0,0,00:00:01,41372) [kworker/9:0]
(root,0,0,00:00:00,41389) [kworker/11:0]
(root,0,0,00:00:00,42024) [kworker/u97:2]
(root,0,0,00:00:19,43832) [kworker/14:2]
(root,0,0,00:00:29,44056) [kworker/22:1]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,0,0,00:00:04,44235) [kworker/8:1]
(root,50508,3316,00:00:00,45154) nginx: master process /usr/sbin/nginx
(root,0,0,00:00:00,45879) [kworker/13:0]
(root,0,0,00:00:00,45913) [kworker/19:2]
(root,0,0,00:00:00,46725) [kworker/12:1H]

Found on 2023-03-16 00:14

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce12ce9e12

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4148,00:26:29,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:37,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,03:19:56,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:39,11) [watchdog/0]
(root,0,0,00:00:34,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:38,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:41,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:33,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:37,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:28,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:32,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:37,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:01:28,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:32,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:37,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:31,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:33,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:37,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:29,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:32,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:33,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:32,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:35,79) [watchdog/14]
(root,0,0,00:00:10,80) [migration/14]
(root,0,0,00:00:07,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:33,84) [watchdog/15]
(root,0,0,00:00:10,85) [migration/15]
(root,0,0,00:00:02,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:33,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:32,94) [watchdog/17]
(root,0,0,00:00:01,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:33,99) [watchdog/18]
(root,0,0,00:00:01,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:32,104) [watchdog/19]
(root,0,0,00:00:02,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:35,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:01:23,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:32,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:01,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:35,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:01:22,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:32,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:09,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:07,145) [kworker/18:1]
(root,0,0,00:10:19,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:30,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:02,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:02,467) [kworker/17:1]
(root,0,0,00:00:18,500) [kworker/12:1]
(root,0,0,00:00:07,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:19:32,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,39060,5568,00:32:14,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:02,928) [xfsaild/dm-2]
(root,55532,1084,00:00:15,947) /sbin/auditd
(root,26612,2068,00:02:51,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:41:48,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:10,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2536,00:06:59,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:15,1012) /usr/sbin/crond -n
(root,99388,2680,00:00:00,1056) login -- root
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,0,0,00:00:40,1324) [kworker/6:2]
(root,260416,10892,00:06:37,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1584,00:00:28,1404) /usr/bin/iperf3 -s
(root,229048,12540,03:52:01,1406) /usr/sbin/snmpd -LS0-6d -f
(root,494048,5112,00:22:44,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:15:11,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1480,00:05:15,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:12,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:19,2485) [kworker/0:1]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:01,4360) [kworker/5:1]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7145) [kworker/16:2]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,8258) [kworker/4:2]
(root,0,0,00:00:00,10268) [kworker/15:1]
(root,0,0,00:00:00,10536) [kworker/11:0]
(root,0,0,00:01:36,11728) [kworker/2:1]
(root,115676,2056,00:00:00,11768) -bash
(root,0,0,00:00:02,11949) [kworker/14:0]
(root,0,0,00:00:02,12579) [kworker/u98:0]
(root,0,0,00:00:00,12961) [kworker/8:0]
(root,0,0,00:00:01,13141) [kworker/7:0]
(root,0,0,00:00:00,14608) [kworker/u96:1]
(root,0,0,00:00:34,15802) [kworker/20:1]
(root,0,0,00:00:00,16516) [kworker/9:2]
(root,0,0,00:00:41,17224) [kworker/4:0]
(root,0,0,00:00:00,17716) [kworker/10:2]
(root,0,0,00:01:22,18023) [kworker/15:0]
(nginx,50512,2548,00:00:03,18857) nginx: worker process
(nginx,50512,2536,00:00:04,18858) nginx: worker process
(nginx,50512,2568,00:00:07,18859) nginx: worker process
(nginx,50512,2564,00:00:06,18860) nginx: worker process
(nginx,50512,3712,00:00:07,18861) nginx: worker process
(nginx,50512,3712,00:00:07,18862) nginx: worker process
(nginx,50512,3804,00:00:07,18863) nginx: worker process
(nginx,50512,3292,00:00:07,18864) nginx: worker process
(nginx,50512,3728,00:00:06,18865) nginx: worker process
(nginx,50512,3852,00:00:08,18866) nginx: worker process
(nginx,50512,3760,00:00:08,18867) nginx: worker process
(nginx,50512,3816,00:00:08,18868) nginx: worker process
(nginx,50512,3712,00:00:10,18869) nginx: worker process
(nginx,50512,3892,00:00:10,18870) nginx: worker process
(nginx,50512,3908,00:00:11,18871) nginx: worker process
(nginx,50512,4196,00:00:12,18872) nginx: worker process
(nginx,50512,3728,00:00:14,18873) nginx: worker process
(nginx,50512,4160,00:00:17,18874) nginx: worker process
(nginx,50512,3948,00:00:18,18875) nginx: worker process
(nginx,50512,3828,00:00:23,18876) nginx: worker process
(nginx,50512,4008,00:00:29,18877) nginx: worker process
(nginx,50512,4316,00:00:45,18878) nginx: worker process
(nginx,50644,4592,00:01:05,18879) nginx: worker process
(nginx,50512,2600,00:00:13,18880) nginx: worker process
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3543884,46704,05:36:06,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2456100,29196,02:54:08,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3200,00:00:08,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,138656,5372,00:00:08,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:08,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3640,00:00:14,22533) nginx: worker process
(101,17536,3288,00:00:00,22534) nginx: worker process
(101,17476,3128,00:00:00,22535) nginx: worker process
(101,17476,3100,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(speedte+,194512,2892,00:01:07,26916) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,10449340,132360,09:42:40,26920) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=d604682e-b4ed-43d1-93ad-3ff155f76f21
(root,0,0,00:00:00,27039) [kworker/3:0]
(root,0,0,00:00:00,27368) [kworker/3:2]
(root,0,0,00:00:00,27732) [kworker/3:1]
(root,0,0,00:00:00,28107) [kworker/u98:2]
(root,115416,1604,00:00:00,29637) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,29643) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,29644) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,31833) [kworker/7:2]
(root,0,0,00:00:01,33358) [kworker/22:2]
(root,0,0,00:00:00,33394) [kworker/23:2]
(root,0,0,00:00:00,33801) [kworker/14:1]
(root,0,0,00:00:21,34011) [kworker/6:0]
(root,0,0,00:00:42,34638) [kworker/2:0]
(root,0,0,00:00:01,35062) [kworker/5:2]
(root,0,0,00:00:00,38815) [kworker/11:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:00:00,40362) [kworker/0:0]
(root,0,0,00:00:00,41372) [kworker/9:0]
(root,0,0,00:01:07,41643) [kworker/u96:0]
(root,0,0,00:00:00,42024) [kworker/u97:2]
(root,0,0,00:00:51,42165) [kworker/10:1]
(root,0,0,00:00:13,44056) [kworker/22:1]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,50508,3316,00:00:00,45154) nginx: master process /usr/sbin/nginx
(root,0,0,00:00:00,45299) [kworker/20:2]
(root,0,0,00:00:00,45879) [kworker/13:0]
(root,0,0,00:00:00,45913) [kworker/19:2]
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,0,0,00:00:34,47652) [kworker/8:2]

Found on 2023-03-04 13:54

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce7a473bc1

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:22:49,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:26,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,02:59:49,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:35,11) [watchdog/0]
(root,0,0,00:00:31,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:34,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:28,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:29,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:33,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:01:17,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:29,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:33,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:01:17,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:29,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:33,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:20,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:29,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:34,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:18,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:29,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:30,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:29,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:31,79) [watchdog/14]
(root,0,0,00:00:10,80) [migration/14]
(root,0,0,00:00:06,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:30,84) [watchdog/15]
(root,0,0,00:00:10,85) [migration/15]
(root,0,0,00:00:02,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:30,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:29,94) [watchdog/17]
(root,0,0,00:00:01,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:29,99) [watchdog/18]
(root,0,0,00:00:01,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:29,104) [watchdog/19]
(root,0,0,00:00:02,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:01,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:32,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:01:13,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:29,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:01,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:32,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:01:12,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:29,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:08,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:06,145) [kworker/18:1]
(root,0,0,00:09:19,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:27,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:02,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:01,467) [kworker/17:1]
(root,0,0,00:00:17,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:01,504) [kworker/23:1]
(root,0,0,00:00:07,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:17:38,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,230568,123748,00:29:06,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:02,928) [xfsaild/dm-2]
(root,55532,1084,00:00:14,947) /sbin/auditd
(root,26612,2068,00:02:36,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:37:45,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:09,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2536,00:06:21,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:13,1012) /usr/sbin/crond -n
(root,99388,2680,00:00:00,1056) login -- root
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,0,0,00:00:24,1324) [kworker/6:2]
(root,260416,10892,00:05:59,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1584,00:00:28,1404) /usr/bin/iperf3 -s
(root,229048,12540,03:29:48,1406) /usr/sbin/snmpd -LS0-6d -f
(root,660004,82664,00:20:32,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:13:45,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1480,00:04:45,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:10,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:01,4360) [kworker/5:1]
(root,0,0,00:00:00,5194) [kworker/4:1]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,10268) [kworker/15:1]
(root,0,0,00:00:00,10733) [kworker/3:0]
(root,0,0,00:00:00,11451) [kworker/3:2]
(root,0,0,00:00:45,11728) [kworker/2:1]
(root,115676,2056,00:00:00,11768) -bash
(root,0,0,00:00:00,11804) [kworker/3:1]
(root,0,0,00:00:00,12397) [kworker/u96:2]
(root,0,0,00:00:00,12579) [kworker/u98:0]
(root,0,0,00:00:00,12961) [kworker/8:0]
(root,115416,1608,00:00:00,13069) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,13075) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,13076) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:01,13141) [kworker/7:0]
(root,0,0,00:00:18,15802) [kworker/20:1]
(root,0,0,00:00:00,16207) [kworker/14:2]
(root,0,0,00:00:00,16516) [kworker/9:2]
(root,0,0,00:00:18,17224) [kworker/4:0]
(root,0,0,00:00:00,17716) [kworker/10:2]
(root,0,0,00:01:06,18023) [kworker/15:0]
(nginx,50512,2540,00:00:02,18857) nginx: worker process
(nginx,50512,2536,00:00:02,18858) nginx: worker process
(nginx,50512,2568,00:00:04,18859) nginx: worker process
(nginx,50512,2564,00:00:04,18860) nginx: worker process
(nginx,50512,2564,00:00:04,18861) nginx: worker process
(nginx,50512,2568,00:00:04,18862) nginx: worker process
(nginx,50512,2568,00:00:04,18863) nginx: worker process
(nginx,50512,2568,00:00:04,18864) nginx: worker process
(nginx,50512,2568,00:00:04,18865) nginx: worker process
(nginx,50512,2568,00:00:05,18866) nginx: worker process
(nginx,50512,2568,00:00:05,18867) nginx: worker process
(nginx,50512,2568,00:00:04,18868) nginx: worker process
(nginx,50512,2568,00:00:06,18869) nginx: worker process
(nginx,50512,2568,00:00:06,18870) nginx: worker process
(nginx,50512,2568,00:00:06,18871) nginx: worker process
(nginx,50512,2568,00:00:07,18872) nginx: worker process
(nginx,50512,2568,00:00:08,18873) nginx: worker process
(nginx,50512,2568,00:00:10,18874) nginx: worker process
(nginx,50512,2568,00:00:12,18875) nginx: worker process
(nginx,50512,2568,00:00:15,18876) nginx: worker process
(nginx,50512,2568,00:00:21,18877) nginx: worker process
(nginx,50512,2568,00:00:36,18878) nginx: worker process
(nginx,50644,2912,00:00:51,18879) nginx: worker process
(nginx,50512,2564,00:00:08,18880) nginx: worker process
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:23,21636) [kworker/0:0]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3543884,47688,05:02:28,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,30384,02:36:40,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3200,00:00:07,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,126684,5204,00:00:07,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:07,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3668,00:00:12,22533) nginx: worker process
(101,17536,3288,00:00:00,22534) nginx: worker process
(101,17476,3100,00:00:00,22535) nginx: worker process
(101,17476,3100,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:39,24859) [kworker/u96:1]
(root,0,0,00:00:00,25220) [kworker/11:2]
(root,0,0,00:00:00,25601) [kworker/11:0]
(speedte+,194512,2880,00:00:35,26916) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,10449340,123780,06:04:57,26920) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=d604682e-b4ed-43d1-93ad-3ff155f76f21
(root,0,0,00:00:02,28247) [kworker/7:1]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:04,34044) [kworker/22:0]
(root,0,0,00:00:00,34279) [kworker/u98:1]
(root,0,0,00:00:14,34638) [kworker/2:0]
(root,0,0,00:00:00,35062) [kworker/5:2]
(root,0,0,00:00:00,35424) [kworker/6:1]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:00:00,41372) [kworker/9:0]
(root,0,0,00:00:01,41568) [kworker/14:0]
(root,0,0,00:00:00,42024) [kworker/u97:2]
(root,0,0,00:00:28,42165) [kworker/10:1]
(root,0,0,00:00:00,44056) [kworker/22:1]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,0,0,00:00:00,44339) [kworker/0:2]
(root,50508,3316,00:00:00,45154) nginx: master process /usr/sbin/nginx
(root,0,0,00:00:00,45299) [kworker/20:2]
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,0,0,00:00:06,47652) [kworker/8:2]

Found on 2023-02-21 00:50

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce11a39f81

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:18:57,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:07,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,02:38:11,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:31,11) [watchdog/0]
(root,0,0,00:00:28,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:30,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:09,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:26,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:29,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:59,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:26,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:30,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:01:00,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:26,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:30,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:01:02,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:26,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:30,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:01:01,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:26,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:26,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:26,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:28,79) [watchdog/14]
(root,0,0,00:00:09,80) [migration/14]
(root,0,0,00:00:05,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:26,84) [watchdog/15]
(root,0,0,00:00:09,85) [migration/15]
(root,0,0,00:00:02,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:26,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:26,94) [watchdog/17]
(root,0,0,00:00:01,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:26,99) [watchdog/18]
(root,0,0,00:00:01,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:26,104) [watchdog/19]
(root,0,0,00:00:01,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:01,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:29,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:00:56,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:26,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:01,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:28,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:56,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:26,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:07,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:04,145) [kworker/18:1]
(root,0,0,00:08:20,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:24,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:02,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:04,465) [kworker/9:1]
(root,0,0,00:00:01,467) [kworker/17:1]
(root,0,0,00:00:15,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:05,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:15:39,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,217932,110752,00:26:03,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:02,928) [xfsaild/dm-2]
(root,55532,1084,00:00:12,947) /sbin/auditd
(root,26612,2068,00:02:19,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:33:46,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:08,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2536,00:05:41,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:12,1012) /usr/sbin/crond -n
(root,99388,2680,00:00:00,1056) login -- root
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:05:21,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1584,00:00:23,1404) /usr/bin/iperf3 -s
(root,229052,12544,03:07:51,1406) /usr/sbin/snmpd -LS0-6d -f
(root,643600,74104,00:18:23,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:12:16,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:04:16,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:09,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2046) [kworker/6:0]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:00,4273) [kworker/u98:2]
(root,0,0,00:00:01,4360) [kworker/5:1]
(root,0,0,00:00:00,5194) [kworker/4:1]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,8928) [kworker/22:2]
(root,0,0,00:00:00,10268) [kworker/15:1]
(root,0,0,00:00:00,11172) [kworker/u96:1]
(root,115676,2056,00:00:00,11768) -bash
(root,0,0,00:00:10,12317) [kworker/22:0]
(root,0,0,00:00:01,13141) [kworker/7:0]
(root,0,0,00:00:00,13445) [kworker/14:0]
(root,0,0,00:00:04,13520) [kworker/10:0]
(root,0,0,00:00:00,15802) [kworker/20:1]
(root,0,0,00:00:00,16207) [kworker/14:2]
(root,0,0,00:00:00,16516) [kworker/9:2]
(root,0,0,00:00:48,18023) [kworker/15:0]
(nginx,50512,2124,00:00:00,18857) nginx: worker process
(nginx,50512,2368,00:00:00,18858) nginx: worker process
(nginx,50512,2368,00:00:00,18859) nginx: worker process
(nginx,50512,2124,00:00:00,18860) nginx: worker process
(nginx,50512,2364,00:00:00,18861) nginx: worker process
(nginx,50512,2124,00:00:00,18862) nginx: worker process
(nginx,50512,2368,00:00:00,18863) nginx: worker process
(nginx,50512,2368,00:00:00,18864) nginx: worker process
(nginx,50512,2368,00:00:00,18865) nginx: worker process
(nginx,50512,2368,00:00:00,18866) nginx: worker process
(nginx,50512,2368,00:00:00,18867) nginx: worker process
(nginx,50512,2368,00:00:00,18868) nginx: worker process
(nginx,50512,2368,00:00:00,18869) nginx: worker process
(nginx,50512,2368,00:00:00,18870) nginx: worker process
(nginx,50512,2356,00:00:00,18871) nginx: worker process
(nginx,50512,2368,00:00:00,18872) nginx: worker process
(nginx,50512,2364,00:00:00,18873) nginx: worker process
(nginx,50512,2364,00:00:00,18874) nginx: worker process
(nginx,50512,2352,00:00:00,18875) nginx: worker process
(nginx,50512,2360,00:00:00,18876) nginx: worker process
(nginx,50512,2368,00:00:00,18877) nginx: worker process
(nginx,50512,2368,00:00:00,18878) nginx: worker process
(nginx,50512,2340,00:00:00,18879) nginx: worker process
(nginx,50512,2368,00:00:00,18880) nginx: worker process
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:45,21559) [kworker/2:0]
(root,0,0,00:00:00,21618) [kworker/0:1]
(root,0,0,00:00:00,21636) [kworker/0:0]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3543884,50360,04:28:53,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,28056,02:19:14,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3200,00:00:06,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,126684,5204,00:00:06,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:06,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3616,00:00:11,22533) nginx: worker process
(101,17536,3272,00:00:00,22534) nginx: worker process
(101,17476,3096,00:00:00,22535) nginx: worker process
(101,17476,3044,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:00,26059) [kworker/11:0]
(root,0,0,00:00:00,26176) [kworker/11:1]
(root,0,0,00:00:00,26759) [kworker/5:0]
(speedte+,194512,2880,00:00:04,26916) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,7823740,48532,00:48:46,26920) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=d604682e-b4ed-43d1-93ad-3ff155f76f21
(root,0,0,00:00:01,28247) [kworker/7:1]
(root,0,0,00:00:00,29294) [kworker/8:0]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:03,31741) [kworker/u98:0]
(root,0,0,00:00:00,32174) [kworker/3:1]
(root,0,0,00:00:00,33202) [kworker/3:2]
(root,0,0,00:00:00,33589) [kworker/3:0]
(root,115416,1604,00:00:00,33776) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,33782) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,33783) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:01:03,34036) [kworker/u96:0]
(root,0,0,00:00:01,34811) [kworker/20:0]
(root,0,0,00:01:12,35528) [kworker/4:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:02:24,39487) [kworker/2:2]
(root,0,0,00:00:00,42024) [kworker/u97:2]
(root,0,0,00:00:01,42165) [kworker/10:1]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,50508,3316,00:00:00,45154) nginx: master process /usr/sbin/nginx
(root,0,0,00:00:04,46459) [kworker/6:1]
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,0,0,00:00:16,48918) [kworker/8:2]

Found on 2023-02-09 17:45

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94cead2112f9

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:18:00,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:01:04,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,02:32:30,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:30,11) [watchdog/0]
(root,0,0,00:00:27,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:29,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:01:04,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:25,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:29,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:56,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:25,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:29,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:57,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:25,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:29,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:58,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:25,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:29,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:57,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:25,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:26,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:25,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:27,79) [watchdog/14]
(root,0,0,00:00:09,80) [migration/14]
(root,0,0,00:00:05,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:26,84) [watchdog/15]
(root,0,0,00:00:09,85) [migration/15]
(root,0,0,00:00:02,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:26,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:25,94) [watchdog/17]
(root,0,0,00:00:01,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:25,99) [watchdog/18]
(root,0,0,00:00:01,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:25,104) [watchdog/19]
(root,0,0,00:00:01,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:01,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:28,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:00:53,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:25,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:01,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:28,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:52,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:25,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:07,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:04,145) [kworker/18:1]
(root,0,0,00:08:05,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:23,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:02,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:04,465) [kworker/9:1]
(root,0,0,00:00:01,467) [kworker/17:1]
(root,0,0,00:00:14,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:04,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:15:08,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,47252,10992,00:25:17,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:01,928) [xfsaild/dm-2]
(root,55532,1084,00:00:12,947) /sbin/auditd
(root,26612,2068,00:02:15,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:32:46,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:08,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2536,00:05:31,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:12,1012) /usr/sbin/crond -n
(root,99388,2680,00:00:00,1056) login -- root
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:05:11,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1584,00:00:23,1404) /usr/bin/iperf3 -s
(root,229048,12540,03:02:18,1406) /usr/sbin/snmpd -LS0-6d -f
(root,502824,9144,00:17:50,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:11:54,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:04:09,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:09,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:00,4273) [kworker/u98:2]
(root,0,0,00:00:01,4360) [kworker/5:1]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:01,6579) [kworker/6:1]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,8712) [kworker/4:0]
(root,0,0,00:00:00,8928) [kworker/22:2]
(root,0,0,00:00:00,10268) [kworker/15:1]
(root,0,0,00:00:08,11219) [kworker/20:2]
(root,115676,2056,00:00:00,11768) -bash
(root,0,0,00:00:06,12317) [kworker/22:0]
(root,0,0,00:00:01,13141) [kworker/7:0]
(root,0,0,00:00:04,13520) [kworker/10:0]
(root,0,0,00:00:00,16207) [kworker/14:2]
(root,0,0,00:00:00,16516) [kworker/9:2]
(root,0,0,00:00:43,18023) [kworker/15:0]
(root,0,0,00:00:00,18512) [kworker/10:2]
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:40,21559) [kworker/2:0]
(root,0,0,00:00:00,21618) [kworker/0:1]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3543884,47056,04:20:37,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,28252,02:14:56,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3200,00:00:06,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,126684,5204,00:00:06,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:06,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3616,00:00:11,22533) nginx: worker process
(101,17536,3272,00:00:00,22534) nginx: worker process
(101,17476,3096,00:00:00,22535) nginx: worker process
(101,17476,3044,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:05,25177) [kworker/8:1]
(root,0,0,00:00:00,25821) [kworker/u96:2]
(root,0,0,00:00:00,26174) [kworker/11:0]
(root,0,0,00:00:00,26759) [kworker/5:0]
(root,0,0,00:00:00,27110) [kworker/11:2]
(root,0,0,00:00:00,27620) [kworker/14:1]
(root,0,0,00:00:10,28185) [kworker/6:2]
(root,0,0,00:00:00,28247) [kworker/7:1]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:03,31741) [kworker/u98:0]
(root,0,0,00:00:03,34036) [kworker/u96:0]
(root,0,0,00:00:06,35264) [kworker/0:2]
(root,0,0,00:01:06,35528) [kworker/4:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:02:09,39487) [kworker/2:2]
(root,0,0,00:00:04,41007) [kworker/20:1]
(root,0,0,00:00:00,42024) [kworker/u97:2]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,49676,1196,00:00:00,45154) nginx: master process /usr/sbin/nginx
(nginx,50172,2432,00:00:12,45155) nginx: worker process
(nginx,50172,2432,00:00:10,45156) nginx: worker process
(nginx,50172,3708,00:00:16,45157) nginx: worker process
(nginx,50172,3752,00:00:21,45158) nginx: worker process
(nginx,50172,3648,00:00:21,45159) nginx: worker process
(nginx,50172,3712,00:00:21,45160) nginx: worker process
(nginx,50172,3848,00:00:21,45161) nginx: worker process
(nginx,50172,3840,00:00:20,45162) nginx: worker process
(nginx,50172,3788,00:00:20,45163) nginx: worker process
(nginx,50172,3812,00:00:21,45164) nginx: worker process
(nginx,50172,4132,00:00:23,45165) nginx: worker process
(nginx,50172,4212,00:00:24,45166) nginx: worker process
(nginx,50172,4224,00:00:26,45167) nginx: worker process
(nginx,50172,4144,00:00:30,45168) nginx: worker process
(nginx,50172,3908,00:00:33,45169) nginx: worker process
(nginx,50172,4144,00:00:40,45170) nginx: worker process
(nginx,50172,4196,00:00:42,45171) nginx: worker process
(nginx,50172,4236,00:00:49,45172) nginx: worker process
(nginx,50172,4148,00:00:48,45173) nginx: worker process
(nginx,50172,4144,00:00:58,45174) nginx: worker process
(nginx,50172,4140,00:01:21,45175) nginx: worker process
(nginx,50172,4144,00:01:43,45176) nginx: worker process
(nginx,50304,4380,00:02:46,45177) nginx: worker process
(nginx,50172,2444,00:00:36,45178) nginx: worker process
(root,0,0,00:00:00,46054) [kworker/3:0]
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,0,0,00:00:00,47693) [kworker/3:1]
(root,0,0,00:00:00,48384) [kworker/3:2]
(root,115416,1604,00:00:00,48689) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,48695) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,48696) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:08,48918) [kworker/8:2]
(speedte+,194512,2884,00:00:54,49056) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,8939412,53780,04:12:06,49063) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=9a5136ac-5754-48ec-8822-246b1573ddad

Found on 2023-02-06 21:30

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce9dc47d55

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:09:16,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:42,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,01:46:02,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:22,11) [watchdog/0]
(root,0,0,00:00:19,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:21,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:41,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:18,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:21,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:37,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:18,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:21,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:37,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:18,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:21,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:37,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:18,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:21,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:37,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:18,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:18,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:18,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:20,79) [watchdog/14]
(root,0,0,00:00:06,80) [migration/14]
(root,0,0,00:00:03,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:18,84) [watchdog/15]
(root,0,0,00:00:06,85) [migration/15]
(root,0,0,00:00:01,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:19,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:18,94) [watchdog/17]
(root,0,0,00:00:01,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:18,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:18,104) [watchdog/19]
(root,0,0,00:00:01,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:01,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:20,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:35,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:18,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:20,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:34,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:18,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:05,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:01,145) [kworker/18:1]
(root,0,0,00:05:51,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:17,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:16,174) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:01,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:03,465) [kworker/9:1]
(root,0,0,00:00:01,467) [kworker/17:1]
(root,0,0,00:00:13,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:02,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:10:47,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,67804,26212,00:18:23,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:03,901) [kworker/5:2]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:01,928) [xfsaild/dm-2]
(root,55532,1080,00:00:08,947) /sbin/auditd
(root,26612,2040,00:01:38,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:23:43,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:06,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2524,00:03:59,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:08,1012) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:03,1134) [kworker/22:0]
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,0,0,00:00:09,1344) [kworker/0:0]
(root,260416,10892,00:03:45,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1584,00:00:05,1404) /usr/bin/iperf3 -s
(root,229172,12664,02:12:20,1406) /usr/sbin/snmpd -LS0-6d -f
(root,527300,18236,00:12:57,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:08:37,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:02:51,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1825) [kworker/20:2]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:06,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:00,3850) [kworker/11:2]
(root,0,0,00:00:00,4295) [kworker/10:0]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:23,5728) [kworker/20:0]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:09,6242) [kworker/2:1]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:10,7221) [kworker/8:1]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,8415) [kworker/4:0]
(root,0,0,00:00:00,13141) [kworker/7:0]
(root,0,0,00:00:00,13340) [kworker/11:0]
(root,0,0,00:00:00,15730) [kworker/9:0]
(root,0,0,00:00:03,18023) [kworker/15:0]
(root,0,0,00:00:12,20296) [kworker/10:2]
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:00,21474) [kworker/u98:1]
(root,0,0,00:00:00,21475) [kworker/14:0]
(root,0,0,00:00:00,21838) [kworker/u97:0]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3478348,47364,03:05:30,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,28556,01:35:57,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3200,00:00:04,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,126684,5136,00:00:04,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:04,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3592,00:00:08,22533) nginx: worker process
(101,17536,3252,00:00:00,22534) nginx: worker process
(101,17476,3096,00:00:00,22535) nginx: worker process
(101,17476,3044,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:03,26276) [kworker/6:0]
(root,0,0,00:02:14,28702) [kworker/14:2]
(root,0,0,00:00:00,29000) [kworker/7:2]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,31741) [kworker/u98:0]
(root,0,0,00:00:19,35528) [kworker/4:2]
(root,0,0,00:00:00,36112) [kworker/8:0]
(root,0,0,00:00:00,37371) [kworker/u96:2]
(root,0,0,00:00:05,38082) [kworker/0:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:00:32,39487) [kworker/2:2]
(root,0,0,00:00:00,41802) [kworker/22:2]
(root,0,0,00:00:11,42134) [kworker/u96:0]
(speedte+,194520,2848,00:03:02,42795) /home/speedtest/OoklaServer --daemon
(speedte+,12945116,138008,14:23:39,42798) /home/speedtest/OoklaServer --ward --server-id=0501bcca-0e60-40ff-95d2-5367e658f12f
(root,0,0,00:00:00,43416) [kworker/5:0]
(root,0,0,00:00:00,43817) [kworker/3:0]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,49676,1196,00:00:00,45154) nginx: master process /usr/sbin/nginx
(nginx,50172,2428,00:00:08,45155) nginx: worker process
(nginx,50172,2432,00:00:07,45156) nginx: worker process
(nginx,50172,3708,00:00:11,45157) nginx: worker process
(nginx,50172,3752,00:00:15,45158) nginx: worker process
(nginx,50172,3644,00:00:15,45159) nginx: worker process
(nginx,50172,3712,00:00:15,45160) nginx: worker process
(nginx,50172,3764,00:00:15,45161) nginx: worker process
(nginx,50172,3788,00:00:15,45162) nginx: worker process
(nginx,50172,3788,00:00:15,45163) nginx: worker process
(nginx,50172,3808,00:00:15,45164) nginx: worker process
(nginx,50172,4132,00:00:17,45165) nginx: worker process
(nginx,50172,4212,00:00:17,45166) nginx: worker process
(nginx,50172,4224,00:00:19,45167) nginx: worker process
(nginx,50172,4144,00:00:22,45168) nginx: worker process
(nginx,50172,3880,00:00:24,45169) nginx: worker process
(nginx,50172,4144,00:00:30,45170) nginx: worker process
(nginx,50172,3960,00:00:32,45171) nginx: worker process
(nginx,50172,4236,00:00:37,45172) nginx: worker process
(nginx,50172,4144,00:00:35,45173) nginx: worker process
(nginx,50172,4144,00:00:42,45174) nginx: worker process
(nginx,50172,3996,00:01:04,45175) nginx: worker process
(nginx,50172,4144,00:01:18,45176) nginx: worker process
(nginx,50304,4372,00:02:03,45177) nginx: worker process
(nginx,50172,2432,00:00:27,45178) nginx: worker process
(root,0,0,00:00:00,45484) [kworker/6:2]
(root,0,0,00:00:00,45975) [kworker/3:1]
(root,0,0,00:00:00,46457) [kworker/3:2]
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,115416,1604,00:00:00,48099) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,48105) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,48106) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /

Found on 2023-01-12 02:49

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce480ef763

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:07:58,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:37,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,01:38:43,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:20,11) [watchdog/0]
(root,0,0,00:00:18,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:20,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:36,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:17,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:19,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:32,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:17,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:19,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:33,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:17,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:20,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:33,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:17,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:20,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:33,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:17,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:17,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:17,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:19,79) [watchdog/14]
(root,0,0,00:00:06,80) [migration/14]
(root,0,0,00:00:03,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:17,84) [watchdog/15]
(root,0,0,00:00:06,85) [migration/15]
(root,0,0,00:00:01,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:17,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:17,94) [watchdog/17]
(root,0,0,00:00:01,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:17,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:17,104) [watchdog/19]
(root,0,0,00:00:01,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:01,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:19,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:31,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:17,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:19,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:30,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:17,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:05,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:01,145) [kworker/18:1]
(root,0,0,00:05:31,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:16,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:14,174) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:01,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:03,465) [kworker/9:1]
(root,0,0,00:00:01,467) [kworker/17:1]
(root,0,0,00:00:12,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:01,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:10:10,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,67796,21748,00:17:22,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:03,901) [kworker/5:2]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:01,928) [xfsaild/dm-2]
(root,55532,1080,00:00:08,947) /sbin/auditd
(root,26612,2040,00:01:33,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:22:22,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12404,00:00:05,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2524,00:03:46,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:08,1012) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,0,0,00:00:08,1344) [kworker/0:0]
(root,260416,10892,00:03:32,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1548,00:00:01,1404) /usr/bin/iperf3 -s
(root,229172,12664,02:04:55,1406) /usr/sbin/snmpd -LS0-6d -f
(root,535844,15580,00:12:14,1407) /usr/sbin/rsyslogd -n
(root,112940,4356,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:08:07,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:02:41,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1825) [kworker/20:2]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:06,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:02,4884) [kworker/u96:2]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:16,5728) [kworker/20:0]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,5949) [kworker/11:2]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6045) [kworker/0:2]
(root,0,0,00:00:00,6148) [kworker/u96:1]
(root,0,0,00:00:00,6301) [kworker/11:0]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:03,7221) [kworker/8:1]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,8397) [kworker/15:2]
(root,0,0,00:00:00,9668) [kworker/4:1]
(root,0,0,00:00:00,13141) [kworker/7:0]
(root,0,0,00:00:00,15730) [kworker/9:0]
(root,0,0,00:00:00,17226) [kworker/3:2]
(root,0,0,00:00:00,17832) [kworker/3:0]
(root,0,0,00:00:00,18269) [kworker/3:1]
(root,115416,1604,00:00:00,18526) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,18532) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,18533) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:01,20296) [kworker/10:2]
(root,0,0,00:00:00,20297) [kworker/13:2]
(root,0,0,00:00:00,21475) [kworker/14:0]
(root,0,0,00:00:00,21838) [kworker/u97:0]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,3478348,46424,02:54:26,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,27960,01:30:12,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3200,00:00:04,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,126684,5136,00:00:04,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:04,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3616,00:00:08,22533) nginx: worker process
(101,17536,3252,00:00:00,22534) nginx: worker process
(101,17476,3096,00:00:00,22535) nginx: worker process
(101,17476,3044,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:06,22608) [kworker/10:1]
(root,0,0,00:00:11,23477) [kworker/6:1]
(root,0,0,00:00:09,24570) [kworker/2:0]
(root,0,0,00:00:00,26276) [kworker/6:0]
(root,0,0,00:00:10,28112) [kworker/22:1]
(root,0,0,00:01:31,28702) [kworker/14:2]
(root,0,0,00:00:00,29000) [kworker/7:2]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,31741) [kworker/u98:0]
(root,0,0,00:00:11,35528) [kworker/4:2]
(root,0,0,00:00:01,37285) [kworker/u98:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:00:15,39487) [kworker/2:2]
(root,0,0,00:00:00,41802) [kworker/22:2]
(speedte+,194520,2848,00:02:51,42795) /home/speedtest/OoklaServer --daemon
(speedte+,12945116,136032,12:50:57,42798) /home/speedtest/OoklaServer --ward --server-id=0501bcca-0e60-40ff-95d2-5367e658f12f
(root,0,0,00:00:00,43416) [kworker/5:0]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,49676,1196,00:00:00,45154) nginx: master process /usr/sbin/nginx
(nginx,50172,2428,00:00:08,45155) nginx: worker process
(nginx,50172,2432,00:00:07,45156) nginx: worker process
(nginx,50172,3704,00:00:11,45157) nginx: worker process
(nginx,50172,3752,00:00:14,45158) nginx: worker process
(nginx,50172,3644,00:00:14,45159) nginx: worker process
(nginx,50172,3712,00:00:14,45160) nginx: worker process
(nginx,50172,3764,00:00:14,45161) nginx: worker process
(nginx,50172,3788,00:00:14,45162) nginx: worker process
(nginx,50172,3788,00:00:13,45163) nginx: worker process
(nginx,50172,3808,00:00:14,45164) nginx: worker process
(nginx,50172,4132,00:00:16,45165) nginx: worker process
(nginx,50172,4212,00:00:16,45166) nginx: worker process
(nginx,50172,4132,00:00:18,45167) nginx: worker process
(nginx,50172,4144,00:00:21,45168) nginx: worker process
(nginx,50172,3880,00:00:22,45169) nginx: worker process
(nginx,50172,4144,00:00:27,45170) nginx: worker process
(nginx,50172,3960,00:00:30,45171) nginx: worker process
(nginx,50172,4236,00:00:34,45172) nginx: worker process
(nginx,50172,4144,00:00:32,45173) nginx: worker process
(nginx,50172,4144,00:00:40,45174) nginx: worker process
(nginx,50172,3992,00:00:57,45175) nginx: worker process
(nginx,50172,4144,00:01:06,45176) nginx: worker process
(nginx,50172,4316,00:01:44,45177) nginx: worker process
(nginx,50172,2432,00:00:25,45178) nginx: worker process
(root,0,0,00:00:05,46424) [kworker/8:0]
(root,0,0,00:00:00,46725) [kworker/12:1H]

Found on 2023-01-08 07:04

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94cef6ba88a2

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:03:18,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:11,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,00:52:07,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:11,11) [watchdog/0]
(root,0,0,00:00:10,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:11,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:11,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:09,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:11,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:09,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:09,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:11,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:09,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:09,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:11,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:09,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:09,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:11,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:09,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:09,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:10,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:09,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:10,79) [watchdog/14]
(root,0,0,00:00:03,80) [migration/14]
(root,0,0,00:00:01,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:09,84) [watchdog/15]
(root,0,0,00:00:03,85) [migration/15]
(root,0,0,00:00:00,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:10,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:09,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:10,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:09,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:10,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:08,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:09,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:10,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:08,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:09,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:02,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,145) [kworker/18:1]
(root,0,0,00:03:06,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:09,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,174) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:00,229) [kauditd]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:01,465) [kworker/9:1]
(root,0,0,00:00:00,467) [kworker/17:1]
(root,0,0,00:00:06,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:00,505) [kworker/16:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:05:33,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,141156,86864,00:09:53,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:01,901) [kworker/5:2]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:00,928) [xfsaild/dm-2]
(root,55532,1072,00:00:04,947) /sbin/auditd
(root,26612,2040,00:00:52,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:12:37,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12380,00:00:03,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2524,00:02:06,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:04,1012) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:15,1189) [kworker/8:2]
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:01:59,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1508,00:00:00,1404) /usr/bin/iperf3 -s
(root,229048,12540,01:10:27,1406) /usr/sbin/snmpd -LS0-6d -f
(root,590360,58388,00:06:56,1407) /usr/sbin/rsyslogd -n
(root,112940,4320,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:04:35,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:01:30,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:03,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:04,3478) [kworker/20:0]
(root,0,0,00:00:29,5391) [kworker/2:2]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7285) [kworker/10:0]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:00,8397) [kworker/15:2]
(root,0,0,00:00:09,12912) [kworker/4:2]
(root,0,0,00:00:00,13089) [kworker/2:0]
(root,0,0,00:01:15,17096) [kworker/14:1]
(root,0,0,00:00:12,17550) [kworker/0:0]
(root,0,0,00:00:00,21246) [kworker/5:1]
(root,0,0,00:00:00,21420) [kworker/11:0]
(root,0,0,00:00:01,21646) [kworker/8:0]
(root,0,0,00:00:00,21838) [kworker/u97:0]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,0,0,00:00:03,22035) [kworker/7:1]
(root,3478092,48040,01:33:49,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,28788,00:48:25,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,0,0,00:00:00,22163) [kworker/0:1]
(root,268672,3200,00:00:02,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,117176,4944,00:00:02,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:02,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3616,00:00:05,22533) nginx: worker process
(101,17480,3236,00:00:00,22534) nginx: worker process
(101,17476,3096,00:00:00,22535) nginx: worker process
(101,17476,2800,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:00,22778) [kworker/22:2]
(root,0,0,00:00:00,22826) [kworker/4:1]
(root,0,0,00:00:01,23311) [kworker/10:1]
(root,0,0,00:00:00,28267) [kworker/u98:1]
(root,0,0,00:00:00,29000) [kworker/7:2]
(root,0,0,00:00:01,29982) [kworker/u98:2]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,33668) [kworker/11:1]
(root,0,0,00:00:00,36616) [kworker/14:2]
(root,0,0,00:00:00,37757) [kworker/20:2]
(root,0,0,00:00:00,38456) [kworker/9:2]
(root,0,0,00:00:00,38876) [kworker/21:2]
(root,0,0,00:00:00,40259) [kworker/u96:1]
(root,0,0,00:00:00,41213) [kworker/3:0]
(root,0,0,00:00:05,41490) [kworker/6:1]
(root,0,0,00:00:00,41858) [kworker/u96:0]
(root,0,0,00:00:00,41860) [kworker/3:1]
(root,0,0,00:00:00,42113) [kworker/3:2]
(root,115416,1604,00:00:00,42270) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,42276) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,42277) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(speedte+,194520,2848,00:01:35,42795) /home/speedtest/OoklaServer --daemon
(speedte+,12945116,81676,04:41:18,42798) /home/speedtest/OoklaServer --ward --server-id=0501bcca-0e60-40ff-95d2-5367e658f12f
(root,0,0,00:00:05,43422) [kworker/6:0]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,49676,1196,00:00:00,45154) nginx: master process /usr/sbin/nginx
(nginx,50172,2392,00:00:02,45155) nginx: worker process
(nginx,50172,2392,00:00:02,45156) nginx: worker process
(nginx,50172,3704,00:00:03,45157) nginx: worker process
(nginx,50172,3752,00:00:04,45158) nginx: worker process
(nginx,50172,3620,00:00:04,45159) nginx: worker process
(nginx,50172,3704,00:00:04,45160) nginx: worker process
(nginx,50172,3756,00:00:04,45161) nginx: worker process
(nginx,50172,3788,00:00:04,45162) nginx: worker process
(nginx,50172,3788,00:00:04,45163) nginx: worker process
(nginx,50172,3804,00:00:04,45164) nginx: worker process
(nginx,50172,4104,00:00:05,45165) nginx: worker process
(nginx,50172,4212,00:00:05,45166) nginx: worker process
(nginx,50172,4132,00:00:05,45167) nginx: worker process
(nginx,50172,4132,00:00:06,45168) nginx: worker process
(nginx,50172,3880,00:00:06,45169) nginx: worker process
(nginx,50172,4144,00:00:08,45170) nginx: worker process
(nginx,50172,3880,00:00:09,45171) nginx: worker process
(nginx,50172,4144,00:00:09,45172) nginx: worker process
(nginx,50172,4144,00:00:09,45173) nginx: worker process
(nginx,50172,4144,00:00:10,45174) nginx: worker process
(nginx,50172,3888,00:00:16,45175) nginx: worker process
(nginx,50172,4144,00:00:15,45176) nginx: worker process
(nginx,50172,4164,00:00:26,45177) nginx: worker process
(nginx,50172,2432,00:00:06,45178) nginx: worker process
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,0,0,00:00:20,48279) [kworker/22:0]

Found on 2022-12-11 11:41

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce4a2e45ca

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:02:04,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:07,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,00:31:25,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:07,11) [watchdog/0]
(root,0,0,00:00:06,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:07,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:07,20) [ksoftirqd/2]
(root,0,0,00:02:04,21) [kworker/2:0]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:06,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:06,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:05,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:06,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:07,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:06,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:06,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:07,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:06,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:06,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:07,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:05,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:06,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:06,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:06,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:06,79) [watchdog/14]
(root,0,0,00:00:02,80) [migration/14]
(root,0,0,00:00:01,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:06,84) [watchdog/15]
(root,0,0,00:00:02,85) [migration/15]
(root,0,0,00:00:00,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:06,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:06,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:06,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:06,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:06,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:05,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:06,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:06,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:05,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:06,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:01,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:20,140) [kworker/0:1]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,145) [kworker/18:1]
(root,0,0,00:01:57,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:05,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,174) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:00,229) [kauditd]
(root,0,0,00:00:00,233) [kworker/21:1]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:02,404) [kworker/0:2]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:01,465) [kworker/9:1]
(root,0,0,00:00:00,467) [kworker/17:1]
(root,0,0,00:00:03,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:00,505) [kworker/16:1]
(root,0,0,00:00:17,506) [kworker/22:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:03:21,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,39060,8200,00:06:10,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:01,901) [kworker/5:2]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:00,928) [xfsaild/dm-2]
(root,55532,1072,00:00:02,947) /sbin/auditd
(root,26612,2040,00:00:32,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:07:54,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12380,00:00:02,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2524,00:01:18,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:02,1012) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:01:14,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1508,00:00:00,1404) /usr/bin/iperf3 -s
(root,229048,12540,00:43:41,1406) /usr/sbin/snmpd -LS0-6d -f
(root,457236,7164,00:04:19,1407) /usr/sbin/rsyslogd -n
(root,112940,4320,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:02:52,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:00:56,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:02,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2037) [kworker/15:0]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:01,5787) [kworker/8:1]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:13,6081) [kworker/14:0]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:03,9559) [kworker/6:1]
(root,0,0,00:00:01,10704) [kworker/10:1]
(root,0,0,00:00:00,11827) [kworker/11:1]
(root,0,0,00:00:01,12523) [kworker/20:1]
(root,0,0,00:00:00,21838) [kworker/u97:0]
(root,0,0,00:00:00,21935) [kworker/23:1H]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,0,0,00:00:01,22035) [kworker/7:1]
(root,3478092,47496,00:55:25,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,28324,00:28:34,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,268672,3200,00:00:01,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,117176,4944,00:00:01,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:01,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17676,3612,00:00:04,22533) nginx: worker process
(101,17480,3236,00:00:00,22534) nginx: worker process
(101,17476,3096,00:00:00,22535) nginx: worker process
(101,17476,2800,00:00:00,22536) nginx: worker process
(101,17468,2304,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:10,23574) [kworker/u96:0]
(root,0,0,00:00:00,24130) [kworker/7:0]
(root,0,0,00:00:00,25600) [kworker/5:0]
(root,0,0,00:00:00,27477) [kworker/11:2]
(root,0,0,00:00:00,28235) [kworker/4:2]
(root,0,0,00:00:04,28868) [kworker/8:0]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:00,31853) [kworker/2:1]
(root,0,0,00:00:00,32243) [kworker/9:0]
(root,0,0,00:00:31,32562) [kworker/6:0]
(root,0,0,00:00:19,32980) [kworker/10:0]
(root,0,0,00:00:00,34146) [kworker/u98:1]
(root,0,0,00:00:00,35371) [kworker/3:2]
(root,0,0,00:00:00,35389) [kworker/u96:1]
(root,0,0,00:00:00,35769) [kworker/3:1]
(root,0,0,00:00:50,35924) [kworker/14:2]
(root,115416,1604,00:00:00,36006) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,36012) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,36013) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:09,37766) [kworker/20:0]
(root,0,0,00:00:01,38232) [kworker/u98:0]
(root,0,0,00:00:13,38755) [kworker/4:0]
(speedte+,194520,2836,00:00:57,42795) /home/speedtest/OoklaServer --daemon
(speedte+,12945116,64532,03:07:09,42798) /home/speedtest/OoklaServer --ward --server-id=0501bcca-0e60-40ff-95d2-5367e658f12f
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,49676,1196,00:00:00,45154) nginx: master process /usr/sbin/nginx
(nginx,50172,2204,00:00:00,45155) nginx: worker process
(nginx,50172,2196,00:00:00,45156) nginx: worker process
(nginx,50172,3476,00:00:00,45157) nginx: worker process
(nginx,50172,3688,00:00:01,45158) nginx: worker process
(nginx,50172,3620,00:00:01,45159) nginx: worker process
(nginx,50172,3664,00:00:01,45160) nginx: worker process
(nginx,50172,3756,00:00:01,45161) nginx: worker process
(nginx,50172,3788,00:00:01,45162) nginx: worker process
(nginx,50172,3788,00:00:01,45163) nginx: worker process
(nginx,50172,3804,00:00:01,45164) nginx: worker process
(nginx,50172,4104,00:00:01,45165) nginx: worker process
(nginx,50172,4184,00:00:01,45166) nginx: worker process
(nginx,50172,4108,00:00:01,45167) nginx: worker process
(nginx,50172,3868,00:00:02,45168) nginx: worker process
(nginx,50172,3864,00:00:02,45169) nginx: worker process
(nginx,50172,4144,00:00:02,45170) nginx: worker process
(nginx,50172,3880,00:00:03,45171) nginx: worker process
(nginx,50172,4144,00:00:03,45172) nginx: worker process
(nginx,50172,4144,00:00:03,45173) nginx: worker process
(nginx,50172,4144,00:00:04,45174) nginx: worker process
(nginx,50172,3884,00:00:09,45175) nginx: worker process
(nginx,50172,4144,00:00:07,45176) nginx: worker process
(nginx,50172,4164,00:00:15,45177) nginx: worker process
(nginx,50172,2388,00:00:02,45178) nginx: worker process
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,0,0,00:00:06,48279) [kworker/22:0]

Found on 2022-11-28 00:03

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94cea05450d4

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:00:54,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:02,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,00:11:54,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:03,11) [watchdog/0]
(root,0,0,00:00:02,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:03,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:02,20) [ksoftirqd/2]
(root,0,0,00:00:44,21) [kworker/2:0]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:02,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:03,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:01,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:02,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:03,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:02,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:02,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:03,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:02,51) [ksoftirqd/8]
(root,0,0,00:00:05,52) [kworker/8:0]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:02,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:03,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:01,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:02,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:02,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:02,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:02,79) [watchdog/14]
(root,0,0,00:00:00,80) [migration/14]
(root,0,0,00:00:00,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:02,84) [watchdog/15]
(root,0,0,00:00:00,85) [migration/15]
(root,0,0,00:00:00,86) [ksoftirqd/15]
(root,0,0,00:00:00,87) [kworker/15:0]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:02,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:02,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:02,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:02,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:02,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:01,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:02,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:02,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:01,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:02,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:00,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:12,140) [kworker/0:1]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,145) [kworker/18:1]
(root,0,0,00:00:51,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:02,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:09,170) [kworker/8:1]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:11,173) [kworker/4:1]
(root,0,0,00:00:00,174) [kworker/15:1]
(root,0,0,00:00:15,175) [kworker/10:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:00,229) [kauditd]
(root,0,0,00:00:00,233) [kworker/21:1]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,461) [kworker/u98:4]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:00,465) [kworker/9:1]
(root,0,0,00:00:00,467) [kworker/17:1]
(root,0,0,00:00:13,477) [kworker/20:1]
(root,0,0,00:00:01,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:00,505) [kworker/16:1]
(root,0,0,00:00:08,506) [kworker/22:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:01:17,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,0,0,00:00:00,653) [kworker/22:2]
(root,136952,82748,00:02:41,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,901) [kworker/5:2]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:00,928) [xfsaild/dm-2]
(root,55532,1072,00:00:01,947) /sbin/auditd
(root,26612,2040,00:00:14,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:03:28,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12300,00:00:00,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2524,00:00:33,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:01,1012) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:00:32,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10128,1508,00:00:00,1404) /usr/bin/iperf3 -s
(root,229176,12548,00:18:38,1406) /usr/sbin/snmpd -LS0-6d -f
(root,406332,55340,00:01:52,1407) /usr/sbin/rsyslogd -n
(root,112940,4320,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:01:15,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:00:24,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:00,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,1912) [kworker/3:0]
(root,0,0,00:00:00,1913) [kworker/u96:2]
(root,0,0,00:00:00,2084) [kworker/3:1]
(root,0,0,00:00:00,2165) [kworker/3:2]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,115416,1604,00:00:00,2323) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,2329) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,2330) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7047) [kworker/14:0]
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:19,9090) [kworker/6:1]
(root,0,0,00:00:00,9179) [kworker/0:2]
(root,0,0,00:00:00,9615) [kworker/7:2]
(root,0,0,00:00:04,10015) [kworker/6:2]
(root,0,0,00:00:00,21234) [kworker/5:1]
(root,0,0,00:00:00,21838) [kworker/u97:0]
(root,0,0,00:00:10,21894) [kworker/14:1]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,0,0,00:00:00,22035) [kworker/7:1]
(root,3412044,47232,00:19:20,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2455044,28756,00:09:56,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,264640,2900,00:00:00,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,117176,4944,00:00:00,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:00,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17536,3540,00:00:02,22533) nginx: worker process
(101,17468,2352,00:00:00,22534) nginx: worker process
(101,17464,1852,00:00:00,22535) nginx: worker process
(101,17464,1852,00:00:00,22536) nginx: worker process
(101,17464,1852,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:00,23044) [kworker/2:1]
(root,0,0,00:00:00,24830) [kworker/20:0]
(root,0,0,00:00:00,27553) [kworker/11:1]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:01,32980) [kworker/10:0]
(root,0,0,00:00:00,33555) [kworker/9:2]
(root,0,0,00:00:00,33992) [kworker/11:2]
(root,0,0,00:00:00,37812) [kworker/4:0]
(root,0,0,00:00:00,38232) [kworker/u98:0]
(speedte+,194520,2836,00:00:22,42795) /home/speedtest/OoklaServer --daemon
(speedte+,7101492,51516,00:58:18,42798) /home/speedtest/OoklaServer --ward --server-id=0501bcca-0e60-40ff-95d2-5367e658f12f
(root,0,0,00:00:42,43282) [kworker/u96:1]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,49676,1196,00:00:00,45154) nginx: master process /usr/sbin/nginx
(nginx,50172,2204,00:00:00,45155) nginx: worker process
(nginx,50172,2196,00:00:00,45156) nginx: worker process
(nginx,50172,3476,00:00:00,45157) nginx: worker process
(nginx,50172,3472,00:00:00,45158) nginx: worker process
(nginx,50172,2204,00:00:00,45159) nginx: worker process
(nginx,50172,2196,00:00:00,45160) nginx: worker process
(nginx,50172,3472,00:00:00,45161) nginx: worker process
(nginx,50172,2964,00:00:00,45162) nginx: worker process
(nginx,50172,3480,00:00:00,45163) nginx: worker process
(nginx,50172,3468,00:00:00,45164) nginx: worker process
(nginx,50172,3736,00:00:00,45165) nginx: worker process
(nginx,50172,3716,00:00:00,45166) nginx: worker process
(nginx,50172,3976,00:00:00,45167) nginx: worker process
(nginx,50172,3736,00:00:00,45168) nginx: worker process
(nginx,50172,3724,00:00:00,45169) nginx: worker process
(nginx,50172,3992,00:00:00,45170) nginx: worker process
(nginx,50172,3724,00:00:00,45171) nginx: worker process
(nginx,50172,3996,00:00:00,45172) nginx: worker process
(nginx,50172,3728,00:00:00,45173) nginx: worker process
(nginx,50172,3992,00:00:00,45174) nginx: worker process
(nginx,50172,3728,00:00:01,45175) nginx: worker process
(nginx,50172,3756,00:00:01,45176) nginx: worker process
(nginx,50172,4164,00:00:03,45177) nginx: worker process
(nginx,50172,2204,00:00:00,45178) nginx: worker process
(root,0,0,00:00:00,46725) [kworker/12:1H]

Found on 2022-11-15 07:38

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce0d767d7a

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,191160,4140,00:00:24,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:00,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,00:03:40,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:01,11) [watchdog/0]
(root,0,0,00:00:01,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:01,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:00,20) [ksoftirqd/2]
(root,0,0,00:00:08,21) [kworker/2:0]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:01,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:01,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:00,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:01,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,37) [kworker/5:0]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:01,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:00,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:01,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,47) [kworker/7:0]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:01,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:00,51) [ksoftirqd/8]
(root,0,0,00:00:02,52) [kworker/8:0]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:01,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,57) [kworker/9:0]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:01,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:00,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:01,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:01,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:00,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:01,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:01,79) [watchdog/14]
(root,0,0,00:00:00,80) [migration/14]
(root,0,0,00:00:00,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:01,84) [watchdog/15]
(root,0,0,00:00:00,85) [migration/15]
(root,0,0,00:00:00,86) [ksoftirqd/15]
(root,0,0,00:00:00,87) [kworker/15:0]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:01,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:00,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:01,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:01,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:01,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:01,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:00,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:01,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:01,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:00,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:01,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:00,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:04,140) [kworker/0:1]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:00,145) [kworker/18:1]
(root,0,0,00:00:23,146) [kworker/1:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:01,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:02,170) [kworker/8:1]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:03,173) [kworker/4:1]
(root,0,0,00:00:00,174) [kworker/15:1]
(root,0,0,00:00:05,175) [kworker/10:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,227) [kworker/18:2]
(root,0,0,00:00:00,229) [kauditd]
(root,0,0,00:00:00,233) [kworker/21:1]
(root,0,0,00:00:00,234) [kworker/u97:1]
(root,0,0,00:00:00,393) [kworker/19:1]
(root,0,0,00:00:00,432) [scsi_eh_0]
(root,0,0,00:00:00,434) [scsi_tmf_0]
(root,0,0,00:00:00,440) [ata_sff]
(root,0,0,00:00:00,447) [scsi_eh_1]
(root,0,0,00:00:00,448) [scsi_tmf_1]
(root,0,0,00:00:00,449) [scsi_eh_2]
(root,0,0,00:00:00,450) [scsi_tmf_2]
(root,0,0,00:00:00,451) [scsi_eh_3]
(root,0,0,00:00:00,452) [scsi_tmf_3]
(root,0,0,00:00:00,453) [scsi_eh_4]
(root,0,0,00:00:00,454) [scsi_tmf_4]
(root,0,0,00:00:00,455) [scsi_eh_5]
(root,0,0,00:00:00,456) [scsi_tmf_5]
(root,0,0,00:00:00,457) [scsi_eh_6]
(root,0,0,00:00:00,458) [scsi_tmf_6]
(root,0,0,00:00:00,461) [kworker/u98:4]
(root,0,0,00:00:00,464) [ttm_swap]
(root,0,0,00:00:00,465) [kworker/9:1]
(root,0,0,00:00:00,467) [kworker/17:1]
(root,0,0,00:00:04,477) [kworker/20:1]
(root,0,0,00:00:00,500) [kworker/12:1]
(root,0,0,00:00:00,503) [kworker/13:1]
(root,0,0,00:00:00,504) [kworker/23:1]
(root,0,0,00:00:00,505) [kworker/16:1]
(root,0,0,00:00:02,506) [kworker/22:1]
(root,0,0,00:00:00,555) [kdmflush]
(root,0,0,00:00:00,556) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,581) [bioset]
(root,0,0,00:00:00,582) [xfsalloc]
(root,0,0,00:00:00,583) [xfs_mru_cache]
(root,0,0,00:00:00,584) [xfs-buf/dm-0]
(root,0,0,00:00:00,585) [xfs-data/dm-0]
(root,0,0,00:00:00,586) [xfs-conv/dm-0]
(root,0,0,00:00:00,587) [xfs-cil/dm-0]
(root,0,0,00:00:00,588) [xfs-reclaim/dm-]
(root,0,0,00:00:00,589) [xfs-log/dm-0]
(root,0,0,00:00:00,590) [xfs-eofblocks/d]
(root,0,0,00:00:29,591) [xfsaild/dm-0]
(root,0,0,00:00:00,592) [kworker/1:1H]
(root,0,0,00:00:00,653) [kworker/22:2]
(root,63576,20944,00:01:09,673) /usr/lib/systemd/systemd-journald
(root,45352,1820,00:00:00,688) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,699) [bond0]
(root,198572,3400,00:00:00,712) /usr/sbin/lvmetad -f
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,817) [kvm-irqfd-clean]
(root,0,0,00:00:00,901) [kworker/5:2]
(root,0,0,00:00:00,902) [kworker/2:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kdmflush]
(root,0,0,00:00:00,915) [bioset]
(root,0,0,00:00:00,921) [xfs-buf/dm-2]
(root,0,0,00:00:00,922) [xfs-data/dm-2]
(root,0,0,00:00:00,923) [xfs-conv/dm-2]
(root,0,0,00:00:00,924) [xfs-cil/dm-2]
(root,0,0,00:00:00,925) [xfs-reclaim/dm-]
(root,0,0,00:00:00,926) [xfs-log/dm-2]
(root,0,0,00:00:00,927) [xfs-eofblocks/d]
(root,0,0,00:00:00,928) [xfsaild/dm-2]
(root,55532,852,00:00:00,947) /sbin/auditd
(root,26612,2040,00:00:06,970) /usr/lib/systemd/systemd-logind
(root,21648,1376,00:01:33,975) /usr/sbin/irqbalance --foreground
(polkitd,612360,12300,00:00:00,977) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58220,2524,00:00:14,978) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,126420,1644,00:00:00,1012) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1202) [kworker/9:1H]
(root,260416,10892,00:00:14,1403) php-fpm: master process (/etc/php-fpm.conf)
(iperf,9616,788,00:00:00,1404) /usr/bin/iperf3 -s
(root,229044,12532,00:07:44,1406) /usr/sbin/snmpd -LS0-6d -f
(root,288564,14516,00:00:48,1407) /usr/sbin/rsyslogd -n
(root,112940,4320,00:00:00,1408) /usr/sbin/sshd -D
(root,574284,19604,00:00:34,1409) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:00:10,1411) /usr/sbin/bird
(root,0,0,00:00:00,1487) [kworker/0:1H]
(root,0,0,00:00:00,1847) [kworker/6:1H]
(root,0,0,00:00:00,1848) [kworker/3:1H]
(root,0,0,00:00:00,1853) [kworker/7:1H]
(root,0,0,00:00:00,1868) [kworker/15:1H]
(root,0,0,00:00:00,1872) [kworker/14:1H]
(root,0,0,00:00:00,1874) [kworker/5:1H]
(root,0,0,00:00:00,1875) [kworker/20:1H]
(root,0,0,00:00:00,2010) [kworker/4:2]
(root,0,0,00:00:00,2301) [kworker/11:1H]
(root,0,0,00:00:00,2652) [kworker/11:2]
(root,0,0,00:00:00,2677) [kworker/4:1H]
(root,0,0,00:00:00,3315) [kworker/6:0]
(root,0,0,00:00:00,5614) [kworker/8:1H]
(root,0,0,00:00:00,5842) [kworker/16:1H]
(root,0,0,00:00:00,5862) [kworker/21:1H]
(root,0,0,00:00:00,6006) [kworker/1:2]
(root,0,0,00:00:00,6692) [kworker/3:2]
(root,0,0,00:00:00,6818) [kworker/10:1H]
(root,0,0,00:00:00,7053) [kworker/3:1]
(root,0,0,00:00:00,7133) [kworker/3:0]
(root,115416,1604,00:00:00,7369) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,7375) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,7376) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,7940) [kworker/17:1H]
(root,0,0,00:00:07,9090) [kworker/6:1]
(root,0,0,00:00:00,13880) [kworker/20:2]
(root,0,0,00:00:00,21838) [kworker/u97:0]
(root,0,0,00:00:00,21894) [kworker/14:1]
(root,0,0,00:00:00,22015) [kworker/19:1H]
(root,0,0,00:00:00,22035) [kworker/7:1]
(root,3206984,47172,00:03:42,22054) /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docker/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp.json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2
(root,2446848,30744,00:01:51,22069) /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true
(root,264640,2900,00:00:00,22435) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3001 -container-ip 172.17.0.2 -container-port 3001
(root,117176,4944,00:00:00,22449) /usr/libexec/docker/docker-proxy-current -proto tcp -host-ip 0.0.0.0 -host-port 3000 -container-ip 172.17.0.2 -container-port 3000
(root,487564,6140,00:00:00,22460) /usr/bin/docker-containerd-shim-current c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /var/run/docker/libcontainerd/c4fa1fa7f587581ced4c5b4ed5afbe2d10213320f57f3d27f1de9ed1a6753772 /usr/libexec/docker/docker-runc-current
(101,16576,3344,00:00:00,22482) nginx: master process nginx -g daemon off;
(101,17480,3360,00:00:02,22533) nginx: worker process
(101,17468,2352,00:00:00,22534) nginx: worker process
(101,17464,1852,00:00:00,22535) nginx: worker process
(101,17464,1852,00:00:00,22536) nginx: worker process
(101,17464,1852,00:00:00,22537) nginx: worker process
(101,17464,1852,00:00:00,22538) nginx: worker process
(101,17464,1852,00:00:00,22539) nginx: worker process
(101,17464,1852,00:00:00,22540) nginx: worker process
(101,17464,1852,00:00:00,22541) nginx: worker process
(101,17464,1852,00:00:00,22542) nginx: worker process
(101,17464,1852,00:00:00,22543) nginx: worker process
(101,17464,1852,00:00:00,22544) nginx: worker process
(101,17464,1852,00:00:00,22545) nginx: worker process
(101,17464,1852,00:00:00,22546) nginx: worker process
(101,17464,1852,00:00:00,22547) nginx: worker process
(101,17464,1852,00:00:00,22548) nginx: worker process
(101,17464,1852,00:00:00,22549) nginx: worker process
(101,17464,1852,00:00:00,22550) nginx: worker process
(101,17464,1856,00:00:00,22551) nginx: worker process
(101,17464,1856,00:00:00,22552) nginx: worker process
(101,17464,1856,00:00:00,22553) nginx: worker process
(101,17464,1856,00:00:00,22554) nginx: worker process
(101,17464,1856,00:00:00,22555) nginx: worker process
(101,17464,1856,00:00:00,22556) nginx: worker process
(root,0,0,00:00:00,23044) [kworker/2:1]
(root,0,0,00:00:00,27065) [kworker/10:2]
(root,0,0,00:00:00,30993) [kworker/13:1H]
(root,0,0,00:00:00,31310) [kworker/18:1H]
(root,0,0,00:00:13,38515) [kworker/u96:0]
(root,0,0,00:00:00,39955) [kworker/u98:1]
(speedte+,194520,2836,00:00:06,42795) /home/speedtest/OoklaServer --daemon
(speedte+,7035956,48928,00:17:11,42798) /home/speedtest/OoklaServer --ward --server-id=0501bcca-0e60-40ff-95d2-5367e658f12f
(root,0,0,00:00:00,43996) [kworker/0:0]
(root,0,0,00:00:00,44071) [kworker/u96:1]
(root,0,0,00:00:00,44229) [kworker/22:1H]
(root,0,0,00:00:00,45119) [kworker/14:0]
(root,49676,1196,00:00:00,45154) nginx: master process /usr/sbin/nginx
(nginx,50172,2204,00:00:00,45155) nginx: worker process
(nginx,50172,2196,00:00:00,45156) nginx: worker process
(nginx,50172,3476,00:00:00,45157) nginx: worker process
(nginx,50172,2964,00:00:00,45158) nginx: worker process
(nginx,50172,2204,00:00:00,45159) nginx: worker process
(nginx,50172,2196,00:00:00,45160) nginx: worker process
(nginx,50172,3472,00:00:00,45161) nginx: worker process
(nginx,50172,2964,00:00:00,45162) nginx: worker process
(nginx,50172,2208,00:00:00,45163) nginx: worker process
(nginx,50172,3468,00:00:00,45164) nginx: worker process
(nginx,50172,2204,00:00:00,45165) nginx: worker process
(nginx,50172,2452,00:00:00,45166) nginx: worker process
(nginx,50172,3720,00:00:00,45167) nginx: worker process
(nginx,50172,2968,00:00:00,45168) nginx: worker process
(nginx,50172,2960,00:00:00,45169) nginx: worker process
(nginx,50172,2208,00:00:00,45170) nginx: worker process
(nginx,50172,3464,00:00:00,45171) nginx: worker process
(nginx,50172,3996,00:00:00,45172) nginx: worker process
(nginx,50172,3476,00:00:00,45173) nginx: worker process
(nginx,50172,2204,00:00:00,45174) nginx: worker process
(nginx,50172,3644,00:00:01,45175) nginx: worker process
(nginx,50172,3472,00:00:00,45176) nginx: worker process
(nginx,50172,4104,00:00:02,45177) nginx: worker process
(nginx,50172,2204,00:00:00,45178) nginx: worker process
(root,0,0,00:00:00,46725) [kworker/12:1H]
(root,0,0,00:00:00,48634) [kworker/11:1]

Found on 2022-11-09 20:04

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce676af995

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51612,3884,00:06:16,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:01,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,01:42:16,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:23,11) [watchdog/0]
(root,0,0,00:00:21,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:24,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:21,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:19,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:22,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:17,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:19,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:22,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:18,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:19,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:22,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:17,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:21,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:01,56) [ksoftirqd/9]
(root,0,0,00:00:07,57) [kworker/9:0]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:22,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:17,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:19,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:21,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:16,71) [ksoftirqd/12]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:18,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:22,79) [watchdog/14]
(root,0,0,00:00:04,80) [migration/14]
(root,0,0,00:00:00,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:18,84) [watchdog/15]
(root,0,0,00:00:05,85) [migration/15]
(root,0,0,00:00:01,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:18,89) [watchdog/16]
(root,0,0,00:00:01,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:01,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:18,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:01,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:18,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:18,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:01,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:21,109) [watchdog/20]
(root,0,0,00:00:01,110) [migration/20]
(root,0,0,00:00:15,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:18,114) [watchdog/21]
(root,0,0,00:00:01,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:21,119) [watchdog/22]
(root,0,0,00:00:01,120) [migration/22]
(root,0,0,00:00:15,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:18,124) [watchdog/23]
(root,0,0,00:00:01,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:03,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:03,145) [kworker/18:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:22,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:01,175) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,224) [kworker/19:1]
(root,0,0,00:00:02,229) [kauditd]
(root,0,0,00:00:00,419) [kworker/17:1]
(root,0,0,00:00:00,439) [scsi_eh_0]
(root,0,0,00:00:00,440) [scsi_tmf_0]
(root,0,0,00:00:00,445) [ata_sff]
(root,0,0,00:00:00,452) [scsi_eh_1]
(root,0,0,00:00:00,453) [scsi_tmf_1]
(root,0,0,00:00:00,454) [scsi_eh_2]
(root,0,0,00:00:00,455) [scsi_tmf_2]
(root,0,0,00:00:00,456) [scsi_eh_3]
(root,0,0,00:00:00,457) [scsi_tmf_3]
(root,0,0,00:00:00,458) [scsi_eh_4]
(root,0,0,00:00:00,459) [scsi_tmf_4]
(root,0,0,00:00:00,460) [scsi_eh_5]
(root,0,0,00:00:00,461) [scsi_tmf_5]
(root,0,0,00:00:00,462) [scsi_eh_6]
(root,0,0,00:00:00,463) [scsi_tmf_6]
(root,0,0,00:00:00,469) [ttm_swap]
(root,0,0,00:00:05,480) [kworker/3:1]
(root,0,0,00:00:00,489) [kworker/13:1]
(root,0,0,00:00:00,512) [kworker/23:1]
(root,0,0,00:00:00,513) [kworker/21:1]
(root,0,0,00:00:00,557) [kdmflush]
(root,0,0,00:00:00,558) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,583) [bioset]
(root,0,0,00:00:00,584) [xfsalloc]
(root,0,0,00:00:00,585) [xfs_mru_cache]
(root,0,0,00:00:00,586) [xfs-buf/dm-0]
(root,0,0,00:00:00,587) [xfs-data/dm-0]
(root,0,0,00:00:00,588) [xfs-conv/dm-0]
(root,0,0,00:00:00,589) [xfs-cil/dm-0]
(root,0,0,00:00:00,590) [xfs-reclaim/dm-]
(root,0,0,00:00:00,591) [xfs-log/dm-0]
(root,0,0,00:00:00,592) [xfs-eofblocks/d]
(root,0,0,00:08:31,593) [xfsaild/dm-0]
(root,0,0,00:00:00,594) [kworker/0:1H]
(root,116560,60864,00:19:57,675) /usr/lib/systemd/systemd-journald
(root,0,0,00:00:00,689) [bond0]
(root,198572,1356,00:00:00,701) /usr/sbin/lvmetad -f
(root,46252,2704,00:00:00,704) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,819) [kvm-irqfd-clean]
(root,0,0,00:00:06,902) [kworker/7:2]
(root,0,0,00:00:00,906) [xfs-buf/sda1]
(root,0,0,00:00:00,907) [xfs-data/sda1]
(root,0,0,00:00:00,908) [xfs-conv/sda1]
(root,0,0,00:00:00,909) [xfs-cil/sda1]
(root,0,0,00:00:00,910) [xfs-reclaim/sda]
(root,0,0,00:00:00,911) [xfs-log/sda1]
(root,0,0,00:00:00,912) [xfs-eofblocks/s]
(root,0,0,00:00:00,913) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kworker/20:1H]
(root,0,0,00:00:00,917) [kdmflush]
(root,0,0,00:00:00,918) [bioset]
(root,0,0,00:00:00,923) [xfs-buf/dm-2]
(root,0,0,00:00:00,924) [xfs-data/dm-2]
(root,0,0,00:00:00,925) [xfs-conv/dm-2]
(root,0,0,00:00:00,926) [xfs-cil/dm-2]
(root,0,0,00:00:00,927) [xfs-reclaim/dm-]
(root,0,0,00:00:00,928) [xfs-log/dm-2]
(root,0,0,00:00:00,929) [xfs-eofblocks/d]
(root,0,0,00:00:00,930) [xfsaild/dm-2]
(root,55532,1072,00:00:09,949) /sbin/auditd
(root,0,0,00:00:00,967) [kworker/23:1H]
(root,21648,1376,00:26:03,972) /usr/sbin/irqbalance --foreground
(root,26384,1752,00:01:45,978) /usr/lib/systemd/systemd-logind
(dbus,58088,2364,00:03:55,979) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(polkitd,612232,12280,00:00:06,1003) /usr/lib/polkit-1/polkitd --no-debug
(root,126392,1624,00:00:08,1007) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1073) [kworker/8:1]
(root,0,0,00:00:00,1129) [kworker/11:0]
(root,0,0,00:00:00,1216) [kworker/14:1H]
(root,574284,19600,00:09:21,1428) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:02:49,1429) /usr/sbin/bird
(root,260416,10892,00:03:54,1430) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10168,1584,00:00:18,1431) /usr/bin/iperf3 -s
(root,112940,4352,00:00:00,1432) /usr/sbin/sshd -D
(root,566896,43072,00:13:30,1433) /usr/sbin/rsyslogd -n
(root,229092,12584,02:01:43,1437) /usr/sbin/snmpd -LS0-6d -f
(root,0,0,00:00:05,1681) [kworker/11:1H]
(root,0,0,00:00:00,1876) [kworker/5:1H]
(root,0,0,00:00:00,1877) [kworker/7:1H]
(root,0,0,00:00:00,1880) [kworker/1:1H]
(root,0,0,00:00:00,1882) [kworker/9:1H]
(root,0,0,00:00:00,1901) [kworker/2:1H]
(root,0,0,00:00:00,1913) [kworker/15:1H]
(root,0,0,00:00:00,1920) [kworker/11:1]
(speedte+,194512,6960,00:03:24,1950) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,12969744,211596,11:19:25,1954) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=1760541c-9092-4710-ae36-87f9c223f95d
(root,0,0,00:00:00,2006) [kworker/8:1H]
(root,0,0,00:00:00,2100) [kworker/3:1H]
(root,0,0,00:00:00,2125) [kworker/16:1H]
(root,0,0,00:00:00,2128) [kworker/10:1H]
(root,0,0,00:00:00,2134) [kworker/11:2]
(root,0,0,00:00:00,2181) [kworker/18:1H]
(root,115416,1604,00:00:00,2518) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,2524) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,2525) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:25,3673) [kworker/2:0]
(root,0,0,00:00:00,3867) [kworker/7:0]
(root,0,0,00:00:00,4183) [kworker/0:0]
(root,0,0,00:00:00,4244) [kworker/1:0]
(root,0,0,00:00:47,4811) [kworker/4:1]
(root,0,0,00:00:00,5094) [kworker/17:1H]
(root,0,0,00:00:03,5214) [kworker/5:2]
(root,0,0,00:00:00,5370) [kworker/4:1H]
(root,0,0,00:00:15,5376) [kworker/0:2]
(root,0,0,00:00:00,5527) [kworker/6:1H]
(root,0,0,00:00:00,5743) [kworker/12:1]
(root,0,0,00:00:51,6134) [kworker/6:1]
(root,0,0,00:00:00,7378) [kworker/u97:1]
(root,0,0,00:00:00,7623) [kworker/21:1H]
(root,0,0,00:00:00,7989) [kworker/5:0]
(root,0,0,00:00:11,9663) [kworker/2:2]
(root,0,0,00:00:00,12613) [kworker/15:0]
(root,0,0,00:00:20,14127) [kworker/12:0]
(root,0,0,00:00:00,14627) [kworker/22:1H]
(root,0,0,00:00:00,15590) [kworker/13:1H]
(root,0,0,00:00:22,16718) [kworker/10:2]
(root,0,0,00:00:01,17835) [kworker/u98:0]
(root,0,0,00:00:28,17997) [kworker/10:0]
(root,0,0,00:00:00,24229) [kworker/22:2]
(root,0,0,00:00:00,25015) [kworker/20:0]
(root,0,0,00:00:00,26832) [kworker/u98:1]
(root,0,0,00:00:00,26955) [kworker/19:1H]
(root,0,0,00:00:00,27164) [kworker/u96:0]
(root,0,0,00:00:19,27321) [kworker/u96:1]
(root,0,0,00:00:00,31026) [kworker/9:1]
(root,0,0,00:00:00,33642) [kworker/u97:0]
(root,0,0,00:00:00,35433) [kworker/14:0]
(root,0,0,00:00:35,35621) [kworker/20:2]
(root,0,0,00:00:00,37070) [kworker/16:1]
(root,0,0,00:00:05,37292) [kworker/14:2]
(root,0,0,00:00:05,38428) [kworker/4:2]
(root,0,0,00:00:00,39848) [kworker/12:1H]
(root,0,0,00:00:30,42197) [kworker/8:2]
(root,0,0,00:00:00,45499) [kworker/6:0]
(root,0,0,00:01:06,45766) [kworker/22:0]
(root,0,0,00:00:00,46227) [kworker/3:0]
(root,0,0,00:02:09,47643) [kworker/1:2]

Found on 2022-10-24 00:57

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce645ad259

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51612,3884,00:04:06,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:00,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,01:06:06,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:15,11) [watchdog/0]
(root,0,0,00:00:14,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:15,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:14,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:12,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:14,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:11,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:12,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:14,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:12,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:12,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:14,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:11,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:14,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:04,57) [kworker/9:0]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:14,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:11,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:12,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:13,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:10,71) [ksoftirqd/12]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:11,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:14,79) [watchdog/14]
(root,0,0,00:00:03,80) [migration/14]
(root,0,0,00:00:00,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:11,84) [watchdog/15]
(root,0,0,00:00:03,85) [migration/15]
(root,0,0,00:00:00,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:11,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:01,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:11,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:11,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:12,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:13,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:10,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:11,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:13,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:10,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:11,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:02,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:02,145) [kworker/18:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:14,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:41,170) [kworker/8:1]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:01,175) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,224) [kworker/19:1]
(root,0,0,00:00:01,229) [kauditd]
(root,0,0,00:00:00,419) [kworker/17:1]
(root,0,0,00:00:00,439) [scsi_eh_0]
(root,0,0,00:00:00,440) [scsi_tmf_0]
(root,0,0,00:00:00,445) [ata_sff]
(root,0,0,00:00:00,452) [scsi_eh_1]
(root,0,0,00:00:00,453) [scsi_tmf_1]
(root,0,0,00:00:00,454) [scsi_eh_2]
(root,0,0,00:00:00,455) [scsi_tmf_2]
(root,0,0,00:00:00,456) [scsi_eh_3]
(root,0,0,00:00:00,457) [scsi_tmf_3]
(root,0,0,00:00:00,458) [scsi_eh_4]
(root,0,0,00:00:00,459) [scsi_tmf_4]
(root,0,0,00:00:00,460) [scsi_eh_5]
(root,0,0,00:00:00,461) [scsi_tmf_5]
(root,0,0,00:00:00,462) [scsi_eh_6]
(root,0,0,00:00:00,463) [scsi_tmf_6]
(root,0,0,00:00:00,469) [ttm_swap]
(root,0,0,00:00:03,480) [kworker/3:1]
(root,0,0,00:00:00,489) [kworker/13:1]
(root,0,0,00:00:00,512) [kworker/23:1]
(root,0,0,00:00:00,513) [kworker/21:1]
(root,0,0,00:00:00,557) [kdmflush]
(root,0,0,00:00:00,558) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,583) [bioset]
(root,0,0,00:00:00,584) [xfsalloc]
(root,0,0,00:00:00,585) [xfs_mru_cache]
(root,0,0,00:00:00,586) [xfs-buf/dm-0]
(root,0,0,00:00:00,587) [xfs-data/dm-0]
(root,0,0,00:00:00,588) [xfs-conv/dm-0]
(root,0,0,00:00:00,589) [xfs-cil/dm-0]
(root,0,0,00:00:00,590) [xfs-reclaim/dm-]
(root,0,0,00:00:00,591) [xfs-log/dm-0]
(root,0,0,00:00:00,592) [xfs-eofblocks/d]
(root,0,0,00:05:44,593) [xfsaild/dm-0]
(root,0,0,00:00:00,594) [kworker/0:1H]
(root,0,0,00:00:00,597) [kworker/u97:2]
(root,132952,77340,00:12:56,675) /usr/lib/systemd/systemd-journald
(root,0,0,00:00:00,689) [bond0]
(root,198572,1356,00:00:00,701) /usr/sbin/lvmetad -f
(root,46252,2704,00:00:00,704) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,819) [kvm-irqfd-clean]
(root,0,0,00:00:04,902) [kworker/7:2]
(root,0,0,00:00:00,906) [xfs-buf/sda1]
(root,0,0,00:00:00,907) [xfs-data/sda1]
(root,0,0,00:00:00,908) [xfs-conv/sda1]
(root,0,0,00:00:00,909) [xfs-cil/sda1]
(root,0,0,00:00:00,910) [xfs-reclaim/sda]
(root,0,0,00:00:00,911) [xfs-log/sda1]
(root,0,0,00:00:00,912) [xfs-eofblocks/s]
(root,0,0,00:00:00,913) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kworker/20:1H]
(root,0,0,00:00:00,917) [kdmflush]
(root,0,0,00:00:00,918) [bioset]
(root,0,0,00:00:00,923) [xfs-buf/dm-2]
(root,0,0,00:00:00,924) [xfs-data/dm-2]
(root,0,0,00:00:00,925) [xfs-conv/dm-2]
(root,0,0,00:00:00,926) [xfs-cil/dm-2]
(root,0,0,00:00:00,927) [xfs-reclaim/dm-]
(root,0,0,00:00:00,928) [xfs-log/dm-2]
(root,0,0,00:00:00,929) [xfs-eofblocks/d]
(root,0,0,00:00:00,930) [xfsaild/dm-2]
(root,55532,1072,00:00:06,949) /sbin/auditd
(root,0,0,00:00:00,967) [kworker/23:1H]
(root,21648,1376,00:16:49,972) /usr/sbin/irqbalance --foreground
(root,26384,1752,00:01:08,978) /usr/lib/systemd/systemd-logind
(dbus,58088,2364,00:02:32,979) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,0,0,00:00:18,999) [kworker/20:0]
(polkitd,612232,12280,00:00:04,1003) /usr/lib/polkit-1/polkitd --no-debug
(root,126392,1624,00:00:05,1007) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1216) [kworker/14:1H]
(root,0,0,00:00:00,1261) [kworker/11:1]
(root,574284,19600,00:06:02,1428) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:01:49,1429) /usr/sbin/bird
(root,260416,10892,00:02:32,1430) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10168,1584,00:00:18,1431) /usr/bin/iperf3 -s
(root,112940,4352,00:00:00,1432) /usr/sbin/sshd -D
(root,615776,54356,00:08:35,1433) /usr/sbin/rsyslogd -n
(root,228976,12468,01:18:41,1437) /usr/sbin/snmpd -LS0-6d -f
(root,0,0,00:00:00,1438) [kworker/11:0]
(root,0,0,00:00:03,1681) [kworker/11:1H]
(root,0,0,00:00:00,1726) [kworker/3:0]
(root,0,0,00:00:00,1876) [kworker/5:1H]
(root,0,0,00:00:00,1877) [kworker/7:1H]
(root,0,0,00:00:00,1880) [kworker/1:1H]
(root,0,0,00:00:00,1882) [kworker/9:1H]
(root,0,0,00:00:00,1901) [kworker/2:1H]
(root,0,0,00:00:00,1913) [kworker/15:1H]
(root,0,0,00:00:00,1918) [kworker/u96:0]
(speedte+,194512,6960,00:02:10,1950) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,12969744,206260,07:41:44,1954) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=1760541c-9092-4710-ae36-87f9c223f95d
(root,0,0,00:00:00,2006) [kworker/8:1H]
(root,0,0,00:00:00,2062) [kworker/u96:2]
(root,0,0,00:00:00,2100) [kworker/3:1H]
(root,0,0,00:00:00,2125) [kworker/16:1H]
(root,0,0,00:00:00,2128) [kworker/10:1H]
(root,0,0,00:00:00,2141) [kworker/11:2]
(root,0,0,00:00:00,2181) [kworker/18:1H]
(root,115416,1604,00:00:00,2362) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,2368) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,2369) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:20,4811) [kworker/4:1]
(root,0,0,00:00:00,4963) [kworker/6:1]
(root,0,0,00:00:00,5094) [kworker/17:1H]
(root,0,0,00:00:01,5214) [kworker/5:2]
(root,0,0,00:00:00,5370) [kworker/4:1H]
(root,0,0,00:00:06,5376) [kworker/0:2]
(root,0,0,00:01:50,5457) [kworker/2:0]
(root,0,0,00:00:00,5527) [kworker/6:1H]
(root,0,0,00:00:00,5743) [kworker/12:1]
(root,0,0,00:00:00,7623) [kworker/21:1H]
(root,0,0,00:00:09,13385) [kworker/12:2]
(root,0,0,00:00:00,14382) [kworker/5:0]
(root,0,0,00:00:00,14605) [kworker/22:1]
(root,0,0,00:00:00,14627) [kworker/22:1H]
(root,0,0,00:00:00,15314) [kworker/7:1]
(root,0,0,00:00:00,15590) [kworker/13:1H]
(root,0,0,00:00:04,16718) [kworker/10:2]
(root,0,0,00:00:00,17835) [kworker/u98:0]
(root,0,0,00:00:01,17997) [kworker/10:0]
(root,0,0,00:00:20,21561) [kworker/2:2]
(root,0,0,00:00:00,23081) [kworker/9:1]
(root,0,0,00:00:01,26726) [kworker/1:1]
(root,0,0,00:00:00,26832) [kworker/u98:1]
(root,0,0,00:00:00,26955) [kworker/19:1H]
(root,0,0,00:00:00,27554) [kworker/15:2]
(root,0,0,00:00:03,33234) [kworker/1:0]
(root,0,0,00:00:00,33372) [kworker/4:2]
(root,0,0,00:00:02,35621) [kworker/20:2]
(root,0,0,00:00:00,36333) [kworker/14:1]
(root,0,0,00:00:00,37070) [kworker/16:1]
(root,0,0,00:00:02,37292) [kworker/14:2]
(root,0,0,00:00:00,38304) [kworker/0:1]
(root,0,0,00:00:00,39848) [kworker/12:1H]
(root,0,0,00:00:00,42197) [kworker/8:2]
(root,0,0,00:00:05,42804) [kworker/6:2]
(root,0,0,00:00:00,44610) [kworker/u97:1]
(root,0,0,00:00:39,45766) [kworker/22:0]

Found on 2022-09-27 06:08

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce68519072

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51612,3884,00:03:19,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:00,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,00:53:38,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:12,11) [watchdog/0]
(root,0,0,00:00:11,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:01,17) [kworker/u97:0]
(root,0,0,00:00:12,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:12,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:10,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:11,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:09,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:10,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:11,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:10,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:10,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:11,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:10,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:11,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:03,57) [kworker/9:0]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:11,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:09,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:10,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:11,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:08,71) [ksoftirqd/12]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:09,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:11,79) [watchdog/14]
(root,0,0,00:00:02,80) [migration/14]
(root,0,0,00:00:00,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:09,84) [watchdog/15]
(root,0,0,00:00:02,85) [migration/15]
(root,0,0,00:00:00,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:09,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:01,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:09,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:09,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:09,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:11,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:08,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:09,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:11,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:08,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:09,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:01,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:01,145) [kworker/18:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:11,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:29,170) [kworker/8:1]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,175) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,224) [kworker/19:1]
(root,0,0,00:00:01,229) [kauditd]
(root,0,0,00:00:00,419) [kworker/17:1]
(root,0,0,00:00:00,439) [scsi_eh_0]
(root,0,0,00:00:00,440) [scsi_tmf_0]
(root,0,0,00:00:00,445) [ata_sff]
(root,0,0,00:00:00,452) [scsi_eh_1]
(root,0,0,00:00:00,453) [scsi_tmf_1]
(root,0,0,00:00:00,454) [scsi_eh_2]
(root,0,0,00:00:00,455) [scsi_tmf_2]
(root,0,0,00:00:00,456) [scsi_eh_3]
(root,0,0,00:00:00,457) [scsi_tmf_3]
(root,0,0,00:00:00,458) [scsi_eh_4]
(root,0,0,00:00:00,459) [scsi_tmf_4]
(root,0,0,00:00:00,460) [scsi_eh_5]
(root,0,0,00:00:00,461) [scsi_tmf_5]
(root,0,0,00:00:00,462) [scsi_eh_6]
(root,0,0,00:00:00,463) [scsi_tmf_6]
(root,0,0,00:00:00,469) [ttm_swap]
(root,0,0,00:00:03,480) [kworker/3:1]
(root,0,0,00:00:00,489) [kworker/13:1]
(root,0,0,00:00:00,512) [kworker/23:1]
(root,0,0,00:00:00,513) [kworker/21:1]
(root,0,0,00:00:00,557) [kdmflush]
(root,0,0,00:00:00,558) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,583) [bioset]
(root,0,0,00:00:00,584) [xfsalloc]
(root,0,0,00:00:00,585) [xfs_mru_cache]
(root,0,0,00:00:00,586) [xfs-buf/dm-0]
(root,0,0,00:00:00,587) [xfs-data/dm-0]
(root,0,0,00:00:00,588) [xfs-conv/dm-0]
(root,0,0,00:00:00,589) [xfs-cil/dm-0]
(root,0,0,00:00:00,590) [xfs-reclaim/dm-]
(root,0,0,00:00:00,591) [xfs-log/dm-0]
(root,0,0,00:00:00,592) [xfs-eofblocks/d]
(root,0,0,00:04:46,593) [xfsaild/dm-0]
(root,0,0,00:00:00,594) [kworker/0:1H]
(root,0,0,00:00:00,597) [kworker/u97:2]
(root,67792,20592,00:10:25,675) /usr/lib/systemd/systemd-journald
(root,0,0,00:00:00,689) [bond0]
(root,198572,1356,00:00:00,701) /usr/sbin/lvmetad -f
(root,46252,2704,00:00:00,704) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,819) [kvm-irqfd-clean]
(root,0,0,00:00:02,902) [kworker/7:2]
(root,0,0,00:00:00,906) [xfs-buf/sda1]
(root,0,0,00:00:00,907) [xfs-data/sda1]
(root,0,0,00:00:00,908) [xfs-conv/sda1]
(root,0,0,00:00:00,909) [xfs-cil/sda1]
(root,0,0,00:00:00,910) [xfs-reclaim/sda]
(root,0,0,00:00:00,911) [xfs-log/sda1]
(root,0,0,00:00:00,912) [xfs-eofblocks/s]
(root,0,0,00:00:00,913) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kworker/20:1H]
(root,0,0,00:00:00,917) [kdmflush]
(root,0,0,00:00:00,918) [bioset]
(root,0,0,00:00:00,923) [xfs-buf/dm-2]
(root,0,0,00:00:00,924) [xfs-data/dm-2]
(root,0,0,00:00:00,925) [xfs-conv/dm-2]
(root,0,0,00:00:00,926) [xfs-cil/dm-2]
(root,0,0,00:00:00,927) [xfs-reclaim/dm-]
(root,0,0,00:00:00,928) [xfs-log/dm-2]
(root,0,0,00:00:00,929) [xfs-eofblocks/d]
(root,0,0,00:00:00,930) [xfsaild/dm-2]
(root,55532,1064,00:00:05,949) /sbin/auditd
(root,0,0,00:00:00,967) [kworker/23:1H]
(root,21648,1376,00:13:32,972) /usr/sbin/irqbalance --foreground
(root,26384,1752,00:00:54,978) /usr/lib/systemd/systemd-logind
(dbus,58088,2364,00:02:03,979) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,0,0,00:00:12,999) [kworker/20:0]
(polkitd,612232,12280,00:00:03,1003) /usr/lib/polkit-1/polkitd --no-debug
(root,126392,1624,00:00:04,1007) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1216) [kworker/14:1H]
(root,574284,19600,00:04:52,1428) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:01:27,1429) /usr/sbin/bird
(root,260416,10892,00:02:03,1430) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10168,1584,00:00:18,1431) /usr/bin/iperf3 -s
(root,112940,4352,00:00:00,1432) /usr/sbin/sshd -D
(root,528496,16800,00:06:52,1433) /usr/sbin/rsyslogd -n
(root,229092,12584,01:03:28,1437) /usr/sbin/snmpd -LS0-6d -f
(root,0,0,00:00:03,1681) [kworker/11:1H]
(root,0,0,00:00:00,1876) [kworker/5:1H]
(root,0,0,00:00:00,1877) [kworker/7:1H]
(root,0,0,00:00:00,1880) [kworker/1:1H]
(root,0,0,00:00:00,1882) [kworker/9:1H]
(root,0,0,00:00:00,1901) [kworker/2:1H]
(root,0,0,00:00:00,1913) [kworker/15:1H]
(speedte+,194512,6960,00:01:44,1950) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,12969744,205752,06:28:34,1954) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=1760541c-9092-4710-ae36-87f9c223f95d
(root,0,0,00:00:00,2006) [kworker/8:1H]
(root,0,0,00:00:00,2100) [kworker/3:1H]
(root,0,0,00:00:00,2125) [kworker/16:1H]
(root,0,0,00:00:00,2128) [kworker/10:1H]
(root,0,0,00:00:00,2181) [kworker/18:1H]
(root,0,0,00:00:16,2215) [kworker/u96:2]
(root,0,0,00:00:00,3319) [kworker/7:0]
(root,0,0,00:00:00,3516) [kworker/4:0]
(root,0,0,00:00:10,4811) [kworker/4:1]
(root,0,0,00:00:00,5094) [kworker/17:1H]
(root,0,0,00:00:00,5214) [kworker/5:2]
(root,0,0,00:00:00,5370) [kworker/4:1H]
(root,0,0,00:00:03,5376) [kworker/0:2]
(root,0,0,00:00:53,5457) [kworker/2:0]
(root,0,0,00:00:00,5527) [kworker/6:1H]
(root,0,0,00:00:00,6519) [kworker/12:0]
(root,0,0,00:00:00,14627) [kworker/22:1H]
(root,0,0,00:00:00,15949) [kworker/1:1]
(root,0,0,00:00:00,17448) [kworker/5:0]
(root,0,0,00:00:00,17835) [kworker/u98:0]
(root,0,0,00:00:00,18500) [kworker/u96:1]
(root,0,0,00:00:00,20854) [kworker/9:2]
(root,0,0,00:00:20,21561) [kworker/2:2]
(root,0,0,00:01:23,21647) [kworker/1:2]
(root,0,0,00:00:01,21648) [kworker/u98:2]
(root,0,0,00:00:00,21687) [kworker/11:2]
(root,0,0,00:00:00,21937) [kworker/11:0]
(root,115416,1604,00:00:00,22311) /bin/bash /usr/bin/check_mk_agent
(root,51732,1696,00:00:00,22317) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,22318) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:05,22818) [kworker/12:1]
(root,0,0,00:00:00,26955) [kworker/19:1H]
(root,0,0,00:00:00,27554) [kworker/15:2]
(root,0,0,00:00:00,28033) [kworker/3:2]
(root,0,0,00:00:09,30583) [kworker/6:0]
(root,0,0,00:00:00,34720) [kworker/22:2]
(root,0,0,00:00:00,36333) [kworker/14:1]
(root,0,0,00:00:00,37070) [kworker/16:1]
(root,0,0,00:00:02,37292) [kworker/14:2]
(root,0,0,00:00:00,38304) [kworker/0:1]
(root,0,0,00:00:00,38659) [kworker/20:1]
(root,0,0,00:00:00,39848) [kworker/12:1H]
(root,0,0,00:00:29,41228) [kworker/8:2]
(root,0,0,00:00:27,45766) [kworker/22:0]
(root,0,0,00:00:02,48030) [kworker/10:1]
(root,0,0,00:00:00,48771) [kworker/6:2]
(root,0,0,00:00:01,48797) [kworker/10:2]

Found on 2022-09-17 18:14

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ce1ae4e51e

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51612,3884,00:02:52,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:00:00,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,00:46:36,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:00:10,11) [watchdog/0]
(root,0,0,00:00:09,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:00:01,17) [kworker/u97:0]
(root,0,0,00:00:10,18) [watchdog/2]
(root,0,0,00:00:00,19) [migration/2]
(root,0,0,00:00:10,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:00:08,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:00:10,29) [watchdog/4]
(root,0,0,00:00:00,30) [migration/4]
(root,0,0,00:00:08,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:00:08,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:00:10,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:00:09,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:00:08,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:00:10,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:00:09,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:00:09,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:03,57) [kworker/9:0]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:00:10,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:00:08,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:00:08,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:00:09,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:08,71) [ksoftirqd/12]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:00:08,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:00:10,79) [watchdog/14]
(root,0,0,00:00:02,80) [migration/14]
(root,0,0,00:00:00,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:00:08,84) [watchdog/15]
(root,0,0,00:00:02,85) [migration/15]
(root,0,0,00:00:00,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:00:08,89) [watchdog/16]
(root,0,0,00:00:00,90) [migration/16]
(root,0,0,00:00:00,91) [ksoftirqd/16]
(root,0,0,00:00:01,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:00:08,94) [watchdog/17]
(root,0,0,00:00:00,95) [migration/17]
(root,0,0,00:00:00,96) [ksoftirqd/17]
(root,0,0,00:00:00,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:00:08,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:00,101) [ksoftirqd/18]
(root,0,0,00:00:00,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:00:08,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:00,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:00:09,109) [watchdog/20]
(root,0,0,00:00:00,110) [migration/20]
(root,0,0,00:00:07,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:00:08,114) [watchdog/21]
(root,0,0,00:00:00,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:00:09,119) [watchdog/22]
(root,0,0,00:00:00,120) [migration/22]
(root,0,0,00:00:07,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:00:08,124) [watchdog/23]
(root,0,0,00:00:00,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:00,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:01,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:01,145) [kworker/18:1]
(root,0,0,00:00:00,151) [kswapd0]
(root,0,0,00:00:00,152) [kswapd1]
(root,0,0,00:00:00,153) [ksmd]
(root,0,0,00:00:09,154) [khugepaged]
(root,0,0,00:00:00,155) [crypto]
(root,0,0,00:00:00,163) [kthrotld]
(root,0,0,00:00:00,165) [kmpath_rdacd]
(root,0,0,00:00:00,166) [kaluad]
(root,0,0,00:00:22,170) [kworker/8:1]
(root,0,0,00:00:00,171) [kpsmoused]
(root,0,0,00:00:00,175) [kworker/15:1]
(root,0,0,00:00:00,176) [ipv6_addrconf]
(root,0,0,00:00:00,189) [deferwq]
(root,0,0,00:00:00,224) [kworker/19:1]
(root,0,0,00:00:00,229) [kauditd]
(root,0,0,00:00:02,241) [kworker/5:1]
(root,0,0,00:00:00,419) [kworker/17:1]
(root,0,0,00:00:00,439) [scsi_eh_0]
(root,0,0,00:00:00,440) [scsi_tmf_0]
(root,0,0,00:00:00,445) [ata_sff]
(root,0,0,00:00:00,452) [scsi_eh_1]
(root,0,0,00:00:00,453) [scsi_tmf_1]
(root,0,0,00:00:00,454) [scsi_eh_2]
(root,0,0,00:00:00,455) [scsi_tmf_2]
(root,0,0,00:00:00,456) [scsi_eh_3]
(root,0,0,00:00:00,457) [scsi_tmf_3]
(root,0,0,00:00:00,458) [scsi_eh_4]
(root,0,0,00:00:00,459) [scsi_tmf_4]
(root,0,0,00:00:00,460) [scsi_eh_5]
(root,0,0,00:00:00,461) [scsi_tmf_5]
(root,0,0,00:00:00,462) [scsi_eh_6]
(root,0,0,00:00:00,463) [scsi_tmf_6]
(root,0,0,00:00:00,469) [ttm_swap]
(root,0,0,00:00:02,480) [kworker/3:1]
(root,0,0,00:00:00,489) [kworker/13:1]
(root,0,0,00:00:00,512) [kworker/23:1]
(root,0,0,00:00:00,513) [kworker/21:1]
(root,0,0,00:00:00,557) [kdmflush]
(root,0,0,00:00:00,558) [bioset]
(root,0,0,00:00:00,567) [kdmflush]
(root,0,0,00:00:00,568) [bioset]
(root,0,0,00:00:00,583) [bioset]
(root,0,0,00:00:00,584) [xfsalloc]
(root,0,0,00:00:00,585) [xfs_mru_cache]
(root,0,0,00:00:00,586) [xfs-buf/dm-0]
(root,0,0,00:00:00,587) [xfs-data/dm-0]
(root,0,0,00:00:00,588) [xfs-conv/dm-0]
(root,0,0,00:00:00,589) [xfs-cil/dm-0]
(root,0,0,00:00:00,590) [xfs-reclaim/dm-]
(root,0,0,00:00:00,591) [xfs-log/dm-0]
(root,0,0,00:00:00,592) [xfs-eofblocks/d]
(root,0,0,00:04:14,593) [xfsaild/dm-0]
(root,0,0,00:00:00,594) [kworker/0:1H]
(root,0,0,00:00:00,597) [kworker/u97:2]
(root,211496,103556,00:09:02,675) /usr/lib/systemd/systemd-journald
(root,0,0,00:00:00,689) [bond0]
(root,198572,1356,00:00:00,701) /usr/sbin/lvmetad -f
(root,46252,2704,00:00:00,704) /usr/lib/systemd/systemd-udevd
(root,0,0,00:00:00,779) [bnx2x]
(root,0,0,00:00:00,780) [bnx2x_iov]
(root,0,0,00:00:00,819) [kvm-irqfd-clean]
(root,0,0,00:00:02,902) [kworker/7:2]
(root,0,0,00:00:00,906) [xfs-buf/sda1]
(root,0,0,00:00:00,907) [xfs-data/sda1]
(root,0,0,00:00:00,908) [xfs-conv/sda1]
(root,0,0,00:00:00,909) [xfs-cil/sda1]
(root,0,0,00:00:00,910) [xfs-reclaim/sda]
(root,0,0,00:00:00,911) [xfs-log/sda1]
(root,0,0,00:00:00,912) [xfs-eofblocks/s]
(root,0,0,00:00:00,913) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kworker/20:1H]
(root,0,0,00:00:00,917) [kdmflush]
(root,0,0,00:00:00,918) [bioset]
(root,0,0,00:00:00,923) [xfs-buf/dm-2]
(root,0,0,00:00:00,924) [xfs-data/dm-2]
(root,0,0,00:00:00,925) [xfs-conv/dm-2]
(root,0,0,00:00:00,926) [xfs-cil/dm-2]
(root,0,0,00:00:00,927) [xfs-reclaim/dm-]
(root,0,0,00:00:00,928) [xfs-log/dm-2]
(root,0,0,00:00:00,929) [xfs-eofblocks/d]
(root,0,0,00:00:00,930) [xfsaild/dm-2]
(root,55532,1064,00:00:04,949) /sbin/auditd
(root,0,0,00:00:00,967) [kworker/23:1H]
(root,21648,1376,00:11:43,972) /usr/sbin/irqbalance --foreground
(root,26384,1752,00:00:47,978) /usr/lib/systemd/systemd-logind
(dbus,58088,2364,00:01:46,979) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,0,0,00:00:08,999) [kworker/20:0]
(polkitd,612232,12280,00:00:03,1003) /usr/lib/polkit-1/polkitd --no-debug
(root,126392,1624,00:00:03,1007) /usr/sbin/crond -n
(root,110208,860,00:00:00,1056) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1216) [kworker/14:1H]
(root,574284,19600,00:04:13,1428) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1476,00:01:16,1429) /usr/sbin/bird
(root,260416,10892,00:01:46,1430) php-fpm: master process (/etc/php-fpm.conf)
(iperf,10168,1584,00:00:18,1431) /usr/bin/iperf3 -s
(root,112940,4352,00:00:00,1432) /usr/sbin/sshd -D
(root,637596,72408,00:05:57,1433) /usr/sbin/rsyslogd -n
(root,228976,12468,00:54:59,1437) /usr/sbin/snmpd -LS0-6d -f
(root,0,0,00:00:02,1681) [kworker/11:1H]
(root,0,0,00:00:00,1876) [kworker/5:1H]
(root,0,0,00:00:00,1877) [kworker/7:1H]
(root,0,0,00:00:00,1880) [kworker/1:1H]
(root,0,0,00:00:00,1882) [kworker/9:1H]
(root,0,0,00:00:00,1901) [kworker/2:1H]
(root,0,0,00:00:00,1913) [kworker/15:1H]
(speedte+,194512,6960,00:01:29,1950) ./OoklaServer --daemon --pidfile=/home/speedtest/OoklaServer.pid
(speedte+,12969744,205560,05:44:20,1954) /home/speedtest/OoklaServer --ward --parent-pidfile=/home/speedtest/OoklaServer.pid --server-id=1760541c-9092-4710-ae36-87f9c223f95d
(root,0,0,00:00:00,2006) [kworker/8:1H]
(root,0,0,00:00:00,2100) [kworker/3:1H]
(root,0,0,00:00:00,2125) [kworker/16:1H]
(root,0,0,00:00:00,2128) [kworker/10:1H]
(root,0,0,00:00:00,2181) [kworker/18:1H]
(root,0,0,00:00:00,3225) [kworker/9:1]
(root,0,0,00:00:00,4099) [kworker/6:2]
(root,0,0,00:00:04,4811) [kworker/4:1]
(root,0,0,00:00:00,5094) [kworker/17:1H]
(root,0,0,00:00:00,5370) [kworker/4:1H]
(root,0,0,00:00:01,5376) [kworker/0:2]
(root,0,0,00:00:21,5457) [kworker/2:0]
(root,0,0,00:00:00,5527) [kworker/6:1H]
(root,0,0,00:00:00,14117) [kworker/5:0]
(root,0,0,00:00:00,14627) [kworker/22:1H]
(root,0,0,00:00:00,14760) [kworker/4:2]
(root,0,0,00:00:00,17835) [kworker/u98:0]
(root,0,0,00:00:20,20832) [kworker/u96:0]
(root,0,0,00:00:20,21561) [kworker/2:2]
(root,0,0,00:00:56,21647) [kworker/1:2]
(root,0,0,00:00:01,21648) [kworker/u98:2]
(root,0,0,00:00:00,22079) [kworker/7:1]
(root,0,0,00:00:00,26955) [kworker/19:1H]
(root,0,0,00:00:00,27554) [kworker/15:2]
(root,0,0,00:00:00,28300) [kworker/10:2]
(root,0,0,00:00:00,29294) [kworker/12:1]
(root,0,0,00:00:06,29765) [kworker/12:0]
(root,0,0,00:00:11,32935) [kworker/6:1]
(root,0,0,00:00:00,34720) [kworker/22:2]
(root,0,0,00:00:00,36333) [kworker/14:1]
(root,0,0,00:00:00,37070) [kworker/16:1]
(root,0,0,00:00:38,37071) [kworker/1:1]
(root,0,0,00:00:01,37292) [kworker/14:2]
(root,0,0,00:00:00,37817) [kworker/u96:1]
(root,0,0,00:00:00,38304) [kworker/0:1]
(root,0,0,00:00:00,38659) [kworker/20:1]
(root,0,0,00:00:00,39848) [kworker/12:1H]
(root,0,0,00:00:03,40067) [kworker/10:0]
(root,0,0,00:00:29,41228) [kworker/8:2]
(root,0,0,00:00:00,42863) [kworker/11:2]
(root,0,0,00:00:00,42980) [kworker/11:0]
(root,0,0,00:00:00,43057) [kworker/11:1]
(root,115416,1604,00:00:00,43202) /bin/bash /usr/bin/check_mk_agent
(root,51732,1692,00:00:00,43208) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,932,00:00:00,43209) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:20,45766) [kworker/22:0]
(root,0,0,00:00:00,46757) [kworker/3:0]

Found on 2022-09-12 11:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbdb152c97192c0d284810ab27e16e94ceb0cc4f37

Found public CheckMk agent:
Version: 1.2.6b5
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local

Found process list through CheckMk:
(root,51792,4048,00:30:36,1) /usr/lib/systemd/systemd --switched-root --system --deserialize 22
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:00,4) [kworker/0:0H]
(root,0,0,00:03:16,6) [ksoftirqd/0]
(root,0,0,00:00:00,7) [migration/0]
(root,0,0,00:00:00,8) [rcu_bh]
(root,0,0,07:42:27,9) [rcu_sched]
(root,0,0,00:00:00,10) [lru-add-drain]
(root,0,0,00:01:46,11) [watchdog/0]
(root,0,0,00:01:38,12) [watchdog/1]
(root,0,0,00:00:00,13) [migration/1]
(root,0,0,00:00:00,14) [ksoftirqd/1]
(root,0,0,00:00:00,16) [kworker/1:0H]
(root,0,0,00:01:42,18) [watchdog/2]
(root,0,0,00:00:01,19) [migration/2]
(root,0,0,00:03:25,20) [ksoftirqd/2]
(root,0,0,00:00:00,22) [kworker/2:0H]
(root,0,0,00:01:35,24) [watchdog/3]
(root,0,0,00:00:00,25) [migration/3]
(root,0,0,00:00:00,26) [ksoftirqd/3]
(root,0,0,00:00:00,28) [kworker/3:0H]
(root,0,0,00:01:41,29) [watchdog/4]
(root,0,0,00:00:01,30) [migration/4]
(root,0,0,00:02:58,31) [ksoftirqd/4]
(root,0,0,00:00:00,33) [kworker/4:0H]
(root,0,0,00:01:38,34) [watchdog/5]
(root,0,0,00:00:00,35) [migration/5]
(root,0,0,00:00:00,36) [ksoftirqd/5]
(root,0,0,00:00:00,38) [kworker/5:0H]
(root,0,0,00:01:40,39) [watchdog/6]
(root,0,0,00:00:00,40) [migration/6]
(root,0,0,00:02:56,41) [ksoftirqd/6]
(root,0,0,00:00:00,43) [kworker/6:0H]
(root,0,0,00:01:33,44) [watchdog/7]
(root,0,0,00:00:00,45) [migration/7]
(root,0,0,00:00:00,46) [ksoftirqd/7]
(root,0,0,00:00:00,48) [kworker/7:0H]
(root,0,0,00:01:39,49) [watchdog/8]
(root,0,0,00:00:00,50) [migration/8]
(root,0,0,00:02:50,51) [ksoftirqd/8]
(root,0,0,00:00:00,53) [kworker/8:0H]
(root,0,0,00:01:34,54) [watchdog/9]
(root,0,0,00:00:00,55) [migration/9]
(root,0,0,00:00:00,56) [ksoftirqd/9]
(root,0,0,00:00:00,58) [kworker/9:0H]
(root,0,0,00:01:40,59) [watchdog/10]
(root,0,0,00:00:00,60) [migration/10]
(root,0,0,00:02:51,61) [ksoftirqd/10]
(root,0,0,00:00:00,63) [kworker/10:0H]
(root,0,0,00:01:33,64) [watchdog/11]
(root,0,0,00:00:00,65) [migration/11]
(root,0,0,00:00:00,66) [ksoftirqd/11]
(root,0,0,00:00:00,68) [kworker/11:0H]
(root,0,0,00:01:31,69) [watchdog/12]
(root,0,0,00:00:00,70) [migration/12]
(root,0,0,00:00:01,71) [ksoftirqd/12]
(root,0,0,00:00:00,72) [kworker/12:0]
(root,0,0,00:00:00,73) [kworker/12:0H]
(root,0,0,00:01:32,74) [watchdog/13]
(root,0,0,00:00:00,75) [migration/13]
(root,0,0,00:00:00,76) [ksoftirqd/13]
(root,0,0,00:00:00,77) [kworker/13:0]
(root,0,0,00:00:00,78) [kworker/13:0H]
(root,0,0,00:01:31,79) [watchdog/14]
(root,0,0,00:00:22,80) [migration/14]
(root,0,0,00:00:08,81) [ksoftirqd/14]
(root,0,0,00:00:00,83) [kworker/14:0H]
(root,0,0,00:01:33,84) [watchdog/15]
(root,0,0,00:00:26,85) [migration/15]
(root,0,0,00:00:05,86) [ksoftirqd/15]
(root,0,0,00:00:00,88) [kworker/15:0H]
(root,0,0,00:01:30,89) [watchdog/16]
(root,0,0,00:00:04,90) [migration/16]
(root,0,0,00:00:02,91) [ksoftirqd/16]
(root,0,0,00:00:26,92) [kworker/16:0]
(root,0,0,00:00:00,93) [kworker/16:0H]
(root,0,0,00:01:33,94) [watchdog/17]
(root,0,0,00:00:03,95) [migration/17]
(root,0,0,00:00:04,96) [ksoftirqd/17]
(root,0,0,00:00:14,97) [kworker/17:0]
(root,0,0,00:00:00,98) [kworker/17:0H]
(root,0,0,00:01:33,99) [watchdog/18]
(root,0,0,00:00:00,100) [migration/18]
(root,0,0,00:00:02,101) [ksoftirqd/18]
(root,0,0,00:41:41,102) [kworker/18:0]
(root,0,0,00:00:00,103) [kworker/18:0H]
(root,0,0,00:01:31,104) [watchdog/19]
(root,0,0,00:00:00,105) [migration/19]
(root,0,0,00:00:00,106) [ksoftirqd/19]
(root,0,0,00:00:05,107) [kworker/19:0]
(root,0,0,00:00:00,108) [kworker/19:0H]
(root,0,0,00:01:36,109) [watchdog/20]
(root,0,0,00:00:06,110) [migration/20]
(root,0,0,00:02:41,111) [ksoftirqd/20]
(root,0,0,00:00:00,113) [kworker/20:0H]
(root,0,0,00:01:32,114) [watchdog/21]
(root,0,0,00:00:06,115) [migration/21]
(root,0,0,00:00:00,116) [ksoftirqd/21]
(root,0,0,00:00:00,117) [kworker/21:0]
(root,0,0,00:00:00,118) [kworker/21:0H]
(root,0,0,00:01:35,119) [watchdog/22]
(root,0,0,00:00:05,120) [migration/22]
(root,0,0,00:02:41,121) [ksoftirqd/22]
(root,0,0,00:00:00,123) [kworker/22:0H]
(root,0,0,00:01:32,124) [watchdog/23]
(root,0,0,00:00:06,125) [migration/23]
(root,0,0,00:00:00,126) [ksoftirqd/23]
(root,0,0,00:00:05,127) [kworker/23:0]
(root,0,0,00:00:00,128) [kworker/23:0H]
(root,0,0,00:00:00,131) [kdevtmpfs]
(root,0,0,00:00:00,132) [netns]
(root,0,0,00:00:13,133) [khungtaskd]
(root,0,0,00:00:00,134) [writeback]
(root,0,0,00:00:00,135) [kintegrityd]
(root,0,0,00:00:00,136) [bioset]
(root,0,0,00:00:00,137) [bioset]
(root,0,0,00:00:00,138) [bioset]
(root,0,0,00:00:00,139) [kblockd]
(root,0,0,00:00:00,141) [md]
(root,0,0,00:00:00,142) [edac-poller]
(root,0,0,00:00:00,143) [watchdogd]
(root,0,0,00:00:26,147) [kworker/13:1]
(root,0,0,00:00:00,152) [kswapd0]
(root,0,0,00:00:00,153) [kswapd1]
(root,0,0,00:00:00,154) [ksmd]
(root,0,0,00:01:32,155) [khugepaged]
(root,0,0,00:00:00,156) [crypto]
(root,0,0,00:00:00,164) [kthrotld]
(root,0,0,00:00:00,166) [kmpath_rdacd]
(root,0,0,00:00:00,167) [kaluad]
(root,0,0,00:00:00,173) [kpsmoused]
(root,0,0,00:00:00,174) [ipv6_addrconf]
(root,0,0,00:00:00,188) [deferwq]
(root,0,0,00:00:00,223) [kworker/19:1]
(root,0,0,00:00:09,226) [kauditd]
(root,0,0,00:00:00,229) [kworker/18:1]
(root,0,0,00:00:00,390) [kworker/23:1]
(root,0,0,00:00:00,402) [kworker/17:1]
(root,0,0,00:00:00,441) [scsi_eh_0]
(root,0,0,00:00:00,446) [scsi_tmf_0]
(root,0,0,00:00:00,447) [ata_sff]
(root,0,0,00:00:00,453) [scsi_eh_1]
(root,0,0,00:00:00,454) [scsi_tmf_1]
(root,0,0,00:00:00,455) [scsi_eh_2]
(root,0,0,00:00:00,456) [scsi_tmf_2]
(root,0,0,00:00:00,457) [scsi_eh_3]
(root,0,0,00:00:00,458) [scsi_tmf_3]
(root,0,0,00:00:00,459) [scsi_eh_4]
(root,0,0,00:00:00,460) [scsi_tmf_4]
(root,0,0,00:00:00,461) [scsi_eh_5]
(root,0,0,00:00:00,462) [scsi_tmf_5]
(root,0,0,00:00:00,463) [scsi_eh_6]
(root,0,0,00:00:00,464) [scsi_tmf_6]
(root,0,0,00:00:00,470) [ttm_swap]
(root,0,0,00:00:04,509) [kworker/21:1]
(root,0,0,00:00:01,513) [kworker/16:1]
(root,0,0,00:00:00,558) [kdmflush]
(root,0,0,00:00:00,559) [bioset]
(root,0,0,00:00:00,570) [kdmflush]
(root,0,0,00:00:00,571) [bioset]
(root,0,0,00:00:00,584) [bioset]
(root,0,0,00:00:00,585) [xfsalloc]
(root,0,0,00:00:00,586) [xfs_mru_cache]
(root,0,0,00:00:00,587) [xfs-buf/dm-0]
(root,0,0,00:00:00,588) [xfs-data/dm-0]
(root,0,0,00:00:00,589) [xfs-conv/dm-0]
(root,0,0,00:00:00,590) [xfs-cil/dm-0]
(root,0,0,00:00:00,591) [xfs-reclaim/dm-]
(root,0,0,00:00:00,592) [xfs-log/dm-0]
(root,0,0,00:00:00,593) [xfs-eofblocks/d]
(root,0,0,00:42:51,594) [xfsaild/dm-0]
(root,0,0,00:00:00,595) [kworker/9:1H]
(root,55444,15672,01:46:44,675) /usr/lib/systemd/systemd-journald
(root,0,0,00:00:00,701) [bond0]
(root,198572,1364,00:00:00,704) /usr/sbin/lvmetad -f
(root,46156,2620,00:00:00,706) /usr/lib/systemd/systemd-udevd
(root,0,0,00:04:20,776) [kworker/2:1]
(root,0,0,00:00:00,815) [kvm-irqfd-clean]
(root,0,0,00:00:00,818) [bnx2x]
(root,0,0,00:00:00,819) [bnx2x_iov]
(root,0,0,00:00:01,848) [kworker/5:1H]
(root,0,0,00:00:00,905) [xfs-buf/sda1]
(root,0,0,00:00:00,906) [xfs-data/sda1]
(root,0,0,00:00:00,907) [xfs-conv/sda1]
(root,0,0,00:00:00,908) [xfs-cil/sda1]
(root,0,0,00:00:00,909) [xfs-reclaim/sda]
(root,0,0,00:00:00,910) [xfs-log/sda1]
(root,0,0,00:00:00,911) [xfs-eofblocks/s]
(root,0,0,00:00:00,912) [xfsaild/sda1]
(root,0,0,00:00:00,914) [kworker/12:1H]
(root,0,0,00:00:00,916) [kdmflush]
(root,0,0,00:00:00,917) [bioset]
(root,0,0,00:00:00,922) [xfs-buf/dm-2]
(root,0,0,00:00:00,923) [xfs-data/dm-2]
(root,0,0,00:00:00,924) [xfs-conv/dm-2]
(root,0,0,00:00:00,925) [xfs-cil/dm-2]
(root,0,0,00:00:00,926) [xfs-reclaim/dm-]
(root,0,0,00:00:00,927) [xfs-log/dm-2]
(root,0,0,00:00:00,928) [xfs-eofblocks/d]
(root,0,0,00:00:00,929) [xfsaild/dm-2]
(root,55532,1084,00:00:43,950) /sbin/auditd
(polkitd,612332,13408,00:00:28,975) /usr/lib/polkit-1/polkitd --no-debug
(dbus,58088,2328,00:18:37,976) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
(root,21648,1376,01:52:03,995) /usr/sbin/irqbalance --foreground
(root,26516,1904,00:07:51,998) /usr/lib/systemd/systemd-logind
(root,126392,1616,00:00:37,1002) /usr/sbin/crond -n
(root,110208,860,00:00:00,1062) /sbin/agetty --noclear tty1 linux
(root,0,0,00:00:00,1307) [kworker/4:1H]
(root,574284,21648,00:40:12,1388) /usr/bin/python2 -Es /usr/sbin/tuned -l -P
(root,41600,1488,00:12:11,1389) /usr/sbin/bird
(root,260416,10900,00:17:17,1390) php-fpm: master process (/etc/php-fpm.conf)
(root,520780,11892,01:08:06,1391) /usr/sbin/rsyslogd -n
(root,0,0,00:00:00,1827) [kworker/14:1H]
(root,0,0,00:00:28,1829) [kworker/3:1H]
(root,0,0,00:00:00,1831) [kworker/0:1H]
(root,0,0,00:00:00,2175) [kworker/8:0]
(root,0,0,00:00:00,2231) [kworker/15:1H]
(root,0,0,00:00:12,2333) [kworker/12:2]
(root,0,0,00:00:00,2603) [kworker/11:1H]
(root,0,0,00:00:00,2613) [kworker/10:1H]
(root,0,0,00:00:00,2616) [kworker/8:1H]
(root,112940,4352,00:00:00,2631) /usr/sbin/sshd -D
(root,0,0,00:00:00,2670) [kworker/7:1H]
(speedte+,196260,2224,00:02:38,2683) /home/speedtest/OoklaServer --daemon
(root,0,0,00:00:00,2745) [kworker/1:1H]
(root,0,0,00:00:00,2758) [kworker/17:1H]
(root,0,0,00:00:00,2790) [kworker/2:1H]
(root,0,0,00:00:00,2856) [kworker/20:1H]
(root,0,0,00:00:00,3195) [kworker/6:1H]
(root,229728,13568,09:24:45,3216) /usr/sbin/snmpd -LS0-6d -f
(root,0,0,00:00:00,3217) [kworker/18:1H]
(root,0,0,00:00:47,4346) [kworker/8:1]
(root,0,0,00:00:00,4694) [kworker/u96:2]
(root,0,0,00:02:19,7774) [kworker/2:0]
(root,0,0,00:00:07,9199) [kworker/1:1]
(root,0,0,00:00:02,9464) [kworker/u97:1]
(root,0,0,00:00:00,9487) [kworker/21:1H]
(root,0,0,00:00:00,10074) [kworker/4:1]
(root,0,0,00:00:00,10259) [kworker/22:1H]
(root,0,0,00:00:17,10406) [kworker/0:0]
(root,0,0,00:00:02,10913) [kworker/u97:0]
(root,0,0,00:00:00,13790) [kworker/14:0]
(root,0,0,00:00:00,14983) [kworker/10:0]
(speedte+,0,0,00:00:00,15414) [OoklaServer] <defunct>
(speedte+,194512,3112,00:04:38,15419) /home/speedtest/OoklaServer --daemon
(root,0,0,00:00:00,15729) [kworker/22:2]
(root,0,0,00:00:01,16535) [kworker/7:0]
(root,0,0,00:00:00,21693) [kworker/13:1H]
(speedte+,12969916,176636,1-09:21:10,23122) /home/speedtest/OoklaServer --ward
(speedte+,0,0,00:00:00,23173) [OoklaServer] <defunct>
(speedte+,63448,2848,00:07:56,23178) /home/speedtest/OoklaServer --daemon
(root,0,0,00:00:00,25063) [kworker/4:2]
(root,0,0,00:00:09,26801) [kworker/9:1]
(root,0,0,00:00:00,27006) [kworker/6:0]
(root,0,0,00:00:00,27293) [kworker/23:1H]
(root,0,0,00:00:00,28348) [kworker/u98:2]
(root,0,0,00:00:03,28589) [kworker/5:1]
(root,0,0,00:00:04,32369) [kworker/6:1]
(root,0,0,00:00:00,32574) [kworker/9:2]
(root,0,0,00:00:11,34458) [kworker/1:2]
(root,0,0,00:00:00,35014) [kworker/11:0]
(root,0,0,00:00:01,35385) [kworker/15:1]
(root,0,0,00:00:18,35724) [kworker/10:2]
(root,0,0,00:00:00,35737) [kworker/u98:1]
(root,0,0,00:00:06,36365) [kworker/14:1]
(root,0,0,00:00:00,36564) [kworker/16:1H]
(root,0,0,00:00:00,37531) [kworker/7:1]
(root,0,0,00:01:23,37900) [kworker/u96:1]
(root,0,0,00:00:16,39402) [kworker/0:2]
(root,0,0,00:00:19,39412) [kworker/20:1]
(root,0,0,00:00:00,39500) [kworker/3:2]
(root,0,0,00:00:00,39650) [kworker/3:0]
(root,0,0,00:00:00,39723) [kworker/3:1]
(root,115416,1608,00:00:00,39954) /bin/bash /usr/bin/check_mk_agent
(root,51732,1688,00:00:00,39960) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,13324,936,00:00:00,39961) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:00:00,40023) [kworker/11:1]
(root,0,0,00:00:00,40730) [kworker/19:1H]
(root,0,0,00:00:00,41417) [kworker/15:0]
(root,0,0,00:00:00,41419) [kworker/20:0]
(root,0,0,00:00:01,43442) [kworker/22:1]
(iperf,9616,1044,00:00:04,46326) /usr/bin/iperf3 -s
(root,0,0,00:00:05,48052) [kworker/5:0]

Found on 2022-06-17 22:12

Create report

Domain summary

No record