LeakIX - Host 91.230.87.57

Host 91.230.87.57

Poland

ROBI-KOM Robert Mazur

CheckMK monitoring endpoint publicly available

An open CheckMK agent is publicly available.

This could leak sensitive information such as :

Process list ( maybe credentials )
Network interfaces
Running services
Firewall rules
Internal OS configuration

https://docs.checkmk.com/latest/en/wato_monitoringagents.html

IP: 91.230.87.57
Port: 6556

First seen 2022-06-17 22:22
Last seen 2024-12-22 00:56
Open for 918 days

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6dba416ad

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34600,9336,00:10:23/13-17:04:10,1) /sbin/init
(root,0,0,00:00:00/13-17:04:10,2) [kthreadd]
(root,0,0,00:00:00/13-17:04:10,3) [rcu_gp]
(root,0,0,00:00:00/13-17:04:10,4) [rcu_par_gp]
(root,0,0,00:00:00/13-17:04:10,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/13-17:04:10,8) [mm_percpu_wq]
(root,0,0,00:00:00/13-17:04:10,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/13-17:04:10,10) [rcu_tasks_trace]
(root,0,0,00:00:41/13-17:04:10,11) [ksoftirqd/0]
(root,0,0,00:07:12/13-17:04:10,12) [rcu_sched]
(root,0,0,00:00:01/13-17:04:10,13) [migration/0]
(root,0,0,00:00:00/13-17:04:10,15) [cpuhp/0]
(root,0,0,00:00:00/13-17:04:10,16) [cpuhp/1]
(root,0,0,00:00:01/13-17:04:10,17) [migration/1]
(root,0,0,00:01:30/13-17:04:10,18) [ksoftirqd/1]
(root,0,0,00:00:00/13-17:04:10,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/13-17:04:10,21) [cpuhp/2]
(root,0,0,00:00:01/13-17:04:10,22) [migration/2]
(root,0,0,00:00:04/13-17:04:10,23) [ksoftirqd/2]
(root,0,0,00:00:00/13-17:04:10,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/13-17:04:10,26) [cpuhp/3]
(root,0,0,00:00:01/13-17:04:10,27) [migration/3]
(root,0,0,00:00:04/13-17:04:10,28) [ksoftirqd/3]
(root,0,0,00:00:00/13-17:04:10,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/13-17:04:10,31) [kdevtmpfs]
(root,0,0,00:00:00/13-17:04:10,32) [netns]
(root,0,0,00:00:00/13-17:04:10,33) [kauditd]
(root,0,0,00:00:00/13-17:04:10,34) [khungtaskd]
(root,0,0,00:00:00/13-17:04:10,35) [oom_reaper]
(root,0,0,00:00:00/13-17:04:10,36) [writeback]
(root,0,0,00:00:15/13-17:04:10,37) [kcompactd0]
(root,0,0,00:00:00/13-17:04:10,38) [ksmd]
(root,0,0,00:00:27/13-17:04:10,39) [khugepaged]
(root,0,0,00:00:00/13-17:04:10,58) [kintegrityd]
(root,0,0,00:00:00/13-17:04:10,59) [kblockd]
(root,0,0,00:00:00/13-17:04:10,60) [blkcg_punt_bio]
(root,0,0,00:00:00/13-17:04:10,61) [edac-poller]
(root,0,0,00:00:00/13-17:04:10,62) [devfreq_wq]
(root,0,0,00:00:05/13-17:04:10,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/13-17:04:09,66) [kswapd0]
(root,0,0,00:00:00/13-17:04:09,67) [kthrotld]
(root,0,0,00:00:00/13-17:04:09,68) [acpi_thermal_pm]
(root,0,0,00:00:06/13-17:04:09,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/13-17:04:09,70) [ipv6_addrconf]
(root,0,0,00:00:00/13-17:04:09,81) [kstrp]
(root,0,0,00:00:00/13-17:04:09,84) [zswap-shrink]
(root,0,0,00:00:00/13-17:04:09,85) [kworker/u9:0]
(root,0,0,00:00:06/13-17:04:09,133) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/13-17:04:09,135) [ata_sff]
(root,0,0,00:00:00/13-17:04:09,139) [scsi_eh_0]
(root,0,0,00:00:00/13-17:04:09,140) [scsi_tmf_0]
(root,0,0,00:00:00/13-17:04:09,141) [scsi_eh_1]
(root,0,0,00:00:00/13-17:04:09,142) [scsi_tmf_1]
(root,0,0,00:00:00/13-17:04:09,143) [scsi_eh_2]
(root,0,0,00:00:00/13-17:04:09,144) [scsi_tmf_2]
(root,0,0,00:00:00/13-17:04:09,145) [scsi_eh_3]
(root,0,0,00:00:00/13-17:04:09,146) [scsi_tmf_3]
(root,0,0,00:00:05/13-17:04:09,150) [kworker/3:1H-kblockd]
(root,0,0,00:00:21/13-17:04:08,182) [jbd2/sda1-8]
(root,0,0,00:00:00/13-17:04:08,183) [ext4-rsv-conver]
(root,169904,132248,00:46:25/13-17:04:08,218) /lib/systemd/systemd-journald
(root,21600,3968,00:00:00/13-17:04:08,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/13-17:04:07,299) [watchdogd]
(root,0,0,00:00:00/13-17:04:07,304) [irq/126-mei_me]
(root,0,0,00:00:00/13-17:04:07,320) [cryptd]
(systemd-timesync,23796,6112,00:00:01/13-17:04:07,335) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/13-17:04:07,337) [card0-crtc0]
(root,0,0,00:00:00/13-17:04:07,339) [card0-crtc1]
(root,0,0,00:00:00/13-17:04:07,340) [card0-crtc2]
(root,8472,2660,00:00:03/13-17:04:07,348) /usr/sbin/cron -f
(messagebus,8240,3792,00:00:00/13-17:04:07,349) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,5812,00:11:49/13-17:04:07,352) /usr/sbin/rsyslogd -n -iNONE
(root,49840,6444,00:00:01/13-17:04:07,353) /lib/systemd/systemd-logind
(root,10756,3072,00:02:20/13-17:04:07,371) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69220,15572,00:17:54/13-17:04:07,388) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43268,9312,00:00:32/13-17:04:07,397) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11752,3428,00:00:18/13-17:04:07,408) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13324,6344,00:13:54/13-17:04:05,1843) sshd: /usr/sbin/sshd -D [listener] 15 of 10-100 startups
(zabbix,20484,2612,00:00:00/13-17:04:05,1845) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,2860,00:01:27/13-17:04:05,1847) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,5144,00:14:51/13-17:04:05,1848) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,5184,00:14:50/13-17:04:05,1849) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,5172,00:14:46/13-17:04:05,1850) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,4344,00:00:38/13-17:04:05,1851) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,6796,4816,00:00:23/13-17:04:05,1858) /usr/sbin/apache2 -k start
(root,9832,2244,00:00:05/13-17:04:04,1917) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,5000,1376,00:00:00/13-16:58:51,4185) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/21:33,10399) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/1-01:56:50,15172) [kworker/0:2]
(root,0,0,00:00:07/2-19:55:11,15255) [kworker/0:1-events]
(root,0,0,00:00:01/01:56:49,15590) [kworker/1:0-events]
(root,0,0,00:00:00/01:56:49,15599) [kworker/2:2-events]
(www-data,7032,3636,00:00:00/01:55:49,16406) /usr/sbin/apache2 -k start
(www-data,236208,14124,00:00:00/01:55:49,16408) /usr/sbin/apache2 -k start
(www-data,236040,7992,00:00:00/01:55:49,16409) /usr/sbin/apache2 -k start
(root,0,0,00:00:02/18:53:01,16710) [kworker/3:2-mm_percpu_wq]
(root,0,0,00:00:16/23:54:34,20762) [kworker/1:1-mm_percpu_wq]
(root,13320,6320,00:00:00/01:59,21627) sshd: [accepted]
(sshd,13320,4204,00:00:00/01:58,21630) sshd: [net]
(root,13320,6416,00:00:00/01:47,21846) sshd: [accepted]
(sshd,13320,4180,00:00:00/01:46,21847) sshd: [net]
(root,13320,6524,00:00:00/01:10,22123) sshd: [accepted]
(root,0,0,00:00:00/01:09,22124) [kworker/u8:0]
(sshd,13320,4336,00:00:00/01:09,22125) sshd: [net]
(root,13320,6368,00:00:00/00:54,22160) sshd: [accepted]
(root,13320,6484,00:00:00/00:35,22403) sshd: [accepted]
(root,13320,6464,00:00:00/00:32,22581) sshd: [accepted]
(sshd,13320,4324,00:00:00/00:31,22582) sshd: [net]
(root,13320,6312,00:00:00/00:29,22807) sshd: [accepted]
(root,13320,6544,00:00:00/00:16,22851) sshd: [accepted]
(root,14464,7708,00:00:00/00:06,22871) sshd: unknown [priv]
(sshd,13320,4484,00:00:00/00:06,22872) sshd: unknown [net]
(root,13320,6416,00:00:00/00:06,22875) sshd: [accepted]
(sshd,13320,4324,00:00:00/00:05,22876) sshd: [net]
(root,14144,7536,00:00:00/00:02,22879) sshd: root [priv]
(sshd,13320,4332,00:00:00/00:02,22880) sshd: root [net]
(root,14144,7496,00:00:00/00:01,22881) sshd: root [priv]
(sshd,13320,4388,00:00:00/00:01,22882) sshd: root [net]
(root,13320,6440,00:00:00/00:01,22883) sshd: [accepted]
(sshd,13320,4328,00:00:00/00:01,22884) sshd: [net]
(root,13320,6392,00:00:00/00:01,22885) sshd: [accepted]
(sshd,13320,4392,00:00:00/00:01,22886) sshd: [net]
(root,13320,6436,00:00:00/00:00,22914) sshd: [accepted]
(sshd,13320,4304,00:00:00/00:00,22915) sshd: [net]
(root,8692,3392,00:00:00/00:00,22994) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,23013) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1460,00:00:00/00:00,23014) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/02:31:03,26064) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/04:06:14,26066) [kworker/3:0-events]
(root,0,0,00:00:07/2-12:24:50,32098) [kworker/2:1-mm_percpu_wq]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-22 00:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc66cbc2609

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34736,9348,00:08:57/11-16:30:50,1) /sbin/init
(root,0,0,00:00:00/11-16:30:50,2) [kthreadd]
(root,0,0,00:00:00/11-16:30:50,3) [rcu_gp]
(root,0,0,00:00:00/11-16:30:50,4) [rcu_par_gp]
(root,0,0,00:00:00/11-16:30:50,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/11-16:30:50,8) [mm_percpu_wq]
(root,0,0,00:00:00/11-16:30:50,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/11-16:30:50,10) [rcu_tasks_trace]
(root,0,0,00:00:35/11-16:30:50,11) [ksoftirqd/0]
(root,0,0,00:06:04/11-16:30:50,12) [rcu_sched]
(root,0,0,00:00:01/11-16:30:50,13) [migration/0]
(root,0,0,00:00:00/11-16:30:50,15) [cpuhp/0]
(root,0,0,00:00:00/11-16:30:50,16) [cpuhp/1]
(root,0,0,00:00:01/11-16:30:50,17) [migration/1]
(root,0,0,00:01:19/11-16:30:50,18) [ksoftirqd/1]
(root,0,0,00:00:00/11-16:30:50,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/11-16:30:50,21) [cpuhp/2]
(root,0,0,00:00:01/11-16:30:50,22) [migration/2]
(root,0,0,00:00:03/11-16:30:50,23) [ksoftirqd/2]
(root,0,0,00:00:00/11-16:30:50,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/11-16:30:50,26) [cpuhp/3]
(root,0,0,00:00:01/11-16:30:50,27) [migration/3]
(root,0,0,00:00:03/11-16:30:50,28) [ksoftirqd/3]
(root,0,0,00:00:00/11-16:30:50,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/11-16:30:50,31) [kdevtmpfs]
(root,0,0,00:00:00/11-16:30:50,32) [netns]
(root,0,0,00:00:00/11-16:30:50,33) [kauditd]
(root,0,0,00:00:00/11-16:30:50,34) [khungtaskd]
(root,0,0,00:00:00/11-16:30:50,35) [oom_reaper]
(root,0,0,00:00:00/11-16:30:50,36) [writeback]
(root,0,0,00:00:12/11-16:30:50,37) [kcompactd0]
(root,0,0,00:00:00/11-16:30:50,38) [ksmd]
(root,0,0,00:00:23/11-16:30:50,39) [khugepaged]
(root,0,0,00:00:36/11-16:30:50,41) [kworker/3:1-events]
(root,0,0,00:00:00/11-16:30:50,58) [kintegrityd]
(root,0,0,00:00:00/11-16:30:50,59) [kblockd]
(root,0,0,00:00:00/11-16:30:50,60) [blkcg_punt_bio]
(root,0,0,00:00:00/11-16:30:50,61) [edac-poller]
(root,0,0,00:00:00/11-16:30:50,62) [devfreq_wq]
(root,0,0,00:00:04/11-16:30:50,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/11-16:30:49,66) [kswapd0]
(root,0,0,00:00:00/11-16:30:49,67) [kthrotld]
(root,0,0,00:00:00/11-16:30:49,68) [acpi_thermal_pm]
(root,0,0,00:00:05/11-16:30:49,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/11-16:30:49,70) [ipv6_addrconf]
(root,0,0,00:00:00/11-16:30:49,81) [kstrp]
(root,0,0,00:00:00/11-16:30:49,84) [zswap-shrink]
(root,0,0,00:00:00/11-16:30:49,85) [kworker/u9:0]
(root,0,0,00:00:05/11-16:30:49,133) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/11-16:30:49,135) [ata_sff]
(root,0,0,00:00:00/11-16:30:49,139) [scsi_eh_0]
(root,0,0,00:00:00/11-16:30:49,140) [scsi_tmf_0]
(root,0,0,00:00:00/11-16:30:49,141) [scsi_eh_1]
(root,0,0,00:00:00/11-16:30:49,142) [scsi_tmf_1]
(root,0,0,00:00:00/11-16:30:49,143) [scsi_eh_2]
(root,0,0,00:00:00/11-16:30:49,144) [scsi_tmf_2]
(root,0,0,00:00:00/11-16:30:49,145) [scsi_eh_3]
(root,0,0,00:00:00/11-16:30:49,146) [scsi_tmf_3]
(root,0,0,00:00:04/11-16:30:49,150) [kworker/3:1H-kblockd]
(root,0,0,00:00:18/11-16:30:48,182) [jbd2/sda1-8]
(root,0,0,00:00:00/11-16:30:48,183) [ext4-rsv-conver]
(root,329684,273560,00:39:27/11-16:30:48,218) /lib/systemd/systemd-journald
(root,21600,4444,00:00:00/11-16:30:48,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/11-16:30:47,299) [watchdogd]
(root,0,0,00:00:00/11-16:30:47,304) [irq/126-mei_me]
(root,0,0,00:00:00/11-16:30:47,320) [cryptd]
(systemd-timesync,23796,6172,00:00:01/11-16:30:47,335) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/11-16:30:47,337) [card0-crtc0]
(root,0,0,00:00:00/11-16:30:47,339) [card0-crtc1]
(root,0,0,00:00:00/11-16:30:47,340) [card0-crtc2]
(root,8472,2720,00:00:03/11-16:30:47,348) /usr/sbin/cron -f
(messagebus,8240,3872,00:00:00/11-16:30:47,349) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,5888,00:10:05/11-16:30:47,352) /usr/sbin/rsyslogd -n -iNONE
(root,49840,6524,00:00:01/11-16:30:47,353) /lib/systemd/systemd-logind
(root,10756,3532,00:01:59/11-16:30:47,371) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69220,15628,00:15:24/11-16:30:47,388) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43268,9392,00:00:27/11-16:30:47,397) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11752,3448,00:00:15/11-16:30:47,408) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6516,00:00:00/00:28,577) sshd: [accepted]
(root,13320,6308,00:00:00/00:27,583) sshd: [accepted]
(root,14144,7616,00:00:00/00:10,614) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:10,615) sshd: root [net]
(root,14464,7584,00:00:00/00:05,629) sshd: unknown [priv]
(sshd,13320,4308,00:00:00/00:05,630) sshd: unknown [net]
(root,14464,7688,00:00:00/00:04,638) sshd: unknown [priv]
(sshd,13320,4388,00:00:00/00:04,639) sshd: unknown [net]
(root,13320,6384,00:00:00/00:04,640) sshd: [accepted]
(root,14464,7632,00:00:00/00:03,642) sshd: unknown [priv]
(sshd,13320,4272,00:00:00/00:03,643) sshd: unknown [net]
(root,13320,6320,00:00:00/00:00,644) sshd: [accepted]
(sshd,13320,4260,00:00:00/00:00,645) sshd: [net]
(root,14144,7492,00:00:00/00:00,646) sshd: root [priv]
(sshd,13320,4408,00:00:00/00:00,647) sshd: root [net]
(root,13320,6172,00:00:00/00:00,648) sshd: [accepted]
(root,8692,3348,00:00:00/00:00,698) /bin/bash /usr/bin/check_mk_agent
(root,6608,2756,00:00:00/00:00,717) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1528,00:00:00/00:00,718) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,13324,6872,00:11:47/11-16:30:45,1843) sshd: /usr/sbin/sshd -D [listener] 12 of 10-100 startups
(zabbix,20484,2656,00:00:00/11-16:30:45,1845) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,2884,00:01:14/11-16:30:45,1847) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,5184,00:12:38/11-16:30:45,1848) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,5224,00:12:37/11-16:30:45,1849) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,5212,00:12:35/11-16:30:45,1850) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,4384,00:00:32/11-16:30:45,1851) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,6796,4948,00:00:20/11-16:30:45,1858) /usr/sbin/apache2 -k start
(root,9832,2304,00:00:04/11-16:30:44,1917) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,5000,1436,00:00:00/11-16:25:31,4185) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/01:23:30,12469) [kworker/0:2-events]
(root,0,0,00:00:00/01:23:30,12484) [kworker/2:0-events]
(www-data,7032,3652,00:00:00/01:22:54,12913) /usr/sbin/apache2 -k start
(www-data,236000,10056,00:00:00/01:22:54,12914) /usr/sbin/apache2 -k start
(www-data,236000,12100,00:00:00/01:22:54,12915) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/21:08:01,13209) [kworker/1:1-events]
(root,0,0,00:00:00/21:08:00,13241) [kworker/3:0]
(root,0,0,00:00:02/19:21:51,15255) [kworker/0:1-mm_percpu_wq]
(root,0,0,00:00:47/2-19:18:36,19351) [kworker/1:2-events]
(root,0,0,00:00:00/07:29,29112) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/01:00:59,29607) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/06:04,29791) [kworker/u8:3]
(root,0,0,00:00:01/11:51:30,32098) [kworker/2:1-mm_percpu_wq]
(root,13320,6488,00:00:00/01:30,32215) sshd: [accepted]
(root,13320,6380,00:00:00/00:55,32583) sshd: [accepted]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-20 00:23

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6c92988e5

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34740,9344,00:07:19/9-17:44:23,1) /sbin/init
(root,0,0,00:00:00/9-17:44:23,2) [kthreadd]
(root,0,0,00:00:00/9-17:44:23,3) [rcu_gp]
(root,0,0,00:00:00/9-17:44:23,4) [rcu_par_gp]
(root,0,0,00:00:00/9-17:44:23,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/9-17:44:23,8) [mm_percpu_wq]
(root,0,0,00:00:00/9-17:44:23,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/9-17:44:23,10) [rcu_tasks_trace]
(root,0,0,00:00:28/9-17:44:23,11) [ksoftirqd/0]
(root,0,0,00:05:00/9-17:44:23,12) [rcu_sched]
(root,0,0,00:00:00/9-17:44:23,13) [migration/0]
(root,0,0,00:00:00/9-17:44:23,15) [cpuhp/0]
(root,0,0,00:00:00/9-17:44:23,16) [cpuhp/1]
(root,0,0,00:00:00/9-17:44:23,17) [migration/1]
(root,0,0,00:01:03/9-17:44:23,18) [ksoftirqd/1]
(root,0,0,00:00:00/9-17:44:23,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/9-17:44:23,21) [cpuhp/2]
(root,0,0,00:00:01/9-17:44:23,22) [migration/2]
(root,0,0,00:00:02/9-17:44:23,23) [ksoftirqd/2]
(root,0,0,00:00:00/9-17:44:23,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/9-17:44:23,26) [cpuhp/3]
(root,0,0,00:00:01/9-17:44:23,27) [migration/3]
(root,0,0,00:00:02/9-17:44:23,28) [ksoftirqd/3]
(root,0,0,00:00:00/9-17:44:23,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/9-17:44:23,31) [kdevtmpfs]
(root,0,0,00:00:00/9-17:44:23,32) [netns]
(root,0,0,00:00:00/9-17:44:23,33) [kauditd]
(root,0,0,00:00:00/9-17:44:23,34) [khungtaskd]
(root,0,0,00:00:00/9-17:44:23,35) [oom_reaper]
(root,0,0,00:00:00/9-17:44:23,36) [writeback]
(root,0,0,00:00:10/9-17:44:23,37) [kcompactd0]
(root,0,0,00:00:00/9-17:44:23,38) [ksmd]
(root,0,0,00:00:19/9-17:44:23,39) [khugepaged]
(root,0,0,00:00:30/9-17:44:23,41) [kworker/3:1-events]
(root,0,0,00:00:00/9-17:44:23,58) [kintegrityd]
(root,0,0,00:00:00/9-17:44:23,59) [kblockd]
(root,0,0,00:00:00/9-17:44:23,60) [blkcg_punt_bio]
(root,0,0,00:00:00/9-17:44:23,61) [edac-poller]
(root,0,0,00:00:00/9-17:44:23,62) [devfreq_wq]
(root,0,0,00:00:03/9-17:44:23,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/9-17:44:22,66) [kswapd0]
(root,0,0,00:00:00/9-17:44:22,67) [kthrotld]
(root,0,0,00:00:00/9-17:44:22,68) [acpi_thermal_pm]
(root,0,0,00:00:04/9-17:44:22,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/9-17:44:22,70) [ipv6_addrconf]
(root,0,0,00:00:00/9-17:44:22,81) [kstrp]
(root,0,0,00:00:00/9-17:44:22,84) [zswap-shrink]
(root,0,0,00:00:00/9-17:44:22,85) [kworker/u9:0]
(root,0,0,00:00:04/9-17:44:22,133) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/9-17:44:22,135) [ata_sff]
(root,0,0,00:00:00/9-17:44:22,139) [scsi_eh_0]
(root,0,0,00:00:00/9-17:44:22,140) [scsi_tmf_0]
(root,0,0,00:00:00/9-17:44:22,141) [scsi_eh_1]
(root,0,0,00:00:00/9-17:44:22,142) [scsi_tmf_1]
(root,0,0,00:00:00/9-17:44:22,143) [scsi_eh_2]
(root,0,0,00:00:00/9-17:44:22,144) [scsi_tmf_2]
(root,0,0,00:00:00/9-17:44:22,145) [scsi_eh_3]
(root,0,0,00:00:00/9-17:44:22,146) [scsi_tmf_3]
(root,0,0,00:00:03/9-17:44:22,150) [kworker/3:1H-kblockd]
(root,0,0,00:00:15/9-17:44:21,182) [jbd2/sda1-8]
(root,0,0,00:00:00/9-17:44:21,183) [ext4-rsv-conver]
(root,284560,223448,00:32:02/9-17:44:21,218) /lib/systemd/systemd-journald
(root,21600,4884,00:00:00/9-17:44:21,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/9-17:44:20,299) [watchdogd]
(root,0,0,00:00:00/9-17:44:20,304) [irq/126-mei_me]
(root,0,0,00:00:00/9-17:44:20,320) [cryptd]
(systemd-timesync,23796,6224,00:00:01/9-17:44:20,335) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/9-17:44:20,337) [card0-crtc0]
(root,0,0,00:00:00/9-17:44:20,339) [card0-crtc1]
(root,0,0,00:00:00/9-17:44:20,340) [card0-crtc2]
(root,8472,2800,00:00:02/9-17:44:20,348) /usr/sbin/cron -f
(messagebus,8240,4120,00:00:00/9-17:44:20,349) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,5956,00:08:12/9-17:44:20,352) /usr/sbin/rsyslogd -n -iNONE
(root,49840,6632,00:00:00/9-17:44:20,353) /lib/systemd/systemd-logind
(root,10756,3720,00:01:39/9-17:44:20,371) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69220,15908,00:12:54/9-17:44:20,388) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43268,9740,00:00:22/9-17:44:20,397) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11752,3496,00:00:13/9-17:44:20,408) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:06/2-01:34:02,1815) [kworker/2:2-events]
(root,13324,6960,00:09:34/9-17:44:18,1843) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(zabbix,20484,2668,00:00:00/9-17:44:18,1845) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,2896,00:01:01/9-17:44:18,1847) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,5184,00:10:31/9-17:44:18,1848) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,5228,00:10:30/9-17:44:18,1849) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,5212,00:10:28/9-17:44:18,1850) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,4392,00:00:27/9-17:44:18,1851) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,6796,5128,00:00:16/9-17:44:18,1858) /usr/sbin/apache2 -k start
(root,0,0,00:00:13/4-21:53:40,1893) [kworker/0:2-events]
(root,9832,2356,00:00:03/9-17:44:17,1917) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/25:28,2728) [kworker/u8:0-ext4-rsv-conversion]
(root,5000,1700,00:00:00/9-17:39:04,4185) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/02:38:31,7724) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:00/02:37:03,8356) [kworker/0:1]
(root,0,0,00:00:00/02:36:08,8804) [kworker/2:0]
(www-data,7032,3796,00:00:00/02:35:53,9190) /usr/sbin/apache2 -k start
(www-data,236320,12244,00:00:00/02:35:53,9191) /usr/sbin/apache2 -k start
(www-data,236096,10200,00:00:00/02:35:53,9192) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/14:29,9395) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/05:29:54,13804) [kworker/3:2-events]
(root,13320,6428,00:00:00/01:03,17083) sshd: [accepted]
(root,13320,6588,00:00:00/00:53,17303) sshd: [accepted]
(root,13320,6360,00:00:00/00:37,17556) sshd: [accepted]
(root,13320,6552,00:00:00/00:34,17597) sshd: [accepted]
(root,13320,6436,00:00:00/00:17,17642) sshd: [accepted]
(root,13320,6480,00:00:00/00:15,17650) sshd: [accepted]
(root,14144,7328,00:00:00/00:05,17673) sshd: root [priv]
(root,13320,6284,00:00:00/00:04,17676) sshd: [accepted]
(sshd,13320,4364,00:00:00/00:04,17677) sshd: root [net]
(root,14380,7504,00:00:00/00:01,17872) sshd: unknown [priv]
(sshd,13320,4312,00:00:00/00:01,17873) sshd: unknown [net]
(root,13320,6552,00:00:00/00:01,17923) sshd: [accepted]
(sshd,13320,4368,00:00:00/00:01,17924) sshd: [net]
(root,8692,3496,00:00:00/00:00,17982) /bin/bash /usr/bin/check_mk_agent
(root,6608,2764,00:00:00/00:00,18001) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1516,00:00:00/00:00,18002) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/1-02:37:02,18615) [kworker/1:0-events]
(root,0,0,00:00:14/20:32:09,19351) [kworker/1:2-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-18 01:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6fa20ebe9

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34600,9316,00:05:43/7-15:29:03,1) /sbin/init
(root,0,0,00:00:00/7-15:29:03,2) [kthreadd]
(root,0,0,00:00:00/7-15:29:03,3) [rcu_gp]
(root,0,0,00:00:00/7-15:29:03,4) [rcu_par_gp]
(root,0,0,00:00:00/7-15:29:03,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/7-15:29:03,8) [mm_percpu_wq]
(root,0,0,00:00:00/7-15:29:03,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/7-15:29:03,10) [rcu_tasks_trace]
(root,0,0,00:00:21/7-15:29:03,11) [ksoftirqd/0]
(root,0,0,00:03:50/7-15:29:03,12) [rcu_sched]
(root,0,0,00:00:00/7-15:29:03,13) [migration/0]
(root,0,0,00:00:00/7-15:29:03,15) [cpuhp/0]
(root,0,0,00:00:00/7-15:29:03,16) [cpuhp/1]
(root,0,0,00:00:00/7-15:29:03,17) [migration/1]
(root,0,0,00:00:50/7-15:29:03,18) [ksoftirqd/1]
(root,0,0,00:00:00/7-15:29:03,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/7-15:29:03,21) [cpuhp/2]
(root,0,0,00:00:01/7-15:29:03,22) [migration/2]
(root,0,0,00:00:02/7-15:29:03,23) [ksoftirqd/2]
(root,0,0,00:00:00/7-15:29:03,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/7-15:29:03,26) [cpuhp/3]
(root,0,0,00:00:01/7-15:29:03,27) [migration/3]
(root,0,0,00:00:02/7-15:29:03,28) [ksoftirqd/3]
(root,0,0,00:00:00/7-15:29:03,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/7-15:29:03,31) [kdevtmpfs]
(root,0,0,00:00:00/7-15:29:03,32) [netns]
(root,0,0,00:00:00/7-15:29:03,33) [kauditd]
(root,0,0,00:00:00/7-15:29:03,34) [khungtaskd]
(root,0,0,00:00:00/7-15:29:03,35) [oom_reaper]
(root,0,0,00:00:00/7-15:29:03,36) [writeback]
(root,0,0,00:00:08/7-15:29:03,37) [kcompactd0]
(root,0,0,00:00:00/7-15:29:03,38) [ksmd]
(root,0,0,00:00:15/7-15:29:03,39) [khugepaged]
(root,0,0,00:00:23/7-15:29:03,41) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:00/7-15:29:03,58) [kintegrityd]
(root,0,0,00:00:00/7-15:29:03,59) [kblockd]
(root,0,0,00:00:00/7-15:29:03,60) [blkcg_punt_bio]
(root,0,0,00:00:00/7-15:29:03,61) [edac-poller]
(root,0,0,00:00:00/7-15:29:03,62) [devfreq_wq]
(root,0,0,00:00:02/7-15:29:03,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/7-15:29:02,66) [kswapd0]
(root,0,0,00:00:00/7-15:29:02,67) [kthrotld]
(root,0,0,00:00:00/7-15:29:02,68) [acpi_thermal_pm]
(root,0,0,00:00:03/7-15:29:02,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/7-15:29:02,70) [ipv6_addrconf]
(root,0,0,00:00:00/7-15:29:02,81) [kstrp]
(root,0,0,00:00:00/7-15:29:02,84) [zswap-shrink]
(root,0,0,00:00:00/7-15:29:02,85) [kworker/u9:0]
(root,0,0,00:00:03/7-15:29:02,133) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/7-15:29:02,135) [ata_sff]
(root,0,0,00:00:20/7-15:29:02,138) [kworker/2:3-events]
(root,0,0,00:00:00/7-15:29:02,139) [scsi_eh_0]
(root,0,0,00:00:00/7-15:29:02,140) [scsi_tmf_0]
(root,0,0,00:00:00/7-15:29:02,141) [scsi_eh_1]
(root,0,0,00:00:00/7-15:29:02,142) [scsi_tmf_1]
(root,0,0,00:00:00/7-15:29:02,143) [scsi_eh_2]
(root,0,0,00:00:00/7-15:29:02,144) [scsi_tmf_2]
(root,0,0,00:00:00/7-15:29:02,145) [scsi_eh_3]
(root,0,0,00:00:00/7-15:29:02,146) [scsi_tmf_3]
(root,0,0,00:00:03/7-15:29:02,150) [kworker/3:1H-kblockd]
(root,0,0,00:00:11/7-15:29:01,182) [jbd2/sda1-8]
(root,0,0,00:00:00/7-15:29:01,183) [ext4-rsv-conver]
(root,325324,270316,00:24:31/7-15:29:01,218) /lib/systemd/systemd-journald
(root,21600,4884,00:00:00/7-15:29:01,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/7-15:29:00,299) [watchdogd]
(root,0,0,00:00:00/7-15:29:00,304) [irq/126-mei_me]
(root,0,0,00:00:00/7-15:29:00,320) [cryptd]
(systemd-timesync,23796,6224,00:00:00/7-15:29:00,335) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/7-15:29:00,337) [card0-crtc0]
(root,0,0,00:00:00/7-15:29:00,339) [card0-crtc1]
(root,0,0,00:00:00/7-15:29:00,340) [card0-crtc2]
(root,8472,2800,00:00:02/7-15:29:00,348) /usr/sbin/cron -f
(messagebus,8240,4120,00:00:00/7-15:29:00,349) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,5968,00:06:20/7-15:29:00,352) /usr/sbin/rsyslogd -n -iNONE
(root,49840,6632,00:00:00/7-15:29:00,353) /lib/systemd/systemd-logind
(root,10756,3720,00:01:17/7-15:29:00,371) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69220,15908,00:10:16/7-15:29:00,388) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43268,9740,00:00:17/7-15:29:00,397) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11752,3496,00:00:10/7-15:29:00,408) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/15:13:59,1554) [kworker/3:2]
(root,13324,6960,00:07:17/7-15:28:58,1843) sshd: /usr/sbin/sshd -D [listener] 11 of 10-100 startups
(zabbix,20484,2668,00:00:00/7-15:28:58,1845) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,2896,00:00:48/7-15:28:58,1847) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,5184,00:08:14/7-15:28:58,1848) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,5228,00:08:13/7-15:28:58,1849) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,5212,00:08:12/7-15:28:58,1850) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,4392,00:00:21/7-15:28:58,1851) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,6796,5128,00:00:13/7-15:28:58,1858) /usr/sbin/apache2 -k start
(root,0,0,00:00:07/2-19:38:20,1893) [kworker/0:2-events]
(root,9832,2356,00:00:02/7-15:28:57,1917) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/15:33,2791) [kworker/u8:0-ext4-rsv-conversion]
(root,5000,1700,00:00:00/7-15:23:44,4185) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/03:13,10096) [kworker/u8:1]
(root,13320,6516,00:00:00/01:57,10792) sshd: [accepted]
(root,13320,6432,00:00:00/01:21,11067) sshd: [accepted]
(root,13320,6468,00:00:00/00:35,11798) sshd: [accepted]
(root,13320,6280,00:00:00/00:29,11812) sshd: [accepted]
(root,14380,7500,00:00:00/00:10,11858) sshd: unknown [priv]
(sshd,13320,4368,00:00:00/00:08,11863) sshd: unknown [net]
(root,14464,7592,00:00:00/00:06,11866) sshd: unknown [priv]
(sshd,13320,4312,00:00:00/00:05,12042) sshd: unknown [net]
(root,14464,7576,00:00:00/00:04,12045) sshd: unknown [priv]
(sshd,13320,4324,00:00:00/00:04,12046) sshd: unknown [net]
(root,14144,7488,00:00:00/00:04,12047) sshd: root [priv]
(sshd,13320,4284,00:00:00/00:04,12048) sshd: root [net]
(root,14464,7556,00:00:00/00:03,12049) sshd: unknown [priv]
(sshd,13320,4328,00:00:00/00:03,12050) sshd: unknown [net]
(root,13320,6400,00:00:00/00:01,12051) sshd: [accepted]
(root,13320,6456,00:00:00/00:00,12052) sshd: [accepted]
(sshd,13320,4308,00:00:00/00:00,12053) sshd: [net]
(root,8692,3544,00:00:00/00:00,12097) /bin/bash /usr/bin/check_mk_agent
(root,6608,2840,00:00:00/00:00,12116) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1596,00:00:00/00:00,12117) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:29/1-18:16:04,19609) [kworker/1:1-events]
(root,0,0,00:00:00/21:43,29805) [kworker/1:0-events]
(root,0,0,00:00:00/21:43,29816) [kworker/0:1-events]
(root,0,0,00:00:00/1-12:39:39,30072) [kworker/2:0]
(root,0,0,00:00:00/21:13,30383) [kworker/u8:4-flush-8:0]
(www-data,7032,3796,00:00:00/20:33,31246) /usr/sbin/apache2 -k start
(www-data,235824,16328,00:00:00/20:33,31248) /usr/sbin/apache2 -k start
(www-data,236040,12240,00:00:00/20:33,31249) /usr/sbin/apache2 -k start

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-15 23:21

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc60f872d08

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34736,9344,00:04:03/5-15:04:24,1) /sbin/init
(root,0,0,00:00:00/5-15:04:24,2) [kthreadd]
(root,0,0,00:00:00/5-15:04:24,3) [rcu_gp]
(root,0,0,00:00:00/5-15:04:24,4) [rcu_par_gp]
(root,0,0,00:00:00/5-15:04:24,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/5-15:04:24,8) [mm_percpu_wq]
(root,0,0,00:00:00/5-15:04:24,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/5-15:04:24,10) [rcu_tasks_trace]
(root,0,0,00:00:16/5-15:04:24,11) [ksoftirqd/0]
(root,0,0,00:02:48/5-15:04:24,12) [rcu_sched]
(root,0,0,00:00:00/5-15:04:24,13) [migration/0]
(root,0,0,00:00:00/5-15:04:24,15) [cpuhp/0]
(root,0,0,00:00:00/5-15:04:24,16) [cpuhp/1]
(root,0,0,00:00:00/5-15:04:24,17) [migration/1]
(root,0,0,00:00:39/5-15:04:24,18) [ksoftirqd/1]
(root,0,0,00:00:00/5-15:04:24,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/5-15:04:24,21) [cpuhp/2]
(root,0,0,00:00:00/5-15:04:24,22) [migration/2]
(root,0,0,00:00:01/5-15:04:24,23) [ksoftirqd/2]
(root,0,0,00:00:00/5-15:04:24,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/5-15:04:24,26) [cpuhp/3]
(root,0,0,00:00:00/5-15:04:24,27) [migration/3]
(root,0,0,00:00:01/5-15:04:24,28) [ksoftirqd/3]
(root,0,0,00:00:00/5-15:04:24,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/5-15:04:24,31) [kdevtmpfs]
(root,0,0,00:00:00/5-15:04:24,32) [netns]
(root,0,0,00:00:00/5-15:04:24,33) [kauditd]
(root,0,0,00:00:00/5-15:04:24,34) [khungtaskd]
(root,0,0,00:00:00/5-15:04:24,35) [oom_reaper]
(root,0,0,00:00:00/5-15:04:24,36) [writeback]
(root,0,0,00:00:06/5-15:04:24,37) [kcompactd0]
(root,0,0,00:00:00/5-15:04:24,38) [ksmd]
(root,0,0,00:00:11/5-15:04:24,39) [khugepaged]
(root,0,0,00:00:16/5-15:04:24,41) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:00/5-15:04:24,58) [kintegrityd]
(root,0,0,00:00:00/5-15:04:24,59) [kblockd]
(root,0,0,00:00:00/5-15:04:24,60) [blkcg_punt_bio]
(root,0,0,00:00:00/5-15:04:24,61) [edac-poller]
(root,0,0,00:00:00/5-15:04:24,62) [devfreq_wq]
(root,0,0,00:00:02/5-15:04:24,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/5-15:04:23,66) [kswapd0]
(root,0,0,00:00:00/5-15:04:23,67) [kthrotld]
(root,0,0,00:00:00/5-15:04:23,68) [acpi_thermal_pm]
(root,0,0,00:00:02/5-15:04:23,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/5-15:04:23,70) [ipv6_addrconf]
(root,0,0,00:00:00/5-15:04:23,81) [kstrp]
(root,0,0,00:00:00/5-15:04:23,84) [zswap-shrink]
(root,0,0,00:00:00/5-15:04:23,85) [kworker/u9:0]
(root,0,0,00:00:02/5-15:04:23,133) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/5-15:04:23,135) [ata_sff]
(root,0,0,00:00:15/5-15:04:23,138) [kworker/2:3-mm_percpu_wq]
(root,0,0,00:00:00/5-15:04:23,139) [scsi_eh_0]
(root,0,0,00:00:00/5-15:04:23,140) [scsi_tmf_0]
(root,0,0,00:00:00/5-15:04:23,141) [scsi_eh_1]
(root,0,0,00:00:00/5-15:04:23,142) [scsi_tmf_1]
(root,0,0,00:00:00/5-15:04:23,143) [scsi_eh_2]
(root,0,0,00:00:00/5-15:04:23,144) [scsi_tmf_2]
(root,0,0,00:00:00/5-15:04:23,145) [scsi_eh_3]
(root,0,0,00:00:00/5-15:04:23,146) [scsi_tmf_3]
(root,0,0,00:00:02/5-15:04:23,150) [kworker/3:1H-kblockd]
(root,0,0,00:00:08/5-15:04:22,182) [jbd2/sda1-8]
(root,0,0,00:00:00/5-15:04:22,183) [ext4-rsv-conver]
(root,63048,32824,00:17:40/5-15:04:22,218) /lib/systemd/systemd-journald
(root,21600,4884,00:00:00/5-15:04:22,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/5-15:04:21,299) [watchdogd]
(root,0,0,00:00:00/5-15:04:21,304) [irq/126-mei_me]
(root,0,0,00:00:00/5-15:04:21,320) [cryptd]
(systemd-timesync,23796,6224,00:00:00/5-15:04:21,335) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/5-15:04:21,337) [card0-crtc0]
(root,0,0,00:00:00/5-15:04:21,339) [card0-crtc1]
(root,0,0,00:00:00/5-15:04:21,340) [card0-crtc2]
(root,8472,2800,00:00:01/5-15:04:21,348) /usr/sbin/cron -f
(messagebus,8240,4120,00:00:00/5-15:04:21,349) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,6000,00:04:34/5-15:04:21,352) /usr/sbin/rsyslogd -n -iNONE
(root,49840,6632,00:00:00/5-15:04:21,353) /lib/systemd/systemd-logind
(root,10756,3720,00:00:57/5-15:04:21,371) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69220,15908,00:07:43/5-15:04:21,388) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43268,9740,00:00:13/5-15:04:21,397) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11752,3496,00:00:07/5-15:04:21,408) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:49/3-00:13:28,1697) [kworker/1:0-events]
(root,13324,6960,00:05:12/5-15:04:19,1843) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(zabbix,20484,2668,00:00:00/5-15:04:19,1845) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,2896,00:00:35/5-15:04:19,1847) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,5184,00:06:03/5-15:04:19,1848) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,5228,00:06:03/5-15:04:19,1849) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,5212,00:06:01/5-15:04:19,1850) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,4392,00:00:15/5-15:04:19,1851) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,6796,5128,00:00:09/5-15:04:19,1858) /usr/sbin/apache2 -k start
(root,0,0,00:00:02/19:13:41,1893) [kworker/0:2-events]
(root,9832,2356,00:00:02/5-15:04:18,1917) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,5000,1700,00:00:00/5-14:59:05,4185) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/01:58:23,6445) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:00/23:57:04,13635) [kworker/1:1-events]
(www-data,7032,3796,00:00:00/23:56:14,14146) /usr/sbin/apache2 -k start
(www-data,236896,10200,00:00:01/23:56:14,14147) /usr/sbin/apache2 -k start
(www-data,236936,14028,00:00:01/23:56:14,14148) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/14:49:21,14645) [kworker/0:1-events]
(root,13320,6292,00:00:00/01:09,15688) sshd: [accepted]
(sshd,13320,4260,00:00:00/01:08,15700) sshd: [net]
(root,13320,6328,00:00:00/00:49,15952) sshd: [accepted]
(root,0,0,00:00:00/01:40:11,16130) [kworker/u8:2-ext4-rsv-conversion]
(root,13320,6408,00:00:00/00:40,16145) sshd: [accepted]
(root,13320,6232,00:00:00/00:39,16148) sshd: [accepted]
(root,14464,7584,00:00:00/00:03,16280) sshd: unknown [priv]
(sshd,13320,4368,00:00:00/00:03,16375) sshd: unknown [net]
(root,0,0,00:00:00/2-02:38:44,16413) [kworker/2:1]
(root,14464,7708,00:00:00/00:02,16432) sshd: unknown [priv]
(sshd,13320,4484,00:00:00/00:02,16433) sshd: unknown [net]
(root,14144,7452,00:00:00/00:02,16434) sshd: root [priv]
(sshd,13320,4400,00:00:00/00:02,16435) sshd: root [net]
(root,13320,6320,00:00:00/00:01,16436) sshd: [accepted]
(sshd,13320,4244,00:00:00/00:01,16437) sshd: [net]
(root,14464,7684,00:00:00/00:01,16438) sshd: unknown [priv]
(sshd,13320,4336,00:00:00/00:01,16439) sshd: unknown [net]
(root,13320,6400,00:00:00/00:01,16440) sshd: [accepted]
(sshd,13320,4312,00:00:00/00:01,16441) sshd: [net]
(root,8692,3388,00:00:00/00:00,16505) /bin/bash /usr/bin/check_mk_agent
(root,6608,2848,00:00:00/00:00,16524) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1464,00:00:00/00:00,16525) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/37:53,23444) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/04:13:49,28398) [kworker/3:2-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-13 22:57

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc65de29487

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34736,9344,00:02:34/3-15:36:22,1) /sbin/init
(root,0,0,00:00:00/3-15:36:22,2) [kthreadd]
(root,0,0,00:00:00/3-15:36:22,3) [rcu_gp]
(root,0,0,00:00:00/3-15:36:22,4) [rcu_par_gp]
(root,0,0,00:00:00/3-15:36:22,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/3-15:36:22,8) [mm_percpu_wq]
(root,0,0,00:00:00/3-15:36:22,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/3-15:36:22,10) [rcu_tasks_trace]
(root,0,0,00:00:10/3-15:36:22,11) [ksoftirqd/0]
(root,0,0,00:01:49/3-15:36:22,12) [rcu_sched]
(root,0,0,00:00:00/3-15:36:22,13) [migration/0]
(root,0,0,00:00:00/3-15:36:22,15) [cpuhp/0]
(root,0,0,00:00:00/3-15:36:22,16) [cpuhp/1]
(root,0,0,00:00:00/3-15:36:22,17) [migration/1]
(root,0,0,00:00:24/3-15:36:22,18) [ksoftirqd/1]
(root,0,0,00:00:00/3-15:36:22,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/3-15:36:22,21) [cpuhp/2]
(root,0,0,00:00:00/3-15:36:22,22) [migration/2]
(root,0,0,00:00:01/3-15:36:22,23) [ksoftirqd/2]
(root,0,0,00:00:00/3-15:36:22,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/3-15:36:22,26) [cpuhp/3]
(root,0,0,00:00:00/3-15:36:22,27) [migration/3]
(root,0,0,00:00:01/3-15:36:22,28) [ksoftirqd/3]
(root,0,0,00:00:00/3-15:36:22,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/3-15:36:22,31) [kdevtmpfs]
(root,0,0,00:00:00/3-15:36:22,32) [netns]
(root,0,0,00:00:00/3-15:36:22,33) [kauditd]
(root,0,0,00:00:00/3-15:36:22,34) [khungtaskd]
(root,0,0,00:00:00/3-15:36:22,35) [oom_reaper]
(root,0,0,00:00:00/3-15:36:22,36) [writeback]
(root,0,0,00:00:03/3-15:36:22,37) [kcompactd0]
(root,0,0,00:00:00/3-15:36:22,38) [ksmd]
(root,0,0,00:00:07/3-15:36:22,39) [khugepaged]
(root,0,0,00:00:10/3-15:36:22,41) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:00/3-15:36:22,58) [kintegrityd]
(root,0,0,00:00:00/3-15:36:22,59) [kblockd]
(root,0,0,00:00:00/3-15:36:22,60) [blkcg_punt_bio]
(root,0,0,00:00:00/3-15:36:22,61) [edac-poller]
(root,0,0,00:00:00/3-15:36:22,62) [devfreq_wq]
(root,0,0,00:00:01/3-15:36:22,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/3-15:36:21,66) [kswapd0]
(root,0,0,00:00:00/3-15:36:21,67) [kthrotld]
(root,0,0,00:00:00/3-15:36:21,68) [acpi_thermal_pm]
(root,0,0,00:00:01/3-15:36:21,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/3-15:36:21,70) [ipv6_addrconf]
(root,0,0,00:00:00/3-15:36:21,81) [kstrp]
(root,0,0,00:00:00/3-15:36:21,84) [zswap-shrink]
(root,0,0,00:00:00/3-15:36:21,85) [kworker/u9:0]
(root,0,0,00:00:01/3-15:36:21,133) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/3-15:36:21,135) [ata_sff]
(root,0,0,00:00:09/3-15:36:21,138) [kworker/2:3-events]
(root,0,0,00:00:00/3-15:36:21,139) [scsi_eh_0]
(root,0,0,00:00:00/3-15:36:21,140) [scsi_tmf_0]
(root,0,0,00:00:00/3-15:36:21,141) [scsi_eh_1]
(root,0,0,00:00:00/3-15:36:21,142) [scsi_tmf_1]
(root,0,0,00:00:00/3-15:36:21,143) [scsi_eh_2]
(root,0,0,00:00:00/3-15:36:21,144) [scsi_tmf_2]
(root,0,0,00:00:00/3-15:36:21,145) [scsi_eh_3]
(root,0,0,00:00:00/3-15:36:21,146) [scsi_tmf_3]
(root,0,0,00:00:01/3-15:36:21,150) [kworker/3:1H-kblockd]
(root,0,0,00:00:05/3-15:36:20,182) [jbd2/sda1-8]
(root,0,0,00:00:00/3-15:36:20,183) [ext4-rsv-conver]
(root,259440,202972,00:11:21/3-15:36:20,218) /lib/systemd/systemd-journald
(root,21600,4884,00:00:00/3-15:36:20,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/3-15:36:19,299) [watchdogd]
(root,0,0,00:00:00/3-15:36:19,304) [irq/126-mei_me]
(root,0,0,00:00:00/3-15:36:19,320) [cryptd]
(systemd-timesync,23796,6224,00:00:00/3-15:36:19,335) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/3-15:36:19,337) [card0-crtc0]
(root,0,0,00:00:00/3-15:36:19,339) [card0-crtc1]
(root,0,0,00:00:00/3-15:36:19,340) [card0-crtc2]
(root,8472,2800,00:00:01/3-15:36:19,348) /usr/sbin/cron -f
(messagebus,8240,4120,00:00:00/3-15:36:19,349) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,6004,00:02:55/3-15:36:19,352) /usr/sbin/rsyslogd -n -iNONE
(root,49840,6632,00:00:00/3-15:36:19,353) /lib/systemd/systemd-logind
(root,10756,3720,00:00:37/3-15:36:19,371) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69220,15908,00:05:05/3-15:36:19,388) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43268,9740,00:00:08/3-15:36:19,397) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11752,3496,00:00:04/3-15:36:19,408) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/39:17,802) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:17/1-00:45:26,1697) [kworker/1:0-events_freezable]
(root,13324,6960,00:03:19/3-15:36:17,1843) sshd: /usr/sbin/sshd -D [listener] 8 of 10-100 startups
(zabbix,20484,2668,00:00:00/3-15:36:17,1845) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,2896,00:00:23/3-15:36:17,1847) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,5184,00:03:55/3-15:36:17,1848) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,5228,00:03:56/3-15:36:17,1849) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,5212,00:03:53/3-15:36:17,1850) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,4392,00:00:10/3-15:36:17,1851) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,6796,5128,00:00:06/3-15:36:17,1858) /usr/sbin/apache2 -k start
(root,9832,2356,00:00:01/3-15:36:16,1917) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,5000,1700,00:00:00/3-15:31:03,4185) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/29:02,6247) [kworker/1:2-events]
(root,0,0,00:00:00/28:42,6489) [kworker/u8:3-ext4-rsv-conversion]
(root,0,0,00:00:00/28:31,6511) [kworker/3:0]
(www-data,7032,3796,00:00:00/28:21,6533) /usr/sbin/apache2 -k start
(www-data,236032,10200,00:00:00/28:21,6534) /usr/sbin/apache2 -k start
(www-data,235936,12244,00:00:00/28:21,6535) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/1-00:28:12,10784) [kworker/0:1-events]
(root,0,0,00:00:04/1-17:45:04,16293) [kworker/0:0-events]
(root,0,0,00:00:00/03:10:42,16413) [kworker/2:1]
(root,0,0,00:00:00/01:05:50,18568) [kworker/u8:1-flush-8:0]
(root,13320,6536,00:00:00/01:59,21760) sshd: [accepted]
(root,13320,6460,00:00:00/01:10,21879) sshd: [accepted]
(root,13320,6388,00:00:00/00:49,22296) sshd: [accepted]
(root,13320,6388,00:00:00/00:44,22306) sshd: [accepted]
(root,14464,7612,00:00:00/00:04,22581) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:04,22582) sshd: unknown [net]
(root,13320,6340,00:00:00/00:03,22583) sshd: [accepted]
(root,14464,7640,00:00:00/00:03,22584) sshd: unknown [priv]
(sshd,13320,4276,00:00:00/00:03,22585) sshd: unknown [net]
(root,13320,6380,00:00:00/00:01,22846) sshd: [accepted]
(sshd,13320,4216,00:00:00/00:01,22862) sshd: [net]
(root,8692,3324,00:00:00/00:00,23044) /bin/bash /usr/bin/check_mk_agent
(root,6608,2808,00:00:00/00:00,23063) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1500,00:00:00/00:00,23064) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-11 23:29

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6fe3c7ce1

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34736,9344,00:01:00/1-15:46:03,1) /sbin/init
(root,0,0,00:00:00/1-15:46:03,2) [kthreadd]
(root,0,0,00:00:00/1-15:46:03,3) [rcu_gp]
(root,0,0,00:00:00/1-15:46:03,4) [rcu_par_gp]
(root,0,0,00:00:00/1-15:46:03,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/1-15:46:03,8) [mm_percpu_wq]
(root,0,0,00:00:00/1-15:46:03,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/1-15:46:03,10) [rcu_tasks_trace]
(root,0,0,00:00:04/1-15:46:03,11) [ksoftirqd/0]
(root,0,0,00:00:47/1-15:46:03,12) [rcu_sched]
(root,0,0,00:00:00/1-15:46:03,13) [migration/0]
(root,0,0,00:00:00/1-15:46:03,15) [cpuhp/0]
(root,0,0,00:00:00/1-15:46:03,16) [cpuhp/1]
(root,0,0,00:00:00/1-15:46:03,17) [migration/1]
(root,0,0,00:00:11/1-15:46:03,18) [ksoftirqd/1]
(root,0,0,00:00:00/1-15:46:03,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/1-15:46:03,21) [cpuhp/2]
(root,0,0,00:00:00/1-15:46:03,22) [migration/2]
(root,0,0,00:00:00/1-15:46:03,23) [ksoftirqd/2]
(root,0,0,00:00:00/1-15:46:03,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/1-15:46:03,26) [cpuhp/3]
(root,0,0,00:00:00/1-15:46:03,27) [migration/3]
(root,0,0,00:00:00/1-15:46:03,28) [ksoftirqd/3]
(root,0,0,00:00:00/1-15:46:03,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/1-15:46:03,31) [kdevtmpfs]
(root,0,0,00:00:00/1-15:46:03,32) [netns]
(root,0,0,00:00:00/1-15:46:03,33) [kauditd]
(root,0,0,00:00:00/1-15:46:03,34) [khungtaskd]
(root,0,0,00:00:00/1-15:46:03,35) [oom_reaper]
(root,0,0,00:00:00/1-15:46:03,36) [writeback]
(root,0,0,00:00:01/1-15:46:03,37) [kcompactd0]
(root,0,0,00:00:00/1-15:46:03,38) [ksmd]
(root,0,0,00:00:03/1-15:46:03,39) [khugepaged]
(root,0,0,00:00:04/1-15:46:03,41) [kworker/3:1-events]
(root,0,0,00:00:00/1-15:46:03,58) [kintegrityd]
(root,0,0,00:00:00/1-15:46:03,59) [kblockd]
(root,0,0,00:00:00/1-15:46:03,60) [blkcg_punt_bio]
(root,0,0,00:00:00/1-15:46:03,61) [edac-poller]
(root,0,0,00:00:00/1-15:46:03,62) [devfreq_wq]
(root,0,0,00:00:00/1-15:46:03,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/1-15:46:02,66) [kswapd0]
(root,0,0,00:00:00/1-15:46:02,67) [kthrotld]
(root,0,0,00:00:00/1-15:46:02,68) [acpi_thermal_pm]
(root,0,0,00:00:00/1-15:46:02,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/1-15:46:02,70) [ipv6_addrconf]
(root,0,0,00:00:01/1-15:46:02,71) [kworker/0:2-events]
(root,0,0,00:00:00/1-15:46:02,81) [kstrp]
(root,0,0,00:00:00/1-15:46:02,84) [zswap-shrink]
(root,0,0,00:00:00/1-15:46:02,85) [kworker/u9:0]
(root,0,0,00:00:00/1-15:46:02,133) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/1-15:46:02,135) [ata_sff]
(root,0,0,00:00:04/1-15:46:02,138) [kworker/2:3-events]
(root,0,0,00:00:00/1-15:46:02,139) [scsi_eh_0]
(root,0,0,00:00:00/1-15:46:02,140) [scsi_tmf_0]
(root,0,0,00:00:00/1-15:46:02,141) [scsi_eh_1]
(root,0,0,00:00:00/1-15:46:02,142) [scsi_tmf_1]
(root,0,0,00:00:00/1-15:46:02,143) [scsi_eh_2]
(root,0,0,00:00:00/1-15:46:02,144) [scsi_tmf_2]
(root,0,0,00:00:00/1-15:46:02,145) [scsi_eh_3]
(root,0,0,00:00:00/1-15:46:02,146) [scsi_tmf_3]
(root,0,0,00:00:00/1-15:46:02,150) [kworker/3:1H-kblockd]
(root,0,0,00:00:02/1-15:46:01,182) [jbd2/sda1-8]
(root,0,0,00:00:00/1-15:46:01,183) [ext4-rsv-conver]
(root,0,0,00:00:27/1-15:46:01,194) [kworker/1:2-events_freezable]
(root,325416,268036,00:04:34/1-15:46:01,218) /lib/systemd/systemd-journald
(root,21600,4884,00:00:00/1-15:46:01,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/1-15:46:00,299) [watchdogd]
(root,0,0,00:00:00/1-15:46:00,304) [irq/126-mei_me]
(root,0,0,00:00:00/1-15:46:00,320) [cryptd]
(systemd-timesync,23796,6224,00:00:00/1-15:46:00,335) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/1-15:46:00,337) [card0-crtc0]
(root,0,0,00:00:00/1-15:46:00,339) [card0-crtc1]
(root,0,0,00:00:00/1-15:46:00,340) [card0-crtc2]
(root,8472,2800,00:00:00/1-15:46:00,348) /usr/sbin/cron -f
(messagebus,8240,4120,00:00:00/1-15:46:00,349) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,6004,00:01:11/1-15:46:00,352) /usr/sbin/rsyslogd -n -iNONE
(root,49840,6632,00:00:00/1-15:46:00,353) /lib/systemd/systemd-logind
(root,10756,3720,00:00:16/1-15:46:00,371) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69220,15908,00:02:15/1-15:46:00,388) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43268,9740,00:00:03/1-15:46:00,397) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11752,3496,00:00:02/1-15:46:00,408) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13324,6960,00:01:18/1-15:45:58,1843) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(zabbix,20484,2668,00:00:00/1-15:45:58,1845) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,2896,00:00:10/1-15:45:58,1847) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,5184,00:01:46/1-15:45:58,1848) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,5220,00:01:46/1-15:45:58,1849) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,5212,00:01:45/1-15:45:58,1850) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,4392,00:00:04/1-15:45:58,1851) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,6796,5112,00:00:02/1-15:45:58,1858) /usr/sbin/apache2 -k start
(root,9832,2356,00:00:00/1-15:45:57,1917) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,5000,1700,00:00:00/1-15:40:44,4185) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13320,6404,00:00:00/01:50,9956) sshd: [accepted]
(root,13320,6344,00:00:00/01:35,10213) sshd: [accepted]
(root,13320,6404,00:00:00/01:26,10228) sshd: [accepted]
(root,13320,6472,00:00:00/00:54,10463) sshd: [accepted]
(root,0,0,00:00:02/1-00:38:43,10561) [kworker/0:1-events]
(root,14464,7656,00:00:00/00:03,10968) sshd: unknown [priv]
(sshd,13320,4376,00:00:00/00:03,10969) sshd: unknown [net]
(root,14464,7724,00:00:00/00:02,10970) sshd: unknown [priv]
(sshd,13320,4256,00:00:00/00:02,10971) sshd: unknown [net]
(root,14464,7528,00:00:00/00:01,10972) sshd: unknown [priv]
(sshd,13320,4396,00:00:00/00:01,10973) sshd: unknown [net]
(root,13320,6352,00:00:00/00:00,10974) sshd: [accepted]
(sshd,13320,4200,00:00:00/00:00,10975) sshd: [net]
(root,13320,6472,00:00:00/00:00,10976) sshd: [accepted]
(sshd,13320,4268,00:00:00/00:00,11020) sshd: [net]
(root,8692,3324,00:00:00/00:00,11021) /bin/bash /usr/bin/check_mk_agent
(root,13320,6456,00:00:00/00:00,11022) sshd: [accepted]
(root,6608,2840,00:00:00/00:00,11041) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(sshd,13320,4384,00:00:00/00:00,11042) sshd: [net]
(root,3592,1484,00:00:00/00:00,11043) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/39:26,19806) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/38:43,20092) [kworker/3:2-events]
(root,0,0,00:00:00/37:52,20634) [kworker/2:0]
(www-data,7032,3780,00:00:00/37:37,20875) /usr/sbin/apache2 -k start
(www-data,236200,14272,00:00:00/37:37,20876) /usr/sbin/apache2 -k start
(www-data,236824,14272,00:00:00/37:37,20877) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/29:51,24926) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:00/15:31:03,28902) [kworker/1:1-events]
(root,0,0,00:00:00/17:37,32492) [kworker/u8:1-ext4-rsv-conversion]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-09 23:38

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc60d76b34a

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9060,06:13:43/523-09:50:44,1) /sbin/init
(root,0,0,00:00:01/523-09:50:44,2) [kthreadd]
(root,0,0,00:00:00/523-09:50:44,3) [rcu_gp]
(root,0,0,00:00:00/523-09:50:44,4) [rcu_par_gp]
(root,0,0,00:00:00/523-09:50:44,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/523-09:50:44,8) [mm_percpu_wq]
(root,0,0,00:00:00/523-09:50:44,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/523-09:50:44,10) [rcu_tasks_trace]
(root,0,0,01:19:23/523-09:50:44,11) [ksoftirqd/0]
(root,0,0,12:34:30/523-09:50:44,12) [rcu_sched]
(root,0,0,00:00:49/523-09:50:44,13) [migration/0]
(root,0,0,00:00:00/523-09:50:44,15) [cpuhp/0]
(root,0,0,00:00:00/523-09:50:44,16) [cpuhp/1]
(root,0,0,00:01:00/523-09:50:44,17) [migration/1]
(root,0,0,00:04:13/523-09:50:44,18) [ksoftirqd/1]
(root,0,0,00:00:00/523-09:50:44,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/523-09:50:44,21) [cpuhp/2]
(root,0,0,00:00:45/523-09:50:44,22) [migration/2]
(root,0,0,01:46:27/523-09:50:44,23) [ksoftirqd/2]
(root,0,0,00:00:00/523-09:50:44,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/523-09:50:44,26) [cpuhp/3]
(root,0,0,00:01:01/523-09:50:44,27) [migration/3]
(root,0,0,00:03:01/523-09:50:44,28) [ksoftirqd/3]
(root,0,0,00:00:00/523-09:50:44,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/523-09:50:44,31) [kdevtmpfs]
(root,0,0,00:00:00/523-09:50:44,32) [netns]
(root,0,0,00:00:00/523-09:50:44,33) [kauditd]
(root,0,0,00:00:09/523-09:50:44,34) [khungtaskd]
(root,0,0,00:00:00/523-09:50:44,35) [oom_reaper]
(root,0,0,00:00:00/523-09:50:44,36) [writeback]
(root,0,0,00:14:17/523-09:50:44,37) [kcompactd0]
(root,0,0,00:00:00/523-09:50:44,38) [ksmd]
(root,0,0,00:20:43/523-09:50:44,39) [khugepaged]
(root,0,0,00:00:00/523-09:50:44,58) [kintegrityd]
(root,0,0,00:00:00/523-09:50:44,59) [kblockd]
(root,0,0,00:00:00/523-09:50:44,60) [blkcg_punt_bio]
(root,0,0,00:00:00/523-09:50:44,61) [edac-poller]
(root,0,0,00:00:00/523-09:50:44,62) [devfreq_wq]
(root,0,0,00:06:45/523-09:50:44,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:20/523-09:50:43,65) [kswapd0]
(root,0,0,00:00:00/523-09:50:43,66) [kthrotld]
(root,0,0,00:00:00/523-09:50:43,67) [acpi_thermal_pm]
(root,0,0,00:04:32/523-09:50:43,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/523-09:50:43,70) [ipv6_addrconf]
(root,0,0,00:00:00/523-09:50:43,81) [kstrp]
(root,0,0,00:00:00/523-09:50:43,84) [zswap-shrink]
(root,0,0,00:00:00/523-09:50:43,85) [kworker/u9:0]
(root,0,0,00:03:29/523-09:50:43,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/523-09:50:43,135) [ata_sff]
(root,0,0,00:00:00/523-09:50:43,139) [scsi_eh_0]
(root,0,0,00:00:00/523-09:50:43,140) [scsi_tmf_0]
(root,0,0,00:00:00/523-09:50:43,141) [scsi_eh_1]
(root,0,0,00:00:00/523-09:50:43,142) [scsi_tmf_1]
(root,0,0,00:00:00/523-09:50:43,143) [scsi_eh_2]
(root,0,0,00:00:00/523-09:50:43,144) [scsi_tmf_2]
(root,0,0,00:00:00/523-09:50:43,145) [scsi_eh_3]
(root,0,0,00:00:00/523-09:50:43,146) [scsi_tmf_3]
(root,0,0,00:02:42/523-09:50:42,153) [kworker/3:1H-kblockd]
(root,0,0,00:15:17/523-09:50:41,183) [jbd2/sda1-8]
(root,0,0,00:00:00/523-09:50:41,184) [ext4-rsv-conver]
(root,350468,278848,1-07:07:23/523-09:50:41,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:35/523-09:50:41,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/523-09:50:41,291) [watchdogd]
(root,0,0,00:00:00/523-09:50:41,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:28/523-09:50:41,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/523-09:50:41,349) [card0-crtc0]
(root,0,0,00:00:00/523-09:50:41,350) [card0-crtc1]
(root,0,0,00:00:00/523-09:50:41,351) [card0-crtc2]
(root,0,0,00:00:00/523-09:50:41,353) [cryptd]
(root,8472,2688,00:02:48/523-09:50:41,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/523-09:50:41,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7712,07:42:35/523-09:50:41,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:56/523-09:50:41,374) /lib/systemd/systemd-logind
(root,10768,2484,01:35:49/523-09:50:41,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:50:35/523-09:50:40,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:23:38/523-09:50:40,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:25/523-09:50:40,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/02:01:42,1486) [kworker/u8:2-ext4-rsv-conversion]
(root,13320,6384,08:46:33/523-09:50:38,1740) sshd: /usr/sbin/sshd -D [listener] 19 of 10-100 startups
(root,6792,4612,00:17:03/523-09:50:38,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:09/523-09:50:37,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/523-09:50:30,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/523-09:50:30,1815) (sd-pam)
(root,0,0,00:00:05/1-23:31:50,4046) [kworker/3:1-events]
(root,13320,6408,00:00:00/01:59,4852) sshd: [accepted]
(root,13320,6360,00:00:00/01:56,4873) sshd: [accepted]
(root,13320,6348,00:00:00/01:53,4908) sshd: [accepted]
(root,13320,6476,00:00:00/01:52,4913) sshd: [accepted]
(root,13320,6280,00:00:00/01:51,4914) sshd: [accepted]
(root,13320,6524,00:00:00/01:49,4918) sshd: [accepted]
(root,13320,6432,00:00:00/01:43,4924) sshd: [accepted]
(root,13320,6512,00:00:00/01:41,4929) sshd: [accepted]
(root,13320,6344,00:00:00/01:10,5318) sshd: [accepted]
(root,13320,6420,00:00:00/01:09,5320) sshd: [accepted]
(root,13320,6376,00:00:00/01:03,5342) sshd: [accepted]
(root,13320,6544,00:00:00/00:16,5782) sshd: [accepted]
(root,13320,6548,00:00:00/00:09,5799) sshd: [accepted]
(root,14464,7608,00:00:00/00:05,5803) sshd: unknown [priv]
(sshd,13320,4268,00:00:00/00:05,5804) sshd: unknown [net]
(root,14144,7488,00:00:00/00:04,5809) sshd: root [priv]
(sshd,13320,4308,00:00:00/00:04,5810) sshd: root [net]
(root,13320,6500,00:00:00/00:04,5812) sshd: [accepted]
(root,14144,7264,00:00:00/00:03,5813) sshd: root [priv]
(sshd,13320,4216,00:00:00/00:03,5814) sshd: root [net]
(root,14144,7452,00:00:00/00:03,5816) sshd: root [priv]
(sshd,13320,4372,00:00:00/00:03,5817) sshd: root [net]
(root,13320,6552,00:00:00/00:02,5818) sshd: [accepted]
(sshd,13320,4372,00:00:00/00:01,5819) sshd: [net]
(root,8692,3424,00:00:00/00:00,6090) /bin/bash /usr/bin/check_mk_agent
(root,6608,2800,00:00:00/00:00,6109) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1504,00:00:00/00:00,6110) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:39/8-10:54:46,6541) [kworker/1:0-events_freezable]
(root,0,0,00:00:53/4-19:55:52,7321) [kworker/0:2-events]
(root,7252,3572,00:00:00/523-09:38:23,7652) /bin/login -p --
(root,9320,4052,00:00:00/523-09:38:17,7664) -bash
(root,0,0,00:00:00/48:24,9072) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/30:30,19410) [kworker/2:0-events]
(root,0,0,00:00:00/29:40,19924) [kworker/3:2-events]
(root,0,0,00:00:00/29:31,19951) [kworker/0:1]
(www-data,7028,3740,00:00:00/29:30,19953) /usr/sbin/apache2 -k start
(www-data,235980,14232,00:00:00/29:30,19954) /usr/sbin/apache2 -k start
(www-data,235924,14228,00:00:00/29:30,19955) /usr/sbin/apache2 -k start
(root,5000,1376,00:00:00/523-09:08:17,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/494-05:26:42,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/01:21:29,23424) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:12/1-13:25:05,24870) [kworker/2:2-events]
(zabbix,20484,1544,00:00:00/383-16:04:20,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:48:40/383-16:04:20,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:27:09/383-16:04:20,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:26:40/383-16:04:20,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4892,08:27:54/383-16:04:20,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:21:23/383-16:04:20,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/18:17:53,31728) [kworker/1:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-07 23:30

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc66cad5ab3

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9024,06:12:10/521-09:58:30,1) /sbin/init
(root,0,0,00:00:01/521-09:58:30,2) [kthreadd]
(root,0,0,00:00:00/521-09:58:30,3) [rcu_gp]
(root,0,0,00:00:00/521-09:58:30,4) [rcu_par_gp]
(root,0,0,00:00:00/521-09:58:30,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/521-09:58:30,8) [mm_percpu_wq]
(root,0,0,00:00:00/521-09:58:30,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/521-09:58:30,10) [rcu_tasks_trace]
(root,0,0,01:19:03/521-09:58:30,11) [ksoftirqd/0]
(root,0,0,12:31:52/521-09:58:30,12) [rcu_sched]
(root,0,0,00:00:49/521-09:58:30,13) [migration/0]
(root,0,0,00:00:00/521-09:58:30,15) [cpuhp/0]
(root,0,0,00:00:00/521-09:58:30,16) [cpuhp/1]
(root,0,0,00:01:00/521-09:58:30,17) [migration/1]
(root,0,0,00:04:12/521-09:58:30,18) [ksoftirqd/1]
(root,0,0,00:00:00/521-09:58:30,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/521-09:58:30,21) [cpuhp/2]
(root,0,0,00:00:45/521-09:58:30,22) [migration/2]
(root,0,0,01:46:06/521-09:58:30,23) [ksoftirqd/2]
(root,0,0,00:00:00/521-09:58:30,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/521-09:58:30,26) [cpuhp/3]
(root,0,0,00:01:01/521-09:58:30,27) [migration/3]
(root,0,0,00:03:00/521-09:58:30,28) [ksoftirqd/3]
(root,0,0,00:00:00/521-09:58:30,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/521-09:58:30,31) [kdevtmpfs]
(root,0,0,00:00:00/521-09:58:30,32) [netns]
(root,0,0,00:00:00/521-09:58:30,33) [kauditd]
(root,0,0,00:00:09/521-09:58:30,34) [khungtaskd]
(root,0,0,00:00:00/521-09:58:30,35) [oom_reaper]
(root,0,0,00:00:00/521-09:58:30,36) [writeback]
(root,0,0,00:14:14/521-09:58:30,37) [kcompactd0]
(root,0,0,00:00:00/521-09:58:30,38) [ksmd]
(root,0,0,00:20:38/521-09:58:30,39) [khugepaged]
(root,0,0,00:00:00/521-09:58:30,58) [kintegrityd]
(root,0,0,00:00:00/521-09:58:30,59) [kblockd]
(root,0,0,00:00:00/521-09:58:30,60) [blkcg_punt_bio]
(root,0,0,00:00:00/521-09:58:30,61) [edac-poller]
(root,0,0,00:00:00/521-09:58:30,62) [devfreq_wq]
(root,0,0,00:06:43/521-09:58:30,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:20/521-09:58:29,65) [kswapd0]
(root,0,0,00:00:00/521-09:58:29,66) [kthrotld]
(root,0,0,00:00:00/521-09:58:29,67) [acpi_thermal_pm]
(root,0,0,00:04:31/521-09:58:29,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/521-09:58:29,70) [ipv6_addrconf]
(root,0,0,00:00:00/521-09:58:29,81) [kstrp]
(root,0,0,00:00:00/521-09:58:29,84) [zswap-shrink]
(root,0,0,00:00:00/521-09:58:29,85) [kworker/u9:0]
(root,0,0,00:03:29/521-09:58:29,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/521-09:58:29,135) [ata_sff]
(root,0,0,00:00:00/521-09:58:29,139) [scsi_eh_0]
(root,0,0,00:00:00/521-09:58:29,140) [scsi_tmf_0]
(root,0,0,00:00:00/521-09:58:29,141) [scsi_eh_1]
(root,0,0,00:00:00/521-09:58:29,142) [scsi_tmf_1]
(root,0,0,00:00:00/521-09:58:29,143) [scsi_eh_2]
(root,0,0,00:00:00/521-09:58:29,144) [scsi_tmf_2]
(root,0,0,00:00:00/521-09:58:29,145) [scsi_eh_3]
(root,0,0,00:00:00/521-09:58:29,146) [scsi_tmf_3]
(root,0,0,00:02:41/521-09:58:28,153) [kworker/3:1H-kblockd]
(root,0,0,00:15:13/521-09:58:27,183) [jbd2/sda1-8]
(root,0,0,00:00:00/521-09:58:27,184) [ext4-rsv-conver]
(root,141440,83724,1-07:00:07/521-09:58:27,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:35/521-09:58:27,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/521-09:58:27,291) [watchdogd]
(root,0,0,00:00:00/521-09:58:27,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:27/521-09:58:27,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/521-09:58:27,349) [card0-crtc0]
(root,0,0,00:00:00/521-09:58:27,350) [card0-crtc1]
(root,0,0,00:00:00/521-09:58:27,351) [card0-crtc2]
(root,0,0,00:00:00/521-09:58:27,353) [cryptd]
(root,8472,2688,00:02:48/521-09:58:27,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/521-09:58:27,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7712,07:40:49/521-09:58:27,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:55/521-09:58:27,374) /lib/systemd/systemd-logind
(root,10768,2484,01:35:27/521-09:58:27,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:47:31/521-09:58:26,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:23:32/521-09:58:26,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:22/521-09:58:26,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,08:44:20/521-09:58:24,1740) sshd: /usr/sbin/sshd -D [listener] 15 of 10-100 startups
(root,6792,4612,00:16:59/521-09:58:24,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:08/521-09:58:23,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/521-09:58:16,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/521-09:58:16,1815) (sd-pam)
(root,0,0,00:00:22/2-17:57:26,4693) [kworker/2:0-events]
(root,0,0,00:00:02/18:17:35,5404) [kworker/3:0-mm_percpu_wq]
(root,0,0,00:00:29/6-11:02:32,6541) [kworker/1:0-mm_percpu_wq]
(root,0,0,00:00:31/2-20:03:38,7321) [kworker/0:2-events]
(root,7252,3572,00:00:00/521-09:46:09,7652) /bin/login -p --
(root,9320,4052,00:00:00/521-09:46:03,7664) -bash
(root,0,0,00:00:00/27:41,8454) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:29/10-23:40:20,10073) [kworker/3:2-events]
(root,0,0,00:00:00/1-00:38:16,12313) [kworker/0:1-events]
(root,0,0,00:00:00/03:10:04,14041) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/1-17:02:33,19260) [kworker/2:2-events]
(root,5000,1376,00:00:00/521-09:16:03,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/492-05:34:28,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,13320,6324,00:00:00/01:59,23331) sshd: [accepted]
(root,13320,6532,00:00:00/01:57,23332) sshd: [accepted]
(root,13320,6560,00:00:00/01:56,23338) sshd: [accepted]
(root,13320,6456,00:00:00/01:46,23353) sshd: [accepted]
(root,13320,6396,00:00:00/01:42,23356) sshd: [accepted]
(root,13320,6492,00:00:00/01:14,23607) sshd: [accepted]
(root,13320,6524,00:00:00/01:01,23633) sshd: [accepted]
(root,13320,6424,00:00:00/00:50,23835) sshd: [accepted]
(root,13320,6340,00:00:00/00:31,23859) sshd: [accepted]
(root,13320,6508,00:00:00/00:28,23865) sshd: [accepted]
(root,30556,23820,00:00:00/00:18,23877) sshd: root [priv]
(sshd,13320,4404,00:00:00/00:15,24074) sshd: root [net]
(root,13320,6384,00:00:00/00:08,24084) sshd: [accepted]
(root,13320,6516,00:00:00/00:07,24085) sshd: [accepted]
(root,14144,7448,00:00:00/00:06,24088) sshd: root [priv]
(sshd,13320,4228,00:00:00/00:05,24089) sshd: root [net]
(root,13320,6324,00:00:00/00:00,24158) sshd: [accepted]
(sshd,13320,4324,00:00:00/00:00,24193) sshd: [net]
(root,8692,3356,00:00:00/00:00,24323) /bin/bash /usr/bin/check_mk_agent
(root,6608,2756,00:00:00/00:00,24342) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1600,00:00:00/00:00,24343) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(zabbix,20484,1544,00:00:00/381-16:12:06,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:48:25/381-16:12:06,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:24:34/381-16:12:06,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:24:06/381-16:12:06,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4892,08:25:19/381-16:12:06,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:21:16/381-16:12:06,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/46:50,27151) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:00/37:31,32212) [kworker/1:2]
(www-data,7028,3740,00:00:00/37:26,32226) /usr/sbin/apache2 -k start
(www-data,235924,10144,00:00:00/37:26,32227) /usr/sbin/apache2 -k start
(www-data,235924,12188,00:00:00/37:26,32228) /usr/sbin/apache2 -k start

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-05 23:38

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6290485d3

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,9024,06:10:52/519-10:19:08,1) /sbin/init
(root,0,0,00:00:01/519-10:19:08,2) [kthreadd]
(root,0,0,00:00:00/519-10:19:08,3) [rcu_gp]
(root,0,0,00:00:00/519-10:19:08,4) [rcu_par_gp]
(root,0,0,00:00:00/519-10:19:08,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/519-10:19:08,8) [mm_percpu_wq]
(root,0,0,00:00:00/519-10:19:08,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/519-10:19:08,10) [rcu_tasks_trace]
(root,0,0,01:18:42/519-10:19:08,11) [ksoftirqd/0]
(root,0,0,12:29:00/519-10:19:08,12) [rcu_sched]
(root,0,0,00:00:49/519-10:19:08,13) [migration/0]
(root,0,0,00:00:00/519-10:19:08,15) [cpuhp/0]
(root,0,0,00:00:00/519-10:19:08,16) [cpuhp/1]
(root,0,0,00:01:00/519-10:19:08,17) [migration/1]
(root,0,0,00:04:11/519-10:19:08,18) [ksoftirqd/1]
(root,0,0,00:00:00/519-10:19:08,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/519-10:19:08,21) [cpuhp/2]
(root,0,0,00:00:45/519-10:19:08,22) [migration/2]
(root,0,0,01:45:44/519-10:19:08,23) [ksoftirqd/2]
(root,0,0,00:00:00/519-10:19:08,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/519-10:19:08,26) [cpuhp/3]
(root,0,0,00:01:01/519-10:19:08,27) [migration/3]
(root,0,0,00:02:59/519-10:19:08,28) [ksoftirqd/3]
(root,0,0,00:00:00/519-10:19:08,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/519-10:19:08,31) [kdevtmpfs]
(root,0,0,00:00:00/519-10:19:08,32) [netns]
(root,0,0,00:00:00/519-10:19:08,33) [kauditd]
(root,0,0,00:00:09/519-10:19:08,34) [khungtaskd]
(root,0,0,00:00:00/519-10:19:08,35) [oom_reaper]
(root,0,0,00:00:00/519-10:19:08,36) [writeback]
(root,0,0,00:14:11/519-10:19:08,37) [kcompactd0]
(root,0,0,00:00:00/519-10:19:08,38) [ksmd]
(root,0,0,00:20:34/519-10:19:08,39) [khugepaged]
(root,0,0,00:00:00/519-10:19:08,58) [kintegrityd]
(root,0,0,00:00:00/519-10:19:08,59) [kblockd]
(root,0,0,00:00:00/519-10:19:08,60) [blkcg_punt_bio]
(root,0,0,00:00:00/519-10:19:08,61) [edac-poller]
(root,0,0,00:00:00/519-10:19:08,62) [devfreq_wq]
(root,0,0,00:06:42/519-10:19:08,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:20/519-10:19:07,65) [kswapd0]
(root,0,0,00:00:00/519-10:19:07,66) [kthrotld]
(root,0,0,00:00:00/519-10:19:07,67) [acpi_thermal_pm]
(root,0,0,00:04:30/519-10:19:07,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/519-10:19:07,70) [ipv6_addrconf]
(root,0,0,00:00:00/519-10:19:07,81) [kstrp]
(root,0,0,00:00:00/519-10:19:07,84) [zswap-shrink]
(root,0,0,00:00:00/519-10:19:07,85) [kworker/u9:0]
(root,0,0,00:03:28/519-10:19:07,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/519-10:19:07,135) [ata_sff]
(root,0,0,00:00:00/519-10:19:07,139) [scsi_eh_0]
(root,0,0,00:00:00/519-10:19:07,140) [scsi_tmf_0]
(root,0,0,00:00:00/519-10:19:07,141) [scsi_eh_1]
(root,0,0,00:00:00/519-10:19:07,142) [scsi_tmf_1]
(root,0,0,00:00:00/519-10:19:07,143) [scsi_eh_2]
(root,0,0,00:00:00/519-10:19:07,144) [scsi_tmf_2]
(root,0,0,00:00:00/519-10:19:07,145) [scsi_eh_3]
(root,0,0,00:00:00/519-10:19:07,146) [scsi_tmf_3]
(root,0,0,00:02:40/519-10:19:06,153) [kworker/3:1H-kblockd]
(root,0,0,00:15:10/519-10:19:05,183) [jbd2/sda1-8]
(root,0,0,00:00:00/519-10:19:05,184) [ext4-rsv-conver]
(root,145548,91912,1-06:53:37/519-10:19:05,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:35/519-10:19:05,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/519-10:19:05,291) [watchdogd]
(root,0,0,00:00:00/519-10:19:05,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:27/519-10:19:05,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/519-10:19:05,349) [card0-crtc0]
(root,0,0,00:00:00/519-10:19:05,350) [card0-crtc1]
(root,0,0,00:00:00/519-10:19:05,351) [card0-crtc2]
(root,0,0,00:00:00/519-10:19:05,353) [cryptd]
(root,8472,2688,00:02:47/519-10:19:05,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/519-10:19:05,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7712,07:39:15/519-10:19:05,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:55/519-10:19:05,374) /lib/systemd/systemd-logind
(root,10768,2484,01:35:04/519-10:19:05,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:44:30/519-10:19:04,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:23:26/519-10:19:04,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:19/519-10:19:04,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6452,00:00:00/00:31,447) sshd: [accepted]
(root,13320,6380,00:00:00/00:14,666) sshd: [accepted]
(root,14464,7584,00:00:00/00:05,683) sshd: unknown [priv]
(sshd,13320,4388,00:00:00/00:05,684) sshd: unknown [net]
(root,14464,7588,00:00:00/00:04,688) sshd: unknown [priv]
(sshd,13320,4400,00:00:00/00:04,689) sshd: unknown [net]
(root,14464,7552,00:00:00/00:03,696) sshd: unknown [priv]
(sshd,13320,4268,00:00:00/00:03,697) sshd: unknown [net]
(root,14144,7468,00:00:00/00:02,703) sshd: root [priv]
(sshd,13320,4336,00:00:00/00:02,704) sshd: root [net]
(root,13320,6488,00:00:00/00:00,705) sshd: [accepted]
(root,13320,6376,00:00:00/00:00,725) sshd: [accepted]
(sshd,13320,4320,00:00:00/00:00,734) sshd: [net]
(root,8692,3352,00:00:00/00:00,764) /bin/bash /usr/bin/check_mk_agent
(root,6608,2856,00:00:00/00:00,783) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1512,00:00:00/00:00,784) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,13320,6384,08:42:24/519-10:19:02,1740) sshd: /usr/sbin/sshd -D [listener] 14 of 10-100 startups
(root,6792,4612,00:16:55/519-10:19:02,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:08/519-10:19:01,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/519-10:18:54,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/519-10:18:54,1815) (sd-pam)
(root,0,0,00:00:06/18:18:04,4693) [kworker/2:0-events]
(root,0,0,00:00:20/4-11:23:10,6541) [kworker/1:0-mm_percpu_wq]
(root,0,0,00:00:00/44:58,6576) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:00/20:24:16,7291) [kworker/2:2-events]
(root,0,0,00:00:09/20:24:16,7321) [kworker/0:2-mm_percpu_wq]
(root,7252,3572,00:00:00/519-10:06:47,7652) /bin/login -p --
(root,9320,4052,00:00:00/519-10:06:41,7664) -bash
(root,0,0,00:00:25/9-00:00:58,10073) [kworker/3:2-mm_percpu_wq]
(root,5000,1376,00:00:00/519-09:36:41,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/490-05:55:06,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/379-16:32:44,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:48:09/379-16:32:44,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:21:56/379-16:32:44,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:21:28/379-16:32:44,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4892,08:22:43/379-16:32:44,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:21:09/379-16:32:44,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/05:50,29848) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/58:54,30335) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/58:54,30350) [kworker/0:0]
(root,0,0,00:00:00/04:29,30476) [kworker/2:1]
(root,0,0,00:00:00/04:29,30507) [kworker/3:0-events]
(root,0,0,00:00:00/58:44,30565) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/58:14,30886) [kworker/1:1]
(www-data,7028,3744,00:00:00/57:54,30915) /usr/sbin/apache2 -k start
(www-data,235924,18320,00:00:00/57:54,30916) /usr/sbin/apache2 -k start
(www-data,236092,14236,00:00:00/57:54,30917) /usr/sbin/apache2 -k start
(root,13320,6412,00:00:00/01:54,32143) sshd: [accepted]
(root,13320,6460,00:00:00/01:46,32354) sshd: [accepted]
(root,13320,6484,00:00:00/01:35,32375) sshd: [accepted]
(root,13320,6444,00:00:00/01:35,32377) sshd: [accepted]
(root,0,0,00:00:00/01:32,32385) [kworker/u8:3-flush-8:0]
(root,13320,6356,00:00:00/01:28,32400) sshd: [accepted]
(root,13320,6488,00:00:00/01:16,32599) sshd: [accepted]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-03 23:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc649522c76

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35668,9036,06:09:35/517-09:32:03,1) /sbin/init
(root,0,0,00:00:01/517-09:32:03,2) [kthreadd]
(root,0,0,00:00:00/517-09:32:03,3) [rcu_gp]
(root,0,0,00:00:00/517-09:32:03,4) [rcu_par_gp]
(root,0,0,00:00:00/517-09:32:03,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/517-09:32:03,8) [mm_percpu_wq]
(root,0,0,00:00:00/517-09:32:03,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/517-09:32:03,10) [rcu_tasks_trace]
(root,0,0,01:18:20/517-09:32:03,11) [ksoftirqd/0]
(root,0,0,12:25:59/517-09:32:03,12) [rcu_sched]
(root,0,0,00:00:48/517-09:32:03,13) [migration/0]
(root,0,0,00:00:00/517-09:32:03,15) [cpuhp/0]
(root,0,0,00:00:00/517-09:32:03,16) [cpuhp/1]
(root,0,0,00:01:00/517-09:32:03,17) [migration/1]
(root,0,0,00:04:10/517-09:32:03,18) [ksoftirqd/1]
(root,0,0,00:00:00/517-09:32:03,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/517-09:32:03,21) [cpuhp/2]
(root,0,0,00:00:44/517-09:32:03,22) [migration/2]
(root,0,0,01:45:22/517-09:32:03,23) [ksoftirqd/2]
(root,0,0,00:00:00/517-09:32:03,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/517-09:32:03,26) [cpuhp/3]
(root,0,0,00:01:00/517-09:32:03,27) [migration/3]
(root,0,0,00:02:59/517-09:32:03,28) [ksoftirqd/3]
(root,0,0,00:00:00/517-09:32:03,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/517-09:32:03,31) [kdevtmpfs]
(root,0,0,00:00:00/517-09:32:03,32) [netns]
(root,0,0,00:00:00/517-09:32:03,33) [kauditd]
(root,0,0,00:00:09/517-09:32:03,34) [khungtaskd]
(root,0,0,00:00:00/517-09:32:03,35) [oom_reaper]
(root,0,0,00:00:00/517-09:32:03,36) [writeback]
(root,0,0,00:14:08/517-09:32:03,37) [kcompactd0]
(root,0,0,00:00:00/517-09:32:03,38) [ksmd]
(root,0,0,00:20:29/517-09:32:03,39) [khugepaged]
(root,0,0,00:00:00/517-09:32:03,58) [kintegrityd]
(root,0,0,00:00:00/517-09:32:03,59) [kblockd]
(root,0,0,00:00:00/517-09:32:03,60) [blkcg_punt_bio]
(root,0,0,00:00:00/517-09:32:03,61) [edac-poller]
(root,0,0,00:00:00/517-09:32:03,62) [devfreq_wq]
(root,0,0,00:06:40/517-09:32:03,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:19/517-09:32:02,65) [kswapd0]
(root,0,0,00:00:00/517-09:32:02,66) [kthrotld]
(root,0,0,00:00:00/517-09:32:02,67) [acpi_thermal_pm]
(root,0,0,00:04:29/517-09:32:02,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/517-09:32:02,70) [ipv6_addrconf]
(root,0,0,00:00:00/517-09:32:02,81) [kstrp]
(root,0,0,00:00:00/517-09:32:02,84) [zswap-shrink]
(root,0,0,00:00:00/517-09:32:02,85) [kworker/u9:0]
(root,0,0,00:03:27/517-09:32:02,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/517-09:32:02,135) [ata_sff]
(root,0,0,00:00:00/517-09:32:02,139) [scsi_eh_0]
(root,0,0,00:00:00/517-09:32:02,140) [scsi_tmf_0]
(root,0,0,00:00:00/517-09:32:02,141) [scsi_eh_1]
(root,0,0,00:00:00/517-09:32:02,142) [scsi_tmf_1]
(root,0,0,00:00:00/517-09:32:02,143) [scsi_eh_2]
(root,0,0,00:00:00/517-09:32:02,144) [scsi_tmf_2]
(root,0,0,00:00:00/517-09:32:02,145) [scsi_eh_3]
(root,0,0,00:00:00/517-09:32:02,146) [scsi_tmf_3]
(root,0,0,00:02:40/517-09:32:01,153) [kworker/3:1H-kblockd]
(root,0,0,00:15:06/517-09:32:00,183) [jbd2/sda1-8]
(root,0,0,00:00:00/517-09:32:00,184) [ext4-rsv-conver]
(root,346764,270764,1-06:46:52/517-09:32:00,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:35/517-09:32:00,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/517-09:32:00,291) [watchdogd]
(root,0,0,00:00:00/517-09:32:00,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:27/517-09:32:00,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/517-09:32:00,349) [card0-crtc0]
(root,0,0,00:00:00/517-09:32:00,350) [card0-crtc1]
(root,0,0,00:00:00/517-09:32:00,351) [card0-crtc2]
(root,0,0,00:00:00/517-09:32:00,353) [cryptd]
(root,8472,2688,00:02:46/517-09:32:00,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/517-09:32:00,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7712,07:37:35/517-09:32:00,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:55/517-09:32:00,374) /lib/systemd/systemd-logind
(root,10768,2484,01:34:41/517-09:32:00,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:41:38/517-09:31:59,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:23:21/517-09:31:59,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:15/517-09:31:59,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/43:03,672) [kworker/u8:0-ext4-rsv-conversion]
(root,13320,6384,08:40:26/517-09:31:57,1740) sshd: /usr/sbin/sshd -D [listener] 19 of 10-100 startups
(root,6792,4584,00:16:51/517-09:31:57,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:07/517-09:31:56,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/517-09:31:49,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/517-09:31:49,1815) (sd-pam)
(root,0,0,00:00:23/2-18:05:56,3384) [kworker/2:2-events]
(root,0,0,00:00:00/13:05:35,4572) [kworker/3:1]
(root,0,0,00:00:11/2-10:36:05,6541) [kworker/1:0-events_freezable]
(root,7252,3572,00:00:00/517-09:19:42,7652) /bin/login -p --
(root,9320,4052,00:00:00/517-09:19:36,7664) -bash
(root,0,0,00:00:00/05:28:12,7998) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:19/6-23:13:53,10073) [kworker/3:2-mm_percpu_wq]
(root,0,0,00:00:00/21:01:42,12631) [kworker/0:1]
(root,0,0,00:00:00/11:49,18558) [kworker/2:0-events]
(root,0,0,00:00:00/11:49,18575) [kworker/1:1]
(root,0,0,00:00:00/11:29,18822) [kworker/u8:3-flush-8:0]
(www-data,7028,3732,00:00:00/10:54,19399) /usr/sbin/apache2 -k start
(www-data,235980,10136,00:00:00/10:54,19400) /usr/sbin/apache2 -k start
(www-data,236092,14220,00:00:00/10:54,19401) /usr/sbin/apache2 -k start
(root,5000,1376,00:00:00/517-08:49:36,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/488-05:08:01,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:20/1-21:25:48,24192) [kworker/0:0-events]
(root,13320,6380,00:00:00/01:42,25077) sshd: [accepted]
(sshd,13320,4280,00:00:00/01:41,25082) sshd: [net]
(root,13320,6404,00:00:00/01:23,25129) sshd: [accepted]
(root,13320,6308,00:00:00/01:10,25170) sshd: [accepted]
(sshd,13320,4384,00:00:00/01:10,25192) sshd: [net]
(root,13320,6476,00:00:00/00:39,25639) sshd: [accepted]
(sshd,13320,4316,00:00:00/00:38,25640) sshd: [net]
(root,13320,6244,00:00:00/00:33,25653) sshd: [accepted]
(root,13320,6524,00:00:00/00:33,25654) sshd: [accepted]
(root,13320,6412,00:00:00/00:26,25675) sshd: [accepted]
(root,14144,7228,00:00:00/00:25,25683) sshd: root [priv]
(sshd,13320,4212,00:00:00/00:25,25686) sshd: root [net]
(root,13320,6328,00:00:00/00:16,25719) sshd: [accepted]
(sshd,13320,4320,00:00:00/00:16,25720) sshd: [net]
(root,13320,6488,00:00:00/00:08,25733) sshd: [accepted]
(root,13320,6388,00:00:00/00:06,25738) sshd: [accepted]
(sshd,13320,4248,00:00:00/00:06,25739) sshd: [net]
(root,14464,7800,00:00:00/00:05,25740) sshd: unknown [priv]
(sshd,13320,4312,00:00:00/00:05,25741) sshd: unknown [net]
(root,14144,7432,00:00:00/00:03,25742) sshd: root [priv]
(sshd,13320,4264,00:00:00/00:03,25743) sshd: root [net]
(root,13320,6444,00:00:00/00:03,25744) sshd: [accepted]
(root,14464,7592,00:00:00/00:03,25745) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:03,25746) sshd: unknown [net]
(root,14144,7332,00:00:00/00:02,25747) sshd: root [priv]
(sshd,13320,4228,00:00:00/00:02,25748) sshd: root [net]
(sshd,13320,4392,00:00:00/00:02,25749) sshd: [net]
(root,14144,7424,00:00:00/00:02,25750) sshd: root [priv]
(sshd,13320,4376,00:00:00/00:01,25751) sshd: root [net]
(zabbix,20484,1544,00:00:00/377-15:45:39,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:47:54/377-15:45:39,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:19:18/377-15:45:39,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:18:49/377-15:45:39,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4892,08:20:05/377-15:45:39,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:21:02/377-15:45:39,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,13320,6584,00:00:00/00:00,25781) sshd: [accepted]
(sshd,13320,4388,00:00:00/00:00,25787) sshd: [net]
(root,14464,7732,00:00:00/00:00,25864) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:00,25865) sshd: unknown [net]
(root,8692,3536,00:00:00/00:00,25987) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,26006) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1536,00:00:00/00:00,26007) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-01 23:11

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6f1477bf0

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,9024,06:08:10/515-09:55:43,1) /sbin/init
(root,0,0,00:00:01/515-09:55:43,2) [kthreadd]
(root,0,0,00:00:00/515-09:55:43,3) [rcu_gp]
(root,0,0,00:00:00/515-09:55:43,4) [rcu_par_gp]
(root,0,0,00:00:00/515-09:55:43,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/515-09:55:43,8) [mm_percpu_wq]
(root,0,0,00:00:00/515-09:55:43,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/515-09:55:43,10) [rcu_tasks_trace]
(root,0,0,01:18:01/515-09:55:43,11) [ksoftirqd/0]
(root,0,0,12:23:07/515-09:55:43,12) [rcu_sched]
(root,0,0,00:00:48/515-09:55:43,13) [migration/0]
(root,0,0,00:00:00/515-09:55:43,15) [cpuhp/0]
(root,0,0,00:00:00/515-09:55:43,16) [cpuhp/1]
(root,0,0,00:00:59/515-09:55:43,17) [migration/1]
(root,0,0,00:04:09/515-09:55:43,18) [ksoftirqd/1]
(root,0,0,00:00:00/515-09:55:43,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/515-09:55:43,21) [cpuhp/2]
(root,0,0,00:00:44/515-09:55:43,22) [migration/2]
(root,0,0,01:44:59/515-09:55:43,23) [ksoftirqd/2]
(root,0,0,00:00:00/515-09:55:43,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/515-09:55:43,26) [cpuhp/3]
(root,0,0,00:01:00/515-09:55:43,27) [migration/3]
(root,0,0,00:02:58/515-09:55:43,28) [ksoftirqd/3]
(root,0,0,00:00:00/515-09:55:43,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/515-09:55:43,31) [kdevtmpfs]
(root,0,0,00:00:00/515-09:55:43,32) [netns]
(root,0,0,00:00:00/515-09:55:43,33) [kauditd]
(root,0,0,00:00:09/515-09:55:43,34) [khungtaskd]
(root,0,0,00:00:00/515-09:55:43,35) [oom_reaper]
(root,0,0,00:00:00/515-09:55:43,36) [writeback]
(root,0,0,00:13:55/515-09:55:43,37) [kcompactd0]
(root,0,0,00:00:00/515-09:55:43,38) [ksmd]
(root,0,0,00:20:24/515-09:55:43,39) [khugepaged]
(root,0,0,00:00:00/515-09:55:43,58) [kintegrityd]
(root,0,0,00:00:00/515-09:55:43,59) [kblockd]
(root,0,0,00:00:00/515-09:55:43,60) [blkcg_punt_bio]
(root,0,0,00:00:00/515-09:55:43,61) [edac-poller]
(root,0,0,00:00:00/515-09:55:43,62) [devfreq_wq]
(root,0,0,00:06:38/515-09:55:43,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:19/515-09:55:42,65) [kswapd0]
(root,0,0,00:00:00/515-09:55:42,66) [kthrotld]
(root,0,0,00:00:00/515-09:55:42,67) [acpi_thermal_pm]
(root,0,0,00:04:28/515-09:55:42,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/515-09:55:42,70) [ipv6_addrconf]
(root,0,0,00:00:00/515-09:55:42,81) [kstrp]
(root,0,0,00:00:00/515-09:55:42,84) [zswap-shrink]
(root,0,0,00:00:00/515-09:55:42,85) [kworker/u9:0]
(root,0,0,00:03:26/515-09:55:42,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/515-09:55:42,135) [ata_sff]
(root,0,0,00:00:00/515-09:55:42,139) [scsi_eh_0]
(root,0,0,00:00:00/515-09:55:42,140) [scsi_tmf_0]
(root,0,0,00:00:00/515-09:55:42,141) [scsi_eh_1]
(root,0,0,00:00:00/515-09:55:42,142) [scsi_tmf_1]
(root,0,0,00:00:00/515-09:55:42,143) [scsi_eh_2]
(root,0,0,00:00:00/515-09:55:42,144) [scsi_tmf_2]
(root,0,0,00:00:00/515-09:55:42,145) [scsi_eh_3]
(root,0,0,00:00:00/515-09:55:42,146) [scsi_tmf_3]
(root,0,0,00:02:39/515-09:55:41,153) [kworker/3:1H-kblockd]
(root,0,0,00:15:02/515-09:55:40,183) [jbd2/sda1-8]
(root,0,0,00:00:00/515-09:55:40,184) [ext4-rsv-conver]
(root,231560,172904,1-06:39:55/515-09:55:40,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:34/515-09:55:40,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/515-09:55:40,291) [watchdogd]
(root,0,0,00:00:00/515-09:55:40,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:27/515-09:55:40,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/515-09:55:40,349) [card0-crtc0]
(root,0,0,00:00:00/515-09:55:40,350) [card0-crtc1]
(root,0,0,00:00:00/515-09:55:40,351) [card0-crtc2]
(root,0,0,00:00:00/515-09:55:40,353) [cryptd]
(root,8472,2688,00:02:46/515-09:55:40,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/515-09:55:40,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7712,07:35:53/515-09:55:40,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:55/515-09:55:40,374) /lib/systemd/systemd-logind
(root,10768,2484,01:34:19/515-09:55:40,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:38:09/515-09:55:39,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:23:15/515-09:55:39,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:12/515-09:55:39,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:33/4-15:22:33,1280) [kworker/0:2-cgroup_destroy]
(root,0,0,00:00:00/35:29,1574) [kworker/2:1]
(root,0,0,00:00:00/35:29,1588) [kworker/1:1-events]
(root,13320,6384,08:38:22/515-09:55:37,1740) sshd: /usr/sbin/sshd -D [listener] 12 of 10-100 startups
(root,6792,4584,00:16:47/515-09:55:37,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:06/515-09:55:36,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/515-09:55:29,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/515-09:55:29,1815) (sd-pam)
(root,0,0,00:00:00/34:58,2023) [kworker/u8:1-ext4-rsv-conversion]
(www-data,7028,3732,00:00:00/34:39,2066) /usr/sbin/apache2 -k start
(www-data,235924,10136,00:00:00/34:39,2067) /usr/sbin/apache2 -k start
(www-data,235932,12180,00:00:00/34:39,2068) /usr/sbin/apache2 -k start
(root,0,0,00:00:06/18:29:36,3384) [kworker/2:2-events]
(root,0,0,00:00:02/10:59:45,6541) [kworker/1:0-events_freezable]
(root,0,0,00:00:00/10:59:45,6542) [kworker/3:1]
(root,7252,3572,00:00:00/515-09:43:22,7652) /bin/login -p --
(root,9320,4052,00:00:00/515-09:43:16,7664) -bash
(root,0,0,00:00:14/4-23:37:33,10073) [kworker/3:2-mm_percpu_wq]
(root,0,0,00:00:00/01:15:10,12696) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/13:23,12917) [kworker/u8:3-flush-8:0]
(root,13320,6440,00:00:00/00:45,19808) sshd: [accepted]
(root,13320,6316,00:00:00/00:41,19815) sshd: [accepted]
(root,13320,6532,00:00:00/00:41,19818) sshd: [accepted]
(root,13320,6488,00:00:00/00:41,19820) sshd: [accepted]
(root,13320,6472,00:00:00/00:40,19822) sshd: [accepted]
(root,13320,6332,00:00:00/00:38,19829) sshd: [accepted]
(root,13320,6424,00:00:00/00:30,19853) sshd: [accepted]
(root,13320,6352,00:00:00/00:05,20086) sshd: [accepted]
(root,14464,7528,00:00:00/00:05,20087) sshd: unknown [priv]
(sshd,13320,4244,00:00:00/00:04,20088) sshd: unknown [net]
(root,14144,7376,00:00:00/00:04,20093) sshd: root [priv]
(sshd,13320,4396,00:00:00/00:04,20094) sshd: root [net]
(sshd,13320,4252,00:00:00/00:03,20096) sshd: [net]
(root,14144,7396,00:00:00/00:02,20098) sshd: root [priv]
(sshd,13320,4376,00:00:00/00:02,20099) sshd: root [net]
(root,14144,7124,00:00:00/00:02,20100) sshd: root [priv]
(sshd,13320,4244,00:00:00/00:02,20101) sshd: root [net]
(root,8692,3352,00:00:00/00:00,20372) /bin/bash /usr/bin/check_mk_agent
(root,6608,2768,00:00:00/00:00,20391) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1544,00:00:00/00:00,20392) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:19/1-17:28:00,21476) [kworker/0:1-events]
(root,5000,1376,00:00:00/515-09:13:16,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/486-05:31:41,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/375-16:09:19,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:47:39/375-16:09:19,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:16:38/375-16:09:19,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:16:11/375-16:09:19,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4892,08:17:25/375-16:09:19,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:56/375-16:09:19,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-29 23:35

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6f8dacbaf

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,9024,06:06:46/513-10:09:37,1) /sbin/init
(root,0,0,00:00:01/513-10:09:37,2) [kthreadd]
(root,0,0,00:00:00/513-10:09:37,3) [rcu_gp]
(root,0,0,00:00:00/513-10:09:37,4) [rcu_par_gp]
(root,0,0,00:00:00/513-10:09:37,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/513-10:09:37,8) [mm_percpu_wq]
(root,0,0,00:00:00/513-10:09:37,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/513-10:09:37,10) [rcu_tasks_trace]
(root,0,0,01:17:33/513-10:09:37,11) [ksoftirqd/0]
(root,0,0,12:20:14/513-10:09:37,12) [rcu_sched]
(root,0,0,00:00:48/513-10:09:37,13) [migration/0]
(root,0,0,00:00:00/513-10:09:37,15) [cpuhp/0]
(root,0,0,00:00:00/513-10:09:37,16) [cpuhp/1]
(root,0,0,00:00:59/513-10:09:37,17) [migration/1]
(root,0,0,00:04:07/513-10:09:37,18) [ksoftirqd/1]
(root,0,0,00:00:00/513-10:09:37,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/513-10:09:37,21) [cpuhp/2]
(root,0,0,00:00:44/513-10:09:37,22) [migration/2]
(root,0,0,01:44:22/513-10:09:37,23) [ksoftirqd/2]
(root,0,0,00:00:00/513-10:09:37,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/513-10:09:37,26) [cpuhp/3]
(root,0,0,00:01:00/513-10:09:37,27) [migration/3]
(root,0,0,00:02:58/513-10:09:37,28) [ksoftirqd/3]
(root,0,0,00:00:00/513-10:09:37,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/513-10:09:37,31) [kdevtmpfs]
(root,0,0,00:00:00/513-10:09:37,32) [netns]
(root,0,0,00:00:00/513-10:09:37,33) [kauditd]
(root,0,0,00:00:09/513-10:09:37,34) [khungtaskd]
(root,0,0,00:00:00/513-10:09:37,35) [oom_reaper]
(root,0,0,00:00:00/513-10:09:37,36) [writeback]
(root,0,0,00:13:30/513-10:09:37,37) [kcompactd0]
(root,0,0,00:00:00/513-10:09:37,38) [ksmd]
(root,0,0,00:20:18/513-10:09:37,39) [khugepaged]
(root,0,0,00:00:00/513-10:09:37,58) [kintegrityd]
(root,0,0,00:00:00/513-10:09:37,59) [kblockd]
(root,0,0,00:00:00/513-10:09:37,60) [blkcg_punt_bio]
(root,0,0,00:00:00/513-10:09:37,61) [edac-poller]
(root,0,0,00:00:00/513-10:09:37,62) [devfreq_wq]
(root,0,0,00:06:37/513-10:09:37,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:18/513-10:09:36,65) [kswapd0]
(root,0,0,00:00:00/513-10:09:36,66) [kthrotld]
(root,0,0,00:00:00/513-10:09:36,67) [acpi_thermal_pm]
(root,0,0,00:04:27/513-10:09:36,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/513-10:09:36,70) [ipv6_addrconf]
(root,0,0,00:00:00/513-10:09:36,81) [kstrp]
(root,0,0,00:00:00/513-10:09:36,84) [zswap-shrink]
(root,0,0,00:00:00/513-10:09:36,85) [kworker/u9:0]
(root,0,0,00:03:26/513-10:09:36,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/513-10:09:36,135) [ata_sff]
(root,0,0,00:00:00/513-10:09:36,139) [scsi_eh_0]
(root,0,0,00:00:00/513-10:09:36,140) [scsi_tmf_0]
(root,0,0,00:00:00/513-10:09:36,141) [scsi_eh_1]
(root,0,0,00:00:00/513-10:09:36,142) [scsi_tmf_1]
(root,0,0,00:00:00/513-10:09:36,143) [scsi_eh_2]
(root,0,0,00:00:00/513-10:09:36,144) [scsi_tmf_2]
(root,0,0,00:00:00/513-10:09:36,145) [scsi_eh_3]
(root,0,0,00:00:00/513-10:09:36,146) [scsi_tmf_3]
(root,0,0,00:02:39/513-10:09:35,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:59/513-10:09:34,183) [jbd2/sda1-8]
(root,0,0,00:00:00/513-10:09:34,184) [ext4-rsv-conver]
(root,313668,237448,1-06:32:52/513-10:09:34,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:34/513-10:09:34,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/513-10:09:34,291) [watchdogd]
(root,0,0,00:00:00/513-10:09:34,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:26/513-10:09:34,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/513-10:09:34,349) [card0-crtc0]
(root,0,0,00:00:00/513-10:09:34,350) [card0-crtc1]
(root,0,0,00:00:00/513-10:09:34,351) [card0-crtc2]
(root,0,0,00:00:00/513-10:09:34,353) [cryptd]
(root,8472,2688,00:02:45/513-10:09:34,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/513-10:09:34,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7712,07:34:14/513-10:09:34,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:54/513-10:09:34,374) /lib/systemd/systemd-logind
(root,10768,2484,01:33:56/513-10:09:34,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:33:52/513-10:09:33,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:23:09/513-10:09:33,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:09/513-10:09:33,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:30/2-15:36:27,1280) [kworker/0:2-events]
(root,13320,6384,08:36:19/513-10:09:31,1740) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,6792,4584,00:16:42/513-10:09:31,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:05/513-10:09:30,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/513-10:09:23,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/513-10:09:23,1815) (sd-pam)
(root,7252,3572,00:00:00/513-09:57:16,7652) /bin/login -p --
(root,9320,4052,00:00:00/513-09:57:10,7664) -bash
(root,0,0,00:00:08/2-23:51:27,10073) [kworker/3:2-events]
(root,0,0,00:00:00/01:03:59,16058) [kworker/u8:3-ext4-rsv-conversion]
(root,13320,6356,00:00:00/01:58,16705) sshd: [accepted]
(sshd,13320,4332,00:00:00/01:58,16706) sshd: [net]
(root,13320,6200,00:00:00/01:56,16713) sshd: [accepted]
(sshd,13320,4248,00:00:00/01:56,16714) sshd: [net]
(root,13320,6328,00:00:00/01:51,16724) sshd: [accepted]
(root,13320,6500,00:00:00/01:33,16747) sshd: [accepted]
(sshd,13320,4396,00:00:00/01:32,16748) sshd: [net]
(root,13320,6448,00:00:00/01:25,16931) sshd: [accepted]
(root,13320,6484,00:00:00/00:53,17267) sshd: [accepted]
(root,13320,6312,00:00:00/00:13,17697) sshd: [accepted]
(root,14144,7308,00:00:00/00:03,17716) sshd: root [priv]
(sshd,13320,4216,00:00:00/00:03,17717) sshd: root [net]
(root,14144,7300,00:00:00/00:01,17718) sshd: root [priv]
(sshd,13320,4256,00:00:00/00:01,17719) sshd: root [net]
(root,13320,6360,00:00:00/00:00,17747) sshd: [accepted]
(sshd,13320,4260,00:00:00/00:00,17755) sshd: [net]
(root,8692,3500,00:00:00/00:00,17899) /bin/bash /usr/bin/check_mk_agent
(root,6608,2760,00:00:00/00:00,17918) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1460,00:00:00/00:00,17919) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:57/6-16:56:10,18890) [kworker/2:2-events]
(root,0,0,00:00:00/06:00:15,19929) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/10:09:25,20676) [kworker/2:0]
(root,5000,1376,00:00:00/513-09:27:10,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/484-05:45:35,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:04/23:28:21,23214) [kworker/1:1-events_freezable]
(root,0,0,00:00:00/49:23,23583) [kworker/1:0-events]
(root,0,0,00:00:00/48:53,23835) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:00/48:43,23855) [kworker/0:1-events]
(www-data,7028,3732,00:00:00/48:33,23858) /usr/sbin/apache2 -k start
(www-data,236260,12176,00:00:00/48:33,23859) /usr/sbin/apache2 -k start
(www-data,236316,10136,00:00:00/48:33,23860) /usr/sbin/apache2 -k start
(zabbix,20484,1544,00:00:00/373-16:23:13,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:47:22/373-16:23:13,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:13:41/373-16:23:13,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:13:14/373-16:23:13,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4888,08:14:29/373-16:23:13,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:49/373-16:23:13,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/42:50,27450) [kworker/3:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-27 23:49

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6856b4cda

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,9024,06:05:24/511-10:37:15,1) /sbin/init
(root,0,0,00:00:01/511-10:37:15,2) [kthreadd]
(root,0,0,00:00:00/511-10:37:15,3) [rcu_gp]
(root,0,0,00:00:00/511-10:37:15,4) [rcu_par_gp]
(root,0,0,00:00:00/511-10:37:15,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/511-10:37:15,8) [mm_percpu_wq]
(root,0,0,00:00:00/511-10:37:15,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/511-10:37:15,10) [rcu_tasks_trace]
(root,0,0,01:17:07/511-10:37:15,11) [ksoftirqd/0]
(root,0,0,12:17:25/511-10:37:15,12) [rcu_sched]
(root,0,0,00:00:48/511-10:37:15,13) [migration/0]
(root,0,0,00:00:00/511-10:37:15,15) [cpuhp/0]
(root,0,0,00:00:00/511-10:37:15,16) [cpuhp/1]
(root,0,0,00:00:59/511-10:37:15,17) [migration/1]
(root,0,0,00:04:06/511-10:37:15,18) [ksoftirqd/1]
(root,0,0,00:00:00/511-10:37:15,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/511-10:37:15,21) [cpuhp/2]
(root,0,0,00:00:44/511-10:37:15,22) [migration/2]
(root,0,0,01:43:46/511-10:37:15,23) [ksoftirqd/2]
(root,0,0,00:00:00/511-10:37:15,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/511-10:37:15,26) [cpuhp/3]
(root,0,0,00:01:00/511-10:37:15,27) [migration/3]
(root,0,0,00:02:57/511-10:37:15,28) [ksoftirqd/3]
(root,0,0,00:00:00/511-10:37:15,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/511-10:37:15,31) [kdevtmpfs]
(root,0,0,00:00:00/511-10:37:15,32) [netns]
(root,0,0,00:00:00/511-10:37:15,33) [kauditd]
(root,0,0,00:00:09/511-10:37:15,34) [khungtaskd]
(root,0,0,00:00:00/511-10:37:15,35) [oom_reaper]
(root,0,0,00:00:00/511-10:37:15,36) [writeback]
(root,0,0,00:13:27/511-10:37:15,37) [kcompactd0]
(root,0,0,00:00:00/511-10:37:15,38) [ksmd]
(root,0,0,00:20:13/511-10:37:15,39) [khugepaged]
(root,0,0,00:00:00/511-10:37:15,58) [kintegrityd]
(root,0,0,00:00:00/511-10:37:15,59) [kblockd]
(root,0,0,00:00:00/511-10:37:15,60) [blkcg_punt_bio]
(root,0,0,00:00:00/511-10:37:15,61) [edac-poller]
(root,0,0,00:00:00/511-10:37:15,62) [devfreq_wq]
(root,0,0,00:06:35/511-10:37:15,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:18/511-10:37:14,65) [kswapd0]
(root,0,0,00:00:00/511-10:37:14,66) [kthrotld]
(root,0,0,00:00:00/511-10:37:14,67) [acpi_thermal_pm]
(root,0,0,00:04:26/511-10:37:14,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/511-10:37:14,70) [ipv6_addrconf]
(root,0,0,00:00:00/511-10:37:14,81) [kstrp]
(root,0,0,00:00:00/511-10:37:14,84) [zswap-shrink]
(root,0,0,00:00:00/511-10:37:14,85) [kworker/u9:0]
(root,0,0,00:03:25/511-10:37:14,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/511-10:37:14,135) [ata_sff]
(root,0,0,00:00:00/511-10:37:14,139) [scsi_eh_0]
(root,0,0,00:00:00/511-10:37:14,140) [scsi_tmf_0]
(root,0,0,00:00:00/511-10:37:14,141) [scsi_eh_1]
(root,0,0,00:00:00/511-10:37:14,142) [scsi_tmf_1]
(root,0,0,00:00:00/511-10:37:14,143) [scsi_eh_2]
(root,0,0,00:00:00/511-10:37:14,144) [scsi_tmf_2]
(root,0,0,00:00:00/511-10:37:14,145) [scsi_eh_3]
(root,0,0,00:00:00/511-10:37:14,146) [scsi_tmf_3]
(root,0,0,00:02:38/511-10:37:13,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:55/511-10:37:12,183) [jbd2/sda1-8]
(root,0,0,00:00:00/511-10:37:12,184) [ext4-rsv-conver]
(root,288856,220264,1-06:25:55/511-10:37:12,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:34/511-10:37:12,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/511-10:37:12,291) [watchdogd]
(root,0,0,00:00:00/511-10:37:12,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:26/511-10:37:12,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/511-10:37:12,349) [card0-crtc0]
(root,0,0,00:00:00/511-10:37:12,350) [card0-crtc1]
(root,0,0,00:00:00/511-10:37:12,351) [card0-crtc2]
(root,0,0,00:00:00/511-10:37:12,353) [cryptd]
(root,8472,2688,00:02:44/511-10:37:12,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/511-10:37:12,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7720,07:32:35/511-10:37:12,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:54/511-10:37:12,374) /lib/systemd/systemd-logind
(root,10768,2484,01:33:33/511-10:37:12,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:29:59/511-10:37:11,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:23:04/511-10:37:11,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:05/511-10:37:11,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/01:56:11,1180) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:07/16:04:05,1280) [kworker/0:2-events]
(root,0,0,00:00:00/16:04:05,1281) [kworker/1:2]
(root,13320,6384,08:34:20/511-10:37:09,1740) sshd: /usr/sbin/sshd -D [listener] 34 of 10-100 startups
(root,6792,4584,00:16:38/511-10:37:09,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:04/511-10:37:08,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/511-10:37:01,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/511-10:37:01,1815) (sd-pam)
(root,7252,3572,00:00:00/511-10:24:54,7652) /bin/login -p --
(root,9320,4052,00:00:00/511-10:24:48,7664) -bash
(root,0,0,00:00:17/3-13:12:17,8123) [kworker/1:1-mm_percpu_wq]
(root,0,0,00:00:00/01:42:47,8268) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:02/1-00:19:05,10073) [kworker/3:2-mm_percpu_wq]
(root,0,0,00:00:00/36:55,12141) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:40/4-17:23:48,18890) [kworker/2:2-events]
(root,5000,1376,00:00:00/511-09:54:48,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/01:17:00,22041) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/01:16:20,22724) [kworker/2:0]
(www-data,7028,3732,00:00:00/01:16:10,22744) /usr/sbin/apache2 -k start
(www-data,236260,12180,00:00:00/01:16:10,22745) /usr/sbin/apache2 -k start
(www-data,236036,16264,00:00:00/01:16:10,22746) /usr/sbin/apache2 -k start
(root,5000,1508,00:00:00/482-06:13:13,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/371-16:50:51,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:47:07/371-16:50:51,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:10:55/371-16:50:51,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:10:27/371-16:50:51,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4888,08:11:41/371-16:50:51,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:42/371-16:50:51,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/2-14:00:34,29805) [kworker/0:0-events]
(root,13320,6548,00:00:00/01:58,30781) sshd: [accepted]
(root,13320,6624,00:00:00/01:32,30838) sshd: [accepted]
(root,13320,6412,00:00:00/01:31,30841) sshd: [accepted]
(root,13320,6428,00:00:00/01:31,30843) sshd: [accepted]
(root,13320,6532,00:00:00/00:58,31250) sshd: [accepted]
(root,14144,7584,00:00:00/00:58,31254) sshd: root [priv]
(root,13320,6212,00:00:00/00:58,31255) sshd: [accepted]
(sshd,13320,4380,00:00:00/00:58,31256) sshd: root [net]
(root,14144,7584,00:00:00/00:58,31257) sshd: root [priv]
(sshd,13320,4316,00:00:00/00:58,31258) sshd: root [net]
(root,13320,6492,00:00:00/00:58,31259) sshd: [accepted]
(root,13320,6508,00:00:00/00:58,31262) sshd: [accepted]
(root,14144,7560,00:00:00/00:58,31263) sshd: root [priv]
(sshd,13320,4352,00:00:00/00:58,31264) sshd: root [net]
(root,13320,6488,00:00:00/00:58,31265) sshd: [accepted]
(root,13320,6516,00:00:00/00:57,31268) sshd: [accepted]
(root,13320,6448,00:00:00/00:57,31271) sshd: [accepted]
(root,13320,6492,00:00:00/00:57,31272) sshd: [accepted]
(root,13320,6392,00:00:00/00:45,31295) sshd: [accepted]
(sshd,13320,4212,00:00:00/00:45,31296) sshd: [net]
(root,13320,6416,00:00:00/00:41,31303) sshd: [accepted]
(root,13320,6476,00:00:00/00:39,31308) sshd: [accepted]
(root,13320,6440,00:00:00/00:38,31309) sshd: [accepted]
(sshd,13320,4312,00:00:00/00:37,31319) sshd: [net]
(root,13320,6412,00:00:00/00:36,31322) sshd: [accepted]
(root,13320,6564,00:00:00/00:34,31332) sshd: [accepted]
(root,13320,6412,00:00:00/00:29,31343) sshd: [accepted]
(root,13320,6376,00:00:00/00:28,31347) sshd: [accepted]
(root,13320,6388,00:00:00/00:26,31348) sshd: [accepted]
(root,13320,6424,00:00:00/00:25,31349) sshd: [accepted]
(root,13320,6472,00:00:00/00:25,31354) sshd: [accepted]
(sshd,13320,4276,00:00:00/00:24,31356) sshd: [net]
(root,13320,6320,00:00:00/00:24,31359) sshd: [accepted]
(root,0,0,00:00:00/00:18,31541) [kworker/u8:0-flush-8:0]
(root,14144,7584,00:00:00/00:16,31544) sshd: root [priv]
(root,13320,6408,00:00:00/00:16,31545) sshd: [accepted]
(sshd,13320,4380,00:00:00/00:13,31552) sshd: root [net]
(root,14464,7684,00:00:00/00:03,31565) sshd: unknown [priv]
(sshd,13320,4512,00:00:00/00:03,31566) sshd: unknown [net]
(root,13320,6480,00:00:00/00:02,31567) sshd: [accepted]
(root,14464,7668,00:00:00/00:01,31568) sshd: unknown [priv]
(sshd,13320,4264,00:00:00/00:01,31569) sshd: unknown [net]
(root,13320,6452,00:00:00/00:00,31741) sshd: [accepted]
(sshd,13320,4312,00:00:00/00:00,31750) sshd: [net]
(root,13320,6516,00:00:00/00:00,31859) sshd: [accepted]
(root,8692,3444,00:00:00/00:00,31860) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,31879) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1512,00:00:00/00:00,31880) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-26 00:17

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6a1d25b4f

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,8992,06:03:26/509-09:36:44,1) /sbin/init
(root,0,0,00:00:01/509-09:36:44,2) [kthreadd]
(root,0,0,00:00:00/509-09:36:44,3) [rcu_gp]
(root,0,0,00:00:00/509-09:36:44,4) [rcu_par_gp]
(root,0,0,00:00:00/509-09:36:44,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/509-09:36:44,8) [mm_percpu_wq]
(root,0,0,00:00:00/509-09:36:44,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/509-09:36:44,10) [rcu_tasks_trace]
(root,0,0,01:16:42/509-09:36:44,11) [ksoftirqd/0]
(root,0,0,12:14:30/509-09:36:44,12) [rcu_sched]
(root,0,0,00:00:48/509-09:36:44,13) [migration/0]
(root,0,0,00:00:00/509-09:36:44,15) [cpuhp/0]
(root,0,0,00:00:00/509-09:36:44,16) [cpuhp/1]
(root,0,0,00:00:59/509-09:36:44,17) [migration/1]
(root,0,0,00:04:05/509-09:36:44,18) [ksoftirqd/1]
(root,0,0,00:00:00/509-09:36:44,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/509-09:36:44,21) [cpuhp/2]
(root,0,0,00:00:44/509-09:36:44,22) [migration/2]
(root,0,0,01:43:08/509-09:36:44,23) [ksoftirqd/2]
(root,0,0,00:00:00/509-09:36:44,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/509-09:36:44,26) [cpuhp/3]
(root,0,0,00:00:59/509-09:36:44,27) [migration/3]
(root,0,0,00:02:56/509-09:36:44,28) [ksoftirqd/3]
(root,0,0,00:00:00/509-09:36:44,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/509-09:36:44,31) [kdevtmpfs]
(root,0,0,00:00:00/509-09:36:44,32) [netns]
(root,0,0,00:00:00/509-09:36:44,33) [kauditd]
(root,0,0,00:00:09/509-09:36:44,34) [khungtaskd]
(root,0,0,00:00:00/509-09:36:44,35) [oom_reaper]
(root,0,0,00:00:00/509-09:36:44,36) [writeback]
(root,0,0,00:13:24/509-09:36:44,37) [kcompactd0]
(root,0,0,00:00:00/509-09:36:44,38) [ksmd]
(root,0,0,00:20:08/509-09:36:44,39) [khugepaged]
(root,0,0,00:00:00/509-09:36:44,58) [kintegrityd]
(root,0,0,00:00:00/509-09:36:44,59) [kblockd]
(root,0,0,00:00:00/509-09:36:44,60) [blkcg_punt_bio]
(root,0,0,00:00:00/509-09:36:44,61) [edac-poller]
(root,0,0,00:00:00/509-09:36:44,62) [devfreq_wq]
(root,0,0,00:06:33/509-09:36:44,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:18/509-09:36:43,65) [kswapd0]
(root,0,0,00:00:00/509-09:36:43,66) [kthrotld]
(root,0,0,00:00:00/509-09:36:43,67) [acpi_thermal_pm]
(root,0,0,00:04:25/509-09:36:43,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/509-09:36:43,70) [ipv6_addrconf]
(root,0,0,00:00:00/509-09:36:43,81) [kstrp]
(root,0,0,00:00:00/509-09:36:43,84) [zswap-shrink]
(root,0,0,00:00:00/509-09:36:43,85) [kworker/u9:0]
(root,0,0,00:03:24/509-09:36:43,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/509-09:36:43,135) [ata_sff]
(root,0,0,00:00:00/509-09:36:43,139) [scsi_eh_0]
(root,0,0,00:00:00/509-09:36:43,140) [scsi_tmf_0]
(root,0,0,00:00:00/509-09:36:43,141) [scsi_eh_1]
(root,0,0,00:00:00/509-09:36:43,142) [scsi_tmf_1]
(root,0,0,00:00:00/509-09:36:43,143) [scsi_eh_2]
(root,0,0,00:00:00/509-09:36:43,144) [scsi_tmf_2]
(root,0,0,00:00:00/509-09:36:43,145) [scsi_eh_3]
(root,0,0,00:00:00/509-09:36:43,146) [scsi_tmf_3]
(root,0,0,00:02:37/509-09:36:42,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:51/509-09:36:41,183) [jbd2/sda1-8]
(root,0,0,00:00:00/509-09:36:41,184) [ext4-rsv-conver]
(root,79960,35240,1-06:17:24/509-09:36:41,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:34/509-09:36:41,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/509-09:36:41,291) [watchdogd]
(root,0,0,00:00:00/509-09:36:41,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:25/509-09:36:41,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/509-09:36:41,349) [card0-crtc0]
(root,0,0,00:00:00/509-09:36:41,350) [card0-crtc1]
(root,0,0,00:00:00/509-09:36:41,351) [card0-crtc2]
(root,0,0,00:00:00/509-09:36:41,353) [cryptd]
(root,8472,2688,00:02:43/509-09:36:41,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/509-09:36:41,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7724,07:30:31/509-09:36:41,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:54/509-09:36:41,374) /lib/systemd/systemd-logind
(root,10768,2484,01:33:09/509-09:36:41,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:25:31/509-09:36:40,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:57/509-09:36:40,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:13:02/509-09:36:40,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/2-00:16:29,1033) [kworker/1:0-events]
(root,13320,6384,08:31:57/509-09:36:38,1740) sshd: /usr/sbin/sshd -D [listener] 45 of 10-100 startups
(root,6792,4584,00:16:34/509-09:36:38,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:03/509-09:36:37,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/509-09:36:30,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/509-09:36:30,1815) (sd-pam)
(www-data,7028,3732,00:00:00/15:39,2350) /usr/sbin/apache2 -k start
(www-data,236148,12180,00:00:00/15:39,2351) /usr/sbin/apache2 -k start
(www-data,236372,10136,00:00:00/15:39,2352) /usr/sbin/apache2 -k start
(root,7252,3572,00:00:00/509-09:24:23,7652) /bin/login -p --
(root,9320,4052,00:00:00/509-09:24:17,7664) -bash
(root,0,0,00:00:07/1-12:11:46,8123) [kworker/1:1-events]
(root,0,0,00:00:00/03:47,9442) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/03:16,9677) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:10/3-18:01:56,11892) [kworker/3:1-events]
(root,13320,6420,00:00:00/01:34,12536) sshd: [accepted]
(root,13320,6448,00:00:00/00:47,13720) sshd: [accepted]
(root,14144,7408,00:00:00/00:04,14945) sshd: root [priv]
(root,14464,7672,00:00:00/00:04,14946) sshd: unknown [priv]
(root,14464,7688,00:00:00/00:04,14947) sshd: unknown [priv]
(root,14464,7736,00:00:00/00:04,14948) sshd: unknown [priv]
(sshd,13320,4332,00:00:00/00:04,14949) sshd: unknown [net]
(sshd,13320,4324,00:00:00/00:04,14950) sshd: unknown [net]
(sshd,13320,4300,00:00:00/00:04,14951) sshd: root [net]
(root,14464,7732,00:00:00/00:04,14952) sshd: unknown [priv]
(root,14464,7636,00:00:00/00:04,14953) sshd: unknown [priv]
(root,14464,7572,00:00:00/00:04,14954) sshd: unknown [priv]
(root,14464,7644,00:00:00/00:04,14955) sshd: unknown [priv]
(root,14464,7668,00:00:00/00:04,14956) sshd: unknown [priv]
(root,14464,7576,00:00:00/00:04,14957) sshd: unknown [priv]
(sshd,13320,4288,00:00:00/00:04,14958) sshd: unknown [net]
(root,14464,7660,00:00:00/00:04,14959) sshd: unknown [priv]
(root,14464,7640,00:00:00/00:04,14960) sshd: unknown [priv]
(sshd,13320,4284,00:00:00/00:04,14961) sshd: unknown [net]
(sshd,13320,4376,00:00:00/00:04,14962) sshd: unknown [net]
(root,14144,7528,00:00:00/00:04,14963) sshd: root [priv]
(sshd,13320,4268,00:00:00/00:04,14964) sshd: unknown [net]
(sshd,13320,4204,00:00:00/00:04,14965) sshd: unknown [net]
(sshd,13320,4400,00:00:00/00:04,14966) sshd: unknown [net]
(sshd,13320,4228,00:00:00/00:04,14967) sshd: unknown [net]
(sshd,13320,4408,00:00:00/00:04,14968) sshd: unknown [net]
(sshd,13320,4260,00:00:00/00:04,14969) sshd: unknown [net]
(sshd,13320,4344,00:00:00/00:04,14970) sshd: root [net]
(root,14144,7236,00:00:00/00:03,14971) sshd: root [priv]
(sshd,13320,4308,00:00:00/00:03,14972) sshd: root [net]
(root,14144,7440,00:00:00/00:03,14974) sshd: root [priv]
(sshd,13320,4268,00:00:00/00:03,14975) sshd: root [net]
(root,14464,7612,00:00:00/00:03,14976) sshd: unknown [priv]
(root,14144,7452,00:00:00/00:03,14977) sshd: root [priv]
(root,14464,7592,00:00:00/00:03,14978) sshd: unknown [priv]
(root,14464,7680,00:00:00/00:03,14979) sshd: unknown [priv]
(root,14464,7672,00:00:00/00:03,14980) sshd: unknown [priv]
(root,14464,7728,00:00:00/00:03,14981) sshd: unknown [priv]
(sshd,13320,4372,00:00:00/00:02,14982) sshd: root [net]
(root,14464,7640,00:00:00/00:02,14983) sshd: unknown [priv]
(root,14464,7592,00:00:00/00:02,14984) sshd: unknown [priv]
(root,14464,7636,00:00:00/00:02,14985) sshd: unknown [priv]
(root,14464,7640,00:00:00/00:02,14986) sshd: unknown [priv]
(root,14464,7732,00:00:00/00:02,14987) sshd: unknown [priv]
(root,14464,7740,00:00:00/00:02,14988) sshd: unknown [priv]
(sshd,13320,4376,00:00:00/00:02,14989) sshd: unknown [net]
(sshd,13320,4392,00:00:00/00:02,14990) sshd: unknown [net]
(sshd,13320,4276,00:00:00/00:02,14991) sshd: unknown [net]
(sshd,13320,4332,00:00:00/00:02,14992) sshd: unknown [net]
(sshd,13320,4264,00:00:00/00:02,14993) sshd: unknown [net]
(sshd,13320,4332,00:00:00/00:02,14994) sshd: unknown [net]
(sshd,13320,4196,00:00:00/00:02,14995) sshd: unknown [net]
(sshd,13320,4304,00:00:00/00:02,14996) sshd: unknown [net]
(sshd,13320,4384,00:00:00/00:02,14997) sshd: unknown [net]
(sshd,13320,4256,00:00:00/00:02,14998) sshd: unknown [net]
(sshd,13320,4228,00:00:00/00:02,14999) sshd: unknown [net]
(root,14144,7556,00:00:00/00:02,15000) sshd: root [priv]
(root,14144,7508,00:00:00/00:02,15001) sshd: root [priv]
(sshd,13320,4332,00:00:00/00:02,15002) sshd: root [net]
(sshd,13320,4264,00:00:00/00:02,15003) sshd: root [net]
(root,14464,7712,00:00:00/00:02,15004) sshd: unknown [priv]
(sshd,13320,4328,00:00:00/00:01,15005) sshd: unknown [net]
(root,14624,7476,00:00:00/00:01,15006) sshd: unknown [priv]
(root,14624,7660,00:00:00/00:01,15007) sshd: unknown [priv]
(root,14624,7620,00:00:00/00:01,15008) sshd: unknown [priv]
(root,14624,7608,00:00:00/00:01,15009) sshd: unknown [priv]
(root,14624,7644,00:00:00/00:01,15010) sshd: unknown [priv]
(root,14624,7536,00:00:00/00:01,15011) sshd: unknown [priv]
(root,14624,7572,00:00:00/00:01,15012) sshd: unknown [priv]
(root,14624,7492,00:00:00/00:01,15013) sshd: unknown [priv]
(root,14624,7624,00:00:00/00:01,15014) sshd: unknown [priv]
(root,14624,7668,00:00:00/00:01,15015) sshd: unknown [priv]
(sshd,13320,4260,00:00:00/00:01,15016) sshd: unknown [net]
(sshd,13320,4512,00:00:00/00:01,15017) sshd: unknown [net]
(sshd,13320,4256,00:00:00/00:01,15018) sshd: unknown [net]
(sshd,13320,4388,00:00:00/00:01,15019) sshd: unknown [net]
(sshd,13320,4380,00:00:00/00:01,15020) sshd: unknown [net]
(sshd,13320,4248,00:00:00/00:01,15021) sshd: unknown [net]
(sshd,13320,4340,00:00:00/00:01,15022) sshd: unknown [net]
(sshd,13320,4360,00:00:00/00:01,15023) sshd: unknown [net]
(sshd,13320,4396,00:00:00/00:01,15024) sshd: unknown [net]
(sshd,13320,4148,00:00:00/00:01,15025) sshd: unknown [net]
(root,30556,20556,00:00:00/00:01,15026) sshd: root [priv]
(sshd,13320,4364,00:00:00/00:01,15027) sshd: root [net]
(root,14380,7628,00:00:00/00:01,15028) sshd: unknown [priv]
(sshd,13320,4336,00:00:00/00:01,15029) sshd: unknown [net]
(root,13320,6224,00:00:00/00:01,15030) sshd: [accepted]
(sshd,13320,4244,00:00:00/00:00,15031) sshd: [net]
(root,8692,3356,00:00:00/00:00,15069) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,15088) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1528,00:00:00/00:00,15089) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:29/2-11:59:04,17708) [kworker/0:1-events]
(root,0,0,00:00:22/2-16:23:17,18890) [kworker/2:2-events]
(root,5000,1376,00:00:00/509-08:54:17,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/480-05:12:42,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/369-15:50:20,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:46:50/369-15:50:20,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:07:54/369-15:50:20,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:07:26/369-15:50:20,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4888,08:08:40/369-15:50:20,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:35/369-15:50:20,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/03:23:49,26509) [kworker/3:2-events]
(root,0,0,00:00:00/13:00:03,29805) [kworker/0:0-events]
(root,0,0,00:00:00/1-00:16:30,30275) [kworker/2:1-events]
(root,0,0,00:00:00/19:35,32623) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/02:16:00,32626) [kworker/u8:0-ext4-rsv-conversion]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-23 23:16

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc69b9cf887

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,8992,06:01:50/507-10:18:45,1) /sbin/init
(root,0,0,00:00:01/507-10:18:45,2) [kthreadd]
(root,0,0,00:00:00/507-10:18:45,3) [rcu_gp]
(root,0,0,00:00:00/507-10:18:45,4) [rcu_par_gp]
(root,0,0,00:00:00/507-10:18:45,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/507-10:18:45,8) [mm_percpu_wq]
(root,0,0,00:00:00/507-10:18:45,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/507-10:18:45,10) [rcu_tasks_trace]
(root,0,0,01:16:17/507-10:18:45,11) [ksoftirqd/0]
(root,0,0,12:11:59/507-10:18:45,12) [rcu_sched]
(root,0,0,00:00:47/507-10:18:45,13) [migration/0]
(root,0,0,00:00:00/507-10:18:45,15) [cpuhp/0]
(root,0,0,00:00:00/507-10:18:45,16) [cpuhp/1]
(root,0,0,00:00:58/507-10:18:45,17) [migration/1]
(root,0,0,00:04:04/507-10:18:45,18) [ksoftirqd/1]
(root,0,0,00:00:00/507-10:18:45,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/507-10:18:45,21) [cpuhp/2]
(root,0,0,00:00:43/507-10:18:45,22) [migration/2]
(root,0,0,01:42:40/507-10:18:45,23) [ksoftirqd/2]
(root,0,0,00:00:00/507-10:18:45,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/507-10:18:45,26) [cpuhp/3]
(root,0,0,00:00:59/507-10:18:45,27) [migration/3]
(root,0,0,00:02:55/507-10:18:45,28) [ksoftirqd/3]
(root,0,0,00:00:00/507-10:18:45,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/507-10:18:45,31) [kdevtmpfs]
(root,0,0,00:00:00/507-10:18:45,32) [netns]
(root,0,0,00:00:00/507-10:18:45,33) [kauditd]
(root,0,0,00:00:09/507-10:18:45,34) [khungtaskd]
(root,0,0,00:00:00/507-10:18:45,35) [oom_reaper]
(root,0,0,00:00:00/507-10:18:45,36) [writeback]
(root,0,0,00:12:41/507-10:18:45,37) [kcompactd0]
(root,0,0,00:00:00/507-10:18:45,38) [ksmd]
(root,0,0,00:20:03/507-10:18:45,39) [khugepaged]
(root,0,0,00:00:00/507-10:18:45,58) [kintegrityd]
(root,0,0,00:00:00/507-10:18:45,59) [kblockd]
(root,0,0,00:00:00/507-10:18:45,60) [blkcg_punt_bio]
(root,0,0,00:00:00/507-10:18:45,61) [edac-poller]
(root,0,0,00:00:00/507-10:18:45,62) [devfreq_wq]
(root,0,0,00:06:32/507-10:18:45,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:18/507-10:18:44,65) [kswapd0]
(root,0,0,00:00:00/507-10:18:44,66) [kthrotld]
(root,0,0,00:00:00/507-10:18:44,67) [acpi_thermal_pm]
(root,0,0,00:04:24/507-10:18:44,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/507-10:18:44,70) [ipv6_addrconf]
(root,0,0,00:00:00/507-10:18:44,81) [kstrp]
(root,0,0,00:00:00/507-10:18:44,84) [zswap-shrink]
(root,0,0,00:00:00/507-10:18:44,85) [kworker/u9:0]
(root,0,0,00:03:23/507-10:18:44,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/507-10:18:44,135) [ata_sff]
(root,0,0,00:00:00/507-10:18:44,139) [scsi_eh_0]
(root,0,0,00:00:00/507-10:18:44,140) [scsi_tmf_0]
(root,0,0,00:00:00/507-10:18:44,141) [scsi_eh_1]
(root,0,0,00:00:00/507-10:18:44,142) [scsi_tmf_1]
(root,0,0,00:00:00/507-10:18:44,143) [scsi_eh_2]
(root,0,0,00:00:00/507-10:18:44,144) [scsi_tmf_2]
(root,0,0,00:00:00/507-10:18:44,145) [scsi_eh_3]
(root,0,0,00:00:00/507-10:18:44,146) [scsi_tmf_3]
(root,0,0,00:02:37/507-10:18:43,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:47/507-10:18:42,183) [jbd2/sda1-8]
(root,0,0,00:00:00/507-10:18:42,184) [ext4-rsv-conver]
(root,88208,47876,1-06:10:08/507-10:18:42,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:34/507-10:18:42,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/507-10:18:42,291) [watchdogd]
(root,0,0,00:00:00/507-10:18:42,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:25/507-10:18:42,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/507-10:18:42,349) [card0-crtc0]
(root,0,0,00:00:00/507-10:18:42,350) [card0-crtc1]
(root,0,0,00:00:00/507-10:18:42,351) [card0-crtc2]
(root,0,0,00:00:00/507-10:18:42,353) [cryptd]
(root,8472,2688,00:02:43/507-10:18:42,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/507-10:18:42,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7724,07:28:42/507-10:18:42,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:54/507-10:18:42,374) /lib/systemd/systemd-logind
(root,10768,2484,01:32:47/507-10:18:42,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:22:01/507-10:18:41,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:52/507-10:18:41,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:59/507-10:18:41,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/58:30,1033) [kworker/1:0-events]
(root,0,0,00:00:00/58:29,1051) [kworker/2:0]
(root,13320,6340,00:00:00/01:02,1262) sshd: [accepted]
(www-data,7028,3732,00:00:00/57:39,1364) /usr/sbin/apache2 -k start
(www-data,235988,8092,00:00:00/57:39,1365) /usr/sbin/apache2 -k start
(www-data,236044,8088,00:00:00/57:39,1366) /usr/sbin/apache2 -k start
(root,13320,6424,00:00:00/00:56,1505) sshd: [accepted]
(root,13320,6384,08:29:57/507-10:18:39,1740) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,6792,4584,00:16:30/507-10:18:39,1748) /usr/sbin/apache2 -k start
(root,13320,6368,00:00:00/00:14,1770) sshd: [accepted]
(root,14464,7660,00:00:00/00:05,1798) sshd: unknown [priv]
(sshd,13320,4384,00:00:00/00:05,1799) sshd: unknown [net]
(root,14144,7464,00:00:00/00:04,1801) sshd: root [priv]
(sshd,13320,4332,00:00:00/00:04,1802) sshd: root [net]
(root,14144,7528,00:00:00/00:03,1804) sshd: root [priv]
(sshd,13320,4344,00:00:00/00:03,1805) sshd: root [net]
(root,14144,7400,00:00:00/00:02,1806) sshd: root [priv]
(root,9832,2396,00:04:02/507-10:18:38,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(sshd,13320,4320,00:00:00/00:02,1808) sshd: root [net]
(root,13320,6524,00:00:00/00:01,1809) sshd: [accepted]
(sshd,13320,4336,00:00:00/00:01,1810) sshd: [net]
(root,13320,6500,00:00:00/00:01,1811) sshd: [accepted]
(sshd,13320,4492,00:00:00/00:00,1812) sshd: [net]
(root,14464,7712,00:00:00/00:00,1813) sshd: unknown [priv]
(root,15252,7408,00:00:00/507-10:18:31,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/507-10:18:31,1815) (sd-pam)
(sshd,13320,4380,00:00:00/00:00,1816) sshd: unknown [net]
(root,8692,3404,00:00:00/00:00,1866) /bin/bash /usr/bin/check_mk_agent
(root,6608,2748,00:00:00/00:00,1885) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1596,00:00:00/00:00,1886) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,7252,3572,00:00:00/507-10:06:24,7652) /bin/login -p --
(root,0,0,00:00:00/45:51,7654) [kworker/u8:1-ext4-rsv-conversion]
(root,9320,4052,00:00:00/507-10:06:18,7664) -bash
(root,0,0,00:00:04/1-18:43:57,11892) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:03/18:23:03,13139) [kworker/1:2-events]
(root,0,0,00:00:00/18:16:45,16747) [kworker/3:0-events]
(root,0,0,00:00:03/18:16:45,16787) [kworker/0:0-events]
(root,0,0,00:00:06/12:41:05,17708) [kworker/0:1-events]
(root,0,0,00:00:06/17:05:18,18890) [kworker/2:2-events]
(root,5000,1376,00:00:00/507-09:36:18,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/478-05:54:43,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/367-16:32:21,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:46:35/367-16:32:21,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:05:18/367-16:32:21,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:04:50/367-16:32:21,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4888,08:06:04/367-16:32:21,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:28/367-16:32:21,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/09:08,28917) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/04:54:53,31029) [kworker/u8:3-ext4-rsv-conversion]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-21 23:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6805a2b95

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9004,06:00:22/505-09:02:46,1) /sbin/init
(root,0,0,00:00:01/505-09:02:46,2) [kthreadd]
(root,0,0,00:00:00/505-09:02:46,3) [rcu_gp]
(root,0,0,00:00:00/505-09:02:46,4) [rcu_par_gp]
(root,0,0,00:00:00/505-09:02:46,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/505-09:02:46,8) [mm_percpu_wq]
(root,0,0,00:00:00/505-09:02:46,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/505-09:02:46,10) [rcu_tasks_trace]
(root,0,0,01:15:48/505-09:02:46,11) [ksoftirqd/0]
(root,0,0,12:09:20/505-09:02:46,12) [rcu_sched]
(root,0,0,00:00:47/505-09:02:46,13) [migration/0]
(root,0,0,00:00:00/505-09:02:46,15) [cpuhp/0]
(root,0,0,00:00:00/505-09:02:46,16) [cpuhp/1]
(root,0,0,00:00:58/505-09:02:46,17) [migration/1]
(root,0,0,00:04:03/505-09:02:46,18) [ksoftirqd/1]
(root,0,0,00:00:00/505-09:02:46,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/505-09:02:46,21) [cpuhp/2]
(root,0,0,00:00:43/505-09:02:46,22) [migration/2]
(root,0,0,01:42:13/505-09:02:46,23) [ksoftirqd/2]
(root,0,0,00:00:00/505-09:02:46,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/505-09:02:46,26) [cpuhp/3]
(root,0,0,00:00:59/505-09:02:46,27) [migration/3]
(root,0,0,00:02:55/505-09:02:46,28) [ksoftirqd/3]
(root,0,0,00:00:00/505-09:02:46,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/505-09:02:46,31) [kdevtmpfs]
(root,0,0,00:00:00/505-09:02:46,32) [netns]
(root,0,0,00:00:00/505-09:02:46,33) [kauditd]
(root,0,0,00:00:09/505-09:02:46,34) [khungtaskd]
(root,0,0,00:00:00/505-09:02:46,35) [oom_reaper]
(root,0,0,00:00:00/505-09:02:46,36) [writeback]
(root,0,0,00:11:58/505-09:02:46,37) [kcompactd0]
(root,0,0,00:00:00/505-09:02:46,38) [ksmd]
(root,0,0,00:19:58/505-09:02:46,39) [khugepaged]
(root,0,0,00:00:00/505-09:02:46,58) [kintegrityd]
(root,0,0,00:00:00/505-09:02:46,59) [kblockd]
(root,0,0,00:00:00/505-09:02:46,60) [blkcg_punt_bio]
(root,0,0,00:00:00/505-09:02:46,61) [edac-poller]
(root,0,0,00:00:00/505-09:02:46,62) [devfreq_wq]
(root,0,0,00:06:30/505-09:02:46,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:17/505-09:02:45,65) [kswapd0]
(root,0,0,00:00:00/505-09:02:45,66) [kthrotld]
(root,0,0,00:00:00/505-09:02:45,67) [acpi_thermal_pm]
(root,0,0,00:04:23/505-09:02:45,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/505-09:02:45,70) [ipv6_addrconf]
(root,0,0,00:00:00/505-09:02:45,81) [kstrp]
(root,0,0,00:00:00/505-09:02:45,84) [zswap-shrink]
(root,0,0,00:00:00/505-09:02:45,85) [kworker/u9:0]
(root,0,0,00:03:22/505-09:02:45,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/505-09:02:45,135) [ata_sff]
(root,0,0,00:00:00/505-09:02:45,139) [scsi_eh_0]
(root,0,0,00:00:00/505-09:02:45,140) [scsi_tmf_0]
(root,0,0,00:00:00/505-09:02:45,141) [scsi_eh_1]
(root,0,0,00:00:00/505-09:02:45,142) [scsi_tmf_1]
(root,0,0,00:00:00/505-09:02:45,143) [scsi_eh_2]
(root,0,0,00:00:00/505-09:02:45,144) [scsi_tmf_2]
(root,0,0,00:00:00/505-09:02:45,145) [scsi_eh_3]
(root,0,0,00:00:00/505-09:02:45,146) [scsi_tmf_3]
(root,0,0,00:02:36/505-09:02:44,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:44/505-09:02:43,183) [jbd2/sda1-8]
(root,0,0,00:00:00/505-09:02:43,184) [ext4-rsv-conver]
(root,170112,116500,1-06:03:21/505-09:02:43,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:34/505-09:02:43,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/505-09:02:43,291) [watchdogd]
(root,0,0,00:00:00/505-09:02:43,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:24/505-09:02:43,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/505-09:02:43,349) [card0-crtc0]
(root,0,0,00:00:00/505-09:02:43,350) [card0-crtc1]
(root,0,0,00:00:00/505-09:02:43,351) [card0-crtc2]
(root,0,0,00:00:00/505-09:02:43,353) [cryptd]
(root,8472,2688,00:02:42/505-09:02:43,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/505-09:02:43,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7724,07:27:04/505-09:02:43,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:53/505-09:02:43,374) /lib/systemd/systemd-logind
(root,10768,2484,01:32:24/505-09:02:43,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:18:40/505-09:02:42,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:46/505-09:02:42,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:56/505-09:02:42,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:48/5-17:31:55,1662) [kworker/2:1-events]
(root,13320,6384,08:28:02/505-09:02:40,1740) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,6792,4584,00:16:26/505-09:02:40,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:01/505-09:02:39,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/505-09:02:32,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/505-09:02:32,1815) (sd-pam)
(root,7252,3572,00:00:00/505-08:50:25,7652) /bin/login -p --
(root,9320,4052,00:00:00/505-08:50:19,7664) -bash
(root,0,0,00:00:00/23:42:29,8421) [kworker/3:1-events]
(www-data,7028,3732,00:00:00/23:41:39,8815) /usr/sbin/apache2 -k start
(www-data,236484,12180,00:00:01/23:41:39,8816) /usr/sbin/apache2 -k start
(www-data,236468,8092,00:00:01/23:41:39,8817) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/08:40:47,10929) [kworker/0:1-events]
(root,0,0,00:00:06/1-11:28:53,11652) [kworker/1:3-events]
(root,0,0,00:00:00/18:21:51,13233) [kworker/2:0]
(root,0,0,00:00:00/03:13:28,17268) [kworker/u8:0-ext4-rsv-conversion]
(root,5000,1376,00:00:00/505-08:20:19,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/01:02:54,22315) [kworker/u8:2-flush-8:0]
(root,13320,6396,00:00:00/01:31,23025) sshd: [accepted]
(root,5000,1508,00:00:00/476-04:38:44,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,13320,6460,00:00:00/01:25,23275) sshd: [accepted]
(root,13320,6232,00:00:00/01:06,23339) sshd: [accepted]
(sshd,13320,4228,00:00:00/01:06,23340) sshd: [net]
(root,14464,7832,00:00:00/00:06,23873) sshd: unknown [priv]
(sshd,13320,4484,00:00:00/00:06,23875) sshd: unknown [net]
(root,14464,7664,00:00:00/00:05,23879) sshd: unknown [priv]
(sshd,13320,4272,00:00:00/00:05,23880) sshd: unknown [net]
(root,14464,7612,00:00:00/00:04,23881) sshd: unknown [priv]
(sshd,13320,4332,00:00:00/00:04,23882) sshd: unknown [net]
(root,14464,7620,00:00:00/00:04,23883) sshd: unknown [priv]
(sshd,13320,4260,00:00:00/00:03,23884) sshd: unknown [net]
(root,14144,7512,00:00:00/00:03,23885) sshd: root [priv]
(sshd,13320,4276,00:00:00/00:03,23886) sshd: root [net]
(root,14144,7168,00:00:00/00:03,23887) sshd: root [priv]
(sshd,13320,4244,00:00:00/00:03,23888) sshd: root [net]
(root,13320,6204,00:00:00/00:01,23889) sshd: [accepted]
(sshd,13320,4244,00:00:00/00:01,23890) sshd: [net]
(root,8692,3504,00:00:00/00:00,23957) /bin/bash /usr/bin/check_mk_agent
(root,6608,2804,00:00:00/00:00,23976) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1532,00:00:00/00:00,23977) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(zabbix,20484,1544,00:00:00/365-15:16:22,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:46:19/365-15:16:22,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,08:02:32/365-15:16:22,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,08:02:05/365-15:16:22,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,08:03:16/365-15:16:22,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:21/365-15:16:22,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:54/5-14:27:40,29923) [kworker/0:2-events]
(root,0,0,00:00:00/1-08:40:48,30239) [kworker/1:0]
(root,0,0,00:00:00/47:44,30252) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:07/2-17:00:28,30524) [kworker/3:0-mm_percpu_wq]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-19 22:42

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6a09100b1

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9004,05:59:05/503-08:20:17,1) /sbin/init
(root,0,0,00:00:01/503-08:20:17,2) [kthreadd]
(root,0,0,00:00:00/503-08:20:17,3) [rcu_gp]
(root,0,0,00:00:00/503-08:20:17,4) [rcu_par_gp]
(root,0,0,00:00:00/503-08:20:17,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/503-08:20:17,8) [mm_percpu_wq]
(root,0,0,00:00:00/503-08:20:17,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/503-08:20:17,10) [rcu_tasks_trace]
(root,0,0,01:15:21/503-08:20:17,11) [ksoftirqd/0]
(root,0,0,12:06:54/503-08:20:17,12) [rcu_sched]
(root,0,0,00:00:47/503-08:20:17,13) [migration/0]
(root,0,0,00:00:00/503-08:20:17,15) [cpuhp/0]
(root,0,0,00:00:00/503-08:20:17,16) [cpuhp/1]
(root,0,0,00:00:58/503-08:20:17,17) [migration/1]
(root,0,0,00:04:01/503-08:20:17,18) [ksoftirqd/1]
(root,0,0,00:00:00/503-08:20:17,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/503-08:20:17,21) [cpuhp/2]
(root,0,0,00:00:43/503-08:20:17,22) [migration/2]
(root,0,0,01:41:54/503-08:20:17,23) [ksoftirqd/2]
(root,0,0,00:00:00/503-08:20:17,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/503-08:20:17,26) [cpuhp/3]
(root,0,0,00:00:59/503-08:20:17,27) [migration/3]
(root,0,0,00:02:52/503-08:20:17,28) [ksoftirqd/3]
(root,0,0,00:00:00/503-08:20:17,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/503-08:20:17,31) [kdevtmpfs]
(root,0,0,00:00:00/503-08:20:17,32) [netns]
(root,0,0,00:00:00/503-08:20:17,33) [kauditd]
(root,0,0,00:00:09/503-08:20:17,34) [khungtaskd]
(root,0,0,00:00:00/503-08:20:17,35) [oom_reaper]
(root,0,0,00:00:00/503-08:20:17,36) [writeback]
(root,0,0,00:11:56/503-08:20:17,37) [kcompactd0]
(root,0,0,00:00:00/503-08:20:17,38) [ksmd]
(root,0,0,00:19:53/503-08:20:17,39) [khugepaged]
(root,0,0,00:00:00/503-08:20:17,58) [kintegrityd]
(root,0,0,00:00:00/503-08:20:17,59) [kblockd]
(root,0,0,00:00:00/503-08:20:17,60) [blkcg_punt_bio]
(root,0,0,00:00:00/503-08:20:17,61) [edac-poller]
(root,0,0,00:00:00/503-08:20:17,62) [devfreq_wq]
(root,0,0,00:06:29/503-08:20:17,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:17/503-08:20:16,65) [kswapd0]
(root,0,0,00:00:00/503-08:20:16,66) [kthrotld]
(root,0,0,00:00:00/503-08:20:16,67) [acpi_thermal_pm]
(root,0,0,00:04:22/503-08:20:16,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/503-08:20:16,70) [ipv6_addrconf]
(root,0,0,00:00:00/503-08:20:16,81) [kstrp]
(root,0,0,00:00:00/503-08:20:16,84) [zswap-shrink]
(root,0,0,00:00:00/503-08:20:16,85) [kworker/u9:0]
(root,0,0,00:03:21/503-08:20:16,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/503-08:20:16,135) [ata_sff]
(root,0,0,00:00:00/503-08:20:16,139) [scsi_eh_0]
(root,0,0,00:00:00/503-08:20:16,140) [scsi_tmf_0]
(root,0,0,00:00:00/503-08:20:16,141) [scsi_eh_1]
(root,0,0,00:00:00/503-08:20:16,142) [scsi_tmf_1]
(root,0,0,00:00:00/503-08:20:16,143) [scsi_eh_2]
(root,0,0,00:00:00/503-08:20:16,144) [scsi_tmf_2]
(root,0,0,00:00:00/503-08:20:16,145) [scsi_eh_3]
(root,0,0,00:00:00/503-08:20:16,146) [scsi_tmf_3]
(root,0,0,00:02:35/503-08:20:15,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:40/503-08:20:14,183) [jbd2/sda1-8]
(root,0,0,00:00:00/503-08:20:14,184) [ext4-rsv-conver]
(root,215560,154564,1-05:56:48/503-08:20:14,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:34/503-08:20:14,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/503-08:20:14,291) [watchdogd]
(root,0,0,00:00:00/503-08:20:14,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:24/503-08:20:14,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/503-08:20:14,349) [card0-crtc0]
(root,0,0,00:00:00/503-08:20:14,350) [card0-crtc1]
(root,0,0,00:00:00/503-08:20:14,351) [card0-crtc2]
(root,0,0,00:00:00/503-08:20:14,353) [cryptd]
(root,8472,2688,00:02:42/503-08:20:14,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/503-08:20:14,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7720,07:25:32/503-08:20:14,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:53/503-08:20:14,374) /lib/systemd/systemd-logind
(root,10768,2484,01:32:02/503-08:20:14,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:15:26/503-08:20:13,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:41/503-08:20:13,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:52/503-08:20:13,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:07/17:15:39,579) [kworker/0:3-events]
(root,0,0,00:00:32/3-16:49:26,1662) [kworker/2:1-events]
(root,13320,6384,08:26:10/503-08:20:11,1740) sshd: /usr/sbin/sshd -D [listener] 12 of 10-100 startups
(root,6792,4584,00:16:22/503-08:20:11,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:04:00/503-08:20:10,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/503-08:20:03,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/503-08:20:03,1815) (sd-pam)
(root,0,0,00:00:00/24:54,5635) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:28/5-16:05:43,7428) [kworker/1:2-events_freezable]
(root,7252,3572,00:00:00/503-08:07:56,7652) /bin/login -p --
(root,9320,4052,00:00:00/503-08:07:50,7664) -bash
(root,0,0,00:00:00/06:22:26,11371) [kworker/2:0]
(root,0,0,00:00:05/2-10:44:54,13447) [kworker/3:2-events]
(www-data,236804,13432,00:00:00/04:13:00,14292) /usr/sbin/apache2 -k start
(www-data,7028,3732,00:00:00/22:59:10,15122) /usr/sbin/apache2 -k start
(www-data,236780,14036,00:00:01/22:59:10,15123) /usr/sbin/apache2 -k start
(www-data,236788,13956,00:00:02/22:59:10,15124) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/19:49:45,16455) [kworker/1:1-events]
(root,0,0,00:00:00/03:32,17450) [kworker/u8:3-flush-8:0]
(root,13320,6500,00:00:00/01:59,18991) sshd: [accepted]
(root,13320,6448,00:00:00/01:38,19034) sshd: [accepted]
(root,13320,6484,00:00:00/01:37,19043) sshd: [accepted]
(root,13320,6464,00:00:00/01:28,19068) sshd: [accepted]
(root,13320,6444,00:00:00/01:15,19097) sshd: [accepted]
(root,13320,6424,00:00:00/01:11,19100) sshd: [accepted]
(root,13320,6356,00:00:00/00:47,19520) sshd: [accepted]
(root,13320,6400,00:00:00/00:04,19605) sshd: [accepted]
(root,14464,7656,00:00:00/00:03,19606) sshd: unknown [priv]
(sshd,13320,4324,00:00:00/00:03,19607) sshd: unknown [net]
(root,14464,7544,00:00:00/00:02,19608) sshd: unknown [priv]
(sshd,13320,4184,00:00:00/00:02,19609) sshd: unknown [net]
(root,13320,6532,00:00:00/00:01,19610) sshd: [accepted]
(sshd,13320,4240,00:00:00/00:01,19611) sshd: [net]
(root,13320,6424,00:00:00/00:01,19612) sshd: [accepted]
(sshd,13320,4364,00:00:00/00:01,19613) sshd: [net]
(root,8692,3280,00:00:00/00:00,19821) /bin/bash /usr/bin/check_mk_agent
(root,6608,2808,00:00:00/00:00,19840) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1460,00:00:00/00:00,19841) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,5000,1376,00:00:00/503-07:37:50,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/474-03:56:15,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/48:17,25295) [kworker/u8:0-flush-8:0]
(zabbix,20484,1544,00:00:00/363-14:33:53,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:46:04/363-14:33:53,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:59:56/363-14:33:53,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:59:29/363-14:33:53,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,08:00:39/363-14:33:53,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:15/363-14:33:53,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/42:59,27878) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:32/3-13:45:11,29923) [kworker/0:2-events]
(root,0,0,00:00:02/16:17:59,30524) [kworker/3:0-mm_percpu_wq]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-17 22:00

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc673c9e1ed

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9012,05:57:38/501-11:49:34,1) /sbin/init
(root,0,0,00:00:01/501-11:49:34,2) [kthreadd]
(root,0,0,00:00:00/501-11:49:34,3) [rcu_gp]
(root,0,0,00:00:00/501-11:49:34,4) [rcu_par_gp]
(root,0,0,00:00:00/501-11:49:34,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/501-11:49:34,8) [mm_percpu_wq]
(root,0,0,00:00:00/501-11:49:34,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/501-11:49:34,10) [rcu_tasks_trace]
(root,0,0,01:15:01/501-11:49:34,11) [ksoftirqd/0]
(root,0,0,12:04:25/501-11:49:34,12) [rcu_sched]
(root,0,0,00:00:47/501-11:49:34,13) [migration/0]
(root,0,0,00:00:00/501-11:49:34,15) [cpuhp/0]
(root,0,0,00:00:00/501-11:49:34,16) [cpuhp/1]
(root,0,0,00:00:58/501-11:49:34,17) [migration/1]
(root,0,0,00:04:00/501-11:49:34,18) [ksoftirqd/1]
(root,0,0,00:00:00/501-11:49:34,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/501-11:49:34,21) [cpuhp/2]
(root,0,0,00:00:43/501-11:49:34,22) [migration/2]
(root,0,0,01:41:31/501-11:49:34,23) [ksoftirqd/2]
(root,0,0,00:00:00/501-11:49:34,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/501-11:49:34,26) [cpuhp/3]
(root,0,0,00:00:58/501-11:49:34,27) [migration/3]
(root,0,0,00:02:51/501-11:49:34,28) [ksoftirqd/3]
(root,0,0,00:00:00/501-11:49:34,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/501-11:49:34,31) [kdevtmpfs]
(root,0,0,00:00:00/501-11:49:34,32) [netns]
(root,0,0,00:00:00/501-11:49:34,33) [kauditd]
(root,0,0,00:00:09/501-11:49:34,34) [khungtaskd]
(root,0,0,00:00:00/501-11:49:34,35) [oom_reaper]
(root,0,0,00:00:00/501-11:49:34,36) [writeback]
(root,0,0,00:11:53/501-11:49:34,37) [kcompactd0]
(root,0,0,00:00:00/501-11:49:34,38) [ksmd]
(root,0,0,00:19:48/501-11:49:34,39) [khugepaged]
(root,0,0,00:00:00/501-11:49:34,58) [kintegrityd]
(root,0,0,00:00:00/501-11:49:34,59) [kblockd]
(root,0,0,00:00:00/501-11:49:34,60) [blkcg_punt_bio]
(root,0,0,00:00:00/501-11:49:34,61) [edac-poller]
(root,0,0,00:00:00/501-11:49:34,62) [devfreq_wq]
(root,0,0,00:06:27/501-11:49:34,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:17/501-11:49:33,65) [kswapd0]
(root,0,0,00:00:00/501-11:49:33,66) [kthrotld]
(root,0,0,00:00:00/501-11:49:33,67) [acpi_thermal_pm]
(root,0,0,00:04:21/501-11:49:33,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/501-11:49:33,70) [ipv6_addrconf]
(root,0,0,00:00:00/501-11:49:33,81) [kstrp]
(root,0,0,00:00:00/501-11:49:33,84) [zswap-shrink]
(root,0,0,00:00:00/501-11:49:33,85) [kworker/u9:0]
(root,0,0,00:03:21/501-11:49:33,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/501-11:49:33,135) [ata_sff]
(root,0,0,00:00:00/501-11:49:33,139) [scsi_eh_0]
(root,0,0,00:00:00/501-11:49:33,140) [scsi_tmf_0]
(root,0,0,00:00:00/501-11:49:33,141) [scsi_eh_1]
(root,0,0,00:00:00/501-11:49:33,142) [scsi_tmf_1]
(root,0,0,00:00:00/501-11:49:33,143) [scsi_eh_2]
(root,0,0,00:00:00/501-11:49:33,144) [scsi_tmf_2]
(root,0,0,00:00:00/501-11:49:33,145) [scsi_eh_3]
(root,0,0,00:00:00/501-11:49:33,146) [scsi_tmf_3]
(root,0,0,00:02:35/501-11:49:32,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:37/501-11:49:31,183) [jbd2/sda1-8]
(root,0,0,00:00:00/501-11:49:31,184) [ext4-rsv-conver]
(root,80016,36896,1-05:49:55/501-11:49:31,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:33/501-11:49:31,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/501-11:49:31,291) [watchdogd]
(root,0,0,00:00:00/501-11:49:31,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:23/501-11:49:31,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/501-11:49:31,349) [card0-crtc0]
(root,0,0,00:00:00/501-11:49:31,350) [card0-crtc1]
(root,0,0,00:00:00/501-11:49:31,351) [card0-crtc2]
(root,0,0,00:00:00/501-11:49:31,353) [cryptd]
(root,8472,2688,00:02:41/501-11:49:31,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/501-11:49:31,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7724,07:23:51/501-11:49:31,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:53/501-11:49:31,374) /lib/systemd/systemd-logind
(root,10768,2484,01:31:41/501-11:49:31,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:12:26/501-11:49:30,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:36/501-11:49:30,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:50/501-11:49:30,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:16/1-20:18:43,1662) [kworker/2:1-events]
(root,13320,6384,08:24:07/501-11:49:28,1740) sshd: /usr/sbin/sshd -D [listener] 13 of 10-100 startups
(root,6792,4584,00:16:18/501-11:49:28,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:59/501-11:49:27,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/501-11:49:20,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/501-11:49:20,1815) (sd-pam)
(root,13320,6412,00:00:00/01:34,4973) sshd: [accepted]
(root,13320,6320,00:00:00/01:33,4976) sshd: [accepted]
(root,13320,6408,00:00:00/01:06,5231) sshd: [accepted]
(root,13320,6476,00:00:00/01:05,5232) sshd: [accepted]
(sshd,13320,4336,00:00:00/01:05,5233) sshd: [net]
(root,13320,6280,00:00:00/00:57,5245) sshd: [accepted]
(root,13320,6368,00:00:00/00:52,5254) sshd: [accepted]
(sshd,13320,4336,00:00:00/00:52,5255) sshd: [net]
(root,13320,6300,00:00:00/00:36,5440) sshd: [accepted]
(root,13320,6324,00:00:00/00:35,5443) sshd: [accepted]
(root,13320,6584,00:00:00/00:10,5671) sshd: [accepted]
(sshd,13320,4384,00:00:00/00:09,5676) sshd: [net]
(root,14144,7632,00:00:00/00:09,5677) sshd: root [priv]
(sshd,13320,4488,00:00:00/00:09,5678) sshd: root [net]
(root,13320,6444,00:00:00/00:03,5683) sshd: [accepted]
(root,14380,7580,00:00:00/00:01,5684) sshd: unknown [priv]
(sshd,13320,4252,00:00:00/00:01,5685) sshd: unknown [net]
(root,13320,6296,00:00:00/00:01,5686) sshd: [accepted]
(sshd,13320,4180,00:00:00/00:01,5687) sshd: [net]
(root,8692,3412,00:00:00/00:00,5731) /bin/bash /usr/bin/check_mk_agent
(root,6608,2712,00:00:00/00:00,5750) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1552,00:00:00/00:00,5751) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:19/3-19:35:00,7428) [kworker/1:2-events_freezable]
(root,7252,3572,00:00:00/501-11:37:13,7652) /bin/login -p --
(root,9320,4052,00:00:00/501-11:37:07,7664) -bash
(root,0,0,00:00:01/14:14:11,13447) [kworker/3:2-events]
(root,0,0,00:00:00/01:35:58,17197) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/02:29:18,20196) [kworker/0:1]
(root,0,0,00:00:00/02:29:17,20211) [kworker/1:1]
(root,0,0,00:00:00/02:28:47,20477) [kworker/u8:4-flush-8:0]
(www-data,7028,3732,00:00:00/02:28:27,20527) /usr/sbin/apache2 -k start
(www-data,236292,10128,00:00:00/02:28:27,20528) /usr/sbin/apache2 -k start
(www-data,236212,10132,00:00:00/02:28:27,20530) /usr/sbin/apache2 -k start
(root,5000,1376,00:00:00/501-11:07:07,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/472-07:25:32,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/361-18:03:10,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:45:50/361-18:03:10,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:57:29/361-18:03:10,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:57:01/361-18:03:10,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:58:11/361-18:03:10,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:08/361-18:03:10,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:20/1-17:14:28,29923) [kworker/0:2-events]
(root,0,0,00:00:00/13:57,31063) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/1-02:29:17,32392) [kworker/2:0-events]
(root,0,0,00:00:00/01:08:15,32582) [kworker/3:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-16 01:29

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6fe9d7c1c

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9020,05:55:43/499-11:08:25,1) /sbin/init
(root,0,0,00:00:01/499-11:08:25,2) [kthreadd]
(root,0,0,00:00:00/499-11:08:25,3) [rcu_gp]
(root,0,0,00:00:00/499-11:08:25,4) [rcu_par_gp]
(root,0,0,00:00:00/499-11:08:25,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/499-11:08:25,8) [mm_percpu_wq]
(root,0,0,00:00:00/499-11:08:25,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/499-11:08:25,10) [rcu_tasks_trace]
(root,0,0,01:14:34/499-11:08:25,11) [ksoftirqd/0]
(root,0,0,12:01:22/499-11:08:25,12) [rcu_sched]
(root,0,0,00:00:47/499-11:08:25,13) [migration/0]
(root,0,0,00:00:00/499-11:08:25,15) [cpuhp/0]
(root,0,0,00:00:00/499-11:08:25,16) [cpuhp/1]
(root,0,0,00:00:57/499-11:08:25,17) [migration/1]
(root,0,0,00:03:59/499-11:08:25,18) [ksoftirqd/1]
(root,0,0,00:00:00/499-11:08:25,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/499-11:08:25,21) [cpuhp/2]
(root,0,0,00:00:43/499-11:08:25,22) [migration/2]
(root,0,0,01:41:00/499-11:08:25,23) [ksoftirqd/2]
(root,0,0,00:00:00/499-11:08:25,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/499-11:08:25,26) [cpuhp/3]
(root,0,0,00:00:58/499-11:08:25,27) [migration/3]
(root,0,0,00:02:50/499-11:08:25,28) [ksoftirqd/3]
(root,0,0,00:00:00/499-11:08:25,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/499-11:08:25,31) [kdevtmpfs]
(root,0,0,00:00:00/499-11:08:25,32) [netns]
(root,0,0,00:00:00/499-11:08:25,33) [kauditd]
(root,0,0,00:00:09/499-11:08:25,34) [khungtaskd]
(root,0,0,00:00:00/499-11:08:25,35) [oom_reaper]
(root,0,0,00:00:00/499-11:08:25,36) [writeback]
(root,0,0,00:11:46/499-11:08:25,37) [kcompactd0]
(root,0,0,00:00:00/499-11:08:25,38) [ksmd]
(root,0,0,00:19:43/499-11:08:25,39) [khugepaged]
(root,0,0,00:00:00/499-11:08:25,58) [kintegrityd]
(root,0,0,00:00:00/499-11:08:25,59) [kblockd]
(root,0,0,00:00:00/499-11:08:25,60) [blkcg_punt_bio]
(root,0,0,00:00:00/499-11:08:25,61) [edac-poller]
(root,0,0,00:00:00/499-11:08:25,62) [devfreq_wq]
(root,0,0,00:06:25/499-11:08:25,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:16/499-11:08:24,65) [kswapd0]
(root,0,0,00:00:00/499-11:08:24,66) [kthrotld]
(root,0,0,00:00:00/499-11:08:24,67) [acpi_thermal_pm]
(root,0,0,00:04:19/499-11:08:24,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/499-11:08:24,70) [ipv6_addrconf]
(root,0,0,00:00:00/499-11:08:24,81) [kstrp]
(root,0,0,00:00:00/499-11:08:24,84) [zswap-shrink]
(root,0,0,00:00:00/499-11:08:24,85) [kworker/u9:0]
(root,0,0,00:03:20/499-11:08:24,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/499-11:08:24,135) [ata_sff]
(root,0,0,00:00:00/499-11:08:24,139) [scsi_eh_0]
(root,0,0,00:00:00/499-11:08:24,140) [scsi_tmf_0]
(root,0,0,00:00:00/499-11:08:24,141) [scsi_eh_1]
(root,0,0,00:00:00/499-11:08:24,142) [scsi_tmf_1]
(root,0,0,00:00:00/499-11:08:24,143) [scsi_eh_2]
(root,0,0,00:00:00/499-11:08:24,144) [scsi_tmf_2]
(root,0,0,00:00:00/499-11:08:24,145) [scsi_eh_3]
(root,0,0,00:00:00/499-11:08:24,146) [scsi_tmf_3]
(root,0,0,00:02:34/499-11:08:23,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:33/499-11:08:22,183) [jbd2/sda1-8]
(root,0,0,00:00:00/499-11:08:22,184) [ext4-rsv-conver]
(root,276684,201820,1-05:41:24/499-11:08:22,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:33/499-11:08:22,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/499-11:08:22,291) [watchdogd]
(root,0,0,00:00:00/499-11:08:22,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:23/499-11:08:22,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/499-11:08:22,349) [card0-crtc0]
(root,0,0,00:00:00/499-11:08:22,350) [card0-crtc1]
(root,0,0,00:00:00/499-11:08:22,351) [card0-crtc2]
(root,0,0,00:00:00/499-11:08:22,353) [cryptd]
(root,8472,2688,00:02:40/499-11:08:22,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/499-11:08:22,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7736,07:21:47/499-11:08:22,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:53/499-11:08:22,374) /lib/systemd/systemd-logind
(root,10768,2484,01:31:17/499-11:08:22,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:08:41/499-11:08:21,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:30/499-11:08:21,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:46/499-11:08:21,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,08:21:36/499-11:08:19,1740) sshd: /usr/sbin/sshd -D [listener] 15 of 10-100 startups
(root,6792,4584,00:16:14/499-11:08:19,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:58/499-11:08:18,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/499-11:08:11,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/499-11:08:11,1815) (sd-pam)
(root,0,0,00:00:00/10:46:32,3464) [kworker/2:2]
(root,0,0,00:00:09/3-00:11:00,5512) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:09/19:47:29,6456) [kworker/0:1-mm_percpu_wq]
(root,0,0,00:00:08/1-18:53:51,7428) [kworker/1:2-mm_percpu_wq]
(root,7252,3572,00:00:00/499-10:56:04,7652) /bin/login -p --
(root,9320,4052,00:00:00/499-10:55:58,7664) -bash
(root,0,0,00:00:00/01:22:44,12216) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/01:17:18,15545) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/26:27,16492) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:26/3-01:47:27,19618) [kworker/2:0-events]
(root,5000,1376,00:00:00/499-10:25:58,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/470-06:44:23,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/359-17:22:01,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:45:33/359-17:22:01,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:54:33/359-17:22:01,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:54:06/359-17:22:01,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:55:16/359-17:22:01,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:20:01/359-17:22:01,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/01:48:08,28792) [kworker/0:0]
(root,0,0,00:00:00/01:48:08,28807) [kworker/1:1-events]
(root,0,0,00:00:00/01:47:28,29268) [kworker/3:0-events]
(www-data,7028,3732,00:00:00/01:47:18,29293) /usr/sbin/apache2 -k start
(www-data,236516,14224,00:00:00/01:47:18,29294) /usr/sbin/apache2 -k start
(www-data,236844,7972,00:00:00/01:47:18,29295) /usr/sbin/apache2 -k start
(root,13320,6424,00:00:00/01:49,29663) sshd: [accepted]
(sshd,13320,4336,00:00:00/01:49,29664) sshd: [net]
(root,13320,6284,00:00:00/01:27,29878) sshd: [accepted]
(root,13320,6508,00:00:00/01:05,30122) sshd: [accepted]
(root,13320,6468,00:00:00/00:56,30139) sshd: [accepted]
(sshd,13320,4292,00:00:00/00:56,30140) sshd: [net]
(root,13320,6392,00:00:00/00:44,30176) sshd: [accepted]
(sshd,13320,4208,00:00:00/00:44,30177) sshd: [net]
(root,13320,6452,00:00:00/00:43,30182) sshd: [accepted]
(sshd,13320,4272,00:00:00/00:42,30183) sshd: [net]
(root,13320,6368,00:00:00/00:12,30422) sshd: [accepted]
(root,14144,7368,00:00:00/00:07,30623) sshd: root [priv]
(root,14464,7732,00:00:00/00:06,30624) sshd: unknown [priv]
(sshd,13320,4296,00:00:00/00:06,30625) sshd: unknown [net]
(root,14464,7712,00:00:00/00:04,30626) sshd: unknown [priv]
(sshd,13320,4284,00:00:00/00:04,30627) sshd: unknown [net]
(sshd,13320,4404,00:00:00/00:04,30628) sshd: root [net]
(root,14144,7436,00:00:00/00:03,30629) sshd: root [priv]
(sshd,13320,4324,00:00:00/00:02,30630) sshd: root [net]
(root,14464,7684,00:00:00/00:02,30631) sshd: unknown [priv]
(sshd,13320,4332,00:00:00/00:02,30632) sshd: unknown [net]
(root,14144,7296,00:00:00/00:02,30633) sshd: root [priv]
(sshd,13320,4288,00:00:00/00:02,30634) sshd: root [net]
(root,14144,7440,00:00:00/00:02,30635) sshd: root [priv]
(sshd,13320,4416,00:00:00/00:02,30636) sshd: root [net]
(root,14144,7488,00:00:00/00:01,30637) sshd: root [priv]
(sshd,13320,4328,00:00:00/00:01,30638) sshd: root [net]
(root,8692,3452,00:00:00/00:00,30688) /bin/bash /usr/bin/check_mk_agent
(root,6608,2756,00:00:00/00:00,30707) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1596,00:00:00/00:00,30708) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-14 00:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc65e1ea496

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9008,05:54:38/497-11:10:54,1) /sbin/init
(root,0,0,00:00:01/497-11:10:54,2) [kthreadd]
(root,0,0,00:00:00/497-11:10:54,3) [rcu_gp]
(root,0,0,00:00:00/497-11:10:54,4) [rcu_par_gp]
(root,0,0,00:00:00/497-11:10:54,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/497-11:10:54,8) [mm_percpu_wq]
(root,0,0,00:00:00/497-11:10:54,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/497-11:10:54,10) [rcu_tasks_trace]
(root,0,0,01:14:09/497-11:10:54,11) [ksoftirqd/0]
(root,0,0,11:58:21/497-11:10:54,12) [rcu_sched]
(root,0,0,00:00:46/497-11:10:54,13) [migration/0]
(root,0,0,00:00:00/497-11:10:54,15) [cpuhp/0]
(root,0,0,00:00:00/497-11:10:54,16) [cpuhp/1]
(root,0,0,00:00:57/497-11:10:54,17) [migration/1]
(root,0,0,00:03:58/497-11:10:54,18) [ksoftirqd/1]
(root,0,0,00:00:00/497-11:10:54,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/497-11:10:54,21) [cpuhp/2]
(root,0,0,00:00:42/497-11:10:54,22) [migration/2]
(root,0,0,01:40:32/497-11:10:54,23) [ksoftirqd/2]
(root,0,0,00:00:00/497-11:10:54,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/497-11:10:54,26) [cpuhp/3]
(root,0,0,00:00:58/497-11:10:54,27) [migration/3]
(root,0,0,00:02:50/497-11:10:54,28) [ksoftirqd/3]
(root,0,0,00:00:00/497-11:10:54,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/497-11:10:54,31) [kdevtmpfs]
(root,0,0,00:00:00/497-11:10:54,32) [netns]
(root,0,0,00:00:00/497-11:10:54,33) [kauditd]
(root,0,0,00:00:09/497-11:10:54,34) [khungtaskd]
(root,0,0,00:00:00/497-11:10:54,35) [oom_reaper]
(root,0,0,00:00:00/497-11:10:54,36) [writeback]
(root,0,0,00:11:43/497-11:10:54,37) [kcompactd0]
(root,0,0,00:00:00/497-11:10:54,38) [ksmd]
(root,0,0,00:19:38/497-11:10:54,39) [khugepaged]
(root,0,0,00:00:00/497-11:10:54,58) [kintegrityd]
(root,0,0,00:00:00/497-11:10:54,59) [kblockd]
(root,0,0,00:00:00/497-11:10:54,60) [blkcg_punt_bio]
(root,0,0,00:00:00/497-11:10:54,61) [edac-poller]
(root,0,0,00:00:00/497-11:10:54,62) [devfreq_wq]
(root,0,0,00:06:24/497-11:10:54,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:16/497-11:10:53,65) [kswapd0]
(root,0,0,00:00:00/497-11:10:53,66) [kthrotld]
(root,0,0,00:00:00/497-11:10:53,67) [acpi_thermal_pm]
(root,0,0,00:04:18/497-11:10:53,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/497-11:10:53,70) [ipv6_addrconf]
(root,0,0,00:00:00/497-11:10:53,81) [kstrp]
(root,0,0,00:00:00/497-11:10:53,84) [zswap-shrink]
(root,0,0,00:00:00/497-11:10:53,85) [kworker/u9:0]
(root,0,0,00:03:19/497-11:10:53,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/497-11:10:53,135) [ata_sff]
(root,0,0,00:00:00/497-11:10:53,139) [scsi_eh_0]
(root,0,0,00:00:00/497-11:10:53,140) [scsi_tmf_0]
(root,0,0,00:00:00/497-11:10:53,141) [scsi_eh_1]
(root,0,0,00:00:00/497-11:10:53,142) [scsi_tmf_1]
(root,0,0,00:00:00/497-11:10:53,143) [scsi_eh_2]
(root,0,0,00:00:00/497-11:10:53,144) [scsi_tmf_2]
(root,0,0,00:00:00/497-11:10:53,145) [scsi_eh_3]
(root,0,0,00:00:00/497-11:10:53,146) [scsi_tmf_3]
(root,0,0,00:02:33/497-11:10:52,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:29/497-11:10:51,183) [jbd2/sda1-8]
(root,0,0,00:00:00/497-11:10:51,184) [ext4-rsv-conver]
(root,120920,65140,1-05:34:15/497-11:10:51,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:33/497-11:10:51,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/497-11:10:51,291) [watchdogd]
(root,0,0,00:00:00/497-11:10:51,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:23/497-11:10:51,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/497-11:10:51,349) [card0-crtc0]
(root,0,0,00:00:00/497-11:10:51,350) [card0-crtc1]
(root,0,0,00:00:00/497-11:10:51,351) [card0-crtc2]
(root,0,0,00:00:00/497-11:10:51,353) [cryptd]
(root,8472,2688,00:02:40/497-11:10:51,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/497-11:10:51,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7736,07:20:09/497-11:10:51,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:53/497-11:10:51,374) /lib/systemd/systemd-logind
(root,10768,2484,01:30:55/497-11:10:51,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:05:15/497-11:10:50,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:24/497-11:10:50,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:43/497-11:10:50,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,08:19:27/497-11:10:48,1740) sshd: /usr/sbin/sshd -D [listener] 11 of 10-100 startups
(root,6792,4584,00:16:10/497-11:10:48,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:57/497-11:10:47,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/497-11:10:40,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/497-11:10:40,1815) (sd-pam)
(root,0,0,00:00:02/1-00:13:29,5512) [kworker/3:1-mm_percpu_wq]
(root,7252,3572,00:00:00/497-10:58:33,7652) /bin/login -p --
(root,9320,4052,00:00:00/497-10:58:27,7664) -bash
(root,0,0,00:00:00/01:06:00,8579) [kworker/u8:1-flush-8:0]
(root,14144,7556,00:00:00/00:13,12235) sshd: root [priv]
(sshd,13320,4328,00:00:00/00:13,12236) sshd: root [net]
(root,14144,7472,00:00:00/00:13,12241) sshd: root [priv]
(sshd,13320,4144,00:00:00/00:13,12243) sshd: root [net]
(root,14144,7500,00:00:00/00:13,12245) sshd: root [priv]
(sshd,13320,4320,00:00:00/00:13,12246) sshd: root [net]
(root,14144,7536,00:00:00/00:13,12249) sshd: root [priv]
(sshd,13320,4268,00:00:00/00:13,12250) sshd: root [net]
(root,14144,7560,00:00:00/00:13,12251) sshd: root [priv]
(sshd,13320,4320,00:00:00/00:13,12252) sshd: root [net]
(root,14144,7620,00:00:00/00:13,12254) sshd: root [priv]
(sshd,13320,4284,00:00:00/00:13,12256) sshd: root [net]
(root,14144,7492,00:00:00/00:13,12258) sshd: root [priv]
(sshd,13320,4320,00:00:00/00:13,12261) sshd: root [net]
(root,14464,7780,00:00:00/00:05,12460) sshd: unknown [priv]
(sshd,13320,4384,00:00:00/00:05,12461) sshd: unknown [net]
(root,14144,7492,00:00:00/00:04,12464) sshd: root [priv]
(sshd,13320,4264,00:00:00/00:04,12465) sshd: root [net]
(root,14464,7620,00:00:00/00:03,12466) sshd: unknown [priv]
(sshd,13320,4248,00:00:00/00:03,12467) sshd: unknown [net]
(root,13320,6480,00:00:00/00:01,12468) sshd: [accepted]
(sshd,13320,4452,00:00:00/00:01,12469) sshd: [net]
(root,0,0,00:00:00/10:49:03,12717) [kworker/1:1-events]
(root,8692,3340,00:00:00/00:00,12741) /bin/bash /usr/bin/check_mk_agent
(root,6608,2712,00:00:00/00:00,12760) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1504,00:00:00/00:00,12761) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/18:57:35,13644) [kworker/3:2]
(root,0,0,00:00:00/01:50:37,16286) [kworker/0:0-events]
(root,0,0,00:00:00/01:49:57,16730) [kworker/2:2-events]
(www-data,7028,3732,00:00:00/01:49:47,16966) /usr/sbin/apache2 -k start
(www-data,236212,16268,00:00:00/01:49:47,16967) /usr/sbin/apache2 -k start
(www-data,236828,14160,00:00:00/01:49:47,16968) /usr/sbin/apache2 -k start
(root,0,0,00:00:09/1-01:49:56,19618) [kworker/2:0-events]
(root,0,0,00:00:13/2-19:02:20,21004) [kworker/1:0-events]
(root,5000,1376,00:00:00/497-10:28:27,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:01:28/7-19:12:55,21755) [kworker/0:3-events]
(root,5000,1508,00:00:00/468-06:46:52,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/35:18,25314) [kworker/u8:0-flush-8:0]
(zabbix,20484,1544,00:00:00/357-17:24:30,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:45:17/357-17:24:30,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:51:46/357-17:24:30,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:51:21/357-17:24:30,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:52:30/357-17:24:30,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:19:54/357-17:24:30,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/04:20:11,32288) [kworker/u8:3-ext4-rsv-conversion]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-12 00:50

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6dfd62abd

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9008,05:53:04/495-08:32:54,1) /sbin/init
(root,0,0,00:00:01/495-08:32:54,2) [kthreadd]
(root,0,0,00:00:00/495-08:32:54,3) [rcu_gp]
(root,0,0,00:00:00/495-08:32:54,4) [rcu_par_gp]
(root,0,0,00:00:00/495-08:32:54,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/495-08:32:54,8) [mm_percpu_wq]
(root,0,0,00:00:00/495-08:32:54,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/495-08:32:54,10) [rcu_tasks_trace]
(root,0,0,01:13:49/495-08:32:54,11) [ksoftirqd/0]
(root,0,0,11:55:17/495-08:32:54,12) [rcu_sched]
(root,0,0,00:00:46/495-08:32:54,13) [migration/0]
(root,0,0,00:00:00/495-08:32:54,15) [cpuhp/0]
(root,0,0,00:00:00/495-08:32:54,16) [cpuhp/1]
(root,0,0,00:00:57/495-08:32:54,17) [migration/1]
(root,0,0,00:03:57/495-08:32:54,18) [ksoftirqd/1]
(root,0,0,00:00:00/495-08:32:54,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/495-08:32:54,21) [cpuhp/2]
(root,0,0,00:00:42/495-08:32:54,22) [migration/2]
(root,0,0,01:40:08/495-08:32:54,23) [ksoftirqd/2]
(root,0,0,00:00:00/495-08:32:54,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/495-08:32:54,26) [cpuhp/3]
(root,0,0,00:00:58/495-08:32:54,27) [migration/3]
(root,0,0,00:02:49/495-08:32:54,28) [ksoftirqd/3]
(root,0,0,00:00:00/495-08:32:54,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/495-08:32:54,31) [kdevtmpfs]
(root,0,0,00:00:00/495-08:32:54,32) [netns]
(root,0,0,00:00:00/495-08:32:54,33) [kauditd]
(root,0,0,00:00:09/495-08:32:54,34) [khungtaskd]
(root,0,0,00:00:00/495-08:32:54,35) [oom_reaper]
(root,0,0,00:00:00/495-08:32:54,36) [writeback]
(root,0,0,00:11:40/495-08:32:54,37) [kcompactd0]
(root,0,0,00:00:00/495-08:32:54,38) [ksmd]
(root,0,0,00:19:33/495-08:32:54,39) [khugepaged]
(root,0,0,00:00:00/495-08:32:54,58) [kintegrityd]
(root,0,0,00:00:00/495-08:32:54,59) [kblockd]
(root,0,0,00:00:00/495-08:32:54,60) [blkcg_punt_bio]
(root,0,0,00:00:00/495-08:32:54,61) [edac-poller]
(root,0,0,00:00:00/495-08:32:54,62) [devfreq_wq]
(root,0,0,00:06:22/495-08:32:54,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:16/495-08:32:53,65) [kswapd0]
(root,0,0,00:00:00/495-08:32:53,66) [kthrotld]
(root,0,0,00:00:00/495-08:32:53,67) [acpi_thermal_pm]
(root,0,0,00:04:17/495-08:32:53,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/495-08:32:53,70) [ipv6_addrconf]
(root,0,0,00:00:00/495-08:32:53,81) [kstrp]
(root,0,0,00:00:00/495-08:32:53,84) [zswap-shrink]
(root,0,0,00:00:00/495-08:32:53,85) [kworker/u9:0]
(root,0,0,00:03:18/495-08:32:53,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/495-08:32:53,135) [ata_sff]
(root,0,0,00:00:00/495-08:32:53,139) [scsi_eh_0]
(root,0,0,00:00:00/495-08:32:53,140) [scsi_tmf_0]
(root,0,0,00:00:00/495-08:32:53,141) [scsi_eh_1]
(root,0,0,00:00:00/495-08:32:53,142) [scsi_tmf_1]
(root,0,0,00:00:00/495-08:32:53,143) [scsi_eh_2]
(root,0,0,00:00:00/495-08:32:53,144) [scsi_tmf_2]
(root,0,0,00:00:00/495-08:32:53,145) [scsi_eh_3]
(root,0,0,00:00:00/495-08:32:53,146) [scsi_tmf_3]
(root,0,0,00:02:33/495-08:32:52,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:25/495-08:32:51,183) [jbd2/sda1-8]
(root,0,0,00:00:00/495-08:32:51,184) [ext4-rsv-conver]
(root,96400,51772,1-05:26:09/495-08:32:51,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:33/495-08:32:51,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/495-08:32:51,291) [watchdogd]
(root,0,0,00:00:00/495-08:32:51,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:22/495-08:32:51,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/495-08:32:51,349) [card0-crtc0]
(root,0,0,00:00:00/495-08:32:51,350) [card0-crtc1]
(root,0,0,00:00:00/495-08:32:51,351) [card0-crtc2]
(root,0,0,00:00:00/495-08:32:51,353) [cryptd]
(root,8472,2688,00:02:39/495-08:32:51,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/495-08:32:51,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7740,07:18:09/495-08:32:51,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:52/495-08:32:51,374) /lib/systemd/systemd-logind
(root,10768,2484,01:30:30/495-08:32:51,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,13:01:58/495-08:32:50,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:18/495-08:32:50,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:39/495-08:32:50,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,08:17:06/495-08:32:48,1740) sshd: /usr/sbin/sshd -D [listener] 11 of 10-100 startups
(root,6792,4584,00:16:06/495-08:32:48,1748) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/08:11:04,1794) [kworker/3:0]
(root,9832,2396,00:03:56/495-08:32:47,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/495-08:32:40,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/495-08:32:40,1815) (sd-pam)
(root,0,0,00:00:00/2-23:12:38,2515) [kworker/2:0-cgroup_destroy]
(root,0,0,00:00:06/18:54:47,5789) [kworker/2:2-events]
(root,0,0,00:00:00/09:03:36,6599) [kworker/0:0]
(root,13320,6324,00:00:00/01:37,7235) sshd: [accepted]
(root,7252,3572,00:00:00/495-08:20:33,7652) /bin/login -p --
(root,13320,6600,00:00:00/01:18,7663) sshd: [accepted]
(root,9320,4052,00:00:00/495-08:20:27,7664) -bash
(root,13320,6544,00:00:00/00:45,8554) sshd: [accepted]
(root,0,0,00:00:00/00:41,8619) [kworker/2:1-events]
(root,14464,7540,00:00:00/00:12,9080) sshd: unknown [priv]
(sshd,13320,4260,00:00:00/00:11,9083) sshd: unknown [net]
(root,13320,6332,00:00:00/00:06,9104) sshd: [accepted]
(sshd,13320,4272,00:00:00/00:04,9110) sshd: [net]
(root,14464,7536,00:00:00/00:04,9111) sshd: unknown [priv]
(sshd,13320,4228,00:00:00/00:04,9112) sshd: unknown [net]
(root,14624,7480,00:00:00/00:03,9113) sshd: unknown [priv]
(sshd,13320,4240,00:00:00/00:03,9114) sshd: unknown [net]
(root,30556,18176,00:00:00/00:02,9115) sshd: root [priv]
(sshd,13320,4368,00:00:00/00:02,9116) sshd: root [net]
(root,14464,7564,00:00:00/00:02,9117) sshd: unknown [priv]
(root,14464,7608,00:00:00/00:02,9118) sshd: unknown [priv]
(sshd,13320,4384,00:00:00/00:02,9119) sshd: unknown [net]
(sshd,13320,4268,00:00:00/00:02,9120) sshd: unknown [net]
(root,13320,6432,00:00:00/00:01,9256) sshd: [accepted]
(sshd,13320,4328,00:00:00/00:01,9257) sshd: [net]
(root,8692,3448,00:00:00/00:00,9393) /bin/bash /usr/bin/check_mk_agent
(root,6608,2852,00:00:00/00:00,9412) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1544,00:00:00/00:00,9413) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/46:18,15218) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:10/3-13:08:08,19356) [kworker/3:3-events]
(root,0,0,00:00:03/16:24:20,21004) [kworker/1:0-events]
(root,5000,1376,00:00:00/495-07:50:27,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:01:04/5-16:34:55,21755) [kworker/0:3-events]
(root,0,0,00:00:00/01:30:15,22798) [kworker/u8:2-flush-8:0]
(root,5000,1508,00:00:00/466-04:08:52,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/355-14:46:30,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:45:01/355-14:46:30,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:49:01/355-14:46:30,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:48:36/355-14:46:30,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:49:44/355-14:46:30,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:19:47/355-14:46:30,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(www-data,7028,3732,00:00:00/23:11:47,28107) /usr/sbin/apache2 -k start
(www-data,236884,14892,00:00:03/23:11:47,28108) /usr/sbin/apache2 -k start
(www-data,236940,17608,00:00:05/23:11:47,28109) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/19:42,29508) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:25/5-22:51:35,31204) [kworker/1:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-09 22:12

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6121bb1ec

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9008,05:51:26/493-10:53:29,1) /sbin/init
(root,0,0,00:00:01/493-10:53:29,2) [kthreadd]
(root,0,0,00:00:00/493-10:53:29,3) [rcu_gp]
(root,0,0,00:00:00/493-10:53:29,4) [rcu_par_gp]
(root,0,0,00:00:00/493-10:53:29,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/493-10:53:29,8) [mm_percpu_wq]
(root,0,0,00:00:00/493-10:53:29,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/493-10:53:29,10) [rcu_tasks_trace]
(root,0,0,01:13:29/493-10:53:29,11) [ksoftirqd/0]
(root,0,0,11:52:30/493-10:53:29,12) [rcu_sched]
(root,0,0,00:00:46/493-10:53:29,13) [migration/0]
(root,0,0,00:00:00/493-10:53:29,15) [cpuhp/0]
(root,0,0,00:00:00/493-10:53:29,16) [cpuhp/1]
(root,0,0,00:00:57/493-10:53:29,17) [migration/1]
(root,0,0,00:03:56/493-10:53:29,18) [ksoftirqd/1]
(root,0,0,00:00:00/493-10:53:29,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/493-10:53:29,21) [cpuhp/2]
(root,0,0,00:00:42/493-10:53:29,22) [migration/2]
(root,0,0,01:39:48/493-10:53:29,23) [ksoftirqd/2]
(root,0,0,00:00:00/493-10:53:29,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/493-10:53:29,26) [cpuhp/3]
(root,0,0,00:00:57/493-10:53:29,27) [migration/3]
(root,0,0,00:02:48/493-10:53:29,28) [ksoftirqd/3]
(root,0,0,00:00:00/493-10:53:29,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/493-10:53:29,31) [kdevtmpfs]
(root,0,0,00:00:00/493-10:53:29,32) [netns]
(root,0,0,00:00:00/493-10:53:29,33) [kauditd]
(root,0,0,00:00:09/493-10:53:29,34) [khungtaskd]
(root,0,0,00:00:00/493-10:53:29,35) [oom_reaper]
(root,0,0,00:00:00/493-10:53:29,36) [writeback]
(root,0,0,00:11:37/493-10:53:29,37) [kcompactd0]
(root,0,0,00:00:00/493-10:53:29,38) [ksmd]
(root,0,0,00:19:28/493-10:53:29,39) [khugepaged]
(root,0,0,00:00:00/493-10:53:29,58) [kintegrityd]
(root,0,0,00:00:00/493-10:53:29,59) [kblockd]
(root,0,0,00:00:00/493-10:53:29,60) [blkcg_punt_bio]
(root,0,0,00:00:00/493-10:53:29,61) [edac-poller]
(root,0,0,00:00:00/493-10:53:29,62) [devfreq_wq]
(root,0,0,00:06:20/493-10:53:29,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:15/493-10:53:28,65) [kswapd0]
(root,0,0,00:00:00/493-10:53:28,66) [kthrotld]
(root,0,0,00:00:00/493-10:53:28,67) [acpi_thermal_pm]
(root,0,0,00:04:16/493-10:53:28,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/493-10:53:28,70) [ipv6_addrconf]
(root,0,0,00:00:00/493-10:53:28,81) [kstrp]
(root,0,0,00:00:00/493-10:53:28,84) [zswap-shrink]
(root,0,0,00:00:00/493-10:53:28,85) [kworker/u9:0]
(root,0,0,00:03:17/493-10:53:28,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/493-10:53:28,135) [ata_sff]
(root,0,0,00:00:00/493-10:53:28,139) [scsi_eh_0]
(root,0,0,00:00:00/493-10:53:28,140) [scsi_tmf_0]
(root,0,0,00:00:00/493-10:53:28,141) [scsi_eh_1]
(root,0,0,00:00:00/493-10:53:28,142) [scsi_tmf_1]
(root,0,0,00:00:00/493-10:53:28,143) [scsi_eh_2]
(root,0,0,00:00:00/493-10:53:28,144) [scsi_tmf_2]
(root,0,0,00:00:00/493-10:53:28,145) [scsi_eh_3]
(root,0,0,00:00:00/493-10:53:28,146) [scsi_tmf_3]
(root,0,0,00:02:32/493-10:53:27,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:22/493-10:53:26,183) [jbd2/sda1-8]
(root,0,0,00:00:00/493-10:53:26,184) [ext4-rsv-conver]
(root,313552,236720,1-05:18:35/493-10:53:26,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:33/493-10:53:26,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/493-10:53:26,291) [watchdogd]
(root,0,0,00:00:00/493-10:53:26,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:22/493-10:53:26,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/493-10:53:26,349) [card0-crtc0]
(root,0,0,00:00:00/493-10:53:26,350) [card0-crtc1]
(root,0,0,00:00:00/493-10:53:26,351) [card0-crtc2]
(root,0,0,00:00:00/493-10:53:26,353) [cryptd]
(root,8472,2688,00:02:38/493-10:53:26,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/493-10:53:26,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7744,07:16:14/493-10:53:26,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:52/493-10:53:26,374) /lib/systemd/systemd-logind
(root,10768,2484,01:30:09/493-10:53:26,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,12:58:52/493-10:53:25,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:13/493-10:53:25,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:36/493-10:53:25,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/02:27:00,527) [kworker/u8:0-flush-8:0]
(root,13320,6384,08:14:46/493-10:53:23,1740) sshd: /usr/sbin/sshd -D [listener] 21 of 10-100 startups
(root,6792,4584,00:16:02/493-10:53:23,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:55/493-10:53:22,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/493-10:53:15,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/493-10:53:15,1815) (sd-pam)
(root,0,0,00:00:00/1-01:33:13,2515) [kworker/2:0-events]
(root,0,0,00:00:00/10:31:39,4108) [kworker/3:0-events]
(root,7252,3572,00:00:00/493-10:41:08,7652) /bin/login -p --
(root,9320,4052,00:00:00/493-10:41:02,7664) -bash
(www-data,7028,3732,00:00:00/01:32:22,7953) /usr/sbin/apache2 -k start
(www-data,236540,16264,00:00:00/01:32:22,7955) /usr/sbin/apache2 -k start
(www-data,236540,14224,00:00:00/01:32:22,7956) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/18:39:50,8854) [kworker/1:0-events]
(root,0,0,00:00:00/05:08,9672) [kworker/u8:2-flush-8:0]
(root,13320,6536,00:00:00/01:54,12393) sshd: [accepted]
(root,13320,6480,00:00:00/01:45,12424) sshd: [accepted]
(root,13320,6536,00:00:00/01:40,12437) sshd: [accepted]
(root,13320,6332,00:00:00/01:34,12450) sshd: [accepted]
(root,13320,6456,00:00:00/01:26,12514) sshd: [accepted]
(root,13320,6532,00:00:00/00:55,13231) sshd: [accepted]
(sshd,13320,4340,00:00:00/00:55,13232) sshd: [net]
(root,13320,6524,00:00:00/00:44,13256) sshd: [accepted]
(root,13320,6416,00:00:00/00:23,13313) sshd: [accepted]
(sshd,13320,4276,00:00:00/00:23,13314) sshd: [net]
(root,13320,6528,00:00:00/00:20,13325) sshd: [accepted]
(root,14144,7396,00:00:00/00:09,13548) sshd: root [priv]
(sshd,13320,4224,00:00:00/00:09,13549) sshd: root [net]
(root,14144,7444,00:00:00/00:05,13902) sshd: root [priv]
(sshd,13320,4400,00:00:00/00:05,13903) sshd: root [net]
(root,14144,7304,00:00:00/00:04,13906) sshd: root [priv]
(sshd,13320,4224,00:00:00/00:04,13907) sshd: root [net]
(root,14464,7676,00:00:00/00:04,13908) sshd: unknown [priv]
(sshd,13320,4340,00:00:00/00:04,13909) sshd: unknown [net]
(root,13320,6536,00:00:00/00:03,13912) sshd: [accepted]
(root,14144,7448,00:00:00/00:02,13913) sshd: root [priv]
(sshd,13320,4332,00:00:00/00:02,13914) sshd: root [net]
(sshd,13320,4328,00:00:00/00:02,13915) sshd: [net]
(root,14464,7696,00:00:00/00:02,13916) sshd: unknown [priv]
(sshd,13320,4496,00:00:00/00:02,13917) sshd: unknown [net]
(root,14144,7396,00:00:00/00:02,13918) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:02,13919) sshd: root [net]
(root,13320,6356,00:00:00/00:01,13920) sshd: [accepted]
(root,14464,7612,00:00:00/00:01,13921) sshd: unknown [priv]
(sshd,13320,4412,00:00:00/00:01,13922) sshd: unknown [net]
(root,14464,7500,00:00:00/00:01,13923) sshd: unknown [priv]
(sshd,13320,4372,00:00:00/00:01,13924) sshd: unknown [net]
(root,13320,6488,00:00:00/00:01,13925) sshd: [accepted]
(sshd,13320,4208,00:00:00/00:01,13926) sshd: [net]
(root,8692,3456,00:00:00/00:00,14183) /bin/bash /usr/bin/check_mk_agent
(root,6608,2844,00:00:00/00:00,14202) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1504,00:00:00/00:00,14203) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/01:17:26,19260) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:04/1-15:28:43,19356) [kworker/3:3-mm_percpu_wq]
(root,5000,1376,00:00:00/493-10:11:02,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:42/3-18:55:30,21755) [kworker/0:3-events]
(root,5000,1508,00:00:00/464-06:29:27,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/353-17:07:05,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:44:46/353-17:07:05,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:46:28/353-17:07:05,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:46:03/353-17:07:05,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:47:11/353-17:07:05,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:19:40/353-17:07:05,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:02:06/14-10:31:46,26965) [kworker/2:1-events]
(root,0,0,00:00:19/4-01:12:10,31204) [kworker/1:1-events_freezable]
(root,0,0,00:00:00/09:07:59,31455) [kworker/0:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-08 00:33

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc69031d8f2

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,8992,05:49:24/491-09:22:52,1) /sbin/init
(root,0,0,00:00:01/491-09:22:52,2) [kthreadd]
(root,0,0,00:00:00/491-09:22:52,3) [rcu_gp]
(root,0,0,00:00:00/491-09:22:52,4) [rcu_par_gp]
(root,0,0,00:00:00/491-09:22:52,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/491-09:22:52,8) [mm_percpu_wq]
(root,0,0,00:00:00/491-09:22:52,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/491-09:22:52,10) [rcu_tasks_trace]
(root,0,0,01:13:09/491-09:22:52,11) [ksoftirqd/0]
(root,0,0,11:49:31/491-09:22:52,12) [rcu_sched]
(root,0,0,00:00:46/491-09:22:52,13) [migration/0]
(root,0,0,00:00:00/491-09:22:52,15) [cpuhp/0]
(root,0,0,00:00:00/491-09:22:52,16) [cpuhp/1]
(root,0,0,00:00:56/491-09:22:52,17) [migration/1]
(root,0,0,00:03:55/491-09:22:52,18) [ksoftirqd/1]
(root,0,0,00:00:00/491-09:22:52,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/491-09:22:52,21) [cpuhp/2]
(root,0,0,00:00:42/491-09:22:52,22) [migration/2]
(root,0,0,01:39:20/491-09:22:52,23) [ksoftirqd/2]
(root,0,0,00:00:00/491-09:22:52,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/491-09:22:52,26) [cpuhp/3]
(root,0,0,00:00:57/491-09:22:52,27) [migration/3]
(root,0,0,00:02:48/491-09:22:52,28) [ksoftirqd/3]
(root,0,0,00:00:00/491-09:22:52,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/491-09:22:52,31) [kdevtmpfs]
(root,0,0,00:00:00/491-09:22:52,32) [netns]
(root,0,0,00:00:00/491-09:22:52,33) [kauditd]
(root,0,0,00:00:09/491-09:22:52,34) [khungtaskd]
(root,0,0,00:00:00/491-09:22:52,35) [oom_reaper]
(root,0,0,00:00:00/491-09:22:52,36) [writeback]
(root,0,0,00:11:34/491-09:22:52,37) [kcompactd0]
(root,0,0,00:00:00/491-09:22:52,38) [ksmd]
(root,0,0,00:19:23/491-09:22:52,39) [khugepaged]
(root,0,0,00:00:00/491-09:22:52,58) [kintegrityd]
(root,0,0,00:00:00/491-09:22:52,59) [kblockd]
(root,0,0,00:00:00/491-09:22:52,60) [blkcg_punt_bio]
(root,0,0,00:00:00/491-09:22:52,61) [edac-poller]
(root,0,0,00:00:00/491-09:22:52,62) [devfreq_wq]
(root,0,0,00:06:19/491-09:22:52,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:15/491-09:22:51,65) [kswapd0]
(root,0,0,00:00:00/491-09:22:51,66) [kthrotld]
(root,0,0,00:00:00/491-09:22:51,67) [acpi_thermal_pm]
(root,0,0,00:04:15/491-09:22:51,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/491-09:22:51,70) [ipv6_addrconf]
(root,0,0,00:00:00/491-09:22:51,81) [kstrp]
(root,0,0,00:00:00/491-09:22:51,84) [zswap-shrink]
(root,0,0,00:00:00/491-09:22:51,85) [kworker/u9:0]
(root,0,0,00:03:16/491-09:22:51,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/491-09:22:51,135) [ata_sff]
(root,0,0,00:00:00/491-09:22:51,139) [scsi_eh_0]
(root,0,0,00:00:00/491-09:22:51,140) [scsi_tmf_0]
(root,0,0,00:00:00/491-09:22:51,141) [scsi_eh_1]
(root,0,0,00:00:00/491-09:22:51,142) [scsi_tmf_1]
(root,0,0,00:00:00/491-09:22:51,143) [scsi_eh_2]
(root,0,0,00:00:00/491-09:22:51,144) [scsi_tmf_2]
(root,0,0,00:00:00/491-09:22:51,145) [scsi_eh_3]
(root,0,0,00:00:00/491-09:22:51,146) [scsi_tmf_3]
(root,0,0,00:02:31/491-09:22:50,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:18/491-09:22:49,183) [jbd2/sda1-8]
(root,0,0,00:00:00/491-09:22:49,184) [ext4-rsv-conver]
(root,243640,189948,1-05:09:54/491-09:22:49,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:33/491-09:22:49,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/491-09:22:49,291) [watchdogd]
(root,0,0,00:00:00/491-09:22:49,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:21/491-09:22:49,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/491-09:22:49,349) [card0-crtc0]
(root,0,0,00:00:00/491-09:22:49,350) [card0-crtc1]
(root,0,0,00:00:00/491-09:22:49,351) [card0-crtc2]
(root,0,0,00:00:00/491-09:22:49,353) [cryptd]
(root,8472,2688,00:02:38/491-09:22:49,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/491-09:22:49,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7748,07:14:01/491-09:22:49,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:52/491-09:22:49,374) /lib/systemd/systemd-logind
(root,10768,2484,01:29:46/491-09:22:49,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,12:55:27/491-09:22:48,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:06/491-09:22:48,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:33/491-09:22:48,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,08:12:18/491-09:22:46,1740) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,6792,4584,00:15:58/491-09:22:46,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:54/491-09:22:45,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/491-09:22:38,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/491-09:22:38,1815) (sd-pam)
(root,0,0,00:00:13/4-01:57:01,2266) [kworker/3:0-events]
(root,0,0,00:00:00/01:10:29,7163) [kworker/u8:2-flush-8:0]
(root,7252,3572,00:00:00/491-09:10:31,7652) /bin/login -p --
(root,9320,4052,00:00:00/491-09:10:25,7664) -bash
(root,0,0,00:00:00/2-00:02:35,15245) [kworker/3:1-cgroup_destroy]
(root,0,0,00:00:00/54:29,20186) [kworker/u8:0-flush-8:0]
(root,5000,1376,00:00:00/491-08:40:25,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:19/1-17:24:53,21755) [kworker/0:3-events]
(root,0,0,00:00:00/1-00:02:35,22831) [kworker/1:2]
(root,5000,1508,00:00:00/462-04:58:50,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/09:01:03,23997) [kworker/0:1-mm_percpu_wq]
(zabbix,20484,1544,00:00:00/351-15:36:28,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:44:31/351-15:36:28,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:43:47/351-15:36:28,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:43:22/351-15:36:28,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:44:29/351-15:36:28,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:19:34/351-15:36:28,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/1-09:01:03,26796) [kworker/2:0]
(root,0,0,00:00:00/03:31,26868) [kworker/u8:1-flush-8:0]
(root,0,0,00:01:48/12-09:01:09,26965) [kworker/2:1-events]
(root,0,0,00:00:00/02:35,27573) [kworker/0:0]
(root,0,0,00:00:00/02:35,27633) [kworker/3:2-events]
(www-data,7028,3732,00:00:00/01:45,28280) /usr/sbin/apache2 -k start
(www-data,235868,14224,00:00:00/01:45,28281) /usr/sbin/apache2 -k start
(www-data,235876,14220,00:00:00/01:45,28282) /usr/sbin/apache2 -k start
(root,13320,6400,00:00:00/01:25,28577) sshd: [accepted]
(root,13320,6464,00:00:00/00:38,29056) sshd: [accepted]
(root,13320,6396,00:00:00/00:08,29380) sshd: [accepted]
(root,13320,6300,00:00:00/00:06,29391) sshd: [accepted]
(sshd,13320,4380,00:00:00/00:05,29394) sshd: [net]
(root,14464,7660,00:00:00/00:03,29395) sshd: unknown [priv]
(sshd,13320,4400,00:00:00/00:03,29396) sshd: unknown [net]
(root,14464,7436,00:00:00/00:03,29397) sshd: unknown [priv]
(sshd,13320,4248,00:00:00/00:03,29398) sshd: unknown [net]
(root,14464,7472,00:00:00/00:02,29399) sshd: unknown [priv]
(sshd,13320,4232,00:00:00/00:02,29400) sshd: unknown [net]
(root,14464,7540,00:00:00/00:01,29573) sshd: unknown [priv]
(sshd,13320,4268,00:00:00/00:01,29574) sshd: unknown [net]
(root,14464,7696,00:00:00/00:01,29575) sshd: unknown [priv]
(sshd,13320,4340,00:00:00/00:01,29576) sshd: unknown [net]
(root,14144,7408,00:00:00/00:01,29577) sshd: root [priv]
(sshd,13320,4308,00:00:00/00:01,29578) sshd: root [net]
(root,8692,3372,00:00:00/00:00,29627) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,29646) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1548,00:00:00/00:00,29647) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/40:14,31139) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:09/1-23:41:33,31204) [kworker/1:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-05 23:02

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6bd447a9c

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9012,05:47:25/489-10:32:02,1) /sbin/init
(root,0,0,00:00:01/489-10:32:02,2) [kthreadd]
(root,0,0,00:00:00/489-10:32:02,3) [rcu_gp]
(root,0,0,00:00:00/489-10:32:02,4) [rcu_par_gp]
(root,0,0,00:00:00/489-10:32:02,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/489-10:32:02,8) [mm_percpu_wq]
(root,0,0,00:00:00/489-10:32:02,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/489-10:32:02,10) [rcu_tasks_trace]
(root,0,0,01:12:54/489-10:32:02,11) [ksoftirqd/0]
(root,0,0,11:46:36/489-10:32:02,12) [rcu_sched]
(root,0,0,00:00:46/489-10:32:02,13) [migration/0]
(root,0,0,00:00:00/489-10:32:02,15) [cpuhp/0]
(root,0,0,00:00:00/489-10:32:02,16) [cpuhp/1]
(root,0,0,00:00:56/489-10:32:02,17) [migration/1]
(root,0,0,00:03:54/489-10:32:02,18) [ksoftirqd/1]
(root,0,0,00:00:00/489-10:32:02,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/489-10:32:02,21) [cpuhp/2]
(root,0,0,00:00:42/489-10:32:02,22) [migration/2]
(root,0,0,01:39:03/489-10:32:02,23) [ksoftirqd/2]
(root,0,0,00:00:00/489-10:32:02,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/489-10:32:02,26) [cpuhp/3]
(root,0,0,00:00:57/489-10:32:02,27) [migration/3]
(root,0,0,00:02:47/489-10:32:02,28) [ksoftirqd/3]
(root,0,0,00:00:00/489-10:32:02,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/489-10:32:02,31) [kdevtmpfs]
(root,0,0,00:00:00/489-10:32:02,32) [netns]
(root,0,0,00:00:00/489-10:32:02,33) [kauditd]
(root,0,0,00:00:09/489-10:32:02,34) [khungtaskd]
(root,0,0,00:00:00/489-10:32:02,35) [oom_reaper]
(root,0,0,00:00:00/489-10:32:02,36) [writeback]
(root,0,0,00:11:32/489-10:32:02,37) [kcompactd0]
(root,0,0,00:00:00/489-10:32:02,38) [ksmd]
(root,0,0,00:19:19/489-10:32:02,39) [khugepaged]
(root,0,0,00:00:00/489-10:32:02,58) [kintegrityd]
(root,0,0,00:00:00/489-10:32:02,59) [kblockd]
(root,0,0,00:00:00/489-10:32:02,60) [blkcg_punt_bio]
(root,0,0,00:00:00/489-10:32:02,61) [edac-poller]
(root,0,0,00:00:00/489-10:32:02,62) [devfreq_wq]
(root,0,0,00:06:17/489-10:32:02,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:15/489-10:32:01,65) [kswapd0]
(root,0,0,00:00:00/489-10:32:01,66) [kthrotld]
(root,0,0,00:00:00/489-10:32:01,67) [acpi_thermal_pm]
(root,0,0,00:04:14/489-10:32:01,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/489-10:32:01,70) [ipv6_addrconf]
(root,0,0,00:00:00/489-10:32:01,81) [kstrp]
(root,0,0,00:00:00/489-10:32:01,84) [zswap-shrink]
(root,0,0,00:00:00/489-10:32:01,85) [kworker/u9:0]
(root,0,0,00:03:16/489-10:32:01,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/489-10:32:01,135) [ata_sff]
(root,0,0,00:00:00/489-10:32:01,139) [scsi_eh_0]
(root,0,0,00:00:00/489-10:32:01,140) [scsi_tmf_0]
(root,0,0,00:00:00/489-10:32:01,141) [scsi_eh_1]
(root,0,0,00:00:00/489-10:32:01,142) [scsi_tmf_1]
(root,0,0,00:00:00/489-10:32:01,143) [scsi_eh_2]
(root,0,0,00:00:00/489-10:32:01,144) [scsi_tmf_2]
(root,0,0,00:00:00/489-10:32:01,145) [scsi_eh_3]
(root,0,0,00:00:00/489-10:32:01,146) [scsi_tmf_3]
(root,0,0,00:02:31/489-10:32:00,153) [kworker/3:1H-kblockd]
(root,0,0,00:14:14/489-10:31:59,183) [jbd2/sda1-8]
(root,0,0,00:00:00/489-10:31:59,184) [ext4-rsv-conver]
(root,153604,94808,1-05:02:12/489-10:31:59,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:33/489-10:31:59,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/489-10:31:59,291) [watchdogd]
(root,0,0,00:00:00/489-10:31:59,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:21/489-10:31:59,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/489-10:31:59,349) [card0-crtc0]
(root,0,0,00:00:00/489-10:31:59,350) [card0-crtc1]
(root,0,0,00:00:00/489-10:31:59,351) [card0-crtc2]
(root,0,0,00:00:00/489-10:31:59,353) [cryptd]
(root,8472,2688,00:02:37/489-10:31:59,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/489-10:31:59,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7748,07:11:59/489-10:31:59,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:52/489-10:31:59,374) /lib/systemd/systemd-logind
(root,10768,2484,01:29:25/489-10:31:59,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9096,12:52:37/489-10:31:58,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,5968,00:22:01/489-10:31:58,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1884,00:12:30/489-10:31:58,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,08:10:04/489-10:31:56,1740) sshd: /usr/sbin/sshd -D [listener] 19 of 10-100 startups
(root,6792,4584,00:15:54/489-10:31:56,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:52/489-10:31:55,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/489-10:31:48,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/489-10:31:48,1815) (sd-pam)
(root,0,0,00:00:06/2-03:06:11,2266) [kworker/3:0-mm_percpu_wq]
(root,0,0,00:00:00/00:53,4376) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:00/14:03:56,4434) [kworker/1:2-events]
(root,13320,6576,00:00:00/00:28,5039) sshd: [accepted]
(root,13320,6444,00:00:00/00:28,5041) sshd: [accepted]
(root,13320,6500,00:00:00/00:28,5042) sshd: [accepted]
(root,13320,6552,00:00:00/00:28,5044) sshd: [accepted]
(root,13320,6408,00:00:00/00:27,5050) sshd: [accepted]
(root,13320,6576,00:00:00/00:27,5051) sshd: [accepted]
(root,13320,6436,00:00:00/00:27,5054) sshd: [accepted]
(root,13320,6464,00:00:00/00:27,5057) sshd: [accepted]
(root,13320,6456,00:00:00/00:27,5058) sshd: [accepted]
(root,13320,6460,00:00:00/00:27,5059) sshd: [accepted]
(root,13320,6388,00:00:00/00:27,5060) sshd: [accepted]
(root,13320,6536,00:00:00/00:27,5061) sshd: [accepted]
(root,13320,6544,00:00:00/00:27,5062) sshd: [accepted]
(root,13320,6352,00:00:00/00:27,5067) sshd: [accepted]
(root,13320,6316,00:00:00/00:27,5068) sshd: [accepted]
(root,13320,6360,00:00:00/00:04,5125) sshd: [accepted]
(root,14464,7444,00:00:00/00:02,5128) sshd: unknown [priv]
(sshd,13320,4204,00:00:00/00:02,5129) sshd: unknown [net]
(root,14624,7560,00:00:00/00:02,5130) sshd: unknown [priv]
(sshd,13320,4324,00:00:00/00:02,5131) sshd: unknown [net]
(sshd,13320,4316,00:00:00/00:01,5132) sshd: [net]
(root,14380,7648,00:00:00/00:00,5133) sshd: unknown [priv]
(sshd,13320,4372,00:00:00/00:00,5134) sshd: unknown [net]
(root,8692,3356,00:00:00/00:00,5189) /bin/bash /usr/bin/check_mk_agent
(root,6608,2732,00:00:00/00:00,5208) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1464,00:00:00/00:00,5209) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,7252,3572,00:00:00/489-10:19:41,7652) /bin/login -p --
(root,9320,4052,00:00:00/489-10:19:35,7664) -bash
(root,0,0,00:00:00/18:30:03,8923) [kworker/0:1]
(root,0,0,00:00:00/01:11:45,15245) [kworker/3:1-events]
(root,0,0,00:00:00/01:11:45,15252) [kworker/u8:2-flush-8:0]
(www-data,7028,3732,00:00:00/01:10:55,15922) /usr/sbin/apache2 -k start
(www-data,236540,18312,00:00:00/01:10:55,15923) /usr/sbin/apache2 -k start
(www-data,236820,16304,00:00:00/01:10:55,15924) /usr/sbin/apache2 -k start
(root,5000,1376,00:00:00/489-09:49:35,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:18/1-15:50:56,22337) [kworker/0:2-events]
(root,5000,1508,00:00:00/460-06:08:00,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/349-16:45:38,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:44:17/349-16:45:38,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:41:20/349-16:45:38,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:40:56/349-16:45:38,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:42:02/349-16:45:38,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:19:27/349-16:45:38,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:01:31/10-10:10:19,26965) [kworker/2:1-events]
(root,0,0,00:00:00/54:23,28411) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/50:43,31203) [kworker/2:0]
(root,0,0,00:00:00/50:43,31204) [kworker/1:1-mm_percpu_wq]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-04 00:11

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6c48d2249

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9008,05:25:39/464-08:52:06,1) /sbin/init
(root,0,0,00:00:01/464-08:52:06,2) [kthreadd]
(root,0,0,00:00:00/464-08:52:06,3) [rcu_gp]
(root,0,0,00:00:00/464-08:52:06,4) [rcu_par_gp]
(root,0,0,00:00:00/464-08:52:06,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/464-08:52:06,8) [mm_percpu_wq]
(root,0,0,00:00:00/464-08:52:06,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/464-08:52:06,10) [rcu_tasks_trace]
(root,0,0,01:08:51/464-08:52:06,11) [ksoftirqd/0]
(root,0,0,11:12:35/464-08:52:06,12) [rcu_sched]
(root,0,0,00:00:43/464-08:52:06,13) [migration/0]
(root,0,0,00:00:00/464-08:52:06,15) [cpuhp/0]
(root,0,0,00:00:00/464-08:52:06,16) [cpuhp/1]
(root,0,0,00:00:53/464-08:52:06,17) [migration/1]
(root,0,0,00:03:42/464-08:52:06,18) [ksoftirqd/1]
(root,0,0,00:00:00/464-08:52:06,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/464-08:52:06,21) [cpuhp/2]
(root,0,0,00:00:39/464-08:52:06,22) [migration/2]
(root,0,0,01:30:32/464-08:52:06,23) [ksoftirqd/2]
(root,0,0,00:00:00/464-08:52:06,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/464-08:52:06,26) [cpuhp/3]
(root,0,0,00:00:54/464-08:52:06,27) [migration/3]
(root,0,0,00:02:38/464-08:52:06,28) [ksoftirqd/3]
(root,0,0,00:00:00/464-08:52:06,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/464-08:52:06,31) [kdevtmpfs]
(root,0,0,00:00:00/464-08:52:06,32) [netns]
(root,0,0,00:00:00/464-08:52:06,33) [kauditd]
(root,0,0,00:00:08/464-08:52:06,34) [khungtaskd]
(root,0,0,00:00:00/464-08:52:06,35) [oom_reaper]
(root,0,0,00:00:00/464-08:52:06,36) [writeback]
(root,0,0,00:10:58/464-08:52:06,37) [kcompactd0]
(root,0,0,00:00:00/464-08:52:06,38) [ksmd]
(root,0,0,00:18:16/464-08:52:06,39) [khugepaged]
(root,0,0,00:00:00/464-08:52:06,58) [kintegrityd]
(root,0,0,00:00:00/464-08:52:06,59) [kblockd]
(root,0,0,00:00:00/464-08:52:06,60) [blkcg_punt_bio]
(root,0,0,00:00:00/464-08:52:06,61) [edac-poller]
(root,0,0,00:00:00/464-08:52:06,62) [devfreq_wq]
(root,0,0,00:05:57/464-08:52:06,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:12/464-08:52:05,65) [kswapd0]
(root,0,0,00:00:00/464-08:52:05,66) [kthrotld]
(root,0,0,00:00:00/464-08:52:05,67) [acpi_thermal_pm]
(root,0,0,00:04:00/464-08:52:05,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/464-08:52:05,70) [ipv6_addrconf]
(root,0,0,00:00:00/464-08:52:05,81) [kstrp]
(root,0,0,00:00:00/464-08:52:05,84) [zswap-shrink]
(root,0,0,00:00:00/464-08:52:05,85) [kworker/u9:0]
(root,0,0,00:03:05/464-08:52:05,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/464-08:52:05,135) [ata_sff]
(root,0,0,00:00:00/464-08:52:05,139) [scsi_eh_0]
(root,0,0,00:00:00/464-08:52:05,140) [scsi_tmf_0]
(root,0,0,00:00:00/464-08:52:05,141) [scsi_eh_1]
(root,0,0,00:00:00/464-08:52:05,142) [scsi_tmf_1]
(root,0,0,00:00:00/464-08:52:05,143) [scsi_eh_2]
(root,0,0,00:00:00/464-08:52:05,144) [scsi_tmf_2]
(root,0,0,00:00:00/464-08:52:05,145) [scsi_eh_3]
(root,0,0,00:00:00/464-08:52:05,146) [scsi_tmf_3]
(root,0,0,00:02:23/464-08:52:04,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:28/464-08:52:03,183) [jbd2/sda1-8]
(root,0,0,00:00:00/464-08:52:03,184) [ext4-rsv-conver]
(root,210684,153464,1-03:40:53/464-08:52:03,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:31/464-08:52:03,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/464-08:52:03,291) [watchdogd]
(root,0,0,00:00:00/464-08:52:03,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:15/464-08:52:03,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/464-08:52:03,349) [card0-crtc0]
(root,0,0,00:00:00/464-08:52:03,350) [card0-crtc1]
(root,0,0,00:00:00/464-08:52:03,351) [card0-crtc2]
(root,0,0,00:00:00/464-08:52:03,353) [cryptd]
(root,8472,2688,00:02:29/464-08:52:03,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/464-08:52:03,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:51:20/464-08:52:03,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:49/464-08:52:03,374) /lib/systemd/systemd-logind
(root,10768,2568,01:24:44/464-08:52:03,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9228,12:04:10/464-08:52:02,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6052,00:20:50/464-08:52:02,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1968,00:11:50/464-08:52:02,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:47:51/464-08:52:00,1740) sshd: /usr/sbin/sshd -D [listener] 7 of 10-100 startups
(root,6792,4584,00:15:04/464-08:52:00,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:34/464-08:51:59,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/464-08:51:52,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/464-08:51:52,1815) (sd-pam)
(root,0,0,00:00:00/01:43,6277) [kworker/u8:3-ext4-rsv-conversion]
(root,13320,6560,00:00:00/01:42,6284) sshd: [accepted]
(sshd,13320,4324,00:00:00/01:41,6287) sshd: [net]
(root,13320,6360,00:00:00/01:11,6774) sshd: [accepted]
(sshd,13320,4336,00:00:00/01:10,6781) sshd: [net]
(root,14464,7692,00:00:00/00:04,7573) sshd: unknown [priv]
(sshd,13320,4324,00:00:00/00:04,7574) sshd: unknown [net]
(root,14144,7460,00:00:00/00:04,7575) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:04,7577) sshd: root [net]
(root,14144,7500,00:00:00/00:03,7579) sshd: root [priv]
(sshd,13320,4316,00:00:00/00:03,7580) sshd: root [net]
(root,14464,7640,00:00:00/00:02,7581) sshd: unknown [priv]
(sshd,13320,4404,00:00:00/00:02,7582) sshd: unknown [net]
(root,14464,7556,00:00:00/00:01,7583) sshd: unknown [priv]
(sshd,13320,4312,00:00:00/00:01,7584) sshd: unknown [net]
(root,7252,3572,00:00:00/464-08:39:45,7652) /bin/login -p --
(root,9320,4052,00:00:00/464-08:39:39,7664) -bash
(root,8692,3352,00:00:00/00:00,7762) /bin/bash /usr/bin/check_mk_agent
(root,6608,2684,00:00:00/00:00,7781) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1484,00:00:00/00:00,7782) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/2-02:13:21,13388) [kworker/1:2-events]
(root,0,0,00:00:00/46:51,13743) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:02/17:36:36,15337) [kworker/3:0-mm_percpu_wq]
(root,0,0,00:00:00/11:01:42,15987) [kworker/2:1]
(root,0,0,00:00:10/1-04:13:53,16235) [kworker/2:0-events]
(root,0,0,00:00:32/2-23:16:40,16975) [kworker/0:2-mm_percpu_wq]
(root,5000,1376,00:00:00/464-08:09:39,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/31:49,21914) [kworker/3:2-events]
(www-data,7028,3736,00:00:00/30:59,22437) /usr/sbin/apache2 -k start
(www-data,235980,14224,00:00:00/30:59,22438) /usr/sbin/apache2 -k start
(www-data,235924,16268,00:00:00/30:59,22439) /usr/sbin/apache2 -k start
(root,5000,1508,00:00:00/435-04:28:04,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:44/11-02:43:22,24674) [kworker/1:0-mm_percpu_wq]
(zabbix,20484,1544,00:00:00/324-15:05:42,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:41:03/324-15:05:42,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:07:04/324-15:05:42,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:06:39/324-15:05:42,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:07:45/324-15:05:42,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:18:03/324-15:05:42,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/24:50,26102) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/1-00:31:49,28863) [kworker/0:1]
(root,0,0,00:00:00/14:43,31648) [kworker/u8:1-flush-8:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-09 22:31

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc63aa518a1

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,8992,05:24:10/462-07:57:41,1) /sbin/init
(root,0,0,00:00:01/462-07:57:41,2) [kthreadd]
(root,0,0,00:00:00/462-07:57:41,3) [rcu_gp]
(root,0,0,00:00:00/462-07:57:41,4) [rcu_par_gp]
(root,0,0,00:00:00/462-07:57:41,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/462-07:57:41,8) [mm_percpu_wq]
(root,0,0,00:00:00/462-07:57:41,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/462-07:57:41,10) [rcu_tasks_trace]
(root,0,0,01:08:29/462-07:57:41,11) [ksoftirqd/0]
(root,0,0,11:09:48/462-07:57:41,12) [rcu_sched]
(root,0,0,00:00:43/462-07:57:41,13) [migration/0]
(root,0,0,00:00:00/462-07:57:41,15) [cpuhp/0]
(root,0,0,00:00:00/462-07:57:41,16) [cpuhp/1]
(root,0,0,00:00:53/462-07:57:41,17) [migration/1]
(root,0,0,00:03:42/462-07:57:41,18) [ksoftirqd/1]
(root,0,0,00:00:00/462-07:57:41,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/462-07:57:41,21) [cpuhp/2]
(root,0,0,00:00:39/462-07:57:41,22) [migration/2]
(root,0,0,01:30:02/462-07:57:41,23) [ksoftirqd/2]
(root,0,0,00:00:00/462-07:57:41,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/462-07:57:41,26) [cpuhp/3]
(root,0,0,00:00:54/462-07:57:41,27) [migration/3]
(root,0,0,00:02:38/462-07:57:41,28) [ksoftirqd/3]
(root,0,0,00:00:00/462-07:57:41,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/462-07:57:41,31) [kdevtmpfs]
(root,0,0,00:00:00/462-07:57:41,32) [netns]
(root,0,0,00:00:00/462-07:57:41,33) [kauditd]
(root,0,0,00:00:08/462-07:57:41,34) [khungtaskd]
(root,0,0,00:00:00/462-07:57:41,35) [oom_reaper]
(root,0,0,00:00:00/462-07:57:41,36) [writeback]
(root,0,0,00:10:55/462-07:57:41,37) [kcompactd0]
(root,0,0,00:00:00/462-07:57:41,38) [ksmd]
(root,0,0,00:18:11/462-07:57:41,39) [khugepaged]
(root,0,0,00:00:00/462-07:57:41,58) [kintegrityd]
(root,0,0,00:00:00/462-07:57:41,59) [kblockd]
(root,0,0,00:00:00/462-07:57:41,60) [blkcg_punt_bio]
(root,0,0,00:00:00/462-07:57:41,61) [edac-poller]
(root,0,0,00:00:00/462-07:57:41,62) [devfreq_wq]
(root,0,0,00:05:56/462-07:57:41,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:11/462-07:57:40,65) [kswapd0]
(root,0,0,00:00:00/462-07:57:40,66) [kthrotld]
(root,0,0,00:00:00/462-07:57:40,67) [acpi_thermal_pm]
(root,0,0,00:03:59/462-07:57:40,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/462-07:57:40,70) [ipv6_addrconf]
(root,0,0,00:00:00/462-07:57:40,81) [kstrp]
(root,0,0,00:00:00/462-07:57:40,84) [zswap-shrink]
(root,0,0,00:00:00/462-07:57:40,85) [kworker/u9:0]
(root,0,0,00:03:04/462-07:57:40,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/462-07:57:40,135) [ata_sff]
(root,0,0,00:00:00/462-07:57:40,139) [scsi_eh_0]
(root,0,0,00:00:00/462-07:57:40,140) [scsi_tmf_0]
(root,0,0,00:00:00/462-07:57:40,141) [scsi_eh_1]
(root,0,0,00:00:00/462-07:57:40,142) [scsi_tmf_1]
(root,0,0,00:00:00/462-07:57:40,143) [scsi_eh_2]
(root,0,0,00:00:00/462-07:57:40,144) [scsi_tmf_2]
(root,0,0,00:00:00/462-07:57:40,145) [scsi_eh_3]
(root,0,0,00:00:00/462-07:57:40,146) [scsi_tmf_3]
(root,0,0,00:02:22/462-07:57:39,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:24/462-07:57:38,183) [jbd2/sda1-8]
(root,0,0,00:00:00/462-07:57:38,184) [ext4-rsv-conver]
(root,157816,101244,1-03:34:53/462-07:57:38,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:31/462-07:57:38,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/462-07:57:38,291) [watchdogd]
(root,0,0,00:00:00/462-07:57:38,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:15/462-07:57:38,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/462-07:57:38,349) [card0-crtc0]
(root,0,0,00:00:00/462-07:57:38,350) [card0-crtc1]
(root,0,0,00:00:00/462-07:57:38,351) [card0-crtc2]
(root,0,0,00:00:00/462-07:57:38,353) [cryptd]
(root,8472,2688,00:02:28/462-07:57:38,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/462-07:57:38,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:49:52/462-07:57:38,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:49/462-07:57:38,374) /lib/systemd/systemd-logind
(root,10768,2568,01:24:21/462-07:57:38,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9228,12:00:09/462-07:57:37,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6052,00:20:44/462-07:57:37,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1968,00:11:47/462-07:57:37,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:46:13/462-07:57:35,1740) sshd: /usr/sbin/sshd -D [listener] 11 of 10-100 startups
(root,6792,4584,00:15:00/462-07:57:35,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:33/462-07:57:34,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/462-07:57:27,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/462-07:57:27,1815) (sd-pam)
(root,7252,3572,00:00:00/462-07:45:20,7652) /bin/login -p --
(root,9320,4052,00:00:00/462-07:45:14,7664) -bash
(root,0,0,00:00:00/12:27:13,9509) [kworker/3:1]
(www-data,7028,3732,00:00:00/23:36:34,11685) /usr/sbin/apache2 -k start
(www-data,236836,15200,00:00:02/23:36:34,11686) /usr/sbin/apache2 -k start
(www-data,236892,19668,00:00:03/23:36:34,11687) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/01:18:56,13388) [kworker/1:2-events]
(root,0,0,00:00:00/15:53,13715) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:10/22:22:15,16975) [kworker/0:2-events]
(root,0,0,00:00:35/13-03:30:32,18855) [kworker/3:0-mm_percpu_wq]
(root,0,0,00:00:00/16:40:33,19877) [kworker/2:0]
(root,13320,6292,00:00:00/01:36,20986) sshd: [accepted]
(root,13320,6536,00:00:00/01:19,21400) sshd: [accepted]
(root,13320,6352,00:00:00/01:01,21456) sshd: [accepted]
(root,13320,6472,00:00:00/00:42,21507) sshd: [accepted]
(root,0,0,00:00:00/00:40,21508) [kworker/u8:1]
(root,5000,1376,00:00:00/462-07:15:14,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/1-00:20:47,21703) [kworker/0:0-events]
(root,13320,6464,00:00:00/00:26,21722) sshd: [accepted]
(root,13320,6216,00:00:00/00:11,21954) sshd: [accepted]
(root,13320,6496,00:00:00/00:10,21958) sshd: [accepted]
(sshd,13320,4504,00:00:00/00:10,21959) sshd: [net]
(root,14144,7420,00:00:00/00:03,21973) sshd: root [priv]
(sshd,13320,4264,00:00:00/00:03,21974) sshd: root [net]
(root,14624,7520,00:00:00/00:03,21976) sshd: unknown [priv]
(sshd,13320,4312,00:00:00/00:03,21977) sshd: unknown [net]
(root,14464,7432,00:00:00/00:02,21978) sshd: unknown [priv]
(sshd,13320,4208,00:00:00/00:02,21979) sshd: unknown [net]
(root,14144,7280,00:00:00/00:02,21981) sshd: root [priv]
(sshd,13320,4228,00:00:00/00:02,21982) sshd: root [net]
(root,8692,3388,00:00:00/00:00,22031) /bin/bash /usr/bin/check_mk_agent
(root,6608,2764,00:00:00/00:00,22050) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1536,00:00:00/00:00,22051) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,5000,1508,00:00:00/433-03:33:39,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:35/9-01:48:57,24674) [kworker/1:0-mm_percpu_wq]
(zabbix,20484,1544,00:00:00/322-14:11:17,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:40:48/322-14:11:17,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:04:16/322-14:11:17,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:03:52/322-14:11:17,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:04:55/322-14:11:17,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:56/322-14:11:17,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/50:30,28600) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:13/1-16:46:03,30694) [kworker/2:1-mm_percpu_wq]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-07 21:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc699f6595d

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9012,05:22:45/460-09:42:18,1) /sbin/init
(root,0,0,00:00:01/460-09:42:18,2) [kthreadd]
(root,0,0,00:00:00/460-09:42:18,3) [rcu_gp]
(root,0,0,00:00:00/460-09:42:18,4) [rcu_par_gp]
(root,0,0,00:00:00/460-09:42:18,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/460-09:42:18,8) [mm_percpu_wq]
(root,0,0,00:00:00/460-09:42:18,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/460-09:42:18,10) [rcu_tasks_trace]
(root,0,0,01:08:11/460-09:42:18,11) [ksoftirqd/0]
(root,0,0,11:07:02/460-09:42:18,12) [rcu_sched]
(root,0,0,00:00:43/460-09:42:18,13) [migration/0]
(root,0,0,00:00:00/460-09:42:18,15) [cpuhp/0]
(root,0,0,00:00:00/460-09:42:18,16) [cpuhp/1]
(root,0,0,00:00:53/460-09:42:18,17) [migration/1]
(root,0,0,00:03:41/460-09:42:18,18) [ksoftirqd/1]
(root,0,0,00:00:00/460-09:42:18,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/460-09:42:18,21) [cpuhp/2]
(root,0,0,00:00:39/460-09:42:18,22) [migration/2]
(root,0,0,01:29:41/460-09:42:18,23) [ksoftirqd/2]
(root,0,0,00:00:00/460-09:42:18,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/460-09:42:18,26) [cpuhp/3]
(root,0,0,00:00:53/460-09:42:18,27) [migration/3]
(root,0,0,00:02:37/460-09:42:18,28) [ksoftirqd/3]
(root,0,0,00:00:00/460-09:42:18,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/460-09:42:18,31) [kdevtmpfs]
(root,0,0,00:00:00/460-09:42:18,32) [netns]
(root,0,0,00:00:00/460-09:42:18,33) [kauditd]
(root,0,0,00:00:08/460-09:42:18,34) [khungtaskd]
(root,0,0,00:00:00/460-09:42:18,35) [oom_reaper]
(root,0,0,00:00:00/460-09:42:18,36) [writeback]
(root,0,0,00:10:53/460-09:42:18,37) [kcompactd0]
(root,0,0,00:00:00/460-09:42:18,38) [ksmd]
(root,0,0,00:18:06/460-09:42:18,39) [khugepaged]
(root,0,0,00:00:00/460-09:42:18,58) [kintegrityd]
(root,0,0,00:00:00/460-09:42:18,59) [kblockd]
(root,0,0,00:00:00/460-09:42:18,60) [blkcg_punt_bio]
(root,0,0,00:00:00/460-09:42:18,61) [edac-poller]
(root,0,0,00:00:00/460-09:42:18,62) [devfreq_wq]
(root,0,0,00:05:54/460-09:42:18,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:11/460-09:42:17,65) [kswapd0]
(root,0,0,00:00:00/460-09:42:17,66) [kthrotld]
(root,0,0,00:00:00/460-09:42:17,67) [acpi_thermal_pm]
(root,0,0,00:03:57/460-09:42:17,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/460-09:42:17,70) [ipv6_addrconf]
(root,0,0,00:00:00/460-09:42:17,81) [kstrp]
(root,0,0,00:00:00/460-09:42:17,84) [zswap-shrink]
(root,0,0,00:00:00/460-09:42:17,85) [kworker/u9:0]
(root,0,0,00:03:03/460-09:42:17,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/460-09:42:17,135) [ata_sff]
(root,0,0,00:00:00/460-09:42:17,139) [scsi_eh_0]
(root,0,0,00:00:00/460-09:42:17,140) [scsi_tmf_0]
(root,0,0,00:00:00/460-09:42:17,141) [scsi_eh_1]
(root,0,0,00:00:00/460-09:42:17,142) [scsi_tmf_1]
(root,0,0,00:00:00/460-09:42:17,143) [scsi_eh_2]
(root,0,0,00:00:00/460-09:42:17,144) [scsi_tmf_2]
(root,0,0,00:00:00/460-09:42:17,145) [scsi_eh_3]
(root,0,0,00:00:00/460-09:42:17,146) [scsi_tmf_3]
(root,0,0,00:02:22/460-09:42:16,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:20/460-09:42:15,183) [jbd2/sda1-8]
(root,0,0,00:00:00/460-09:42:15,184) [ext4-rsv-conver]
(root,317404,209148,1-03:29:18/460-09:42:15,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:31/460-09:42:15,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/460-09:42:15,291) [watchdogd]
(root,0,0,00:00:00/460-09:42:15,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:15/460-09:42:15,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/460-09:42:15,349) [card0-crtc0]
(root,0,0,00:00:00/460-09:42:15,350) [card0-crtc1]
(root,0,0,00:00:00/460-09:42:15,351) [card0-crtc2]
(root,0,0,00:00:00/460-09:42:15,353) [cryptd]
(root,8472,2688,00:02:27/460-09:42:15,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/460-09:42:15,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:48:27/460-09:42:15,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:48/460-09:42:15,374) /lib/systemd/systemd-logind
(root,10768,2568,01:24:00/460-09:42:15,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9228,11:56:42/460-09:42:14,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6052,00:20:39/460-09:42:14,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1968,00:11:44/460-09:42:14,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:44:40/460-09:42:12,1740) sshd: /usr/sbin/sshd -D [listener] 8 of 10-100 startups
(root,6792,4584,00:14:56/460-09:42:12,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:32/460-09:42:11,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/460-09:42:04,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/460-09:42:04,1815) (sd-pam)
(root,7252,3572,00:00:00/460-09:29:57,7652) /bin/login -p --
(root,9320,4052,00:00:00/460-09:29:51,7664) -bash
(root,0,0,00:00:00/1-06:14:20,9467) [kworker/0:0-events]
(root,0,0,00:00:05/14:54:22,10726) [kworker/2:0-mm_percpu_wq]
(root,0,0,00:00:00/01:22:01,12486) [kworker/3:1-events]
(root,0,0,00:00:00/16:06,12685) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/01:21:11,12968) [kworker/1:2-events]
(www-data,7028,3732,00:00:00/01:21:11,12969) /usr/sbin/apache2 -k start
(www-data,235948,10136,00:00:00/01:21:11,12970) /usr/sbin/apache2 -k start
(www-data,235940,14220,00:00:00/01:21:11,12971) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/06:16,17248) [kworker/u8:2]
(root,0,0,00:00:30/11-05:15:09,18855) [kworker/3:0-mm_percpu_wq]
(root,13320,6444,00:00:00/01:50,19370) sshd: [accepted]
(sshd,13320,4344,00:00:00/01:50,19371) sshd: [net]
(root,13320,6528,00:00:00/01:44,19386) sshd: [accepted]
(sshd,13320,4404,00:00:00/01:44,19387) sshd: [net]
(root,0,0,00:00:00/18:55:24,19564) [kworker/2:2-cgroup_destroy]
(root,13320,6412,00:00:00/00:35,20667) sshd: [accepted]
(sshd,13320,4308,00:00:00/00:35,20668) sshd: [net]
(root,14464,7696,00:00:00/00:04,20724) sshd: unknown [priv]
(sshd,13320,4276,00:00:00/00:04,20725) sshd: unknown [net]
(root,14464,7652,00:00:00/00:04,20726) sshd: unknown [priv]
(sshd,13320,4400,00:00:00/00:04,20727) sshd: unknown [net]
(root,14464,7592,00:00:00/00:04,20728) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:04,20729) sshd: unknown [net]
(root,14464,7656,00:00:00/00:01,20730) sshd: unknown [priv]
(sshd,13320,4324,00:00:00/00:01,20731) sshd: unknown [net]
(root,11424,2924,00:00:00/00:00,20732) /usr/sbin/CRON -f
(root,2564,1416,00:00:00/00:00,20733) /bin/sh -c /home/krzysiek/linux-stat-get-60s
(root,8612,3016,00:00:00/00:00,20734) /bin/bash /home/krzysiek/linux-stat-get-60s
(root,13320,6416,00:00:00/00:00,20878) sshd: [accepted]
(sshd,13320,4228,00:00:00/00:00,20888) sshd: [net]
(root,8692,3392,00:00:00/00:00,20937) /bin/bash /usr/bin/check_mk_agent
(root,6608,2696,00:00:00/00:00,20961) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1528,00:00:00/00:00,20962) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,5000,1376,00:00:00/460-08:59:51,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/431-05:18:16,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:26/7-03:33:34,24674) [kworker/1:0-mm_percpu_wq]
(zabbix,20484,1544,00:00:00/320-15:55:54,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:40:33/320-15:55:54,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,07:01:44/320-15:55:54,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,07:01:19/320-15:55:54,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,07:02:22/320-15:55:54,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:50/320-15:55:54,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/45:55,31809) [kworker/u8:0-flush-8:0]
(root,0,0,00:01:17/7-01:21:13,32339) [kworker/0:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-05 23:22

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6ba044ff7

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,8992,05:21:19/458-08:08:17,1) /sbin/init
(root,0,0,00:00:01/458-08:08:17,2) [kthreadd]
(root,0,0,00:00:00/458-08:08:17,3) [rcu_gp]
(root,0,0,00:00:00/458-08:08:17,4) [rcu_par_gp]
(root,0,0,00:00:00/458-08:08:17,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/458-08:08:17,8) [mm_percpu_wq]
(root,0,0,00:00:00/458-08:08:17,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/458-08:08:17,10) [rcu_tasks_trace]
(root,0,0,01:07:54/458-08:08:17,11) [ksoftirqd/0]
(root,0,0,11:03:48/458-08:08:17,12) [rcu_sched]
(root,0,0,00:00:43/458-08:08:17,13) [migration/0]
(root,0,0,00:00:00/458-08:08:17,15) [cpuhp/0]
(root,0,0,00:00:00/458-08:08:17,16) [cpuhp/1]
(root,0,0,00:00:53/458-08:08:17,17) [migration/1]
(root,0,0,00:03:40/458-08:08:17,18) [ksoftirqd/1]
(root,0,0,00:00:00/458-08:08:17,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/458-08:08:17,21) [cpuhp/2]
(root,0,0,00:00:39/458-08:08:17,22) [migration/2]
(root,0,0,01:29:16/458-08:08:17,23) [ksoftirqd/2]
(root,0,0,00:00:00/458-08:08:17,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/458-08:08:17,26) [cpuhp/3]
(root,0,0,00:00:53/458-08:08:17,27) [migration/3]
(root,0,0,00:02:36/458-08:08:17,28) [ksoftirqd/3]
(root,0,0,00:00:00/458-08:08:17,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/458-08:08:17,31) [kdevtmpfs]
(root,0,0,00:00:00/458-08:08:17,32) [netns]
(root,0,0,00:00:00/458-08:08:17,33) [kauditd]
(root,0,0,00:00:08/458-08:08:17,34) [khungtaskd]
(root,0,0,00:00:00/458-08:08:17,35) [oom_reaper]
(root,0,0,00:00:00/458-08:08:17,36) [writeback]
(root,0,0,00:10:50/458-08:08:17,37) [kcompactd0]
(root,0,0,00:00:00/458-08:08:17,38) [ksmd]
(root,0,0,00:18:01/458-08:08:17,39) [khugepaged]
(root,0,0,00:00:00/458-08:08:17,58) [kintegrityd]
(root,0,0,00:00:00/458-08:08:17,59) [kblockd]
(root,0,0,00:00:00/458-08:08:17,60) [blkcg_punt_bio]
(root,0,0,00:00:00/458-08:08:17,61) [edac-poller]
(root,0,0,00:00:00/458-08:08:17,62) [devfreq_wq]
(root,0,0,00:05:53/458-08:08:17,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:11/458-08:08:16,65) [kswapd0]
(root,0,0,00:00:00/458-08:08:16,66) [kthrotld]
(root,0,0,00:00:00/458-08:08:16,67) [acpi_thermal_pm]
(root,0,0,00:03:56/458-08:08:16,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/458-08:08:16,70) [ipv6_addrconf]
(root,0,0,00:00:00/458-08:08:16,81) [kstrp]
(root,0,0,00:00:00/458-08:08:16,84) [zswap-shrink]
(root,0,0,00:00:00/458-08:08:16,85) [kworker/u9:0]
(root,0,0,00:03:02/458-08:08:16,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/458-08:08:16,135) [ata_sff]
(root,0,0,00:00:00/458-08:08:16,139) [scsi_eh_0]
(root,0,0,00:00:00/458-08:08:16,140) [scsi_tmf_0]
(root,0,0,00:00:00/458-08:08:16,141) [scsi_eh_1]
(root,0,0,00:00:00/458-08:08:16,142) [scsi_tmf_1]
(root,0,0,00:00:00/458-08:08:16,143) [scsi_eh_2]
(root,0,0,00:00:00/458-08:08:16,144) [scsi_tmf_2]
(root,0,0,00:00:00/458-08:08:16,145) [scsi_eh_3]
(root,0,0,00:00:00/458-08:08:16,146) [scsi_tmf_3]
(root,0,0,00:02:21/458-08:08:15,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:17/458-08:08:14,183) [jbd2/sda1-8]
(root,0,0,00:00:00/458-08:08:14,184) [ext4-rsv-conver]
(root,280572,204052,1-03:23:14/458-08:08:14,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:30/458-08:08:14,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/458-08:08:14,291) [watchdogd]
(root,0,0,00:00:00/458-08:08:14,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:14/458-08:08:14,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/458-08:08:14,349) [card0-crtc0]
(root,0,0,00:00:00/458-08:08:14,350) [card0-crtc1]
(root,0,0,00:00:00/458-08:08:14,351) [card0-crtc2]
(root,0,0,00:00:00/458-08:08:14,353) [cryptd]
(root,8472,2688,00:02:27/458-08:08:14,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/458-08:08:14,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:46:57/458-08:08:14,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:48/458-08:08:14,374) /lib/systemd/systemd-logind
(root,10768,2568,01:23:37/458-08:08:14,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9228,11:53:14/458-08:08:13,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6052,00:20:33/458-08:08:13,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1968,00:11:40/458-08:08:13,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:43:01/458-08:08:11,1740) sshd: /usr/sbin/sshd -D [listener] 6 of 10-100 startups
(root,6792,4584,00:14:52/458-08:08:11,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:31/458-08:08:10,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/458-08:08:03,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/458-08:08:03,1815) (sd-pam)
(root,0,0,00:00:00/02:01:49,3822) [kworker/u8:0-flush-8:0]
(root,7252,3572,00:00:00/458-07:55:56,7652) /bin/login -p --
(root,9320,4052,00:00:00/458-07:55:50,7664) -bash
(root,0,0,00:00:00/2-07:46:46,8015) [kworker/2:1]
(root,0,0,00:00:00/35:41,14023) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:24/9-03:41:08,18855) [kworker/3:0-events]
(root,0,0,00:00:00/17:30:33,20906) [kworker/1:1-events]
(root,5000,1376,00:00:00/458-07:25:50,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1508,00:00:00/429-03:44:15,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/23:47:59,23284) [kworker/0:0]
(root,0,0,00:00:00/23:47:59,23371) [kworker/3:1-events]
(www-data,7028,3732,00:00:00/23:47:09,23693) /usr/sbin/apache2 -k start
(www-data,236836,10184,00:00:01/23:47:09,23694) /usr/sbin/apache2 -k start
(www-data,236876,12232,00:00:01/23:47:09,23695) /usr/sbin/apache2 -k start
(root,0,0,00:00:17/5-01:59:33,24674) [kworker/1:0-events]
(zabbix,20484,1544,00:00:00/318-14:21:53,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:40:18/318-14:21:53,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:59:05/318-14:21:53,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:58:40/318-14:21:53,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:59:43/318-14:21:53,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:43/318-14:21:53,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:43/5-07:03:29,29184) [kworker/2:2-events]
(root,13320,6440,00:00:00/01:56,30773) sshd: [accepted]
(root,13320,6336,00:00:00/01:47,30957) sshd: [accepted]
(root,13320,6264,00:00:00/00:49,31434) sshd: [accepted]
(root,13320,6220,00:00:00/00:22,31487) sshd: [accepted]
(root,0,0,00:00:00/00:18,31494) [kworker/u8:1]
(root,14464,7708,00:00:00/00:04,31522) sshd: unknown [priv]
(sshd,13320,4328,00:00:00/00:04,31523) sshd: unknown [net]
(root,13320,6528,00:00:00/00:00,31567) sshd: [accepted]
(root,8692,3336,00:00:00/00:00,31568) /bin/bash /usr/bin/check_mk_agent
(root,6608,2768,00:00:00/00:00,31587) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1532,00:00:00/00:00,31588) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:54/4-23:47:12,32339) [kworker/0:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-03 21:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6782d68be

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9008,05:20:29/456-09:16:40,1) /sbin/init
(root,0,0,00:00:01/456-09:16:40,2) [kthreadd]
(root,0,0,00:00:00/456-09:16:40,3) [rcu_gp]
(root,0,0,00:00:00/456-09:16:40,4) [rcu_par_gp]
(root,0,0,00:00:00/456-09:16:40,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/456-09:16:40,8) [mm_percpu_wq]
(root,0,0,00:00:00/456-09:16:40,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/456-09:16:40,10) [rcu_tasks_trace]
(root,0,0,01:07:38/456-09:16:40,11) [ksoftirqd/0]
(root,0,0,11:00:48/456-09:16:40,12) [rcu_sched]
(root,0,0,00:00:42/456-09:16:40,13) [migration/0]
(root,0,0,00:00:00/456-09:16:40,15) [cpuhp/0]
(root,0,0,00:00:00/456-09:16:40,16) [cpuhp/1]
(root,0,0,00:00:52/456-09:16:40,17) [migration/1]
(root,0,0,00:03:39/456-09:16:40,18) [ksoftirqd/1]
(root,0,0,00:00:00/456-09:16:40,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/456-09:16:40,21) [cpuhp/2]
(root,0,0,00:00:39/456-09:16:40,22) [migration/2]
(root,0,0,01:28:56/456-09:16:40,23) [ksoftirqd/2]
(root,0,0,00:00:00/456-09:16:40,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/456-09:16:40,26) [cpuhp/3]
(root,0,0,00:00:53/456-09:16:40,27) [migration/3]
(root,0,0,00:02:36/456-09:16:40,28) [ksoftirqd/3]
(root,0,0,00:00:00/456-09:16:40,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/456-09:16:40,31) [kdevtmpfs]
(root,0,0,00:00:00/456-09:16:40,32) [netns]
(root,0,0,00:00:00/456-09:16:40,33) [kauditd]
(root,0,0,00:00:08/456-09:16:40,34) [khungtaskd]
(root,0,0,00:00:00/456-09:16:40,35) [oom_reaper]
(root,0,0,00:00:00/456-09:16:40,36) [writeback]
(root,0,0,00:10:47/456-09:16:40,37) [kcompactd0]
(root,0,0,00:00:00/456-09:16:40,38) [ksmd]
(root,0,0,00:17:56/456-09:16:40,39) [khugepaged]
(root,0,0,00:00:00/456-09:16:40,58) [kintegrityd]
(root,0,0,00:00:00/456-09:16:40,59) [kblockd]
(root,0,0,00:00:00/456-09:16:40,60) [blkcg_punt_bio]
(root,0,0,00:00:00/456-09:16:40,61) [edac-poller]
(root,0,0,00:00:00/456-09:16:40,62) [devfreq_wq]
(root,0,0,00:05:52/456-09:16:40,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:11/456-09:16:39,65) [kswapd0]
(root,0,0,00:00:00/456-09:16:39,66) [kthrotld]
(root,0,0,00:00:00/456-09:16:39,67) [acpi_thermal_pm]
(root,0,0,00:03:56/456-09:16:39,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/456-09:16:39,70) [ipv6_addrconf]
(root,0,0,00:00:00/456-09:16:39,81) [kstrp]
(root,0,0,00:00:00/456-09:16:39,84) [zswap-shrink]
(root,0,0,00:00:00/456-09:16:39,85) [kworker/u9:0]
(root,0,0,00:03:02/456-09:16:39,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/456-09:16:39,135) [ata_sff]
(root,0,0,00:00:00/456-09:16:39,139) [scsi_eh_0]
(root,0,0,00:00:00/456-09:16:39,140) [scsi_tmf_0]
(root,0,0,00:00:00/456-09:16:39,141) [scsi_eh_1]
(root,0,0,00:00:00/456-09:16:39,142) [scsi_tmf_1]
(root,0,0,00:00:00/456-09:16:39,143) [scsi_eh_2]
(root,0,0,00:00:00/456-09:16:39,144) [scsi_tmf_2]
(root,0,0,00:00:00/456-09:16:39,145) [scsi_eh_3]
(root,0,0,00:00:00/456-09:16:39,146) [scsi_tmf_3]
(root,0,0,00:02:21/456-09:16:38,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:14/456-09:16:37,183) [jbd2/sda1-8]
(root,0,0,00:00:00/456-09:16:37,184) [ext4-rsv-conver]
(root,133348,76328,1-03:18:29/456-09:16:37,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:30/456-09:16:37,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/456-09:16:37,291) [watchdogd]
(root,0,0,00:00:00/456-09:16:37,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:14/456-09:16:37,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/456-09:16:37,349) [card0-crtc0]
(root,0,0,00:00:00/456-09:16:37,350) [card0-crtc1]
(root,0,0,00:00:00/456-09:16:37,351) [card0-crtc2]
(root,0,0,00:00:00/456-09:16:37,353) [cryptd]
(root,8472,2688,00:02:26/456-09:16:37,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/456-09:16:37,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:45:52/456-09:16:37,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:48/456-09:16:37,374) /lib/systemd/systemd-logind
(root,10768,2568,01:23:16/456-09:16:37,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9228,11:50:01/456-09:16:36,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6052,00:20:28/456-09:16:36,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,1968,00:11:38/456-09:16:36,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:41:37/456-09:16:34,1740) sshd: /usr/sbin/sshd -D [listener] 8 of 10-100 startups
(root,6792,4584,00:14:48/456-09:16:34,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:30/456-09:16:33,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/456-09:16:26,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/456-09:16:26,1815) (sd-pam)
(root,7252,3572,00:00:00/456-09:04:19,7652) /bin/login -p --
(root,9320,4052,00:00:00/456-09:04:13,7664) -bash
(root,0,0,00:00:00/08:55:09,8015) [kworker/2:1]
(root,0,0,00:00:00/28:16,9246) [kworker/u8:3-ext4-rsv-conversion]
(root,0,0,00:00:00/15:25,15479) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:19/7-04:49:31,18855) [kworker/3:0-events]
(root,0,0,00:00:00/03:08:00,20432) [kworker/u8:0-ext4-rsv-conversion]
(root,5000,1376,00:00:00/456-08:34:13,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/1-00:56:23,21715) [kworker/1:1]
(root,0,0,00:00:00/1-00:55:43,22176) [kworker/0:2-events]
(root,5000,1508,00:00:00/427-04:52:38,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,13320,6424,00:00:00/01:44,24138) sshd: [accepted]
(root,0,0,00:00:09/3-03:07:56,24674) [kworker/1:0-events_freezable]
(root,13320,6328,00:00:00/00:04,25545) sshd: [accepted]
(sshd,13320,4316,00:00:00/00:04,25546) sshd: [net]
(root,14144,7460,00:00:00/00:04,25547) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:04,25548) sshd: root [net]
(root,14464,7604,00:00:00/00:02,25554) sshd: unknown [priv]
(sshd,13320,4260,00:00:00/00:02,25555) sshd: unknown [net]
(root,14624,7664,00:00:00/00:02,25556) sshd: unknown [priv]
(sshd,13320,4392,00:00:00/00:02,25557) sshd: unknown [net]
(root,13320,6388,00:00:00/00:01,25559) sshd: [accepted]
(sshd,13320,4260,00:00:00/00:01,25560) sshd: [net]
(root,13320,6528,00:00:00/00:01,25561) sshd: [accepted]
(sshd,13320,4320,00:00:00/00:01,25562) sshd: [net]
(root,13320,6460,00:00:00/00:00,25585) sshd: [accepted]
(sshd,13320,4324,00:00:00/00:00,25587) sshd: [net]
(root,8692,3448,00:00:00/00:00,25615) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,25634) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1544,00:00:00/00:00,25635) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(zabbix,20484,1544,00:00:00/316-15:30:16,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:40:04/316-15:30:16,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:56:38/316-15:30:16,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:56:15/316-15:30:16,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:57:17/316-15:30:16,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:37/316-15:30:16,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/55:43,25872) [kworker/3:2]
(www-data,7028,3732,00:00:00/55:33,26078) /usr/sbin/apache2 -k start
(www-data,235924,10132,00:00:00/55:33,26079) /usr/sbin/apache2 -k start
(www-data,235980,8092,00:00:00/55:33,26080) /usr/sbin/apache2 -k start
(root,0,0,00:00:27/3-08:11:52,29184) [kworker/2:2-events]
(root,0,0,00:00:33/3-00:55:35,32339) [kworker/0:1-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-01 22:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6499bdbb4

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9048,05:18:57/454-08:04:56,1) /sbin/init
(root,0,0,00:00:01/454-08:04:56,2) [kthreadd]
(root,0,0,00:00:00/454-08:04:56,3) [rcu_gp]
(root,0,0,00:00:00/454-08:04:56,4) [rcu_par_gp]
(root,0,0,00:00:00/454-08:04:56,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/454-08:04:56,8) [mm_percpu_wq]
(root,0,0,00:00:00/454-08:04:56,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/454-08:04:56,10) [rcu_tasks_trace]
(root,0,0,01:07:18/454-08:04:56,11) [ksoftirqd/0]
(root,0,0,10:58:04/454-08:04:56,12) [rcu_sched]
(root,0,0,00:00:42/454-08:04:56,13) [migration/0]
(root,0,0,00:00:00/454-08:04:56,15) [cpuhp/0]
(root,0,0,00:00:00/454-08:04:56,16) [cpuhp/1]
(root,0,0,00:00:52/454-08:04:56,17) [migration/1]
(root,0,0,00:03:38/454-08:04:56,18) [ksoftirqd/1]
(root,0,0,00:00:00/454-08:04:56,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/454-08:04:56,21) [cpuhp/2]
(root,0,0,00:00:39/454-08:04:56,22) [migration/2]
(root,0,0,01:28:34/454-08:04:56,23) [ksoftirqd/2]
(root,0,0,00:00:00/454-08:04:56,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/454-08:04:56,26) [cpuhp/3]
(root,0,0,00:00:53/454-08:04:56,27) [migration/3]
(root,0,0,00:02:35/454-08:04:56,28) [ksoftirqd/3]
(root,0,0,00:00:00/454-08:04:56,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/454-08:04:56,31) [kdevtmpfs]
(root,0,0,00:00:00/454-08:04:56,32) [netns]
(root,0,0,00:00:00/454-08:04:56,33) [kauditd]
(root,0,0,00:00:08/454-08:04:56,34) [khungtaskd]
(root,0,0,00:00:00/454-08:04:56,35) [oom_reaper]
(root,0,0,00:00:00/454-08:04:56,36) [writeback]
(root,0,0,00:10:44/454-08:04:56,37) [kcompactd0]
(root,0,0,00:00:00/454-08:04:56,38) [ksmd]
(root,0,0,00:17:52/454-08:04:56,39) [khugepaged]
(root,0,0,00:00:00/454-08:04:56,58) [kintegrityd]
(root,0,0,00:00:00/454-08:04:56,59) [kblockd]
(root,0,0,00:00:00/454-08:04:56,60) [blkcg_punt_bio]
(root,0,0,00:00:00/454-08:04:56,61) [edac-poller]
(root,0,0,00:00:00/454-08:04:56,62) [devfreq_wq]
(root,0,0,00:05:50/454-08:04:56,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:09/454-08:04:55,65) [kswapd0]
(root,0,0,00:00:00/454-08:04:55,66) [kthrotld]
(root,0,0,00:00:00/454-08:04:55,67) [acpi_thermal_pm]
(root,0,0,00:03:55/454-08:04:55,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/454-08:04:55,70) [ipv6_addrconf]
(root,0,0,00:00:00/454-08:04:55,81) [kstrp]
(root,0,0,00:00:00/454-08:04:55,84) [zswap-shrink]
(root,0,0,00:00:00/454-08:04:55,85) [kworker/u9:0]
(root,0,0,00:03:01/454-08:04:55,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/454-08:04:55,135) [ata_sff]
(root,0,0,00:00:00/454-08:04:55,139) [scsi_eh_0]
(root,0,0,00:00:00/454-08:04:55,140) [scsi_tmf_0]
(root,0,0,00:00:00/454-08:04:55,141) [scsi_eh_1]
(root,0,0,00:00:00/454-08:04:55,142) [scsi_tmf_1]
(root,0,0,00:00:00/454-08:04:55,143) [scsi_eh_2]
(root,0,0,00:00:00/454-08:04:55,144) [scsi_tmf_2]
(root,0,0,00:00:00/454-08:04:55,145) [scsi_eh_3]
(root,0,0,00:00:00/454-08:04:55,146) [scsi_tmf_3]
(root,0,0,00:02:20/454-08:04:54,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:10/454-08:04:53,183) [jbd2/sda1-8]
(root,0,0,00:00:00/454-08:04:53,184) [ext4-rsv-conver]
(root,174076,119280,1-03:12:07/454-08:04:53,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:30/454-08:04:53,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/454-08:04:53,291) [watchdogd]
(root,0,0,00:00:00/454-08:04:53,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:13/454-08:04:53,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/454-08:04:53,349) [card0-crtc0]
(root,0,0,00:00:00/454-08:04:53,350) [card0-crtc1]
(root,0,0,00:00:00/454-08:04:53,351) [card0-crtc2]
(root,0,0,00:00:00/454-08:04:53,353) [cryptd]
(root,8472,2688,00:02:25/454-08:04:53,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/454-08:04:53,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:44:16/454-08:04:53,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:48/454-08:04:53,374) /lib/systemd/systemd-logind
(root,10768,2624,01:22:54/454-08:04:53,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:46:37/454-08:04:52,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:20:22/454-08:04:52,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:34/454-08:04:52,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:39:52/454-08:04:50,1740) sshd: /usr/sbin/sshd -D [listener] 12 of 10-100 startups
(root,6792,4584,00:14:44/454-08:04:50,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:29/454-08:04:49,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/454-08:04:42,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/454-08:04:42,1815) (sd-pam)
(root,0,0,00:00:00/59:33,4446) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:59/12-17:29:34,6171) [kworker/1:1-events]
(root,13320,6468,00:00:00/01:00,6246) sshd: [accepted]
(root,13320,6376,00:00:00/00:20,6730) sshd: [accepted]
(root,14144,7632,00:00:00/00:10,6763) sshd: root [priv]
(sshd,13320,4332,00:00:00/00:10,6764) sshd: root [net]
(root,13320,6448,00:00:00/00:07,6774) sshd: [accepted]
(root,14464,7624,00:00:00/00:05,6783) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:05,6784) sshd: unknown [net]
(root,13320,6428,00:00:00/00:04,6785) sshd: [accepted]
(root,14464,7720,00:00:00/00:03,6788) sshd: unknown [priv]
(sshd,13320,4328,00:00:00/00:03,6789) sshd: unknown [net]
(root,14624,7688,00:00:00/00:02,6790) sshd: unknown [priv]
(sshd,13320,4496,00:00:00/00:02,6791) sshd: unknown [net]
(root,14144,7500,00:00:00/00:02,6792) sshd: root [priv]
(sshd,13320,4304,00:00:00/00:02,6793) sshd: root [net]
(root,14464,7692,00:00:00/00:01,6794) sshd: unknown [priv]
(sshd,13320,4332,00:00:00/00:01,6795) sshd: unknown [net]
(root,14464,7584,00:00:00/00:01,6796) sshd: unknown [priv]
(sshd,13320,4272,00:00:00/00:01,6797) sshd: unknown [net]
(root,13320,6448,00:00:00/00:01,6798) sshd: [accepted]
(root,8692,3400,00:00:00/00:00,6847) /bin/bash /usr/bin/check_mk_agent
(root,6608,2752,00:00:00/00:00,6866) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1500,00:00:00/00:00,6867) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,7252,3572,00:00:00/454-07:52:35,7652) /bin/login -p --
(root,9320,4052,00:00:00/454-07:52:29,7664) -bash
(root,0,0,00:00:00/38:35,15903) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:14/5-03:37:47,18855) [kworker/3:0-events]
(root,0,0,00:00:00/01:28:57,21372) [kworker/u8:2-flush-8:0]
(root,5000,1376,00:00:00/454-07:22:29,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/27:44,22343) [kworker/2:1]
(root,0,0,00:00:00/27:44,22377) [kworker/3:2-cgroup_destroy]
(root,5000,1512,00:00:00/425-03:40:54,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/07:43:25,23790) [kworker/0:2]
(root,0,0,00:00:00/1-01:56:12,24674) [kworker/1:0-events]
(zabbix,20484,1544,00:00:00/314-14:18:32,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:39:49/314-14:18:32,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:53:59/314-14:18:32,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:53:35/314-14:18:32,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:54:37/314-14:18:32,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:31/314-14:18:32,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:10/1-07:00:08,29184) [kworker/2:2-events]
(root,0,0,00:00:10/23:43:51,32339) [kworker/0:1-events]
(www-data,7028,3736,00:00:00/23:43:49,32345) /usr/sbin/apache2 -k start
(www-data,236820,15084,00:00:01/23:43:49,32346) /usr/sbin/apache2 -k start
(www-data,236572,10140,00:00:01/23:43:49,32347) /usr/sbin/apache2 -k start

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-29 21:44

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc60d61f9b1

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9044,05:17:24/452-10:01:04,1) /sbin/init
(root,0,0,00:00:01/452-10:01:04,2) [kthreadd]
(root,0,0,00:00:00/452-10:01:04,3) [rcu_gp]
(root,0,0,00:00:00/452-10:01:04,4) [rcu_par_gp]
(root,0,0,00:00:00/452-10:01:04,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/452-10:01:04,8) [mm_percpu_wq]
(root,0,0,00:00:00/452-10:01:04,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/452-10:01:04,10) [rcu_tasks_trace]
(root,0,0,01:06:59/452-10:01:04,11) [ksoftirqd/0]
(root,0,0,10:55:38/452-10:01:04,12) [rcu_sched]
(root,0,0,00:00:42/452-10:01:04,13) [migration/0]
(root,0,0,00:00:00/452-10:01:04,15) [cpuhp/0]
(root,0,0,00:00:00/452-10:01:04,16) [cpuhp/1]
(root,0,0,00:00:52/452-10:01:04,17) [migration/1]
(root,0,0,00:03:38/452-10:01:04,18) [ksoftirqd/1]
(root,0,0,00:00:00/452-10:01:04,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/452-10:01:04,21) [cpuhp/2]
(root,0,0,00:00:38/452-10:01:04,22) [migration/2]
(root,0,0,01:28:12/452-10:01:04,23) [ksoftirqd/2]
(root,0,0,00:00:00/452-10:01:04,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/452-10:01:04,26) [cpuhp/3]
(root,0,0,00:00:52/452-10:01:04,27) [migration/3]
(root,0,0,00:02:35/452-10:01:04,28) [ksoftirqd/3]
(root,0,0,00:00:00/452-10:01:04,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/452-10:01:04,31) [kdevtmpfs]
(root,0,0,00:00:00/452-10:01:04,32) [netns]
(root,0,0,00:00:00/452-10:01:04,33) [kauditd]
(root,0,0,00:00:08/452-10:01:04,34) [khungtaskd]
(root,0,0,00:00:00/452-10:01:04,35) [oom_reaper]
(root,0,0,00:00:00/452-10:01:04,36) [writeback]
(root,0,0,00:10:42/452-10:01:04,37) [kcompactd0]
(root,0,0,00:00:00/452-10:01:04,38) [ksmd]
(root,0,0,00:17:47/452-10:01:04,39) [khugepaged]
(root,0,0,00:00:00/452-10:01:04,58) [kintegrityd]
(root,0,0,00:00:00/452-10:01:04,59) [kblockd]
(root,0,0,00:00:00/452-10:01:04,60) [blkcg_punt_bio]
(root,0,0,00:00:00/452-10:01:04,61) [edac-poller]
(root,0,0,00:00:00/452-10:01:04,62) [devfreq_wq]
(root,0,0,00:05:49/452-10:01:04,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:09/452-10:01:03,65) [kswapd0]
(root,0,0,00:00:00/452-10:01:03,66) [kthrotld]
(root,0,0,00:00:00/452-10:01:03,67) [acpi_thermal_pm]
(root,0,0,00:03:54/452-10:01:03,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/452-10:01:03,70) [ipv6_addrconf]
(root,0,0,00:00:00/452-10:01:03,81) [kstrp]
(root,0,0,00:00:00/452-10:01:03,84) [zswap-shrink]
(root,0,0,00:00:00/452-10:01:03,85) [kworker/u9:0]
(root,0,0,00:03:00/452-10:01:03,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/452-10:01:03,135) [ata_sff]
(root,0,0,00:00:00/452-10:01:03,139) [scsi_eh_0]
(root,0,0,00:00:00/452-10:01:03,140) [scsi_tmf_0]
(root,0,0,00:00:00/452-10:01:03,141) [scsi_eh_1]
(root,0,0,00:00:00/452-10:01:03,142) [scsi_tmf_1]
(root,0,0,00:00:00/452-10:01:03,143) [scsi_eh_2]
(root,0,0,00:00:00/452-10:01:03,144) [scsi_tmf_2]
(root,0,0,00:00:00/452-10:01:03,145) [scsi_eh_3]
(root,0,0,00:00:00/452-10:01:03,146) [scsi_tmf_3]
(root,0,0,00:02:20/452-10:01:02,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:06/452-10:01:01,183) [jbd2/sda1-8]
(root,0,0,00:00:00/452-10:01:01,184) [ext4-rsv-conver]
(root,182348,129480,1-03:06:23/452-10:01:01,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:30/452-10:01:01,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/452-10:01:01,291) [watchdogd]
(root,0,0,00:00:00/452-10:01:01,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:13/452-10:01:01,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/452-10:01:01,349) [card0-crtc0]
(root,0,0,00:00:00/452-10:01:01,350) [card0-crtc1]
(root,0,0,00:00:00/452-10:01:01,351) [card0-crtc2]
(root,0,0,00:00:00/452-10:01:01,353) [cryptd]
(root,8472,2688,00:02:25/452-10:01:01,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/452-10:01:01,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:42:47/452-10:01:01,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:48/452-10:01:01,374) /lib/systemd/systemd-logind
(root,10768,2624,01:22:33/452-10:01:01,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:43:20/452-10:01:00,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:20:17/452-10:01:00,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:31/452-10:01:00,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:38:13/452-10:00:58,1740) sshd: /usr/sbin/sshd -D [listener] 8 of 10-100 startups
(root,6792,4584,00:14:40/452-10:00:58,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:28/452-10:00:57,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/452-10:00:50,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/452-10:00:50,1815) (sd-pam)
(root,0,0,00:00:50/10-19:25:42,6171) [kworker/1:1-events]
(root,0,0,00:00:00/3-01:40:47,7272) [kworker/2:0]
(root,7252,3572,00:00:00/452-09:48:43,7652) /bin/login -p --
(root,9320,4052,00:00:00/452-09:48:37,7664) -bash
(root,0,0,00:01:33/11-01:40:47,7678) [kworker/2:1-events]
(root,13320,6436,00:00:00/01:34,9123) sshd: [accepted]
(root,13320,6172,00:00:00/01:10,9175) sshd: [accepted]
(root,13320,6404,00:00:00/00:17,9976) sshd: [accepted]
(sshd,13320,4264,00:00:00/00:10,9989) sshd: [net]
(root,14464,7732,00:00:00/00:03,10000) sshd: unknown [priv]
(sshd,13320,4372,00:00:00/00:03,10001) sshd: unknown [net]
(root,14144,7460,00:00:00/00:03,10002) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:02,10003) sshd: root [net]
(root,14144,7516,00:00:00/00:02,10004) sshd: root [priv]
(sshd,13320,4376,00:00:00/00:02,10005) sshd: root [net]
(root,14464,7692,00:00:00/00:01,10006) sshd: unknown [priv]
(sshd,13320,4328,00:00:00/00:01,10007) sshd: unknown [net]
(root,13320,6416,00:00:00/00:00,10008) sshd: [accepted]
(sshd,13320,4268,00:00:00/00:00,10009) sshd: [net]
(root,8692,3312,00:00:00/00:00,10058) /bin/bash /usr/bin/check_mk_agent
(root,6608,2756,00:00:00/00:00,10077) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1456,00:00:00/00:00,10078) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/01:43:59,14744) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/01:40:47,16786) [kworker/1:2-events]
(root,0,0,00:00:00/01:40:47,16804) [kworker/0:0-events]
(root,0,0,00:00:00/01:40:07,17095) [kworker/3:2]
(www-data,7028,3732,00:00:00/01:39:57,17121) /usr/sbin/apache2 -k start
(www-data,235932,10132,00:00:00/01:39:57,17122) /usr/sbin/apache2 -k start
(www-data,236332,10132,00:00:00/01:39:57,17123) /usr/sbin/apache2 -k start
(root,0,0,00:00:09/3-05:33:55,18855) [kworker/3:0-mm_percpu_wq]
(root,0,0,00:00:00/35:25,21332) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:00/01:32:37,21391) [kworker/u8:0-ext4-rsv-conversion]
(root,5000,1376,00:00:00/452-09:18:37,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1512,00:00:00/423-05:37:02,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/312-16:14:40,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:39:35/312-16:14:40,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:51:30/312-16:14:40,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:51:07/312-16:14:40,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:52:09/312-16:14:40,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:24/312-16:14:40,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:08/19:11:33,25899) [kworker/0:2-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-27 23:40

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6a07d9db0

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,9024,05:15:32/450-10:05:23,1) /sbin/init
(root,0,0,00:00:01/450-10:05:23,2) [kthreadd]
(root,0,0,00:00:00/450-10:05:23,3) [rcu_gp]
(root,0,0,00:00:00/450-10:05:23,4) [rcu_par_gp]
(root,0,0,00:00:00/450-10:05:23,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/450-10:05:23,8) [mm_percpu_wq]
(root,0,0,00:00:00/450-10:05:23,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/450-10:05:23,10) [rcu_tasks_trace]
(root,0,0,01:06:32/450-10:05:23,11) [ksoftirqd/0]
(root,0,0,10:52:59/450-10:05:23,12) [rcu_sched]
(root,0,0,00:00:42/450-10:05:23,13) [migration/0]
(root,0,0,00:00:00/450-10:05:23,15) [cpuhp/0]
(root,0,0,00:00:00/450-10:05:23,16) [cpuhp/1]
(root,0,0,00:00:52/450-10:05:23,17) [migration/1]
(root,0,0,00:03:37/450-10:05:23,18) [ksoftirqd/1]
(root,0,0,00:00:00/450-10:05:23,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/450-10:05:23,21) [cpuhp/2]
(root,0,0,00:00:38/450-10:05:23,22) [migration/2]
(root,0,0,01:27:45/450-10:05:23,23) [ksoftirqd/2]
(root,0,0,00:00:00/450-10:05:23,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/450-10:05:23,26) [cpuhp/3]
(root,0,0,00:00:52/450-10:05:23,27) [migration/3]
(root,0,0,00:02:34/450-10:05:23,28) [ksoftirqd/3]
(root,0,0,00:00:00/450-10:05:23,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/450-10:05:23,31) [kdevtmpfs]
(root,0,0,00:00:00/450-10:05:23,32) [netns]
(root,0,0,00:00:00/450-10:05:23,33) [kauditd]
(root,0,0,00:00:08/450-10:05:23,34) [khungtaskd]
(root,0,0,00:00:00/450-10:05:23,35) [oom_reaper]
(root,0,0,00:00:00/450-10:05:23,36) [writeback]
(root,0,0,00:10:39/450-10:05:23,37) [kcompactd0]
(root,0,0,00:00:00/450-10:05:23,38) [ksmd]
(root,0,0,00:17:42/450-10:05:23,39) [khugepaged]
(root,0,0,00:00:00/450-10:05:23,58) [kintegrityd]
(root,0,0,00:00:00/450-10:05:23,59) [kblockd]
(root,0,0,00:00:00/450-10:05:23,60) [blkcg_punt_bio]
(root,0,0,00:00:00/450-10:05:23,61) [edac-poller]
(root,0,0,00:00:00/450-10:05:23,62) [devfreq_wq]
(root,0,0,00:05:47/450-10:05:23,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:09/450-10:05:22,65) [kswapd0]
(root,0,0,00:00:00/450-10:05:22,66) [kthrotld]
(root,0,0,00:00:00/450-10:05:22,67) [acpi_thermal_pm]
(root,0,0,00:03:52/450-10:05:22,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/450-10:05:22,70) [ipv6_addrconf]
(root,0,0,00:00:00/450-10:05:22,81) [kstrp]
(root,0,0,00:00:00/450-10:05:22,84) [zswap-shrink]
(root,0,0,00:00:00/450-10:05:22,85) [kworker/u9:0]
(root,0,0,00:02:59/450-10:05:22,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/450-10:05:22,135) [ata_sff]
(root,0,0,00:00:00/450-10:05:22,139) [scsi_eh_0]
(root,0,0,00:00:00/450-10:05:22,140) [scsi_tmf_0]
(root,0,0,00:00:00/450-10:05:22,141) [scsi_eh_1]
(root,0,0,00:00:00/450-10:05:22,142) [scsi_tmf_1]
(root,0,0,00:00:00/450-10:05:22,143) [scsi_eh_2]
(root,0,0,00:00:00/450-10:05:22,144) [scsi_tmf_2]
(root,0,0,00:00:00/450-10:05:22,145) [scsi_eh_3]
(root,0,0,00:00:00/450-10:05:22,146) [scsi_tmf_3]
(root,0,0,00:02:19/450-10:05:21,153) [kworker/3:1H-kblockd]
(root,0,0,00:13:03/450-10:05:20,183) [jbd2/sda1-8]
(root,0,0,00:00:00/450-10:05:20,184) [ext4-rsv-conver]
(root,120844,65412,1-02:59:16/450-10:05:20,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:30/450-10:05:20,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/450-10:05:20,291) [watchdogd]
(root,0,0,00:00:00/450-10:05:20,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:12/450-10:05:20,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/450-10:05:20,349) [card0-crtc0]
(root,0,0,00:00:00/450-10:05:20,350) [card0-crtc1]
(root,0,0,00:00:00/450-10:05:20,351) [card0-crtc2]
(root,0,0,00:00:00/450-10:05:20,353) [cryptd]
(root,8472,2688,00:02:24/450-10:05:20,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/450-10:05:20,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:41:00/450-10:05:20,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:47/450-10:05:20,374) /lib/systemd/systemd-logind
(root,10768,2624,01:22:11/450-10:05:20,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:39:47/450-10:05:19,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:20:12/450-10:05:19,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:28/450-10:05:19,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:36:18/450-10:05:17,1740) sshd: /usr/sbin/sshd -D [listener] 7 of 10-100 startups
(root,6792,4584,00:14:36/450-10:05:17,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:28/450-10:05:16,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/450-10:05:09,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/450-10:05:09,1815) (sd-pam)
(root,0,0,00:00:00/03:09,5149) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/09:43:54,5669) [kworker/0:1-events]
(root,13320,6396,00:00:00/01:37,6125) sshd: [accepted]
(root,0,0,00:00:41/8-19:30:01,6171) [kworker/1:1-mm_percpu_wq]
(root,13320,6416,00:00:00/01:30,6309) sshd: [accepted]
(root,13320,6256,00:00:00/01:25,6318) sshd: [accepted]
(sshd,13320,4208,00:00:00/01:25,6319) sshd: [net]
(root,13320,6472,00:00:00/00:17,6806) sshd: [accepted]
(sshd,13320,4332,00:00:00/00:12,6816) sshd: [net]
(root,14144,7412,00:00:00/00:02,7032) sshd: root [priv]
(sshd,13320,4316,00:00:00/00:02,7033) sshd: root [net]
(root,14464,7572,00:00:00/00:02,7034) sshd: unknown [priv]
(sshd,13320,4216,00:00:00/00:02,7035) sshd: unknown [net]
(root,13320,6520,00:00:00/00:00,7036) sshd: [accepted]
(sshd,13320,4364,00:00:00/00:00,7037) sshd: [net]
(root,8692,3360,00:00:00/00:00,7087) /bin/bash /usr/bin/check_mk_agent
(root,6608,2676,00:00:00/00:00,7106) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1528,00:00:00/00:00,7107) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/1-01:45:06,7272) [kworker/2:0]
(root,7252,3572,00:00:00/450-09:53:02,7652) /bin/login -p --
(root,9320,4052,00:00:00/450-09:52:56,7664) -bash
(root,0,0,00:01:16/9-01:45:06,7678) [kworker/2:1-events]
(root,0,0,00:01:27/7-19:06:56,8689) [kworker/0:0-events]
(root,0,0,00:00:00/1-19:03:40,15846) [kworker/1:2-events]
(root,0,0,00:00:00/01:47:34,15937) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:00/01:44:25,17835) [kworker/3:1-events]
(www-data,7028,3732,00:00:00/01:44:15,17860) /usr/sbin/apache2 -k start
(www-data,236100,10136,00:00:00/01:44:15,17861) /usr/sbin/apache2 -k start
(www-data,236156,16268,00:00:00/01:44:15,17862) /usr/sbin/apache2 -k start
(root,0,0,00:00:03/1-05:38:14,18855) [kworker/3:0-mm_percpu_wq]
(root,5000,1376,00:00:00/450-09:22:56,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1512,00:00:00/421-05:41:21,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/310-16:18:59,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:39:19/310-16:18:59,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:48:46/310-16:18:59,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:48:24/310-16:18:59,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:49:25/310-16:18:59,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:18/310-16:18:59,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/01:19:49,30108) [kworker/u8:0-flush-8:0]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-25 23:45

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6f023ffa3

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,9024,05:13:55/448-10:09:37,1) /sbin/init
(root,0,0,00:00:01/448-10:09:37,2) [kthreadd]
(root,0,0,00:00:00/448-10:09:37,3) [rcu_gp]
(root,0,0,00:00:00/448-10:09:37,4) [rcu_par_gp]
(root,0,0,00:00:00/448-10:09:37,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/448-10:09:37,8) [mm_percpu_wq]
(root,0,0,00:00:00/448-10:09:37,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/448-10:09:37,10) [rcu_tasks_trace]
(root,0,0,01:06:10/448-10:09:37,11) [ksoftirqd/0]
(root,0,0,10:49:58/448-10:09:37,12) [rcu_sched]
(root,0,0,00:00:42/448-10:09:37,13) [migration/0]
(root,0,0,00:00:00/448-10:09:37,15) [cpuhp/0]
(root,0,0,00:00:00/448-10:09:37,16) [cpuhp/1]
(root,0,0,00:00:51/448-10:09:37,17) [migration/1]
(root,0,0,00:03:36/448-10:09:37,18) [ksoftirqd/1]
(root,0,0,00:00:00/448-10:09:37,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/448-10:09:37,21) [cpuhp/2]
(root,0,0,00:00:38/448-10:09:37,22) [migration/2]
(root,0,0,01:27:20/448-10:09:37,23) [ksoftirqd/2]
(root,0,0,00:00:00/448-10:09:37,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/448-10:09:37,26) [cpuhp/3]
(root,0,0,00:00:52/448-10:09:37,27) [migration/3]
(root,0,0,00:02:34/448-10:09:37,28) [ksoftirqd/3]
(root,0,0,00:00:00/448-10:09:37,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/448-10:09:37,31) [kdevtmpfs]
(root,0,0,00:00:00/448-10:09:37,32) [netns]
(root,0,0,00:00:00/448-10:09:37,33) [kauditd]
(root,0,0,00:00:08/448-10:09:37,34) [khungtaskd]
(root,0,0,00:00:00/448-10:09:37,35) [oom_reaper]
(root,0,0,00:00:00/448-10:09:37,36) [writeback]
(root,0,0,00:10:36/448-10:09:37,37) [kcompactd0]
(root,0,0,00:00:00/448-10:09:37,38) [ksmd]
(root,0,0,00:17:37/448-10:09:37,39) [khugepaged]
(root,0,0,00:00:00/448-10:09:37,58) [kintegrityd]
(root,0,0,00:00:00/448-10:09:37,59) [kblockd]
(root,0,0,00:00:00/448-10:09:37,60) [blkcg_punt_bio]
(root,0,0,00:00:00/448-10:09:37,61) [edac-poller]
(root,0,0,00:00:00/448-10:09:37,62) [devfreq_wq]
(root,0,0,00:05:45/448-10:09:37,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:09/448-10:09:36,65) [kswapd0]
(root,0,0,00:00:00/448-10:09:36,66) [kthrotld]
(root,0,0,00:00:00/448-10:09:36,67) [acpi_thermal_pm]
(root,0,0,00:03:51/448-10:09:36,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/448-10:09:36,70) [ipv6_addrconf]
(root,0,0,00:00:00/448-10:09:36,81) [kstrp]
(root,0,0,00:00:00/448-10:09:36,84) [zswap-shrink]
(root,0,0,00:00:00/448-10:09:36,85) [kworker/u9:0]
(root,0,0,00:02:59/448-10:09:36,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/448-10:09:36,135) [ata_sff]
(root,0,0,00:00:00/448-10:09:36,139) [scsi_eh_0]
(root,0,0,00:00:00/448-10:09:36,140) [scsi_tmf_0]
(root,0,0,00:00:00/448-10:09:36,141) [scsi_eh_1]
(root,0,0,00:00:00/448-10:09:36,142) [scsi_tmf_1]
(root,0,0,00:00:00/448-10:09:36,143) [scsi_eh_2]
(root,0,0,00:00:00/448-10:09:36,144) [scsi_tmf_2]
(root,0,0,00:00:00/448-10:09:36,145) [scsi_eh_3]
(root,0,0,00:00:00/448-10:09:36,146) [scsi_tmf_3]
(root,0,0,00:02:18/448-10:09:35,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:59/448-10:09:34,183) [jbd2/sda1-8]
(root,0,0,00:00:00/448-10:09:34,184) [ext4-rsv-conver]
(root,174232,120220,1-02:53:05/448-10:09:34,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:30/448-10:09:34,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/448-10:09:34,291) [watchdogd]
(root,0,0,00:00:00/448-10:09:34,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:12/448-10:09:34,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/448-10:09:34,349) [card0-crtc0]
(root,0,0,00:00:00/448-10:09:34,350) [card0-crtc1]
(root,0,0,00:00:00/448-10:09:34,351) [card0-crtc2]
(root,0,0,00:00:00/448-10:09:34,353) [cryptd]
(root,8472,2688,00:02:23/448-10:09:34,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/448-10:09:34,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7756,06:39:25/448-10:09:34,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:47/448-10:09:34,374) /lib/systemd/systemd-logind
(root,10768,2624,01:21:49/448-10:09:34,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:36:43/448-10:09:33,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:20:06/448-10:09:33,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:25/448-10:09:33,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/01:39:15,720) [kworker/u8:2-flush-8:0]
(root,13320,6384,07:34:37/448-10:09:31,1740) sshd: /usr/sbin/sshd -D [listener] 9 of 10-100 startups
(root,6792,4584,00:14:32/448-10:09:31,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:27/448-10:09:30,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/448-10:09:23,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/448-10:09:23,1815) (sd-pam)
(root,0,0,00:00:00/1-00:14:50,3040) [kworker/1:0-events]
(root,0,0,00:00:03/1-00:14:50,3041) [kworker/3:2-events]
(root,0,0,00:00:31/6-19:34:15,6171) [kworker/1:1-events]
(root,7252,3572,00:00:00/448-09:57:16,7652) /bin/login -p --
(root,9320,4052,00:00:00/448-09:57:10,7664) -bash
(root,0,0,00:00:59/7-01:49:20,7678) [kworker/2:1-events]
(root,0,0,00:01:04/5-19:11:10,8689) [kworker/0:0-events]
(root,0,0,00:00:00/04:57,20819) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/1-01:49:20,21171) [kworker/0:1]
(root,5000,1376,00:00:00/448-09:27:10,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/01:00:30,21711) [kworker/u8:0-ext4-rsv-conversion]
(root,13320,6420,00:00:00/01:41,22546) sshd: [accepted]
(root,13320,6484,00:00:00/01:11,22788) sshd: [accepted]
(sshd,13320,4260,00:00:00/01:10,22789) sshd: [net]
(root,13320,6428,00:00:00/01:03,22972) sshd: [accepted]
(root,5000,1512,00:00:00/419-05:45:35,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,13320,6524,00:00:00/00:14,23247) sshd: [accepted]
(root,13320,6444,00:00:00/00:14,23248) sshd: [accepted]
(sshd,13320,4272,00:00:00/00:04,23436) sshd: [net]
(root,14144,7480,00:00:00/00:02,23437) sshd: root [priv]
(sshd,13320,4272,00:00:00/00:02,23438) sshd: root [net]
(root,14144,7348,00:00:00/00:02,23439) sshd: root [priv]
(sshd,13320,4368,00:00:00/00:02,23440) sshd: root [net]
(root,13320,6376,00:00:00/00:00,23529) sshd: [accepted]
(sshd,13320,4320,00:00:00/00:00,23539) sshd: [net]
(root,13320,6376,00:00:00/00:00,23663) sshd: [accepted]
(sshd,13320,4316,00:00:00/00:00,23667) sshd: [net]
(root,8692,3452,00:00:00/00:00,23668) /bin/bash /usr/bin/check_mk_agent
(root,6608,2712,00:00:00/00:00,23687) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1492,00:00:00/00:00,23688) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(zabbix,20484,1544,00:00:00/308-16:23:13,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:39:04/308-16:23:13,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:46:08/308-16:23:13,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:45:47/308-16:23:13,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:46:47/308-16:23:13,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:11/308-16:23:13,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/19:43:18,25833) [kworker/2:2]
(root,0,0,00:00:00/01:49:20,27797) [kworker/3:1-events]
(www-data,7028,3732,00:00:00/01:48:29,28318) /usr/sbin/apache2 -k start
(www-data,236540,14224,00:00:00/01:48:29,28319) /usr/sbin/apache2 -k start
(www-data,236484,16268,00:00:00/01:48:29,28320) /usr/sbin/apache2 -k start

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-23 23:49

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6dab33f6c

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9052,05:12:13/446-09:43:36,1) /sbin/init
(root,0,0,00:00:01/446-09:43:36,2) [kthreadd]
(root,0,0,00:00:00/446-09:43:36,3) [rcu_gp]
(root,0,0,00:00:00/446-09:43:36,4) [rcu_par_gp]
(root,0,0,00:00:00/446-09:43:36,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/446-09:43:36,8) [mm_percpu_wq]
(root,0,0,00:00:00/446-09:43:36,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/446-09:43:36,10) [rcu_tasks_trace]
(root,0,0,01:05:49/446-09:43:36,11) [ksoftirqd/0]
(root,0,0,10:46:49/446-09:43:36,12) [rcu_sched]
(root,0,0,00:00:41/446-09:43:36,13) [migration/0]
(root,0,0,00:00:00/446-09:43:36,15) [cpuhp/0]
(root,0,0,00:00:00/446-09:43:36,16) [cpuhp/1]
(root,0,0,00:00:51/446-09:43:36,17) [migration/1]
(root,0,0,00:03:35/446-09:43:36,18) [ksoftirqd/1]
(root,0,0,00:00:00/446-09:43:36,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/446-09:43:36,21) [cpuhp/2]
(root,0,0,00:00:38/446-09:43:36,22) [migration/2]
(root,0,0,01:26:53/446-09:43:36,23) [ksoftirqd/2]
(root,0,0,00:00:00/446-09:43:36,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/446-09:43:36,26) [cpuhp/3]
(root,0,0,00:00:52/446-09:43:36,27) [migration/3]
(root,0,0,00:02:33/446-09:43:36,28) [ksoftirqd/3]
(root,0,0,00:00:00/446-09:43:36,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/446-09:43:36,31) [kdevtmpfs]
(root,0,0,00:00:00/446-09:43:36,32) [netns]
(root,0,0,00:00:00/446-09:43:36,33) [kauditd]
(root,0,0,00:00:08/446-09:43:36,34) [khungtaskd]
(root,0,0,00:00:00/446-09:43:36,35) [oom_reaper]
(root,0,0,00:00:00/446-09:43:36,36) [writeback]
(root,0,0,00:10:34/446-09:43:36,37) [kcompactd0]
(root,0,0,00:00:00/446-09:43:36,38) [ksmd]
(root,0,0,00:17:32/446-09:43:36,39) [khugepaged]
(root,0,0,00:00:00/446-09:43:36,58) [kintegrityd]
(root,0,0,00:00:00/446-09:43:36,59) [kblockd]
(root,0,0,00:00:00/446-09:43:36,60) [blkcg_punt_bio]
(root,0,0,00:00:00/446-09:43:36,61) [edac-poller]
(root,0,0,00:00:00/446-09:43:36,62) [devfreq_wq]
(root,0,0,00:05:44/446-09:43:36,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:08/446-09:43:35,65) [kswapd0]
(root,0,0,00:00:00/446-09:43:35,66) [kthrotld]
(root,0,0,00:00:00/446-09:43:35,67) [acpi_thermal_pm]
(root,0,0,00:03:50/446-09:43:35,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/446-09:43:35,70) [ipv6_addrconf]
(root,0,0,00:00:00/446-09:43:35,81) [kstrp]
(root,0,0,00:00:00/446-09:43:35,84) [zswap-shrink]
(root,0,0,00:00:00/446-09:43:35,85) [kworker/u9:0]
(root,0,0,00:02:58/446-09:43:35,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/446-09:43:35,135) [ata_sff]
(root,0,0,00:00:00/446-09:43:35,139) [scsi_eh_0]
(root,0,0,00:00:00/446-09:43:35,140) [scsi_tmf_0]
(root,0,0,00:00:00/446-09:43:35,141) [scsi_eh_1]
(root,0,0,00:00:00/446-09:43:35,142) [scsi_tmf_1]
(root,0,0,00:00:00/446-09:43:35,143) [scsi_eh_2]
(root,0,0,00:00:00/446-09:43:35,144) [scsi_tmf_2]
(root,0,0,00:00:00/446-09:43:35,145) [scsi_eh_3]
(root,0,0,00:00:00/446-09:43:35,146) [scsi_tmf_3]
(root,0,0,00:02:18/446-09:43:34,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:55/446-09:43:33,183) [jbd2/sda1-8]
(root,0,0,00:00:00/446-09:43:33,184) [ext4-rsv-conver]
(root,157748,98856,1-02:46:25/446-09:43:33,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:30/446-09:43:33,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/446-09:43:33,291) [watchdogd]
(root,0,0,00:00:00/446-09:43:33,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:12/446-09:43:33,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/446-09:43:33,349) [card0-crtc0]
(root,0,0,00:00:00/446-09:43:33,350) [card0-crtc1]
(root,0,0,00:00:00/446-09:43:33,351) [card0-crtc2]
(root,0,0,00:00:00/446-09:43:33,353) [cryptd]
(root,8472,2688,00:02:23/446-09:43:33,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/446-09:43:33,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7768,06:37:43/446-09:43:33,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:47/446-09:43:33,374) /lib/systemd/systemd-logind
(root,10768,2624,01:21:27/446-09:43:33,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:33:19/446-09:43:32,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:20:00/446-09:43:32,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:22/446-09:43:32,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,14464,7668,00:00:00/00:03,457) sshd: unknown [priv]
(root,14144,7512,00:00:00/00:03,458) sshd: root [priv]
(sshd,13320,4332,00:00:00/00:02,459) sshd: root [net]
(root,13320,6332,00:00:00/00:02,460) sshd: [accepted]
(sshd,13320,4336,00:00:00/00:02,461) sshd: unknown [net]
(root,13320,6508,00:00:00/00:01,462) sshd: [accepted]
(sshd,13320,4376,00:00:00/00:01,463) sshd: [net]
(root,14464,7580,00:00:00/00:01,464) sshd: unknown [priv]
(sshd,13320,4252,00:00:00/00:01,465) sshd: unknown [net]
(root,8692,3344,00:00:00/00:00,553) /bin/bash /usr/bin/check_mk_agent
(root,6608,2672,00:00:00/00:00,572) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1504,00:00:00/00:00,573) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:06/2-01:23:18,1120) [kworker/3:2-events]
(root,13320,6384,07:32:47/446-09:43:30,1740) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,6792,4584,00:14:28/446-09:43:30,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:26/446-09:43:29,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/446-09:43:22,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/446-09:43:22,1815) (sd-pam)
(root,0,0,00:00:22/4-19:08:14,6171) [kworker/1:1-events]
(root,7252,3572,00:00:00/446-09:31:15,7652) /bin/login -p --
(root,9320,4052,00:00:00/446-09:31:09,7664) -bash
(root,0,0,00:00:42/5-01:23:19,7678) [kworker/2:1-events]
(root,0,0,00:00:42/3-18:45:09,8689) [kworker/0:0-events]
(root,0,0,00:00:00/21:28:38,12589) [kworker/1:0]
(root,0,0,00:00:00/03:33:18,13966) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:00/01:23:19,19168) [kworker/2:0]
(root,0,0,00:00:00/01:22:32,19481) [kworker/3:1]
(www-data,7028,3732,00:00:00/01:22:29,19485) /usr/sbin/apache2 -k start
(www-data,236148,14224,00:00:00/01:22:29,19486) /usr/sbin/apache2 -k start
(www-data,236036,18312,00:00:00/01:22:29,19487) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/05:21:37,20811) [kworker/0:2]
(root,5000,1376,00:00:00/446-09:01:09,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1512,00:00:00/417-05:19:34,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/01:11:24,25146) [kworker/u8:1-flush-8:0]
(zabbix,20484,1544,00:00:00/306-15:57:12,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:38:48/306-15:57:12,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:43:22/306-15:57:12,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:43:03/306-15:57:12,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:44:04/306-15:57:12,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:17:04/306-15:57:12,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/05:07,30195) [kworker/u8:2-flush-8:0]
(root,13320,6488,00:00:00/01:57,31930) sshd: [accepted]
(root,13320,6516,00:00:00/01:27,31984) sshd: [accepted]
(root,13320,6396,00:00:00/01:22,32001) sshd: [accepted]
(root,13320,6224,00:00:00/01:00,32413) sshd: [accepted]
(root,13320,6320,00:00:00/00:56,32425) sshd: [accepted]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-21 23:23

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc68749a3d9

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9044,05:10:24/444-08:31:20,1) /sbin/init
(root,0,0,00:00:01/444-08:31:20,2) [kthreadd]
(root,0,0,00:00:00/444-08:31:20,3) [rcu_gp]
(root,0,0,00:00:00/444-08:31:20,4) [rcu_par_gp]
(root,0,0,00:00:00/444-08:31:20,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/444-08:31:20,8) [mm_percpu_wq]
(root,0,0,00:00:00/444-08:31:20,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/444-08:31:20,10) [rcu_tasks_trace]
(root,0,0,01:05:28/444-08:31:20,11) [ksoftirqd/0]
(root,0,0,10:43:39/444-08:31:20,12) [rcu_sched]
(root,0,0,00:00:41/444-08:31:20,13) [migration/0]
(root,0,0,00:00:00/444-08:31:20,15) [cpuhp/0]
(root,0,0,00:00:00/444-08:31:20,16) [cpuhp/1]
(root,0,0,00:00:51/444-08:31:20,17) [migration/1]
(root,0,0,00:03:34/444-08:31:20,18) [ksoftirqd/1]
(root,0,0,00:00:00/444-08:31:20,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/444-08:31:20,21) [cpuhp/2]
(root,0,0,00:00:38/444-08:31:20,22) [migration/2]
(root,0,0,01:26:31/444-08:31:20,23) [ksoftirqd/2]
(root,0,0,00:00:00/444-08:31:20,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/444-08:31:20,26) [cpuhp/3]
(root,0,0,00:00:51/444-08:31:20,27) [migration/3]
(root,0,0,00:02:33/444-08:31:20,28) [ksoftirqd/3]
(root,0,0,00:00:00/444-08:31:20,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/444-08:31:20,31) [kdevtmpfs]
(root,0,0,00:00:00/444-08:31:20,32) [netns]
(root,0,0,00:00:00/444-08:31:20,33) [kauditd]
(root,0,0,00:00:08/444-08:31:20,34) [khungtaskd]
(root,0,0,00:00:00/444-08:31:20,35) [oom_reaper]
(root,0,0,00:00:00/444-08:31:20,36) [writeback]
(root,0,0,00:10:31/444-08:31:20,37) [kcompactd0]
(root,0,0,00:00:00/444-08:31:20,38) [ksmd]
(root,0,0,00:17:27/444-08:31:20,39) [khugepaged]
(root,0,0,00:00:00/444-08:31:20,58) [kintegrityd]
(root,0,0,00:00:00/444-08:31:20,59) [kblockd]
(root,0,0,00:00:00/444-08:31:20,60) [blkcg_punt_bio]
(root,0,0,00:00:00/444-08:31:20,61) [edac-poller]
(root,0,0,00:00:00/444-08:31:20,62) [devfreq_wq]
(root,0,0,00:05:42/444-08:31:20,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:08/444-08:31:19,65) [kswapd0]
(root,0,0,00:00:00/444-08:31:19,66) [kthrotld]
(root,0,0,00:00:00/444-08:31:19,67) [acpi_thermal_pm]
(root,0,0,00:03:49/444-08:31:19,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/444-08:31:19,70) [ipv6_addrconf]
(root,0,0,00:00:00/444-08:31:19,81) [kstrp]
(root,0,0,00:00:00/444-08:31:19,84) [zswap-shrink]
(root,0,0,00:00:00/444-08:31:19,85) [kworker/u9:0]
(root,0,0,00:02:57/444-08:31:19,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/444-08:31:19,135) [ata_sff]
(root,0,0,00:00:00/444-08:31:19,139) [scsi_eh_0]
(root,0,0,00:00:00/444-08:31:19,140) [scsi_tmf_0]
(root,0,0,00:00:00/444-08:31:19,141) [scsi_eh_1]
(root,0,0,00:00:00/444-08:31:19,142) [scsi_tmf_1]
(root,0,0,00:00:00/444-08:31:19,143) [scsi_eh_2]
(root,0,0,00:00:00/444-08:31:19,144) [scsi_tmf_2]
(root,0,0,00:00:00/444-08:31:19,145) [scsi_eh_3]
(root,0,0,00:00:00/444-08:31:19,146) [scsi_tmf_3]
(root,0,0,00:02:17/444-08:31:18,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:52/444-08:31:17,183) [jbd2/sda1-8]
(root,0,0,00:00:00/444-08:31:17,184) [ext4-rsv-conver]
(root,166208,111400,1-02:39:26/444-08:31:17,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:29/444-08:31:17,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/444-08:31:17,291) [watchdogd]
(root,0,0,00:00:00/444-08:31:17,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:11/444-08:31:17,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/444-08:31:17,349) [card0-crtc0]
(root,0,0,00:00:00/444-08:31:17,350) [card0-crtc1]
(root,0,0,00:00:00/444-08:31:17,351) [card0-crtc2]
(root,0,0,00:00:00/444-08:31:17,353) [cryptd]
(root,8472,2688,00:02:22/444-08:31:17,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/444-08:31:17,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7772,06:35:55/444-08:31:17,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:47/444-08:31:17,374) /lib/systemd/systemd-logind
(root,10768,2624,01:21:04/444-08:31:17,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:30:00/444-08:31:16,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:19:55/444-08:31:16,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:18/444-08:31:16,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/11:03,1113) [kworker/0:1]
(root,0,0,00:00:00/11:02,1120) [kworker/3:2-events]
(root,0,0,00:00:00/10:52,1341) [kworker/u8:0-flush-8:0]
(www-data,7028,3736,00:00:00/10:12,1620) /usr/sbin/apache2 -k start
(www-data,235868,16268,00:00:00/10:12,1621) /usr/sbin/apache2 -k start
(www-data,235924,10136,00:00:00/10:12,1622) /usr/sbin/apache2 -k start
(root,13320,6384,07:30:51/444-08:31:14,1740) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,6792,4584,00:14:24/444-08:31:14,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:25/444-08:31:13,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/444-08:31:06,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/444-08:31:06,1815) (sd-pam)
(root,0,0,00:00:00/05:32,3959) [kworker/u8:1-flush-8:0]
(root,13320,6416,00:00:00/01:53,5884) sshd: [accepted]
(root,13320,6312,00:00:00/01:35,5925) sshd: [accepted]
(root,13320,6376,00:00:00/01:22,5962) sshd: [accepted]
(root,0,0,00:00:12/2-17:55:58,6171) [kworker/1:1-events_freezable]
(root,13320,6548,00:00:00/01:13,6504) sshd: [accepted]
(root,13320,6408,00:00:00/01:11,6509) sshd: [accepted]
(sshd,13320,4224,00:00:00/01:11,6512) sshd: [net]
(root,13320,6276,00:00:00/00:41,7025) sshd: [accepted]
(root,13320,6508,00:00:00/00:40,7029) sshd: [accepted]
(root,13320,6380,00:00:00/00:12,7251) sshd: [accepted]
(root,14144,7528,00:00:00/00:02,7264) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:02,7265) sshd: root [net]
(root,14464,7628,00:00:00/00:01,7455) sshd: unknown [priv]
(sshd,13320,4392,00:00:00/00:01,7461) sshd: unknown [net]
(root,7252,3572,00:00:00/444-08:18:59,7652) /bin/login -p --
(root,9320,4052,00:00:00/444-08:18:53,7664) -bash
(root,0,0,00:00:24/3-00:11:03,7678) [kworker/2:1-events]
(root,8692,3288,00:00:00/00:00,7703) /bin/bash /usr/bin/check_mk_agent
(root,6608,2720,00:00:00/00:00,7722) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,748,00:00:00/00:00,7723) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/1-00:11:03,8221) [kworker/1:2-events]
(root,0,0,00:00:00/02:49:39,8671) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:18/1-17:32:53,8689) [kworker/0:0-events]
(root,5000,1376,00:00:00/444-07:48:53,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1512,00:00:00/415-04:07:18,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:36/7-08:09:57,24288) [kworker/2:0-events]
(zabbix,20484,1544,00:00:00/304-14:44:56,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:38:32/304-14:44:56,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:40:35/304-14:44:56,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:40:16/304-14:44:56,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:41:17/304-14:44:56,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:16:57/304-14:44:56,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:11/4-00:11:03,32620) [kworker/3:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-19 22:11

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6f47a86f0

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35788,9052,05:09:00/442-09:03:19,1) /sbin/init
(root,0,0,00:00:01/442-09:03:19,2) [kthreadd]
(root,0,0,00:00:00/442-09:03:19,3) [rcu_gp]
(root,0,0,00:00:00/442-09:03:19,4) [rcu_par_gp]
(root,0,0,00:00:00/442-09:03:19,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/442-09:03:19,8) [mm_percpu_wq]
(root,0,0,00:00:00/442-09:03:19,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/442-09:03:19,10) [rcu_tasks_trace]
(root,0,0,01:05:10/442-09:03:19,11) [ksoftirqd/0]
(root,0,0,10:41:01/442-09:03:19,12) [rcu_sched]
(root,0,0,00:00:41/442-09:03:19,13) [migration/0]
(root,0,0,00:00:00/442-09:03:19,15) [cpuhp/0]
(root,0,0,00:00:00/442-09:03:19,16) [cpuhp/1]
(root,0,0,00:00:51/442-09:03:19,17) [migration/1]
(root,0,0,00:03:34/442-09:03:19,18) [ksoftirqd/1]
(root,0,0,00:00:00/442-09:03:19,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/442-09:03:19,21) [cpuhp/2]
(root,0,0,00:00:38/442-09:03:19,22) [migration/2]
(root,0,0,01:26:11/442-09:03:19,23) [ksoftirqd/2]
(root,0,0,00:00:00/442-09:03:19,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/442-09:03:19,26) [cpuhp/3]
(root,0,0,00:00:51/442-09:03:19,27) [migration/3]
(root,0,0,00:02:32/442-09:03:19,28) [ksoftirqd/3]
(root,0,0,00:00:00/442-09:03:19,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/442-09:03:19,31) [kdevtmpfs]
(root,0,0,00:00:00/442-09:03:19,32) [netns]
(root,0,0,00:00:00/442-09:03:19,33) [kauditd]
(root,0,0,00:00:08/442-09:03:19,34) [khungtaskd]
(root,0,0,00:00:00/442-09:03:19,35) [oom_reaper]
(root,0,0,00:00:00/442-09:03:19,36) [writeback]
(root,0,0,00:10:27/442-09:03:19,37) [kcompactd0]
(root,0,0,00:00:00/442-09:03:19,38) [ksmd]
(root,0,0,00:17:22/442-09:03:19,39) [khugepaged]
(root,0,0,00:00:00/442-09:03:19,58) [kintegrityd]
(root,0,0,00:00:00/442-09:03:19,59) [kblockd]
(root,0,0,00:00:00/442-09:03:19,60) [blkcg_punt_bio]
(root,0,0,00:00:00/442-09:03:19,61) [edac-poller]
(root,0,0,00:00:00/442-09:03:19,62) [devfreq_wq]
(root,0,0,00:05:41/442-09:03:19,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:08/442-09:03:18,65) [kswapd0]
(root,0,0,00:00:00/442-09:03:18,66) [kthrotld]
(root,0,0,00:00:00/442-09:03:18,67) [acpi_thermal_pm]
(root,0,0,00:03:48/442-09:03:18,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/442-09:03:18,70) [ipv6_addrconf]
(root,0,0,00:00:00/442-09:03:18,81) [kstrp]
(root,0,0,00:00:00/442-09:03:18,84) [zswap-shrink]
(root,0,0,00:00:00/442-09:03:18,85) [kworker/u9:0]
(root,0,0,00:02:56/442-09:03:18,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/442-09:03:18,135) [ata_sff]
(root,0,0,00:00:00/442-09:03:18,139) [scsi_eh_0]
(root,0,0,00:00:00/442-09:03:18,140) [scsi_tmf_0]
(root,0,0,00:00:00/442-09:03:18,141) [scsi_eh_1]
(root,0,0,00:00:00/442-09:03:18,142) [scsi_tmf_1]
(root,0,0,00:00:00/442-09:03:18,143) [scsi_eh_2]
(root,0,0,00:00:00/442-09:03:18,144) [scsi_tmf_2]
(root,0,0,00:00:00/442-09:03:18,145) [scsi_eh_3]
(root,0,0,00:00:00/442-09:03:18,146) [scsi_tmf_3]
(root,0,0,00:02:16/442-09:03:17,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:48/442-09:03:16,183) [jbd2/sda1-8]
(root,0,0,00:00:00/442-09:03:16,184) [ext4-rsv-conver]
(root,96268,54004,1-02:33:55/442-09:03:16,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:29/442-09:03:16,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/442-09:03:16,291) [watchdogd]
(root,0,0,00:00:00/442-09:03:16,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:11/442-09:03:16,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/442-09:03:16,349) [card0-crtc0]
(root,0,0,00:00:00/442-09:03:16,350) [card0-crtc1]
(root,0,0,00:00:00/442-09:03:16,351) [card0-crtc2]
(root,0,0,00:00:00/442-09:03:16,353) [cryptd]
(root,8472,2688,00:02:21/442-09:03:16,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/442-09:03:16,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7772,06:34:31/442-09:03:16,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:46/442-09:03:16,374) /lib/systemd/systemd-logind
(root,10768,2624,01:20:42/442-09:03:16,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:27:12/442-09:03:15,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:19:49/442-09:03:15,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:15/442-09:03:15,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:29:20/442-09:03:13,1740) sshd: /usr/sbin/sshd -D [listener] 14 of 10-100 startups
(root,6792,4584,00:14:20/442-09:03:13,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:24/442-09:03:12,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/442-09:03:05,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/442-09:03:05,1815) (sd-pam)
(root,0,0,00:00:00/22:41,3308) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:03/18:27:57,6171) [kworker/1:1-mm_percpu_wq]
(root,7252,3572,00:00:00/442-08:50:58,7652) /bin/login -p --
(root,9320,4052,00:00:00/442-08:50:52,7664) -bash
(root,0,0,00:00:08/1-00:43:02,7678) [kworker/2:1-events]
(root,0,0,00:01:16/6-18:40:30,7772) [kworker/0:1-events]
(root,13320,6428,00:00:00/01:51,13559) sshd: [accepted]
(root,13320,6320,00:00:00/01:26,13810) sshd: [accepted]
(root,13320,6492,00:00:00/01:21,13825) sshd: [accepted]
(root,13320,6584,00:00:00/01:07,13855) sshd: [accepted]
(sshd,13320,4388,00:00:00/01:07,13856) sshd: [net]
(root,13320,6552,00:00:00/00:49,14091) sshd: [accepted]
(root,13320,6384,00:00:00/00:44,14098) sshd: [accepted]
(root,13320,6420,00:00:00/00:41,14107) sshd: [accepted]
(root,13320,6412,00:00:00/00:19,14315) sshd: [accepted]
(root,13320,6452,00:00:00/00:10,14339) sshd: [accepted]
(root,14144,7348,00:00:00/00:08,14340) sshd: root [priv]
(sshd,13320,4176,00:00:00/00:08,14341) sshd: root [net]
(root,14464,7648,00:00:00/00:05,14352) sshd: unknown [priv]
(sshd,13320,4332,00:00:00/00:05,14353) sshd: unknown [net]
(root,14464,7656,00:00:00/00:03,14354) sshd: unknown [priv]
(sshd,13320,4384,00:00:00/00:03,14355) sshd: unknown [net]
(root,14464,7636,00:00:00/00:02,14356) sshd: unknown [priv]
(sshd,13320,4260,00:00:00/00:02,14357) sshd: unknown [net]
(root,0,0,00:00:00/02:02:11,14563) [kworker/u8:0-ext4-rsv-conversion]
(root,13320,6404,00:00:00/00:00,14568) sshd: [accepted]
(sshd,13320,4392,00:00:00/00:00,14578) sshd: [net]
(root,8692,3348,00:00:00/00:00,14618) /bin/bash /usr/bin/check_mk_agent
(root,6608,2748,00:00:00/00:00,14637) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1460,00:00:00/00:00,14638) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,5000,1376,00:00:00/442-08:20:52,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1512,00:00:00/413-04:39:17,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:00/11:14:44,23258) [kworker/1:2-events]
(root,0,0,00:00:00/11:14:42,23306) [kworker/3:1]
(root,0,0,00:00:36/5-08:41:56,24288) [kworker/2:0-events]
(root,0,0,00:00:00/43:02,25322) [kworker/0:0]
(root,0,0,00:00:00/42:42,25543) [kworker/u8:3-ext4-rsv-conversion]
(zabbix,20484,1544,00:00:00/302-15:16:55,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:38:18/302-15:16:55,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:38:07/302-15:16:55,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:37:47/302-15:16:55,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:38:48/302-15:16:55,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:16:51/302-15:16:55,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(www-data,7028,3732,00:00:00/42:12,25926) /usr/sbin/apache2 -k start
(www-data,236060,10136,00:00:00/42:12,25927) /usr/sbin/apache2 -k start
(www-data,235940,14220,00:00:00/42:12,25928) /usr/sbin/apache2 -k start
(root,0,0,00:00:05/2-00:43:02,32620) [kworker/3:0-mm_percpu_wq]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-17 22:43

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6e75c999a

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9040,05:07:22/440-09:01:17,1) /sbin/init
(root,0,0,00:00:01/440-09:01:17,2) [kthreadd]
(root,0,0,00:00:00/440-09:01:17,3) [rcu_gp]
(root,0,0,00:00:00/440-09:01:17,4) [rcu_par_gp]
(root,0,0,00:00:00/440-09:01:17,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/440-09:01:17,8) [mm_percpu_wq]
(root,0,0,00:00:00/440-09:01:17,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/440-09:01:17,10) [rcu_tasks_trace]
(root,0,0,01:04:49/440-09:01:17,11) [ksoftirqd/0]
(root,0,0,10:38:10/440-09:01:17,12) [rcu_sched]
(root,0,0,00:00:41/440-09:01:17,13) [migration/0]
(root,0,0,00:00:00/440-09:01:17,15) [cpuhp/0]
(root,0,0,00:00:00/440-09:01:17,16) [cpuhp/1]
(root,0,0,00:00:50/440-09:01:17,17) [migration/1]
(root,0,0,00:03:33/440-09:01:17,18) [ksoftirqd/1]
(root,0,0,00:00:00/440-09:01:17,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/440-09:01:17,21) [cpuhp/2]
(root,0,0,00:00:37/440-09:01:17,22) [migration/2]
(root,0,0,01:25:48/440-09:01:17,23) [ksoftirqd/2]
(root,0,0,00:00:00/440-09:01:17,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/440-09:01:17,26) [cpuhp/3]
(root,0,0,00:00:51/440-09:01:17,27) [migration/3]
(root,0,0,00:02:31/440-09:01:17,28) [ksoftirqd/3]
(root,0,0,00:00:00/440-09:01:17,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/440-09:01:17,31) [kdevtmpfs]
(root,0,0,00:00:00/440-09:01:17,32) [netns]
(root,0,0,00:00:00/440-09:01:17,33) [kauditd]
(root,0,0,00:00:08/440-09:01:17,34) [khungtaskd]
(root,0,0,00:00:00/440-09:01:17,35) [oom_reaper]
(root,0,0,00:00:00/440-09:01:17,36) [writeback]
(root,0,0,00:10:19/440-09:01:17,37) [kcompactd0]
(root,0,0,00:00:00/440-09:01:17,38) [ksmd]
(root,0,0,00:17:17/440-09:01:17,39) [khugepaged]
(root,0,0,00:00:00/440-09:01:17,58) [kintegrityd]
(root,0,0,00:00:00/440-09:01:17,59) [kblockd]
(root,0,0,00:00:00/440-09:01:17,60) [blkcg_punt_bio]
(root,0,0,00:00:00/440-09:01:17,61) [edac-poller]
(root,0,0,00:00:00/440-09:01:17,62) [devfreq_wq]
(root,0,0,00:05:39/440-09:01:17,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:08/440-09:01:16,65) [kswapd0]
(root,0,0,00:00:00/440-09:01:16,66) [kthrotld]
(root,0,0,00:00:00/440-09:01:16,67) [acpi_thermal_pm]
(root,0,0,00:03:47/440-09:01:16,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/440-09:01:16,70) [ipv6_addrconf]
(root,0,0,00:00:00/440-09:01:16,81) [kstrp]
(root,0,0,00:00:00/440-09:01:16,84) [zswap-shrink]
(root,0,0,00:00:00/440-09:01:16,85) [kworker/u9:0]
(root,0,0,00:02:55/440-09:01:16,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/440-09:01:16,135) [ata_sff]
(root,0,0,00:00:00/440-09:01:16,139) [scsi_eh_0]
(root,0,0,00:00:00/440-09:01:16,140) [scsi_tmf_0]
(root,0,0,00:00:00/440-09:01:16,141) [scsi_eh_1]
(root,0,0,00:00:00/440-09:01:16,142) [scsi_tmf_1]
(root,0,0,00:00:00/440-09:01:16,143) [scsi_eh_2]
(root,0,0,00:00:00/440-09:01:16,144) [scsi_tmf_2]
(root,0,0,00:00:00/440-09:01:16,145) [scsi_eh_3]
(root,0,0,00:00:00/440-09:01:16,146) [scsi_tmf_3]
(root,0,0,00:02:16/440-09:01:15,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:45/440-09:01:14,183) [jbd2/sda1-8]
(root,0,0,00:00:00/440-09:01:14,184) [ext4-rsv-conver]
(root,153520,97668,1-02:27:41/440-09:01:14,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:29/440-09:01:14,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/440-09:01:14,291) [watchdogd]
(root,0,0,00:00:00/440-09:01:14,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:10/440-09:01:14,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/440-09:01:14,349) [card0-crtc0]
(root,0,0,00:00:00/440-09:01:14,350) [card0-crtc1]
(root,0,0,00:00:00/440-09:01:14,351) [card0-crtc2]
(root,0,0,00:00:00/440-09:01:14,353) [cryptd]
(root,8472,2688,00:02:21/440-09:01:14,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/440-09:01:14,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7776,06:32:56/440-09:01:14,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:46/440-09:01:14,374) /lib/systemd/systemd-logind
(root,10768,2624,01:20:20/440-09:01:14,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:23:58/440-09:01:13,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:19:44/440-09:01:13,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:12/440-09:01:13,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(www-data,7028,3732,00:00:00/40:10,563) /usr/sbin/apache2 -k start
(www-data,235924,12180,00:00:00/40:10,564) /usr/sbin/apache2 -k start
(www-data,235980,14220,00:00:00/40:10,565) /usr/sbin/apache2 -k start
(root,13320,6384,07:27:39/440-09:01:11,1740) sshd: /usr/sbin/sshd -D [listener] 9 of 10-100 startups
(root,6792,4584,00:14:16/440-09:01:11,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:23/440-09:01:10,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/440-09:01:03,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/440-09:01:03,1815) (sd-pam)
(root,0,0,00:00:14/3-18:16:37,3406) [kworker/1:2-events]
(root,7252,3572,00:00:00/440-08:48:56,7652) /bin/login -p --
(root,9320,4052,00:00:00/440-08:48:50,7664) -bash
(root,0,0,00:00:53/4-18:38:28,7772) [kworker/0:1-events]
(root,0,0,00:00:00/24:15,9176) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/1-00:41:00,12155) [kworker/2:1]
(root,0,0,00:00:00/1-00:40:20,12618) [kworker/0:0-events]
(root,0,0,00:00:00/13:29,14798) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/01:07:00,17450) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:05/1-17:19:34,17955) [kworker/3:1-events]
(root,13320,6376,00:00:00/01:47,20613) sshd: [accepted]
(root,13320,6456,00:00:00/01:41,20629) sshd: [accepted]
(sshd,13320,4392,00:00:00/01:41,20630) sshd: [net]
(root,13320,6324,00:00:00/00:06,21437) sshd: [accepted]
(sshd,13320,4304,00:00:00/00:06,21438) sshd: [net]
(root,5000,1376,00:00:00/440-08:18:50,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,14144,7480,00:00:00/00:05,21615) sshd: root [priv]
(sshd,13320,4260,00:00:00/00:05,21616) sshd: root [net]
(root,14144,7528,00:00:00/00:04,21617) sshd: root [priv]
(sshd,13320,4288,00:00:00/00:04,21618) sshd: root [net]
(root,14144,7364,00:00:00/00:04,21619) sshd: root [priv]
(sshd,13320,4272,00:00:00/00:04,21620) sshd: root [net]
(root,13320,6392,00:00:00/00:01,21621) sshd: [accepted]
(sshd,13320,4280,00:00:00/00:01,21622) sshd: [net]
(root,13320,6292,00:00:00/00:01,21623) sshd: [accepted]
(sshd,13320,4272,00:00:00/00:01,21624) sshd: [net]
(root,8692,3536,00:00:00/00:00,21851) /bin/bash /usr/bin/check_mk_agent
(root,13320,6440,00:00:00/00:00,21852) sshd: [accepted]
(sshd,13320,4312,00:00:00/00:00,21871) sshd: [net]
(root,6608,2752,00:00:00/00:00,21872) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1548,00:00:00/00:00,21873) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,5000,1512,00:00:00/411-04:37:15,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:28/3-08:39:54,24288) [kworker/2:0-events]
(zabbix,20484,1544,00:00:00/300-15:14:53,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:38:03/300-15:14:53,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:35:30/300-15:14:53,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:35:09/300-15:14:53,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:36:08/300-15:14:53,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:16:44/300-15:14:53,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:01/08:39:52,32290) [kworker/1:0-events]
(root,0,0,00:00:00/41:00,32620) [kworker/3:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-15 22:41

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc6d79defb1

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35652,9020,05:06:16/438-08:16:32,1) /sbin/init
(root,0,0,00:00:01/438-08:16:32,2) [kthreadd]
(root,0,0,00:00:00/438-08:16:32,3) [rcu_gp]
(root,0,0,00:00:00/438-08:16:32,4) [rcu_par_gp]
(root,0,0,00:00:00/438-08:16:32,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/438-08:16:32,8) [mm_percpu_wq]
(root,0,0,00:00:00/438-08:16:32,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/438-08:16:32,10) [rcu_tasks_trace]
(root,0,0,01:04:32/438-08:16:32,11) [ksoftirqd/0]
(root,0,0,10:35:07/438-08:16:32,12) [rcu_sched]
(root,0,0,00:00:41/438-08:16:32,13) [migration/0]
(root,0,0,00:00:00/438-08:16:32,15) [cpuhp/0]
(root,0,0,00:00:00/438-08:16:32,16) [cpuhp/1]
(root,0,0,00:00:50/438-08:16:32,17) [migration/1]
(root,0,0,00:03:32/438-08:16:32,18) [ksoftirqd/1]
(root,0,0,00:00:00/438-08:16:32,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/438-08:16:32,21) [cpuhp/2]
(root,0,0,00:00:37/438-08:16:32,22) [migration/2]
(root,0,0,01:25:20/438-08:16:32,23) [ksoftirqd/2]
(root,0,0,00:00:00/438-08:16:32,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/438-08:16:32,26) [cpuhp/3]
(root,0,0,00:00:51/438-08:16:32,27) [migration/3]
(root,0,0,00:02:31/438-08:16:32,28) [ksoftirqd/3]
(root,0,0,00:00:00/438-08:16:32,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/438-08:16:32,31) [kdevtmpfs]
(root,0,0,00:00:00/438-08:16:32,32) [netns]
(root,0,0,00:00:00/438-08:16:32,33) [kauditd]
(root,0,0,00:00:08/438-08:16:32,34) [khungtaskd]
(root,0,0,00:00:00/438-08:16:32,35) [oom_reaper]
(root,0,0,00:00:00/438-08:16:32,36) [writeback]
(root,0,0,00:10:17/438-08:16:32,37) [kcompactd0]
(root,0,0,00:00:00/438-08:16:32,38) [ksmd]
(root,0,0,00:17:12/438-08:16:32,39) [khugepaged]
(root,0,0,00:00:00/438-08:16:32,58) [kintegrityd]
(root,0,0,00:00:00/438-08:16:32,59) [kblockd]
(root,0,0,00:00:00/438-08:16:32,60) [blkcg_punt_bio]
(root,0,0,00:00:00/438-08:16:32,61) [edac-poller]
(root,0,0,00:00:00/438-08:16:32,62) [devfreq_wq]
(root,0,0,00:05:38/438-08:16:32,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:07/438-08:16:31,65) [kswapd0]
(root,0,0,00:00:00/438-08:16:31,66) [kthrotld]
(root,0,0,00:00:00/438-08:16:31,67) [acpi_thermal_pm]
(root,0,0,00:03:46/438-08:16:31,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/438-08:16:31,70) [ipv6_addrconf]
(root,0,0,00:00:00/438-08:16:31,81) [kstrp]
(root,0,0,00:00:00/438-08:16:31,84) [zswap-shrink]
(root,0,0,00:00:00/438-08:16:31,85) [kworker/u9:0]
(root,0,0,00:02:54/438-08:16:31,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/438-08:16:31,135) [ata_sff]
(root,0,0,00:00:00/438-08:16:31,139) [scsi_eh_0]
(root,0,0,00:00:00/438-08:16:31,140) [scsi_tmf_0]
(root,0,0,00:00:00/438-08:16:31,141) [scsi_eh_1]
(root,0,0,00:00:00/438-08:16:31,142) [scsi_tmf_1]
(root,0,0,00:00:00/438-08:16:31,143) [scsi_eh_2]
(root,0,0,00:00:00/438-08:16:31,144) [scsi_tmf_2]
(root,0,0,00:00:00/438-08:16:31,145) [scsi_eh_3]
(root,0,0,00:00:00/438-08:16:31,146) [scsi_tmf_3]
(root,0,0,00:02:15/438-08:16:30,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:41/438-08:16:29,183) [jbd2/sda1-8]
(root,0,0,00:00:00/438-08:16:29,184) [ext4-rsv-conver]
(root,297032,221732,1-02:21:22/438-08:16:29,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:29/438-08:16:29,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/438-08:16:29,291) [watchdogd]
(root,0,0,00:00:00/438-08:16:29,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:10/438-08:16:29,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/438-08:16:29,349) [card0-crtc0]
(root,0,0,00:00:00/438-08:16:29,350) [card0-crtc1]
(root,0,0,00:00:00/438-08:16:29,351) [card0-crtc2]
(root,0,0,00:00:00/438-08:16:29,353) [cryptd]
(root,8472,2688,00:02:20/438-08:16:29,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/438-08:16:29,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7776,06:31:28/438-08:16:29,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:46/438-08:16:29,374) /lib/systemd/systemd-logind
(root,10768,2624,01:19:57/438-08:16:29,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:19:52/438-08:16:28,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:19:38/438-08:16:28,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:09/438-08:16:28,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:25:48/438-08:16:26,1740) sshd: /usr/sbin/sshd -D [listener] 4 of 10-100 startups
(root,6792,4584,00:14:12/438-08:16:26,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:22/438-08:16:25,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/438-08:16:18,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/438-08:16:18,1815) (sd-pam)
(root,0,0,00:00:07/1-17:31:52,3406) [kworker/1:2-mm_percpu_wq]
(root,7252,3572,00:00:00/438-08:04:11,7652) /bin/login -p --
(root,9320,4052,00:00:00/438-08:04:05,7664) -bash
(root,0,0,00:00:31/2-17:53:43,7772) [kworker/0:1-events]
(root,0,0,00:00:00/02:10,8028) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:27/5-05:11:03,8845) [kworker/0:0-cgroup_destroy]
(root,14144,7296,00:00:00/00:04,9024) sshd: bin [priv]
(sshd,13320,4320,00:00:00/00:04,9025) sshd: bin [net]
(root,13320,6552,00:00:00/00:02,9026) sshd: [accepted]
(sshd,13320,4320,00:00:00/00:02,9027) sshd: [net]
(root,13320,6336,00:00:00/00:01,9028) sshd: [accepted]
(sshd,13320,4336,00:00:00/00:01,9029) sshd: [net]
(root,13320,6260,00:00:00/00:01,9030) sshd: [accepted]
(root,8692,3448,00:00:00/00:00,9079) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,9098) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1536,00:00:00/00:00,9099) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:09/3-01:21:11,11500) [kworker/3:2-mm_percpu_wq]
(root,0,0,00:00:00/17:35:52,12287) [kworker/2:1-cgroup_destroy]
(root,0,0,00:00:00/52:56,12756) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:00/23:56:14,18282) [kworker/1:0-events]
(www-data,7028,3732,00:00:00/23:55:24,18572) /usr/sbin/apache2 -k start
(www-data,236772,12236,00:00:01/23:55:24,18573) /usr/sbin/apache2 -k start
(www-data,236836,14224,00:00:01/23:55:24,18574) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/16:13:04,20614) [kworker/3:0]
(root,5000,1376,00:00:00/438-07:34:05,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1512,00:00:00/409-03:52:30,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(root,0,0,00:00:10/1-07:55:09,24288) [kworker/2:0-events]
(zabbix,20484,1544,00:00:00/298-14:30:08,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:37:47/298-14:30:08,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:32:42/298-14:30:08,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:32:21/298-14:30:08,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:33:22/298-14:30:08,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:16:37/298-14:30:08,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
(root,0,0,00:00:00/26:03,27707) [kworker/u8:0-ext4-rsv-conversion]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-13 21:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc695668ee4

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9032,05:04:43/436-10:58:58,1) /sbin/init
(root,0,0,00:00:01/436-10:58:58,2) [kthreadd]
(root,0,0,00:00:00/436-10:58:58,3) [rcu_gp]
(root,0,0,00:00:00/436-10:58:58,4) [rcu_par_gp]
(root,0,0,00:00:00/436-10:58:58,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/436-10:58:58,8) [mm_percpu_wq]
(root,0,0,00:00:00/436-10:58:58,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/436-10:58:58,10) [rcu_tasks_trace]
(root,0,0,01:04:15/436-10:58:58,11) [ksoftirqd/0]
(root,0,0,10:32:29/436-10:58:58,12) [rcu_sched]
(root,0,0,00:00:41/436-10:58:58,13) [migration/0]
(root,0,0,00:00:00/436-10:58:58,15) [cpuhp/0]
(root,0,0,00:00:00/436-10:58:58,16) [cpuhp/1]
(root,0,0,00:00:50/436-10:58:58,17) [migration/1]
(root,0,0,00:03:31/436-10:58:58,18) [ksoftirqd/1]
(root,0,0,00:00:00/436-10:58:58,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/436-10:58:58,21) [cpuhp/2]
(root,0,0,00:00:37/436-10:58:58,22) [migration/2]
(root,0,0,01:24:45/436-10:58:58,23) [ksoftirqd/2]
(root,0,0,00:00:00/436-10:58:58,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/436-10:58:58,26) [cpuhp/3]
(root,0,0,00:00:51/436-10:58:58,27) [migration/3]
(root,0,0,00:02:30/436-10:58:58,28) [ksoftirqd/3]
(root,0,0,00:00:00/436-10:58:58,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/436-10:58:58,31) [kdevtmpfs]
(root,0,0,00:00:00/436-10:58:58,32) [netns]
(root,0,0,00:00:00/436-10:58:58,33) [kauditd]
(root,0,0,00:00:08/436-10:58:58,34) [khungtaskd]
(root,0,0,00:00:00/436-10:58:58,35) [oom_reaper]
(root,0,0,00:00:00/436-10:58:58,36) [writeback]
(root,0,0,00:10:14/436-10:58:58,37) [kcompactd0]
(root,0,0,00:00:00/436-10:58:58,38) [ksmd]
(root,0,0,00:17:07/436-10:58:58,39) [khugepaged]
(root,0,0,00:00:00/436-10:58:58,58) [kintegrityd]
(root,0,0,00:00:00/436-10:58:58,59) [kblockd]
(root,0,0,00:00:00/436-10:58:58,60) [blkcg_punt_bio]
(root,0,0,00:00:00/436-10:58:58,61) [edac-poller]
(root,0,0,00:00:00/436-10:58:58,62) [devfreq_wq]
(root,0,0,00:05:36/436-10:58:58,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:07/436-10:58:57,65) [kswapd0]
(root,0,0,00:00:00/436-10:58:57,66) [kthrotld]
(root,0,0,00:00:00/436-10:58:57,67) [acpi_thermal_pm]
(root,0,0,00:03:45/436-10:58:57,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/436-10:58:57,70) [ipv6_addrconf]
(root,0,0,00:00:00/436-10:58:57,81) [kstrp]
(root,0,0,00:00:00/436-10:58:57,84) [zswap-shrink]
(root,0,0,00:00:00/436-10:58:57,85) [kworker/u9:0]
(root,0,0,00:02:54/436-10:58:57,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/436-10:58:57,135) [ata_sff]
(root,0,0,00:00:00/436-10:58:57,139) [scsi_eh_0]
(root,0,0,00:00:00/436-10:58:57,140) [scsi_tmf_0]
(root,0,0,00:00:00/436-10:58:57,141) [scsi_eh_1]
(root,0,0,00:00:00/436-10:58:57,142) [scsi_tmf_1]
(root,0,0,00:00:00/436-10:58:57,143) [scsi_eh_2]
(root,0,0,00:00:00/436-10:58:57,144) [scsi_tmf_2]
(root,0,0,00:00:00/436-10:58:57,145) [scsi_eh_3]
(root,0,0,00:00:00/436-10:58:57,146) [scsi_tmf_3]
(root,0,0,00:02:15/436-10:58:56,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:37/436-10:58:55,183) [jbd2/sda1-8]
(root,0,0,00:00:00/436-10:58:55,184) [ext4-rsv-conver]
(root,239736,178652,1-02:14:53/436-10:58:55,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:29/436-10:58:55,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/436-10:58:55,291) [watchdogd]
(root,0,0,00:00:00/436-10:58:55,304) [irq/126-mei_me]
(root,0,0,00:00:00/03:49:24,317) [kworker/u8:0-flush-8:0]
(systemd-timesync,23796,6184,00:01:09/436-10:58:55,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/436-10:58:55,349) [card0-crtc0]
(root,0,0,00:00:00/436-10:58:55,350) [card0-crtc1]
(root,0,0,00:00:00/436-10:58:55,351) [card0-crtc2]
(root,0,0,00:00:00/436-10:58:55,353) [cryptd]
(root,8472,2688,00:02:19/436-10:58:55,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:05/436-10:58:55,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7780,06:29:53/436-10:58:55,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:46/436-10:58:55,374) /lib/systemd/systemd-logind
(root,10768,2624,01:19:37/436-10:58:55,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:16:05/436-10:58:54,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:19:33/436-10:58:54,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:06/436-10:58:54,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:24:03/436-10:58:52,1740) sshd: /usr/sbin/sshd -D [listener] 12 of 10-100 startups
(root,6792,4584,00:14:08/436-10:58:52,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:21/436-10:58:51,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/436-10:58:44,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/436-10:58:44,1815) (sd-pam)
(root,0,0,00:00:41/4-19:38:48,2804) [kworker/2:1-events]
(root,0,0,00:00:00/03:37,2903) [kworker/u8:1]
(root,13320,6384,00:00:00/01:21,4339) sshd: [accepted]
(root,13320,6444,00:00:00/01:16,4356) sshd: [accepted]
(sshd,13320,4332,00:00:00/01:16,4357) sshd: [net]
(root,14144,7448,00:00:00/00:05,5134) sshd: root [priv]
(sshd,13320,4364,00:00:00/00:05,5135) sshd: root [net]
(root,14464,7668,00:00:00/00:04,5137) sshd: unknown [priv]
(sshd,13320,4280,00:00:00/00:04,5138) sshd: unknown [net]
(root,14144,7532,00:00:00/00:04,5139) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:04,5140) sshd: root [net]
(root,14464,7720,00:00:00/00:04,5141) sshd: unknown [priv]
(sshd,13320,4336,00:00:00/00:04,5142) sshd: unknown [net]
(root,14464,7640,00:00:00/00:03,5143) sshd: unknown [priv]
(sshd,13320,4260,00:00:00/00:03,5144) sshd: unknown [net]
(root,14464,7560,00:00:00/00:03,5145) sshd: unknown [priv]
(sshd,13320,4336,00:00:00/00:03,5146) sshd: unknown [net]
(root,14144,7444,00:00:00/00:02,5147) sshd: root [priv]
(sshd,13320,4280,00:00:00/00:02,5148) sshd: root [net]
(root,13320,6468,00:00:00/00:02,5149) sshd: [accepted]
(sshd,13320,4380,00:00:00/00:02,5150) sshd: [net]
(root,14464,7724,00:00:00/00:01,5151) sshd: unknown [priv]
(sshd,13320,4476,00:00:00/00:01,5152) sshd: unknown [net]
(root,13320,6384,00:00:00/00:01,5153) sshd: [accepted]
(sshd,13320,4312,00:00:00/00:01,5154) sshd: [net]
(root,8692,3436,00:00:00/00:00,5327) /bin/bash /usr/bin/check_mk_agent
(root,6608,2804,00:00:00/00:00,5346) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1516,00:00:00/00:00,5347) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:11/2-15:06:42,5849) [kworker/1:0-events_freezable]
(root,0,0,00:00:00/02:41:39,5940) [kworker/2:0]
(root,0,0,00:00:00/02:41:39,5970) [kworker/3:0]
(root,7252,3572,00:00:00/436-10:46:37,7652) /bin/login -p --
(root,9320,4052,00:00:00/436-10:46:31,7664) -bash
(root,0,0,00:00:10/20:36:09,7772) [kworker/0:1-events]
(root,0,0,00:00:00/02:38:01,8055) [kworker/1:1]
(www-data,7028,3736,00:00:00/02:37:51,8095) /usr/sbin/apache2 -k start
(www-data,236716,18988,00:00:00/02:37:51,8096) /usr/sbin/apache2 -k start
(www-data,236732,17080,00:00:00/02:37:51,8097) /usr/sbin/apache2 -k start
(root,0,0,00:00:27/3-07:53:29,8845) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:03/1-04:03:37,11500) [kworker/3:2-events]
(root,0,0,00:00:00/04:11:49,21224) [kworker/u8:2-ext4-rsv-conversion]
(root,5000,1376,00:00:00/436-10:16:31,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1512,00:00:00/407-06:34:56,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/296-17:12:34,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:37:33/296-17:12:34,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:30:09/296-17:12:34,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:29:47/296-17:12:34,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:30:46/296-17:12:34,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:16:31/296-17:12:34,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-12 00:38

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a660568809ce63b30a5a3cc63b893dc2

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: r0-bgp.intencom.com.pl
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,35780,9040,05:04:00/435-16:46:07,1) /sbin/init
(root,0,0,00:00:01/435-16:46:07,2) [kthreadd]
(root,0,0,00:00:00/435-16:46:07,3) [rcu_gp]
(root,0,0,00:00:00/435-16:46:07,4) [rcu_par_gp]
(root,0,0,00:00:00/435-16:46:07,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/435-16:46:07,8) [mm_percpu_wq]
(root,0,0,00:00:00/435-16:46:07,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/435-16:46:07,10) [rcu_tasks_trace]
(root,0,0,01:04:05/435-16:46:07,11) [ksoftirqd/0]
(root,0,0,10:31:21/435-16:46:07,12) [rcu_sched]
(root,0,0,00:00:40/435-16:46:07,13) [migration/0]
(root,0,0,00:00:00/435-16:46:07,15) [cpuhp/0]
(root,0,0,00:00:00/435-16:46:07,16) [cpuhp/1]
(root,0,0,00:00:50/435-16:46:07,17) [migration/1]
(root,0,0,00:03:31/435-16:46:07,18) [ksoftirqd/1]
(root,0,0,00:00:00/435-16:46:07,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/435-16:46:07,21) [cpuhp/2]
(root,0,0,00:00:37/435-16:46:07,22) [migration/2]
(root,0,0,01:24:30/435-16:46:07,23) [ksoftirqd/2]
(root,0,0,00:00:00/435-16:46:07,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/435-16:46:07,26) [cpuhp/3]
(root,0,0,00:00:50/435-16:46:07,27) [migration/3]
(root,0,0,00:02:30/435-16:46:07,28) [ksoftirqd/3]
(root,0,0,00:00:00/435-16:46:07,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/435-16:46:07,31) [kdevtmpfs]
(root,0,0,00:00:00/435-16:46:07,32) [netns]
(root,0,0,00:00:00/435-16:46:07,33) [kauditd]
(root,0,0,00:00:08/435-16:46:07,34) [khungtaskd]
(root,0,0,00:00:00/435-16:46:07,35) [oom_reaper]
(root,0,0,00:00:00/435-16:46:07,36) [writeback]
(root,0,0,00:10:13/435-16:46:07,37) [kcompactd0]
(root,0,0,00:00:00/435-16:46:07,38) [ksmd]
(root,0,0,00:17:05/435-16:46:07,39) [khugepaged]
(root,0,0,00:00:00/435-16:46:07,58) [kintegrityd]
(root,0,0,00:00:00/435-16:46:07,59) [kblockd]
(root,0,0,00:00:00/435-16:46:07,60) [blkcg_punt_bio]
(root,0,0,00:00:00/435-16:46:07,61) [edac-poller]
(root,0,0,00:00:00/435-16:46:07,62) [devfreq_wq]
(root,0,0,00:05:35/435-16:46:07,64) [kworker/1:1H-kblockd]
(root,0,0,00:01:07/435-16:46:06,65) [kswapd0]
(root,0,0,00:00:00/435-16:46:06,66) [kthrotld]
(root,0,0,00:00:00/435-16:46:06,67) [acpi_thermal_pm]
(root,0,0,00:03:44/435-16:46:06,69) [kworker/2:1H-kblockd]
(root,0,0,00:00:00/435-16:46:06,70) [ipv6_addrconf]
(root,0,0,00:00:00/435-16:46:06,81) [kstrp]
(root,0,0,00:00:00/435-16:46:06,84) [zswap-shrink]
(root,0,0,00:00:00/435-16:46:06,85) [kworker/u9:0]
(root,0,0,00:02:53/435-16:46:06,127) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/435-16:46:06,135) [ata_sff]
(root,0,0,00:00:00/435-16:46:06,139) [scsi_eh_0]
(root,0,0,00:00:00/435-16:46:06,140) [scsi_tmf_0]
(root,0,0,00:00:00/435-16:46:06,141) [scsi_eh_1]
(root,0,0,00:00:00/435-16:46:06,142) [scsi_tmf_1]
(root,0,0,00:00:00/435-16:46:06,143) [scsi_eh_2]
(root,0,0,00:00:00/435-16:46:06,144) [scsi_tmf_2]
(root,0,0,00:00:00/435-16:46:06,145) [scsi_eh_3]
(root,0,0,00:00:00/435-16:46:06,146) [scsi_tmf_3]
(root,0,0,00:02:14/435-16:46:05,153) [kworker/3:1H-kblockd]
(root,0,0,00:12:36/435-16:46:04,183) [jbd2/sda1-8]
(root,0,0,00:00:00/435-16:46:04,184) [ext4-rsv-conver]
(root,243568,184876,1-02:12:03/435-16:46:04,218) /lib/systemd/systemd-journald
(root,21604,4476,00:00:29/435-16:46:04,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/435-16:46:04,291) [watchdogd]
(root,0,0,00:00:00/435-16:46:04,304) [irq/126-mei_me]
(systemd-timesync,23796,6184,00:01:09/435-16:46:04,343) /lib/systemd/systemd-timesyncd
(root,0,0,00:00:00/435-16:46:04,349) [card0-crtc0]
(root,0,0,00:00:00/435-16:46:04,350) [card0-crtc1]
(root,0,0,00:00:00/435-16:46:04,351) [card0-crtc2]
(root,0,0,00:00:00/435-16:46:04,353) [cryptd]
(root,8472,2688,00:02:19/435-16:46:04,358) /usr/sbin/cron -f
(messagebus,8240,3668,00:00:04/435-16:46:04,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7780,06:29:11/435-16:46:04,371) /usr/sbin/rsyslogd -n -iNONE
(root,49972,6456,00:00:46/435-16:46:04,374) /lib/systemd/systemd-logind
(root,10768,2624,01:19:28/435-16:46:04,394) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69308,9376,11:14:20/435-16:46:03,410) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43272,6196,00:19:30/435-16:46:03,417) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11740,2088,00:11:05/435-16:46:03,434) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6384,07:23:17/435-16:46:01,1740) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,6792,4584,00:14:07/435-16:46:01,1748) /usr/sbin/apache2 -k start
(root,9832,2396,00:03:21/435-16:46:00,1807) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15252,7408,00:00:00/435-16:45:53,1814) /lib/systemd/systemd --user
(root,36400,700,00:00:00/435-16:45:53,1815) (sd-pam)
(root,0,0,00:00:34/4-01:25:57,2804) [kworker/2:1-events]
(root,0,0,00:00:00/01:29:39,3151) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:08/1-20:53:51,5849) [kworker/1:0-events_freezable]
(root,7252,3572,00:00:00/435-16:33:46,7652) /bin/login -p --
(root,9320,4052,00:00:00/435-16:33:40,7664) -bash
(root,0,0,00:00:01/02:23:18,7772) [kworker/0:1-events]
(root,0,0,00:00:27/2-13:40:38,8845) [kworker/0:0-cgroup_destroy]
(root,0,0,00:00:00/10:21,10216) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:01/09:50:46,11500) [kworker/3:2-events]
(root,0,0,00:00:00/04:22,12842) [kworker/u8:1-ext4-rsv-conversion]
(root,0,0,00:00:00/1-08:25:50,12872) [kworker/2:2]
(root,0,0,00:00:00/01:07:02,14082) [kworker/u8:3-flush-8:0]
(root,13320,6400,00:00:00/01:33,14412) sshd: [accepted]
(root,13320,6380,00:00:00/01:18,14437) sshd: [accepted]
(root,13320,6312,00:00:00/01:07,14460) sshd: [accepted]
(sshd,13320,4384,00:00:00/01:06,14461) sshd: [net]
(root,13320,6328,00:00:00/00:28,14905) sshd: [accepted]
(root,13320,6368,00:00:00/00:23,14911) sshd: [accepted]
(root,13320,6452,00:00:00/00:21,14914) sshd: [accepted]
(root,13320,6312,00:00:00/00:08,14933) sshd: [accepted]
(sshd,13320,4296,00:00:00/00:07,14936) sshd: [net]
(root,14464,7580,00:00:00/00:02,14943) sshd: unknown [priv]
(sshd,13320,4264,00:00:00/00:02,14944) sshd: unknown [net]
(root,13320,6412,00:00:00/00:01,14945) sshd: [accepted]
(sshd,13320,4276,00:00:00/00:01,14946) sshd: [net]
(root,13320,6364,00:00:00/00:00,14974) sshd: [accepted]
(sshd,13320,4320,00:00:00/00:00,14975) sshd: [net]
(root,8692,3468,00:00:00/00:00,15016) /bin/bash /usr/bin/check_mk_agent
(root,6608,2844,00:00:00/00:00,15035) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1460,00:00:00/00:00,15036) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,5000,1376,00:00:00/435-16:03:40,21580) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,0,0,00:00:00/08:25:50,22200) [kworker/3:0]
(root,0,0,00:00:00/08:25:50,22215) [kworker/1:2]
(www-data,7028,3732,00:00:00/08:25:00,22624) /usr/sbin/apache2 -k start
(www-data,236820,14512,00:00:00/08:25:00,22625) /usr/sbin/apache2 -k start
(www-data,236788,10796,00:00:01/08:25:00,22626) /usr/sbin/apache2 -k start
(root,5000,1512,00:00:00/406-12:22:05,23038) /sbin/agetty -o -p -- \u --noclear tty4 linux
(zabbix,20484,1544,00:00:00/295-22:59:43,25764) /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
(zabbix,20484,1884,00:37:26/295-22:59:43,25765) /usr/sbin/zabbix_agentd: collector [idle 1 sec]
(zabbix,20624,4908,06:29:01/295-22:59:43,25766) /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
(zabbix,20624,4892,06:28:36/295-22:59:43,25767) /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
(zabbix,20624,4880,06:29:36/295-22:59:43,25768) /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
(zabbix,20616,3416,00:16:28/295-22:59:43,25769) /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.250@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
39: eth1.71@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-11 06:25

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b5569530b0545

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34736,9268,00:11:05/23-04:31:28,1) /sbin/init
(root,0,0,00:00:00/23-04:31:28,2) [kthreadd]
(root,0,0,00:00:00/23-04:31:28,3) [rcu_gp]
(root,0,0,00:00:00/23-04:31:28,4) [rcu_par_gp]
(root,0,0,00:00:00/23-04:31:28,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/23-04:31:28,8) [mm_percpu_wq]
(root,0,0,00:00:00/23-04:31:28,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/23-04:31:28,10) [rcu_tasks_trace]
(root,0,0,00:02:06/23-04:31:28,11) [ksoftirqd/0]
(root,0,0,00:07:39/23-04:31:28,12) [rcu_sched]
(root,0,0,00:00:01/23-04:31:28,13) [migration/0]
(root,0,0,00:00:00/23-04:31:28,15) [cpuhp/0]
(root,0,0,00:00:00/23-04:31:28,16) [cpuhp/1]
(root,0,0,00:00:02/23-04:31:28,17) [migration/1]
(root,0,0,00:01:31/23-04:31:28,18) [ksoftirqd/1]
(root,0,0,00:00:00/23-04:31:28,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/23-04:31:28,21) [cpuhp/2]
(root,0,0,00:00:01/23-04:31:28,22) [migration/2]
(root,0,0,00:00:55/23-04:31:28,23) [ksoftirqd/2]
(root,0,0,00:00:00/23-04:31:28,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/23-04:31:28,26) [cpuhp/3]
(root,0,0,00:00:02/23-04:31:28,27) [migration/3]
(root,0,0,00:00:30/23-04:31:28,28) [ksoftirqd/3]
(root,0,0,00:00:00/23-04:31:28,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/23-04:31:28,31) [kdevtmpfs]
(root,0,0,00:00:00/23-04:31:28,32) [netns]
(root,0,0,00:00:00/23-04:31:28,33) [kauditd]
(root,0,0,00:00:00/23-04:31:28,34) [khungtaskd]
(root,0,0,00:00:00/23-04:31:28,35) [oom_reaper]
(root,0,0,00:00:00/23-04:31:28,36) [writeback]
(root,0,0,00:00:21/23-04:31:28,37) [kcompactd0]
(root,0,0,00:00:00/23-04:31:28,38) [ksmd]
(root,0,0,00:00:44/23-04:31:28,39) [khugepaged]
(root,0,0,00:00:00/23-04:31:28,58) [kintegrityd]
(root,0,0,00:00:00/23-04:31:28,59) [kblockd]
(root,0,0,00:00:00/23-04:31:28,60) [blkcg_punt_bio]
(root,0,0,00:00:00/23-04:31:28,61) [edac-poller]
(root,0,0,00:00:00/23-04:31:28,62) [devfreq_wq]
(root,0,0,00:00:08/23-04:31:28,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:01/23-04:31:27,66) [kswapd0]
(root,0,0,00:00:00/23-04:31:27,67) [kthrotld]
(root,0,0,00:00:00/23-04:31:27,68) [acpi_thermal_pm]
(root,0,0,00:00:08/23-04:31:27,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/23-04:31:27,70) [ipv6_addrconf]
(root,0,0,00:00:00/23-04:31:27,81) [kstrp]
(root,0,0,00:00:00/23-04:31:27,84) [zswap-shrink]
(root,0,0,00:00:00/23-04:31:27,85) [kworker/u9:0]
(root,0,0,00:00:00/23-04:31:27,135) [ata_sff]
(root,0,0,00:00:00/23-04:31:27,137) [scsi_eh_0]
(root,0,0,00:00:00/23-04:31:27,138) [scsi_tmf_0]
(root,0,0,00:00:00/23-04:31:27,139) [scsi_eh_1]
(root,0,0,00:00:00/23-04:31:27,140) [scsi_tmf_1]
(root,0,0,00:00:00/23-04:31:27,141) [scsi_eh_2]
(root,0,0,00:00:00/23-04:31:27,142) [scsi_tmf_2]
(root,0,0,00:00:00/23-04:31:27,143) [scsi_eh_3]
(root,0,0,00:00:00/23-04:31:27,144) [scsi_tmf_3]
(root,0,0,00:00:12/23-04:31:27,148) [kworker/3:1H-kblockd]
(root,0,0,00:00:07/23-04:31:26,153) [kworker/2:1H-kblockd]
(root,0,0,00:00:31/23-04:31:26,182) [jbd2/sda1-8]
(root,0,0,00:00:00/23-04:31:26,183) [ext4-rsv-conver]
(root,91900,48356,01:11:11/23-04:31:26,217) /lib/systemd/systemd-journald
(root,21996,4420,00:00:01/23-04:31:25,247) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/23-04:31:25,290) [irq/126-mei_me]
(root,0,0,00:00:00/23-04:31:25,308) [watchdogd]
(systemd-timesync,23796,8152,00:00:02/23-04:31:25,313) /lib/systemd/systemd-timesyncd
(root,8472,2756,00:00:06/23-04:31:25,341) /usr/sbin/cron -f
(messagebus,8240,3712,00:00:00/23-04:31:25,343) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7628,00:15:59/23-04:31:25,348) /usr/sbin/rsyslogd -n -iNONE
(root,49816,6512,00:00:02/23-04:31:25,350) /lib/systemd/systemd-logind
(root,10648,2076,00:03:46/23-04:31:25,364) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69256,7428,00:23:21/23-04:31:25,422) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(root,0,0,00:00:00/23-04:31:25,431) [card0-crtc0]
(root,0,0,00:00:00/23-04:31:25,432) [card0-crtc1]
(root,0,0,00:00:00/23-04:31:25,434) [card0-crtc2]
(root,0,0,00:00:00/23-04:31:25,439) [cryptd]
(frr,43176,9064,00:00:49/23-04:31:25,455) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11604,3328,00:00:28/23-04:31:24,464) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/01:42:27,600) [kworker/u8:0-flush-8:0]
(root,7252,3884,00:00:00/23-04:31:22,1747) /bin/login -p --
(root,13320,6176,00:20:39/23-04:31:22,1752) sshd: /usr/sbin/sshd -D [listener] 65 of 10-100 startups
(root,6664,4632,00:00:36/23-04:31:22,1760) /usr/sbin/apache2 -k start
(root,9832,2228,00:00:07/23-04:31:22,1819) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,15256,7656,00:00:00/23-04:31:12,2009) /lib/systemd/systemd --user
(root,36404,1776,00:00:00/23-04:31:12,2010) (sd-pam)
(root,9320,3976,00:00:00/23-04:31:12,2015) -bash
(root,8688,3668,00:58:11/23-04:31:09,2018) watch -n1 ifconfig eth2
(root,0,0,00:00:00/04:15:48,3250) [kworker/1:0]
(root,0,0,00:00:10/19:48:35,3428) [kworker/2:0-mm_percpu_wq]
(root,0,0,00:00:07/2-09:59:18,7057) [kworker/1:1-mm_percpu_wq]
(root,0,0,00:00:13/6-07:14:11,7638) [kworker/0:0-events]
(root,0,0,00:00:00/26:01,16093) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:00/13:33:19,19575) [kworker/2:1]
(www-data,6900,3624,00:00:00/13:33:18,19580) /usr/sbin/apache2 -k start
(www-data,236436,12116,00:00:01/13:33:18,19581) /usr/sbin/apache2 -k start
(www-data,236692,10140,00:00:01/13:33:18,19582) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/13:33:18,19637) [kworker/0:1-events]
(root,0,0,00:00:06/3-11:55:04,26771) [kworker/3:3-cgwb_release]
(root,0,0,00:00:00/08:29,27024) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/03:33,30177) [kworker/u8:2-flush-8:0]
(root,13320,6392,00:00:00/02:00,31187) sshd: [accepted]
(root,13320,6420,00:00:00/02:00,31189) sshd: [accepted]
(root,13320,6476,00:00:00/02:00,31190) sshd: [accepted]
(root,13320,6448,00:00:00/02:00,31192) sshd: [accepted]
(root,13320,6300,00:00:00/02:00,31193) sshd: [accepted]
(root,13320,6364,00:00:00/02:00,31195) sshd: [accepted]
(root,13320,6444,00:00:00/02:00,31198) sshd: [accepted]
(root,13320,6288,00:00:00/02:00,31199) sshd: [accepted]
(root,13320,6464,00:00:00/02:00,31200) sshd: [accepted]
(root,13320,6384,00:00:00/02:00,31202) sshd: [accepted]
(root,13320,6424,00:00:00/02:00,31205) sshd: [accepted]
(root,13320,6436,00:00:00/02:00,31206) sshd: [accepted]
(root,13320,6488,00:00:00/02:00,31207) sshd: [accepted]
(root,13320,6364,00:00:00/02:00,31208) sshd: [accepted]
(root,13320,6432,00:00:00/01:43,31439) sshd: [accepted]
(root,13320,6480,00:00:00/01:30,31483) sshd: [accepted]
(root,13320,6248,00:00:00/01:30,31485) sshd: [accepted]
(root,13320,6384,00:00:00/01:30,31492) sshd: [accepted]
(root,13320,6244,00:00:00/01:30,31493) sshd: [accepted]
(root,13320,6336,00:00:00/01:17,31739) sshd: [accepted]
(root,0,0,00:00:00/06:46:48,31783) [kworker/3:0-mm_percpu_wq]
(root,13320,6484,00:00:00/00:59,31806) sshd: [accepted]
(root,13320,6232,00:00:00/00:59,31807) sshd: [accepted]
(root,13320,6512,00:00:00/00:59,31809) sshd: [accepted]
(root,13320,6400,00:00:00/00:59,31815) sshd: [accepted]
(root,13320,6264,00:00:00/00:59,31818) sshd: [accepted]
(root,13320,6452,00:00:00/00:59,31819) sshd: [accepted]
(root,13320,6452,00:00:00/00:59,31820) sshd: [accepted]
(root,13320,6348,00:00:00/00:59,31821) sshd: [accepted]
(root,13320,6524,00:00:00/00:59,31823) sshd: [accepted]
(root,13320,6464,00:00:00/00:59,31825) sshd: [accepted]
(root,13320,6224,00:00:00/00:59,31826) sshd: [accepted]
(root,13320,6468,00:00:00/00:59,31827) sshd: [accepted]
(root,13320,6436,00:00:00/00:59,31828) sshd: [accepted]
(root,13320,6440,00:00:00/00:55,32018) sshd: [accepted]
(root,13320,6496,00:00:00/00:30,32096) sshd: [accepted]
(root,13320,6488,00:00:00/00:30,32097) sshd: [accepted]
(root,13320,6284,00:00:00/00:30,32100) sshd: [accepted]
(root,13320,6160,00:00:00/00:30,32101) sshd: [accepted]
(root,13320,6448,00:00:00/00:30,32102) sshd: [accepted]
(root,13320,6292,00:00:00/00:30,32103) sshd: [accepted]
(root,13320,6472,00:00:00/00:30,32104) sshd: [accepted]
(root,13320,6360,00:00:00/00:30,32105) sshd: [accepted]
(root,13320,6424,00:00:00/00:30,32107) sshd: [accepted]
(root,13320,6300,00:00:00/00:30,32108) sshd: [accepted]
(root,13320,6404,00:00:00/00:16,32340) sshd: [accepted]
(root,13320,6448,00:00:00/00:16,32341) sshd: [accepted]
(root,13320,6372,00:00:00/00:16,32342) sshd: [accepted]
(root,13320,6496,00:00:00/00:16,32343) sshd: [accepted]
(root,13320,6332,00:00:00/00:16,32344) sshd: [accepted]
(root,13320,6356,00:00:00/00:13,32356) sshd: [accepted]
(root,13320,6268,00:00:00/00:09,32369) sshd: [accepted]
(root,13320,6484,00:00:00/00:08,32373) sshd: [accepted]
(root,13320,6360,00:00:00/00:01,32395) sshd: [accepted]
(root,13320,6332,00:00:00/00:01,32396) sshd: [accepted]
(root,13320,6352,00:00:00/00:01,32397) sshd: [accepted]
(root,13320,6484,00:00:00/00:01,32398) sshd: [accepted]
(root,13320,6348,00:00:00/00:01,32558) sshd: [accepted]
(root,13320,6564,00:00:00/00:01,32607) sshd: [accepted]
(root,13320,6452,00:00:00/00:00,32674) sshd: [accepted]
(root,13320,6428,00:00:00/00:00,32675) sshd: [accepted]
(root,13320,6488,00:00:00/00:00,32691) sshd: [accepted]
(root,13320,6300,00:00:00/00:00,32707) sshd: [accepted]
(root,13320,6360,00:00:00/00:00,32708) sshd: [accepted]
(root,13320,6252,00:00:00/00:00,32709) sshd: [accepted]
(root,13320,6416,00:00:00/00:00,32710) sshd: [accepted]
(root,8692,3312,00:00:00/00:00,32711) /bin/bash /usr/bin/check_mk_agent
(root,6608,2836,00:00:00/00:00,32730) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1464,00:00:00/00:00,32731) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-04-13 11:33

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b5569e19d5e9c

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34596,9312,00:18:46/42-16:34:34,1) /sbin/init
(root,0,0,00:00:00/42-16:34:34,2) [kthreadd]
(root,0,0,00:00:00/42-16:34:34,3) [rcu_gp]
(root,0,0,00:00:00/42-16:34:34,4) [rcu_par_gp]
(root,0,0,00:00:00/42-16:34:34,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/42-16:34:34,8) [mm_percpu_wq]
(root,0,0,00:00:00/42-16:34:34,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/42-16:34:34,10) [rcu_tasks_trace]
(root,0,0,00:04:04/42-16:34:34,11) [ksoftirqd/0]
(root,0,0,00:12:14/42-16:34:34,12) [rcu_sched]
(root,0,0,00:00:03/42-16:34:34,13) [migration/0]
(root,0,0,00:00:00/42-16:34:34,15) [cpuhp/0]
(root,0,0,00:00:00/42-16:34:34,16) [cpuhp/1]
(root,0,0,00:00:03/42-16:34:34,17) [migration/1]
(root,0,0,00:02:26/42-16:34:34,18) [ksoftirqd/1]
(root,0,0,00:00:00/42-16:34:34,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/42-16:34:34,21) [cpuhp/2]
(root,0,0,00:00:03/42-16:34:34,22) [migration/2]
(root,0,0,00:01:20/42-16:34:34,23) [ksoftirqd/2]
(root,0,0,00:00:00/42-16:34:34,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/42-16:34:34,26) [cpuhp/3]
(root,0,0,00:00:04/42-16:34:34,27) [migration/3]
(root,0,0,00:00:57/42-16:34:34,28) [ksoftirqd/3]
(root,0,0,00:00:00/42-16:34:34,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/42-16:34:34,31) [kdevtmpfs]
(root,0,0,00:00:00/42-16:34:34,32) [netns]
(root,0,0,00:00:00/42-16:34:34,33) [kauditd]
(root,0,0,00:00:00/42-16:34:34,34) [khungtaskd]
(root,0,0,00:00:00/42-16:34:34,35) [oom_reaper]
(root,0,0,00:00:00/42-16:34:34,36) [writeback]
(root,0,0,00:00:39/42-16:34:34,37) [kcompactd0]
(root,0,0,00:00:00/42-16:34:34,38) [ksmd]
(root,0,0,00:01:21/42-16:34:34,39) [khugepaged]
(root,0,0,00:00:00/42-16:34:34,58) [kintegrityd]
(root,0,0,00:00:00/42-16:34:34,59) [kblockd]
(root,0,0,00:00:00/42-16:34:34,60) [blkcg_punt_bio]
(root,0,0,00:00:00/42-16:34:34,61) [edac-poller]
(root,0,0,00:00:00/42-16:34:34,62) [devfreq_wq]
(root,0,0,00:00:12/42-16:34:34,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:03/42-16:34:33,66) [kswapd0]
(root,0,0,00:00:00/42-16:34:33,67) [kthrotld]
(root,0,0,00:00:00/42-16:34:33,68) [acpi_thermal_pm]
(root,0,0,00:00:00/42-16:34:33,69) [ipv6_addrconf]
(root,0,0,00:00:00/42-16:34:33,80) [kstrp]
(root,0,0,00:00:00/42-16:34:33,83) [zswap-shrink]
(root,0,0,00:00:00/42-16:34:33,84) [kworker/u9:0]
(root,0,0,00:00:16/42-16:34:33,106) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/42-16:34:33,136) [ata_sff]
(root,0,0,00:00:00/42-16:34:33,137) [scsi_eh_0]
(root,0,0,00:00:00/42-16:34:33,138) [scsi_tmf_0]
(root,0,0,00:00:00/42-16:34:33,139) [scsi_eh_1]
(root,0,0,00:00:00/42-16:34:33,140) [scsi_tmf_1]
(root,0,0,00:00:00/42-16:34:33,141) [scsi_eh_2]
(root,0,0,00:00:00/42-16:34:33,142) [scsi_tmf_2]
(root,0,0,00:00:00/42-16:34:33,143) [scsi_eh_3]
(root,0,0,00:00:00/42-16:34:33,144) [scsi_tmf_3]
(root,0,0,00:00:14/42-16:34:33,148) [kworker/2:1H-kblockd]
(root,0,0,00:00:58/42-16:34:32,182) [jbd2/sda1-8]
(root,0,0,00:00:00/42-16:34:32,183) [ext4-rsv-conver]
(root,0,0,00:00:22/42-16:34:32,194) [kworker/3:1H-kblockd]
(root,329328,259684,02:02:58/42-16:34:32,218) /lib/systemd/systemd-journald
(root,21476,3736,00:00:02/42-16:34:32,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/42-16:34:31,307) [watchdogd]
(root,0,0,00:00:00/42-16:34:31,309) [irq/126-mei_me]
(systemd-timesync,23796,6288,00:00:04/42-16:34:31,343) /lib/systemd/systemd-timesyncd
(root,8472,2612,00:00:12/42-16:34:31,358) /usr/sbin/cron -f
(messagebus,8240,3708,00:00:00/42-16:34:31,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,0,0,00:00:00/42-16:34:31,360) [cryptd]
(root,0,0,00:00:00/42-16:34:31,367) [card0-crtc0]
(root,0,0,00:00:00/42-16:34:31,368) [card0-crtc1]
(root,0,0,00:00:00/42-16:34:31,369) [card0-crtc2]
(root,26740,5620,00:26:48/42-16:34:31,372) /usr/sbin/rsyslogd -n -iNONE
(root,49856,6512,00:00:03/42-16:34:31,373) /lib/systemd/systemd-logind
(root,10644,2252,00:06:56/42-16:34:31,402) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69064,13660,00:44:55/42-16:34:31,419) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43136,9144,00:01:29/42-16:34:31,428) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11600,3404,00:00:52/42-16:34:31,441) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/1-01:02:33,619) [kworker/0:2]
(root,0,0,00:00:00/25:35,674) [kworker/u8:2-ext4-rsv-conversion]
(root,0,0,00:00:00/07:19:48,909) [kworker/1:2-events]
(root,5000,1532,00:00:00/42-16:34:30,1239) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13324,6172,00:34:05/42-16:34:30,1246) sshd: /usr/sbin/sshd -D [listener] 15 of 10-100 startups
(root,6668,4568,00:01:06/42-16:34:29,1254) /usr/sbin/apache2 -k start
(root,9832,2392,00:00:14/42-16:34:29,1313) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:14/1-11:35:04,2337) [kworker/2:2-mm_percpu_wq]
(root,0,0,00:00:00/02:41:40,2525) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:08/1-16:18:57,3156) [kworker/0:0-events]
(root,0,0,00:00:00/10:31,7784) [kworker/u8:0]
(root,0,0,00:00:03/2-02:31:17,7805) [kworker/3:0-events]
(root,0,0,00:00:00/20:14:46,10819) [kworker/3:2]
(root,13320,6352,00:00:00/01:29,11936) sshd: [accepted]
(root,13320,6328,00:00:00/01:28,11937) sshd: [accepted]
(root,13320,6416,00:00:00/01:27,11940) sshd: [accepted]
(root,13320,6440,00:00:00/01:27,11944) sshd: [accepted]
(root,13320,6488,00:00:00/01:27,11945) sshd: [accepted]
(root,13320,6464,00:00:00/01:23,11954) sshd: [accepted]
(root,13320,6320,00:00:00/00:42,12209) sshd: [accepted]
(root,14144,7476,00:00:00/00:06,12417) sshd: root [priv]
(root,14464,7600,00:00:00/00:05,12418) sshd: unknown [priv]
(sshd,13320,4324,00:00:00/00:05,12419) sshd: unknown [net]
(sshd,13320,4396,00:00:00/00:04,12422) sshd: root [net]
(root,14464,7612,00:00:00/00:04,12450) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:04,12457) sshd: unknown [net]
(root,14464,7576,00:00:00/00:02,12611) sshd: unknown [priv]
(sshd,13320,4304,00:00:00/00:02,12612) sshd: unknown [net]
(root,14464,7580,00:00:00/00:02,12613) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:02,12614) sshd: unknown [net]
(root,14464,7568,00:00:00/00:01,12615) sshd: unknown [priv]
(sshd,13320,4264,00:00:00/00:01,12616) sshd: unknown [net]
(root,14464,7436,00:00:00/00:01,12617) sshd: unknown [priv]
(sshd,13320,4244,00:00:00/00:01,12618) sshd: unknown [net]
(root,14464,7668,00:00:00/00:01,12619) sshd: unknown [priv]
(sshd,13320,4320,00:00:00/00:01,12620) sshd: unknown [net]
(root,8692,3540,00:00:00/00:00,12813) /bin/bash /usr/bin/check_mk_agent
(root,6608,2804,00:00:00/00:00,12832) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1536,00:00:00/00:00,12833) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/03:02:05,25483) [kworker/2:1-rcu_gp]
(root,0,0,00:00:00/03:02:05,25496) [kworker/1:1-events]
(www-data,6904,3644,00:00:00/03:02:05,25497) /usr/sbin/apache2 -k start
(www-data,236312,16140,00:00:00/03:02:05,25498) /usr/sbin/apache2 -k start
(www-data,236088,5924,00:00:00/03:02:05,25499) /usr/sbin/apache2 -k start

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-03-03 02:02

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b55695bef1af0

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34596,9308,00:13:47/32-15:21:02,1) /sbin/init
(root,0,0,00:00:00/32-15:21:02,2) [kthreadd]
(root,0,0,00:00:00/32-15:21:02,3) [rcu_gp]
(root,0,0,00:00:00/32-15:21:02,4) [rcu_par_gp]
(root,0,0,00:00:00/32-15:21:02,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/32-15:21:02,8) [mm_percpu_wq]
(root,0,0,00:00:00/32-15:21:02,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/32-15:21:02,10) [rcu_tasks_trace]
(root,0,0,00:03:13/32-15:21:02,11) [ksoftirqd/0]
(root,0,0,00:09:44/32-15:21:02,12) [rcu_sched]
(root,0,0,00:00:02/32-15:21:02,13) [migration/0]
(root,0,0,00:00:00/32-15:21:02,15) [cpuhp/0]
(root,0,0,00:00:00/32-15:21:02,16) [cpuhp/1]
(root,0,0,00:00:02/32-15:21:02,17) [migration/1]
(root,0,0,00:01:52/32-15:21:02,18) [ksoftirqd/1]
(root,0,0,00:00:00/32-15:21:02,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/32-15:21:02,21) [cpuhp/2]
(root,0,0,00:00:02/32-15:21:02,22) [migration/2]
(root,0,0,00:01:01/32-15:21:02,23) [ksoftirqd/2]
(root,0,0,00:00:00/32-15:21:02,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/32-15:21:02,26) [cpuhp/3]
(root,0,0,00:00:03/32-15:21:02,27) [migration/3]
(root,0,0,00:00:46/32-15:21:02,28) [ksoftirqd/3]
(root,0,0,00:00:00/32-15:21:02,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/32-15:21:02,31) [kdevtmpfs]
(root,0,0,00:00:00/32-15:21:02,32) [netns]
(root,0,0,00:00:00/32-15:21:02,33) [kauditd]
(root,0,0,00:00:00/32-15:21:02,34) [khungtaskd]
(root,0,0,00:00:00/32-15:21:02,35) [oom_reaper]
(root,0,0,00:00:00/32-15:21:02,36) [writeback]
(root,0,0,00:00:30/32-15:21:02,37) [kcompactd0]
(root,0,0,00:00:00/32-15:21:02,38) [ksmd]
(root,0,0,00:01:02/32-15:21:02,39) [khugepaged]
(root,0,0,00:00:00/32-15:21:02,58) [kintegrityd]
(root,0,0,00:00:00/32-15:21:02,59) [kblockd]
(root,0,0,00:00:00/32-15:21:02,60) [blkcg_punt_bio]
(root,0,0,00:00:00/32-15:21:02,61) [edac-poller]
(root,0,0,00:00:00/32-15:21:02,62) [devfreq_wq]
(root,0,0,00:00:09/32-15:21:02,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:02/32-15:21:01,66) [kswapd0]
(root,0,0,00:00:00/32-15:21:01,67) [kthrotld]
(root,0,0,00:00:00/32-15:21:01,68) [acpi_thermal_pm]
(root,0,0,00:00:00/32-15:21:01,69) [ipv6_addrconf]
(root,0,0,00:00:00/32-15:21:01,80) [kstrp]
(root,0,0,00:00:00/32-15:21:01,83) [zswap-shrink]
(root,0,0,00:00:00/32-15:21:01,84) [kworker/u9:0]
(root,0,0,00:00:12/32-15:21:01,106) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/32-15:21:01,136) [ata_sff]
(root,0,0,00:00:00/32-15:21:01,137) [scsi_eh_0]
(root,0,0,00:00:00/32-15:21:01,138) [scsi_tmf_0]
(root,0,0,00:00:00/32-15:21:01,139) [scsi_eh_1]
(root,0,0,00:00:00/32-15:21:01,140) [scsi_tmf_1]
(root,0,0,00:00:00/32-15:21:01,141) [scsi_eh_2]
(root,0,0,00:00:00/32-15:21:01,142) [scsi_tmf_2]
(root,0,0,00:00:00/32-15:21:01,143) [scsi_eh_3]
(root,0,0,00:00:00/32-15:21:01,144) [scsi_tmf_3]
(root,0,0,00:00:11/32-15:21:01,148) [kworker/2:1H-kblockd]
(root,0,0,00:00:45/32-15:21:00,182) [jbd2/sda1-8]
(root,0,0,00:00:00/32-15:21:00,183) [ext4-rsv-conver]
(root,0,0,00:00:17/32-15:21:00,194) [kworker/3:1H-kblockd]
(root,161980,101444,01:36:39/32-15:21:00,218) /lib/systemd/systemd-journald
(root,21476,3736,00:00:01/32-15:21:00,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/32-15:20:59,307) [watchdogd]
(root,0,0,00:00:00/32-15:20:59,309) [irq/126-mei_me]
(systemd-timesync,23796,3640,00:00:03/32-15:20:59,343) /lib/systemd/systemd-timesyncd
(root,8472,2612,00:00:09/32-15:20:59,358) /usr/sbin/cron -f
(messagebus,8240,3708,00:00:00/32-15:20:59,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,0,0,00:00:00/32-15:20:59,360) [cryptd]
(root,0,0,00:00:00/32-15:20:59,367) [card0-crtc0]
(root,0,0,00:00:00/32-15:20:59,368) [card0-crtc1]
(root,0,0,00:00:00/32-15:20:59,369) [card0-crtc2]
(root,26740,5824,00:20:58/32-15:20:59,372) /usr/sbin/rsyslogd -n -iNONE
(root,49856,6512,00:00:02/32-15:20:59,373) /lib/systemd/systemd-logind
(root,10644,2256,00:05:20/32-15:20:59,402) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69064,13676,00:33:12/32-15:20:59,419) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43136,9304,00:01:08/32-15:20:59,428) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11600,3404,00:00:40/32-15:20:59,441) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,5000,1532,00:00:00/32-15:20:58,1239) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13324,6172,00:26:20/32-15:20:58,1246) sshd: /usr/sbin/sshd -D [listener] 26 of 10-100 startups
(root,6668,4560,00:00:51/32-15:20:57,1254) /usr/sbin/apache2 -k start
(root,9832,2392,00:00:11/32-15:20:57,1313) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:16/3-19:04:41,5598) [kworker/2:0-events]
(root,0,0,00:00:10/1-01:53:01,8277) [kworker/2:2-events]
(root,0,0,00:00:00/44:43,11432) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:00/01:48:33,13123) [kworker/1:2-events]
(www-data,6904,3632,00:00:00/01:48:33,13128) /usr/sbin/apache2 -k start
(www-data,235936,14100,00:00:00/01:48:33,13129) /usr/sbin/apache2 -k start
(www-data,235920,12056,00:00:00/01:48:33,13130) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/01:48:33,13185) [kworker/3:1]
(root,0,0,00:00:00/01:48:33,13186) [kworker/0:0]
(root,0,0,00:00:03/1-17:02:38,15364) [kworker/3:3-events]
(root,0,0,00:00:01/12:23:58,16406) [kworker/1:0-events]
(root,0,0,00:00:00/23:46,20960) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/08:55,27725) [kworker/u8:1]
(root,0,0,00:00:05/1-19:53:27,30621) [kworker/0:1-events]
(root,13320,6448,00:00:00/01:40,30868) sshd: [accepted]
(root,13320,6208,00:00:00/01:09,31243) sshd: [accepted]
(root,13320,6488,00:00:00/01:08,31244) sshd: [accepted]
(root,13320,6456,00:00:00/01:08,31245) sshd: [accepted]
(root,13320,6356,00:00:00/01:07,31248) sshd: [accepted]
(root,13320,6508,00:00:00/01:07,31249) sshd: [accepted]
(root,13320,6328,00:00:00/01:07,31252) sshd: [accepted]
(root,13320,6304,00:00:00/01:07,31255) sshd: [accepted]
(root,13320,6340,00:00:00/01:06,31263) sshd: [accepted]
(root,13320,6516,00:00:00/01:06,31265) sshd: [accepted]
(root,13320,6464,00:00:00/01:05,31266) sshd: [accepted]
(root,13320,6224,00:00:00/01:02,31288) sshd: [accepted]
(root,14144,7476,00:00:00/01:01,31295) sshd: root [priv]
(sshd,13320,4212,00:00:00/01:01,31296) sshd: root [net]
(root,13320,6412,00:00:00/00:59,31306) sshd: [accepted]
(root,13320,6460,00:00:00/00:57,31311) sshd: [accepted]
(root,13320,6484,00:00:00/00:54,31486) sshd: [accepted]
(root,13320,6412,00:00:00/00:54,31487) sshd: [accepted]
(root,13320,6372,00:00:00/00:54,31488) sshd: [accepted]
(root,13320,6488,00:00:00/00:37,31517) sshd: [accepted]
(root,13320,6456,00:00:00/00:30,31710) sshd: [accepted]
(root,13320,6540,00:00:00/00:29,31712) sshd: [accepted]
(root,13320,6428,00:00:00/00:26,31718) sshd: [accepted]
(root,13320,6484,00:00:00/00:16,31737) sshd: [accepted]
(root,13320,6372,00:00:00/00:09,31742) sshd: [accepted]
(sshd,13320,4336,00:00:00/00:07,31743) sshd: [net]
(root,14144,7532,00:00:00/00:01,31748) sshd: root [priv]
(sshd,13320,4384,00:00:00/00:01,31749) sshd: root [net]
(root,13320,6276,00:00:00/00:00,31972) sshd: [accepted]
(sshd,13320,4240,00:00:00/00:00,31991) sshd: [net]
(root,8692,3380,00:00:00/00:00,32010) /bin/bash /usr/bin/check_mk_agent
(root,6608,2756,00:00:00/00:00,32029) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1480,00:00:00/00:00,32030) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-21 00:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b556929166658

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34596,9304,00:08:49/21-08:12:13,1) /sbin/init
(root,0,0,00:00:00/21-08:12:13,2) [kthreadd]
(root,0,0,00:00:00/21-08:12:13,3) [rcu_gp]
(root,0,0,00:00:00/21-08:12:13,4) [rcu_par_gp]
(root,0,0,00:00:00/21-08:12:13,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/21-08:12:13,8) [mm_percpu_wq]
(root,0,0,00:00:00/21-08:12:13,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/21-08:12:13,10) [rcu_tasks_trace]
(root,0,0,00:02:12/21-08:12:13,11) [ksoftirqd/0]
(root,0,0,00:06:20/21-08:12:13,12) [rcu_sched]
(root,0,0,00:00:01/21-08:12:13,13) [migration/0]
(root,0,0,00:00:00/21-08:12:13,15) [cpuhp/0]
(root,0,0,00:00:00/21-08:12:13,16) [cpuhp/1]
(root,0,0,00:00:02/21-08:12:13,17) [migration/1]
(root,0,0,00:01:10/21-08:12:13,18) [ksoftirqd/1]
(root,0,0,00:00:00/21-08:12:13,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/21-08:12:13,21) [cpuhp/2]
(root,0,0,00:00:01/21-08:12:13,22) [migration/2]
(root,0,0,00:00:38/21-08:12:13,23) [ksoftirqd/2]
(root,0,0,00:00:00/21-08:12:13,25) [kworker/2:0H-events_highpri]
(root,0,0,00:00:00/21-08:12:13,26) [cpuhp/3]
(root,0,0,00:00:02/21-08:12:13,27) [migration/3]
(root,0,0,00:00:33/21-08:12:13,28) [ksoftirqd/3]
(root,0,0,00:00:00/21-08:12:13,30) [kworker/3:0H-kblockd]
(root,0,0,00:00:00/21-08:12:13,31) [kdevtmpfs]
(root,0,0,00:00:00/21-08:12:13,32) [netns]
(root,0,0,00:00:00/21-08:12:13,33) [kauditd]
(root,0,0,00:00:00/21-08:12:13,34) [khungtaskd]
(root,0,0,00:00:00/21-08:12:13,35) [oom_reaper]
(root,0,0,00:00:00/21-08:12:13,36) [writeback]
(root,0,0,00:00:19/21-08:12:13,37) [kcompactd0]
(root,0,0,00:00:00/21-08:12:13,38) [ksmd]
(root,0,0,00:00:41/21-08:12:13,39) [khugepaged]
(root,0,0,00:00:00/21-08:12:13,58) [kintegrityd]
(root,0,0,00:00:00/21-08:12:13,59) [kblockd]
(root,0,0,00:00:00/21-08:12:13,60) [blkcg_punt_bio]
(root,0,0,00:00:00/21-08:12:13,61) [edac-poller]
(root,0,0,00:00:00/21-08:12:13,62) [devfreq_wq]
(root,0,0,00:00:05/21-08:12:13,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:01/21-08:12:12,66) [kswapd0]
(root,0,0,00:00:00/21-08:12:12,67) [kthrotld]
(root,0,0,00:00:00/21-08:12:12,68) [acpi_thermal_pm]
(root,0,0,00:00:00/21-08:12:12,69) [ipv6_addrconf]
(root,0,0,00:00:00/21-08:12:12,80) [kstrp]
(root,0,0,00:00:00/21-08:12:12,83) [zswap-shrink]
(root,0,0,00:00:00/21-08:12:12,84) [kworker/u9:0]
(root,0,0,00:00:08/21-08:12:12,106) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/21-08:12:12,136) [ata_sff]
(root,0,0,00:00:00/21-08:12:12,137) [scsi_eh_0]
(root,0,0,00:00:00/21-08:12:12,138) [scsi_tmf_0]
(root,0,0,00:00:00/21-08:12:12,139) [scsi_eh_1]
(root,0,0,00:00:00/21-08:12:12,140) [scsi_tmf_1]
(root,0,0,00:00:00/21-08:12:12,141) [scsi_eh_2]
(root,0,0,00:00:00/21-08:12:12,142) [scsi_tmf_2]
(root,0,0,00:00:00/21-08:12:12,143) [scsi_eh_3]
(root,0,0,00:00:00/21-08:12:12,144) [scsi_tmf_3]
(root,0,0,00:00:07/21-08:12:12,148) [kworker/2:1H-kblockd]
(root,0,0,00:00:29/21-08:12:11,182) [jbd2/sda1-8]
(root,0,0,00:00:00/21-08:12:11,183) [ext4-rsv-conver]
(root,0,0,00:00:11/21-08:12:11,194) [kworker/3:1H-kblockd]
(root,186284,125348,01:02:34/21-08:12:11,218) /lib/systemd/systemd-journald
(root,21476,3936,00:00:01/21-08:12:11,240) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/21-08:12:10,307) [watchdogd]
(root,0,0,00:00:00/21-08:12:10,309) [irq/126-mei_me]
(systemd-timesync,23796,3640,00:00:02/21-08:12:10,343) /lib/systemd/systemd-timesyncd
(root,8472,2612,00:00:06/21-08:12:10,358) /usr/sbin/cron -f
(messagebus,8240,3708,00:00:00/21-08:12:10,359) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,0,0,00:00:00/21-08:12:10,360) [cryptd]
(root,0,0,00:00:00/21-08:12:10,367) [card0-crtc0]
(root,0,0,00:00:00/21-08:12:10,368) [card0-crtc1]
(root,0,0,00:00:00/21-08:12:10,369) [card0-crtc2]
(root,26740,5936,00:13:28/21-08:12:10,372) /usr/sbin/rsyslogd -n -iNONE
(root,49856,6512,00:00:01/21-08:12:10,373) /lib/systemd/systemd-logind
(root,10644,2256,00:03:28/21-08:12:10,402) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69064,15332,00:21:07/21-08:12:10,419) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,43136,9304,00:00:45/21-08:12:10,428) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11600,3404,00:00:26/21-08:12:10,441) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,5000,1532,00:00:00/21-08:12:09,1239) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,13324,6172,00:17:04/21-08:12:09,1246) sshd: /usr/sbin/sshd -D [listener] 12 of 10-100 startups
(root,6668,4572,00:00:33/21-08:12:08,1254) /usr/sbin/apache2 -k start
(root,9832,2392,00:00:07/21-08:12:08,1313) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/02:26:02,6034) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/07:15,10042) [kworker/u8:2]
(root,0,0,00:00:07/3-18:39:44,10606) [kworker/3:1-mm_percpu_wq]
(root,13320,6516,00:00:00/00:53,13042) sshd: [accepted]
(root,13320,6536,00:00:00/00:52,13044) sshd: [accepted]
(root,13320,6400,00:00:00/00:46,13057) sshd: [accepted]
(root,13320,6436,00:00:00/00:14,13472) sshd: [accepted]
(sshd,13320,4356,00:00:00/00:14,13475) sshd: [net]
(root,14464,7512,00:00:00/00:04,13512) sshd: unknown [priv]
(sshd,13320,4220,00:00:00/00:04,13513) sshd: unknown [net]
(root,14144,7448,00:00:00/00:04,13514) sshd: root [priv]
(sshd,13320,4372,00:00:00/00:04,13515) sshd: root [net]
(root,14144,7532,00:00:00/00:03,13516) sshd: root [priv]
(sshd,13320,4508,00:00:00/00:03,13517) sshd: root [net]
(root,14144,7236,00:00:00/00:03,13518) sshd: root [priv]
(sshd,13320,4216,00:00:00/00:03,13519) sshd: root [net]
(root,14144,7456,00:00:00/00:02,13520) sshd: root [priv]
(sshd,13320,4396,00:00:00/00:02,13521) sshd: root [net]
(root,14144,7360,00:00:00/00:02,13522) sshd: root [priv]
(sshd,13320,4380,00:00:00/00:02,13523) sshd: root [net]
(root,14144,7288,00:00:00/00:02,13524) sshd: root [priv]
(sshd,13320,4216,00:00:00/00:02,13525) sshd: root [net]
(root,14464,7688,00:00:00/00:01,13526) sshd: unknown [priv]
(sshd,13320,4476,00:00:00/00:01,13527) sshd: unknown [net]
(root,0,0,00:00:00/07:03:44,13686) [kworker/1:1-events]
(root,8692,3440,00:00:00/00:00,13721) /bin/bash /usr/bin/check_mk_agent
(root,6608,2872,00:00:00/00:00,13740) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1536,00:00:00/00:00,13741) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/18:39:44,14270) [kworker/2:0-events]
(www-data,6904,3644,00:00:00/18:39:44,14289) /usr/sbin/apache2 -k start
(www-data,236792,10944,00:00:00/18:39:44,14290) /usr/sbin/apache2 -k start
(www-data,236784,12240,00:00:00/18:39:44,14291) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/18:39:44,14346) [kworker/0:1-events]
(root,0,0,00:00:00/01:00:56,16207) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:01:06/13-07:57:10,17963) [kworker/0:0-events]
(root,0,0,00:00:56/5-19:20:59,21165) [kworker/2:1-mm_percpu_wq]
(root,0,0,00:00:10/3-10:52:59,25941) [kworker/1:2-events_freezable]
(root,0,0,00:00:00/12:28:01,26678) [kworker/3:2]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f0
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
34: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
36: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-02-09 17:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b5569c0698484

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34564,9240,02:02:55/223-06:17:16,1) /sbin/init
(root,0,0,00:00:01/223-06:17:16,2) [kthreadd]
(root,0,0,00:00:00/223-06:17:16,3) [rcu_gp]
(root,0,0,00:00:00/223-06:17:16,4) [rcu_par_gp]
(root,0,0,00:00:00/223-06:17:16,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/223-06:17:16,8) [mm_percpu_wq]
(root,0,0,00:00:00/223-06:17:16,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/223-06:17:16,10) [rcu_tasks_trace]
(root,0,0,00:08:36/223-06:17:16,11) [ksoftirqd/0]
(root,0,0,01:21:07/223-06:17:16,12) [rcu_sched]
(root,0,0,00:00:20/223-06:17:16,13) [migration/0]
(root,0,0,00:00:00/223-06:17:16,15) [cpuhp/0]
(root,0,0,00:00:00/223-06:17:16,16) [cpuhp/1]
(root,0,0,00:00:22/223-06:17:16,17) [migration/1]
(root,0,0,00:02:26/223-06:17:16,18) [ksoftirqd/1]
(root,0,0,00:00:00/223-06:17:16,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/223-06:17:16,21) [cpuhp/2]
(root,0,0,00:00:22/223-06:17:16,22) [migration/2]
(root,0,0,00:02:00/223-06:17:16,23) [ksoftirqd/2]
(root,0,0,00:00:00/223-06:17:16,25) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/223-06:17:16,26) [cpuhp/3]
(root,0,0,00:00:17/223-06:17:16,27) [migration/3]
(root,0,0,00:19:21/223-06:17:16,28) [ksoftirqd/3]
(root,0,0,00:00:00/223-06:17:16,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/223-06:17:16,31) [kdevtmpfs]
(root,0,0,00:00:00/223-06:17:16,32) [netns]
(root,0,0,00:00:00/223-06:17:16,33) [kauditd]
(root,0,0,00:00:03/223-06:17:16,34) [khungtaskd]
(root,0,0,00:00:00/223-06:17:16,35) [oom_reaper]
(root,0,0,00:00:00/223-06:17:16,36) [writeback]
(root,0,0,00:03:49/223-06:17:16,37) [kcompactd0]
(root,0,0,00:00:00/223-06:17:16,38) [ksmd]
(root,0,0,00:07:24/223-06:17:16,39) [khugepaged]
(root,0,0,00:00:00/223-06:17:16,58) [kintegrityd]
(root,0,0,00:00:00/223-06:17:16,59) [kblockd]
(root,0,0,00:00:00/223-06:17:16,60) [blkcg_punt_bio]
(root,0,0,00:00:00/223-06:17:16,61) [edac-poller]
(root,0,0,00:00:00/223-06:17:16,62) [devfreq_wq]
(root,0,0,00:02:08/223-06:17:16,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:22/223-06:17:15,66) [kswapd0]
(root,0,0,00:00:00/223-06:17:15,67) [kthrotld]
(root,0,0,00:00:00/223-06:17:15,68) [acpi_thermal_pm]
(root,0,0,00:01:00/223-06:17:15,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/223-06:17:15,70) [ipv6_addrconf]
(root,0,0,00:00:00/223-06:17:15,81) [kstrp]
(root,0,0,00:00:00/223-06:17:15,84) [zswap-shrink]
(root,0,0,00:00:00/223-06:17:15,85) [kworker/u9:0]
(root,0,0,00:01:23/223-06:17:15,133) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/223-06:17:15,135) [ata_sff]
(root,0,0,00:00:00/223-06:17:15,138) [scsi_eh_0]
(root,0,0,00:00:00/223-06:17:15,139) [scsi_tmf_0]
(root,0,0,00:00:00/223-06:17:15,140) [scsi_eh_1]
(root,0,0,00:00:00/223-06:17:15,141) [scsi_tmf_1]
(root,0,0,00:00:00/223-06:17:15,142) [scsi_eh_2]
(root,0,0,00:00:00/223-06:17:15,143) [scsi_tmf_2]
(root,0,0,00:00:00/223-06:17:15,144) [scsi_eh_3]
(root,0,0,00:00:00/223-06:17:15,145) [scsi_tmf_3]
(root,0,0,00:01:35/223-06:17:14,151) [kworker/2:1H-kblockd]
(root,0,0,00:05:44/223-06:17:14,182) [jbd2/sda1-8]
(root,0,0,00:00:00/223-06:17:14,183) [ext4-rsv-conver]
(root,191112,131396,09:53:27/223-06:17:14,217) /lib/systemd/systemd-journald
(root,21604,4336,00:00:12/223-06:17:14,239) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/223-06:17:13,300) [watchdogd]
(root,0,0,00:00:00/223-06:17:13,309) [irq/126-mei_me]
(root,0,0,00:00:00/223-06:17:13,327) [card0-crtc0]
(root,0,0,00:00:00/223-06:17:13,328) [card0-crtc1]
(root,0,0,00:00:00/223-06:17:13,329) [card0-crtc2]
(root,0,0,00:00:00/223-06:17:13,341) [cryptd]
(systemd-timesync,23796,3632,00:00:21/223-06:17:13,342) /lib/systemd/systemd-timesyncd
(root,8472,2608,00:01:04/223-06:17:13,347) /usr/sbin/cron -f
(messagebus,8240,3624,00:00:02/223-06:17:13,348) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7284,02:28:36/223-06:17:13,355) /usr/sbin/rsyslogd -n -iNONE
(root,49852,6508,00:00:20/223-06:17:13,364) /lib/systemd/systemd-logind
(root,6668,4620,00:06:18/223-06:17:11,1131) /usr/sbin/apache2 -k start
(root,9832,2128,00:01:21/223-06:17:11,1190) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:02/14:53:35,6193) [kworker/1:0-events]
(root,0,0,00:00:00/13:12,8138) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:00/12:19,8350) [kworker/u8:2-flush-8:0]
(root,10772,2368,00:36:37/218-06:57:48,8788) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69340,3320,03:40:45/218-06:57:48,8805) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,460924,85764,00:17:01/218-06:57:48,8812) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11744,2064,00:04:48/218-06:57:48,8821) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13324,6248,01:53:51/149-01:28:47,10173) sshd: /usr/sbin/sshd -D [listener] 4 of 10-100 startups
(root,0,0,00:00:00/21:20:18,13524) [kworker/2:2]
(www-data,6904,3664,00:00:00/21:20:18,13534) /usr/sbin/apache2 -k start
(www-data,236768,13740,00:00:01/21:20:18,13535) /usr/sbin/apache2 -k start
(www-data,236784,17156,00:00:01/21:20:18,13536) /usr/sbin/apache2 -k start
(root,13320,6516,00:00:00/00:04,13593) sshd: [accepted]
(root,14144,7540,00:00:00/00:04,13594) sshd: root [priv]
(sshd,13320,4424,00:00:00/00:04,13595) sshd: root [net]
(root,14464,7616,00:00:00/00:03,13596) sshd: unknown [priv]
(sshd,13320,4344,00:00:00/00:03,13597) sshd: unknown [net]
(root,13320,6412,00:00:00/00:03,13598) sshd: [accepted]
(root,8692,3364,00:00:00/00:00,13705) /bin/bash /usr/bin/check_mk_agent
(root,6608,2804,00:00:00/00:00,13724) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1592,00:00:00/00:00,13725) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,5000,1304,00:00:00/223-05:29:43,15457) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1380,00:00:00/223-05:29:33,15473) /sbin/agetty -o -p -- \u --noclear tty2 linux
(root,0,0,00:00:06/1-14:48:18,17272) [kworker/2:0-events]
(root,0,0,00:00:00/08:31:21,23657) [kworker/0:1]
(root,0,0,00:00:01/08:31:21,23687) [kworker/3:0-mm_percpu_wq]
(root,0,0,00:00:47/4-14:43:12,24054) [kworker/0:2-events]
(root,0,0,00:00:00/52:25,24292) [kworker/u8:3-flush-8:0]
(root,0,0,00:00:02/1-03:10:54,30082) [kworker/1:1-cgwb_release]
(root,0,0,00:00:00/1-05:59:36,32104) [kworker/3:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2023-01-18 20:20

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b55699d97d678

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34564,9240,01:48:36/197-12:35:13,1) /sbin/init
(root,0,0,00:00:01/197-12:35:13,2) [kthreadd]
(root,0,0,00:00:00/197-12:35:13,3) [rcu_gp]
(root,0,0,00:00:00/197-12:35:13,4) [rcu_par_gp]
(root,0,0,00:00:00/197-12:35:13,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/197-12:35:13,8) [mm_percpu_wq]
(root,0,0,00:00:00/197-12:35:13,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/197-12:35:13,10) [rcu_tasks_trace]
(root,0,0,00:07:49/197-12:35:13,11) [ksoftirqd/0]
(root,0,0,01:11:08/197-12:35:13,12) [rcu_sched]
(root,0,0,00:00:17/197-12:35:13,13) [migration/0]
(root,0,0,00:00:00/197-12:35:13,15) [cpuhp/0]
(root,0,0,00:00:00/197-12:35:13,16) [cpuhp/1]
(root,0,0,00:00:19/197-12:35:13,17) [migration/1]
(root,0,0,00:02:20/197-12:35:13,18) [ksoftirqd/1]
(root,0,0,00:00:00/197-12:35:13,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/197-12:35:13,21) [cpuhp/2]
(root,0,0,00:00:20/197-12:35:13,22) [migration/2]
(root,0,0,00:01:54/197-12:35:13,23) [ksoftirqd/2]
(root,0,0,00:00:00/197-12:35:13,25) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/197-12:35:13,26) [cpuhp/3]
(root,0,0,00:00:15/197-12:35:13,27) [migration/3]
(root,0,0,00:17:03/197-12:35:13,28) [ksoftirqd/3]
(root,0,0,00:00:00/197-12:35:13,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/197-12:35:13,31) [kdevtmpfs]
(root,0,0,00:00:00/197-12:35:13,32) [netns]
(root,0,0,00:00:00/197-12:35:13,33) [kauditd]
(root,0,0,00:00:03/197-12:35:13,34) [khungtaskd]
(root,0,0,00:00:00/197-12:35:13,35) [oom_reaper]
(root,0,0,00:00:00/197-12:35:13,36) [writeback]
(root,0,0,00:03:24/197-12:35:13,37) [kcompactd0]
(root,0,0,00:00:00/197-12:35:13,38) [ksmd]
(root,0,0,00:06:35/197-12:35:13,39) [khugepaged]
(root,0,0,00:00:00/197-12:35:13,58) [kintegrityd]
(root,0,0,00:00:00/197-12:35:13,59) [kblockd]
(root,0,0,00:00:00/197-12:35:13,60) [blkcg_punt_bio]
(root,0,0,00:00:00/197-12:35:13,61) [edac-poller]
(root,0,0,00:00:00/197-12:35:13,62) [devfreq_wq]
(root,0,0,00:01:53/197-12:35:13,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:19/197-12:35:12,66) [kswapd0]
(root,0,0,00:00:00/197-12:35:12,67) [kthrotld]
(root,0,0,00:00:00/197-12:35:12,68) [acpi_thermal_pm]
(root,0,0,00:00:53/197-12:35:12,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/197-12:35:12,70) [ipv6_addrconf]
(root,0,0,00:00:00/197-12:35:12,81) [kstrp]
(root,0,0,00:00:00/197-12:35:12,84) [zswap-shrink]
(root,0,0,00:00:00/197-12:35:12,85) [kworker/u9:0]
(root,0,0,00:01:13/197-12:35:12,133) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/197-12:35:12,135) [ata_sff]
(root,0,0,00:00:00/197-12:35:12,138) [scsi_eh_0]
(root,0,0,00:00:00/197-12:35:12,139) [scsi_tmf_0]
(root,0,0,00:00:00/197-12:35:12,140) [scsi_eh_1]
(root,0,0,00:00:00/197-12:35:12,141) [scsi_tmf_1]
(root,0,0,00:00:00/197-12:35:12,142) [scsi_eh_2]
(root,0,0,00:00:00/197-12:35:12,143) [scsi_tmf_2]
(root,0,0,00:00:00/197-12:35:12,144) [scsi_eh_3]
(root,0,0,00:00:00/197-12:35:12,145) [scsi_tmf_3]
(root,0,0,00:01:23/197-12:35:11,151) [kworker/2:1H-kblockd]
(root,0,0,00:05:05/197-12:35:11,182) [jbd2/sda1-8]
(root,0,0,00:00:00/197-12:35:11,183) [ext4-rsv-conver]
(root,104960,61724,08:37:28/197-12:35:11,217) /lib/systemd/systemd-journald
(root,21604,4336,00:00:11/197-12:35:11,239) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/197-12:35:10,300) [watchdogd]
(root,0,0,00:00:00/197-12:35:10,309) [irq/126-mei_me]
(root,0,0,00:00:00/197-12:35:10,327) [card0-crtc0]
(root,0,0,00:00:00/197-12:35:10,328) [card0-crtc1]
(root,0,0,00:00:00/197-12:35:10,329) [card0-crtc2]
(root,0,0,00:00:00/197-12:35:10,341) [cryptd]
(systemd-timesync,23796,3632,00:00:19/197-12:35:10,342) /lib/systemd/systemd-timesyncd
(root,8472,2608,00:00:57/197-12:35:10,347) /usr/sbin/cron -f
(messagebus,8240,3624,00:00:02/197-12:35:10,348) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,6756,02:09:29/197-12:35:10,355) /usr/sbin/rsyslogd -n -iNONE
(root,49852,6508,00:00:18/197-12:35:10,364) /lib/systemd/systemd-logind
(root,0,0,00:00:00/40:56,913) [kworker/2:2-events]
(root,6668,4608,00:05:37/197-12:35:08,1131) /usr/sbin/apache2 -k start
(root,9832,2128,00:01:12/197-12:35:08,1190) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/30:20,4933) [kworker/u8:0-ext4-rsv-conversion]
(root,0,0,00:00:00/03:00:46,6963) [kworker/u8:2-flush-8:0]
(root,0,0,00:00:00/22:26,8015) [kworker/u8:3-ext4-rsv-conversion]
(root,10772,2368,00:32:18/192-13:15:45,8788) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69340,3336,03:13:19/192-13:15:45,8805) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,460924,93772,00:16:04/192-13:15:45,8812) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11744,2064,00:04:15/192-13:15:45,8821) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13324,6248,01:32:13/123-07:46:44,10173) sshd: /usr/sbin/sshd -D [listener] 10 of 10-100 startups
(root,0,0,00:00:04/1-04:23:31,10245) [kworker/3:1-events]
(root,0,0,00:00:19/5-03:38:15,12299) [kworker/1:2-events]
(root,5000,1304,00:00:00/197-11:47:40,15457) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1380,00:00:00/197-11:47:30,15473) /sbin/agetty -o -p -- \u --noclear tty2 linux
(root,0,0,00:00:11/1-18:27:11,15790) [kworker/2:0-events]
(root,14144,7184,00:00:00/00:04,17198) sshd: root [priv]
(sshd,13320,4160,00:00:00/00:04,17199) sshd: root [net]
(root,14144,7300,00:00:00/00:03,17200) sshd: root [priv]
(sshd,13320,4124,00:00:00/00:03,17201) sshd: root [net]
(root,14144,7484,00:00:00/00:03,17202) sshd: root [priv]
(sshd,13320,4272,00:00:00/00:03,17203) sshd: root [net]
(root,14144,7284,00:00:00/00:03,17204) sshd: root [priv]
(sshd,13320,4156,00:00:00/00:03,17205) sshd: root [net]
(root,14464,7572,00:00:00/00:02,17206) sshd: unknown [priv]
(sshd,13320,4212,00:00:00/00:02,17207) sshd: unknown [net]
(root,14144,7460,00:00:00/00:02,17208) sshd: root [priv]
(sshd,13320,4264,00:00:00/00:02,17209) sshd: root [net]
(root,14144,7528,00:00:00/00:01,17210) sshd: root [priv]
(sshd,13320,4340,00:00:00/00:01,17211) sshd: root [net]
(root,14144,7464,00:00:00/00:00,17212) sshd: root [priv]
(sshd,13320,4224,00:00:00/00:00,17213) sshd: root [net]
(root,14144,7172,00:00:00/00:00,17214) sshd: root [priv]
(sshd,13320,4200,00:00:00/00:00,17215) sshd: root [net]
(root,13320,6388,00:00:00/00:00,17216) sshd: [accepted]
(sshd,13320,4276,00:00:00/00:00,17217) sshd: [net]
(root,8692,3428,00:00:00/00:00,17298) /bin/bash /usr/bin/check_mk_agent
(root,6608,2860,00:00:00/00:00,17317) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1596,00:00:00/00:00,17318) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:25/2-13:22:27,18469) [kworker/0:2-events]
(www-data,6904,3716,00:00:00/03:38:14,24672) /usr/sbin/apache2 -k start
(www-data,236144,16180,00:00:00/03:38:14,24673) /usr/sbin/apache2 -k start
(www-data,235976,12096,00:00:00/03:38:14,24674) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/03:38:14,24729) [kworker/3:0-events]
(root,0,0,00:00:00/03:38:14,24730) [kworker/1:0]
(root,0,0,00:00:00/1-03:38:15,27832) [kworker/0:1-mm_percpu_wq]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-12-24 02:38

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b55691c9d0775

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34564,9248,01:40:28/184-04:54:49,1) /sbin/init
(root,0,0,00:00:00/184-04:54:49,2) [kthreadd]
(root,0,0,00:00:00/184-04:54:49,3) [rcu_gp]
(root,0,0,00:00:00/184-04:54:49,4) [rcu_par_gp]
(root,0,0,00:00:00/184-04:54:49,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/184-04:54:49,8) [mm_percpu_wq]
(root,0,0,00:00:00/184-04:54:49,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/184-04:54:49,10) [rcu_tasks_trace]
(root,0,0,00:07:22/184-04:54:49,11) [ksoftirqd/0]
(root,0,0,01:05:43/184-04:54:49,12) [rcu_sched]
(root,0,0,00:00:16/184-04:54:49,13) [migration/0]
(root,0,0,00:00:00/184-04:54:49,15) [cpuhp/0]
(root,0,0,00:00:00/184-04:54:49,16) [cpuhp/1]
(root,0,0,00:00:18/184-04:54:49,17) [migration/1]
(root,0,0,00:02:16/184-04:54:49,18) [ksoftirqd/1]
(root,0,0,00:00:00/184-04:54:49,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/184-04:54:49,21) [cpuhp/2]
(root,0,0,00:00:18/184-04:54:49,22) [migration/2]
(root,0,0,00:01:51/184-04:54:49,23) [ksoftirqd/2]
(root,0,0,00:00:00/184-04:54:49,25) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/184-04:54:49,26) [cpuhp/3]
(root,0,0,00:00:14/184-04:54:49,27) [migration/3]
(root,0,0,00:14:18/184-04:54:49,28) [ksoftirqd/3]
(root,0,0,00:00:00/184-04:54:49,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/184-04:54:49,31) [kdevtmpfs]
(root,0,0,00:00:00/184-04:54:49,32) [netns]
(root,0,0,00:00:00/184-04:54:49,33) [kauditd]
(root,0,0,00:00:02/184-04:54:49,34) [khungtaskd]
(root,0,0,00:00:00/184-04:54:49,35) [oom_reaper]
(root,0,0,00:00:00/184-04:54:49,36) [writeback]
(root,0,0,00:03:09/184-04:54:49,37) [kcompactd0]
(root,0,0,00:00:00/184-04:54:49,38) [ksmd]
(root,0,0,00:06:08/184-04:54:49,39) [khugepaged]
(root,0,0,00:00:00/184-04:54:49,58) [kintegrityd]
(root,0,0,00:00:00/184-04:54:49,59) [kblockd]
(root,0,0,00:00:00/184-04:54:49,60) [blkcg_punt_bio]
(root,0,0,00:00:00/184-04:54:49,61) [edac-poller]
(root,0,0,00:00:00/184-04:54:49,62) [devfreq_wq]
(root,0,0,00:01:45/184-04:54:49,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:18/184-04:54:48,66) [kswapd0]
(root,0,0,00:00:00/184-04:54:48,67) [kthrotld]
(root,0,0,00:00:00/184-04:54:48,68) [acpi_thermal_pm]
(root,0,0,00:00:49/184-04:54:48,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/184-04:54:48,70) [ipv6_addrconf]
(root,0,0,00:00:00/184-04:54:48,81) [kstrp]
(root,0,0,00:00:00/184-04:54:48,84) [zswap-shrink]
(root,0,0,00:00:00/184-04:54:48,85) [kworker/u9:0]
(root,0,0,00:01:08/184-04:54:48,133) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/184-04:54:48,135) [ata_sff]
(root,0,0,00:00:00/184-04:54:48,138) [scsi_eh_0]
(root,0,0,00:00:00/184-04:54:48,139) [scsi_tmf_0]
(root,0,0,00:00:00/184-04:54:48,140) [scsi_eh_1]
(root,0,0,00:00:00/184-04:54:48,141) [scsi_tmf_1]
(root,0,0,00:00:00/184-04:54:48,142) [scsi_eh_2]
(root,0,0,00:00:00/184-04:54:48,143) [scsi_tmf_2]
(root,0,0,00:00:00/184-04:54:48,144) [scsi_eh_3]
(root,0,0,00:00:00/184-04:54:48,145) [scsi_tmf_3]
(root,0,0,00:01:17/184-04:54:47,151) [kworker/2:1H-kblockd]
(root,0,0,00:04:44/184-04:54:47,182) [jbd2/sda1-8]
(root,0,0,00:00:00/184-04:54:47,183) [ext4-rsv-conver]
(root,285308,211200,07:56:39/184-04:54:47,217) /lib/systemd/systemd-journald
(root,21604,4336,00:00:10/184-04:54:47,239) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/184-04:54:46,300) [watchdogd]
(root,0,0,00:00:00/184-04:54:46,309) [irq/126-mei_me]
(root,0,0,00:00:00/184-04:54:46,327) [card0-crtc0]
(root,0,0,00:00:00/184-04:54:46,328) [card0-crtc1]
(root,0,0,00:00:00/184-04:54:46,329) [card0-crtc2]
(root,0,0,00:00:00/184-04:54:46,341) [cryptd]
(systemd-timesync,23796,3632,00:00:18/184-04:54:46,342) /lib/systemd/systemd-timesyncd
(root,8472,2608,00:00:53/184-04:54:46,347) /usr/sbin/cron -f
(messagebus,8240,3624,00:00:02/184-04:54:46,348) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,6752,01:59:01/184-04:54:46,355) /usr/sbin/rsyslogd -n -iNONE
(root,49852,6508,00:00:17/184-04:54:46,364) /lib/systemd/systemd-logind
(root,0,0,00:00:00/19:45,709) [kworker/u8:1-flush-8:0]
(root,6668,4588,00:05:13/184-04:54:44,1131) /usr/sbin/apache2 -k start
(root,9832,2128,00:01:07/184-04:54:44,1190) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/13:06:25,1198) [kworker/2:2-events]
(root,0,0,00:00:09/3-02:11:36,7739) [kworker/1:2-events_freezable]
(root,10772,2368,00:30:01/179-05:35:21,8788) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69340,3392,03:00:48/179-05:35:21,8805) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,460924,101192,00:15:34/179-05:35:21,8812) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11744,2080,00:03:57/179-05:35:21,8821) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,13320,6504,00:00:00/00:17,9546) sshd: [accepted]
(root,14464,7632,00:00:00/00:04,9593) sshd: unknown [priv]
(sshd,13320,4272,00:00:00/00:04,9594) sshd: unknown [net]
(root,14464,7644,00:00:00/00:04,9595) sshd: unknown [priv]
(sshd,13320,4212,00:00:00/00:04,9596) sshd: unknown [net]
(root,14464,7552,00:00:00/00:03,9597) sshd: unknown [priv]
(sshd,13320,4252,00:00:00/00:03,9598) sshd: unknown [net]
(root,14464,7672,00:00:00/00:03,9599) sshd: unknown [priv]
(sshd,13320,4248,00:00:00/00:03,9600) sshd: unknown [net]
(root,14464,7700,00:00:00/00:03,9601) sshd: unknown [priv]
(sshd,13320,4392,00:00:00/00:03,9602) sshd: unknown [net]
(root,13320,6480,00:00:00/00:02,9603) sshd: [accepted]
(sshd,13320,4280,00:00:00/00:02,9604) sshd: [net]
(root,0,0,00:00:00/12:43:15,9607) [kworker/3:1]
(root,13320,6496,00:00:00/00:01,9659) sshd: [accepted]
(sshd,13320,4332,00:00:00/00:01,9660) sshd: [net]
(root,8692,3384,00:00:00/00:00,9714) /bin/bash /usr/bin/check_mk_agent
(root,6608,2704,00:00:00/00:00,9733) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1552,00:00:00/00:00,9734) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,13324,6248,01:20:21/110-00:06:20,10173) sshd: /usr/sbin/sshd -D [listener] 8 of 10-100 startups
(root,0,0,00:00:00/02:09:18,15394) [kworker/u8:2-flush-8:0]
(root,5000,1304,00:00:00/184-04:07:16,15457) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1380,00:00:00/184-04:07:06,15473) /sbin/agetty -o -p -- \u --noclear tty2 linux
(root,0,0,00:00:00/1-10:28:53,20803) [kworker/1:0]
(root,0,0,00:00:55/5-13:06:57,21579) [kworker/0:0-events]
(root,0,0,00:00:43/12-02:01:15,26167) [kworker/3:3-events]
(root,0,0,00:00:00/32:21,27304) [kworker/u8:0-flush-8:0]
(www-data,6904,3484,00:00:00/19:57:51,27884) /usr/sbin/apache2 -k start
(www-data,236400,14612,00:00:00/19:57:51,27885) /usr/sbin/apache2 -k start
(www-data,236744,14988,00:00:01/19:57:51,27886) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/19:57:51,27941) [kworker/0:1-events]
(root,0,0,00:00:09/1-13:09:00,28022) [kworker/2:1-events]
(www-data,235760,12104,00:00:00/01:37:21,30031) /usr/sbin/apache2 -k start

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-12-10 18:57

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b55694fd50f18

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34564,9256,01:25:14/159-09:25:07,1) /sbin/init
(root,0,0,00:00:00/159-09:25:07,2) [kthreadd]
(root,0,0,00:00:00/159-09:25:07,3) [rcu_gp]
(root,0,0,00:00:00/159-09:25:07,4) [rcu_par_gp]
(root,0,0,00:00:00/159-09:25:07,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/159-09:25:07,8) [mm_percpu_wq]
(root,0,0,00:00:00/159-09:25:07,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/159-09:25:07,10) [rcu_tasks_trace]
(root,0,0,00:06:40/159-09:25:07,11) [ksoftirqd/0]
(root,0,0,00:56:35/159-09:25:07,12) [rcu_sched]
(root,0,0,00:00:14/159-09:25:07,13) [migration/0]
(root,0,0,00:00:00/159-09:25:07,15) [cpuhp/0]
(root,0,0,00:00:00/159-09:25:07,16) [cpuhp/1]
(root,0,0,00:00:15/159-09:25:07,17) [migration/1]
(root,0,0,00:02:10/159-09:25:07,18) [ksoftirqd/1]
(root,0,0,00:00:00/159-09:25:07,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/159-09:25:07,21) [cpuhp/2]
(root,0,0,00:00:16/159-09:25:07,22) [migration/2]
(root,0,0,00:01:46/159-09:25:07,23) [ksoftirqd/2]
(root,0,0,00:00:00/159-09:25:07,25) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/159-09:25:07,26) [cpuhp/3]
(root,0,0,00:00:12/159-09:25:07,27) [migration/3]
(root,0,0,00:11:01/159-09:25:07,28) [ksoftirqd/3]
(root,0,0,00:00:00/159-09:25:07,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/159-09:25:07,31) [kdevtmpfs]
(root,0,0,00:00:00/159-09:25:07,32) [netns]
(root,0,0,00:00:00/159-09:25:07,33) [kauditd]
(root,0,0,00:00:02/159-09:25:07,34) [khungtaskd]
(root,0,0,00:00:00/159-09:25:07,35) [oom_reaper]
(root,0,0,00:00:00/159-09:25:07,36) [writeback]
(root,0,0,00:02:45/159-09:25:07,37) [kcompactd0]
(root,0,0,00:00:00/159-09:25:07,38) [ksmd]
(root,0,0,00:05:21/159-09:25:07,39) [khugepaged]
(root,0,0,00:00:00/159-09:25:07,58) [kintegrityd]
(root,0,0,00:00:00/159-09:25:07,59) [kblockd]
(root,0,0,00:00:00/159-09:25:07,60) [blkcg_punt_bio]
(root,0,0,00:00:00/159-09:25:07,61) [edac-poller]
(root,0,0,00:00:00/159-09:25:07,62) [devfreq_wq]
(root,0,0,00:01:30/159-09:25:07,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:15/159-09:25:06,66) [kswapd0]
(root,0,0,00:00:00/159-09:25:06,67) [kthrotld]
(root,0,0,00:00:00/159-09:25:06,68) [acpi_thermal_pm]
(root,0,0,00:00:43/159-09:25:06,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/159-09:25:06,70) [ipv6_addrconf]
(root,0,0,00:00:00/159-09:25:06,81) [kstrp]
(root,0,0,00:00:00/159-09:25:06,84) [zswap-shrink]
(root,0,0,00:00:00/159-09:25:06,85) [kworker/u9:0]
(root,0,0,00:00:59/159-09:25:06,133) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/159-09:25:06,135) [ata_sff]
(root,0,0,00:00:00/159-09:25:06,138) [scsi_eh_0]
(root,0,0,00:00:00/159-09:25:06,139) [scsi_tmf_0]
(root,0,0,00:00:00/159-09:25:06,140) [scsi_eh_1]
(root,0,0,00:00:00/159-09:25:06,141) [scsi_tmf_1]
(root,0,0,00:00:00/159-09:25:06,142) [scsi_eh_2]
(root,0,0,00:00:00/159-09:25:06,143) [scsi_tmf_2]
(root,0,0,00:00:00/159-09:25:06,144) [scsi_eh_3]
(root,0,0,00:00:00/159-09:25:06,145) [scsi_tmf_3]
(root,0,0,00:01:05/159-09:25:05,151) [kworker/2:1H-kblockd]
(root,0,0,00:04:07/159-09:25:05,182) [jbd2/sda1-8]
(root,0,0,00:00:00/159-09:25:05,183) [ext4-rsv-conver]
(root,198924,143604,06:46:22/159-09:25:05,217) /lib/systemd/systemd-journald
(root,21604,4336,00:00:09/159-09:25:05,239) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/159-09:25:04,300) [watchdogd]
(root,0,0,00:00:00/159-09:25:04,309) [irq/126-mei_me]
(root,0,0,00:00:00/159-09:25:04,327) [card0-crtc0]
(root,0,0,00:00:00/159-09:25:04,328) [card0-crtc1]
(root,0,0,00:00:00/159-09:25:04,329) [card0-crtc2]
(root,0,0,00:00:00/159-09:25:04,341) [cryptd]
(systemd-timesync,23796,3632,00:00:15/159-09:25:04,342) /lib/systemd/systemd-timesyncd
(root,8472,2608,00:00:46/159-09:25:04,347) /usr/sbin/cron -f
(messagebus,8240,3624,00:00:02/159-09:25:04,348) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,6824,01:40:50/159-09:25:04,355) /usr/sbin/rsyslogd -n -iNONE
(root,49852,6508,00:00:14/159-09:25:04,364) /lib/systemd/systemd-logind
(root,6668,4620,00:04:34/159-09:25:02,1131) /usr/sbin/apache2 -k start
(root,9832,2128,00:00:58/159-09:25:02,1190) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:00/00:12,7378) [kworker/u8:0]
(root,13320,6528,00:00:00/00:06,7580) sshd: [accepted]
(sshd,13320,4356,00:00:00/00:05,7582) sshd: [net]
(root,14144,7384,00:00:00/00:04,7584) sshd: root [priv]
(sshd,13320,4156,00:00:00/00:04,7585) sshd: root [net]
(root,14144,7428,00:00:00/00:04,7588) sshd: root [priv]
(sshd,13320,4348,00:00:00/00:03,7589) sshd: root [net]
(root,14144,7484,00:00:00/00:03,7590) sshd: root [priv]
(sshd,13320,4432,00:00:00/00:02,7591) sshd: root [net]
(root,13320,6416,00:00:00/00:02,7592) sshd: [accepted]
(sshd,13320,4176,00:00:00/00:02,7593) sshd: [net]
(root,8692,3380,00:00:00/00:01,7692) /bin/bash /usr/bin/check_mk_agent
(root,6608,2844,00:00:00/00:00,7711) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1544,00:00:00/00:00,7712) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,10772,2604,00:25:55/154-10:05:39,8788) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69340,4148,02:36:35/154-10:05:39,8805) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,460924,95964,00:14:38/154-10:05:39,8812) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11744,2312,00:03:25/154-10:05:39,8821) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/01:12:27,9455) [kworker/0:0-events]
(root,13324,6248,01:00:59/85-04:36:38,10173) sshd: /usr/sbin/sshd -D [listener] 5 of 10-100 startups
(root,0,0,00:00:00/09:08:08,12136) [kworker/2:1]
(root,0,0,00:00:11/3-00:27:59,14775) [kworker/3:1-events]
(root,5000,1304,00:00:00/159-08:37:34,15457) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1380,00:00:00/159-08:37:24,15473) /sbin/agetty -o -p -- \u --noclear tty2 linux
(root,0,0,00:00:28/4-10:35:55,19476) [kworker/2:2-events]
(root,0,0,00:00:00/41:32,23035) [kworker/u8:3-ext4-rsv-conversion]
(root,0,0,00:01:35/9-03:33:20,24233) [kworker/0:2-events]
(root,0,0,00:00:00/28:08,28650) [kworker/1:1-events_freezable]
(www-data,6904,3668,00:00:00/28:08,28656) /usr/sbin/apache2 -k start
(www-data,235856,8036,00:00:00/28:08,28657) /usr/sbin/apache2 -k start
(www-data,235808,14168,00:00:00/28:08,28658) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/28:08,28713) [kworker/3:2-events]
(root,0,0,00:00:00/27:58,28934) [kworker/u8:1-flush-8:0]
(root,0,0,00:00:06/1-15:38:25,31861) [kworker/1:3-cgroup_destroy]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
32: eth1.66@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
33: eth1.67@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
35: eth1.68@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
37: eth1.69@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
38: eth1.70@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-11-15 23:28

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb32628cb7a6605688b1719e62534b5569eaecda9a

Found public CheckMk agent:
Version: 1.2.8p27
AgentOS: linux
Hostname: net
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,34696,9316,00:04:35/8-08:19:55,1) /sbin/init
(root,0,0,00:00:00/8-08:19:55,2) [kthreadd]
(root,0,0,00:00:00/8-08:19:55,3) [rcu_gp]
(root,0,0,00:00:00/8-08:19:55,4) [rcu_par_gp]
(root,0,0,00:00:00/8-08:19:55,6) [kworker/0:0H-events_highpri]
(root,0,0,00:00:00/8-08:19:55,8) [mm_percpu_wq]
(root,0,0,00:00:00/8-08:19:55,9) [rcu_tasks_rude_]
(root,0,0,00:00:00/8-08:19:55,10) [rcu_tasks_trace]
(root,0,0,00:00:37/8-08:19:55,11) [ksoftirqd/0]
(root,0,0,00:03:08/8-08:19:55,12) [rcu_sched]
(root,0,0,00:00:01/8-08:19:55,13) [migration/0]
(root,0,0,00:00:00/8-08:19:55,15) [cpuhp/0]
(root,0,0,00:00:00/8-08:19:55,16) [cpuhp/1]
(root,0,0,00:00:01/8-08:19:55,17) [migration/1]
(root,0,0,00:00:20/8-08:19:55,18) [ksoftirqd/1]
(root,0,0,00:00:00/8-08:19:55,20) [kworker/1:0H-events_highpri]
(root,0,0,00:00:00/8-08:19:55,21) [cpuhp/2]
(root,0,0,00:00:01/8-08:19:55,22) [migration/2]
(root,0,0,00:00:19/8-08:19:55,23) [ksoftirqd/2]
(root,0,0,00:00:00/8-08:19:55,25) [kworker/2:0H-kblockd]
(root,0,0,00:00:00/8-08:19:55,26) [cpuhp/3]
(root,0,0,00:00:01/8-08:19:55,27) [migration/3]
(root,0,0,00:00:29/8-08:19:55,28) [ksoftirqd/3]
(root,0,0,00:00:00/8-08:19:55,30) [kworker/3:0H-events_highpri]
(root,0,0,00:00:00/8-08:19:55,31) [kdevtmpfs]
(root,0,0,00:00:00/8-08:19:55,32) [netns]
(root,0,0,00:00:00/8-08:19:55,33) [kauditd]
(root,0,0,00:00:00/8-08:19:55,34) [khungtaskd]
(root,0,0,00:00:00/8-08:19:55,35) [oom_reaper]
(root,0,0,00:00:00/8-08:19:55,36) [writeback]
(root,0,0,00:00:11/8-08:19:55,37) [kcompactd0]
(root,0,0,00:00:00/8-08:19:55,38) [ksmd]
(root,0,0,00:00:20/8-08:19:55,39) [khugepaged]
(root,0,0,00:00:00/8-08:19:55,58) [kintegrityd]
(root,0,0,00:00:00/8-08:19:55,59) [kblockd]
(root,0,0,00:00:00/8-08:19:55,60) [blkcg_punt_bio]
(root,0,0,00:00:00/8-08:19:55,61) [edac-poller]
(root,0,0,00:00:00/8-08:19:55,62) [devfreq_wq]
(root,0,0,00:00:05/8-08:19:55,64) [kworker/1:1H-kblockd]
(root,0,0,00:00:00/8-08:19:54,66) [kswapd0]
(root,0,0,00:00:00/8-08:19:54,67) [kthrotld]
(root,0,0,00:00:00/8-08:19:54,68) [acpi_thermal_pm]
(root,0,0,00:00:03/8-08:19:54,69) [kworker/0:1H-kblockd]
(root,0,0,00:00:00/8-08:19:54,70) [ipv6_addrconf]
(root,0,0,00:00:00/8-08:19:54,81) [kstrp]
(root,0,0,00:00:00/8-08:19:54,84) [zswap-shrink]
(root,0,0,00:00:00/8-08:19:54,85) [kworker/u9:0]
(root,0,0,00:00:03/8-08:19:54,133) [kworker/3:1H-kblockd]
(root,0,0,00:00:00/8-08:19:54,135) [ata_sff]
(root,0,0,00:00:00/8-08:19:54,138) [scsi_eh_0]
(root,0,0,00:00:00/8-08:19:54,139) [scsi_tmf_0]
(root,0,0,00:00:00/8-08:19:54,140) [scsi_eh_1]
(root,0,0,00:00:00/8-08:19:54,141) [scsi_tmf_1]
(root,0,0,00:00:00/8-08:19:54,142) [scsi_eh_2]
(root,0,0,00:00:00/8-08:19:54,143) [scsi_tmf_2]
(root,0,0,00:00:00/8-08:19:54,144) [scsi_eh_3]
(root,0,0,00:00:00/8-08:19:54,145) [scsi_tmf_3]
(root,0,0,00:00:03/8-08:19:53,151) [kworker/2:1H-kblockd]
(root,0,0,00:00:14/8-08:19:53,182) [jbd2/sda1-8]
(root,0,0,00:00:00/8-08:19:53,183) [ext4-rsv-conver]
(root,271968,202560,00:21:19/8-08:19:53,217) /lib/systemd/systemd-journald
(root,21604,4832,00:00:00/8-08:19:53,239) /lib/systemd/systemd-udevd
(root,0,0,00:00:00/8-08:19:52,300) [watchdogd]
(root,0,0,00:00:00/8-08:19:52,309) [irq/126-mei_me]
(root,0,0,00:00:00/8-08:19:52,327) [card0-crtc0]
(root,0,0,00:00:00/8-08:19:52,328) [card0-crtc1]
(root,0,0,00:00:00/8-08:19:52,329) [card0-crtc2]
(root,0,0,00:00:00/8-08:19:52,341) [cryptd]
(systemd-timesync,23796,3748,00:00:01/8-08:19:52,342) /lib/systemd/systemd-timesyncd
(root,8472,2732,00:00:02/8-08:19:52,347) /usr/sbin/cron -f
(messagebus,8240,4016,00:00:00/8-08:19:52,348) /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
(root,26740,7804,00:05:15/8-08:19:52,355) /usr/sbin/rsyslogd -n -iNONE
(root,49852,6684,00:00:01/8-08:19:52,364) /lib/systemd/systemd-logind
(root,13324,6896,00:06:34/8-08:19:50,1123) sshd: /usr/sbin/sshd -D [listener] 21 of 10-100 startups
(root,6668,5052,00:00:18/8-08:19:50,1131) /usr/sbin/apache2 -k start
(root,9832,2404,00:00:03/8-08:19:50,1190) /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
(root,0,0,00:00:09/4-11:07:07,3191) [kworker/0:2-mm_percpu_wq]
(root,0,0,00:00:00/02:10:30,7408) [kworker/u8:2-flush-8:0]
(root,10772,3720,00:00:36/3-09:00:27,8788) /usr/lib/frr/watchfrr -d -F traditional zebra bgpd staticd
(frr,69332,7932,00:04:08/3-09:00:27,8805) /usr/lib/frr/zebra -d -F traditional -A 127.0.0.1 -s 90000000
(frr,467428,433996,00:03:15/3-09:00:27,8812) /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1
(frr,11744,3492,00:00:04/3-09:00:27,8821) /usr/lib/frr/staticd -d -F traditional -A 127.0.0.1
(root,0,0,00:00:00/22:56,9220) [kworker/0:1-events]
(www-data,6904,3812,00:00:00/22:56,9235) /usr/sbin/apache2 -k start
(www-data,235744,16356,00:00:00/22:56,9236) /usr/sbin/apache2 -k start
(www-data,235800,14312,00:00:00/22:56,9237) /usr/sbin/apache2 -k start
(root,0,0,00:00:00/22:56,9292) [kworker/3:1-mm_percpu_wq]
(root,0,0,00:00:36/2-17:40:01,9393) [kworker/2:0-events]
(root,0,0,00:00:00/22:36,9545) [kworker/u8:4-ext4-rsv-conversion]
(root,0,0,00:00:00/09:26,13749) [kworker/u8:0-flush-8:0]
(root,0,0,00:00:11/3-00:22:56,13956) [kworker/3:2-events]
(root,5000,1624,00:00:00/8-07:32:22,15457) /sbin/agetty -o -p -- \u --noclear tty1 linux
(root,5000,1704,00:00:00/8-07:32:12,15473) /sbin/agetty -o -p -- \u --noclear tty2 linux
(root,13320,6420,00:00:00/01:35,16259) sshd: [accepted]
(root,13320,6368,00:00:00/01:35,16260) sshd: [accepted]
(root,13320,6516,00:00:00/01:35,16262) sshd: [accepted]
(root,13320,6492,00:00:00/01:35,16263) sshd: [accepted]
(root,13320,6336,00:00:00/01:35,16264) sshd: [accepted]
(root,13320,6412,00:00:00/01:35,16268) sshd: [accepted]
(root,13320,6456,00:00:00/01:35,16270) sshd: [accepted]
(root,13320,6480,00:00:00/01:29,16287) sshd: [accepted]
(root,13320,6504,00:00:00/01:17,16297) sshd: [accepted]
(root,13320,6388,00:00:00/01:17,16298) sshd: [accepted]
(root,13320,6572,00:00:00/00:20,16741) sshd: [accepted]
(root,13320,6348,00:00:00/00:20,16743) sshd: [accepted]
(root,13320,6528,00:00:00/00:20,16744) sshd: [accepted]
(root,13320,6484,00:00:00/00:20,16745) sshd: [accepted]
(root,13320,6512,00:00:00/00:20,16746) sshd: [accepted]
(root,13320,6488,00:00:00/00:20,16747) sshd: [accepted]
(root,13320,6580,00:00:00/00:20,16750) sshd: [accepted]
(root,13320,6368,00:00:00/00:20,16752) sshd: [accepted]
(root,13320,6420,00:00:00/00:20,16753) sshd: [accepted]
(root,13320,6384,00:00:00/00:15,16764) sshd: [accepted]
(root,8692,3356,00:00:00/00:00,16858) /bin/bash /usr/bin/check_mk_agent
(root,13320,6432,00:00:00/00:00,16862) sshd: [accepted]
(root,6608,2760,00:00:00/00:00,16878) ps ax -o user:32,vsz,rss,cputime,etime,pid,command --columns 10000
(root,3592,1532,00:00:00/00:00,16879) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4\/\5,\6) /
(root,0,0,00:00:00/23:28:07,19357) [kworker/2:1-events]
(root,0,0,00:00:27/7-13:28:59,23481) [kworker/1:3-mm_percpu_wq]
(root,0,0,00:00:00/1-08:04:45,29708) [kworker/1:0-events]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:70 brd ff:ff:ff:ff:ff:ff
3: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 00:0a:f7:3e:a1:71 brd ff:ff:ff:ff:ff:ff
    altname enp4s0f1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether f4:8e:38:b6:17:c6 brd ff:ff:ff:ff:ff:ff
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
6: eth1.2000@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
7: eth1.208@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
8: eth1.210@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
9: eth1.2111@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
10: eth1.214@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
11: eth1.2160@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
12: eth1.217@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
13: eth1.219@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
14: eth1.221@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
15: eth1.222@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
16: eth1.223@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
17: eth1.225@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
18: eth1.226@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
19: eth1.327@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
20: eth1.230@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
21: eth1.233@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
22: eth1.235@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
23: eth1.240@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
24: eth1.241@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
25: eth1.242@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
26: eth1.60@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
27: eth1.61@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
28: eth1.62@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
29: eth1.63@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
30: eth1.64@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
31: eth1.65@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 00:1b:21:2a:0e:e8 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2022-06-17 22:22

Create report

Domain summary

No record