Host 132.247.28.117
Mexico
Universidad Nacional Autonoma de Mexico
Software information

nginx nginx

tcp/443

  • CheckMK monitoring endpoint publicly available
    IP: 132.247.28.117
    Port: 6556
    First seen 2022-06-17 22:53
    Last seen 2024-12-22 00:59
    Open for 918 days

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb226ab2ca

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10432,00:02:59/23-23:31:46,1) /sbin/init
(root,0,0,00:00:01/23-23:31:46,2) [kthreadd]
(root,0,0,00:00:00/23-23:31:46,3) [rcu_gp]
(root,0,0,00:00:00/23-23:31:46,4) [rcu_par_gp]
(root,0,0,00:00:00/23-23:31:46,6) [kworker/0:0H]
(root,0,0,00:00:00/23-23:31:46,8) [mm_percpu_wq]
(root,0,0,00:00:03/23-23:31:46,9) [ksoftirqd/0]
(root,0,0,01:20:45/23-23:31:46,10) [rcu_sched]
(root,0,0,00:00:00/23-23:31:46,11) [rcu_bh]
(root,0,0,00:00:07/23-23:31:46,12) [migration/0]
(root,0,0,00:00:00/23-23:31:46,14) [cpuhp/0]
(root,0,0,00:00:00/23-23:31:46,15) [cpuhp/1]
(root,0,0,00:00:07/23-23:31:46,16) [migration/1]
(root,0,0,00:00:02/23-23:31:46,17) [ksoftirqd/1]
(root,0,0,00:00:00/23-23:31:46,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/23-23:31:46,20) [cpuhp/2]
(root,0,0,00:00:07/23-23:31:46,21) [migration/2]
(root,0,0,00:00:03/23-23:31:46,22) [ksoftirqd/2]
(root,0,0,00:00:00/23-23:31:46,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/23-23:31:46,25) [cpuhp/3]
(root,0,0,00:00:08/23-23:31:46,26) [migration/3]
(root,0,0,00:00:25/23-23:31:46,27) [ksoftirqd/3]
(root,0,0,00:00:00/23-23:31:46,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/23-23:31:46,30) [kdevtmpfs]
(root,0,0,00:00:00/23-23:31:46,31) [netns]
(root,0,0,00:00:00/23-23:31:46,32) [kauditd]
(root,0,0,00:00:02/23-23:31:46,35) [khungtaskd]
(root,0,0,00:00:00/23-23:31:46,36) [oom_reaper]
(root,0,0,00:00:00/23-23:31:46,37) [writeback]
(root,0,0,00:00:00/23-23:31:46,38) [kcompactd0]
(root,0,0,00:00:00/23-23:31:46,39) [ksmd]
(root,0,0,00:00:13/23-23:31:46,40) [khugepaged]
(root,0,0,00:00:00/23-23:31:46,41) [crypto]
(root,0,0,00:00:00/23-23:31:46,42) [kintegrityd]
(root,0,0,00:00:00/23-23:31:46,43) [kblockd]
(root,0,0,00:00:00/23-23:31:45,44) [edac-poller]
(root,0,0,00:00:00/23-23:31:45,45) [devfreq_wq]
(root,0,0,00:00:00/23-23:31:45,46) [watchdogd]
(root,0,0,00:00:00/23-23:31:43,49) [kswapd0]
(root,0,0,00:00:00/23-23:31:42,67) [kthrotld]
(root,0,0,00:00:00/23-23:31:42,68) [irq/24-pciehp]
(root,0,0,00:00:00/23-23:31:42,69) [irq/25-pciehp]
(root,0,0,00:00:00/23-23:31:42,70) [irq/26-pciehp]
(root,0,0,00:00:00/23-23:31:42,71) [irq/27-pciehp]
(root,0,0,00:00:00/23-23:31:42,72) [irq/28-pciehp]
(root,0,0,00:00:00/23-23:31:42,73) [irq/29-pciehp]
(root,0,0,00:00:00/23-23:31:42,74) [irq/30-pciehp]
(root,0,0,00:00:00/23-23:31:42,75) [irq/31-pciehp]
(root,0,0,00:00:00/23-23:31:42,76) [irq/32-pciehp]
(root,0,0,00:00:00/23-23:31:42,77) [irq/33-pciehp]
(root,0,0,00:00:00/23-23:31:42,78) [irq/34-pciehp]
(root,0,0,00:00:00/23-23:31:42,79) [irq/35-pciehp]
(root,0,0,00:00:00/23-23:31:42,80) [irq/36-pciehp]
(root,0,0,00:00:00/23-23:31:42,81) [irq/37-pciehp]
(root,0,0,00:00:00/23-23:31:42,82) [irq/38-pciehp]
(root,0,0,00:00:00/23-23:31:42,83) [irq/39-pciehp]
(root,0,0,00:00:00/23-23:31:42,84) [irq/40-pciehp]
(root,0,0,00:00:00/23-23:31:42,85) [irq/41-pciehp]
(root,0,0,00:00:00/23-23:31:42,86) [irq/42-pciehp]
(root,0,0,00:00:00/23-23:31:42,87) [irq/43-pciehp]
(root,0,0,00:00:00/23-23:31:42,88) [irq/44-pciehp]
(root,0,0,00:00:00/23-23:31:42,89) [irq/45-pciehp]
(root,0,0,00:00:00/23-23:31:42,90) [irq/46-pciehp]
(root,0,0,00:00:00/23-23:31:42,91) [irq/47-pciehp]
(root,0,0,00:00:00/23-23:31:42,92) [irq/48-pciehp]
(root,0,0,00:00:00/23-23:31:42,93) [irq/49-pciehp]
(root,0,0,00:00:00/23-23:31:42,94) [irq/50-pciehp]
(root,0,0,00:00:00/23-23:31:42,95) [irq/51-pciehp]
(root,0,0,00:00:00/23-23:31:42,96) [irq/52-pciehp]
(root,0,0,00:00:00/23-23:31:42,97) [irq/53-pciehp]
(root,0,0,00:00:00/23-23:31:42,98) [irq/54-pciehp]
(root,0,0,00:00:00/23-23:31:42,99) [irq/55-pciehp]
(root,0,0,00:00:00/23-23:31:42,100) [ipv6_addrconf]
(root,0,0,00:00:00/23-23:31:42,110) [kstrp]
(root,0,0,00:00:00/23-23:31:40,152) [scsi_eh_0]
(root,0,0,00:00:00/23-23:31:40,153) [scsi_tmf_0]
(root,0,0,00:00:00/23-23:31:40,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/23-23:31:40,155) [ata_sff]
(root,0,0,00:00:00/23-23:31:40,157) [scsi_eh_1]
(root,0,0,00:00:00/23-23:31:40,158) [scsi_tmf_1]
(root,0,0,00:00:00/23-23:31:40,162) [scsi_eh_2]
(root,0,0,00:00:00/23-23:31:40,174) [scsi_tmf_2]
(root,0,0,00:00:08/23-23:31:39,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:01/23-23:31:39,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:01/23-23:31:39,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:01/23-23:31:39,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/23-23:31:39,230) [kdmflush]
(root,0,0,00:00:00/23-23:31:38,237) [kdmflush]
(root,0,0,00:00:00/23-23:31:30,265) [kworker/u257:0]
(root,0,0,00:00:00/23-23:31:30,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/23-23:31:30,271) [ext4-rsv-conver]
(root,0,0,00:00:00/23-23:31:28,279) [kdmflush]
(root,0,0,00:00:00/23-23:31:25,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/23-23:31:25,295) [ext4-rsv-conver]
(root,57292,18380,00:04:24/23-23:31:19,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:06/23-23:31:18,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/23-23:31:16,502) [ttm_swap]
(root,0,0,00:00:00/23-23:31:16,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/23-23:31:16,511) [kdmflush]
(root,0,0,00:00:00/23-23:31:16,513) [kdmflush]
(root,0,0,00:00:00/23-23:31:16,514) [kdmflush]
(root,0,0,00:00:00/23-23:31:16,517) [kdmflush]
(root,0,0,00:00:00/23-23:31:16,548) [jbd2/sda1-8]
(root,0,0,00:00:00/23-23:31:16,549) [ext4-rsv-conver]
(root,0,0,00:00:00/23-23:31:16,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/23-23:31:16,566) [ext4-rsv-conver]
(root,0,0,00:00:19/23-23:31:15,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/23-23:31:15,570) [ext4-rsv-conver]
(root,0,0,00:00:00/23-23:31:15,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/23-23:31:15,576) [ext4-rsv-conver]
(root,0,0,00:00:00/23-23:31:15,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/23-23:31:15,581) [ext4-rsv-conver]
(root,8500,2776,00:00:06/23-23:31:14,605) /usr/sbin/cron -f
(root,19528,7328,00:01:13/23-23:31:14,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:37/23-23:31:14,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,9380,4552,00:02:38/23-23:31:14,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:09:50/23-23:31:14,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:02:29/23-23:31:14,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/23-23:31:14,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:02:50/23-23:31:13,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:59/23-23:31:13,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:34:43/23-23:31:13,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/23-23:31:12,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/23-23:31:10,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73028,9212,00:00:00/23-23:31:10,818) nginx: worker process
(www-data,73048,9176,00:00:00/23-23:31:10,819) nginx: worker process
(www-data,73316,9624,00:00:58/23-23:31:10,820) nginx: worker process
(www-data,72724,8876,00:00:00/23-23:31:10,821) nginx: worker process
(www-data,231896,17276,00:00:00/23-23:31:08,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/23-23:31:08,912) php-fpm: pool www
(root,0,0,00:00:03/1-13:42:45,21292) [kworker/0:2-events]
(root,0,0,00:00:11/1-10:20:45,21844) [kworker/3:1-events]
(root,0,0,00:00:00/1-00:15:37,23952) [kworker/2:2-mm_percpu_wq]
(root,0,0,00:00:20/07:10:34,27491) [kworker/1:1-events]
(root,0,0,00:00:00/04:17:52,28086) [kworker/u256:0-flush-254:0]
(root,0,0,00:00:00/02:44:02,28449) [kworker/0:0]
(root,0,0,00:00:00/45:33,28897) [kworker/2:0]
(root,0,0,00:00:00/42:41,28903) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/20:46,28983) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/10:18,28998) [kworker/1:0-ata_sff]
(root,0,0,00:00:00/05:07,29005) [kworker/1:2-ata_sff]
(root,6856,3432,00:00:00/00:00,29127) /bin/bash /usr/bin/check_mk_agent
(root,7636,2704,00:00:00/00:00,29145) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,984,00:00:00/00:00,29146) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-22 00:59

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb60cd75d6

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10428,00:02:46/21-23:07:41,1) /sbin/init
(root,0,0,00:00:00/21-23:07:41,2) [kthreadd]
(root,0,0,00:00:00/21-23:07:41,3) [rcu_gp]
(root,0,0,00:00:00/21-23:07:41,4) [rcu_par_gp]
(root,0,0,00:00:00/21-23:07:41,6) [kworker/0:0H]
(root,0,0,00:00:00/21-23:07:41,8) [mm_percpu_wq]
(root,0,0,00:00:03/21-23:07:41,9) [ksoftirqd/0]
(root,0,0,01:14:17/21-23:07:41,10) [rcu_sched]
(root,0,0,00:00:00/21-23:07:41,11) [rcu_bh]
(root,0,0,00:00:06/21-23:07:41,12) [migration/0]
(root,0,0,00:00:00/21-23:07:41,14) [cpuhp/0]
(root,0,0,00:00:00/21-23:07:41,15) [cpuhp/1]
(root,0,0,00:00:06/21-23:07:41,16) [migration/1]
(root,0,0,00:00:02/21-23:07:41,17) [ksoftirqd/1]
(root,0,0,00:00:00/21-23:07:41,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/21-23:07:41,20) [cpuhp/2]
(root,0,0,00:00:07/21-23:07:41,21) [migration/2]
(root,0,0,00:00:03/21-23:07:41,22) [ksoftirqd/2]
(root,0,0,00:00:00/21-23:07:41,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/21-23:07:41,25) [cpuhp/3]
(root,0,0,00:00:07/21-23:07:41,26) [migration/3]
(root,0,0,00:00:23/21-23:07:41,27) [ksoftirqd/3]
(root,0,0,00:00:00/21-23:07:41,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/21-23:07:41,30) [kdevtmpfs]
(root,0,0,00:00:00/21-23:07:41,31) [netns]
(root,0,0,00:00:00/21-23:07:41,32) [kauditd]
(root,0,0,00:00:02/21-23:07:41,35) [khungtaskd]
(root,0,0,00:00:00/21-23:07:41,36) [oom_reaper]
(root,0,0,00:00:00/21-23:07:41,37) [writeback]
(root,0,0,00:00:00/21-23:07:41,38) [kcompactd0]
(root,0,0,00:00:00/21-23:07:41,39) [ksmd]
(root,0,0,00:00:12/21-23:07:41,40) [khugepaged]
(root,0,0,00:00:00/21-23:07:41,41) [crypto]
(root,0,0,00:00:00/21-23:07:41,42) [kintegrityd]
(root,0,0,00:00:00/21-23:07:41,43) [kblockd]
(root,0,0,00:00:00/21-23:07:40,44) [edac-poller]
(root,0,0,00:00:00/21-23:07:40,45) [devfreq_wq]
(root,0,0,00:00:00/21-23:07:40,46) [watchdogd]
(root,0,0,00:00:00/21-23:07:38,49) [kswapd0]
(root,0,0,00:00:00/21-23:07:37,67) [kthrotld]
(root,0,0,00:00:00/21-23:07:37,68) [irq/24-pciehp]
(root,0,0,00:00:00/21-23:07:37,69) [irq/25-pciehp]
(root,0,0,00:00:00/21-23:07:37,70) [irq/26-pciehp]
(root,0,0,00:00:00/21-23:07:37,71) [irq/27-pciehp]
(root,0,0,00:00:00/21-23:07:37,72) [irq/28-pciehp]
(root,0,0,00:00:00/21-23:07:37,73) [irq/29-pciehp]
(root,0,0,00:00:00/21-23:07:37,74) [irq/30-pciehp]
(root,0,0,00:00:00/21-23:07:37,75) [irq/31-pciehp]
(root,0,0,00:00:00/21-23:07:37,76) [irq/32-pciehp]
(root,0,0,00:00:00/21-23:07:37,77) [irq/33-pciehp]
(root,0,0,00:00:00/21-23:07:37,78) [irq/34-pciehp]
(root,0,0,00:00:00/21-23:07:37,79) [irq/35-pciehp]
(root,0,0,00:00:00/21-23:07:37,80) [irq/36-pciehp]
(root,0,0,00:00:00/21-23:07:37,81) [irq/37-pciehp]
(root,0,0,00:00:00/21-23:07:37,82) [irq/38-pciehp]
(root,0,0,00:00:00/21-23:07:37,83) [irq/39-pciehp]
(root,0,0,00:00:00/21-23:07:37,84) [irq/40-pciehp]
(root,0,0,00:00:00/21-23:07:37,85) [irq/41-pciehp]
(root,0,0,00:00:00/21-23:07:37,86) [irq/42-pciehp]
(root,0,0,00:00:00/21-23:07:37,87) [irq/43-pciehp]
(root,0,0,00:00:00/21-23:07:37,88) [irq/44-pciehp]
(root,0,0,00:00:00/21-23:07:37,89) [irq/45-pciehp]
(root,0,0,00:00:00/21-23:07:37,90) [irq/46-pciehp]
(root,0,0,00:00:00/21-23:07:37,91) [irq/47-pciehp]
(root,0,0,00:00:00/21-23:07:37,92) [irq/48-pciehp]
(root,0,0,00:00:00/21-23:07:37,93) [irq/49-pciehp]
(root,0,0,00:00:00/21-23:07:37,94) [irq/50-pciehp]
(root,0,0,00:00:00/21-23:07:37,95) [irq/51-pciehp]
(root,0,0,00:00:00/21-23:07:37,96) [irq/52-pciehp]
(root,0,0,00:00:00/21-23:07:37,97) [irq/53-pciehp]
(root,0,0,00:00:00/21-23:07:37,98) [irq/54-pciehp]
(root,0,0,00:00:00/21-23:07:37,99) [irq/55-pciehp]
(root,0,0,00:00:00/21-23:07:37,100) [ipv6_addrconf]
(root,0,0,00:00:00/21-23:07:37,110) [kstrp]
(root,0,0,00:00:00/21-23:07:35,152) [scsi_eh_0]
(root,0,0,00:00:00/21-23:07:35,153) [scsi_tmf_0]
(root,0,0,00:00:00/21-23:07:35,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/21-23:07:35,155) [ata_sff]
(root,0,0,00:00:00/21-23:07:35,157) [scsi_eh_1]
(root,0,0,00:00:00/21-23:07:35,158) [scsi_tmf_1]
(root,0,0,00:00:00/21-23:07:35,162) [scsi_eh_2]
(root,0,0,00:00:00/21-23:07:35,174) [scsi_tmf_2]
(root,0,0,00:00:07/21-23:07:34,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:01/21-23:07:34,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:01/21-23:07:34,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:01/21-23:07:34,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/21-23:07:34,230) [kdmflush]
(root,0,0,00:00:00/21-23:07:33,237) [kdmflush]
(root,0,0,00:00:00/21-23:07:25,265) [kworker/u257:0]
(root,0,0,00:00:00/21-23:07:25,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/21-23:07:25,271) [ext4-rsv-conver]
(root,0,0,00:00:00/21-23:07:23,279) [kdmflush]
(root,0,0,00:00:00/21-23:07:20,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/21-23:07:20,295) [ext4-rsv-conver]
(root,57160,20312,00:04:14/21-23:07:14,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:06/21-23:07:13,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/21-23:07:11,502) [ttm_swap]
(root,0,0,00:00:00/21-23:07:11,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/21-23:07:11,511) [kdmflush]
(root,0,0,00:00:00/21-23:07:11,513) [kdmflush]
(root,0,0,00:00:00/21-23:07:11,514) [kdmflush]
(root,0,0,00:00:00/21-23:07:11,517) [kdmflush]
(root,0,0,00:00:00/21-23:07:11,548) [jbd2/sda1-8]
(root,0,0,00:00:00/21-23:07:11,549) [ext4-rsv-conver]
(root,0,0,00:00:00/21-23:07:11,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/21-23:07:11,566) [ext4-rsv-conver]
(root,0,0,00:00:18/21-23:07:10,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/21-23:07:10,570) [ext4-rsv-conver]
(root,0,0,00:00:00/21-23:07:10,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/21-23:07:10,576) [ext4-rsv-conver]
(root,0,0,00:00:00/21-23:07:10,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/21-23:07:10,581) [ext4-rsv-conver]
(root,8500,2776,00:00:05/21-23:07:09,605) /usr/sbin/cron -f
(root,19528,7328,00:01:06/21-23:07:09,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:35/21-23:07:09,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:02:29/21-23:07:09,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:08:59/21-23:07:09,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:02:16/21-23:07:09,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/21-23:07:09,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:02:35/21-23:07:08,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:57/21-23:07:08,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:31:40/21-23:07:08,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/21-23:07:07,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/21-23:07:05,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73028,9212,00:00:00/21-23:07:05,818) nginx: worker process
(www-data,73048,9176,00:00:00/21-23:07:05,819) nginx: worker process
(www-data,73136,9624,00:00:53/21-23:07:05,820) nginx: worker process
(www-data,72724,8876,00:00:00/21-23:07:05,821) nginx: worker process
(www-data,231896,17276,00:00:00/21-23:07:03,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/21-23:07:03,912) php-fpm: pool www
(root,0,0,00:00:51/18:32:39,17156) [kworker/1:0-events_power_efficient]
(root,0,0,00:00:00/07:21:28,18631) [kworker/0:1-events]
(root,0,0,00:00:00/04:13:20,18978) [kworker/2:2-events]
(root,0,0,00:00:00/03:13:32,19090) [kworker/0:0-events]
(root,0,0,00:00:00/02:18:40,19360) [kworker/3:2-events]
(root,0,0,00:00:00/02:18:36,19364) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/01:56:36,19466) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/01:21:32,19598) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/26:40,19709) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/07:34,19718) [kworker/1:1-ata_sff]
(root,0,0,00:00:00/02:22,19719) [kworker/1:2-ata_sff]
(root,6856,3456,00:00:00/00:00,19829) /bin/bash /usr/bin/check_mk_agent
(root,7636,2700,00:00:00/00:00,19847) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,19848) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-20 00:35

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbaf863322

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10428,00:02:34/20-00:21:07,1) /sbin/init
(root,0,0,00:00:00/20-00:21:07,2) [kthreadd]
(root,0,0,00:00:00/20-00:21:07,3) [rcu_gp]
(root,0,0,00:00:00/20-00:21:07,4) [rcu_par_gp]
(root,0,0,00:00:00/20-00:21:07,6) [kworker/0:0H]
(root,0,0,00:00:00/20-00:21:07,8) [mm_percpu_wq]
(root,0,0,00:00:03/20-00:21:07,9) [ksoftirqd/0]
(root,0,0,01:08:09/20-00:21:07,10) [rcu_sched]
(root,0,0,00:00:00/20-00:21:07,11) [rcu_bh]
(root,0,0,00:00:06/20-00:21:07,12) [migration/0]
(root,0,0,00:00:00/20-00:21:07,14) [cpuhp/0]
(root,0,0,00:00:00/20-00:21:07,15) [cpuhp/1]
(root,0,0,00:00:05/20-00:21:07,16) [migration/1]
(root,0,0,00:00:02/20-00:21:07,17) [ksoftirqd/1]
(root,0,0,00:00:00/20-00:21:07,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/20-00:21:07,20) [cpuhp/2]
(root,0,0,00:00:06/20-00:21:07,21) [migration/2]
(root,0,0,00:00:03/20-00:21:07,22) [ksoftirqd/2]
(root,0,0,00:00:00/20-00:21:07,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/20-00:21:07,25) [cpuhp/3]
(root,0,0,00:00:07/20-00:21:07,26) [migration/3]
(root,0,0,00:00:22/20-00:21:07,27) [ksoftirqd/3]
(root,0,0,00:00:00/20-00:21:07,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/20-00:21:07,30) [kdevtmpfs]
(root,0,0,00:00:00/20-00:21:07,31) [netns]
(root,0,0,00:00:00/20-00:21:07,32) [kauditd]
(root,0,0,00:00:02/20-00:21:07,35) [khungtaskd]
(root,0,0,00:00:00/20-00:21:07,36) [oom_reaper]
(root,0,0,00:00:00/20-00:21:07,37) [writeback]
(root,0,0,00:00:00/20-00:21:07,38) [kcompactd0]
(root,0,0,00:00:00/20-00:21:07,39) [ksmd]
(root,0,0,00:00:10/20-00:21:07,40) [khugepaged]
(root,0,0,00:00:00/20-00:21:07,41) [crypto]
(root,0,0,00:00:00/20-00:21:07,42) [kintegrityd]
(root,0,0,00:00:00/20-00:21:07,43) [kblockd]
(root,0,0,00:00:00/20-00:21:06,44) [edac-poller]
(root,0,0,00:00:00/20-00:21:06,45) [devfreq_wq]
(root,0,0,00:00:00/20-00:21:06,46) [watchdogd]
(root,0,0,00:00:00/20-00:21:04,49) [kswapd0]
(root,0,0,00:00:00/20-00:21:03,67) [kthrotld]
(root,0,0,00:00:00/20-00:21:03,68) [irq/24-pciehp]
(root,0,0,00:00:00/20-00:21:03,69) [irq/25-pciehp]
(root,0,0,00:00:00/20-00:21:03,70) [irq/26-pciehp]
(root,0,0,00:00:00/20-00:21:03,71) [irq/27-pciehp]
(root,0,0,00:00:00/20-00:21:03,72) [irq/28-pciehp]
(root,0,0,00:00:00/20-00:21:03,73) [irq/29-pciehp]
(root,0,0,00:00:00/20-00:21:03,74) [irq/30-pciehp]
(root,0,0,00:00:00/20-00:21:03,75) [irq/31-pciehp]
(root,0,0,00:00:00/20-00:21:03,76) [irq/32-pciehp]
(root,0,0,00:00:00/20-00:21:03,77) [irq/33-pciehp]
(root,0,0,00:00:00/20-00:21:03,78) [irq/34-pciehp]
(root,0,0,00:00:00/20-00:21:03,79) [irq/35-pciehp]
(root,0,0,00:00:00/20-00:21:03,80) [irq/36-pciehp]
(root,0,0,00:00:00/20-00:21:03,81) [irq/37-pciehp]
(root,0,0,00:00:00/20-00:21:03,82) [irq/38-pciehp]
(root,0,0,00:00:00/20-00:21:03,83) [irq/39-pciehp]
(root,0,0,00:00:00/20-00:21:03,84) [irq/40-pciehp]
(root,0,0,00:00:00/20-00:21:03,85) [irq/41-pciehp]
(root,0,0,00:00:00/20-00:21:03,86) [irq/42-pciehp]
(root,0,0,00:00:00/20-00:21:03,87) [irq/43-pciehp]
(root,0,0,00:00:00/20-00:21:03,88) [irq/44-pciehp]
(root,0,0,00:00:00/20-00:21:03,89) [irq/45-pciehp]
(root,0,0,00:00:00/20-00:21:03,90) [irq/46-pciehp]
(root,0,0,00:00:00/20-00:21:03,91) [irq/47-pciehp]
(root,0,0,00:00:00/20-00:21:03,92) [irq/48-pciehp]
(root,0,0,00:00:00/20-00:21:03,93) [irq/49-pciehp]
(root,0,0,00:00:00/20-00:21:03,94) [irq/50-pciehp]
(root,0,0,00:00:00/20-00:21:03,95) [irq/51-pciehp]
(root,0,0,00:00:00/20-00:21:03,96) [irq/52-pciehp]
(root,0,0,00:00:00/20-00:21:03,97) [irq/53-pciehp]
(root,0,0,00:00:00/20-00:21:03,98) [irq/54-pciehp]
(root,0,0,00:00:00/20-00:21:03,99) [irq/55-pciehp]
(root,0,0,00:00:00/20-00:21:03,100) [ipv6_addrconf]
(root,0,0,00:00:00/20-00:21:03,110) [kstrp]
(root,0,0,00:00:00/20-00:21:01,152) [scsi_eh_0]
(root,0,0,00:00:00/20-00:21:01,153) [scsi_tmf_0]
(root,0,0,00:00:00/20-00:21:01,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/20-00:21:01,155) [ata_sff]
(root,0,0,00:00:00/20-00:21:01,157) [scsi_eh_1]
(root,0,0,00:00:00/20-00:21:01,158) [scsi_tmf_1]
(root,0,0,00:00:00/20-00:21:01,162) [scsi_eh_2]
(root,0,0,00:00:00/20-00:21:01,174) [scsi_tmf_2]
(root,0,0,00:00:06/20-00:21:00,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:01/20-00:21:00,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:01/20-00:21:00,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:01/20-00:21:00,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/20-00:21:00,230) [kdmflush]
(root,0,0,00:00:00/20-00:20:59,237) [kdmflush]
(root,0,0,00:00:00/20-00:20:51,265) [kworker/u257:0]
(root,0,0,00:00:00/20-00:20:51,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/20-00:20:51,271) [ext4-rsv-conver]
(root,0,0,00:00:00/20-00:20:49,279) [kdmflush]
(root,0,0,00:00:00/20-00:20:46,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/20-00:20:46,295) [ext4-rsv-conver]
(root,57160,19576,00:04:13/20-00:20:40,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:05/20-00:20:39,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/20-00:20:37,502) [ttm_swap]
(root,0,0,00:00:00/20-00:20:37,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/20-00:20:37,511) [kdmflush]
(root,0,0,00:00:00/20-00:20:37,513) [kdmflush]
(root,0,0,00:00:00/20-00:20:37,514) [kdmflush]
(root,0,0,00:00:00/20-00:20:37,517) [kdmflush]
(root,0,0,00:00:00/20-00:20:37,548) [jbd2/sda1-8]
(root,0,0,00:00:00/20-00:20:37,549) [ext4-rsv-conver]
(root,0,0,00:00:00/20-00:20:37,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/20-00:20:37,566) [ext4-rsv-conver]
(root,0,0,00:00:18/20-00:20:36,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/20-00:20:36,570) [ext4-rsv-conver]
(root,0,0,00:00:00/20-00:20:36,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/20-00:20:36,576) [ext4-rsv-conver]
(root,0,0,00:00:00/20-00:20:36,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/20-00:20:36,581) [ext4-rsv-conver]
(root,8500,2776,00:00:05/20-00:20:35,605) /usr/sbin/cron -f
(root,19528,7328,00:01:01/20-00:20:35,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:35/20-00:20:35,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:02:22/20-00:20:35,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:08:13/20-00:20:35,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:02:04/20-00:20:35,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/20-00:20:35,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:02:22/20-00:20:34,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:57/20-00:20:34,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:29:04/20-00:20:34,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/20-00:20:33,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/20-00:20:31,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73028,9212,00:00:00/20-00:20:31,818) nginx: worker process
(www-data,72728,9176,00:00:00/20-00:20:31,819) nginx: worker process
(www-data,73136,9624,00:00:49/20-00:20:31,820) nginx: worker process
(www-data,72724,8876,00:00:00/20-00:20:31,821) nginx: worker process
(www-data,231896,17276,00:00:00/20-00:20:29,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/20-00:20:29,912) php-fpm: pool www
(root,0,0,00:00:01/17:10:06,11286) [kworker/0:1-events]
(root,0,0,00:00:04/14:04:48,11656) [kworker/3:1-events]
(root,0,0,00:00:35/13:16:28,11888) [kworker/1:0-events]
(root,0,0,00:00:00/09:40:06,12377) [kworker/2:1-events]
(root,0,0,00:00:00/02:10:06,13231) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/40:01,13395) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/10:06,13421) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/10:06,13454) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/10:01,13455) [kworker/u256:2-flush-254:0]
(root,0,0,00:00:00/07:51,13456) [kworker/1:2-ata_sff]
(root,0,0,00:00:00/04:49,13457) [kworker/0:0-events]
(root,0,0,00:00:00/04:12,13459) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/02:39,13460) [kworker/1:1-ata_sff]
(root,6856,3472,00:00:00/00:00,13509) /bin/bash /usr/bin/check_mk_agent
(root,7636,2732,00:00:00/00:00,13527) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,13528) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-18 01:48

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbe8e42c3a

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10428,00:02:21/17-22:26:15,1) /sbin/init
(root,0,0,00:00:00/17-22:26:15,2) [kthreadd]
(root,0,0,00:00:00/17-22:26:15,3) [rcu_gp]
(root,0,0,00:00:00/17-22:26:15,4) [rcu_par_gp]
(root,0,0,00:00:00/17-22:26:15,6) [kworker/0:0H]
(root,0,0,00:00:00/17-22:26:15,8) [mm_percpu_wq]
(root,0,0,00:00:03/17-22:26:15,9) [ksoftirqd/0]
(root,0,0,01:01:29/17-22:26:15,10) [rcu_sched]
(root,0,0,00:00:00/17-22:26:15,11) [rcu_bh]
(root,0,0,00:00:05/17-22:26:15,12) [migration/0]
(root,0,0,00:00:00/17-22:26:15,14) [cpuhp/0]
(root,0,0,00:00:00/17-22:26:15,15) [cpuhp/1]
(root,0,0,00:00:05/17-22:26:15,16) [migration/1]
(root,0,0,00:00:02/17-22:26:15,17) [ksoftirqd/1]
(root,0,0,00:00:00/17-22:26:15,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/17-22:26:15,20) [cpuhp/2]
(root,0,0,00:00:06/17-22:26:15,21) [migration/2]
(root,0,0,00:00:03/17-22:26:15,22) [ksoftirqd/2]
(root,0,0,00:00:00/17-22:26:15,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/17-22:26:15,25) [cpuhp/3]
(root,0,0,00:00:06/17-22:26:15,26) [migration/3]
(root,0,0,00:00:20/17-22:26:15,27) [ksoftirqd/3]
(root,0,0,00:00:00/17-22:26:15,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/17-22:26:15,30) [kdevtmpfs]
(root,0,0,00:00:00/17-22:26:15,31) [netns]
(root,0,0,00:00:00/17-22:26:15,32) [kauditd]
(root,0,0,00:00:02/17-22:26:15,35) [khungtaskd]
(root,0,0,00:00:00/17-22:26:15,36) [oom_reaper]
(root,0,0,00:00:00/17-22:26:15,37) [writeback]
(root,0,0,00:00:00/17-22:26:15,38) [kcompactd0]
(root,0,0,00:00:00/17-22:26:15,39) [ksmd]
(root,0,0,00:00:09/17-22:26:15,40) [khugepaged]
(root,0,0,00:00:00/17-22:26:15,41) [crypto]
(root,0,0,00:00:00/17-22:26:15,42) [kintegrityd]
(root,0,0,00:00:00/17-22:26:15,43) [kblockd]
(root,0,0,00:00:00/17-22:26:14,44) [edac-poller]
(root,0,0,00:00:00/17-22:26:14,45) [devfreq_wq]
(root,0,0,00:00:00/17-22:26:14,46) [watchdogd]
(root,0,0,00:00:00/17-22:26:12,49) [kswapd0]
(root,0,0,00:00:00/17-22:26:11,67) [kthrotld]
(root,0,0,00:00:00/17-22:26:11,68) [irq/24-pciehp]
(root,0,0,00:00:00/17-22:26:11,69) [irq/25-pciehp]
(root,0,0,00:00:00/17-22:26:11,70) [irq/26-pciehp]
(root,0,0,00:00:00/17-22:26:11,71) [irq/27-pciehp]
(root,0,0,00:00:00/17-22:26:11,72) [irq/28-pciehp]
(root,0,0,00:00:00/17-22:26:11,73) [irq/29-pciehp]
(root,0,0,00:00:00/17-22:26:11,74) [irq/30-pciehp]
(root,0,0,00:00:00/17-22:26:11,75) [irq/31-pciehp]
(root,0,0,00:00:00/17-22:26:11,76) [irq/32-pciehp]
(root,0,0,00:00:00/17-22:26:11,77) [irq/33-pciehp]
(root,0,0,00:00:00/17-22:26:11,78) [irq/34-pciehp]
(root,0,0,00:00:00/17-22:26:11,79) [irq/35-pciehp]
(root,0,0,00:00:00/17-22:26:11,80) [irq/36-pciehp]
(root,0,0,00:00:00/17-22:26:11,81) [irq/37-pciehp]
(root,0,0,00:00:00/17-22:26:11,82) [irq/38-pciehp]
(root,0,0,00:00:00/17-22:26:11,83) [irq/39-pciehp]
(root,0,0,00:00:00/17-22:26:11,84) [irq/40-pciehp]
(root,0,0,00:00:00/17-22:26:11,85) [irq/41-pciehp]
(root,0,0,00:00:00/17-22:26:11,86) [irq/42-pciehp]
(root,0,0,00:00:00/17-22:26:11,87) [irq/43-pciehp]
(root,0,0,00:00:00/17-22:26:11,88) [irq/44-pciehp]
(root,0,0,00:00:00/17-22:26:11,89) [irq/45-pciehp]
(root,0,0,00:00:00/17-22:26:11,90) [irq/46-pciehp]
(root,0,0,00:00:00/17-22:26:11,91) [irq/47-pciehp]
(root,0,0,00:00:00/17-22:26:11,92) [irq/48-pciehp]
(root,0,0,00:00:00/17-22:26:11,93) [irq/49-pciehp]
(root,0,0,00:00:00/17-22:26:11,94) [irq/50-pciehp]
(root,0,0,00:00:00/17-22:26:11,95) [irq/51-pciehp]
(root,0,0,00:00:00/17-22:26:11,96) [irq/52-pciehp]
(root,0,0,00:00:00/17-22:26:11,97) [irq/53-pciehp]
(root,0,0,00:00:00/17-22:26:11,98) [irq/54-pciehp]
(root,0,0,00:00:00/17-22:26:11,99) [irq/55-pciehp]
(root,0,0,00:00:00/17-22:26:11,100) [ipv6_addrconf]
(root,0,0,00:00:00/17-22:26:11,110) [kstrp]
(root,0,0,00:00:00/17-22:26:09,152) [scsi_eh_0]
(root,0,0,00:00:00/17-22:26:09,153) [scsi_tmf_0]
(root,0,0,00:00:00/17-22:26:09,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/17-22:26:09,155) [ata_sff]
(root,0,0,00:00:00/17-22:26:09,157) [scsi_eh_1]
(root,0,0,00:00:00/17-22:26:09,158) [scsi_tmf_1]
(root,0,0,00:00:00/17-22:26:09,162) [scsi_eh_2]
(root,0,0,00:00:00/17-22:26:09,174) [scsi_tmf_2]
(root,0,0,00:00:06/17-22:26:08,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:01/17-22:26:08,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:01/17-22:26:08,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:01/17-22:26:08,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/17-22:26:08,230) [kdmflush]
(root,0,0,00:00:00/17-22:26:07,237) [kdmflush]
(root,0,0,00:00:00/17-22:25:59,265) [kworker/u257:0]
(root,0,0,00:00:00/17-22:25:59,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/17-22:25:59,271) [ext4-rsv-conver]
(root,0,0,00:00:00/17-22:25:57,279) [kdmflush]
(root,0,0,00:00:00/17-22:25:54,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/17-22:25:54,295) [ext4-rsv-conver]
(root,57160,18816,00:04:11/17-22:25:48,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:05/17-22:25:47,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/17-22:25:45,502) [ttm_swap]
(root,0,0,00:00:00/17-22:25:45,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/17-22:25:45,511) [kdmflush]
(root,0,0,00:00:00/17-22:25:45,513) [kdmflush]
(root,0,0,00:00:00/17-22:25:45,514) [kdmflush]
(root,0,0,00:00:00/17-22:25:45,517) [kdmflush]
(root,0,0,00:00:00/17-22:25:45,548) [jbd2/sda1-8]
(root,0,0,00:00:00/17-22:25:45,549) [ext4-rsv-conver]
(root,0,0,00:00:00/17-22:25:45,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/17-22:25:45,566) [ext4-rsv-conver]
(root,0,0,00:00:17/17-22:25:44,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/17-22:25:44,570) [ext4-rsv-conver]
(root,0,0,00:00:00/17-22:25:44,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/17-22:25:44,576) [ext4-rsv-conver]
(root,0,0,00:00:00/17-22:25:44,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/17-22:25:44,581) [ext4-rsv-conver]
(root,8500,2776,00:00:04/17-22:25:43,605) /usr/sbin/cron -f
(root,19528,7328,00:00:54/17-22:25:43,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:35/17-22:25:43,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:02:14/17-22:25:43,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:07:22/17-22:25:43,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:01:51/17-22:25:43,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/17-22:25:43,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:02:07/17-22:25:42,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:57/17-22:25:42,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:26:11/17-22:25:42,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/17-22:25:41,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/17-22:25:39,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72736,9212,00:00:00/17-22:25:39,818) nginx: worker process
(www-data,72728,9176,00:00:00/17-22:25:39,819) nginx: worker process
(www-data,73136,9624,00:00:44/17-22:25:39,820) nginx: worker process
(www-data,72724,8876,00:00:00/17-22:25:39,821) nginx: worker process
(www-data,231896,17276,00:00:00/17-22:25:37,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/17-22:25:37,912) php-fpm: pool www
(root,0,0,00:00:51/19:23:36,4423) [kworker/1:1-events]
(root,0,0,00:00:01/14:31:58,5048) [kworker/0:1-events]
(root,0,0,00:00:01/04:39:57,6315) [kworker/3:0-events]
(root,0,0,00:00:00/02:26:25,6567) [kworker/2:2-events]
(root,0,0,00:00:00/02:26:24,6598) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/02:14:59,6648) [kworker/u256:2-flush-254:5]
(root,0,0,00:00:00/01:15:14,6759) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/37:09,6819) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/06:37,6872) [kworker/1:0-ata_sff]
(root,0,0,00:00:00/01:24,6873) [kworker/1:2-ata_sff]
(root,6856,3396,00:00:00/00:00,6989) /bin/bash /usr/bin/check_mk_agent
(root,7636,2668,00:00:00/00:00,7007) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,7008) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:19/2-17:28:41,119051) [kworker/3:2-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-15 23:53

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbcb0233a5

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10424,00:02:08/15-22:35:47,1) /sbin/init
(root,0,0,00:00:00/15-22:35:47,2) [kthreadd]
(root,0,0,00:00:00/15-22:35:47,3) [rcu_gp]
(root,0,0,00:00:00/15-22:35:47,4) [rcu_par_gp]
(root,0,0,00:00:00/15-22:35:47,6) [kworker/0:0H]
(root,0,0,00:00:00/15-22:35:47,8) [mm_percpu_wq]
(root,0,0,00:00:03/15-22:35:47,9) [ksoftirqd/0]
(root,0,0,00:55:03/15-22:35:47,10) [rcu_sched]
(root,0,0,00:00:00/15-22:35:47,11) [rcu_bh]
(root,0,0,00:00:05/15-22:35:47,12) [migration/0]
(root,0,0,00:00:00/15-22:35:47,14) [cpuhp/0]
(root,0,0,00:00:00/15-22:35:47,15) [cpuhp/1]
(root,0,0,00:00:04/15-22:35:47,16) [migration/1]
(root,0,0,00:00:01/15-22:35:47,17) [ksoftirqd/1]
(root,0,0,00:00:00/15-22:35:47,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/15-22:35:47,20) [cpuhp/2]
(root,0,0,00:00:05/15-22:35:47,21) [migration/2]
(root,0,0,00:00:03/15-22:35:47,22) [ksoftirqd/2]
(root,0,0,00:00:00/15-22:35:47,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/15-22:35:47,25) [cpuhp/3]
(root,0,0,00:00:06/15-22:35:47,26) [migration/3]
(root,0,0,00:00:18/15-22:35:47,27) [ksoftirqd/3]
(root,0,0,00:00:00/15-22:35:47,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/15-22:35:47,30) [kdevtmpfs]
(root,0,0,00:00:00/15-22:35:47,31) [netns]
(root,0,0,00:00:00/15-22:35:47,32) [kauditd]
(root,0,0,00:00:01/15-22:35:47,35) [khungtaskd]
(root,0,0,00:00:00/15-22:35:47,36) [oom_reaper]
(root,0,0,00:00:00/15-22:35:47,37) [writeback]
(root,0,0,00:00:00/15-22:35:47,38) [kcompactd0]
(root,0,0,00:00:00/15-22:35:47,39) [ksmd]
(root,0,0,00:00:08/15-22:35:47,40) [khugepaged]
(root,0,0,00:00:00/15-22:35:47,41) [crypto]
(root,0,0,00:00:00/15-22:35:47,42) [kintegrityd]
(root,0,0,00:00:00/15-22:35:47,43) [kblockd]
(root,0,0,00:00:00/15-22:35:46,44) [edac-poller]
(root,0,0,00:00:00/15-22:35:46,45) [devfreq_wq]
(root,0,0,00:00:00/15-22:35:46,46) [watchdogd]
(root,0,0,00:00:00/15-22:35:44,49) [kswapd0]
(root,0,0,00:00:00/15-22:35:43,67) [kthrotld]
(root,0,0,00:00:00/15-22:35:43,68) [irq/24-pciehp]
(root,0,0,00:00:00/15-22:35:43,69) [irq/25-pciehp]
(root,0,0,00:00:00/15-22:35:43,70) [irq/26-pciehp]
(root,0,0,00:00:00/15-22:35:43,71) [irq/27-pciehp]
(root,0,0,00:00:00/15-22:35:43,72) [irq/28-pciehp]
(root,0,0,00:00:00/15-22:35:43,73) [irq/29-pciehp]
(root,0,0,00:00:00/15-22:35:43,74) [irq/30-pciehp]
(root,0,0,00:00:00/15-22:35:43,75) [irq/31-pciehp]
(root,0,0,00:00:00/15-22:35:43,76) [irq/32-pciehp]
(root,0,0,00:00:00/15-22:35:43,77) [irq/33-pciehp]
(root,0,0,00:00:00/15-22:35:43,78) [irq/34-pciehp]
(root,0,0,00:00:00/15-22:35:43,79) [irq/35-pciehp]
(root,0,0,00:00:00/15-22:35:43,80) [irq/36-pciehp]
(root,0,0,00:00:00/15-22:35:43,81) [irq/37-pciehp]
(root,0,0,00:00:00/15-22:35:43,82) [irq/38-pciehp]
(root,0,0,00:00:00/15-22:35:43,83) [irq/39-pciehp]
(root,0,0,00:00:00/15-22:35:43,84) [irq/40-pciehp]
(root,0,0,00:00:00/15-22:35:43,85) [irq/41-pciehp]
(root,0,0,00:00:00/15-22:35:43,86) [irq/42-pciehp]
(root,0,0,00:00:00/15-22:35:43,87) [irq/43-pciehp]
(root,0,0,00:00:00/15-22:35:43,88) [irq/44-pciehp]
(root,0,0,00:00:00/15-22:35:43,89) [irq/45-pciehp]
(root,0,0,00:00:00/15-22:35:43,90) [irq/46-pciehp]
(root,0,0,00:00:00/15-22:35:43,91) [irq/47-pciehp]
(root,0,0,00:00:00/15-22:35:43,92) [irq/48-pciehp]
(root,0,0,00:00:00/15-22:35:43,93) [irq/49-pciehp]
(root,0,0,00:00:00/15-22:35:43,94) [irq/50-pciehp]
(root,0,0,00:00:00/15-22:35:43,95) [irq/51-pciehp]
(root,0,0,00:00:00/15-22:35:43,96) [irq/52-pciehp]
(root,0,0,00:00:00/15-22:35:43,97) [irq/53-pciehp]
(root,0,0,00:00:00/15-22:35:43,98) [irq/54-pciehp]
(root,0,0,00:00:00/15-22:35:43,99) [irq/55-pciehp]
(root,0,0,00:00:00/15-22:35:43,100) [ipv6_addrconf]
(root,0,0,00:00:00/15-22:35:43,110) [kstrp]
(root,0,0,00:00:00/15-22:35:41,152) [scsi_eh_0]
(root,0,0,00:00:00/15-22:35:41,153) [scsi_tmf_0]
(root,0,0,00:00:00/15-22:35:41,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/15-22:35:41,155) [ata_sff]
(root,0,0,00:00:00/15-22:35:41,157) [scsi_eh_1]
(root,0,0,00:00:00/15-22:35:41,158) [scsi_tmf_1]
(root,0,0,00:00:00/15-22:35:41,162) [scsi_eh_2]
(root,0,0,00:00:00/15-22:35:41,174) [scsi_tmf_2]
(root,0,0,00:00:05/15-22:35:40,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:01/15-22:35:40,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:01/15-22:35:40,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:01/15-22:35:40,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/15-22:35:40,230) [kdmflush]
(root,0,0,00:00:00/15-22:35:39,237) [kdmflush]
(root,0,0,00:00:00/15-22:35:31,265) [kworker/u257:0]
(root,0,0,00:00:00/15-22:35:31,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/15-22:35:31,271) [ext4-rsv-conver]
(root,0,0,00:00:00/15-22:35:29,279) [kdmflush]
(root,0,0,00:00:00/15-22:35:26,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/15-22:35:26,295) [ext4-rsv-conver]
(root,57028,17656,00:03:56/15-22:35:20,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:04/15-22:35:19,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/15-22:35:17,502) [ttm_swap]
(root,0,0,00:00:00/15-22:35:17,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/15-22:35:17,511) [kdmflush]
(root,0,0,00:00:00/15-22:35:17,513) [kdmflush]
(root,0,0,00:00:00/15-22:35:17,514) [kdmflush]
(root,0,0,00:00:00/15-22:35:17,517) [kdmflush]
(root,0,0,00:00:00/15-22:35:17,548) [jbd2/sda1-8]
(root,0,0,00:00:00/15-22:35:17,549) [ext4-rsv-conver]
(root,0,0,00:00:00/15-22:35:17,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/15-22:35:17,566) [ext4-rsv-conver]
(root,0,0,00:00:16/15-22:35:16,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/15-22:35:16,570) [ext4-rsv-conver]
(root,0,0,00:00:00/15-22:35:16,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/15-22:35:16,576) [ext4-rsv-conver]
(root,0,0,00:00:00/15-22:35:16,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/15-22:35:16,581) [ext4-rsv-conver]
(root,8500,2776,00:00:04/15-22:35:15,605) /usr/sbin/cron -f
(root,19528,7328,00:00:48/15-22:35:15,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:33/15-22:35:15,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:02:04/15-22:35:15,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:06:33/15-22:35:15,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:01:39/15-22:35:15,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/15-22:35:15,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:01:53/15-22:35:14,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:54/15-22:35:14,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:23:17/15-22:35:14,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/15-22:35:13,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/15-22:35:11,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72736,9212,00:00:00/15-22:35:11,818) nginx: worker process
(www-data,72728,9176,00:00:00/15-22:35:11,819) nginx: worker process
(www-data,73136,9624,00:00:40/15-22:35:11,820) nginx: worker process
(www-data,72724,8876,00:00:00/15-22:35:11,821) nginx: worker process
(www-data,231896,17276,00:00:00/15-22:35:09,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/15-22:35:09,912) php-fpm: pool www
(root,0,0,00:00:05/17:38:13,119051) [kworker/3:2-events]
(root,0,0,00:00:01/16:54:46,119322) [kworker/0:1-events]
(root,0,0,00:00:43/15:28:12,119912) [kworker/1:2-events_freezable_power_]
(root,0,0,00:00:00/04:24:42,124830) [kworker/u256:0-flush-254:0]
(root,0,0,00:00:00/03:49:44,125098) [kworker/2:0-events]
(root,0,0,00:00:00/03:24:47,125304) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/02:54:36,125597) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/01:24:46,126396) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/19:44,126885) [kworker/3:0]
(root,0,0,00:00:00/09:53,126925) [kworker/1:0-ata_sff]
(root,0,0,00:00:00/04:43,126948) [kworker/1:1-ata_sff]
(root,6856,3380,00:00:00/00:00,127078) /bin/bash /usr/bin/check_mk_agent
(root,7636,2728,00:00:00/00:00,127096) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,127097) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-14 00:03

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbd8fc1eac

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10420,00:01:52/13-23:32:27,1) /sbin/init
(root,0,0,00:00:00/13-23:32:27,2) [kthreadd]
(root,0,0,00:00:00/13-23:32:27,3) [rcu_gp]
(root,0,0,00:00:00/13-23:32:27,4) [rcu_par_gp]
(root,0,0,00:00:00/13-23:32:27,6) [kworker/0:0H]
(root,0,0,00:00:00/13-23:32:27,8) [mm_percpu_wq]
(root,0,0,00:00:02/13-23:32:27,9) [ksoftirqd/0]
(root,0,0,00:48:19/13-23:32:27,10) [rcu_sched]
(root,0,0,00:00:00/13-23:32:27,11) [rcu_bh]
(root,0,0,00:00:04/13-23:32:27,12) [migration/0]
(root,0,0,00:00:00/13-23:32:27,14) [cpuhp/0]
(root,0,0,00:00:00/13-23:32:27,15) [cpuhp/1]
(root,0,0,00:00:04/13-23:32:27,16) [migration/1]
(root,0,0,00:00:01/13-23:32:27,17) [ksoftirqd/1]
(root,0,0,00:00:00/13-23:32:27,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/13-23:32:27,20) [cpuhp/2]
(root,0,0,00:00:05/13-23:32:27,21) [migration/2]
(root,0,0,00:00:02/13-23:32:27,22) [ksoftirqd/2]
(root,0,0,00:00:00/13-23:32:27,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/13-23:32:27,25) [cpuhp/3]
(root,0,0,00:00:05/13-23:32:27,26) [migration/3]
(root,0,0,00:00:16/13-23:32:27,27) [ksoftirqd/3]
(root,0,0,00:00:00/13-23:32:27,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/13-23:32:27,30) [kdevtmpfs]
(root,0,0,00:00:00/13-23:32:27,31) [netns]
(root,0,0,00:00:00/13-23:32:27,32) [kauditd]
(root,0,0,00:00:01/13-23:32:27,35) [khungtaskd]
(root,0,0,00:00:00/13-23:32:27,36) [oom_reaper]
(root,0,0,00:00:00/13-23:32:27,37) [writeback]
(root,0,0,00:00:00/13-23:32:27,38) [kcompactd0]
(root,0,0,00:00:00/13-23:32:27,39) [ksmd]
(root,0,0,00:00:07/13-23:32:27,40) [khugepaged]
(root,0,0,00:00:00/13-23:32:27,41) [crypto]
(root,0,0,00:00:00/13-23:32:27,42) [kintegrityd]
(root,0,0,00:00:00/13-23:32:27,43) [kblockd]
(root,0,0,00:00:00/13-23:32:26,44) [edac-poller]
(root,0,0,00:00:00/13-23:32:26,45) [devfreq_wq]
(root,0,0,00:00:00/13-23:32:26,46) [watchdogd]
(root,0,0,00:00:00/13-23:32:24,49) [kswapd0]
(root,0,0,00:00:00/13-23:32:23,67) [kthrotld]
(root,0,0,00:00:00/13-23:32:23,68) [irq/24-pciehp]
(root,0,0,00:00:00/13-23:32:23,69) [irq/25-pciehp]
(root,0,0,00:00:00/13-23:32:23,70) [irq/26-pciehp]
(root,0,0,00:00:00/13-23:32:23,71) [irq/27-pciehp]
(root,0,0,00:00:00/13-23:32:23,72) [irq/28-pciehp]
(root,0,0,00:00:00/13-23:32:23,73) [irq/29-pciehp]
(root,0,0,00:00:00/13-23:32:23,74) [irq/30-pciehp]
(root,0,0,00:00:00/13-23:32:23,75) [irq/31-pciehp]
(root,0,0,00:00:00/13-23:32:23,76) [irq/32-pciehp]
(root,0,0,00:00:00/13-23:32:23,77) [irq/33-pciehp]
(root,0,0,00:00:00/13-23:32:23,78) [irq/34-pciehp]
(root,0,0,00:00:00/13-23:32:23,79) [irq/35-pciehp]
(root,0,0,00:00:00/13-23:32:23,80) [irq/36-pciehp]
(root,0,0,00:00:00/13-23:32:23,81) [irq/37-pciehp]
(root,0,0,00:00:00/13-23:32:23,82) [irq/38-pciehp]
(root,0,0,00:00:00/13-23:32:23,83) [irq/39-pciehp]
(root,0,0,00:00:00/13-23:32:23,84) [irq/40-pciehp]
(root,0,0,00:00:00/13-23:32:23,85) [irq/41-pciehp]
(root,0,0,00:00:00/13-23:32:23,86) [irq/42-pciehp]
(root,0,0,00:00:00/13-23:32:23,87) [irq/43-pciehp]
(root,0,0,00:00:00/13-23:32:23,88) [irq/44-pciehp]
(root,0,0,00:00:00/13-23:32:23,89) [irq/45-pciehp]
(root,0,0,00:00:00/13-23:32:23,90) [irq/46-pciehp]
(root,0,0,00:00:00/13-23:32:23,91) [irq/47-pciehp]
(root,0,0,00:00:00/13-23:32:23,92) [irq/48-pciehp]
(root,0,0,00:00:00/13-23:32:23,93) [irq/49-pciehp]
(root,0,0,00:00:00/13-23:32:23,94) [irq/50-pciehp]
(root,0,0,00:00:00/13-23:32:23,95) [irq/51-pciehp]
(root,0,0,00:00:00/13-23:32:23,96) [irq/52-pciehp]
(root,0,0,00:00:00/13-23:32:23,97) [irq/53-pciehp]
(root,0,0,00:00:00/13-23:32:23,98) [irq/54-pciehp]
(root,0,0,00:00:00/13-23:32:23,99) [irq/55-pciehp]
(root,0,0,00:00:00/13-23:32:23,100) [ipv6_addrconf]
(root,0,0,00:00:00/13-23:32:23,110) [kstrp]
(root,0,0,00:00:00/13-23:32:21,152) [scsi_eh_0]
(root,0,0,00:00:00/13-23:32:21,153) [scsi_tmf_0]
(root,0,0,00:00:00/13-23:32:21,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/13-23:32:21,155) [ata_sff]
(root,0,0,00:00:00/13-23:32:21,157) [scsi_eh_1]
(root,0,0,00:00:00/13-23:32:21,158) [scsi_tmf_1]
(root,0,0,00:00:00/13-23:32:21,162) [scsi_eh_2]
(root,0,0,00:00:00/13-23:32:21,174) [scsi_tmf_2]
(root,0,0,00:00:04/13-23:32:20,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/13-23:32:20,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:01/13-23:32:20,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:01/13-23:32:20,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/13-23:32:20,230) [kdmflush]
(root,0,0,00:00:00/13-23:32:19,237) [kdmflush]
(root,0,0,00:00:00/13-23:32:11,265) [kworker/u257:0]
(root,0,0,00:00:00/13-23:32:11,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/13-23:32:11,271) [ext4-rsv-conver]
(root,0,0,00:00:00/13-23:32:09,279) [kdmflush]
(root,0,0,00:00:00/13-23:32:06,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/13-23:32:06,295) [ext4-rsv-conver]
(root,56500,17716,00:03:19/13-23:32:00,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:04/13-23:31:59,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/13-23:31:57,502) [ttm_swap]
(root,0,0,00:00:00/13-23:31:57,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/13-23:31:57,511) [kdmflush]
(root,0,0,00:00:00/13-23:31:57,513) [kdmflush]
(root,0,0,00:00:00/13-23:31:57,514) [kdmflush]
(root,0,0,00:00:00/13-23:31:57,517) [kdmflush]
(root,0,0,00:00:00/13-23:31:57,548) [jbd2/sda1-8]
(root,0,0,00:00:00/13-23:31:57,549) [ext4-rsv-conver]
(root,0,0,00:00:00/13-23:31:57,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/13-23:31:57,566) [ext4-rsv-conver]
(root,0,0,00:00:14/13-23:31:56,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/13-23:31:56,570) [ext4-rsv-conver]
(root,0,0,00:00:00/13-23:31:56,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/13-23:31:56,576) [ext4-rsv-conver]
(root,0,0,00:00:00/13-23:31:56,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/13-23:31:56,581) [ext4-rsv-conver]
(root,8500,2776,00:00:03/13-23:31:55,605) /usr/sbin/cron -f
(root,19528,7328,00:00:42/13-23:31:55,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:28/13-23:31:55,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:01:47/13-23:31:55,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:05:44/13-23:31:55,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:01:26/13-23:31:55,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/13-23:31:55,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:01:39/13-23:31:54,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:45/13-23:31:54,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:20:22/13-23:31:54,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/13-23:31:53,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/13-23:31:51,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72736,8900,00:00:00/13-23:31:51,818) nginx: worker process
(www-data,72728,9176,00:00:00/13-23:31:51,819) nginx: worker process
(www-data,73136,9624,00:00:37/13-23:31:51,820) nginx: worker process
(www-data,72724,8876,00:00:00/13-23:31:51,821) nginx: worker process
(www-data,231896,17276,00:00:00/13-23:31:49,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/13-23:31:49,912) php-fpm: pool www
(root,0,0,00:00:11/1-12:30:14,99893) [kworker/3:1-events]
(root,0,0,00:00:00/13:38:45,105353) [kworker/2:1-events]
(root,0,0,00:00:00/07:46:06,106876) [kworker/0:1-events]
(root,0,0,00:00:17/06:21:26,107194) [kworker/1:0-events_power_efficient]
(root,0,0,00:00:00/02:46:00,108084) [kworker/3:0]
(root,0,0,00:00:00/02:16:12,108200) [kworker/0:0]
(root,0,0,00:00:00/01:44:43,108320) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/51:21,108530) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/21:21,108677) [kworker/u256:2]
(root,0,0,00:00:00/08:59,108720) [kworker/1:1-ata_sff]
(root,0,0,00:00:00/03:47,108737) [kworker/1:2-ata_sff]
(root,6856,3536,00:00:00/00:00,108807) /bin/bash /usr/bin/check_mk_agent
(root,7636,2740,00:00:00/00:00,108825) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,988,00:00:00/00:00,108826) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-12 01:00

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb11460d7b

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10420,00:01:38/11-23:32:57,1) /sbin/init
(root,0,0,00:00:00/11-23:32:57,2) [kthreadd]
(root,0,0,00:00:00/11-23:32:57,3) [rcu_gp]
(root,0,0,00:00:00/11-23:32:57,4) [rcu_par_gp]
(root,0,0,00:00:00/11-23:32:57,6) [kworker/0:0H]
(root,0,0,00:00:00/11-23:32:57,8) [mm_percpu_wq]
(root,0,0,00:00:02/11-23:32:57,9) [ksoftirqd/0]
(root,0,0,00:41:29/11-23:32:57,10) [rcu_sched]
(root,0,0,00:00:00/11-23:32:57,11) [rcu_bh]
(root,0,0,00:00:04/11-23:32:57,12) [migration/0]
(root,0,0,00:00:00/11-23:32:57,14) [cpuhp/0]
(root,0,0,00:00:00/11-23:32:57,15) [cpuhp/1]
(root,0,0,00:00:03/11-23:32:57,16) [migration/1]
(root,0,0,00:00:01/11-23:32:57,17) [ksoftirqd/1]
(root,0,0,00:00:00/11-23:32:57,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/11-23:32:57,20) [cpuhp/2]
(root,0,0,00:00:04/11-23:32:57,21) [migration/2]
(root,0,0,00:00:02/11-23:32:57,22) [ksoftirqd/2]
(root,0,0,00:00:00/11-23:32:57,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/11-23:32:57,25) [cpuhp/3]
(root,0,0,00:00:05/11-23:32:57,26) [migration/3]
(root,0,0,00:00:14/11-23:32:57,27) [ksoftirqd/3]
(root,0,0,00:00:00/11-23:32:57,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/11-23:32:57,30) [kdevtmpfs]
(root,0,0,00:00:00/11-23:32:57,31) [netns]
(root,0,0,00:00:00/11-23:32:57,32) [kauditd]
(root,0,0,00:00:01/11-23:32:57,35) [khungtaskd]
(root,0,0,00:00:00/11-23:32:57,36) [oom_reaper]
(root,0,0,00:00:00/11-23:32:57,37) [writeback]
(root,0,0,00:00:00/11-23:32:57,38) [kcompactd0]
(root,0,0,00:00:00/11-23:32:57,39) [ksmd]
(root,0,0,00:00:06/11-23:32:57,40) [khugepaged]
(root,0,0,00:00:00/11-23:32:57,41) [crypto]
(root,0,0,00:00:00/11-23:32:57,42) [kintegrityd]
(root,0,0,00:00:00/11-23:32:57,43) [kblockd]
(root,0,0,00:00:00/11-23:32:56,44) [edac-poller]
(root,0,0,00:00:00/11-23:32:56,45) [devfreq_wq]
(root,0,0,00:00:00/11-23:32:56,46) [watchdogd]
(root,0,0,00:00:00/11-23:32:54,49) [kswapd0]
(root,0,0,00:00:00/11-23:32:53,67) [kthrotld]
(root,0,0,00:00:00/11-23:32:53,68) [irq/24-pciehp]
(root,0,0,00:00:00/11-23:32:53,69) [irq/25-pciehp]
(root,0,0,00:00:00/11-23:32:53,70) [irq/26-pciehp]
(root,0,0,00:00:00/11-23:32:53,71) [irq/27-pciehp]
(root,0,0,00:00:00/11-23:32:53,72) [irq/28-pciehp]
(root,0,0,00:00:00/11-23:32:53,73) [irq/29-pciehp]
(root,0,0,00:00:00/11-23:32:53,74) [irq/30-pciehp]
(root,0,0,00:00:00/11-23:32:53,75) [irq/31-pciehp]
(root,0,0,00:00:00/11-23:32:53,76) [irq/32-pciehp]
(root,0,0,00:00:00/11-23:32:53,77) [irq/33-pciehp]
(root,0,0,00:00:00/11-23:32:53,78) [irq/34-pciehp]
(root,0,0,00:00:00/11-23:32:53,79) [irq/35-pciehp]
(root,0,0,00:00:00/11-23:32:53,80) [irq/36-pciehp]
(root,0,0,00:00:00/11-23:32:53,81) [irq/37-pciehp]
(root,0,0,00:00:00/11-23:32:53,82) [irq/38-pciehp]
(root,0,0,00:00:00/11-23:32:53,83) [irq/39-pciehp]
(root,0,0,00:00:00/11-23:32:53,84) [irq/40-pciehp]
(root,0,0,00:00:00/11-23:32:53,85) [irq/41-pciehp]
(root,0,0,00:00:00/11-23:32:53,86) [irq/42-pciehp]
(root,0,0,00:00:00/11-23:32:53,87) [irq/43-pciehp]
(root,0,0,00:00:00/11-23:32:53,88) [irq/44-pciehp]
(root,0,0,00:00:00/11-23:32:53,89) [irq/45-pciehp]
(root,0,0,00:00:00/11-23:32:53,90) [irq/46-pciehp]
(root,0,0,00:00:00/11-23:32:53,91) [irq/47-pciehp]
(root,0,0,00:00:00/11-23:32:53,92) [irq/48-pciehp]
(root,0,0,00:00:00/11-23:32:53,93) [irq/49-pciehp]
(root,0,0,00:00:00/11-23:32:53,94) [irq/50-pciehp]
(root,0,0,00:00:00/11-23:32:53,95) [irq/51-pciehp]
(root,0,0,00:00:00/11-23:32:53,96) [irq/52-pciehp]
(root,0,0,00:00:00/11-23:32:53,97) [irq/53-pciehp]
(root,0,0,00:00:00/11-23:32:53,98) [irq/54-pciehp]
(root,0,0,00:00:00/11-23:32:53,99) [irq/55-pciehp]
(root,0,0,00:00:00/11-23:32:53,100) [ipv6_addrconf]
(root,0,0,00:00:00/11-23:32:53,110) [kstrp]
(root,0,0,00:00:00/11-23:32:51,152) [scsi_eh_0]
(root,0,0,00:00:00/11-23:32:51,153) [scsi_tmf_0]
(root,0,0,00:00:00/11-23:32:51,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/11-23:32:51,155) [ata_sff]
(root,0,0,00:00:00/11-23:32:51,157) [scsi_eh_1]
(root,0,0,00:00:00/11-23:32:51,158) [scsi_tmf_1]
(root,0,0,00:00:00/11-23:32:51,162) [scsi_eh_2]
(root,0,0,00:00:00/11-23:32:51,174) [scsi_tmf_2]
(root,0,0,00:00:04/11-23:32:50,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/11-23:32:50,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/11-23:32:50,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:01/11-23:32:50,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/11-23:32:50,230) [kdmflush]
(root,0,0,00:00:00/11-23:32:49,237) [kdmflush]
(root,0,0,00:00:00/11-23:32:41,265) [kworker/u257:0]
(root,0,0,00:00:00/11-23:32:41,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/11-23:32:41,271) [ext4-rsv-conver]
(root,0,0,00:00:00/11-23:32:39,279) [kdmflush]
(root,0,0,00:00:00/11-23:32:36,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/11-23:32:36,295) [ext4-rsv-conver]
(root,48172,13576,00:03:01/11-23:32:30,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:03/11-23:32:29,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/11-23:32:27,502) [ttm_swap]
(root,0,0,00:00:00/11-23:32:27,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/11-23:32:27,511) [kdmflush]
(root,0,0,00:00:00/11-23:32:27,513) [kdmflush]
(root,0,0,00:00:00/11-23:32:27,514) [kdmflush]
(root,0,0,00:00:00/11-23:32:27,517) [kdmflush]
(root,0,0,00:00:00/11-23:32:27,548) [jbd2/sda1-8]
(root,0,0,00:00:00/11-23:32:27,549) [ext4-rsv-conver]
(root,0,0,00:00:00/11-23:32:27,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/11-23:32:27,566) [ext4-rsv-conver]
(root,0,0,00:00:12/11-23:32:26,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/11-23:32:26,570) [ext4-rsv-conver]
(root,0,0,00:00:00/11-23:32:26,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/11-23:32:26,576) [ext4-rsv-conver]
(root,0,0,00:00:00/11-23:32:26,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/11-23:32:26,581) [ext4-rsv-conver]
(root,8500,2776,00:00:03/11-23:32:25,605) /usr/sbin/cron -f
(root,19528,7328,00:00:36/11-23:32:25,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:25/11-23:32:25,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:01:35/11-23:32:25,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:04:56/11-23:32:25,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:01:14/11-23:32:25,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/11-23:32:25,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:01:25/11-23:32:24,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:41/11-23:32:24,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:17:30/11-23:32:24,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/11-23:32:23,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/11-23:32:21,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72736,8900,00:00:00/11-23:32:21,818) nginx: worker process
(www-data,72728,9176,00:00:00/11-23:32:21,819) nginx: worker process
(www-data,73136,9624,00:00:33/11-23:32:21,820) nginx: worker process
(www-data,72724,8876,00:00:00/11-23:32:21,821) nginx: worker process
(www-data,231896,17276,00:00:00/11-23:32:19,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/11-23:32:19,912) php-fpm: pool www
(root,0,0,00:00:36/12:50:50,93676) [kworker/1:0-events]
(root,0,0,00:00:01/12:39:48,93713) [kworker/0:0-events]
(root,0,0,00:00:01/05:16:27,95662) [kworker/3:1-events]
(root,0,0,00:00:00/04:21:51,95913) [kworker/u256:1]
(root,0,0,00:00:00/01:59:50,96404) [kworker/3:0-events]
(root,0,0,00:00:00/21:57,96799) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/21:52,96802) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/14:39,96820) [kworker/2:0-events]
(root,0,0,00:00:00/09:32,96832) [kworker/2:2-events]
(root,0,0,00:00:00/08:08,96833) [kworker/1:1-ata_sff]
(root,0,0,00:00:00/02:57,96846) [kworker/1:2-ata_sff]
(root,6856,3468,00:00:00/00:00,96898) /bin/bash /usr/bin/check_mk_agent
(root,7636,2736,00:00:00/00:00,96916) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,928,00:00:00/00:00,96917) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-10 01:00

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb2658d938

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10420,00:01:22/9-23:23:53,1) /sbin/init
(root,0,0,00:00:00/9-23:23:53,2) [kthreadd]
(root,0,0,00:00:00/9-23:23:53,3) [rcu_gp]
(root,0,0,00:00:00/9-23:23:53,4) [rcu_par_gp]
(root,0,0,00:00:00/9-23:23:53,6) [kworker/0:0H]
(root,0,0,00:00:00/9-23:23:53,8) [mm_percpu_wq]
(root,0,0,00:00:01/9-23:23:53,9) [ksoftirqd/0]
(root,0,0,00:34:19/9-23:23:53,10) [rcu_sched]
(root,0,0,00:00:00/9-23:23:53,11) [rcu_bh]
(root,0,0,00:00:03/9-23:23:53,12) [migration/0]
(root,0,0,00:00:00/9-23:23:53,14) [cpuhp/0]
(root,0,0,00:00:00/9-23:23:53,15) [cpuhp/1]
(root,0,0,00:00:03/9-23:23:53,16) [migration/1]
(root,0,0,00:00:01/9-23:23:53,17) [ksoftirqd/1]
(root,0,0,00:00:00/9-23:23:53,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/9-23:23:53,20) [cpuhp/2]
(root,0,0,00:00:04/9-23:23:53,21) [migration/2]
(root,0,0,00:00:01/9-23:23:53,22) [ksoftirqd/2]
(root,0,0,00:00:00/9-23:23:53,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/9-23:23:53,25) [cpuhp/3]
(root,0,0,00:00:04/9-23:23:53,26) [migration/3]
(root,0,0,00:00:11/9-23:23:53,27) [ksoftirqd/3]
(root,0,0,00:00:00/9-23:23:53,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/9-23:23:53,30) [kdevtmpfs]
(root,0,0,00:00:00/9-23:23:53,31) [netns]
(root,0,0,00:00:00/9-23:23:53,32) [kauditd]
(root,0,0,00:00:01/9-23:23:53,35) [khungtaskd]
(root,0,0,00:00:00/9-23:23:53,36) [oom_reaper]
(root,0,0,00:00:00/9-23:23:53,37) [writeback]
(root,0,0,00:00:00/9-23:23:53,38) [kcompactd0]
(root,0,0,00:00:00/9-23:23:53,39) [ksmd]
(root,0,0,00:00:05/9-23:23:53,40) [khugepaged]
(root,0,0,00:00:00/9-23:23:53,41) [crypto]
(root,0,0,00:00:00/9-23:23:53,42) [kintegrityd]
(root,0,0,00:00:00/9-23:23:53,43) [kblockd]
(root,0,0,00:00:00/9-23:23:52,44) [edac-poller]
(root,0,0,00:00:00/9-23:23:52,45) [devfreq_wq]
(root,0,0,00:00:00/9-23:23:52,46) [watchdogd]
(root,0,0,00:00:00/9-23:23:50,49) [kswapd0]
(root,0,0,00:00:00/9-23:23:49,67) [kthrotld]
(root,0,0,00:00:00/9-23:23:49,68) [irq/24-pciehp]
(root,0,0,00:00:00/9-23:23:49,69) [irq/25-pciehp]
(root,0,0,00:00:00/9-23:23:49,70) [irq/26-pciehp]
(root,0,0,00:00:00/9-23:23:49,71) [irq/27-pciehp]
(root,0,0,00:00:00/9-23:23:49,72) [irq/28-pciehp]
(root,0,0,00:00:00/9-23:23:49,73) [irq/29-pciehp]
(root,0,0,00:00:00/9-23:23:49,74) [irq/30-pciehp]
(root,0,0,00:00:00/9-23:23:49,75) [irq/31-pciehp]
(root,0,0,00:00:00/9-23:23:49,76) [irq/32-pciehp]
(root,0,0,00:00:00/9-23:23:49,77) [irq/33-pciehp]
(root,0,0,00:00:00/9-23:23:49,78) [irq/34-pciehp]
(root,0,0,00:00:00/9-23:23:49,79) [irq/35-pciehp]
(root,0,0,00:00:00/9-23:23:49,80) [irq/36-pciehp]
(root,0,0,00:00:00/9-23:23:49,81) [irq/37-pciehp]
(root,0,0,00:00:00/9-23:23:49,82) [irq/38-pciehp]
(root,0,0,00:00:00/9-23:23:49,83) [irq/39-pciehp]
(root,0,0,00:00:00/9-23:23:49,84) [irq/40-pciehp]
(root,0,0,00:00:00/9-23:23:49,85) [irq/41-pciehp]
(root,0,0,00:00:00/9-23:23:49,86) [irq/42-pciehp]
(root,0,0,00:00:00/9-23:23:49,87) [irq/43-pciehp]
(root,0,0,00:00:00/9-23:23:49,88) [irq/44-pciehp]
(root,0,0,00:00:00/9-23:23:49,89) [irq/45-pciehp]
(root,0,0,00:00:00/9-23:23:49,90) [irq/46-pciehp]
(root,0,0,00:00:00/9-23:23:49,91) [irq/47-pciehp]
(root,0,0,00:00:00/9-23:23:49,92) [irq/48-pciehp]
(root,0,0,00:00:00/9-23:23:49,93) [irq/49-pciehp]
(root,0,0,00:00:00/9-23:23:49,94) [irq/50-pciehp]
(root,0,0,00:00:00/9-23:23:49,95) [irq/51-pciehp]
(root,0,0,00:00:00/9-23:23:49,96) [irq/52-pciehp]
(root,0,0,00:00:00/9-23:23:49,97) [irq/53-pciehp]
(root,0,0,00:00:00/9-23:23:49,98) [irq/54-pciehp]
(root,0,0,00:00:00/9-23:23:49,99) [irq/55-pciehp]
(root,0,0,00:00:00/9-23:23:49,100) [ipv6_addrconf]
(root,0,0,00:00:00/9-23:23:49,110) [kstrp]
(root,0,0,00:00:00/9-23:23:47,152) [scsi_eh_0]
(root,0,0,00:00:00/9-23:23:47,153) [scsi_tmf_0]
(root,0,0,00:00:00/9-23:23:47,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/9-23:23:47,155) [ata_sff]
(root,0,0,00:00:00/9-23:23:47,157) [scsi_eh_1]
(root,0,0,00:00:00/9-23:23:47,158) [scsi_tmf_1]
(root,0,0,00:00:00/9-23:23:47,162) [scsi_eh_2]
(root,0,0,00:00:00/9-23:23:47,174) [scsi_tmf_2]
(root,0,0,00:00:03/9-23:23:46,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/9-23:23:46,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/9-23:23:46,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/9-23:23:46,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/9-23:23:46,230) [kdmflush]
(root,0,0,00:00:00/9-23:23:45,237) [kdmflush]
(root,0,0,00:00:00/9-23:23:37,265) [kworker/u257:0]
(root,0,0,00:00:00/9-23:23:37,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/9-23:23:37,271) [ext4-rsv-conver]
(root,0,0,00:00:00/9-23:23:35,279) [kdmflush]
(root,0,0,00:00:00/9-23:23:32,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/9-23:23:32,295) [ext4-rsv-conver]
(root,47776,12096,00:02:32/9-23:23:26,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:03/9-23:23:25,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/9-23:23:23,502) [ttm_swap]
(root,0,0,00:00:00/9-23:23:23,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/9-23:23:23,511) [kdmflush]
(root,0,0,00:00:00/9-23:23:23,513) [kdmflush]
(root,0,0,00:00:00/9-23:23:23,514) [kdmflush]
(root,0,0,00:00:00/9-23:23:23,517) [kdmflush]
(root,0,0,00:00:00/9-23:23:23,548) [jbd2/sda1-8]
(root,0,0,00:00:00/9-23:23:23,549) [ext4-rsv-conver]
(root,0,0,00:00:00/9-23:23:23,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/9-23:23:23,566) [ext4-rsv-conver]
(root,0,0,00:00:10/9-23:23:22,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/9-23:23:22,570) [ext4-rsv-conver]
(root,0,0,00:00:00/9-23:23:22,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/9-23:23:22,576) [ext4-rsv-conver]
(root,0,0,00:00:00/9-23:23:22,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/9-23:23:22,581) [ext4-rsv-conver]
(root,8500,2776,00:00:02/9-23:23:21,605) /usr/sbin/cron -f
(root,19528,7328,00:00:30/9-23:23:21,606) /lib/systemd/systemd-logind
(root,221728,4584,00:00:21/9-23:23:21,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:01:19/9-23:23:21,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:04:03/9-23:23:21,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:01:01/9-23:23:21,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/9-23:23:21,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:01:09/9-23:23:20,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:35/9-23:23:20,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:14:37/9-23:23:20,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/9-23:23:19,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/9-23:23:17,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72592,8900,00:00:00/9-23:23:17,818) nginx: worker process
(www-data,72728,9176,00:00:00/9-23:23:17,819) nginx: worker process
(www-data,73136,9624,00:00:26/9-23:23:17,820) nginx: worker process
(www-data,72592,7280,00:00:00/9-23:23:17,821) nginx: worker process
(www-data,231896,17276,00:00:00/9-23:23:15,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/9-23:23:15,912) php-fpm: pool www
(root,0,0,00:01:05/21:46:00,74333) [kworker/1:2-events_power_efficient]
(root,0,0,00:00:02/13:07:45,76872) [kworker/0:2-events]
(root,0,0,00:00:00/05:12:48,79893) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:01/02:33:57,80945) [kworker/3:2-events]
(root,0,0,00:00:00/02:31:41,80956) [kworker/2:0-events]
(root,0,0,00:00:00/02:12:53,81053) [kworker/0:0]
(root,0,0,00:00:00/01:07:40,81445) [kworker/3:0]
(root,0,0,00:00:00/42:47,81594) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/12:52,81765) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/08:56,81783) [kworker/1:0-ata_sff]
(root,0,0,00:00:00/03:46,81802) [kworker/1:1-ata_sff]
(root,6856,3340,00:00:00/00:00,81934) /bin/bash /usr/bin/check_mk_agent
(root,7636,2688,00:00:00/00:00,81952) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,924,00:00:00/00:00,81953) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-08 00:51

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cba3d8d41d

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10420,00:01:06/7-23:33:59,1) /sbin/init
(root,0,0,00:00:00/7-23:33:59,2) [kthreadd]
(root,0,0,00:00:00/7-23:33:59,3) [rcu_gp]
(root,0,0,00:00:00/7-23:33:59,4) [rcu_par_gp]
(root,0,0,00:00:00/7-23:33:59,6) [kworker/0:0H]
(root,0,0,00:00:00/7-23:33:59,8) [mm_percpu_wq]
(root,0,0,00:00:01/7-23:33:59,9) [ksoftirqd/0]
(root,0,0,00:27:16/7-23:33:59,10) [rcu_sched]
(root,0,0,00:00:00/7-23:33:59,11) [rcu_bh]
(root,0,0,00:00:03/7-23:33:59,12) [migration/0]
(root,0,0,00:00:00/7-23:33:59,14) [cpuhp/0]
(root,0,0,00:00:00/7-23:33:59,15) [cpuhp/1]
(root,0,0,00:00:02/7-23:33:59,16) [migration/1]
(root,0,0,00:00:00/7-23:33:59,17) [ksoftirqd/1]
(root,0,0,00:00:00/7-23:33:59,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/7-23:33:59,20) [cpuhp/2]
(root,0,0,00:00:03/7-23:33:59,21) [migration/2]
(root,0,0,00:00:01/7-23:33:59,22) [ksoftirqd/2]
(root,0,0,00:00:00/7-23:33:59,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/7-23:33:59,25) [cpuhp/3]
(root,0,0,00:00:03/7-23:33:59,26) [migration/3]
(root,0,0,00:00:09/7-23:33:59,27) [ksoftirqd/3]
(root,0,0,00:00:00/7-23:33:59,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/7-23:33:59,30) [kdevtmpfs]
(root,0,0,00:00:00/7-23:33:59,31) [netns]
(root,0,0,00:00:00/7-23:33:59,32) [kauditd]
(root,0,0,00:00:00/7-23:33:59,35) [khungtaskd]
(root,0,0,00:00:00/7-23:33:59,36) [oom_reaper]
(root,0,0,00:00:00/7-23:33:59,37) [writeback]
(root,0,0,00:00:00/7-23:33:59,38) [kcompactd0]
(root,0,0,00:00:00/7-23:33:59,39) [ksmd]
(root,0,0,00:00:04/7-23:33:59,40) [khugepaged]
(root,0,0,00:00:00/7-23:33:59,41) [crypto]
(root,0,0,00:00:00/7-23:33:59,42) [kintegrityd]
(root,0,0,00:00:00/7-23:33:59,43) [kblockd]
(root,0,0,00:00:00/7-23:33:58,44) [edac-poller]
(root,0,0,00:00:00/7-23:33:58,45) [devfreq_wq]
(root,0,0,00:00:00/7-23:33:58,46) [watchdogd]
(root,0,0,00:00:00/7-23:33:56,49) [kswapd0]
(root,0,0,00:00:00/7-23:33:55,67) [kthrotld]
(root,0,0,00:00:00/7-23:33:55,68) [irq/24-pciehp]
(root,0,0,00:00:00/7-23:33:55,69) [irq/25-pciehp]
(root,0,0,00:00:00/7-23:33:55,70) [irq/26-pciehp]
(root,0,0,00:00:00/7-23:33:55,71) [irq/27-pciehp]
(root,0,0,00:00:00/7-23:33:55,72) [irq/28-pciehp]
(root,0,0,00:00:00/7-23:33:55,73) [irq/29-pciehp]
(root,0,0,00:00:00/7-23:33:55,74) [irq/30-pciehp]
(root,0,0,00:00:00/7-23:33:55,75) [irq/31-pciehp]
(root,0,0,00:00:00/7-23:33:55,76) [irq/32-pciehp]
(root,0,0,00:00:00/7-23:33:55,77) [irq/33-pciehp]
(root,0,0,00:00:00/7-23:33:55,78) [irq/34-pciehp]
(root,0,0,00:00:00/7-23:33:55,79) [irq/35-pciehp]
(root,0,0,00:00:00/7-23:33:55,80) [irq/36-pciehp]
(root,0,0,00:00:00/7-23:33:55,81) [irq/37-pciehp]
(root,0,0,00:00:00/7-23:33:55,82) [irq/38-pciehp]
(root,0,0,00:00:00/7-23:33:55,83) [irq/39-pciehp]
(root,0,0,00:00:00/7-23:33:55,84) [irq/40-pciehp]
(root,0,0,00:00:00/7-23:33:55,85) [irq/41-pciehp]
(root,0,0,00:00:00/7-23:33:55,86) [irq/42-pciehp]
(root,0,0,00:00:00/7-23:33:55,87) [irq/43-pciehp]
(root,0,0,00:00:00/7-23:33:55,88) [irq/44-pciehp]
(root,0,0,00:00:00/7-23:33:55,89) [irq/45-pciehp]
(root,0,0,00:00:00/7-23:33:55,90) [irq/46-pciehp]
(root,0,0,00:00:00/7-23:33:55,91) [irq/47-pciehp]
(root,0,0,00:00:00/7-23:33:55,92) [irq/48-pciehp]
(root,0,0,00:00:00/7-23:33:55,93) [irq/49-pciehp]
(root,0,0,00:00:00/7-23:33:55,94) [irq/50-pciehp]
(root,0,0,00:00:00/7-23:33:55,95) [irq/51-pciehp]
(root,0,0,00:00:00/7-23:33:55,96) [irq/52-pciehp]
(root,0,0,00:00:00/7-23:33:55,97) [irq/53-pciehp]
(root,0,0,00:00:00/7-23:33:55,98) [irq/54-pciehp]
(root,0,0,00:00:00/7-23:33:55,99) [irq/55-pciehp]
(root,0,0,00:00:00/7-23:33:55,100) [ipv6_addrconf]
(root,0,0,00:00:00/7-23:33:55,110) [kstrp]
(root,0,0,00:00:00/7-23:33:53,152) [scsi_eh_0]
(root,0,0,00:00:00/7-23:33:53,153) [scsi_tmf_0]
(root,0,0,00:00:00/7-23:33:53,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/7-23:33:53,155) [ata_sff]
(root,0,0,00:00:00/7-23:33:53,157) [scsi_eh_1]
(root,0,0,00:00:00/7-23:33:53,158) [scsi_tmf_1]
(root,0,0,00:00:00/7-23:33:53,162) [scsi_eh_2]
(root,0,0,00:00:00/7-23:33:53,174) [scsi_tmf_2]
(root,0,0,00:00:02/7-23:33:52,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/7-23:33:52,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/7-23:33:52,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/7-23:33:52,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/7-23:33:52,230) [kdmflush]
(root,0,0,00:00:00/7-23:33:51,237) [kdmflush]
(root,0,0,00:00:00/7-23:33:43,265) [kworker/u257:0]
(root,0,0,00:00:00/7-23:33:43,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/7-23:33:43,271) [ext4-rsv-conver]
(root,0,0,00:00:00/7-23:33:41,279) [kdmflush]
(root,0,0,00:00:00/7-23:33:38,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/7-23:33:38,295) [ext4-rsv-conver]
(root,47380,15276,00:01:58/7-23:33:32,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:02/7-23:33:31,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/7-23:33:29,502) [ttm_swap]
(root,0,0,00:00:00/7-23:33:29,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/7-23:33:29,511) [kdmflush]
(root,0,0,00:00:00/7-23:33:29,513) [kdmflush]
(root,0,0,00:00:00/7-23:33:29,514) [kdmflush]
(root,0,0,00:00:00/7-23:33:29,517) [kdmflush]
(root,0,0,00:00:00/7-23:33:29,548) [jbd2/sda1-8]
(root,0,0,00:00:00/7-23:33:29,549) [ext4-rsv-conver]
(root,0,0,00:00:00/7-23:33:29,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/7-23:33:29,566) [ext4-rsv-conver]
(root,0,0,00:00:08/7-23:33:28,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/7-23:33:28,570) [ext4-rsv-conver]
(root,0,0,00:00:00/7-23:33:28,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/7-23:33:28,576) [ext4-rsv-conver]
(root,0,0,00:00:00/7-23:33:28,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/7-23:33:28,581) [ext4-rsv-conver]
(root,8500,2776,00:00:02/7-23:33:27,605) /usr/sbin/cron -f
(root,19528,7328,00:00:23/7-23:33:27,606) /lib/systemd/systemd-logind
(root,221728,5420,00:00:16/7-23:33:27,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:01:01/7-23:33:27,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:03:11/7-23:33:27,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:00:48/7-23:33:27,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/7-23:33:27,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:00:55/7-23:33:26,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:27/7-23:33:26,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:11:30/7-23:33:26,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/7-23:33:25,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/7-23:33:23,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72592,7280,00:00:00/7-23:33:23,818) nginx: worker process
(www-data,72592,7280,00:00:00/7-23:33:23,819) nginx: worker process
(www-data,73136,9360,00:00:21/7-23:33:23,820) nginx: worker process
(www-data,72592,5776,00:00:00/7-23:33:23,821) nginx: worker process
(www-data,231896,17276,00:00:00/7-23:33:21,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/7-23:33:21,912) php-fpm: pool www
(root,0,0,00:04:11/3-17:31:45,22702) [kworker/1:0-events]
(root,0,0,00:00:03/1-00:17:52,45849) [kworker/0:0-events]
(root,0,0,00:00:01/04:23:20,62658) [kworker/3:0-events]
(root,0,0,00:00:00/02:47:55,63910) [kworker/2:2-events]
(root,0,0,00:00:00/01:52:58,64613) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/01:52:53,64614) [kworker/u256:0-flush-254:0]
(root,0,0,00:00:00/01:22:58,64705) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/22:33,64882) [kworker/u256:2-flush-254:2]
(root,0,0,00:00:00/17:27,64891) [kworker/2:1-events]
(root,0,0,00:00:00/07:04,64912) [kworker/1:2-ata_sff]
(root,0,0,00:00:00/03:43,64927) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/01:52,64932) [kworker/1:1-ata_sff]
(root,0,0,00:00:00/00:18,64937) [kworker/u256:1-flush-254:2]
(root,6856,3352,00:00:00/00:01,65053) /bin/bash /usr/bin/check_mk_agent
(root,7636,2620,00:00:00/00:00,65071) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,984,00:00:00/00:00,65072) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-06 01:01

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cba979cb2f

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10420,00:00:47/5-23:27:47,1) /sbin/init
(root,0,0,00:00:00/5-23:27:47,2) [kthreadd]
(root,0,0,00:00:00/5-23:27:47,3) [rcu_gp]
(root,0,0,00:00:00/5-23:27:47,4) [rcu_par_gp]
(root,0,0,00:00:00/5-23:27:47,6) [kworker/0:0H]
(root,0,0,00:00:00/5-23:27:47,8) [mm_percpu_wq]
(root,0,0,00:00:01/5-23:27:47,9) [ksoftirqd/0]
(root,0,0,00:20:02/5-23:27:47,10) [rcu_sched]
(root,0,0,00:00:00/5-23:27:47,11) [rcu_bh]
(root,0,0,00:00:02/5-23:27:47,12) [migration/0]
(root,0,0,00:00:00/5-23:27:47,14) [cpuhp/0]
(root,0,0,00:00:00/5-23:27:47,15) [cpuhp/1]
(root,0,0,00:00:02/5-23:27:47,16) [migration/1]
(root,0,0,00:00:00/5-23:27:47,17) [ksoftirqd/1]
(root,0,0,00:00:00/5-23:27:47,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/5-23:27:47,20) [cpuhp/2]
(root,0,0,00:00:03/5-23:27:47,21) [migration/2]
(root,0,0,00:00:00/5-23:27:47,22) [ksoftirqd/2]
(root,0,0,00:00:00/5-23:27:47,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/5-23:27:47,25) [cpuhp/3]
(root,0,0,00:00:03/5-23:27:47,26) [migration/3]
(root,0,0,00:00:06/5-23:27:47,27) [ksoftirqd/3]
(root,0,0,00:00:00/5-23:27:47,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/5-23:27:47,30) [kdevtmpfs]
(root,0,0,00:00:00/5-23:27:47,31) [netns]
(root,0,0,00:00:00/5-23:27:47,32) [kauditd]
(root,0,0,00:00:00/5-23:27:47,35) [khungtaskd]
(root,0,0,00:00:00/5-23:27:47,36) [oom_reaper]
(root,0,0,00:00:00/5-23:27:47,37) [writeback]
(root,0,0,00:00:00/5-23:27:47,38) [kcompactd0]
(root,0,0,00:00:00/5-23:27:47,39) [ksmd]
(root,0,0,00:00:03/5-23:27:47,40) [khugepaged]
(root,0,0,00:00:00/5-23:27:47,41) [crypto]
(root,0,0,00:00:00/5-23:27:47,42) [kintegrityd]
(root,0,0,00:00:00/5-23:27:47,43) [kblockd]
(root,0,0,00:00:00/5-23:27:46,44) [edac-poller]
(root,0,0,00:00:00/5-23:27:46,45) [devfreq_wq]
(root,0,0,00:00:00/5-23:27:46,46) [watchdogd]
(root,0,0,00:00:00/5-23:27:44,49) [kswapd0]
(root,0,0,00:00:00/5-23:27:43,67) [kthrotld]
(root,0,0,00:00:00/5-23:27:43,68) [irq/24-pciehp]
(root,0,0,00:00:00/5-23:27:43,69) [irq/25-pciehp]
(root,0,0,00:00:00/5-23:27:43,70) [irq/26-pciehp]
(root,0,0,00:00:00/5-23:27:43,71) [irq/27-pciehp]
(root,0,0,00:00:00/5-23:27:43,72) [irq/28-pciehp]
(root,0,0,00:00:00/5-23:27:43,73) [irq/29-pciehp]
(root,0,0,00:00:00/5-23:27:43,74) [irq/30-pciehp]
(root,0,0,00:00:00/5-23:27:43,75) [irq/31-pciehp]
(root,0,0,00:00:00/5-23:27:43,76) [irq/32-pciehp]
(root,0,0,00:00:00/5-23:27:43,77) [irq/33-pciehp]
(root,0,0,00:00:00/5-23:27:43,78) [irq/34-pciehp]
(root,0,0,00:00:00/5-23:27:43,79) [irq/35-pciehp]
(root,0,0,00:00:00/5-23:27:43,80) [irq/36-pciehp]
(root,0,0,00:00:00/5-23:27:43,81) [irq/37-pciehp]
(root,0,0,00:00:00/5-23:27:43,82) [irq/38-pciehp]
(root,0,0,00:00:00/5-23:27:43,83) [irq/39-pciehp]
(root,0,0,00:00:00/5-23:27:43,84) [irq/40-pciehp]
(root,0,0,00:00:00/5-23:27:43,85) [irq/41-pciehp]
(root,0,0,00:00:00/5-23:27:43,86) [irq/42-pciehp]
(root,0,0,00:00:00/5-23:27:43,87) [irq/43-pciehp]
(root,0,0,00:00:00/5-23:27:43,88) [irq/44-pciehp]
(root,0,0,00:00:00/5-23:27:43,89) [irq/45-pciehp]
(root,0,0,00:00:00/5-23:27:43,90) [irq/46-pciehp]
(root,0,0,00:00:00/5-23:27:43,91) [irq/47-pciehp]
(root,0,0,00:00:00/5-23:27:43,92) [irq/48-pciehp]
(root,0,0,00:00:00/5-23:27:43,93) [irq/49-pciehp]
(root,0,0,00:00:00/5-23:27:43,94) [irq/50-pciehp]
(root,0,0,00:00:00/5-23:27:43,95) [irq/51-pciehp]
(root,0,0,00:00:00/5-23:27:43,96) [irq/52-pciehp]
(root,0,0,00:00:00/5-23:27:43,97) [irq/53-pciehp]
(root,0,0,00:00:00/5-23:27:43,98) [irq/54-pciehp]
(root,0,0,00:00:00/5-23:27:43,99) [irq/55-pciehp]
(root,0,0,00:00:00/5-23:27:43,100) [ipv6_addrconf]
(root,0,0,00:00:00/5-23:27:43,110) [kstrp]
(root,0,0,00:00:00/5-23:27:41,152) [scsi_eh_0]
(root,0,0,00:00:00/5-23:27:41,153) [scsi_tmf_0]
(root,0,0,00:00:00/5-23:27:41,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/5-23:27:41,155) [ata_sff]
(root,0,0,00:00:00/5-23:27:41,157) [scsi_eh_1]
(root,0,0,00:00:00/5-23:27:41,158) [scsi_tmf_1]
(root,0,0,00:00:00/5-23:27:41,162) [scsi_eh_2]
(root,0,0,00:00:00/5-23:27:41,174) [scsi_tmf_2]
(root,0,0,00:00:01/5-23:27:40,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/5-23:27:40,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/5-23:27:40,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/5-23:27:40,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/5-23:27:40,230) [kdmflush]
(root,0,0,00:00:00/5-23:27:39,237) [kdmflush]
(root,0,0,00:00:00/5-23:27:31,265) [kworker/u257:0]
(root,0,0,00:00:00/5-23:27:31,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/5-23:27:31,271) [ext4-rsv-conver]
(root,0,0,00:00:00/5-23:27:29,279) [kdmflush]
(root,0,0,00:00:00/5-23:27:26,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/5-23:27:26,295) [ext4-rsv-conver]
(root,46588,11464,00:00:54/5-23:27:20,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:02/5-23:27:19,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/5-23:27:17,502) [ttm_swap]
(root,0,0,00:00:00/5-23:27:17,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/5-23:27:17,511) [kdmflush]
(root,0,0,00:00:00/5-23:27:17,513) [kdmflush]
(root,0,0,00:00:00/5-23:27:17,514) [kdmflush]
(root,0,0,00:00:00/5-23:27:17,517) [kdmflush]
(root,0,0,00:00:00/5-23:27:17,548) [jbd2/sda1-8]
(root,0,0,00:00:00/5-23:27:17,549) [ext4-rsv-conver]
(root,0,0,00:00:00/5-23:27:17,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/5-23:27:17,566) [ext4-rsv-conver]
(root,0,0,00:00:04/5-23:27:16,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/5-23:27:16,570) [ext4-rsv-conver]
(root,0,0,00:00:00/5-23:27:16,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/5-23:27:16,576) [ext4-rsv-conver]
(root,0,0,00:00:00/5-23:27:16,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/5-23:27:16,581) [ext4-rsv-conver]
(root,8500,2776,00:00:01/5-23:27:15,605) /usr/sbin/cron -f
(root,19528,7328,00:00:17/5-23:27:15,606) /lib/systemd/systemd-logind
(root,221728,4892,00:00:07/5-23:27:15,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4280,00:00:35/5-23:27:15,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:02:21/5-23:27:15,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:00:35/5-23:27:15,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/5-23:27:15,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:00:40/5-23:27:14,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:12/5-23:27:14,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:08:35/5-23:27:14,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/5-23:27:13,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/5-23:27:11,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72592,7280,00:00:00/5-23:27:11,818) nginx: worker process
(www-data,72592,7280,00:00:00/5-23:27:11,819) nginx: worker process
(www-data,73136,9360,00:00:16/5-23:27:11,820) nginx: worker process
(www-data,72592,5776,00:00:00/5-23:27:11,821) nginx: worker process
(www-data,231896,17276,00:00:00/5-23:27:09,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/5-23:27:09,912) php-fpm: pool www
(root,0,0,00:01:58/1-17:25:33,22702) [kworker/1:0-events]
(root,0,0,00:00:02/1-01:13:04,29350) [kworker/0:2-events]
(root,0,0,00:00:04/14:01:17,32451) [kworker/3:2-events]
(root,0,0,00:00:00/12:09:11,33054) [kworker/2:2-events]
(root,14660,7820,00:00:00/09:24:54,33725) sshd: fcpys [priv]
(fcpys,21164,8588,00:00:00/09:24:51,33728) /lib/systemd/systemd --user
(fcpys,170880,2644,00:00:00/09:24:51,33729) (sd-pam)
(fcpys,14944,5960,00:00:01/09:24:51,33743) sshd: fcpys@notty
(root,0,0,00:00:00/04:16:41,35184) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/52:54,36432) [kworker/u256:3-flush-254:5]
(root,0,0,00:00:00/42:41,36524) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/41:36,36528) [kworker/2:0]
(root,0,0,00:00:00/16:46,36677) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/05:32,36724) [kworker/1:2-ata_sff]
(root,0,0,00:00:00/00:20,36743) [kworker/1:1-ata_sff]
(root,6856,3360,00:00:00/00:00,36859) /bin/bash /usr/bin/check_mk_agent
(root,7636,2696,00:00:00/00:00,36877) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,932,00:00:00/00:00,36878) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-04 00:55

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cba537c146

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10420,00:00:31/4-00:11:45,1) /sbin/init
(root,0,0,00:00:00/4-00:11:45,2) [kthreadd]
(root,0,0,00:00:00/4-00:11:45,3) [rcu_gp]
(root,0,0,00:00:00/4-00:11:45,4) [rcu_par_gp]
(root,0,0,00:00:00/4-00:11:45,6) [kworker/0:0H]
(root,0,0,00:00:00/4-00:11:45,8) [mm_percpu_wq]
(root,0,0,00:00:00/4-00:11:45,9) [ksoftirqd/0]
(root,0,0,00:12:31/4-00:11:45,10) [rcu_sched]
(root,0,0,00:00:00/4-00:11:45,11) [rcu_bh]
(root,0,0,00:00:02/4-00:11:45,12) [migration/0]
(root,0,0,00:00:00/4-00:11:45,14) [cpuhp/0]
(root,0,0,00:00:00/4-00:11:45,15) [cpuhp/1]
(root,0,0,00:00:01/4-00:11:45,16) [migration/1]
(root,0,0,00:00:00/4-00:11:45,17) [ksoftirqd/1]
(root,0,0,00:00:00/4-00:11:45,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/4-00:11:45,20) [cpuhp/2]
(root,0,0,00:00:02/4-00:11:45,21) [migration/2]
(root,0,0,00:00:00/4-00:11:45,22) [ksoftirqd/2]
(root,0,0,00:00:00/4-00:11:45,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/4-00:11:45,25) [cpuhp/3]
(root,0,0,00:00:02/4-00:11:45,26) [migration/3]
(root,0,0,00:00:03/4-00:11:45,27) [ksoftirqd/3]
(root,0,0,00:00:00/4-00:11:45,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/4-00:11:45,30) [kdevtmpfs]
(root,0,0,00:00:00/4-00:11:45,31) [netns]
(root,0,0,00:00:00/4-00:11:45,32) [kauditd]
(root,0,0,00:00:00/4-00:11:45,35) [khungtaskd]
(root,0,0,00:00:00/4-00:11:45,36) [oom_reaper]
(root,0,0,00:00:00/4-00:11:45,37) [writeback]
(root,0,0,00:00:00/4-00:11:45,38) [kcompactd0]
(root,0,0,00:00:00/4-00:11:45,39) [ksmd]
(root,0,0,00:00:02/4-00:11:45,40) [khugepaged]
(root,0,0,00:00:00/4-00:11:45,41) [crypto]
(root,0,0,00:00:00/4-00:11:45,42) [kintegrityd]
(root,0,0,00:00:00/4-00:11:45,43) [kblockd]
(root,0,0,00:00:00/4-00:11:44,44) [edac-poller]
(root,0,0,00:00:00/4-00:11:44,45) [devfreq_wq]
(root,0,0,00:00:00/4-00:11:44,46) [watchdogd]
(root,0,0,00:00:00/4-00:11:42,49) [kswapd0]
(root,0,0,00:00:00/4-00:11:41,67) [kthrotld]
(root,0,0,00:00:00/4-00:11:41,68) [irq/24-pciehp]
(root,0,0,00:00:00/4-00:11:41,69) [irq/25-pciehp]
(root,0,0,00:00:00/4-00:11:41,70) [irq/26-pciehp]
(root,0,0,00:00:00/4-00:11:41,71) [irq/27-pciehp]
(root,0,0,00:00:00/4-00:11:41,72) [irq/28-pciehp]
(root,0,0,00:00:00/4-00:11:41,73) [irq/29-pciehp]
(root,0,0,00:00:00/4-00:11:41,74) [irq/30-pciehp]
(root,0,0,00:00:00/4-00:11:41,75) [irq/31-pciehp]
(root,0,0,00:00:00/4-00:11:41,76) [irq/32-pciehp]
(root,0,0,00:00:00/4-00:11:41,77) [irq/33-pciehp]
(root,0,0,00:00:00/4-00:11:41,78) [irq/34-pciehp]
(root,0,0,00:00:00/4-00:11:41,79) [irq/35-pciehp]
(root,0,0,00:00:00/4-00:11:41,80) [irq/36-pciehp]
(root,0,0,00:00:00/4-00:11:41,81) [irq/37-pciehp]
(root,0,0,00:00:00/4-00:11:41,82) [irq/38-pciehp]
(root,0,0,00:00:00/4-00:11:41,83) [irq/39-pciehp]
(root,0,0,00:00:00/4-00:11:41,84) [irq/40-pciehp]
(root,0,0,00:00:00/4-00:11:41,85) [irq/41-pciehp]
(root,0,0,00:00:00/4-00:11:41,86) [irq/42-pciehp]
(root,0,0,00:00:00/4-00:11:41,87) [irq/43-pciehp]
(root,0,0,00:00:00/4-00:11:41,88) [irq/44-pciehp]
(root,0,0,00:00:00/4-00:11:41,89) [irq/45-pciehp]
(root,0,0,00:00:00/4-00:11:41,90) [irq/46-pciehp]
(root,0,0,00:00:00/4-00:11:41,91) [irq/47-pciehp]
(root,0,0,00:00:00/4-00:11:41,92) [irq/48-pciehp]
(root,0,0,00:00:00/4-00:11:41,93) [irq/49-pciehp]
(root,0,0,00:00:00/4-00:11:41,94) [irq/50-pciehp]
(root,0,0,00:00:00/4-00:11:41,95) [irq/51-pciehp]
(root,0,0,00:00:00/4-00:11:41,96) [irq/52-pciehp]
(root,0,0,00:00:00/4-00:11:41,97) [irq/53-pciehp]
(root,0,0,00:00:00/4-00:11:41,98) [irq/54-pciehp]
(root,0,0,00:00:00/4-00:11:41,99) [irq/55-pciehp]
(root,0,0,00:00:00/4-00:11:41,100) [ipv6_addrconf]
(root,0,0,00:00:00/4-00:11:41,110) [kstrp]
(root,0,0,00:00:00/4-00:11:39,152) [scsi_eh_0]
(root,0,0,00:00:00/4-00:11:39,153) [scsi_tmf_0]
(root,0,0,00:00:00/4-00:11:39,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/4-00:11:39,155) [ata_sff]
(root,0,0,00:00:00/4-00:11:39,157) [scsi_eh_1]
(root,0,0,00:00:00/4-00:11:39,158) [scsi_tmf_1]
(root,0,0,00:00:00/4-00:11:39,162) [scsi_eh_2]
(root,0,0,00:00:00/4-00:11:39,174) [scsi_tmf_2]
(root,0,0,00:00:01/4-00:11:38,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/4-00:11:38,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/4-00:11:38,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/4-00:11:38,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/4-00:11:38,230) [kdmflush]
(root,0,0,00:00:00/4-00:11:37,237) [kdmflush]
(root,0,0,00:00:00/4-00:11:29,265) [kworker/u257:0]
(root,0,0,00:00:00/4-00:11:29,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/4-00:11:29,271) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:11:27,279) [kdmflush]
(root,0,0,00:00:00/4-00:11:24,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/4-00:11:24,295) [ext4-rsv-conver]
(root,54520,15492,00:00:21/4-00:11:18,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:01/4-00:11:17,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/4-00:11:15,502) [ttm_swap]
(root,0,0,00:00:00/4-00:11:15,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/4-00:11:15,511) [kdmflush]
(root,0,0,00:00:00/4-00:11:15,513) [kdmflush]
(root,0,0,00:00:00/4-00:11:15,514) [kdmflush]
(root,0,0,00:00:00/4-00:11:15,517) [kdmflush]
(root,0,0,00:00:00/4-00:11:15,548) [jbd2/sda1-8]
(root,0,0,00:00:00/4-00:11:15,549) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:11:15,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/4-00:11:15,566) [ext4-rsv-conver]
(root,0,0,00:00:01/4-00:11:14,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/4-00:11:14,570) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:11:14,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/4-00:11:14,576) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:11:14,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/4-00:11:14,581) [ext4-rsv-conver]
(root,8500,2776,00:00:01/4-00:11:13,605) /usr/sbin/cron -f
(root,19528,7328,00:00:11/4-00:11:13,606) /lib/systemd/systemd-logind
(root,221728,4892,00:00:02/4-00:11:13,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4272,00:00:18/4-00:11:13,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:01:30/4-00:11:13,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:00:23/4-00:11:13,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/4-00:11:13,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:00:26/4-00:11:12,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:04/4-00:11:12,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:05:30/4-00:11:12,750) /usr/sbin/mysqld
(root,9604,2164,00:00:00/4-00:11:11,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/4-00:11:09,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72592,7280,00:00:00/4-00:11:09,818) nginx: worker process
(www-data,72592,7280,00:00:00/4-00:11:09,819) nginx: worker process
(www-data,73136,9360,00:00:09/4-00:11:09,820) nginx: worker process
(www-data,72592,5776,00:00:00/4-00:11:09,821) nginx: worker process
(www-data,231896,17276,00:00:00/4-00:11:07,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/4-00:11:07,912) php-fpm: pool www
(root,0,0,00:00:05/2-07:55:33,6226) [kworker/0:2-events]
(root,0,0,00:00:04/13:09:33,15071) [kworker/3:1-events]
(root,0,0,00:00:27/11:06:25,15669) [kworker/1:2-events]
(root,0,0,00:00:00/02:53:48,19114) [kworker/2:0-events]
(root,0,0,00:00:00/50:28,19788) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/48:49,19800) [kworker/2:2]
(root,0,0,00:00:00/34:00,19872) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/25:31,19961) [kworker/3:2]
(root,0,0,00:00:00/22:39,19978) [kworker/u256:0-flush-254:5]
(root,0,0,00:00:00/07:30,20053) [kworker/1:1-ata_sff]
(root,0,0,00:00:00/02:17,20076) [kworker/1:0-ata_sff]
(root,0,0,00:00:00/00:44,20132) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/00:40,20133) [kworker/u256:2-flush-254:5]
(root,6856,3324,00:00:00/00:00,20251) /bin/bash /usr/bin/check_mk_agent
(root,7636,2732,00:00:00/00:00,20269) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,20270) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-12-02 01:39

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb6b66da25

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169612,10420,00:00:17/1-23:34:50,1) /sbin/init
(root,0,0,00:00:00/1-23:34:50,2) [kthreadd]
(root,0,0,00:00:00/1-23:34:50,3) [rcu_gp]
(root,0,0,00:00:00/1-23:34:50,4) [rcu_par_gp]
(root,0,0,00:00:00/1-23:34:50,6) [kworker/0:0H]
(root,0,0,00:00:00/1-23:34:50,8) [mm_percpu_wq]
(root,0,0,00:00:00/1-23:34:50,9) [ksoftirqd/0]
(root,0,0,00:06:34/1-23:34:50,10) [rcu_sched]
(root,0,0,00:00:00/1-23:34:50,11) [rcu_bh]
(root,0,0,00:00:01/1-23:34:50,12) [migration/0]
(root,0,0,00:00:00/1-23:34:50,14) [cpuhp/0]
(root,0,0,00:00:00/1-23:34:50,15) [cpuhp/1]
(root,0,0,00:00:01/1-23:34:50,16) [migration/1]
(root,0,0,00:00:00/1-23:34:50,17) [ksoftirqd/1]
(root,0,0,00:00:00/1-23:34:50,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/1-23:34:50,20) [cpuhp/2]
(root,0,0,00:00:02/1-23:34:50,21) [migration/2]
(root,0,0,00:00:00/1-23:34:50,22) [ksoftirqd/2]
(root,0,0,00:00:00/1-23:34:50,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/1-23:34:50,25) [cpuhp/3]
(root,0,0,00:00:02/1-23:34:50,26) [migration/3]
(root,0,0,00:00:01/1-23:34:50,27) [ksoftirqd/3]
(root,0,0,00:00:00/1-23:34:50,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/1-23:34:50,30) [kdevtmpfs]
(root,0,0,00:00:00/1-23:34:50,31) [netns]
(root,0,0,00:00:00/1-23:34:50,32) [kauditd]
(root,0,0,00:00:00/1-23:34:50,35) [khungtaskd]
(root,0,0,00:00:00/1-23:34:50,36) [oom_reaper]
(root,0,0,00:00:00/1-23:34:50,37) [writeback]
(root,0,0,00:00:00/1-23:34:50,38) [kcompactd0]
(root,0,0,00:00:00/1-23:34:50,39) [ksmd]
(root,0,0,00:00:01/1-23:34:50,40) [khugepaged]
(root,0,0,00:00:00/1-23:34:50,41) [crypto]
(root,0,0,00:00:00/1-23:34:50,42) [kintegrityd]
(root,0,0,00:00:00/1-23:34:50,43) [kblockd]
(root,0,0,00:00:00/1-23:34:49,44) [edac-poller]
(root,0,0,00:00:00/1-23:34:49,45) [devfreq_wq]
(root,0,0,00:00:00/1-23:34:49,46) [watchdogd]
(root,0,0,00:00:00/1-23:34:47,49) [kswapd0]
(root,0,0,00:00:00/1-23:34:46,67) [kthrotld]
(root,0,0,00:00:00/1-23:34:46,68) [irq/24-pciehp]
(root,0,0,00:00:00/1-23:34:46,69) [irq/25-pciehp]
(root,0,0,00:00:00/1-23:34:46,70) [irq/26-pciehp]
(root,0,0,00:00:00/1-23:34:46,71) [irq/27-pciehp]
(root,0,0,00:00:00/1-23:34:46,72) [irq/28-pciehp]
(root,0,0,00:00:00/1-23:34:46,73) [irq/29-pciehp]
(root,0,0,00:00:00/1-23:34:46,74) [irq/30-pciehp]
(root,0,0,00:00:00/1-23:34:46,75) [irq/31-pciehp]
(root,0,0,00:00:00/1-23:34:46,76) [irq/32-pciehp]
(root,0,0,00:00:00/1-23:34:46,77) [irq/33-pciehp]
(root,0,0,00:00:00/1-23:34:46,78) [irq/34-pciehp]
(root,0,0,00:00:00/1-23:34:46,79) [irq/35-pciehp]
(root,0,0,00:00:00/1-23:34:46,80) [irq/36-pciehp]
(root,0,0,00:00:00/1-23:34:46,81) [irq/37-pciehp]
(root,0,0,00:00:00/1-23:34:46,82) [irq/38-pciehp]
(root,0,0,00:00:00/1-23:34:46,83) [irq/39-pciehp]
(root,0,0,00:00:00/1-23:34:46,84) [irq/40-pciehp]
(root,0,0,00:00:00/1-23:34:46,85) [irq/41-pciehp]
(root,0,0,00:00:00/1-23:34:46,86) [irq/42-pciehp]
(root,0,0,00:00:00/1-23:34:46,87) [irq/43-pciehp]
(root,0,0,00:00:00/1-23:34:46,88) [irq/44-pciehp]
(root,0,0,00:00:00/1-23:34:46,89) [irq/45-pciehp]
(root,0,0,00:00:00/1-23:34:46,90) [irq/46-pciehp]
(root,0,0,00:00:00/1-23:34:46,91) [irq/47-pciehp]
(root,0,0,00:00:00/1-23:34:46,92) [irq/48-pciehp]
(root,0,0,00:00:00/1-23:34:46,93) [irq/49-pciehp]
(root,0,0,00:00:00/1-23:34:46,94) [irq/50-pciehp]
(root,0,0,00:00:00/1-23:34:46,95) [irq/51-pciehp]
(root,0,0,00:00:00/1-23:34:46,96) [irq/52-pciehp]
(root,0,0,00:00:00/1-23:34:46,97) [irq/53-pciehp]
(root,0,0,00:00:00/1-23:34:46,98) [irq/54-pciehp]
(root,0,0,00:00:00/1-23:34:46,99) [irq/55-pciehp]
(root,0,0,00:00:00/1-23:34:46,100) [ipv6_addrconf]
(root,0,0,00:00:00/1-23:34:46,110) [kstrp]
(root,0,0,00:00:00/1-23:34:44,152) [scsi_eh_0]
(root,0,0,00:00:00/1-23:34:44,153) [scsi_tmf_0]
(root,0,0,00:00:00/1-23:34:44,154) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/1-23:34:44,155) [ata_sff]
(root,0,0,00:00:00/1-23:34:44,157) [scsi_eh_1]
(root,0,0,00:00:00/1-23:34:44,158) [scsi_tmf_1]
(root,0,0,00:00:00/1-23:34:44,162) [scsi_eh_2]
(root,0,0,00:00:00/1-23:34:44,174) [scsi_tmf_2]
(root,0,0,00:00:00/1-23:34:43,188) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/1-23:34:43,191) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/1-23:34:43,220) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/1-23:34:43,224) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/1-23:34:43,230) [kdmflush]
(root,0,0,00:00:00/1-23:34:42,237) [kdmflush]
(root,0,0,00:00:00/1-23:34:34,265) [kworker/u257:0]
(root,0,0,00:00:00/1-23:34:34,270) [jbd2/dm-0-8]
(root,0,0,00:00:00/1-23:34:34,271) [ext4-rsv-conver]
(root,0,0,00:00:00/1-23:34:32,279) [kdmflush]
(root,0,0,00:00:00/1-23:34:29,294) [jbd2/dm-2-8]
(root,0,0,00:00:00/1-23:34:29,295) [ext4-rsv-conver]
(root,29668,9424,00:00:02/1-23:34:23,333) /lib/systemd/systemd-journald
(root,22892,5748,00:00:01/1-23:34:22,360) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/1-23:34:20,502) [ttm_swap]
(root,0,0,00:00:00/1-23:34:20,503) [irq/16-vmwgfx]
(root,0,0,00:00:00/1-23:34:20,511) [kdmflush]
(root,0,0,00:00:00/1-23:34:20,513) [kdmflush]
(root,0,0,00:00:00/1-23:34:20,514) [kdmflush]
(root,0,0,00:00:00/1-23:34:20,517) [kdmflush]
(root,0,0,00:00:00/1-23:34:20,548) [jbd2/sda1-8]
(root,0,0,00:00:00/1-23:34:20,549) [ext4-rsv-conver]
(root,0,0,00:00:00/1-23:34:20,565) [jbd2/dm-6-8]
(root,0,0,00:00:00/1-23:34:20,566) [ext4-rsv-conver]
(root,0,0,00:00:00/1-23:34:19,569) [jbd2/dm-4-8]
(root,0,0,00:00:00/1-23:34:19,570) [ext4-rsv-conver]
(root,0,0,00:00:00/1-23:34:19,575) [jbd2/dm-3-8]
(root,0,0,00:00:00/1-23:34:19,576) [ext4-rsv-conver]
(root,0,0,00:00:00/1-23:34:19,580) [jbd2/dm-5-8]
(root,0,0,00:00:00/1-23:34:19,581) [ext4-rsv-conver]
(root,8500,2776,00:00:00/1-23:34:18,605) /usr/sbin/cron -f
(root,19528,7328,00:00:05/1-23:34:18,606) /lib/systemd/systemd-logind
(root,221728,4632,00:00:00/1-23:34:18,607) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4232,00:00:06/1-23:34:18,608) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(memcache,408164,4956,00:00:44/1-23:34:18,667) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,231612,32648,00:00:11/1-23:34:18,671) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(root,5608,1684,00:00:00/1-23:34:18,678) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3844,00:00:12/1-23:34:17,688) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,7112,00:00:00/1-23:34:17,731) /usr/sbin/sshd -D
(mysql,1796952,106768,00:02:49/1-23:34:17,750) /usr/sbin/mysqld
(root,9604,2088,00:00:00/1-23:34:16,804) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1792,00:00:00/1-23:34:14,817) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72592,7280,00:00:00/1-23:34:14,818) nginx: worker process
(www-data,72592,7280,00:00:00/1-23:34:14,819) nginx: worker process
(www-data,73136,9360,00:00:05/1-23:34:14,820) nginx: worker process
(www-data,72592,5776,00:00:00/1-23:34:14,821) nginx: worker process
(www-data,231896,17276,00:00:00/1-23:34:12,911) php-fpm: pool www
(www-data,231896,17040,00:00:00/1-23:34:12,912) php-fpm: pool www
(root,0,0,00:00:30/12:28:19,5608) [kworker/1:2-events]
(root,0,0,00:00:03/10:12:52,5891) [kworker/3:0-events]
(root,0,0,00:00:00/07:18:38,6226) [kworker/0:2-events]
(root,0,0,00:00:00/01:38:26,6907) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/01:33:11,6938) [kworker/2:2-events]
(root,0,0,00:00:00/01:23:49,6958) [kworker/2:0-events]
(root,0,0,00:00:00/23:49,7108) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/14:35,7113) [kworker/u256:3-flush-254:0]
(root,0,0,00:00:00/09:34,7115) [kworker/u256:0-flush-254:2]
(root,0,0,00:00:00/06:22,7116) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/04:04,7117) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/03:54,7119) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/03:49,7120) [kworker/u256:1-flush-254:2]
(root,0,0,00:00:00/01:12,7121) [kworker/1:0-ata_sff]
(root,6856,3484,00:00:00/00:00,7237) /bin/bash /usr/bin/check_mk_agent
(root,7636,2700,00:00:00/00:00,7255) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,992,00:00:00/00:00,7256) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-30 01:02

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbb6d3ebf4

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:08:48/71-03:21:12,1) /sbin/init
(root,0,0,00:00:02/71-03:21:12,2) [kthreadd]
(root,0,0,00:00:00/71-03:21:12,3) [rcu_gp]
(root,0,0,00:00:00/71-03:21:12,4) [rcu_par_gp]
(root,0,0,00:00:00/71-03:21:12,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/71-03:21:12,8) [mm_percpu_wq]
(root,0,0,00:00:29/71-03:21:12,9) [ksoftirqd/0]
(root,0,0,04:33:33/71-03:21:12,10) [rcu_sched]
(root,0,0,00:00:00/71-03:21:12,11) [rcu_bh]
(root,0,0,00:00:24/71-03:21:12,12) [migration/0]
(root,0,0,00:00:00/71-03:21:12,14) [cpuhp/0]
(root,0,0,00:00:00/71-03:21:12,15) [cpuhp/1]
(root,0,0,00:00:19/71-03:21:12,16) [migration/1]
(root,0,0,00:00:25/71-03:21:12,17) [ksoftirqd/1]
(root,0,0,00:00:00/71-03:21:12,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/71-03:21:12,20) [cpuhp/2]
(root,0,0,00:00:20/71-03:21:12,21) [migration/2]
(root,0,0,00:00:41/71-03:21:12,22) [ksoftirqd/2]
(root,0,0,00:00:00/71-03:21:12,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/71-03:21:12,25) [cpuhp/3]
(root,0,0,00:00:23/71-03:21:12,26) [migration/3]
(root,0,0,00:01:58/71-03:21:12,27) [ksoftirqd/3]
(root,0,0,00:00:00/71-03:21:12,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/71-03:21:12,30) [kdevtmpfs]
(root,0,0,00:00:00/71-03:21:12,31) [netns]
(root,0,0,00:00:00/71-03:21:12,32) [kauditd]
(root,0,0,00:00:10/71-03:21:12,35) [khungtaskd]
(root,0,0,00:00:00/71-03:21:12,36) [oom_reaper]
(root,0,0,00:00:00/71-03:21:12,37) [writeback]
(root,0,0,00:00:00/71-03:21:12,38) [kcompactd0]
(root,0,0,00:00:00/71-03:21:12,39) [ksmd]
(root,0,0,00:01:14/71-03:21:12,40) [khugepaged]
(root,0,0,00:00:00/71-03:21:12,41) [crypto]
(root,0,0,00:00:00/71-03:21:12,42) [kintegrityd]
(root,0,0,00:00:00/71-03:21:12,43) [kblockd]
(root,0,0,00:00:00/71-03:21:11,46) [edac-poller]
(root,0,0,00:00:00/71-03:21:11,47) [devfreq_wq]
(root,0,0,00:00:00/71-03:21:11,48) [watchdogd]
(root,0,0,00:00:00/71-03:21:09,49) [kswapd0]
(root,0,0,00:00:00/71-03:21:08,67) [kthrotld]
(root,0,0,00:00:00/71-03:21:08,68) [irq/24-pciehp]
(root,0,0,00:00:00/71-03:21:08,69) [irq/25-pciehp]
(root,0,0,00:00:00/71-03:21:08,70) [irq/26-pciehp]
(root,0,0,00:00:00/71-03:21:08,71) [irq/27-pciehp]
(root,0,0,00:00:00/71-03:21:08,72) [irq/28-pciehp]
(root,0,0,00:00:00/71-03:21:08,73) [irq/29-pciehp]
(root,0,0,00:00:00/71-03:21:08,74) [irq/30-pciehp]
(root,0,0,00:00:00/71-03:21:08,75) [irq/31-pciehp]
(root,0,0,00:00:00/71-03:21:08,76) [irq/32-pciehp]
(root,0,0,00:00:00/71-03:21:08,77) [irq/33-pciehp]
(root,0,0,00:00:00/71-03:21:08,78) [irq/34-pciehp]
(root,0,0,00:00:00/71-03:21:08,79) [irq/35-pciehp]
(root,0,0,00:00:00/71-03:21:08,80) [irq/36-pciehp]
(root,0,0,00:00:00/71-03:21:08,81) [irq/37-pciehp]
(root,0,0,00:00:00/71-03:21:08,82) [irq/38-pciehp]
(root,0,0,00:00:00/71-03:21:08,83) [irq/39-pciehp]
(root,0,0,00:00:00/71-03:21:08,84) [irq/40-pciehp]
(root,0,0,00:00:00/71-03:21:08,85) [irq/41-pciehp]
(root,0,0,00:00:00/71-03:21:08,86) [irq/42-pciehp]
(root,0,0,00:00:00/71-03:21:08,87) [irq/43-pciehp]
(root,0,0,00:00:00/71-03:21:08,88) [irq/44-pciehp]
(root,0,0,00:00:00/71-03:21:08,89) [irq/45-pciehp]
(root,0,0,00:00:00/71-03:21:08,90) [irq/46-pciehp]
(root,0,0,00:00:00/71-03:21:08,91) [irq/47-pciehp]
(root,0,0,00:00:00/71-03:21:08,92) [irq/48-pciehp]
(root,0,0,00:00:00/71-03:21:08,93) [irq/49-pciehp]
(root,0,0,00:00:00/71-03:21:08,94) [irq/50-pciehp]
(root,0,0,00:00:00/71-03:21:08,95) [irq/51-pciehp]
(root,0,0,00:00:00/71-03:21:08,96) [irq/52-pciehp]
(root,0,0,00:00:00/71-03:21:08,97) [irq/53-pciehp]
(root,0,0,00:00:00/71-03:21:08,98) [irq/54-pciehp]
(root,0,0,00:00:00/71-03:21:08,99) [irq/55-pciehp]
(root,0,0,00:00:00/71-03:21:08,100) [ipv6_addrconf]
(root,0,0,00:00:00/71-03:21:08,110) [kstrp]
(root,0,0,00:00:00/71-03:21:05,153) [scsi_eh_0]
(root,0,0,00:00:00/71-03:21:05,154) [scsi_tmf_0]
(root,0,0,00:00:00/71-03:21:05,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/71-03:21:05,158) [ata_sff]
(root,0,0,00:00:00/71-03:21:05,160) [scsi_eh_1]
(root,0,0,00:00:00/71-03:21:05,164) [scsi_tmf_1]
(root,0,0,00:00:00/71-03:21:05,165) [scsi_eh_2]
(root,0,0,00:00:00/71-03:21:05,170) [scsi_tmf_2]
(root,0,0,00:00:03/71-03:21:05,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/71-03:21:05,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:24/71-03:21:05,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/71-03:21:05,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/71-03:21:04,224) [kdmflush]
(root,0,0,00:00:00/71-03:21:04,230) [kdmflush]
(root,0,0,00:00:00/71-03:21:00,258) [kworker/u257:0]
(root,0,0,00:00:00/71-03:21:00,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/71-03:21:00,261) [ext4-rsv-conver]
(root,0,0,00:00:00/71-03:20:58,269) [kdmflush]
(root,0,0,00:00:00/71-03:20:58,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/71-03:20:58,286) [ext4-rsv-conver]
(root,362504,326568,1-06:26:41/71-03:20:53,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:18/71-03:20:53,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/71-03:20:52,473) [ttm_swap]
(root,0,0,00:00:00/71-03:20:52,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/71-03:20:52,511) [kdmflush]
(root,0,0,00:00:00/71-03:20:52,513) [kdmflush]
(root,0,0,00:00:00/71-03:20:52,514) [kdmflush]
(root,0,0,00:00:00/71-03:20:52,516) [kdmflush]
(root,0,0,00:00:00/71-03:20:51,544) [jbd2/sda1-8]
(root,0,0,00:00:00/71-03:20:51,545) [ext4-rsv-conver]
(root,0,0,00:00:00/71-03:20:51,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/71-03:20:51,558) [ext4-rsv-conver]
(root,0,0,00:00:00/71-03:20:51,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/71-03:20:51,562) [ext4-rsv-conver]
(root,0,0,00:00:00/71-03:20:51,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/71-03:20:51,568) [ext4-rsv-conver]
(root,0,0,00:00:02/71-03:20:49,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/71-03:20:49,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:08:51/71-03:20:48,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:39/71-03:20:48,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:24/71-03:20:48,608) /usr/sbin/cron -f
(root,231612,32976,00:07:32/71-03:20:48,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:30:25/71-03:20:48,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/71-03:20:48,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:44/71-03:20:48,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/71-03:20:47,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/71-03:20:47,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:03:02/71-03:20:47,742) nginx: worker process
(www-data,73236,9848,00:00:00/71-03:20:47,743) nginx: worker process
(www-data,73512,9864,00:00:01/71-03:20:47,744) nginx: worker process
(www-data,73116,9372,00:00:00/71-03:20:47,745) nginx: worker process
(www-data,231896,17304,00:00:03/71-03:20:46,772) php-fpm: pool www
(www-data,231896,17084,00:00:03/71-03:20:46,773) php-fpm: pool www
(root,9464,2476,00:00:00/70-11:39:58,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/70-11:39:57,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:45/70-11:39:57,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/69-11:39:57,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/69-11:39:57,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:37/69-11:39:57,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-11:39:58,3365) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/11-11:39:58,3402) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:16/11-11:39:58,3403) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/68-11:39:58,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/68-11:39:58,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:39/68-11:39:58,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/67-11:39:58,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/67-11:39:58,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:43/67-11:39:58,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/66-11:39:57,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/66-11:39:57,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:32/66-11:39:57,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/65-11:39:58,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/65-11:39:58,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:33/65-11:39:57,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/64-11:39:58,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/64-11:39:58,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:48/64-11:39:58,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/64-06:24:45,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/64-06:24:45,11157) (sd-pam)
(root,5860,2640,00:00:00/64-06:23:29,11180) ssh-agent -s
(root,9464,2476,00:00:00/63-11:39:58,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/63-11:39:58,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:32/63-11:39:58,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/62-11:39:58,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/62-11:39:58,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:25/62-11:39:57,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-11:39:58,13915) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/10-11:39:58,13952) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:21/10-11:39:58,13953) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/61-11:39:58,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/61-11:39:58,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:29/61-11:39:58,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/60-11:39:57,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/60-11:39:57,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:25/60-11:39:57,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/59-11:39:58,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/59-11:39:58,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:19/59-11:39:58,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/58-11:39:58,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/58-11:39:58,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:22/58-11:39:58,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/57-11:39:58,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/57-11:39:58,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:25/57-11:39:58,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-11:39:58,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/56-11:39:57,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:19/56-11:39:57,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-11:39:58,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/29-11:39:58,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:41/29-11:39:58,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-11:39:57,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/28-11:39:57,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:42/28-11:39:57,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/55-11:39:58,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/55-11:39:58,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:13/55-11:39:58,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-11:39:58,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/27-11:39:57,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:38/27-11:39:57,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-11:39:58,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/54-11:39:58,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:27/54-11:39:58,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-11:39:58,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/26-11:39:58,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:48/26-11:39:58,24989) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-11:39:57,25198) /usr/sbin/CRON -f
(root,5860,2740,00:00:00/54-05:12:09,25220) ssh-agent -s
(root,43464,7504,00:00:00/9-11:39:57,25236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7572,00:00:13/9-11:39:57,25237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-11:39:58,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/25-11:39:58,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:36/25-11:39:58,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-11:39:57,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/53-11:39:57,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:19/53-11:39:57,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-11:39:58,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/52-11:39:58,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:01:12/52-11:39:58,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-11:39:58,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/51-11:39:58,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:01:10/51-11:39:58,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-11:39:57,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/50-11:39:57,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:21/50-11:39:57,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-11:39:58,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/49-11:39:58,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:01:07/49-11:39:58,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-11:39:58,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/48-11:39:58,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:01:09/48-11:39:58,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/48-05:27:14,33348) ssh-agent -s
(root,5860,2676,00:00:00/48-05:26:24,33356) ssh-agent -s
(root,9464,2476,00:00:00/47-11:39:57,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/47-11:39:57,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:01:04/47-11:39:57,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-11:39:58,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/46-11:39:58,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:01:06/46-11:39:58,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-11:39:58,35936) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/8-11:39:58,35973) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:15/8-11:39:58,35974) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-11:39:58,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/45-11:39:58,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:01:02/45-11:39:58,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-11:39:58,40062) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/7-11:39:58,40099) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:15/7-11:39:58,40100) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-11:39:58,40777) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/6-11:39:58,40814) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:14/6-11:39:58,40815) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-11:39:58,41659) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/5-11:39:58,41697) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7676,00:00:08/5-11:39:58,41698) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-11:39:58,42391) /usr/sbin/CRON -f
(root,43464,7776,00:00:00/4-11:39:58,42428) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7624,00:00:08/4-11:39:58,42429) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-11:39:58,43298) /usr/sbin/CRON -f
(root,43464,7696,00:00:00/3-11:39:58,43335) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7784,00:00:06/3-11:39:58,43336) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-11:39:58,44057) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/2-11:39:58,44094) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:05/2-11:39:58,44095) /usr/sbin/postdrop -r
(root,0,0,00:00:00/1-13:08:53,44865) [kworker/1:1-cgroup_destroy]
(root,9464,2476,00:00:00/1-11:39:58,44916) /usr/sbin/CRON -f
(root,43464,7732,00:00:00/1-11:39:57,44953) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7840,00:00:03/1-11:39:57,44954) /usr/sbin/postdrop -r
(root,0,0,00:00:28/11:49:30,45661) [kworker/0:2-events_power_efficient]
(root,9464,2476,00:00:00/11:39:58,45668) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/11:39:58,45705) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:01/11:39:58,45706) /usr/sbin/postdrop -r
(root,0,0,00:00:00/03:50:26,45923) [kworker/0:0]
(root,0,0,00:00:00/02:59:00,46022) [kworker/2:2-events]
(root,9464,2476,00:00:00/44-11:39:58,46064) /usr/sbin/CRON -f
(root,14660,7824,00:00:00/01:45:40,46065) sshd: fcpys [priv]
(fcpys,14944,5888,00:00:01/01:45:38,46071) sshd: fcpys@pts/0
(fcpys,7780,4620,00:00:00/01:45:36,46072) -bash
(fcpys,2452,1756,00:00:00/01:36:01,46086) /usr/lib/openssh/sftp-server
(root,0,0,00:00:00/01:34:59,46090) [kworker/2:0]
(root,10244,3960,00:00:00/01:34:55,46091) sudo -i
(root,7648,4468,00:00:00/01:34:55,46092) -bash
(root,13752,6212,00:00:00/01:32:56,46095) ssh llira@132.248.48.176
(root,43464,7672,00:00:00/44-11:39:58,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:01:04/44-11:39:58,46102) /usr/sbin/postdrop -r
(root,0,0,00:00:00/01:18:22,46114) [kworker/u256:1-events_unbound]
(root,0,0,00:00:00/55:53,46123) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/14:20,46154) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/09:10,46156) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/03:57,46158) [kworker/3:1-events]
(root,6856,3516,00:00:00/00:00,46216) /bin/bash /usr/bin/check_mk_agent
(root,7636,2704,00:00:00/00:00,46234) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,928,00:00:00/00:00,46235) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/43-11:39:58,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/43-11:39:58,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:01:01/43-11:39:58,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-11:39:58,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/42-11:39:58,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:01/42-11:39:58,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-11:39:58,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/24-11:39:58,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:39/24-11:39:58,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-11:39:58,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/41-11:39:58,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:56/41-11:39:58,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-11:39:58,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/40-11:39:58,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:52/40-11:39:57,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-11:39:57,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/23-11:39:57,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:32/23-11:39:57,71396) /usr/sbin/postdrop -r
(root,221728,4960,01:07:21/22-22:27:36,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/22-11:39:58,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/22-11:39:57,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:41/22-11:39:57,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-11:39:58,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/21-11:39:58,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:31/21-11:39:58,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-11:39:58,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/39-11:39:58,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:58/39-11:39:58,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-11:39:58,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/20-11:39:58,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:33/20-11:39:58,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-11:39:58,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/38-11:39:58,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:55/38-11:39:58,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-11:39:58,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/19-11:39:58,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:35/19-11:39:58,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-11:39:57,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/18-11:39:57,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:34/18-11:39:57,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-11:39:57,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/37-11:39:57,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:53/37-11:39:57,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-11:39:58,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/36-11:39:58,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:50/36-11:39:58,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-11:39:58,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/17-11:39:58,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:31/17-11:39:58,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-11:39:58,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/35-11:39:58,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:57/35-11:39:58,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-11:39:58,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/34-11:39:58,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:46/34-11:39:58,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-11:39:58,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/16-11:39:58,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:24/16-11:39:58,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:14/16-09:32:10,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/33-11:39:58,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/33-11:39:57,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:01/33-11:39:57,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-11:39:58,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/15-11:39:58,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:27/15-11:39:58,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-11:39:58,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/32-11:39:58,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:47/32-11:39:58,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-11:39:58,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/31-11:39:58,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:43/31-11:39:58,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-11:39:58,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/30-11:39:58,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:55/30-11:39:58,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-11:39:58,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/14-11:39:58,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:25/14-11:39:58,108114) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-11:39:57,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/13-11:39:57,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:29/13-11:39:57,114990) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-11:39:58,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/12-11:39:58,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:21/12-11:39:58,123321) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-28 01:05

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbdf45976c

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:08:36/69-03:24:15,1) /sbin/init
(root,0,0,00:00:02/69-03:24:15,2) [kthreadd]
(root,0,0,00:00:00/69-03:24:15,3) [rcu_gp]
(root,0,0,00:00:00/69-03:24:15,4) [rcu_par_gp]
(root,0,0,00:00:00/69-03:24:15,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/69-03:24:15,8) [mm_percpu_wq]
(root,0,0,00:00:28/69-03:24:15,9) [ksoftirqd/0]
(root,0,0,04:25:54/69-03:24:15,10) [rcu_sched]
(root,0,0,00:00:00/69-03:24:15,11) [rcu_bh]
(root,0,0,00:00:23/69-03:24:15,12) [migration/0]
(root,0,0,00:00:00/69-03:24:15,14) [cpuhp/0]
(root,0,0,00:00:00/69-03:24:15,15) [cpuhp/1]
(root,0,0,00:00:18/69-03:24:15,16) [migration/1]
(root,0,0,00:00:25/69-03:24:15,17) [ksoftirqd/1]
(root,0,0,00:00:00/69-03:24:15,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/69-03:24:15,20) [cpuhp/2]
(root,0,0,00:00:20/69-03:24:15,21) [migration/2]
(root,0,0,00:00:40/69-03:24:15,22) [ksoftirqd/2]
(root,0,0,00:00:00/69-03:24:15,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/69-03:24:15,25) [cpuhp/3]
(root,0,0,00:00:22/69-03:24:15,26) [migration/3]
(root,0,0,00:01:55/69-03:24:15,27) [ksoftirqd/3]
(root,0,0,00:00:00/69-03:24:15,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/69-03:24:15,30) [kdevtmpfs]
(root,0,0,00:00:00/69-03:24:15,31) [netns]
(root,0,0,00:00:00/69-03:24:15,32) [kauditd]
(root,0,0,00:00:10/69-03:24:15,35) [khungtaskd]
(root,0,0,00:00:00/69-03:24:15,36) [oom_reaper]
(root,0,0,00:00:00/69-03:24:15,37) [writeback]
(root,0,0,00:00:00/69-03:24:15,38) [kcompactd0]
(root,0,0,00:00:00/69-03:24:15,39) [ksmd]
(root,0,0,00:01:13/69-03:24:15,40) [khugepaged]
(root,0,0,00:00:00/69-03:24:15,41) [crypto]
(root,0,0,00:00:00/69-03:24:15,42) [kintegrityd]
(root,0,0,00:00:00/69-03:24:15,43) [kblockd]
(root,0,0,00:00:00/69-03:24:14,46) [edac-poller]
(root,0,0,00:00:00/69-03:24:14,47) [devfreq_wq]
(root,0,0,00:00:00/69-03:24:14,48) [watchdogd]
(root,0,0,00:00:00/69-03:24:12,49) [kswapd0]
(root,0,0,00:00:00/69-03:24:11,67) [kthrotld]
(root,0,0,00:00:00/69-03:24:11,68) [irq/24-pciehp]
(root,0,0,00:00:00/69-03:24:11,69) [irq/25-pciehp]
(root,0,0,00:00:00/69-03:24:11,70) [irq/26-pciehp]
(root,0,0,00:00:00/69-03:24:11,71) [irq/27-pciehp]
(root,0,0,00:00:00/69-03:24:11,72) [irq/28-pciehp]
(root,0,0,00:00:00/69-03:24:11,73) [irq/29-pciehp]
(root,0,0,00:00:00/69-03:24:11,74) [irq/30-pciehp]
(root,0,0,00:00:00/69-03:24:11,75) [irq/31-pciehp]
(root,0,0,00:00:00/69-03:24:11,76) [irq/32-pciehp]
(root,0,0,00:00:00/69-03:24:11,77) [irq/33-pciehp]
(root,0,0,00:00:00/69-03:24:11,78) [irq/34-pciehp]
(root,0,0,00:00:00/69-03:24:11,79) [irq/35-pciehp]
(root,0,0,00:00:00/69-03:24:11,80) [irq/36-pciehp]
(root,0,0,00:00:00/69-03:24:11,81) [irq/37-pciehp]
(root,0,0,00:00:00/69-03:24:11,82) [irq/38-pciehp]
(root,0,0,00:00:00/69-03:24:11,83) [irq/39-pciehp]
(root,0,0,00:00:00/69-03:24:11,84) [irq/40-pciehp]
(root,0,0,00:00:00/69-03:24:11,85) [irq/41-pciehp]
(root,0,0,00:00:00/69-03:24:11,86) [irq/42-pciehp]
(root,0,0,00:00:00/69-03:24:11,87) [irq/43-pciehp]
(root,0,0,00:00:00/69-03:24:11,88) [irq/44-pciehp]
(root,0,0,00:00:00/69-03:24:11,89) [irq/45-pciehp]
(root,0,0,00:00:00/69-03:24:11,90) [irq/46-pciehp]
(root,0,0,00:00:00/69-03:24:11,91) [irq/47-pciehp]
(root,0,0,00:00:00/69-03:24:11,92) [irq/48-pciehp]
(root,0,0,00:00:00/69-03:24:11,93) [irq/49-pciehp]
(root,0,0,00:00:00/69-03:24:11,94) [irq/50-pciehp]
(root,0,0,00:00:00/69-03:24:11,95) [irq/51-pciehp]
(root,0,0,00:00:00/69-03:24:11,96) [irq/52-pciehp]
(root,0,0,00:00:00/69-03:24:11,97) [irq/53-pciehp]
(root,0,0,00:00:00/69-03:24:11,98) [irq/54-pciehp]
(root,0,0,00:00:00/69-03:24:11,99) [irq/55-pciehp]
(root,0,0,00:00:00/69-03:24:11,100) [ipv6_addrconf]
(root,0,0,00:00:00/69-03:24:11,110) [kstrp]
(root,0,0,00:00:00/69-03:24:08,153) [scsi_eh_0]
(root,0,0,00:00:00/69-03:24:08,154) [scsi_tmf_0]
(root,0,0,00:00:00/69-03:24:08,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/69-03:24:08,158) [ata_sff]
(root,0,0,00:00:00/69-03:24:08,160) [scsi_eh_1]
(root,0,0,00:00:00/69-03:24:08,164) [scsi_tmf_1]
(root,0,0,00:00:00/69-03:24:08,165) [scsi_eh_2]
(root,0,0,00:00:00/69-03:24:08,170) [scsi_tmf_2]
(root,0,0,00:00:01/69-03:24:08,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/69-03:24:08,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:23/69-03:24:08,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/69-03:24:08,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/69-03:24:07,224) [kdmflush]
(root,0,0,00:00:00/69-03:24:07,230) [kdmflush]
(root,0,0,00:00:00/69-03:24:03,258) [kworker/u257:0]
(root,0,0,00:00:00/69-03:24:03,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/69-03:24:03,261) [ext4-rsv-conver]
(root,0,0,00:00:00/69-03:24:01,269) [kdmflush]
(root,0,0,00:00:00/69-03:24:01,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/69-03:24:01,286) [ext4-rsv-conver]
(root,345608,306864,1-05:46:02/69-03:23:56,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:18/69-03:23:56,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/69-03:23:55,473) [ttm_swap]
(root,0,0,00:00:00/69-03:23:55,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/69-03:23:55,511) [kdmflush]
(root,0,0,00:00:00/69-03:23:55,513) [kdmflush]
(root,0,0,00:00:00/69-03:23:55,514) [kdmflush]
(root,0,0,00:00:00/69-03:23:55,516) [kdmflush]
(root,0,0,00:00:00/69-03:23:54,544) [jbd2/sda1-8]
(root,0,0,00:00:00/69-03:23:54,545) [ext4-rsv-conver]
(root,0,0,00:00:00/69-03:23:54,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/69-03:23:54,558) [ext4-rsv-conver]
(root,0,0,00:00:00/69-03:23:54,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/69-03:23:54,562) [ext4-rsv-conver]
(root,0,0,00:00:00/69-03:23:54,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/69-03:23:54,568) [ext4-rsv-conver]
(root,0,0,00:00:02/69-03:23:52,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/69-03:23:52,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:08:44/69-03:23:51,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:33/69-03:23:51,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:23/69-03:23:51,608) /usr/sbin/cron -f
(root,231612,32976,00:07:19/69-03:23:51,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:29:37/69-03:23:51,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/69-03:23:51,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:44/69-03:23:51,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/69-03:23:50,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/69-03:23:50,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:57/69-03:23:50,742) nginx: worker process
(www-data,73236,9848,00:00:00/69-03:23:50,743) nginx: worker process
(www-data,73512,9864,00:00:01/69-03:23:50,744) nginx: worker process
(www-data,73116,9372,00:00:00/69-03:23:50,745) nginx: worker process
(www-data,231896,17304,00:00:03/69-03:23:49,772) php-fpm: pool www
(www-data,231896,17084,00:00:03/69-03:23:49,773) php-fpm: pool www
(root,9464,2476,00:00:00/68-11:43:01,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/68-11:43:00,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:43/68-11:43:00,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/67-11:43:00,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/67-11:43:00,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:35/67-11:43:00,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-11:43:01,3365) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/9-11:43:01,3402) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:13/9-11:43:01,3403) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/66-11:43:01,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/66-11:43:01,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:37/66-11:43:01,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/65-11:43:01,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/65-11:43:01,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:41/65-11:43:01,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/64-11:43:00,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/64-11:43:00,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:29/64-11:43:00,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/63-11:43:01,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/63-11:43:01,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:31/63-11:43:00,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/62-11:43:01,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/62-11:43:01,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:45/62-11:43:01,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/62-06:27:48,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/62-06:27:48,11157) (sd-pam)
(root,5860,2640,00:00:00/62-06:26:32,11180) ssh-agent -s
(root,9464,2476,00:00:00/61-11:43:01,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/61-11:43:01,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:30/61-11:43:01,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/60-11:43:01,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/60-11:43:01,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:23/60-11:43:00,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-11:43:01,13915) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/8-11:43:01,13952) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:17/8-11:43:01,13953) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/59-11:43:01,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/59-11:43:01,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:27/59-11:43:01,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/58-11:43:00,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/58-11:43:00,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:23/58-11:43:00,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/57-11:43:01,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/57-11:43:01,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:16/57-11:43:01,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-11:43:01,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/56-11:43:01,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:20/56-11:43:01,19368) /usr/sbin/postdrop -r
(root,0,0,00:00:06/7-22:44:55,20723) [kworker/2:1-events]
(root,9464,2476,00:00:00/55-11:43:01,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/55-11:43:01,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:22/55-11:43:01,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-11:43:01,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/54-11:43:00,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:16/54-11:43:00,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-11:43:01,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/27-11:43:01,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:39/27-11:43:01,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-11:43:00,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/26-11:43:00,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:39/26-11:43:00,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-11:43:01,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/53-11:43:01,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:10/53-11:43:01,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-11:43:01,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/25-11:43:00,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:35/25-11:43:00,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-11:43:01,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/52-11:43:01,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:24/52-11:43:01,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-11:43:01,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/24-11:43:01,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:45/24-11:43:01,24989) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-11:43:00,25198) /usr/sbin/CRON -f
(root,5860,2740,00:00:00/52-05:15:12,25220) ssh-agent -s
(root,43464,7504,00:00:00/7-11:43:00,25236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7572,00:00:10/7-11:43:00,25237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-11:43:01,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/23-11:43:01,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:33/23-11:43:01,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-11:43:00,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/51-11:43:00,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:16/51-11:43:00,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-11:43:01,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/50-11:43:01,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:01:10/50-11:43:01,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-11:43:01,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/49-11:43:01,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:01:07/49-11:43:01,28930) /usr/sbin/postdrop -r
(root,0,0,00:07:19/7-02:56:32,29484) [kworker/0:2-events]
(root,9464,2476,00:00:00/48-11:43:00,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/48-11:43:00,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:18/48-11:43:00,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-11:43:01,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/47-11:43:01,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:01:04/47-11:43:01,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-11:43:01,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/46-11:43:01,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:01:07/46-11:43:01,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/46-05:30:17,33348) ssh-agent -s
(root,5860,2676,00:00:00/46-05:29:27,33356) ssh-agent -s
(root,9464,2476,00:00:00/45-11:43:00,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/45-11:43:00,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:01:01/45-11:43:00,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-11:43:01,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/44-11:43:01,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:01:03/44-11:43:01,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-11:43:01,35936) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/6-11:43:01,35973) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:12/6-11:43:01,35974) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-11:43:01,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/43-11:43:01,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:59/43-11:43:01,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-11:43:01,40062) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/5-11:43:01,40099) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:12/5-11:43:01,40100) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-11:43:01,40777) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/4-11:43:01,40814) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:10/4-11:43:01,40815) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-11:43:01,41659) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/3-11:43:01,41697) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7676,00:00:06/3-11:43:01,41698) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-11:43:01,42391) /usr/sbin/CRON -f
(root,43464,7776,00:00:00/2-11:43:01,42428) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7624,00:00:05/2-11:43:01,42429) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-11:43:01,43298) /usr/sbin/CRON -f
(root,43464,7696,00:00:00/1-11:43:01,43335) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7784,00:00:03/1-11:43:01,43336) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11:43:01,44057) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/11:43:01,44094) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:01/11:43:01,44095) /usr/sbin/postdrop -r
(root,0,0,00:00:00/11:42:56,44096) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/11:03:11,44121) [kworker/0:0]
(root,0,0,00:00:00/01:44:38,44399) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/01:44:10,44401) [kworker/2:0]
(root,0,0,00:00:00/58:50,44419) [kworker/u256:1]
(root,0,0,00:00:00/16:53,44438) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/06:30,44441) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/01:19,44442) [kworker/3:1-mm_percpu_wq]
(root,6856,3552,00:00:00/00:00,44501) /bin/bash /usr/bin/check_mk_agent
(root,7636,2740,00:00:00/00:00,44519) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,44520) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/42-11:43:01,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/42-11:43:01,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:01:02/42-11:43:01,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-11:43:01,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/41-11:43:01,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:58/41-11:43:01,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-11:43:01,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/40-11:43:01,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:58/40-11:43:01,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-11:43:01,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/22-11:43:01,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:36/22-11:43:01,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-11:43:01,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/39-11:43:01,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:53/39-11:43:01,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-11:43:01,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/38-11:43:01,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:50/38-11:43:00,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-11:43:00,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/21-11:43:00,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:30/21-11:43:00,71396) /usr/sbin/postdrop -r
(root,221728,5024,01:01:15/20-22:30:39,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/20-11:43:01,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/20-11:43:00,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:39/20-11:43:00,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-11:43:01,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/19-11:43:01,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:29/19-11:43:01,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-11:43:01,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/37-11:43:01,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:56/37-11:43:01,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-11:43:01,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/18-11:43:01,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:30/18-11:43:01,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-11:43:01,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/36-11:43:01,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:53/36-11:43:01,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-11:43:01,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/17-11:43:01,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:32/17-11:43:01,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-11:43:00,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/16-11:43:00,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:31/16-11:43:00,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-11:43:00,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/35-11:43:00,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:50/35-11:43:00,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-11:43:01,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/34-11:43:01,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:47/34-11:43:01,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-11:43:01,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/15-11:43:01,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:28/15-11:43:01,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-11:43:01,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/33-11:43:01,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:54/33-11:43:01,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-11:43:01,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/32-11:43:01,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:43/32-11:43:01,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-11:43:01,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/14-11:43:01,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:21/14-11:43:01,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:13/14-09:35:13,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/31-11:43:01,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/31-11:43:00,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:58/31-11:43:00,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-11:43:01,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/13-11:43:01,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:24/13-11:43:01,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-11:43:01,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/30-11:43:01,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:44/30-11:43:01,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-11:43:01,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/29-11:43:01,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:41/29-11:43:01,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-11:43:01,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/28-11:43:01,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:52/28-11:43:01,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-11:43:01,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/12-11:43:01,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:22/12-11:43:01,108114) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-11:43:00,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/11-11:43:00,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:25/11-11:43:00,114990) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-11:43:01,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/10-11:43:01,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:18/10-11:43:01,123321) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-26 01:08

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbe26119ec

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:08:23/67-03:09:23,1) /sbin/init
(root,0,0,00:00:02/67-03:09:23,2) [kthreadd]
(root,0,0,00:00:00/67-03:09:23,3) [rcu_gp]
(root,0,0,00:00:00/67-03:09:23,4) [rcu_par_gp]
(root,0,0,00:00:00/67-03:09:23,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/67-03:09:23,8) [mm_percpu_wq]
(root,0,0,00:00:28/67-03:09:23,9) [ksoftirqd/0]
(root,0,0,04:18:33/67-03:09:23,10) [rcu_sched]
(root,0,0,00:00:00/67-03:09:23,11) [rcu_bh]
(root,0,0,00:00:23/67-03:09:23,12) [migration/0]
(root,0,0,00:00:00/67-03:09:23,14) [cpuhp/0]
(root,0,0,00:00:00/67-03:09:23,15) [cpuhp/1]
(root,0,0,00:00:18/67-03:09:23,16) [migration/1]
(root,0,0,00:00:25/67-03:09:23,17) [ksoftirqd/1]
(root,0,0,00:00:00/67-03:09:23,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/67-03:09:23,20) [cpuhp/2]
(root,0,0,00:00:19/67-03:09:23,21) [migration/2]
(root,0,0,00:00:40/67-03:09:23,22) [ksoftirqd/2]
(root,0,0,00:00:00/67-03:09:23,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/67-03:09:23,25) [cpuhp/3]
(root,0,0,00:00:22/67-03:09:23,26) [migration/3]
(root,0,0,00:01:53/67-03:09:23,27) [ksoftirqd/3]
(root,0,0,00:00:00/67-03:09:23,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/67-03:09:23,30) [kdevtmpfs]
(root,0,0,00:00:00/67-03:09:23,31) [netns]
(root,0,0,00:00:00/67-03:09:23,32) [kauditd]
(root,0,0,00:00:10/67-03:09:23,35) [khungtaskd]
(root,0,0,00:00:00/67-03:09:23,36) [oom_reaper]
(root,0,0,00:00:00/67-03:09:23,37) [writeback]
(root,0,0,00:00:00/67-03:09:23,38) [kcompactd0]
(root,0,0,00:00:00/67-03:09:23,39) [ksmd]
(root,0,0,00:01:11/67-03:09:23,40) [khugepaged]
(root,0,0,00:00:00/67-03:09:23,41) [crypto]
(root,0,0,00:00:00/67-03:09:23,42) [kintegrityd]
(root,0,0,00:00:00/67-03:09:23,43) [kblockd]
(root,0,0,00:00:00/67-03:09:22,46) [edac-poller]
(root,0,0,00:00:00/67-03:09:22,47) [devfreq_wq]
(root,0,0,00:00:00/67-03:09:22,48) [watchdogd]
(root,0,0,00:00:00/67-03:09:20,49) [kswapd0]
(root,0,0,00:00:00/67-03:09:19,67) [kthrotld]
(root,0,0,00:00:00/67-03:09:19,68) [irq/24-pciehp]
(root,0,0,00:00:00/67-03:09:19,69) [irq/25-pciehp]
(root,0,0,00:00:00/67-03:09:19,70) [irq/26-pciehp]
(root,0,0,00:00:00/67-03:09:19,71) [irq/27-pciehp]
(root,0,0,00:00:00/67-03:09:19,72) [irq/28-pciehp]
(root,0,0,00:00:00/67-03:09:19,73) [irq/29-pciehp]
(root,0,0,00:00:00/67-03:09:19,74) [irq/30-pciehp]
(root,0,0,00:00:00/67-03:09:19,75) [irq/31-pciehp]
(root,0,0,00:00:00/67-03:09:19,76) [irq/32-pciehp]
(root,0,0,00:00:00/67-03:09:19,77) [irq/33-pciehp]
(root,0,0,00:00:00/67-03:09:19,78) [irq/34-pciehp]
(root,0,0,00:00:00/67-03:09:19,79) [irq/35-pciehp]
(root,0,0,00:00:00/67-03:09:19,80) [irq/36-pciehp]
(root,0,0,00:00:00/67-03:09:19,81) [irq/37-pciehp]
(root,0,0,00:00:00/67-03:09:19,82) [irq/38-pciehp]
(root,0,0,00:00:00/67-03:09:19,83) [irq/39-pciehp]
(root,0,0,00:00:00/67-03:09:19,84) [irq/40-pciehp]
(root,0,0,00:00:00/67-03:09:19,85) [irq/41-pciehp]
(root,0,0,00:00:00/67-03:09:19,86) [irq/42-pciehp]
(root,0,0,00:00:00/67-03:09:19,87) [irq/43-pciehp]
(root,0,0,00:00:00/67-03:09:19,88) [irq/44-pciehp]
(root,0,0,00:00:00/67-03:09:19,89) [irq/45-pciehp]
(root,0,0,00:00:00/67-03:09:19,90) [irq/46-pciehp]
(root,0,0,00:00:00/67-03:09:19,91) [irq/47-pciehp]
(root,0,0,00:00:00/67-03:09:19,92) [irq/48-pciehp]
(root,0,0,00:00:00/67-03:09:19,93) [irq/49-pciehp]
(root,0,0,00:00:00/67-03:09:19,94) [irq/50-pciehp]
(root,0,0,00:00:00/67-03:09:19,95) [irq/51-pciehp]
(root,0,0,00:00:00/67-03:09:19,96) [irq/52-pciehp]
(root,0,0,00:00:00/67-03:09:19,97) [irq/53-pciehp]
(root,0,0,00:00:00/67-03:09:19,98) [irq/54-pciehp]
(root,0,0,00:00:00/67-03:09:19,99) [irq/55-pciehp]
(root,0,0,00:00:00/67-03:09:19,100) [ipv6_addrconf]
(root,0,0,00:00:00/67-03:09:19,110) [kstrp]
(root,0,0,00:00:00/67-03:09:16,153) [scsi_eh_0]
(root,0,0,00:00:00/67-03:09:16,154) [scsi_tmf_0]
(root,0,0,00:00:00/67-03:09:16,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/67-03:09:16,158) [ata_sff]
(root,0,0,00:00:00/67-03:09:16,160) [scsi_eh_1]
(root,0,0,00:00:00/67-03:09:16,164) [scsi_tmf_1]
(root,0,0,00:00:00/67-03:09:16,165) [scsi_eh_2]
(root,0,0,00:00:00/67-03:09:16,170) [scsi_tmf_2]
(root,0,0,00:00:01/67-03:09:16,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/67-03:09:16,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:22/67-03:09:16,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/67-03:09:16,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/67-03:09:15,224) [kdmflush]
(root,0,0,00:00:00/67-03:09:15,230) [kdmflush]
(root,0,0,00:00:00/67-03:09:11,258) [kworker/u257:0]
(root,0,0,00:00:00/67-03:09:11,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/67-03:09:11,261) [ext4-rsv-conver]
(root,0,0,00:00:00/67-03:09:09,269) [kdmflush]
(root,0,0,00:00:00/67-03:09:09,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/67-03:09:09,286) [ext4-rsv-conver]
(root,339932,307032,1-05:05:02/67-03:09:04,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:17/67-03:09:04,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/67-03:09:03,473) [ttm_swap]
(root,0,0,00:00:00/67-03:09:03,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/67-03:09:03,511) [kdmflush]
(root,0,0,00:00:00/67-03:09:03,513) [kdmflush]
(root,0,0,00:00:00/67-03:09:03,514) [kdmflush]
(root,0,0,00:00:00/67-03:09:03,516) [kdmflush]
(root,0,0,00:00:00/67-03:09:02,544) [jbd2/sda1-8]
(root,0,0,00:00:00/67-03:09:02,545) [ext4-rsv-conver]
(root,0,0,00:00:00/67-03:09:02,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/67-03:09:02,558) [ext4-rsv-conver]
(root,0,0,00:00:00/67-03:09:02,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/67-03:09:02,562) [ext4-rsv-conver]
(root,0,0,00:00:00/67-03:09:02,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/67-03:09:02,568) [ext4-rsv-conver]
(root,0,0,00:00:02/67-03:09:00,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/67-03:09:00,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:08:36/67-03:08:59,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:27/67-03:08:59,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:22/67-03:08:59,608) /usr/sbin/cron -f
(root,231612,32976,00:07:06/67-03:08:59,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:28:45/67-03:08:59,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/67-03:08:59,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:44/67-03:08:59,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/67-03:08:58,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/67-03:08:58,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:53/67-03:08:58,742) nginx: worker process
(www-data,73236,9848,00:00:00/67-03:08:58,743) nginx: worker process
(www-data,73512,9864,00:00:01/67-03:08:58,744) nginx: worker process
(www-data,73116,9372,00:00:00/67-03:08:58,745) nginx: worker process
(www-data,231896,17304,00:00:03/67-03:08:57,772) php-fpm: pool www
(www-data,231896,17084,00:00:03/67-03:08:57,773) php-fpm: pool www
(root,9464,2476,00:00:00/66-11:28:09,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/66-11:28:08,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:40/66-11:28:08,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/65-11:28:08,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/65-11:28:08,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:32/65-11:28:08,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-11:28:09,3365) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/7-11:28:09,3402) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:10/7-11:28:09,3403) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/64-11:28:09,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/64-11:28:09,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:34/64-11:28:09,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/63-11:28:09,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/63-11:28:09,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:38/63-11:28:09,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/62-11:28:08,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/62-11:28:08,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:26/62-11:28:08,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/61-11:28:09,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/61-11:28:09,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:28/61-11:28:08,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/60-11:28:09,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/60-11:28:09,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:41/60-11:28:09,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/60-06:12:56,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/60-06:12:56,11157) (sd-pam)
(root,5860,2640,00:00:00/60-06:11:40,11180) ssh-agent -s
(root,9464,2476,00:00:00/59-11:28:09,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/59-11:28:09,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:27/59-11:28:09,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/58-11:28:09,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/58-11:28:09,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:20/58-11:28:08,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-11:28:09,13915) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/6-11:28:09,13952) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:13/6-11:28:09,13953) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/57-11:28:09,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/57-11:28:09,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:24/57-11:28:09,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-11:28:08,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/56-11:28:08,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:20/56-11:28:08,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/55-11:28:09,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/55-11:28:09,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:13/55-11:28:09,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-11:28:09,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/54-11:28:09,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:17/54-11:28:09,19368) /usr/sbin/postdrop -r
(root,0,0,00:00:05/5-22:30:03,20723) [kworker/2:1-events]
(root,9464,2476,00:00:00/53-11:28:09,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/53-11:28:09,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:19/53-11:28:09,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-11:28:09,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/52-11:28:08,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:13/52-11:28:08,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-11:28:09,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/25-11:28:09,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:36/25-11:28:09,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-11:28:08,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/24-11:28:08,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:36/24-11:28:08,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-11:28:09,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/51-11:28:09,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:07/51-11:28:09,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-11:28:09,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/23-11:28:08,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:33/23-11:28:08,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-11:28:09,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/50-11:28:09,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:21/50-11:28:09,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-11:28:09,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/22-11:28:09,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:42/22-11:28:09,24989) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-11:28:08,25198) /usr/sbin/CRON -f
(root,5860,2740,00:00:00/50-05:00:20,25220) ssh-agent -s
(root,43464,7504,00:00:00/5-11:28:08,25236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7572,00:00:07/5-11:28:08,25237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-11:28:09,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/21-11:28:09,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:30/21-11:28:09,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-11:28:08,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/49-11:28:08,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:13/49-11:28:08,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-11:28:09,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/48-11:28:09,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:01:07/48-11:28:09,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-11:28:09,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/47-11:28:09,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:01:05/47-11:28:09,28930) /usr/sbin/postdrop -r
(root,0,0,00:05:18/5-02:41:40,29484) [kworker/0:2-events]
(root,9464,2476,00:00:00/46-11:28:08,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/46-11:28:08,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:14/46-11:28:08,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-11:28:09,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/45-11:28:09,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:01:02/45-11:28:09,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-11:28:09,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/44-11:28:09,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:01:04/44-11:28:09,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/44-05:15:25,33348) ssh-agent -s
(root,5860,2676,00:00:00/44-05:14:35,33356) ssh-agent -s
(root,9464,2476,00:00:00/43-11:28:08,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/43-11:28:08,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:58/43-11:28:08,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-11:28:09,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/42-11:28:09,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:01:01/42-11:28:09,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-11:28:09,35936) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/4-11:28:09,35973) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:09/4-11:28:09,35974) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-11:28:09,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/41-11:28:09,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:56/41-11:28:09,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-11:28:09,40062) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/3-11:28:09,40099) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:08/3-11:28:09,40100) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-11:28:09,40777) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/2-11:28:09,40814) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:06/2-11:28:09,40815) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-11:28:09,41659) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/1-11:28:09,41697) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7676,00:00:02/1-11:28:09,41698) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11:28:09,42391) /usr/sbin/CRON -f
(root,43464,7776,00:00:00/11:28:09,42428) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7624,00:00:00/11:28:09,42429) /usr/sbin/postdrop -r
(root,0,0,00:00:00/02:49:36,42674) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/02:49:14,42675) [kworker/0:1-events_power_efficient]
(root,0,0,00:00:00/02:47:46,42677) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:00/02:14:09,42697) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/36:04,42740) [kworker/u256:2-flush-254:0]
(root,0,0,00:00:00/14:53,42748) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/09:42,42751) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/04:30,42753) [kworker/3:1-events]
(root,0,0,00:00:00/00:12,42825) [kworker/u256:0-flush-254:4]
(root,6856,3548,00:00:00/00:00,42866) /bin/bash /usr/bin/check_mk_agent
(root,7636,2712,00:00:00/00:00,42884) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,992,00:00:00/00:00,42885) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/40-11:28:09,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/40-11:28:09,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:59/40-11:28:09,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-11:28:09,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/39-11:28:09,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:56/39-11:28:09,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-11:28:09,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/38-11:28:09,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:55/38-11:28:09,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-11:28:09,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/20-11:28:09,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:33/20-11:28:09,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-11:28:09,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/37-11:28:09,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:50/37-11:28:09,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-11:28:09,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/36-11:28:09,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:47/36-11:28:08,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-11:28:08,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/19-11:28:08,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:27/19-11:28:08,71396) /usr/sbin/postdrop -r
(root,221728,4860,00:54:52/18-22:15:47,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/18-11:28:09,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/18-11:28:08,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:35/18-11:28:08,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-11:28:09,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/17-11:28:09,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:26/17-11:28:09,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-11:28:09,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/35-11:28:09,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:53/35-11:28:09,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-11:28:09,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/16-11:28:09,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:27/16-11:28:09,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-11:28:09,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/34-11:28:09,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:50/34-11:28:09,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-11:28:09,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/15-11:28:09,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:28/15-11:28:09,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-11:28:08,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/14-11:28:08,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:27/14-11:28:08,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-11:28:08,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/33-11:28:08,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:47/33-11:28:08,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-11:28:09,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/32-11:28:09,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:44/32-11:28:09,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-11:28:09,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/13-11:28:09,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:25/13-11:28:09,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-11:28:09,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/31-11:28:09,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:51/31-11:28:09,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-11:28:09,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/30-11:28:09,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:40/30-11:28:09,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-11:28:09,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/12-11:28:09,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:18/12-11:28:09,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:12/12-09:20:21,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/29-11:28:09,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/29-11:28:08,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:54/29-11:28:08,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-11:28:09,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/11-11:28:09,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:21/11-11:28:09,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-11:28:09,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/28-11:28:09,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:42/28-11:28:09,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-11:28:09,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/27-11:28:09,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:38/27-11:28:09,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-11:28:09,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/26-11:28:09,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:48/26-11:28:09,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-11:28:09,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/10-11:28:09,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:19/10-11:28:09,108114) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-11:28:08,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/9-11:28:08,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:20/9-11:28:08,114990) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-11:28:09,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/8-11:28:09,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:15/8-11:28:09,123321) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-24 00:53

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb4a4010ad

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:08:09/65-03:09:34,1) /sbin/init
(root,0,0,00:00:02/65-03:09:34,2) [kthreadd]
(root,0,0,00:00:00/65-03:09:34,3) [rcu_gp]
(root,0,0,00:00:00/65-03:09:34,4) [rcu_par_gp]
(root,0,0,00:00:00/65-03:09:34,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/65-03:09:34,8) [mm_percpu_wq]
(root,0,0,00:00:27/65-03:09:34,9) [ksoftirqd/0]
(root,0,0,04:10:12/65-03:09:34,10) [rcu_sched]
(root,0,0,00:00:00/65-03:09:34,11) [rcu_bh]
(root,0,0,00:00:22/65-03:09:34,12) [migration/0]
(root,0,0,00:00:00/65-03:09:34,14) [cpuhp/0]
(root,0,0,00:00:00/65-03:09:34,15) [cpuhp/1]
(root,0,0,00:00:17/65-03:09:34,16) [migration/1]
(root,0,0,00:00:25/65-03:09:34,17) [ksoftirqd/1]
(root,0,0,00:00:00/65-03:09:34,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/65-03:09:34,20) [cpuhp/2]
(root,0,0,00:00:19/65-03:09:34,21) [migration/2]
(root,0,0,00:00:39/65-03:09:34,22) [ksoftirqd/2]
(root,0,0,00:00:00/65-03:09:34,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/65-03:09:34,25) [cpuhp/3]
(root,0,0,00:00:21/65-03:09:34,26) [migration/3]
(root,0,0,00:01:49/65-03:09:34,27) [ksoftirqd/3]
(root,0,0,00:00:00/65-03:09:34,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/65-03:09:34,30) [kdevtmpfs]
(root,0,0,00:00:00/65-03:09:34,31) [netns]
(root,0,0,00:00:00/65-03:09:34,32) [kauditd]
(root,0,0,00:00:09/65-03:09:34,35) [khungtaskd]
(root,0,0,00:00:00/65-03:09:34,36) [oom_reaper]
(root,0,0,00:00:00/65-03:09:34,37) [writeback]
(root,0,0,00:00:00/65-03:09:34,38) [kcompactd0]
(root,0,0,00:00:00/65-03:09:34,39) [ksmd]
(root,0,0,00:01:09/65-03:09:34,40) [khugepaged]
(root,0,0,00:00:00/65-03:09:34,41) [crypto]
(root,0,0,00:00:00/65-03:09:34,42) [kintegrityd]
(root,0,0,00:00:00/65-03:09:34,43) [kblockd]
(root,0,0,00:00:00/65-03:09:33,46) [edac-poller]
(root,0,0,00:00:00/65-03:09:33,47) [devfreq_wq]
(root,0,0,00:00:00/65-03:09:33,48) [watchdogd]
(root,0,0,00:00:00/65-03:09:31,49) [kswapd0]
(root,0,0,00:00:00/65-03:09:30,67) [kthrotld]
(root,0,0,00:00:00/65-03:09:30,68) [irq/24-pciehp]
(root,0,0,00:00:00/65-03:09:30,69) [irq/25-pciehp]
(root,0,0,00:00:00/65-03:09:30,70) [irq/26-pciehp]
(root,0,0,00:00:00/65-03:09:30,71) [irq/27-pciehp]
(root,0,0,00:00:00/65-03:09:30,72) [irq/28-pciehp]
(root,0,0,00:00:00/65-03:09:30,73) [irq/29-pciehp]
(root,0,0,00:00:00/65-03:09:30,74) [irq/30-pciehp]
(root,0,0,00:00:00/65-03:09:30,75) [irq/31-pciehp]
(root,0,0,00:00:00/65-03:09:30,76) [irq/32-pciehp]
(root,0,0,00:00:00/65-03:09:30,77) [irq/33-pciehp]
(root,0,0,00:00:00/65-03:09:30,78) [irq/34-pciehp]
(root,0,0,00:00:00/65-03:09:30,79) [irq/35-pciehp]
(root,0,0,00:00:00/65-03:09:30,80) [irq/36-pciehp]
(root,0,0,00:00:00/65-03:09:30,81) [irq/37-pciehp]
(root,0,0,00:00:00/65-03:09:30,82) [irq/38-pciehp]
(root,0,0,00:00:00/65-03:09:30,83) [irq/39-pciehp]
(root,0,0,00:00:00/65-03:09:30,84) [irq/40-pciehp]
(root,0,0,00:00:00/65-03:09:30,85) [irq/41-pciehp]
(root,0,0,00:00:00/65-03:09:30,86) [irq/42-pciehp]
(root,0,0,00:00:00/65-03:09:30,87) [irq/43-pciehp]
(root,0,0,00:00:00/65-03:09:30,88) [irq/44-pciehp]
(root,0,0,00:00:00/65-03:09:30,89) [irq/45-pciehp]
(root,0,0,00:00:00/65-03:09:30,90) [irq/46-pciehp]
(root,0,0,00:00:00/65-03:09:30,91) [irq/47-pciehp]
(root,0,0,00:00:00/65-03:09:30,92) [irq/48-pciehp]
(root,0,0,00:00:00/65-03:09:30,93) [irq/49-pciehp]
(root,0,0,00:00:00/65-03:09:30,94) [irq/50-pciehp]
(root,0,0,00:00:00/65-03:09:30,95) [irq/51-pciehp]
(root,0,0,00:00:00/65-03:09:30,96) [irq/52-pciehp]
(root,0,0,00:00:00/65-03:09:30,97) [irq/53-pciehp]
(root,0,0,00:00:00/65-03:09:30,98) [irq/54-pciehp]
(root,0,0,00:00:00/65-03:09:30,99) [irq/55-pciehp]
(root,0,0,00:00:00/65-03:09:30,100) [ipv6_addrconf]
(root,0,0,00:00:00/65-03:09:30,110) [kstrp]
(root,0,0,00:00:00/65-03:09:27,153) [scsi_eh_0]
(root,0,0,00:00:00/65-03:09:27,154) [scsi_tmf_0]
(root,0,0,00:00:00/65-03:09:27,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/65-03:09:27,158) [ata_sff]
(root,0,0,00:00:00/65-03:09:27,160) [scsi_eh_1]
(root,0,0,00:00:00/65-03:09:27,164) [scsi_tmf_1]
(root,0,0,00:00:00/65-03:09:27,165) [scsi_eh_2]
(root,0,0,00:00:00/65-03:09:27,170) [scsi_tmf_2]
(root,0,0,00:00:01/65-03:09:27,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/65-03:09:27,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:22/65-03:09:27,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/65-03:09:27,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/65-03:09:26,224) [kdmflush]
(root,0,0,00:00:00/65-03:09:26,230) [kdmflush]
(root,0,0,00:00:00/65-03:09:22,258) [kworker/u257:0]
(root,0,0,00:00:00/65-03:09:22,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/65-03:09:22,261) [ext4-rsv-conver]
(root,0,0,00:00:00/65-03:09:20,269) [kdmflush]
(root,0,0,00:00:00/65-03:09:20,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/65-03:09:20,286) [ext4-rsv-conver]
(root,323300,285148,1-04:23:44/65-03:09:15,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:17/65-03:09:15,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/65-03:09:14,473) [ttm_swap]
(root,0,0,00:00:00/65-03:09:14,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/65-03:09:14,511) [kdmflush]
(root,0,0,00:00:00/65-03:09:14,513) [kdmflush]
(root,0,0,00:00:00/65-03:09:14,514) [kdmflush]
(root,0,0,00:00:00/65-03:09:14,516) [kdmflush]
(root,0,0,00:00:00/65-03:09:13,544) [jbd2/sda1-8]
(root,0,0,00:00:00/65-03:09:13,545) [ext4-rsv-conver]
(root,0,0,00:00:00/65-03:09:13,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/65-03:09:13,558) [ext4-rsv-conver]
(root,0,0,00:00:00/65-03:09:13,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/65-03:09:13,562) [ext4-rsv-conver]
(root,0,0,00:00:00/65-03:09:13,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/65-03:09:13,568) [ext4-rsv-conver]
(root,0,0,00:00:02/65-03:09:11,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/65-03:09:11,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:08:29/65-03:09:10,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:21/65-03:09:10,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:21/65-03:09:10,608) /usr/sbin/cron -f
(root,231612,32976,00:06:52/65-03:09:10,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:27:51/65-03:09:10,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/65-03:09:10,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:44/65-03:09:10,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/65-03:09:09,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/65-03:09:09,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:42/65-03:09:09,742) nginx: worker process
(www-data,73236,9848,00:00:00/65-03:09:09,743) nginx: worker process
(www-data,73512,9864,00:00:01/65-03:09:09,744) nginx: worker process
(www-data,73116,9372,00:00:00/65-03:09:09,745) nginx: worker process
(www-data,231896,17304,00:00:02/65-03:09:08,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/65-03:09:08,773) php-fpm: pool www
(root,9464,2476,00:00:00/64-11:28:20,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/64-11:28:19,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:37/64-11:28:19,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/63-11:28:19,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/63-11:28:19,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:29/63-11:28:19,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-11:28:20,3365) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/5-11:28:20,3402) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:07/5-11:28:20,3403) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/62-11:28:20,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/62-11:28:20,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:31/62-11:28:20,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/61-11:28:20,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/61-11:28:20,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:35/61-11:28:20,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/60-11:28:19,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/60-11:28:19,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:23/60-11:28:19,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/59-11:28:20,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/59-11:28:20,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:25/59-11:28:19,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/58-11:28:20,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/58-11:28:20,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:38/58-11:28:20,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/58-06:13:07,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/58-06:13:07,11157) (sd-pam)
(root,5860,2640,00:00:00/58-06:11:51,11180) ssh-agent -s
(root,9464,2476,00:00:00/57-11:28:20,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/57-11:28:20,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:24/57-11:28:20,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-11:28:20,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/56-11:28:20,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:17/56-11:28:19,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-11:28:20,13915) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/4-11:28:20,13952) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:09/4-11:28:20,13953) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/55-11:28:20,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/55-11:28:20,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:21/55-11:28:20,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-11:28:19,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/54-11:28:19,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:17/54-11:28:19,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-11:28:20,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/53-11:28:20,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:10/53-11:28:20,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-11:28:20,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/52-11:28:20,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:14/52-11:28:20,19368) /usr/sbin/postdrop -r
(root,0,0,00:00:03/3-22:30:14,20723) [kworker/2:1-events]
(root,9464,2476,00:00:00/51-11:28:20,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/51-11:28:20,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:16/51-11:28:20,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-11:28:20,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/50-11:28:19,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:10/50-11:28:19,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-11:28:20,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/23-11:28:20,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:33/23-11:28:20,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-11:28:19,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/22-11:28:19,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:33/22-11:28:19,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-11:28:20,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/49-11:28:20,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:04/49-11:28:20,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-11:28:20,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/21-11:28:19,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:30/21-11:28:19,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-11:28:20,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/48-11:28:20,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:18/48-11:28:20,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-11:28:20,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/20-11:28:20,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:38/20-11:28:20,24989) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-11:28:19,25198) /usr/sbin/CRON -f
(root,5860,2740,00:00:00/48-05:00:31,25220) ssh-agent -s
(root,43464,7504,00:00:00/3-11:28:19,25236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7572,00:00:04/3-11:28:19,25237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-11:28:20,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/19-11:28:20,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:27/19-11:28:20,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-11:28:19,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/47-11:28:19,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:10/47-11:28:19,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-11:28:20,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/46-11:28:20,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:01:04/46-11:28:20,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-11:28:20,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/45-11:28:20,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:01:02/45-11:28:20,28930) /usr/sbin/postdrop -r
(root,0,0,00:03:10/3-02:41:51,29484) [kworker/0:2-events]
(root,9464,2476,00:00:00/44-11:28:19,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/44-11:28:19,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:11/44-11:28:19,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-11:28:20,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/43-11:28:20,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:59/43-11:28:20,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-11:28:20,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/42-11:28:20,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:01:01/42-11:28:20,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/42-05:15:36,33348) ssh-agent -s
(root,5860,2676,00:00:00/42-05:14:46,33356) ssh-agent -s
(root,9464,2476,00:00:00/41-11:28:19,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/41-11:28:19,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:55/41-11:28:19,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-11:28:20,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/40-11:28:20,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:58/40-11:28:20,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-11:28:20,35936) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/2-11:28:20,35973) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:05/2-11:28:20,35974) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-11:28:20,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/39-11:28:20,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:53/39-11:28:20,38404) /usr/sbin/postdrop -r
(root,0,0,00:00:00/1-22:06:29,38779) [kworker/0:1]
(root,9464,2476,00:00:00/1-11:28:20,40062) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/1-11:28:20,40099) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:03/1-11:28:20,40100) /usr/sbin/postdrop -r
(root,0,0,00:00:00/18:45:02,40554) [kworker/u256:0-flush-254:4]
(root,9464,2476,00:00:00/11:28:20,40777) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/11:28:20,40814) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:01/11:28:20,40815) /usr/sbin/postdrop -r
(root,0,0,00:00:00/02:48:08,41050) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/02:48:03,41051) [kworker/u256:2-flush-254:0]
(root,0,0,00:00:00/02:47:39,41052) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/14:32,41118) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/09:22,41129) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/04:11,41130) [kworker/3:2-events]
(root,6856,3532,00:00:00/00:00,41201) /bin/bash /usr/bin/check_mk_agent
(root,7636,2712,00:00:00/00:00,41219) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,992,00:00:00/00:00,41220) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/38-11:28:20,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/38-11:28:20,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:56/38-11:28:20,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-11:28:20,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/37-11:28:20,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:53/37-11:28:20,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-11:28:20,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/36-11:28:20,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:52/36-11:28:20,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-11:28:20,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/18-11:28:20,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:29/18-11:28:20,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-11:28:20,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/35-11:28:20,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:47/35-11:28:20,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-11:28:20,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/34-11:28:20,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:44/34-11:28:19,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-11:28:19,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/17-11:28:19,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:24/17-11:28:19,71396) /usr/sbin/postdrop -r
(root,221728,4768,00:48:09/16-22:15:58,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/16-11:28:20,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/16-11:28:19,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:32/16-11:28:19,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-11:28:20,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/15-11:28:20,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:23/15-11:28:20,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-11:28:20,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/33-11:28:20,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:50/33-11:28:20,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-11:28:20,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/14-11:28:20,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:23/14-11:28:20,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-11:28:20,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/32-11:28:20,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:47/32-11:28:20,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-11:28:20,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/13-11:28:20,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:25/13-11:28:20,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-11:28:19,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/12-11:28:19,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:24/12-11:28:19,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-11:28:19,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/31-11:28:19,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:44/31-11:28:19,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-11:28:20,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/30-11:28:20,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:41/30-11:28:20,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-11:28:20,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/11-11:28:20,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:22/11-11:28:20,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-11:28:20,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/29-11:28:20,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:47/29-11:28:20,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-11:28:20,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/28-11:28:20,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:38/28-11:28:20,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-11:28:20,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/10-11:28:20,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:15/10-11:28:20,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:10/10-09:20:32,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/27-11:28:20,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/27-11:28:19,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:50/27-11:28:19,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-11:28:20,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/9-11:28:20,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:17/9-11:28:20,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-11:28:20,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/26-11:28:20,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:39/26-11:28:20,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-11:28:20,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/25-11:28:20,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:35/25-11:28:20,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-11:28:20,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/24-11:28:20,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:44/24-11:28:20,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-11:28:20,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/8-11:28:20,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:16/8-11:28:20,108114) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-11:28:19,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/7-11:28:19,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:16/7-11:28:19,114990) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-11:28:20,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/6-11:28:20,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:11/6-11:28:20,123321) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-22 00:53

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb2af6ac4b

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:07:58/63-09:34:31,1) /sbin/init
(root,0,0,00:00:02/63-09:34:31,2) [kthreadd]
(root,0,0,00:00:00/63-09:34:31,3) [rcu_gp]
(root,0,0,00:00:00/63-09:34:31,4) [rcu_par_gp]
(root,0,0,00:00:00/63-09:34:31,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/63-09:34:31,8) [mm_percpu_wq]
(root,0,0,00:00:27/63-09:34:31,9) [ksoftirqd/0]
(root,0,0,04:02:56/63-09:34:31,10) [rcu_sched]
(root,0,0,00:00:00/63-09:34:31,11) [rcu_bh]
(root,0,0,00:00:21/63-09:34:31,12) [migration/0]
(root,0,0,00:00:00/63-09:34:31,14) [cpuhp/0]
(root,0,0,00:00:00/63-09:34:31,15) [cpuhp/1]
(root,0,0,00:00:17/63-09:34:31,16) [migration/1]
(root,0,0,00:00:24/63-09:34:31,17) [ksoftirqd/1]
(root,0,0,00:00:00/63-09:34:31,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/63-09:34:31,20) [cpuhp/2]
(root,0,0,00:00:18/63-09:34:31,21) [migration/2]
(root,0,0,00:00:39/63-09:34:31,22) [ksoftirqd/2]
(root,0,0,00:00:00/63-09:34:31,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/63-09:34:31,25) [cpuhp/3]
(root,0,0,00:00:21/63-09:34:31,26) [migration/3]
(root,0,0,00:01:46/63-09:34:31,27) [ksoftirqd/3]
(root,0,0,00:00:00/63-09:34:31,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/63-09:34:31,30) [kdevtmpfs]
(root,0,0,00:00:00/63-09:34:31,31) [netns]
(root,0,0,00:00:00/63-09:34:31,32) [kauditd]
(root,0,0,00:00:09/63-09:34:31,35) [khungtaskd]
(root,0,0,00:00:00/63-09:34:31,36) [oom_reaper]
(root,0,0,00:00:00/63-09:34:31,37) [writeback]
(root,0,0,00:00:00/63-09:34:31,38) [kcompactd0]
(root,0,0,00:00:00/63-09:34:31,39) [ksmd]
(root,0,0,00:01:08/63-09:34:31,40) [khugepaged]
(root,0,0,00:00:00/63-09:34:31,41) [crypto]
(root,0,0,00:00:00/63-09:34:31,42) [kintegrityd]
(root,0,0,00:00:00/63-09:34:31,43) [kblockd]
(root,0,0,00:00:00/63-09:34:30,46) [edac-poller]
(root,0,0,00:00:00/63-09:34:30,47) [devfreq_wq]
(root,0,0,00:00:00/63-09:34:30,48) [watchdogd]
(root,0,0,00:00:00/63-09:34:28,49) [kswapd0]
(root,0,0,00:00:00/63-09:34:27,67) [kthrotld]
(root,0,0,00:00:00/63-09:34:27,68) [irq/24-pciehp]
(root,0,0,00:00:00/63-09:34:27,69) [irq/25-pciehp]
(root,0,0,00:00:00/63-09:34:27,70) [irq/26-pciehp]
(root,0,0,00:00:00/63-09:34:27,71) [irq/27-pciehp]
(root,0,0,00:00:00/63-09:34:27,72) [irq/28-pciehp]
(root,0,0,00:00:00/63-09:34:27,73) [irq/29-pciehp]
(root,0,0,00:00:00/63-09:34:27,74) [irq/30-pciehp]
(root,0,0,00:00:00/63-09:34:27,75) [irq/31-pciehp]
(root,0,0,00:00:00/63-09:34:27,76) [irq/32-pciehp]
(root,0,0,00:00:00/63-09:34:27,77) [irq/33-pciehp]
(root,0,0,00:00:00/63-09:34:27,78) [irq/34-pciehp]
(root,0,0,00:00:00/63-09:34:27,79) [irq/35-pciehp]
(root,0,0,00:00:00/63-09:34:27,80) [irq/36-pciehp]
(root,0,0,00:00:00/63-09:34:27,81) [irq/37-pciehp]
(root,0,0,00:00:00/63-09:34:27,82) [irq/38-pciehp]
(root,0,0,00:00:00/63-09:34:27,83) [irq/39-pciehp]
(root,0,0,00:00:00/63-09:34:27,84) [irq/40-pciehp]
(root,0,0,00:00:00/63-09:34:27,85) [irq/41-pciehp]
(root,0,0,00:00:00/63-09:34:27,86) [irq/42-pciehp]
(root,0,0,00:00:00/63-09:34:27,87) [irq/43-pciehp]
(root,0,0,00:00:00/63-09:34:27,88) [irq/44-pciehp]
(root,0,0,00:00:00/63-09:34:27,89) [irq/45-pciehp]
(root,0,0,00:00:00/63-09:34:27,90) [irq/46-pciehp]
(root,0,0,00:00:00/63-09:34:27,91) [irq/47-pciehp]
(root,0,0,00:00:00/63-09:34:27,92) [irq/48-pciehp]
(root,0,0,00:00:00/63-09:34:27,93) [irq/49-pciehp]
(root,0,0,00:00:00/63-09:34:27,94) [irq/50-pciehp]
(root,0,0,00:00:00/63-09:34:27,95) [irq/51-pciehp]
(root,0,0,00:00:00/63-09:34:27,96) [irq/52-pciehp]
(root,0,0,00:00:00/63-09:34:27,97) [irq/53-pciehp]
(root,0,0,00:00:00/63-09:34:27,98) [irq/54-pciehp]
(root,0,0,00:00:00/63-09:34:27,99) [irq/55-pciehp]
(root,0,0,00:00:00/63-09:34:27,100) [ipv6_addrconf]
(root,0,0,00:00:00/63-09:34:27,110) [kstrp]
(root,0,0,00:00:00/63-09:34:24,153) [scsi_eh_0]
(root,0,0,00:00:00/63-09:34:24,154) [scsi_tmf_0]
(root,0,0,00:00:00/63-09:34:24,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/63-09:34:24,158) [ata_sff]
(root,0,0,00:00:00/63-09:34:24,160) [scsi_eh_1]
(root,0,0,00:00:00/63-09:34:24,164) [scsi_tmf_1]
(root,0,0,00:00:00/63-09:34:24,165) [scsi_eh_2]
(root,0,0,00:00:00/63-09:34:24,170) [scsi_tmf_2]
(root,0,0,00:00:01/63-09:34:24,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/63-09:34:24,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:21/63-09:34:24,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/63-09:34:24,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/63-09:34:23,224) [kdmflush]
(root,0,0,00:00:00/63-09:34:23,230) [kdmflush]
(root,0,0,00:00:00/63-09:34:19,258) [kworker/u257:0]
(root,0,0,00:00:00/63-09:34:19,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/63-09:34:19,261) [ext4-rsv-conver]
(root,0,0,00:00:00/63-09:34:17,269) [kdmflush]
(root,0,0,00:00:00/63-09:34:17,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/63-09:34:17,286) [ext4-rsv-conver]
(root,307608,273352,1-03:50:05/63-09:34:12,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:16/63-09:34:12,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/63-09:34:11,473) [ttm_swap]
(root,0,0,00:00:00/63-09:34:11,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/63-09:34:11,511) [kdmflush]
(root,0,0,00:00:00/63-09:34:11,513) [kdmflush]
(root,0,0,00:00:00/63-09:34:11,514) [kdmflush]
(root,0,0,00:00:00/63-09:34:11,516) [kdmflush]
(root,0,0,00:00:00/63-09:34:10,544) [jbd2/sda1-8]
(root,0,0,00:00:00/63-09:34:10,545) [ext4-rsv-conver]
(root,0,0,00:00:00/63-09:34:10,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/63-09:34:10,558) [ext4-rsv-conver]
(root,0,0,00:00:00/63-09:34:10,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/63-09:34:10,562) [ext4-rsv-conver]
(root,0,0,00:00:00/63-09:34:10,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/63-09:34:10,568) [ext4-rsv-conver]
(root,0,0,00:00:01/63-09:34:08,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/63-09:34:08,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:08:22/63-09:34:07,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:15/63-09:34:07,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:20/63-09:34:07,608) /usr/sbin/cron -f
(root,231612,32976,00:06:41/63-09:34:07,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:27:05/63-09:34:07,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/63-09:34:07,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:43/63-09:34:07,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/63-09:34:06,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/63-09:34:06,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:39/63-09:34:06,742) nginx: worker process
(www-data,73236,9628,00:00:00/63-09:34:06,743) nginx: worker process
(www-data,73512,9864,00:00:01/63-09:34:06,744) nginx: worker process
(www-data,73116,9372,00:00:00/63-09:34:06,745) nginx: worker process
(www-data,231896,17304,00:00:02/63-09:34:05,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/63-09:34:05,773) php-fpm: pool www
(root,9464,2476,00:00:00/62-17:53:17,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/62-17:53:16,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:35/62-17:53:16,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/61-17:53:16,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/61-17:53:16,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:26/61-17:53:16,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-17:53:17,3365) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/3-17:53:17,3402) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:05/3-17:53:17,3403) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/60-17:53:17,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/60-17:53:17,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:28/60-17:53:17,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/59-17:53:17,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/59-17:53:17,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:32/59-17:53:17,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/58-17:53:16,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/58-17:53:16,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:21/58-17:53:16,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/57-17:53:17,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/57-17:53:17,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:23/57-17:53:16,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-17:53:17,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/56-17:53:17,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:35/56-17:53:17,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/56-12:38:04,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/56-12:38:04,11157) (sd-pam)
(root,5860,2640,00:00:00/56-12:36:48,11180) ssh-agent -s
(root,9464,2476,00:00:00/55-17:53:17,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/55-17:53:17,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:22/55-17:53:17,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-17:53:17,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/54-17:53:17,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:15/54-17:53:16,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-17:53:17,13915) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/2-17:53:17,13952) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:05/2-17:53:17,13953) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-17:53:17,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/53-17:53:17,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:19/53-17:53:17,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-17:53:16,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/52-17:53:16,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:14/52-17:53:16,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-17:53:17,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/51-17:53:17,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:08/51-17:53:17,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-17:53:17,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/50-17:53:17,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:12/50-17:53:17,19368) /usr/sbin/postdrop -r
(root,0,0,00:00:02/2-04:55:11,20723) [kworker/2:1-mm_percpu_wq]
(root,9464,2476,00:00:00/49-17:53:17,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/49-17:53:17,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:14/49-17:53:17,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-17:53:17,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/48-17:53:16,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:08/48-17:53:16,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-17:53:17,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/21-17:53:17,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:30/21-17:53:17,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-17:53:16,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/20-17:53:16,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:31/20-17:53:16,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-17:53:17,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/47-17:53:17,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:02/47-17:53:17,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-17:53:17,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/19-17:53:16,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:27/19-17:53:16,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-17:53:17,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/46-17:53:17,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:15/46-17:53:17,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-17:53:17,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/18-17:53:17,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:34/18-17:53:17,24989) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-17:53:16,25198) /usr/sbin/CRON -f
(root,5860,2740,00:00:00/46-11:25:28,25220) ssh-agent -s
(root,43464,7504,00:00:00/1-17:53:16,25236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7572,00:00:02/1-17:53:16,25237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-17:53:17,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/17-17:53:17,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:25/17-17:53:17,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-17:53:16,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/45-17:53:16,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:08/45-17:53:16,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-17:53:17,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/44-17:53:17,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:01:02/44-17:53:17,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-17:53:17,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/43-17:53:17,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:59/43-17:53:17,28930) /usr/sbin/postdrop -r
(root,0,0,00:01:23/1-09:06:48,29484) [kworker/0:2-events]
(root,9464,2476,00:00:00/42-17:53:16,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/42-17:53:16,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:08/42-17:53:16,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-17:53:17,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/41-17:53:17,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:56/41-17:53:17,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-17:53:17,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/40-17:53:17,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:58/40-17:53:17,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/40-11:40:33,33348) ssh-agent -s
(root,5860,2676,00:00:00/40-11:39:43,33356) ssh-agent -s
(root,9464,2476,00:00:00/39-17:53:16,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/39-17:53:16,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:53/39-17:53:16,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-17:53:17,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/38-17:53:17,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:55/38-17:53:17,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17:53:17,35936) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/17:53:17,35973) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:01/17:53:17,35974) /usr/sbin/postdrop -r
(root,0,0,00:00:00/12:35:05,37337) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/12:33:50,37340) [kworker/2:2]
(root,9464,2476,00:00:00/37-17:53:17,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/37-17:53:17,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:51/37-17:53:17,38404) /usr/sbin/postdrop -r
(root,0,0,00:00:00/04:31:26,38779) [kworker/0:1]
(root,0,0,00:00:00/01:39:06,39030) [kworker/u256:2-flush-254:5]
(root,0,0,00:00:00/18:12,39181) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/15:03,39187) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/09:53,39194) [kworker/3:0-events]
(root,0,0,00:00:00/04:40,39204) [kworker/3:2-ata_sff]
(root,6856,3412,00:00:00/00:00,39341) /bin/bash /usr/bin/check_mk_agent
(root,7636,2728,00:00:00/00:00,39359) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,992,00:00:00/00:00,39360) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/36-17:53:17,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/36-17:53:17,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:54/36-17:53:17,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-17:53:17,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/35-17:53:17,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:50/35-17:53:17,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-17:53:17,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/34-17:53:17,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:50/34-17:53:17,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-17:53:17,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/16-17:53:17,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:26/16-17:53:17,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-17:53:17,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/33-17:53:17,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:45/33-17:53:17,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-17:53:17,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/32-17:53:17,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:42/32-17:53:16,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-17:53:16,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/15-17:53:16,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:22/15-17:53:16,71396) /usr/sbin/postdrop -r
(root,221728,4832,00:42:46/15-04:40:55,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/14-17:53:17,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/14-17:53:16,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:29/14-17:53:16,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-17:53:17,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/13-17:53:17,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:21/13-17:53:17,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-17:53:17,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/31-17:53:17,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:48/31-17:53:17,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-17:53:17,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/12-17:53:17,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:21/12-17:53:17,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-17:53:17,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/30-17:53:17,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:45/30-17:53:17,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-17:53:17,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/11-17:53:17,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:22/11-17:53:17,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-17:53:16,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/10-17:53:16,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:21/10-17:53:16,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-17:53:16,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/29-17:53:16,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:42/29-17:53:16,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-17:53:17,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/28-17:53:17,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:39/28-17:53:17,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-17:53:17,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/9-17:53:17,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:20/9-17:53:17,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-17:53:17,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/27-17:53:17,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:44/27-17:53:17,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-17:53:17,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/26-17:53:17,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:35/26-17:53:17,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-17:53:17,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/8-17:53:17,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:13/8-17:53:17,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:09/8-15:45:29,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/25-17:53:17,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/25-17:53:16,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:47/25-17:53:16,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-17:53:17,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/7-17:53:17,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:14/7-17:53:17,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-17:53:17,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/24-17:53:17,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:36/24-17:53:17,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-17:53:17,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/23-17:53:17,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:32/23-17:53:17,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-17:53:17,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/22-17:53:17,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:41/22-17:53:17,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-17:53:17,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/6-17:53:17,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:14/6-17:53:17,108114) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-17:53:16,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/5-17:53:16,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:12/5-17:53:16,114990) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-17:53:17,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/4-17:53:17,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:08/4-17:53:17,123321) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-20 07:18

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb2d208216

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:07:55/63-00:54:39,1) /sbin/init
(root,0,0,00:00:02/63-00:54:39,2) [kthreadd]
(root,0,0,00:00:00/63-00:54:39,3) [rcu_gp]
(root,0,0,00:00:00/63-00:54:39,4) [rcu_par_gp]
(root,0,0,00:00:00/63-00:54:39,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/63-00:54:39,8) [mm_percpu_wq]
(root,0,0,00:00:27/63-00:54:39,9) [ksoftirqd/0]
(root,0,0,04:01:30/63-00:54:39,10) [rcu_sched]
(root,0,0,00:00:00/63-00:54:39,11) [rcu_bh]
(root,0,0,00:00:21/63-00:54:39,12) [migration/0]
(root,0,0,00:00:00/63-00:54:39,14) [cpuhp/0]
(root,0,0,00:00:00/63-00:54:39,15) [cpuhp/1]
(root,0,0,00:00:16/63-00:54:39,16) [migration/1]
(root,0,0,00:00:24/63-00:54:39,17) [ksoftirqd/1]
(root,0,0,00:00:00/63-00:54:39,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/63-00:54:39,20) [cpuhp/2]
(root,0,0,00:00:18/63-00:54:39,21) [migration/2]
(root,0,0,00:00:39/63-00:54:39,22) [ksoftirqd/2]
(root,0,0,00:00:00/63-00:54:39,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/63-00:54:39,25) [cpuhp/3]
(root,0,0,00:00:21/63-00:54:39,26) [migration/3]
(root,0,0,00:01:46/63-00:54:39,27) [ksoftirqd/3]
(root,0,0,00:00:00/63-00:54:39,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/63-00:54:39,30) [kdevtmpfs]
(root,0,0,00:00:00/63-00:54:39,31) [netns]
(root,0,0,00:00:00/63-00:54:39,32) [kauditd]
(root,0,0,00:00:09/63-00:54:39,35) [khungtaskd]
(root,0,0,00:00:00/63-00:54:39,36) [oom_reaper]
(root,0,0,00:00:00/63-00:54:39,37) [writeback]
(root,0,0,00:00:00/63-00:54:39,38) [kcompactd0]
(root,0,0,00:00:00/63-00:54:39,39) [ksmd]
(root,0,0,00:01:08/63-00:54:39,40) [khugepaged]
(root,0,0,00:00:00/63-00:54:39,41) [crypto]
(root,0,0,00:00:00/63-00:54:39,42) [kintegrityd]
(root,0,0,00:00:00/63-00:54:39,43) [kblockd]
(root,0,0,00:00:00/63-00:54:38,46) [edac-poller]
(root,0,0,00:00:00/63-00:54:38,47) [devfreq_wq]
(root,0,0,00:00:00/63-00:54:38,48) [watchdogd]
(root,0,0,00:00:00/63-00:54:36,49) [kswapd0]
(root,0,0,00:00:00/63-00:54:35,67) [kthrotld]
(root,0,0,00:00:00/63-00:54:35,68) [irq/24-pciehp]
(root,0,0,00:00:00/63-00:54:35,69) [irq/25-pciehp]
(root,0,0,00:00:00/63-00:54:35,70) [irq/26-pciehp]
(root,0,0,00:00:00/63-00:54:35,71) [irq/27-pciehp]
(root,0,0,00:00:00/63-00:54:35,72) [irq/28-pciehp]
(root,0,0,00:00:00/63-00:54:35,73) [irq/29-pciehp]
(root,0,0,00:00:00/63-00:54:35,74) [irq/30-pciehp]
(root,0,0,00:00:00/63-00:54:35,75) [irq/31-pciehp]
(root,0,0,00:00:00/63-00:54:35,76) [irq/32-pciehp]
(root,0,0,00:00:00/63-00:54:35,77) [irq/33-pciehp]
(root,0,0,00:00:00/63-00:54:35,78) [irq/34-pciehp]
(root,0,0,00:00:00/63-00:54:35,79) [irq/35-pciehp]
(root,0,0,00:00:00/63-00:54:35,80) [irq/36-pciehp]
(root,0,0,00:00:00/63-00:54:35,81) [irq/37-pciehp]
(root,0,0,00:00:00/63-00:54:35,82) [irq/38-pciehp]
(root,0,0,00:00:00/63-00:54:35,83) [irq/39-pciehp]
(root,0,0,00:00:00/63-00:54:35,84) [irq/40-pciehp]
(root,0,0,00:00:00/63-00:54:35,85) [irq/41-pciehp]
(root,0,0,00:00:00/63-00:54:35,86) [irq/42-pciehp]
(root,0,0,00:00:00/63-00:54:35,87) [irq/43-pciehp]
(root,0,0,00:00:00/63-00:54:35,88) [irq/44-pciehp]
(root,0,0,00:00:00/63-00:54:35,89) [irq/45-pciehp]
(root,0,0,00:00:00/63-00:54:35,90) [irq/46-pciehp]
(root,0,0,00:00:00/63-00:54:35,91) [irq/47-pciehp]
(root,0,0,00:00:00/63-00:54:35,92) [irq/48-pciehp]
(root,0,0,00:00:00/63-00:54:35,93) [irq/49-pciehp]
(root,0,0,00:00:00/63-00:54:35,94) [irq/50-pciehp]
(root,0,0,00:00:00/63-00:54:35,95) [irq/51-pciehp]
(root,0,0,00:00:00/63-00:54:35,96) [irq/52-pciehp]
(root,0,0,00:00:00/63-00:54:35,97) [irq/53-pciehp]
(root,0,0,00:00:00/63-00:54:35,98) [irq/54-pciehp]
(root,0,0,00:00:00/63-00:54:35,99) [irq/55-pciehp]
(root,0,0,00:00:00/63-00:54:35,100) [ipv6_addrconf]
(root,0,0,00:00:00/63-00:54:35,110) [kstrp]
(root,0,0,00:00:00/63-00:54:32,153) [scsi_eh_0]
(root,0,0,00:00:00/63-00:54:32,154) [scsi_tmf_0]
(root,0,0,00:00:00/63-00:54:32,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/63-00:54:32,158) [ata_sff]
(root,0,0,00:00:00/63-00:54:32,160) [scsi_eh_1]
(root,0,0,00:00:00/63-00:54:32,164) [scsi_tmf_1]
(root,0,0,00:00:00/63-00:54:32,165) [scsi_eh_2]
(root,0,0,00:00:00/63-00:54:32,170) [scsi_tmf_2]
(root,0,0,00:00:01/63-00:54:32,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/63-00:54:32,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:21/63-00:54:32,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/63-00:54:32,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/63-00:54:31,224) [kdmflush]
(root,0,0,00:00:00/63-00:54:31,230) [kdmflush]
(root,0,0,00:00:00/63-00:54:27,258) [kworker/u257:0]
(root,0,0,00:00:00/63-00:54:27,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/63-00:54:27,261) [ext4-rsv-conver]
(root,0,0,00:00:00/63-00:54:25,269) [kdmflush]
(root,0,0,00:00:00/63-00:54:25,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/63-00:54:25,286) [ext4-rsv-conver]
(root,291724,261464,1-03:43:10/63-00:54:20,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:16/63-00:54:20,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/63-00:54:19,473) [ttm_swap]
(root,0,0,00:00:00/63-00:54:19,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/63-00:54:19,511) [kdmflush]
(root,0,0,00:00:00/63-00:54:19,513) [kdmflush]
(root,0,0,00:00:00/63-00:54:19,514) [kdmflush]
(root,0,0,00:00:00/63-00:54:19,516) [kdmflush]
(root,0,0,00:00:00/63-00:54:18,544) [jbd2/sda1-8]
(root,0,0,00:00:00/63-00:54:18,545) [ext4-rsv-conver]
(root,0,0,00:00:00/63-00:54:18,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/63-00:54:18,558) [ext4-rsv-conver]
(root,0,0,00:00:00/63-00:54:18,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/63-00:54:18,562) [ext4-rsv-conver]
(root,0,0,00:00:00/63-00:54:18,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/63-00:54:18,568) [ext4-rsv-conver]
(root,0,0,00:00:01/63-00:54:16,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/63-00:54:16,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:08:20/63-00:54:15,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:14/63-00:54:15,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:20/63-00:54:15,608) /usr/sbin/cron -f
(root,231612,32976,00:06:39/63-00:54:15,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:26:56/63-00:54:15,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/63-00:54:15,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:43/63-00:54:15,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/63-00:54:14,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/63-00:54:14,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:38/63-00:54:14,742) nginx: worker process
(www-data,73236,9628,00:00:00/63-00:54:14,743) nginx: worker process
(www-data,73512,9864,00:00:01/63-00:54:14,744) nginx: worker process
(www-data,73116,9372,00:00:00/63-00:54:14,745) nginx: worker process
(www-data,231896,17304,00:00:02/63-00:54:13,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/63-00:54:13,773) php-fpm: pool www
(root,9464,2476,00:00:00/62-09:13:25,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/62-09:13:24,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:34/62-09:13:24,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/61-09:13:24,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/61-09:13:24,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:26/61-09:13:24,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-09:13:25,3365) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/3-09:13:25,3402) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:04/3-09:13:25,3403) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/60-09:13:25,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/60-09:13:25,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:28/60-09:13:25,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/59-09:13:25,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/59-09:13:25,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:32/59-09:13:25,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/58-09:13:24,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/58-09:13:24,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:20/58-09:13:24,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/57-09:13:25,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/57-09:13:25,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:22/57-09:13:24,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-09:13:25,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/56-09:13:25,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:34/56-09:13:25,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/56-03:58:12,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/56-03:58:12,11157) (sd-pam)
(root,5860,2640,00:00:00/56-03:56:56,11180) ssh-agent -s
(root,9464,2476,00:00:00/55-09:13:25,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/55-09:13:25,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:21/55-09:13:25,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-09:13:25,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/54-09:13:25,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:14/54-09:13:24,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-09:13:25,13915) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/2-09:13:25,13952) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:05/2-09:13:25,13953) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-09:13:25,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/53-09:13:25,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:18/53-09:13:25,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-09:13:24,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/52-09:13:24,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:14/52-09:13:24,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-09:13:25,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/51-09:13:25,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:07/51-09:13:25,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-09:13:25,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/50-09:13:25,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:11/50-09:13:25,19368) /usr/sbin/postdrop -r
(root,0,0,00:00:01/1-20:15:19,20723) [kworker/2:1-events]
(root,9464,2476,00:00:00/49-09:13:25,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/49-09:13:25,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:13/49-09:13:25,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-09:13:25,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/48-09:13:24,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:07/48-09:13:24,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-09:13:25,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/21-09:13:25,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:30/21-09:13:25,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-09:13:24,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/20-09:13:24,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:30/20-09:13:24,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-09:13:25,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/47-09:13:25,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:01/47-09:13:25,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-09:13:25,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/19-09:13:24,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:27/19-09:13:24,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-09:13:25,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/46-09:13:25,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:14/46-09:13:25,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-09:13:25,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/18-09:13:25,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:34/18-09:13:25,24989) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-09:13:24,25198) /usr/sbin/CRON -f
(root,5860,2740,00:00:00/46-02:45:36,25220) ssh-agent -s
(root,43464,7504,00:00:00/1-09:13:24,25236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7572,00:00:01/1-09:13:24,25237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-09:13:25,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/17-09:13:25,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:24/17-09:13:25,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-09:13:24,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/45-09:13:24,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:07/45-09:13:24,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-09:13:25,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/44-09:13:25,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:01:01/44-09:13:25,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-09:13:25,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/43-09:13:25,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:59/43-09:13:25,28930) /usr/sbin/postdrop -r
(root,0,0,00:01:01/1-00:26:56,29484) [kworker/0:2-events]
(root,9464,2476,00:00:00/42-09:13:24,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/42-09:13:24,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:08/42-09:13:24,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-09:13:25,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/41-09:13:25,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:56/41-09:13:25,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-09:13:25,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/40-09:13:25,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:58/40-09:13:25,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/40-03:00:41,33348) ssh-agent -s
(root,5860,2676,00:00:00/40-02:59:51,33356) ssh-agent -s
(root,9464,2476,00:00:00/39-09:13:24,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/39-09:13:24,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:52/39-09:13:24,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-09:13:25,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/38-09:13:25,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:55/38-09:13:25,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/09:13:25,35936) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/09:13:25,35973) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:00/09:13:25,35974) /usr/sbin/postdrop -r
(root,0,0,00:00:00/03:59:15,37314) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/03:55:13,37337) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/03:53:58,37340) [kworker/2:2]
(root,0,0,00:00:00/33:22,37949) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/33:01,37952) [kworker/u256:0-flush-254:0]
(root,0,0,00:00:00/14:02,38003) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/08:49,38018) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/03:39,38030) [kworker/3:2-events]
(root,6856,3524,00:00:00/00:00,38102) /bin/bash /usr/bin/check_mk_agent
(root,7636,2752,00:00:00/00:00,38120) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,38121) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/37-09:13:25,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/37-09:13:25,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:50/37-09:13:25,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-09:13:25,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/36-09:13:25,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:53/36-09:13:25,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-09:13:25,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/35-09:13:25,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:50/35-09:13:25,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-09:13:25,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/34-09:13:25,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:49/34-09:13:25,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-09:13:25,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/16-09:13:25,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:26/16-09:13:25,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-09:13:25,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/33-09:13:25,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:44/33-09:13:25,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-09:13:25,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/32-09:13:25,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:41/32-09:13:24,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-09:13:24,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/15-09:13:24,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:21/15-09:13:24,71396) /usr/sbin/postdrop -r
(root,221728,4832,00:41:39/14-20:01:03,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/14-09:13:25,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/14-09:13:24,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:28/14-09:13:24,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-09:13:25,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/13-09:13:25,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:20/13-09:13:25,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-09:13:25,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/31-09:13:25,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:47/31-09:13:25,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-09:13:25,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/12-09:13:25,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:20/12-09:13:25,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-09:13:25,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/30-09:13:25,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:44/30-09:13:25,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-09:13:25,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/11-09:13:25,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:21/11-09:13:25,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-09:13:24,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/10-09:13:24,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:20/10-09:13:24,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-09:13:24,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/29-09:13:24,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:41/29-09:13:24,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-09:13:25,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/28-09:13:25,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:39/28-09:13:25,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-09:13:25,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/9-09:13:25,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:19/9-09:13:25,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-09:13:25,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/27-09:13:25,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:44/27-09:13:25,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-09:13:25,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/26-09:13:25,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:35/26-09:13:25,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-09:13:25,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/8-09:13:25,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:12/8-09:13:25,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:09/8-07:05:37,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/25-09:13:25,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/25-09:13:24,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:46/25-09:13:24,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-09:13:25,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/7-09:13:25,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:14/7-09:13:25,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-09:13:25,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/24-09:13:25,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:36/24-09:13:25,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-09:13:25,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/23-09:13:25,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:32/23-09:13:25,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-09:13:25,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/22-09:13:25,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:40/22-09:13:25,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-09:13:25,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/6-09:13:25,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:13/6-09:13:25,108114) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-09:13:24,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/5-09:13:24,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:11/5-09:13:24,114990) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-09:13:25,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/4-09:13:25,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:08/4-09:13:25,123321) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-19 22:38

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb6f7e2277

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:07:36/61-00:17:49,1) /sbin/init
(root,0,0,00:00:02/61-00:17:49,2) [kthreadd]
(root,0,0,00:00:00/61-00:17:49,3) [rcu_gp]
(root,0,0,00:00:00/61-00:17:49,4) [rcu_par_gp]
(root,0,0,00:00:00/61-00:17:49,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/61-00:17:49,8) [mm_percpu_wq]
(root,0,0,00:00:26/61-00:17:49,9) [ksoftirqd/0]
(root,0,0,03:53:42/61-00:17:49,10) [rcu_sched]
(root,0,0,00:00:00/61-00:17:49,11) [rcu_bh]
(root,0,0,00:00:21/61-00:17:49,12) [migration/0]
(root,0,0,00:00:00/61-00:17:49,14) [cpuhp/0]
(root,0,0,00:00:00/61-00:17:49,15) [cpuhp/1]
(root,0,0,00:00:16/61-00:17:49,16) [migration/1]
(root,0,0,00:00:24/61-00:17:49,17) [ksoftirqd/1]
(root,0,0,00:00:00/61-00:17:49,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/61-00:17:49,20) [cpuhp/2]
(root,0,0,00:00:18/61-00:17:49,21) [migration/2]
(root,0,0,00:00:38/61-00:17:49,22) [ksoftirqd/2]
(root,0,0,00:00:00/61-00:17:49,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/61-00:17:49,25) [cpuhp/3]
(root,0,0,00:00:20/61-00:17:49,26) [migration/3]
(root,0,0,00:01:43/61-00:17:49,27) [ksoftirqd/3]
(root,0,0,00:00:00/61-00:17:49,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/61-00:17:49,30) [kdevtmpfs]
(root,0,0,00:00:00/61-00:17:49,31) [netns]
(root,0,0,00:00:00/61-00:17:49,32) [kauditd]
(root,0,0,00:00:09/61-00:17:49,35) [khungtaskd]
(root,0,0,00:00:00/61-00:17:49,36) [oom_reaper]
(root,0,0,00:00:00/61-00:17:49,37) [writeback]
(root,0,0,00:00:00/61-00:17:49,38) [kcompactd0]
(root,0,0,00:00:00/61-00:17:49,39) [ksmd]
(root,0,0,00:01:06/61-00:17:49,40) [khugepaged]
(root,0,0,00:00:00/61-00:17:49,41) [crypto]
(root,0,0,00:00:00/61-00:17:49,42) [kintegrityd]
(root,0,0,00:00:00/61-00:17:49,43) [kblockd]
(root,0,0,00:00:00/61-00:17:48,46) [edac-poller]
(root,0,0,00:00:00/61-00:17:48,47) [devfreq_wq]
(root,0,0,00:00:00/61-00:17:48,48) [watchdogd]
(root,0,0,00:00:00/61-00:17:46,49) [kswapd0]
(root,0,0,00:00:00/61-00:17:45,67) [kthrotld]
(root,0,0,00:00:00/61-00:17:45,68) [irq/24-pciehp]
(root,0,0,00:00:00/61-00:17:45,69) [irq/25-pciehp]
(root,0,0,00:00:00/61-00:17:45,70) [irq/26-pciehp]
(root,0,0,00:00:00/61-00:17:45,71) [irq/27-pciehp]
(root,0,0,00:00:00/61-00:17:45,72) [irq/28-pciehp]
(root,0,0,00:00:00/61-00:17:45,73) [irq/29-pciehp]
(root,0,0,00:00:00/61-00:17:45,74) [irq/30-pciehp]
(root,0,0,00:00:00/61-00:17:45,75) [irq/31-pciehp]
(root,0,0,00:00:00/61-00:17:45,76) [irq/32-pciehp]
(root,0,0,00:00:00/61-00:17:45,77) [irq/33-pciehp]
(root,0,0,00:00:00/61-00:17:45,78) [irq/34-pciehp]
(root,0,0,00:00:00/61-00:17:45,79) [irq/35-pciehp]
(root,0,0,00:00:00/61-00:17:45,80) [irq/36-pciehp]
(root,0,0,00:00:00/61-00:17:45,81) [irq/37-pciehp]
(root,0,0,00:00:00/61-00:17:45,82) [irq/38-pciehp]
(root,0,0,00:00:00/61-00:17:45,83) [irq/39-pciehp]
(root,0,0,00:00:00/61-00:17:45,84) [irq/40-pciehp]
(root,0,0,00:00:00/61-00:17:45,85) [irq/41-pciehp]
(root,0,0,00:00:00/61-00:17:45,86) [irq/42-pciehp]
(root,0,0,00:00:00/61-00:17:45,87) [irq/43-pciehp]
(root,0,0,00:00:00/61-00:17:45,88) [irq/44-pciehp]
(root,0,0,00:00:00/61-00:17:45,89) [irq/45-pciehp]
(root,0,0,00:00:00/61-00:17:45,90) [irq/46-pciehp]
(root,0,0,00:00:00/61-00:17:45,91) [irq/47-pciehp]
(root,0,0,00:00:00/61-00:17:45,92) [irq/48-pciehp]
(root,0,0,00:00:00/61-00:17:45,93) [irq/49-pciehp]
(root,0,0,00:00:00/61-00:17:45,94) [irq/50-pciehp]
(root,0,0,00:00:00/61-00:17:45,95) [irq/51-pciehp]
(root,0,0,00:00:00/61-00:17:45,96) [irq/52-pciehp]
(root,0,0,00:00:00/61-00:17:45,97) [irq/53-pciehp]
(root,0,0,00:00:00/61-00:17:45,98) [irq/54-pciehp]
(root,0,0,00:00:00/61-00:17:45,99) [irq/55-pciehp]
(root,0,0,00:00:00/61-00:17:45,100) [ipv6_addrconf]
(root,0,0,00:00:00/61-00:17:45,110) [kstrp]
(root,0,0,00:00:00/61-00:17:42,153) [scsi_eh_0]
(root,0,0,00:00:00/61-00:17:42,154) [scsi_tmf_0]
(root,0,0,00:00:00/61-00:17:42,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/61-00:17:42,158) [ata_sff]
(root,0,0,00:00:00/61-00:17:42,160) [scsi_eh_1]
(root,0,0,00:00:00/61-00:17:42,164) [scsi_tmf_1]
(root,0,0,00:00:00/61-00:17:42,165) [scsi_eh_2]
(root,0,0,00:00:00/61-00:17:42,170) [scsi_tmf_2]
(root,0,0,00:00:01/61-00:17:42,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/61-00:17:42,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:20/61-00:17:42,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/61-00:17:42,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/61-00:17:41,224) [kdmflush]
(root,0,0,00:00:00/61-00:17:41,230) [kdmflush]
(root,0,0,00:00:00/61-00:17:37,258) [kworker/u257:0]
(root,0,0,00:00:00/61-00:17:37,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/61-00:17:37,261) [ext4-rsv-conver]
(root,0,0,00:00:00/61-00:17:35,269) [kdmflush]
(root,0,0,00:00:00/61-00:17:35,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/61-00:17:35,286) [ext4-rsv-conver]
(root,293468,257236,1-03:04:38/61-00:17:30,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:16/61-00:17:30,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/61-00:17:29,473) [ttm_swap]
(root,0,0,00:00:00/61-00:17:29,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/61-00:17:29,511) [kdmflush]
(root,0,0,00:00:00/61-00:17:29,513) [kdmflush]
(root,0,0,00:00:00/61-00:17:29,514) [kdmflush]
(root,0,0,00:00:00/61-00:17:29,516) [kdmflush]
(root,0,0,00:00:00/61-00:17:28,544) [jbd2/sda1-8]
(root,0,0,00:00:00/61-00:17:28,545) [ext4-rsv-conver]
(root,0,0,00:00:00/61-00:17:28,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/61-00:17:28,558) [ext4-rsv-conver]
(root,0,0,00:00:00/61-00:17:28,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/61-00:17:28,562) [ext4-rsv-conver]
(root,0,0,00:00:00/61-00:17:28,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/61-00:17:28,568) [ext4-rsv-conver]
(root,0,0,00:00:01/61-00:17:26,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/61-00:17:26,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:07:52/61-00:17:25,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:08/61-00:17:25,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:19/61-00:17:25,608) /usr/sbin/cron -f
(root,231612,32976,00:06:26/61-00:17:25,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:26:04/61-00:17:25,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/61-00:17:25,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:30/61-00:17:25,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/61-00:17:24,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/61-00:17:24,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:33/61-00:17:24,742) nginx: worker process
(www-data,73236,9628,00:00:00/61-00:17:24,743) nginx: worker process
(www-data,73512,9864,00:00:01/61-00:17:24,744) nginx: worker process
(www-data,73116,9372,00:00:00/61-00:17:24,745) nginx: worker process
(www-data,231896,17304,00:00:02/61-00:17:23,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/61-00:17:23,773) php-fpm: pool www
(root,9464,2476,00:00:00/60-08:36:35,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/60-08:36:34,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:31/60-08:36:34,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/59-08:36:34,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/59-08:36:34,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:23/59-08:36:34,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-08:36:35,3365) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/1-08:36:35,3402) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:02/1-08:36:35,3403) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/58-08:36:35,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/58-08:36:35,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:25/58-08:36:35,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/57-08:36:35,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/57-08:36:35,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:29/57-08:36:35,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-08:36:34,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/56-08:36:34,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:18/56-08:36:34,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/55-08:36:35,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/55-08:36:35,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:19/55-08:36:34,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-08:36:35,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/54-08:36:35,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:31/54-08:36:35,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/54-03:21:22,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/54-03:21:22,11157) (sd-pam)
(root,5860,2640,00:00:00/54-03:20:06,11180) ssh-agent -s
(root,9464,2476,00:00:00/53-08:36:35,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/53-08:36:35,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:18/53-08:36:35,12190) /usr/sbin/postdrop -r
(root,0,0,00:00:00/10:52:57,12621) [kworker/2:0-events]
(root,9464,2476,00:00:00/52-08:36:35,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/52-08:36:35,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:11/52-08:36:34,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/08:36:35,13915) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/08:36:35,13952) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:00/08:36:35,13953) /usr/sbin/postdrop -r
(root,0,0,00:00:00/08:34:51,13977) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/08:34:45,13980) [kworker/1:2]
(root,9464,2476,00:00:00/51-08:36:35,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/51-08:36:35,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:15/51-08:36:35,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-08:36:34,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/50-08:36:34,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:11/50-08:36:34,16525) /usr/sbin/postdrop -r
(root,0,0,00:00:00/01:44:29,17297) [kworker/u256:2-flush-254:5]
(root,0,0,00:00:00/01:22:30,17489) [kworker/u256:0-flush-254:4]
(root,9464,2476,00:00:00/49-08:36:35,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/49-08:36:35,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:05/49-08:36:35,17893) /usr/sbin/postdrop -r
(root,0,0,00:00:00/13:00,18148) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/07:48,18198) [kworker/3:0-events]
(root,0,0,00:00:00/02:37,18248) [kworker/3:1-ata_sff]
(root,6856,3508,00:00:00/00:00,18334) /bin/bash /usr/bin/check_mk_agent
(root,7636,2676,00:00:00/00:00,18352) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,988,00:00:00/00:00,18353) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/48-08:36:35,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/48-08:36:35,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:08/48-08:36:35,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-08:36:35,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/47-08:36:35,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:11/47-08:36:35,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-08:36:35,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/46-08:36:34,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:05/46-08:36:34,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-08:36:35,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/19-08:36:35,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:27/19-08:36:35,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-08:36:34,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/18-08:36:34,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:28/18-08:36:34,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-08:36:35,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/45-08:36:35,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:59/45-08:36:35,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-08:36:35,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/17-08:36:34,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:24/17-08:36:34,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-08:36:35,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/44-08:36:35,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:11/44-08:36:35,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-08:36:35,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/16-08:36:35,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:30/16-08:36:35,24989) /usr/sbin/postdrop -r
(root,5860,2740,00:00:00/44-02:08:46,25220) ssh-agent -s
(root,9464,2476,00:00:00/15-08:36:35,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/15-08:36:35,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:22/15-08:36:35,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-08:36:34,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/43-08:36:34,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:05/43-08:36:34,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-08:36:35,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/42-08:36:35,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:58/42-08:36:35,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-08:36:35,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/41-08:36:35,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:56/41-08:36:35,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-08:36:34,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/40-08:36:34,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:04/40-08:36:34,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-08:36:35,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/39-08:36:35,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:53/39-08:36:35,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-08:36:35,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/38-08:36:35,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:55/38-08:36:35,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/38-02:23:51,33348) ssh-agent -s
(root,5860,2676,00:00:00/38-02:23:01,33356) ssh-agent -s
(root,9464,2476,00:00:00/37-08:36:34,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/37-08:36:34,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:49/37-08:36:34,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-08:36:35,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/36-08:36:35,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:52/36-08:36:35,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-08:36:35,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/35-08:36:35,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:48/35-08:36:35,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-08:36:35,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/34-08:36:35,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:51/34-08:36:35,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-08:36:35,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/33-08:36:35,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:47/33-08:36:35,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-08:36:35,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/32-08:36:35,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:47/32-08:36:35,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-08:36:35,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/14-08:36:35,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:23/14-08:36:35,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-08:36:35,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/31-08:36:35,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:42/31-08:36:35,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-08:36:35,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/30-08:36:35,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:38/30-08:36:34,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-08:36:34,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/13-08:36:34,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:18/13-08:36:34,71396) /usr/sbin/postdrop -r
(root,221728,4792,00:35:23/12-19:24:13,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/12-08:36:35,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/12-08:36:34,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:25/12-08:36:34,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-08:36:35,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/11-08:36:35,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:17/11-08:36:35,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-08:36:35,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/29-08:36:35,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:44/29-08:36:35,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-08:36:35,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/10-08:36:35,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:17/10-08:36:35,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-08:36:35,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/28-08:36:35,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:41/28-08:36:35,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-08:36:35,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/9-08:36:35,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:18/9-08:36:35,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-08:36:34,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/8-08:36:34,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:17/8-08:36:34,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-08:36:34,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/27-08:36:34,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:39/27-08:36:34,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-08:36:35,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/26-08:36:35,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:36/26-08:36:35,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-08:36:35,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/7-08:36:35,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:15/7-08:36:35,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-08:36:35,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/25-08:36:35,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:41/25-08:36:35,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-08:36:35,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/24-08:36:35,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:32/24-08:36:35,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-08:36:35,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/6-08:36:35,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:09/6-08:36:35,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:06/6-06:28:47,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/23-08:36:35,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/23-08:36:34,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:43/23-08:36:34,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-08:36:35,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/5-08:36:35,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:10/5-08:36:35,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-08:36:35,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/22-08:36:35,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:33/22-08:36:35,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-08:36:35,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/21-08:36:35,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:29/21-08:36:35,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-08:36:35,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/20-08:36:35,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:37/20-08:36:35,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-08:36:35,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/4-08:36:35,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:09/4-08:36:35,108114) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-08:36:34,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/3-08:36:34,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:07/3-08:36:34,114990) /usr/sbin/postdrop -r
(root,0,0,00:00:03/2-21:09:41,118598) [kworker/2:2-events]
(root,9464,2476,00:00:00/2-08:36:35,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/2-08:36:35,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:04/2-08:36:35,123321) /usr/sbin/postdrop -r
(root,0,0,00:01:53/1-23:51:12,127025) [kworker/0:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-17 22:02

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb67a4e68c

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:07:18/59-03:43:51,1) /sbin/init
(root,0,0,00:00:02/59-03:43:51,2) [kthreadd]
(root,0,0,00:00:00/59-03:43:51,3) [rcu_gp]
(root,0,0,00:00:00/59-03:43:51,4) [rcu_par_gp]
(root,0,0,00:00:00/59-03:43:51,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/59-03:43:51,8) [mm_percpu_wq]
(root,0,0,00:00:26/59-03:43:51,9) [ksoftirqd/0]
(root,0,0,03:46:54/59-03:43:51,10) [rcu_sched]
(root,0,0,00:00:00/59-03:43:51,11) [rcu_bh]
(root,0,0,00:00:20/59-03:43:51,12) [migration/0]
(root,0,0,00:00:00/59-03:43:51,14) [cpuhp/0]
(root,0,0,00:00:00/59-03:43:51,15) [cpuhp/1]
(root,0,0,00:00:15/59-03:43:51,16) [migration/1]
(root,0,0,00:00:23/59-03:43:51,17) [ksoftirqd/1]
(root,0,0,00:00:00/59-03:43:51,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/59-03:43:51,20) [cpuhp/2]
(root,0,0,00:00:17/59-03:43:51,21) [migration/2]
(root,0,0,00:00:38/59-03:43:51,22) [ksoftirqd/2]
(root,0,0,00:00:00/59-03:43:51,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/59-03:43:51,25) [cpuhp/3]
(root,0,0,00:00:19/59-03:43:51,26) [migration/3]
(root,0,0,00:01:40/59-03:43:51,27) [ksoftirqd/3]
(root,0,0,00:00:00/59-03:43:51,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/59-03:43:51,30) [kdevtmpfs]
(root,0,0,00:00:00/59-03:43:51,31) [netns]
(root,0,0,00:00:00/59-03:43:51,32) [kauditd]
(root,0,0,00:00:08/59-03:43:51,35) [khungtaskd]
(root,0,0,00:00:00/59-03:43:51,36) [oom_reaper]
(root,0,0,00:00:00/59-03:43:51,37) [writeback]
(root,0,0,00:00:00/59-03:43:51,38) [kcompactd0]
(root,0,0,00:00:00/59-03:43:51,39) [ksmd]
(root,0,0,00:01:05/59-03:43:51,40) [khugepaged]
(root,0,0,00:00:00/59-03:43:51,41) [crypto]
(root,0,0,00:00:00/59-03:43:51,42) [kintegrityd]
(root,0,0,00:00:00/59-03:43:51,43) [kblockd]
(root,0,0,00:00:00/59-03:43:50,46) [edac-poller]
(root,0,0,00:00:00/59-03:43:50,47) [devfreq_wq]
(root,0,0,00:00:00/59-03:43:50,48) [watchdogd]
(root,0,0,00:00:00/59-03:43:48,49) [kswapd0]
(root,0,0,00:00:00/59-03:43:47,67) [kthrotld]
(root,0,0,00:00:00/59-03:43:47,68) [irq/24-pciehp]
(root,0,0,00:00:00/59-03:43:47,69) [irq/25-pciehp]
(root,0,0,00:00:00/59-03:43:47,70) [irq/26-pciehp]
(root,0,0,00:00:00/59-03:43:47,71) [irq/27-pciehp]
(root,0,0,00:00:00/59-03:43:47,72) [irq/28-pciehp]
(root,0,0,00:00:00/59-03:43:47,73) [irq/29-pciehp]
(root,0,0,00:00:00/59-03:43:47,74) [irq/30-pciehp]
(root,0,0,00:00:00/59-03:43:47,75) [irq/31-pciehp]
(root,0,0,00:00:00/59-03:43:47,76) [irq/32-pciehp]
(root,0,0,00:00:00/59-03:43:47,77) [irq/33-pciehp]
(root,0,0,00:00:00/59-03:43:47,78) [irq/34-pciehp]
(root,0,0,00:00:00/59-03:43:47,79) [irq/35-pciehp]
(root,0,0,00:00:00/59-03:43:47,80) [irq/36-pciehp]
(root,0,0,00:00:00/59-03:43:47,81) [irq/37-pciehp]
(root,0,0,00:00:00/59-03:43:47,82) [irq/38-pciehp]
(root,0,0,00:00:00/59-03:43:47,83) [irq/39-pciehp]
(root,0,0,00:00:00/59-03:43:47,84) [irq/40-pciehp]
(root,0,0,00:00:00/59-03:43:47,85) [irq/41-pciehp]
(root,0,0,00:00:00/59-03:43:47,86) [irq/42-pciehp]
(root,0,0,00:00:00/59-03:43:47,87) [irq/43-pciehp]
(root,0,0,00:00:00/59-03:43:47,88) [irq/44-pciehp]
(root,0,0,00:00:00/59-03:43:47,89) [irq/45-pciehp]
(root,0,0,00:00:00/59-03:43:47,90) [irq/46-pciehp]
(root,0,0,00:00:00/59-03:43:47,91) [irq/47-pciehp]
(root,0,0,00:00:00/59-03:43:47,92) [irq/48-pciehp]
(root,0,0,00:00:00/59-03:43:47,93) [irq/49-pciehp]
(root,0,0,00:00:00/59-03:43:47,94) [irq/50-pciehp]
(root,0,0,00:00:00/59-03:43:47,95) [irq/51-pciehp]
(root,0,0,00:00:00/59-03:43:47,96) [irq/52-pciehp]
(root,0,0,00:00:00/59-03:43:47,97) [irq/53-pciehp]
(root,0,0,00:00:00/59-03:43:47,98) [irq/54-pciehp]
(root,0,0,00:00:00/59-03:43:47,99) [irq/55-pciehp]
(root,0,0,00:00:00/59-03:43:47,100) [ipv6_addrconf]
(root,0,0,00:00:00/59-03:43:47,110) [kstrp]
(root,0,0,00:00:00/59-03:43:44,153) [scsi_eh_0]
(root,0,0,00:00:00/59-03:43:44,154) [scsi_tmf_0]
(root,0,0,00:00:00/59-03:43:44,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/59-03:43:44,158) [ata_sff]
(root,0,0,00:00:00/59-03:43:44,160) [scsi_eh_1]
(root,0,0,00:00:00/59-03:43:44,164) [scsi_tmf_1]
(root,0,0,00:00:00/59-03:43:44,165) [scsi_eh_2]
(root,0,0,00:00:00/59-03:43:44,170) [scsi_tmf_2]
(root,0,0,00:00:01/59-03:43:44,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/59-03:43:44,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:20/59-03:43:44,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/59-03:43:44,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/59-03:43:43,224) [kdmflush]
(root,0,0,00:00:00/59-03:43:43,230) [kdmflush]
(root,0,0,00:00:00/59-03:43:39,258) [kworker/u257:0]
(root,0,0,00:00:00/59-03:43:39,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/59-03:43:39,261) [ext4-rsv-conver]
(root,0,0,00:00:00/59-03:43:37,269) [kdmflush]
(root,0,0,00:00:00/59-03:43:37,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/59-03:43:37,286) [ext4-rsv-conver]
(root,264400,230492,1-02:31:11/59-03:43:32,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:15/59-03:43:32,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/59-03:43:31,473) [ttm_swap]
(root,0,0,00:00:00/59-03:43:31,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/59-03:43:31,511) [kdmflush]
(root,0,0,00:00:00/59-03:43:31,513) [kdmflush]
(root,0,0,00:00:00/59-03:43:31,514) [kdmflush]
(root,0,0,00:00:00/59-03:43:31,516) [kdmflush]
(root,0,0,00:00:00/59-03:43:30,544) [jbd2/sda1-8]
(root,0,0,00:00:00/59-03:43:30,545) [ext4-rsv-conver]
(root,0,0,00:00:00/59-03:43:30,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/59-03:43:30,558) [ext4-rsv-conver]
(root,0,0,00:00:00/59-03:43:30,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/59-03:43:30,562) [ext4-rsv-conver]
(root,0,0,00:00:00/59-03:43:30,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/59-03:43:30,568) [ext4-rsv-conver]
(root,0,0,00:00:01/59-03:43:28,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/59-03:43:28,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:07:27/59-03:43:27,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:03:02/59-03:43:27,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:19/59-03:43:27,608) /usr/sbin/cron -f
(root,231612,32976,00:06:14/59-03:43:27,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:25:19/59-03:43:27,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/59-03:43:27,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:17/59-03:43:27,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/59-03:43:26,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/59-03:43:26,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:28/59-03:43:26,742) nginx: worker process
(www-data,73236,9628,00:00:00/59-03:43:26,743) nginx: worker process
(www-data,73512,9864,00:00:01/59-03:43:26,744) nginx: worker process
(www-data,73116,9372,00:00:00/59-03:43:26,745) nginx: worker process
(www-data,231896,17304,00:00:02/59-03:43:25,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/59-03:43:25,773) php-fpm: pool www
(root,9464,2476,00:00:00/58-12:02:37,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/58-12:02:36,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:29/58-12:02:36,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/57-12:02:36,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/57-12:02:36,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:21/57-12:02:36,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/56-12:02:37,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/56-12:02:37,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:23/56-12:02:37,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/55-12:02:37,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/55-12:02:37,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:27/55-12:02:37,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-12:02:36,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/54-12:02:36,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:15/54-12:02:36,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-12:02:37,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/53-12:02:37,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:17/53-12:02:36,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-12:02:37,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/52-12:02:37,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:29/52-12:02:37,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/52-06:47:24,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/52-06:47:24,11157) (sd-pam)
(root,5860,2640,00:00:00/52-06:46:08,11180) ssh-agent -s
(root,9464,2476,00:00:00/51-12:02:37,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/51-12:02:37,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:16/51-12:02:37,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-12:02:37,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/50-12:02:37,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:09/50-12:02:36,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-12:02:37,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/49-12:02:37,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:13/49-12:02:37,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-12:02:36,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/48-12:02:36,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:09/48-12:02:36,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-12:02:37,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/47-12:02:37,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:02/47-12:02:37,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-12:02:37,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/46-12:02:37,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:06/46-12:02:37,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-12:02:37,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/45-12:02:37,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:09/45-12:02:37,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-12:02:37,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/44-12:02:36,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:02/44-12:02:36,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-12:02:37,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/17-12:02:37,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:25/17-12:02:37,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-12:02:36,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/16-12:02:36,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:25/16-12:02:36,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-12:02:37,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/43-12:02:37,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:56/43-12:02:37,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-12:02:37,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/15-12:02:36,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:22/15-12:02:36,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-12:02:37,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/42-12:02:37,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:08/42-12:02:37,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-12:02:37,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/14-12:02:37,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:27/14-12:02:37,24989) /usr/sbin/postdrop -r
(root,5860,2740,00:00:00/42-05:34:48,25220) ssh-agent -s
(root,9464,2476,00:00:00/13-12:02:37,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/13-12:02:37,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:19/13-12:02:37,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-12:02:36,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/41-12:02:36,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:02/41-12:02:36,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-12:02:37,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/40-12:02:37,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:56/40-12:02:37,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-12:02:37,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/39-12:02:37,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:54/39-12:02:37,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-12:02:36,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/38-12:02:36,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:01:02/38-12:02:36,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-12:02:37,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/37-12:02:37,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:51/37-12:02:37,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-12:02:37,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/36-12:02:37,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:53/36-12:02:37,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/36-05:49:53,33348) ssh-agent -s
(root,5860,2676,00:00:00/36-05:49:03,33356) ssh-agent -s
(root,9464,2476,00:00:00/35-12:02:36,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/35-12:02:36,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:47/35-12:02:36,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-12:02:37,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/34-12:02:37,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:50/34-12:02:37,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-12:02:37,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/33-12:02:37,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:45/33-12:02:37,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-12:02:37,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/32-12:02:37,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:48/32-12:02:37,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-12:02:37,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/31-12:02:37,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:45/31-12:02:37,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-12:02:37,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/30-12:02:37,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:44/30-12:02:37,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-12:02:37,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/12-12:02:37,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:20/12-12:02:37,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-12:02:37,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/29-12:02:37,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:39/29-12:02:37,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-12:02:37,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/28-12:02:37,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:36/28-12:02:36,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-12:02:36,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/11-12:02:36,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:16/11-12:02:36,71396) /usr/sbin/postdrop -r
(root,221728,4772,00:30:04/10-22:50:15,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/10-12:02:37,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/10-12:02:36,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:21/10-12:02:36,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-12:02:37,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/9-12:02:37,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:15/9-12:02:37,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-12:02:37,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/27-12:02:37,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:42/27-12:02:37,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-12:02:37,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/8-12:02:37,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:14/8-12:02:37,77237) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-12:02:37,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/26-12:02:37,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:39/26-12:02:37,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-12:02:37,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/7-12:02:37,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:15/7-12:02:37,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-12:02:36,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/6-12:02:36,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:13/6-12:02:36,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-12:02:36,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/25-12:02:36,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:36/25-12:02:36,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-12:02:37,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/24-12:02:37,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:34/24-12:02:37,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-12:02:37,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/5-12:02:37,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:12/5-12:02:37,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-12:02:37,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/23-12:02:37,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:38/23-12:02:37,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-12:02:37,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/22-12:02:37,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:30/22-12:02:37,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-12:02:37,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/4-12:02:37,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:07/4-12:02:37,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:04/4-09:54:49,97993) [kworker/1:0-events]
(root,9464,2476,00:00:00/21-12:02:37,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/21-12:02:36,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:39/21-12:02:36,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-12:02:37,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/3-12:02:37,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:07/3-12:02:37,102728) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-12:02:37,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/20-12:02:37,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:31/20-12:02:37,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/19-12:02:37,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/19-12:02:37,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:27/19-12:02:37,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-12:02:37,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/18-12:02:37,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:34/18-12:02:37,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-12:02:37,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/2-12:02:37,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:05/2-12:02:37,108114) /usr/sbin/postdrop -r
(root,0,0,00:02:13/2-08:10:31,109392) [kworker/0:2-events]
(root,9464,2476,00:00:00/1-12:02:36,114952) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/1-12:02:36,114989) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:03/1-12:02:36,114990) /usr/sbin/postdrop -r
(root,0,0,00:00:00/1-04:02:36,117447) [kworker/1:1]
(root,0,0,00:00:01/1-00:35:43,118598) [kworker/2:2-events]
(root,9464,2476,00:00:00/12:02:37,123281) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/12:02:37,123320) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7756,00:00:01/12:02:37,123321) /usr/sbin/postdrop -r
(root,14660,7920,00:00:00/09:03:55,124957) sshd: fcpys [priv]
(fcpys,14944,6064,00:00:00/09:03:41,124963) sshd: fcpys@pts/0
(fcpys,7780,4628,00:00:00/09:03:39,124964) -bash
(root,10472,4044,00:00:00/09:03:34,124973) sudo -i
(root,7648,4524,00:00:00/09:03:30,124974) -bash
(root,13752,6148,00:00:00/06:30:24,125817) ssh llira@132.248.48.176
(root,0,0,00:00:00/03:22:56,126978) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:07/03:17:14,127025) [kworker/0:1-events]
(root,0,0,00:00:00/01:18:16,127693) [kworker/u256:1-flush-254:0]
(root,0,0,00:00:00/16:11,128069) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/10:32,128107) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/05:48,128136) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/04:05,128149) [kworker/u256:2-flush-254:0]
(root,0,0,00:00:00/00:35,128173) [kworker/3:2-events]
(root,6856,3468,00:00:00/00:00,128216) /bin/bash /usr/bin/check_mk_agent
(root,7636,2696,00:00:00/00:00,128234) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,992,00:00:00/00:00,128235) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-16 01:28

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb54586a7b

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:07:00/57-03:07:01,1) /sbin/init
(root,0,0,00:00:02/57-03:07:01,2) [kthreadd]
(root,0,0,00:00:00/57-03:07:01,3) [rcu_gp]
(root,0,0,00:00:00/57-03:07:01,4) [rcu_par_gp]
(root,0,0,00:00:00/57-03:07:01,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/57-03:07:01,8) [mm_percpu_wq]
(root,0,0,00:00:25/57-03:07:01,9) [ksoftirqd/0]
(root,0,0,03:38:28/57-03:07:01,10) [rcu_sched]
(root,0,0,00:00:00/57-03:07:01,11) [rcu_bh]
(root,0,0,00:00:19/57-03:07:01,12) [migration/0]
(root,0,0,00:00:00/57-03:07:01,14) [cpuhp/0]
(root,0,0,00:00:00/57-03:07:01,15) [cpuhp/1]
(root,0,0,00:00:15/57-03:07:01,16) [migration/1]
(root,0,0,00:00:23/57-03:07:01,17) [ksoftirqd/1]
(root,0,0,00:00:00/57-03:07:01,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/57-03:07:01,20) [cpuhp/2]
(root,0,0,00:00:17/57-03:07:01,21) [migration/2]
(root,0,0,00:00:37/57-03:07:01,22) [ksoftirqd/2]
(root,0,0,00:00:00/57-03:07:01,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/57-03:07:01,25) [cpuhp/3]
(root,0,0,00:00:19/57-03:07:01,26) [migration/3]
(root,0,0,00:01:36/57-03:07:01,27) [ksoftirqd/3]
(root,0,0,00:00:00/57-03:07:01,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/57-03:07:01,30) [kdevtmpfs]
(root,0,0,00:00:00/57-03:07:01,31) [netns]
(root,0,0,00:00:00/57-03:07:01,32) [kauditd]
(root,0,0,00:00:08/57-03:07:01,35) [khungtaskd]
(root,0,0,00:00:00/57-03:07:01,36) [oom_reaper]
(root,0,0,00:00:00/57-03:07:01,37) [writeback]
(root,0,0,00:00:00/57-03:07:01,38) [kcompactd0]
(root,0,0,00:00:00/57-03:07:01,39) [ksmd]
(root,0,0,00:01:03/57-03:07:01,40) [khugepaged]
(root,0,0,00:00:00/57-03:07:01,41) [crypto]
(root,0,0,00:00:00/57-03:07:01,42) [kintegrityd]
(root,0,0,00:00:00/57-03:07:01,43) [kblockd]
(root,0,0,00:00:00/57-03:07:00,46) [edac-poller]
(root,0,0,00:00:00/57-03:07:00,47) [devfreq_wq]
(root,0,0,00:00:00/57-03:07:00,48) [watchdogd]
(root,0,0,00:00:00/57-03:06:58,49) [kswapd0]
(root,0,0,00:00:00/57-03:06:57,67) [kthrotld]
(root,0,0,00:00:00/57-03:06:57,68) [irq/24-pciehp]
(root,0,0,00:00:00/57-03:06:57,69) [irq/25-pciehp]
(root,0,0,00:00:00/57-03:06:57,70) [irq/26-pciehp]
(root,0,0,00:00:00/57-03:06:57,71) [irq/27-pciehp]
(root,0,0,00:00:00/57-03:06:57,72) [irq/28-pciehp]
(root,0,0,00:00:00/57-03:06:57,73) [irq/29-pciehp]
(root,0,0,00:00:00/57-03:06:57,74) [irq/30-pciehp]
(root,0,0,00:00:00/57-03:06:57,75) [irq/31-pciehp]
(root,0,0,00:00:00/57-03:06:57,76) [irq/32-pciehp]
(root,0,0,00:00:00/57-03:06:57,77) [irq/33-pciehp]
(root,0,0,00:00:00/57-03:06:57,78) [irq/34-pciehp]
(root,0,0,00:00:00/57-03:06:57,79) [irq/35-pciehp]
(root,0,0,00:00:00/57-03:06:57,80) [irq/36-pciehp]
(root,0,0,00:00:00/57-03:06:57,81) [irq/37-pciehp]
(root,0,0,00:00:00/57-03:06:57,82) [irq/38-pciehp]
(root,0,0,00:00:00/57-03:06:57,83) [irq/39-pciehp]
(root,0,0,00:00:00/57-03:06:57,84) [irq/40-pciehp]
(root,0,0,00:00:00/57-03:06:57,85) [irq/41-pciehp]
(root,0,0,00:00:00/57-03:06:57,86) [irq/42-pciehp]
(root,0,0,00:00:00/57-03:06:57,87) [irq/43-pciehp]
(root,0,0,00:00:00/57-03:06:57,88) [irq/44-pciehp]
(root,0,0,00:00:00/57-03:06:57,89) [irq/45-pciehp]
(root,0,0,00:00:00/57-03:06:57,90) [irq/46-pciehp]
(root,0,0,00:00:00/57-03:06:57,91) [irq/47-pciehp]
(root,0,0,00:00:00/57-03:06:57,92) [irq/48-pciehp]
(root,0,0,00:00:00/57-03:06:57,93) [irq/49-pciehp]
(root,0,0,00:00:00/57-03:06:57,94) [irq/50-pciehp]
(root,0,0,00:00:00/57-03:06:57,95) [irq/51-pciehp]
(root,0,0,00:00:00/57-03:06:57,96) [irq/52-pciehp]
(root,0,0,00:00:00/57-03:06:57,97) [irq/53-pciehp]
(root,0,0,00:00:00/57-03:06:57,98) [irq/54-pciehp]
(root,0,0,00:00:00/57-03:06:57,99) [irq/55-pciehp]
(root,0,0,00:00:00/57-03:06:57,100) [ipv6_addrconf]
(root,0,0,00:00:00/57-03:06:57,110) [kstrp]
(root,0,0,00:00:00/57-03:06:54,153) [scsi_eh_0]
(root,0,0,00:00:00/57-03:06:54,154) [scsi_tmf_0]
(root,0,0,00:00:00/57-03:06:54,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/57-03:06:54,158) [ata_sff]
(root,0,0,00:00:00/57-03:06:54,160) [scsi_eh_1]
(root,0,0,00:00:00/57-03:06:54,164) [scsi_tmf_1]
(root,0,0,00:00:00/57-03:06:54,165) [scsi_eh_2]
(root,0,0,00:00:00/57-03:06:54,170) [scsi_tmf_2]
(root,0,0,00:00:01/57-03:06:54,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/57-03:06:54,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:19/57-03:06:54,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/57-03:06:54,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/57-03:06:53,224) [kdmflush]
(root,0,0,00:00:00/57-03:06:53,230) [kdmflush]
(root,0,0,00:00:00/57-03:06:49,258) [kworker/u257:0]
(root,0,0,00:00:00/57-03:06:49,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/57-03:06:49,261) [ext4-rsv-conver]
(root,0,0,00:00:00/57-03:06:47,269) [kdmflush]
(root,0,0,00:00:00/57-03:06:47,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/57-03:06:47,286) [ext4-rsv-conver]
(root,257536,227824,1-01:54:32/57-03:06:42,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:15/57-03:06:42,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/57-03:06:41,473) [ttm_swap]
(root,0,0,00:00:00/57-03:06:41,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/57-03:06:41,511) [kdmflush]
(root,0,0,00:00:00/57-03:06:41,513) [kdmflush]
(root,0,0,00:00:00/57-03:06:41,514) [kdmflush]
(root,0,0,00:00:00/57-03:06:41,516) [kdmflush]
(root,0,0,00:00:00/57-03:06:40,544) [jbd2/sda1-8]
(root,0,0,00:00:00/57-03:06:40,545) [ext4-rsv-conver]
(root,0,0,00:00:00/57-03:06:40,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/57-03:06:40,558) [ext4-rsv-conver]
(root,0,0,00:00:00/57-03:06:40,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/57-03:06:40,562) [ext4-rsv-conver]
(root,0,0,00:00:00/57-03:06:40,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/57-03:06:40,568) [ext4-rsv-conver]
(root,0,0,00:00:01/57-03:06:38,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/57-03:06:38,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:07:04/57-03:06:37,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:02:56/57-03:06:37,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:18/57-03:06:37,608) /usr/sbin/cron -f
(root,231612,32976,00:06:01/57-03:06:37,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:24:26/57-03:06:37,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/57-03:06:37,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:02:06/57-03:06:37,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/57-03:06:36,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/57-03:06:36,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:22/57-03:06:36,742) nginx: worker process
(www-data,73236,9628,00:00:00/57-03:06:36,743) nginx: worker process
(www-data,73512,9864,00:00:01/57-03:06:36,744) nginx: worker process
(www-data,73116,9372,00:00:00/57-03:06:36,745) nginx: worker process
(www-data,231896,17304,00:00:02/57-03:06:35,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/57-03:06:35,773) php-fpm: pool www
(root,9464,2476,00:00:00/56-11:25:47,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/56-11:25:46,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:27/56-11:25:46,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/55-11:25:46,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/55-11:25:46,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:18/55-11:25:46,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/54-11:25:47,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/54-11:25:47,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:20/54-11:25:47,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-11:25:47,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/53-11:25:47,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:24/53-11:25:47,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-11:25:46,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/52-11:25:46,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:13/52-11:25:46,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-11:25:47,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/51-11:25:47,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:14/51-11:25:46,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-11:25:47,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/50-11:25:47,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:25/50-11:25:47,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/50-06:10:34,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/50-06:10:34,11157) (sd-pam)
(root,5860,2640,00:00:00/50-06:09:18,11180) ssh-agent -s
(root,9464,2476,00:00:00/49-11:25:47,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/49-11:25:47,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:13/49-11:25:47,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-11:25:47,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/48-11:25:47,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:06/48-11:25:46,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-11:25:47,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/47-11:25:47,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:10/47-11:25:47,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-11:25:46,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/46-11:25:46,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:06/46-11:25:46,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-11:25:47,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/45-11:25:47,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:01:00/45-11:25:47,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-11:25:47,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/44-11:25:47,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:03/44-11:25:47,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-11:25:47,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/43-11:25:47,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:06/43-11:25:47,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-11:25:47,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/42-11:25:46,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:01:00/42-11:25:46,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-11:25:47,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/15-11:25:47,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:22/15-11:25:47,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-11:25:46,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/14-11:25:46,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:23/14-11:25:46,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-11:25:47,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/41-11:25:47,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:54/41-11:25:47,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-11:25:47,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/13-11:25:46,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:19/13-11:25:46,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-11:25:47,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/40-11:25:47,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:05/40-11:25:47,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-11:25:47,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/12-11:25:47,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:23/12-11:25:47,24989) /usr/sbin/postdrop -r
(root,5860,2740,00:00:00/40-04:57:58,25220) ssh-agent -s
(root,9464,2476,00:00:00/11-11:25:47,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/11-11:25:47,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:17/11-11:25:47,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-11:25:46,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/39-11:25:46,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:01:00/39-11:25:46,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-11:25:47,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/38-11:25:47,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:53/38-11:25:47,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-11:25:47,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/37-11:25:47,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:51/37-11:25:47,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-11:25:46,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/36-11:25:46,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:58/36-11:25:46,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-11:25:47,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/35-11:25:47,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:48/35-11:25:47,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-11:25:47,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/34-11:25:47,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:50/34-11:25:47,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/34-05:13:03,33348) ssh-agent -s
(root,5860,2676,00:00:00/34-05:12:13,33356) ssh-agent -s
(root,9464,2476,00:00:00/33-11:25:46,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/33-11:25:46,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:44/33-11:25:46,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-11:25:47,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/32-11:25:47,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:47/32-11:25:47,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-11:25:47,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/31-11:25:47,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:43/31-11:25:47,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-11:25:47,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/30-11:25:47,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:46/30-11:25:47,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-11:25:47,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/29-11:25:47,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:42/29-11:25:47,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-11:25:47,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/28-11:25:47,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:42/28-11:25:47,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-11:25:47,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/10-11:25:47,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:17/10-11:25:47,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-11:25:47,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/27-11:25:47,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:37/27-11:25:47,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-11:25:47,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/26-11:25:47,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:33/26-11:25:46,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-11:25:46,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/9-11:25:46,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:13/9-11:25:46,71396) /usr/sbin/postdrop -r
(root,221728,4716,00:24:07/8-22:13:25,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/8-11:25:47,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/8-11:25:46,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:17/8-11:25:46,72913) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-11:25:47,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/7-11:25:47,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:12/7-11:25:47,75207) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-11:25:47,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/25-11:25:47,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:39/25-11:25:47,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-11:25:47,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/6-11:25:47,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:11/6-11:25:47,77237) /usr/sbin/postdrop -r
(root,0,0,00:00:05/6-02:46:16,78062) [kworker/2:1-events]
(root,9464,2476,00:00:00/24-11:25:47,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/24-11:25:47,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:37/24-11:25:47,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-11:25:47,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/5-11:25:47,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:11/5-11:25:47,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-11:25:46,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/4-11:25:46,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:09/4-11:25:46,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-11:25:46,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/23-11:25:46,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:34/23-11:25:46,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-11:25:47,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/22-11:25:47,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:31/22-11:25:47,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-11:25:47,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/3-11:25:47,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:07/3-11:25:47,89072) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-11:25:47,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/21-11:25:47,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:35/21-11:25:47,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-11:25:47,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/20-11:25:47,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:27/20-11:25:47,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-11:25:47,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/2-11:25:47,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:05/2-11:25:47,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:02/2-09:17:59,97993) [kworker/1:0-mm_percpu_wq]
(root,9464,2476,00:00:00/19-11:25:47,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/19-11:25:46,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:36/19-11:25:46,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-11:25:47,102690) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/1-11:25:47,102727) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:03/1-11:25:47,102728) /usr/sbin/postdrop -r
(root,0,0,00:00:47/1-02:45:59,104123) [kworker/0:0-events]
(root,9464,2476,00:00:00/18-11:25:47,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/18-11:25:47,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:28/18-11:25:47,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-11:25:47,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/17-11:25:47,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:24/17-11:25:47,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-11:25:47,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/16-11:25:47,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:30/16-11:25:47,106606) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11:25:47,108076) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/11:25:47,108113) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:01/11:25:47,108114) /usr/sbin/postdrop -r
(root,0,0,00:00:20/07:33:41,109392) [kworker/0:2-events]
(root,0,0,00:00:00/02:46:17,110284) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/02:45:51,110286) [kworker/1:1]
(root,0,0,00:00:00/01:30:23,110608) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/41:36,110766) [kworker/u256:1-flush-254:0]
(root,0,0,00:00:00/20:19,110920) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/09:58,111039) [kworker/3:2-events]
(root,0,0,00:00:00/04:45,111095) [kworker/3:1-ata_sff]
(root,14800,8064,00:00:00/00:04,111144) sshd: unknown [priv]
(sshd,13816,4876,00:00:00/00:04,111145) sshd: unknown [net]
(root,6856,3428,00:00:00/00:00,111205) /bin/bash /usr/bin/check_mk_agent
(root,7636,2692,00:00:00/00:00,111223) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,111224) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-14 00:51

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb5924b341

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:06:44/55-03:05:00,1) /sbin/init
(root,0,0,00:00:02/55-03:05:00,2) [kthreadd]
(root,0,0,00:00:00/55-03:05:00,3) [rcu_gp]
(root,0,0,00:00:00/55-03:05:00,4) [rcu_par_gp]
(root,0,0,00:00:00/55-03:05:00,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/55-03:05:00,8) [mm_percpu_wq]
(root,0,0,00:00:25/55-03:05:00,9) [ksoftirqd/0]
(root,0,0,03:29:52/55-03:05:00,10) [rcu_sched]
(root,0,0,00:00:00/55-03:05:00,11) [rcu_bh]
(root,0,0,00:00:19/55-03:05:00,12) [migration/0]
(root,0,0,00:00:00/55-03:05:00,14) [cpuhp/0]
(root,0,0,00:00:00/55-03:05:00,15) [cpuhp/1]
(root,0,0,00:00:14/55-03:05:00,16) [migration/1]
(root,0,0,00:00:23/55-03:05:00,17) [ksoftirqd/1]
(root,0,0,00:00:00/55-03:05:00,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/55-03:05:00,20) [cpuhp/2]
(root,0,0,00:00:16/55-03:05:00,21) [migration/2]
(root,0,0,00:00:36/55-03:05:00,22) [ksoftirqd/2]
(root,0,0,00:00:00/55-03:05:00,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/55-03:05:00,25) [cpuhp/3]
(root,0,0,00:00:18/55-03:05:00,26) [migration/3]
(root,0,0,00:01:32/55-03:05:00,27) [ksoftirqd/3]
(root,0,0,00:00:00/55-03:05:00,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/55-03:05:00,30) [kdevtmpfs]
(root,0,0,00:00:00/55-03:05:00,31) [netns]
(root,0,0,00:00:00/55-03:05:00,32) [kauditd]
(root,0,0,00:00:08/55-03:05:00,35) [khungtaskd]
(root,0,0,00:00:00/55-03:05:00,36) [oom_reaper]
(root,0,0,00:00:00/55-03:05:00,37) [writeback]
(root,0,0,00:00:00/55-03:05:00,38) [kcompactd0]
(root,0,0,00:00:00/55-03:05:00,39) [ksmd]
(root,0,0,00:01:01/55-03:05:00,40) [khugepaged]
(root,0,0,00:00:00/55-03:05:00,41) [crypto]
(root,0,0,00:00:00/55-03:05:00,42) [kintegrityd]
(root,0,0,00:00:00/55-03:05:00,43) [kblockd]
(root,0,0,00:00:00/55-03:04:59,46) [edac-poller]
(root,0,0,00:00:00/55-03:04:59,47) [devfreq_wq]
(root,0,0,00:00:00/55-03:04:59,48) [watchdogd]
(root,0,0,00:00:00/55-03:04:57,49) [kswapd0]
(root,0,0,00:00:00/55-03:04:56,67) [kthrotld]
(root,0,0,00:00:00/55-03:04:56,68) [irq/24-pciehp]
(root,0,0,00:00:00/55-03:04:56,69) [irq/25-pciehp]
(root,0,0,00:00:00/55-03:04:56,70) [irq/26-pciehp]
(root,0,0,00:00:00/55-03:04:56,71) [irq/27-pciehp]
(root,0,0,00:00:00/55-03:04:56,72) [irq/28-pciehp]
(root,0,0,00:00:00/55-03:04:56,73) [irq/29-pciehp]
(root,0,0,00:00:00/55-03:04:56,74) [irq/30-pciehp]
(root,0,0,00:00:00/55-03:04:56,75) [irq/31-pciehp]
(root,0,0,00:00:00/55-03:04:56,76) [irq/32-pciehp]
(root,0,0,00:00:00/55-03:04:56,77) [irq/33-pciehp]
(root,0,0,00:00:00/55-03:04:56,78) [irq/34-pciehp]
(root,0,0,00:00:00/55-03:04:56,79) [irq/35-pciehp]
(root,0,0,00:00:00/55-03:04:56,80) [irq/36-pciehp]
(root,0,0,00:00:00/55-03:04:56,81) [irq/37-pciehp]
(root,0,0,00:00:00/55-03:04:56,82) [irq/38-pciehp]
(root,0,0,00:00:00/55-03:04:56,83) [irq/39-pciehp]
(root,0,0,00:00:00/55-03:04:56,84) [irq/40-pciehp]
(root,0,0,00:00:00/55-03:04:56,85) [irq/41-pciehp]
(root,0,0,00:00:00/55-03:04:56,86) [irq/42-pciehp]
(root,0,0,00:00:00/55-03:04:56,87) [irq/43-pciehp]
(root,0,0,00:00:00/55-03:04:56,88) [irq/44-pciehp]
(root,0,0,00:00:00/55-03:04:56,89) [irq/45-pciehp]
(root,0,0,00:00:00/55-03:04:56,90) [irq/46-pciehp]
(root,0,0,00:00:00/55-03:04:56,91) [irq/47-pciehp]
(root,0,0,00:00:00/55-03:04:56,92) [irq/48-pciehp]
(root,0,0,00:00:00/55-03:04:56,93) [irq/49-pciehp]
(root,0,0,00:00:00/55-03:04:56,94) [irq/50-pciehp]
(root,0,0,00:00:00/55-03:04:56,95) [irq/51-pciehp]
(root,0,0,00:00:00/55-03:04:56,96) [irq/52-pciehp]
(root,0,0,00:00:00/55-03:04:56,97) [irq/53-pciehp]
(root,0,0,00:00:00/55-03:04:56,98) [irq/54-pciehp]
(root,0,0,00:00:00/55-03:04:56,99) [irq/55-pciehp]
(root,0,0,00:00:00/55-03:04:56,100) [ipv6_addrconf]
(root,0,0,00:00:00/55-03:04:56,110) [kstrp]
(root,0,0,00:00:00/55-03:04:53,153) [scsi_eh_0]
(root,0,0,00:00:00/55-03:04:53,154) [scsi_tmf_0]
(root,0,0,00:00:00/55-03:04:53,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/55-03:04:53,158) [ata_sff]
(root,0,0,00:00:00/55-03:04:53,160) [scsi_eh_1]
(root,0,0,00:00:00/55-03:04:53,164) [scsi_tmf_1]
(root,0,0,00:00:00/55-03:04:53,165) [scsi_eh_2]
(root,0,0,00:00:00/55-03:04:53,170) [scsi_tmf_2]
(root,0,0,00:00:01/55-03:04:53,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/55-03:04:53,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:18/55-03:04:53,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/55-03:04:53,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/55-03:04:52,224) [kdmflush]
(root,0,0,00:00:00/55-03:04:52,230) [kdmflush]
(root,0,0,00:00:00/55-03:04:48,258) [kworker/u257:0]
(root,0,0,00:00:00/55-03:04:48,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/55-03:04:48,261) [ext4-rsv-conver]
(root,0,0,00:00:00/55-03:04:46,269) [kdmflush]
(root,0,0,00:00:00/55-03:04:46,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/55-03:04:46,286) [ext4-rsv-conver]
(root,242488,206628,1-01:19:18/55-03:04:41,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:14/55-03:04:41,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/55-03:04:40,473) [ttm_swap]
(root,0,0,00:00:00/55-03:04:40,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/55-03:04:40,511) [kdmflush]
(root,0,0,00:00:00/55-03:04:40,513) [kdmflush]
(root,0,0,00:00:00/55-03:04:40,514) [kdmflush]
(root,0,0,00:00:00/55-03:04:40,516) [kdmflush]
(root,0,0,00:00:00/55-03:04:39,544) [jbd2/sda1-8]
(root,0,0,00:00:00/55-03:04:39,545) [ext4-rsv-conver]
(root,0,0,00:00:00/55-03:04:39,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/55-03:04:39,558) [ext4-rsv-conver]
(root,0,0,00:00:00/55-03:04:39,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/55-03:04:39,562) [ext4-rsv-conver]
(root,0,0,00:00:00/55-03:04:39,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/55-03:04:39,568) [ext4-rsv-conver]
(root,0,0,00:00:01/55-03:04:37,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/55-03:04:37,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:06:47/55-03:04:36,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:02:50/55-03:04:36,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:17/55-03:04:36,608) /usr/sbin/cron -f
(root,231612,32976,00:05:48/55-03:04:36,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:23:33/55-03:04:36,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/55-03:04:36,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:01:59/55-03:04:36,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/55-03:04:35,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/55-03:04:35,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:18/55-03:04:35,742) nginx: worker process
(www-data,73236,9628,00:00:00/55-03:04:35,743) nginx: worker process
(www-data,73512,9864,00:00:01/55-03:04:35,744) nginx: worker process
(www-data,73116,9372,00:00:00/55-03:04:35,745) nginx: worker process
(www-data,231896,17304,00:00:02/55-03:04:34,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/55-03:04:34,773) php-fpm: pool www
(root,9464,2476,00:00:00/54-11:23:46,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/54-11:23:45,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:24/54-11:23:45,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/53-11:23:45,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/53-11:23:45,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:15/53-11:23:45,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/52-11:23:46,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/52-11:23:46,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:17/52-11:23:46,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-11:23:46,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/51-11:23:46,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:22/51-11:23:46,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-11:23:45,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/50-11:23:45,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:10/50-11:23:45,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-11:23:46,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/49-11:23:46,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:12/49-11:23:45,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-11:23:46,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/48-11:23:46,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:22/48-11:23:46,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/48-06:08:33,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/48-06:08:33,11157) (sd-pam)
(root,5860,2640,00:00:00/48-06:07:17,11180) ssh-agent -s
(root,9464,2476,00:00:00/47-11:23:46,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/47-11:23:46,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:11/47-11:23:46,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-11:23:46,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/46-11:23:46,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:04/46-11:23:45,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-11:23:46,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/45-11:23:46,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:08/45-11:23:46,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-11:23:45,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/44-11:23:45,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:04/44-11:23:45,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-11:23:46,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/43-11:23:46,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:57/43-11:23:46,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-11:23:46,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/42-11:23:46,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:01:01/42-11:23:46,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-11:23:46,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/41-11:23:46,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:03/41-11:23:46,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-11:23:46,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/40-11:23:45,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:57/40-11:23:45,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-11:23:46,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/13-11:23:46,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:19/13-11:23:46,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-11:23:45,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/12-11:23:45,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:20/12-11:23:45,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-11:23:46,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/39-11:23:46,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:51/39-11:23:46,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-11:23:46,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/11-11:23:45,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:17/11-11:23:45,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-11:23:46,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/38-11:23:46,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:02/38-11:23:46,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-11:23:46,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/10-11:23:46,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:19/10-11:23:46,24989) /usr/sbin/postdrop -r
(root,5860,2740,00:00:00/38-04:55:57,25220) ssh-agent -s
(root,9464,2476,00:00:00/9-11:23:46,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/9-11:23:46,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:14/9-11:23:46,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-11:23:45,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/37-11:23:45,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:00:57/37-11:23:45,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-11:23:46,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/36-11:23:46,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:51/36-11:23:46,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-11:23:46,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/35-11:23:46,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:49/35-11:23:46,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-11:23:45,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/34-11:23:45,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:55/34-11:23:45,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-11:23:46,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/33-11:23:46,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:46/33-11:23:46,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-11:23:46,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/32-11:23:46,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:48/32-11:23:46,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/32-05:11:02,33348) ssh-agent -s
(root,5860,2676,00:00:00/32-05:10:12,33356) ssh-agent -s
(root,9464,2476,00:00:00/31-11:23:45,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/31-11:23:45,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:42/31-11:23:45,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-11:23:46,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/30-11:23:46,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:44/30-11:23:46,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-11:23:46,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/29-11:23:46,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:40/29-11:23:46,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-11:23:46,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/28-11:23:46,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:43/28-11:23:46,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-11:23:46,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/27-11:23:46,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:39/27-11:23:46,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-11:23:46,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/26-11:23:46,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:39/26-11:23:46,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-11:23:46,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/8-11:23:46,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:14/8-11:23:46,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-11:23:46,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/25-11:23:46,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:34/25-11:23:46,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-11:23:46,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/24-11:23:46,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:31/24-11:23:45,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-11:23:45,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/7-11:23:45,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:11/7-11:23:45,71396) /usr/sbin/postdrop -r
(root,221728,4716,00:18:17/6-22:11:24,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/6-11:23:46,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/6-11:23:45,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:13/6-11:23:45,72913) /usr/sbin/postdrop -r
(root,0,0,00:00:04/5-11:24:44,75167) [kworker/1:2-events]
(root,9464,2476,00:00:00/5-11:23:46,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/5-11:23:46,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:10/5-11:23:46,75207) /usr/sbin/postdrop -r
(root,0,0,00:05:23/5-10:51:06,75256) [kworker/0:1-events]
(root,9464,2476,00:00:00/23-11:23:46,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/23-11:23:46,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:37/23-11:23:46,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-11:23:46,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/4-11:23:46,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:08/4-11:23:46,77237) /usr/sbin/postdrop -r
(root,0,0,00:00:03/4-02:44:15,78062) [kworker/2:1-events]
(root,9464,2476,00:00:00/22-11:23:46,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/22-11:23:46,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:34/22-11:23:46,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-11:23:46,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/3-11:23:46,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:07/3-11:23:46,79559) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-11:23:45,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/2-11:23:45,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:05/2-11:23:45,81125) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-11:23:45,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/21-11:23:45,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:31/21-11:23:45,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-11:23:46,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/20-11:23:46,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:28/20-11:23:46,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-11:23:46,89034) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/1-11:23:46,89071) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:03/1-11:23:46,89072) /usr/sbin/postdrop -r
(root,0,0,00:00:00/1-10:56:32,89286) [kworker/0:2-events]
(root,9464,2476,00:00:00/19-11:23:46,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/19-11:23:46,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:31/19-11:23:46,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-11:23:46,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/18-11:23:46,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:24/18-11:23:46,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11:23:46,97627) /usr/sbin/CRON -f
(root,43464,7644,00:00:00/11:23:46,97664) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:01/11:23:46,97665) /usr/sbin/postdrop -r
(root,0,0,00:00:00/09:15:58,97993) [kworker/1:0-events]
(root,0,0,00:00:00/02:44:21,99409) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/02:44:16,99410) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/31:35,99889) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/12:37,99951) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/07:25,99970) [kworker/3:2-events]
(root,0,0,00:00:00/02:14,99986) [kworker/3:1-ata_sff]
(root,9464,2476,00:00:00/17-11:23:46,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/17-11:23:45,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:32/17-11:23:45,100035) /usr/sbin/postdrop -r
(root,6856,3496,00:00:00/00:00,100080) /bin/bash /usr/bin/check_mk_agent
(root,7636,2648,00:00:00/00:00,100098) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,100099) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/16-11:23:46,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/16-11:23:46,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:25/16-11:23:46,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-11:23:46,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/15-11:23:46,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:22/15-11:23:46,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-11:23:46,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/14-11:23:46,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:26/14-11:23:46,106606) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-12 00:49

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb93bee8f1

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10336,00:06:26/53-00:37:22,1) /sbin/init
(root,0,0,00:00:02/53-00:37:22,2) [kthreadd]
(root,0,0,00:00:00/53-00:37:22,3) [rcu_gp]
(root,0,0,00:00:00/53-00:37:22,4) [rcu_par_gp]
(root,0,0,00:00:00/53-00:37:22,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/53-00:37:22,8) [mm_percpu_wq]
(root,0,0,00:00:24/53-00:37:22,9) [ksoftirqd/0]
(root,0,0,03:22:02/53-00:37:22,10) [rcu_sched]
(root,0,0,00:00:00/53-00:37:22,11) [rcu_bh]
(root,0,0,00:00:18/53-00:37:22,12) [migration/0]
(root,0,0,00:00:00/53-00:37:22,14) [cpuhp/0]
(root,0,0,00:00:00/53-00:37:22,15) [cpuhp/1]
(root,0,0,00:00:14/53-00:37:22,16) [migration/1]
(root,0,0,00:00:22/53-00:37:22,17) [ksoftirqd/1]
(root,0,0,00:00:00/53-00:37:22,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/53-00:37:22,20) [cpuhp/2]
(root,0,0,00:00:16/53-00:37:22,21) [migration/2]
(root,0,0,00:00:36/53-00:37:22,22) [ksoftirqd/2]
(root,0,0,00:00:00/53-00:37:22,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/53-00:37:22,25) [cpuhp/3]
(root,0,0,00:00:18/53-00:37:22,26) [migration/3]
(root,0,0,00:01:30/53-00:37:22,27) [ksoftirqd/3]
(root,0,0,00:00:00/53-00:37:22,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/53-00:37:22,30) [kdevtmpfs]
(root,0,0,00:00:00/53-00:37:22,31) [netns]
(root,0,0,00:00:00/53-00:37:22,32) [kauditd]
(root,0,0,00:00:07/53-00:37:22,35) [khungtaskd]
(root,0,0,00:00:00/53-00:37:22,36) [oom_reaper]
(root,0,0,00:00:00/53-00:37:22,37) [writeback]
(root,0,0,00:00:00/53-00:37:22,38) [kcompactd0]
(root,0,0,00:00:00/53-00:37:22,39) [ksmd]
(root,0,0,00:00:59/53-00:37:22,40) [khugepaged]
(root,0,0,00:00:00/53-00:37:22,41) [crypto]
(root,0,0,00:00:00/53-00:37:22,42) [kintegrityd]
(root,0,0,00:00:00/53-00:37:22,43) [kblockd]
(root,0,0,00:00:00/53-00:37:21,46) [edac-poller]
(root,0,0,00:00:00/53-00:37:21,47) [devfreq_wq]
(root,0,0,00:00:00/53-00:37:21,48) [watchdogd]
(root,0,0,00:00:00/53-00:37:19,49) [kswapd0]
(root,0,0,00:00:00/53-00:37:18,67) [kthrotld]
(root,0,0,00:00:00/53-00:37:18,68) [irq/24-pciehp]
(root,0,0,00:00:00/53-00:37:18,69) [irq/25-pciehp]
(root,0,0,00:00:00/53-00:37:18,70) [irq/26-pciehp]
(root,0,0,00:00:00/53-00:37:18,71) [irq/27-pciehp]
(root,0,0,00:00:00/53-00:37:18,72) [irq/28-pciehp]
(root,0,0,00:00:00/53-00:37:18,73) [irq/29-pciehp]
(root,0,0,00:00:00/53-00:37:18,74) [irq/30-pciehp]
(root,0,0,00:00:00/53-00:37:18,75) [irq/31-pciehp]
(root,0,0,00:00:00/53-00:37:18,76) [irq/32-pciehp]
(root,0,0,00:00:00/53-00:37:18,77) [irq/33-pciehp]
(root,0,0,00:00:00/53-00:37:18,78) [irq/34-pciehp]
(root,0,0,00:00:00/53-00:37:18,79) [irq/35-pciehp]
(root,0,0,00:00:00/53-00:37:18,80) [irq/36-pciehp]
(root,0,0,00:00:00/53-00:37:18,81) [irq/37-pciehp]
(root,0,0,00:00:00/53-00:37:18,82) [irq/38-pciehp]
(root,0,0,00:00:00/53-00:37:18,83) [irq/39-pciehp]
(root,0,0,00:00:00/53-00:37:18,84) [irq/40-pciehp]
(root,0,0,00:00:00/53-00:37:18,85) [irq/41-pciehp]
(root,0,0,00:00:00/53-00:37:18,86) [irq/42-pciehp]
(root,0,0,00:00:00/53-00:37:18,87) [irq/43-pciehp]
(root,0,0,00:00:00/53-00:37:18,88) [irq/44-pciehp]
(root,0,0,00:00:00/53-00:37:18,89) [irq/45-pciehp]
(root,0,0,00:00:00/53-00:37:18,90) [irq/46-pciehp]
(root,0,0,00:00:00/53-00:37:18,91) [irq/47-pciehp]
(root,0,0,00:00:00/53-00:37:18,92) [irq/48-pciehp]
(root,0,0,00:00:00/53-00:37:18,93) [irq/49-pciehp]
(root,0,0,00:00:00/53-00:37:18,94) [irq/50-pciehp]
(root,0,0,00:00:00/53-00:37:18,95) [irq/51-pciehp]
(root,0,0,00:00:00/53-00:37:18,96) [irq/52-pciehp]
(root,0,0,00:00:00/53-00:37:18,97) [irq/53-pciehp]
(root,0,0,00:00:00/53-00:37:18,98) [irq/54-pciehp]
(root,0,0,00:00:00/53-00:37:18,99) [irq/55-pciehp]
(root,0,0,00:00:00/53-00:37:18,100) [ipv6_addrconf]
(root,0,0,00:00:00/53-00:37:18,110) [kstrp]
(root,0,0,00:00:00/53-00:37:15,153) [scsi_eh_0]
(root,0,0,00:00:00/53-00:37:15,154) [scsi_tmf_0]
(root,0,0,00:00:00/53-00:37:15,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/53-00:37:15,158) [ata_sff]
(root,0,0,00:00:00/53-00:37:15,160) [scsi_eh_1]
(root,0,0,00:00:00/53-00:37:15,164) [scsi_tmf_1]
(root,0,0,00:00:00/53-00:37:15,165) [scsi_eh_2]
(root,0,0,00:00:00/53-00:37:15,170) [scsi_tmf_2]
(root,0,0,00:00:01/53-00:37:15,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/53-00:37:15,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:18/53-00:37:15,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/53-00:37:15,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/53-00:37:14,224) [kdmflush]
(root,0,0,00:00:00/53-00:37:14,230) [kdmflush]
(root,0,0,00:00:00/53-00:37:10,258) [kworker/u257:0]
(root,0,0,00:00:00/53-00:37:10,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/53-00:37:10,261) [ext4-rsv-conver]
(root,0,0,00:00:00/53-00:37:08,269) [kdmflush]
(root,0,0,00:00:00/53-00:37:08,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/53-00:37:08,286) [ext4-rsv-conver]
(root,243412,213916,1-00:43:09/53-00:37:03,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:14/53-00:37:03,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/53-00:37:02,473) [ttm_swap]
(root,0,0,00:00:00/53-00:37:02,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/53-00:37:02,511) [kdmflush]
(root,0,0,00:00:00/53-00:37:02,513) [kdmflush]
(root,0,0,00:00:00/53-00:37:02,514) [kdmflush]
(root,0,0,00:00:00/53-00:37:02,516) [kdmflush]
(root,0,0,00:00:00/53-00:37:01,544) [jbd2/sda1-8]
(root,0,0,00:00:00/53-00:37:01,545) [ext4-rsv-conver]
(root,0,0,00:00:00/53-00:37:01,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/53-00:37:01,558) [ext4-rsv-conver]
(root,0,0,00:00:00/53-00:37:01,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/53-00:37:01,562) [ext4-rsv-conver]
(root,0,0,00:00:00/53-00:37:01,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/53-00:37:01,568) [ext4-rsv-conver]
(root,0,0,00:00:01/53-00:36:59,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/53-00:36:59,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:06:24/53-00:36:58,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:02:43/53-00:36:58,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:16/53-00:36:58,608) /usr/sbin/cron -f
(root,231612,32976,00:05:34/53-00:36:58,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:22:39/53-00:36:58,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/53-00:36:58,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:01:48/53-00:36:58,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/53-00:36:57,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/53-00:36:57,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:10/53-00:36:57,742) nginx: worker process
(www-data,73236,9628,00:00:00/53-00:36:57,743) nginx: worker process
(www-data,73512,9864,00:00:01/53-00:36:57,744) nginx: worker process
(www-data,73116,9372,00:00:00/53-00:36:57,745) nginx: worker process
(www-data,231896,17304,00:00:02/53-00:36:56,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/53-00:36:56,773) php-fpm: pool www
(root,9464,2476,00:00:00/52-08:56:08,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/52-08:56:07,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:21/52-08:56:07,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/51-08:56:07,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/51-08:56:07,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:13/51-08:56:07,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/50-08:56:08,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/50-08:56:08,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:15/50-08:56:08,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-08:56:08,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/49-08:56:08,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:19/49-08:56:08,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-08:56:07,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/48-08:56:07,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:07/48-08:56:07,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-08:56:08,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/47-08:56:08,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:09/47-08:56:07,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-08:56:08,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/46-08:56:08,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:19/46-08:56:08,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/46-03:40:55,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/46-03:40:55,11157) (sd-pam)
(root,5860,2640,00:00:00/46-03:39:39,11180) ssh-agent -s
(root,9464,2476,00:00:00/45-08:56:08,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/45-08:56:08,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:08/45-08:56:08,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-08:56:08,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/44-08:56:08,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:01/44-08:56:07,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-08:56:08,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/43-08:56:08,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:05/43-08:56:08,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-08:56:07,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/42-08:56:07,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:01:01/42-08:56:07,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-08:56:08,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/41-08:56:08,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:54/41-08:56:08,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-08:56:08,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/40-08:56:08,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:00:58/40-08:56:08,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-08:56:08,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/39-08:56:08,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:01:00/39-08:56:08,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-08:56:08,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/38-08:56:07,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:54/38-08:56:07,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-08:56:08,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/11-08:56:08,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:17/11-08:56:08,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-08:56:07,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/10-08:56:07,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:17/10-08:56:07,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-08:56:08,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/37-08:56:08,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:48/37-08:56:08,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-08:56:08,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/9-08:56:07,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:14/9-08:56:07,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-08:56:08,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/36-08:56:08,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:59/36-08:56:08,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-08:56:08,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/8-08:56:08,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:16/8-08:56:08,24989) /usr/sbin/postdrop -r
(root,5860,2740,00:00:00/36-02:28:19,25220) ssh-agent -s
(root,9464,2476,00:00:00/7-08:56:08,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/7-08:56:08,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:11/7-08:56:08,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-08:56:07,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/35-08:56:07,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:00:54/35-08:56:07,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-08:56:08,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/34-08:56:08,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:48/34-08:56:08,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-08:56:08,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/33-08:56:08,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:46/33-08:56:08,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-08:56:07,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/32-08:56:07,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:52/32-08:56:07,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-08:56:08,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/31-08:56:08,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:43/31-08:56:08,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-08:56:08,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/30-08:56:08,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:45/30-08:56:08,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/30-02:43:24,33348) ssh-agent -s
(root,5860,2676,00:00:00/30-02:42:34,33356) ssh-agent -s
(root,9464,2476,00:00:00/29-08:56:07,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/29-08:56:07,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:39/29-08:56:07,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-08:56:08,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/28-08:56:08,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:41/28-08:56:08,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-08:56:08,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/27-08:56:08,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:37/27-08:56:08,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-08:56:08,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/26-08:56:08,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:40/26-08:56:08,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-08:56:08,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/25-08:56:08,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:37/25-08:56:08,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-08:56:08,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/24-08:56:08,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:36/24-08:56:08,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-08:56:08,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/6-08:56:08,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:10/6-08:56:08,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-08:56:08,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/23-08:56:08,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:31/23-08:56:08,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-08:56:08,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/22-08:56:08,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:28/22-08:56:07,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-08:56:07,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/5-08:56:07,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:08/5-08:56:07,71396) /usr/sbin/postdrop -r
(root,221728,4696,00:12:22/4-19:43:46,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/4-08:56:08,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/4-08:56:07,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:09/4-08:56:07,72913) /usr/sbin/postdrop -r
(root,0,0,00:00:02/3-08:57:06,75167) [kworker/1:2-events]
(root,9464,2476,00:00:00/3-08:56:08,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/3-08:56:08,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:07/3-08:56:08,75207) /usr/sbin/postdrop -r
(root,0,0,00:03:18/3-08:23:28,75256) [kworker/0:1-events]
(root,9464,2476,00:00:00/21-08:56:08,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/21-08:56:08,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:34/21-08:56:08,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-08:56:08,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/2-08:56:08,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:05/2-08:56:08,77237) /usr/sbin/postdrop -r
(root,0,0,00:00:01/2-00:16:37,78062) [kworker/2:1-events]
(root,9464,2476,00:00:00/20-08:56:08,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/20-08:56:08,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:31/20-08:56:08,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-08:56:08,79521) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/1-08:56:08,79558) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7600,00:00:02/1-08:56:08,79559) /usr/sbin/postdrop -r
(root,0,0,00:00:00/19:54:14,80750) [kworker/1:0]
(root,9464,2476,00:00:00/08:56:07,81087) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/08:56:07,81124) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7752,00:00:00/08:56:07,81125) /usr/sbin/postdrop -r
(root,0,0,00:00:00/02:31:07,82445) [kworker/0:0]
(root,0,0,00:00:00/02:31:02,82446) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/16:47,83130) [kworker/2:2]
(root,0,0,00:00:00/16:47,83131) [kworker/u256:2-flush-254:0]
(root,0,0,00:00:00/14:55,83138) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/09:45,83165) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/04:32,83193) [kworker/3:1-events]
(root,14800,7952,00:00:00/00:04,83217) sshd: unknown [priv]
(sshd,13816,4964,00:00:00/00:04,83218) sshd: unknown [net]
(root,14516,7708,00:00:00/00:03,83219) sshd: root [priv]
(sshd,13816,4800,00:00:00/00:03,83220) sshd: root [net]
(root,6856,3484,00:00:00/00:00,83305) /bin/bash /usr/bin/check_mk_agent
(root,7636,2588,00:00:00/00:00,83323) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,992,00:00:00/00:00,83324) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/19-08:56:07,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/19-08:56:07,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:28/19-08:56:07,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-08:56:08,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/18-08:56:08,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:26/18-08:56:08,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-08:56:08,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/17-08:56:08,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:28/17-08:56:08,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-08:56:08,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/16-08:56:08,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:21/16-08:56:08,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-08:56:08,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/15-08:56:07,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:28/15-08:56:07,100035) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-08:56:08,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/14-08:56:08,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:23/14-08:56:08,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-08:56:08,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/13-08:56:08,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:19/13-08:56:08,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-08:56:08,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/12-08:56:08,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:23/12-08:56:08,106606) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-09 22:21

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb06b00c18

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10324,00:06:13/51-02:35:59,1) /sbin/init
(root,0,0,00:00:01/51-02:35:59,2) [kthreadd]
(root,0,0,00:00:00/51-02:35:59,3) [rcu_gp]
(root,0,0,00:00:00/51-02:35:59,4) [rcu_par_gp]
(root,0,0,00:00:00/51-02:35:59,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/51-02:35:59,8) [mm_percpu_wq]
(root,0,0,00:00:24/51-02:35:59,9) [ksoftirqd/0]
(root,0,0,03:14:38/51-02:35:59,10) [rcu_sched]
(root,0,0,00:00:00/51-02:35:59,11) [rcu_bh]
(root,0,0,00:00:18/51-02:35:59,12) [migration/0]
(root,0,0,00:00:00/51-02:35:59,14) [cpuhp/0]
(root,0,0,00:00:00/51-02:35:59,15) [cpuhp/1]
(root,0,0,00:00:13/51-02:35:59,16) [migration/1]
(root,0,0,00:00:22/51-02:35:59,17) [ksoftirqd/1]
(root,0,0,00:00:00/51-02:35:59,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/51-02:35:59,20) [cpuhp/2]
(root,0,0,00:00:15/51-02:35:59,21) [migration/2]
(root,0,0,00:00:35/51-02:35:59,22) [ksoftirqd/2]
(root,0,0,00:00:00/51-02:35:59,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/51-02:35:59,25) [cpuhp/3]
(root,0,0,00:00:17/51-02:35:59,26) [migration/3]
(root,0,0,00:01:27/51-02:35:59,27) [ksoftirqd/3]
(root,0,0,00:00:00/51-02:35:59,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/51-02:35:59,30) [kdevtmpfs]
(root,0,0,00:00:00/51-02:35:59,31) [netns]
(root,0,0,00:00:00/51-02:35:59,32) [kauditd]
(root,0,0,00:00:07/51-02:35:59,35) [khungtaskd]
(root,0,0,00:00:00/51-02:35:59,36) [oom_reaper]
(root,0,0,00:00:00/51-02:35:59,37) [writeback]
(root,0,0,00:00:00/51-02:35:59,38) [kcompactd0]
(root,0,0,00:00:00/51-02:35:59,39) [ksmd]
(root,0,0,00:00:58/51-02:35:59,40) [khugepaged]
(root,0,0,00:00:00/51-02:35:59,41) [crypto]
(root,0,0,00:00:00/51-02:35:59,42) [kintegrityd]
(root,0,0,00:00:00/51-02:35:59,43) [kblockd]
(root,0,0,00:00:00/51-02:35:58,46) [edac-poller]
(root,0,0,00:00:00/51-02:35:58,47) [devfreq_wq]
(root,0,0,00:00:00/51-02:35:58,48) [watchdogd]
(root,0,0,00:00:00/51-02:35:56,49) [kswapd0]
(root,0,0,00:00:00/51-02:35:55,67) [kthrotld]
(root,0,0,00:00:00/51-02:35:55,68) [irq/24-pciehp]
(root,0,0,00:00:00/51-02:35:55,69) [irq/25-pciehp]
(root,0,0,00:00:00/51-02:35:55,70) [irq/26-pciehp]
(root,0,0,00:00:00/51-02:35:55,71) [irq/27-pciehp]
(root,0,0,00:00:00/51-02:35:55,72) [irq/28-pciehp]
(root,0,0,00:00:00/51-02:35:55,73) [irq/29-pciehp]
(root,0,0,00:00:00/51-02:35:55,74) [irq/30-pciehp]
(root,0,0,00:00:00/51-02:35:55,75) [irq/31-pciehp]
(root,0,0,00:00:00/51-02:35:55,76) [irq/32-pciehp]
(root,0,0,00:00:00/51-02:35:55,77) [irq/33-pciehp]
(root,0,0,00:00:00/51-02:35:55,78) [irq/34-pciehp]
(root,0,0,00:00:00/51-02:35:55,79) [irq/35-pciehp]
(root,0,0,00:00:00/51-02:35:55,80) [irq/36-pciehp]
(root,0,0,00:00:00/51-02:35:55,81) [irq/37-pciehp]
(root,0,0,00:00:00/51-02:35:55,82) [irq/38-pciehp]
(root,0,0,00:00:00/51-02:35:55,83) [irq/39-pciehp]
(root,0,0,00:00:00/51-02:35:55,84) [irq/40-pciehp]
(root,0,0,00:00:00/51-02:35:55,85) [irq/41-pciehp]
(root,0,0,00:00:00/51-02:35:55,86) [irq/42-pciehp]
(root,0,0,00:00:00/51-02:35:55,87) [irq/43-pciehp]
(root,0,0,00:00:00/51-02:35:55,88) [irq/44-pciehp]
(root,0,0,00:00:00/51-02:35:55,89) [irq/45-pciehp]
(root,0,0,00:00:00/51-02:35:55,90) [irq/46-pciehp]
(root,0,0,00:00:00/51-02:35:55,91) [irq/47-pciehp]
(root,0,0,00:00:00/51-02:35:55,92) [irq/48-pciehp]
(root,0,0,00:00:00/51-02:35:55,93) [irq/49-pciehp]
(root,0,0,00:00:00/51-02:35:55,94) [irq/50-pciehp]
(root,0,0,00:00:00/51-02:35:55,95) [irq/51-pciehp]
(root,0,0,00:00:00/51-02:35:55,96) [irq/52-pciehp]
(root,0,0,00:00:00/51-02:35:55,97) [irq/53-pciehp]
(root,0,0,00:00:00/51-02:35:55,98) [irq/54-pciehp]
(root,0,0,00:00:00/51-02:35:55,99) [irq/55-pciehp]
(root,0,0,00:00:00/51-02:35:55,100) [ipv6_addrconf]
(root,0,0,00:00:00/51-02:35:55,110) [kstrp]
(root,0,0,00:00:00/51-02:35:52,153) [scsi_eh_0]
(root,0,0,00:00:00/51-02:35:52,154) [scsi_tmf_0]
(root,0,0,00:00:00/51-02:35:52,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/51-02:35:52,158) [ata_sff]
(root,0,0,00:00:00/51-02:35:52,160) [scsi_eh_1]
(root,0,0,00:00:00/51-02:35:52,164) [scsi_tmf_1]
(root,0,0,00:00:00/51-02:35:52,165) [scsi_eh_2]
(root,0,0,00:00:00/51-02:35:52,170) [scsi_tmf_2]
(root,0,0,00:00:01/51-02:35:52,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/51-02:35:52,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:17/51-02:35:52,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/51-02:35:52,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/51-02:35:51,224) [kdmflush]
(root,0,0,00:00:00/51-02:35:51,230) [kdmflush]
(root,0,0,00:00:00/51-02:35:47,258) [kworker/u257:0]
(root,0,0,00:00:00/51-02:35:47,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/51-02:35:47,261) [ext4-rsv-conver]
(root,0,0,00:00:00/51-02:35:45,269) [kdmflush]
(root,0,0,00:00:00/51-02:35:45,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/51-02:35:45,286) [ext4-rsv-conver]
(root,250836,211708,1-00:11:56/51-02:35:40,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:13/51-02:35:40,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/51-02:35:39,473) [ttm_swap]
(root,0,0,00:00:00/51-02:35:39,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/51-02:35:39,511) [kdmflush]
(root,0,0,00:00:00/51-02:35:39,513) [kdmflush]
(root,0,0,00:00:00/51-02:35:39,514) [kdmflush]
(root,0,0,00:00:00/51-02:35:39,516) [kdmflush]
(root,0,0,00:00:00/51-02:35:38,544) [jbd2/sda1-8]
(root,0,0,00:00:00/51-02:35:38,545) [ext4-rsv-conver]
(root,0,0,00:00:00/51-02:35:38,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/51-02:35:38,558) [ext4-rsv-conver]
(root,0,0,00:00:00/51-02:35:38,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/51-02:35:38,562) [ext4-rsv-conver]
(root,0,0,00:00:00/51-02:35:38,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/51-02:35:38,568) [ext4-rsv-conver]
(root,0,0,00:00:01/51-02:35:36,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/51-02:35:36,573) [ext4-rsv-conver]
(messagebus,9096,4372,00:06:13/51-02:35:35,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:02:37/51-02:35:35,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:15/51-02:35:35,608) /usr/sbin/cron -f
(root,231612,32976,00:05:22/51-02:35:35,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:21:51/51-02:35:35,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/51-02:35:35,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:01:45/51-02:35:35,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/51-02:35:34,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/51-02:35:34,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:02:02/51-02:35:34,742) nginx: worker process
(www-data,73236,9628,00:00:00/51-02:35:34,743) nginx: worker process
(www-data,73512,9864,00:00:01/51-02:35:34,744) nginx: worker process
(www-data,73116,9372,00:00:00/51-02:35:34,745) nginx: worker process
(www-data,231896,17304,00:00:02/51-02:35:33,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/51-02:35:33,773) php-fpm: pool www
(root,9464,2476,00:00:00/50-10:54:45,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/50-10:54:44,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:18/50-10:54:44,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/49-10:54:44,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/49-10:54:44,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:10/49-10:54:44,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/48-10:54:45,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/48-10:54:45,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:12/48-10:54:45,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-10:54:45,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/47-10:54:45,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:16/47-10:54:45,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-10:54:44,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/46-10:54:44,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:05/46-10:54:44,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-10:54:45,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/45-10:54:45,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:06/45-10:54:44,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-10:54:45,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/44-10:54:45,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:16/44-10:54:45,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/44-05:39:32,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/44-05:39:32,11157) (sd-pam)
(root,5860,2640,00:00:00/44-05:38:16,11180) ssh-agent -s
(root,9464,2476,00:00:00/43-10:54:45,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/43-10:54:45,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:05/43-10:54:45,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-10:54:45,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/42-10:54:45,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:59/42-10:54:44,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/41-10:54:45,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/41-10:54:45,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:02/41-10:54:45,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-10:54:44,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/40-10:54:44,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:58/40-10:54:44,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-10:54:45,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/39-10:54:45,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:52/39-10:54:45,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-10:54:45,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/38-10:54:45,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:00:55/38-10:54:45,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-10:54:45,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/37-10:54:45,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:00:58/37-10:54:45,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-10:54:45,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/36-10:54:44,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:52/36-10:54:44,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-10:54:45,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/9-10:54:45,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:14/9-10:54:45,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-10:54:44,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/8-10:54:44,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:15/8-10:54:44,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-10:54:45,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/35-10:54:45,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:46/35-10:54:45,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-10:54:45,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/7-10:54:44,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:11/7-10:54:44,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-10:54:45,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/34-10:54:45,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:56/34-10:54:45,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-10:54:45,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/6-10:54:45,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:12/6-10:54:45,24989) /usr/sbin/postdrop -r
(root,5860,2740,00:00:00/34-04:26:56,25220) ssh-agent -s
(root,9464,2476,00:00:00/5-10:54:45,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/5-10:54:45,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:09/5-10:54:45,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-10:54:44,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/33-10:54:44,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:00:51/33-10:54:44,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-10:54:45,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/32-10:54:45,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:45/32-10:54:45,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-10:54:45,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/31-10:54:45,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:43/31-10:54:45,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-10:54:44,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/30-10:54:44,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:49/30-10:54:44,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-10:54:45,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/29-10:54:45,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:40/29-10:54:45,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-10:54:45,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/28-10:54:45,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:42/28-10:54:45,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/28-04:42:01,33348) ssh-agent -s
(root,5860,2676,00:00:00/28-04:41:11,33356) ssh-agent -s
(root,9464,2476,00:00:00/27-10:54:44,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/27-10:54:44,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:36/27-10:54:44,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-10:54:45,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/26-10:54:45,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:39/26-10:54:45,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/25-10:54:45,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/25-10:54:45,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:35/25-10:54:45,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-10:54:45,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/24-10:54:45,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:38/24-10:54:45,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-10:54:45,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/23-10:54:45,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:34/23-10:54:45,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-10:54:45,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/22-10:54:45,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:33/22-10:54:45,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-10:54:45,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/4-10:54:45,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:07/4-10:54:45,58605) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-10:54:45,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/21-10:54:45,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:29/21-10:54:45,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-10:54:45,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/20-10:54:45,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:26/20-10:54:44,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-10:54:44,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/3-10:54:44,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:05/3-10:54:44,71396) /usr/sbin/postdrop -r
(root,0,0,00:01:37/3-02:15:28,71645) [kworker/0:2-events]
(root,221728,4872,00:07:15/2-21:42:23,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/2-10:54:45,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/2-10:54:44,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:05/2-10:54:44,72913) /usr/sbin/postdrop -r
(root,0,0,00:00:01/1-10:55:43,75167) [kworker/1:2-events]
(root,9464,2476,00:00:00/1-10:54:45,75169) /usr/sbin/CRON -f
(root,43464,7768,00:00:00/1-10:54:45,75206) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7812,00:00:03/1-10:54:45,75207) /usr/sbin/postdrop -r
(root,0,0,00:01:24/1-10:22:05,75256) [kworker/0:1-events]
(root,9464,2476,00:00:00/19-10:54:45,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/19-10:54:45,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:32/19-10:54:45,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10:54:45,77199) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/10:54:45,77236) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7440,00:00:00/10:54:45,77237) /usr/sbin/postdrop -r
(root,0,0,00:00:00/10:32:54,77286) [kworker/1:1]
(root,0,0,00:00:00/03:40:34,77942) [kworker/u256:2-flush-254:5]
(root,0,0,00:00:00/02:15:33,78061) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/02:15:14,78062) [kworker/2:1-events]
(root,0,0,00:00:00/13:42,78241) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/08:31,78249) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/03:19,78256) [kworker/3:2-events]
(root,0,0,00:00:00/02:40,78260) [kworker/u256:0-flush-254:4]
(root,6856,3500,00:00:00/00:00,78311) /bin/bash /usr/bin/check_mk_agent
(root,7636,2728,00:00:00/00:00,78329) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,988,00:00:00/00:00,78330) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/18-10:54:45,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/18-10:54:45,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:28/18-10:54:45,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/17-10:54:44,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/17-10:54:44,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:26/17-10:54:44,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-10:54:45,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/16-10:54:45,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:23/16-10:54:45,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-10:54:45,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/15-10:54:45,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:25/15-10:54:45,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-10:54:45,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/14-10:54:45,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:19/14-10:54:45,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-10:54:45,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/13-10:54:44,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:25/13-10:54:44,100035) /usr/sbin/postdrop -r
(root,0,0,00:00:12/13-02:16:24,104236) [kworker/2:0-events]
(root,9464,2476,00:00:00/12-10:54:45,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/12-10:54:45,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:20/12-10:54:45,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-10:54:45,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/11-10:54:45,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:16/11-10:54:45,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-10:54:45,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/10-10:54:45,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:19/10-10:54:45,106606) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-08 00:20

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb2d37ecc5

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169688,10320,00:05:59/49-02:11:43,1) /sbin/init
(root,0,0,00:00:01/49-02:11:43,2) [kthreadd]
(root,0,0,00:00:00/49-02:11:43,3) [rcu_gp]
(root,0,0,00:00:00/49-02:11:43,4) [rcu_par_gp]
(root,0,0,00:00:00/49-02:11:43,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/49-02:11:43,8) [mm_percpu_wq]
(root,0,0,00:00:24/49-02:11:43,9) [ksoftirqd/0]
(root,0,0,03:06:41/49-02:11:43,10) [rcu_sched]
(root,0,0,00:00:00/49-02:11:43,11) [rcu_bh]
(root,0,0,00:00:17/49-02:11:43,12) [migration/0]
(root,0,0,00:00:00/49-02:11:43,14) [cpuhp/0]
(root,0,0,00:00:00/49-02:11:43,15) [cpuhp/1]
(root,0,0,00:00:13/49-02:11:43,16) [migration/1]
(root,0,0,00:00:22/49-02:11:43,17) [ksoftirqd/1]
(root,0,0,00:00:00/49-02:11:43,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/49-02:11:43,20) [cpuhp/2]
(root,0,0,00:00:15/49-02:11:43,21) [migration/2]
(root,0,0,00:00:35/49-02:11:43,22) [ksoftirqd/2]
(root,0,0,00:00:00/49-02:11:43,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/49-02:11:43,25) [cpuhp/3]
(root,0,0,00:00:16/49-02:11:43,26) [migration/3]
(root,0,0,00:01:24/49-02:11:43,27) [ksoftirqd/3]
(root,0,0,00:00:00/49-02:11:43,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/49-02:11:43,30) [kdevtmpfs]
(root,0,0,00:00:00/49-02:11:43,31) [netns]
(root,0,0,00:00:00/49-02:11:43,32) [kauditd]
(root,0,0,00:00:06/49-02:11:43,35) [khungtaskd]
(root,0,0,00:00:00/49-02:11:43,36) [oom_reaper]
(root,0,0,00:00:00/49-02:11:43,37) [writeback]
(root,0,0,00:00:00/49-02:11:43,38) [kcompactd0]
(root,0,0,00:00:00/49-02:11:43,39) [ksmd]
(root,0,0,00:00:56/49-02:11:43,40) [khugepaged]
(root,0,0,00:00:00/49-02:11:43,41) [crypto]
(root,0,0,00:00:00/49-02:11:43,42) [kintegrityd]
(root,0,0,00:00:00/49-02:11:43,43) [kblockd]
(root,0,0,00:00:00/49-02:11:42,46) [edac-poller]
(root,0,0,00:00:00/49-02:11:42,47) [devfreq_wq]
(root,0,0,00:00:00/49-02:11:42,48) [watchdogd]
(root,0,0,00:00:00/49-02:11:40,49) [kswapd0]
(root,0,0,00:00:00/49-02:11:39,67) [kthrotld]
(root,0,0,00:00:00/49-02:11:39,68) [irq/24-pciehp]
(root,0,0,00:00:00/49-02:11:39,69) [irq/25-pciehp]
(root,0,0,00:00:00/49-02:11:39,70) [irq/26-pciehp]
(root,0,0,00:00:00/49-02:11:39,71) [irq/27-pciehp]
(root,0,0,00:00:00/49-02:11:39,72) [irq/28-pciehp]
(root,0,0,00:00:00/49-02:11:39,73) [irq/29-pciehp]
(root,0,0,00:00:00/49-02:11:39,74) [irq/30-pciehp]
(root,0,0,00:00:00/49-02:11:39,75) [irq/31-pciehp]
(root,0,0,00:00:00/49-02:11:39,76) [irq/32-pciehp]
(root,0,0,00:00:00/49-02:11:39,77) [irq/33-pciehp]
(root,0,0,00:00:00/49-02:11:39,78) [irq/34-pciehp]
(root,0,0,00:00:00/49-02:11:39,79) [irq/35-pciehp]
(root,0,0,00:00:00/49-02:11:39,80) [irq/36-pciehp]
(root,0,0,00:00:00/49-02:11:39,81) [irq/37-pciehp]
(root,0,0,00:00:00/49-02:11:39,82) [irq/38-pciehp]
(root,0,0,00:00:00/49-02:11:39,83) [irq/39-pciehp]
(root,0,0,00:00:00/49-02:11:39,84) [irq/40-pciehp]
(root,0,0,00:00:00/49-02:11:39,85) [irq/41-pciehp]
(root,0,0,00:00:00/49-02:11:39,86) [irq/42-pciehp]
(root,0,0,00:00:00/49-02:11:39,87) [irq/43-pciehp]
(root,0,0,00:00:00/49-02:11:39,88) [irq/44-pciehp]
(root,0,0,00:00:00/49-02:11:39,89) [irq/45-pciehp]
(root,0,0,00:00:00/49-02:11:39,90) [irq/46-pciehp]
(root,0,0,00:00:00/49-02:11:39,91) [irq/47-pciehp]
(root,0,0,00:00:00/49-02:11:39,92) [irq/48-pciehp]
(root,0,0,00:00:00/49-02:11:39,93) [irq/49-pciehp]
(root,0,0,00:00:00/49-02:11:39,94) [irq/50-pciehp]
(root,0,0,00:00:00/49-02:11:39,95) [irq/51-pciehp]
(root,0,0,00:00:00/49-02:11:39,96) [irq/52-pciehp]
(root,0,0,00:00:00/49-02:11:39,97) [irq/53-pciehp]
(root,0,0,00:00:00/49-02:11:39,98) [irq/54-pciehp]
(root,0,0,00:00:00/49-02:11:39,99) [irq/55-pciehp]
(root,0,0,00:00:00/49-02:11:39,100) [ipv6_addrconf]
(root,0,0,00:00:00/49-02:11:39,110) [kstrp]
(root,0,0,00:00:00/49-02:11:36,153) [scsi_eh_0]
(root,0,0,00:00:00/49-02:11:36,154) [scsi_tmf_0]
(root,0,0,00:00:00/49-02:11:36,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/49-02:11:36,158) [ata_sff]
(root,0,0,00:00:00/49-02:11:36,160) [scsi_eh_1]
(root,0,0,00:00:00/49-02:11:36,164) [scsi_tmf_1]
(root,0,0,00:00:00/49-02:11:36,165) [scsi_eh_2]
(root,0,0,00:00:00/49-02:11:36,170) [scsi_tmf_2]
(root,0,0,00:00:01/49-02:11:36,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/49-02:11:36,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:16/49-02:11:36,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/49-02:11:36,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/49-02:11:35,224) [kdmflush]
(root,0,0,00:00:00/49-02:11:35,230) [kdmflush]
(root,0,0,00:00:00/49-02:11:31,258) [kworker/u257:0]
(root,0,0,00:00:00/49-02:11:31,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/49-02:11:31,261) [ext4-rsv-conver]
(root,0,0,00:00:00/49-02:11:29,269) [kdmflush]
(root,0,0,00:00:00/49-02:11:29,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/49-02:11:29,286) [ext4-rsv-conver]
(root,232324,200224,23:40:35/49-02:11:24,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:13/49-02:11:24,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/49-02:11:23,473) [ttm_swap]
(root,0,0,00:00:00/49-02:11:23,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/49-02:11:23,511) [kdmflush]
(root,0,0,00:00:00/49-02:11:23,513) [kdmflush]
(root,0,0,00:00:00/49-02:11:23,514) [kdmflush]
(root,0,0,00:00:00/49-02:11:23,516) [kdmflush]
(root,0,0,00:00:00/49-02:11:22,544) [jbd2/sda1-8]
(root,0,0,00:00:00/49-02:11:22,545) [ext4-rsv-conver]
(root,0,0,00:00:00/49-02:11:22,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/49-02:11:22,558) [ext4-rsv-conver]
(root,0,0,00:00:00/49-02:11:22,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/49-02:11:22,562) [ext4-rsv-conver]
(root,0,0,00:00:00/49-02:11:22,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/49-02:11:22,568) [ext4-rsv-conver]
(root,0,0,00:00:01/49-02:11:20,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/49-02:11:20,573) [ext4-rsv-conver]
(messagebus,9096,4368,00:06:04/49-02:11:19,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:02:31/49-02:11:19,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:15/49-02:11:19,608) /usr/sbin/cron -f
(root,231612,32976,00:05:10/49-02:11:19,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:21:00/49-02:11:19,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/49-02:11:19,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13816,6976,00:01:43/49-02:11:19,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/49-02:11:18,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/49-02:11:18,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,74624,11000,00:01:56/49-02:11:18,742) nginx: worker process
(www-data,73236,9628,00:00:00/49-02:11:18,743) nginx: worker process
(www-data,73512,9864,00:00:01/49-02:11:18,744) nginx: worker process
(www-data,73116,9372,00:00:00/49-02:11:18,745) nginx: worker process
(www-data,231896,17304,00:00:02/49-02:11:17,772) php-fpm: pool www
(www-data,231896,17084,00:00:02/49-02:11:17,773) php-fpm: pool www
(root,9464,2476,00:00:00/48-10:30:29,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/48-10:30:28,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:01:16/48-10:30:28,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/47-10:30:28,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/47-10:30:28,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:01:08/47-10:30:28,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/46-10:30:29,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/46-10:30:29,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:10/46-10:30:29,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/45-10:30:29,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/45-10:30:29,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:01:13/45-10:30:29,5208) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/44-10:30:28,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/44-10:30:28,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:01:02/44-10:30:28,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/43-10:30:29,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/43-10:30:29,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:01:04/43-10:30:28,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/42-10:30:29,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/42-10:30:29,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:01:13/42-10:30:29,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/42-05:15:16,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/42-05:15:16,11157) (sd-pam)
(root,5860,2640,00:00:00/42-05:14:00,11180) ssh-agent -s
(root,9464,2476,00:00:00/41-10:30:29,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/41-10:30:29,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:01:03/41-10:30:29,12190) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/40-10:30:29,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/40-10:30:29,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:56/40-10:30:28,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/39-10:30:29,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/39-10:30:29,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:01:00/39-10:30:29,15141) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/38-10:30:28,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/38-10:30:28,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:56/38-10:30:28,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/37-10:30:29,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/37-10:30:29,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:49/37-10:30:29,17893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/36-10:30:29,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/36-10:30:29,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:00:53/36-10:30:29,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/35-10:30:29,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/35-10:30:29,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:00:55/35-10:30:29,20767) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/34-10:30:29,22162) /usr/sbin/CRON -f
(root,43464,7728,00:00:00/34-10:30:28,22199) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7684,00:00:49/34-10:30:28,22200) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-10:30:29,22465) /usr/sbin/CRON -f
(root,43464,7780,00:00:00/7-10:30:29,22502) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:12/7-10:30:29,22503) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-10:30:28,23317) /usr/sbin/CRON -f
(root,43464,7704,00:00:00/6-10:30:28,23354) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7740,00:00:12/6-10:30:28,23355) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/33-10:30:29,23400) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/33-10:30:29,23437) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:43/33-10:30:29,23438) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-10:30:29,24062) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/5-10:30:28,24100) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7616,00:00:08/5-10:30:28,24101) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/32-10:30:29,24840) /usr/sbin/CRON -f
(root,43464,7680,00:00:00/32-10:30:29,24877) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:53/32-10:30:29,24878) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-10:30:29,24950) /usr/sbin/CRON -f
(root,43464,7584,00:00:00/4-10:30:29,24988) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:09/4-10:30:29,24989) /usr/sbin/postdrop -r
(root,5860,2740,00:00:00/32-04:02:40,25220) ssh-agent -s
(root,9464,2476,00:00:00/3-10:30:29,25794) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/3-10:30:29,25831) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7608,00:00:06/3-10:30:29,25832) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/31-10:30:28,26127) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/31-10:30:28,26164) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7652,00:00:48/31-10:30:28,26165) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/30-10:30:29,27570) /usr/sbin/CRON -f
(root,43464,7724,00:00:00/30-10:30:29,27607) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:43/30-10:30:29,27608) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/29-10:30:29,28892) /usr/sbin/CRON -f
(root,43464,7648,00:00:00/29-10:30:29,28929) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7592,00:00:41/29-10:30:29,28930) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/28-10:30:28,30356) /usr/sbin/CRON -f
(root,43464,7548,00:00:00/28-10:30:28,30393) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7704,00:00:46/28-10:30:28,30394) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/27-10:30:29,31602) /usr/sbin/CRON -f
(root,43464,7684,00:00:00/27-10:30:29,31639) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7728,00:00:37/27-10:30:29,31640) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/26-10:30:29,32987) /usr/sbin/CRON -f
(root,43464,7812,00:00:00/26-10:30:29,33024) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7656,00:00:39/26-10:30:29,33025) /usr/sbin/postdrop -r
(root,5860,2612,00:00:00/26-04:17:45,33348) ssh-agent -s
(root,5860,2676,00:00:00/26-04:16:55,33356) ssh-agent -s
(root,9464,2476,00:00:00/25-10:30:28,34425) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/25-10:30:28,34462) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:34/25-10:30:28,34463) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/24-10:30:29,35855) /usr/sbin/CRON -f
(root,43464,7596,00:00:00/24-10:30:29,35892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7856,00:00:36/24-10:30:29,35893) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/23-10:30:29,38366) /usr/sbin/CRON -f
(root,43464,7716,00:00:00/23-10:30:29,38403) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7760,00:00:32/23-10:30:29,38404) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/22-10:30:29,46064) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/22-10:30:29,46101) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7648,00:00:35/22-10:30:29,46102) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/21-10:30:29,51706) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/21-10:30:29,51743) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:31/21-10:30:29,51744) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/20-10:30:29,58005) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/20-10:30:29,58042) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:31/20-10:30:29,58043) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-10:30:29,58567) /usr/sbin/CRON -f
(root,43464,7692,00:00:00/2-10:30:29,58604) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7660,00:00:04/2-10:30:29,58605) /usr/sbin/postdrop -r
(root,0,0,00:00:01/2-08:37:55,61258) [kworker/1:1-events]
(root,9464,2476,00:00:00/19-10:30:29,64300) /usr/sbin/CRON -f
(root,43464,7564,00:00:00/19-10:30:29,64337) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7628,00:00:26/19-10:30:29,64338) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/18-10:30:29,70116) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/18-10:30:29,70153) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7720,00:00:23/18-10:30:28,70154) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-10:30:28,71358) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/1-10:30:28,71395) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:03/1-10:30:28,71396) /usr/sbin/postdrop -r
(root,0,0,00:01:02/1-01:51:12,71645) [kworker/0:2-events]
(root,221728,4736,00:02:10/21:18:07,71924) /usr/sbin/rsyslogd -n -iNONE
(root,9464,2476,00:00:00/10:30:29,72874) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/10:30:28,72911) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7544,00:00:00/10:30:28,72913) /usr/sbin/postdrop -r
(root,14660,8020,00:00:00/07:29:20,73150) sshd: fcpys [priv]
(fcpys,15236,6468,00:00:01/07:29:12,73158) sshd: fcpys@pts/0
(fcpys,7780,4536,00:00:00/07:29:09,73159) -bash
(root,10472,4124,00:00:00/07:29:07,73162) sudo -i
(root,7648,4544,00:00:00/07:29:06,73164) -bash
(root,13752,5968,00:00:01/07:29:03,73167) ssh llira@132.248.48.115
(fcpys,2588,1640,00:00:00/06:53:52,73212) /usr/lib/openssh/sftp-server
(root,0,0,00:00:00/06:35:31,73274) [kworker/0:1-events]
(root,0,0,00:00:00/01:51:41,73671) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/01:51:23,73673) [kworker/1:0]
(root,0,0,00:00:00/01:46:18,73684) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/46:13,73764) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/14:51,73805) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/09:41,73812) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/04:30,73818) [kworker/3:0-events]
(root,14800,7920,00:00:00/00:06,73821) sshd: unknown [priv]
(sshd,13816,5040,00:00:00/00:05,73822) sshd: unknown [net]
(root,6856,3476,00:00:00/00:00,73935) /bin/bash /usr/bin/check_mk_agent
(root,7636,2700,00:00:00/00:00,73953) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,988,00:00:00/00:00,73954) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,9464,2476,00:00:00/17-10:30:29,75512) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/17-10:30:29,75549) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7664,00:00:29/17-10:30:29,75551) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/16-10:30:29,78434) /usr/sbin/CRON -f
(root,43464,7852,00:00:00/16-10:30:29,78471) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:25/16-10:30:29,78472) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/15-10:30:28,84161) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/15-10:30:28,84198) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7568,00:00:23/15-10:30:28,84199) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/14-10:30:29,87719) /usr/sbin/CRON -f
(root,43464,7752,00:00:00/14-10:30:29,87756) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7764,00:00:20/14-10:30:29,87757) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/13-10:30:29,90758) /usr/sbin/CRON -f
(root,43464,7848,00:00:00/13-10:30:29,90796) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7548,00:00:22/13-10:30:29,90797) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-10:30:29,95518) /usr/sbin/CRON -f
(root,43464,7764,00:00:00/12-10:30:29,95555) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:16/12-10:30:29,95556) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-10:30:29,99997) /usr/sbin/CRON -f
(root,43464,7588,00:00:00/11-10:30:28,100034) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:21/11-10:30:28,100035) /usr/sbin/postdrop -r
(root,0,0,00:00:10/11-01:52:08,104236) [kworker/2:0-events]
(root,9464,2476,00:00:00/10-10:30:29,104774) /usr/sbin/CRON -f
(root,43464,7820,00:00:00/10-10:30:29,104811) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:18/10-10:30:29,104812) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-10:30:29,105689) /usr/sbin/CRON -f
(root,43464,7572,00:00:00/9-10:30:29,105726) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7832,00:00:13/9-10:30:29,105727) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-10:30:29,106561) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/8-10:30:29,106605) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7640,00:00:16/8-10:30:29,106606) /usr/sbin/postdrop -r

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-11-05 23:55

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cba5e992ed

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104152,10248,00:01:30/14-00:21:10,1) /sbin/init
(root,0,0,00:00:00/14-00:21:10,2) [kthreadd]
(root,0,0,00:00:00/14-00:21:10,3) [rcu_gp]
(root,0,0,00:00:00/14-00:21:10,4) [rcu_par_gp]
(root,0,0,00:00:00/14-00:21:10,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/14-00:21:10,8) [mm_percpu_wq]
(root,0,0,00:00:08/14-00:21:10,9) [ksoftirqd/0]
(root,0,0,00:50:54/14-00:21:10,10) [rcu_sched]
(root,0,0,00:00:00/14-00:21:10,11) [rcu_bh]
(root,0,0,00:00:06/14-00:21:10,12) [migration/0]
(root,0,0,00:00:00/14-00:21:10,14) [cpuhp/0]
(root,0,0,00:00:00/14-00:21:10,15) [cpuhp/1]
(root,0,0,00:00:04/14-00:21:10,16) [migration/1]
(root,0,0,00:00:06/14-00:21:10,17) [ksoftirqd/1]
(root,0,0,00:00:00/14-00:21:10,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/14-00:21:10,20) [cpuhp/2]
(root,0,0,00:00:06/14-00:21:10,21) [migration/2]
(root,0,0,00:00:12/14-00:21:10,22) [ksoftirqd/2]
(root,0,0,00:00:00/14-00:21:10,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/14-00:21:10,25) [cpuhp/3]
(root,0,0,00:00:06/14-00:21:10,26) [migration/3]
(root,0,0,00:00:22/14-00:21:10,27) [ksoftirqd/3]
(root,0,0,00:00:00/14-00:21:10,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/14-00:21:10,30) [kdevtmpfs]
(root,0,0,00:00:00/14-00:21:10,31) [netns]
(root,0,0,00:00:00/14-00:21:10,32) [kauditd]
(root,0,0,00:00:01/14-00:21:10,35) [khungtaskd]
(root,0,0,00:00:00/14-00:21:10,36) [oom_reaper]
(root,0,0,00:00:00/14-00:21:10,37) [writeback]
(root,0,0,00:00:00/14-00:21:10,38) [kcompactd0]
(root,0,0,00:00:00/14-00:21:10,39) [ksmd]
(root,0,0,00:00:20/14-00:21:10,40) [khugepaged]
(root,0,0,00:00:00/14-00:21:10,41) [crypto]
(root,0,0,00:00:00/14-00:21:10,42) [kintegrityd]
(root,0,0,00:00:00/14-00:21:10,43) [kblockd]
(root,0,0,00:00:00/14-00:21:09,46) [edac-poller]
(root,0,0,00:00:00/14-00:21:09,47) [devfreq_wq]
(root,0,0,00:00:00/14-00:21:09,48) [watchdogd]
(root,0,0,00:00:00/14-00:21:07,49) [kswapd0]
(root,0,0,00:00:00/14-00:21:06,67) [kthrotld]
(root,0,0,00:00:00/14-00:21:06,68) [irq/24-pciehp]
(root,0,0,00:00:00/14-00:21:06,69) [irq/25-pciehp]
(root,0,0,00:00:00/14-00:21:06,70) [irq/26-pciehp]
(root,0,0,00:00:00/14-00:21:06,71) [irq/27-pciehp]
(root,0,0,00:00:00/14-00:21:06,72) [irq/28-pciehp]
(root,0,0,00:00:00/14-00:21:06,73) [irq/29-pciehp]
(root,0,0,00:00:00/14-00:21:06,74) [irq/30-pciehp]
(root,0,0,00:00:00/14-00:21:06,75) [irq/31-pciehp]
(root,0,0,00:00:00/14-00:21:06,76) [irq/32-pciehp]
(root,0,0,00:00:00/14-00:21:06,77) [irq/33-pciehp]
(root,0,0,00:00:00/14-00:21:06,78) [irq/34-pciehp]
(root,0,0,00:00:00/14-00:21:06,79) [irq/35-pciehp]
(root,0,0,00:00:00/14-00:21:06,80) [irq/36-pciehp]
(root,0,0,00:00:00/14-00:21:06,81) [irq/37-pciehp]
(root,0,0,00:00:00/14-00:21:06,82) [irq/38-pciehp]
(root,0,0,00:00:00/14-00:21:06,83) [irq/39-pciehp]
(root,0,0,00:00:00/14-00:21:06,84) [irq/40-pciehp]
(root,0,0,00:00:00/14-00:21:06,85) [irq/41-pciehp]
(root,0,0,00:00:00/14-00:21:06,86) [irq/42-pciehp]
(root,0,0,00:00:00/14-00:21:06,87) [irq/43-pciehp]
(root,0,0,00:00:00/14-00:21:06,88) [irq/44-pciehp]
(root,0,0,00:00:00/14-00:21:06,89) [irq/45-pciehp]
(root,0,0,00:00:00/14-00:21:06,90) [irq/46-pciehp]
(root,0,0,00:00:00/14-00:21:06,91) [irq/47-pciehp]
(root,0,0,00:00:00/14-00:21:06,92) [irq/48-pciehp]
(root,0,0,00:00:00/14-00:21:06,93) [irq/49-pciehp]
(root,0,0,00:00:00/14-00:21:06,94) [irq/50-pciehp]
(root,0,0,00:00:00/14-00:21:06,95) [irq/51-pciehp]
(root,0,0,00:00:00/14-00:21:06,96) [irq/52-pciehp]
(root,0,0,00:00:00/14-00:21:06,97) [irq/53-pciehp]
(root,0,0,00:00:00/14-00:21:06,98) [irq/54-pciehp]
(root,0,0,00:00:00/14-00:21:06,99) [irq/55-pciehp]
(root,0,0,00:00:00/14-00:21:06,100) [ipv6_addrconf]
(root,0,0,00:00:00/14-00:21:06,110) [kstrp]
(root,0,0,00:00:00/14-00:21:03,153) [scsi_eh_0]
(root,0,0,00:00:00/14-00:21:03,154) [scsi_tmf_0]
(root,0,0,00:00:00/14-00:21:03,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/14-00:21:03,158) [ata_sff]
(root,0,0,00:00:00/14-00:21:03,160) [scsi_eh_1]
(root,0,0,00:00:00/14-00:21:03,164) [scsi_tmf_1]
(root,0,0,00:00:00/14-00:21:03,165) [scsi_eh_2]
(root,0,0,00:00:00/14-00:21:03,170) [scsi_tmf_2]
(root,0,0,00:00:01/14-00:21:03,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/14-00:21:03,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:05/14-00:21:03,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/14-00:21:03,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/14-00:21:02,224) [kdmflush]
(root,0,0,00:00:00/14-00:21:02,230) [kdmflush]
(root,0,0,00:00:00/14-00:20:58,258) [kworker/u257:0]
(root,0,0,00:00:00/14-00:20:58,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/14-00:20:58,261) [ext4-rsv-conver]
(root,0,0,00:00:00/14-00:20:56,269) [kdmflush]
(root,0,0,00:00:00/14-00:20:56,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/14-00:20:56,286) [ext4-rsv-conver]
(root,83516,47256,07:46:33/14-00:20:51,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:04/14-00:20:51,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/14-00:20:50,473) [ttm_swap]
(root,0,0,00:00:00/14-00:20:50,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/14-00:20:50,511) [kdmflush]
(root,0,0,00:00:00/14-00:20:50,513) [kdmflush]
(root,0,0,00:00:00/14-00:20:50,514) [kdmflush]
(root,0,0,00:00:00/14-00:20:50,516) [kdmflush]
(root,0,0,00:00:00/14-00:20:49,544) [jbd2/sda1-8]
(root,0,0,00:00:00/14-00:20:49,545) [ext4-rsv-conver]
(root,0,0,00:00:00/14-00:20:49,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/14-00:20:49,558) [ext4-rsv-conver]
(root,0,0,00:00:00/14-00:20:49,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/14-00:20:49,562) [ext4-rsv-conver]
(root,0,0,00:00:00/14-00:20:49,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/14-00:20:49,568) [ext4-rsv-conver]
(root,0,0,00:00:00/14-00:20:47,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/14-00:20:47,573) [ext4-rsv-conver]
(root,221728,4804,05:32:17/14-00:20:46,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4352,00:00:52/14-00:20:46,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:00:43/14-00:20:46,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:03/14-00:20:46,608) /usr/sbin/cron -f
(root,231612,32976,00:01:27/14-00:20:46,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:05:53/14-00:20:46,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/14-00:20:46,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:01:55/14-00:20:46,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6976,00:00:01/14-00:20:46,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/14-00:20:45,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/14-00:20:45,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73612,9996,00:00:30/14-00:20:45,742) nginx: worker process
(www-data,72592,7296,00:00:00/14-00:20:45,743) nginx: worker process
(www-data,72736,9328,00:00:00/14-00:20:45,744) nginx: worker process
(www-data,72592,5744,00:00:00/14-00:20:45,745) nginx: worker process
(www-data,231896,17304,00:00:00/14-00:20:44,772) php-fpm: pool www
(www-data,231896,17084,00:00:00/14-00:20:44,773) php-fpm: pool www
(root,9464,2476,00:00:00/13-08:39:56,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/13-08:39:55,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:25/13-08:39:55,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/12-08:39:55,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/12-08:39:55,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:22/12-08:39:55,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/11-08:39:56,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/11-08:39:56,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:22/11-08:39:56,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-08:39:56,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/10-08:39:56,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:19/10-08:39:56,5208) /usr/sbin/postdrop -r
(root,0,0,00:00:07/10-00:05:25,6281) [kworker/2:1-events]
(root,9464,2476,00:00:00/9-08:39:55,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/9-08:39:55,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:16/9-08:39:55,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-08:39:56,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/8-08:39:56,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:00:16/8-08:39:55,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-08:39:56,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/7-08:39:56,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:14/7-08:39:56,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/7-03:24:43,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/7-03:24:43,11157) (sd-pam)
(root,5860,2640,00:00:00/7-03:23:27,11180) ssh-agent -s
(root,9464,2476,00:00:00/6-08:39:56,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/6-08:39:56,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:12/6-08:39:56,12190) /usr/sbin/postdrop -r
(root,0,0,00:00:04/6-02:38:59,12483) [kworker/1:1-events]
(root,9464,2476,00:00:00/5-08:39:56,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/5-08:39:56,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:10/5-08:39:55,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-08:39:56,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/4-08:39:56,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:08/4-08:39:56,15141) /usr/sbin/postdrop -r
(root,0,0,00:03:19/3-12:33:16,16292) [kworker/0:0-events]
(root,9464,2476,00:00:00/3-08:39:55,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/3-08:39:55,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:05/3-08:39:55,16525) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-08:39:56,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/2-08:39:56,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:04/2-08:39:56,17893) /usr/sbin/postdrop -r
(root,0,0,00:00:00/1-16:11:51,18932) [kworker/0:2-events]
(root,0,0,00:00:00/1-08:41:44,19328) [kworker/2:0-cgroup_destroy]
(root,9464,2476,00:00:00/1-08:39:56,19330) /usr/sbin/CRON -f
(root,43464,7652,00:00:00/1-08:39:56,19367) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7620,00:00:02/1-08:39:56,19368) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/08:39:56,20729) /usr/sbin/CRON -f
(root,43464,7632,00:00:00/08:39:56,20766) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7716,00:00:00/08:39:56,20767) /usr/sbin/postdrop -r
(root,0,0,00:00:00/07:30:38,20847) [kworker/1:0-events]
(root,0,0,00:00:00/04:15:51,21011) [kworker/u256:0-flush-254:2]
(root,0,0,00:00:00/03:25:51,21056) [kworker/u256:2-flush-254:0]
(root,0,0,00:00:00/14:00,21215) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/08:50,21219) [kworker/3:2-events]
(root,0,0,00:00:00/04:21,21223) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/04:16,21224) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/03:37,21226) [kworker/3:1-ata_sff]
(root,6856,3388,00:00:00/00:00,21275) /bin/bash /usr/bin/check_mk_agent
(root,7636,2744,00:00:00/00:00,21293) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,992,00:00:00/00:00,21294) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-10-01 22:05

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb0ebb4e60

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104024,10244,00:01:18/12-00:46:58,1) /sbin/init
(root,0,0,00:00:00/12-00:46:58,2) [kthreadd]
(root,0,0,00:00:00/12-00:46:58,3) [rcu_gp]
(root,0,0,00:00:00/12-00:46:58,4) [rcu_par_gp]
(root,0,0,00:00:00/12-00:46:58,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/12-00:46:58,8) [mm_percpu_wq]
(root,0,0,00:00:06/12-00:46:58,9) [ksoftirqd/0]
(root,0,0,00:43:46/12-00:46:58,10) [rcu_sched]
(root,0,0,00:00:00/12-00:46:58,11) [rcu_bh]
(root,0,0,00:00:05/12-00:46:58,12) [migration/0]
(root,0,0,00:00:00/12-00:46:58,14) [cpuhp/0]
(root,0,0,00:00:00/12-00:46:58,15) [cpuhp/1]
(root,0,0,00:00:03/12-00:46:58,16) [migration/1]
(root,0,0,00:00:05/12-00:46:58,17) [ksoftirqd/1]
(root,0,0,00:00:00/12-00:46:58,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/12-00:46:58,20) [cpuhp/2]
(root,0,0,00:00:05/12-00:46:58,21) [migration/2]
(root,0,0,00:00:10/12-00:46:58,22) [ksoftirqd/2]
(root,0,0,00:00:00/12-00:46:58,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/12-00:46:58,25) [cpuhp/3]
(root,0,0,00:00:05/12-00:46:58,26) [migration/3]
(root,0,0,00:00:18/12-00:46:58,27) [ksoftirqd/3]
(root,0,0,00:00:00/12-00:46:58,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/12-00:46:58,30) [kdevtmpfs]
(root,0,0,00:00:00/12-00:46:58,31) [netns]
(root,0,0,00:00:00/12-00:46:58,32) [kauditd]
(root,0,0,00:00:01/12-00:46:58,35) [khungtaskd]
(root,0,0,00:00:00/12-00:46:58,36) [oom_reaper]
(root,0,0,00:00:00/12-00:46:58,37) [writeback]
(root,0,0,00:00:00/12-00:46:58,38) [kcompactd0]
(root,0,0,00:00:00/12-00:46:58,39) [ksmd]
(root,0,0,00:00:17/12-00:46:58,40) [khugepaged]
(root,0,0,00:00:00/12-00:46:58,41) [crypto]
(root,0,0,00:00:00/12-00:46:58,42) [kintegrityd]
(root,0,0,00:00:00/12-00:46:58,43) [kblockd]
(root,0,0,00:00:00/12-00:46:57,46) [edac-poller]
(root,0,0,00:00:00/12-00:46:57,47) [devfreq_wq]
(root,0,0,00:00:00/12-00:46:57,48) [watchdogd]
(root,0,0,00:00:00/12-00:46:55,49) [kswapd0]
(root,0,0,00:00:00/12-00:46:54,67) [kthrotld]
(root,0,0,00:00:00/12-00:46:54,68) [irq/24-pciehp]
(root,0,0,00:00:00/12-00:46:54,69) [irq/25-pciehp]
(root,0,0,00:00:00/12-00:46:54,70) [irq/26-pciehp]
(root,0,0,00:00:00/12-00:46:54,71) [irq/27-pciehp]
(root,0,0,00:00:00/12-00:46:54,72) [irq/28-pciehp]
(root,0,0,00:00:00/12-00:46:54,73) [irq/29-pciehp]
(root,0,0,00:00:00/12-00:46:54,74) [irq/30-pciehp]
(root,0,0,00:00:00/12-00:46:54,75) [irq/31-pciehp]
(root,0,0,00:00:00/12-00:46:54,76) [irq/32-pciehp]
(root,0,0,00:00:00/12-00:46:54,77) [irq/33-pciehp]
(root,0,0,00:00:00/12-00:46:54,78) [irq/34-pciehp]
(root,0,0,00:00:00/12-00:46:54,79) [irq/35-pciehp]
(root,0,0,00:00:00/12-00:46:54,80) [irq/36-pciehp]
(root,0,0,00:00:00/12-00:46:54,81) [irq/37-pciehp]
(root,0,0,00:00:00/12-00:46:54,82) [irq/38-pciehp]
(root,0,0,00:00:00/12-00:46:54,83) [irq/39-pciehp]
(root,0,0,00:00:00/12-00:46:54,84) [irq/40-pciehp]
(root,0,0,00:00:00/12-00:46:54,85) [irq/41-pciehp]
(root,0,0,00:00:00/12-00:46:54,86) [irq/42-pciehp]
(root,0,0,00:00:00/12-00:46:54,87) [irq/43-pciehp]
(root,0,0,00:00:00/12-00:46:54,88) [irq/44-pciehp]
(root,0,0,00:00:00/12-00:46:54,89) [irq/45-pciehp]
(root,0,0,00:00:00/12-00:46:54,90) [irq/46-pciehp]
(root,0,0,00:00:00/12-00:46:54,91) [irq/47-pciehp]
(root,0,0,00:00:00/12-00:46:54,92) [irq/48-pciehp]
(root,0,0,00:00:00/12-00:46:54,93) [irq/49-pciehp]
(root,0,0,00:00:00/12-00:46:54,94) [irq/50-pciehp]
(root,0,0,00:00:00/12-00:46:54,95) [irq/51-pciehp]
(root,0,0,00:00:00/12-00:46:54,96) [irq/52-pciehp]
(root,0,0,00:00:00/12-00:46:54,97) [irq/53-pciehp]
(root,0,0,00:00:00/12-00:46:54,98) [irq/54-pciehp]
(root,0,0,00:00:00/12-00:46:54,99) [irq/55-pciehp]
(root,0,0,00:00:00/12-00:46:54,100) [ipv6_addrconf]
(root,0,0,00:00:00/12-00:46:54,110) [kstrp]
(root,0,0,00:00:00/12-00:46:51,153) [scsi_eh_0]
(root,0,0,00:00:00/12-00:46:51,154) [scsi_tmf_0]
(root,0,0,00:00:00/12-00:46:51,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/12-00:46:51,158) [ata_sff]
(root,0,0,00:00:00/12-00:46:51,160) [scsi_eh_1]
(root,0,0,00:00:00/12-00:46:51,164) [scsi_tmf_1]
(root,0,0,00:00:00/12-00:46:51,165) [scsi_eh_2]
(root,0,0,00:00:00/12-00:46:51,170) [scsi_tmf_2]
(root,0,0,00:00:01/12-00:46:51,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/12-00:46:51,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:05/12-00:46:51,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/12-00:46:51,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/12-00:46:50,224) [kdmflush]
(root,0,0,00:00:00/12-00:46:50,230) [kdmflush]
(root,0,0,00:00:00/12-00:46:46,258) [kworker/u257:0]
(root,0,0,00:00:00/12-00:46:46,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/12-00:46:46,261) [ext4-rsv-conver]
(root,0,0,00:00:00/12-00:46:44,269) [kdmflush]
(root,0,0,00:00:00/12-00:46:44,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/12-00:46:44,286) [ext4-rsv-conver]
(root,90936,52356,06:26:02/12-00:46:39,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:03/12-00:46:39,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/12-00:46:38,473) [ttm_swap]
(root,0,0,00:00:00/12-00:46:38,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/12-00:46:38,511) [kdmflush]
(root,0,0,00:00:00/12-00:46:38,513) [kdmflush]
(root,0,0,00:00:00/12-00:46:38,514) [kdmflush]
(root,0,0,00:00:00/12-00:46:38,516) [kdmflush]
(root,0,0,00:00:00/12-00:46:37,544) [jbd2/sda1-8]
(root,0,0,00:00:00/12-00:46:37,545) [ext4-rsv-conver]
(root,0,0,00:00:00/12-00:46:37,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/12-00:46:37,558) [ext4-rsv-conver]
(root,0,0,00:00:00/12-00:46:37,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/12-00:46:37,562) [ext4-rsv-conver]
(root,0,0,00:00:00/12-00:46:37,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/12-00:46:37,568) [ext4-rsv-conver]
(root,0,0,00:00:00/12-00:46:35,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/12-00:46:35,573) [ext4-rsv-conver]
(root,221728,4892,04:36:21/12-00:46:34,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4352,00:00:45/12-00:46:34,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:00:37/12-00:46:34,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:03/12-00:46:34,608) /usr/sbin/cron -f
(root,231612,32976,00:01:14/12-00:46:34,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:05:02/12-00:46:34,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/12-00:46:34,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:01:38/12-00:46:34,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6976,00:00:01/12-00:46:34,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/12-00:46:33,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/12-00:46:33,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73612,9996,00:00:26/12-00:46:33,742) nginx: worker process
(www-data,72592,7296,00:00:00/12-00:46:33,743) nginx: worker process
(www-data,72736,9328,00:00:00/12-00:46:33,744) nginx: worker process
(www-data,72592,5744,00:00:00/12-00:46:33,745) nginx: worker process
(www-data,231896,17304,00:00:00/12-00:46:32,772) php-fpm: pool www
(www-data,231896,17084,00:00:00/12-00:46:32,773) php-fpm: pool www
(root,9464,2476,00:00:00/11-09:05:44,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/11-09:05:43,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:21/11-09:05:43,1397) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/10-09:05:43,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/10-09:05:43,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:19/10-09:05:43,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/9-09:05:44,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/9-09:05:44,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:18/9-09:05:44,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/8-09:05:44,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/8-09:05:44,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:16/8-09:05:44,5208) /usr/sbin/postdrop -r
(root,0,0,00:00:06/8-00:31:13,6281) [kworker/2:1-events]
(root,9464,2476,00:00:00/7-09:05:43,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/7-09:05:43,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:13/7-09:05:43,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-09:05:44,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/6-09:05:44,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:00:12/6-09:05:43,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-09:05:44,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/5-09:05:44,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:10/5-09:05:44,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/5-03:50:31,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/5-03:50:31,11157) (sd-pam)
(root,5860,2640,00:00:00/5-03:49:15,11180) ssh-agent -s
(root,9464,2476,00:00:00/4-09:05:44,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/4-09:05:44,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:08/4-09:05:44,12190) /usr/sbin/postdrop -r
(root,0,0,00:00:02/4-03:04:47,12483) [kworker/1:1-events]
(root,9464,2476,00:00:00/3-09:05:44,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/3-09:05:44,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:06/3-09:05:43,13642) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-09:05:44,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/2-09:05:44,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:04/2-09:05:44,15141) /usr/sbin/postdrop -r
(root,0,0,00:01:26/1-12:59:04,16292) [kworker/0:0-events]
(root,9464,2476,00:00:00/1-09:05:43,16487) /usr/sbin/CRON -f
(root,43464,7816,00:00:00/1-09:05:43,16524) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7584,00:00:02/1-09:05:43,16525) /usr/sbin/postdrop -r
(root,0,0,00:00:00/1-00:30:28,17033) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/17:09:55,17448) [kworker/1:0-cgroup_destroy]
(root,9464,2476,00:00:00/09:05:44,17855) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/09:05:44,17892) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7580,00:00:00/09:05:44,17893) /usr/sbin/postdrop -r
(root,0,0,00:00:00/02:51:14,18221) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/21:39,18354) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/15:51,18360) [kworker/0:1]
(root,0,0,00:00:00/13:21,18365) [kworker/3:0-events]
(root,0,0,00:00:00/08:09,18369) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/02:58,18372) [kworker/3:1-ata_sff]
(root,6856,3504,00:00:00/00:00,18481) /bin/bash /usr/bin/check_mk_agent
(root,7636,2704,00:00:00/00:00,18499) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,928,00:00:00/00:00,18500) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-29 22:31

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb80348c83

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104024,10236,00:01:07/10-01:07:55,1) /sbin/init
(root,0,0,00:00:00/10-01:07:55,2) [kthreadd]
(root,0,0,00:00:00/10-01:07:55,3) [rcu_gp]
(root,0,0,00:00:00/10-01:07:55,4) [rcu_par_gp]
(root,0,0,00:00:00/10-01:07:55,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/10-01:07:55,8) [mm_percpu_wq]
(root,0,0,00:00:05/10-01:07:55,9) [ksoftirqd/0]
(root,0,0,00:36:55/10-01:07:55,10) [rcu_sched]
(root,0,0,00:00:00/10-01:07:55,11) [rcu_bh]
(root,0,0,00:00:05/10-01:07:55,12) [migration/0]
(root,0,0,00:00:00/10-01:07:55,14) [cpuhp/0]
(root,0,0,00:00:00/10-01:07:55,15) [cpuhp/1]
(root,0,0,00:00:03/10-01:07:55,16) [migration/1]
(root,0,0,00:00:04/10-01:07:55,17) [ksoftirqd/1]
(root,0,0,00:00:00/10-01:07:55,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/10-01:07:55,20) [cpuhp/2]
(root,0,0,00:00:05/10-01:07:55,21) [migration/2]
(root,0,0,00:00:08/10-01:07:55,22) [ksoftirqd/2]
(root,0,0,00:00:00/10-01:07:55,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/10-01:07:55,25) [cpuhp/3]
(root,0,0,00:00:05/10-01:07:55,26) [migration/3]
(root,0,0,00:00:15/10-01:07:55,27) [ksoftirqd/3]
(root,0,0,00:00:00/10-01:07:55,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/10-01:07:55,30) [kdevtmpfs]
(root,0,0,00:00:00/10-01:07:55,31) [netns]
(root,0,0,00:00:00/10-01:07:55,32) [kauditd]
(root,0,0,00:00:01/10-01:07:55,35) [khungtaskd]
(root,0,0,00:00:00/10-01:07:55,36) [oom_reaper]
(root,0,0,00:00:00/10-01:07:55,37) [writeback]
(root,0,0,00:00:00/10-01:07:55,38) [kcompactd0]
(root,0,0,00:00:00/10-01:07:55,39) [ksmd]
(root,0,0,00:00:14/10-01:07:55,40) [khugepaged]
(root,0,0,00:00:00/10-01:07:55,41) [crypto]
(root,0,0,00:00:00/10-01:07:55,42) [kintegrityd]
(root,0,0,00:00:00/10-01:07:55,43) [kblockd]
(root,0,0,00:00:00/10-01:07:54,46) [edac-poller]
(root,0,0,00:00:00/10-01:07:54,47) [devfreq_wq]
(root,0,0,00:00:00/10-01:07:54,48) [watchdogd]
(root,0,0,00:00:00/10-01:07:52,49) [kswapd0]
(root,0,0,00:00:00/10-01:07:51,67) [kthrotld]
(root,0,0,00:00:00/10-01:07:51,68) [irq/24-pciehp]
(root,0,0,00:00:00/10-01:07:51,69) [irq/25-pciehp]
(root,0,0,00:00:00/10-01:07:51,70) [irq/26-pciehp]
(root,0,0,00:00:00/10-01:07:51,71) [irq/27-pciehp]
(root,0,0,00:00:00/10-01:07:51,72) [irq/28-pciehp]
(root,0,0,00:00:00/10-01:07:51,73) [irq/29-pciehp]
(root,0,0,00:00:00/10-01:07:51,74) [irq/30-pciehp]
(root,0,0,00:00:00/10-01:07:51,75) [irq/31-pciehp]
(root,0,0,00:00:00/10-01:07:51,76) [irq/32-pciehp]
(root,0,0,00:00:00/10-01:07:51,77) [irq/33-pciehp]
(root,0,0,00:00:00/10-01:07:51,78) [irq/34-pciehp]
(root,0,0,00:00:00/10-01:07:51,79) [irq/35-pciehp]
(root,0,0,00:00:00/10-01:07:51,80) [irq/36-pciehp]
(root,0,0,00:00:00/10-01:07:51,81) [irq/37-pciehp]
(root,0,0,00:00:00/10-01:07:51,82) [irq/38-pciehp]
(root,0,0,00:00:00/10-01:07:51,83) [irq/39-pciehp]
(root,0,0,00:00:00/10-01:07:51,84) [irq/40-pciehp]
(root,0,0,00:00:00/10-01:07:51,85) [irq/41-pciehp]
(root,0,0,00:00:00/10-01:07:51,86) [irq/42-pciehp]
(root,0,0,00:00:00/10-01:07:51,87) [irq/43-pciehp]
(root,0,0,00:00:00/10-01:07:51,88) [irq/44-pciehp]
(root,0,0,00:00:00/10-01:07:51,89) [irq/45-pciehp]
(root,0,0,00:00:00/10-01:07:51,90) [irq/46-pciehp]
(root,0,0,00:00:00/10-01:07:51,91) [irq/47-pciehp]
(root,0,0,00:00:00/10-01:07:51,92) [irq/48-pciehp]
(root,0,0,00:00:00/10-01:07:51,93) [irq/49-pciehp]
(root,0,0,00:00:00/10-01:07:51,94) [irq/50-pciehp]
(root,0,0,00:00:00/10-01:07:51,95) [irq/51-pciehp]
(root,0,0,00:00:00/10-01:07:51,96) [irq/52-pciehp]
(root,0,0,00:00:00/10-01:07:51,97) [irq/53-pciehp]
(root,0,0,00:00:00/10-01:07:51,98) [irq/54-pciehp]
(root,0,0,00:00:00/10-01:07:51,99) [irq/55-pciehp]
(root,0,0,00:00:00/10-01:07:51,100) [ipv6_addrconf]
(root,0,0,00:00:00/10-01:07:51,110) [kstrp]
(root,0,0,00:00:00/10-01:07:48,153) [scsi_eh_0]
(root,0,0,00:00:00/10-01:07:48,154) [scsi_tmf_0]
(root,0,0,00:00:00/10-01:07:48,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/10-01:07:48,158) [ata_sff]
(root,0,0,00:00:00/10-01:07:48,160) [scsi_eh_1]
(root,0,0,00:00:00/10-01:07:48,164) [scsi_tmf_1]
(root,0,0,00:00:00/10-01:07:48,165) [scsi_eh_2]
(root,0,0,00:00:00/10-01:07:48,170) [scsi_tmf_2]
(root,0,0,00:00:01/10-01:07:48,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/10-01:07:48,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:04/10-01:07:48,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/10-01:07:48,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/10-01:07:47,224) [kdmflush]
(root,0,0,00:00:00/10-01:07:47,230) [kdmflush]
(root,0,0,00:00:00/10-01:07:43,258) [kworker/u257:0]
(root,0,0,00:00:00/10-01:07:43,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/10-01:07:43,261) [ext4-rsv-conver]
(root,0,0,00:00:00/10-01:07:41,269) [kdmflush]
(root,0,0,00:00:00/10-01:07:41,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/10-01:07:41,286) [ext4-rsv-conver]
(root,85696,48488,05:07:41/10-01:07:36,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:03/10-01:07:36,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/10-01:07:35,473) [ttm_swap]
(root,0,0,00:00:00/10-01:07:35,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/10-01:07:35,511) [kdmflush]
(root,0,0,00:00:00/10-01:07:35,513) [kdmflush]
(root,0,0,00:00:00/10-01:07:35,514) [kdmflush]
(root,0,0,00:00:00/10-01:07:35,516) [kdmflush]
(root,0,0,00:00:00/10-01:07:34,544) [jbd2/sda1-8]
(root,0,0,00:00:00/10-01:07:34,545) [ext4-rsv-conver]
(root,0,0,00:00:00/10-01:07:34,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/10-01:07:34,558) [ext4-rsv-conver]
(root,0,0,00:00:00/10-01:07:34,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/10-01:07:34,562) [ext4-rsv-conver]
(root,0,0,00:00:00/10-01:07:34,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/10-01:07:34,568) [ext4-rsv-conver]
(root,0,0,00:00:00/10-01:07:32,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/10-01:07:32,573) [ext4-rsv-conver]
(root,221728,4872,03:42:22/10-01:07:31,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4348,00:00:38/10-01:07:31,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:00:31/10-01:07:31,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:02/10-01:07:31,608) /usr/sbin/cron -f
(root,231612,32976,00:01:02/10-01:07:31,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:04:13/10-01:07:31,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/10-01:07:31,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:01:22/10-01:07:31,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6976,00:00:01/10-01:07:31,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/10-01:07:30,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/10-01:07:30,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73612,9996,00:00:21/10-01:07:30,742) nginx: worker process
(www-data,72592,7296,00:00:00/10-01:07:30,743) nginx: worker process
(www-data,72736,9328,00:00:00/10-01:07:30,744) nginx: worker process
(www-data,72592,5744,00:00:00/10-01:07:30,745) nginx: worker process
(www-data,231896,17304,00:00:00/10-01:07:29,772) php-fpm: pool www
(www-data,231896,17084,00:00:00/10-01:07:29,773) php-fpm: pool www
(root,9464,2476,00:00:00/9-09:26:41,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/9-09:26:40,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:18/9-09:26:40,1397) /usr/sbin/postdrop -r
(root,0,0,00:08:43/9-05:04:10,1571) [kworker/0:1-events_power_efficient]
(root,9464,2476,00:00:00/8-09:26:40,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/8-09:26:40,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:15/8-09:26:40,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/7-09:26:41,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/7-09:26:41,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:14/7-09:26:41,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/6-09:26:41,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/6-09:26:41,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:12/6-09:26:41,5208) /usr/sbin/postdrop -r
(root,0,0,00:00:04/6-00:52:10,6281) [kworker/2:1-events]
(root,9464,2476,00:00:00/5-09:26:40,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/5-09:26:40,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:10/5-09:26:40,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-09:26:41,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/4-09:26:41,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:00:08/4-09:26:40,9464) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-09:26:41,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/3-09:26:41,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:06/3-09:26:41,10902) /usr/sbin/postdrop -r
(fcpys,21160,8772,00:00:00/3-04:11:28,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/3-04:11:28,11157) (sd-pam)
(root,5860,2640,00:00:00/3-04:10:12,11180) ssh-agent -s
(root,9464,2476,00:00:00/2-09:26:41,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/2-09:26:41,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:04/2-09:26:41,12190) /usr/sbin/postdrop -r
(root,0,0,00:00:01/2-03:25:44,12483) [kworker/1:1-mm_percpu_wq]
(root,9464,2476,00:00:00/1-09:26:41,13604) /usr/sbin/CRON -f
(root,43464,7628,00:00:00/1-09:26:41,13641) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:02/1-09:26:40,13642) /usr/sbin/postdrop -r
(root,0,0,00:00:00/09:27:37,15101) [kworker/1:2-cgroup_destroy]
(root,9464,2476,00:00:00/09:26:41,15103) /usr/sbin/CRON -f
(root,43464,7856,00:00:00/09:26:41,15140) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7724,00:00:00/09:26:41,15141) /usr/sbin/postdrop -r
(root,0,0,00:00:00/04:42:35,15387) [kworker/u256:1-flush-254:0]
(root,0,0,00:00:00/51:34,15581) [kworker/2:2-cgroup_destroy]
(root,0,0,00:00:00/50:48,15584) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/42:35,15592) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/23:25,15609) [kworker/3:2-events]
(root,0,0,00:00:00/07:52,15622) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/02:39,15626) [kworker/3:0-ata_sff]
(root,6856,3324,00:00:00/00:00,15674) /bin/bash /usr/bin/check_mk_agent
(root,7636,2680,00:00:00/00:00,15692) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,15693) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-27 22:52

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb88373a48

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104024,10232,00:00:54/7-22:36:55,1) /sbin/init
(root,0,0,00:00:00/7-22:36:55,2) [kthreadd]
(root,0,0,00:00:00/7-22:36:55,3) [rcu_gp]
(root,0,0,00:00:00/7-22:36:55,4) [rcu_par_gp]
(root,0,0,00:00:00/7-22:36:55,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/7-22:36:55,8) [mm_percpu_wq]
(root,0,0,00:00:03/7-22:36:55,9) [ksoftirqd/0]
(root,0,0,00:29:00/7-22:36:55,10) [rcu_sched]
(root,0,0,00:00:00/7-22:36:55,11) [rcu_bh]
(root,0,0,00:00:04/7-22:36:55,12) [migration/0]
(root,0,0,00:00:00/7-22:36:55,14) [cpuhp/0]
(root,0,0,00:00:00/7-22:36:55,15) [cpuhp/1]
(root,0,0,00:00:02/7-22:36:55,16) [migration/1]
(root,0,0,00:00:03/7-22:36:55,17) [ksoftirqd/1]
(root,0,0,00:00:00/7-22:36:55,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/7-22:36:55,20) [cpuhp/2]
(root,0,0,00:00:04/7-22:36:55,21) [migration/2]
(root,0,0,00:00:06/7-22:36:55,22) [ksoftirqd/2]
(root,0,0,00:00:00/7-22:36:55,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/7-22:36:55,25) [cpuhp/3]
(root,0,0,00:00:04/7-22:36:55,26) [migration/3]
(root,0,0,00:00:11/7-22:36:55,27) [ksoftirqd/3]
(root,0,0,00:00:00/7-22:36:55,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/7-22:36:55,30) [kdevtmpfs]
(root,0,0,00:00:00/7-22:36:55,31) [netns]
(root,0,0,00:00:00/7-22:36:55,32) [kauditd]
(root,0,0,00:00:00/7-22:36:55,35) [khungtaskd]
(root,0,0,00:00:00/7-22:36:55,36) [oom_reaper]
(root,0,0,00:00:00/7-22:36:55,37) [writeback]
(root,0,0,00:00:00/7-22:36:55,38) [kcompactd0]
(root,0,0,00:00:00/7-22:36:55,39) [ksmd]
(root,0,0,00:00:11/7-22:36:55,40) [khugepaged]
(root,0,0,00:00:00/7-22:36:55,41) [crypto]
(root,0,0,00:00:00/7-22:36:55,42) [kintegrityd]
(root,0,0,00:00:00/7-22:36:55,43) [kblockd]
(root,0,0,00:00:00/7-22:36:54,46) [edac-poller]
(root,0,0,00:00:00/7-22:36:54,47) [devfreq_wq]
(root,0,0,00:00:00/7-22:36:54,48) [watchdogd]
(root,0,0,00:00:00/7-22:36:52,49) [kswapd0]
(root,0,0,00:00:00/7-22:36:51,67) [kthrotld]
(root,0,0,00:00:00/7-22:36:51,68) [irq/24-pciehp]
(root,0,0,00:00:00/7-22:36:51,69) [irq/25-pciehp]
(root,0,0,00:00:00/7-22:36:51,70) [irq/26-pciehp]
(root,0,0,00:00:00/7-22:36:51,71) [irq/27-pciehp]
(root,0,0,00:00:00/7-22:36:51,72) [irq/28-pciehp]
(root,0,0,00:00:00/7-22:36:51,73) [irq/29-pciehp]
(root,0,0,00:00:00/7-22:36:51,74) [irq/30-pciehp]
(root,0,0,00:00:00/7-22:36:51,75) [irq/31-pciehp]
(root,0,0,00:00:00/7-22:36:51,76) [irq/32-pciehp]
(root,0,0,00:00:00/7-22:36:51,77) [irq/33-pciehp]
(root,0,0,00:00:00/7-22:36:51,78) [irq/34-pciehp]
(root,0,0,00:00:00/7-22:36:51,79) [irq/35-pciehp]
(root,0,0,00:00:00/7-22:36:51,80) [irq/36-pciehp]
(root,0,0,00:00:00/7-22:36:51,81) [irq/37-pciehp]
(root,0,0,00:00:00/7-22:36:51,82) [irq/38-pciehp]
(root,0,0,00:00:00/7-22:36:51,83) [irq/39-pciehp]
(root,0,0,00:00:00/7-22:36:51,84) [irq/40-pciehp]
(root,0,0,00:00:00/7-22:36:51,85) [irq/41-pciehp]
(root,0,0,00:00:00/7-22:36:51,86) [irq/42-pciehp]
(root,0,0,00:00:00/7-22:36:51,87) [irq/43-pciehp]
(root,0,0,00:00:00/7-22:36:51,88) [irq/44-pciehp]
(root,0,0,00:00:00/7-22:36:51,89) [irq/45-pciehp]
(root,0,0,00:00:00/7-22:36:51,90) [irq/46-pciehp]
(root,0,0,00:00:00/7-22:36:51,91) [irq/47-pciehp]
(root,0,0,00:00:00/7-22:36:51,92) [irq/48-pciehp]
(root,0,0,00:00:00/7-22:36:51,93) [irq/49-pciehp]
(root,0,0,00:00:00/7-22:36:51,94) [irq/50-pciehp]
(root,0,0,00:00:00/7-22:36:51,95) [irq/51-pciehp]
(root,0,0,00:00:00/7-22:36:51,96) [irq/52-pciehp]
(root,0,0,00:00:00/7-22:36:51,97) [irq/53-pciehp]
(root,0,0,00:00:00/7-22:36:51,98) [irq/54-pciehp]
(root,0,0,00:00:00/7-22:36:51,99) [irq/55-pciehp]
(root,0,0,00:00:00/7-22:36:51,100) [ipv6_addrconf]
(root,0,0,00:00:00/7-22:36:51,110) [kstrp]
(root,0,0,00:00:00/7-22:36:48,153) [scsi_eh_0]
(root,0,0,00:00:00/7-22:36:48,154) [scsi_tmf_0]
(root,0,0,00:00:00/7-22:36:48,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/7-22:36:48,158) [ata_sff]
(root,0,0,00:00:00/7-22:36:48,160) [scsi_eh_1]
(root,0,0,00:00:00/7-22:36:48,164) [scsi_tmf_1]
(root,0,0,00:00:00/7-22:36:48,165) [scsi_eh_2]
(root,0,0,00:00:00/7-22:36:48,170) [scsi_tmf_2]
(root,0,0,00:00:01/7-22:36:48,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/7-22:36:48,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:03/7-22:36:48,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/7-22:36:48,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/7-22:36:47,224) [kdmflush]
(root,0,0,00:00:00/7-22:36:47,230) [kdmflush]
(root,0,0,00:00:00/7-22:36:43,258) [kworker/u257:0]
(root,0,0,00:00:00/7-22:36:43,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/7-22:36:43,261) [ext4-rsv-conver]
(root,0,0,00:00:00/7-22:36:41,269) [kdmflush]
(root,0,0,00:00:00/7-22:36:41,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/7-22:36:41,286) [ext4-rsv-conver]
(root,77912,41028,03:50:37/7-22:36:36,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:02/7-22:36:36,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/7-22:36:35,473) [ttm_swap]
(root,0,0,00:00:00/7-22:36:35,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/7-22:36:35,511) [kdmflush]
(root,0,0,00:00:00/7-22:36:35,513) [kdmflush]
(root,0,0,00:00:00/7-22:36:35,514) [kdmflush]
(root,0,0,00:00:00/7-22:36:35,516) [kdmflush]
(root,0,0,00:00:00/7-22:36:34,544) [jbd2/sda1-8]
(root,0,0,00:00:00/7-22:36:34,545) [ext4-rsv-conver]
(root,0,0,00:00:00/7-22:36:34,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/7-22:36:34,558) [ext4-rsv-conver]
(root,0,0,00:00:00/7-22:36:34,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/7-22:36:34,562) [ext4-rsv-conver]
(root,0,0,00:00:00/7-22:36:34,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/7-22:36:34,568) [ext4-rsv-conver]
(root,0,0,00:00:00/7-22:36:32,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/7-22:36:32,573) [ext4-rsv-conver]
(root,221728,4836,02:48:27/7-22:36:31,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4348,00:00:30/7-22:36:31,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:00:24/7-22:36:31,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:02/7-22:36:31,608) /usr/sbin/cron -f
(root,231612,32976,00:00:49/7-22:36:31,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:03:19/7-22:36:31,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/7-22:36:31,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:01:05/7-22:36:31,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6976,00:00:01/7-22:36:31,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/7-22:36:30,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/7-22:36:30,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73612,9996,00:00:14/7-22:36:30,742) nginx: worker process
(www-data,72592,7296,00:00:00/7-22:36:30,743) nginx: worker process
(www-data,72592,9100,00:00:00/7-22:36:30,744) nginx: worker process
(www-data,72592,5744,00:00:00/7-22:36:30,745) nginx: worker process
(www-data,231896,17304,00:00:00/7-22:36:29,772) php-fpm: pool www
(www-data,231896,17084,00:00:00/7-22:36:29,773) php-fpm: pool www
(root,9464,2476,00:00:00/7-06:55:41,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/7-06:55:40,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:14/7-06:55:40,1397) /usr/sbin/postdrop -r
(root,0,0,00:06:44/7-02:33:10,1571) [kworker/0:1-events]
(root,9464,2476,00:00:00/6-06:55:40,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/6-06:55:40,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:12/6-06:55:40,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/5-06:55:41,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/5-06:55:41,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:10/5-06:55:41,3629) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/4-06:55:41,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/4-06:55:41,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:08/4-06:55:41,5208) /usr/sbin/postdrop -r
(root,0,0,00:00:02/3-22:21:10,6281) [kworker/2:1-events]
(root,9464,2476,00:00:00/3-06:55:40,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/3-06:55:40,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:06/3-06:55:40,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/2-06:55:41,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/2-06:55:41,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:00:04/2-06:55:40,9464) /usr/sbin/postdrop -r
(root,0,0,00:00:00/2-06:18:38,9501) [kworker/2:2]
(root,9464,2476,00:00:00/1-06:55:41,10864) /usr/sbin/CRON -f
(root,43464,7660,00:00:00/1-06:55:41,10901) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7672,00:00:02/1-06:55:41,10902) /usr/sbin/postdrop -r
(root,14660,7836,00:00:00/1-01:41:14,11152) sshd: fcpys [priv]
(fcpys,21160,8772,00:00:00/1-01:40:28,11156) /lib/systemd/systemd --user
(fcpys,105292,2576,00:00:00/1-01:40:28,11157) (sd-pam)
(fcpys,14944,5972,00:00:01/1-01:40:28,11170) sshd: fcpys@pts/0
(fcpys,7780,4652,00:00:00/1-01:40:26,11171) -bash
(root,10472,3928,00:00:00/1-01:39:54,11174) sudo -i
(root,7648,4588,00:00:00/1-01:39:51,11175) -bash
(root,5860,2640,00:00:00/1-01:39:12,11180) ssh-agent -s
(root,13752,5988,00:00:00/1-01:38:32,11184) ssh -p 9022 avazquez@132.248.48.102
(root,0,0,00:00:00/22:20:51,11341) [kworker/1:0-events]
(root,0,0,00:00:00/06:58:26,12148) [kworker/0:2-cgroup_destroy]
(root,9464,2476,00:00:00/06:55:41,12152) /usr/sbin/CRON -f
(root,43464,7748,00:00:00/06:55:41,12189) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7668,00:00:00/06:55:41,12190) /usr/sbin/postdrop -r
(root,0,0,00:00:00/03:41:30,12342) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/02:11:36,12412) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/54:44,12483) [kworker/1:1-events]
(root,0,0,00:00:00/17:09,12511) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/06:48,12520) [kworker/3:0-events]
(root,0,0,00:00:00/01:36,12526) [kworker/3:1-ata_sff]
(root,6856,3476,00:00:00/00:00,12661) /bin/bash /usr/bin/check_mk_agent
(root,7636,2736,00:00:00/00:00,12679) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,12680) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-25 20:21

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb7c915821

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104024,10224,00:00:43/6-00:55:30,1) /sbin/init
(root,0,0,00:00:00/6-00:55:30,2) [kthreadd]
(root,0,0,00:00:00/6-00:55:30,3) [rcu_gp]
(root,0,0,00:00:00/6-00:55:30,4) [rcu_par_gp]
(root,0,0,00:00:00/6-00:55:30,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/6-00:55:30,8) [mm_percpu_wq]
(root,0,0,00:00:02/6-00:55:30,9) [ksoftirqd/0]
(root,0,0,00:21:49/6-00:55:30,10) [rcu_sched]
(root,0,0,00:00:00/6-00:55:30,11) [rcu_bh]
(root,0,0,00:00:03/6-00:55:30,12) [migration/0]
(root,0,0,00:00:00/6-00:55:30,14) [cpuhp/0]
(root,0,0,00:00:00/6-00:55:30,15) [cpuhp/1]
(root,0,0,00:00:02/6-00:55:30,16) [migration/1]
(root,0,0,00:00:02/6-00:55:30,17) [ksoftirqd/1]
(root,0,0,00:00:00/6-00:55:30,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/6-00:55:30,20) [cpuhp/2]
(root,0,0,00:00:04/6-00:55:30,21) [migration/2]
(root,0,0,00:00:04/6-00:55:30,22) [ksoftirqd/2]
(root,0,0,00:00:00/6-00:55:30,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/6-00:55:30,25) [cpuhp/3]
(root,0,0,00:00:04/6-00:55:30,26) [migration/3]
(root,0,0,00:00:07/6-00:55:30,27) [ksoftirqd/3]
(root,0,0,00:00:00/6-00:55:30,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/6-00:55:30,30) [kdevtmpfs]
(root,0,0,00:00:00/6-00:55:30,31) [netns]
(root,0,0,00:00:00/6-00:55:30,32) [kauditd]
(root,0,0,00:00:00/6-00:55:30,35) [khungtaskd]
(root,0,0,00:00:00/6-00:55:30,36) [oom_reaper]
(root,0,0,00:00:00/6-00:55:30,37) [writeback]
(root,0,0,00:00:00/6-00:55:30,38) [kcompactd0]
(root,0,0,00:00:00/6-00:55:30,39) [ksmd]
(root,0,0,00:00:09/6-00:55:30,40) [khugepaged]
(root,0,0,00:00:00/6-00:55:30,41) [crypto]
(root,0,0,00:00:00/6-00:55:30,42) [kintegrityd]
(root,0,0,00:00:00/6-00:55:30,43) [kblockd]
(root,0,0,00:00:00/6-00:55:29,46) [edac-poller]
(root,0,0,00:00:00/6-00:55:29,47) [devfreq_wq]
(root,0,0,00:00:00/6-00:55:29,48) [watchdogd]
(root,0,0,00:00:00/6-00:55:27,49) [kswapd0]
(root,0,0,00:00:00/6-00:55:26,67) [kthrotld]
(root,0,0,00:00:00/6-00:55:26,68) [irq/24-pciehp]
(root,0,0,00:00:00/6-00:55:26,69) [irq/25-pciehp]
(root,0,0,00:00:00/6-00:55:26,70) [irq/26-pciehp]
(root,0,0,00:00:00/6-00:55:26,71) [irq/27-pciehp]
(root,0,0,00:00:00/6-00:55:26,72) [irq/28-pciehp]
(root,0,0,00:00:00/6-00:55:26,73) [irq/29-pciehp]
(root,0,0,00:00:00/6-00:55:26,74) [irq/30-pciehp]
(root,0,0,00:00:00/6-00:55:26,75) [irq/31-pciehp]
(root,0,0,00:00:00/6-00:55:26,76) [irq/32-pciehp]
(root,0,0,00:00:00/6-00:55:26,77) [irq/33-pciehp]
(root,0,0,00:00:00/6-00:55:26,78) [irq/34-pciehp]
(root,0,0,00:00:00/6-00:55:26,79) [irq/35-pciehp]
(root,0,0,00:00:00/6-00:55:26,80) [irq/36-pciehp]
(root,0,0,00:00:00/6-00:55:26,81) [irq/37-pciehp]
(root,0,0,00:00:00/6-00:55:26,82) [irq/38-pciehp]
(root,0,0,00:00:00/6-00:55:26,83) [irq/39-pciehp]
(root,0,0,00:00:00/6-00:55:26,84) [irq/40-pciehp]
(root,0,0,00:00:00/6-00:55:26,85) [irq/41-pciehp]
(root,0,0,00:00:00/6-00:55:26,86) [irq/42-pciehp]
(root,0,0,00:00:00/6-00:55:26,87) [irq/43-pciehp]
(root,0,0,00:00:00/6-00:55:26,88) [irq/44-pciehp]
(root,0,0,00:00:00/6-00:55:26,89) [irq/45-pciehp]
(root,0,0,00:00:00/6-00:55:26,90) [irq/46-pciehp]
(root,0,0,00:00:00/6-00:55:26,91) [irq/47-pciehp]
(root,0,0,00:00:00/6-00:55:26,92) [irq/48-pciehp]
(root,0,0,00:00:00/6-00:55:26,93) [irq/49-pciehp]
(root,0,0,00:00:00/6-00:55:26,94) [irq/50-pciehp]
(root,0,0,00:00:00/6-00:55:26,95) [irq/51-pciehp]
(root,0,0,00:00:00/6-00:55:26,96) [irq/52-pciehp]
(root,0,0,00:00:00/6-00:55:26,97) [irq/53-pciehp]
(root,0,0,00:00:00/6-00:55:26,98) [irq/54-pciehp]
(root,0,0,00:00:00/6-00:55:26,99) [irq/55-pciehp]
(root,0,0,00:00:00/6-00:55:26,100) [ipv6_addrconf]
(root,0,0,00:00:00/6-00:55:26,110) [kstrp]
(root,0,0,00:00:00/6-00:55:23,153) [scsi_eh_0]
(root,0,0,00:00:00/6-00:55:23,154) [scsi_tmf_0]
(root,0,0,00:00:00/6-00:55:23,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/6-00:55:23,158) [ata_sff]
(root,0,0,00:00:00/6-00:55:23,160) [scsi_eh_1]
(root,0,0,00:00:00/6-00:55:23,164) [scsi_tmf_1]
(root,0,0,00:00:00/6-00:55:23,165) [scsi_eh_2]
(root,0,0,00:00:00/6-00:55:23,170) [scsi_tmf_2]
(root,0,0,00:00:01/6-00:55:23,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/6-00:55:23,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:03/6-00:55:23,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/6-00:55:23,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/6-00:55:22,224) [kdmflush]
(root,0,0,00:00:00/6-00:55:22,230) [kdmflush]
(root,0,0,00:00:00/6-00:55:18,258) [kworker/u257:0]
(root,0,0,00:00:00/6-00:55:18,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/6-00:55:18,261) [ext4-rsv-conver]
(root,0,0,00:00:00/6-00:55:16,269) [kdmflush]
(root,0,0,00:00:00/6-00:55:16,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/6-00:55:16,286) [ext4-rsv-conver]
(root,57248,25908,02:45:00/6-00:55:11,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:02/6-00:55:11,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/6-00:55:10,473) [ttm_swap]
(root,0,0,00:00:00/6-00:55:10,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/6-00:55:10,511) [kdmflush]
(root,0,0,00:00:00/6-00:55:10,513) [kdmflush]
(root,0,0,00:00:00/6-00:55:10,514) [kdmflush]
(root,0,0,00:00:00/6-00:55:10,516) [kdmflush]
(root,0,0,00:00:00/6-00:55:09,544) [jbd2/sda1-8]
(root,0,0,00:00:00/6-00:55:09,545) [ext4-rsv-conver]
(root,0,0,00:00:00/6-00:55:09,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/6-00:55:09,558) [ext4-rsv-conver]
(root,0,0,00:00:00/6-00:55:09,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/6-00:55:09,562) [ext4-rsv-conver]
(root,0,0,00:00:00/6-00:55:09,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/6-00:55:09,568) [ext4-rsv-conver]
(root,0,0,00:00:00/6-00:55:07,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/6-00:55:07,573) [ext4-rsv-conver]
(root,221728,4784,02:01:25/6-00:55:06,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4344,00:00:23/6-00:55:06,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:00:18/6-00:55:06,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:01/6-00:55:06,608) /usr/sbin/cron -f
(root,231612,32976,00:00:37/6-00:55:06,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:02:31/6-00:55:06,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/6-00:55:06,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:00:49/6-00:55:06,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6976,00:00:01/6-00:55:06,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/6-00:55:05,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/6-00:55:05,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73612,9996,00:00:10/6-00:55:05,742) nginx: worker process
(www-data,72592,7296,00:00:00/6-00:55:05,743) nginx: worker process
(www-data,72592,9100,00:00:00/6-00:55:05,744) nginx: worker process
(www-data,72592,5744,00:00:00/6-00:55:05,745) nginx: worker process
(www-data,231896,17304,00:00:00/6-00:55:04,772) php-fpm: pool www
(www-data,231896,17084,00:00:00/6-00:55:04,773) php-fpm: pool www
(root,9464,2476,00:00:00/5-09:14:16,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/5-09:14:15,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:10/5-09:14:15,1397) /usr/sbin/postdrop -r
(root,0,0,00:04:57/5-04:51:45,1571) [kworker/0:1-events]
(root,9464,2476,00:00:00/4-09:14:15,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/4-09:14:15,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:08/4-09:14:15,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/3-09:14:16,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/3-09:14:16,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:06/3-09:14:16,3629) /usr/sbin/postdrop -r
(root,0,0,00:00:01/2-21:05:21,4293) [kworker/1:2-events]
(root,9464,2476,00:00:00/2-09:14:16,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/2-09:14:16,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:04/2-09:14:16,5208) /usr/sbin/postdrop -r
(root,0,0,00:00:01/2-00:39:45,6281) [kworker/2:1-events]
(root,9464,2476,00:00:00/1-09:14:15,8188) /usr/sbin/CRON -f
(root,43464,7592,00:00:00/1-09:14:15,8225) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:02/1-09:14:15,8226) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/09:14:16,9426) /usr/sbin/CRON -f
(root,43464,7672,00:00:00/09:14:16,9463) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7848,00:00:00/09:14:15,9464) /usr/sbin/postdrop -r
(root,0,0,00:00:00/08:37:13,9501) [kworker/2:2]
(root,0,0,00:00:00/07:46:40,9548) [kworker/0:2]
(root,0,0,00:00:00/39:42,9888) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/39:39,9889) [kworker/1:0]
(root,0,0,00:00:00/30:01,9898) [kworker/u256:0-flush-254:5]
(root,0,0,00:00:00/15:09,9911) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/09:59,9915) [kworker/3:1-events]
(root,0,0,00:00:00/04:46,9918) [kworker/3:2-ata_sff]
(root,6856,3344,00:00:00/00:00,10029) /bin/bash /usr/bin/check_mk_agent
(root,7636,2612,00:00:00/00:00,10047) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,996,00:00:00/00:00,10048) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-23 22:39

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbb2b9d5ec

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104024,10224,00:00:30/4-00:24:54,1) /sbin/init
(root,0,0,00:00:00/4-00:24:54,2) [kthreadd]
(root,0,0,00:00:00/4-00:24:54,3) [rcu_gp]
(root,0,0,00:00:00/4-00:24:54,4) [rcu_par_gp]
(root,0,0,00:00:00/4-00:24:54,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/4-00:24:54,8) [mm_percpu_wq]
(root,0,0,00:00:01/4-00:24:54,9) [ksoftirqd/0]
(root,0,0,00:14:35/4-00:24:54,10) [rcu_sched]
(root,0,0,00:00:00/4-00:24:54,11) [rcu_bh]
(root,0,0,00:00:03/4-00:24:54,12) [migration/0]
(root,0,0,00:00:00/4-00:24:54,14) [cpuhp/0]
(root,0,0,00:00:00/4-00:24:54,15) [cpuhp/1]
(root,0,0,00:00:01/4-00:24:54,16) [migration/1]
(root,0,0,00:00:01/4-00:24:54,17) [ksoftirqd/1]
(root,0,0,00:00:00/4-00:24:54,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/4-00:24:54,20) [cpuhp/2]
(root,0,0,00:00:03/4-00:24:54,21) [migration/2]
(root,0,0,00:00:03/4-00:24:54,22) [ksoftirqd/2]
(root,0,0,00:00:00/4-00:24:54,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/4-00:24:54,25) [cpuhp/3]
(root,0,0,00:00:03/4-00:24:54,26) [migration/3]
(root,0,0,00:00:04/4-00:24:54,27) [ksoftirqd/3]
(root,0,0,00:00:00/4-00:24:54,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/4-00:24:54,30) [kdevtmpfs]
(root,0,0,00:00:00/4-00:24:54,31) [netns]
(root,0,0,00:00:00/4-00:24:54,32) [kauditd]
(root,0,0,00:00:00/4-00:24:54,35) [khungtaskd]
(root,0,0,00:00:00/4-00:24:54,36) [oom_reaper]
(root,0,0,00:00:00/4-00:24:54,37) [writeback]
(root,0,0,00:00:00/4-00:24:54,38) [kcompactd0]
(root,0,0,00:00:00/4-00:24:54,39) [ksmd]
(root,0,0,00:00:06/4-00:24:54,40) [khugepaged]
(root,0,0,00:00:00/4-00:24:54,41) [crypto]
(root,0,0,00:00:00/4-00:24:54,42) [kintegrityd]
(root,0,0,00:00:00/4-00:24:54,43) [kblockd]
(root,0,0,00:00:00/4-00:24:53,46) [edac-poller]
(root,0,0,00:00:00/4-00:24:53,47) [devfreq_wq]
(root,0,0,00:00:00/4-00:24:53,48) [watchdogd]
(root,0,0,00:00:00/4-00:24:51,49) [kswapd0]
(root,0,0,00:00:00/4-00:24:50,67) [kthrotld]
(root,0,0,00:00:00/4-00:24:50,68) [irq/24-pciehp]
(root,0,0,00:00:00/4-00:24:50,69) [irq/25-pciehp]
(root,0,0,00:00:00/4-00:24:50,70) [irq/26-pciehp]
(root,0,0,00:00:00/4-00:24:50,71) [irq/27-pciehp]
(root,0,0,00:00:00/4-00:24:50,72) [irq/28-pciehp]
(root,0,0,00:00:00/4-00:24:50,73) [irq/29-pciehp]
(root,0,0,00:00:00/4-00:24:50,74) [irq/30-pciehp]
(root,0,0,00:00:00/4-00:24:50,75) [irq/31-pciehp]
(root,0,0,00:00:00/4-00:24:50,76) [irq/32-pciehp]
(root,0,0,00:00:00/4-00:24:50,77) [irq/33-pciehp]
(root,0,0,00:00:00/4-00:24:50,78) [irq/34-pciehp]
(root,0,0,00:00:00/4-00:24:50,79) [irq/35-pciehp]
(root,0,0,00:00:00/4-00:24:50,80) [irq/36-pciehp]
(root,0,0,00:00:00/4-00:24:50,81) [irq/37-pciehp]
(root,0,0,00:00:00/4-00:24:50,82) [irq/38-pciehp]
(root,0,0,00:00:00/4-00:24:50,83) [irq/39-pciehp]
(root,0,0,00:00:00/4-00:24:50,84) [irq/40-pciehp]
(root,0,0,00:00:00/4-00:24:50,85) [irq/41-pciehp]
(root,0,0,00:00:00/4-00:24:50,86) [irq/42-pciehp]
(root,0,0,00:00:00/4-00:24:50,87) [irq/43-pciehp]
(root,0,0,00:00:00/4-00:24:50,88) [irq/44-pciehp]
(root,0,0,00:00:00/4-00:24:50,89) [irq/45-pciehp]
(root,0,0,00:00:00/4-00:24:50,90) [irq/46-pciehp]
(root,0,0,00:00:00/4-00:24:50,91) [irq/47-pciehp]
(root,0,0,00:00:00/4-00:24:50,92) [irq/48-pciehp]
(root,0,0,00:00:00/4-00:24:50,93) [irq/49-pciehp]
(root,0,0,00:00:00/4-00:24:50,94) [irq/50-pciehp]
(root,0,0,00:00:00/4-00:24:50,95) [irq/51-pciehp]
(root,0,0,00:00:00/4-00:24:50,96) [irq/52-pciehp]
(root,0,0,00:00:00/4-00:24:50,97) [irq/53-pciehp]
(root,0,0,00:00:00/4-00:24:50,98) [irq/54-pciehp]
(root,0,0,00:00:00/4-00:24:50,99) [irq/55-pciehp]
(root,0,0,00:00:00/4-00:24:50,100) [ipv6_addrconf]
(root,0,0,00:00:00/4-00:24:50,110) [kstrp]
(root,0,0,00:00:00/4-00:24:47,153) [scsi_eh_0]
(root,0,0,00:00:00/4-00:24:47,154) [scsi_tmf_0]
(root,0,0,00:00:00/4-00:24:47,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/4-00:24:47,158) [ata_sff]
(root,0,0,00:00:00/4-00:24:47,160) [scsi_eh_1]
(root,0,0,00:00:00/4-00:24:47,164) [scsi_tmf_1]
(root,0,0,00:00:00/4-00:24:47,165) [scsi_eh_2]
(root,0,0,00:00:00/4-00:24:47,170) [scsi_tmf_2]
(root,0,0,00:00:01/4-00:24:47,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/4-00:24:47,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:02/4-00:24:47,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/4-00:24:47,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/4-00:24:46,224) [kdmflush]
(root,0,0,00:00:00/4-00:24:46,230) [kdmflush]
(root,0,0,00:00:00/4-00:24:42,258) [kworker/u257:0]
(root,0,0,00:00:00/4-00:24:42,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/4-00:24:42,261) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:24:40,269) [kdmflush]
(root,0,0,00:00:00/4-00:24:40,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/4-00:24:40,286) [ext4-rsv-conver]
(root,51572,18980,01:31:28/4-00:24:35,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:01/4-00:24:35,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/4-00:24:34,473) [ttm_swap]
(root,0,0,00:00:00/4-00:24:34,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/4-00:24:34,511) [kdmflush]
(root,0,0,00:00:00/4-00:24:34,513) [kdmflush]
(root,0,0,00:00:00/4-00:24:34,514) [kdmflush]
(root,0,0,00:00:00/4-00:24:34,516) [kdmflush]
(root,0,0,00:00:00/4-00:24:33,544) [jbd2/sda1-8]
(root,0,0,00:00:00/4-00:24:33,545) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:24:33,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/4-00:24:33,558) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:24:33,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/4-00:24:33,562) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:24:33,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/4-00:24:33,568) [ext4-rsv-conver]
(root,0,0,00:00:00/4-00:24:31,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/4-00:24:31,573) [ext4-rsv-conver]
(root,221728,4956,01:07:23/4-00:24:30,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4344,00:00:14/4-00:24:30,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19532,7276,00:00:12/4-00:24:30,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:01/4-00:24:30,608) /usr/sbin/cron -f
(root,231612,32976,00:00:24/4-00:24:30,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:01:38/4-00:24:30,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/4-00:24:30,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:00:31/4-00:24:30,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6976,00:00:00/4-00:24:30,679) /usr/sbin/sshd -D
(root,9604,2156,00:00:00/4-00:24:29,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/4-00:24:29,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72908,9216,00:00:06/4-00:24:29,742) nginx: worker process
(www-data,72592,5744,00:00:00/4-00:24:29,743) nginx: worker process
(www-data,72592,9100,00:00:00/4-00:24:29,744) nginx: worker process
(www-data,72592,5744,00:00:00/4-00:24:29,745) nginx: worker process
(www-data,231896,17304,00:00:00/4-00:24:28,772) php-fpm: pool www
(www-data,231896,14852,00:00:00/4-00:24:28,773) php-fpm: pool www
(root,9464,2476,00:00:00/3-08:43:40,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/3-08:43:39,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:06/3-08:43:39,1397) /usr/sbin/postdrop -r
(root,0,0,00:02:57/3-04:21:09,1571) [kworker/0:1-events]
(root,9464,2476,00:00:00/2-08:43:39,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/2-08:43:39,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:04/2-08:43:39,2409) /usr/sbin/postdrop -r
(root,9464,2476,00:00:00/1-08:43:40,3590) /usr/sbin/CRON -f
(root,43464,7544,00:00:00/1-08:43:40,3628) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7808,00:00:02/1-08:43:40,3629) /usr/sbin/postdrop -r
(root,0,0,00:00:00/1-00:09:12,4099) [kworker/2:2-events]
(root,0,0,00:00:00/20:34:45,4293) [kworker/1:2-events]
(root,9464,2476,00:00:00/08:43:40,5170) /usr/sbin/CRON -f
(root,43464,7712,00:00:00/08:43:40,5207) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7688,00:00:00/08:43:40,5208) /usr/sbin/postdrop -r
(root,0,0,00:00:00/06:44:16,5464) [kworker/0:2]
(root,0,0,00:00:00/01:51:34,6070) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/30:44,6234) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/10:00,6275) [kworker/3:0-events]
(root,0,0,00:00:00/09:20,6280) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/09:09,6281) [kworker/2:1-events]
(root,0,0,00:00:00/08:49,6282) [kworker/u256:0-flush-254:0]
(root,0,0,00:00:00/04:47,6291) [kworker/3:2-ata_sff]
(root,6856,3448,00:00:00/00:00,6406) /bin/bash /usr/bin/check_mk_agent
(root,7636,2728,00:00:00/00:00,6424) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,6425) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-21 22:09

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbe06e4e47

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104024,10192,00:00:18/2-01:50:12,1) /sbin/init
(root,0,0,00:00:00/2-01:50:12,2) [kthreadd]
(root,0,0,00:00:00/2-01:50:12,3) [rcu_gp]
(root,0,0,00:00:00/2-01:50:12,4) [rcu_par_gp]
(root,0,0,00:00:00/2-01:50:12,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/2-01:50:12,8) [mm_percpu_wq]
(root,0,0,00:00:00/2-01:50:12,9) [ksoftirqd/0]
(root,0,0,00:07:31/2-01:50:12,10) [rcu_sched]
(root,0,0,00:00:00/2-01:50:12,11) [rcu_bh]
(root,0,0,00:00:02/2-01:50:12,12) [migration/0]
(root,0,0,00:00:00/2-01:50:12,14) [cpuhp/0]
(root,0,0,00:00:00/2-01:50:12,15) [cpuhp/1]
(root,0,0,00:00:00/2-01:50:12,16) [migration/1]
(root,0,0,00:00:00/2-01:50:12,17) [ksoftirqd/1]
(root,0,0,00:00:00/2-01:50:12,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/2-01:50:12,20) [cpuhp/2]
(root,0,0,00:00:02/2-01:50:12,21) [migration/2]
(root,0,0,00:00:01/2-01:50:12,22) [ksoftirqd/2]
(root,0,0,00:00:00/2-01:50:12,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/2-01:50:12,25) [cpuhp/3]
(root,0,0,00:00:03/2-01:50:12,26) [migration/3]
(root,0,0,00:00:02/2-01:50:12,27) [ksoftirqd/3]
(root,0,0,00:00:00/2-01:50:12,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/2-01:50:12,30) [kdevtmpfs]
(root,0,0,00:00:00/2-01:50:12,31) [netns]
(root,0,0,00:00:00/2-01:50:12,32) [kauditd]
(root,0,0,00:00:00/2-01:50:12,34) [kworker/1:1-events]
(root,0,0,00:00:00/2-01:50:12,35) [khungtaskd]
(root,0,0,00:00:00/2-01:50:12,36) [oom_reaper]
(root,0,0,00:00:00/2-01:50:12,37) [writeback]
(root,0,0,00:00:00/2-01:50:12,38) [kcompactd0]
(root,0,0,00:00:00/2-01:50:12,39) [ksmd]
(root,0,0,00:00:03/2-01:50:12,40) [khugepaged]
(root,0,0,00:00:00/2-01:50:12,41) [crypto]
(root,0,0,00:00:00/2-01:50:12,42) [kintegrityd]
(root,0,0,00:00:00/2-01:50:12,43) [kblockd]
(root,0,0,00:00:00/2-01:50:11,45) [kworker/2:1-events]
(root,0,0,00:00:00/2-01:50:11,46) [edac-poller]
(root,0,0,00:00:00/2-01:50:11,47) [devfreq_wq]
(root,0,0,00:00:00/2-01:50:11,48) [watchdogd]
(root,0,0,00:00:00/2-01:50:09,49) [kswapd0]
(root,0,0,00:00:00/2-01:50:08,67) [kthrotld]
(root,0,0,00:00:00/2-01:50:08,68) [irq/24-pciehp]
(root,0,0,00:00:00/2-01:50:08,69) [irq/25-pciehp]
(root,0,0,00:00:00/2-01:50:08,70) [irq/26-pciehp]
(root,0,0,00:00:00/2-01:50:08,71) [irq/27-pciehp]
(root,0,0,00:00:00/2-01:50:08,72) [irq/28-pciehp]
(root,0,0,00:00:00/2-01:50:08,73) [irq/29-pciehp]
(root,0,0,00:00:00/2-01:50:08,74) [irq/30-pciehp]
(root,0,0,00:00:00/2-01:50:08,75) [irq/31-pciehp]
(root,0,0,00:00:00/2-01:50:08,76) [irq/32-pciehp]
(root,0,0,00:00:00/2-01:50:08,77) [irq/33-pciehp]
(root,0,0,00:00:00/2-01:50:08,78) [irq/34-pciehp]
(root,0,0,00:00:00/2-01:50:08,79) [irq/35-pciehp]
(root,0,0,00:00:00/2-01:50:08,80) [irq/36-pciehp]
(root,0,0,00:00:00/2-01:50:08,81) [irq/37-pciehp]
(root,0,0,00:00:00/2-01:50:08,82) [irq/38-pciehp]
(root,0,0,00:00:00/2-01:50:08,83) [irq/39-pciehp]
(root,0,0,00:00:00/2-01:50:08,84) [irq/40-pciehp]
(root,0,0,00:00:00/2-01:50:08,85) [irq/41-pciehp]
(root,0,0,00:00:00/2-01:50:08,86) [irq/42-pciehp]
(root,0,0,00:00:00/2-01:50:08,87) [irq/43-pciehp]
(root,0,0,00:00:00/2-01:50:08,88) [irq/44-pciehp]
(root,0,0,00:00:00/2-01:50:08,89) [irq/45-pciehp]
(root,0,0,00:00:00/2-01:50:08,90) [irq/46-pciehp]
(root,0,0,00:00:00/2-01:50:08,91) [irq/47-pciehp]
(root,0,0,00:00:00/2-01:50:08,92) [irq/48-pciehp]
(root,0,0,00:00:00/2-01:50:08,93) [irq/49-pciehp]
(root,0,0,00:00:00/2-01:50:08,94) [irq/50-pciehp]
(root,0,0,00:00:00/2-01:50:08,95) [irq/51-pciehp]
(root,0,0,00:00:00/2-01:50:08,96) [irq/52-pciehp]
(root,0,0,00:00:00/2-01:50:08,97) [irq/53-pciehp]
(root,0,0,00:00:00/2-01:50:08,98) [irq/54-pciehp]
(root,0,0,00:00:00/2-01:50:08,99) [irq/55-pciehp]
(root,0,0,00:00:00/2-01:50:08,100) [ipv6_addrconf]
(root,0,0,00:00:00/2-01:50:08,110) [kstrp]
(root,0,0,00:00:00/2-01:50:05,153) [scsi_eh_0]
(root,0,0,00:00:00/2-01:50:05,154) [scsi_tmf_0]
(root,0,0,00:00:00/2-01:50:05,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/2-01:50:05,158) [ata_sff]
(root,0,0,00:00:00/2-01:50:05,160) [scsi_eh_1]
(root,0,0,00:00:00/2-01:50:05,164) [scsi_tmf_1]
(root,0,0,00:00:00/2-01:50:05,165) [scsi_eh_2]
(root,0,0,00:00:00/2-01:50:05,170) [scsi_tmf_2]
(root,0,0,00:00:01/2-01:50:05,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/2-01:50:05,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:02/2-01:50:05,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/2-01:50:05,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/2-01:50:04,224) [kdmflush]
(root,0,0,00:00:00/2-01:50:04,230) [kdmflush]
(root,0,0,00:00:00/2-01:50:00,258) [kworker/u257:0]
(root,0,0,00:00:00/2-01:50:00,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/2-01:50:00,261) [ext4-rsv-conver]
(root,0,0,00:00:00/2-01:49:58,269) [kdmflush]
(root,0,0,00:00:00/2-01:49:58,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/2-01:49:58,286) [ext4-rsv-conver]
(root,47616,15464,00:29:39/2-01:49:53,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:01/2-01:49:53,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/2-01:49:52,473) [ttm_swap]
(root,0,0,00:00:00/2-01:49:52,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/2-01:49:52,511) [kdmflush]
(root,0,0,00:00:00/2-01:49:52,513) [kdmflush]
(root,0,0,00:00:00/2-01:49:52,514) [kdmflush]
(root,0,0,00:00:00/2-01:49:52,516) [kdmflush]
(root,0,0,00:00:00/2-01:49:51,544) [jbd2/sda1-8]
(root,0,0,00:00:00/2-01:49:51,545) [ext4-rsv-conver]
(root,0,0,00:00:00/2-01:49:51,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/2-01:49:51,558) [ext4-rsv-conver]
(root,0,0,00:00:00/2-01:49:51,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/2-01:49:51,562) [ext4-rsv-conver]
(root,0,0,00:00:00/2-01:49:51,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/2-01:49:51,568) [ext4-rsv-conver]
(root,0,0,00:00:00/2-01:49:49,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/2-01:49:49,573) [ext4-rsv-conver]
(root,221728,4800,00:21:30/2-01:49:48,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4316,00:00:07/2-01:49:48,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19320,6392,00:00:06/2-01:49:48,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:00/2-01:49:48,608) /usr/sbin/cron -f
(root,231612,32976,00:00:12/2-01:49:48,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:00:48/2-01:49:48,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/2-01:49:48,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:00:15/2-01:49:48,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6976,00:00:00/2-01:49:48,679) /usr/sbin/sshd -D
(root,9604,2144,00:00:00/2-01:49:47,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/2-01:49:47,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72908,9216,00:00:02/2-01:49:47,742) nginx: worker process
(www-data,72592,5744,00:00:00/2-01:49:47,743) nginx: worker process
(www-data,72592,7296,00:00:00/2-01:49:47,744) nginx: worker process
(www-data,72592,5744,00:00:00/2-01:49:47,745) nginx: worker process
(www-data,231896,17304,00:00:00/2-01:49:46,772) php-fpm: pool www
(www-data,231896,14852,00:00:00/2-01:49:46,773) php-fpm: pool www
(root,9464,2476,00:00:00/1-10:08:58,1359) /usr/sbin/CRON -f
(root,43464,7580,00:00:00/1-10:08:57,1396) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7844,00:00:02/1-10:08:57,1397) /usr/sbin/postdrop -r
(root,0,0,00:01:04/1-05:46:27,1571) [kworker/0:1-events]
(root,0,0,00:00:00/1-01:34:57,1728) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/1-01:34:36,1730) [kworker/2:0]
(root,9464,2476,00:00:00/10:08:57,2371) /usr/sbin/CRON -f
(root,43464,7568,00:00:00/10:08:57,2408) /usr/sbin/sendmail -FCronDaemon -i -B8BITMIME -oem root
(root,43456,7736,00:00:00/10:08:57,2409) /usr/sbin/postdrop -r
(root,0,0,00:00:00/09:37:20,2438) [kworker/u256:1-flush-254:2]
(root,0,0,00:00:00/01:34:53,2751) [kworker/0:2-events]
(root,0,0,00:00:00/01:24:47,2760) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/11:45,2864) [kworker/3:2-ata_sff]
(root,0,0,00:00:00/06:35,2866) [kworker/3:0-ata_sff]
(root,0,0,00:00:00/01:22,2869) [kworker/3:1-mm_percpu_wq]
(root,6856,3440,00:00:00/00:00,2924) /bin/bash /usr/bin/check_mk_agent
(root,7636,2720,00:00:00/00:00,2942) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,2943) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-19 23:34

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb8186c164

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,104024,10164,00:00:06/01:43:02,1) /sbin/init
(root,0,0,00:00:00/01:43:02,2) [kthreadd]
(root,0,0,00:00:00/01:43:02,3) [rcu_gp]
(root,0,0,00:00:00/01:43:02,4) [rcu_par_gp]
(root,0,0,00:00:00/01:43:02,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/01:43:02,7) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/01:43:02,8) [mm_percpu_wq]
(root,0,0,00:00:00/01:43:02,9) [ksoftirqd/0]
(root,0,0,00:00:18/01:43:02,10) [rcu_sched]
(root,0,0,00:00:00/01:43:02,11) [rcu_bh]
(root,0,0,00:00:02/01:43:02,12) [migration/0]
(root,0,0,00:00:00/01:43:02,14) [cpuhp/0]
(root,0,0,00:00:00/01:43:02,15) [cpuhp/1]
(root,0,0,00:00:00/01:43:02,16) [migration/1]
(root,0,0,00:00:00/01:43:02,17) [ksoftirqd/1]
(root,0,0,00:00:00/01:43:02,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/01:43:02,20) [cpuhp/2]
(root,0,0,00:00:02/01:43:02,21) [migration/2]
(root,0,0,00:00:00/01:43:02,22) [ksoftirqd/2]
(root,0,0,00:00:00/01:43:02,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/01:43:02,25) [cpuhp/3]
(root,0,0,00:00:02/01:43:02,26) [migration/3]
(root,0,0,00:00:00/01:43:02,27) [ksoftirqd/3]
(root,0,0,00:00:00/01:43:02,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/01:43:02,30) [kdevtmpfs]
(root,0,0,00:00:00/01:43:02,31) [netns]
(root,0,0,00:00:00/01:43:02,32) [kauditd]
(root,0,0,00:00:04/01:43:02,33) [kworker/0:2-events_power_efficient]
(root,0,0,00:00:00/01:43:02,34) [kworker/1:1-events]
(root,0,0,00:00:00/01:43:02,35) [khungtaskd]
(root,0,0,00:00:00/01:43:02,36) [oom_reaper]
(root,0,0,00:00:00/01:43:02,37) [writeback]
(root,0,0,00:00:00/01:43:02,38) [kcompactd0]
(root,0,0,00:00:00/01:43:02,39) [ksmd]
(root,0,0,00:00:00/01:43:02,40) [khugepaged]
(root,0,0,00:00:00/01:43:02,41) [crypto]
(root,0,0,00:00:00/01:43:02,42) [kintegrityd]
(root,0,0,00:00:00/01:43:02,43) [kblockd]
(root,0,0,00:00:00/01:43:01,45) [kworker/2:1-events]
(root,0,0,00:00:00/01:43:01,46) [edac-poller]
(root,0,0,00:00:00/01:43:01,47) [devfreq_wq]
(root,0,0,00:00:00/01:43:01,48) [watchdogd]
(root,0,0,00:00:00/01:42:59,49) [kswapd0]
(root,0,0,00:00:00/01:42:58,67) [kthrotld]
(root,0,0,00:00:00/01:42:58,68) [irq/24-pciehp]
(root,0,0,00:00:00/01:42:58,69) [irq/25-pciehp]
(root,0,0,00:00:00/01:42:58,70) [irq/26-pciehp]
(root,0,0,00:00:00/01:42:58,71) [irq/27-pciehp]
(root,0,0,00:00:00/01:42:58,72) [irq/28-pciehp]
(root,0,0,00:00:00/01:42:58,73) [irq/29-pciehp]
(root,0,0,00:00:00/01:42:58,74) [irq/30-pciehp]
(root,0,0,00:00:00/01:42:58,75) [irq/31-pciehp]
(root,0,0,00:00:00/01:42:58,76) [irq/32-pciehp]
(root,0,0,00:00:00/01:42:58,77) [irq/33-pciehp]
(root,0,0,00:00:00/01:42:58,78) [irq/34-pciehp]
(root,0,0,00:00:00/01:42:58,79) [irq/35-pciehp]
(root,0,0,00:00:00/01:42:58,80) [irq/36-pciehp]
(root,0,0,00:00:00/01:42:58,81) [irq/37-pciehp]
(root,0,0,00:00:00/01:42:58,82) [irq/38-pciehp]
(root,0,0,00:00:00/01:42:58,83) [irq/39-pciehp]
(root,0,0,00:00:00/01:42:58,84) [irq/40-pciehp]
(root,0,0,00:00:00/01:42:58,85) [irq/41-pciehp]
(root,0,0,00:00:00/01:42:58,86) [irq/42-pciehp]
(root,0,0,00:00:00/01:42:58,87) [irq/43-pciehp]
(root,0,0,00:00:00/01:42:58,88) [irq/44-pciehp]
(root,0,0,00:00:00/01:42:58,89) [irq/45-pciehp]
(root,0,0,00:00:00/01:42:58,90) [irq/46-pciehp]
(root,0,0,00:00:00/01:42:58,91) [irq/47-pciehp]
(root,0,0,00:00:00/01:42:58,92) [irq/48-pciehp]
(root,0,0,00:00:00/01:42:58,93) [irq/49-pciehp]
(root,0,0,00:00:00/01:42:58,94) [irq/50-pciehp]
(root,0,0,00:00:00/01:42:58,95) [irq/51-pciehp]
(root,0,0,00:00:00/01:42:58,96) [irq/52-pciehp]
(root,0,0,00:00:00/01:42:58,97) [irq/53-pciehp]
(root,0,0,00:00:00/01:42:58,98) [irq/54-pciehp]
(root,0,0,00:00:00/01:42:58,99) [irq/55-pciehp]
(root,0,0,00:00:00/01:42:58,100) [ipv6_addrconf]
(root,0,0,00:00:00/01:42:58,110) [kstrp]
(root,0,0,00:00:00/01:42:55,153) [scsi_eh_0]
(root,0,0,00:00:00/01:42:55,154) [scsi_tmf_0]
(root,0,0,00:00:00/01:42:55,155) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/01:42:55,158) [ata_sff]
(root,0,0,00:00:00/01:42:55,160) [scsi_eh_1]
(root,0,0,00:00:00/01:42:55,164) [scsi_tmf_1]
(root,0,0,00:00:00/01:42:55,165) [scsi_eh_2]
(root,0,0,00:00:00/01:42:55,170) [scsi_tmf_2]
(root,0,0,00:00:01/01:42:55,180) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/01:42:55,182) [kworker/0:1H-kblockd]
(root,0,0,00:00:01/01:42:55,216) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/01:42:55,218) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/01:42:54,224) [kdmflush]
(root,0,0,00:00:00/01:42:54,230) [kdmflush]
(root,0,0,00:00:00/01:42:50,258) [kworker/u257:0]
(root,0,0,00:00:00/01:42:50,260) [jbd2/dm-0-8]
(root,0,0,00:00:00/01:42:50,261) [ext4-rsv-conver]
(root,0,0,00:00:00/01:42:48,269) [kdmflush]
(root,0,0,00:00:00/01:42:48,285) [jbd2/dm-2-8]
(root,0,0,00:00:00/01:42:48,286) [ext4-rsv-conver]
(root,46036,11852,00:00:02/01:42:43,318) /lib/systemd/systemd-journald
(root,22760,5552,00:00:00/01:42:43,350) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/01:42:42,467) [kworker/2:2-memcg_kmem_cache]
(root,0,0,00:00:00/01:42:42,473) [ttm_swap]
(root,0,0,00:00:00/01:42:42,474) [irq/16-vmwgfx]
(root,0,0,00:00:00/01:42:42,511) [kdmflush]
(root,0,0,00:00:00/01:42:42,513) [kdmflush]
(root,0,0,00:00:00/01:42:42,514) [kdmflush]
(root,0,0,00:00:00/01:42:42,516) [kdmflush]
(root,0,0,00:00:00/01:42:41,544) [jbd2/sda1-8]
(root,0,0,00:00:00/01:42:41,545) [ext4-rsv-conver]
(root,0,0,00:00:00/01:42:41,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/01:42:41,558) [ext4-rsv-conver]
(root,0,0,00:00:00/01:42:41,561) [jbd2/dm-4-8]
(root,0,0,00:00:00/01:42:41,562) [ext4-rsv-conver]
(root,0,0,00:00:00/01:42:41,567) [jbd2/dm-3-8]
(root,0,0,00:00:00/01:42:41,568) [ext4-rsv-conver]
(root,0,0,00:00:00/01:42:39,572) [jbd2/dm-5-8]
(root,0,0,00:00:00/01:42:39,573) [ext4-rsv-conver]
(root,221728,4752,00:00:01/01:42:38,600) /usr/sbin/rsyslogd -n -iNONE
(messagebus,8968,4316,00:00:00/01:42:38,601) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,19320,6392,00:00:00/01:42:38,606) /lib/systemd/systemd-logind
(root,8500,2784,00:00:00/01:42:38,608) /usr/sbin/cron -f
(root,231612,32976,00:00:00/01:42:38,657) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408164,4820,00:00:01/01:42:38,658) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5608,1608,00:00:00/01:42:38,667) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76664,3808,00:00:00/01:42:38,674) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,13816,6472,00:00:00/01:42:38,679) /usr/sbin/sshd -D
(root,9604,2144,00:00:00/01:42:37,740) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,71968,1808,00:00:00/01:42:37,741) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,72592,9216,00:00:00/01:42:37,742) nginx: worker process
(www-data,72592,5744,00:00:00/01:42:37,743) nginx: worker process
(www-data,72592,5744,00:00:00/01:42:37,744) nginx: worker process
(www-data,72592,5744,00:00:00/01:42:37,745) nginx: worker process
(www-data,231896,17304,00:00:00/01:42:36,772) php-fpm: pool www
(www-data,231896,14852,00:00:00/01:42:36,773) php-fpm: pool www
(root,0,0,00:00:00/01:26:46,870) [kworker/1:0-mm_percpu_wq]
(root,0,0,00:00:00/01:26:40,882) [kworker/0:0]
(root,0,0,00:00:00/01:17:12,935) [kworker/u256:3-flush-254:4]
(root,0,0,00:00:00/19:38,952) [kworker/3:1-ata_sff]
(root,0,0,00:00:00/09:17,959) [kworker/3:2-events]
(root,0,0,00:00:00/04:05,960) [kworker/3:0-ata_sff]
(root,6856,3376,00:00:00/00:00,995) /bin/bash /usr/bin/check_mk_agent
(root,7636,2640,00:00:00/00:00,1013) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,924,00:00:00/00:00,1014) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-17 23:27

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbe1512afa

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170784,10704,02:08:40/1283-19:47:29,1) /lib/systemd/systemd --system --deserialize 21
(root,0,0,00:01:06/1283-19:47:29,2) [kthreadd]
(root,0,0,00:00:00/1283-19:47:29,3) [rcu_gp]
(root,0,0,00:00:00/1283-19:47:29,4) [rcu_par_gp]
(root,0,0,00:00:00/1283-19:47:29,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/1283-19:47:29,8) [mm_percpu_wq]
(root,0,0,00:00:54/1283-19:47:29,9) [ksoftirqd/0]
(root,0,0,2-06:23:23/1283-19:47:29,10) [rcu_sched]
(root,0,0,00:00:00/1283-19:47:29,11) [rcu_bh]
(root,0,0,00:05:48/1283-19:47:29,12) [migration/0]
(root,0,0,00:00:00/1283-19:47:29,14) [cpuhp/0]
(root,0,0,00:00:00/1283-19:47:29,15) [cpuhp/1]
(root,0,0,00:04:47/1283-19:47:29,16) [migration/1]
(root,0,0,00:00:40/1283-19:47:29,17) [ksoftirqd/1]
(root,0,0,00:00:00/1283-19:47:29,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/1283-19:47:29,20) [cpuhp/2]
(root,0,0,00:04:33/1283-19:47:29,21) [migration/2]
(root,0,0,00:01:17/1283-19:47:29,22) [ksoftirqd/2]
(root,0,0,00:00:00/1283-19:47:29,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/1283-19:47:29,25) [cpuhp/3]
(root,0,0,00:05:12/1283-19:47:29,26) [migration/3]
(root,0,0,00:17:38/1283-19:47:29,27) [ksoftirqd/3]
(root,0,0,00:00:00/1283-19:47:29,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/1283-19:47:29,30) [kdevtmpfs]
(root,0,0,00:00:00/1283-19:47:29,31) [netns]
(root,0,0,00:00:00/1283-19:47:29,32) [kauditd]
(root,0,0,00:02:06/1283-19:47:29,35) [khungtaskd]
(root,0,0,00:00:00/1283-19:47:29,36) [oom_reaper]
(root,0,0,00:00:00/1283-19:47:29,37) [writeback]
(root,0,0,00:00:00/1283-19:47:29,38) [kcompactd0]
(root,0,0,00:00:00/1283-19:47:29,39) [ksmd]
(root,0,0,00:11:04/1283-19:47:29,40) [khugepaged]
(root,0,0,00:00:00/1283-19:47:29,41) [crypto]
(root,0,0,00:00:00/1283-19:47:29,42) [kintegrityd]
(root,0,0,00:00:00/1283-19:47:29,43) [kblockd]
(root,0,0,00:00:00/1283-19:47:28,44) [edac-poller]
(root,0,0,00:00:00/1283-19:47:28,45) [devfreq_wq]
(root,0,0,00:00:00/1283-19:47:28,46) [watchdogd]
(root,0,0,00:00:00/1283-19:47:28,49) [kswapd0]
(root,0,0,00:00:00/1283-19:47:27,67) [kthrotld]
(root,0,0,00:00:00/1283-19:47:27,68) [irq/24-pciehp]
(root,0,0,00:00:00/1283-19:47:27,69) [irq/25-pciehp]
(root,0,0,00:00:00/1283-19:47:27,70) [irq/26-pciehp]
(root,0,0,00:00:00/1283-19:47:27,71) [irq/27-pciehp]
(root,0,0,00:00:00/1283-19:47:27,72) [irq/28-pciehp]
(root,0,0,00:00:00/1283-19:47:27,73) [irq/29-pciehp]
(root,0,0,00:00:00/1283-19:47:27,74) [irq/30-pciehp]
(root,0,0,00:00:00/1283-19:47:27,75) [irq/31-pciehp]
(root,0,0,00:00:00/1283-19:47:27,76) [irq/32-pciehp]
(root,0,0,00:00:00/1283-19:47:27,77) [irq/33-pciehp]
(root,0,0,00:00:00/1283-19:47:27,78) [irq/34-pciehp]
(root,0,0,00:00:00/1283-19:47:27,79) [irq/35-pciehp]
(root,0,0,00:00:00/1283-19:47:27,80) [irq/36-pciehp]
(root,0,0,00:00:00/1283-19:47:27,81) [irq/37-pciehp]
(root,0,0,00:00:00/1283-19:47:27,82) [irq/38-pciehp]
(root,0,0,00:00:00/1283-19:47:27,83) [irq/39-pciehp]
(root,0,0,00:00:00/1283-19:47:27,84) [irq/40-pciehp]
(root,0,0,00:00:00/1283-19:47:27,85) [irq/41-pciehp]
(root,0,0,00:00:00/1283-19:47:27,86) [irq/42-pciehp]
(root,0,0,00:00:00/1283-19:47:27,87) [irq/43-pciehp]
(root,0,0,00:00:00/1283-19:47:27,88) [irq/44-pciehp]
(root,0,0,00:00:00/1283-19:47:27,89) [irq/45-pciehp]
(root,0,0,00:00:00/1283-19:47:27,90) [irq/46-pciehp]
(root,0,0,00:00:00/1283-19:47:27,91) [irq/47-pciehp]
(root,0,0,00:00:00/1283-19:47:27,92) [irq/48-pciehp]
(root,0,0,00:00:00/1283-19:47:27,93) [irq/49-pciehp]
(root,0,0,00:00:00/1283-19:47:27,94) [irq/50-pciehp]
(root,0,0,00:00:00/1283-19:47:27,95) [irq/51-pciehp]
(root,0,0,00:00:00/1283-19:47:27,96) [irq/52-pciehp]
(root,0,0,00:00:00/1283-19:47:27,97) [irq/53-pciehp]
(root,0,0,00:00:00/1283-19:47:27,98) [irq/54-pciehp]
(root,0,0,00:00:00/1283-19:47:27,99) [irq/55-pciehp]
(root,0,0,00:00:00/1283-19:47:27,100) [ipv6_addrconf]
(root,0,0,00:00:00/1283-19:47:27,110) [kstrp]
(root,0,0,00:00:00/1283-19:47:26,162) [scsi_eh_0]
(root,0,0,00:00:00/1283-19:47:26,163) [scsi_tmf_0]
(root,0,0,00:00:00/1283-19:47:26,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/1283-19:47:26,165) [ata_sff]
(root,0,0,00:00:00/1283-19:47:26,166) [scsi_eh_1]
(root,0,0,00:00:00/1283-19:47:26,167) [scsi_tmf_1]
(root,0,0,00:00:00/1283-19:47:26,168) [scsi_eh_2]
(root,0,0,00:00:00/1283-19:47:26,169) [scsi_tmf_2]
(root,0,0,00:06:02/1283-19:47:26,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:24/1283-19:47:26,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:19/1283-19:47:26,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:23/1283-19:47:26,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/1283-19:47:26,232) [kdmflush]
(root,0,0,00:00:00/1283-19:47:25,238) [kdmflush]
(root,0,0,00:00:00/1283-19:47:22,266) [kworker/u257:0]
(root,0,0,00:00:10/1283-19:47:22,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/1283-19:47:22,269) [ext4-rsv-conver]
(root,0,0,00:00:00/1283-19:47:21,277) [kdmflush]
(root,0,0,00:00:05/1283-19:47:20,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/1283-19:47:20,293) [ext4-rsv-conver]
(root,0,0,00:00:00/1283-19:47:12,489) [kdmflush]
(root,0,0,00:00:00/1283-19:47:12,491) [kdmflush]
(root,0,0,00:00:00/1283-19:47:12,494) [kdmflush]
(root,0,0,00:00:00/1283-19:47:12,495) [kdmflush]
(root,0,0,00:00:00/1283-19:47:12,504) [ttm_swap]
(root,0,0,00:00:00/1283-19:47:12,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/1283-19:47:12,546) [jbd2/sda1-8]
(root,0,0,00:00:00/1283-19:47:12,547) [ext4-rsv-conver]
(root,0,0,00:00:00/1283-19:47:12,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/1283-19:47:12,558) [ext4-rsv-conver]
(root,0,0,00:00:02/1283-19:47:12,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/1283-19:47:12,570) [ext4-rsv-conver]
(root,0,0,00:00:40/1283-19:47:11,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/1283-19:47:11,575) [ext4-rsv-conver]
(root,0,0,00:04:38/1283-19:47:11,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/1283-19:47:11,580) [ext4-rsv-conver]
(root,19508,7308,00:56:38/1283-19:47:10,607) /lib/systemd/systemd-logind
(root,8504,2808,00:05:11/1283-19:47:10,608) /usr/sbin/cron -f
(messagebus,9400,4608,01:33:15/1283-19:47:10,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,5612,1556,00:00:00/1283-19:47:10,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/02:57:57,915) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/01:58:14,998) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/58:03,1144) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/28:13,1198) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/23:06,1202) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/06:11,1209) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/01:01,1210) [kworker/2:1-ata_sff]
(root,6856,3460,00:00:00/00:00,1301) /bin/bash /usr/bin/check_mk_agent
(root,7636,2684,00:00:00/00:00,1319) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,936,00:00:00/00:00,1320) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(fcpys,21160,8816,00:00:00/95-08:00:24,20446) /lib/systemd/systemd --user
(fcpys,172052,2940,00:00:00/95-08:00:24,20447) (sd-pam)
(root,5860,2688,00:00:00/95-07:08:43,20696) ssh-agent -s
(root,5860,2712,00:00:00/95-06:20:18,20917) ssh-agent -s
(root,5860,2692,00:00:00/95-03:35:06,21442) ssh-agent -s
(root,5860,2764,00:00:00/94-23:07:27,21993) ssh-agent -s
(root,5860,2704,00:00:00/94-07:45:06,23978) ssh-agent -s
(root,5860,2696,00:00:00/93-06:27:49,27389) ssh-agent -s
(root,5860,2776,00:00:00/93-06:01:32,27440) ssh-agent -s
(root,5860,2624,00:00:00/92-06:19:05,30393) ssh-agent -s
(root,5860,2776,00:00:00/53-08:12:10,41123) ssh-agent -s
(root,5860,2688,00:00:00/53-05:00:44,42042) ssh-agent -s
(root,5860,2720,00:00:00/53-00:32:58,42792) ssh-agent -s
(root,5860,2772,00:00:00/53-00:31:37,42798) ssh-agent -s
(root,5860,2764,00:00:00/53-00:30:35,42811) ssh-agent -s
(root,59528,23316,00:27:19/312-06:49:42,68423) /lib/systemd/systemd-journald
(root,221728,4472,00:04:26/312-06:48:45,74203) /usr/sbin/rsyslogd -n -iNONE
(root,0,0,00:00:00/312-06:48:23,79244) [xfsalloc]
(root,0,0,00:00:00/312-06:48:23,79245) [xfs_mru_cache]
(root,0,0,00:00:00/312-06:48:23,79255) [jfsIO]
(root,0,0,00:00:00/312-06:48:23,79256) [jfsCommit]
(root,0,0,00:00:00/312-06:48:23,79257) [jfsCommit]
(root,0,0,00:00:00/312-06:48:23,79258) [jfsCommit]
(root,0,0,00:00:00/312-06:48:23,79259) [jfsCommit]
(root,0,0,00:00:00/312-06:48:23,79260) [jfsSync]
(root,21848,4796,00:01:04/312-06:48:07,82946) /lib/systemd/systemd-udevd
(root,9604,2188,00:00:00/312-06:48:02,84012) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(memcache,408164,2772,02:02:05/312-06:46:23,93051) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(mysql,2302284,108460,06:21:03/312-06:46:07,96153) /usr/sbin/mysqld
(root,13816,7232,00:06:34/312-06:46:05,96433) /usr/sbin/sshd -D
(root,71968,13372,00:00:00/312-06:46:05,96476) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73780,10160,00:10:09/312-06:46:04,96478) nginx: worker process
(www-data,78304,14948,00:00:07/312-06:46:04,96479) nginx: worker process
(www-data,76060,12308,00:00:01/312-06:46:04,96480) nginx: worker process
(www-data,72996,9320,00:00:00/312-06:46:04,96481) nginx: worker process
(root,231612,33500,00:29:55/312-06:45:50,101026) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(www-data,233324,60856,00:00:07/312-06:45:50,101027) php-fpm: pool www
(www-data,233324,62856,00:00:06/312-06:45:50,101028) php-fpm: pool www
(root,0,0,00:00:02/16:58:12,129652) [kworker/3:1-events]
(root,0,0,00:00:00/16:53:33,129655) [kworker/1:1-events]
(root,0,0,00:00:06/14:58:34,130042) [kworker/2:0-events]
(root,0,0,00:00:22/08:58:12,130992) [kworker/0:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-15 23:37

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb0464ac7c

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170784,10704,02:08:28/1281-18:23:58,1) /lib/systemd/systemd --system --deserialize 21
(root,0,0,00:01:06/1281-18:23:58,2) [kthreadd]
(root,0,0,00:00:00/1281-18:23:58,3) [rcu_gp]
(root,0,0,00:00:00/1281-18:23:58,4) [rcu_par_gp]
(root,0,0,00:00:00/1281-18:23:58,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/1281-18:23:58,8) [mm_percpu_wq]
(root,0,0,00:00:54/1281-18:23:58,9) [ksoftirqd/0]
(root,0,0,2-06:17:58/1281-18:23:58,10) [rcu_sched]
(root,0,0,00:00:00/1281-18:23:58,11) [rcu_bh]
(root,0,0,00:05:47/1281-18:23:58,12) [migration/0]
(root,0,0,00:00:00/1281-18:23:58,14) [cpuhp/0]
(root,0,0,00:00:00/1281-18:23:58,15) [cpuhp/1]
(root,0,0,00:04:47/1281-18:23:58,16) [migration/1]
(root,0,0,00:00:40/1281-18:23:58,17) [ksoftirqd/1]
(root,0,0,00:00:00/1281-18:23:58,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/1281-18:23:58,20) [cpuhp/2]
(root,0,0,00:04:33/1281-18:23:58,21) [migration/2]
(root,0,0,00:01:17/1281-18:23:58,22) [ksoftirqd/2]
(root,0,0,00:00:00/1281-18:23:58,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/1281-18:23:58,25) [cpuhp/3]
(root,0,0,00:05:11/1281-18:23:58,26) [migration/3]
(root,0,0,00:17:37/1281-18:23:58,27) [ksoftirqd/3]
(root,0,0,00:00:00/1281-18:23:58,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/1281-18:23:58,30) [kdevtmpfs]
(root,0,0,00:00:00/1281-18:23:58,31) [netns]
(root,0,0,00:00:00/1281-18:23:58,32) [kauditd]
(root,0,0,00:02:06/1281-18:23:58,35) [khungtaskd]
(root,0,0,00:00:00/1281-18:23:58,36) [oom_reaper]
(root,0,0,00:00:00/1281-18:23:58,37) [writeback]
(root,0,0,00:00:00/1281-18:23:58,38) [kcompactd0]
(root,0,0,00:00:00/1281-18:23:58,39) [ksmd]
(root,0,0,00:11:03/1281-18:23:58,40) [khugepaged]
(root,0,0,00:00:00/1281-18:23:58,41) [crypto]
(root,0,0,00:00:00/1281-18:23:58,42) [kintegrityd]
(root,0,0,00:00:00/1281-18:23:58,43) [kblockd]
(root,0,0,00:00:00/1281-18:23:57,44) [edac-poller]
(root,0,0,00:00:00/1281-18:23:57,45) [devfreq_wq]
(root,0,0,00:00:00/1281-18:23:57,46) [watchdogd]
(root,0,0,00:00:00/1281-18:23:57,49) [kswapd0]
(root,0,0,00:00:00/1281-18:23:56,67) [kthrotld]
(root,0,0,00:00:00/1281-18:23:56,68) [irq/24-pciehp]
(root,0,0,00:00:00/1281-18:23:56,69) [irq/25-pciehp]
(root,0,0,00:00:00/1281-18:23:56,70) [irq/26-pciehp]
(root,0,0,00:00:00/1281-18:23:56,71) [irq/27-pciehp]
(root,0,0,00:00:00/1281-18:23:56,72) [irq/28-pciehp]
(root,0,0,00:00:00/1281-18:23:56,73) [irq/29-pciehp]
(root,0,0,00:00:00/1281-18:23:56,74) [irq/30-pciehp]
(root,0,0,00:00:00/1281-18:23:56,75) [irq/31-pciehp]
(root,0,0,00:00:00/1281-18:23:56,76) [irq/32-pciehp]
(root,0,0,00:00:00/1281-18:23:56,77) [irq/33-pciehp]
(root,0,0,00:00:00/1281-18:23:56,78) [irq/34-pciehp]
(root,0,0,00:00:00/1281-18:23:56,79) [irq/35-pciehp]
(root,0,0,00:00:00/1281-18:23:56,80) [irq/36-pciehp]
(root,0,0,00:00:00/1281-18:23:56,81) [irq/37-pciehp]
(root,0,0,00:00:00/1281-18:23:56,82) [irq/38-pciehp]
(root,0,0,00:00:00/1281-18:23:56,83) [irq/39-pciehp]
(root,0,0,00:00:00/1281-18:23:56,84) [irq/40-pciehp]
(root,0,0,00:00:00/1281-18:23:56,85) [irq/41-pciehp]
(root,0,0,00:00:00/1281-18:23:56,86) [irq/42-pciehp]
(root,0,0,00:00:00/1281-18:23:56,87) [irq/43-pciehp]
(root,0,0,00:00:00/1281-18:23:56,88) [irq/44-pciehp]
(root,0,0,00:00:00/1281-18:23:56,89) [irq/45-pciehp]
(root,0,0,00:00:00/1281-18:23:56,90) [irq/46-pciehp]
(root,0,0,00:00:00/1281-18:23:56,91) [irq/47-pciehp]
(root,0,0,00:00:00/1281-18:23:56,92) [irq/48-pciehp]
(root,0,0,00:00:00/1281-18:23:56,93) [irq/49-pciehp]
(root,0,0,00:00:00/1281-18:23:56,94) [irq/50-pciehp]
(root,0,0,00:00:00/1281-18:23:56,95) [irq/51-pciehp]
(root,0,0,00:00:00/1281-18:23:56,96) [irq/52-pciehp]
(root,0,0,00:00:00/1281-18:23:56,97) [irq/53-pciehp]
(root,0,0,00:00:00/1281-18:23:56,98) [irq/54-pciehp]
(root,0,0,00:00:00/1281-18:23:56,99) [irq/55-pciehp]
(root,0,0,00:00:00/1281-18:23:56,100) [ipv6_addrconf]
(root,0,0,00:00:00/1281-18:23:56,110) [kstrp]
(root,0,0,00:00:00/1281-18:23:55,162) [scsi_eh_0]
(root,0,0,00:00:00/1281-18:23:55,163) [scsi_tmf_0]
(root,0,0,00:00:00/1281-18:23:55,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/1281-18:23:55,165) [ata_sff]
(root,0,0,00:00:00/1281-18:23:55,166) [scsi_eh_1]
(root,0,0,00:00:00/1281-18:23:55,167) [scsi_tmf_1]
(root,0,0,00:00:00/1281-18:23:55,168) [scsi_eh_2]
(root,0,0,00:00:00/1281-18:23:55,169) [scsi_tmf_2]
(root,0,0,00:06:02/1281-18:23:55,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:24/1281-18:23:55,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:19/1281-18:23:55,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:23/1281-18:23:55,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/1281-18:23:55,232) [kdmflush]
(root,0,0,00:00:00/1281-18:23:54,238) [kdmflush]
(root,0,0,00:00:00/1281-18:23:51,266) [kworker/u257:0]
(root,0,0,00:00:10/1281-18:23:51,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/1281-18:23:51,269) [ext4-rsv-conver]
(root,0,0,00:00:00/1281-18:23:50,277) [kdmflush]
(root,0,0,00:00:05/1281-18:23:49,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/1281-18:23:49,293) [ext4-rsv-conver]
(root,0,0,00:00:00/1281-18:23:41,489) [kdmflush]
(root,0,0,00:00:00/1281-18:23:41,491) [kdmflush]
(root,0,0,00:00:00/1281-18:23:41,494) [kdmflush]
(root,0,0,00:00:00/1281-18:23:41,495) [kdmflush]
(root,0,0,00:00:00/1281-18:23:41,504) [ttm_swap]
(root,0,0,00:00:00/1281-18:23:41,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/1281-18:23:41,546) [jbd2/sda1-8]
(root,0,0,00:00:00/1281-18:23:41,547) [ext4-rsv-conver]
(root,0,0,00:00:00/1281-18:23:41,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/1281-18:23:41,558) [ext4-rsv-conver]
(root,0,0,00:00:02/1281-18:23:41,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/1281-18:23:41,570) [ext4-rsv-conver]
(root,0,0,00:00:40/1281-18:23:40,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/1281-18:23:40,575) [ext4-rsv-conver]
(root,0,0,00:04:38/1281-18:23:40,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/1281-18:23:40,580) [ext4-rsv-conver]
(root,19508,7308,00:56:32/1281-18:23:39,607) /lib/systemd/systemd-logind
(root,8504,2808,00:05:11/1281-18:23:39,608) /usr/sbin/cron -f
(messagebus,9400,4608,01:33:07/1281-18:23:39,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,5612,1556,00:00:00/1281-18:23:39,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(fcpys,21160,8816,00:00:00/93-06:36:53,20446) /lib/systemd/systemd --user
(fcpys,172052,2940,00:00:00/93-06:36:53,20447) (sd-pam)
(root,5860,2688,00:00:00/93-05:45:12,20696) ssh-agent -s
(root,5860,2712,00:00:00/93-04:56:47,20917) ssh-agent -s
(root,5860,2692,00:00:00/93-02:11:35,21442) ssh-agent -s
(root,5860,2764,00:00:00/92-21:43:56,21993) ssh-agent -s
(root,5860,2704,00:00:00/92-06:21:35,23978) ssh-agent -s
(root,5860,2696,00:00:00/91-05:04:18,27389) ssh-agent -s
(root,5860,2776,00:00:00/91-04:38:01,27440) ssh-agent -s
(root,5860,2624,00:00:00/90-04:55:34,30393) ssh-agent -s
(root,5860,2776,00:00:00/51-06:48:39,41123) ssh-agent -s
(root,5860,2688,00:00:00/51-03:37:13,42042) ssh-agent -s
(root,5860,2720,00:00:00/50-23:09:27,42792) ssh-agent -s
(root,5860,2772,00:00:00/50-23:08:06,42798) ssh-agent -s
(root,5860,2764,00:00:00/50-23:07:04,42811) ssh-agent -s
(root,67724,33332,00:27:18/310-05:26:11,68423) /lib/systemd/systemd-journald
(root,221728,4472,00:04:25/310-05:25:14,74203) /usr/sbin/rsyslogd -n -iNONE
(root,0,0,00:00:00/310-05:24:52,79244) [xfsalloc]
(root,0,0,00:00:00/310-05:24:52,79245) [xfs_mru_cache]
(root,0,0,00:00:00/310-05:24:52,79255) [jfsIO]
(root,0,0,00:00:00/310-05:24:52,79256) [jfsCommit]
(root,0,0,00:00:00/310-05:24:52,79257) [jfsCommit]
(root,0,0,00:00:00/310-05:24:52,79258) [jfsCommit]
(root,0,0,00:00:00/310-05:24:52,79259) [jfsCommit]
(root,0,0,00:00:00/310-05:24:52,79260) [jfsSync]
(root,21848,4796,00:01:04/310-05:24:36,82946) /lib/systemd/systemd-udevd
(root,9604,2188,00:00:00/310-05:24:31,84012) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(memcache,408164,2772,02:01:13/310-05:22:52,93051) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(mysql,2302284,108460,06:18:25/310-05:22:36,96153) /usr/sbin/mysqld
(root,13816,7232,00:06:34/310-05:22:34,96433) /usr/sbin/sshd -D
(root,71968,13372,00:00:00/310-05:22:34,96476) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73780,10160,00:10:04/310-05:22:33,96478) nginx: worker process
(www-data,78304,14948,00:00:07/310-05:22:33,96479) nginx: worker process
(www-data,76060,12308,00:00:01/310-05:22:33,96480) nginx: worker process
(www-data,72996,9320,00:00:00/310-05:22:33,96481) nginx: worker process
(root,231612,33500,00:29:43/310-05:22:19,101026) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(www-data,233324,60856,00:00:07/310-05:22:19,101027) php-fpm: pool www
(www-data,233324,62856,00:00:06/310-05:22:19,101028) php-fpm: pool www
(root,0,0,00:01:03/1-04:34:41,121539) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:11/1-00:30:27,121992) [kworker/2:1-events_power_efficient]
(root,0,0,00:00:01/12:04:41,123943) [kworker/3:2-events]
(root,0,0,00:00:00/05:29:35,124801) [kworker/1:1-events]
(root,0,0,00:00:00/03:29:26,125077) [kworker/1:0-events]
(root,0,0,00:00:06/02:29:20,125192) [kworker/0:0-events_power_efficient]
(root,0,0,00:00:00/01:34:36,125304) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/01:04:31,125357) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/34:43,125412) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/07:20,125420) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/04:43,125466) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/02:10,125469) [kworker/2:0-ata_sff]
(root,6856,3428,00:00:00/00:00,125591) /bin/bash /usr/bin/check_mk_agent
(root,7636,2688,00:00:00/00:00,125609) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,125610) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-13 22:14

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cba2ebf7a2

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170784,10704,02:08:16/1279-20:22:24,1) /lib/systemd/systemd --system --deserialize 21
(root,0,0,00:01:06/1279-20:22:24,2) [kthreadd]
(root,0,0,00:00:00/1279-20:22:24,3) [rcu_gp]
(root,0,0,00:00:00/1279-20:22:24,4) [rcu_par_gp]
(root,0,0,00:00:00/1279-20:22:24,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/1279-20:22:24,8) [mm_percpu_wq]
(root,0,0,00:00:54/1279-20:22:24,9) [ksoftirqd/0]
(root,0,0,2-06:12:26/1279-20:22:24,10) [rcu_sched]
(root,0,0,00:00:00/1279-20:22:24,11) [rcu_bh]
(root,0,0,00:05:47/1279-20:22:24,12) [migration/0]
(root,0,0,00:00:00/1279-20:22:24,14) [cpuhp/0]
(root,0,0,00:00:00/1279-20:22:24,15) [cpuhp/1]
(root,0,0,00:04:46/1279-20:22:24,16) [migration/1]
(root,0,0,00:00:40/1279-20:22:24,17) [ksoftirqd/1]
(root,0,0,00:00:00/1279-20:22:24,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/1279-20:22:24,20) [cpuhp/2]
(root,0,0,00:04:32/1279-20:22:24,21) [migration/2]
(root,0,0,00:01:17/1279-20:22:24,22) [ksoftirqd/2]
(root,0,0,00:00:00/1279-20:22:24,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/1279-20:22:24,25) [cpuhp/3]
(root,0,0,00:05:11/1279-20:22:24,26) [migration/3]
(root,0,0,00:17:35/1279-20:22:24,27) [ksoftirqd/3]
(root,0,0,00:00:00/1279-20:22:24,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/1279-20:22:24,30) [kdevtmpfs]
(root,0,0,00:00:00/1279-20:22:24,31) [netns]
(root,0,0,00:00:00/1279-20:22:24,32) [kauditd]
(root,0,0,00:02:06/1279-20:22:24,35) [khungtaskd]
(root,0,0,00:00:00/1279-20:22:24,36) [oom_reaper]
(root,0,0,00:00:00/1279-20:22:24,37) [writeback]
(root,0,0,00:00:00/1279-20:22:24,38) [kcompactd0]
(root,0,0,00:00:00/1279-20:22:24,39) [ksmd]
(root,0,0,00:11:02/1279-20:22:24,40) [khugepaged]
(root,0,0,00:00:00/1279-20:22:24,41) [crypto]
(root,0,0,00:00:00/1279-20:22:24,42) [kintegrityd]
(root,0,0,00:00:00/1279-20:22:24,43) [kblockd]
(root,0,0,00:00:00/1279-20:22:23,44) [edac-poller]
(root,0,0,00:00:00/1279-20:22:23,45) [devfreq_wq]
(root,0,0,00:00:00/1279-20:22:23,46) [watchdogd]
(root,0,0,00:00:00/1279-20:22:23,49) [kswapd0]
(root,0,0,00:00:00/1279-20:22:22,67) [kthrotld]
(root,0,0,00:00:00/1279-20:22:22,68) [irq/24-pciehp]
(root,0,0,00:00:00/1279-20:22:22,69) [irq/25-pciehp]
(root,0,0,00:00:00/1279-20:22:22,70) [irq/26-pciehp]
(root,0,0,00:00:00/1279-20:22:22,71) [irq/27-pciehp]
(root,0,0,00:00:00/1279-20:22:22,72) [irq/28-pciehp]
(root,0,0,00:00:00/1279-20:22:22,73) [irq/29-pciehp]
(root,0,0,00:00:00/1279-20:22:22,74) [irq/30-pciehp]
(root,0,0,00:00:00/1279-20:22:22,75) [irq/31-pciehp]
(root,0,0,00:00:00/1279-20:22:22,76) [irq/32-pciehp]
(root,0,0,00:00:00/1279-20:22:22,77) [irq/33-pciehp]
(root,0,0,00:00:00/1279-20:22:22,78) [irq/34-pciehp]
(root,0,0,00:00:00/1279-20:22:22,79) [irq/35-pciehp]
(root,0,0,00:00:00/1279-20:22:22,80) [irq/36-pciehp]
(root,0,0,00:00:00/1279-20:22:22,81) [irq/37-pciehp]
(root,0,0,00:00:00/1279-20:22:22,82) [irq/38-pciehp]
(root,0,0,00:00:00/1279-20:22:22,83) [irq/39-pciehp]
(root,0,0,00:00:00/1279-20:22:22,84) [irq/40-pciehp]
(root,0,0,00:00:00/1279-20:22:22,85) [irq/41-pciehp]
(root,0,0,00:00:00/1279-20:22:22,86) [irq/42-pciehp]
(root,0,0,00:00:00/1279-20:22:22,87) [irq/43-pciehp]
(root,0,0,00:00:00/1279-20:22:22,88) [irq/44-pciehp]
(root,0,0,00:00:00/1279-20:22:22,89) [irq/45-pciehp]
(root,0,0,00:00:00/1279-20:22:22,90) [irq/46-pciehp]
(root,0,0,00:00:00/1279-20:22:22,91) [irq/47-pciehp]
(root,0,0,00:00:00/1279-20:22:22,92) [irq/48-pciehp]
(root,0,0,00:00:00/1279-20:22:22,93) [irq/49-pciehp]
(root,0,0,00:00:00/1279-20:22:22,94) [irq/50-pciehp]
(root,0,0,00:00:00/1279-20:22:22,95) [irq/51-pciehp]
(root,0,0,00:00:00/1279-20:22:22,96) [irq/52-pciehp]
(root,0,0,00:00:00/1279-20:22:22,97) [irq/53-pciehp]
(root,0,0,00:00:00/1279-20:22:22,98) [irq/54-pciehp]
(root,0,0,00:00:00/1279-20:22:22,99) [irq/55-pciehp]
(root,0,0,00:00:00/1279-20:22:22,100) [ipv6_addrconf]
(root,0,0,00:00:00/1279-20:22:22,110) [kstrp]
(root,0,0,00:00:00/1279-20:22:21,162) [scsi_eh_0]
(root,0,0,00:00:00/1279-20:22:21,163) [scsi_tmf_0]
(root,0,0,00:00:00/1279-20:22:21,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/1279-20:22:21,165) [ata_sff]
(root,0,0,00:00:00/1279-20:22:21,166) [scsi_eh_1]
(root,0,0,00:00:00/1279-20:22:21,167) [scsi_tmf_1]
(root,0,0,00:00:00/1279-20:22:21,168) [scsi_eh_2]
(root,0,0,00:00:00/1279-20:22:21,169) [scsi_tmf_2]
(root,0,0,00:06:01/1279-20:22:21,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:24/1279-20:22:21,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:19/1279-20:22:21,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:23/1279-20:22:21,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/1279-20:22:21,232) [kdmflush]
(root,0,0,00:00:00/1279-20:22:20,238) [kdmflush]
(root,0,0,00:00:00/1279-20:22:17,266) [kworker/u257:0]
(root,0,0,00:00:10/1279-20:22:17,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/1279-20:22:17,269) [ext4-rsv-conver]
(root,0,0,00:00:00/1279-20:22:16,277) [kdmflush]
(root,0,0,00:00:05/1279-20:22:15,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/1279-20:22:15,293) [ext4-rsv-conver]
(root,0,0,00:00:00/1279-20:22:07,489) [kdmflush]
(root,0,0,00:00:00/1279-20:22:07,491) [kdmflush]
(root,0,0,00:00:00/1279-20:22:07,494) [kdmflush]
(root,0,0,00:00:00/1279-20:22:07,495) [kdmflush]
(root,0,0,00:00:00/1279-20:22:07,504) [ttm_swap]
(root,0,0,00:00:00/1279-20:22:07,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/1279-20:22:07,546) [jbd2/sda1-8]
(root,0,0,00:00:00/1279-20:22:07,547) [ext4-rsv-conver]
(root,0,0,00:00:00/1279-20:22:07,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/1279-20:22:07,558) [ext4-rsv-conver]
(root,0,0,00:00:02/1279-20:22:07,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/1279-20:22:07,570) [ext4-rsv-conver]
(root,0,0,00:00:40/1279-20:22:06,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/1279-20:22:06,575) [ext4-rsv-conver]
(root,0,0,00:04:38/1279-20:22:06,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/1279-20:22:06,580) [ext4-rsv-conver]
(root,19508,7308,00:56:27/1279-20:22:05,607) /lib/systemd/systemd-logind
(root,8504,2808,00:05:10/1279-20:22:05,608) /usr/sbin/cron -f
(messagebus,9400,4608,01:32:59/1279-20:22:05,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,5612,1556,00:00:00/1279-20:22:05,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(fcpys,21160,8816,00:00:00/91-08:35:19,20446) /lib/systemd/systemd --user
(fcpys,172052,2940,00:00:00/91-08:35:19,20447) (sd-pam)
(root,5860,2688,00:00:00/91-07:43:38,20696) ssh-agent -s
(root,5860,2712,00:00:00/91-06:55:13,20917) ssh-agent -s
(root,5860,2692,00:00:00/91-04:10:01,21442) ssh-agent -s
(root,5860,2764,00:00:00/90-23:42:22,21993) ssh-agent -s
(root,5860,2704,00:00:00/90-08:20:01,23978) ssh-agent -s
(root,5860,2696,00:00:00/89-07:02:44,27389) ssh-agent -s
(root,5860,2776,00:00:00/89-06:36:27,27440) ssh-agent -s
(root,5860,2624,00:00:00/88-06:54:00,30393) ssh-agent -s
(root,5860,2776,00:00:00/49-08:47:05,41123) ssh-agent -s
(root,5860,2688,00:00:00/49-05:35:39,42042) ssh-agent -s
(root,5860,2720,00:00:00/49-01:07:53,42792) ssh-agent -s
(root,5860,2772,00:00:00/49-01:06:32,42798) ssh-agent -s
(root,5860,2764,00:00:00/49-01:05:30,42811) ssh-agent -s
(root,67724,32804,00:27:16/308-07:24:37,68423) /lib/systemd/systemd-journald
(root,221728,4472,00:04:25/308-07:23:40,74203) /usr/sbin/rsyslogd -n -iNONE
(root,0,0,00:00:00/308-07:23:18,79244) [xfsalloc]
(root,0,0,00:00:00/308-07:23:18,79245) [xfs_mru_cache]
(root,0,0,00:00:00/308-07:23:18,79255) [jfsIO]
(root,0,0,00:00:00/308-07:23:18,79256) [jfsCommit]
(root,0,0,00:00:00/308-07:23:18,79257) [jfsCommit]
(root,0,0,00:00:00/308-07:23:18,79258) [jfsCommit]
(root,0,0,00:00:00/308-07:23:18,79259) [jfsCommit]
(root,0,0,00:00:00/308-07:23:18,79260) [jfsSync]
(root,21848,4796,00:01:04/308-07:23:02,82946) /lib/systemd/systemd-udevd
(root,9604,2188,00:00:00/308-07:22:57,84012) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(memcache,408164,2772,02:00:25/308-07:21:18,93051) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(mysql,2302284,108460,06:15:58/308-07:21:02,96153) /usr/sbin/mysqld
(root,13816,7232,00:06:34/308-07:21:00,96433) /usr/sbin/sshd -D
(root,71968,13372,00:00:00/308-07:21:00,96476) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73780,10160,00:10:00/308-07:20:59,96478) nginx: worker process
(www-data,78304,14948,00:00:07/308-07:20:59,96479) nginx: worker process
(www-data,76060,12308,00:00:01/308-07:20:59,96480) nginx: worker process
(www-data,72996,9320,00:00:00/308-07:20:59,96481) nginx: worker process
(root,231612,33500,00:29:31/308-07:20:45,101026) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(www-data,233324,60856,00:00:06/308-07:20:45,101027) php-fpm: pool www
(www-data,233324,62856,00:00:06/308-07:20:45,101028) php-fpm: pool www
(root,0,0,00:00:09/2-14:33:07,110729) [kworker/3:1-events]
(root,0,0,00:00:35/14:33:07,117312) [kworker/0:2-events]
(root,0,0,00:00:00/14:28:01,117315) [kworker/1:1-events]
(root,0,0,00:00:00/11:14:12,117745) [kworker/0:0]
(root,0,0,00:00:02/05:06:52,118504) [kworker/2:1-events]
(root,0,0,00:00:00/02:57:59,118778) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/54:57,119007) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/33:02,119060) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/27:48,119062) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/05:57,119067) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/03:07,119113) [kworker/1:0]
(root,0,0,00:00:00/03:07,119116) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/02:52,119117) [kworker/u256:2-flush-254:0]
(root,0,0,00:00:00/00:44,119118) [kworker/2:0-ata_sff]
(root,6856,3484,00:00:00/00:00,119264) /bin/bash /usr/bin/check_mk_agent
(root,7636,2712,00:00:00/00:00,119282) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,119283) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-12 00:12

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb7e42af2a

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170784,10704,02:08:08/1278-13:11:37,1) /lib/systemd/systemd --system --deserialize 21
(root,0,0,00:01:05/1278-13:11:37,2) [kthreadd]
(root,0,0,00:00:00/1278-13:11:37,3) [rcu_gp]
(root,0,0,00:00:00/1278-13:11:37,4) [rcu_par_gp]
(root,0,0,00:00:00/1278-13:11:37,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/1278-13:11:37,8) [mm_percpu_wq]
(root,0,0,00:00:54/1278-13:11:37,9) [ksoftirqd/0]
(root,0,0,2-06:08:42/1278-13:11:37,10) [rcu_sched]
(root,0,0,00:00:00/1278-13:11:37,11) [rcu_bh]
(root,0,0,00:05:46/1278-13:11:37,12) [migration/0]
(root,0,0,00:00:00/1278-13:11:37,14) [cpuhp/0]
(root,0,0,00:00:00/1278-13:11:37,15) [cpuhp/1]
(root,0,0,00:04:46/1278-13:11:37,16) [migration/1]
(root,0,0,00:00:40/1278-13:11:37,17) [ksoftirqd/1]
(root,0,0,00:00:00/1278-13:11:37,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/1278-13:11:37,20) [cpuhp/2]
(root,0,0,00:04:32/1278-13:11:37,21) [migration/2]
(root,0,0,00:01:17/1278-13:11:37,22) [ksoftirqd/2]
(root,0,0,00:00:00/1278-13:11:37,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/1278-13:11:37,25) [cpuhp/3]
(root,0,0,00:05:10/1278-13:11:37,26) [migration/3]
(root,0,0,00:17:34/1278-13:11:37,27) [ksoftirqd/3]
(root,0,0,00:00:00/1278-13:11:37,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/1278-13:11:37,30) [kdevtmpfs]
(root,0,0,00:00:00/1278-13:11:37,31) [netns]
(root,0,0,00:00:00/1278-13:11:37,32) [kauditd]
(root,0,0,00:02:05/1278-13:11:37,35) [khungtaskd]
(root,0,0,00:00:00/1278-13:11:37,36) [oom_reaper]
(root,0,0,00:00:00/1278-13:11:37,37) [writeback]
(root,0,0,00:00:00/1278-13:11:37,38) [kcompactd0]
(root,0,0,00:00:00/1278-13:11:37,39) [ksmd]
(root,0,0,00:11:01/1278-13:11:37,40) [khugepaged]
(root,0,0,00:00:00/1278-13:11:37,41) [crypto]
(root,0,0,00:00:00/1278-13:11:37,42) [kintegrityd]
(root,0,0,00:00:00/1278-13:11:37,43) [kblockd]
(root,0,0,00:00:00/1278-13:11:36,44) [edac-poller]
(root,0,0,00:00:00/1278-13:11:36,45) [devfreq_wq]
(root,0,0,00:00:00/1278-13:11:36,46) [watchdogd]
(root,0,0,00:00:00/1278-13:11:36,49) [kswapd0]
(root,0,0,00:00:00/1278-13:11:35,67) [kthrotld]
(root,0,0,00:00:00/1278-13:11:35,68) [irq/24-pciehp]
(root,0,0,00:00:00/1278-13:11:35,69) [irq/25-pciehp]
(root,0,0,00:00:00/1278-13:11:35,70) [irq/26-pciehp]
(root,0,0,00:00:00/1278-13:11:35,71) [irq/27-pciehp]
(root,0,0,00:00:00/1278-13:11:35,72) [irq/28-pciehp]
(root,0,0,00:00:00/1278-13:11:35,73) [irq/29-pciehp]
(root,0,0,00:00:00/1278-13:11:35,74) [irq/30-pciehp]
(root,0,0,00:00:00/1278-13:11:35,75) [irq/31-pciehp]
(root,0,0,00:00:00/1278-13:11:35,76) [irq/32-pciehp]
(root,0,0,00:00:00/1278-13:11:35,77) [irq/33-pciehp]
(root,0,0,00:00:00/1278-13:11:35,78) [irq/34-pciehp]
(root,0,0,00:00:00/1278-13:11:35,79) [irq/35-pciehp]
(root,0,0,00:00:00/1278-13:11:35,80) [irq/36-pciehp]
(root,0,0,00:00:00/1278-13:11:35,81) [irq/37-pciehp]
(root,0,0,00:00:00/1278-13:11:35,82) [irq/38-pciehp]
(root,0,0,00:00:00/1278-13:11:35,83) [irq/39-pciehp]
(root,0,0,00:00:00/1278-13:11:35,84) [irq/40-pciehp]
(root,0,0,00:00:00/1278-13:11:35,85) [irq/41-pciehp]
(root,0,0,00:00:00/1278-13:11:35,86) [irq/42-pciehp]
(root,0,0,00:00:00/1278-13:11:35,87) [irq/43-pciehp]
(root,0,0,00:00:00/1278-13:11:35,88) [irq/44-pciehp]
(root,0,0,00:00:00/1278-13:11:35,89) [irq/45-pciehp]
(root,0,0,00:00:00/1278-13:11:35,90) [irq/46-pciehp]
(root,0,0,00:00:00/1278-13:11:35,91) [irq/47-pciehp]
(root,0,0,00:00:00/1278-13:11:35,92) [irq/48-pciehp]
(root,0,0,00:00:00/1278-13:11:35,93) [irq/49-pciehp]
(root,0,0,00:00:00/1278-13:11:35,94) [irq/50-pciehp]
(root,0,0,00:00:00/1278-13:11:35,95) [irq/51-pciehp]
(root,0,0,00:00:00/1278-13:11:35,96) [irq/52-pciehp]
(root,0,0,00:00:00/1278-13:11:35,97) [irq/53-pciehp]
(root,0,0,00:00:00/1278-13:11:35,98) [irq/54-pciehp]
(root,0,0,00:00:00/1278-13:11:35,99) [irq/55-pciehp]
(root,0,0,00:00:00/1278-13:11:35,100) [ipv6_addrconf]
(root,0,0,00:00:00/1278-13:11:35,110) [kstrp]
(root,0,0,00:00:00/1278-13:11:34,162) [scsi_eh_0]
(root,0,0,00:00:00/1278-13:11:34,163) [scsi_tmf_0]
(root,0,0,00:00:00/1278-13:11:34,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/1278-13:11:34,165) [ata_sff]
(root,0,0,00:00:00/1278-13:11:34,166) [scsi_eh_1]
(root,0,0,00:00:00/1278-13:11:34,167) [scsi_tmf_1]
(root,0,0,00:00:00/1278-13:11:34,168) [scsi_eh_2]
(root,0,0,00:00:00/1278-13:11:34,169) [scsi_tmf_2]
(root,0,0,00:06:01/1278-13:11:34,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:24/1278-13:11:34,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:19/1278-13:11:34,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:23/1278-13:11:34,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/1278-13:11:34,232) [kdmflush]
(root,0,0,00:00:00/1278-13:11:33,238) [kdmflush]
(root,0,0,00:00:00/1278-13:11:30,266) [kworker/u257:0]
(root,0,0,00:00:10/1278-13:11:30,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/1278-13:11:30,269) [ext4-rsv-conver]
(root,0,0,00:00:00/1278-13:11:29,277) [kdmflush]
(root,0,0,00:00:05/1278-13:11:28,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/1278-13:11:28,293) [ext4-rsv-conver]
(root,0,0,00:00:00/1278-13:11:20,489) [kdmflush]
(root,0,0,00:00:00/1278-13:11:20,491) [kdmflush]
(root,0,0,00:00:00/1278-13:11:20,494) [kdmflush]
(root,0,0,00:00:00/1278-13:11:20,495) [kdmflush]
(root,0,0,00:00:00/1278-13:11:20,504) [ttm_swap]
(root,0,0,00:00:00/1278-13:11:20,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/1278-13:11:20,546) [jbd2/sda1-8]
(root,0,0,00:00:00/1278-13:11:20,547) [ext4-rsv-conver]
(root,0,0,00:00:00/1278-13:11:20,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/1278-13:11:20,558) [ext4-rsv-conver]
(root,0,0,00:00:02/1278-13:11:20,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/1278-13:11:20,570) [ext4-rsv-conver]
(root,0,0,00:00:40/1278-13:11:19,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/1278-13:11:19,575) [ext4-rsv-conver]
(root,0,0,00:04:38/1278-13:11:19,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/1278-13:11:19,580) [ext4-rsv-conver]
(root,19508,7308,00:56:23/1278-13:11:18,607) /lib/systemd/systemd-logind
(root,8504,2808,00:05:10/1278-13:11:18,608) /usr/sbin/cron -f
(messagebus,9400,4608,01:32:54/1278-13:11:18,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,5612,1556,00:00:00/1278-13:11:18,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(fcpys,21160,8816,00:00:00/90-01:24:32,20446) /lib/systemd/systemd --user
(fcpys,172052,2940,00:00:00/90-01:24:32,20447) (sd-pam)
(root,5860,2688,00:00:00/90-00:32:51,20696) ssh-agent -s
(root,5860,2712,00:00:00/89-23:44:26,20917) ssh-agent -s
(root,5860,2692,00:00:00/89-20:59:14,21442) ssh-agent -s
(root,5860,2764,00:00:00/89-16:31:35,21993) ssh-agent -s
(root,5860,2704,00:00:00/89-01:09:14,23978) ssh-agent -s
(root,5860,2696,00:00:00/87-23:51:57,27389) ssh-agent -s
(root,5860,2776,00:00:00/87-23:25:40,27440) ssh-agent -s
(root,5860,2624,00:00:00/86-23:43:13,30393) ssh-agent -s
(root,5860,2776,00:00:00/48-01:36:18,41123) ssh-agent -s
(root,5860,2688,00:00:00/47-22:24:52,42042) ssh-agent -s
(root,5860,2720,00:00:00/47-17:57:06,42792) ssh-agent -s
(root,5860,2772,00:00:00/47-17:55:45,42798) ssh-agent -s
(root,5860,2764,00:00:00/47-17:54:43,42811) ssh-agent -s
(root,67724,32276,00:27:15/307-00:13:50,68423) /lib/systemd/systemd-journald
(root,221728,4472,00:04:25/307-00:12:53,74203) /usr/sbin/rsyslogd -n -iNONE
(root,0,0,00:00:00/307-00:12:31,79244) [xfsalloc]
(root,0,0,00:00:00/307-00:12:31,79245) [xfs_mru_cache]
(root,0,0,00:00:00/307-00:12:31,79255) [jfsIO]
(root,0,0,00:00:00/307-00:12:31,79256) [jfsCommit]
(root,0,0,00:00:00/307-00:12:31,79257) [jfsCommit]
(root,0,0,00:00:00/307-00:12:31,79258) [jfsCommit]
(root,0,0,00:00:00/307-00:12:31,79259) [jfsCommit]
(root,0,0,00:00:00/307-00:12:31,79260) [jfsSync]
(root,21848,4796,00:01:03/307-00:12:15,82946) /lib/systemd/systemd-udevd
(root,9604,2188,00:00:00/307-00:12:10,84012) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(memcache,408164,2772,01:59:53/307-00:10:31,93051) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(mysql,2302284,108460,06:14:15/307-00:10:15,96153) /usr/sbin/mysqld
(root,13816,7232,00:06:34/307-00:10:13,96433) /usr/sbin/sshd -D
(root,71968,13372,00:00:00/307-00:10:13,96476) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,73780,10160,00:09:57/307-00:10:12,96478) nginx: worker process
(www-data,78304,14948,00:00:07/307-00:10:12,96479) nginx: worker process
(www-data,76060,12308,00:00:01/307-00:10:12,96480) nginx: worker process
(www-data,72996,9320,00:00:00/307-00:10:12,96481) nginx: worker process
(root,231612,33500,00:29:23/307-00:09:58,101026) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(www-data,233324,60856,00:00:06/307-00:09:58,101027) php-fpm: pool www
(www-data,233324,62856,00:00:06/307-00:09:58,101028) php-fpm: pool www
(root,0,0,00:00:00/2-13:22:20,106882) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:04/1-07:22:20,110729) [kworker/3:1-events]
(root,0,0,00:00:00/03:52:20,114363) [kworker/1:2-events]
(root,0,0,00:00:08/03:22:20,114420) [kworker/0:0-events_power_efficient]
(root,0,0,00:00:01/03:20:05,114422) [kworker/2:0-events]
(root,0,0,00:00:00/47:11,114703) [kworker/3:2]
(root,14660,7884,00:00:00/33:11,114711) sshd: fcpys [priv]
(fcpys,14944,5988,00:00:00/32:59,114717) sshd: fcpys@pts/0
(root,0,0,00:00:00/32:56,114718) [kworker/u256:1-flush-254:0]
(fcpys,7780,4672,00:00:00/32:35,114719) -bash
(root,10472,4000,00:00:00/32:32,114722) sudo -i
(root,7648,4508,00:00:00/32:31,114723) -bash
(root,13752,6016,00:00:00/32:18,114726) ssh llira@132.248.48.176
(root,0,0,00:00:00/22:15,114777) [kworker/u256:0-flush-254:5]
(root,0,0,00:00:00/17:09,114779) [kworker/0:2]
(root,0,0,00:00:00/08:08,114781) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/02:55,114782) [kworker/2:1-ata_sff]
(root,6856,3520,00:00:00/00:00,114919) /bin/bash /usr/bin/check_mk_agent
(root,7636,2752,00:00:00/00:00,114937) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5292,1000,00:00:00/00:00,114938) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2024-09-10 17:01

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb54d816e7

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,170836,10656,01:16:37/782-04:10:55,1) /sbin/init
(root,0,0,00:00:41/782-04:10:55,2) [kthreadd]
(root,0,0,00:00:00/782-04:10:55,3) [rcu_gp]
(root,0,0,00:00:00/782-04:10:55,4) [rcu_par_gp]
(root,0,0,00:00:00/782-04:10:55,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/782-04:10:55,8) [mm_percpu_wq]
(root,0,0,00:00:32/782-04:10:55,9) [ksoftirqd/0]
(root,0,0,1-09:40:09/782-04:10:55,10) [rcu_sched]
(root,0,0,00:00:00/782-04:10:55,11) [rcu_bh]
(root,0,0,00:03:35/782-04:10:55,12) [migration/0]
(root,0,0,00:00:00/782-04:10:55,14) [cpuhp/0]
(root,0,0,00:00:00/782-04:10:55,15) [cpuhp/1]
(root,0,0,00:02:57/782-04:10:55,16) [migration/1]
(root,0,0,00:00:20/782-04:10:55,17) [ksoftirqd/1]
(root,0,0,00:00:00/782-04:10:55,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/782-04:10:55,20) [cpuhp/2]
(root,0,0,00:02:48/782-04:10:55,21) [migration/2]
(root,0,0,00:00:58/782-04:10:55,22) [ksoftirqd/2]
(root,0,0,00:00:00/782-04:10:55,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/782-04:10:55,25) [cpuhp/3]
(root,0,0,00:03:12/782-04:10:55,26) [migration/3]
(root,0,0,00:12:18/782-04:10:55,27) [ksoftirqd/3]
(root,0,0,00:00:00/782-04:10:55,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/782-04:10:55,30) [kdevtmpfs]
(root,0,0,00:00:00/782-04:10:55,31) [netns]
(root,0,0,00:00:00/782-04:10:55,32) [kauditd]
(root,0,0,00:01:20/782-04:10:55,35) [khungtaskd]
(root,0,0,00:00:00/782-04:10:55,36) [oom_reaper]
(root,0,0,00:00:00/782-04:10:55,37) [writeback]
(root,0,0,00:00:00/782-04:10:55,38) [kcompactd0]
(root,0,0,00:00:00/782-04:10:55,39) [ksmd]
(root,0,0,00:06:59/782-04:10:55,40) [khugepaged]
(root,0,0,00:00:00/782-04:10:55,41) [crypto]
(root,0,0,00:00:00/782-04:10:55,42) [kintegrityd]
(root,0,0,00:00:00/782-04:10:55,43) [kblockd]
(root,0,0,00:00:00/782-04:10:54,44) [edac-poller]
(root,0,0,00:00:00/782-04:10:54,45) [devfreq_wq]
(root,0,0,00:00:00/782-04:10:54,46) [watchdogd]
(root,0,0,00:00:00/782-04:10:54,49) [kswapd0]
(root,0,0,00:00:00/782-04:10:53,67) [kthrotld]
(root,0,0,00:00:00/782-04:10:53,68) [irq/24-pciehp]
(root,0,0,00:00:00/782-04:10:53,69) [irq/25-pciehp]
(root,0,0,00:00:00/782-04:10:53,70) [irq/26-pciehp]
(root,0,0,00:00:00/782-04:10:53,71) [irq/27-pciehp]
(root,0,0,00:00:00/782-04:10:53,72) [irq/28-pciehp]
(root,0,0,00:00:00/782-04:10:53,73) [irq/29-pciehp]
(root,0,0,00:00:00/782-04:10:53,74) [irq/30-pciehp]
(root,0,0,00:00:00/782-04:10:53,75) [irq/31-pciehp]
(root,0,0,00:00:00/782-04:10:53,76) [irq/32-pciehp]
(root,0,0,00:00:00/782-04:10:53,77) [irq/33-pciehp]
(root,0,0,00:00:00/782-04:10:53,78) [irq/34-pciehp]
(root,0,0,00:00:00/782-04:10:53,79) [irq/35-pciehp]
(root,0,0,00:00:00/782-04:10:53,80) [irq/36-pciehp]
(root,0,0,00:00:00/782-04:10:53,81) [irq/37-pciehp]
(root,0,0,00:00:00/782-04:10:53,82) [irq/38-pciehp]
(root,0,0,00:00:00/782-04:10:53,83) [irq/39-pciehp]
(root,0,0,00:00:00/782-04:10:53,84) [irq/40-pciehp]
(root,0,0,00:00:00/782-04:10:53,85) [irq/41-pciehp]
(root,0,0,00:00:00/782-04:10:53,86) [irq/42-pciehp]
(root,0,0,00:00:00/782-04:10:53,87) [irq/43-pciehp]
(root,0,0,00:00:00/782-04:10:53,88) [irq/44-pciehp]
(root,0,0,00:00:00/782-04:10:53,89) [irq/45-pciehp]
(root,0,0,00:00:00/782-04:10:53,90) [irq/46-pciehp]
(root,0,0,00:00:00/782-04:10:53,91) [irq/47-pciehp]
(root,0,0,00:00:00/782-04:10:53,92) [irq/48-pciehp]
(root,0,0,00:00:00/782-04:10:53,93) [irq/49-pciehp]
(root,0,0,00:00:00/782-04:10:53,94) [irq/50-pciehp]
(root,0,0,00:00:00/782-04:10:53,95) [irq/51-pciehp]
(root,0,0,00:00:00/782-04:10:53,96) [irq/52-pciehp]
(root,0,0,00:00:00/782-04:10:53,97) [irq/53-pciehp]
(root,0,0,00:00:00/782-04:10:53,98) [irq/54-pciehp]
(root,0,0,00:00:00/782-04:10:53,99) [irq/55-pciehp]
(root,0,0,00:00:00/782-04:10:53,100) [ipv6_addrconf]
(root,0,0,00:00:00/782-04:10:53,110) [kstrp]
(root,0,0,00:00:00/782-04:10:52,162) [scsi_eh_0]
(root,0,0,00:00:00/782-04:10:52,163) [scsi_tmf_0]
(root,0,0,00:00:00/782-04:10:52,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/782-04:10:52,165) [ata_sff]
(root,0,0,00:00:00/782-04:10:52,166) [scsi_eh_1]
(root,0,0,00:00:00/782-04:10:52,167) [scsi_tmf_1]
(root,0,0,00:00:00/782-04:10:52,168) [scsi_eh_2]
(root,0,0,00:00:00/782-04:10:52,169) [scsi_tmf_2]
(root,0,0,00:03:40/782-04:10:52,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:12/782-04:10:52,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:08/782-04:10:52,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:12/782-04:10:52,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/782-04:10:52,232) [kdmflush]
(root,0,0,00:00:00/782-04:10:51,238) [kdmflush]
(root,0,0,00:00:00/782-04:10:48,266) [kworker/u257:0]
(root,0,0,00:00:06/782-04:10:48,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/782-04:10:48,269) [ext4-rsv-conver]
(root,0,0,00:00:00/782-04:10:47,277) [kdmflush]
(root,0,0,00:00:02/782-04:10:46,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/782-04:10:46,293) [ext4-rsv-conver]
(root,62568,26960,00:17:24/782-04:10:40,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:50/782-04:10:40,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/782-04:10:38,489) [kdmflush]
(root,0,0,00:00:00/782-04:10:38,491) [kdmflush]
(root,0,0,00:00:00/782-04:10:38,494) [kdmflush]
(root,0,0,00:00:00/782-04:10:38,495) [kdmflush]
(root,0,0,00:00:00/782-04:10:38,504) [ttm_swap]
(root,0,0,00:00:00/782-04:10:38,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/782-04:10:38,546) [jbd2/sda1-8]
(root,0,0,00:00:00/782-04:10:38,547) [ext4-rsv-conver]
(root,0,0,00:00:00/782-04:10:38,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/782-04:10:38,558) [ext4-rsv-conver]
(root,0,0,00:00:01/782-04:10:38,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/782-04:10:38,570) [ext4-rsv-conver]
(root,0,0,00:00:26/782-04:10:37,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/782-04:10:37,575) [ext4-rsv-conver]
(root,0,0,00:02:01/782-04:10:37,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/782-04:10:37,580) [ext4-rsv-conver]
(root,225824,4448,00:02:24/782-04:10:36,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:34:42/782-04:10:36,607) /lib/systemd/systemd-logind
(root,8504,2804,00:03:15/782-04:10:36,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:48:59/782-04:10:36,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:13:52/782-04:10:36,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,05:01:21/782-04:10:36,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/782-04:10:36,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,15852,7076,00:01:57/782-04:10:36,691) /usr/sbin/sshd -D
(mysql,2323956,125072,18:15:51/782-04:10:36,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/782-04:10:35,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/782-04:10:35,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:21:15/782-04:10:35,753) nginx: worker process
(www-data,81348,9536,00:00:05/782-04:10:35,754) nginx: worker process
(www-data,81364,9760,00:00:02/782-04:10:35,755) nginx: worker process
(www-data,81492,9732,00:00:14/782-04:10:35,756) nginx: worker process
(root,0,0,00:00:00/08:28:40,26037) [kworker/1:1-events]
(root,0,0,00:00:01/07:06:48,26411) [kworker/3:2-events]
(root,0,0,00:00:03/07:01:31,26413) [kworker/2:0-events_power_efficient]
(root,0,0,00:00:00/03:43:34,26872) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/02:00:38,27092) [kworker/1:2-events]
(root,0,0,00:00:01/51:39,27226) [kworker/0:2-events_power_efficient]
(root,0,0,00:00:00/21:38,27318) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:00/21:34,27319) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/16:18,27321) [kworker/0:0]
(root,0,0,00:00:00/06:28,27325) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/01:15,27326) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/00:01,27367) [kworker/1:0-cgroup_destroy]
(root,6860,3540,00:00:00/00:00,27473) /bin/bash /usr/bin/check_mk_agent
(root,7640,2704,00:00:00/00:00,27491) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,27492) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,327756,94528,00:05:50/751-10:01:18,98100) php-fpm: pool www
(www-data,327468,90420,00:05:25/751-10:01:17,98102) php-fpm: pool www
(www-data,326424,90760,00:05:30/751-10:00:01,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2023-05-03 08:00

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbfa780bb9

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10500,01:14:39/760-00:02:01,1) /sbin/init
(root,0,0,00:00:40/760-00:02:01,2) [kthreadd]
(root,0,0,00:00:00/760-00:02:01,3) [rcu_gp]
(root,0,0,00:00:00/760-00:02:01,4) [rcu_par_gp]
(root,0,0,00:00:00/760-00:02:01,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/760-00:02:01,8) [mm_percpu_wq]
(root,0,0,00:00:31/760-00:02:01,9) [ksoftirqd/0]
(root,0,0,1-08:44:53/760-00:02:01,10) [rcu_sched]
(root,0,0,00:00:00/760-00:02:01,11) [rcu_bh]
(root,0,0,00:03:30/760-00:02:01,12) [migration/0]
(root,0,0,00:00:00/760-00:02:01,14) [cpuhp/0]
(root,0,0,00:00:00/760-00:02:01,15) [cpuhp/1]
(root,0,0,00:02:52/760-00:02:01,16) [migration/1]
(root,0,0,00:00:19/760-00:02:01,17) [ksoftirqd/1]
(root,0,0,00:00:00/760-00:02:01,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/760-00:02:01,20) [cpuhp/2]
(root,0,0,00:02:43/760-00:02:01,21) [migration/2]
(root,0,0,00:00:56/760-00:02:01,22) [ksoftirqd/2]
(root,0,0,00:00:00/760-00:02:01,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/760-00:02:01,25) [cpuhp/3]
(root,0,0,00:03:07/760-00:02:01,26) [migration/3]
(root,0,0,00:12:02/760-00:02:01,27) [ksoftirqd/3]
(root,0,0,00:00:00/760-00:02:01,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/760-00:02:01,30) [kdevtmpfs]
(root,0,0,00:00:00/760-00:02:01,31) [netns]
(root,0,0,00:00:00/760-00:02:01,32) [kauditd]
(root,0,0,00:01:18/760-00:02:01,35) [khungtaskd]
(root,0,0,00:00:00/760-00:02:01,36) [oom_reaper]
(root,0,0,00:00:00/760-00:02:01,37) [writeback]
(root,0,0,00:00:00/760-00:02:01,38) [kcompactd0]
(root,0,0,00:00:00/760-00:02:01,39) [ksmd]
(root,0,0,00:06:49/760-00:02:01,40) [khugepaged]
(root,0,0,00:00:00/760-00:02:01,41) [crypto]
(root,0,0,00:00:00/760-00:02:01,42) [kintegrityd]
(root,0,0,00:00:00/760-00:02:01,43) [kblockd]
(root,0,0,00:00:00/760-00:02:00,44) [edac-poller]
(root,0,0,00:00:00/760-00:02:00,45) [devfreq_wq]
(root,0,0,00:00:00/760-00:02:00,46) [watchdogd]
(root,0,0,00:00:00/760-00:02:00,49) [kswapd0]
(root,0,0,00:00:00/760-00:01:59,67) [kthrotld]
(root,0,0,00:00:00/760-00:01:59,68) [irq/24-pciehp]
(root,0,0,00:00:00/760-00:01:59,69) [irq/25-pciehp]
(root,0,0,00:00:00/760-00:01:59,70) [irq/26-pciehp]
(root,0,0,00:00:00/760-00:01:59,71) [irq/27-pciehp]
(root,0,0,00:00:00/760-00:01:59,72) [irq/28-pciehp]
(root,0,0,00:00:00/760-00:01:59,73) [irq/29-pciehp]
(root,0,0,00:00:00/760-00:01:59,74) [irq/30-pciehp]
(root,0,0,00:00:00/760-00:01:59,75) [irq/31-pciehp]
(root,0,0,00:00:00/760-00:01:59,76) [irq/32-pciehp]
(root,0,0,00:00:00/760-00:01:59,77) [irq/33-pciehp]
(root,0,0,00:00:00/760-00:01:59,78) [irq/34-pciehp]
(root,0,0,00:00:00/760-00:01:59,79) [irq/35-pciehp]
(root,0,0,00:00:00/760-00:01:59,80) [irq/36-pciehp]
(root,0,0,00:00:00/760-00:01:59,81) [irq/37-pciehp]
(root,0,0,00:00:00/760-00:01:59,82) [irq/38-pciehp]
(root,0,0,00:00:00/760-00:01:59,83) [irq/39-pciehp]
(root,0,0,00:00:00/760-00:01:59,84) [irq/40-pciehp]
(root,0,0,00:00:00/760-00:01:59,85) [irq/41-pciehp]
(root,0,0,00:00:00/760-00:01:59,86) [irq/42-pciehp]
(root,0,0,00:00:00/760-00:01:59,87) [irq/43-pciehp]
(root,0,0,00:00:00/760-00:01:59,88) [irq/44-pciehp]
(root,0,0,00:00:00/760-00:01:59,89) [irq/45-pciehp]
(root,0,0,00:00:00/760-00:01:59,90) [irq/46-pciehp]
(root,0,0,00:00:00/760-00:01:59,91) [irq/47-pciehp]
(root,0,0,00:00:00/760-00:01:59,92) [irq/48-pciehp]
(root,0,0,00:00:00/760-00:01:59,93) [irq/49-pciehp]
(root,0,0,00:00:00/760-00:01:59,94) [irq/50-pciehp]
(root,0,0,00:00:00/760-00:01:59,95) [irq/51-pciehp]
(root,0,0,00:00:00/760-00:01:59,96) [irq/52-pciehp]
(root,0,0,00:00:00/760-00:01:59,97) [irq/53-pciehp]
(root,0,0,00:00:00/760-00:01:59,98) [irq/54-pciehp]
(root,0,0,00:00:00/760-00:01:59,99) [irq/55-pciehp]
(root,0,0,00:00:00/760-00:01:59,100) [ipv6_addrconf]
(root,0,0,00:00:00/760-00:01:59,110) [kstrp]
(root,0,0,00:00:00/760-00:01:58,162) [scsi_eh_0]
(root,0,0,00:00:00/760-00:01:58,163) [scsi_tmf_0]
(root,0,0,00:00:00/760-00:01:58,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/760-00:01:58,165) [ata_sff]
(root,0,0,00:00:00/760-00:01:58,166) [scsi_eh_1]
(root,0,0,00:00:00/760-00:01:58,167) [scsi_tmf_1]
(root,0,0,00:00:00/760-00:01:58,168) [scsi_eh_2]
(root,0,0,00:00:00/760-00:01:58,169) [scsi_tmf_2]
(root,0,0,00:03:34/760-00:01:58,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:11/760-00:01:58,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:08/760-00:01:58,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:11/760-00:01:58,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/760-00:01:58,232) [kdmflush]
(root,0,0,00:00:00/760-00:01:57,238) [kdmflush]
(root,0,0,00:00:00/760-00:01:54,266) [kworker/u257:0]
(root,0,0,00:00:06/760-00:01:54,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/760-00:01:54,269) [ext4-rsv-conver]
(root,0,0,00:00:00/760-00:01:53,277) [kdmflush]
(root,0,0,00:00:02/760-00:01:52,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/760-00:01:52,293) [ext4-rsv-conver]
(root,62436,26844,00:17:07/760-00:01:46,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:46/760-00:01:46,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/760-00:01:44,489) [kdmflush]
(root,0,0,00:00:00/760-00:01:44,491) [kdmflush]
(root,0,0,00:00:00/760-00:01:44,494) [kdmflush]
(root,0,0,00:00:00/760-00:01:44,495) [kdmflush]
(root,0,0,00:00:00/760-00:01:44,504) [ttm_swap]
(root,0,0,00:00:00/760-00:01:44,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/760-00:01:44,546) [jbd2/sda1-8]
(root,0,0,00:00:00/760-00:01:44,547) [ext4-rsv-conver]
(root,0,0,00:00:00/760-00:01:44,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/760-00:01:44,558) [ext4-rsv-conver]
(root,0,0,00:00:01/760-00:01:44,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/760-00:01:44,570) [ext4-rsv-conver]
(root,0,0,00:00:25/760-00:01:43,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/760-00:01:43,575) [ext4-rsv-conver]
(root,0,0,00:01:58/760-00:01:43,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/760-00:01:43,580) [ext4-rsv-conver]
(root,225824,4448,00:02:22/760-00:01:42,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:33:49/760-00:01:42,607) /lib/systemd/systemd-logind
(root,8504,2740,00:03:10/760-00:01:42,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:47:48/760-00:01:42,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:11:59/760-00:01:42,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,04:53:31/760-00:01:42,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/760-00:01:42,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,15852,7076,00:01:57/760-00:01:42,691) /usr/sbin/sshd -D
(mysql,2323956,125072,17:47:09/760-00:01:42,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/760-00:01:41,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/760-00:01:41,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:20:38/760-00:01:41,753) nginx: worker process
(www-data,81348,9536,00:00:05/760-00:01:41,754) nginx: worker process
(www-data,81364,9760,00:00:02/760-00:01:41,755) nginx: worker process
(www-data,81492,9732,00:00:13/760-00:01:41,756) nginx: worker process
(root,0,0,00:00:09/21:44:02,84132) [kworker/2:2-events]
(root,0,0,00:00:01/10:42:44,85639) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:14/06:12:44,86177) [kworker/0:2-events]
(root,0,0,00:00:00/03:12:45,86555) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/02:50:49,86563) [kworker/u256:0-flush-254:5]
(root,0,0,00:00:00/02:04:57,86676) [kworker/1:0-events]
(root,0,0,00:00:00/01:07:36,86812) [kworker/3:2-events]
(root,0,0,00:00:00/12:45,86926) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/12:40,86927) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/06:58,86929) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/01:48,86930) [kworker/2:0-ata_sff]
(root,6860,3480,00:00:00/00:00,87076) /bin/bash /usr/bin/check_mk_agent
(root,7640,2736,00:00:00/00:00,87094) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,87095) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,329804,96576,00:05:42/729-05:52:24,98100) php-fpm: pool www
(www-data,327468,90420,00:05:16/729-05:52:23,98102) php-fpm: pool www
(www-data,326424,90760,00:05:22/729-05:51:07,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2023-04-11 03:51

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb7cc68362

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10500,01:12:03/732-11:17:07,1) /sbin/init
(root,0,0,00:00:38/732-11:17:07,2) [kthreadd]
(root,0,0,00:00:00/732-11:17:07,3) [rcu_gp]
(root,0,0,00:00:00/732-11:17:07,4) [rcu_par_gp]
(root,0,0,00:00:00/732-11:17:07,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/732-11:17:07,8) [mm_percpu_wq]
(root,0,0,00:00:30/732-11:17:07,9) [ksoftirqd/0]
(root,0,0,1-07:40:50/732-11:17:07,10) [rcu_sched]
(root,0,0,00:00:00/732-11:17:07,11) [rcu_bh]
(root,0,0,00:03:22/732-11:17:07,12) [migration/0]
(root,0,0,00:00:00/732-11:17:07,14) [cpuhp/0]
(root,0,0,00:00:00/732-11:17:07,15) [cpuhp/1]
(root,0,0,00:02:46/732-11:17:07,16) [migration/1]
(root,0,0,00:00:19/732-11:17:07,17) [ksoftirqd/1]
(root,0,0,00:00:00/732-11:17:07,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/732-11:17:07,20) [cpuhp/2]
(root,0,0,00:02:38/732-11:17:07,21) [migration/2]
(root,0,0,00:00:55/732-11:17:07,22) [ksoftirqd/2]
(root,0,0,00:00:00/732-11:17:07,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/732-11:17:07,25) [cpuhp/3]
(root,0,0,00:03:00/732-11:17:07,26) [migration/3]
(root,0,0,00:11:45/732-11:17:07,27) [ksoftirqd/3]
(root,0,0,00:00:00/732-11:17:07,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/732-11:17:07,30) [kdevtmpfs]
(root,0,0,00:00:00/732-11:17:07,31) [netns]
(root,0,0,00:00:00/732-11:17:07,32) [kauditd]
(root,0,0,00:01:15/732-11:17:07,35) [khungtaskd]
(root,0,0,00:00:00/732-11:17:07,36) [oom_reaper]
(root,0,0,00:00:00/732-11:17:07,37) [writeback]
(root,0,0,00:00:00/732-11:17:07,38) [kcompactd0]
(root,0,0,00:00:00/732-11:17:07,39) [ksmd]
(root,0,0,00:06:35/732-11:17:07,40) [khugepaged]
(root,0,0,00:00:00/732-11:17:07,41) [crypto]
(root,0,0,00:00:00/732-11:17:07,42) [kintegrityd]
(root,0,0,00:00:00/732-11:17:07,43) [kblockd]
(root,0,0,00:00:00/732-11:17:06,44) [edac-poller]
(root,0,0,00:00:00/732-11:17:06,45) [devfreq_wq]
(root,0,0,00:00:00/732-11:17:06,46) [watchdogd]
(root,0,0,00:00:00/732-11:17:06,49) [kswapd0]
(root,0,0,00:00:00/732-11:17:05,67) [kthrotld]
(root,0,0,00:00:00/732-11:17:05,68) [irq/24-pciehp]
(root,0,0,00:00:00/732-11:17:05,69) [irq/25-pciehp]
(root,0,0,00:00:00/732-11:17:05,70) [irq/26-pciehp]
(root,0,0,00:00:00/732-11:17:05,71) [irq/27-pciehp]
(root,0,0,00:00:00/732-11:17:05,72) [irq/28-pciehp]
(root,0,0,00:00:00/732-11:17:05,73) [irq/29-pciehp]
(root,0,0,00:00:00/732-11:17:05,74) [irq/30-pciehp]
(root,0,0,00:00:00/732-11:17:05,75) [irq/31-pciehp]
(root,0,0,00:00:00/732-11:17:05,76) [irq/32-pciehp]
(root,0,0,00:00:00/732-11:17:05,77) [irq/33-pciehp]
(root,0,0,00:00:00/732-11:17:05,78) [irq/34-pciehp]
(root,0,0,00:00:00/732-11:17:05,79) [irq/35-pciehp]
(root,0,0,00:00:00/732-11:17:05,80) [irq/36-pciehp]
(root,0,0,00:00:00/732-11:17:05,81) [irq/37-pciehp]
(root,0,0,00:00:00/732-11:17:05,82) [irq/38-pciehp]
(root,0,0,00:00:00/732-11:17:05,83) [irq/39-pciehp]
(root,0,0,00:00:00/732-11:17:05,84) [irq/40-pciehp]
(root,0,0,00:00:00/732-11:17:05,85) [irq/41-pciehp]
(root,0,0,00:00:00/732-11:17:05,86) [irq/42-pciehp]
(root,0,0,00:00:00/732-11:17:05,87) [irq/43-pciehp]
(root,0,0,00:00:00/732-11:17:05,88) [irq/44-pciehp]
(root,0,0,00:00:00/732-11:17:05,89) [irq/45-pciehp]
(root,0,0,00:00:00/732-11:17:05,90) [irq/46-pciehp]
(root,0,0,00:00:00/732-11:17:05,91) [irq/47-pciehp]
(root,0,0,00:00:00/732-11:17:05,92) [irq/48-pciehp]
(root,0,0,00:00:00/732-11:17:05,93) [irq/49-pciehp]
(root,0,0,00:00:00/732-11:17:05,94) [irq/50-pciehp]
(root,0,0,00:00:00/732-11:17:05,95) [irq/51-pciehp]
(root,0,0,00:00:00/732-11:17:05,96) [irq/52-pciehp]
(root,0,0,00:00:00/732-11:17:05,97) [irq/53-pciehp]
(root,0,0,00:00:00/732-11:17:05,98) [irq/54-pciehp]
(root,0,0,00:00:00/732-11:17:05,99) [irq/55-pciehp]
(root,0,0,00:00:00/732-11:17:05,100) [ipv6_addrconf]
(root,0,0,00:00:00/732-11:17:05,110) [kstrp]
(root,0,0,00:00:00/732-11:17:04,162) [scsi_eh_0]
(root,0,0,00:00:00/732-11:17:04,163) [scsi_tmf_0]
(root,0,0,00:00:00/732-11:17:04,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/732-11:17:04,165) [ata_sff]
(root,0,0,00:00:00/732-11:17:04,166) [scsi_eh_1]
(root,0,0,00:00:00/732-11:17:04,167) [scsi_tmf_1]
(root,0,0,00:00:00/732-11:17:04,168) [scsi_eh_2]
(root,0,0,00:00:00/732-11:17:04,169) [scsi_tmf_2]
(root,0,0,00:03:26/732-11:17:04,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:11/732-11:17:04,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:08/732-11:17:04,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:11/732-11:17:04,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/732-11:17:04,232) [kdmflush]
(root,0,0,00:00:00/732-11:17:03,238) [kdmflush]
(root,0,0,00:00:00/732-11:17:00,266) [kworker/u257:0]
(root,0,0,00:00:05/732-11:17:00,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/732-11:17:00,269) [ext4-rsv-conver]
(root,0,0,00:00:00/732-11:16:59,277) [kdmflush]
(root,0,0,00:00:02/732-11:16:58,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/732-11:16:58,293) [ext4-rsv-conver]
(root,54108,22208,00:16:45/732-11:16:52,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:41/732-11:16:52,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/732-11:16:50,489) [kdmflush]
(root,0,0,00:00:00/732-11:16:50,491) [kdmflush]
(root,0,0,00:00:00/732-11:16:50,494) [kdmflush]
(root,0,0,00:00:00/732-11:16:50,495) [kdmflush]
(root,0,0,00:00:00/732-11:16:50,504) [ttm_swap]
(root,0,0,00:00:00/732-11:16:50,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/732-11:16:50,546) [jbd2/sda1-8]
(root,0,0,00:00:00/732-11:16:50,547) [ext4-rsv-conver]
(root,0,0,00:00:00/732-11:16:50,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/732-11:16:50,558) [ext4-rsv-conver]
(root,0,0,00:00:01/732-11:16:50,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/732-11:16:50,570) [ext4-rsv-conver]
(root,0,0,00:00:25/732-11:16:49,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/732-11:16:49,575) [ext4-rsv-conver]
(root,0,0,00:01:55/732-11:16:49,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/732-11:16:49,580) [ext4-rsv-conver]
(root,225824,4448,00:02:20/732-11:16:48,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:32:37/732-11:16:48,607) /lib/systemd/systemd-logind
(root,8504,2740,00:03:04/732-11:16:48,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:46:12/732-11:16:48,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:09:27/732-11:16:48,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,04:43:05/732-11:16:48,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/732-11:16:48,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:18:14/732-11:16:48,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:56/732-11:16:48,691) /usr/sbin/sshd -D
(mysql,2323956,125072,17:10:03/732-11:16:48,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/732-11:16:47,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/732-11:16:47,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:19:42/732-11:16:47,753) nginx: worker process
(www-data,81348,9536,00:00:04/732-11:16:47,754) nginx: worker process
(www-data,81364,9500,00:00:02/732-11:16:47,755) nginx: worker process
(www-data,81492,9732,00:00:13/732-11:16:47,756) nginx: worker process
(www-data,323660,90432,00:05:27/701-17:07:30,98100) php-fpm: pool www
(www-data,325420,88372,00:05:04/701-17:07:29,98102) php-fpm: pool www
(www-data,324376,88712,00:05:08/701-17:06:13,98105) php-fpm: pool www
(root,0,0,00:00:06/1-18:57:50,123716) [kworker/3:2-events]
(root,0,0,00:00:00/14:22:47,127376) [kworker/1:2-events]
(root,0,0,00:00:05/11:58:35,127746) [kworker/2:0-events_power_efficient]
(root,0,0,00:00:20/09:27:52,128049) [kworker/0:2-events]
(root,0,0,00:00:00/02:57:46,128892) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/02:41:51,128913) [kworker/1:1-events]
(root,0,0,00:00:00/02:17:33,129072) [kworker/0:1-events_power_efficient]
(root,0,0,00:00:00/01:49:46,129132) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/27:50,129299) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/07:15,129303) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/02:04,129304) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/00:00,129445) [kworker/3:1-cgroup_destroy]
(root,6860,3352,00:00:00/00:00,129449) /bin/bash /usr/bin/check_mk_agent
(root,7640,2756,00:00:00/00:00,129467) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,129468) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2023-03-14 15:06

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbcf88201c

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10500,01:09:50/709-02:48:57,1) /sbin/init
(root,0,0,00:00:37/709-02:48:57,2) [kthreadd]
(root,0,0,00:00:00/709-02:48:57,3) [rcu_gp]
(root,0,0,00:00:00/709-02:48:57,4) [rcu_par_gp]
(root,0,0,00:00:00/709-02:48:57,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/709-02:48:57,8) [mm_percpu_wq]
(root,0,0,00:00:29/709-02:48:57,9) [ksoftirqd/0]
(root,0,0,1-06:52:18/709-02:48:57,10) [rcu_sched]
(root,0,0,00:00:00/709-02:48:57,11) [rcu_bh]
(root,0,0,00:03:16/709-02:48:57,12) [migration/0]
(root,0,0,00:00:00/709-02:48:57,14) [cpuhp/0]
(root,0,0,00:00:00/709-02:48:57,15) [cpuhp/1]
(root,0,0,00:02:41/709-02:48:57,16) [migration/1]
(root,0,0,00:00:18/709-02:48:57,17) [ksoftirqd/1]
(root,0,0,00:00:00/709-02:48:57,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/709-02:48:57,20) [cpuhp/2]
(root,0,0,00:02:33/709-02:48:57,21) [migration/2]
(root,0,0,00:00:55/709-02:48:57,22) [ksoftirqd/2]
(root,0,0,00:00:00/709-02:48:57,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/709-02:48:57,25) [cpuhp/3]
(root,0,0,00:02:54/709-02:48:57,26) [migration/3]
(root,0,0,00:11:32/709-02:48:57,27) [ksoftirqd/3]
(root,0,0,00:00:00/709-02:48:57,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/709-02:48:57,30) [kdevtmpfs]
(root,0,0,00:00:00/709-02:48:57,31) [netns]
(root,0,0,00:00:00/709-02:48:57,32) [kauditd]
(root,0,0,00:01:13/709-02:48:57,35) [khungtaskd]
(root,0,0,00:00:00/709-02:48:57,36) [oom_reaper]
(root,0,0,00:00:00/709-02:48:57,37) [writeback]
(root,0,0,00:00:00/709-02:48:57,38) [kcompactd0]
(root,0,0,00:00:00/709-02:48:57,39) [ksmd]
(root,0,0,00:06:23/709-02:48:57,40) [khugepaged]
(root,0,0,00:00:00/709-02:48:57,41) [crypto]
(root,0,0,00:00:00/709-02:48:57,42) [kintegrityd]
(root,0,0,00:00:00/709-02:48:57,43) [kblockd]
(root,0,0,00:00:00/709-02:48:56,44) [edac-poller]
(root,0,0,00:00:00/709-02:48:56,45) [devfreq_wq]
(root,0,0,00:00:00/709-02:48:56,46) [watchdogd]
(root,0,0,00:00:00/709-02:48:56,49) [kswapd0]
(root,0,0,00:00:00/709-02:48:55,67) [kthrotld]
(root,0,0,00:00:00/709-02:48:55,68) [irq/24-pciehp]
(root,0,0,00:00:00/709-02:48:55,69) [irq/25-pciehp]
(root,0,0,00:00:00/709-02:48:55,70) [irq/26-pciehp]
(root,0,0,00:00:00/709-02:48:55,71) [irq/27-pciehp]
(root,0,0,00:00:00/709-02:48:55,72) [irq/28-pciehp]
(root,0,0,00:00:00/709-02:48:55,73) [irq/29-pciehp]
(root,0,0,00:00:00/709-02:48:55,74) [irq/30-pciehp]
(root,0,0,00:00:00/709-02:48:55,75) [irq/31-pciehp]
(root,0,0,00:00:00/709-02:48:55,76) [irq/32-pciehp]
(root,0,0,00:00:00/709-02:48:55,77) [irq/33-pciehp]
(root,0,0,00:00:00/709-02:48:55,78) [irq/34-pciehp]
(root,0,0,00:00:00/709-02:48:55,79) [irq/35-pciehp]
(root,0,0,00:00:00/709-02:48:55,80) [irq/36-pciehp]
(root,0,0,00:00:00/709-02:48:55,81) [irq/37-pciehp]
(root,0,0,00:00:00/709-02:48:55,82) [irq/38-pciehp]
(root,0,0,00:00:00/709-02:48:55,83) [irq/39-pciehp]
(root,0,0,00:00:00/709-02:48:55,84) [irq/40-pciehp]
(root,0,0,00:00:00/709-02:48:55,85) [irq/41-pciehp]
(root,0,0,00:00:00/709-02:48:55,86) [irq/42-pciehp]
(root,0,0,00:00:00/709-02:48:55,87) [irq/43-pciehp]
(root,0,0,00:00:00/709-02:48:55,88) [irq/44-pciehp]
(root,0,0,00:00:00/709-02:48:55,89) [irq/45-pciehp]
(root,0,0,00:00:00/709-02:48:55,90) [irq/46-pciehp]
(root,0,0,00:00:00/709-02:48:55,91) [irq/47-pciehp]
(root,0,0,00:00:00/709-02:48:55,92) [irq/48-pciehp]
(root,0,0,00:00:00/709-02:48:55,93) [irq/49-pciehp]
(root,0,0,00:00:00/709-02:48:55,94) [irq/50-pciehp]
(root,0,0,00:00:00/709-02:48:55,95) [irq/51-pciehp]
(root,0,0,00:00:00/709-02:48:55,96) [irq/52-pciehp]
(root,0,0,00:00:00/709-02:48:55,97) [irq/53-pciehp]
(root,0,0,00:00:00/709-02:48:55,98) [irq/54-pciehp]
(root,0,0,00:00:00/709-02:48:55,99) [irq/55-pciehp]
(root,0,0,00:00:00/709-02:48:55,100) [ipv6_addrconf]
(root,0,0,00:00:00/709-02:48:55,110) [kstrp]
(root,0,0,00:00:00/709-02:48:54,162) [scsi_eh_0]
(root,0,0,00:00:00/709-02:48:54,163) [scsi_tmf_0]
(root,0,0,00:00:00/709-02:48:54,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/709-02:48:54,165) [ata_sff]
(root,0,0,00:00:00/709-02:48:54,166) [scsi_eh_1]
(root,0,0,00:00:00/709-02:48:54,167) [scsi_tmf_1]
(root,0,0,00:00:00/709-02:48:54,168) [scsi_eh_2]
(root,0,0,00:00:00/709-02:48:54,169) [scsi_tmf_2]
(root,0,0,00:03:19/709-02:48:54,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:10/709-02:48:54,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:07/709-02:48:54,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:11/709-02:48:54,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/709-02:48:54,232) [kdmflush]
(root,0,0,00:00:00/709-02:48:53,238) [kdmflush]
(root,0,0,00:00:00/709-02:48:50,266) [kworker/u257:0]
(root,0,0,00:00:05/709-02:48:50,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/709-02:48:50,269) [ext4-rsv-conver]
(root,0,0,00:00:00/709-02:48:49,277) [kdmflush]
(root,0,0,00:00:02/709-02:48:48,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/709-02:48:48,293) [ext4-rsv-conver]
(root,53580,17768,00:16:03/709-02:48:42,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:36/709-02:48:42,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/709-02:48:40,489) [kdmflush]
(root,0,0,00:00:00/709-02:48:40,491) [kdmflush]
(root,0,0,00:00:00/709-02:48:40,494) [kdmflush]
(root,0,0,00:00:00/709-02:48:40,495) [kdmflush]
(root,0,0,00:00:00/709-02:48:40,504) [ttm_swap]
(root,0,0,00:00:00/709-02:48:40,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/709-02:48:40,546) [jbd2/sda1-8]
(root,0,0,00:00:00/709-02:48:40,547) [ext4-rsv-conver]
(root,0,0,00:00:00/709-02:48:40,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/709-02:48:40,558) [ext4-rsv-conver]
(root,0,0,00:00:01/709-02:48:40,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/709-02:48:40,570) [ext4-rsv-conver]
(root,0,0,00:00:24/709-02:48:39,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/709-02:48:39,575) [ext4-rsv-conver]
(root,0,0,00:01:51/709-02:48:39,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/709-02:48:39,580) [ext4-rsv-conver]
(root,225824,4456,00:02:14/709-02:48:38,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:31:36/709-02:48:38,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:58/709-02:48:38,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:44:44/709-02:48:38,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:07:17/709-02:48:38,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,04:34:11/709-02:48:38,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/709-02:48:38,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:15:45/709-02:48:38,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:50/709-02:48:38,691) /usr/sbin/sshd -D
(mysql,2323956,125072,16:38:23/709-02:48:38,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/709-02:48:37,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/709-02:48:37,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:18:58/709-02:48:37,753) nginx: worker process
(www-data,81348,9536,00:00:04/709-02:48:37,754) nginx: worker process
(www-data,81364,9500,00:00:02/709-02:48:37,755) nginx: worker process
(www-data,81492,9732,00:00:12/709-02:48:37,756) nginx: worker process
(root,0,0,00:00:14/06:54:24,43461) [kworker/0:0-events_power_efficient]
(root,0,0,00:00:00/06:16:27,43522) [kworker/1:2-events]
(root,0,0,00:00:01/04:00:43,43755) [kworker/2:1-events]
(root,0,0,00:00:00/02:59:40,43915) [kworker/3:2-events]
(root,0,0,00:00:00/01:29:40,44096) [kworker/1:1]
(root,0,0,00:00:00/59:40,44114) [kworker/0:2]
(root,0,0,00:00:00/38:40,44175) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/29:25,44267) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/21:35,44272) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/08:52,44275) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/03:42,44276) [kworker/2:0-ata_sff]
(root,6860,3464,00:00:00/00:00,44422) /bin/bash /usr/bin/check_mk_agent
(root,7640,2704,00:00:00/00:00,44440) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,44441) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,325708,92480,00:05:16/678-08:39:20,98100) php-fpm: pool www
(www-data,329516,92468,00:04:55/678-08:39:19,98102) php-fpm: pool www
(www-data,326424,90760,00:04:59/678-08:38:03,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2023-02-19 06:38

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbde86bf1a

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10500,01:09:31/705-14:48:58,1) /sbin/init
(root,0,0,00:00:37/705-14:48:58,2) [kthreadd]
(root,0,0,00:00:00/705-14:48:58,3) [rcu_gp]
(root,0,0,00:00:00/705-14:48:58,4) [rcu_par_gp]
(root,0,0,00:00:00/705-14:48:58,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/705-14:48:58,8) [mm_percpu_wq]
(root,0,0,00:00:29/705-14:48:58,9) [ksoftirqd/0]
(root,0,0,1-06:43:24/705-14:48:58,10) [rcu_sched]
(root,0,0,00:00:00/705-14:48:58,11) [rcu_bh]
(root,0,0,00:03:15/705-14:48:58,12) [migration/0]
(root,0,0,00:00:00/705-14:48:58,14) [cpuhp/0]
(root,0,0,00:00:00/705-14:48:58,15) [cpuhp/1]
(root,0,0,00:02:40/705-14:48:58,16) [migration/1]
(root,0,0,00:00:18/705-14:48:58,17) [ksoftirqd/1]
(root,0,0,00:00:00/705-14:48:58,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/705-14:48:58,20) [cpuhp/2]
(root,0,0,00:02:32/705-14:48:58,21) [migration/2]
(root,0,0,00:00:54/705-14:48:58,22) [ksoftirqd/2]
(root,0,0,00:00:00/705-14:48:58,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/705-14:48:58,25) [cpuhp/3]
(root,0,0,00:02:53/705-14:48:58,26) [migration/3]
(root,0,0,00:11:29/705-14:48:58,27) [ksoftirqd/3]
(root,0,0,00:00:00/705-14:48:58,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/705-14:48:58,30) [kdevtmpfs]
(root,0,0,00:00:00/705-14:48:58,31) [netns]
(root,0,0,00:00:00/705-14:48:58,32) [kauditd]
(root,0,0,00:01:13/705-14:48:58,35) [khungtaskd]
(root,0,0,00:00:00/705-14:48:58,36) [oom_reaper]
(root,0,0,00:00:00/705-14:48:58,37) [writeback]
(root,0,0,00:00:00/705-14:48:58,38) [kcompactd0]
(root,0,0,00:00:00/705-14:48:58,39) [ksmd]
(root,0,0,00:06:21/705-14:48:58,40) [khugepaged]
(root,0,0,00:00:00/705-14:48:58,41) [crypto]
(root,0,0,00:00:00/705-14:48:58,42) [kintegrityd]
(root,0,0,00:00:00/705-14:48:58,43) [kblockd]
(root,0,0,00:00:00/705-14:48:57,44) [edac-poller]
(root,0,0,00:00:00/705-14:48:57,45) [devfreq_wq]
(root,0,0,00:00:00/705-14:48:57,46) [watchdogd]
(root,0,0,00:00:00/705-14:48:57,49) [kswapd0]
(root,0,0,00:00:00/705-14:48:56,67) [kthrotld]
(root,0,0,00:00:00/705-14:48:56,68) [irq/24-pciehp]
(root,0,0,00:00:00/705-14:48:56,69) [irq/25-pciehp]
(root,0,0,00:00:00/705-14:48:56,70) [irq/26-pciehp]
(root,0,0,00:00:00/705-14:48:56,71) [irq/27-pciehp]
(root,0,0,00:00:00/705-14:48:56,72) [irq/28-pciehp]
(root,0,0,00:00:00/705-14:48:56,73) [irq/29-pciehp]
(root,0,0,00:00:00/705-14:48:56,74) [irq/30-pciehp]
(root,0,0,00:00:00/705-14:48:56,75) [irq/31-pciehp]
(root,0,0,00:00:00/705-14:48:56,76) [irq/32-pciehp]
(root,0,0,00:00:00/705-14:48:56,77) [irq/33-pciehp]
(root,0,0,00:00:00/705-14:48:56,78) [irq/34-pciehp]
(root,0,0,00:00:00/705-14:48:56,79) [irq/35-pciehp]
(root,0,0,00:00:00/705-14:48:56,80) [irq/36-pciehp]
(root,0,0,00:00:00/705-14:48:56,81) [irq/37-pciehp]
(root,0,0,00:00:00/705-14:48:56,82) [irq/38-pciehp]
(root,0,0,00:00:00/705-14:48:56,83) [irq/39-pciehp]
(root,0,0,00:00:00/705-14:48:56,84) [irq/40-pciehp]
(root,0,0,00:00:00/705-14:48:56,85) [irq/41-pciehp]
(root,0,0,00:00:00/705-14:48:56,86) [irq/42-pciehp]
(root,0,0,00:00:00/705-14:48:56,87) [irq/43-pciehp]
(root,0,0,00:00:00/705-14:48:56,88) [irq/44-pciehp]
(root,0,0,00:00:00/705-14:48:56,89) [irq/45-pciehp]
(root,0,0,00:00:00/705-14:48:56,90) [irq/46-pciehp]
(root,0,0,00:00:00/705-14:48:56,91) [irq/47-pciehp]
(root,0,0,00:00:00/705-14:48:56,92) [irq/48-pciehp]
(root,0,0,00:00:00/705-14:48:56,93) [irq/49-pciehp]
(root,0,0,00:00:00/705-14:48:56,94) [irq/50-pciehp]
(root,0,0,00:00:00/705-14:48:56,95) [irq/51-pciehp]
(root,0,0,00:00:00/705-14:48:56,96) [irq/52-pciehp]
(root,0,0,00:00:00/705-14:48:56,97) [irq/53-pciehp]
(root,0,0,00:00:00/705-14:48:56,98) [irq/54-pciehp]
(root,0,0,00:00:00/705-14:48:56,99) [irq/55-pciehp]
(root,0,0,00:00:00/705-14:48:56,100) [ipv6_addrconf]
(root,0,0,00:00:00/705-14:48:56,110) [kstrp]
(root,0,0,00:00:00/705-14:48:55,162) [scsi_eh_0]
(root,0,0,00:00:00/705-14:48:55,163) [scsi_tmf_0]
(root,0,0,00:00:00/705-14:48:55,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/705-14:48:55,165) [ata_sff]
(root,0,0,00:00:00/705-14:48:55,166) [scsi_eh_1]
(root,0,0,00:00:00/705-14:48:55,167) [scsi_tmf_1]
(root,0,0,00:00:00/705-14:48:55,168) [scsi_eh_2]
(root,0,0,00:00:00/705-14:48:55,169) [scsi_tmf_2]
(root,0,0,00:03:19/705-14:48:55,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:10/705-14:48:55,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:07/705-14:48:55,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:11/705-14:48:55,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/705-14:48:55,232) [kdmflush]
(root,0,0,00:00:00/705-14:48:54,238) [kdmflush]
(root,0,0,00:00:00/705-14:48:51,266) [kworker/u257:0]
(root,0,0,00:00:05/705-14:48:51,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/705-14:48:51,269) [ext4-rsv-conver]
(root,0,0,00:00:00/705-14:48:50,277) [kdmflush]
(root,0,0,00:00:02/705-14:48:49,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/705-14:48:49,293) [ext4-rsv-conver]
(root,61776,27388,00:16:01/705-14:48:43,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:35/705-14:48:43,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/705-14:48:41,489) [kdmflush]
(root,0,0,00:00:00/705-14:48:41,491) [kdmflush]
(root,0,0,00:00:00/705-14:48:41,494) [kdmflush]
(root,0,0,00:00:00/705-14:48:41,495) [kdmflush]
(root,0,0,00:00:00/705-14:48:41,504) [ttm_swap]
(root,0,0,00:00:00/705-14:48:41,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/705-14:48:41,546) [jbd2/sda1-8]
(root,0,0,00:00:00/705-14:48:41,547) [ext4-rsv-conver]
(root,0,0,00:00:00/705-14:48:41,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/705-14:48:41,558) [ext4-rsv-conver]
(root,0,0,00:00:01/705-14:48:41,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/705-14:48:41,570) [ext4-rsv-conver]
(root,0,0,00:00:24/705-14:48:40,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/705-14:48:40,575) [ext4-rsv-conver]
(root,0,0,00:01:50/705-14:48:40,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/705-14:48:40,580) [ext4-rsv-conver]
(root,225824,4456,00:02:13/705-14:48:39,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:31:28/705-14:48:39,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:58/705-14:48:39,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:44:33/705-14:48:39,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:06:58/705-14:48:39,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,04:32:54/705-14:48:39,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/705-14:48:39,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:15:24/705-14:48:39,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:50/705-14:48:39,691) /usr/sbin/sshd -D
(mysql,2323956,125072,16:33:13/705-14:48:39,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/705-14:48:38,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/705-14:48:38,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:18:52/705-14:48:38,753) nginx: worker process
(www-data,81348,9536,00:00:04/705-14:48:38,754) nginx: worker process
(www-data,81364,9500,00:00:02/705-14:48:38,755) nginx: worker process
(www-data,81492,9732,00:00:12/705-14:48:38,756) nginx: worker process
(root,0,0,00:00:03/1-02:59:42,29308) [kworker/3:1-events]
(root,0,0,00:00:00/12:33:34,31515) [kworker/1:2-mm_percpu_wq]
(root,0,0,00:00:05/11:43:50,31679) [kworker/2:0-events_power_efficient]
(root,0,0,00:00:00/06:08:31,32393) [kworker/3:2]
(root,0,0,00:00:10/04:59:41,32601) [kworker/0:2-events]
(root,0,0,00:00:00/01:59:37,32955) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/59:41,33071) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/59:26,33072) [kworker/u256:2-flush-254:5]
(root,0,0,00:00:00/29:43,33127) [kworker/0:1-cgroup_destroy]
(root,0,0,00:00:00/08:37,33137) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/03:27,33138) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/00:01,33171) [kworker/0:0-events_power_efficient]
(root,6860,3424,00:00:00/00:00,33285) /bin/bash /usr/bin/check_mk_agent
(root,7640,2700,00:00:00/00:00,33303) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,33304) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,323660,90432,00:05:13/674-20:39:21,98100) php-fpm: pool www
(www-data,325420,88372,00:04:53/674-20:39:20,98102) php-fpm: pool www
(www-data,322328,86664,00:04:57/674-20:38:04,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2023-02-15 18:38

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cba5cf816a

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10500,01:06:52/677-14:14:06,1) /sbin/init
(root,0,0,00:00:36/677-14:14:06,2) [kthreadd]
(root,0,0,00:00:00/677-14:14:06,3) [rcu_gp]
(root,0,0,00:00:00/677-14:14:06,4) [rcu_par_gp]
(root,0,0,00:00:00/677-14:14:06,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/677-14:14:06,8) [mm_percpu_wq]
(root,0,0,00:00:29/677-14:14:06,9) [ksoftirqd/0]
(root,0,0,1-05:40:19/677-14:14:06,10) [rcu_sched]
(root,0,0,00:00:00/677-14:14:06,11) [rcu_bh]
(root,0,0,00:03:07/677-14:14:06,12) [migration/0]
(root,0,0,00:00:00/677-14:14:06,14) [cpuhp/0]
(root,0,0,00:00:00/677-14:14:06,15) [cpuhp/1]
(root,0,0,00:02:34/677-14:14:06,16) [migration/1]
(root,0,0,00:00:17/677-14:14:06,17) [ksoftirqd/1]
(root,0,0,00:00:00/677-14:14:06,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/677-14:14:06,20) [cpuhp/2]
(root,0,0,00:02:26/677-14:14:06,21) [migration/2]
(root,0,0,00:00:54/677-14:14:06,22) [ksoftirqd/2]
(root,0,0,00:00:00/677-14:14:06,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/677-14:14:06,25) [cpuhp/3]
(root,0,0,00:02:47/677-14:14:06,26) [migration/3]
(root,0,0,00:11:11/677-14:14:06,27) [ksoftirqd/3]
(root,0,0,00:00:00/677-14:14:06,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/677-14:14:06,30) [kdevtmpfs]
(root,0,0,00:00:00/677-14:14:06,31) [netns]
(root,0,0,00:00:00/677-14:14:06,32) [kauditd]
(root,0,0,00:01:10/677-14:14:06,35) [khungtaskd]
(root,0,0,00:00:00/677-14:14:06,36) [oom_reaper]
(root,0,0,00:00:00/677-14:14:06,37) [writeback]
(root,0,0,00:00:00/677-14:14:06,38) [kcompactd0]
(root,0,0,00:00:00/677-14:14:06,39) [ksmd]
(root,0,0,00:06:06/677-14:14:06,40) [khugepaged]
(root,0,0,00:00:00/677-14:14:06,41) [crypto]
(root,0,0,00:00:00/677-14:14:06,42) [kintegrityd]
(root,0,0,00:00:00/677-14:14:06,43) [kblockd]
(root,0,0,00:00:00/677-14:14:05,44) [edac-poller]
(root,0,0,00:00:00/677-14:14:05,45) [devfreq_wq]
(root,0,0,00:00:00/677-14:14:05,46) [watchdogd]
(root,0,0,00:00:00/677-14:14:05,49) [kswapd0]
(root,0,0,00:00:00/677-14:14:04,67) [kthrotld]
(root,0,0,00:00:00/677-14:14:04,68) [irq/24-pciehp]
(root,0,0,00:00:00/677-14:14:04,69) [irq/25-pciehp]
(root,0,0,00:00:00/677-14:14:04,70) [irq/26-pciehp]
(root,0,0,00:00:00/677-14:14:04,71) [irq/27-pciehp]
(root,0,0,00:00:00/677-14:14:04,72) [irq/28-pciehp]
(root,0,0,00:00:00/677-14:14:04,73) [irq/29-pciehp]
(root,0,0,00:00:00/677-14:14:04,74) [irq/30-pciehp]
(root,0,0,00:00:00/677-14:14:04,75) [irq/31-pciehp]
(root,0,0,00:00:00/677-14:14:04,76) [irq/32-pciehp]
(root,0,0,00:00:00/677-14:14:04,77) [irq/33-pciehp]
(root,0,0,00:00:00/677-14:14:04,78) [irq/34-pciehp]
(root,0,0,00:00:00/677-14:14:04,79) [irq/35-pciehp]
(root,0,0,00:00:00/677-14:14:04,80) [irq/36-pciehp]
(root,0,0,00:00:00/677-14:14:04,81) [irq/37-pciehp]
(root,0,0,00:00:00/677-14:14:04,82) [irq/38-pciehp]
(root,0,0,00:00:00/677-14:14:04,83) [irq/39-pciehp]
(root,0,0,00:00:00/677-14:14:04,84) [irq/40-pciehp]
(root,0,0,00:00:00/677-14:14:04,85) [irq/41-pciehp]
(root,0,0,00:00:00/677-14:14:04,86) [irq/42-pciehp]
(root,0,0,00:00:00/677-14:14:04,87) [irq/43-pciehp]
(root,0,0,00:00:00/677-14:14:04,88) [irq/44-pciehp]
(root,0,0,00:00:00/677-14:14:04,89) [irq/45-pciehp]
(root,0,0,00:00:00/677-14:14:04,90) [irq/46-pciehp]
(root,0,0,00:00:00/677-14:14:04,91) [irq/47-pciehp]
(root,0,0,00:00:00/677-14:14:04,92) [irq/48-pciehp]
(root,0,0,00:00:00/677-14:14:04,93) [irq/49-pciehp]
(root,0,0,00:00:00/677-14:14:04,94) [irq/50-pciehp]
(root,0,0,00:00:00/677-14:14:04,95) [irq/51-pciehp]
(root,0,0,00:00:00/677-14:14:04,96) [irq/52-pciehp]
(root,0,0,00:00:00/677-14:14:04,97) [irq/53-pciehp]
(root,0,0,00:00:00/677-14:14:04,98) [irq/54-pciehp]
(root,0,0,00:00:00/677-14:14:04,99) [irq/55-pciehp]
(root,0,0,00:00:00/677-14:14:04,100) [ipv6_addrconf]
(root,0,0,00:00:00/677-14:14:04,110) [kstrp]
(root,0,0,00:00:00/677-14:14:03,162) [scsi_eh_0]
(root,0,0,00:00:00/677-14:14:03,163) [scsi_tmf_0]
(root,0,0,00:00:00/677-14:14:03,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/677-14:14:03,165) [ata_sff]
(root,0,0,00:00:00/677-14:14:03,166) [scsi_eh_1]
(root,0,0,00:00:00/677-14:14:03,167) [scsi_tmf_1]
(root,0,0,00:00:00/677-14:14:03,168) [scsi_eh_2]
(root,0,0,00:00:00/677-14:14:03,169) [scsi_tmf_2]
(root,0,0,00:03:10/677-14:14:03,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:10/677-14:14:03,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:07/677-14:14:03,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:10/677-14:14:03,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/677-14:14:03,232) [kdmflush]
(root,0,0,00:00:00/677-14:14:02,238) [kdmflush]
(root,0,0,00:00:00/677-14:13:59,266) [kworker/u257:0]
(root,0,0,00:00:05/677-14:13:59,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/677-14:13:59,269) [ext4-rsv-conver]
(root,0,0,00:00:00/677-14:13:58,277) [kdmflush]
(root,0,0,00:00:02/677-14:13:57,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/677-14:13:57,293) [ext4-rsv-conver]
(root,53448,19164,00:15:39/677-14:13:51,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:30/677-14:13:51,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/677-14:13:49,489) [kdmflush]
(root,0,0,00:00:00/677-14:13:49,491) [kdmflush]
(root,0,0,00:00:00/677-14:13:49,494) [kdmflush]
(root,0,0,00:00:00/677-14:13:49,495) [kdmflush]
(root,0,0,00:00:00/677-14:13:49,504) [ttm_swap]
(root,0,0,00:00:00/677-14:13:49,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/677-14:13:49,546) [jbd2/sda1-8]
(root,0,0,00:00:00/677-14:13:49,547) [ext4-rsv-conver]
(root,0,0,00:00:00/677-14:13:49,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/677-14:13:49,558) [ext4-rsv-conver]
(root,0,0,00:00:01/677-14:13:49,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/677-14:13:49,570) [ext4-rsv-conver]
(root,0,0,00:00:23/677-14:13:48,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/677-14:13:48,575) [ext4-rsv-conver]
(root,0,0,00:01:47/677-14:13:48,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/677-14:13:48,580) [ext4-rsv-conver]
(root,225824,4456,00:02:11/677-14:13:47,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:30:14/677-14:13:47,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:51/677-14:13:47,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:42:55/677-14:13:47,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:04:19/677-14:13:47,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,04:22:02/677-14:13:47,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/677-14:13:47,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:12:19/677-14:13:47,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:49/677-14:13:47,691) /usr/sbin/sshd -D
(mysql,2323956,125072,15:52:36/677-14:13:47,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/677-14:13:46,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/677-14:13:46,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:17:51/677-14:13:46,753) nginx: worker process
(www-data,81348,9536,00:00:04/677-14:13:46,754) nginx: worker process
(www-data,81364,9500,00:00:02/677-14:13:46,755) nginx: worker process
(www-data,81492,9732,00:00:12/677-14:13:46,756) nginx: worker process
(root,0,0,00:00:38/16:24:51,72985) [kworker/0:1-events]
(root,0,0,00:00:00/16:19:41,72993) [kworker/1:0-events]
(root,0,0,00:00:00/05:54:49,74279) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/04:24:49,74572) [kworker/3:1-events]
(root,0,0,00:00:00/01:49:09,74924) [kworker/3:0]
(root,0,0,00:00:00/01:32:22,74933) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/46:45,75076) [kworker/u256:2-flush-254:3]
(root,0,0,00:00:00/24:53,75081) [kworker/1:1]
(root,0,0,00:00:00/14:23,75135) [kworker/2:2-events]
(root,0,0,00:00:00/09:11,75136) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/04:00,75137) [kworker/2:0-ata_sff]
(root,0,0,00:00:00/03:50,75140) [kworker/0:2-events]
(root,6860,3412,00:00:00/00:00,75284) /bin/bash /usr/bin/check_mk_agent
(root,7640,2720,00:00:00/00:00,75302) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,932,00:00:00/00:00,75303) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,323660,90084,00:04:54/646-20:04:29,98100) php-fpm: pool www
(www-data,323372,85124,00:04:41/646-20:04:28,98102) php-fpm: pool www
(www-data,324376,87840,00:04:40/646-20:03:12,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2023-01-18 18:03

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cba3069a56

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10500,01:05:37/664-05:15:46,1) /sbin/init
(root,0,0,00:00:35/664-05:15:46,2) [kthreadd]
(root,0,0,00:00:00/664-05:15:46,3) [rcu_gp]
(root,0,0,00:00:00/664-05:15:46,4) [rcu_par_gp]
(root,0,0,00:00:00/664-05:15:46,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/664-05:15:46,8) [mm_percpu_wq]
(root,0,0,00:00:29/664-05:15:46,9) [ksoftirqd/0]
(root,0,0,1-05:10:55/664-05:15:46,10) [rcu_sched]
(root,0,0,00:00:00/664-05:15:46,11) [rcu_bh]
(root,0,0,00:03:03/664-05:15:46,12) [migration/0]
(root,0,0,00:00:00/664-05:15:46,14) [cpuhp/0]
(root,0,0,00:00:00/664-05:15:46,15) [cpuhp/1]
(root,0,0,00:02:31/664-05:15:46,16) [migration/1]
(root,0,0,00:00:17/664-05:15:46,17) [ksoftirqd/1]
(root,0,0,00:00:00/664-05:15:46,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/664-05:15:46,20) [cpuhp/2]
(root,0,0,00:02:23/664-05:15:46,21) [migration/2]
(root,0,0,00:00:54/664-05:15:46,22) [ksoftirqd/2]
(root,0,0,00:00:00/664-05:15:46,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/664-05:15:46,25) [cpuhp/3]
(root,0,0,00:02:43/664-05:15:46,26) [migration/3]
(root,0,0,00:11:04/664-05:15:46,27) [ksoftirqd/3]
(root,0,0,00:00:00/664-05:15:46,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/664-05:15:46,30) [kdevtmpfs]
(root,0,0,00:00:00/664-05:15:46,31) [netns]
(root,0,0,00:00:00/664-05:15:46,32) [kauditd]
(root,0,0,00:01:09/664-05:15:46,35) [khungtaskd]
(root,0,0,00:00:00/664-05:15:46,36) [oom_reaper]
(root,0,0,00:00:00/664-05:15:46,37) [writeback]
(root,0,0,00:00:00/664-05:15:46,38) [kcompactd0]
(root,0,0,00:00:00/664-05:15:46,39) [ksmd]
(root,0,0,00:05:59/664-05:15:46,40) [khugepaged]
(root,0,0,00:00:00/664-05:15:46,41) [crypto]
(root,0,0,00:00:00/664-05:15:46,42) [kintegrityd]
(root,0,0,00:00:00/664-05:15:46,43) [kblockd]
(root,0,0,00:00:00/664-05:15:45,44) [edac-poller]
(root,0,0,00:00:00/664-05:15:45,45) [devfreq_wq]
(root,0,0,00:00:00/664-05:15:45,46) [watchdogd]
(root,0,0,00:00:00/664-05:15:45,49) [kswapd0]
(root,0,0,00:00:00/664-05:15:44,67) [kthrotld]
(root,0,0,00:00:00/664-05:15:44,68) [irq/24-pciehp]
(root,0,0,00:00:00/664-05:15:44,69) [irq/25-pciehp]
(root,0,0,00:00:00/664-05:15:44,70) [irq/26-pciehp]
(root,0,0,00:00:00/664-05:15:44,71) [irq/27-pciehp]
(root,0,0,00:00:00/664-05:15:44,72) [irq/28-pciehp]
(root,0,0,00:00:00/664-05:15:44,73) [irq/29-pciehp]
(root,0,0,00:00:00/664-05:15:44,74) [irq/30-pciehp]
(root,0,0,00:00:00/664-05:15:44,75) [irq/31-pciehp]
(root,0,0,00:00:00/664-05:15:44,76) [irq/32-pciehp]
(root,0,0,00:00:00/664-05:15:44,77) [irq/33-pciehp]
(root,0,0,00:00:00/664-05:15:44,78) [irq/34-pciehp]
(root,0,0,00:00:00/664-05:15:44,79) [irq/35-pciehp]
(root,0,0,00:00:00/664-05:15:44,80) [irq/36-pciehp]
(root,0,0,00:00:00/664-05:15:44,81) [irq/37-pciehp]
(root,0,0,00:00:00/664-05:15:44,82) [irq/38-pciehp]
(root,0,0,00:00:00/664-05:15:44,83) [irq/39-pciehp]
(root,0,0,00:00:00/664-05:15:44,84) [irq/40-pciehp]
(root,0,0,00:00:00/664-05:15:44,85) [irq/41-pciehp]
(root,0,0,00:00:00/664-05:15:44,86) [irq/42-pciehp]
(root,0,0,00:00:00/664-05:15:44,87) [irq/43-pciehp]
(root,0,0,00:00:00/664-05:15:44,88) [irq/44-pciehp]
(root,0,0,00:00:00/664-05:15:44,89) [irq/45-pciehp]
(root,0,0,00:00:00/664-05:15:44,90) [irq/46-pciehp]
(root,0,0,00:00:00/664-05:15:44,91) [irq/47-pciehp]
(root,0,0,00:00:00/664-05:15:44,92) [irq/48-pciehp]
(root,0,0,00:00:00/664-05:15:44,93) [irq/49-pciehp]
(root,0,0,00:00:00/664-05:15:44,94) [irq/50-pciehp]
(root,0,0,00:00:00/664-05:15:44,95) [irq/51-pciehp]
(root,0,0,00:00:00/664-05:15:44,96) [irq/52-pciehp]
(root,0,0,00:00:00/664-05:15:44,97) [irq/53-pciehp]
(root,0,0,00:00:00/664-05:15:44,98) [irq/54-pciehp]
(root,0,0,00:00:00/664-05:15:44,99) [irq/55-pciehp]
(root,0,0,00:00:00/664-05:15:44,100) [ipv6_addrconf]
(root,0,0,00:00:00/664-05:15:44,110) [kstrp]
(root,0,0,00:00:00/664-05:15:43,162) [scsi_eh_0]
(root,0,0,00:00:00/664-05:15:43,163) [scsi_tmf_0]
(root,0,0,00:00:00/664-05:15:43,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/664-05:15:43,165) [ata_sff]
(root,0,0,00:00:00/664-05:15:43,166) [scsi_eh_1]
(root,0,0,00:00:00/664-05:15:43,167) [scsi_tmf_1]
(root,0,0,00:00:00/664-05:15:43,168) [scsi_eh_2]
(root,0,0,00:00:00/664-05:15:43,169) [scsi_tmf_2]
(root,0,0,00:03:07/664-05:15:43,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:10/664-05:15:43,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:07/664-05:15:43,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:10/664-05:15:43,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/664-05:15:43,232) [kdmflush]
(root,0,0,00:00:00/664-05:15:42,238) [kdmflush]
(root,0,0,00:00:00/664-05:15:39,266) [kworker/u257:0]
(root,0,0,00:00:05/664-05:15:39,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/664-05:15:39,269) [ext4-rsv-conver]
(root,0,0,00:00:00/664-05:15:38,277) [kdmflush]
(root,0,0,00:00:02/664-05:15:37,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/664-05:15:37,293) [ext4-rsv-conver]
(root,61512,23932,00:15:29/664-05:15:31,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:27/664-05:15:31,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/664-05:15:29,489) [kdmflush]
(root,0,0,00:00:00/664-05:15:29,491) [kdmflush]
(root,0,0,00:00:00/664-05:15:29,494) [kdmflush]
(root,0,0,00:00:00/664-05:15:29,495) [kdmflush]
(root,0,0,00:00:00/664-05:15:29,504) [ttm_swap]
(root,0,0,00:00:00/664-05:15:29,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/664-05:15:29,546) [jbd2/sda1-8]
(root,0,0,00:00:00/664-05:15:29,547) [ext4-rsv-conver]
(root,0,0,00:00:00/664-05:15:29,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/664-05:15:29,558) [ext4-rsv-conver]
(root,0,0,00:00:01/664-05:15:29,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/664-05:15:29,570) [ext4-rsv-conver]
(root,0,0,00:00:22/664-05:15:28,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/664-05:15:28,575) [ext4-rsv-conver]
(root,0,0,00:01:45/664-05:15:28,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/664-05:15:28,580) [ext4-rsv-conver]
(root,225824,4456,00:02:10/664-05:15:27,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:29:39/664-05:15:27,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:49/664-05:15:27,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:42:09/664-05:15:27,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:03:05/664-05:15:27,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,04:16:59/664-05:15:27,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/664-05:15:27,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:10:54/664-05:15:27,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:49/664-05:15:27,691) /usr/sbin/sshd -D
(mysql,2323956,125072,15:33:59/664-05:15:27,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/664-05:15:26,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/664-05:15:26,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:17:22/664-05:15:26,753) nginx: worker process
(www-data,81348,9536,00:00:04/664-05:15:26,754) nginx: worker process
(www-data,81364,9500,00:00:02/664-05:15:26,755) nginx: worker process
(www-data,81492,9732,00:00:12/664-05:15:26,756) nginx: worker process
(root,0,0,00:00:00/1-03:56:29,29190) [kworker/1:0-events]
(root,0,0,00:00:38/17:56:30,30602) [kworker/0:1-events]
(root,0,0,00:00:01/02:46:26,32455) [kworker/2:0-events]
(root,0,0,00:00:00/01:48:25,32568) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/01:26:30,32619) [kworker/3:1-events]
(root,0,0,00:00:00/01:16:04,32625) [kworker/3:0]
(root,0,0,00:00:00/29:13,32706) [kworker/0:2]
(root,0,0,00:00:00/26:25,32786) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/24:11,32788) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/05:35,32792) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/00:25,32793) [kworker/2:2-ata_sff]
(root,6860,3492,00:00:00/00:00,32937) /bin/bash /usr/bin/check_mk_agent
(root,7640,2712,00:00:00/00:00,32955) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,932,00:00:00/00:00,32956) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,325708,92132,00:04:45/633-11:06:09,98100) php-fpm: pool www
(www-data,325420,87172,00:04:34/633-11:06:08,98102) php-fpm: pool www
(www-data,326424,89888,00:04:34/633-11:04:52,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2023-01-05 09:05

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb3096a077

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10500,01:03:49/645-10:21:51,1) /sbin/init
(root,0,0,00:00:34/645-10:21:51,2) [kthreadd]
(root,0,0,00:00:00/645-10:21:51,3) [rcu_gp]
(root,0,0,00:00:00/645-10:21:51,4) [rcu_par_gp]
(root,0,0,00:00:00/645-10:21:51,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/645-10:21:51,8) [mm_percpu_wq]
(root,0,0,00:00:28/645-10:21:51,9) [ksoftirqd/0]
(root,0,0,1-04:29:34/645-10:21:51,10) [rcu_sched]
(root,0,0,00:00:00/645-10:21:51,11) [rcu_bh]
(root,0,0,00:02:58/645-10:21:51,12) [migration/0]
(root,0,0,00:00:00/645-10:21:51,14) [cpuhp/0]
(root,0,0,00:00:00/645-10:21:51,15) [cpuhp/1]
(root,0,0,00:02:26/645-10:21:51,16) [migration/1]
(root,0,0,00:00:17/645-10:21:51,17) [ksoftirqd/1]
(root,0,0,00:00:00/645-10:21:51,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/645-10:21:51,20) [cpuhp/2]
(root,0,0,00:02:19/645-10:21:51,21) [migration/2]
(root,0,0,00:00:54/645-10:21:51,22) [ksoftirqd/2]
(root,0,0,00:00:00/645-10:21:51,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/645-10:21:51,25) [cpuhp/3]
(root,0,0,00:02:39/645-10:21:51,26) [migration/3]
(root,0,0,00:10:53/645-10:21:51,27) [ksoftirqd/3]
(root,0,0,00:00:00/645-10:21:51,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/645-10:21:51,30) [kdevtmpfs]
(root,0,0,00:00:00/645-10:21:51,31) [netns]
(root,0,0,00:00:00/645-10:21:51,32) [kauditd]
(root,0,0,00:01:08/645-10:21:51,35) [khungtaskd]
(root,0,0,00:00:00/645-10:21:51,36) [oom_reaper]
(root,0,0,00:00:00/645-10:21:51,37) [writeback]
(root,0,0,00:00:00/645-10:21:51,38) [kcompactd0]
(root,0,0,00:00:00/645-10:21:51,39) [ksmd]
(root,0,0,00:05:49/645-10:21:51,40) [khugepaged]
(root,0,0,00:00:00/645-10:21:51,41) [crypto]
(root,0,0,00:00:00/645-10:21:51,42) [kintegrityd]
(root,0,0,00:00:00/645-10:21:51,43) [kblockd]
(root,0,0,00:00:00/645-10:21:50,44) [edac-poller]
(root,0,0,00:00:00/645-10:21:50,45) [devfreq_wq]
(root,0,0,00:00:00/645-10:21:50,46) [watchdogd]
(root,0,0,00:00:00/645-10:21:50,49) [kswapd0]
(root,0,0,00:00:00/645-10:21:49,67) [kthrotld]
(root,0,0,00:00:00/645-10:21:49,68) [irq/24-pciehp]
(root,0,0,00:00:00/645-10:21:49,69) [irq/25-pciehp]
(root,0,0,00:00:00/645-10:21:49,70) [irq/26-pciehp]
(root,0,0,00:00:00/645-10:21:49,71) [irq/27-pciehp]
(root,0,0,00:00:00/645-10:21:49,72) [irq/28-pciehp]
(root,0,0,00:00:00/645-10:21:49,73) [irq/29-pciehp]
(root,0,0,00:00:00/645-10:21:49,74) [irq/30-pciehp]
(root,0,0,00:00:00/645-10:21:49,75) [irq/31-pciehp]
(root,0,0,00:00:00/645-10:21:49,76) [irq/32-pciehp]
(root,0,0,00:00:00/645-10:21:49,77) [irq/33-pciehp]
(root,0,0,00:00:00/645-10:21:49,78) [irq/34-pciehp]
(root,0,0,00:00:00/645-10:21:49,79) [irq/35-pciehp]
(root,0,0,00:00:00/645-10:21:49,80) [irq/36-pciehp]
(root,0,0,00:00:00/645-10:21:49,81) [irq/37-pciehp]
(root,0,0,00:00:00/645-10:21:49,82) [irq/38-pciehp]
(root,0,0,00:00:00/645-10:21:49,83) [irq/39-pciehp]
(root,0,0,00:00:00/645-10:21:49,84) [irq/40-pciehp]
(root,0,0,00:00:00/645-10:21:49,85) [irq/41-pciehp]
(root,0,0,00:00:00/645-10:21:49,86) [irq/42-pciehp]
(root,0,0,00:00:00/645-10:21:49,87) [irq/43-pciehp]
(root,0,0,00:00:00/645-10:21:49,88) [irq/44-pciehp]
(root,0,0,00:00:00/645-10:21:49,89) [irq/45-pciehp]
(root,0,0,00:00:00/645-10:21:49,90) [irq/46-pciehp]
(root,0,0,00:00:00/645-10:21:49,91) [irq/47-pciehp]
(root,0,0,00:00:00/645-10:21:49,92) [irq/48-pciehp]
(root,0,0,00:00:00/645-10:21:49,93) [irq/49-pciehp]
(root,0,0,00:00:00/645-10:21:49,94) [irq/50-pciehp]
(root,0,0,00:00:00/645-10:21:49,95) [irq/51-pciehp]
(root,0,0,00:00:00/645-10:21:49,96) [irq/52-pciehp]
(root,0,0,00:00:00/645-10:21:49,97) [irq/53-pciehp]
(root,0,0,00:00:00/645-10:21:49,98) [irq/54-pciehp]
(root,0,0,00:00:00/645-10:21:49,99) [irq/55-pciehp]
(root,0,0,00:00:00/645-10:21:49,100) [ipv6_addrconf]
(root,0,0,00:00:00/645-10:21:49,110) [kstrp]
(root,0,0,00:00:00/645-10:21:48,162) [scsi_eh_0]
(root,0,0,00:00:00/645-10:21:48,163) [scsi_tmf_0]
(root,0,0,00:00:00/645-10:21:48,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/645-10:21:48,165) [ata_sff]
(root,0,0,00:00:00/645-10:21:48,166) [scsi_eh_1]
(root,0,0,00:00:00/645-10:21:48,167) [scsi_tmf_1]
(root,0,0,00:00:00/645-10:21:48,168) [scsi_eh_2]
(root,0,0,00:00:00/645-10:21:48,169) [scsi_tmf_2]
(root,0,0,00:03:01/645-10:21:48,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:10/645-10:21:48,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:07/645-10:21:48,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:10/645-10:21:48,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/645-10:21:48,232) [kdmflush]
(root,0,0,00:00:00/645-10:21:47,238) [kdmflush]
(root,0,0,00:00:00/645-10:21:44,266) [kworker/u257:0]
(root,0,0,00:00:05/645-10:21:44,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/645-10:21:44,269) [ext4-rsv-conver]
(root,0,0,00:00:00/645-10:21:43,277) [kdmflush]
(root,0,0,00:00:02/645-10:21:42,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/645-10:21:42,293) [ext4-rsv-conver]
(root,53184,19168,00:15:09/645-10:21:36,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:23/645-10:21:36,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/645-10:21:34,489) [kdmflush]
(root,0,0,00:00:00/645-10:21:34,491) [kdmflush]
(root,0,0,00:00:00/645-10:21:34,494) [kdmflush]
(root,0,0,00:00:00/645-10:21:34,495) [kdmflush]
(root,0,0,00:00:00/645-10:21:34,504) [ttm_swap]
(root,0,0,00:00:00/645-10:21:34,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/645-10:21:34,546) [jbd2/sda1-8]
(root,0,0,00:00:00/645-10:21:34,547) [ext4-rsv-conver]
(root,0,0,00:00:00/645-10:21:34,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/645-10:21:34,558) [ext4-rsv-conver]
(root,0,0,00:00:01/645-10:21:34,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/645-10:21:34,570) [ext4-rsv-conver]
(root,0,0,00:00:22/645-10:21:33,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/645-10:21:33,575) [ext4-rsv-conver]
(root,0,0,00:01:42/645-10:21:33,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/645-10:21:33,580) [ext4-rsv-conver]
(root,225824,4456,00:02:07/645-10:21:32,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:28:50/645-10:21:32,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:44/645-10:21:32,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:41:01/645-10:21:32,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,01:01:19/645-10:21:32,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,04:09:46/645-10:21:32,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/645-10:21:32,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:08:52/645-10:21:32,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:47/645-10:21:32,691) /usr/sbin/sshd -D
(mysql,2323956,125072,15:08:21/645-10:21:32,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/645-10:21:31,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/645-10:21:31,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81660,10036,00:16:48/645-10:21:31,753) nginx: worker process
(www-data,81348,9536,00:00:04/645-10:21:31,754) nginx: worker process
(www-data,81364,9500,00:00:02/645-10:21:31,755) nginx: worker process
(www-data,81492,9732,00:00:11/645-10:21:31,756) nginx: worker process
(root,0,0,00:00:06/1-22:27:31,94737) [kworker/3:0-events]
(www-data,327756,94180,00:04:35/614-16:12:14,98100) php-fpm: pool www
(www-data,325420,87172,00:04:23/614-16:12:13,98102) php-fpm: pool www
(www-data,326424,89888,00:04:27/614-16:10:57,98105) php-fpm: pool www
(root,0,0,00:00:00/19:17:35,98328) [kworker/1:1-events]
(root,0,0,00:00:08/04:02:34,100711) [kworker/0:0-events]
(root,0,0,00:00:00/02:05:36,101337) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/01:46:49,101459) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/01:46:30,101532) [kworker/u256:0-flush-254:2]
(root,0,0,00:00:00/01:40:45,101554) [kworker/0:2-events]
(root,0,0,00:00:00/01:29:04,101645) [kworker/2:2-mm_percpu_wq]
(root,0,0,00:00:00/07:30,102038) [kworker/3:2-cgroup_destroy]
(root,0,0,00:00:00/06:02,102043) [kworker/2:0-ata_sff]
(root,0,0,00:00:00/02:35,102104) [kworker/0:1-events]
(root,0,0,00:00:00/02:14,102107) [kworker/3:1]
(root,0,0,00:00:00/00:52,102112) [kworker/2:1-ata_sff]
(root,6860,3492,00:00:00/00:00,102251) /bin/bash /usr/bin/check_mk_agent
(root,7640,2700,00:00:00/00:00,102269) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,992,00:00:00/00:00,102270) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2022-12-17 14:11

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbca470f03

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10496,01:00:06/605-15:12:40,1) /sbin/init
(root,0,0,00:00:32/605-15:12:40,2) [kthreadd]
(root,0,0,00:00:00/605-15:12:40,3) [rcu_gp]
(root,0,0,00:00:00/605-15:12:40,4) [rcu_par_gp]
(root,0,0,00:00:00/605-15:12:40,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/605-15:12:40,8) [mm_percpu_wq]
(root,0,0,00:00:27/605-15:12:40,9) [ksoftirqd/0]
(root,0,0,1-02:42:51/605-15:12:40,10) [rcu_sched]
(root,0,0,00:00:00/605-15:12:40,11) [rcu_bh]
(root,0,0,00:02:47/605-15:12:40,12) [migration/0]
(root,0,0,00:00:00/605-15:12:40,14) [cpuhp/0]
(root,0,0,00:00:00/605-15:12:40,15) [cpuhp/1]
(root,0,0,00:02:17/605-15:12:40,16) [migration/1]
(root,0,0,00:00:16/605-15:12:40,17) [ksoftirqd/1]
(root,0,0,00:00:00/605-15:12:40,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/605-15:12:40,20) [cpuhp/2]
(root,0,0,00:02:11/605-15:12:40,21) [migration/2]
(root,0,0,00:00:53/605-15:12:40,22) [ksoftirqd/2]
(root,0,0,00:00:00/605-15:12:40,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/605-15:12:40,25) [cpuhp/3]
(root,0,0,00:02:29/605-15:12:40,26) [migration/3]
(root,0,0,00:10:17/605-15:12:40,27) [ksoftirqd/3]
(root,0,0,00:00:00/605-15:12:40,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/605-15:12:40,30) [kdevtmpfs]
(root,0,0,00:00:00/605-15:12:40,31) [netns]
(root,0,0,00:00:00/605-15:12:40,32) [kauditd]
(root,0,0,00:01:04/605-15:12:40,35) [khungtaskd]
(root,0,0,00:00:00/605-15:12:40,36) [oom_reaper]
(root,0,0,00:00:00/605-15:12:40,37) [writeback]
(root,0,0,00:00:00/605-15:12:40,38) [kcompactd0]
(root,0,0,00:00:00/605-15:12:40,39) [ksmd]
(root,0,0,00:05:29/605-15:12:40,40) [khugepaged]
(root,0,0,00:00:00/605-15:12:40,41) [crypto]
(root,0,0,00:00:00/605-15:12:40,42) [kintegrityd]
(root,0,0,00:00:00/605-15:12:40,43) [kblockd]
(root,0,0,00:00:00/605-15:12:39,44) [edac-poller]
(root,0,0,00:00:00/605-15:12:39,45) [devfreq_wq]
(root,0,0,00:00:00/605-15:12:39,46) [watchdogd]
(root,0,0,00:00:00/605-15:12:39,49) [kswapd0]
(root,0,0,00:00:00/605-15:12:38,67) [kthrotld]
(root,0,0,00:00:00/605-15:12:38,68) [irq/24-pciehp]
(root,0,0,00:00:00/605-15:12:38,69) [irq/25-pciehp]
(root,0,0,00:00:00/605-15:12:38,70) [irq/26-pciehp]
(root,0,0,00:00:00/605-15:12:38,71) [irq/27-pciehp]
(root,0,0,00:00:00/605-15:12:38,72) [irq/28-pciehp]
(root,0,0,00:00:00/605-15:12:38,73) [irq/29-pciehp]
(root,0,0,00:00:00/605-15:12:38,74) [irq/30-pciehp]
(root,0,0,00:00:00/605-15:12:38,75) [irq/31-pciehp]
(root,0,0,00:00:00/605-15:12:38,76) [irq/32-pciehp]
(root,0,0,00:00:00/605-15:12:38,77) [irq/33-pciehp]
(root,0,0,00:00:00/605-15:12:38,78) [irq/34-pciehp]
(root,0,0,00:00:00/605-15:12:38,79) [irq/35-pciehp]
(root,0,0,00:00:00/605-15:12:38,80) [irq/36-pciehp]
(root,0,0,00:00:00/605-15:12:38,81) [irq/37-pciehp]
(root,0,0,00:00:00/605-15:12:38,82) [irq/38-pciehp]
(root,0,0,00:00:00/605-15:12:38,83) [irq/39-pciehp]
(root,0,0,00:00:00/605-15:12:38,84) [irq/40-pciehp]
(root,0,0,00:00:00/605-15:12:38,85) [irq/41-pciehp]
(root,0,0,00:00:00/605-15:12:38,86) [irq/42-pciehp]
(root,0,0,00:00:00/605-15:12:38,87) [irq/43-pciehp]
(root,0,0,00:00:00/605-15:12:38,88) [irq/44-pciehp]
(root,0,0,00:00:00/605-15:12:38,89) [irq/45-pciehp]
(root,0,0,00:00:00/605-15:12:38,90) [irq/46-pciehp]
(root,0,0,00:00:00/605-15:12:38,91) [irq/47-pciehp]
(root,0,0,00:00:00/605-15:12:38,92) [irq/48-pciehp]
(root,0,0,00:00:00/605-15:12:38,93) [irq/49-pciehp]
(root,0,0,00:00:00/605-15:12:38,94) [irq/50-pciehp]
(root,0,0,00:00:00/605-15:12:38,95) [irq/51-pciehp]
(root,0,0,00:00:00/605-15:12:38,96) [irq/52-pciehp]
(root,0,0,00:00:00/605-15:12:38,97) [irq/53-pciehp]
(root,0,0,00:00:00/605-15:12:38,98) [irq/54-pciehp]
(root,0,0,00:00:00/605-15:12:38,99) [irq/55-pciehp]
(root,0,0,00:00:00/605-15:12:38,100) [ipv6_addrconf]
(root,0,0,00:00:00/605-15:12:38,110) [kstrp]
(root,0,0,00:00:00/605-15:12:37,162) [scsi_eh_0]
(root,0,0,00:00:00/605-15:12:37,163) [scsi_tmf_0]
(root,0,0,00:00:00/605-15:12:37,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/605-15:12:37,165) [ata_sff]
(root,0,0,00:00:00/605-15:12:37,166) [scsi_eh_1]
(root,0,0,00:00:00/605-15:12:37,167) [scsi_tmf_1]
(root,0,0,00:00:00/605-15:12:37,168) [scsi_eh_2]
(root,0,0,00:00:00/605-15:12:37,169) [scsi_tmf_2]
(root,0,0,00:02:50/605-15:12:37,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:09/605-15:12:37,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:06/605-15:12:37,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:09/605-15:12:37,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/605-15:12:37,232) [kdmflush]
(root,0,0,00:00:00/605-15:12:36,238) [kdmflush]
(root,0,0,00:00:00/605-15:12:33,266) [kworker/u257:0]
(root,0,0,00:00:04/605-15:12:33,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/605-15:12:33,269) [ext4-rsv-conver]
(root,0,0,00:00:00/605-15:12:32,277) [kdmflush]
(root,0,0,00:00:02/605-15:12:31,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/605-15:12:31,293) [ext4-rsv-conver]
(root,52920,19724,00:14:37/605-15:12:25,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:15/605-15:12:25,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/605-15:12:23,489) [kdmflush]
(root,0,0,00:00:00/605-15:12:23,491) [kdmflush]
(root,0,0,00:00:00/605-15:12:23,494) [kdmflush]
(root,0,0,00:00:00/605-15:12:23,495) [kdmflush]
(root,0,0,00:00:00/605-15:12:23,504) [ttm_swap]
(root,0,0,00:00:00/605-15:12:23,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/605-15:12:23,546) [jbd2/sda1-8]
(root,0,0,00:00:00/605-15:12:23,547) [ext4-rsv-conver]
(root,0,0,00:00:00/605-15:12:23,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/605-15:12:23,558) [ext4-rsv-conver]
(root,0,0,00:00:01/605-15:12:23,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/605-15:12:23,570) [ext4-rsv-conver]
(root,0,0,00:00:21/605-15:12:22,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/605-15:12:22,575) [ext4-rsv-conver]
(root,0,0,00:01:38/605-15:12:22,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/605-15:12:22,580) [ext4-rsv-conver]
(root,225824,4456,00:02:03/605-15:12:21,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:27:08/605-15:12:21,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:36/605-15:12:21,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:38:45/605-15:12:21,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,00:57:38/605-15:12:21,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,03:54:43/605-15:12:21,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/605-15:12:21,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:04:41/605-15:12:21,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:46/605-15:12:21,691) /usr/sbin/sshd -D
(mysql,2323956,125072,14:11:37/605-15:12:21,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/605-15:12:20,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/605-15:12:20,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81612,10072,00:15:34/605-15:12:20,753) nginx: worker process
(www-data,81348,9536,00:00:04/605-15:12:20,754) nginx: worker process
(www-data,81364,9500,00:00:02/605-15:12:20,755) nginx: worker process
(www-data,81492,9732,00:00:11/605-15:12:20,756) nginx: worker process
(www-data,325708,92132,00:04:17/574-21:03:03,98100) php-fpm: pool www
(www-data,325420,87044,00:03:59/574-21:03:02,98102) php-fpm: pool www
(www-data,322328,85792,00:04:06/574-21:01:46,98105) php-fpm: pool www
(root,0,0,00:01:26/1-16:23:42,100739) [kworker/0:1-events]
(root,0,0,00:00:00/1-15:53:42,100826) [kworker/1:1-events]
(root,0,0,00:00:00/05:23:42,105331) [kworker/0:0-events]
(root,0,0,00:00:00/03:53:41,105545) [kworker/1:0-mm_percpu_wq]
(root,0,0,00:00:00/03:23:41,105612) [kworker/3:1-events]
(root,0,0,00:00:00/01:24:16,105801) [kworker/2:0-events]
(root,0,0,00:00:00/53:36,105908) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/23:21,105966) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/13:01,105970) [kworker/3:2]
(root,0,0,00:00:00/06:10,105972) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/01:00,105973) [kworker/2:1-ata_sff]
(root,6860,3424,00:00:00/00:00,106119) /bin/bash /usr/bin/check_mk_agent
(root,7640,2696,00:00:00/00:00,106137) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,106138) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2022-11-07 19:02

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb60c60731

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10496,00:59:38/600-09:12:45,1) /sbin/init
(root,0,0,00:00:32/600-09:12:45,2) [kthreadd]
(root,0,0,00:00:00/600-09:12:45,3) [rcu_gp]
(root,0,0,00:00:00/600-09:12:45,4) [rcu_par_gp]
(root,0,0,00:00:00/600-09:12:45,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/600-09:12:45,8) [mm_percpu_wq]
(root,0,0,00:00:27/600-09:12:45,9) [ksoftirqd/0]
(root,0,0,1-02:29:08/600-09:12:45,10) [rcu_sched]
(root,0,0,00:00:00/600-09:12:45,11) [rcu_bh]
(root,0,0,00:02:46/600-09:12:45,12) [migration/0]
(root,0,0,00:00:00/600-09:12:45,14) [cpuhp/0]
(root,0,0,00:00:00/600-09:12:45,15) [cpuhp/1]
(root,0,0,00:02:16/600-09:12:45,16) [migration/1]
(root,0,0,00:00:16/600-09:12:45,17) [ksoftirqd/1]
(root,0,0,00:00:00/600-09:12:45,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/600-09:12:45,20) [cpuhp/2]
(root,0,0,00:02:09/600-09:12:45,21) [migration/2]
(root,0,0,00:00:53/600-09:12:45,22) [ksoftirqd/2]
(root,0,0,00:00:00/600-09:12:45,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/600-09:12:45,25) [cpuhp/3]
(root,0,0,00:02:28/600-09:12:45,26) [migration/3]
(root,0,0,00:10:12/600-09:12:45,27) [ksoftirqd/3]
(root,0,0,00:00:00/600-09:12:45,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/600-09:12:45,30) [kdevtmpfs]
(root,0,0,00:00:00/600-09:12:45,31) [netns]
(root,0,0,00:00:00/600-09:12:45,32) [kauditd]
(root,0,0,00:01:04/600-09:12:45,35) [khungtaskd]
(root,0,0,00:00:00/600-09:12:45,36) [oom_reaper]
(root,0,0,00:00:00/600-09:12:45,37) [writeback]
(root,0,0,00:00:00/600-09:12:45,38) [kcompactd0]
(root,0,0,00:00:00/600-09:12:45,39) [ksmd]
(root,0,0,00:05:27/600-09:12:45,40) [khugepaged]
(root,0,0,00:00:00/600-09:12:45,41) [crypto]
(root,0,0,00:00:00/600-09:12:45,42) [kintegrityd]
(root,0,0,00:00:00/600-09:12:45,43) [kblockd]
(root,0,0,00:00:00/600-09:12:44,44) [edac-poller]
(root,0,0,00:00:00/600-09:12:44,45) [devfreq_wq]
(root,0,0,00:00:00/600-09:12:44,46) [watchdogd]
(root,0,0,00:00:00/600-09:12:44,49) [kswapd0]
(root,0,0,00:00:00/600-09:12:43,67) [kthrotld]
(root,0,0,00:00:00/600-09:12:43,68) [irq/24-pciehp]
(root,0,0,00:00:00/600-09:12:43,69) [irq/25-pciehp]
(root,0,0,00:00:00/600-09:12:43,70) [irq/26-pciehp]
(root,0,0,00:00:00/600-09:12:43,71) [irq/27-pciehp]
(root,0,0,00:00:00/600-09:12:43,72) [irq/28-pciehp]
(root,0,0,00:00:00/600-09:12:43,73) [irq/29-pciehp]
(root,0,0,00:00:00/600-09:12:43,74) [irq/30-pciehp]
(root,0,0,00:00:00/600-09:12:43,75) [irq/31-pciehp]
(root,0,0,00:00:00/600-09:12:43,76) [irq/32-pciehp]
(root,0,0,00:00:00/600-09:12:43,77) [irq/33-pciehp]
(root,0,0,00:00:00/600-09:12:43,78) [irq/34-pciehp]
(root,0,0,00:00:00/600-09:12:43,79) [irq/35-pciehp]
(root,0,0,00:00:00/600-09:12:43,80) [irq/36-pciehp]
(root,0,0,00:00:00/600-09:12:43,81) [irq/37-pciehp]
(root,0,0,00:00:00/600-09:12:43,82) [irq/38-pciehp]
(root,0,0,00:00:00/600-09:12:43,83) [irq/39-pciehp]
(root,0,0,00:00:00/600-09:12:43,84) [irq/40-pciehp]
(root,0,0,00:00:00/600-09:12:43,85) [irq/41-pciehp]
(root,0,0,00:00:00/600-09:12:43,86) [irq/42-pciehp]
(root,0,0,00:00:00/600-09:12:43,87) [irq/43-pciehp]
(root,0,0,00:00:00/600-09:12:43,88) [irq/44-pciehp]
(root,0,0,00:00:00/600-09:12:43,89) [irq/45-pciehp]
(root,0,0,00:00:00/600-09:12:43,90) [irq/46-pciehp]
(root,0,0,00:00:00/600-09:12:43,91) [irq/47-pciehp]
(root,0,0,00:00:00/600-09:12:43,92) [irq/48-pciehp]
(root,0,0,00:00:00/600-09:12:43,93) [irq/49-pciehp]
(root,0,0,00:00:00/600-09:12:43,94) [irq/50-pciehp]
(root,0,0,00:00:00/600-09:12:43,95) [irq/51-pciehp]
(root,0,0,00:00:00/600-09:12:43,96) [irq/52-pciehp]
(root,0,0,00:00:00/600-09:12:43,97) [irq/53-pciehp]
(root,0,0,00:00:00/600-09:12:43,98) [irq/54-pciehp]
(root,0,0,00:00:00/600-09:12:43,99) [irq/55-pciehp]
(root,0,0,00:00:00/600-09:12:43,100) [ipv6_addrconf]
(root,0,0,00:00:00/600-09:12:43,110) [kstrp]
(root,0,0,00:00:00/600-09:12:42,162) [scsi_eh_0]
(root,0,0,00:00:00/600-09:12:42,163) [scsi_tmf_0]
(root,0,0,00:00:00/600-09:12:42,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/600-09:12:42,165) [ata_sff]
(root,0,0,00:00:00/600-09:12:42,166) [scsi_eh_1]
(root,0,0,00:00:00/600-09:12:42,167) [scsi_tmf_1]
(root,0,0,00:00:00/600-09:12:42,168) [scsi_eh_2]
(root,0,0,00:00:00/600-09:12:42,169) [scsi_tmf_2]
(root,0,0,00:02:49/600-09:12:42,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:09/600-09:12:42,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:06/600-09:12:42,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:09/600-09:12:42,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/600-09:12:42,232) [kdmflush]
(root,0,0,00:00:00/600-09:12:41,238) [kdmflush]
(root,0,0,00:00:00/600-09:12:38,266) [kworker/u257:0]
(root,0,0,00:00:04/600-09:12:38,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/600-09:12:38,269) [ext4-rsv-conver]
(root,0,0,00:00:00/600-09:12:37,277) [kdmflush]
(root,0,0,00:00:02/600-09:12:36,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/600-09:12:36,293) [ext4-rsv-conver]
(root,61116,24776,00:14:31/600-09:12:30,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:14/600-09:12:30,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/600-09:12:28,489) [kdmflush]
(root,0,0,00:00:00/600-09:12:28,491) [kdmflush]
(root,0,0,00:00:00/600-09:12:28,494) [kdmflush]
(root,0,0,00:00:00/600-09:12:28,495) [kdmflush]
(root,0,0,00:00:00/600-09:12:28,504) [ttm_swap]
(root,0,0,00:00:00/600-09:12:28,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/600-09:12:28,546) [jbd2/sda1-8]
(root,0,0,00:00:00/600-09:12:28,547) [ext4-rsv-conver]
(root,0,0,00:00:00/600-09:12:28,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/600-09:12:28,558) [ext4-rsv-conver]
(root,0,0,00:00:01/600-09:12:28,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/600-09:12:28,570) [ext4-rsv-conver]
(root,0,0,00:00:21/600-09:12:27,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/600-09:12:27,575) [ext4-rsv-conver]
(root,0,0,00:01:37/600-09:12:27,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/600-09:12:27,580) [ext4-rsv-conver]
(root,225824,4456,00:02:02/600-09:12:26,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:26:56/600-09:12:26,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:35/600-09:12:26,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:38:27/600-09:12:26,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,00:57:10/600-09:12:26,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,03:52:49/600-09:12:26,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/600-09:12:26,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:04:10/600-09:12:26,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:45/600-09:12:26,691) /usr/sbin/sshd -D
(mysql,2323956,125072,14:04:32/600-09:12:26,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/600-09:12:25,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/600-09:12:25,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81612,10072,00:15:18/600-09:12:25,753) nginx: worker process
(www-data,81348,9536,00:00:04/600-09:12:25,754) nginx: worker process
(www-data,81364,9500,00:00:02/600-09:12:25,755) nginx: worker process
(www-data,81492,9732,00:00:11/600-09:12:25,756) nginx: worker process
(root,0,0,00:00:00/1-07:18:33,84144) [kworker/1:2-mm_percpu_wq]
(root,0,0,00:00:01/07:18:40,87229) [kworker/3:0-events]
(root,0,0,00:00:09/04:18:58,87605) [kworker/0:0-events]
(root,0,0,00:00:01/03:25:27,87668) [kworker/2:0-events_power_efficient]
(root,0,0,00:00:00/02:53:46,87799) [kworker/1:0-events]
(root,0,0,00:00:00/37:42,88150) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/18:41,88203) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/14:05,88253) [kworker/3:1]
(root,0,0,00:00:00/14:00,88254) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/08:17,88256) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/03:07,88257) [kworker/2:1-ata_sff]
(root,6860,3472,00:00:00/00:00,88382) /bin/bash /usr/bin/check_mk_agent
(root,7640,2700,00:00:00/00:00,88400) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,1000,00:00:00/00:00,88401) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,327756,94116,00:04:14/569-15:03:08,98100) php-fpm: pool www
(www-data,323372,84996,00:03:58/569-15:03:07,98102) php-fpm: pool www
(www-data,326424,89888,00:04:02/569-15:01:51,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2022-11-02 13:02

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb8d08ac17

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10496,00:57:46/580-12:10:25,1) /sbin/init
(root,0,0,00:00:31/580-12:10:25,2) [kthreadd]
(root,0,0,00:00:00/580-12:10:25,3) [rcu_gp]
(root,0,0,00:00:00/580-12:10:25,4) [rcu_par_gp]
(root,0,0,00:00:00/580-12:10:25,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/580-12:10:25,8) [mm_percpu_wq]
(root,0,0,00:00:27/580-12:10:25,9) [ksoftirqd/0]
(root,0,0,1-01:35:56/580-12:10:25,10) [rcu_sched]
(root,0,0,00:00:00/580-12:10:25,11) [rcu_bh]
(root,0,0,00:02:40/580-12:10:25,12) [migration/0]
(root,0,0,00:00:00/580-12:10:25,14) [cpuhp/0]
(root,0,0,00:00:00/580-12:10:25,15) [cpuhp/1]
(root,0,0,00:02:12/580-12:10:25,16) [migration/1]
(root,0,0,00:00:15/580-12:10:25,17) [ksoftirqd/1]
(root,0,0,00:00:00/580-12:10:25,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/580-12:10:25,20) [cpuhp/2]
(root,0,0,00:02:05/580-12:10:25,21) [migration/2]
(root,0,0,00:00:53/580-12:10:25,22) [ksoftirqd/2]
(root,0,0,00:00:00/580-12:10:25,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/580-12:10:25,25) [cpuhp/3]
(root,0,0,00:02:23/580-12:10:25,26) [migration/3]
(root,0,0,00:09:54/580-12:10:25,27) [ksoftirqd/3]
(root,0,0,00:00:00/580-12:10:25,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/580-12:10:25,30) [kdevtmpfs]
(root,0,0,00:00:00/580-12:10:25,31) [netns]
(root,0,0,00:00:00/580-12:10:25,32) [kauditd]
(root,0,0,00:01:02/580-12:10:25,35) [khungtaskd]
(root,0,0,00:00:00/580-12:10:25,36) [oom_reaper]
(root,0,0,00:00:00/580-12:10:25,37) [writeback]
(root,0,0,00:00:00/580-12:10:25,38) [kcompactd0]
(root,0,0,00:00:00/580-12:10:25,39) [ksmd]
(root,0,0,00:05:17/580-12:10:25,40) [khugepaged]
(root,0,0,00:00:00/580-12:10:25,41) [crypto]
(root,0,0,00:00:00/580-12:10:25,42) [kintegrityd]
(root,0,0,00:00:00/580-12:10:25,43) [kblockd]
(root,0,0,00:00:00/580-12:10:24,44) [edac-poller]
(root,0,0,00:00:00/580-12:10:24,45) [devfreq_wq]
(root,0,0,00:00:00/580-12:10:24,46) [watchdogd]
(root,0,0,00:00:00/580-12:10:24,49) [kswapd0]
(root,0,0,00:00:00/580-12:10:23,67) [kthrotld]
(root,0,0,00:00:00/580-12:10:23,68) [irq/24-pciehp]
(root,0,0,00:00:00/580-12:10:23,69) [irq/25-pciehp]
(root,0,0,00:00:00/580-12:10:23,70) [irq/26-pciehp]
(root,0,0,00:00:00/580-12:10:23,71) [irq/27-pciehp]
(root,0,0,00:00:00/580-12:10:23,72) [irq/28-pciehp]
(root,0,0,00:00:00/580-12:10:23,73) [irq/29-pciehp]
(root,0,0,00:00:00/580-12:10:23,74) [irq/30-pciehp]
(root,0,0,00:00:00/580-12:10:23,75) [irq/31-pciehp]
(root,0,0,00:00:00/580-12:10:23,76) [irq/32-pciehp]
(root,0,0,00:00:00/580-12:10:23,77) [irq/33-pciehp]
(root,0,0,00:00:00/580-12:10:23,78) [irq/34-pciehp]
(root,0,0,00:00:00/580-12:10:23,79) [irq/35-pciehp]
(root,0,0,00:00:00/580-12:10:23,80) [irq/36-pciehp]
(root,0,0,00:00:00/580-12:10:23,81) [irq/37-pciehp]
(root,0,0,00:00:00/580-12:10:23,82) [irq/38-pciehp]
(root,0,0,00:00:00/580-12:10:23,83) [irq/39-pciehp]
(root,0,0,00:00:00/580-12:10:23,84) [irq/40-pciehp]
(root,0,0,00:00:00/580-12:10:23,85) [irq/41-pciehp]
(root,0,0,00:00:00/580-12:10:23,86) [irq/42-pciehp]
(root,0,0,00:00:00/580-12:10:23,87) [irq/43-pciehp]
(root,0,0,00:00:00/580-12:10:23,88) [irq/44-pciehp]
(root,0,0,00:00:00/580-12:10:23,89) [irq/45-pciehp]
(root,0,0,00:00:00/580-12:10:23,90) [irq/46-pciehp]
(root,0,0,00:00:00/580-12:10:23,91) [irq/47-pciehp]
(root,0,0,00:00:00/580-12:10:23,92) [irq/48-pciehp]
(root,0,0,00:00:00/580-12:10:23,93) [irq/49-pciehp]
(root,0,0,00:00:00/580-12:10:23,94) [irq/50-pciehp]
(root,0,0,00:00:00/580-12:10:23,95) [irq/51-pciehp]
(root,0,0,00:00:00/580-12:10:23,96) [irq/52-pciehp]
(root,0,0,00:00:00/580-12:10:23,97) [irq/53-pciehp]
(root,0,0,00:00:00/580-12:10:23,98) [irq/54-pciehp]
(root,0,0,00:00:00/580-12:10:23,99) [irq/55-pciehp]
(root,0,0,00:00:00/580-12:10:23,100) [ipv6_addrconf]
(root,0,0,00:00:00/580-12:10:23,110) [kstrp]
(root,0,0,00:00:00/580-12:10:22,162) [scsi_eh_0]
(root,0,0,00:00:00/580-12:10:22,163) [scsi_tmf_0]
(root,0,0,00:00:00/580-12:10:22,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/580-12:10:22,165) [ata_sff]
(root,0,0,00:00:00/580-12:10:22,166) [scsi_eh_1]
(root,0,0,00:00:00/580-12:10:22,167) [scsi_tmf_1]
(root,0,0,00:00:00/580-12:10:22,168) [scsi_eh_2]
(root,0,0,00:00:00/580-12:10:22,169) [scsi_tmf_2]
(root,0,0,00:02:43/580-12:10:22,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:09/580-12:10:22,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:06/580-12:10:22,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:09/580-12:10:22,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/580-12:10:22,232) [kdmflush]
(root,0,0,00:00:00/580-12:10:21,238) [kdmflush]
(root,0,0,00:00:00/580-12:10:18,266) [kworker/u257:0]
(root,0,0,00:00:04/580-12:10:18,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/580-12:10:18,269) [ext4-rsv-conver]
(root,0,0,00:00:00/580-12:10:17,277) [kdmflush]
(root,0,0,00:00:02/580-12:10:16,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/580-12:10:16,293) [ext4-rsv-conver]
(root,60852,24092,00:14:09/580-12:10:10,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:10/580-12:10:10,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/580-12:10:08,489) [kdmflush]
(root,0,0,00:00:00/580-12:10:08,491) [kdmflush]
(root,0,0,00:00:00/580-12:10:08,494) [kdmflush]
(root,0,0,00:00:00/580-12:10:08,495) [kdmflush]
(root,0,0,00:00:00/580-12:10:08,504) [ttm_swap]
(root,0,0,00:00:00/580-12:10:08,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/580-12:10:08,546) [jbd2/sda1-8]
(root,0,0,00:00:00/580-12:10:08,547) [ext4-rsv-conver]
(root,0,0,00:00:00/580-12:10:08,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/580-12:10:08,558) [ext4-rsv-conver]
(root,0,0,00:00:01/580-12:10:08,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/580-12:10:08,570) [ext4-rsv-conver]
(root,0,0,00:00:20/580-12:10:07,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/580-12:10:07,575) [ext4-rsv-conver]
(root,0,0,00:01:34/580-12:10:07,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/580-12:10:07,580) [ext4-rsv-conver]
(root,225824,4456,00:02:00/580-12:10:06,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:26:05/580-12:10:06,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:30/580-12:10:06,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:37:16/580-12:10:06,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,00:55:21/580-12:10:06,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,03:45:23/580-12:10:06,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/580-12:10:06,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:02:07/580-12:10:06,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:44/580-12:10:06,691) /usr/sbin/sshd -D
(mysql,2323956,125072,13:37:19/580-12:10:06,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/580-12:10:05,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/580-12:10:05,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81436,9812,00:14:32/580-12:10:05,753) nginx: worker process
(www-data,81348,9536,00:00:04/580-12:10:05,754) nginx: worker process
(www-data,81364,9500,00:00:02/580-12:10:05,755) nginx: worker process
(www-data,81492,9732,00:00:10/580-12:10:05,756) nginx: worker process
(root,0,0,00:00:07/2-09:21:26,15425) [kworker/3:1-events]
(root,0,0,00:00:00/19:51:26,20732) [kworker/1:2-events]
(root,0,0,00:00:11/06:16:22,22474) [kworker/0:2-events]
(root,0,0,00:00:01/04:28:30,22773) [kworker/2:0-events_power_efficient]
(root,0,0,00:00:00/01:43:21,23161) [kworker/u256:1-flush-254:5]
(root,0,0,00:00:00/51:26,23271) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/21:26,23293) [kworker/1:1-cgroup_destroy]
(root,0,0,00:00:00/21:13,23356) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/16:12,23358) [kworker/0:0]
(root,0,0,00:00:00/09:05,23360) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/03:54,23361) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/00:00,23476) [kworker/1:0-cgroup_destroy]
(root,6860,3392,00:00:00/00:00,23506) /bin/bash /usr/bin/check_mk_agent
(root,7640,2712,00:00:00/00:00,23524) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,23525) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(www-data,325708,89852,00:04:07/549-18:00:48,98100) php-fpm: pool www
(www-data,327468,87120,00:03:51/549-18:00:47,98102) php-fpm: pool www
(www-data,326424,87576,00:03:51/549-17:59:31,98105) php-fpm: pool www

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2022-10-13 16:00

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cb2c7ab9bf

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10496,00:56:25/565-12:09:23,1) /sbin/init
(root,0,0,00:00:30/565-12:09:23,2) [kthreadd]
(root,0,0,00:00:00/565-12:09:23,3) [rcu_gp]
(root,0,0,00:00:00/565-12:09:23,4) [rcu_par_gp]
(root,0,0,00:00:00/565-12:09:23,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/565-12:09:23,8) [mm_percpu_wq]
(root,0,0,00:00:27/565-12:09:23,9) [ksoftirqd/0]
(root,0,0,1-00:58:07/565-12:09:23,10) [rcu_sched]
(root,0,0,00:00:00/565-12:09:23,11) [rcu_bh]
(root,0,0,00:02:37/565-12:09:23,12) [migration/0]
(root,0,0,00:00:00/565-12:09:23,14) [cpuhp/0]
(root,0,0,00:00:00/565-12:09:23,15) [cpuhp/1]
(root,0,0,00:02:09/565-12:09:23,16) [migration/1]
(root,0,0,00:00:15/565-12:09:23,17) [ksoftirqd/1]
(root,0,0,00:00:00/565-12:09:23,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/565-12:09:23,20) [cpuhp/2]
(root,0,0,00:02:02/565-12:09:23,21) [migration/2]
(root,0,0,00:00:53/565-12:09:23,22) [ksoftirqd/2]
(root,0,0,00:00:00/565-12:09:23,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/565-12:09:23,25) [cpuhp/3]
(root,0,0,00:02:20/565-12:09:23,26) [migration/3]
(root,0,0,00:09:43/565-12:09:23,27) [ksoftirqd/3]
(root,0,0,00:00:00/565-12:09:23,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/565-12:09:23,30) [kdevtmpfs]
(root,0,0,00:00:00/565-12:09:23,31) [netns]
(root,0,0,00:00:00/565-12:09:23,32) [kauditd]
(root,0,0,00:01:01/565-12:09:23,35) [khungtaskd]
(root,0,0,00:00:00/565-12:09:23,36) [oom_reaper]
(root,0,0,00:00:00/565-12:09:23,37) [writeback]
(root,0,0,00:00:00/565-12:09:23,38) [kcompactd0]
(root,0,0,00:00:00/565-12:09:23,39) [ksmd]
(root,0,0,00:05:09/565-12:09:23,40) [khugepaged]
(root,0,0,00:00:00/565-12:09:23,41) [crypto]
(root,0,0,00:00:00/565-12:09:23,42) [kintegrityd]
(root,0,0,00:00:00/565-12:09:23,43) [kblockd]
(root,0,0,00:00:00/565-12:09:22,44) [edac-poller]
(root,0,0,00:00:00/565-12:09:22,45) [devfreq_wq]
(root,0,0,00:00:00/565-12:09:22,46) [watchdogd]
(root,0,0,00:00:00/565-12:09:22,49) [kswapd0]
(root,0,0,00:00:00/565-12:09:21,67) [kthrotld]
(root,0,0,00:00:00/565-12:09:21,68) [irq/24-pciehp]
(root,0,0,00:00:00/565-12:09:21,69) [irq/25-pciehp]
(root,0,0,00:00:00/565-12:09:21,70) [irq/26-pciehp]
(root,0,0,00:00:00/565-12:09:21,71) [irq/27-pciehp]
(root,0,0,00:00:00/565-12:09:21,72) [irq/28-pciehp]
(root,0,0,00:00:00/565-12:09:21,73) [irq/29-pciehp]
(root,0,0,00:00:00/565-12:09:21,74) [irq/30-pciehp]
(root,0,0,00:00:00/565-12:09:21,75) [irq/31-pciehp]
(root,0,0,00:00:00/565-12:09:21,76) [irq/32-pciehp]
(root,0,0,00:00:00/565-12:09:21,77) [irq/33-pciehp]
(root,0,0,00:00:00/565-12:09:21,78) [irq/34-pciehp]
(root,0,0,00:00:00/565-12:09:21,79) [irq/35-pciehp]
(root,0,0,00:00:00/565-12:09:21,80) [irq/36-pciehp]
(root,0,0,00:00:00/565-12:09:21,81) [irq/37-pciehp]
(root,0,0,00:00:00/565-12:09:21,82) [irq/38-pciehp]
(root,0,0,00:00:00/565-12:09:21,83) [irq/39-pciehp]
(root,0,0,00:00:00/565-12:09:21,84) [irq/40-pciehp]
(root,0,0,00:00:00/565-12:09:21,85) [irq/41-pciehp]
(root,0,0,00:00:00/565-12:09:21,86) [irq/42-pciehp]
(root,0,0,00:00:00/565-12:09:21,87) [irq/43-pciehp]
(root,0,0,00:00:00/565-12:09:21,88) [irq/44-pciehp]
(root,0,0,00:00:00/565-12:09:21,89) [irq/45-pciehp]
(root,0,0,00:00:00/565-12:09:21,90) [irq/46-pciehp]
(root,0,0,00:00:00/565-12:09:21,91) [irq/47-pciehp]
(root,0,0,00:00:00/565-12:09:21,92) [irq/48-pciehp]
(root,0,0,00:00:00/565-12:09:21,93) [irq/49-pciehp]
(root,0,0,00:00:00/565-12:09:21,94) [irq/50-pciehp]
(root,0,0,00:00:00/565-12:09:21,95) [irq/51-pciehp]
(root,0,0,00:00:00/565-12:09:21,96) [irq/52-pciehp]
(root,0,0,00:00:00/565-12:09:21,97) [irq/53-pciehp]
(root,0,0,00:00:00/565-12:09:21,98) [irq/54-pciehp]
(root,0,0,00:00:00/565-12:09:21,99) [irq/55-pciehp]
(root,0,0,00:00:00/565-12:09:21,100) [ipv6_addrconf]
(root,0,0,00:00:00/565-12:09:21,110) [kstrp]
(root,0,0,00:00:00/565-12:09:20,162) [scsi_eh_0]
(root,0,0,00:00:00/565-12:09:20,163) [scsi_tmf_0]
(root,0,0,00:00:00/565-12:09:20,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/565-12:09:20,165) [ata_sff]
(root,0,0,00:00:00/565-12:09:20,166) [scsi_eh_1]
(root,0,0,00:00:00/565-12:09:20,167) [scsi_tmf_1]
(root,0,0,00:00:00/565-12:09:20,168) [scsi_eh_2]
(root,0,0,00:00:00/565-12:09:20,169) [scsi_tmf_2]
(root,0,0,00:02:39/565-12:09:20,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:09/565-12:09:20,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:06/565-12:09:20,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:09/565-12:09:20,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/565-12:09:20,232) [kdmflush]
(root,0,0,00:00:00/565-12:09:19,238) [kdmflush]
(root,0,0,00:00:00/565-12:09:16,266) [kworker/u257:0]
(root,0,0,00:00:04/565-12:09:16,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/565-12:09:16,269) [ext4-rsv-conver]
(root,0,0,00:00:00/565-12:09:15,277) [kdmflush]
(root,0,0,00:00:02/565-12:09:14,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/565-12:09:14,293) [ext4-rsv-conver]
(root,60852,21748,00:13:57/565-12:09:08,339) /lib/systemd/systemd-journald
(root,23116,6100,00:02:07/565-12:09:08,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/565-12:09:06,489) [kdmflush]
(root,0,0,00:00:00/565-12:09:06,491) [kdmflush]
(root,0,0,00:00:00/565-12:09:06,494) [kdmflush]
(root,0,0,00:00:00/565-12:09:06,495) [kdmflush]
(root,0,0,00:00:00/565-12:09:06,504) [ttm_swap]
(root,0,0,00:00:00/565-12:09:06,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/565-12:09:06,546) [jbd2/sda1-8]
(root,0,0,00:00:00/565-12:09:06,547) [ext4-rsv-conver]
(root,0,0,00:00:00/565-12:09:06,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/565-12:09:06,558) [ext4-rsv-conver]
(root,0,0,00:00:01/565-12:09:06,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/565-12:09:06,570) [ext4-rsv-conver]
(root,0,0,00:00:19/565-12:09:05,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/565-12:09:05,575) [ext4-rsv-conver]
(root,0,0,00:01:32/565-12:09:05,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/565-12:09:05,580) [ext4-rsv-conver]
(root,225824,4456,00:01:58/565-12:09:04,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:25:28/565-12:09:04,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:27/565-12:09:04,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:36:27/565-12:09:04,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,00:54:03/565-12:09:04,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,03:40:03/565-12:09:04,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/565-12:09:04,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,01:00:41/565-12:09:04,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:43/565-12:09:04,691) /usr/sbin/sshd -D
(mysql,2323956,125072,13:16:42/565-12:09:04,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/565-12:09:03,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/565-12:09:03,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81436,9812,00:13:58/565-12:09:03,753) nginx: worker process
(www-data,81348,9536,00:00:04/565-12:09:03,754) nginx: worker process
(www-data,81364,9500,00:00:02/565-12:09:03,755) nginx: worker process
(www-data,81492,9732,00:00:10/565-12:09:03,756) nginx: worker process
(www-data,325708,89852,00:03:58/534-17:59:46,98100) php-fpm: pool www
(www-data,325420,85072,00:03:45/534-17:59:45,98102) php-fpm: pool www
(www-data,322328,83480,00:03:45/534-17:58:29,98105) php-fpm: pool www
(root,0,0,00:00:21/2-00:23:30,99901) [kworker/2:0-events_freezable_power_]
(root,0,0,00:00:03/1-01:14:58,102926) [kworker/3:1-events]
(root,0,0,00:00:19/08:50:05,104971) [kworker/0:2-events]
(root,0,0,00:00:00/03:50:05,105709) [kworker/3:0-cgroup_destroy]
(root,0,0,00:00:00/02:50:05,105824) [kworker/1:0-events]
(root,0,0,00:00:00/01:15:05,106004) [kworker/0:0]
(root,0,0,00:00:00/41:55,106065) [kworker/u256:0-flush-254:5]
(root,0,0,00:00:00/20:05,106098) [kworker/1:2-cgroup_destroy]
(root,0,0,00:00:00/19:50,106119) [kworker/u256:1-flush-254:4]
(root,0,0,00:00:00/08:09,106122) [kworker/2:1-ata_sff]
(root,0,0,00:00:00/02:59,106123) [kworker/2:2-ata_sff]
(root,6860,3392,00:00:00/00:00,106269) /bin/bash /usr/bin/check_mk_agent
(root,7640,2644,00:00:00/00:00,106287) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,996,00:00:00/00:00,106288) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2022-09-28 15:59

    • Severity: high
      Fingerprint: 03cb82e6f6a6b45342c4bbcb76c1b6ce66f06e791572799c9031d0cbca6d343f

      Found public CheckMk agent:
Version: 1.5.0p7
AgentOS: linux
Hostname: sep-suayed
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,169716,10496,00:46:25/462-19:04:13,1) /sbin/init
(root,0,0,00:00:25/462-19:04:13,2) [kthreadd]
(root,0,0,00:00:00/462-19:04:13,3) [rcu_gp]
(root,0,0,00:00:00/462-19:04:13,4) [rcu_par_gp]
(root,0,0,00:00:00/462-19:04:13,6) [kworker/0:0H-kblockd]
(root,0,0,00:00:00/462-19:04:13,8) [mm_percpu_wq]
(root,0,0,00:00:24/462-19:04:13,9) [ksoftirqd/0]
(root,0,0,20:10:35/462-19:04:13,10) [rcu_sched]
(root,0,0,00:00:00/462-19:04:13,11) [rcu_bh]
(root,0,0,00:02:09/462-19:04:13,12) [migration/0]
(root,0,0,00:00:00/462-19:04:13,14) [cpuhp/0]
(root,0,0,00:00:00/462-19:04:13,15) [cpuhp/1]
(root,0,0,00:01:45/462-19:04:13,16) [migration/1]
(root,0,0,00:00:13/462-19:04:13,17) [ksoftirqd/1]
(root,0,0,00:00:00/462-19:04:13,19) [kworker/1:0H-kblockd]
(root,0,0,00:00:00/462-19:04:13,20) [cpuhp/2]
(root,0,0,00:01:40/462-19:04:13,21) [migration/2]
(root,0,0,00:00:51/462-19:04:13,22) [ksoftirqd/2]
(root,0,0,00:00:00/462-19:04:13,24) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/462-19:04:13,25) [cpuhp/3]
(root,0,0,00:01:55/462-19:04:13,26) [migration/3]
(root,0,0,00:07:58/462-19:04:13,27) [ksoftirqd/3]
(root,0,0,00:00:00/462-19:04:13,29) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/462-19:04:13,30) [kdevtmpfs]
(root,0,0,00:00:00/462-19:04:13,31) [netns]
(root,0,0,00:00:00/462-19:04:13,32) [kauditd]
(root,0,0,00:00:51/462-19:04:13,35) [khungtaskd]
(root,0,0,00:00:00/462-19:04:13,36) [oom_reaper]
(root,0,0,00:00:00/462-19:04:13,37) [writeback]
(root,0,0,00:00:00/462-19:04:13,38) [kcompactd0]
(root,0,0,00:00:00/462-19:04:13,39) [ksmd]
(root,0,0,00:04:17/462-19:04:13,40) [khugepaged]
(root,0,0,00:00:00/462-19:04:13,41) [crypto]
(root,0,0,00:00:00/462-19:04:13,42) [kintegrityd]
(root,0,0,00:00:00/462-19:04:13,43) [kblockd]
(root,0,0,00:00:00/462-19:04:12,44) [edac-poller]
(root,0,0,00:00:00/462-19:04:12,45) [devfreq_wq]
(root,0,0,00:00:00/462-19:04:12,46) [watchdogd]
(root,0,0,00:00:00/462-19:04:12,49) [kswapd0]
(root,0,0,00:00:00/462-19:04:11,67) [kthrotld]
(root,0,0,00:00:00/462-19:04:11,68) [irq/24-pciehp]
(root,0,0,00:00:00/462-19:04:11,69) [irq/25-pciehp]
(root,0,0,00:00:00/462-19:04:11,70) [irq/26-pciehp]
(root,0,0,00:00:00/462-19:04:11,71) [irq/27-pciehp]
(root,0,0,00:00:00/462-19:04:11,72) [irq/28-pciehp]
(root,0,0,00:00:00/462-19:04:11,73) [irq/29-pciehp]
(root,0,0,00:00:00/462-19:04:11,74) [irq/30-pciehp]
(root,0,0,00:00:00/462-19:04:11,75) [irq/31-pciehp]
(root,0,0,00:00:00/462-19:04:11,76) [irq/32-pciehp]
(root,0,0,00:00:00/462-19:04:11,77) [irq/33-pciehp]
(root,0,0,00:00:00/462-19:04:11,78) [irq/34-pciehp]
(root,0,0,00:00:00/462-19:04:11,79) [irq/35-pciehp]
(root,0,0,00:00:00/462-19:04:11,80) [irq/36-pciehp]
(root,0,0,00:00:00/462-19:04:11,81) [irq/37-pciehp]
(root,0,0,00:00:00/462-19:04:11,82) [irq/38-pciehp]
(root,0,0,00:00:00/462-19:04:11,83) [irq/39-pciehp]
(root,0,0,00:00:00/462-19:04:11,84) [irq/40-pciehp]
(root,0,0,00:00:00/462-19:04:11,85) [irq/41-pciehp]
(root,0,0,00:00:00/462-19:04:11,86) [irq/42-pciehp]
(root,0,0,00:00:00/462-19:04:11,87) [irq/43-pciehp]
(root,0,0,00:00:00/462-19:04:11,88) [irq/44-pciehp]
(root,0,0,00:00:00/462-19:04:11,89) [irq/45-pciehp]
(root,0,0,00:00:00/462-19:04:11,90) [irq/46-pciehp]
(root,0,0,00:00:00/462-19:04:11,91) [irq/47-pciehp]
(root,0,0,00:00:00/462-19:04:11,92) [irq/48-pciehp]
(root,0,0,00:00:00/462-19:04:11,93) [irq/49-pciehp]
(root,0,0,00:00:00/462-19:04:11,94) [irq/50-pciehp]
(root,0,0,00:00:00/462-19:04:11,95) [irq/51-pciehp]
(root,0,0,00:00:00/462-19:04:11,96) [irq/52-pciehp]
(root,0,0,00:00:00/462-19:04:11,97) [irq/53-pciehp]
(root,0,0,00:00:00/462-19:04:11,98) [irq/54-pciehp]
(root,0,0,00:00:00/462-19:04:11,99) [irq/55-pciehp]
(root,0,0,00:00:00/462-19:04:11,100) [ipv6_addrconf]
(root,0,0,00:00:00/462-19:04:11,110) [kstrp]
(root,0,0,00:00:00/462-19:04:10,162) [scsi_eh_0]
(root,0,0,00:00:00/462-19:04:10,163) [scsi_tmf_0]
(root,0,0,00:00:00/462-19:04:10,164) [vmw_pvscsi_wq_0]
(root,0,0,00:00:00/462-19:04:10,165) [ata_sff]
(root,0,0,00:00:00/462-19:04:10,166) [scsi_eh_1]
(root,0,0,00:00:00/462-19:04:10,167) [scsi_tmf_1]
(root,0,0,00:00:00/462-19:04:10,168) [scsi_eh_2]
(root,0,0,00:00:00/462-19:04:10,169) [scsi_tmf_2]
(root,0,0,00:02:11/462-19:04:10,219) [kworker/2:1H-kblockd]
(root,0,0,00:00:07/462-19:04:10,220) [kworker/0:1H-kblockd]
(root,0,0,00:00:04/462-19:04:10,221) [kworker/3:1H-kblockd]
(root,0,0,00:00:07/462-19:04:10,223) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/462-19:04:10,232) [kdmflush]
(root,0,0,00:00:00/462-19:04:09,238) [kdmflush]
(root,0,0,00:00:00/462-19:04:06,266) [kworker/u257:0]
(root,0,0,00:00:03/462-19:04:06,268) [jbd2/dm-0-8]
(root,0,0,00:00:00/462-19:04:06,269) [ext4-rsv-conver]
(root,0,0,00:00:00/462-19:04:05,277) [kdmflush]
(root,0,0,00:00:01/462-19:04:04,292) [jbd2/dm-2-8]
(root,0,0,00:00:00/462-19:04:04,293) [ext4-rsv-conver]
(root,58740,20300,00:10:13/462-19:03:58,339) /lib/systemd/systemd-journald
(root,23116,6100,00:01:46/462-19:03:58,369) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/462-19:03:56,489) [kdmflush]
(root,0,0,00:00:00/462-19:03:56,491) [kdmflush]
(root,0,0,00:00:00/462-19:03:56,494) [kdmflush]
(root,0,0,00:00:00/462-19:03:56,495) [kdmflush]
(root,0,0,00:00:00/462-19:03:56,504) [ttm_swap]
(root,0,0,00:00:00/462-19:03:56,506) [irq/16-vmwgfx]
(root,0,0,00:00:00/462-19:03:56,546) [jbd2/sda1-8]
(root,0,0,00:00:00/462-19:03:56,547) [ext4-rsv-conver]
(root,0,0,00:00:00/462-19:03:56,557) [jbd2/dm-6-8]
(root,0,0,00:00:00/462-19:03:56,558) [ext4-rsv-conver]
(root,0,0,00:00:00/462-19:03:56,569) [jbd2/dm-3-8]
(root,0,0,00:00:00/462-19:03:56,570) [ext4-rsv-conver]
(root,0,0,00:00:16/462-19:03:55,574) [jbd2/dm-5-8]
(root,0,0,00:00:00/462-19:03:55,575) [ext4-rsv-conver]
(root,0,0,00:01:09/462-19:03:55,579) [jbd2/dm-4-8]
(root,0,0,00:00:00/462-19:03:55,580) [ext4-rsv-conver]
(root,225824,4468,00:01:25/462-19:03:54,606) /usr/sbin/rsyslogd -n -iNONE
(root,19508,7308,00:21:03/462-19:03:54,607) /lib/systemd/systemd-logind
(root,8504,2740,00:02:04/462-19:03:54,608) /usr/sbin/cron -f
(messagebus,9400,4608,00:29:35/462-19:03:54,609) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,241792,32768,00:44:27/462-19:03:54,669) php-fpm: master process (/etc/php/7.3/fpm/php-fpm.conf)
(memcache,408168,4612,03:00:40/462-19:03:54,671) /usr/bin/memcached -m 64 -p 11211 -u memcache -l 127.0.0.1 -P /var/run/memcached/memcached.pid
(root,5612,1556,00:00:00/462-19:03:54,673) /sbin/agetty -o -p -- \u --noclear tty1 linux
(ntp,76656,3804,00:50:00/462-19:03:54,682) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 107:111
(root,15852,7076,00:01:07/462-19:03:54,691) /usr/sbin/sshd -D
(mysql,2323956,123092,10:48:58/462-19:03:54,744) /usr/sbin/mysqld
(root,9608,2140,00:00:00/462-19:03:53,750) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,80116,1784,00:00:00/462-19:03:53,752) nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
(www-data,81580,9956,00:10:24/462-19:03:53,753) nginx: worker process
(www-data,81348,9536,00:00:03/462-19:03:53,754) nginx: worker process
(www-data,81364,9500,00:00:01/462-19:03:53,755) nginx: worker process
(www-data,81492,9732,00:00:08/462-19:03:53,756) nginx: worker process
(www-data,327500,89140,00:02:57/432-00:54:36,98100) php-fpm: pool www
(www-data,323180,79976,00:02:53/432-00:54:35,98102) php-fpm: pool www
(www-data,326260,84964,00:02:44/432-00:53:19,98105) php-fpm: pool www
(root,0,0,00:00:00/21:09:44,110528) [kworker/1:1-events]
(root,0,0,00:00:07/17:01:00,111091) [kworker/2:1-events_power_efficient]
(root,0,0,00:00:22/09:39:44,112093) [kworker/0:2-events]
(root,0,0,00:00:00/03:44:55,112867) [kworker/3:0-events]
(root,0,0,00:00:00/01:14:51,113163) [kworker/u256:0-flush-254:4]
(root,0,0,00:00:00/44:56,113222) [kworker/1:0-cgroup_destroy]
(root,0,0,00:00:00/36:50,113233) [kworker/u256:2-flush-254:4]
(root,0,0,00:00:00/31:42,113235) [kworker/3:1]
(root,0,0,00:00:00/14:56,113285) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/09:18,113289) [kworker/2:2-ata_sff]
(root,0,0,00:00:00/04:05,113290) [kworker/2:0-cgroup_destroy]
(root,6860,3500,00:00:00/00:01,113404) /bin/bash /usr/bin/check_mk_agent
(root,7640,2732,00:00:00/00:00,113422) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,5296,992,00:00:00/00:00,113423) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:50:56:ba:b2:d4 brd ff:ff:ff:ff:ff:ff
[end_iplink]
      Found on 2022-06-17 22:53
    Create report

  • Open service 132.247.28.117:443

    2024-12-17 21:18 

    HTTP/1.1 200 OK
Server: nginx
Date: Tue, 17 Dec 2024 21:18:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


.
    Found 2024-12-17 by HttpPlugin
    Create report
Fingerprint:
0248703e1af62e0bfd6431737fa183bb69ec7f2df957da79fd0fe4bbdc3e041a
CN:
132.247.28.117
Key:
RSA-2048
Issuer:
132.247.28.117
Not before:
2020-04-04 23:46
Not after:
2021-04-04 23:46
Domain summary
No record

© 2024 LeakIX
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice