LeakIX - Host 95.142.100.16

Host 95.142.100.16

The Netherlands

Schuberg Philis B.V.

Software information

Apache Apache

tcp/443 tcp/80

CheckMK monitoring endpoint publicly available

An open CheckMK agent is publicly available.

This could leak sensitive information such as :

Process list ( maybe credentials )
Network interfaces
Running services
Firewall rules
Internal OS configuration

https://docs.checkmk.com/latest/en/wato_monitoringagents.html

IP: 95.142.100.16
Port: 6556

First seen 2022-10-17 19:45
Last seen 2024-12-21 22:06
Open for 796 days

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e430a702fb

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1734818773
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:05 22-08:14:14 1 /sbin/init
root 0 0 00:00:00 22-08:14:14 2 [kthreadd]
root 0 0 01:34:50 22-08:14:14 3 [migration/0]
root 0 0 00:05:29 22-08:14:14 4 [ksoftirqd/0]
root 0 0 00:00:00 22-08:14:14 5 [stopper/0]
root 0 0 00:02:53 22-08:14:14 6 [watchdog/0]
root 0 0 00:44:55 22-08:14:14 7 [migration/1]
root 0 0 00:00:00 22-08:14:14 8 [stopper/1]
root 0 0 00:05:21 22-08:14:14 9 [ksoftirqd/1]
root 0 0 00:03:18 22-08:14:14 10 [watchdog/1]
root 0 0 02:00:59 22-08:14:14 11 [migration/2]
root 0 0 00:00:00 22-08:14:14 12 [stopper/2]
root 0 0 00:03:34 22-08:14:14 13 [ksoftirqd/2]
root 0 0 00:02:24 22-08:14:14 14 [watchdog/2]
root 0 0 00:25:39 22-08:14:14 15 [migration/3]
root 0 0 00:00:00 22-08:14:14 16 [stopper/3]
root 0 0 00:04:16 22-08:14:14 17 [ksoftirqd/3]
root 0 0 00:02:58 22-08:14:14 18 [watchdog/3]
root 0 0 01:17:49 22-08:14:14 19 [migration/4]
root 0 0 00:00:00 22-08:14:14 20 [stopper/4]
root 0 0 00:03:12 22-08:14:14 21 [ksoftirqd/4]
root 0 0 00:01:29 22-08:14:14 22 [watchdog/4]
root 0 0 00:38:07 22-08:14:14 23 [migration/5]
root 0 0 00:00:00 22-08:14:14 24 [stopper/5]
root 0 0 00:02:49 22-08:14:14 25 [ksoftirqd/5]
root 0 0 00:02:04 22-08:14:14 26 [watchdog/5]
root 0 0 00:23:59 22-08:14:14 27 [migration/6]
root 0 0 00:00:00 22-08:14:14 28 [stopper/6]
root 0 0 00:02:43 22-08:14:14 29 [ksoftirqd/6]
root 0 0 00:01:53 22-08:14:14 30 [watchdog/6]
root 0 0 00:18:09 22-08:14:14 31 [migration/7]
root 0 0 00:00:00 22-08:14:14 32 [stopper/7]
root 0 0 00:02:59 22-08:14:14 33 [ksoftirqd/7]
root 0 0 00:01:48 22-08:14:14 34 [watchdog/7]
root 0 0 00:17:20 22-08:14:14 35 [events/0]
root 0 0 00:15:20 22-08:14:14 36 [events/1]
root 0 0 00:10:32 22-08:14:14 37 [events/2]
root 0 0 00:15:50 22-08:14:14 38 [events/3]
root 0 0 00:07:01 22-08:14:14 39 [events/4]
root 0 0 00:08:45 22-08:14:14 40 [events/5]
root 0 0 00:09:27 22-08:14:14 41 [events/6]
root 0 0 00:10:23 22-08:14:14 42 [events/7]
root 0 0 00:00:00 22-08:14:14 43 [events/0]
root 0 0 00:00:00 22-08:14:14 44 [events/1]
root 0 0 00:00:00 22-08:14:14 45 [events/2]
root 0 0 00:00:00 22-08:14:14 46 [events/3]
root 0 0 00:00:00 22-08:14:14 47 [events/4]
root 0 0 00:00:00 22-08:14:14 48 [events/5]
root 0 0 00:00:00 22-08:14:14 49 [events/6]
root 0 0 00:00:00 22-08:14:14 50 [events/7]
root 0 0 00:00:00 22-08:14:14 51 [events_long/0]
root 0 0 00:00:00 22-08:14:14 52 [events_long/1]
root 0 0 00:00:00 22-08:14:14 53 [events_long/2]
root 0 0 00:00:00 22-08:14:14 54 [events_long/3]
root 0 0 00:00:00 22-08:14:14 55 [events_long/4]
root 0 0 00:00:00 22-08:14:14 56 [events_long/5]
root 0 0 00:00:00 22-08:14:14 57 [events_long/6]
root 0 0 00:00:00 22-08:14:14 58 [events_long/7]
root 0 0 00:00:00 22-08:14:14 59 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 60 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 61 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 62 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 63 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 64 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 65 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 66 [events_power_ef]
root 0 0 00:00:00 22-08:14:14 67 [cgroup]
root 0 0 00:00:00 22-08:14:14 68 [khelper]
root 0 0 00:00:00 22-08:14:14 69 [netns]
root 0 0 00:00:00 22-08:14:14 70 [async/mgr]
root 0 0 00:00:00 22-08:14:14 71 [pm]
root 0 0 00:00:59 22-08:14:14 72 [sync_supers]
root 0 0 00:00:01 22-08:14:14 73 [bdi-default]
root 0 0 00:00:00 22-08:14:14 74 [kintegrityd/0]
root 0 0 00:00:00 22-08:14:14 75 [kintegrityd/1]
root 0 0 00:00:00 22-08:14:14 76 [kintegrityd/2]
root 0 0 00:00:00 22-08:14:14 77 [kintegrityd/3]
root 0 0 00:00:00 22-08:14:14 78 [kintegrityd/4]
root 0 0 00:00:00 22-08:14:14 79 [kintegrityd/5]
root 0 0 00:00:00 22-08:14:14 80 [kintegrityd/6]
root 0 0 00:00:00 22-08:14:14 81 [kintegrityd/7]
root 0 0 00:00:53 22-08:14:14 82 [kblockd/0]
root 0 0 00:00:18 22-08:14:14 83 [kblockd/1]
root 0 0 01:21:13 22-08:14:14 84 [kblockd/2]
root 0 0 00:00:06 22-08:14:14 85 [kblockd/3]
root 0 0 00:27:52 22-08:14:14 86 [kblockd/4]
root 0 0 00:00:41 22-08:14:14 87 [kblockd/5]
root 0 0 00:00:12 22-08:14:14 88 [kblockd/6]
root 0 0 00:00:05 22-08:14:14 89 [kblockd/7]
root 0 0 00:00:00 22-08:14:14 90 [kacpid]
root 0 0 00:00:00 22-08:14:14 91 [kacpi_notify]
root 0 0 00:00:00 22-08:14:14 92 [kacpi_hotplug]
root 0 0 00:00:00 22-08:14:14 93 [ata_aux]
root 0 0 00:00:00 22-08:14:14 94 [ata_sff/0]
root 0 0 00:00:00 22-08:14:14 95 [ata_sff/1]
root 0 0 00:00:00 22-08:14:14 96 [ata_sff/2]
root 0 0 00:00:00 22-08:14:14 97 [ata_sff/3]
root 0 0 00:00:00 22-08:14:14 98 [ata_sff/4]
root 0 0 00:00:00 22-08:14:14 99 [ata_sff/5]
root 0 0 00:00:00 22-08:14:14 100 [ata_sff/6]
root 0 0 00:00:00 22-08:14:14 101 [ata_sff/7]
root 0 0 00:00:00 22-08:14:14 102 [ksuspend_usbd]
root 0 0 00:00:00 22-08:14:14 103 [khubd]
root 0 0 00:00:00 22-08:14:14 104 [kseriod]
root 0 0 00:00:00 22-08:14:14 105 [md/0]
root 0 0 00:00:00 22-08:14:14 106 [md/1]
root 0 0 00:00:00 22-08:14:14 107 [md/2]
root 0 0 00:00:00 22-08:14:14 108 [md/3]
root 0 0 00:00:00 22-08:14:14 109 [md/4]
root 0 0 00:00:00 22-08:14:14 110 [md/5]
root 0 0 00:00:00 22-08:14:14 111 [md/6]
root 0 0 00:00:00 22-08:14:14 112 [md/7]
root 0 0 00:00:00 22-08:14:14 113 [md_misc/0]
root 0 0 00:00:00 22-08:14:14 114 [md_misc/1]
root 0 0 00:00:00 22-08:14:14 115 [md_misc/2]
root 0 0 00:00:00 22-08:14:14 116 [md_misc/3]
root 0 0 00:00:00 22-08:14:14 117 [md_misc/4]
root 0 0 00:00:00 22-08:14:14 118 [md_misc/5]
root 0 0 00:00:00 22-08:14:14 119 [md_misc/6]
root 0 0 00:00:00 22-08:14:14 120 [md_misc/7]
root 0 0 00:00:00 22-08:14:14 121 [linkwatch]
root 0 0 00:00:04 22-08:14:13 124 [khungtaskd]
root 0 0 00:56:10 22-08:14:13 125 [kswapd1]
root 0 0 00:00:00 22-08:14:13 126 [ksmd]
root 0 0 00:33:12 22-08:14:13 127 [khugepaged]
root 0 0 00:00:00 22-08:14:13 128 [aio/0]
root 0 0 00:00:00 22-08:14:13 129 [aio/1]
root 0 0 00:00:00 22-08:14:13 130 [aio/2]
root 0 0 00:00:00 22-08:14:13 131 [aio/3]
root 0 0 00:00:00 22-08:14:13 132 [aio/4]
root 0 0 00:00:00 22-08:14:13 133 [aio/5]
root 0 0 00:00:00 22-08:14:13 134 [aio/6]
root 0 0 00:00:00 22-08:14:13 135 [aio/7]
root 0 0 00:00:00 22-08:14:13 136 [crypto/0]
root 0 0 00:00:00 22-08:14:13 137 [crypto/1]
root 0 0 00:00:00 22-08:14:13 138 [crypto/2]
root 0 0 00:00:00 22-08:14:13 139 [crypto/3]
root 0 0 00:00:00 22-08:14:13 140 [crypto/4]
root 0 0 00:00:00 22-08:14:13 141 [crypto/5]
root 0 0 00:00:00 22-08:14:13 142 [crypto/6]
root 0 0 00:00:00 22-08:14:13 143 [crypto/7]
root 0 0 00:00:00 22-08:14:13 150 [kthrotld/0]
root 0 0 00:00:00 22-08:14:13 151 [kthrotld/1]
root 0 0 00:00:00 22-08:14:13 152 [kthrotld/2]
root 0 0 00:00:00 22-08:14:13 153 [kthrotld/3]
root 0 0 00:00:00 22-08:14:13 154 [kthrotld/4]
root 0 0 00:00:00 22-08:14:13 155 [kthrotld/5]
root 0 0 00:00:00 22-08:14:13 156 [kthrotld/6]
root 0 0 00:00:00 22-08:14:13 157 [kthrotld/7]
root 0 0 00:00:00 22-08:14:13 160 [kpsmoused]
root 0 0 00:00:00 22-08:14:13 161 [usbhid_resumer]
root 0 0 00:00:00 22-08:14:13 162 [deferwq]
root 0 0 00:00:00 22-08:14:13 194 [kdmremove]
root 0 0 00:00:00 22-08:14:13 195 [kstriped]
root 0 0 00:00:00 22-08:14:11 734 [scsi_eh_0]
root 0 0 00:00:00 22-08:14:11 735 [scsi_wq_0]
root 0 0 00:00:00 22-08:14:11 748 [scsi_eh_1]
root 0 0 00:00:00 22-08:14:11 749 [scsi_eh_2]
root 0 0 00:00:00 22-08:14:11 750 [scsi_eh_3]
root 0 0 00:00:00 22-08:14:11 751 [scsi_eh_4]
root 0 0 00:00:00 22-08:14:11 752 [scsi_eh_5]
root 0 0 00:00:00 22-08:14:11 753 [scsi_eh_6]
root 0 0 00:03:38 22-08:14:10 947 [md1_raid1]
root 0 0 00:00:23 22-08:14:09 1008 [jbd2/md1-8]
root 0 0 00:00:00 22-08:14:09 1009 [ext4-dio-unwrit]
root 11284 512 00:00:05 22-08:14:08 1102 /sbin/udevd -d
root 0 0 00:05:37 22-08:14:08 1222 [edac-poller]
root 0 0 00:02:36 22-08:14:08 1255 [md2_raid1]
root 0 0 00:29:41 22-08:14:07 1261 [md3_raid1]
root 0 0 00:04:22 22-08:14:07 1264 [md4_raid1]
root 0 0 03:01:21 22-08:14:07 1268 [md5_raid1]
root 0 0 00:00:26 22-08:14:07 1301 [md0_raid1]
root 0 0 00:00:35 22-08:14:05 1832 [flush-9:2]
root 0 0 00:01:56 22-08:14:05 1833 [flush-9:3]
root 0 0 00:03:52 22-08:14:05 1835 [flush-9:5]
root 0 0 00:00:00 22-08:14:05 1872 [jbd2/md0-8]
root 0 0 00:00:00 22-08:14:05 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 22-08:14:05 1876 [xfs_mru_cache]
root 0 0 00:00:00 22-08:14:05 1877 [xfslogd/0]
root 0 0 00:00:00 22-08:14:05 1878 [xfslogd/1]
root 0 0 00:17:08 22-08:14:05 1879 [xfslogd/2]
root 0 0 00:00:00 22-08:14:05 1880 [xfslogd/3]
root 0 0 00:00:43 22-08:14:05 1881 [xfslogd/4]
root 0 0 00:00:00 22-08:14:05 1882 [xfslogd/5]
root 0 0 00:00:00 22-08:14:05 1883 [xfslogd/6]
root 0 0 00:00:00 22-08:14:05 1884 [xfslogd/7]
root 0 0 00:00:00 22-08:14:05 1885 [xfsdatad/0]
root 0 0 00:00:00 22-08:14:05 1886 [xfsdatad/1]
root 0 0 00:09:15 22-08:14:05 1887 [xfsdatad/2]
root 0 0 00:00:00 22-08:14:05 1888 [xfsdatad/3]
root 0 0 00:05:33 22-08:14:05 1889 [xfsdatad/4]
root 0 0 00:00:00 22-08:14:05 1890 [xfsdatad/5]
root 0 0 00:00:00 22-08:14:05 1891 [xfsdatad/6]
root 0 0 00:00:00 22-08:14:05 1892 [xfsdatad/7]
root 0 0 00:00:00 22-08:14:05 1893 [xfsconvertd/0]
root 0 0 00:00:00 22-08:14:05 1894 [xfsconvertd/1]
root 0 0 00:00:00 22-08:14:05 1895 [xfsconvertd/2]
root 0 0 00:00:00 22-08:14:05 1896 [xfsconvertd/3]
root 0 0 00:00:00 22-08:14:05 1897 [xfsconvertd/4]
root 0 0 00:00:00 22-08:14:05 1898 [xfsconvertd/5]
root 0 0 00:00:00 22-08:14:05 1899 [xfsconvertd/6]
root 0 0 00:00:00 22-08:14:05 1900 [xfsconvertd/7]
root 0 0 00:00:00 22-08:14:05 1901 [xfsalloc/0]
root 0 0 00:00:00 22-08:14:05 1902 [xfsalloc/1]
root 0 0 00:00:00 22-08:14:05 1903 [xfsalloc/2]
root 0 0 00:00:00 22-08:14:05 1904 [xfsalloc/3]
root 0 0 00:00:00 22-08:14:05 1905 [xfsalloc/4]
root 0 0 00:00:00 22-08:14:05 1906 [xfsalloc/5]
root 0 0 00:00:00 22-08:14:05 1907 [xfsalloc/6]
root 0 0 00:00:00 22-08:14:05 1908 [xfsalloc/7]
root 0 0 00:00:08 22-08:14:05 1909 [xfseofblocks/0]
root 0 0 00:00:00 22-08:14:05 1910 [xfseofblocks/1]
root 0 0 00:00:00 22-08:14:05 1911 [xfseofblocks/2]
root 0 0 00:00:01 22-08:14:05 1912 [xfseofblocks/3]
root 0 0 00:00:00 22-08:14:05 1913 [xfseofblocks/4]
root 0 0 00:00:00 22-08:14:05 1914 [xfseofblocks/5]
root 0 0 00:00:00 22-08:14:05 1915 [xfseofblocks/6]
root 0 0 00:00:01 22-08:14:05 1916 [xfseofblocks/7]
root 0 0 00:04:24 22-08:14:05 1917 [xfsbufd/md5]
root 0 0 00:03:02 22-08:14:05 1918 [xfs-cil/md5]
root 0 0 00:02:05 22-08:14:05 1919 [xfssyncd/md5]
root 0 0 00:52:40 22-08:14:05 1920 [xfsaild/md5]
root 0 0 00:00:27 22-08:14:04 1921 [jbd2/md2-8]
root 0 0 00:00:00 22-08:14:04 1922 [ext4-dio-unwrit]
root 0 0 00:01:33 22-08:14:04 1923 [xfsbufd/md4]
root 0 0 00:00:05 22-08:14:04 1924 [xfs-cil/md4]
root 0 0 00:00:24 22-08:14:04 1925 [xfssyncd/md4]
root 0 0 00:50:55 22-08:14:04 1926 [xfsaild/md4]
root 0 0 00:05:15 22-08:14:04 1927 [xfsbufd/md3]
root 0 0 00:11:14 22-08:14:04 1928 [xfs-cil/md3]
root 0 0 00:00:38 22-08:14:04 1929 [xfssyncd/md3]
root 0 0 00:52:45 22-08:14:04 1930 [xfsaild/md3]
root 0 0 00:00:12 22-08:14:03 1986 [kauditd]
root 29764 708 00:00:26 22-08:13:45 2241 auditd
root 250624 14352 00:31:30 22-08:13:45 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:09:22 22-08:13:45 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30800 00:11:42 22-08:13:44 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:01 22-08:13:44 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 22-08:13:44 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:05:59 22-08:13:43 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:07 22-08:13:43 2479 /usr/sbin/sshd
root 21712 720 00:00:04 22-08:13:43 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 22-08:13:43 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1236076 80-10:06:41 22-08:13:42 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2024 00:00:12 22-08:13:38 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2004 00:00:13 22-08:13:38 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:13 22-08:13:38 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:12 22-08:13:38 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:13 22-08:13:38 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:03:27 22-08:13:33 3211 sendmail: accepting connections
smmsp 78752 780 00:00:29 22-08:13:33 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 564572 34168 00:10:18 22-08:13:26 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:25 22-08:13:26 3244 crond
root 107544 316 00:00:01 22-08:13:24 3296 pure-ftpd (SERVER) 
root 63224 2984 00:01:42 22-08:13:10 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 472 00:00:00 22-08:13:09 3361 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 22-08:13:09 3363 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 22-08:13:09 3365 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 22-08:13:09 3367 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 22-08:13:09 3369 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 22-08:13:09 3371 /sbin/mingetty /dev/tty6
root 10644 588 00:00:16 22-08:13:09 3372 /sbin/udevd -d
root 11280 428 00:00:00 22-08:13:09 3373 /sbin/udevd -d
root 0 0 01:03:23 22-08:11:14 3716 [kipmi0]
root 0 0 00:00:18 21-06:38:25 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 21-06:38:25 13330 [xfs-cil/sdc1]
root 0 0 00:01:33 21-06:38:25 13331 [xfssyncd/sdc1]
root 0 0 00:48:26 21-06:38:25 13332 [xfsaild/sdc1]
root 19260 792 00:00:01 19:40:47 19778 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 19:40:47 19780 dovecot/anvil
root 13108 1196 00:00:00 19:40:47 19781 dovecot/log
root 266560 74716 00:00:23 17:38:24 40044 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270292 78436 00:00:15 17:38:20 40045 spamd child
root 266560 72204 00:00:00 17:38:20 40047 spamd child
root 0 0 00:00:00 03:53:59 173815 [flush-8:32]
root 0 0 00:00:00 03:18:07 179389 [flush-9:4]
root 0 0 00:00:23 21-11:58:55 203424 [flush-9:1]
apache 586780 91748 00:00:21 23:27 207119 /usr/sbin/httpd -DSSL
apache 584692 86644 00:00:09 10:57 208993 /usr/sbin/httpd -DSSL
apache 585352 90852 00:00:09 10:55 209009 /usr/sbin/httpd -DSSL
apache 584720 85148 00:00:06 08:43 209314 /usr/sbin/httpd -DSSL
apache 586984 65204 00:00:06 08:30 209328 /usr/sbin/httpd -DSSL
apache 588688 79124 00:00:07 08:29 209334 /usr/sbin/httpd -DSSL
apache 586548 95484 00:00:06 07:34 209514 /usr/sbin/httpd -DSSL
apache 584456 62564 00:00:05 07:33 209515 /usr/sbin/httpd -DSSL
apache 586816 75152 00:00:05 07:33 209516 /usr/sbin/httpd -DSSL
apache 584908 84752 00:00:06 07:14 209523 /usr/sbin/httpd -DSSL
apache 584984 83848 00:00:06 07:12 209536 /usr/sbin/httpd -DSSL
apache 586548 75988 00:00:05 07:12 209537 /usr/sbin/httpd -DSSL
apache 590144 99176 00:00:07 07:11 209540 /usr/sbin/httpd -DSSL
apache 586684 74380 00:00:04 07:11 209541 /usr/sbin/httpd -DSSL
apache 597724 88920 00:00:08 07:11 209543 /usr/sbin/httpd -DSSL
apache 583608 79024 00:00:05 07:11 209544 /usr/sbin/httpd -DSSL
apache 585556 73736 00:00:06 07:11 209545 /usr/sbin/httpd -DSSL
apache 586680 75796 00:00:05 07:11 209546 /usr/sbin/httpd -DSSL
apache 586132 96124 00:00:07 07:11 209547 /usr/sbin/httpd -DSSL
apache 593220 88972 00:00:07 07:11 209552 /usr/sbin/httpd -DSSL
apache 606672 98372 00:00:08 07:11 209554 /usr/sbin/httpd -DSSL
root 95864 3356 00:00:00 06:58 209556 sendmail: server syn-208-105-193-045.biz.spectrum.com [208.105.193.45] cmd read
apache 597000 80156 00:00:02 02:05 210703 /usr/sbin/httpd -DSSL
root 96120 3588 00:00:00 00:32 210776 sendmail: ./4BKBMA6q118803 serveursbs.theix.fr.: user open
root 110772 2076 00:00:00 00:00 211123 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:00 211149 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:00 211150 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:00 211151 cat
root 110900 1172 00:00:00 00:00 211177 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:00 211178 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:00 211179 tr -s 

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-21 22:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e48a0c9986

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1734656217
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:05 20-11:04:58 1 /sbin/init
root 0 0 00:00:00 20-11:04:58 2 [kthreadd]
root 0 0 01:26:24 20-11:04:58 3 [migration/0]
root 0 0 00:04:50 20-11:04:58 4 [ksoftirqd/0]
root 0 0 00:00:00 20-11:04:58 5 [stopper/0]
root 0 0 00:02:33 20-11:04:58 6 [watchdog/0]
root 0 0 00:41:21 20-11:04:58 7 [migration/1]
root 0 0 00:00:00 20-11:04:58 8 [stopper/1]
root 0 0 00:04:43 20-11:04:58 9 [ksoftirqd/1]
root 0 0 00:02:56 20-11:04:58 10 [watchdog/1]
root 0 0 01:52:17 20-11:04:58 11 [migration/2]
root 0 0 00:00:00 20-11:04:58 12 [stopper/2]
root 0 0 00:03:07 20-11:04:58 13 [ksoftirqd/2]
root 0 0 00:02:06 20-11:04:58 14 [watchdog/2]
root 0 0 00:23:14 20-11:04:58 15 [migration/3]
root 0 0 00:00:00 20-11:04:58 16 [stopper/3]
root 0 0 00:03:45 20-11:04:58 17 [ksoftirqd/3]
root 0 0 00:02:38 20-11:04:58 18 [watchdog/3]
root 0 0 01:11:25 20-11:04:58 19 [migration/4]
root 0 0 00:00:00 20-11:04:58 20 [stopper/4]
root 0 0 00:02:49 20-11:04:58 21 [ksoftirqd/4]
root 0 0 00:01:18 20-11:04:58 22 [watchdog/4]
root 0 0 00:35:04 20-11:04:58 23 [migration/5]
root 0 0 00:00:00 20-11:04:58 24 [stopper/5]
root 0 0 00:02:26 20-11:04:58 25 [ksoftirqd/5]
root 0 0 00:01:52 20-11:04:58 26 [watchdog/5]
root 0 0 00:21:56 20-11:04:58 27 [migration/6]
root 0 0 00:00:00 20-11:04:58 28 [stopper/6]
root 0 0 00:02:22 20-11:04:58 29 [ksoftirqd/6]
root 0 0 00:01:42 20-11:04:58 30 [watchdog/6]
root 0 0 00:16:23 20-11:04:58 31 [migration/7]
root 0 0 00:00:00 20-11:04:58 32 [stopper/7]
root 0 0 00:02:36 20-11:04:58 33 [ksoftirqd/7]
root 0 0 00:01:36 20-11:04:58 34 [watchdog/7]
root 0 0 00:15:17 20-11:04:58 35 [events/0]
root 0 0 00:13:16 20-11:04:58 36 [events/1]
root 0 0 00:09:03 20-11:04:58 37 [events/2]
root 0 0 00:13:48 20-11:04:58 38 [events/3]
root 0 0 00:06:06 20-11:04:58 39 [events/4]
root 0 0 00:07:41 20-11:04:58 40 [events/5]
root 0 0 00:08:22 20-11:04:58 41 [events/6]
root 0 0 00:09:10 20-11:04:58 42 [events/7]
root 0 0 00:00:00 20-11:04:58 43 [events/0]
root 0 0 00:00:00 20-11:04:58 44 [events/1]
root 0 0 00:00:00 20-11:04:58 45 [events/2]
root 0 0 00:00:00 20-11:04:58 46 [events/3]
root 0 0 00:00:00 20-11:04:58 47 [events/4]
root 0 0 00:00:00 20-11:04:58 48 [events/5]
root 0 0 00:00:00 20-11:04:58 49 [events/6]
root 0 0 00:00:00 20-11:04:58 50 [events/7]
root 0 0 00:00:00 20-11:04:58 51 [events_long/0]
root 0 0 00:00:00 20-11:04:58 52 [events_long/1]
root 0 0 00:00:00 20-11:04:58 53 [events_long/2]
root 0 0 00:00:00 20-11:04:58 54 [events_long/3]
root 0 0 00:00:00 20-11:04:58 55 [events_long/4]
root 0 0 00:00:00 20-11:04:58 56 [events_long/5]
root 0 0 00:00:00 20-11:04:58 57 [events_long/6]
root 0 0 00:00:00 20-11:04:58 58 [events_long/7]
root 0 0 00:00:00 20-11:04:58 59 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 60 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 61 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 62 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 63 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 64 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 65 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 66 [events_power_ef]
root 0 0 00:00:00 20-11:04:58 67 [cgroup]
root 0 0 00:00:00 20-11:04:58 68 [khelper]
root 0 0 00:00:00 20-11:04:58 69 [netns]
root 0 0 00:00:00 20-11:04:58 70 [async/mgr]
root 0 0 00:00:00 20-11:04:58 71 [pm]
root 0 0 00:00:51 20-11:04:58 72 [sync_supers]
root 0 0 00:00:01 20-11:04:58 73 [bdi-default]
root 0 0 00:00:00 20-11:04:58 74 [kintegrityd/0]
root 0 0 00:00:00 20-11:04:58 75 [kintegrityd/1]
root 0 0 00:00:00 20-11:04:58 76 [kintegrityd/2]
root 0 0 00:00:00 20-11:04:58 77 [kintegrityd/3]
root 0 0 00:00:00 20-11:04:58 78 [kintegrityd/4]
root 0 0 00:00:00 20-11:04:58 79 [kintegrityd/5]
root 0 0 00:00:00 20-11:04:58 80 [kintegrityd/6]
root 0 0 00:00:00 20-11:04:58 81 [kintegrityd/7]
root 0 0 00:00:51 20-11:04:58 82 [kblockd/0]
root 0 0 00:00:18 20-11:04:58 83 [kblockd/1]
root 0 0 01:14:44 20-11:04:58 84 [kblockd/2]
root 0 0 00:00:05 20-11:04:58 85 [kblockd/3]
root 0 0 00:25:28 20-11:04:58 86 [kblockd/4]
root 0 0 00:00:39 20-11:04:58 87 [kblockd/5]
root 0 0 00:00:12 20-11:04:58 88 [kblockd/6]
root 0 0 00:00:05 20-11:04:58 89 [kblockd/7]
root 0 0 00:00:00 20-11:04:58 90 [kacpid]
root 0 0 00:00:00 20-11:04:58 91 [kacpi_notify]
root 0 0 00:00:00 20-11:04:58 92 [kacpi_hotplug]
root 0 0 00:00:00 20-11:04:58 93 [ata_aux]
root 0 0 00:00:00 20-11:04:58 94 [ata_sff/0]
root 0 0 00:00:00 20-11:04:58 95 [ata_sff/1]
root 0 0 00:00:00 20-11:04:58 96 [ata_sff/2]
root 0 0 00:00:00 20-11:04:58 97 [ata_sff/3]
root 0 0 00:00:00 20-11:04:58 98 [ata_sff/4]
root 0 0 00:00:00 20-11:04:58 99 [ata_sff/5]
root 0 0 00:00:00 20-11:04:58 100 [ata_sff/6]
root 0 0 00:00:00 20-11:04:58 101 [ata_sff/7]
root 0 0 00:00:00 20-11:04:58 102 [ksuspend_usbd]
root 0 0 00:00:00 20-11:04:58 103 [khubd]
root 0 0 00:00:00 20-11:04:58 104 [kseriod]
root 0 0 00:00:00 20-11:04:58 105 [md/0]
root 0 0 00:00:00 20-11:04:58 106 [md/1]
root 0 0 00:00:00 20-11:04:58 107 [md/2]
root 0 0 00:00:00 20-11:04:58 108 [md/3]
root 0 0 00:00:00 20-11:04:58 109 [md/4]
root 0 0 00:00:00 20-11:04:58 110 [md/5]
root 0 0 00:00:00 20-11:04:58 111 [md/6]
root 0 0 00:00:00 20-11:04:58 112 [md/7]
root 0 0 00:00:00 20-11:04:58 113 [md_misc/0]
root 0 0 00:00:00 20-11:04:58 114 [md_misc/1]
root 0 0 00:00:00 20-11:04:58 115 [md_misc/2]
root 0 0 00:00:00 20-11:04:58 116 [md_misc/3]
root 0 0 00:00:00 20-11:04:58 117 [md_misc/4]
root 0 0 00:00:00 20-11:04:58 118 [md_misc/5]
root 0 0 00:00:00 20-11:04:58 119 [md_misc/6]
root 0 0 00:00:00 20-11:04:58 120 [md_misc/7]
root 0 0 00:00:00 20-11:04:58 121 [linkwatch]
root 0 0 00:00:04 20-11:04:57 124 [khungtaskd]
root 0 0 00:53:06 20-11:04:57 125 [kswapd1]
root 0 0 00:00:00 20-11:04:57 126 [ksmd]
root 0 0 00:29:29 20-11:04:57 127 [khugepaged]
root 0 0 00:00:00 20-11:04:57 128 [aio/0]
root 0 0 00:00:00 20-11:04:57 129 [aio/1]
root 0 0 00:00:00 20-11:04:57 130 [aio/2]
root 0 0 00:00:00 20-11:04:57 131 [aio/3]
root 0 0 00:00:00 20-11:04:57 132 [aio/4]
root 0 0 00:00:00 20-11:04:57 133 [aio/5]
root 0 0 00:00:00 20-11:04:57 134 [aio/6]
root 0 0 00:00:00 20-11:04:57 135 [aio/7]
root 0 0 00:00:00 20-11:04:57 136 [crypto/0]
root 0 0 00:00:00 20-11:04:57 137 [crypto/1]
root 0 0 00:00:00 20-11:04:57 138 [crypto/2]
root 0 0 00:00:00 20-11:04:57 139 [crypto/3]
root 0 0 00:00:00 20-11:04:57 140 [crypto/4]
root 0 0 00:00:00 20-11:04:57 141 [crypto/5]
root 0 0 00:00:00 20-11:04:57 142 [crypto/6]
root 0 0 00:00:00 20-11:04:57 143 [crypto/7]
root 0 0 00:00:00 20-11:04:57 150 [kthrotld/0]
root 0 0 00:00:00 20-11:04:57 151 [kthrotld/1]
root 0 0 00:00:00 20-11:04:57 152 [kthrotld/2]
root 0 0 00:00:00 20-11:04:57 153 [kthrotld/3]
root 0 0 00:00:00 20-11:04:57 154 [kthrotld/4]
root 0 0 00:00:00 20-11:04:57 155 [kthrotld/5]
root 0 0 00:00:00 20-11:04:57 156 [kthrotld/6]
root 0 0 00:00:00 20-11:04:57 157 [kthrotld/7]
root 0 0 00:00:00 20-11:04:57 160 [kpsmoused]
root 0 0 00:00:00 20-11:04:57 161 [usbhid_resumer]
root 0 0 00:00:00 20-11:04:57 162 [deferwq]
root 0 0 00:00:00 20-11:04:57 194 [kdmremove]
root 0 0 00:00:00 20-11:04:57 195 [kstriped]
root 0 0 00:00:00 20-11:04:55 734 [scsi_eh_0]
root 0 0 00:00:00 20-11:04:55 735 [scsi_wq_0]
root 0 0 00:00:00 20-11:04:55 748 [scsi_eh_1]
root 0 0 00:00:00 20-11:04:55 749 [scsi_eh_2]
root 0 0 00:00:00 20-11:04:55 750 [scsi_eh_3]
root 0 0 00:00:00 20-11:04:55 751 [scsi_eh_4]
root 0 0 00:00:00 20-11:04:55 752 [scsi_eh_5]
root 0 0 00:00:00 20-11:04:55 753 [scsi_eh_6]
root 0 0 00:03:29 20-11:04:54 947 [md1_raid1]
root 0 0 00:00:21 20-11:04:53 1008 [jbd2/md1-8]
root 0 0 00:00:00 20-11:04:53 1009 [ext4-dio-unwrit]
root 11284 512 00:00:04 20-11:04:52 1102 /sbin/udevd -d
root 0 0 00:04:46 20-11:04:52 1222 [edac-poller]
root 0 0 00:02:23 20-11:04:52 1255 [md2_raid1]
root 0 0 00:29:04 20-11:04:51 1261 [md3_raid1]
root 0 0 00:04:01 20-11:04:51 1264 [md4_raid1]
root 0 0 02:51:47 20-11:04:51 1268 [md5_raid1]
root 0 0 00:00:26 20-11:04:51 1301 [md0_raid1]
root 0 0 00:00:30 20-11:04:49 1832 [flush-9:2]
root 0 0 00:01:44 20-11:04:49 1833 [flush-9:3]
root 0 0 00:03:31 20-11:04:49 1835 [flush-9:5]
root 0 0 00:00:00 20-11:04:49 1872 [jbd2/md0-8]
root 0 0 00:00:00 20-11:04:49 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 20-11:04:49 1876 [xfs_mru_cache]
root 0 0 00:00:00 20-11:04:49 1877 [xfslogd/0]
root 0 0 00:00:00 20-11:04:49 1878 [xfslogd/1]
root 0 0 00:16:47 20-11:04:49 1879 [xfslogd/2]
root 0 0 00:00:00 20-11:04:49 1880 [xfslogd/3]
root 0 0 00:00:41 20-11:04:49 1881 [xfslogd/4]
root 0 0 00:00:00 20-11:04:49 1882 [xfslogd/5]
root 0 0 00:00:00 20-11:04:49 1883 [xfslogd/6]
root 0 0 00:00:00 20-11:04:49 1884 [xfslogd/7]
root 0 0 00:00:00 20-11:04:49 1885 [xfsdatad/0]
root 0 0 00:00:00 20-11:04:49 1886 [xfsdatad/1]
root 0 0 00:09:09 20-11:04:49 1887 [xfsdatad/2]
root 0 0 00:00:00 20-11:04:49 1888 [xfsdatad/3]
root 0 0 00:05:32 20-11:04:49 1889 [xfsdatad/4]
root 0 0 00:00:00 20-11:04:49 1890 [xfsdatad/5]
root 0 0 00:00:00 20-11:04:49 1891 [xfsdatad/6]
root 0 0 00:00:00 20-11:04:49 1892 [xfsdatad/7]
root 0 0 00:00:00 20-11:04:49 1893 [xfsconvertd/0]
root 0 0 00:00:00 20-11:04:49 1894 [xfsconvertd/1]
root 0 0 00:00:00 20-11:04:49 1895 [xfsconvertd/2]
root 0 0 00:00:00 20-11:04:49 1896 [xfsconvertd/3]
root 0 0 00:00:00 20-11:04:49 1897 [xfsconvertd/4]
root 0 0 00:00:00 20-11:04:49 1898 [xfsconvertd/5]
root 0 0 00:00:00 20-11:04:49 1899 [xfsconvertd/6]
root 0 0 00:00:00 20-11:04:49 1900 [xfsconvertd/7]
root 0 0 00:00:00 20-11:04:49 1901 [xfsalloc/0]
root 0 0 00:00:00 20-11:04:49 1902 [xfsalloc/1]
root 0 0 00:00:00 20-11:04:49 1903 [xfsalloc/2]
root 0 0 00:00:00 20-11:04:49 1904 [xfsalloc/3]
root 0 0 00:00:00 20-11:04:49 1905 [xfsalloc/4]
root 0 0 00:00:00 20-11:04:49 1906 [xfsalloc/5]
root 0 0 00:00:00 20-11:04:49 1907 [xfsalloc/6]
root 0 0 00:00:00 20-11:04:49 1908 [xfsalloc/7]
root 0 0 00:00:07 20-11:04:49 1909 [xfseofblocks/0]
root 0 0 00:00:00 20-11:04:49 1910 [xfseofblocks/1]
root 0 0 00:00:00 20-11:04:49 1911 [xfseofblocks/2]
root 0 0 00:00:01 20-11:04:49 1912 [xfseofblocks/3]
root 0 0 00:00:00 20-11:04:49 1913 [xfseofblocks/4]
root 0 0 00:00:00 20-11:04:49 1914 [xfseofblocks/5]
root 0 0 00:00:00 20-11:04:49 1915 [xfseofblocks/6]
root 0 0 00:00:01 20-11:04:49 1916 [xfseofblocks/7]
root 0 0 00:03:47 20-11:04:49 1917 [xfsbufd/md5]
root 0 0 00:02:34 20-11:04:49 1918 [xfs-cil/md5]
root 0 0 00:01:54 20-11:04:49 1919 [xfssyncd/md5]
root 0 0 00:45:02 20-11:04:49 1920 [xfsaild/md5]
root 0 0 00:00:23 20-11:04:48 1921 [jbd2/md2-8]
root 0 0 00:00:00 20-11:04:48 1922 [ext4-dio-unwrit]
root 0 0 00:01:20 20-11:04:48 1923 [xfsbufd/md4]
root 0 0 00:00:04 20-11:04:48 1924 [xfs-cil/md4]
root 0 0 00:00:20 20-11:04:48 1925 [xfssyncd/md4]
root 0 0 00:43:35 20-11:04:48 1926 [xfsaild/md4]
root 0 0 00:04:49 20-11:04:48 1927 [xfsbufd/md3]
root 0 0 00:11:12 20-11:04:48 1928 [xfs-cil/md3]
root 0 0 00:00:35 20-11:04:48 1929 [xfssyncd/md3]
root 0 0 00:45:19 20-11:04:48 1930 [xfsaild/md3]
root 0 0 00:00:11 20-11:04:47 1986 [kauditd]
root 29764 708 00:00:23 20-11:04:29 2241 auditd
root 250624 13668 00:31:12 20-11:04:29 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:08:34 20-11:04:29 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30700 00:10:20 20-11:04:28 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:01 20-11:04:28 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 20-11:04:28 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:05:08 20-11:04:27 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:06 20-11:04:27 2479 /usr/sbin/sshd
root 21712 720 00:00:04 20-11:04:27 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 20-11:04:27 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1191484 72-15:56:28 20-11:04:26 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2024 00:00:11 20-11:04:22 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2004 00:00:11 20-11:04:22 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:12 20-11:04:22 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:11 20-11:04:22 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:12 20-11:04:22 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:03:04 20-11:04:17 3211 sendmail: accepting connections
smmsp 78752 780 00:00:26 20-11:04:17 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 564572 34168 00:09:03 20-11:04:10 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:23 20-11:04:10 3244 crond
root 107544 316 00:00:01 20-11:04:08 3296 pure-ftpd (SERVER) 
root 63224 2984 00:01:32 20-11:03:54 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 472 00:00:00 20-11:03:53 3361 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 20-11:03:53 3363 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 20-11:03:53 3365 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 20-11:03:53 3367 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 20-11:03:53 3369 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 20-11:03:53 3371 /sbin/mingetty /dev/tty6
root 10644 588 00:00:14 20-11:03:53 3372 /sbin/udevd -d
root 11280 428 00:00:00 20-11:03:53 3373 /sbin/udevd -d
root 0 0 00:58:27 20-11:01:58 3716 [kipmi0]
root 0 0 00:00:18 19-09:29:09 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 19-09:29:09 13330 [xfs-cil/sdc1]
root 0 0 00:01:30 19-09:29:09 13331 [xfssyncd/sdc1]
root 0 0 00:41:19 19-09:29:09 13332 [xfsaild/sdc1]
apache 590524 99248 00:00:49 33:26 13824 /usr/sbin/httpd -DSSL
apache 587620 102980 00:00:58 33:26 13827 /usr/sbin/httpd -DSSL
apache 591396 104352 00:01:09 30:24 14252 /usr/sbin/httpd -DSSL
apache 604292 111836 00:00:52 30:23 14253 /usr/sbin/httpd -DSSL
apache 624232 137660 00:01:00 30:04 14257 /usr/sbin/httpd -DSSL
apache 586952 101084 00:00:57 29:39 14738 /usr/sbin/httpd -DSSL
apache 666976 176904 00:01:06 27:22 14922 /usr/sbin/httpd -DSSL
apache 586688 95932 00:00:53 25:27 15347 /usr/sbin/httpd -DSSL
apache 608064 118200 00:00:54 25:27 15348 /usr/sbin/httpd -DSSL
apache 606784 120088 00:00:51 24:27 15502 /usr/sbin/httpd -DSSL
apache 594948 101268 00:00:44 23:27 15778 /usr/sbin/httpd -DSSL
apache 585556 91624 00:00:21 13:34 17172 /usr/sbin/httpd -DSSL
apache 600708 94512 00:00:21 13:34 17173 /usr/sbin/httpd -DSSL
apache 593816 93512 00:00:23 12:56 17305 /usr/sbin/httpd -DSSL
apache 586600 96144 00:00:21 12:51 17306 /usr/sbin/httpd -DSSL
apache 608132 105204 00:00:15 11:51 17536 /usr/sbin/httpd -DSSL
apache 587688 83268 00:00:20 11:50 17537 /usr/sbin/httpd -DSSL
apache 610156 108328 00:00:21 11:50 17538 /usr/sbin/httpd -DSSL
root 267588 74616 00:00:01 09:40 17716 spamd child
root 95864 3424 00:00:00 07:38 18047 sendmail: server vipturbo.com.br [191.36.157.125] (may be forged) cmd read
root 0 0 00:00:00 06:51 18163 [flush-9:4]
root 0 0 00:00:00 04:47 18541 [flush-8:32]
apache 604796 92232 00:00:06 04:10 18545 /usr/sbin/httpd -DSSL
apache 583996 87128 00:00:08 04:08 18548 /usr/sbin/httpd -DSSL
apache 595732 78592 00:00:09 04:08 18550 /usr/sbin/httpd -DSSL
apache 583024 53404 00:00:07 04:08 18551 /usr/sbin/httpd -DSSL
apache 573420 33200 00:00:00 00:12 18993 /usr/sbin/httpd -DSSL
root 110772 2072 00:00:00 00:01 19125 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 19147 /bin/bash /usr/bin/check_mk_agent
root 110772 1248 00:00:00 00:01 19148 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 19150 cat
root 110900 1172 00:00:00 00:01 19175 /bin/bash /usr/bin/check_mk_agent
root 13368 1016 00:00:00 00:01 19176 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 19177 tr -s 
root 19260 792 00:00:00 22:19:55 58724 /usr/sbin/dovecot
dovecot 12980 1048 00:00:00 22:19:55 58727 dovecot/anvil
root 13108 1196 00:00:00 22:19:55 58728 dovecot/log
root 266664 74804 00:01:14 2-20:15:59 106248 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 0 0 00:00:20 19-14:49:39 203424 [flush-9:1]
root 268728 76376 00:00:01 2-08:22:15 221049 spamd child

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-20 00:56

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e46f886f1e

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1734485694
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1048 00:00:05 18-11:42:55 1 /sbin/init
root 0 0 00:00:00 18-11:42:55 2 [kthreadd]
root 0 0 01:21:29 18-11:42:55 3 [migration/0]
root 0 0 00:04:09 18-11:42:55 4 [ksoftirqd/0]
root 0 0 00:00:00 18-11:42:55 5 [stopper/0]
root 0 0 00:02:18 18-11:42:55 6 [watchdog/0]
root 0 0 00:39:20 18-11:42:55 7 [migration/1]
root 0 0 00:00:00 18-11:42:55 8 [stopper/1]
root 0 0 00:04:00 18-11:42:55 9 [ksoftirqd/1]
root 0 0 00:02:37 18-11:42:55 10 [watchdog/1]
root 0 0 01:47:14 18-11:42:55 11 [migration/2]
root 0 0 00:00:00 18-11:42:55 12 [stopper/2]
root 0 0 00:02:36 18-11:42:55 13 [ksoftirqd/2]
root 0 0 00:01:51 18-11:42:55 14 [watchdog/2]
root 0 0 00:21:56 18-11:42:55 15 [migration/3]
root 0 0 00:00:00 18-11:42:55 16 [stopper/3]
root 0 0 00:03:11 18-11:42:55 17 [ksoftirqd/3]
root 0 0 00:02:22 18-11:42:55 18 [watchdog/3]
root 0 0 01:07:28 18-11:42:55 19 [migration/4]
root 0 0 00:00:00 18-11:42:55 20 [stopper/4]
root 0 0 00:02:25 18-11:42:55 21 [ksoftirqd/4]
root 0 0 00:01:09 18-11:42:55 22 [watchdog/4]
root 0 0 00:33:22 18-11:42:55 23 [migration/5]
root 0 0 00:00:00 18-11:42:55 24 [stopper/5]
root 0 0 00:02:04 18-11:42:55 25 [ksoftirqd/5]
root 0 0 00:01:43 18-11:42:55 26 [watchdog/5]
root 0 0 00:20:46 18-11:42:55 27 [migration/6]
root 0 0 00:00:00 18-11:42:55 28 [stopper/6]
root 0 0 00:02:00 18-11:42:55 29 [ksoftirqd/6]
root 0 0 00:01:31 18-11:42:55 30 [watchdog/6]
root 0 0 00:15:30 18-11:42:55 31 [migration/7]
root 0 0 00:00:00 18-11:42:55 32 [stopper/7]
root 0 0 00:02:13 18-11:42:55 33 [ksoftirqd/7]
root 0 0 00:01:27 18-11:42:55 34 [watchdog/7]
root 0 0 00:13:11 18-11:42:55 35 [events/0]
root 0 0 00:11:11 18-11:42:55 36 [events/1]
root 0 0 00:07:27 18-11:42:55 37 [events/2]
root 0 0 00:11:51 18-11:42:55 38 [events/3]
root 0 0 00:05:15 18-11:42:55 39 [events/4]
root 0 0 00:06:42 18-11:42:55 40 [events/5]
root 0 0 00:07:21 18-11:42:55 41 [events/6]
root 0 0 00:08:02 18-11:42:55 42 [events/7]
root 0 0 00:00:00 18-11:42:55 43 [events/0]
root 0 0 00:00:00 18-11:42:55 44 [events/1]
root 0 0 00:00:00 18-11:42:55 45 [events/2]
root 0 0 00:00:00 18-11:42:55 46 [events/3]
root 0 0 00:00:00 18-11:42:55 47 [events/4]
root 0 0 00:00:00 18-11:42:55 48 [events/5]
root 0 0 00:00:00 18-11:42:55 49 [events/6]
root 0 0 00:00:00 18-11:42:55 50 [events/7]
root 0 0 00:00:00 18-11:42:55 51 [events_long/0]
root 0 0 00:00:00 18-11:42:55 52 [events_long/1]
root 0 0 00:00:00 18-11:42:55 53 [events_long/2]
root 0 0 00:00:00 18-11:42:55 54 [events_long/3]
root 0 0 00:00:00 18-11:42:55 55 [events_long/4]
root 0 0 00:00:00 18-11:42:55 56 [events_long/5]
root 0 0 00:00:00 18-11:42:55 57 [events_long/6]
root 0 0 00:00:00 18-11:42:55 58 [events_long/7]
root 0 0 00:00:00 18-11:42:55 59 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 60 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 61 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 62 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 63 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 64 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 65 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 66 [events_power_ef]
root 0 0 00:00:00 18-11:42:55 67 [cgroup]
root 0 0 00:00:00 18-11:42:55 68 [khelper]
root 0 0 00:00:00 18-11:42:55 69 [netns]
root 0 0 00:00:00 18-11:42:55 70 [async/mgr]
root 0 0 00:00:00 18-11:42:55 71 [pm]
root 0 0 00:00:42 18-11:42:55 72 [sync_supers]
root 0 0 00:00:01 18-11:42:55 73 [bdi-default]
root 0 0 00:00:00 18-11:42:55 74 [kintegrityd/0]
root 0 0 00:00:00 18-11:42:55 75 [kintegrityd/1]
root 0 0 00:00:00 18-11:42:55 76 [kintegrityd/2]
root 0 0 00:00:00 18-11:42:55 77 [kintegrityd/3]
root 0 0 00:00:00 18-11:42:55 78 [kintegrityd/4]
root 0 0 00:00:00 18-11:42:55 79 [kintegrityd/5]
root 0 0 00:00:00 18-11:42:55 80 [kintegrityd/6]
root 0 0 00:00:00 18-11:42:55 81 [kintegrityd/7]
root 0 0 00:00:49 18-11:42:55 82 [kblockd/0]
root 0 0 00:00:17 18-11:42:55 83 [kblockd/1]
root 0 0 01:07:17 18-11:42:55 84 [kblockd/2]
root 0 0 00:00:05 18-11:42:55 85 [kblockd/3]
root 0 0 00:23:07 18-11:42:55 86 [kblockd/4]
root 0 0 00:00:37 18-11:42:55 87 [kblockd/5]
root 0 0 00:00:11 18-11:42:55 88 [kblockd/6]
root 0 0 00:00:05 18-11:42:55 89 [kblockd/7]
root 0 0 00:00:00 18-11:42:55 90 [kacpid]
root 0 0 00:00:00 18-11:42:55 91 [kacpi_notify]
root 0 0 00:00:00 18-11:42:55 92 [kacpi_hotplug]
root 0 0 00:00:00 18-11:42:55 93 [ata_aux]
root 0 0 00:00:00 18-11:42:55 94 [ata_sff/0]
root 0 0 00:00:00 18-11:42:55 95 [ata_sff/1]
root 0 0 00:00:00 18-11:42:55 96 [ata_sff/2]
root 0 0 00:00:00 18-11:42:55 97 [ata_sff/3]
root 0 0 00:00:00 18-11:42:55 98 [ata_sff/4]
root 0 0 00:00:00 18-11:42:55 99 [ata_sff/5]
root 0 0 00:00:00 18-11:42:55 100 [ata_sff/6]
root 0 0 00:00:00 18-11:42:55 101 [ata_sff/7]
root 0 0 00:00:00 18-11:42:55 102 [ksuspend_usbd]
root 0 0 00:00:00 18-11:42:55 103 [khubd]
root 0 0 00:00:00 18-11:42:55 104 [kseriod]
root 0 0 00:00:00 18-11:42:55 105 [md/0]
root 0 0 00:00:00 18-11:42:55 106 [md/1]
root 0 0 00:00:00 18-11:42:55 107 [md/2]
root 0 0 00:00:00 18-11:42:55 108 [md/3]
root 0 0 00:00:00 18-11:42:55 109 [md/4]
root 0 0 00:00:00 18-11:42:55 110 [md/5]
root 0 0 00:00:00 18-11:42:55 111 [md/6]
root 0 0 00:00:00 18-11:42:55 112 [md/7]
root 0 0 00:00:00 18-11:42:55 113 [md_misc/0]
root 0 0 00:00:00 18-11:42:55 114 [md_misc/1]
root 0 0 00:00:00 18-11:42:55 115 [md_misc/2]
root 0 0 00:00:00 18-11:42:55 116 [md_misc/3]
root 0 0 00:00:00 18-11:42:55 117 [md_misc/4]
root 0 0 00:00:00 18-11:42:55 118 [md_misc/5]
root 0 0 00:00:00 18-11:42:55 119 [md_misc/6]
root 0 0 00:00:00 18-11:42:55 120 [md_misc/7]
root 0 0 00:00:00 18-11:42:55 121 [linkwatch]
root 0 0 00:00:03 18-11:42:54 124 [khungtaskd]
root 0 0 00:49:45 18-11:42:54 125 [kswapd1]
root 0 0 00:00:00 18-11:42:54 126 [ksmd]
root 0 0 00:26:52 18-11:42:54 127 [khugepaged]
root 0 0 00:00:00 18-11:42:54 128 [aio/0]
root 0 0 00:00:00 18-11:42:54 129 [aio/1]
root 0 0 00:00:00 18-11:42:54 130 [aio/2]
root 0 0 00:00:00 18-11:42:54 131 [aio/3]
root 0 0 00:00:00 18-11:42:54 132 [aio/4]
root 0 0 00:00:00 18-11:42:54 133 [aio/5]
root 0 0 00:00:00 18-11:42:54 134 [aio/6]
root 0 0 00:00:00 18-11:42:54 135 [aio/7]
root 0 0 00:00:00 18-11:42:54 136 [crypto/0]
root 0 0 00:00:00 18-11:42:54 137 [crypto/1]
root 0 0 00:00:00 18-11:42:54 138 [crypto/2]
root 0 0 00:00:00 18-11:42:54 139 [crypto/3]
root 0 0 00:00:00 18-11:42:54 140 [crypto/4]
root 0 0 00:00:00 18-11:42:54 141 [crypto/5]
root 0 0 00:00:00 18-11:42:54 142 [crypto/6]
root 0 0 00:00:00 18-11:42:54 143 [crypto/7]
root 0 0 00:00:00 18-11:42:54 150 [kthrotld/0]
root 0 0 00:00:00 18-11:42:54 151 [kthrotld/1]
root 0 0 00:00:00 18-11:42:54 152 [kthrotld/2]
root 0 0 00:00:00 18-11:42:54 153 [kthrotld/3]
root 0 0 00:00:00 18-11:42:54 154 [kthrotld/4]
root 0 0 00:00:00 18-11:42:54 155 [kthrotld/5]
root 0 0 00:00:00 18-11:42:54 156 [kthrotld/6]
root 0 0 00:00:00 18-11:42:54 157 [kthrotld/7]
root 0 0 00:00:00 18-11:42:54 160 [kpsmoused]
root 0 0 00:00:00 18-11:42:54 161 [usbhid_resumer]
root 0 0 00:00:00 18-11:42:54 162 [deferwq]
root 0 0 00:00:00 18-11:42:54 194 [kdmremove]
root 0 0 00:00:00 18-11:42:54 195 [kstriped]
root 0 0 00:00:00 18-11:42:52 734 [scsi_eh_0]
root 0 0 00:00:00 18-11:42:52 735 [scsi_wq_0]
root 0 0 00:00:00 18-11:42:52 748 [scsi_eh_1]
root 0 0 00:00:00 18-11:42:52 749 [scsi_eh_2]
root 0 0 00:00:00 18-11:42:52 750 [scsi_eh_3]
root 0 0 00:00:00 18-11:42:52 751 [scsi_eh_4]
root 0 0 00:00:00 18-11:42:52 752 [scsi_eh_5]
root 0 0 00:00:00 18-11:42:52 753 [scsi_eh_6]
root 0 0 00:03:20 18-11:42:51 947 [md1_raid1]
root 0 0 00:00:19 18-11:42:50 1008 [jbd2/md1-8]
root 0 0 00:00:00 18-11:42:50 1009 [ext4-dio-unwrit]
root 11284 516 00:00:04 18-11:42:49 1102 /sbin/udevd -d
root 0 0 00:03:46 18-11:42:49 1222 [edac-poller]
root 0 0 00:02:03 18-11:42:49 1255 [md2_raid1]
root 0 0 00:27:56 18-11:42:48 1261 [md3_raid1]
root 0 0 00:03:38 18-11:42:48 1264 [md4_raid1]
root 0 0 02:41:56 18-11:42:48 1268 [md5_raid1]
root 0 0 00:00:26 18-11:42:48 1301 [md0_raid1]
root 0 0 00:00:23 18-11:42:46 1832 [flush-9:2]
root 0 0 00:01:28 18-11:42:46 1833 [flush-9:3]
root 0 0 00:03:05 18-11:42:46 1835 [flush-9:5]
root 0 0 00:00:00 18-11:42:46 1872 [jbd2/md0-8]
root 0 0 00:00:00 18-11:42:46 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 18-11:42:46 1876 [xfs_mru_cache]
root 0 0 00:00:00 18-11:42:46 1877 [xfslogd/0]
root 0 0 00:00:00 18-11:42:46 1878 [xfslogd/1]
root 0 0 00:16:03 18-11:42:46 1879 [xfslogd/2]
root 0 0 00:00:00 18-11:42:46 1880 [xfslogd/3]
root 0 0 00:00:38 18-11:42:46 1881 [xfslogd/4]
root 0 0 00:00:00 18-11:42:46 1882 [xfslogd/5]
root 0 0 00:00:00 18-11:42:46 1883 [xfslogd/6]
root 0 0 00:00:00 18-11:42:46 1884 [xfslogd/7]
root 0 0 00:00:00 18-11:42:46 1885 [xfsdatad/0]
root 0 0 00:00:00 18-11:42:46 1886 [xfsdatad/1]
root 0 0 00:08:59 18-11:42:46 1887 [xfsdatad/2]
root 0 0 00:00:00 18-11:42:46 1888 [xfsdatad/3]
root 0 0 00:05:30 18-11:42:46 1889 [xfsdatad/4]
root 0 0 00:00:00 18-11:42:46 1890 [xfsdatad/5]
root 0 0 00:00:00 18-11:42:46 1891 [xfsdatad/6]
root 0 0 00:00:00 18-11:42:46 1892 [xfsdatad/7]
root 0 0 00:00:00 18-11:42:46 1893 [xfsconvertd/0]
root 0 0 00:00:00 18-11:42:46 1894 [xfsconvertd/1]
root 0 0 00:00:00 18-11:42:46 1895 [xfsconvertd/2]
root 0 0 00:00:00 18-11:42:46 1896 [xfsconvertd/3]
root 0 0 00:00:00 18-11:42:46 1897 [xfsconvertd/4]
root 0 0 00:00:00 18-11:42:46 1898 [xfsconvertd/5]
root 0 0 00:00:00 18-11:42:46 1899 [xfsconvertd/6]
root 0 0 00:00:00 18-11:42:46 1900 [xfsconvertd/7]
root 0 0 00:00:00 18-11:42:46 1901 [xfsalloc/0]
root 0 0 00:00:00 18-11:42:46 1902 [xfsalloc/1]
root 0 0 00:00:00 18-11:42:46 1903 [xfsalloc/2]
root 0 0 00:00:00 18-11:42:46 1904 [xfsalloc/3]
root 0 0 00:00:00 18-11:42:46 1905 [xfsalloc/4]
root 0 0 00:00:00 18-11:42:46 1906 [xfsalloc/5]
root 0 0 00:00:00 18-11:42:46 1907 [xfsalloc/6]
root 0 0 00:00:00 18-11:42:46 1908 [xfsalloc/7]
root 0 0 00:00:06 18-11:42:46 1909 [xfseofblocks/0]
root 0 0 00:00:00 18-11:42:46 1910 [xfseofblocks/1]
root 0 0 00:00:00 18-11:42:46 1911 [xfseofblocks/2]
root 0 0 00:00:00 18-11:42:46 1912 [xfseofblocks/3]
root 0 0 00:00:00 18-11:42:46 1913 [xfseofblocks/4]
root 0 0 00:00:00 18-11:42:46 1914 [xfseofblocks/5]
root 0 0 00:00:00 18-11:42:46 1915 [xfseofblocks/6]
root 0 0 00:00:00 18-11:42:46 1916 [xfseofblocks/7]
root 0 0 00:03:03 18-11:42:46 1917 [xfsbufd/md5]
root 0 0 00:02:05 18-11:42:46 1918 [xfs-cil/md5]
root 0 0 00:01:43 18-11:42:46 1919 [xfssyncd/md5]
root 0 0 00:35:42 18-11:42:46 1920 [xfsaild/md5]
root 0 0 00:00:19 18-11:42:45 1921 [jbd2/md2-8]
root 0 0 00:00:00 18-11:42:45 1922 [ext4-dio-unwrit]
root 0 0 00:01:07 18-11:42:45 1923 [xfsbufd/md4]
root 0 0 00:00:03 18-11:42:45 1924 [xfs-cil/md4]
root 0 0 00:00:16 18-11:42:45 1925 [xfssyncd/md4]
root 0 0 00:34:30 18-11:42:45 1926 [xfsaild/md4]
root 0 0 00:04:11 18-11:42:45 1927 [xfsbufd/md3]
root 0 0 00:10:58 18-11:42:45 1928 [xfs-cil/md3]
root 0 0 00:00:31 18-11:42:45 1929 [xfssyncd/md3]
root 0 0 00:35:54 18-11:42:45 1930 [xfsaild/md3]
root 0 0 00:00:09 18-11:42:44 1986 [kauditd]
root 29764 708 00:00:20 18-11:42:26 2241 auditd
root 250624 12952 00:30:23 18-11:42:26 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:07:42 18-11:42:26 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30700 00:08:50 18-11:42:25 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:01 18-11:42:25 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 18-11:42:25 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:04:08 18-11:42:24 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:05 18-11:42:24 2479 /usr/sbin/sshd
root 21712 720 00:00:03 18-11:42:24 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 18-11:42:24 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1203424 63-18:52:03 18-11:42:23 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2024 00:00:10 18-11:42:19 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2012 00:00:10 18-11:42:19 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:10 18-11:42:19 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:09 18-11:42:19 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:10 18-11:42:19 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:02:33 18-11:42:14 3211 sendmail: accepting connections
smmsp 78752 780 00:00:23 18-11:42:14 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 564572 34168 00:07:29 18-11:42:07 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:20 18-11:42:07 3244 crond
root 107544 316 00:00:01 18-11:42:05 3296 pure-ftpd (SERVER) 
root 63224 5036 00:01:20 18-11:41:51 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 18-11:41:50 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 18-11:41:50 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 18-11:41:50 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 18-11:41:50 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 18-11:41:50 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 18-11:41:50 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:13 18-11:41:50 3372 /sbin/udevd -d
root 11280 508 00:00:00 18-11:41:50 3373 /sbin/udevd -d
root 0 0 00:53:34 18-11:39:55 3716 [kipmi0]
root 0 0 00:00:18 17-10:07:06 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 17-10:07:06 13330 [xfs-cil/sdc1]
root 0 0 00:01:28 17-10:07:06 13331 [xfssyncd/sdc1]
root 0 0 00:32:28 17-10:07:06 13332 [xfsaild/sdc1]
root 16948 656 00:00:00 33:54 56575 /usr/sbin/anacron -s
apache 587224 87988 00:00:34 29:39 57386 /usr/sbin/httpd -DSSL
apache 587540 101952 00:00:36 29:32 57396 /usr/sbin/httpd -DSSL
apache 587108 88896 00:00:34 24:48 58369 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 16:48 59583 [flush-9:4]
root 0 0 00:00:00 16:43 59723 [flush-8:32]
apache 586148 80960 00:00:18 12:44 60321 /usr/sbin/httpd -DSSL
root 40060 2032 00:00:00 12:34 60435 dovecot/ssl-params
apache 583184 70568 00:00:04 05:30 61563 /usr/sbin/httpd -DSSL
apache 584064 77732 00:00:05 05:29 61564 /usr/sbin/httpd -DSSL
root 96628 5504 00:00:00 03:37 61849 sendmail: ./4BDESsvP004694 crc.co.jp.: client RCPT
apache 584172 79916 00:00:07 03:28 61850 /usr/sbin/httpd -DSSL
apache 593708 72484 00:00:07 03:18 61853 /usr/sbin/httpd -DSSL
apache 590292 75852 00:00:04 03:18 61854 /usr/sbin/httpd -DSSL
apache 585516 64804 00:00:03 03:17 61855 /usr/sbin/httpd -DSSL
apache 590828 76924 00:00:06 03:17 61856 /usr/sbin/httpd -DSSL
apache 584188 67392 00:00:04 03:17 61858 /usr/sbin/httpd -DSSL
root 96756 5620 00:00:00 02:37 61992 sendmail: ./4BD313qD133389 alt2.gmail-smtp-in.l.google.com.: user open
apache 582148 53764 00:00:03 02:37 62003 /usr/sbin/httpd -DSSL
apache 590060 69776 00:00:05 02:37 62004 /usr/sbin/httpd -DSSL
apache 582524 62540 00:00:02 02:35 62015 /usr/sbin/httpd -DSSL
apache 581312 33996 00:00:01 02:35 62016 /usr/sbin/httpd -DSSL
root 139904 1468 00:00:00 01:53 62019 CROND
root 144512 14620 00:00:00 01:53 62023 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/fashionsglobe/logs/access_log
root 9196 1148 00:00:00 01:53 62064 sh -c su -s /bin/sh fashionsglobe -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_fashionsglobe_logs_access_log\.conf\ \-o\ \\\/home\\\/fashionsglobe\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/fashionsglobe\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1464 00:00:00 01:53 62068 su -s /bin/sh fashionsglobe -c webalizer -c /etc/webmin/webalizer/home_fashionsglobe_logs_access_log.conf -o \/home\/fashionsglobe\/public_html\/stats -p \/home\/fashionsglobe\/logs\/access_log
fashionsglobe 45640 4852 00:00:37 01:53 62076 webalizer -c /etc/webmin/webalizer/home_fashionsglobe_logs_access_log.conf -o /home/fashionsglobe/public_html/stats -p /home/fashionsglobe/logs/access_log
root 96120 3740 00:00:00 01:37 62312 sendmail: ./4BDDi65O242040 mx.sogou.com.: user open
apache 585436 60776 00:00:02 01:19 62314 /usr/sbin/httpd -DSSL
apache 608100 86416 00:00:01 00:46 62315 /usr/sbin/httpd -DSSL
apache 579868 31660 00:00:00 00:45 62316 /usr/sbin/httpd -DSSL
apache 583168 48348 00:00:01 00:45 62317 /usr/sbin/httpd -DSSL
root 96120 3636 00:00:00 00:37 62318 sendmail: ./4BDCcRG0229703 shell.msen.com.: user open
root 110772 2080 00:00:00 00:01 62470 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:01 62492 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 62493 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 62495 cat
root 110900 1176 00:00:00 00:01 62520 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 62521 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 62522 tr -s 
root 19260 800 00:00:00 22:42:44 89052 /usr/sbin/dovecot
dovecot 12980 1076 00:00:00 22:42:44 89054 dovecot/anvil
root 13108 1192 00:00:00 22:42:44 89055 dovecot/log
root 266664 74800 00:00:21 20:53:56 106248 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270708 78960 00:00:29 20:53:52 106251 spamd child
root 0 0 00:00:16 17-15:27:36 203424 [flush-9:1]
root 268008 75760 00:00:00 09:00:12 221049 spamd child

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-18 01:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4ddc388bb

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1734306934
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1048 00:00:04 16-10:03:35 1 /sbin/init
root 0 0 00:00:00 16-10:03:35 2 [kthreadd]
root 0 0 01:11:33 16-10:03:35 3 [migration/0]
root 0 0 00:03:33 16-10:03:35 4 [ksoftirqd/0]
root 0 0 00:00:00 16-10:03:35 5 [stopper/0]
root 0 0 00:02:00 16-10:03:35 6 [watchdog/0]
root 0 0 00:34:28 16-10:03:35 7 [migration/1]
root 0 0 00:00:00 16-10:03:35 8 [stopper/1]
root 0 0 00:03:24 16-10:03:35 9 [ksoftirqd/1]
root 0 0 00:02:17 16-10:03:35 10 [watchdog/1]
root 0 0 01:34:54 16-10:03:35 11 [migration/2]
root 0 0 00:00:00 16-10:03:35 12 [stopper/2]
root 0 0 00:02:12 16-10:03:35 13 [ksoftirqd/2]
root 0 0 00:01:38 16-10:03:35 14 [watchdog/2]
root 0 0 00:19:08 16-10:03:35 15 [migration/3]
root 0 0 00:00:00 16-10:03:35 16 [stopper/3]
root 0 0 00:02:41 16-10:03:35 17 [ksoftirqd/3]
root 0 0 00:02:03 16-10:03:35 18 [watchdog/3]
root 0 0 00:59:31 16-10:03:35 19 [migration/4]
root 0 0 00:00:00 16-10:03:35 20 [stopper/4]
root 0 0 00:02:04 16-10:03:35 21 [ksoftirqd/4]
root 0 0 00:00:59 16-10:03:35 22 [watchdog/4]
root 0 0 00:29:28 16-10:03:35 23 [migration/5]
root 0 0 00:00:00 16-10:03:35 24 [stopper/5]
root 0 0 00:01:47 16-10:03:35 25 [ksoftirqd/5]
root 0 0 00:01:29 16-10:03:35 26 [watchdog/5]
root 0 0 00:18:13 16-10:03:35 27 [migration/6]
root 0 0 00:00:00 16-10:03:35 28 [stopper/6]
root 0 0 00:01:43 16-10:03:35 29 [ksoftirqd/6]
root 0 0 00:01:19 16-10:03:35 30 [watchdog/6]
root 0 0 00:13:37 16-10:03:35 31 [migration/7]
root 0 0 00:00:00 16-10:03:35 32 [stopper/7]
root 0 0 00:01:55 16-10:03:35 33 [ksoftirqd/7]
root 0 0 00:01:16 16-10:03:35 34 [watchdog/7]
root 0 0 00:11:32 16-10:03:35 35 [events/0]
root 0 0 00:09:44 16-10:03:35 36 [events/1]
root 0 0 00:06:28 16-10:03:35 37 [events/2]
root 0 0 00:10:18 16-10:03:35 38 [events/3]
root 0 0 00:04:34 16-10:03:35 39 [events/4]
root 0 0 00:05:54 16-10:03:35 40 [events/5]
root 0 0 00:06:27 16-10:03:35 41 [events/6]
root 0 0 00:07:04 16-10:03:35 42 [events/7]
root 0 0 00:00:00 16-10:03:35 43 [events/0]
root 0 0 00:00:00 16-10:03:35 44 [events/1]
root 0 0 00:00:00 16-10:03:35 45 [events/2]
root 0 0 00:00:00 16-10:03:35 46 [events/3]
root 0 0 00:00:00 16-10:03:35 47 [events/4]
root 0 0 00:00:00 16-10:03:35 48 [events/5]
root 0 0 00:00:00 16-10:03:35 49 [events/6]
root 0 0 00:00:00 16-10:03:35 50 [events/7]
root 0 0 00:00:00 16-10:03:35 51 [events_long/0]
root 0 0 00:00:00 16-10:03:35 52 [events_long/1]
root 0 0 00:00:00 16-10:03:35 53 [events_long/2]
root 0 0 00:00:00 16-10:03:35 54 [events_long/3]
root 0 0 00:00:00 16-10:03:35 55 [events_long/4]
root 0 0 00:00:00 16-10:03:35 56 [events_long/5]
root 0 0 00:00:00 16-10:03:35 57 [events_long/6]
root 0 0 00:00:00 16-10:03:35 58 [events_long/7]
root 0 0 00:00:00 16-10:03:35 59 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 60 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 61 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 62 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 63 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 64 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 65 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 66 [events_power_ef]
root 0 0 00:00:00 16-10:03:35 67 [cgroup]
root 0 0 00:00:00 16-10:03:35 68 [khelper]
root 0 0 00:00:00 16-10:03:35 69 [netns]
root 0 0 00:00:00 16-10:03:35 70 [async/mgr]
root 0 0 00:00:00 16-10:03:35 71 [pm]
root 0 0 00:00:37 16-10:03:35 72 [sync_supers]
root 0 0 00:00:01 16-10:03:35 73 [bdi-default]
root 0 0 00:00:00 16-10:03:35 74 [kintegrityd/0]
root 0 0 00:00:00 16-10:03:35 75 [kintegrityd/1]
root 0 0 00:00:00 16-10:03:35 76 [kintegrityd/2]
root 0 0 00:00:00 16-10:03:35 77 [kintegrityd/3]
root 0 0 00:00:00 16-10:03:35 78 [kintegrityd/4]
root 0 0 00:00:00 16-10:03:35 79 [kintegrityd/5]
root 0 0 00:00:00 16-10:03:35 80 [kintegrityd/6]
root 0 0 00:00:00 16-10:03:35 81 [kintegrityd/7]
root 0 0 00:00:44 16-10:03:35 82 [kblockd/0]
root 0 0 00:00:15 16-10:03:35 83 [kblockd/1]
root 0 0 00:59:27 16-10:03:35 84 [kblockd/2]
root 0 0 00:00:05 16-10:03:35 85 [kblockd/3]
root 0 0 00:20:54 16-10:03:35 86 [kblockd/4]
root 0 0 00:00:34 16-10:03:35 87 [kblockd/5]
root 0 0 00:00:10 16-10:03:35 88 [kblockd/6]
root 0 0 00:00:04 16-10:03:35 89 [kblockd/7]
root 0 0 00:00:00 16-10:03:35 90 [kacpid]
root 0 0 00:00:00 16-10:03:35 91 [kacpi_notify]
root 0 0 00:00:00 16-10:03:35 92 [kacpi_hotplug]
root 0 0 00:00:00 16-10:03:35 93 [ata_aux]
root 0 0 00:00:00 16-10:03:35 94 [ata_sff/0]
root 0 0 00:00:00 16-10:03:35 95 [ata_sff/1]
root 0 0 00:00:00 16-10:03:35 96 [ata_sff/2]
root 0 0 00:00:00 16-10:03:35 97 [ata_sff/3]
root 0 0 00:00:00 16-10:03:35 98 [ata_sff/4]
root 0 0 00:00:00 16-10:03:35 99 [ata_sff/5]
root 0 0 00:00:00 16-10:03:35 100 [ata_sff/6]
root 0 0 00:00:00 16-10:03:35 101 [ata_sff/7]
root 0 0 00:00:00 16-10:03:35 102 [ksuspend_usbd]
root 0 0 00:00:00 16-10:03:35 103 [khubd]
root 0 0 00:00:00 16-10:03:35 104 [kseriod]
root 0 0 00:00:00 16-10:03:35 105 [md/0]
root 0 0 00:00:00 16-10:03:35 106 [md/1]
root 0 0 00:00:00 16-10:03:35 107 [md/2]
root 0 0 00:00:00 16-10:03:35 108 [md/3]
root 0 0 00:00:00 16-10:03:35 109 [md/4]
root 0 0 00:00:00 16-10:03:35 110 [md/5]
root 0 0 00:00:00 16-10:03:35 111 [md/6]
root 0 0 00:00:00 16-10:03:35 112 [md/7]
root 0 0 00:00:00 16-10:03:35 113 [md_misc/0]
root 0 0 00:00:00 16-10:03:35 114 [md_misc/1]
root 0 0 00:00:00 16-10:03:35 115 [md_misc/2]
root 0 0 00:00:00 16-10:03:35 116 [md_misc/3]
root 0 0 00:00:00 16-10:03:35 117 [md_misc/4]
root 0 0 00:00:00 16-10:03:35 118 [md_misc/5]
root 0 0 00:00:00 16-10:03:35 119 [md_misc/6]
root 0 0 00:00:00 16-10:03:35 120 [md_misc/7]
root 0 0 00:00:00 16-10:03:35 121 [linkwatch]
root 0 0 00:00:03 16-10:03:34 124 [khungtaskd]
root 0 0 00:46:02 16-10:03:34 125 [kswapd1]
root 0 0 00:00:00 16-10:03:34 126 [ksmd]
root 0 0 00:23:08 16-10:03:34 127 [khugepaged]
root 0 0 00:00:00 16-10:03:34 128 [aio/0]
root 0 0 00:00:00 16-10:03:34 129 [aio/1]
root 0 0 00:00:00 16-10:03:34 130 [aio/2]
root 0 0 00:00:00 16-10:03:34 131 [aio/3]
root 0 0 00:00:00 16-10:03:34 132 [aio/4]
root 0 0 00:00:00 16-10:03:34 133 [aio/5]
root 0 0 00:00:00 16-10:03:34 134 [aio/6]
root 0 0 00:00:00 16-10:03:34 135 [aio/7]
root 0 0 00:00:00 16-10:03:34 136 [crypto/0]
root 0 0 00:00:00 16-10:03:34 137 [crypto/1]
root 0 0 00:00:00 16-10:03:34 138 [crypto/2]
root 0 0 00:00:00 16-10:03:34 139 [crypto/3]
root 0 0 00:00:00 16-10:03:34 140 [crypto/4]
root 0 0 00:00:00 16-10:03:34 141 [crypto/5]
root 0 0 00:00:00 16-10:03:34 142 [crypto/6]
root 0 0 00:00:00 16-10:03:34 143 [crypto/7]
root 0 0 00:00:00 16-10:03:34 150 [kthrotld/0]
root 0 0 00:00:00 16-10:03:34 151 [kthrotld/1]
root 0 0 00:00:00 16-10:03:34 152 [kthrotld/2]
root 0 0 00:00:00 16-10:03:34 153 [kthrotld/3]
root 0 0 00:00:00 16-10:03:34 154 [kthrotld/4]
root 0 0 00:00:00 16-10:03:34 155 [kthrotld/5]
root 0 0 00:00:00 16-10:03:34 156 [kthrotld/6]
root 0 0 00:00:00 16-10:03:34 157 [kthrotld/7]
root 0 0 00:00:00 16-10:03:34 160 [kpsmoused]
root 0 0 00:00:00 16-10:03:34 161 [usbhid_resumer]
root 0 0 00:00:00 16-10:03:34 162 [deferwq]
root 0 0 00:00:00 16-10:03:34 194 [kdmremove]
root 0 0 00:00:00 16-10:03:34 195 [kstriped]
root 0 0 00:00:00 16-10:03:32 734 [scsi_eh_0]
root 0 0 00:00:00 16-10:03:32 735 [scsi_wq_0]
root 0 0 00:00:00 16-10:03:32 748 [scsi_eh_1]
root 0 0 00:00:00 16-10:03:32 749 [scsi_eh_2]
root 0 0 00:00:00 16-10:03:32 750 [scsi_eh_3]
root 0 0 00:00:00 16-10:03:32 751 [scsi_eh_4]
root 0 0 00:00:00 16-10:03:32 752 [scsi_eh_5]
root 0 0 00:00:00 16-10:03:32 753 [scsi_eh_6]
root 0 0 00:03:13 16-10:03:31 947 [md1_raid1]
root 0 0 00:00:18 16-10:03:30 1008 [jbd2/md1-8]
root 0 0 00:00:00 16-10:03:30 1009 [ext4-dio-unwrit]
root 11284 516 00:00:03 16-10:03:29 1102 /sbin/udevd -d
root 0 0 00:03:13 16-10:03:29 1222 [edac-poller]
root 0 0 00:01:56 16-10:03:29 1255 [md2_raid1]
root 0 0 00:24:57 16-10:03:28 1261 [md3_raid1]
root 0 0 00:03:24 16-10:03:28 1264 [md4_raid1]
root 0 0 02:32:18 16-10:03:28 1268 [md5_raid1]
root 0 0 00:00:26 16-10:03:28 1301 [md0_raid1]
root 0 0 00:00:21 16-10:03:26 1832 [flush-9:2]
root 0 0 00:01:16 16-10:03:26 1833 [flush-9:3]
root 0 0 00:02:44 16-10:03:26 1835 [flush-9:5]
root 0 0 00:00:00 16-10:03:26 1872 [jbd2/md0-8]
root 0 0 00:00:00 16-10:03:26 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 16-10:03:26 1876 [xfs_mru_cache]
root 0 0 00:00:00 16-10:03:26 1877 [xfslogd/0]
root 0 0 00:00:00 16-10:03:26 1878 [xfslogd/1]
root 0 0 00:14:03 16-10:03:26 1879 [xfslogd/2]
root 0 0 00:00:00 16-10:03:26 1880 [xfslogd/3]
root 0 0 00:00:35 16-10:03:26 1881 [xfslogd/4]
root 0 0 00:00:00 16-10:03:26 1882 [xfslogd/5]
root 0 0 00:00:00 16-10:03:26 1883 [xfslogd/6]
root 0 0 00:00:00 16-10:03:26 1884 [xfslogd/7]
root 0 0 00:00:00 16-10:03:26 1885 [xfsdatad/0]
root 0 0 00:00:00 16-10:03:26 1886 [xfsdatad/1]
root 0 0 00:08:27 16-10:03:26 1887 [xfsdatad/2]
root 0 0 00:00:00 16-10:03:26 1888 [xfsdatad/3]
root 0 0 00:05:22 16-10:03:26 1889 [xfsdatad/4]
root 0 0 00:00:00 16-10:03:26 1890 [xfsdatad/5]
root 0 0 00:00:00 16-10:03:26 1891 [xfsdatad/6]
root 0 0 00:00:00 16-10:03:26 1892 [xfsdatad/7]
root 0 0 00:00:00 16-10:03:26 1893 [xfsconvertd/0]
root 0 0 00:00:00 16-10:03:26 1894 [xfsconvertd/1]
root 0 0 00:00:00 16-10:03:26 1895 [xfsconvertd/2]
root 0 0 00:00:00 16-10:03:26 1896 [xfsconvertd/3]
root 0 0 00:00:00 16-10:03:26 1897 [xfsconvertd/4]
root 0 0 00:00:00 16-10:03:26 1898 [xfsconvertd/5]
root 0 0 00:00:00 16-10:03:26 1899 [xfsconvertd/6]
root 0 0 00:00:00 16-10:03:26 1900 [xfsconvertd/7]
root 0 0 00:00:00 16-10:03:26 1901 [xfsalloc/0]
root 0 0 00:00:00 16-10:03:26 1902 [xfsalloc/1]
root 0 0 00:00:00 16-10:03:26 1903 [xfsalloc/2]
root 0 0 00:00:00 16-10:03:26 1904 [xfsalloc/3]
root 0 0 00:00:00 16-10:03:26 1905 [xfsalloc/4]
root 0 0 00:00:00 16-10:03:26 1906 [xfsalloc/5]
root 0 0 00:00:00 16-10:03:26 1907 [xfsalloc/6]
root 0 0 00:00:00 16-10:03:26 1908 [xfsalloc/7]
root 0 0 00:00:05 16-10:03:26 1909 [xfseofblocks/0]
root 0 0 00:00:00 16-10:03:26 1910 [xfseofblocks/1]
root 0 0 00:00:00 16-10:03:26 1911 [xfseofblocks/2]
root 0 0 00:00:00 16-10:03:26 1912 [xfseofblocks/3]
root 0 0 00:00:00 16-10:03:26 1913 [xfseofblocks/4]
root 0 0 00:00:00 16-10:03:26 1914 [xfseofblocks/5]
root 0 0 00:00:00 16-10:03:26 1915 [xfseofblocks/6]
root 0 0 00:00:00 16-10:03:26 1916 [xfseofblocks/7]
root 0 0 00:02:35 16-10:03:26 1917 [xfsbufd/md5]
root 0 0 00:01:47 16-10:03:26 1918 [xfs-cil/md5]
root 0 0 00:01:33 16-10:03:26 1919 [xfssyncd/md5]
root 0 0 00:30:37 16-10:03:26 1920 [xfsaild/md5]
root 0 0 00:00:17 16-10:03:25 1921 [jbd2/md2-8]
root 0 0 00:00:00 16-10:03:25 1922 [ext4-dio-unwrit]
root 0 0 00:00:58 16-10:03:25 1923 [xfsbufd/md4]
root 0 0 00:00:03 16-10:03:25 1924 [xfs-cil/md4]
root 0 0 00:00:14 16-10:03:25 1925 [xfssyncd/md4]
root 0 0 00:29:37 16-10:03:25 1926 [xfsaild/md4]
root 0 0 00:03:38 16-10:03:25 1927 [xfsbufd/md3]
root 0 0 00:09:32 16-10:03:25 1928 [xfs-cil/md3]
root 0 0 00:00:27 16-10:03:25 1929 [xfssyncd/md3]
root 0 0 00:30:54 16-10:03:25 1930 [xfsaild/md3]
root 0 0 00:00:08 16-10:03:24 1986 [kauditd]
root 29764 708 00:00:17 16-10:03:06 2241 auditd
root 250624 11948 00:26:49 16-10:03:06 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:06:49 16-10:03:06 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30700 00:07:47 16-10:03:05 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:01 16-10:03:05 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 16-10:03:05 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:03:37 16-10:03:04 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:05 16-10:03:04 2479 /usr/sbin/sshd
root 21712 720 00:00:03 16-10:03:04 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 16-10:03:04 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1224576 56-17:30:40 16-10:03:03 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2024 00:00:09 16-10:02:59 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2012 00:00:09 16-10:02:59 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:09 16-10:02:59 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:08 16-10:02:59 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:09 16-10:02:59 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:02:11 16-10:02:54 3211 sendmail: rejecting connections on daemon MTA: 15 children, max 15
smmsp 78752 780 00:00:20 16-10:02:54 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 564572 34168 00:06:30 16-10:02:47 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:18 16-10:02:47 3244 crond
root 107544 316 00:00:01 16-10:02:45 3296 pure-ftpd (SERVER) 
root 63224 5036 00:01:09 16-10:02:31 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 16-10:02:30 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 16-10:02:30 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 16-10:02:30 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 16-10:02:30 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 16-10:02:30 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 16-10:02:30 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:11 16-10:02:30 3372 /sbin/udevd -d
root 11280 508 00:00:00 16-10:02:30 3373 /sbin/udevd -d
root 0 0 00:47:03 16-10:00:35 3716 [kipmi0]
root 0 0 00:00:18 15-08:27:46 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 15-08:27:46 13330 [xfs-cil/sdc1]
root 0 0 00:01:26 15-08:27:46 13331 [xfssyncd/sdc1]
root 0 0 00:27:34 15-08:27:46 13332 [xfsaild/sdc1]
root 0 0 00:00:00 01:37:29 46409 [flush-9:4]
root 0 0 00:00:00 57:25 52449 [flush-8:32]
root 95864 3428 00:00:00 40:19 55334 sendmail: server vipturbo.com.br [191.36.158.106] (may be forged) cmd read
apache 589952 95080 00:01:13 35:09 56023 /usr/sbin/httpd -DSSL
apache 618312 124532 00:00:52 31:34 56528 /usr/sbin/httpd -DSSL
apache 611788 120128 00:00:57 31:21 56685 /usr/sbin/httpd -DSSL
apache 643852 150388 00:00:43 29:13 56762 /usr/sbin/httpd -DSSL
apache 586612 94904 00:00:38 27:20 57271 /usr/sbin/httpd -DSSL
apache 586544 85272 00:00:46 23:38 57617 /usr/sbin/httpd -DSSL
apache 657804 160940 00:00:34 22:16 58117 /usr/sbin/httpd -DSSL
apache 588776 93252 00:00:37 20:43 58121 /usr/sbin/httpd -DSSL
root 139904 1468 00:00:00 17:34 58537 CROND
root 144512 14620 00:00:00 17:34 58540 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/videoonline/logs/access_log
root 9196 1148 00:00:00 17:34 58543 sh -c su -s /bin/sh videoonline -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_videoonline_logs_access_log\.conf\ \-o\ \\\/home\\\/videoonline\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/videoonline\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1468 00:00:00 17:34 58544 su -s /bin/sh videoonline -c webalizer -c /etc/webmin/webalizer/home_videoonline_logs_access_log.conf -o \/home\/videoonline\/public_html\/stats -p \/home\/videoonline\/logs\/access_log
videoonline 44980 4220 00:07:00 17:34 58545 webalizer -c /etc/webmin/webalizer/home_videoonline_logs_access_log.conf -o /home/videoonline/public_html/stats -p /home/videoonline/logs/access_log
apache 586192 91680 00:00:34 17:05 58711 /usr/sbin/httpd -DSSL
apache 600772 106336 00:00:34 16:31 59002 /usr/sbin/httpd -DSSL
apache 586092 85508 00:00:27 16:04 59006 /usr/sbin/httpd -DSSL
apache 669628 175140 00:00:29 15:54 59007 /usr/sbin/httpd -DSSL
root 96780 5688 00:00:00 13:21 59458 sendmail: ./4BD31gu2133557 alt4.gmail-smtp-in.l.google.com.: client DATA 354
apache 667464 162696 00:00:17 12:15 59598 /usr/sbin/httpd -DSSL
root 96632 5468 00:00:00 11:21 59600 sendmail: ./4BE8CdvG177561 smtpz4.laposte.net.: client RCPT
root 96632 5544 00:00:00 10:21 59872 sendmail: ./4BC9qsJT203343 redcactuspoker.fr.: user open
root 96792 5644 00:00:00 09:21 59878 sendmail: ./4BCDmwFE242166 smtpsec.datafirst.fr.: user open
root 96632 5476 00:00:00 08:21 59996 sendmail: ./4BCFZ8Rj015320 mail.msn.fr.: user open
root 139904 1468 00:00:00 07:34 60030 CROND
root 144512 14612 00:00:00 07:34 60031 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/isongs/logs/access_log
root 9196 1152 00:00:00 07:33 60233 sh -c su -s /bin/sh isongs -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_isongs_logs_access_log\.conf\ \-o\ \\\/home\\\/isongs\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/isongs\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1464 00:00:00 07:33 60234 su -s /bin/sh isongs -c webalizer -c /etc/webmin/webalizer/home_isongs_logs_access_log.conf -o \/home\/isongs\/public_html\/stats -p \/home\/isongs\/logs\/access_log
isongs 71380 30616 00:01:58 07:33 60235 webalizer -c /etc/webmin/webalizer/home_isongs_logs_access_log.conf -o /home/isongs/public_html/stats -p /home/isongs/logs/access_log
root 96632 5452 00:00:00 07:21 60393 sendmail: ./4BE8BgT2177243 smtpz4.laposte.net.: client DATA 354
root 96500 5456 00:00:00 06:21 60395 sendmail: ./4BC9sJkW203536 redcactuspoker.fr.: user open
apache 583384 72164 00:00:07 06:03 60397 /usr/sbin/httpd -DSSL
apache 624176 115104 00:00:13 06:02 60398 /usr/sbin/httpd -DSSL
apache 583920 77116 00:00:12 06:02 60399 /usr/sbin/httpd -DSSL
apache 598868 100712 00:00:09 05:33 60435 /usr/sbin/httpd -DSSL
root 96148 3776 00:00:00 05:21 60507 sendmail: ./4BDDSKSx238778 mail.ikatelnet.net.: user open
root 96148 3772 00:00:00 04:21 60738 sendmail: ./4BC9Q77a197904 smtpc1.tf1.fr.: user open
apache 583360 73624 00:00:05 03:41 60740 /usr/sbin/httpd -DSSL
root 40060 2036 00:00:00 03:30 60784 dovecot/ssl-params
root 96148 3772 00:00:00 03:21 60838 sendmail: ./4BDCcRG0229703 shell.msen.com.: user open
apache 601184 79788 00:00:04 02:27 61040 /usr/sbin/httpd -DSSL
root 96148 3764 00:00:00 02:21 61042 sendmail: ./4BC9QsZH197948 smtpd1.tf1.fr.: user open
root 96148 3664 00:00:00 01:21 61254 sendmail: ./4BCN3REW090473 exch-plo.capitaine-cook.fr.: user open
root 139904 1468 00:00:00 00:34 61265 CROND
root 144512 14620 00:00:00 00:34 61266 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/t20worldcup2016.pk/logs/access_log
root 9196 1152 00:00:00 00:34 61328 sh -c su -s /bin/sh t20worldcup2016\.pk -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_t20worldcup2016\.pk_logs_access_log\.conf\ \-o\ \\\/home\\\/t20worldcup2016\\\.pk\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/t20worldcup2016\\\.pk\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1460 00:00:00 00:34 61329 su -s /bin/sh t20worldcup2016.pk -c webalizer -c /etc/webmin/webalizer/home_t20worldcup2016.pk_logs_access_log.conf -o \/home\/t20worldcup2016\.pk\/public_html\/stats -p \/home\/t20worldcup2016\.pk\/logs\/access_log
t20worldcup2016.pk 43924 3116 00:00:02 00:34 61330 webalizer -c /etc/webmin/webalizer/home_t20worldcup2016.pk_logs_access_log.conf -o /home/t20worldcup2016.pk/public_html/stats -p /home/t20worldcup2016.pk/logs/access_log
apache 605680 81308 00:00:01 00:29 61331 /usr/sbin/httpd -DSSL
root 96148 3660 00:00:00 00:21 61333 sendmail: ./4BCKAERJ061648 smtp1.speednames.com.: user open
root 110772 2072 00:00:00 00:01 61421 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 61443 /bin/bash /usr/bin/check_mk_agent
root 110772 1248 00:00:00 00:01 61444 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 61446 cat
root 110900 1172 00:00:00 00:01 61471 /bin/bash /usr/bin/check_mk_agent
root 13368 1016 00:00:00 00:01 61472 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 61473 tr -s 
root 19260 796 00:00:00 21:30:36 99748 /usr/sbin/dovecot
dovecot 12980 1076 00:00:00 21:30:36 99750 dovecot/anvil
root 13108 1192 00:00:00 21:30:36 99751 dovecot/log
root 266460 74672 00:00:17 19:30:56 118799 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 268872 77096 00:00:14 19:30:53 118800 spamd child
root 266460 72160 00:00:00 19:30:53 118801 spamd child
root 0 0 00:00:14 15-13:48:16 203424 [flush-9:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-15 23:55

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e42785343b

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1734134160
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:04 14-10:04:01 1 /sbin/init
root 0 0 00:00:00 14-10:04:01 2 [kthreadd]
root 0 0 01:03:02 14-10:04:01 3 [migration/0]
root 0 0 00:03:12 14-10:04:01 4 [ksoftirqd/0]
root 0 0 00:00:00 14-10:04:01 5 [stopper/0]
root 0 0 00:01:48 14-10:04:01 6 [watchdog/0]
root 0 0 00:30:18 14-10:04:01 7 [migration/1]
root 0 0 00:00:00 14-10:04:01 8 [stopper/1]
root 0 0 00:03:03 14-10:04:01 9 [ksoftirqd/1]
root 0 0 00:02:01 14-10:04:01 10 [watchdog/1]
root 0 0 01:23:50 14-10:04:01 11 [migration/2]
root 0 0 00:00:00 14-10:04:01 12 [stopper/2]
root 0 0 00:01:57 14-10:04:01 13 [ksoftirqd/2]
root 0 0 00:01:29 14-10:04:01 14 [watchdog/2]
root 0 0 00:16:48 14-10:04:01 15 [migration/3]
root 0 0 00:00:00 14-10:04:01 16 [stopper/3]
root 0 0 00:02:26 14-10:04:01 17 [ksoftirqd/3]
root 0 0 00:01:51 14-10:04:01 18 [watchdog/3]
root 0 0 00:52:04 14-10:04:01 19 [migration/4]
root 0 0 00:00:00 14-10:04:01 20 [stopper/4]
root 0 0 00:01:51 14-10:04:01 21 [ksoftirqd/4]
root 0 0 00:00:53 14-10:04:01 22 [watchdog/4]
root 0 0 00:25:43 14-10:04:01 23 [migration/5]
root 0 0 00:00:00 14-10:04:01 24 [stopper/5]
root 0 0 00:01:35 14-10:04:01 25 [ksoftirqd/5]
root 0 0 00:01:18 14-10:04:01 26 [watchdog/5]
root 0 0 00:15:54 14-10:04:01 27 [migration/6]
root 0 0 00:00:00 14-10:04:01 28 [stopper/6]
root 0 0 00:01:32 14-10:04:01 29 [ksoftirqd/6]
root 0 0 00:01:10 14-10:04:01 30 [watchdog/6]
root 0 0 00:11:56 14-10:04:01 31 [migration/7]
root 0 0 00:00:00 14-10:04:01 32 [stopper/7]
root 0 0 00:01:42 14-10:04:01 33 [ksoftirqd/7]
root 0 0 00:01:07 14-10:04:01 34 [watchdog/7]
root 0 0 00:10:21 14-10:04:01 35 [events/0]
root 0 0 00:08:45 14-10:04:01 36 [events/1]
root 0 0 00:05:51 14-10:04:01 37 [events/2]
root 0 0 00:09:17 14-10:04:01 38 [events/3]
root 0 0 00:04:06 14-10:04:01 39 [events/4]
root 0 0 00:05:18 14-10:04:01 40 [events/5]
root 0 0 00:05:43 14-10:04:01 41 [events/6]
root 0 0 00:06:18 14-10:04:01 42 [events/7]
root 0 0 00:00:00 14-10:04:01 43 [events/0]
root 0 0 00:00:00 14-10:04:01 44 [events/1]
root 0 0 00:00:00 14-10:04:01 45 [events/2]
root 0 0 00:00:00 14-10:04:01 46 [events/3]
root 0 0 00:00:00 14-10:04:01 47 [events/4]
root 0 0 00:00:00 14-10:04:01 48 [events/5]
root 0 0 00:00:00 14-10:04:01 49 [events/6]
root 0 0 00:00:00 14-10:04:01 50 [events/7]
root 0 0 00:00:00 14-10:04:01 51 [events_long/0]
root 0 0 00:00:00 14-10:04:01 52 [events_long/1]
root 0 0 00:00:00 14-10:04:01 53 [events_long/2]
root 0 0 00:00:00 14-10:04:01 54 [events_long/3]
root 0 0 00:00:00 14-10:04:01 55 [events_long/4]
root 0 0 00:00:00 14-10:04:01 56 [events_long/5]
root 0 0 00:00:00 14-10:04:01 57 [events_long/6]
root 0 0 00:00:00 14-10:04:01 58 [events_long/7]
root 0 0 00:00:00 14-10:04:01 59 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 60 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 61 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 62 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 63 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 64 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 65 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 66 [events_power_ef]
root 0 0 00:00:00 14-10:04:01 67 [cgroup]
root 0 0 00:00:00 14-10:04:01 68 [khelper]
root 0 0 00:00:00 14-10:04:01 69 [netns]
root 0 0 00:00:00 14-10:04:01 70 [async/mgr]
root 0 0 00:00:00 14-10:04:01 71 [pm]
root 0 0 00:00:34 14-10:04:01 72 [sync_supers]
root 0 0 00:00:00 14-10:04:01 73 [bdi-default]
root 0 0 00:00:00 14-10:04:01 74 [kintegrityd/0]
root 0 0 00:00:00 14-10:04:01 75 [kintegrityd/1]
root 0 0 00:00:00 14-10:04:01 76 [kintegrityd/2]
root 0 0 00:00:00 14-10:04:01 77 [kintegrityd/3]
root 0 0 00:00:00 14-10:04:01 78 [kintegrityd/4]
root 0 0 00:00:00 14-10:04:01 79 [kintegrityd/5]
root 0 0 00:00:00 14-10:04:01 80 [kintegrityd/6]
root 0 0 00:00:00 14-10:04:01 81 [kintegrityd/7]
root 0 0 00:00:36 14-10:04:01 82 [kblockd/0]
root 0 0 00:00:13 14-10:04:01 83 [kblockd/1]
root 0 0 00:52:05 14-10:04:01 84 [kblockd/2]
root 0 0 00:00:04 14-10:04:01 85 [kblockd/3]
root 0 0 00:17:54 14-10:04:01 86 [kblockd/4]
root 0 0 00:00:28 14-10:04:01 87 [kblockd/5]
root 0 0 00:00:08 14-10:04:01 88 [kblockd/6]
root 0 0 00:00:03 14-10:04:01 89 [kblockd/7]
root 0 0 00:00:00 14-10:04:01 90 [kacpid]
root 0 0 00:00:00 14-10:04:01 91 [kacpi_notify]
root 0 0 00:00:00 14-10:04:01 92 [kacpi_hotplug]
root 0 0 00:00:00 14-10:04:01 93 [ata_aux]
root 0 0 00:00:00 14-10:04:01 94 [ata_sff/0]
root 0 0 00:00:00 14-10:04:01 95 [ata_sff/1]
root 0 0 00:00:00 14-10:04:01 96 [ata_sff/2]
root 0 0 00:00:00 14-10:04:01 97 [ata_sff/3]
root 0 0 00:00:00 14-10:04:01 98 [ata_sff/4]
root 0 0 00:00:00 14-10:04:01 99 [ata_sff/5]
root 0 0 00:00:00 14-10:04:01 100 [ata_sff/6]
root 0 0 00:00:00 14-10:04:01 101 [ata_sff/7]
root 0 0 00:00:00 14-10:04:01 102 [ksuspend_usbd]
root 0 0 00:00:00 14-10:04:01 103 [khubd]
root 0 0 00:00:00 14-10:04:01 104 [kseriod]
root 0 0 00:00:00 14-10:04:01 105 [md/0]
root 0 0 00:00:00 14-10:04:01 106 [md/1]
root 0 0 00:00:00 14-10:04:01 107 [md/2]
root 0 0 00:00:00 14-10:04:01 108 [md/3]
root 0 0 00:00:00 14-10:04:01 109 [md/4]
root 0 0 00:00:00 14-10:04:01 110 [md/5]
root 0 0 00:00:00 14-10:04:01 111 [md/6]
root 0 0 00:00:00 14-10:04:01 112 [md/7]
root 0 0 00:00:00 14-10:04:01 113 [md_misc/0]
root 0 0 00:00:00 14-10:04:01 114 [md_misc/1]
root 0 0 00:00:00 14-10:04:01 115 [md_misc/2]
root 0 0 00:00:00 14-10:04:01 116 [md_misc/3]
root 0 0 00:00:00 14-10:04:01 117 [md_misc/4]
root 0 0 00:00:00 14-10:04:01 118 [md_misc/5]
root 0 0 00:00:00 14-10:04:01 119 [md_misc/6]
root 0 0 00:00:00 14-10:04:01 120 [md_misc/7]
root 0 0 00:00:00 14-10:04:01 121 [linkwatch]
root 0 0 00:00:03 14-10:04:00 124 [khungtaskd]
root 0 0 00:42:35 14-10:04:00 125 [kswapd1]
root 0 0 00:00:00 14-10:04:00 126 [ksmd]
root 0 0 00:20:37 14-10:04:00 127 [khugepaged]
root 0 0 00:00:00 14-10:04:00 128 [aio/0]
root 0 0 00:00:00 14-10:04:00 129 [aio/1]
root 0 0 00:00:00 14-10:04:00 130 [aio/2]
root 0 0 00:00:00 14-10:04:00 131 [aio/3]
root 0 0 00:00:00 14-10:04:00 132 [aio/4]
root 0 0 00:00:00 14-10:04:00 133 [aio/5]
root 0 0 00:00:00 14-10:04:00 134 [aio/6]
root 0 0 00:00:00 14-10:04:00 135 [aio/7]
root 0 0 00:00:00 14-10:04:00 136 [crypto/0]
root 0 0 00:00:00 14-10:04:00 137 [crypto/1]
root 0 0 00:00:00 14-10:04:00 138 [crypto/2]
root 0 0 00:00:00 14-10:04:00 139 [crypto/3]
root 0 0 00:00:00 14-10:04:00 140 [crypto/4]
root 0 0 00:00:00 14-10:04:00 141 [crypto/5]
root 0 0 00:00:00 14-10:04:00 142 [crypto/6]
root 0 0 00:00:00 14-10:04:00 143 [crypto/7]
root 0 0 00:00:00 14-10:04:00 150 [kthrotld/0]
root 0 0 00:00:00 14-10:04:00 151 [kthrotld/1]
root 0 0 00:00:00 14-10:04:00 152 [kthrotld/2]
root 0 0 00:00:00 14-10:04:00 153 [kthrotld/3]
root 0 0 00:00:00 14-10:04:00 154 [kthrotld/4]
root 0 0 00:00:00 14-10:04:00 155 [kthrotld/5]
root 0 0 00:00:00 14-10:04:00 156 [kthrotld/6]
root 0 0 00:00:00 14-10:04:00 157 [kthrotld/7]
root 0 0 00:00:00 14-10:04:00 160 [kpsmoused]
root 0 0 00:00:00 14-10:04:00 161 [usbhid_resumer]
root 0 0 00:00:00 14-10:04:00 162 [deferwq]
root 0 0 00:00:00 14-10:04:00 194 [kdmremove]
root 0 0 00:00:00 14-10:04:00 195 [kstriped]
root 0 0 00:00:00 14-10:03:58 734 [scsi_eh_0]
root 0 0 00:00:00 14-10:03:58 735 [scsi_wq_0]
root 0 0 00:00:00 14-10:03:58 748 [scsi_eh_1]
root 0 0 00:00:00 14-10:03:58 749 [scsi_eh_2]
root 0 0 00:00:00 14-10:03:58 750 [scsi_eh_3]
root 0 0 00:00:00 14-10:03:58 751 [scsi_eh_4]
root 0 0 00:00:00 14-10:03:58 752 [scsi_eh_5]
root 0 0 00:00:00 14-10:03:58 753 [scsi_eh_6]
root 0 0 00:02:33 14-10:03:57 947 [md1_raid1]
root 0 0 00:00:17 14-10:03:56 1008 [jbd2/md1-8]
root 0 0 00:00:00 14-10:03:56 1009 [ext4-dio-unwrit]
root 11284 516 00:00:03 14-10:03:55 1102 /sbin/udevd -d
root 0 0 00:02:57 14-10:03:55 1222 [edac-poller]
root 0 0 00:01:33 14-10:03:55 1255 [md2_raid1]
root 0 0 00:21:32 14-10:03:54 1261 [md3_raid1]
root 0 0 00:02:39 14-10:03:54 1264 [md4_raid1]
root 0 0 01:58:25 14-10:03:54 1268 [md5_raid1]
root 0 0 00:00:17 14-10:03:54 1301 [md0_raid1]
root 0 0 00:00:20 14-10:03:52 1832 [flush-9:2]
root 0 0 00:01:07 14-10:03:52 1833 [flush-9:3]
root 0 0 00:02:29 14-10:03:52 1835 [flush-9:5]
root 0 0 00:00:00 14-10:03:52 1872 [jbd2/md0-8]
root 0 0 00:00:00 14-10:03:52 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 14-10:03:52 1876 [xfs_mru_cache]
root 0 0 00:00:00 14-10:03:52 1877 [xfslogd/0]
root 0 0 00:00:00 14-10:03:52 1878 [xfslogd/1]
root 0 0 00:11:53 14-10:03:52 1879 [xfslogd/2]
root 0 0 00:00:00 14-10:03:52 1880 [xfslogd/3]
root 0 0 00:00:33 14-10:03:52 1881 [xfslogd/4]
root 0 0 00:00:00 14-10:03:52 1882 [xfslogd/5]
root 0 0 00:00:00 14-10:03:52 1883 [xfslogd/6]
root 0 0 00:00:00 14-10:03:52 1884 [xfslogd/7]
root 0 0 00:00:00 14-10:03:52 1885 [xfsdatad/0]
root 0 0 00:00:00 14-10:03:52 1886 [xfsdatad/1]
root 0 0 00:07:53 14-10:03:52 1887 [xfsdatad/2]
root 0 0 00:00:00 14-10:03:52 1888 [xfsdatad/3]
root 0 0 00:05:12 14-10:03:52 1889 [xfsdatad/4]
root 0 0 00:00:00 14-10:03:52 1890 [xfsdatad/5]
root 0 0 00:00:00 14-10:03:52 1891 [xfsdatad/6]
root 0 0 00:00:00 14-10:03:52 1892 [xfsdatad/7]
root 0 0 00:00:00 14-10:03:52 1893 [xfsconvertd/0]
root 0 0 00:00:00 14-10:03:52 1894 [xfsconvertd/1]
root 0 0 00:00:00 14-10:03:52 1895 [xfsconvertd/2]
root 0 0 00:00:00 14-10:03:52 1896 [xfsconvertd/3]
root 0 0 00:00:00 14-10:03:52 1897 [xfsconvertd/4]
root 0 0 00:00:00 14-10:03:52 1898 [xfsconvertd/5]
root 0 0 00:00:00 14-10:03:52 1899 [xfsconvertd/6]
root 0 0 00:00:00 14-10:03:52 1900 [xfsconvertd/7]
root 0 0 00:00:00 14-10:03:52 1901 [xfsalloc/0]
root 0 0 00:00:00 14-10:03:52 1902 [xfsalloc/1]
root 0 0 00:00:00 14-10:03:52 1903 [xfsalloc/2]
root 0 0 00:00:00 14-10:03:52 1904 [xfsalloc/3]
root 0 0 00:00:00 14-10:03:52 1905 [xfsalloc/4]
root 0 0 00:00:00 14-10:03:52 1906 [xfsalloc/5]
root 0 0 00:00:00 14-10:03:52 1907 [xfsalloc/6]
root 0 0 00:00:00 14-10:03:52 1908 [xfsalloc/7]
root 0 0 00:00:05 14-10:03:52 1909 [xfseofblocks/0]
root 0 0 00:00:00 14-10:03:52 1910 [xfseofblocks/1]
root 0 0 00:00:00 14-10:03:52 1911 [xfseofblocks/2]
root 0 0 00:00:00 14-10:03:52 1912 [xfseofblocks/3]
root 0 0 00:00:00 14-10:03:52 1913 [xfseofblocks/4]
root 0 0 00:00:00 14-10:03:52 1914 [xfseofblocks/5]
root 0 0 00:00:00 14-10:03:52 1915 [xfseofblocks/6]
root 0 0 00:00:00 14-10:03:52 1916 [xfseofblocks/7]
root 0 0 00:02:20 14-10:03:52 1917 [xfsbufd/md5]
root 0 0 00:01:36 14-10:03:52 1918 [xfs-cil/md5]
root 0 0 00:01:23 14-10:03:52 1919 [xfssyncd/md5]
root 0 0 00:27:45 14-10:03:52 1920 [xfsaild/md5]
root 0 0 00:00:16 14-10:03:51 1921 [jbd2/md2-8]
root 0 0 00:00:00 14-10:03:51 1922 [ext4-dio-unwrit]
root 0 0 00:00:53 14-10:03:51 1923 [xfsbufd/md4]
root 0 0 00:00:02 14-10:03:51 1924 [xfs-cil/md4]
root 0 0 00:00:13 14-10:03:51 1925 [xfssyncd/md4]
root 0 0 00:26:57 14-10:03:51 1926 [xfsaild/md4]
root 0 0 00:03:14 14-10:03:51 1927 [xfsbufd/md3]
root 0 0 00:08:01 14-10:03:51 1928 [xfs-cil/md3]
root 0 0 00:00:23 14-10:03:51 1929 [xfssyncd/md3]
root 0 0 00:28:01 14-10:03:51 1930 [xfsaild/md3]
root 0 0 00:00:07 14-10:03:50 1986 [kauditd]
root 29764 708 00:00:15 14-10:03:32 2241 auditd
root 250624 11100 00:23:18 14-10:03:32 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:05:59 14-10:03:32 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30684 00:06:57 14-10:03:31 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:01 14-10:03:31 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 14-10:03:31 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:03:16 14-10:03:30 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:04 14-10:03:30 2479 /usr/sbin/sshd
root 21712 720 00:00:02 14-10:03:30 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 14-10:03:30 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1233184 50-04:28:20 14-10:03:29 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2024 00:00:08 14-10:03:25 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2012 00:00:08 14-10:03:25 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:08 14-10:03:25 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:07 14-10:03:25 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:08 14-10:03:25 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:01:54 14-10:03:20 3211 sendmail: rejecting connections on daemon MTA: 16 children, max 15
smmsp 78752 780 00:00:18 14-10:03:20 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 564128 33636 00:05:43 14-10:03:13 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:15 14-10:03:13 3244 crond
root 107544 316 00:00:00 14-10:03:11 3296 pure-ftpd (SERVER) 
root 63224 5036 00:01:01 14-10:02:57 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 14-10:02:56 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 14-10:02:56 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 14-10:02:56 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 14-10:02:56 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 14-10:02:56 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 14-10:02:56 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:10 14-10:02:56 3372 /sbin/udevd -d
root 11280 508 00:00:00 14-10:02:56 3373 /sbin/udevd -d
root 0 0 00:41:11 14-10:01:01 3716 [kipmi0]
root 0 0 00:00:18 13-08:28:12 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 13-08:28:12 13330 [xfs-cil/sdc1]
root 0 0 00:01:25 13-08:28:12 13331 [xfssyncd/sdc1]
root 0 0 00:24:51 13-08:28:12 13332 [xfsaild/sdc1]
root 268728 76552 00:00:07 04:25:11 51890 spamd child
root 0 0 00:00:00 01:16:03 81857 [flush-8:32]
root 0 0 00:00:00 01:10:54 82660 [flush-9:4]
root 95864 3360 00:00:00 45:13 86692 sendmail: server syn-208-105-196-214.biz.spectrum.com [208.105.196.214] cmd read
root 95864 3424 00:00:00 44:30 86703 sendmail: server [197.88.225.98] cmd read
apache 627692 120340 00:00:52 20:57 90264 /usr/sbin/httpd -DSSL
root 139904 1468 00:00:00 18:00 90588 CROND
root 144512 14616 00:00:00 17:59 90591 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/videoonline/logs/access_log
root 9196 1148 00:00:00 17:59 90594 sh -c su -s /bin/sh videoonline -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_videoonline_logs_access_log\.conf\ \-o\ \\\/home\\\/videoonline\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/videoonline\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1464 00:00:00 17:59 90595 su -s /bin/sh videoonline -c webalizer -c /etc/webmin/webalizer/home_videoonline_logs_access_log.conf -o \/home\/videoonline\/public_html\/stats -p \/home\/videoonline\/logs\/access_log
videoonline 44848 4044 00:07:06 17:59 90596 webalizer -c /etc/webmin/webalizer/home_videoonline_logs_access_log.conf -o /home/videoonline/public_html/stats -p /home/videoonline/logs/access_log
root 96952 5764 00:00:00 14:51 91091 sendmail: ./4BC9sJkW203536 redcactuspoker.fr.: user open
apache 592244 90684 00:00:51 14:21 91093 /usr/sbin/httpd -DSSL
root 96956 5772 00:00:00 13:51 91381 sendmail: ./4BCFP8id012840 amx1.nitica.net.: user open
apache 587812 93612 00:00:42 13:40 91414 /usr/sbin/httpd -DSSL
apache 586960 89916 00:00:33 13:38 91415 /usr/sbin/httpd -DSSL
apache 600672 110336 00:00:51 13:32 91418 /usr/sbin/httpd -DSSL
apache 591460 87804 00:00:43 13:31 91419 /usr/sbin/httpd -DSSL
apache 590812 89664 00:00:34 12:09 91430 /usr/sbin/httpd -DSSL
root 96780 5676 00:00:00 11:51 91431 sendmail: ./4BD313qD133389 gmail-smtp-in.l.google.com.: client DATA 354
root 96776 5668 00:00:00 10:51 91904 sendmail: ./4BD4sLFY153358 gmail-smtp-in.l.google.com.: client DATA 354
apache 606284 111316 00:00:35 10:36 91906 /usr/sbin/httpd -DSSL
apache 593084 100556 00:00:31 10:35 91907 /usr/sbin/httpd -DSSL
apache 594800 79452 00:00:27 10:32 91909 /usr/sbin/httpd -DSSL
apache 587476 79180 00:00:25 10:28 91910 /usr/sbin/httpd -DSSL
apache 589904 81948 00:00:33 10:27 91911 /usr/sbin/httpd -DSSL
apache 584596 77100 00:00:26 10:27 91912 /usr/sbin/httpd -DSSL
apache 585632 80964 00:00:28 10:02 91914 /usr/sbin/httpd -DSSL
root 96908 5748 00:00:00 09:51 91915 sendmail: ./4BCFLwn9012220 from queue
root 96780 5656 00:00:00 08:51 92010 sendmail: ./4BCFZ8Rj015320 mail.msn.fr.: user open
apache 584008 75264 00:00:22 08:05 92067 /usr/sbin/httpd -DSSL
apache 584252 66132 00:00:25 08:04 92068 /usr/sbin/httpd -DSSL
apache 584508 77268 00:00:22 08:04 92069 /usr/sbin/httpd -DSSL
apache 592268 76980 00:00:17 08:03 92070 /usr/sbin/httpd -DSSL
root 139904 1468 00:00:00 07:59 92075 CROND
root 144512 14616 00:00:00 07:59 92076 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/isongs/logs/access_log
root 9196 1148 00:00:00 07:56 92231 sh -c su -s /bin/sh isongs -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_isongs_logs_access_log\.conf\ \-o\ \\\/home\\\/isongs\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/isongs\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1464 00:00:00 07:56 92232 su -s /bin/sh isongs -c webalizer -c /etc/webmin/webalizer/home_isongs_logs_access_log.conf -o \/home\/isongs\/public_html\/stats -p \/home\/isongs\/logs\/access_log
isongs 69004 28256 00:01:57 07:56 92233 webalizer -c /etc/webmin/webalizer/home_isongs_logs_access_log.conf -o /home/isongs/public_html/stats -p /home/isongs/logs/access_log
root 96776 5612 00:00:00 07:51 92234 sendmail: ./4BD2rYhm131640 gmail-smtp-in.l.google.com.: user open
root 96776 5604 00:00:00 06:51 92237 sendmail: ./4BD8jHBX193255 from queue
root 40060 2032 00:00:00 06:44 92241 dovecot/ssl-params
apache 583100 73184 00:00:18 06:13 92243 /usr/sbin/httpd -DSSL
root 96780 5608 00:00:00 05:51 92494 sendmail: ./4BCK9fdm061383 smtp1.speednames.com.: user open
root 96816 5612 00:00:00 04:51 92653 sendmail: ./4BCKAERJ061648 smtp2.speednames.com.: user open
apache 590876 71572 00:00:17 04:38 92654 /usr/sbin/httpd -DSSL
apache 594452 75352 00:00:13 04:13 92657 /usr/sbin/httpd -DSSL
apache 585672 52096 00:00:10 03:58 92696 /usr/sbin/httpd -DSSL
root 96776 5604 00:00:00 03:51 92733 sendmail: ./4BCK9Ugp061371 smtp2.speednames.com.: user open
apache 589832 78296 00:00:08 02:54 92817 /usr/sbin/httpd -DSSL
root 96644 5520 00:00:00 02:51 92818 sendmail: ./4BCN3REW090473 exch-ker.capitaine-cook.fr.: user open
root 96644 5520 00:00:00 01:51 92987 sendmail: ./4BDESsvP004694 crc.co.jp.: client DATA 354
root 15084 3196 00:00:00 01:32 92990 dovecot/config
dovecot 76580 2908 00:00:00 01:32 92991 dovecot/auth
root 139904 1468 00:00:00 01:00 93133 CROND
root 144512 14612 00:00:00 00:59 93134 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/t20worldcup2016.pk/logs/access_log
root 9196 1152 00:00:00 00:59 93196 sh -c su -s /bin/sh t20worldcup2016\.pk -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_t20worldcup2016\.pk_logs_access_log\.conf\ \-o\ \\\/home\\\/t20worldcup2016\\\.pk\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/t20worldcup2016\\\.pk\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1468 00:00:00 00:59 93197 su -s /bin/sh t20worldcup2016.pk -c webalizer -c /etc/webmin/webalizer/home_t20worldcup2016.pk_logs_access_log.conf -o \/home\/t20worldcup2016\.pk\/public_html\/stats -p \/home\/t20worldcup2016\.pk\/logs\/access_log
t20worldcup2016.pk 43792 2980 00:00:04 00:59 93198 webalizer -c /etc/webmin/webalizer/home_t20worldcup2016.pk_logs_access_log.conf -o /home/t20worldcup2016.pk/public_html/stats -p /home/t20worldcup2016.pk/logs/access_log
root 96496 5436 00:00:00 00:51 93199 sendmail: ./4BDDi65O242040 mx.sogou.com.: user open
root 110772 2076 00:00:00 00:01 93292 /bin/bash /usr/bin/check_mk_agent
root 110900 1696 00:00:00 00:01 93314 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 93315 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 93316 cat
root 110900 1176 00:00:00 00:01 93342 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 93343 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 93344 tr -s 
root 19260 792 00:00:00 21:34:27 125539 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 21:34:27 125541 dovecot/anvil
root 13108 1196 00:00:00 21:34:27 125542 dovecot/log
root 266400 74532 00:00:21 19:36:05 147538 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 0 0 00:00:13 13-13:48:42 203424 [flush-9:1]
root 268488 76296 00:00:02 10:32:51 237841 spamd child

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-13 23:55

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e459a2458f

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1733965256
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:03 12-11:08:57 1 /sbin/init
root 0 0 00:00:00 12-11:08:57 2 [kthreadd]
root 0 0 00:55:30 12-11:08:57 3 [migration/0]
root 0 0 00:02:49 12-11:08:57 4 [ksoftirqd/0]
root 0 0 00:00:00 12-11:08:57 5 [stopper/0]
root 0 0 00:01:36 12-11:08:57 6 [watchdog/0]
root 0 0 00:26:38 12-11:08:57 7 [migration/1]
root 0 0 00:00:00 12-11:08:57 8 [stopper/1]
root 0 0 00:02:42 12-11:08:57 9 [ksoftirqd/1]
root 0 0 00:01:47 12-11:08:57 10 [watchdog/1]
root 0 0 01:14:35 12-11:08:57 11 [migration/2]
root 0 0 00:00:00 12-11:08:57 12 [stopper/2]
root 0 0 00:01:44 12-11:08:57 13 [ksoftirqd/2]
root 0 0 00:01:18 12-11:08:57 14 [watchdog/2]
root 0 0 00:14:47 12-11:08:57 15 [migration/3]
root 0 0 00:00:00 12-11:08:57 16 [stopper/3]
root 0 0 00:02:10 12-11:08:57 17 [ksoftirqd/3]
root 0 0 00:01:39 12-11:08:57 18 [watchdog/3]
root 0 0 00:46:03 12-11:08:57 19 [migration/4]
root 0 0 00:00:00 12-11:08:57 20 [stopper/4]
root 0 0 00:01:38 12-11:08:57 21 [ksoftirqd/4]
root 0 0 00:00:46 12-11:08:57 22 [watchdog/4]
root 0 0 00:22:39 12-11:08:57 23 [migration/5]
root 0 0 00:00:00 12-11:08:57 24 [stopper/5]
root 0 0 00:01:23 12-11:08:57 25 [ksoftirqd/5]
root 0 0 00:01:08 12-11:08:57 26 [watchdog/5]
root 0 0 00:13:54 12-11:08:57 27 [migration/6]
root 0 0 00:00:00 12-11:08:57 28 [stopper/6]
root 0 0 00:01:21 12-11:08:57 29 [ksoftirqd/6]
root 0 0 00:01:02 12-11:08:57 30 [watchdog/6]
root 0 0 00:10:27 12-11:08:57 31 [migration/7]
root 0 0 00:00:00 12-11:08:57 32 [stopper/7]
root 0 0 00:01:29 12-11:08:57 33 [ksoftirqd/7]
root 0 0 00:00:59 12-11:08:57 34 [watchdog/7]
root 0 0 00:09:03 12-11:08:57 35 [events/0]
root 0 0 00:07:38 12-11:08:57 36 [events/1]
root 0 0 00:05:02 12-11:08:57 37 [events/2]
root 0 0 00:08:05 12-11:08:57 38 [events/3]
root 0 0 00:03:35 12-11:08:57 39 [events/4]
root 0 0 00:04:39 12-11:08:57 40 [events/5]
root 0 0 00:05:01 12-11:08:57 41 [events/6]
root 0 0 00:05:28 12-11:08:57 42 [events/7]
root 0 0 00:00:00 12-11:08:57 43 [events/0]
root 0 0 00:00:00 12-11:08:57 44 [events/1]
root 0 0 00:00:00 12-11:08:57 45 [events/2]
root 0 0 00:00:00 12-11:08:57 46 [events/3]
root 0 0 00:00:00 12-11:08:57 47 [events/4]
root 0 0 00:00:00 12-11:08:57 48 [events/5]
root 0 0 00:00:00 12-11:08:57 49 [events/6]
root 0 0 00:00:00 12-11:08:57 50 [events/7]
root 0 0 00:00:00 12-11:08:57 51 [events_long/0]
root 0 0 00:00:00 12-11:08:57 52 [events_long/1]
root 0 0 00:00:00 12-11:08:57 53 [events_long/2]
root 0 0 00:00:00 12-11:08:57 54 [events_long/3]
root 0 0 00:00:00 12-11:08:57 55 [events_long/4]
root 0 0 00:00:00 12-11:08:57 56 [events_long/5]
root 0 0 00:00:00 12-11:08:57 57 [events_long/6]
root 0 0 00:00:00 12-11:08:57 58 [events_long/7]
root 0 0 00:00:00 12-11:08:57 59 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 60 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 61 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 62 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 63 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 64 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 65 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 66 [events_power_ef]
root 0 0 00:00:00 12-11:08:57 67 [cgroup]
root 0 0 00:00:00 12-11:08:57 68 [khelper]
root 0 0 00:00:00 12-11:08:57 69 [netns]
root 0 0 00:00:00 12-11:08:57 70 [async/mgr]
root 0 0 00:00:00 12-11:08:57 71 [pm]
root 0 0 00:00:29 12-11:08:57 72 [sync_supers]
root 0 0 00:00:00 12-11:08:57 73 [bdi-default]
root 0 0 00:00:00 12-11:08:57 74 [kintegrityd/0]
root 0 0 00:00:00 12-11:08:57 75 [kintegrityd/1]
root 0 0 00:00:00 12-11:08:57 76 [kintegrityd/2]
root 0 0 00:00:00 12-11:08:57 77 [kintegrityd/3]
root 0 0 00:00:00 12-11:08:57 78 [kintegrityd/4]
root 0 0 00:00:00 12-11:08:57 79 [kintegrityd/5]
root 0 0 00:00:00 12-11:08:57 80 [kintegrityd/6]
root 0 0 00:00:00 12-11:08:57 81 [kintegrityd/7]
root 0 0 00:00:32 12-11:08:57 82 [kblockd/0]
root 0 0 00:00:12 12-11:08:57 83 [kblockd/1]
root 0 0 00:45:13 12-11:08:57 84 [kblockd/2]
root 0 0 00:00:03 12-11:08:57 85 [kblockd/3]
root 0 0 00:15:47 12-11:08:57 86 [kblockd/4]
root 0 0 00:00:26 12-11:08:57 87 [kblockd/5]
root 0 0 00:00:08 12-11:08:57 88 [kblockd/6]
root 0 0 00:00:03 12-11:08:57 89 [kblockd/7]
root 0 0 00:00:00 12-11:08:57 90 [kacpid]
root 0 0 00:00:00 12-11:08:57 91 [kacpi_notify]
root 0 0 00:00:00 12-11:08:57 92 [kacpi_hotplug]
root 0 0 00:00:00 12-11:08:57 93 [ata_aux]
root 0 0 00:00:00 12-11:08:57 94 [ata_sff/0]
root 0 0 00:00:00 12-11:08:57 95 [ata_sff/1]
root 0 0 00:00:00 12-11:08:57 96 [ata_sff/2]
root 0 0 00:00:00 12-11:08:57 97 [ata_sff/3]
root 0 0 00:00:00 12-11:08:57 98 [ata_sff/4]
root 0 0 00:00:00 12-11:08:57 99 [ata_sff/5]
root 0 0 00:00:00 12-11:08:57 100 [ata_sff/6]
root 0 0 00:00:00 12-11:08:57 101 [ata_sff/7]
root 0 0 00:00:00 12-11:08:57 102 [ksuspend_usbd]
root 0 0 00:00:00 12-11:08:57 103 [khubd]
root 0 0 00:00:00 12-11:08:57 104 [kseriod]
root 0 0 00:00:00 12-11:08:57 105 [md/0]
root 0 0 00:00:00 12-11:08:57 106 [md/1]
root 0 0 00:00:00 12-11:08:57 107 [md/2]
root 0 0 00:00:00 12-11:08:57 108 [md/3]
root 0 0 00:00:00 12-11:08:57 109 [md/4]
root 0 0 00:00:00 12-11:08:57 110 [md/5]
root 0 0 00:00:00 12-11:08:57 111 [md/6]
root 0 0 00:00:00 12-11:08:57 112 [md/7]
root 0 0 00:00:00 12-11:08:57 113 [md_misc/0]
root 0 0 00:00:00 12-11:08:57 114 [md_misc/1]
root 0 0 00:00:00 12-11:08:57 115 [md_misc/2]
root 0 0 00:00:00 12-11:08:57 116 [md_misc/3]
root 0 0 00:00:00 12-11:08:57 117 [md_misc/4]
root 0 0 00:00:00 12-11:08:57 118 [md_misc/5]
root 0 0 00:00:00 12-11:08:57 119 [md_misc/6]
root 0 0 00:00:00 12-11:08:57 120 [md_misc/7]
root 0 0 00:00:00 12-11:08:57 121 [linkwatch]
root 0 0 00:00:02 12-11:08:56 124 [khungtaskd]
root 0 0 00:39:06 12-11:08:56 125 [kswapd1]
root 0 0 00:00:00 12-11:08:56 126 [ksmd]
root 0 0 00:18:28 12-11:08:56 127 [khugepaged]
root 0 0 00:00:00 12-11:08:56 128 [aio/0]
root 0 0 00:00:00 12-11:08:56 129 [aio/1]
root 0 0 00:00:00 12-11:08:56 130 [aio/2]
root 0 0 00:00:00 12-11:08:56 131 [aio/3]
root 0 0 00:00:00 12-11:08:56 132 [aio/4]
root 0 0 00:00:00 12-11:08:56 133 [aio/5]
root 0 0 00:00:00 12-11:08:56 134 [aio/6]
root 0 0 00:00:00 12-11:08:56 135 [aio/7]
root 0 0 00:00:00 12-11:08:56 136 [crypto/0]
root 0 0 00:00:00 12-11:08:56 137 [crypto/1]
root 0 0 00:00:00 12-11:08:56 138 [crypto/2]
root 0 0 00:00:00 12-11:08:56 139 [crypto/3]
root 0 0 00:00:00 12-11:08:56 140 [crypto/4]
root 0 0 00:00:00 12-11:08:56 141 [crypto/5]
root 0 0 00:00:00 12-11:08:56 142 [crypto/6]
root 0 0 00:00:00 12-11:08:56 143 [crypto/7]
root 0 0 00:00:00 12-11:08:56 150 [kthrotld/0]
root 0 0 00:00:00 12-11:08:56 151 [kthrotld/1]
root 0 0 00:00:00 12-11:08:56 152 [kthrotld/2]
root 0 0 00:00:00 12-11:08:56 153 [kthrotld/3]
root 0 0 00:00:00 12-11:08:56 154 [kthrotld/4]
root 0 0 00:00:00 12-11:08:56 155 [kthrotld/5]
root 0 0 00:00:00 12-11:08:56 156 [kthrotld/6]
root 0 0 00:00:00 12-11:08:56 157 [kthrotld/7]
root 0 0 00:00:00 12-11:08:56 160 [kpsmoused]
root 0 0 00:00:00 12-11:08:56 161 [usbhid_resumer]
root 0 0 00:00:00 12-11:08:56 162 [deferwq]
root 0 0 00:00:00 12-11:08:56 194 [kdmremove]
root 0 0 00:00:00 12-11:08:56 195 [kstriped]
root 0 0 00:00:00 12-11:08:54 734 [scsi_eh_0]
root 0 0 00:00:00 12-11:08:54 735 [scsi_wq_0]
root 0 0 00:00:00 12-11:08:54 748 [scsi_eh_1]
root 0 0 00:00:00 12-11:08:54 749 [scsi_eh_2]
root 0 0 00:00:00 12-11:08:54 750 [scsi_eh_3]
root 0 0 00:00:00 12-11:08:54 751 [scsi_eh_4]
root 0 0 00:00:00 12-11:08:54 752 [scsi_eh_5]
root 0 0 00:00:00 12-11:08:54 753 [scsi_eh_6]
root 0 0 00:02:27 12-11:08:53 947 [md1_raid1]
root 0 0 00:00:16 12-11:08:52 1008 [jbd2/md1-8]
root 0 0 00:00:00 12-11:08:52 1009 [ext4-dio-unwrit]
root 11284 516 00:00:03 12-11:08:51 1102 /sbin/udevd -d
root 0 0 00:02:35 12-11:08:51 1222 [edac-poller]
root 0 0 00:01:25 12-11:08:51 1255 [md2_raid1]
root 0 0 00:18:38 12-11:08:50 1261 [md3_raid1]
root 0 0 00:02:28 12-11:08:50 1264 [md4_raid1]
root 0 0 01:50:23 12-11:08:50 1268 [md5_raid1]
root 0 0 00:00:17 12-11:08:50 1301 [md0_raid1]
root 0 0 00:00:18 12-11:08:48 1832 [flush-9:2]
root 0 0 00:00:58 12-11:08:48 1833 [flush-9:3]
root 0 0 00:02:13 12-11:08:48 1835 [flush-9:5]
root 0 0 00:00:00 12-11:08:48 1872 [jbd2/md0-8]
root 0 0 00:00:00 12-11:08:48 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 12-11:08:48 1876 [xfs_mru_cache]
root 0 0 00:00:00 12-11:08:48 1877 [xfslogd/0]
root 0 0 00:00:00 12-11:08:48 1878 [xfslogd/1]
root 0 0 00:10:01 12-11:08:48 1879 [xfslogd/2]
root 0 0 00:00:00 12-11:08:48 1880 [xfslogd/3]
root 0 0 00:00:29 12-11:08:48 1881 [xfslogd/4]
root 0 0 00:00:00 12-11:08:48 1882 [xfslogd/5]
root 0 0 00:00:00 12-11:08:48 1883 [xfslogd/6]
root 0 0 00:00:00 12-11:08:48 1884 [xfslogd/7]
root 0 0 00:00:00 12-11:08:48 1885 [xfsdatad/0]
root 0 0 00:00:00 12-11:08:48 1886 [xfsdatad/1]
root 0 0 00:07:23 12-11:08:48 1887 [xfsdatad/2]
root 0 0 00:00:00 12-11:08:48 1888 [xfsdatad/3]
root 0 0 00:05:04 12-11:08:48 1889 [xfsdatad/4]
root 0 0 00:00:00 12-11:08:48 1890 [xfsdatad/5]
root 0 0 00:00:00 12-11:08:48 1891 [xfsdatad/6]
root 0 0 00:00:00 12-11:08:48 1892 [xfsdatad/7]
root 0 0 00:00:00 12-11:08:48 1893 [xfsconvertd/0]
root 0 0 00:00:00 12-11:08:48 1894 [xfsconvertd/1]
root 0 0 00:00:00 12-11:08:48 1895 [xfsconvertd/2]
root 0 0 00:00:00 12-11:08:48 1896 [xfsconvertd/3]
root 0 0 00:00:00 12-11:08:48 1897 [xfsconvertd/4]
root 0 0 00:00:00 12-11:08:48 1898 [xfsconvertd/5]
root 0 0 00:00:00 12-11:08:48 1899 [xfsconvertd/6]
root 0 0 00:00:00 12-11:08:48 1900 [xfsconvertd/7]
root 0 0 00:00:00 12-11:08:48 1901 [xfsalloc/0]
root 0 0 00:00:00 12-11:08:48 1902 [xfsalloc/1]
root 0 0 00:00:00 12-11:08:48 1903 [xfsalloc/2]
root 0 0 00:00:00 12-11:08:48 1904 [xfsalloc/3]
root 0 0 00:00:00 12-11:08:48 1905 [xfsalloc/4]
root 0 0 00:00:00 12-11:08:48 1906 [xfsalloc/5]
root 0 0 00:00:00 12-11:08:48 1907 [xfsalloc/6]
root 0 0 00:00:00 12-11:08:48 1908 [xfsalloc/7]
root 0 0 00:00:04 12-11:08:48 1909 [xfseofblocks/0]
root 0 0 00:00:00 12-11:08:48 1910 [xfseofblocks/1]
root 0 0 00:00:00 12-11:08:48 1911 [xfseofblocks/2]
root 0 0 00:00:00 12-11:08:48 1912 [xfseofblocks/3]
root 0 0 00:00:00 12-11:08:48 1913 [xfseofblocks/4]
root 0 0 00:00:00 12-11:08:48 1914 [xfseofblocks/5]
root 0 0 00:00:00 12-11:08:48 1915 [xfseofblocks/6]
root 0 0 00:00:00 12-11:08:48 1916 [xfseofblocks/7]
root 0 0 00:02:00 12-11:08:48 1917 [xfsbufd/md5]
root 0 0 00:01:22 12-11:08:48 1918 [xfs-cil/md5]
root 0 0 00:01:13 12-11:08:48 1919 [xfssyncd/md5]
root 0 0 00:24:12 12-11:08:48 1920 [xfsaild/md5]
root 0 0 00:00:14 12-11:08:47 1921 [jbd2/md2-8]
root 0 0 00:00:00 12-11:08:47 1922 [ext4-dio-unwrit]
root 0 0 00:00:47 12-11:08:47 1923 [xfsbufd/md4]
root 0 0 00:00:02 12-11:08:47 1924 [xfs-cil/md4]
root 0 0 00:00:11 12-11:08:47 1925 [xfssyncd/md4]
root 0 0 00:23:27 12-11:08:47 1926 [xfsaild/md4]
root 0 0 00:02:46 12-11:08:47 1927 [xfsbufd/md3]
root 0 0 00:06:44 12-11:08:47 1928 [xfs-cil/md3]
root 0 0 00:00:20 12-11:08:47 1929 [xfssyncd/md3]
root 0 0 00:24:22 12-11:08:47 1930 [xfsaild/md3]
root 0 0 00:00:06 12-11:08:46 1986 [kauditd]
root 29764 708 00:00:13 12-11:08:28 2241 auditd
root 249856 8928 00:19:52 12-11:08:28 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:05:11 12-11:08:28 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30668 00:05:55 12-11:08:27 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:00 12-11:08:27 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 12-11:08:27 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:02:51 12-11:08:26 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:03 12-11:08:26 2479 /usr/sbin/sshd
root 21712 720 00:00:02 12-11:08:26 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 12-11:08:26 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1164664 43-00:12:41 12-11:08:25 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2024 00:00:05 12-11:08:21 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2012 00:00:05 12-11:08:21 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:05 12-11:08:21 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:05 12-11:08:21 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:05 12-11:08:21 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:01:35 12-11:08:16 3211 sendmail: rejecting connections on daemon MTA: 16 children, max 15
smmsp 78752 780 00:00:15 12-11:08:16 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 564128 33636 00:04:59 12-11:08:09 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:13 12-11:08:09 3244 crond
root 107544 316 00:00:00 12-11:08:07 3296 pure-ftpd (SERVER) 
root 63224 5036 00:00:53 12-11:07:53 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 12-11:07:52 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 12-11:07:52 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 12-11:07:52 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 12-11:07:52 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 12-11:07:52 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 12-11:07:52 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:08 12-11:07:52 3372 /sbin/udevd -d
root 11280 508 00:00:00 12-11:07:52 3373 /sbin/udevd -d
root 0 0 00:35:46 12-11:05:57 3716 [kipmi0]
root 0 0 00:00:18 11-09:33:08 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 11-09:33:08 13330 [xfs-cil/sdc1]
root 0 0 00:01:24 11-09:33:08 13331 [xfssyncd/sdc1]
root 0 0 00:21:26 11-09:33:08 13332 [xfsaild/sdc1]
root 0 0 00:00:00 01:26:04 108824 [flush-8:32]
root 0 0 00:00:00 01:20:51 109632 [flush-9:4]
root 40060 2028 00:00:00 49:36 114120 dovecot/ssl-params
apache 630404 137444 00:00:55 25:36 118333 /usr/sbin/httpd -DSSL
apache 588780 86852 00:01:02 24:32 118552 /usr/sbin/httpd -DSSL
apache 666480 175124 00:00:59 22:33 118731 /usr/sbin/httpd -DSSL
apache 586576 91300 00:00:51 21:42 118936 /usr/sbin/httpd -DSSL
apache 588804 98068 00:00:58 21:41 118938 /usr/sbin/httpd -DSSL
root 15084 3196 00:00:00 20:44 119185 dovecot/config
dovecot 76580 2904 00:00:00 20:44 119186 dovecot/auth
root 96212 3872 00:00:00 17:53 119485 sendmail: ./4B76ktxk084179 relay.cisp.com.: user open
apache 608096 111520 00:00:51 17:47 119486 /usr/sbin/httpd -DSSL
apache 586024 96096 00:00:32 17:36 119488 /usr/sbin/httpd -DSSL
root 96212 3844 00:00:00 14:53 119868 sendmail: ./4B7900HV107390 mail2.gov.bz.: user open
root 96212 3860 00:00:00 13:53 119879 sendmail: ./4B794Drn108577 w2.elistas.net.: user open
apache 587496 92748 00:00:33 13:17 120029 /usr/sbin/httpd -DSSL
apache 593616 90568 00:00:39 13:17 120030 /usr/sbin/httpd -DSSL
root 96212 3856 00:00:00 12:53 120189 sendmail: ./4B78Pemb101559 superpimpf.commline.com.: user open
apache 597144 102572 00:00:27 12:42 120190 /usr/sbin/httpd -DSSL
root 96212 3852 00:00:00 11:53 120193 sendmail: ./4B7GX1WF185993 shazamm.net.: user open
root 96212 3848 00:00:00 10:53 120459 sendmail: ./4B76RSs8080769 mail.co.caldwell.nc.us.: user open
root 96212 3860 00:00:00 09:53 120621 sendmail: ./4B780R61097208 mtbt802.mtbt.com.: user open
apache 617568 112768 00:00:28 09:02 120623 /usr/sbin/httpd -DSSL
apache 588364 84280 00:00:18 09:01 120624 /usr/sbin/httpd -DSSL
apache 585092 80112 00:00:19 09:01 120625 /usr/sbin/httpd -DSSL
root 96212 3828 00:00:00 08:53 120629 sendmail: ./4B7GwHUN190765 mailserv.wpmjhs.ednet.ns.ca.: user open
root 96212 3852 00:00:00 07:53 120764 sendmail: ./4B7GZLYc186333 smtp.carlisle.army.mil.: user open
apache 633132 124048 00:00:13 07:43 120765 /usr/sbin/httpd -DSSL
apache 622724 127644 00:00:21 07:42 120766 /usr/sbin/httpd -DSSL
apache 588136 93088 00:00:18 07:42 120767 /usr/sbin/httpd -DSSL
apache 594224 76444 00:00:14 07:34 120769 /usr/sbin/httpd -DSSL
apache 586648 90960 00:00:25 07:25 120771 /usr/sbin/httpd -DSSL
root 96212 3828 00:00:00 06:53 120977 sendmail: ./4B7GGcp5183411 relay.cisp.com.: user open
root 96212 3820 00:00:00 05:53 121171 sendmail: ./4B85mfcZ063456 mx.phreaker.net.: user open
root 96212 3824 00:00:00 04:53 121173 sendmail: ./4B7GvrFW190760 mailserv.ccrsb.ednet.ns.ca.: user open
apache 586576 87924 00:00:12 04:52 121174 /usr/sbin/httpd -DSSL
root 96212 3820 00:00:00 03:53 121331 sendmail: ./4B7MpHLo243716 mail.undo.net.: user open
apache 601208 82604 00:00:08 03:16 121480 /usr/sbin/httpd -DSSL
root 96212 3776 00:00:00 02:53 121489 sendmail: ./4B8An670106804 mail.ocslink.com.: user open
root 96212 3680 00:00:00 01:53 121495 sendmail: ./4B76aPMN082499 mx11.myoutlookonline.com.: user open
apache 598332 77336 00:00:03 01:52 121496 /usr/sbin/httpd -DSSL
root 96212 3680 00:00:00 00:53 121966 sendmail: ./4B78jAYj105047 mx1.myoutlookonline.com.: user open
root 110772 2072 00:00:00 00:01 122048 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:01 122070 /bin/bash /usr/bin/check_mk_agent
root 110772 1248 00:00:00 00:01 122071 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 122073 cat
root 110900 1168 00:00:00 00:01 122098 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 122099 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 122100 tr -s 
root 19260 792 00:00:00 22:27:50 179915 /usr/sbin/dovecot
dovecot 12980 1044 00:00:00 22:27:50 179917 dovecot/anvil
root 13108 1192 00:00:00 22:27:50 179918 dovecot/log
root 266452 74664 00:00:19 21:08:52 191032 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 268812 76432 00:00:25 21:08:48 191035 spamd child
root 268400 75360 00:00:08 21:08:48 191037 spamd child
root 0 0 00:00:11 11-14:53:38 203424 [flush-9:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-12 01:00

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e436bc4fa4

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1733792101
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:03 10-11:03:02 1 /sbin/init
root 0 0 00:00:00 10-11:03:02 2 [kthreadd]
root 0 0 00:43:46 10-11:03:02 3 [migration/0]
root 0 0 00:02:25 10-11:03:02 4 [ksoftirqd/0]
root 0 0 00:00:00 10-11:03:02 5 [stopper/0]
root 0 0 00:01:16 10-11:03:02 6 [watchdog/0]
root 0 0 00:21:06 10-11:03:02 7 [migration/1]
root 0 0 00:00:00 10-11:03:02 8 [stopper/1]
root 0 0 00:02:19 10-11:03:02 9 [ksoftirqd/1]
root 0 0 00:01:24 10-11:03:02 10 [watchdog/1]
root 0 0 01:00:17 10-11:03:02 11 [migration/2]
root 0 0 00:00:00 10-11:03:02 12 [stopper/2]
root 0 0 00:01:29 10-11:03:02 13 [ksoftirqd/2]
root 0 0 00:01:00 10-11:03:02 14 [watchdog/2]
root 0 0 00:11:56 10-11:03:02 15 [migration/3]
root 0 0 00:00:00 10-11:03:02 16 [stopper/3]
root 0 0 00:01:51 10-11:03:02 17 [ksoftirqd/3]
root 0 0 00:01:17 10-11:03:02 18 [watchdog/3]
root 0 0 00:37:24 10-11:03:02 19 [migration/4]
root 0 0 00:00:00 10-11:03:02 20 [stopper/4]
root 0 0 00:01:23 10-11:03:02 21 [ksoftirqd/4]
root 0 0 00:00:35 10-11:03:02 22 [watchdog/4]
root 0 0 00:18:01 10-11:03:02 23 [migration/5]
root 0 0 00:00:00 10-11:03:02 24 [stopper/5]
root 0 0 00:01:12 10-11:03:02 25 [ksoftirqd/5]
root 0 0 00:00:52 10-11:03:02 26 [watchdog/5]
root 0 0 00:11:08 10-11:03:02 27 [migration/6]
root 0 0 00:00:00 10-11:03:02 28 [stopper/6]
root 0 0 00:01:09 10-11:03:02 29 [ksoftirqd/6]
root 0 0 00:00:48 10-11:03:02 30 [watchdog/6]
root 0 0 00:08:24 10-11:03:02 31 [migration/7]
root 0 0 00:00:00 10-11:03:02 32 [stopper/7]
root 0 0 00:01:16 10-11:03:02 33 [ksoftirqd/7]
root 0 0 00:00:46 10-11:03:02 34 [watchdog/7]
root 0 0 00:07:43 10-11:03:02 35 [events/0]
root 0 0 00:06:30 10-11:03:02 36 [events/1]
root 0 0 00:04:18 10-11:03:02 37 [events/2]
root 0 0 00:06:55 10-11:03:02 38 [events/3]
root 0 0 00:03:02 10-11:03:02 39 [events/4]
root 0 0 00:03:56 10-11:03:02 40 [events/5]
root 0 0 00:04:14 10-11:03:02 41 [events/6]
root 0 0 00:04:32 10-11:03:02 42 [events/7]
root 0 0 00:00:00 10-11:03:02 43 [events/0]
root 0 0 00:00:00 10-11:03:02 44 [events/1]
root 0 0 00:00:00 10-11:03:02 45 [events/2]
root 0 0 00:00:00 10-11:03:02 46 [events/3]
root 0 0 00:00:00 10-11:03:02 47 [events/4]
root 0 0 00:00:00 10-11:03:02 48 [events/5]
root 0 0 00:00:00 10-11:03:02 49 [events/6]
root 0 0 00:00:00 10-11:03:02 50 [events/7]
root 0 0 00:00:00 10-11:03:02 51 [events_long/0]
root 0 0 00:00:00 10-11:03:02 52 [events_long/1]
root 0 0 00:00:00 10-11:03:02 53 [events_long/2]
root 0 0 00:00:00 10-11:03:02 54 [events_long/3]
root 0 0 00:00:00 10-11:03:02 55 [events_long/4]
root 0 0 00:00:00 10-11:03:02 56 [events_long/5]
root 0 0 00:00:00 10-11:03:02 57 [events_long/6]
root 0 0 00:00:00 10-11:03:02 58 [events_long/7]
root 0 0 00:00:00 10-11:03:02 59 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 60 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 61 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 62 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 63 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 64 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 65 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 66 [events_power_ef]
root 0 0 00:00:00 10-11:03:02 67 [cgroup]
root 0 0 00:00:00 10-11:03:02 68 [khelper]
root 0 0 00:00:00 10-11:03:02 69 [netns]
root 0 0 00:00:00 10-11:03:02 70 [async/mgr]
root 0 0 00:00:00 10-11:03:02 71 [pm]
root 0 0 00:00:26 10-11:03:02 72 [sync_supers]
root 0 0 00:00:00 10-11:03:02 73 [bdi-default]
root 0 0 00:00:00 10-11:03:02 74 [kintegrityd/0]
root 0 0 00:00:00 10-11:03:02 75 [kintegrityd/1]
root 0 0 00:00:00 10-11:03:02 76 [kintegrityd/2]
root 0 0 00:00:00 10-11:03:02 77 [kintegrityd/3]
root 0 0 00:00:00 10-11:03:02 78 [kintegrityd/4]
root 0 0 00:00:00 10-11:03:02 79 [kintegrityd/5]
root 0 0 00:00:00 10-11:03:02 80 [kintegrityd/6]
root 0 0 00:00:00 10-11:03:02 81 [kintegrityd/7]
root 0 0 00:00:28 10-11:03:02 82 [kblockd/0]
root 0 0 00:00:10 10-11:03:02 83 [kblockd/1]
root 0 0 00:37:52 10-11:03:02 84 [kblockd/2]
root 0 0 00:00:03 10-11:03:02 85 [kblockd/3]
root 0 0 00:13:53 10-11:03:02 86 [kblockd/4]
root 0 0 00:00:23 10-11:03:02 87 [kblockd/5]
root 0 0 00:00:06 10-11:03:02 88 [kblockd/6]
root 0 0 00:00:02 10-11:03:02 89 [kblockd/7]
root 0 0 00:00:00 10-11:03:02 90 [kacpid]
root 0 0 00:00:00 10-11:03:02 91 [kacpi_notify]
root 0 0 00:00:00 10-11:03:02 92 [kacpi_hotplug]
root 0 0 00:00:00 10-11:03:02 93 [ata_aux]
root 0 0 00:00:00 10-11:03:02 94 [ata_sff/0]
root 0 0 00:00:00 10-11:03:02 95 [ata_sff/1]
root 0 0 00:00:00 10-11:03:02 96 [ata_sff/2]
root 0 0 00:00:00 10-11:03:02 97 [ata_sff/3]
root 0 0 00:00:00 10-11:03:02 98 [ata_sff/4]
root 0 0 00:00:00 10-11:03:02 99 [ata_sff/5]
root 0 0 00:00:00 10-11:03:02 100 [ata_sff/6]
root 0 0 00:00:00 10-11:03:02 101 [ata_sff/7]
root 0 0 00:00:00 10-11:03:02 102 [ksuspend_usbd]
root 0 0 00:00:00 10-11:03:02 103 [khubd]
root 0 0 00:00:00 10-11:03:02 104 [kseriod]
root 0 0 00:00:00 10-11:03:02 105 [md/0]
root 0 0 00:00:00 10-11:03:02 106 [md/1]
root 0 0 00:00:00 10-11:03:02 107 [md/2]
root 0 0 00:00:00 10-11:03:02 108 [md/3]
root 0 0 00:00:00 10-11:03:02 109 [md/4]
root 0 0 00:00:00 10-11:03:02 110 [md/5]
root 0 0 00:00:00 10-11:03:02 111 [md/6]
root 0 0 00:00:00 10-11:03:02 112 [md/7]
root 0 0 00:00:00 10-11:03:02 113 [md_misc/0]
root 0 0 00:00:00 10-11:03:02 114 [md_misc/1]
root 0 0 00:00:00 10-11:03:02 115 [md_misc/2]
root 0 0 00:00:00 10-11:03:02 116 [md_misc/3]
root 0 0 00:00:00 10-11:03:02 117 [md_misc/4]
root 0 0 00:00:00 10-11:03:02 118 [md_misc/5]
root 0 0 00:00:00 10-11:03:02 119 [md_misc/6]
root 0 0 00:00:00 10-11:03:02 120 [md_misc/7]
root 0 0 00:00:00 10-11:03:02 121 [linkwatch]
root 0 0 00:00:02 10-11:03:01 124 [khungtaskd]
root 0 0 00:35:23 10-11:03:01 125 [kswapd1]
root 0 0 00:00:00 10-11:03:01 126 [ksmd]
root 0 0 00:15:08 10-11:03:01 127 [khugepaged]
root 0 0 00:00:00 10-11:03:01 128 [aio/0]
root 0 0 00:00:00 10-11:03:01 129 [aio/1]
root 0 0 00:00:00 10-11:03:01 130 [aio/2]
root 0 0 00:00:00 10-11:03:01 131 [aio/3]
root 0 0 00:00:00 10-11:03:01 132 [aio/4]
root 0 0 00:00:00 10-11:03:01 133 [aio/5]
root 0 0 00:00:00 10-11:03:01 134 [aio/6]
root 0 0 00:00:00 10-11:03:01 135 [aio/7]
root 0 0 00:00:00 10-11:03:01 136 [crypto/0]
root 0 0 00:00:00 10-11:03:01 137 [crypto/1]
root 0 0 00:00:00 10-11:03:01 138 [crypto/2]
root 0 0 00:00:00 10-11:03:01 139 [crypto/3]
root 0 0 00:00:00 10-11:03:01 140 [crypto/4]
root 0 0 00:00:00 10-11:03:01 141 [crypto/5]
root 0 0 00:00:00 10-11:03:01 142 [crypto/6]
root 0 0 00:00:00 10-11:03:01 143 [crypto/7]
root 0 0 00:00:00 10-11:03:01 150 [kthrotld/0]
root 0 0 00:00:00 10-11:03:01 151 [kthrotld/1]
root 0 0 00:00:00 10-11:03:01 152 [kthrotld/2]
root 0 0 00:00:00 10-11:03:01 153 [kthrotld/3]
root 0 0 00:00:00 10-11:03:01 154 [kthrotld/4]
root 0 0 00:00:00 10-11:03:01 155 [kthrotld/5]
root 0 0 00:00:00 10-11:03:01 156 [kthrotld/6]
root 0 0 00:00:00 10-11:03:01 157 [kthrotld/7]
root 0 0 00:00:00 10-11:03:01 160 [kpsmoused]
root 0 0 00:00:00 10-11:03:01 161 [usbhid_resumer]
root 0 0 00:00:00 10-11:03:01 162 [deferwq]
root 0 0 00:00:00 10-11:03:01 194 [kdmremove]
root 0 0 00:00:00 10-11:03:01 195 [kstriped]
root 0 0 00:00:00 10-11:02:59 734 [scsi_eh_0]
root 0 0 00:00:00 10-11:02:59 735 [scsi_wq_0]
root 0 0 00:00:00 10-11:02:59 748 [scsi_eh_1]
root 0 0 00:00:00 10-11:02:59 749 [scsi_eh_2]
root 0 0 00:00:00 10-11:02:59 750 [scsi_eh_3]
root 0 0 00:00:00 10-11:02:59 751 [scsi_eh_4]
root 0 0 00:00:00 10-11:02:59 752 [scsi_eh_5]
root 0 0 00:00:00 10-11:02:59 753 [scsi_eh_6]
root 0 0 00:02:23 10-11:02:58 947 [md1_raid1]
root 0 0 00:00:15 10-11:02:57 1008 [jbd2/md1-8]
root 0 0 00:00:00 10-11:02:57 1009 [ext4-dio-unwrit]
root 11284 516 00:00:03 10-11:02:56 1102 /sbin/udevd -d
root 0 0 00:02:17 10-11:02:56 1222 [edac-poller]
root 0 0 00:01:20 10-11:02:56 1255 [md2_raid1]
root 0 0 00:14:52 10-11:02:55 1261 [md3_raid1]
root 0 0 00:02:18 10-11:02:55 1264 [md4_raid1]
root 0 0 01:40:47 10-11:02:55 1268 [md5_raid1]
root 0 0 00:00:17 10-11:02:55 1301 [md0_raid1]
root 0 0 00:00:16 10-11:02:53 1832 [flush-9:2]
root 0 0 00:00:50 10-11:02:53 1833 [flush-9:3]
root 0 0 00:01:58 10-11:02:53 1835 [flush-9:5]
root 0 0 00:00:00 10-11:02:53 1872 [jbd2/md0-8]
root 0 0 00:00:00 10-11:02:53 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 10-11:02:53 1876 [xfs_mru_cache]
root 0 0 00:00:00 10-11:02:53 1877 [xfslogd/0]
root 0 0 00:00:00 10-11:02:53 1878 [xfslogd/1]
root 0 0 00:07:35 10-11:02:53 1879 [xfslogd/2]
root 0 0 00:00:00 10-11:02:53 1880 [xfslogd/3]
root 0 0 00:00:26 10-11:02:53 1881 [xfslogd/4]
root 0 0 00:00:00 10-11:02:53 1882 [xfslogd/5]
root 0 0 00:00:00 10-11:02:53 1883 [xfslogd/6]
root 0 0 00:00:00 10-11:02:53 1884 [xfslogd/7]
root 0 0 00:00:00 10-11:02:53 1885 [xfsdatad/0]
root 0 0 00:00:00 10-11:02:53 1886 [xfsdatad/1]
root 0 0 00:06:45 10-11:02:53 1887 [xfsdatad/2]
root 0 0 00:00:00 10-11:02:53 1888 [xfsdatad/3]
root 0 0 00:04:53 10-11:02:53 1889 [xfsdatad/4]
root 0 0 00:00:00 10-11:02:53 1890 [xfsdatad/5]
root 0 0 00:00:00 10-11:02:53 1891 [xfsdatad/6]
root 0 0 00:00:00 10-11:02:53 1892 [xfsdatad/7]
root 0 0 00:00:00 10-11:02:53 1893 [xfsconvertd/0]
root 0 0 00:00:00 10-11:02:53 1894 [xfsconvertd/1]
root 0 0 00:00:00 10-11:02:53 1895 [xfsconvertd/2]
root 0 0 00:00:00 10-11:02:53 1896 [xfsconvertd/3]
root 0 0 00:00:00 10-11:02:53 1897 [xfsconvertd/4]
root 0 0 00:00:00 10-11:02:53 1898 [xfsconvertd/5]
root 0 0 00:00:00 10-11:02:53 1899 [xfsconvertd/6]
root 0 0 00:00:00 10-11:02:53 1900 [xfsconvertd/7]
root 0 0 00:00:00 10-11:02:53 1901 [xfsalloc/0]
root 0 0 00:00:00 10-11:02:53 1902 [xfsalloc/1]
root 0 0 00:00:00 10-11:02:53 1903 [xfsalloc/2]
root 0 0 00:00:00 10-11:02:53 1904 [xfsalloc/3]
root 0 0 00:00:00 10-11:02:53 1905 [xfsalloc/4]
root 0 0 00:00:00 10-11:02:53 1906 [xfsalloc/5]
root 0 0 00:00:00 10-11:02:53 1907 [xfsalloc/6]
root 0 0 00:00:00 10-11:02:53 1908 [xfsalloc/7]
root 0 0 00:00:03 10-11:02:53 1909 [xfseofblocks/0]
root 0 0 00:00:00 10-11:02:53 1910 [xfseofblocks/1]
root 0 0 00:00:00 10-11:02:53 1911 [xfseofblocks/2]
root 0 0 00:00:00 10-11:02:53 1912 [xfseofblocks/3]
root 0 0 00:00:00 10-11:02:53 1913 [xfseofblocks/4]
root 0 0 00:00:00 10-11:02:53 1914 [xfseofblocks/5]
root 0 0 00:00:00 10-11:02:53 1915 [xfseofblocks/6]
root 0 0 00:00:00 10-11:02:53 1916 [xfseofblocks/7]
root 0 0 00:01:45 10-11:02:53 1917 [xfsbufd/md5]
root 0 0 00:01:09 10-11:02:53 1918 [xfs-cil/md5]
root 0 0 00:01:03 10-11:02:53 1919 [xfssyncd/md5]
root 0 0 00:21:02 10-11:02:53 1920 [xfsaild/md5]
root 0 0 00:00:12 10-11:02:52 1921 [jbd2/md2-8]
root 0 0 00:00:00 10-11:02:52 1922 [ext4-dio-unwrit]
root 0 0 00:00:42 10-11:02:52 1923 [xfsbufd/md4]
root 0 0 00:00:01 10-11:02:52 1924 [xfs-cil/md4]
root 0 0 00:00:10 10-11:02:52 1925 [xfssyncd/md4]
root 0 0 00:20:24 10-11:02:52 1926 [xfsaild/md4]
root 0 0 00:02:20 10-11:02:52 1927 [xfsbufd/md3]
root 0 0 00:04:44 10-11:02:52 1928 [xfs-cil/md3]
root 0 0 00:00:16 10-11:02:52 1929 [xfssyncd/md3]
root 0 0 00:21:02 10-11:02:52 1930 [xfsaild/md3]
root 0 0 00:00:05 10-11:02:51 1986 [kauditd]
root 29764 708 00:00:11 10-11:02:33 2241 auditd
root 249856 8032 00:15:49 10-11:02:33 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:04:20 10-11:02:33 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30476 00:05:04 10-11:02:32 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:00 10-11:02:32 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 10-11:02:32 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:02:30 10-11:02:31 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:03 10-11:02:31 2479 /usr/sbin/sshd
root 21712 720 00:00:02 10-11:02:31 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 10-11:02:31 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1187620 37-00:46:05 10-11:02:30 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2024 00:00:05 10-11:02:26 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2012 00:00:05 10-11:02:26 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:05 10-11:02:26 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:05 10-11:02:26 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:05 10-11:02:26 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:01:25 10-11:02:21 3211 sendmail: rejecting connections on daemon MTA: 17 children, max 15
smmsp 78752 780 00:00:13 10-11:02:21 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 564128 33636 00:04:20 10-11:02:14 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:11 10-11:02:14 3244 crond
root 107544 316 00:00:00 10-11:02:12 3296 pure-ftpd (SERVER) 
root 63224 5268 00:00:45 10-11:01:58 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 10-11:01:57 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 10-11:01:57 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 10-11:01:57 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 10-11:01:57 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 10-11:01:57 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 10-11:01:57 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:07 10-11:01:57 3372 /sbin/udevd -d
root 11280 508 00:00:00 10-11:01:57 3373 /sbin/udevd -d
root 0 0 00:30:01 10-11:00:02 3716 [kipmi0]
root 19260 796 00:00:01 22:06:41 4359 /usr/sbin/dovecot
dovecot 12980 1100 00:00:00 22:06:41 4361 dovecot/anvil
root 13108 1204 00:00:00 22:06:41 4362 dovecot/log
root 0 0 00:00:18 9-09:27:13 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 9-09:27:13 13330 [xfs-cil/sdc1]
root 0 0 00:01:23 9-09:27:13 13331 [xfssyncd/sdc1]
root 0 0 00:18:15 9-09:27:13 13332 [xfsaild/sdc1]
root 266604 74756 00:00:35 1-19:47:35 57927 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269288 77444 00:00:25 1-19:47:30 57928 spamd child
root 268348 75396 00:00:02 1-19:47:30 57930 spamd child
apache 587164 95680 00:00:54 40:43 187054 /usr/sbin/httpd -DSSL
apache 598876 107404 00:00:49 40:22 187065 /usr/sbin/httpd -DSSL
apache 623568 131584 00:00:57 40:11 187228 /usr/sbin/httpd -DSSL
apache 590332 97392 00:00:53 39:47 187452 /usr/sbin/httpd -DSSL
apache 594328 101288 00:00:45 39:47 187453 /usr/sbin/httpd -DSSL
apache 594480 101024 00:00:56 39:39 187455 /usr/sbin/httpd -DSSL
apache 585896 95640 00:00:55 39:36 187457 /usr/sbin/httpd -DSSL
apache 591196 100596 00:00:47 35:24 187781 /usr/sbin/httpd -DSSL
apache 668412 178136 00:00:59 35:23 187782 /usr/sbin/httpd -DSSL
apache 592580 102412 00:00:53 35:21 187784 /usr/sbin/httpd -DSSL
apache 587520 90584 00:00:38 28:14 189522 /usr/sbin/httpd -DSSL
apache 593104 98784 00:00:15 19:21 190766 /usr/sbin/httpd -DSSL
apache 588152 92560 00:00:16 18:41 190926 /usr/sbin/httpd -DSSL
root 96212 3872 00:00:00 16:01 191095 sendmail: ./4B76ktxk084179 relay.cisp.com.: user open
root 96844 5644 00:00:00 15:01 191409 sendmail: ./4B76VGqc081484 mx1.free.fr.: user open
root 96844 5640 00:00:00 14:01 191515 sendmail: ./4B76UQOf081325 mx1.free.fr.: user open
root 96212 3864 00:00:00 13:01 191521 sendmail: ./4B7EJAef162321 mx.phreaker.net.: user open
root 96212 3860 00:00:00 12:01 191807 sendmail: ./4B78f8ns104328 superpimpf.commline.com.: user open
root 96212 3848 00:00:00 11:01 191818 sendmail: ./4B780R61097208 mtbt802.mtbt.com.: user open
apache 607464 113536 00:00:12 10:03 192219 /usr/sbin/httpd -DSSL
root 96212 3836 00:00:00 10:01 192220 sendmail: ./4B794Tv6108590 w2.elistas.net.: user open
root 96212 3844 00:00:00 09:01 192442 sendmail: ./4B7900HV107390 mail2.gov.bz.: user open
root 96212 3844 00:00:00 08:01 192454 sendmail: ./4B7GGcp5183411 relay.cisp.com.: user open
apache 606336 100200 00:00:12 08:01 192455 /usr/sbin/httpd -DSSL
apache 583140 73728 00:00:05 07:36 192604 /usr/sbin/httpd -DSSL
root 96212 3828 00:00:00 07:01 192605 sendmail: ./4B7GZLYc186333 smtp.carlisle.army.mil.: user open
root 96212 3820 00:00:00 06:01 192767 sendmail: ./4B7GX1WF185993 shazamm.net.: user open
root 96212 3840 00:00:00 05:01 192926 sendmail: ./4B7Gg8aR187879 mailserver.lrrail.com.: user open
root 96212 3816 00:00:00 04:01 193035 sendmail: ./4B76aPMN082499 mx11.myoutlookonline.com.: user open
root 15084 3196 00:00:00 03:29 193198 dovecot/config
dovecot 76580 2904 00:00:00 03:29 193199 dovecot/auth
root 96212 3784 00:00:00 03:01 193200 sendmail: ./4B85mfcZ063456 mx.phreaker.net.: user open
root 96212 3776 00:00:00 02:01 193352 sendmail: ./4B76actS082503 smtp2.stcg.net.: user open
root 96212 3696 00:00:00 01:01 193359 sendmail: ./4B89qwjH098632 116.228.87.147.: user open
root 0 0 00:00:00 00:56 193518 [flush-9:4]
root 0 0 00:00:00 00:12 193648 [flush-8:32]
root 96212 3672 00:00:00 00:01 193759 sendmail: ./4B8An670106804 mail.ocslink.com.: user open
root 110772 2076 00:00:00 00:01 193820 /bin/bash /usr/bin/check_mk_agent
root 110900 1696 00:00:00 00:01 193900 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 193901 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 193902 cat
root 110900 1176 00:00:00 00:01 193928 /bin/bash /usr/bin/check_mk_agent
root 13364 1012 00:00:00 00:01 193929 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 193930 tr -s 
root 0 0 00:00:10 9-14:47:43 203424 [flush-9:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-10 00:55

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e42eaf6de8

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1733618381
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:03 8-10:47:42 1 /sbin/init
root 0 0 00:00:00 8-10:47:42 2 [kthreadd]
root 0 0 00:32:55 8-10:47:42 3 [migration/0]
root 0 0 00:02:03 8-10:47:42 4 [ksoftirqd/0]
root 0 0 00:00:00 8-10:47:42 5 [stopper/0]
root 0 0 00:01:03 8-10:47:42 6 [watchdog/0]
root 0 0 00:15:35 8-10:47:42 7 [migration/1]
root 0 0 00:00:00 8-10:47:42 8 [stopper/1]
root 0 0 00:01:58 8-10:47:42 9 [ksoftirqd/1]
root 0 0 00:01:08 8-10:47:42 10 [watchdog/1]
root 0 0 00:46:15 8-10:47:42 11 [migration/2]
root 0 0 00:00:00 8-10:47:42 12 [stopper/2]
root 0 0 00:01:17 8-10:47:42 13 [ksoftirqd/2]
root 0 0 00:00:50 8-10:47:42 14 [watchdog/2]
root 0 0 00:09:10 8-10:47:42 15 [migration/3]
root 0 0 00:00:00 8-10:47:42 16 [stopper/3]
root 0 0 00:01:37 8-10:47:42 17 [ksoftirqd/3]
root 0 0 00:01:03 8-10:47:42 18 [watchdog/3]
root 0 0 00:28:44 8-10:47:42 19 [migration/4]
root 0 0 00:00:00 8-10:47:42 20 [stopper/4]
root 0 0 00:01:11 8-10:47:42 21 [ksoftirqd/4]
root 0 0 00:00:27 8-10:47:42 22 [watchdog/4]
root 0 0 00:13:05 8-10:47:42 23 [migration/5]
root 0 0 00:00:00 8-10:47:42 24 [stopper/5]
root 0 0 00:01:02 8-10:47:42 25 [ksoftirqd/5]
root 0 0 00:00:41 8-10:47:42 26 [watchdog/5]
root 0 0 00:08:15 8-10:47:42 27 [migration/6]
root 0 0 00:00:00 8-10:47:42 28 [stopper/6]
root 0 0 00:01:00 8-10:47:42 29 [ksoftirqd/6]
root 0 0 00:00:37 8-10:47:42 30 [watchdog/6]
root 0 0 00:06:25 8-10:47:42 31 [migration/7]
root 0 0 00:00:00 8-10:47:42 32 [stopper/7]
root 0 0 00:01:05 8-10:47:42 33 [ksoftirqd/7]
root 0 0 00:00:37 8-10:47:42 34 [watchdog/7]
root 0 0 00:06:33 8-10:47:42 35 [events/0]
root 0 0 00:05:33 8-10:47:42 36 [events/1]
root 0 0 00:03:44 8-10:47:42 37 [events/2]
root 0 0 00:05:58 8-10:47:42 38 [events/3]
root 0 0 00:02:32 8-10:47:42 39 [events/4]
root 0 0 00:03:16 8-10:47:42 40 [events/5]
root 0 0 00:03:31 8-10:47:42 41 [events/6]
root 0 0 00:03:47 8-10:47:42 42 [events/7]
root 0 0 00:00:00 8-10:47:42 43 [events/0]
root 0 0 00:00:00 8-10:47:42 44 [events/1]
root 0 0 00:00:00 8-10:47:42 45 [events/2]
root 0 0 00:00:00 8-10:47:42 46 [events/3]
root 0 0 00:00:00 8-10:47:42 47 [events/4]
root 0 0 00:00:00 8-10:47:42 48 [events/5]
root 0 0 00:00:00 8-10:47:42 49 [events/6]
root 0 0 00:00:00 8-10:47:42 50 [events/7]
root 0 0 00:00:00 8-10:47:42 51 [events_long/0]
root 0 0 00:00:00 8-10:47:42 52 [events_long/1]
root 0 0 00:00:00 8-10:47:42 53 [events_long/2]
root 0 0 00:00:00 8-10:47:42 54 [events_long/3]
root 0 0 00:00:00 8-10:47:42 55 [events_long/4]
root 0 0 00:00:00 8-10:47:42 56 [events_long/5]
root 0 0 00:00:00 8-10:47:42 57 [events_long/6]
root 0 0 00:00:00 8-10:47:42 58 [events_long/7]
root 0 0 00:00:00 8-10:47:42 59 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 60 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 61 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 62 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 63 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 64 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 65 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 66 [events_power_ef]
root 0 0 00:00:00 8-10:47:42 67 [cgroup]
root 0 0 00:00:00 8-10:47:42 68 [khelper]
root 0 0 00:00:00 8-10:47:42 69 [netns]
root 0 0 00:00:00 8-10:47:42 70 [async/mgr]
root 0 0 00:00:00 8-10:47:42 71 [pm]
root 0 0 00:00:23 8-10:47:42 72 [sync_supers]
root 0 0 00:00:00 8-10:47:42 73 [bdi-default]
root 0 0 00:00:00 8-10:47:42 74 [kintegrityd/0]
root 0 0 00:00:00 8-10:47:42 75 [kintegrityd/1]
root 0 0 00:00:00 8-10:47:42 76 [kintegrityd/2]
root 0 0 00:00:00 8-10:47:42 77 [kintegrityd/3]
root 0 0 00:00:00 8-10:47:42 78 [kintegrityd/4]
root 0 0 00:00:00 8-10:47:42 79 [kintegrityd/5]
root 0 0 00:00:00 8-10:47:42 80 [kintegrityd/6]
root 0 0 00:00:00 8-10:47:42 81 [kintegrityd/7]
root 0 0 00:00:21 8-10:47:42 82 [kblockd/0]
root 0 0 00:00:06 8-10:47:42 83 [kblockd/1]
root 0 0 00:30:24 8-10:47:42 84 [kblockd/2]
root 0 0 00:00:02 8-10:47:42 85 [kblockd/3]
root 0 0 00:11:21 8-10:47:42 86 [kblockd/4]
root 0 0 00:00:16 8-10:47:42 87 [kblockd/5]
root 0 0 00:00:03 8-10:47:42 88 [kblockd/6]
root 0 0 00:00:01 8-10:47:42 89 [kblockd/7]
root 0 0 00:00:00 8-10:47:42 90 [kacpid]
root 0 0 00:00:00 8-10:47:42 91 [kacpi_notify]
root 0 0 00:00:00 8-10:47:42 92 [kacpi_hotplug]
root 0 0 00:00:00 8-10:47:42 93 [ata_aux]
root 0 0 00:00:00 8-10:47:42 94 [ata_sff/0]
root 0 0 00:00:00 8-10:47:42 95 [ata_sff/1]
root 0 0 00:00:00 8-10:47:42 96 [ata_sff/2]
root 0 0 00:00:00 8-10:47:42 97 [ata_sff/3]
root 0 0 00:00:00 8-10:47:42 98 [ata_sff/4]
root 0 0 00:00:00 8-10:47:42 99 [ata_sff/5]
root 0 0 00:00:00 8-10:47:42 100 [ata_sff/6]
root 0 0 00:00:00 8-10:47:42 101 [ata_sff/7]
root 0 0 00:00:00 8-10:47:42 102 [ksuspend_usbd]
root 0 0 00:00:00 8-10:47:42 103 [khubd]
root 0 0 00:00:00 8-10:47:42 104 [kseriod]
root 0 0 00:00:00 8-10:47:42 105 [md/0]
root 0 0 00:00:00 8-10:47:42 106 [md/1]
root 0 0 00:00:00 8-10:47:42 107 [md/2]
root 0 0 00:00:00 8-10:47:42 108 [md/3]
root 0 0 00:00:00 8-10:47:42 109 [md/4]
root 0 0 00:00:00 8-10:47:42 110 [md/5]
root 0 0 00:00:00 8-10:47:42 111 [md/6]
root 0 0 00:00:00 8-10:47:42 112 [md/7]
root 0 0 00:00:00 8-10:47:42 113 [md_misc/0]
root 0 0 00:00:00 8-10:47:42 114 [md_misc/1]
root 0 0 00:00:00 8-10:47:42 115 [md_misc/2]
root 0 0 00:00:00 8-10:47:42 116 [md_misc/3]
root 0 0 00:00:00 8-10:47:42 117 [md_misc/4]
root 0 0 00:00:00 8-10:47:42 118 [md_misc/5]
root 0 0 00:00:00 8-10:47:42 119 [md_misc/6]
root 0 0 00:00:00 8-10:47:42 120 [md_misc/7]
root 0 0 00:00:00 8-10:47:42 121 [linkwatch]
root 0 0 00:00:01 8-10:47:41 124 [khungtaskd]
root 0 0 00:31:36 8-10:47:41 125 [kswapd1]
root 0 0 00:00:00 8-10:47:41 126 [ksmd]
root 0 0 00:11:57 8-10:47:41 127 [khugepaged]
root 0 0 00:00:00 8-10:47:41 128 [aio/0]
root 0 0 00:00:00 8-10:47:41 129 [aio/1]
root 0 0 00:00:00 8-10:47:41 130 [aio/2]
root 0 0 00:00:00 8-10:47:41 131 [aio/3]
root 0 0 00:00:00 8-10:47:41 132 [aio/4]
root 0 0 00:00:00 8-10:47:41 133 [aio/5]
root 0 0 00:00:00 8-10:47:41 134 [aio/6]
root 0 0 00:00:00 8-10:47:41 135 [aio/7]
root 0 0 00:00:00 8-10:47:41 136 [crypto/0]
root 0 0 00:00:00 8-10:47:41 137 [crypto/1]
root 0 0 00:00:00 8-10:47:41 138 [crypto/2]
root 0 0 00:00:00 8-10:47:41 139 [crypto/3]
root 0 0 00:00:00 8-10:47:41 140 [crypto/4]
root 0 0 00:00:00 8-10:47:41 141 [crypto/5]
root 0 0 00:00:00 8-10:47:41 142 [crypto/6]
root 0 0 00:00:00 8-10:47:41 143 [crypto/7]
root 0 0 00:00:00 8-10:47:41 150 [kthrotld/0]
root 0 0 00:00:00 8-10:47:41 151 [kthrotld/1]
root 0 0 00:00:00 8-10:47:41 152 [kthrotld/2]
root 0 0 00:00:00 8-10:47:41 153 [kthrotld/3]
root 0 0 00:00:00 8-10:47:41 154 [kthrotld/4]
root 0 0 00:00:00 8-10:47:41 155 [kthrotld/5]
root 0 0 00:00:00 8-10:47:41 156 [kthrotld/6]
root 0 0 00:00:00 8-10:47:41 157 [kthrotld/7]
root 0 0 00:00:00 8-10:47:41 160 [kpsmoused]
root 0 0 00:00:00 8-10:47:41 161 [usbhid_resumer]
root 0 0 00:00:00 8-10:47:41 162 [deferwq]
root 0 0 00:00:00 8-10:47:41 194 [kdmremove]
root 0 0 00:00:00 8-10:47:41 195 [kstriped]
root 0 0 00:00:00 8-10:47:39 734 [scsi_eh_0]
root 0 0 00:00:00 8-10:47:39 735 [scsi_wq_0]
root 0 0 00:00:00 8-10:47:39 748 [scsi_eh_1]
root 0 0 00:00:00 8-10:47:39 749 [scsi_eh_2]
root 0 0 00:00:00 8-10:47:39 750 [scsi_eh_3]
root 0 0 00:00:00 8-10:47:39 751 [scsi_eh_4]
root 0 0 00:00:00 8-10:47:39 752 [scsi_eh_5]
root 0 0 00:00:00 8-10:47:39 753 [scsi_eh_6]
root 0 0 00:01:42 8-10:47:38 947 [md1_raid1]
root 0 0 00:00:14 8-10:47:37 1008 [jbd2/md1-8]
root 0 0 00:00:00 8-10:47:37 1009 [ext4-dio-unwrit]
root 11284 516 00:00:02 8-10:47:36 1102 /sbin/udevd -d
root 0 0 00:02:05 8-10:47:36 1222 [edac-poller]
root 0 0 00:00:59 8-10:47:36 1255 [md2_raid1]
root 0 0 00:10:50 8-10:47:35 1261 [md3_raid1]
root 0 0 00:01:34 8-10:47:35 1264 [md4_raid1]
root 0 0 01:11:03 8-10:47:35 1268 [md5_raid1]
root 0 0 00:00:08 8-10:47:35 1301 [md0_raid1]
root 0 0 00:00:16 8-10:47:33 1832 [flush-9:2]
root 0 0 00:00:44 8-10:47:33 1833 [flush-9:3]
root 0 0 00:01:45 8-10:47:33 1835 [flush-9:5]
root 0 0 00:00:00 8-10:47:33 1872 [jbd2/md0-8]
root 0 0 00:00:00 8-10:47:33 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 8-10:47:33 1876 [xfs_mru_cache]
root 0 0 00:00:00 8-10:47:33 1877 [xfslogd/0]
root 0 0 00:00:00 8-10:47:33 1878 [xfslogd/1]
root 0 0 00:05:09 8-10:47:33 1879 [xfslogd/2]
root 0 0 00:00:00 8-10:47:33 1880 [xfslogd/3]
root 0 0 00:00:23 8-10:47:33 1881 [xfslogd/4]
root 0 0 00:00:00 8-10:47:33 1882 [xfslogd/5]
root 0 0 00:00:00 8-10:47:33 1883 [xfslogd/6]
root 0 0 00:00:00 8-10:47:33 1884 [xfslogd/7]
root 0 0 00:00:00 8-10:47:33 1885 [xfsdatad/0]
root 0 0 00:00:00 8-10:47:33 1886 [xfsdatad/1]
root 0 0 00:06:11 8-10:47:33 1887 [xfsdatad/2]
root 0 0 00:00:00 8-10:47:33 1888 [xfsdatad/3]
root 0 0 00:04:41 8-10:47:33 1889 [xfsdatad/4]
root 0 0 00:00:00 8-10:47:33 1890 [xfsdatad/5]
root 0 0 00:00:00 8-10:47:33 1891 [xfsdatad/6]
root 0 0 00:00:00 8-10:47:33 1892 [xfsdatad/7]
root 0 0 00:00:00 8-10:47:33 1893 [xfsconvertd/0]
root 0 0 00:00:00 8-10:47:33 1894 [xfsconvertd/1]
root 0 0 00:00:00 8-10:47:33 1895 [xfsconvertd/2]
root 0 0 00:00:00 8-10:47:33 1896 [xfsconvertd/3]
root 0 0 00:00:00 8-10:47:33 1897 [xfsconvertd/4]
root 0 0 00:00:00 8-10:47:33 1898 [xfsconvertd/5]
root 0 0 00:00:00 8-10:47:33 1899 [xfsconvertd/6]
root 0 0 00:00:00 8-10:47:33 1900 [xfsconvertd/7]
root 0 0 00:00:00 8-10:47:33 1901 [xfsalloc/0]
root 0 0 00:00:00 8-10:47:33 1902 [xfsalloc/1]
root 0 0 00:00:00 8-10:47:33 1903 [xfsalloc/2]
root 0 0 00:00:00 8-10:47:33 1904 [xfsalloc/3]
root 0 0 00:00:00 8-10:47:33 1905 [xfsalloc/4]
root 0 0 00:00:00 8-10:47:33 1906 [xfsalloc/5]
root 0 0 00:00:00 8-10:47:33 1907 [xfsalloc/6]
root 0 0 00:00:00 8-10:47:33 1908 [xfsalloc/7]
root 0 0 00:00:03 8-10:47:33 1909 [xfseofblocks/0]
root 0 0 00:00:00 8-10:47:33 1910 [xfseofblocks/1]
root 0 0 00:00:00 8-10:47:33 1911 [xfseofblocks/2]
root 0 0 00:00:00 8-10:47:33 1912 [xfseofblocks/3]
root 0 0 00:00:00 8-10:47:33 1913 [xfseofblocks/4]
root 0 0 00:00:00 8-10:47:33 1914 [xfseofblocks/5]
root 0 0 00:00:00 8-10:47:33 1915 [xfseofblocks/6]
root 0 0 00:00:00 8-10:47:33 1916 [xfseofblocks/7]
root 0 0 00:01:34 8-10:47:33 1917 [xfsbufd/md5]
root 0 0 00:01:00 8-10:47:33 1918 [xfs-cil/md5]
root 0 0 00:00:54 8-10:47:33 1919 [xfssyncd/md5]
root 0 0 00:18:39 8-10:47:33 1920 [xfsaild/md5]
root 0 0 00:00:11 8-10:47:32 1921 [jbd2/md2-8]
root 0 0 00:00:00 8-10:47:32 1922 [ext4-dio-unwrit]
root 0 0 00:00:39 8-10:47:32 1923 [xfsbufd/md4]
root 0 0 00:00:01 8-10:47:32 1924 [xfs-cil/md4]
root 0 0 00:00:08 8-10:47:32 1925 [xfssyncd/md4]
root 0 0 00:18:07 8-10:47:32 1926 [xfsaild/md4]
root 0 0 00:02:01 8-10:47:32 1927 [xfsbufd/md3]
root 0 0 00:02:50 8-10:47:32 1928 [xfs-cil/md3]
root 0 0 00:00:13 8-10:47:32 1929 [xfssyncd/md3]
root 0 0 00:18:32 8-10:47:32 1930 [xfsaild/md3]
root 0 0 00:00:04 8-10:47:31 1986 [kauditd]
root 29764 708 00:00:10 8-10:47:13 2241 auditd
root 249856 7168 00:12:09 8-10:47:13 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:03:30 8-10:47:13 2278 irqbalance --pid=/var/run/irqbalance.pid
named 712020 30472 00:04:17 8-10:47:12 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:00 8-10:47:12 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 8-10:47:12 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:02:12 8-10:47:11 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:02 8-10:47:11 2479 /usr/sbin/sshd
root 21712 720 00:00:01 8-10:47:11 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 8-10:47:11 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1189516 31-07:14:00 8-10:47:10 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2020 00:00:05 8-10:47:06 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2012 00:00:05 8-10:47:06 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:05 8-10:47:06 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:05 8-10:47:06 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:05 8-10:47:06 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1856 00:01:16 8-10:47:01 3211 sendmail: rejecting connections on daemon MTA: 16 children, max 15
smmsp 78752 780 00:00:10 8-10:47:01 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 563656 28608 00:03:41 8-10:46:54 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:09 8-10:46:54 3244 crond
root 107544 316 00:00:00 8-10:46:52 3296 pure-ftpd (SERVER) 
root 63224 8344 00:00:38 8-10:46:38 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 8-10:46:37 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 8-10:46:37 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 8-10:46:37 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 8-10:46:37 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 8-10:46:37 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 8-10:46:37 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:05 8-10:46:37 3372 /sbin/udevd -d
root 11280 508 00:00:00 8-10:46:37 3373 /sbin/udevd -d
root 0 0 00:24:11 8-10:44:42 3716 [kipmi0]
root 139904 1468 00:00:00 39:41 8917 CROND
root 106080 1392 00:00:00 39:40 8922 /bin/bash /usr/sbin/raid-check
root 0 0 00:03:33 39:40 9074 [md5_resync]
root 0 0 00:00:00 39:34 9239 [md4_resync]
root 0 0 00:00:00 39:28 9247 [md3_resync]
root 0 0 00:00:00 39:22 9255 [md2_resync]
root 0 0 00:00:00 39:16 9263 [md0_resync]
root 0 0 00:00:00 39:10 9270 [md1_resync]
root 0 0 00:00:00 37:24 9592 [flush-8:32]
root 0 0 00:00:00 36:36 9934 [flush-9:4]
apache 602112 112704 00:00:52 32:25 10391 /usr/sbin/httpd -DSSL
apache 586516 92816 00:00:36 25:06 11369 /usr/sbin/httpd -DSSL
apache 610020 116844 00:00:39 24:50 11529 /usr/sbin/httpd -DSSL
apache 586288 93772 00:00:30 24:50 11530 /usr/sbin/httpd -DSSL
apache 635052 138736 00:00:34 24:40 11752 /usr/sbin/httpd -DSSL
apache 617904 128248 00:00:33 24:37 11753 /usr/sbin/httpd -DSSL
apache 585788 92444 00:00:31 24:36 11755 /usr/sbin/httpd -DSSL
apache 591044 108080 00:00:46 24:35 11758 /usr/sbin/httpd -DSSL
apache 585896 83336 00:00:33 24:35 11759 /usr/sbin/httpd -DSSL
apache 595280 101900 00:00:31 24:34 11760 /usr/sbin/httpd -DSSL
apache 588448 94644 00:00:34 24:34 11761 /usr/sbin/httpd -DSSL
apache 587244 95480 00:00:39 24:34 11767 /usr/sbin/httpd -DSSL
apache 590532 87076 00:00:31 24:15 11769 /usr/sbin/httpd -DSSL
root 96592 5544 00:00:00 22:44 11791 sendmail: ./4B7BUPKO133257 from queue
apache 613848 111548 00:00:35 20:42 12113 /usr/sbin/httpd -DSSL
root 96844 5656 00:00:01 18:44 13177 sendmail: ./4B76Ame7077833 mx2.free.fr.: client DATA 354
root 0 0 00:00:18 7-09:11:53 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 7-09:11:53 13330 [xfs-cil/sdc1]
root 0 0 00:01:22 7-09:11:53 13331 [xfssyncd/sdc1]
root 0 0 00:16:04 7-09:11:53 13332 [xfsaild/sdc1]
apache 624680 136640 00:00:20 16:08 13556 /usr/sbin/httpd -DSSL
root 96212 3848 00:00:00 13:44 13963 sendmail: ./4B7900HV107390 mail2.gov.bz.: user open
root 96212 3860 00:00:00 12:44 13982 sendmail: ./4B78xwX7107387 14.241.253.27.: user open
root 96564 5472 00:00:00 11:44 14327 sendmail: ./4B78Pemb101559 superpimpf.commline.com.: user open
apache 583852 76492 00:00:21 11:37 14336 /usr/sbin/httpd -DSSL
apache 587452 97416 00:00:20 11:36 14337 /usr/sbin/httpd -DSSL
apache 609400 113300 00:00:24 11:36 14338 /usr/sbin/httpd -DSSL
root 96212 3848 00:00:00 10:44 14348 sendmail: ./4B78jAYj105047 mx2.myoutlookonline.com.: user open
root 96596 5476 00:00:00 09:44 14485 sendmail: ./4B76RSs8080769 mail.co.caldwell.nc.us.: user open
root 96592 5472 00:00:00 08:44 14788 sendmail: ./4B7EKMiC162453 mx.phreaker.net.: user open
apache 585776 87272 00:00:13 08:39 14794 /usr/sbin/httpd -DSSL
root 96212 3832 00:00:00 07:44 14803 sendmail: ./4B78f8ns104328 superpimpf.commline.com.: user open
apache 588420 89716 00:00:10 07:36 14876 /usr/sbin/httpd -DSSL
root 96212 3836 00:00:00 06:44 14962 sendmail: ./4B7FC3SH172049 xfer.vaxxine.com.: user open
root 96212 3828 00:00:00 05:44 15137 sendmail: ./4B7GGcp5183411 relay.cisp.com.: user open
apache 582552 59328 00:00:03 05:08 15144 /usr/sbin/httpd -DSSL
apache 586720 74060 00:00:11 04:45 15309 /usr/sbin/httpd -DSSL
root 96212 3828 00:00:00 04:44 15310 sendmail: ./4B7EbXl3165566 mx.phreaker.net.: user open
root 96212 3820 00:00:00 03:44 15382 sendmail: ./4B7FveYl180227 xfer.vaxxine.com.: user open
root 96212 3820 00:00:00 02:44 15595 sendmail: ./4B7GwHUN190765 mailserv.wpmjhs.ednet.ns.ca.: user open
root 96212 3812 00:00:00 01:44 15742 sendmail: ./4B7GljIc188851 mailserv.go.ednet.ns.ca.: user open
root 139904 1468 00:00:00 01:41 15744 CROND
root 106076 1248 00:00:00 01:41 15745 /bin/sh -c /usr/bin/curl http://www.cricketlive.pk/cgi-bin/cl/awstats.pl?update=1 >/dev/null 2>&1 #Cricket Live Stats
root 173024 3220 00:00:00 01:41 15747 /usr/bin/curl http://www.cricketlive.pk/cgi-bin/cl/awstats.pl?update=1
apache 37572 8828 00:00:01 01:40 15749 /usr/bin/perl /home/cricketlive/cgi-bin/cl/awstats.pl
apache 564084 22088 00:00:00 00:44 15759 /usr/sbin/httpd -DSSL
root 96212 3676 00:00:00 00:44 15760 sendmail: ./4B7MpHLo243716 mail.undo.net.: user open
apache 598712 80616 00:00:01 00:42 15761 /usr/sbin/httpd -DSSL
root 100920 596 00:00:00 00:03 15981 sleep 60
root 110772 2076 00:00:00 00:01 16161 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:01 16187 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 16188 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 16189 cat
root 110900 1176 00:00:00 00:01 16215 /bin/bash /usr/bin/check_mk_agent
root 13364 1012 00:00:00 00:01 16216 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 16217 tr -s 
root 19260 796 00:00:00 21:51:08 46238 /usr/sbin/dovecot
dovecot 12980 1076 00:00:00 21:51:08 46240 dovecot/anvil
root 13108 1196 00:00:00 21:51:08 46241 dovecot/log
root 266668 74800 00:00:20 20:12:18 61904 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 268956 76808 00:00:52 08:35:56 181422 spamd child
root 268764 76392 00:00:01 07:27:10 193232 spamd child
root 0 0 00:00:09 7-14:32:23 203424 [flush-9:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-08 00:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e47672a204

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1733446187
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:02 6-10:57:48 1 /sbin/init
root 0 0 00:00:00 6-10:57:48 2 [kthreadd]
root 0 0 00:23:35 6-10:57:48 3 [migration/0]
root 0 0 00:01:41 6-10:57:48 4 [ksoftirqd/0]
root 0 0 00:00:00 6-10:57:48 5 [stopper/0]
root 0 0 00:00:50 6-10:57:48 6 [watchdog/0]
root 0 0 00:11:03 6-10:57:48 7 [migration/1]
root 0 0 00:00:00 6-10:57:48 8 [stopper/1]
root 0 0 00:01:38 6-10:57:48 9 [ksoftirqd/1]
root 0 0 00:00:53 6-10:57:48 10 [watchdog/1]
root 0 0 00:36:06 6-10:57:48 11 [migration/2]
root 0 0 00:00:00 6-10:57:48 12 [stopper/2]
root 0 0 00:01:05 6-10:57:48 13 [ksoftirqd/2]
root 0 0 00:00:40 6-10:57:48 14 [watchdog/2]
root 0 0 00:06:47 6-10:57:48 15 [migration/3]
root 0 0 00:00:00 6-10:57:48 16 [stopper/3]
root 0 0 00:01:23 6-10:57:48 17 [ksoftirqd/3]
root 0 0 00:00:51 6-10:57:48 18 [watchdog/3]
root 0 0 00:22:12 6-10:57:48 19 [migration/4]
root 0 0 00:00:00 6-10:57:48 20 [stopper/4]
root 0 0 00:00:58 6-10:57:48 21 [ksoftirqd/4]
root 0 0 00:00:21 6-10:57:48 22 [watchdog/4]
root 0 0 00:09:11 6-10:57:48 23 [migration/5]
root 0 0 00:00:00 6-10:57:48 24 [stopper/5]
root 0 0 00:00:53 6-10:57:48 25 [ksoftirqd/5]
root 0 0 00:00:31 6-10:57:48 26 [watchdog/5]
root 0 0 00:05:53 6-10:57:48 27 [migration/6]
root 0 0 00:00:00 6-10:57:48 28 [stopper/6]
root 0 0 00:00:52 6-10:57:48 29 [ksoftirqd/6]
root 0 0 00:00:27 6-10:57:48 30 [watchdog/6]
root 0 0 00:04:46 6-10:57:48 31 [migration/7]
root 0 0 00:00:00 6-10:57:48 32 [stopper/7]
root 0 0 00:00:56 6-10:57:48 33 [ksoftirqd/7]
root 0 0 00:00:28 6-10:57:48 34 [watchdog/7]
root 0 0 00:05:26 6-10:57:48 35 [events/0]
root 0 0 00:04:40 6-10:57:48 36 [events/1]
root 0 0 00:03:06 6-10:57:48 37 [events/2]
root 0 0 00:05:02 6-10:57:48 38 [events/3]
root 0 0 00:02:03 6-10:57:48 39 [events/4]
root 0 0 00:02:38 6-10:57:48 40 [events/5]
root 0 0 00:02:50 6-10:57:48 41 [events/6]
root 0 0 00:03:05 6-10:57:48 42 [events/7]
root 0 0 00:00:00 6-10:57:48 43 [events/0]
root 0 0 00:00:00 6-10:57:48 44 [events/1]
root 0 0 00:00:00 6-10:57:48 45 [events/2]
root 0 0 00:00:00 6-10:57:48 46 [events/3]
root 0 0 00:00:00 6-10:57:48 47 [events/4]
root 0 0 00:00:00 6-10:57:48 48 [events/5]
root 0 0 00:00:00 6-10:57:48 49 [events/6]
root 0 0 00:00:00 6-10:57:48 50 [events/7]
root 0 0 00:00:00 6-10:57:48 51 [events_long/0]
root 0 0 00:00:00 6-10:57:48 52 [events_long/1]
root 0 0 00:00:00 6-10:57:48 53 [events_long/2]
root 0 0 00:00:00 6-10:57:48 54 [events_long/3]
root 0 0 00:00:00 6-10:57:48 55 [events_long/4]
root 0 0 00:00:00 6-10:57:48 56 [events_long/5]
root 0 0 00:00:00 6-10:57:48 57 [events_long/6]
root 0 0 00:00:00 6-10:57:48 58 [events_long/7]
root 0 0 00:00:00 6-10:57:48 59 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 60 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 61 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 62 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 63 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 64 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 65 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 66 [events_power_ef]
root 0 0 00:00:00 6-10:57:48 67 [cgroup]
root 0 0 00:00:00 6-10:57:48 68 [khelper]
root 0 0 00:00:00 6-10:57:48 69 [netns]
root 0 0 00:00:00 6-10:57:48 70 [async/mgr]
root 0 0 00:00:00 6-10:57:48 71 [pm]
root 0 0 00:00:21 6-10:57:48 72 [sync_supers]
root 0 0 00:00:00 6-10:57:48 73 [bdi-default]
root 0 0 00:00:00 6-10:57:48 74 [kintegrityd/0]
root 0 0 00:00:00 6-10:57:48 75 [kintegrityd/1]
root 0 0 00:00:00 6-10:57:48 76 [kintegrityd/2]
root 0 0 00:00:00 6-10:57:48 77 [kintegrityd/3]
root 0 0 00:00:00 6-10:57:48 78 [kintegrityd/4]
root 0 0 00:00:00 6-10:57:48 79 [kintegrityd/5]
root 0 0 00:00:00 6-10:57:48 80 [kintegrityd/6]
root 0 0 00:00:00 6-10:57:48 81 [kintegrityd/7]
root 0 0 00:00:17 6-10:57:48 82 [kblockd/0]
root 0 0 00:00:05 6-10:57:48 83 [kblockd/1]
root 0 0 00:25:58 6-10:57:48 84 [kblockd/2]
root 0 0 00:00:01 6-10:57:48 85 [kblockd/3]
root 0 0 00:10:04 6-10:57:48 86 [kblockd/4]
root 0 0 00:00:13 6-10:57:48 87 [kblockd/5]
root 0 0 00:00:03 6-10:57:48 88 [kblockd/6]
root 0 0 00:00:01 6-10:57:48 89 [kblockd/7]
root 0 0 00:00:00 6-10:57:48 90 [kacpid]
root 0 0 00:00:00 6-10:57:48 91 [kacpi_notify]
root 0 0 00:00:00 6-10:57:48 92 [kacpi_hotplug]
root 0 0 00:00:00 6-10:57:48 93 [ata_aux]
root 0 0 00:00:00 6-10:57:48 94 [ata_sff/0]
root 0 0 00:00:00 6-10:57:48 95 [ata_sff/1]
root 0 0 00:00:00 6-10:57:48 96 [ata_sff/2]
root 0 0 00:00:00 6-10:57:48 97 [ata_sff/3]
root 0 0 00:00:00 6-10:57:48 98 [ata_sff/4]
root 0 0 00:00:00 6-10:57:48 99 [ata_sff/5]
root 0 0 00:00:00 6-10:57:48 100 [ata_sff/6]
root 0 0 00:00:00 6-10:57:48 101 [ata_sff/7]
root 0 0 00:00:00 6-10:57:48 102 [ksuspend_usbd]
root 0 0 00:00:00 6-10:57:48 103 [khubd]
root 0 0 00:00:00 6-10:57:48 104 [kseriod]
root 0 0 00:00:00 6-10:57:48 105 [md/0]
root 0 0 00:00:00 6-10:57:48 106 [md/1]
root 0 0 00:00:00 6-10:57:48 107 [md/2]
root 0 0 00:00:00 6-10:57:48 108 [md/3]
root 0 0 00:00:00 6-10:57:48 109 [md/4]
root 0 0 00:00:00 6-10:57:48 110 [md/5]
root 0 0 00:00:00 6-10:57:48 111 [md/6]
root 0 0 00:00:00 6-10:57:48 112 [md/7]
root 0 0 00:00:00 6-10:57:48 113 [md_misc/0]
root 0 0 00:00:00 6-10:57:48 114 [md_misc/1]
root 0 0 00:00:00 6-10:57:48 115 [md_misc/2]
root 0 0 00:00:00 6-10:57:48 116 [md_misc/3]
root 0 0 00:00:00 6-10:57:48 117 [md_misc/4]
root 0 0 00:00:00 6-10:57:48 118 [md_misc/5]
root 0 0 00:00:00 6-10:57:48 119 [md_misc/6]
root 0 0 00:00:00 6-10:57:48 120 [md_misc/7]
root 0 0 00:00:00 6-10:57:48 121 [linkwatch]
root 0 0 00:00:01 6-10:57:47 124 [khungtaskd]
root 0 0 00:27:40 6-10:57:47 125 [kswapd1]
root 0 0 00:00:00 6-10:57:47 126 [ksmd]
root 0 0 00:08:35 6-10:57:47 127 [khugepaged]
root 0 0 00:00:00 6-10:57:47 128 [aio/0]
root 0 0 00:00:00 6-10:57:47 129 [aio/1]
root 0 0 00:00:00 6-10:57:47 130 [aio/2]
root 0 0 00:00:00 6-10:57:47 131 [aio/3]
root 0 0 00:00:00 6-10:57:47 132 [aio/4]
root 0 0 00:00:00 6-10:57:47 133 [aio/5]
root 0 0 00:00:00 6-10:57:47 134 [aio/6]
root 0 0 00:00:00 6-10:57:47 135 [aio/7]
root 0 0 00:00:00 6-10:57:47 136 [crypto/0]
root 0 0 00:00:00 6-10:57:47 137 [crypto/1]
root 0 0 00:00:00 6-10:57:47 138 [crypto/2]
root 0 0 00:00:00 6-10:57:47 139 [crypto/3]
root 0 0 00:00:00 6-10:57:47 140 [crypto/4]
root 0 0 00:00:00 6-10:57:47 141 [crypto/5]
root 0 0 00:00:00 6-10:57:47 142 [crypto/6]
root 0 0 00:00:00 6-10:57:47 143 [crypto/7]
root 0 0 00:00:00 6-10:57:47 150 [kthrotld/0]
root 0 0 00:00:00 6-10:57:47 151 [kthrotld/1]
root 0 0 00:00:00 6-10:57:47 152 [kthrotld/2]
root 0 0 00:00:00 6-10:57:47 153 [kthrotld/3]
root 0 0 00:00:00 6-10:57:47 154 [kthrotld/4]
root 0 0 00:00:00 6-10:57:47 155 [kthrotld/5]
root 0 0 00:00:00 6-10:57:47 156 [kthrotld/6]
root 0 0 00:00:00 6-10:57:47 157 [kthrotld/7]
root 0 0 00:00:00 6-10:57:47 160 [kpsmoused]
root 0 0 00:00:00 6-10:57:47 161 [usbhid_resumer]
root 0 0 00:00:00 6-10:57:47 162 [deferwq]
root 0 0 00:00:00 6-10:57:47 194 [kdmremove]
root 0 0 00:00:00 6-10:57:47 195 [kstriped]
root 0 0 00:00:00 6-10:57:45 734 [scsi_eh_0]
root 0 0 00:00:00 6-10:57:45 735 [scsi_wq_0]
root 0 0 00:00:00 6-10:57:45 748 [scsi_eh_1]
root 0 0 00:00:00 6-10:57:45 749 [scsi_eh_2]
root 0 0 00:00:00 6-10:57:45 750 [scsi_eh_3]
root 0 0 00:00:00 6-10:57:45 751 [scsi_eh_4]
root 0 0 00:00:00 6-10:57:45 752 [scsi_eh_5]
root 0 0 00:00:00 6-10:57:45 753 [scsi_eh_6]
root 0 0 00:01:38 6-10:57:44 947 [md1_raid1]
root 0 0 00:00:13 6-10:57:43 1008 [jbd2/md1-8]
root 0 0 00:00:00 6-10:57:43 1009 [ext4-dio-unwrit]
root 11284 516 00:00:02 6-10:57:42 1102 /sbin/udevd -d
root 0 0 00:01:50 6-10:57:42 1222 [edac-poller]
root 0 0 00:00:55 6-10:57:42 1255 [md2_raid1]
root 0 0 00:09:31 6-10:57:41 1261 [md3_raid1]
root 0 0 00:01:25 6-10:57:41 1264 [md4_raid1]
root 0 0 00:55:46 6-10:57:41 1268 [md5_raid1]
root 0 0 00:00:08 6-10:57:41 1301 [md0_raid1]
root 0 0 00:00:15 6-10:57:39 1832 [flush-9:2]
root 0 0 00:00:37 6-10:57:39 1833 [flush-9:3]
root 0 0 00:01:30 6-10:57:39 1835 [flush-9:5]
root 0 0 00:00:00 6-10:57:39 1872 [jbd2/md0-8]
root 0 0 00:00:00 6-10:57:39 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 6-10:57:39 1876 [xfs_mru_cache]
root 0 0 00:00:00 6-10:57:39 1877 [xfslogd/0]
root 0 0 00:00:00 6-10:57:39 1878 [xfslogd/1]
root 0 0 00:04:22 6-10:57:39 1879 [xfslogd/2]
root 0 0 00:00:00 6-10:57:39 1880 [xfslogd/3]
root 0 0 00:00:22 6-10:57:39 1881 [xfslogd/4]
root 0 0 00:00:00 6-10:57:39 1882 [xfslogd/5]
root 0 0 00:00:00 6-10:57:39 1883 [xfslogd/6]
root 0 0 00:00:00 6-10:57:39 1884 [xfslogd/7]
root 0 0 00:00:00 6-10:57:39 1885 [xfsdatad/0]
root 0 0 00:00:00 6-10:57:39 1886 [xfsdatad/1]
root 0 0 00:05:58 6-10:57:39 1887 [xfsdatad/2]
root 0 0 00:00:00 6-10:57:39 1888 [xfsdatad/3]
root 0 0 00:04:39 6-10:57:39 1889 [xfsdatad/4]
root 0 0 00:00:00 6-10:57:39 1890 [xfsdatad/5]
root 0 0 00:00:00 6-10:57:39 1891 [xfsdatad/6]
root 0 0 00:00:00 6-10:57:39 1892 [xfsdatad/7]
root 0 0 00:00:00 6-10:57:39 1893 [xfsconvertd/0]
root 0 0 00:00:00 6-10:57:39 1894 [xfsconvertd/1]
root 0 0 00:00:00 6-10:57:39 1895 [xfsconvertd/2]
root 0 0 00:00:00 6-10:57:39 1896 [xfsconvertd/3]
root 0 0 00:00:00 6-10:57:39 1897 [xfsconvertd/4]
root 0 0 00:00:00 6-10:57:39 1898 [xfsconvertd/5]
root 0 0 00:00:00 6-10:57:39 1899 [xfsconvertd/6]
root 0 0 00:00:00 6-10:57:39 1900 [xfsconvertd/7]
root 0 0 00:00:00 6-10:57:39 1901 [xfsalloc/0]
root 0 0 00:00:00 6-10:57:39 1902 [xfsalloc/1]
root 0 0 00:00:00 6-10:57:39 1903 [xfsalloc/2]
root 0 0 00:00:00 6-10:57:39 1904 [xfsalloc/3]
root 0 0 00:00:00 6-10:57:39 1905 [xfsalloc/4]
root 0 0 00:00:00 6-10:57:39 1906 [xfsalloc/5]
root 0 0 00:00:00 6-10:57:39 1907 [xfsalloc/6]
root 0 0 00:00:00 6-10:57:39 1908 [xfsalloc/7]
root 0 0 00:00:02 6-10:57:39 1909 [xfseofblocks/0]
root 0 0 00:00:00 6-10:57:39 1910 [xfseofblocks/1]
root 0 0 00:00:00 6-10:57:39 1911 [xfseofblocks/2]
root 0 0 00:00:00 6-10:57:39 1912 [xfseofblocks/3]
root 0 0 00:00:00 6-10:57:39 1913 [xfseofblocks/4]
root 0 0 00:00:00 6-10:57:39 1914 [xfseofblocks/5]
root 0 0 00:00:00 6-10:57:39 1915 [xfseofblocks/6]
root 0 0 00:00:00 6-10:57:39 1916 [xfseofblocks/7]
root 0 0 00:01:20 6-10:57:39 1917 [xfsbufd/md5]
root 0 0 00:00:50 6-10:57:39 1918 [xfs-cil/md5]
root 0 0 00:00:44 6-10:57:39 1919 [xfssyncd/md5]
root 0 0 00:16:08 6-10:57:39 1920 [xfsaild/md5]
root 0 0 00:00:11 6-10:57:38 1921 [jbd2/md2-8]
root 0 0 00:00:00 6-10:57:38 1922 [ext4-dio-unwrit]
root 0 0 00:00:35 6-10:57:38 1923 [xfsbufd/md4]
root 0 0 00:00:01 6-10:57:38 1924 [xfs-cil/md4]
root 0 0 00:00:07 6-10:57:38 1925 [xfssyncd/md4]
root 0 0 00:15:45 6-10:57:38 1926 [xfsaild/md4]
root 0 0 00:01:47 6-10:57:38 1927 [xfsbufd/md3]
root 0 0 00:02:18 6-10:57:38 1928 [xfs-cil/md3]
root 0 0 00:00:10 6-10:57:38 1929 [xfssyncd/md3]
root 0 0 00:16:03 6-10:57:38 1930 [xfsaild/md3]
root 0 0 00:00:03 6-10:57:37 1986 [kauditd]
root 29764 708 00:00:07 6-10:57:19 2241 auditd
root 249856 5856 00:10:47 6-10:57:19 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 560 00:02:39 6-10:57:19 2278 irqbalance --pid=/var/run/irqbalance.pid
named 708640 26352 00:03:26 6-10:57:18 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:00 6-10:57:18 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 6-10:57:18 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:01:55 6-10:57:17 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:02 6-10:57:17 2479 /usr/sbin/sshd
root 21712 720 00:00:01 6-10:57:17 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 6-10:57:17 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4873228 1178644 25-06:23:26 6-10:57:16 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2020 00:00:03 6-10:57:12 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2012 00:00:03 6-10:57:12 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:03 6-10:57:12 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:03 6-10:57:12 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2008 00:00:03 6-10:57:12 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1840 00:00:59 6-10:57:07 3211 sendmail: accepting connections
smmsp 78752 780 00:00:08 6-10:57:07 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 563656 28608 00:03:08 6-10:57:00 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:07 6-10:57:00 3244 crond
root 107544 316 00:00:00 6-10:56:58 3296 pure-ftpd (SERVER) 
root 63224 8344 00:00:30 6-10:56:44 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 6-10:56:43 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 6-10:56:43 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 6-10:56:43 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 6-10:56:43 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 6-10:56:43 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 6-10:56:43 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:04 6-10:56:43 3372 /sbin/udevd -d
root 11280 508 00:00:00 6-10:56:43 3373 /sbin/udevd -d
root 0 0 00:18:01 6-10:54:48 3716 [kipmi0]
root 0 0 00:00:18 5-09:21:59 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 5-09:21:59 13330 [xfs-cil/sdc1]
root 0 0 00:01:21 5-09:21:59 13331 [xfssyncd/sdc1]
root 0 0 00:13:41 5-09:21:59 13332 [xfsaild/sdc1]
root 0 0 00:00:00 46:42 32631 [flush-9:4]
apache 587164 94372 00:00:55 35:21 34152 /usr/sbin/httpd -DSSL
root 112184 1172 00:00:00 35:16 34153 pure-ftpd (IDLE) 
root 109652 604 00:00:00 35:16 34154 pure-ftpd (PRIV) 
apache 587556 95988 00:00:40 32:12 34749 /usr/sbin/httpd -DSSL
root 95864 3360 00:00:00 29:05 35961 sendmail: server syn-208-105-196-214.biz.spectrum.com [208.105.196.214] cmd read
apache 595564 102708 00:00:36 20:03 37658 /usr/sbin/httpd -DSSL
apache 595440 103332 00:00:30 19:58 37659 /usr/sbin/httpd -DSSL
apache 585884 94744 00:00:24 17:21 38364 /usr/sbin/httpd -DSSL
apache 617320 120380 00:00:24 17:20 38365 /usr/sbin/httpd -DSSL
apache 587220 95492 00:00:33 17:20 38366 /usr/sbin/httpd -DSSL
root 19260 796 00:00:01 21:55:54 38615 /usr/sbin/dovecot
dovecot 12980 1092 00:00:00 21:55:54 38618 dovecot/anvil
root 13108 1196 00:00:00 21:55:54 38619 dovecot/log
root 96120 3612 00:00:00 11:53 39347 sendmail: ./4B1CxGg3235269 service46.mimecast.com.: user open
apache 632996 137520 00:00:25 10:39 39524 /usr/sbin/httpd -DSSL
root 96120 3612 00:00:00 09:53 39528 sendmail: ./4B1D5fop236615 service46.mimecast.com.: user open
apache 583280 79940 00:00:15 09:05 39634 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 07:24 40176 [flush-8:32]
root 96120 3748 00:00:00 04:53 40194 sendmail: ./4B12NqbQ126438 mxtr.nlhc.nf.ca.: user open
apache 584732 77596 00:00:05 03:55 40419 /usr/sbin/httpd -DSSL
root 96120 3760 00:00:00 03:53 40420 sendmail: ./4B17Er8e178962 smtp.moncton.ca.: user open
apache 596720 68452 00:00:10 03:52 40421 /usr/sbin/httpd -DSSL
root 96120 3728 00:00:00 02:53 40573 sendmail: ./4B1AcndJ212766 franklin.artsci.wustl.edu.: user open
apache 654996 142800 00:00:06 02:09 40731 /usr/sbin/httpd -DSSL
apache 597192 59572 00:00:06 02:03 40732 /usr/sbin/httpd -DSSL
root 96120 3724 00:00:00 01:53 40733 sendmail: ./4B1BngYh224506 mail.limebox.com.sg.: user open
apache 583928 57128 00:00:04 01:51 40734 /usr/sbin/httpd -DSSL
apache 582568 62652 00:00:04 01:47 40773 /usr/sbin/httpd -DSSL
apache 604608 80328 00:00:05 01:43 40993 /usr/sbin/httpd -DSSL
root 96120 3616 00:00:00 00:53 40995 sendmail: ./4B1CwQi3235242 mail.bbqgalore.com.au.: user open
apache 564228 24076 00:00:00 00:05 40999 /usr/sbin/httpd -DSSL
apache 577328 32476 00:00:00 00:04 41000 /usr/sbin/httpd -DSSL
apache 564364 23832 00:00:00 00:04 41001 /usr/sbin/httpd -DSSL
root 95864 3380 00:00:00 00:03 41002 sendmail: server [177.202.1.58] cmd read
root 110772 2072 00:00:00 00:01 41162 /bin/bash /usr/bin/check_mk_agent
root 110900 1680 00:00:00 00:01 41184 /bin/bash /usr/bin/check_mk_agent
root 110772 1248 00:00:00 00:01 41185 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 41186 cat
root 110900 1168 00:00:00 00:01 41212 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 41213 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 41214 tr -s 
root 266588 74744 00:00:20 20:48:03 50806 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269012 76764 00:00:27 20:47:59 50809 spamd child
root 266588 72232 00:00:00 20:47:59 50811 spamd child
root 0 0 00:00:08 5-14:42:29 203424 [flush-9:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-06 00:49

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4334e3216

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1733271714
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:02 4-10:29:55 1 /sbin/init
root 0 0 00:00:00 4-10:29:55 2 [kthreadd]
root 0 0 00:14:51 4-10:29:55 3 [migration/0]
root 0 0 00:01:14 4-10:29:55 4 [ksoftirqd/0]
root 0 0 00:00:00 4-10:29:55 5 [stopper/0]
root 0 0 00:00:34 4-10:29:55 6 [watchdog/0]
root 0 0 00:07:19 4-10:29:55 7 [migration/1]
root 0 0 00:00:00 4-10:29:55 8 [stopper/1]
root 0 0 00:01:11 4-10:29:55 9 [ksoftirqd/1]
root 0 0 00:00:37 4-10:29:55 10 [watchdog/1]
root 0 0 00:26:08 4-10:29:55 11 [migration/2]
root 0 0 00:00:00 4-10:29:55 12 [stopper/2]
root 0 0 00:00:46 4-10:29:55 13 [ksoftirqd/2]
root 0 0 00:00:26 4-10:29:55 14 [watchdog/2]
root 0 0 00:04:24 4-10:29:55 15 [migration/3]
root 0 0 00:00:00 4-10:29:55 16 [stopper/3]
root 0 0 00:01:02 4-10:29:55 17 [ksoftirqd/3]
root 0 0 00:00:34 4-10:29:55 18 [watchdog/3]
root 0 0 00:15:56 4-10:29:55 19 [migration/4]
root 0 0 00:00:00 4-10:29:55 20 [stopper/4]
root 0 0 00:00:42 4-10:29:55 21 [ksoftirqd/4]
root 0 0 00:00:13 4-10:29:55 22 [watchdog/4]
root 0 0 00:06:03 4-10:29:55 23 [migration/5]
root 0 0 00:00:00 4-10:29:55 24 [stopper/5]
root 0 0 00:00:40 4-10:29:55 25 [ksoftirqd/5]
root 0 0 00:00:20 4-10:29:55 26 [watchdog/5]
root 0 0 00:03:52 4-10:29:55 27 [migration/6]
root 0 0 00:00:00 4-10:29:55 28 [stopper/6]
root 0 0 00:00:40 4-10:29:55 29 [ksoftirqd/6]
root 0 0 00:00:17 4-10:29:55 30 [watchdog/6]
root 0 0 00:03:07 4-10:29:55 31 [migration/7]
root 0 0 00:00:00 4-10:29:55 32 [stopper/7]
root 0 0 00:00:43 4-10:29:55 33 [ksoftirqd/7]
root 0 0 00:00:19 4-10:29:55 34 [watchdog/7]
root 0 0 00:03:47 4-10:29:55 35 [events/0]
root 0 0 00:03:18 4-10:29:55 36 [events/1]
root 0 0 00:02:00 4-10:29:55 37 [events/2]
root 0 0 00:03:27 4-10:29:55 38 [events/3]
root 0 0 00:01:22 4-10:29:55 39 [events/4]
root 0 0 00:01:49 4-10:29:55 40 [events/5]
root 0 0 00:01:57 4-10:29:55 41 [events/6]
root 0 0 00:02:09 4-10:29:55 42 [events/7]
root 0 0 00:00:00 4-10:29:55 43 [events/0]
root 0 0 00:00:00 4-10:29:55 44 [events/1]
root 0 0 00:00:00 4-10:29:55 45 [events/2]
root 0 0 00:00:00 4-10:29:55 46 [events/3]
root 0 0 00:00:00 4-10:29:55 47 [events/4]
root 0 0 00:00:00 4-10:29:55 48 [events/5]
root 0 0 00:00:00 4-10:29:55 49 [events/6]
root 0 0 00:00:00 4-10:29:55 50 [events/7]
root 0 0 00:00:00 4-10:29:55 51 [events_long/0]
root 0 0 00:00:00 4-10:29:55 52 [events_long/1]
root 0 0 00:00:00 4-10:29:55 53 [events_long/2]
root 0 0 00:00:00 4-10:29:55 54 [events_long/3]
root 0 0 00:00:00 4-10:29:55 55 [events_long/4]
root 0 0 00:00:00 4-10:29:55 56 [events_long/5]
root 0 0 00:00:00 4-10:29:55 57 [events_long/6]
root 0 0 00:00:00 4-10:29:55 58 [events_long/7]
root 0 0 00:00:00 4-10:29:55 59 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 60 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 61 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 62 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 63 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 64 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 65 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 66 [events_power_ef]
root 0 0 00:00:00 4-10:29:55 67 [cgroup]
root 0 0 00:00:00 4-10:29:55 68 [khelper]
root 0 0 00:00:00 4-10:29:55 69 [netns]
root 0 0 00:00:00 4-10:29:55 70 [async/mgr]
root 0 0 00:00:00 4-10:29:55 71 [pm]
root 0 0 00:00:14 4-10:29:55 72 [sync_supers]
root 0 0 00:00:00 4-10:29:55 73 [bdi-default]
root 0 0 00:00:00 4-10:29:55 74 [kintegrityd/0]
root 0 0 00:00:00 4-10:29:55 75 [kintegrityd/1]
root 0 0 00:00:00 4-10:29:55 76 [kintegrityd/2]
root 0 0 00:00:00 4-10:29:55 77 [kintegrityd/3]
root 0 0 00:00:00 4-10:29:55 78 [kintegrityd/4]
root 0 0 00:00:00 4-10:29:55 79 [kintegrityd/5]
root 0 0 00:00:00 4-10:29:55 80 [kintegrityd/6]
root 0 0 00:00:00 4-10:29:55 81 [kintegrityd/7]
root 0 0 00:00:15 4-10:29:55 82 [kblockd/0]
root 0 0 00:00:04 4-10:29:55 83 [kblockd/1]
root 0 0 00:20:18 4-10:29:55 84 [kblockd/2]
root 0 0 00:00:01 4-10:29:55 85 [kblockd/3]
root 0 0 00:08:34 4-10:29:55 86 [kblockd/4]
root 0 0 00:00:12 4-10:29:55 87 [kblockd/5]
root 0 0 00:00:02 4-10:29:55 88 [kblockd/6]
root 0 0 00:00:01 4-10:29:55 89 [kblockd/7]
root 0 0 00:00:00 4-10:29:55 90 [kacpid]
root 0 0 00:00:00 4-10:29:55 91 [kacpi_notify]
root 0 0 00:00:00 4-10:29:55 92 [kacpi_hotplug]
root 0 0 00:00:00 4-10:29:55 93 [ata_aux]
root 0 0 00:00:00 4-10:29:55 94 [ata_sff/0]
root 0 0 00:00:00 4-10:29:55 95 [ata_sff/1]
root 0 0 00:00:00 4-10:29:55 96 [ata_sff/2]
root 0 0 00:00:00 4-10:29:55 97 [ata_sff/3]
root 0 0 00:00:00 4-10:29:55 98 [ata_sff/4]
root 0 0 00:00:00 4-10:29:55 99 [ata_sff/5]
root 0 0 00:00:00 4-10:29:55 100 [ata_sff/6]
root 0 0 00:00:00 4-10:29:55 101 [ata_sff/7]
root 0 0 00:00:00 4-10:29:55 102 [ksuspend_usbd]
root 0 0 00:00:00 4-10:29:55 103 [khubd]
root 0 0 00:00:00 4-10:29:55 104 [kseriod]
root 0 0 00:00:00 4-10:29:55 105 [md/0]
root 0 0 00:00:00 4-10:29:55 106 [md/1]
root 0 0 00:00:00 4-10:29:55 107 [md/2]
root 0 0 00:00:00 4-10:29:55 108 [md/3]
root 0 0 00:00:00 4-10:29:55 109 [md/4]
root 0 0 00:00:00 4-10:29:55 110 [md/5]
root 0 0 00:00:00 4-10:29:55 111 [md/6]
root 0 0 00:00:00 4-10:29:55 112 [md/7]
root 0 0 00:00:00 4-10:29:55 113 [md_misc/0]
root 0 0 00:00:00 4-10:29:55 114 [md_misc/1]
root 0 0 00:00:00 4-10:29:55 115 [md_misc/2]
root 0 0 00:00:00 4-10:29:55 116 [md_misc/3]
root 0 0 00:00:00 4-10:29:55 117 [md_misc/4]
root 0 0 00:00:00 4-10:29:55 118 [md_misc/5]
root 0 0 00:00:00 4-10:29:55 119 [md_misc/6]
root 0 0 00:00:00 4-10:29:55 120 [md_misc/7]
root 0 0 00:00:00 4-10:29:55 121 [linkwatch]
root 0 0 00:00:01 4-10:29:54 124 [khungtaskd]
root 0 0 00:24:03 4-10:29:54 125 [kswapd1]
root 0 0 00:00:00 4-10:29:54 126 [ksmd]
root 0 0 00:05:06 4-10:29:54 127 [khugepaged]
root 0 0 00:00:00 4-10:29:54 128 [aio/0]
root 0 0 00:00:00 4-10:29:54 129 [aio/1]
root 0 0 00:00:00 4-10:29:54 130 [aio/2]
root 0 0 00:00:00 4-10:29:54 131 [aio/3]
root 0 0 00:00:00 4-10:29:54 132 [aio/4]
root 0 0 00:00:00 4-10:29:54 133 [aio/5]
root 0 0 00:00:00 4-10:29:54 134 [aio/6]
root 0 0 00:00:00 4-10:29:54 135 [aio/7]
root 0 0 00:00:00 4-10:29:54 136 [crypto/0]
root 0 0 00:00:00 4-10:29:54 137 [crypto/1]
root 0 0 00:00:00 4-10:29:54 138 [crypto/2]
root 0 0 00:00:00 4-10:29:54 139 [crypto/3]
root 0 0 00:00:00 4-10:29:54 140 [crypto/4]
root 0 0 00:00:00 4-10:29:54 141 [crypto/5]
root 0 0 00:00:00 4-10:29:54 142 [crypto/6]
root 0 0 00:00:00 4-10:29:54 143 [crypto/7]
root 0 0 00:00:00 4-10:29:54 150 [kthrotld/0]
root 0 0 00:00:00 4-10:29:54 151 [kthrotld/1]
root 0 0 00:00:00 4-10:29:54 152 [kthrotld/2]
root 0 0 00:00:00 4-10:29:54 153 [kthrotld/3]
root 0 0 00:00:00 4-10:29:54 154 [kthrotld/4]
root 0 0 00:00:00 4-10:29:54 155 [kthrotld/5]
root 0 0 00:00:00 4-10:29:54 156 [kthrotld/6]
root 0 0 00:00:00 4-10:29:54 157 [kthrotld/7]
root 0 0 00:00:00 4-10:29:54 160 [kpsmoused]
root 0 0 00:00:00 4-10:29:54 161 [usbhid_resumer]
root 0 0 00:00:00 4-10:29:54 162 [deferwq]
root 0 0 00:00:00 4-10:29:54 194 [kdmremove]
root 0 0 00:00:00 4-10:29:54 195 [kstriped]
root 0 0 00:00:00 4-10:29:52 734 [scsi_eh_0]
root 0 0 00:00:00 4-10:29:52 735 [scsi_wq_0]
root 0 0 00:00:00 4-10:29:52 748 [scsi_eh_1]
root 0 0 00:00:00 4-10:29:52 749 [scsi_eh_2]
root 0 0 00:00:00 4-10:29:52 750 [scsi_eh_3]
root 0 0 00:00:00 4-10:29:52 751 [scsi_eh_4]
root 0 0 00:00:00 4-10:29:52 752 [scsi_eh_5]
root 0 0 00:00:00 4-10:29:52 753 [scsi_eh_6]
root 0 0 00:01:30 4-10:29:51 947 [md1_raid1]
root 0 0 00:00:11 4-10:29:50 1008 [jbd2/md1-8]
root 0 0 00:00:00 4-10:29:50 1009 [ext4-dio-unwrit]
root 11284 516 00:00:02 4-10:29:49 1102 /sbin/udevd -d
root 0 0 00:01:17 4-10:29:49 1222 [edac-poller]
root 0 0 00:00:41 4-10:29:49 1255 [md2_raid1]
root 0 0 00:07:38 4-10:29:48 1261 [md3_raid1]
root 0 0 00:01:10 4-10:29:48 1264 [md4_raid1]
root 0 0 00:46:43 4-10:29:48 1268 [md5_raid1]
root 0 0 00:00:08 4-10:29:48 1301 [md0_raid1]
root 0 0 00:00:10 4-10:29:46 1832 [flush-9:2]
root 0 0 00:00:26 4-10:29:46 1833 [flush-9:3]
root 0 0 00:01:12 4-10:29:46 1835 [flush-9:5]
root 0 0 00:00:00 4-10:29:46 1872 [jbd2/md0-8]
root 0 0 00:00:00 4-10:29:46 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 4-10:29:46 1876 [xfs_mru_cache]
root 0 0 00:00:00 4-10:29:46 1877 [xfslogd/0]
root 0 0 00:00:00 4-10:29:46 1878 [xfslogd/1]
root 0 0 00:03:46 4-10:29:46 1879 [xfslogd/2]
root 0 0 00:00:00 4-10:29:46 1880 [xfslogd/3]
root 0 0 00:00:19 4-10:29:46 1881 [xfslogd/4]
root 0 0 00:00:00 4-10:29:46 1882 [xfslogd/5]
root 0 0 00:00:00 4-10:29:46 1883 [xfslogd/6]
root 0 0 00:00:00 4-10:29:46 1884 [xfslogd/7]
root 0 0 00:00:00 4-10:29:46 1885 [xfsdatad/0]
root 0 0 00:00:00 4-10:29:46 1886 [xfsdatad/1]
root 0 0 00:05:48 4-10:29:46 1887 [xfsdatad/2]
root 0 0 00:00:00 4-10:29:46 1888 [xfsdatad/3]
root 0 0 00:04:38 4-10:29:46 1889 [xfsdatad/4]
root 0 0 00:00:00 4-10:29:46 1890 [xfsdatad/5]
root 0 0 00:00:00 4-10:29:46 1891 [xfsdatad/6]
root 0 0 00:00:00 4-10:29:46 1892 [xfsdatad/7]
root 0 0 00:00:00 4-10:29:46 1893 [xfsconvertd/0]
root 0 0 00:00:00 4-10:29:46 1894 [xfsconvertd/1]
root 0 0 00:00:00 4-10:29:46 1895 [xfsconvertd/2]
root 0 0 00:00:00 4-10:29:46 1896 [xfsconvertd/3]
root 0 0 00:00:00 4-10:29:46 1897 [xfsconvertd/4]
root 0 0 00:00:00 4-10:29:46 1898 [xfsconvertd/5]
root 0 0 00:00:00 4-10:29:46 1899 [xfsconvertd/6]
root 0 0 00:00:00 4-10:29:46 1900 [xfsconvertd/7]
root 0 0 00:00:00 4-10:29:46 1901 [xfsalloc/0]
root 0 0 00:00:00 4-10:29:46 1902 [xfsalloc/1]
root 0 0 00:00:00 4-10:29:46 1903 [xfsalloc/2]
root 0 0 00:00:00 4-10:29:46 1904 [xfsalloc/3]
root 0 0 00:00:00 4-10:29:46 1905 [xfsalloc/4]
root 0 0 00:00:00 4-10:29:46 1906 [xfsalloc/5]
root 0 0 00:00:00 4-10:29:46 1907 [xfsalloc/6]
root 0 0 00:00:00 4-10:29:46 1908 [xfsalloc/7]
root 0 0 00:00:01 4-10:29:46 1909 [xfseofblocks/0]
root 0 0 00:00:00 4-10:29:46 1910 [xfseofblocks/1]
root 0 0 00:00:00 4-10:29:46 1911 [xfseofblocks/2]
root 0 0 00:00:00 4-10:29:46 1912 [xfseofblocks/3]
root 0 0 00:00:00 4-10:29:46 1913 [xfseofblocks/4]
root 0 0 00:00:00 4-10:29:46 1914 [xfseofblocks/5]
root 0 0 00:00:00 4-10:29:46 1915 [xfseofblocks/6]
root 0 0 00:00:00 4-10:29:46 1916 [xfseofblocks/7]
root 0 0 00:00:54 4-10:29:46 1917 [xfsbufd/md5]
root 0 0 00:00:35 4-10:29:46 1918 [xfs-cil/md5]
root 0 0 00:00:34 4-10:29:46 1919 [xfssyncd/md5]
root 0 0 00:10:52 4-10:29:46 1920 [xfsaild/md5]
root 0 0 00:00:07 4-10:29:45 1921 [jbd2/md2-8]
root 0 0 00:00:00 4-10:29:45 1922 [ext4-dio-unwrit]
root 0 0 00:00:25 4-10:29:45 1923 [xfsbufd/md4]
root 0 0 00:00:00 4-10:29:45 1924 [xfs-cil/md4]
root 0 0 00:00:04 4-10:29:45 1925 [xfssyncd/md4]
root 0 0 00:10:33 4-10:29:45 1926 [xfsaild/md4]
root 0 0 00:01:12 4-10:29:45 1927 [xfsbufd/md3]
root 0 0 00:01:58 4-10:29:45 1928 [xfs-cil/md3]
root 0 0 00:00:07 4-10:29:45 1929 [xfssyncd/md3]
root 0 0 00:10:46 4-10:29:45 1930 [xfsaild/md3]
root 0 0 00:00:02 4-10:29:44 1986 [kauditd]
root 29764 708 00:00:05 4-10:29:26 2241 auditd
root 249472 4312 00:08:58 4-10:29:26 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 00:01:50 4-10:29:26 2278 irqbalance --pid=/var/run/irqbalance.pid
named 707600 25096 00:02:20 4-10:29:25 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:00 4-10:29:25 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 4-10:29:25 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:01:11 4-10:29:24 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:01 4-10:29:24 2479 /usr/sbin/sshd
root 21712 720 00:00:01 4-10:29:24 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 4-10:29:24 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4867508 1142492 17-12:55:06 4-10:29:23 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 2020 00:00:01 4-10:29:19 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2008 00:00:02 4-10:29:19 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2004 00:00:01 4-10:29:19 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2000 00:00:01 4-10:29:19 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2004 00:00:02 4-10:29:19 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1840 00:00:38 4-10:29:14 3211 sendmail: accepting connections
smmsp 78752 780 00:00:06 4-10:29:14 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 563656 28608 00:02:14 4-10:29:07 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:05 4-10:29:07 3244 crond
root 107544 316 00:00:00 4-10:29:05 3296 pure-ftpd (SERVER) 
root 63224 8344 00:00:20 4-10:28:51 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 4-10:28:50 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 4-10:28:50 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 4-10:28:50 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 4-10:28:50 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 4-10:28:50 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 4-10:28:50 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:02 4-10:28:50 3372 /sbin/udevd -d
root 11280 508 00:00:00 4-10:28:50 3373 /sbin/udevd -d
root 0 0 00:12:20 4-10:26:55 3716 [kipmi0]
root 0 0 00:00:18 3-08:54:06 13329 [xfsbufd/sdc1]
root 0 0 00:00:23 3-08:54:06 13330 [xfs-cil/sdc1]
root 0 0 00:01:20 3-08:54:06 13331 [xfssyncd/sdc1]
root 0 0 00:08:40 3-08:54:06 13332 [xfsaild/sdc1]
root 0 0 00:00:00 54:48 19379 [flush-9:4]
root 0 0 00:00:00 54:40 19498 [flush-8:32]
root 96584 5432 00:00:00 21:24 24473 sendmail: ./4AT42mqR230853 ap.omron.com.: client greeting
root 96584 5440 00:00:00 20:24 24754 sendmail: ./4AU5tEnJ164773 smtpin2.three.com.au.: user open
apache 656732 154292 00:00:19 11:56 26123 /usr/sbin/httpd -DSSL
apache 613432 116820 00:00:18 11:56 26124 /usr/sbin/httpd -DSSL
root 96604 5476 00:00:00 11:24 26242 sendmail: ./4ATFhFrD021699 mail.tapdancer.com.: user open
apache 674224 180272 00:00:19 10:19 26390 /usr/sbin/httpd -DSSL
root 96492 5468 00:00:00 09:24 26697 sendmail: ./4ATEmiMO012887 correo.sporcar.com.: user open
apache 589352 94108 00:00:18 08:57 26698 /usr/sbin/httpd -DSSL
root 96120 3652 00:00:00 08:24 26703 sendmail: ./4B1CxGg3235269 service45.mimecast.com.: user open
apache 663824 153332 00:00:11 07:31 26711 /usr/sbin/httpd -DSSL
root 96120 3648 00:00:00 07:24 26712 sendmail: ./4B1D5fop236615 service45.mimecast.com.: user open
apache 595100 74528 00:00:10 07:22 26713 /usr/sbin/httpd -DSSL
apache 586316 83524 00:00:12 07:20 26714 /usr/sbin/httpd -DSSL
apache 582984 77636 00:00:05 07:18 26715 /usr/sbin/httpd -DSSL
apache 606960 110764 00:00:11 07:17 26716 /usr/sbin/httpd -DSSL
apache 583024 71920 00:00:08 07:15 26719 /usr/sbin/httpd -DSSL
apache 596580 91616 00:00:12 07:10 26720 /usr/sbin/httpd -DSSL
root 40060 2032 00:00:00 07:09 26725 dovecot/ssl-params
apache 586352 81148 00:00:09 07:07 26727 /usr/sbin/httpd -DSSL
apache 611992 106120 00:00:12 06:57 26729 /usr/sbin/httpd -DSSL
apache 588012 83968 00:00:10 06:51 27023 /usr/sbin/httpd -DSSL
apache 588848 79332 00:00:08 06:46 27027 /usr/sbin/httpd -DSSL
apache 656788 138420 00:00:06 06:46 27028 /usr/sbin/httpd -DSSL
apache 594320 89820 00:00:11 06:46 27030 /usr/sbin/httpd -DSSL
apache 602684 95552 00:00:11 06:33 27033 /usr/sbin/httpd -DSSL
apache 608484 109032 00:00:11 06:32 27035 /usr/sbin/httpd -DSSL
root 96492 5432 00:00:00 06:24 27036 sendmail: ./4B12NqbQ126438 mxtr.nlhc.nf.ca.: user open
root 96492 5432 00:00:00 05:24 27190 sendmail: ./4AUGExh5020937 moon.bcpl.gov.bc.ca.: user open
root 96492 5424 00:00:00 04:24 27344 sendmail: ./4B11di4v117862 mx.insight.synacor.com.: user open
apache 605032 93160 00:00:09 03:37 27558 /usr/sbin/httpd -DSSL
apache 582372 72160 00:00:03 03:36 27559 /usr/sbin/httpd -DSSL
apache 605572 102280 00:00:08 03:36 27560 /usr/sbin/httpd -DSSL
root 96492 5424 00:00:00 03:24 27561 sendmail: ./4B17Er8e178962 smtp.moncton.ca.: user open
root 96492 5420 00:00:00 02:24 27575 sendmail: ./4B198AqW198102 uu3.psi.com.: user open
root 96488 5420 00:00:00 01:24 28489 sendmail: ./4B1BlrCv224286 mail.dongdong.net.cn.: user open
apache 612072 73872 00:00:03 01:10 28490 /usr/sbin/httpd -DSSL
root 96488 5392 00:00:00 00:24 28836 sendmail: ./4B1CwQi3235242 mail.bbqgalore.com.au.: user open
root 110772 2076 00:00:00 00:01 28940 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:00 28966 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:00 28967 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:00 28968 cat
root 110900 1172 00:00:00 00:00 28994 /bin/bash /usr/bin/check_mk_agent
root 13360 1012 00:00:00 00:00 28995 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:00 28996 tr -s 
root 19260 796 00:00:01 21:30:18 80406 /usr/sbin/dovecot
dovecot 12980 1084 00:00:00 21:30:18 80408 dovecot/anvil
root 13108 1196 00:00:00 21:30:18 80409 dovecot/log
root 266592 74748 00:00:19 19:17:33 101061 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269256 77452 00:00:51 19:17:29 101062 spamd child
root 268528 76088 00:00:00 19:17:29 101063 spamd child
root 102576 4160 00:00:00 08:46:32 192415 sshd: root@pts/0 
root 108452 1844 00:00:00 08:46:32 192417 -bash
root 0 0 00:00:05 3-14:14:36 203424 [flush-9:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-04 00:21

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e48bdd4712

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1733102145
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1044 00:00:01 2-11:23:46 1 /sbin/init
root 0 0 00:00:00 2-11:23:46 2 [kthreadd]
root 0 0 00:05:30 2-11:23:46 3 [migration/0]
root 0 0 00:00:40 2-11:23:46 4 [ksoftirqd/0]
root 0 0 00:00:00 2-11:23:46 5 [stopper/0]
root 0 0 00:00:16 2-11:23:46 6 [watchdog/0]
root 0 0 00:02:54 2-11:23:46 7 [migration/1]
root 0 0 00:00:00 2-11:23:46 8 [stopper/1]
root 0 0 00:00:39 2-11:23:46 9 [ksoftirqd/1]
root 0 0 00:00:18 2-11:23:46 10 [watchdog/1]
root 0 0 00:11:47 2-11:23:46 11 [migration/2]
root 0 0 00:00:00 2-11:23:46 12 [stopper/2]
root 0 0 00:00:25 2-11:23:46 13 [ksoftirqd/2]
root 0 0 00:00:12 2-11:23:46 14 [watchdog/2]
root 0 0 00:01:49 2-11:23:46 15 [migration/3]
root 0 0 00:00:00 2-11:23:46 16 [stopper/3]
root 0 0 00:00:35 2-11:23:46 17 [ksoftirqd/3]
root 0 0 00:00:17 2-11:23:46 18 [watchdog/3]
root 0 0 00:08:03 2-11:23:46 19 [migration/4]
root 0 0 00:00:00 2-11:23:46 20 [stopper/4]
root 0 0 00:00:22 2-11:23:46 21 [ksoftirqd/4]
root 0 0 00:00:05 2-11:23:46 22 [watchdog/4]
root 0 0 00:02:37 2-11:23:46 23 [migration/5]
root 0 0 00:00:00 2-11:23:46 24 [stopper/5]
root 0 0 00:00:23 2-11:23:46 25 [ksoftirqd/5]
root 0 0 00:00:09 2-11:23:46 26 [watchdog/5]
root 0 0 00:01:39 2-11:23:46 27 [migration/6]
root 0 0 00:00:00 2-11:23:46 28 [stopper/6]
root 0 0 00:00:23 2-11:23:46 29 [ksoftirqd/6]
root 0 0 00:00:07 2-11:23:46 30 [watchdog/6]
root 0 0 00:01:23 2-11:23:46 31 [migration/7]
root 0 0 00:00:00 2-11:23:46 32 [stopper/7]
root 0 0 00:00:24 2-11:23:46 33 [ksoftirqd/7]
root 0 0 00:00:08 2-11:23:46 34 [watchdog/7]
root 0 0 00:02:06 2-11:23:46 35 [events/0]
root 0 0 00:01:43 2-11:23:46 36 [events/1]
root 0 0 00:00:59 2-11:23:46 37 [events/2]
root 0 0 00:01:49 2-11:23:46 38 [events/3]
root 0 0 00:00:38 2-11:23:46 39 [events/4]
root 0 0 00:00:55 2-11:23:46 40 [events/5]
root 0 0 00:00:59 2-11:23:46 41 [events/6]
root 0 0 00:01:04 2-11:23:46 42 [events/7]
root 0 0 00:00:00 2-11:23:46 43 [events/0]
root 0 0 00:00:00 2-11:23:46 44 [events/1]
root 0 0 00:00:00 2-11:23:46 45 [events/2]
root 0 0 00:00:00 2-11:23:46 46 [events/3]
root 0 0 00:00:00 2-11:23:46 47 [events/4]
root 0 0 00:00:00 2-11:23:46 48 [events/5]
root 0 0 00:00:00 2-11:23:46 49 [events/6]
root 0 0 00:00:00 2-11:23:46 50 [events/7]
root 0 0 00:00:00 2-11:23:46 51 [events_long/0]
root 0 0 00:00:00 2-11:23:46 52 [events_long/1]
root 0 0 00:00:00 2-11:23:46 53 [events_long/2]
root 0 0 00:00:00 2-11:23:46 54 [events_long/3]
root 0 0 00:00:00 2-11:23:46 55 [events_long/4]
root 0 0 00:00:00 2-11:23:46 56 [events_long/5]
root 0 0 00:00:00 2-11:23:46 57 [events_long/6]
root 0 0 00:00:00 2-11:23:46 58 [events_long/7]
root 0 0 00:00:00 2-11:23:46 59 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 60 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 61 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 62 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 63 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 64 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 65 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 66 [events_power_ef]
root 0 0 00:00:00 2-11:23:46 67 [cgroup]
root 0 0 00:00:00 2-11:23:46 68 [khelper]
root 0 0 00:00:00 2-11:23:46 69 [netns]
root 0 0 00:00:00 2-11:23:46 70 [async/mgr]
root 0 0 00:00:00 2-11:23:46 71 [pm]
root 0 0 00:00:09 2-11:23:46 72 [sync_supers]
root 0 0 00:00:00 2-11:23:46 73 [bdi-default]
root 0 0 00:00:00 2-11:23:46 74 [kintegrityd/0]
root 0 0 00:00:00 2-11:23:46 75 [kintegrityd/1]
root 0 0 00:00:00 2-11:23:46 76 [kintegrityd/2]
root 0 0 00:00:00 2-11:23:46 77 [kintegrityd/3]
root 0 0 00:00:00 2-11:23:46 78 [kintegrityd/4]
root 0 0 00:00:00 2-11:23:46 79 [kintegrityd/5]
root 0 0 00:00:00 2-11:23:46 80 [kintegrityd/6]
root 0 0 00:00:00 2-11:23:46 81 [kintegrityd/7]
root 0 0 00:00:10 2-11:23:46 82 [kblockd/0]
root 0 0 00:00:02 2-11:23:46 83 [kblockd/1]
root 0 0 00:11:53 2-11:23:46 84 [kblockd/2]
root 0 0 00:00:00 2-11:23:46 85 [kblockd/3]
root 0 0 00:06:01 2-11:23:46 86 [kblockd/4]
root 0 0 00:00:08 2-11:23:46 87 [kblockd/5]
root 0 0 00:00:01 2-11:23:46 88 [kblockd/6]
root 0 0 00:00:00 2-11:23:46 89 [kblockd/7]
root 0 0 00:00:00 2-11:23:46 90 [kacpid]
root 0 0 00:00:00 2-11:23:46 91 [kacpi_notify]
root 0 0 00:00:00 2-11:23:46 92 [kacpi_hotplug]
root 0 0 00:00:00 2-11:23:46 93 [ata_aux]
root 0 0 00:00:00 2-11:23:46 94 [ata_sff/0]
root 0 0 00:00:00 2-11:23:46 95 [ata_sff/1]
root 0 0 00:00:00 2-11:23:46 96 [ata_sff/2]
root 0 0 00:00:00 2-11:23:46 97 [ata_sff/3]
root 0 0 00:00:00 2-11:23:46 98 [ata_sff/4]
root 0 0 00:00:00 2-11:23:46 99 [ata_sff/5]
root 0 0 00:00:00 2-11:23:46 100 [ata_sff/6]
root 0 0 00:00:00 2-11:23:46 101 [ata_sff/7]
root 0 0 00:00:00 2-11:23:46 102 [ksuspend_usbd]
root 0 0 00:00:00 2-11:23:46 103 [khubd]
root 0 0 00:00:00 2-11:23:46 104 [kseriod]
root 0 0 00:00:00 2-11:23:46 105 [md/0]
root 0 0 00:00:00 2-11:23:46 106 [md/1]
root 0 0 00:00:00 2-11:23:46 107 [md/2]
root 0 0 00:00:00 2-11:23:46 108 [md/3]
root 0 0 00:00:00 2-11:23:46 109 [md/4]
root 0 0 00:00:00 2-11:23:46 110 [md/5]
root 0 0 00:00:00 2-11:23:46 111 [md/6]
root 0 0 00:00:00 2-11:23:46 112 [md/7]
root 0 0 00:00:00 2-11:23:46 113 [md_misc/0]
root 0 0 00:00:00 2-11:23:46 114 [md_misc/1]
root 0 0 00:00:00 2-11:23:46 115 [md_misc/2]
root 0 0 00:00:00 2-11:23:46 116 [md_misc/3]
root 0 0 00:00:00 2-11:23:46 117 [md_misc/4]
root 0 0 00:00:00 2-11:23:46 118 [md_misc/5]
root 0 0 00:00:00 2-11:23:46 119 [md_misc/6]
root 0 0 00:00:00 2-11:23:46 120 [md_misc/7]
root 0 0 00:00:00 2-11:23:46 121 [linkwatch]
root 0 0 00:00:00 2-11:23:45 124 [khungtaskd]
root 0 0 00:16:38 2-11:23:45 125 [kswapd1]
root 0 0 00:00:00 2-11:23:45 126 [ksmd]
root 0 0 00:01:46 2-11:23:45 127 [khugepaged]
root 0 0 00:00:00 2-11:23:45 128 [aio/0]
root 0 0 00:00:00 2-11:23:45 129 [aio/1]
root 0 0 00:00:00 2-11:23:45 130 [aio/2]
root 0 0 00:00:00 2-11:23:45 131 [aio/3]
root 0 0 00:00:00 2-11:23:45 132 [aio/4]
root 0 0 00:00:00 2-11:23:45 133 [aio/5]
root 0 0 00:00:00 2-11:23:45 134 [aio/6]
root 0 0 00:00:00 2-11:23:45 135 [aio/7]
root 0 0 00:00:00 2-11:23:45 136 [crypto/0]
root 0 0 00:00:00 2-11:23:45 137 [crypto/1]
root 0 0 00:00:00 2-11:23:45 138 [crypto/2]
root 0 0 00:00:00 2-11:23:45 139 [crypto/3]
root 0 0 00:00:00 2-11:23:45 140 [crypto/4]
root 0 0 00:00:00 2-11:23:45 141 [crypto/5]
root 0 0 00:00:00 2-11:23:45 142 [crypto/6]
root 0 0 00:00:00 2-11:23:45 143 [crypto/7]
root 0 0 00:00:00 2-11:23:45 150 [kthrotld/0]
root 0 0 00:00:00 2-11:23:45 151 [kthrotld/1]
root 0 0 00:00:00 2-11:23:45 152 [kthrotld/2]
root 0 0 00:00:00 2-11:23:45 153 [kthrotld/3]
root 0 0 00:00:00 2-11:23:45 154 [kthrotld/4]
root 0 0 00:00:00 2-11:23:45 155 [kthrotld/5]
root 0 0 00:00:00 2-11:23:45 156 [kthrotld/6]
root 0 0 00:00:00 2-11:23:45 157 [kthrotld/7]
root 0 0 00:00:00 2-11:23:45 160 [kpsmoused]
root 0 0 00:00:00 2-11:23:45 161 [usbhid_resumer]
root 0 0 00:00:00 2-11:23:45 162 [deferwq]
root 0 0 00:00:00 2-11:23:45 194 [kdmremove]
root 0 0 00:00:00 2-11:23:45 195 [kstriped]
root 0 0 00:00:00 2-11:23:43 734 [scsi_eh_0]
root 0 0 00:00:00 2-11:23:43 735 [scsi_wq_0]
root 0 0 00:00:00 2-11:23:43 748 [scsi_eh_1]
root 0 0 00:00:00 2-11:23:43 749 [scsi_eh_2]
root 0 0 00:00:00 2-11:23:43 750 [scsi_eh_3]
root 0 0 00:00:00 2-11:23:43 751 [scsi_eh_4]
root 0 0 00:00:00 2-11:23:43 752 [scsi_eh_5]
root 0 0 00:00:00 2-11:23:43 753 [scsi_eh_6]
root 0 0 00:01:24 2-11:23:42 947 [md1_raid1]
root 0 0 00:00:10 2-11:23:41 1008 [jbd2/md1-8]
root 0 0 00:00:00 2-11:23:41 1009 [ext4-dio-unwrit]
root 11284 516 00:00:01 2-11:23:40 1102 /sbin/udevd -d
root 0 0 00:00:43 2-11:23:40 1222 [edac-poller]
root 0 0 00:00:33 2-11:23:40 1255 [md2_raid1]
root 0 0 00:04:02 2-11:23:39 1261 [md3_raid1]
root 0 0 00:00:55 2-11:23:39 1264 [md4_raid1]
root 0 0 00:38:17 2-11:23:39 1268 [md5_raid1]
root 0 0 00:00:08 2-11:23:39 1301 [md0_raid1]
root 0 0 00:00:07 2-11:23:37 1832 [flush-9:2]
root 0 0 00:00:16 2-11:23:37 1833 [flush-9:3]
root 0 0 00:00:53 2-11:23:37 1835 [flush-9:5]
root 0 0 00:00:00 2-11:23:37 1872 [jbd2/md0-8]
root 0 0 00:00:00 2-11:23:37 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 2-11:23:37 1876 [xfs_mru_cache]
root 0 0 00:00:00 2-11:23:37 1877 [xfslogd/0]
root 0 0 00:00:00 2-11:23:37 1878 [xfslogd/1]
root 0 0 00:02:24 2-11:23:37 1879 [xfslogd/2]
root 0 0 00:00:00 2-11:23:37 1880 [xfslogd/3]
root 0 0 00:00:12 2-11:23:37 1881 [xfslogd/4]
root 0 0 00:00:00 2-11:23:37 1882 [xfslogd/5]
root 0 0 00:00:00 2-11:23:37 1883 [xfslogd/6]
root 0 0 00:00:00 2-11:23:37 1884 [xfslogd/7]
root 0 0 00:00:00 2-11:23:37 1885 [xfsdatad/0]
root 0 0 00:00:00 2-11:23:37 1886 [xfsdatad/1]
root 0 0 00:04:54 2-11:23:37 1887 [xfsdatad/2]
root 0 0 00:00:00 2-11:23:37 1888 [xfsdatad/3]
root 0 0 00:04:02 2-11:23:37 1889 [xfsdatad/4]
root 0 0 00:00:00 2-11:23:37 1890 [xfsdatad/5]
root 0 0 00:00:00 2-11:23:37 1891 [xfsdatad/6]
root 0 0 00:00:00 2-11:23:37 1892 [xfsdatad/7]
root 0 0 00:00:00 2-11:23:37 1893 [xfsconvertd/0]
root 0 0 00:00:00 2-11:23:37 1894 [xfsconvertd/1]
root 0 0 00:00:00 2-11:23:37 1895 [xfsconvertd/2]
root 0 0 00:00:00 2-11:23:37 1896 [xfsconvertd/3]
root 0 0 00:00:00 2-11:23:37 1897 [xfsconvertd/4]
root 0 0 00:00:00 2-11:23:37 1898 [xfsconvertd/5]
root 0 0 00:00:00 2-11:23:37 1899 [xfsconvertd/6]
root 0 0 00:00:00 2-11:23:37 1900 [xfsconvertd/7]
root 0 0 00:00:00 2-11:23:37 1901 [xfsalloc/0]
root 0 0 00:00:00 2-11:23:37 1902 [xfsalloc/1]
root 0 0 00:00:00 2-11:23:37 1903 [xfsalloc/2]
root 0 0 00:00:00 2-11:23:37 1904 [xfsalloc/3]
root 0 0 00:00:00 2-11:23:37 1905 [xfsalloc/4]
root 0 0 00:00:00 2-11:23:37 1906 [xfsalloc/5]
root 0 0 00:00:00 2-11:23:37 1907 [xfsalloc/6]
root 0 0 00:00:00 2-11:23:37 1908 [xfsalloc/7]
root 0 0 00:00:01 2-11:23:37 1909 [xfseofblocks/0]
root 0 0 00:00:00 2-11:23:37 1910 [xfseofblocks/1]
root 0 0 00:00:00 2-11:23:37 1911 [xfseofblocks/2]
root 0 0 00:00:00 2-11:23:37 1912 [xfseofblocks/3]
root 0 0 00:00:00 2-11:23:37 1913 [xfseofblocks/4]
root 0 0 00:00:00 2-11:23:37 1914 [xfseofblocks/5]
root 0 0 00:00:00 2-11:23:37 1915 [xfseofblocks/6]
root 0 0 00:00:00 2-11:23:37 1916 [xfseofblocks/7]
root 0 0 00:00:32 2-11:23:37 1917 [xfsbufd/md5]
root 0 0 00:00:15 2-11:23:37 1918 [xfs-cil/md5]
root 0 0 00:00:19 2-11:23:37 1919 [xfssyncd/md5]
root 0 0 00:05:27 2-11:23:37 1920 [xfsaild/md5]
root 0 0 00:00:05 2-11:23:36 1921 [jbd2/md2-8]
root 0 0 00:00:00 2-11:23:36 1922 [ext4-dio-unwrit]
root 0 0 00:00:16 2-11:23:36 1923 [xfsbufd/md4]
root 0 0 00:00:00 2-11:23:36 1924 [xfs-cil/md4]
root 0 0 00:00:03 2-11:23:36 1925 [xfssyncd/md4]
root 0 0 00:05:18 2-11:23:36 1926 [xfsaild/md4]
root 0 0 00:00:37 2-11:23:36 1927 [xfsbufd/md3]
root 0 0 00:00:59 2-11:23:36 1928 [xfs-cil/md3]
root 0 0 00:00:04 2-11:23:36 1929 [xfssyncd/md3]
root 0 0 00:05:31 2-11:23:36 1930 [xfsaild/md3]
root 0 0 00:00:01 2-11:23:35 1986 [kauditd]
root 29764 692 00:00:03 2-11:23:17 2241 auditd
root 249472 3336 00:04:28 2-11:23:17 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 00:01:01 2-11:23:17 2278 irqbalance --pid=/var/run/irqbalance.pid
named 706300 23476 00:01:11 2-11:23:16 2296 /usr/sbin/named -u named -4
root 4988 856 00:00:00 2-11:23:16 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 2-11:23:16 2445 /usr/sbin/mcelog --daemon
memcached 330840 2560 00:00:38 2-11:23:15 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 560 00:00:00 2-11:23:15 2479 /usr/sbin/sshd
root 21712 720 00:00:00 2-11:23:15 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1252 00:00:00 2-11:23:15 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4867508 1133696 10-02:17:19 2-11:23:14 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 71716 1968 00:00:01 2-11:23:10 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 1956 00:00:01 2-11:23:10 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1952 00:00:01 2-11:23:10 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1948 00:00:01 2-11:23:10 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1952 00:00:01 2-11:23:10 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 93544 1836 00:00:25 2-11:23:05 3211 sendmail: rejecting connections on daemon MTA: 17 children, max 15
smmsp 78752 780 00:00:03 2-11:23:05 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 563656 28620 00:01:21 2-11:22:58 3232 /usr/sbin/httpd -DSSL
root 117016 904 00:00:02 2-11:22:58 3244 crond
root 107544 316 00:00:00 2-11:22:56 3296 pure-ftpd (SERVER) 
root 63224 11632 00:00:11 2-11:22:42 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 548 00:00:00 2-11:22:41 3361 /sbin/mingetty /dev/tty1
root 4060 544 00:00:00 2-11:22:41 3363 /sbin/mingetty /dev/tty2
root 4060 544 00:00:00 2-11:22:41 3365 /sbin/mingetty /dev/tty3
root 4060 548 00:00:00 2-11:22:41 3367 /sbin/mingetty /dev/tty4
root 4060 540 00:00:00 2-11:22:41 3369 /sbin/mingetty /dev/tty5
root 4060 544 00:00:00 2-11:22:41 3371 /sbin/mingetty /dev/tty6
root 10644 596 00:00:01 2-11:22:41 3372 /sbin/udevd -d
root 11280 508 00:00:00 2-11:22:41 3373 /sbin/udevd -d
root 0 0 00:06:30 2-11:20:46 3716 [kipmi0]
root 0 0 00:00:16 1-09:47:57 13329 [xfsbufd/sdc1]
root 0 0 00:00:21 1-09:47:57 13330 [xfs-cil/sdc1]
root 0 0 00:00:16 1-09:47:57 13331 [xfssyncd/sdc1]
root 0 0 00:03:30 1-09:47:57 13332 [xfsaild/sdc1]
root 0 0 00:00:41 01:03:32 90906 [flush-8:32]
root 139904 1468 00:00:00 55:45 91780 CROND
root 139904 1468 00:00:00 55:45 91781 CROND
root 106076 1224 00:00:00 55:45 91789 /bin/sh -c /usr/local/sbin/incrun.sh > /dev/null 2>&1
root 106076 1220 00:00:00 55:45 91793 /bin/sh -c /usr/local/sbin/incrun-local.sh > /dev/null 2>&1
root 106076 1304 00:00:00 55:45 91795 /bin/bash /usr/local/sbin/incrun.sh
root 106076 1296 00:00:00 55:45 91799 /bin/bash /usr/local/sbin/incrun-local.sh
root 106076 1308 00:00:00 55:45 91814 /bin/bash /usr/local/sbin/incremental.sh home root@178.237.35.146:/ /backup/146/data/ 3
root 119704 13076 00:09:32 55:45 91850 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 root@178.237.35.146:/home/ home.0/
root 106076 1308 00:00:00 55:45 91853 /bin/bash /usr/local/sbin/incremental.sh home / /backup/43/data/ 7
root 224656 113392 00:24:56 55:45 91860 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 206368 90412 00:00:16 55:44 91863 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 66792 7780 00:00:16 55:44 91864 ssh -l root 178.237.35.146 rsync --server --sender -vlogDtprSze.iLs --numeric-ids . /home/
root 176068 65468 00:11:17 55:44 91874 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 138468 17820 00:11:10 55:44 91920 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 root@178.237.35.146:/home/ home.0/
apache 621624 132064 00:01:27 29:36 95642 /usr/sbin/httpd -DSSL
root 96868 5728 00:00:00 28:19 95726 sendmail: ./4AUA95RD203832 mail-mx-01.ktc235a.fibernetics.ca.: client greeting
apache 588204 95916 00:01:05 26:14 96017 /usr/sbin/httpd -DSSL
apache 586692 97152 00:01:01 25:19 96163 /usr/sbin/httpd -DSSL
apache 607312 113792 00:01:10 23:50 96485 /usr/sbin/httpd -DSSL
apache 604436 113632 00:00:57 22:14 96626 /usr/sbin/httpd -DSSL
root 96884 5672 00:00:00 21:19 96789 sendmail: ./4AUGExh5020937 moon.bcpl.gov.bc.ca.: user open
apache 586392 94768 00:00:57 19:37 96984 /usr/sbin/httpd -DSSL
root 97004 5752 00:00:00 18:19 97292 sendmail: ./4AUBlMZA220390 mx2.free.fr.: client greeting
apache 590456 100100 00:00:47 16:09 97309 /usr/sbin/httpd -DSSL
apache 585180 82100 00:00:36 15:28 97577 /usr/sbin/httpd -DSSL
root 96120 3768 00:00:00 15:19 97578 sendmail: ./4B1Ag8ZU213557 mail.dw.com.sg.: user open
apache 593132 91512 00:00:43 14:59 97582 /usr/sbin/httpd -DSSL
apache 597964 104976 00:00:43 14:58 97583 /usr/sbin/httpd -DSSL
apache 587536 94232 00:00:31 14:58 97584 /usr/sbin/httpd -DSSL
apache 600280 106956 00:00:40 14:57 97585 /usr/sbin/httpd -DSSL
apache 584900 82088 00:00:37 14:57 97586 /usr/sbin/httpd -DSSL
apache 594900 94000 00:00:38 14:57 97588 /usr/sbin/httpd -DSSL
apache 587232 93184 00:00:30 12:26 98225 /usr/sbin/httpd -DSSL
apache 589408 83316 00:00:31 12:25 98226 /usr/sbin/httpd -DSSL
apache 616040 113216 00:00:27 12:25 98227 /usr/sbin/httpd -DSSL
root 96856 5692 00:00:00 11:19 98234 sendmail: ./4ATFhFrD021699 mail.tapdancer.com.: user open
root 96876 5680 00:00:00 10:19 98304 sendmail: ./4AU5tEnJ164773 smtpin2.three.com.au.: user open
root 96732 5644 00:00:00 09:19 98637 sendmail: ./4AT42mqR230853 ap.omron.com.: client greeting
apache 597880 102984 00:00:25 09:05 98638 /usr/sbin/httpd -DSSL
root 96120 3656 00:00:00 08:19 98737 sendmail: ./4B1CxGg3235269 service45.mimecast.com.: user open
apache 664972 152420 00:00:23 08:07 98793 /usr/sbin/httpd -DSSL
apache 592928 95956 00:00:20 07:21 98796 /usr/sbin/httpd -DSSL
root 96764 5652 00:00:00 07:19 98797 sendmail: ./4AU5soqX164707 smtpin2.three.com.au.: user open
root 96716 5596 00:00:00 06:19 98952 sendmail: ./4B14XxJh151289 mx2.free.fr.: user open
apache 583376 70444 00:00:16 06:07 98954 /usr/sbin/httpd -DSSL
root 96724 5568 00:00:00 05:19 99062 sendmail: ./4B12NqbQ126438 mxtr.nlhc.nf.ca.: user open
root 96716 5548 00:00:00 04:19 99221 sendmail: ./4B11di4v117862 mx.insight.synacor.com.: user open
root 40060 2032 00:00:00 03:30 99443 dovecot/ssl-params
root 96120 3804 00:00:00 03:19 99459 sendmail: ./4B17Er8e178962 smtp.moncton.ca.: user open
root 96120 3652 00:00:00 02:19 99554 sendmail: ./4B1D5fop236615 service45.mimecast.com.: user open
root 96120 3760 00:00:00 01:19 99556 sendmail: ./4B1BlrCv224286 mail.dongdong.net.cn.: user open
root 0 0 00:00:00 00:39 99782 [flush-9:4]
root 96120 3660 00:00:00 00:19 99783 sendmail: ./4B1BngYh224506 mail.limebox.com.sg.: user open
apache 589992 67708 00:00:00 00:06 99784 /usr/sbin/httpd -DSSL
root 110772 2080 00:00:00 00:01 99857 /bin/bash /usr/bin/check_mk_agent
root 110900 1696 00:00:00 00:01 99883 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 99884 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 99886 cat
root 110900 1176 00:00:00 00:01 99911 /bin/bash /usr/bin/check_mk_agent
root 13360 1012 00:00:00 00:01 99912 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 99913 tr -s 
root 19260 728 00:00:01 22:23:59 132640 /usr/sbin/dovecot
dovecot 13112 1012 00:00:00 22:23:58 132641 dovecot/anvil
root 13108 1044 00:00:00 22:23:58 132642 dovecot/log
root 266488 73820 00:00:20 20:13:13 156803 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269412 76624 00:00:52 20:13:07 156836 spamd child
root 268224 75092 00:00:00 20:13:07 156837 spamd child
root 0 0 00:00:03 1-15:08:27 203424 [flush-9:1]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-12-02 01:15

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e47464d164

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1732925777
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19340 1416 00:00:01 10:24:18 1 /sbin/init
root 0 0 00:00:00 10:24:18 2 [kthreadd]
root 0 0 00:00:05 10:24:18 3 [migration/0]
root 0 0 00:00:03 10:24:18 4 [ksoftirqd/0]
root 0 0 00:00:00 10:24:18 5 [stopper/0]
root 0 0 00:00:00 10:24:18 6 [watchdog/0]
root 0 0 00:00:01 10:24:18 7 [migration/1]
root 0 0 00:00:00 10:24:18 8 [stopper/1]
root 0 0 00:00:03 10:24:18 9 [ksoftirqd/1]
root 0 0 00:00:00 10:24:18 10 [watchdog/1]
root 0 0 00:00:06 10:24:18 11 [migration/2]
root 0 0 00:00:00 10:24:18 12 [stopper/2]
root 0 0 00:00:02 10:24:18 13 [ksoftirqd/2]
root 0 0 00:00:00 10:24:18 14 [watchdog/2]
root 0 0 00:00:02 10:24:18 15 [migration/3]
root 0 0 00:00:00 10:24:18 16 [stopper/3]
root 0 0 00:00:03 10:24:18 17 [ksoftirqd/3]
root 0 0 00:00:00 10:24:18 18 [watchdog/3]
root 0 0 00:00:05 10:24:18 19 [migration/4]
root 0 0 00:00:00 10:24:18 20 [stopper/4]
root 0 0 00:00:02 10:24:18 21 [ksoftirqd/4]
root 0 0 00:00:00 10:24:18 22 [watchdog/4]
root 0 0 00:00:01 10:24:18 23 [migration/5]
root 0 0 00:00:00 10:24:18 24 [stopper/5]
root 0 0 00:00:02 10:24:18 25 [ksoftirqd/5]
root 0 0 00:00:00 10:24:18 26 [watchdog/5]
root 0 0 00:00:00 10:24:18 27 [migration/6]
root 0 0 00:00:00 10:24:18 28 [stopper/6]
root 0 0 00:00:02 10:24:18 29 [ksoftirqd/6]
root 0 0 00:00:00 10:24:18 30 [watchdog/6]
root 0 0 00:00:00 10:24:18 31 [migration/7]
root 0 0 00:00:00 10:24:18 32 [stopper/7]
root 0 0 00:00:02 10:24:18 33 [ksoftirqd/7]
root 0 0 00:00:00 10:24:18 34 [watchdog/7]
root 0 0 00:00:09 10:24:18 35 [events/0]
root 0 0 00:00:04 10:24:18 36 [events/1]
root 0 0 00:00:03 10:24:18 37 [events/2]
root 0 0 00:00:05 10:24:18 38 [events/3]
root 0 0 00:00:02 10:24:18 39 [events/4]
root 0 0 00:00:02 10:24:18 40 [events/5]
root 0 0 00:00:03 10:24:18 41 [events/6]
root 0 0 00:00:03 10:24:18 42 [events/7]
root 0 0 00:00:00 10:24:18 43 [events/0]
root 0 0 00:00:00 10:24:18 44 [events/1]
root 0 0 00:00:00 10:24:18 45 [events/2]
root 0 0 00:00:00 10:24:18 46 [events/3]
root 0 0 00:00:00 10:24:18 47 [events/4]
root 0 0 00:00:00 10:24:18 48 [events/5]
root 0 0 00:00:00 10:24:18 49 [events/6]
root 0 0 00:00:00 10:24:18 50 [events/7]
root 0 0 00:00:00 10:24:18 51 [events_long/0]
root 0 0 00:00:00 10:24:18 52 [events_long/1]
root 0 0 00:00:00 10:24:18 53 [events_long/2]
root 0 0 00:00:00 10:24:18 54 [events_long/3]
root 0 0 00:00:00 10:24:18 55 [events_long/4]
root 0 0 00:00:00 10:24:18 56 [events_long/5]
root 0 0 00:00:00 10:24:18 57 [events_long/6]
root 0 0 00:00:00 10:24:18 58 [events_long/7]
root 0 0 00:00:00 10:24:18 59 [events_power_ef]
root 0 0 00:00:00 10:24:18 60 [events_power_ef]
root 0 0 00:00:00 10:24:18 61 [events_power_ef]
root 0 0 00:00:00 10:24:18 62 [events_power_ef]
root 0 0 00:00:00 10:24:18 63 [events_power_ef]
root 0 0 00:00:00 10:24:18 64 [events_power_ef]
root 0 0 00:00:00 10:24:18 65 [events_power_ef]
root 0 0 00:00:00 10:24:18 66 [events_power_ef]
root 0 0 00:00:00 10:24:18 67 [cgroup]
root 0 0 00:00:00 10:24:18 68 [khelper]
root 0 0 00:00:00 10:24:18 69 [netns]
root 0 0 00:00:00 10:24:18 70 [async/mgr]
root 0 0 00:00:00 10:24:18 71 [pm]
root 0 0 00:00:00 10:24:18 72 [sync_supers]
root 0 0 00:00:00 10:24:18 73 [bdi-default]
root 0 0 00:00:00 10:24:18 74 [kintegrityd/0]
root 0 0 00:00:00 10:24:18 75 [kintegrityd/1]
root 0 0 00:00:00 10:24:18 76 [kintegrityd/2]
root 0 0 00:00:00 10:24:18 77 [kintegrityd/3]
root 0 0 00:00:00 10:24:18 78 [kintegrityd/4]
root 0 0 00:00:00 10:24:18 79 [kintegrityd/5]
root 0 0 00:00:00 10:24:18 80 [kintegrityd/6]
root 0 0 00:00:00 10:24:18 81 [kintegrityd/7]
root 0 0 00:00:00 10:24:18 82 [kblockd/0]
root 0 0 00:00:00 10:24:18 83 [kblockd/1]
root 0 0 00:00:54 10:24:18 84 [kblockd/2]
root 0 0 00:00:00 10:24:18 85 [kblockd/3]
root 0 0 00:00:21 10:24:18 86 [kblockd/4]
root 0 0 00:00:00 10:24:18 87 [kblockd/5]
root 0 0 00:00:00 10:24:18 88 [kblockd/6]
root 0 0 00:00:00 10:24:18 89 [kblockd/7]
root 0 0 00:00:00 10:24:18 90 [kacpid]
root 0 0 00:00:00 10:24:18 91 [kacpi_notify]
root 0 0 00:00:00 10:24:18 92 [kacpi_hotplug]
root 0 0 00:00:00 10:24:18 93 [ata_aux]
root 0 0 00:00:00 10:24:18 94 [ata_sff/0]
root 0 0 00:00:00 10:24:18 95 [ata_sff/1]
root 0 0 00:00:00 10:24:18 96 [ata_sff/2]
root 0 0 00:00:00 10:24:18 97 [ata_sff/3]
root 0 0 00:00:00 10:24:18 98 [ata_sff/4]
root 0 0 00:00:00 10:24:18 99 [ata_sff/5]
root 0 0 00:00:00 10:24:18 100 [ata_sff/6]
root 0 0 00:00:00 10:24:18 101 [ata_sff/7]
root 0 0 00:00:00 10:24:18 102 [ksuspend_usbd]
root 0 0 00:00:00 10:24:18 103 [khubd]
root 0 0 00:00:00 10:24:18 104 [kseriod]
root 0 0 00:00:00 10:24:18 105 [md/0]
root 0 0 00:00:00 10:24:18 106 [md/1]
root 0 0 00:00:00 10:24:18 107 [md/2]
root 0 0 00:00:00 10:24:18 108 [md/3]
root 0 0 00:00:00 10:24:18 109 [md/4]
root 0 0 00:00:00 10:24:18 110 [md/5]
root 0 0 00:00:00 10:24:18 111 [md/6]
root 0 0 00:00:00 10:24:18 112 [md/7]
root 0 0 00:00:00 10:24:18 113 [md_misc/0]
root 0 0 00:00:00 10:24:18 114 [md_misc/1]
root 0 0 00:00:00 10:24:18 115 [md_misc/2]
root 0 0 00:00:00 10:24:18 116 [md_misc/3]
root 0 0 00:00:00 10:24:18 117 [md_misc/4]
root 0 0 00:00:00 10:24:18 118 [md_misc/5]
root 0 0 00:00:00 10:24:18 119 [md_misc/6]
root 0 0 00:00:00 10:24:18 120 [md_misc/7]
root 0 0 00:00:00 10:24:18 121 [linkwatch]
root 0 0 00:00:00 10:24:17 124 [khungtaskd]
root 0 0 00:00:08 10:24:17 125 [kswapd1]
root 0 0 00:00:00 10:24:17 126 [ksmd]
root 0 0 00:00:05 10:24:17 127 [khugepaged]
root 0 0 00:00:00 10:24:17 128 [aio/0]
root 0 0 00:00:00 10:24:17 129 [aio/1]
root 0 0 00:00:00 10:24:17 130 [aio/2]
root 0 0 00:00:00 10:24:17 131 [aio/3]
root 0 0 00:00:00 10:24:17 132 [aio/4]
root 0 0 00:00:00 10:24:17 133 [aio/5]
root 0 0 00:00:00 10:24:17 134 [aio/6]
root 0 0 00:00:00 10:24:17 135 [aio/7]
root 0 0 00:00:00 10:24:17 136 [crypto/0]
root 0 0 00:00:00 10:24:17 137 [crypto/1]
root 0 0 00:00:00 10:24:17 138 [crypto/2]
root 0 0 00:00:00 10:24:17 139 [crypto/3]
root 0 0 00:00:00 10:24:17 140 [crypto/4]
root 0 0 00:00:00 10:24:17 141 [crypto/5]
root 0 0 00:00:00 10:24:17 142 [crypto/6]
root 0 0 00:00:00 10:24:17 143 [crypto/7]
root 0 0 00:00:00 10:24:17 150 [kthrotld/0]
root 0 0 00:00:00 10:24:17 151 [kthrotld/1]
root 0 0 00:00:00 10:24:17 152 [kthrotld/2]
root 0 0 00:00:00 10:24:17 153 [kthrotld/3]
root 0 0 00:00:00 10:24:17 154 [kthrotld/4]
root 0 0 00:00:00 10:24:17 155 [kthrotld/5]
root 0 0 00:00:00 10:24:17 156 [kthrotld/6]
root 0 0 00:00:00 10:24:17 157 [kthrotld/7]
root 0 0 00:00:00 10:24:17 160 [kpsmoused]
root 0 0 00:00:00 10:24:17 161 [usbhid_resumer]
root 0 0 00:00:00 10:24:17 162 [deferwq]
root 0 0 00:00:00 10:24:17 194 [kdmremove]
root 0 0 00:00:00 10:24:17 195 [kstriped]
root 0 0 00:00:00 10:24:15 734 [scsi_eh_0]
root 0 0 00:00:00 10:24:15 735 [scsi_wq_0]
root 0 0 00:00:00 10:24:15 748 [scsi_eh_1]
root 0 0 00:00:00 10:24:15 749 [scsi_eh_2]
root 0 0 00:00:00 10:24:15 750 [scsi_eh_3]
root 0 0 00:00:00 10:24:15 751 [scsi_eh_4]
root 0 0 00:00:00 10:24:15 752 [scsi_eh_5]
root 0 0 00:00:00 10:24:15 753 [scsi_eh_6]
root 0 0 00:00:00 10:24:14 947 [md1_raid1]
root 0 0 00:00:00 10:24:13 1008 [jbd2/md1-8]
root 0 0 00:00:00 10:24:13 1009 [ext4-dio-unwrit]
root 11284 1404 00:00:01 10:24:12 1102 /sbin/udevd -d
root 0 0 00:00:02 10:24:12 1222 [edac-poller]
root 0 0 00:00:01 10:24:12 1255 [md2_raid1]
root 0 0 00:00:23 10:24:11 1261 [md3_raid1]
root 0 0 00:00:02 10:24:11 1264 [md4_raid1]
root 0 0 00:02:02 10:24:11 1268 [md5_raid1]
root 0 0 00:00:00 10:24:11 1301 [md0_raid1]
root 0 0 00:00:00 10:24:09 1832 [flush-9:2]
root 0 0 00:00:01 10:24:09 1833 [flush-9:3]
root 0 0 00:00:02 10:24:09 1835 [flush-9:5]
root 0 0 00:00:00 10:24:09 1872 [jbd2/md0-8]
root 0 0 00:00:00 10:24:09 1873 [ext4-dio-unwrit]
root 0 0 00:00:00 10:24:09 1876 [xfs_mru_cache]
root 0 0 00:00:00 10:24:09 1877 [xfslogd/0]
root 0 0 00:00:00 10:24:09 1878 [xfslogd/1]
root 0 0 00:00:10 10:24:09 1879 [xfslogd/2]
root 0 0 00:00:00 10:24:09 1880 [xfslogd/3]
root 0 0 00:00:00 10:24:09 1881 [xfslogd/4]
root 0 0 00:00:00 10:24:09 1882 [xfslogd/5]
root 0 0 00:00:00 10:24:09 1883 [xfslogd/6]
root 0 0 00:00:00 10:24:09 1884 [xfslogd/7]
root 0 0 00:00:00 10:24:09 1885 [xfsdatad/0]
root 0 0 00:00:00 10:24:09 1886 [xfsdatad/1]
root 0 0 00:00:03 10:24:09 1887 [xfsdatad/2]
root 0 0 00:00:00 10:24:09 1888 [xfsdatad/3]
root 0 0 00:00:00 10:24:09 1889 [xfsdatad/4]
root 0 0 00:00:00 10:24:09 1890 [xfsdatad/5]
root 0 0 00:00:00 10:24:09 1891 [xfsdatad/6]
root 0 0 00:00:00 10:24:09 1892 [xfsdatad/7]
root 0 0 00:00:00 10:24:09 1893 [xfsconvertd/0]
root 0 0 00:00:00 10:24:09 1894 [xfsconvertd/1]
root 0 0 00:00:00 10:24:09 1895 [xfsconvertd/2]
root 0 0 00:00:00 10:24:09 1896 [xfsconvertd/3]
root 0 0 00:00:00 10:24:09 1897 [xfsconvertd/4]
root 0 0 00:00:00 10:24:09 1898 [xfsconvertd/5]
root 0 0 00:00:00 10:24:09 1899 [xfsconvertd/6]
root 0 0 00:00:00 10:24:09 1900 [xfsconvertd/7]
root 0 0 00:00:00 10:24:09 1901 [xfsalloc/0]
root 0 0 00:00:00 10:24:09 1902 [xfsalloc/1]
root 0 0 00:00:00 10:24:09 1903 [xfsalloc/2]
root 0 0 00:00:00 10:24:09 1904 [xfsalloc/3]
root 0 0 00:00:00 10:24:09 1905 [xfsalloc/4]
root 0 0 00:00:00 10:24:09 1906 [xfsalloc/5]
root 0 0 00:00:00 10:24:09 1907 [xfsalloc/6]
root 0 0 00:00:00 10:24:09 1908 [xfsalloc/7]
root 0 0 00:00:00 10:24:09 1909 [xfseofblocks/0]
root 0 0 00:00:00 10:24:09 1910 [xfseofblocks/1]
root 0 0 00:00:00 10:24:09 1911 [xfseofblocks/2]
root 0 0 00:00:00 10:24:09 1912 [xfseofblocks/3]
root 0 0 00:00:00 10:24:09 1913 [xfseofblocks/4]
root 0 0 00:00:00 10:24:09 1914 [xfseofblocks/5]
root 0 0 00:00:00 10:24:09 1915 [xfseofblocks/6]
root 0 0 00:00:00 10:24:09 1916 [xfseofblocks/7]
root 0 0 00:00:02 10:24:09 1917 [xfsbufd/md5]
root 0 0 00:00:02 10:24:09 1918 [xfs-cil/md5]
root 0 0 00:00:00 10:24:09 1919 [xfssyncd/md5]
root 0 0 00:00:21 10:24:09 1920 [xfsaild/md5]
root 0 0 00:00:00 10:24:08 1921 [jbd2/md2-8]
root 0 0 00:00:00 10:24:08 1922 [ext4-dio-unwrit]
root 0 0 00:00:00 10:24:08 1923 [xfsbufd/md4]
root 0 0 00:00:00 10:24:08 1924 [xfs-cil/md4]
root 0 0 00:00:00 10:24:08 1925 [xfssyncd/md4]
root 0 0 00:00:19 10:24:08 1926 [xfsaild/md4]
root 0 0 00:00:02 10:24:08 1927 [xfsbufd/md3]
root 0 0 00:00:06 10:24:08 1928 [xfs-cil/md3]
root 0 0 00:00:00 10:24:08 1929 [xfssyncd/md3]
root 0 0 00:00:21 10:24:08 1930 [xfsaild/md3]
root 0 0 00:00:00 10:24:07 1986 [kauditd]
root 0 0 00:00:00 10:24:04 2139 [flush-9:1]
root 29764 852 00:00:00 10:23:49 2241 auditd
root 249084 1944 00:00:30 10:23:49 2263 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 716 00:00:10 10:23:49 2278 irqbalance --pid=/var/run/irqbalance.pid
named 703960 27856 00:00:09 10:23:48 2296 /usr/sbin/named -u named -4
root 4988 960 00:00:00 10:23:48 2322 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 372 00:00:00 10:23:48 2445 /usr/sbin/mcelog --daemon
memcached 330840 2880 00:00:02 10:23:47 2457 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 1248 00:00:00 10:23:47 2479 /usr/sbin/sshd
root 21712 948 00:00:00 10:23:47 2490 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 108316 1588 00:00:00 10:23:47 2529 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4774468 694060 2-01:19:56 10:23:46 3048 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 19260 792 00:00:00 10:23:43 3103 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 10:23:43 3105 dovecot/anvil
root 13108 1196 00:00:00 10:23:43 3106 dovecot/log
root 71716 2412 00:00:00 10:23:42 3119 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71720 2396 00:00:00 10:23:42 3120 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2392 00:00:00 10:23:42 3121 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2392 00:00:00 10:23:42 3122 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 2392 00:00:00 10:23:42 3124 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 266604 74724 00:00:10 10:23:41 3191 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269612 77732 00:00:51 10:23:37 3192 spamd child
root 268764 76988 00:00:01 10:23:37 3193 spamd child
root 93544 2796 00:00:03 10:23:37 3211 sendmail: accepting connections
smmsp 78752 2128 00:00:00 10:23:37 3220 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 562956 30752 00:00:11 10:23:30 3232 /usr/sbin/httpd -DSSL
root 117016 1384 00:00:00 10:23:30 3244 crond
root 107544 420 00:00:00 10:23:28 3296 pure-ftpd (SERVER) 
root 63224 17460 00:00:01 10:23:14 3352 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 4060 560 00:00:00 10:23:13 3361 /sbin/mingetty /dev/tty1
root 4060 556 00:00:00 10:23:13 3363 /sbin/mingetty /dev/tty2
root 4060 556 00:00:00 10:23:13 3365 /sbin/mingetty /dev/tty3
root 4060 560 00:00:00 10:23:13 3367 /sbin/mingetty /dev/tty4
root 4060 552 00:00:00 10:23:13 3369 /sbin/mingetty /dev/tty5
root 4060 556 00:00:00 10:23:13 3371 /sbin/mingetty /dev/tty6
root 10644 808 00:00:00 10:23:13 3372 /sbin/udevd -d
root 11280 1396 00:00:00 10:23:13 3373 /sbin/udevd -d
root 102576 4196 00:00:00 10:21:58 3690 sshd: root@pts/0 
root 108452 1888 00:00:00 10:21:55 3693 -bash
root 0 0 00:01:02 10:21:18 3716 [kipmi0]
root 0 0 00:00:00 01:58:11 92504 [flush-9:4]
apache 604944 115188 00:00:40 25:43 108263 /usr/sbin/httpd -DSSL
apache 587396 93264 00:00:25 21:46 109165 /usr/sbin/httpd -DSSL
apache 593996 102096 00:00:22 19:53 109426 /usr/sbin/httpd -DSSL
apache 585344 84412 00:00:28 19:03 109750 /usr/sbin/httpd -DSSL
apache 587560 91836 00:00:23 19:02 109756 /usr/sbin/httpd -DSSL
apache 583824 88192 00:00:12 17:14 109882 /usr/sbin/httpd -DSSL
apache 592204 98232 00:00:23 17:14 109886 /usr/sbin/httpd -DSSL
apache 593920 103668 00:00:19 16:01 110280 /usr/sbin/httpd -DSSL
apache 584816 90916 00:00:20 15:59 110285 /usr/sbin/httpd -DSSL
apache 595072 103964 00:00:22 15:44 110304 /usr/sbin/httpd -DSSL
apache 592264 96680 00:00:20 15:25 110313 /usr/sbin/httpd -DSSL
apache 584188 88436 00:00:13 09:44 111575 /usr/sbin/httpd -DSSL
apache 583340 87608 00:00:13 09:31 111579 /usr/sbin/httpd -DSSL
apache 609200 113652 00:00:17 09:30 111583 /usr/sbin/httpd -DSSL
apache 583852 86788 00:00:13 08:28 111736 /usr/sbin/httpd -DSSL
root 96744 6304 00:00:00 07:36 111750 sendmail: ./4AS3DGj1242916 mx.mdf.co.jp.: user open
root 96716 6272 00:00:00 06:36 111987 sendmail: ./4AT4FOpZ232723 in2-smtp.messagingengine.com.: client MAIL
root 96744 6304 00:00:00 05:36 112096 sendmail: ./4ASGfPfA122244 mx2.free.fr.: client greeting
root 0 0 00:00:00 05:17 112238 [flush-8:32]
root 96588 6172 00:00:00 04:36 112247 sendmail: ./4AT3M5Go224620 killspam.whitemtns.com.: user open
root 40060 2036 00:00:00 04:01 112688 dovecot/ssl-params
root 96584 6180 00:00:00 03:36 112691 sendmail: ./4AT42mqR230853 ap.omron.com.: client greeting
apache 588628 91056 00:00:02 02:40 112696 /usr/sbin/httpd -DSSL
apache 590528 72664 00:00:02 02:40 112697 /usr/sbin/httpd -DSSL
apache 595892 76556 00:00:02 02:40 112698 /usr/sbin/httpd -DSSL
root 96588 6172 00:00:00 02:36 112700 sendmail: ./4ATEmiMO012887 correo.sporcar.com.: user open
apache 612940 91264 00:00:01 02:28 112702 /usr/sbin/httpd -DSSL
apache 583644 56352 00:00:01 01:51 112711 /usr/sbin/httpd -DSSL
apache 581492 58064 00:00:02 01:51 112712 /usr/sbin/httpd -DSSL
apache 583460 56696 00:00:01 01:48 112713 /usr/sbin/httpd -DSSL
apache 580740 59484 00:00:02 01:47 112714 /usr/sbin/httpd -DSSL
apache 581220 53804 00:00:01 01:47 112715 /usr/sbin/httpd -DSSL
apache 581380 53348 00:00:01 01:41 112717 /usr/sbin/httpd -DSSL
apache 583272 60876 00:00:02 01:41 112718 /usr/sbin/httpd -DSSL
apache 591476 72760 00:00:01 01:40 112719 /usr/sbin/httpd -DSSL
apache 579424 30960 00:00:00 01:40 112720 /usr/sbin/httpd -DSSL
apache 579816 31760 00:00:01 01:40 112721 /usr/sbin/httpd -DSSL
apache 578828 30400 00:00:00 01:40 112722 /usr/sbin/httpd -DSSL
root 96584 6168 00:00:00 01:36 112724 sendmail: ./4ATFhFrD021699 mail.tapdancer.com.: user open
apache 604068 82548 00:00:01 01:33 112726 /usr/sbin/httpd -DSSL
apache 659940 110668 00:00:00 01:33 112727 /usr/sbin/httpd -DSSL
apache 578888 30568 00:00:00 01:32 112728 /usr/sbin/httpd -DSSL
apache 579036 30528 00:00:00 01:32 112729 /usr/sbin/httpd -DSSL
apache 583324 34040 00:00:00 01:32 112731 /usr/sbin/httpd -DSSL
apache 579940 46484 00:00:00 01:25 112732 /usr/sbin/httpd -DSSL
apache 579224 30852 00:00:00 01:22 112735 /usr/sbin/httpd -DSSL
apache 580876 44420 00:00:01 01:21 112736 /usr/sbin/httpd -DSSL
apache 568056 27368 00:00:00 01:21 112737 /usr/sbin/httpd -DSSL
apache 578268 30308 00:00:00 01:18 112738 /usr/sbin/httpd -DSSL
apache 563896 23940 00:00:00 01:17 113005 /usr/sbin/httpd -DSSL
apache 585144 64760 00:00:03 01:17 113006 /usr/sbin/httpd -DSSL
apache 579540 29552 00:00:00 01:14 113007 /usr/sbin/httpd -DSSL
apache 578960 28328 00:00:00 01:09 113010 /usr/sbin/httpd -DSSL
apache 579024 28832 00:00:00 00:59 113012 /usr/sbin/httpd -DSSL
apache 580420 51472 00:00:01 00:55 113013 /usr/sbin/httpd -DSSL
root 96120 4424 00:00:00 00:36 113022 sendmail: ./4ATNWGpi104985 smtpin2.three.com.au.: user open
root 139904 1860 00:00:00 00:17 113171 CROND
root 144512 14616 00:00:00 00:17 113172 /usr/bin/perl /usr/local/webmin/webmin-1.860/webalizer/webalizer.pl /home/result2014/logs/access_log
root 9196 1148 00:00:00 00:17 113173 sh -c su -s /bin/sh result2014 -c webalizer\ \-c\ \/etc\/webmin\/webalizer\/home_result2014_logs_access_log\.conf\ \-o\ \\\/home\\\/result2014\\\/public_html\\\/stats\ \ \-p\ \\\/home\\\/result2014\\\/logs\\\/access_log 2>&1 2>/dev/null
root 48136 1464 00:00:00 00:17 113174 su -s /bin/sh result2014 -c webalizer -c /etc/webmin/webalizer/home_result2014_logs_access_log.conf -o \/home\/result2014\/public_html\/stats -p \/home\/result2014\/logs\/access_log
result2014 42736 1888 00:00:02 00:17 113175 webalizer -c /etc/webmin/webalizer/home_result2014_logs_access_log.conf -o /home/result2014/public_html/stats -p /home/result2014/logs/access_log
root 110772 2076 00:00:00 00:01 113327 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 113351 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 113352 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 113354 cat
root 110900 1172 00:00:00 00:01 113379 /bin/bash /usr/bin/check_mk_agent
root 13364 1020 00:00:00 00:01 113380 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 113381 tr -s 

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-30 00:16

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4e0d76d4b

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1732753955
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:01:03 563-03:24:55 1 /sbin/init
root 0 0 00:00:02 563-03:24:55 2 [kthreadd]
root 0 0 1-00:20:20 563-03:24:55 3 [migration/0]
root 0 0 01:10:15 563-03:24:55 4 [ksoftirqd/0]
root 0 0 00:00:00 563-03:24:55 5 [stopper/0]
root 0 0 00:19:14 563-03:24:55 6 [watchdog/0]
root 0 0 10:03:59 563-03:24:55 7 [migration/1]
root 0 0 00:00:00 563-03:24:55 8 [stopper/1]
root 0 0 01:46:54 563-03:24:55 9 [ksoftirqd/1]
root 0 0 00:23:58 563-03:24:55 10 [watchdog/1]
root 0 0 06:35:23 563-03:24:55 11 [migration/2]
root 0 0 00:00:00 563-03:24:55 12 [stopper/2]
root 0 0 00:54:56 563-03:24:55 13 [ksoftirqd/2]
root 0 0 00:21:16 563-03:24:55 14 [watchdog/2]
root 0 0 04:42:54 563-03:24:55 15 [migration/3]
root 0 0 00:00:00 563-03:24:55 16 [stopper/3]
root 0 0 00:40:45 563-03:24:55 17 [ksoftirqd/3]
root 0 0 00:17:04 563-03:24:55 18 [watchdog/3]
root 0 0 17:12:35 563-03:24:55 19 [migration/4]
root 0 0 00:00:00 563-03:24:55 20 [stopper/4]
root 0 0 00:59:59 563-03:24:55 21 [ksoftirqd/4]
root 0 0 00:09:48 563-03:24:55 22 [watchdog/4]
root 0 0 09:13:29 563-03:24:55 23 [migration/5]
root 0 0 00:00:00 563-03:24:55 24 [stopper/5]
root 0 0 00:41:37 563-03:24:55 25 [ksoftirqd/5]
root 0 0 00:20:03 563-03:24:55 26 [watchdog/5]
root 0 0 05:32:59 563-03:24:55 27 [migration/6]
root 0 0 00:00:00 563-03:24:55 28 [stopper/6]
root 0 0 00:32:26 563-03:24:55 29 [ksoftirqd/6]
root 0 0 00:15:29 563-03:24:55 30 [watchdog/6]
root 0 0 04:23:41 563-03:24:55 31 [migration/7]
root 0 0 00:00:00 563-03:24:55 32 [stopper/7]
root 0 0 00:32:06 563-03:24:55 33 [ksoftirqd/7]
root 0 0 00:12:41 563-03:24:55 34 [watchdog/7]
root 0 0 02:49:07 563-03:24:55 35 [events/0]
root 0 0 01:55:39 563-03:24:55 36 [events/1]
root 0 0 01:56:52 563-03:24:55 37 [events/2]
root 0 0 02:00:25 563-03:24:55 38 [events/3]
root 0 0 01:35:22 563-03:24:55 39 [events/4]
root 0 0 01:30:35 563-03:24:55 40 [events/5]
root 0 0 01:38:07 563-03:24:55 41 [events/6]
root 0 0 01:42:38 563-03:24:55 42 [events/7]
root 0 0 00:00:00 563-03:24:55 43 [events/0]
root 0 0 00:00:00 563-03:24:55 44 [events/1]
root 0 0 00:00:00 563-03:24:55 45 [events/2]
root 0 0 00:00:00 563-03:24:55 46 [events/3]
root 0 0 00:00:00 563-03:24:55 47 [events/4]
root 0 0 00:00:00 563-03:24:55 48 [events/5]
root 0 0 00:00:00 563-03:24:55 49 [events/6]
root 0 0 00:00:00 563-03:24:55 50 [events/7]
root 0 0 00:00:00 563-03:24:55 51 [events_long/0]
root 0 0 00:00:00 563-03:24:55 52 [events_long/1]
root 0 0 00:00:00 563-03:24:55 53 [events_long/2]
root 0 0 00:00:00 563-03:24:55 54 [events_long/3]
root 0 0 00:00:00 563-03:24:55 55 [events_long/4]
root 0 0 00:00:00 563-03:24:55 56 [events_long/5]
root 0 0 00:00:00 563-03:24:55 57 [events_long/6]
root 0 0 00:00:00 563-03:24:55 58 [events_long/7]
root 0 0 00:00:00 563-03:24:55 59 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 60 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 61 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 62 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 63 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 64 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 65 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 66 [events_power_ef]
root 0 0 00:00:00 563-03:24:55 67 [cgroup]
root 0 0 00:00:00 563-03:24:55 68 [khelper]
root 0 0 00:00:00 563-03:24:55 69 [netns]
root 0 0 00:00:00 563-03:24:55 70 [async/mgr]
root 0 0 00:00:00 563-03:24:55 71 [pm]
root 0 0 00:06:59 563-03:24:55 72 [sync_supers]
root 0 0 00:00:16 563-03:24:55 73 [bdi-default]
root 0 0 00:00:00 563-03:24:55 74 [kintegrityd/0]
root 0 0 00:00:00 563-03:24:55 75 [kintegrityd/1]
root 0 0 00:00:00 563-03:24:55 76 [kintegrityd/2]
root 0 0 00:00:00 563-03:24:55 77 [kintegrityd/3]
root 0 0 00:00:00 563-03:24:55 78 [kintegrityd/4]
root 0 0 00:00:00 563-03:24:55 79 [kintegrityd/5]
root 0 0 00:00:00 563-03:24:55 80 [kintegrityd/6]
root 0 0 00:00:00 563-03:24:55 81 [kintegrityd/7]
root 0 0 07:26:05 563-03:24:55 82 [kblockd/0]
root 0 0 00:12:49 563-03:24:55 83 [kblockd/1]
root 0 0 00:23:50 563-03:24:55 84 [kblockd/2]
root 0 0 00:04:53 563-03:24:55 85 [kblockd/3]
root 0 0 13:12:41 563-03:24:55 86 [kblockd/4]
root 0 0 00:15:18 563-03:24:55 87 [kblockd/5]
root 0 0 00:09:55 563-03:24:55 88 [kblockd/6]
root 0 0 00:07:37 563-03:24:55 89 [kblockd/7]
root 0 0 00:00:00 563-03:24:55 90 [kacpid]
root 0 0 00:00:00 563-03:24:55 91 [kacpi_notify]
root 0 0 00:00:00 563-03:24:55 92 [kacpi_hotplug]
root 0 0 00:00:00 563-03:24:55 93 [ata_aux]
root 0 0 00:00:00 563-03:24:55 94 [ata_sff/0]
root 0 0 00:00:00 563-03:24:55 95 [ata_sff/1]
root 0 0 00:00:00 563-03:24:55 96 [ata_sff/2]
root 0 0 00:00:00 563-03:24:55 97 [ata_sff/3]
root 0 0 00:00:00 563-03:24:55 98 [ata_sff/4]
root 0 0 00:00:00 563-03:24:55 99 [ata_sff/5]
root 0 0 00:00:00 563-03:24:55 100 [ata_sff/6]
root 0 0 00:00:00 563-03:24:55 101 [ata_sff/7]
root 0 0 00:00:00 563-03:24:55 102 [ksuspend_usbd]
root 0 0 00:00:00 563-03:24:55 103 [khubd]
root 0 0 00:00:00 563-03:24:55 104 [kseriod]
root 0 0 00:00:00 563-03:24:55 105 [md/0]
root 0 0 00:00:00 563-03:24:55 106 [md/1]
root 0 0 00:00:00 563-03:24:55 107 [md/2]
root 0 0 00:00:00 563-03:24:55 108 [md/3]
root 0 0 00:00:00 563-03:24:55 109 [md/4]
root 0 0 00:00:00 563-03:24:55 110 [md/5]
root 0 0 00:00:00 563-03:24:55 111 [md/6]
root 0 0 00:00:00 563-03:24:55 112 [md/7]
root 0 0 00:00:00 563-03:24:55 113 [md_misc/0]
root 0 0 00:00:00 563-03:24:55 114 [md_misc/1]
root 0 0 00:00:00 563-03:24:55 115 [md_misc/2]
root 0 0 00:00:00 563-03:24:55 116 [md_misc/3]
root 0 0 00:00:00 563-03:24:55 117 [md_misc/4]
root 0 0 00:00:00 563-03:24:55 118 [md_misc/5]
root 0 0 00:00:00 563-03:24:55 119 [md_misc/6]
root 0 0 00:00:00 563-03:24:55 120 [md_misc/7]
root 0 0 00:00:00 563-03:24:55 121 [linkwatch]
root 0 0 00:01:17 563-03:24:54 124 [khungtaskd]
root 0 0 1-04:34:18 563-03:24:54 125 [kswapd1]
root 0 0 00:00:00 563-03:24:54 126 [ksmd]
root 0 0 04:21:01 563-03:24:54 127 [khugepaged]
root 0 0 00:00:00 563-03:24:54 128 [aio/0]
root 0 0 00:00:00 563-03:24:54 129 [aio/1]
root 0 0 00:00:00 563-03:24:54 130 [aio/2]
root 0 0 00:00:00 563-03:24:54 131 [aio/3]
root 0 0 00:00:00 563-03:24:54 132 [aio/4]
root 0 0 00:00:00 563-03:24:54 133 [aio/5]
root 0 0 00:00:00 563-03:24:54 134 [aio/6]
root 0 0 00:00:00 563-03:24:54 135 [aio/7]
root 0 0 00:00:00 563-03:24:54 136 [crypto/0]
root 0 0 00:00:00 563-03:24:54 137 [crypto/1]
root 0 0 00:00:00 563-03:24:54 138 [crypto/2]
root 0 0 00:00:00 563-03:24:54 139 [crypto/3]
root 0 0 00:00:00 563-03:24:54 140 [crypto/4]
root 0 0 00:00:00 563-03:24:54 141 [crypto/5]
root 0 0 00:00:00 563-03:24:54 142 [crypto/6]
root 0 0 00:00:00 563-03:24:54 143 [crypto/7]
root 0 0 00:00:00 563-03:24:54 150 [kthrotld/0]
root 0 0 00:00:00 563-03:24:54 151 [kthrotld/1]
root 0 0 00:00:00 563-03:24:54 152 [kthrotld/2]
root 0 0 00:00:00 563-03:24:54 153 [kthrotld/3]
root 0 0 00:00:00 563-03:24:54 154 [kthrotld/4]
root 0 0 00:00:00 563-03:24:54 155 [kthrotld/5]
root 0 0 00:00:00 563-03:24:54 156 [kthrotld/6]
root 0 0 00:00:00 563-03:24:54 157 [kthrotld/7]
root 0 0 00:00:00 563-03:24:54 160 [kpsmoused]
root 0 0 00:00:00 563-03:24:54 161 [usbhid_resumer]
root 0 0 00:00:00 563-03:24:54 162 [deferwq]
root 0 0 00:00:00 563-03:24:54 194 [kdmremove]
root 0 0 00:00:00 563-03:24:54 195 [kstriped]
root 0 0 00:00:00 563-03:24:52 734 [scsi_eh_0]
root 0 0 00:00:00 563-03:24:52 735 [scsi_wq_0]
root 0 0 00:00:00 563-03:24:52 748 [scsi_eh_1]
root 0 0 00:00:00 563-03:24:52 749 [scsi_eh_2]
root 0 0 00:00:00 563-03:24:52 750 [scsi_eh_3]
root 0 0 00:00:00 563-03:24:52 751 [scsi_eh_4]
root 0 0 00:00:00 563-03:24:52 752 [scsi_eh_5]
root 0 0 00:00:00 563-03:24:52 753 [scsi_eh_6]
root 0 0 01:00:27 563-03:24:51 950 [md1_raid1]
root 0 0 00:03:43 563-03:24:50 1011 [jbd2/md1-8]
root 0 0 00:00:00 563-03:24:50 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 563-03:24:49 1105 /sbin/udevd -d
root 0 0 00:43:18 563-03:24:49 1225 [edac-poller]
root 0 0 00:11:23 563-03:24:48 1259 [md0_raid1]
root 0 0 03:20:11 563-03:24:48 1288 [md3_raid1]
root 0 0 2-21:14:38 563-03:24:48 1310 [md5_raid1]
root 0 0 01:13:06 563-03:24:48 1322 [md4_raid1]
root 0 0 00:35:11 563-03:24:48 1336 [md2_raid1]
root 0 0 00:20:05 563-03:24:46 1844 [flush-9:3]
root 0 0 00:00:00 563-03:24:46 1881 [jbd2/md0-8]
root 0 0 00:00:00 563-03:24:46 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 563-03:24:46 1885 [xfs_mru_cache]
root 0 0 01:40:43 563-03:24:46 1886 [xfslogd/0]
root 0 0 00:00:00 563-03:24:46 1887 [xfslogd/1]
root 0 0 00:03:32 563-03:24:46 1888 [xfslogd/2]
root 0 0 00:00:00 563-03:24:46 1889 [xfslogd/3]
root 0 0 03:13:55 563-03:24:46 1890 [xfslogd/4]
root 0 0 00:00:00 563-03:24:46 1891 [xfslogd/5]
root 0 0 00:00:00 563-03:24:46 1892 [xfslogd/6]
root 0 0 00:00:00 563-03:24:46 1893 [xfslogd/7]
root 0 0 03:06:11 563-03:24:46 1894 [xfsdatad/0]
root 0 0 00:00:00 563-03:24:46 1895 [xfsdatad/1]
root 0 0 00:02:18 563-03:24:46 1896 [xfsdatad/2]
root 0 0 00:00:00 563-03:24:46 1897 [xfsdatad/3]
root 0 0 03:28:50 563-03:24:46 1898 [xfsdatad/4]
root 0 0 00:00:00 563-03:24:46 1899 [xfsdatad/5]
root 0 0 00:00:00 563-03:24:46 1900 [xfsdatad/6]
root 0 0 00:00:00 563-03:24:46 1901 [xfsdatad/7]
root 0 0 00:00:00 563-03:24:46 1902 [xfsconvertd/0]
root 0 0 00:00:00 563-03:24:46 1903 [xfsconvertd/1]
root 0 0 00:00:00 563-03:24:46 1904 [xfsconvertd/2]
root 0 0 00:00:00 563-03:24:46 1905 [xfsconvertd/3]
root 0 0 00:00:00 563-03:24:46 1906 [xfsconvertd/4]
root 0 0 00:00:00 563-03:24:46 1907 [xfsconvertd/5]
root 0 0 00:00:00 563-03:24:46 1908 [xfsconvertd/6]
root 0 0 00:00:00 563-03:24:46 1909 [xfsconvertd/7]
root 0 0 00:00:02 563-03:24:46 1910 [xfsalloc/0]
root 0 0 00:00:02 563-03:24:46 1911 [xfsalloc/1]
root 0 0 00:00:03 563-03:24:46 1912 [xfsalloc/2]
root 0 0 00:00:04 563-03:24:46 1913 [xfsalloc/3]
root 0 0 00:00:02 563-03:24:46 1914 [xfsalloc/4]
root 0 0 00:00:03 563-03:24:46 1915 [xfsalloc/5]
root 0 0 00:00:03 563-03:24:46 1916 [xfsalloc/6]
root 0 0 00:00:05 563-03:24:46 1917 [xfsalloc/7]
root 0 0 00:00:11 563-03:24:46 1918 [xfseofblocks/0]
root 0 0 00:00:07 563-03:24:46 1919 [xfseofblocks/1]
root 0 0 00:00:09 563-03:24:46 1920 [xfseofblocks/2]
root 0 0 00:00:12 563-03:24:46 1921 [xfseofblocks/3]
root 0 0 00:00:09 563-03:24:46 1922 [xfseofblocks/4]
root 0 0 00:00:10 563-03:24:46 1923 [xfseofblocks/5]
root 0 0 00:00:04 563-03:24:46 1924 [xfseofblocks/6]
root 0 0 00:02:58 563-03:24:46 1925 [xfseofblocks/7]
root 0 0 00:35:51 563-03:24:46 1926 [xfsbufd/md5]
root 0 0 00:31:43 563-03:24:46 1927 [xfs-cil/md5]
root 0 0 00:59:57 563-03:24:46 1928 [xfssyncd/md5]
root 0 0 08:09:43 563-03:24:46 1929 [xfsaild/md5]
root 0 0 00:04:21 563-03:24:45 1930 [jbd2/md2-8]
root 0 0 00:00:00 563-03:24:45 1931 [ext4-dio-unwrit]
root 0 0 00:09:58 563-03:24:45 1932 [xfsbufd/md4]
root 0 0 00:00:54 563-03:24:45 1933 [xfs-cil/md4]
root 0 0 00:04:06 563-03:24:45 1934 [xfssyncd/md4]
root 0 0 07:44:45 563-03:24:45 1935 [xfsaild/md4]
root 0 0 00:31:57 563-03:24:45 1936 [xfsbufd/md3]
root 0 0 00:40:28 563-03:24:45 1937 [xfs-cil/md3]
root 0 0 00:05:25 563-03:24:45 1938 [xfssyncd/md3]
root 0 0 07:58:22 563-03:24:45 1939 [xfsaild/md3]
root 0 0 00:39:03 563-03:24:45 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 563-03:24:45 1941 [xfs-cil/sdc1]
root 0 0 12:23:08 563-03:24:45 1942 [xfssyncd/sdc1]
root 0 0 1-09:48:49 563-03:24:45 1943 [xfsaild/sdc1]
root 0 0 00:06:47 563-03:24:44 1999 [kauditd]
root 29764 704 00:16:32 563-03:24:27 2254 auditd
root 252156 31244 03:45:43 563-03:24:26 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 04:04:54 563-03:24:26 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:40 563-03:24:25 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 563-03:24:25 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:52:31 563-03:24:25 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:34 563-03:24:24 2492 /usr/sbin/sshd
root 71720 2020 00:34:20 563-03:24:19 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:34:10 563-03:24:19 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1996 00:34:04 563-03:24:19 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:32 563-03:24:19 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:26 563-03:24:19 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:09:13 563-03:24:08 3359 crond
root 107544 436 00:00:29 563-03:24:06 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 563-03:24:01 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 563-03:24:01 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 563-03:24:01 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 563-03:24:01 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 563-03:24:01 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 563-03:24:01 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 563-03:24:01 3491 /sbin/udevd -d
root 11232 260 00:00:00 563-03:24:01 3492 /sbin/udevd -d
root 163092 1172 00:00:44 548-00:49:14 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 804 00:00:00 20:35:27 23936 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 20:35:27 23938 dovecot/anvil
root 13108 1192 00:00:00 20:35:27 23941 dovecot/log
root 266628 74820 00:01:01 1-21:18:57 32365 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 118780 560 00:00:00 161-14:34:45 43438 SCREEN -O
root 108452 1384 00:00:00 161-14:34:45 43439 /bin/bash
root 108452 1384 00:00:00 161-14:33:42 43486 /bin/bash
root 109064 688 00:00:00 34-00:51:26 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12788 00:00:06 34-00:51:25 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 60892 00:00:18 46-00:48:31 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:03:13 563-01:02:25 57735 [flush-9:2]
root 0 0 00:02:40 563-00:27:29 68416 [flush-9:1]
root 63348 3896 00:25:35 461-06:37:49 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 461-06:17:15 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4866828 1629132 1039-14:21:44 461-06:17:14 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 21712 764 00:00:26 161-00:46:32 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:08:41 89-15:09:34 181185 [flush-9:5]
root 0 0 00:01:28 26-00:10:07 181517 [flush-8:32]
root 568776 36508 00:36:03 89-15:01:01 182912 /usr/sbin/httpd -DSSL
root 269040 76832 00:00:22 02:51:43 190388 spamd child
apache 588224 83816 00:00:18 17:45 213530 /usr/sbin/httpd -DSSL
apache 662136 163308 00:00:21 17:45 213531 /usr/sbin/httpd -DSSL
apache 606316 99872 00:00:25 17:27 213774 /usr/sbin/httpd -DSSL
apache 625072 110340 00:00:19 16:10 213934 /usr/sbin/httpd -DSSL
apache 589888 85940 00:00:16 15:14 213999 /usr/sbin/httpd -DSSL
apache 597276 90192 00:00:19 15:07 214034 /usr/sbin/httpd -DSSL
apache 613356 92724 00:00:11 13:48 214358 /usr/sbin/httpd -DSSL
apache 594172 96680 00:00:17 13:47 214360 /usr/sbin/httpd -DSSL
apache 591624 71064 00:00:11 13:35 214374 /usr/sbin/httpd -DSSL
root 40060 2036 00:00:00 13:18 214385 dovecot/ssl-params
apache 643820 146236 00:00:18 09:45 215788 /usr/sbin/httpd -DSSL
root 96124 3580 00:00:00 09:36 215790 sendmail: ./4AOFCqmR185792 in.mx1.mailhostbox.com.: user open
root 96124 3648 00:00:00 08:36 215797 sendmail: ./4AOB444L145197 mx1.mail.frugalware.org.: user open
root 97156 5980 00:00:00 07:36 215952 sendmail: ./4ANHtTY3215237 placer.ca.: user open
root 97156 5980 00:00:00 06:36 216156 sendmail: ./4AO2JRCF052433 smtpin2.three.com.au.: user open
apache 603516 97008 00:00:07 06:22 216167 /usr/sbin/httpd -DSSL
apache 610352 103348 00:00:10 06:18 216170 /usr/sbin/httpd -DSSL
apache 588744 76616 00:00:06 06:12 216176 /usr/sbin/httpd -DSSL
apache 591524 69472 00:00:05 06:11 216179 /usr/sbin/httpd -DSSL
apache 644660 116392 00:00:10 05:48 216195 /usr/sbin/httpd -DSSL
apache 592244 84584 00:00:08 05:47 216196 /usr/sbin/httpd -DSSL
root 96124 3648 00:00:00 05:36 216202 sendmail: ./4AO73cHG101755 mail.internetpro.net.: user open
root 96628 5216 00:00:00 04:36 216513 sendmail: ./4AO2IQ0C052396 smtpin2.three.com.au.: user open
root 96628 5168 00:00:00 03:36 216534 sendmail: ./4AOB7Inh145932 sbchm1.chem.sunysb.edu.: user open
root 96628 5164 00:00:00 02:36 216537 sendmail: ./4AOFU5ZA188913 in.mx3.mailhostbox.com.: user open
root 0 0 00:00:00 02:30 216847 [flush-9:4]
apache 593768 44944 00:00:03 02:21 216848 /usr/sbin/httpd -DSSL
apache 619692 88992 00:00:02 02:05 216849 /usr/sbin/httpd -DSSL
apache 602168 85560 00:00:04 02:04 216854 /usr/sbin/httpd -DSSL
apache 572860 33440 00:00:01 02:00 216995 /usr/sbin/httpd -DSSL
apache 585728 38332 00:00:01 01:43 216999 /usr/sbin/httpd -DSSL
apache 593004 45092 00:00:00 01:43 217000 /usr/sbin/httpd -DSSL
apache 611412 60748 00:00:03 01:42 217001 /usr/sbin/httpd -DSSL
apache 576816 55524 00:00:02 01:42 217002 /usr/sbin/httpd -DSSL
apache 586252 36940 00:00:00 01:42 217003 /usr/sbin/httpd -DSSL
apache 596828 61572 00:00:03 01:42 217004 /usr/sbin/httpd -DSSL
root 96628 5164 00:00:00 01:36 217006 sendmail: ./4AOFV04i188977 in.mx3.mailhostbox.com.: user open
root 96488 5076 00:00:00 00:36 217014 sendmail: ./4AOFUOAi188960 in.mx3.mailhostbox.com.: user open
root 15348 3364 00:00:00 00:28 217016 dovecot/config
dovecot 76712 2940 00:00:00 00:28 217017 dovecot/auth
root 110772 2076 00:00:00 00:01 217230 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 217252 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 217253 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 217259 cat
root 110900 1176 00:00:00 00:01 217280 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 217281 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 217282 tr -s 
root 154784 45352 00:00:41 457-00:49:20 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 268904 76612 00:00:06 1-00:13:00 233303 spamd child
smmsp 78752 788 00:10:15 499-15:31:30 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:07:35 499-15:31:30 238030 sendmail: accepting connections
named 739840 58768 04:05:00 499-15:31:15 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-28 00:32

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4c295b04a

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1732580086
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:01:02 561-03:07:06 1 /sbin/init
root 0 0 00:00:02 561-03:07:06 2 [kthreadd]
root 0 0 1-00:18:08 561-03:07:06 3 [migration/0]
root 0 0 01:09:56 561-03:07:06 4 [ksoftirqd/0]
root 0 0 00:00:00 561-03:07:06 5 [stopper/0]
root 0 0 00:19:00 561-03:07:06 6 [watchdog/0]
root 0 0 10:03:36 561-03:07:06 7 [migration/1]
root 0 0 00:00:00 561-03:07:06 8 [stopper/1]
root 0 0 01:46:28 561-03:07:06 9 [ksoftirqd/1]
root 0 0 00:23:41 561-03:07:06 10 [watchdog/1]
root 0 0 06:35:09 561-03:07:06 11 [migration/2]
root 0 0 00:00:00 561-03:07:06 12 [stopper/2]
root 0 0 00:54:40 561-03:07:06 13 [ksoftirqd/2]
root 0 0 00:21:04 561-03:07:06 14 [watchdog/2]
root 0 0 04:42:42 561-03:07:06 15 [migration/3]
root 0 0 00:00:00 561-03:07:06 16 [stopper/3]
root 0 0 00:40:27 561-03:07:06 17 [ksoftirqd/3]
root 0 0 00:16:50 561-03:07:06 18 [watchdog/3]
root 0 0 17:11:03 561-03:07:06 19 [migration/4]
root 0 0 00:00:00 561-03:07:06 20 [stopper/4]
root 0 0 00:59:45 561-03:07:06 21 [ksoftirqd/4]
root 0 0 00:09:42 561-03:07:06 22 [watchdog/4]
root 0 0 09:13:12 561-03:07:06 23 [migration/5]
root 0 0 00:00:00 561-03:07:06 24 [stopper/5]
root 0 0 00:41:27 561-03:07:06 25 [ksoftirqd/5]
root 0 0 00:19:57 561-03:07:06 26 [watchdog/5]
root 0 0 05:32:49 561-03:07:06 27 [migration/6]
root 0 0 00:00:00 561-03:07:06 28 [stopper/6]
root 0 0 00:32:16 561-03:07:06 29 [ksoftirqd/6]
root 0 0 00:15:23 561-03:07:06 30 [watchdog/6]
root 0 0 04:23:34 561-03:07:06 31 [migration/7]
root 0 0 00:00:00 561-03:07:06 32 [stopper/7]
root 0 0 00:31:56 561-03:07:06 33 [ksoftirqd/7]
root 0 0 00:12:35 561-03:07:06 34 [watchdog/7]
root 0 0 02:47:19 561-03:07:06 35 [events/0]
root 0 0 01:53:17 561-03:07:06 36 [events/1]
root 0 0 01:55:00 561-03:07:06 37 [events/2]
root 0 0 01:58:28 561-03:07:06 38 [events/3]
root 0 0 01:34:28 561-03:07:06 39 [events/4]
root 0 0 01:29:41 561-03:07:06 40 [events/5]
root 0 0 01:37:14 561-03:07:06 41 [events/6]
root 0 0 01:41:42 561-03:07:06 42 [events/7]
root 0 0 00:00:00 561-03:07:06 43 [events/0]
root 0 0 00:00:00 561-03:07:06 44 [events/1]
root 0 0 00:00:00 561-03:07:06 45 [events/2]
root 0 0 00:00:00 561-03:07:06 46 [events/3]
root 0 0 00:00:00 561-03:07:06 47 [events/4]
root 0 0 00:00:00 561-03:07:06 48 [events/5]
root 0 0 00:00:00 561-03:07:06 49 [events/6]
root 0 0 00:00:00 561-03:07:06 50 [events/7]
root 0 0 00:00:00 561-03:07:06 51 [events_long/0]
root 0 0 00:00:00 561-03:07:06 52 [events_long/1]
root 0 0 00:00:00 561-03:07:06 53 [events_long/2]
root 0 0 00:00:00 561-03:07:06 54 [events_long/3]
root 0 0 00:00:00 561-03:07:06 55 [events_long/4]
root 0 0 00:00:00 561-03:07:06 56 [events_long/5]
root 0 0 00:00:00 561-03:07:06 57 [events_long/6]
root 0 0 00:00:00 561-03:07:06 58 [events_long/7]
root 0 0 00:00:00 561-03:07:06 59 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 60 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 61 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 62 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 63 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 64 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 65 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 66 [events_power_ef]
root 0 0 00:00:00 561-03:07:06 67 [cgroup]
root 0 0 00:00:00 561-03:07:06 68 [khelper]
root 0 0 00:00:00 561-03:07:06 69 [netns]
root 0 0 00:00:00 561-03:07:06 70 [async/mgr]
root 0 0 00:00:00 561-03:07:06 71 [pm]
root 0 0 00:06:46 561-03:07:06 72 [sync_supers]
root 0 0 00:00:16 561-03:07:06 73 [bdi-default]
root 0 0 00:00:00 561-03:07:06 74 [kintegrityd/0]
root 0 0 00:00:00 561-03:07:06 75 [kintegrityd/1]
root 0 0 00:00:00 561-03:07:06 76 [kintegrityd/2]
root 0 0 00:00:00 561-03:07:06 77 [kintegrityd/3]
root 0 0 00:00:00 561-03:07:06 78 [kintegrityd/4]
root 0 0 00:00:00 561-03:07:06 79 [kintegrityd/5]
root 0 0 00:00:00 561-03:07:06 80 [kintegrityd/6]
root 0 0 00:00:00 561-03:07:06 81 [kintegrityd/7]
root 0 0 07:21:36 561-03:07:06 82 [kblockd/0]
root 0 0 00:12:48 561-03:07:06 83 [kblockd/1]
root 0 0 00:23:50 561-03:07:06 84 [kblockd/2]
root 0 0 00:04:53 561-03:07:06 85 [kblockd/3]
root 0 0 13:06:59 561-03:07:06 86 [kblockd/4]
root 0 0 00:15:18 561-03:07:06 87 [kblockd/5]
root 0 0 00:09:55 561-03:07:06 88 [kblockd/6]
root 0 0 00:07:37 561-03:07:06 89 [kblockd/7]
root 0 0 00:00:00 561-03:07:06 90 [kacpid]
root 0 0 00:00:00 561-03:07:06 91 [kacpi_notify]
root 0 0 00:00:00 561-03:07:06 92 [kacpi_hotplug]
root 0 0 00:00:00 561-03:07:06 93 [ata_aux]
root 0 0 00:00:00 561-03:07:06 94 [ata_sff/0]
root 0 0 00:00:00 561-03:07:06 95 [ata_sff/1]
root 0 0 00:00:00 561-03:07:06 96 [ata_sff/2]
root 0 0 00:00:00 561-03:07:06 97 [ata_sff/3]
root 0 0 00:00:00 561-03:07:06 98 [ata_sff/4]
root 0 0 00:00:00 561-03:07:06 99 [ata_sff/5]
root 0 0 00:00:00 561-03:07:06 100 [ata_sff/6]
root 0 0 00:00:00 561-03:07:06 101 [ata_sff/7]
root 0 0 00:00:00 561-03:07:06 102 [ksuspend_usbd]
root 0 0 00:00:00 561-03:07:06 103 [khubd]
root 0 0 00:00:00 561-03:07:06 104 [kseriod]
root 0 0 00:00:00 561-03:07:06 105 [md/0]
root 0 0 00:00:00 561-03:07:06 106 [md/1]
root 0 0 00:00:00 561-03:07:06 107 [md/2]
root 0 0 00:00:00 561-03:07:06 108 [md/3]
root 0 0 00:00:00 561-03:07:06 109 [md/4]
root 0 0 00:00:00 561-03:07:06 110 [md/5]
root 0 0 00:00:00 561-03:07:06 111 [md/6]
root 0 0 00:00:00 561-03:07:06 112 [md/7]
root 0 0 00:00:00 561-03:07:06 113 [md_misc/0]
root 0 0 00:00:00 561-03:07:06 114 [md_misc/1]
root 0 0 00:00:00 561-03:07:06 115 [md_misc/2]
root 0 0 00:00:00 561-03:07:06 116 [md_misc/3]
root 0 0 00:00:00 561-03:07:06 117 [md_misc/4]
root 0 0 00:00:00 561-03:07:06 118 [md_misc/5]
root 0 0 00:00:00 561-03:07:06 119 [md_misc/6]
root 0 0 00:00:00 561-03:07:06 120 [md_misc/7]
root 0 0 00:00:00 561-03:07:06 121 [linkwatch]
root 0 0 00:01:16 561-03:07:05 124 [khungtaskd]
root 0 0 1-04:30:58 561-03:07:05 125 [kswapd1]
root 0 0 00:00:00 561-03:07:05 126 [ksmd]
root 0 0 04:17:29 561-03:07:05 127 [khugepaged]
root 0 0 00:00:00 561-03:07:05 128 [aio/0]
root 0 0 00:00:00 561-03:07:05 129 [aio/1]
root 0 0 00:00:00 561-03:07:05 130 [aio/2]
root 0 0 00:00:00 561-03:07:05 131 [aio/3]
root 0 0 00:00:00 561-03:07:05 132 [aio/4]
root 0 0 00:00:00 561-03:07:05 133 [aio/5]
root 0 0 00:00:00 561-03:07:05 134 [aio/6]
root 0 0 00:00:00 561-03:07:05 135 [aio/7]
root 0 0 00:00:00 561-03:07:05 136 [crypto/0]
root 0 0 00:00:00 561-03:07:05 137 [crypto/1]
root 0 0 00:00:00 561-03:07:05 138 [crypto/2]
root 0 0 00:00:00 561-03:07:05 139 [crypto/3]
root 0 0 00:00:00 561-03:07:05 140 [crypto/4]
root 0 0 00:00:00 561-03:07:05 141 [crypto/5]
root 0 0 00:00:00 561-03:07:05 142 [crypto/6]
root 0 0 00:00:00 561-03:07:05 143 [crypto/7]
root 0 0 00:00:00 561-03:07:05 150 [kthrotld/0]
root 0 0 00:00:00 561-03:07:05 151 [kthrotld/1]
root 0 0 00:00:00 561-03:07:05 152 [kthrotld/2]
root 0 0 00:00:00 561-03:07:05 153 [kthrotld/3]
root 0 0 00:00:00 561-03:07:05 154 [kthrotld/4]
root 0 0 00:00:00 561-03:07:05 155 [kthrotld/5]
root 0 0 00:00:00 561-03:07:05 156 [kthrotld/6]
root 0 0 00:00:00 561-03:07:05 157 [kthrotld/7]
root 0 0 00:00:00 561-03:07:05 160 [kpsmoused]
root 0 0 00:00:00 561-03:07:05 161 [usbhid_resumer]
root 0 0 00:00:00 561-03:07:05 162 [deferwq]
root 0 0 00:00:00 561-03:07:05 194 [kdmremove]
root 0 0 00:00:00 561-03:07:05 195 [kstriped]
apache 614252 119004 00:00:44 23:05 317 /usr/sbin/httpd -DSSL
apache 611784 115820 00:00:37 23:04 320 /usr/sbin/httpd -DSSL
apache 638508 143696 00:00:46 22:13 463 /usr/sbin/httpd -DSSL
apache 592224 101748 00:00:39 22:13 464 /usr/sbin/httpd -DSSL
apache 594968 101196 00:00:35 22:13 465 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 561-03:07:03 734 [scsi_eh_0]
root 0 0 00:00:00 561-03:07:03 735 [scsi_wq_0]
root 0 0 00:00:00 561-03:07:03 748 [scsi_eh_1]
root 0 0 00:00:00 561-03:07:03 749 [scsi_eh_2]
root 0 0 00:00:00 561-03:07:03 750 [scsi_eh_3]
root 0 0 00:00:00 561-03:07:03 751 [scsi_eh_4]
root 0 0 00:00:00 561-03:07:03 752 [scsi_eh_5]
root 0 0 00:00:00 561-03:07:03 753 [scsi_eh_6]
root 0 0 01:00:19 561-03:07:02 950 [md1_raid1]
root 0 0 00:03:41 561-03:07:01 1011 [jbd2/md1-8]
root 0 0 00:00:00 561-03:07:01 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 561-03:07:00 1105 /sbin/udevd -d
root 96124 3620 00:00:00 14:57 1220 sendmail: ./4ANFpZFt196182 mx.sh.cnuninet.net.: user open
root 0 0 00:42:10 561-03:07:00 1225 [edac-poller]
root 0 0 00:11:23 561-03:06:59 1259 [md0_raid1]
root 0 0 03:19:04 561-03:06:59 1288 [md3_raid1]
root 0 0 2-21:03:31 561-03:06:59 1310 [md5_raid1]
root 0 0 01:12:53 561-03:06:59 1322 [md4_raid1]
root 0 0 00:34:53 561-03:06:59 1336 [md2_raid1]
root 96608 5516 00:00:00 12:57 1773 sendmail: ./4AL7V6XV156128 go.ststephens.wa.edu.au.: user open
root 0 0 00:19:55 561-03:06:57 1844 [flush-9:3]
root 0 0 00:00:00 561-03:06:57 1881 [jbd2/md0-8]
root 0 0 00:00:00 561-03:06:57 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 561-03:06:57 1885 [xfs_mru_cache]
root 0 0 01:40:39 561-03:06:57 1886 [xfslogd/0]
root 0 0 00:00:00 561-03:06:57 1887 [xfslogd/1]
root 0 0 00:03:32 561-03:06:57 1888 [xfslogd/2]
root 0 0 00:00:00 561-03:06:57 1889 [xfslogd/3]
root 0 0 03:13:27 561-03:06:57 1890 [xfslogd/4]
root 0 0 00:00:00 561-03:06:57 1891 [xfslogd/5]
root 0 0 00:00:00 561-03:06:57 1892 [xfslogd/6]
root 0 0 00:00:00 561-03:06:57 1893 [xfslogd/7]
root 0 0 03:06:09 561-03:06:57 1894 [xfsdatad/0]
root 0 0 00:00:00 561-03:06:57 1895 [xfsdatad/1]
root 0 0 00:02:18 561-03:06:57 1896 [xfsdatad/2]
root 0 0 00:00:00 561-03:06:57 1897 [xfsdatad/3]
root 0 0 03:28:42 561-03:06:57 1898 [xfsdatad/4]
root 0 0 00:00:00 561-03:06:57 1899 [xfsdatad/5]
root 0 0 00:00:00 561-03:06:57 1900 [xfsdatad/6]
root 0 0 00:00:00 561-03:06:57 1901 [xfsdatad/7]
root 0 0 00:00:00 561-03:06:57 1902 [xfsconvertd/0]
root 0 0 00:00:00 561-03:06:57 1903 [xfsconvertd/1]
root 0 0 00:00:00 561-03:06:57 1904 [xfsconvertd/2]
root 0 0 00:00:00 561-03:06:57 1905 [xfsconvertd/3]
root 0 0 00:00:00 561-03:06:57 1906 [xfsconvertd/4]
root 0 0 00:00:00 561-03:06:57 1907 [xfsconvertd/5]
root 0 0 00:00:00 561-03:06:57 1908 [xfsconvertd/6]
root 0 0 00:00:00 561-03:06:57 1909 [xfsconvertd/7]
root 0 0 00:00:02 561-03:06:57 1910 [xfsalloc/0]
root 0 0 00:00:02 561-03:06:57 1911 [xfsalloc/1]
root 0 0 00:00:03 561-03:06:57 1912 [xfsalloc/2]
root 0 0 00:00:04 561-03:06:57 1913 [xfsalloc/3]
root 0 0 00:00:02 561-03:06:57 1914 [xfsalloc/4]
root 0 0 00:00:03 561-03:06:57 1915 [xfsalloc/5]
root 0 0 00:00:03 561-03:06:57 1916 [xfsalloc/6]
root 0 0 00:00:05 561-03:06:57 1917 [xfsalloc/7]
root 0 0 00:00:11 561-03:06:57 1918 [xfseofblocks/0]
root 0 0 00:00:07 561-03:06:57 1919 [xfseofblocks/1]
root 0 0 00:00:09 561-03:06:57 1920 [xfseofblocks/2]
root 0 0 00:00:12 561-03:06:57 1921 [xfseofblocks/3]
root 0 0 00:00:09 561-03:06:57 1922 [xfseofblocks/4]
root 0 0 00:00:10 561-03:06:57 1923 [xfseofblocks/5]
root 0 0 00:00:04 561-03:06:57 1924 [xfseofblocks/6]
root 0 0 00:02:57 561-03:06:57 1925 [xfseofblocks/7]
root 0 0 00:35:15 561-03:06:57 1926 [xfsbufd/md5]
root 0 0 00:31:23 561-03:06:57 1927 [xfs-cil/md5]
root 0 0 00:59:48 561-03:06:57 1928 [xfssyncd/md5]
root 0 0 07:58:35 561-03:06:57 1929 [xfsaild/md5]
root 0 0 00:04:14 561-03:06:56 1930 [jbd2/md2-8]
root 0 0 00:00:00 561-03:06:56 1931 [ext4-dio-unwrit]
root 0 0 00:09:45 561-03:06:56 1932 [xfsbufd/md4]
root 0 0 00:00:53 561-03:06:56 1933 [xfs-cil/md4]
root 0 0 00:04:04 561-03:06:56 1934 [xfssyncd/md4]
root 0 0 07:34:24 561-03:06:56 1935 [xfsaild/md4]
root 0 0 00:31:21 561-03:06:56 1936 [xfsbufd/md3]
root 0 0 00:40:14 561-03:06:56 1937 [xfs-cil/md3]
root 0 0 00:05:23 561-03:06:56 1938 [xfssyncd/md3]
root 0 0 07:47:36 561-03:06:56 1939 [xfsaild/md3]
root 0 0 00:39:03 561-03:06:56 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 561-03:06:56 1941 [xfs-cil/sdc1]
root 0 0 12:23:03 561-03:06:56 1942 [xfssyncd/sdc1]
root 0 0 1-09:37:17 561-03:06:56 1943 [xfsaild/sdc1]
root 0 0 00:06:46 561-03:06:55 1999 [kauditd]
root 96608 5516 00:00:00 11:57 2018 sendmail: ./4AMLXtWh021517 mail.li.ca.: user open
apache 591276 87020 00:00:14 11:54 2019 /usr/sbin/httpd -DSSL
apache 591236 86328 00:00:15 11:30 2179 /usr/sbin/httpd -DSSL
apache 590516 86892 00:00:22 11:29 2181 /usr/sbin/httpd -DSSL
apache 593336 102856 00:00:14 11:19 2182 /usr/sbin/httpd -DSSL
root 96124 3580 00:00:00 10:57 2184 sendmail: ./4AOFCqmR185792 in.mx2.mailhostbox.com.: user open
apache 601720 96484 00:00:12 10:18 2191 /usr/sbin/httpd -DSSL
root 29764 704 00:16:29 561-03:06:38 2254 auditd
root 252156 31244 03:44:36 561-03:06:37 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 04:04:02 561-03:06:37 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:40 561-03:06:36 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 96124 3584 00:00:00 09:57 2341 sendmail: ./4AOB9Okv146267 mail.crazymail.net.: user open
root 96124 3648 00:00:00 08:57 2406 sendmail: ./4AN4mY5Y092390 argo.ca.: user open
root 6776 224 00:00:00 561-03:06:36 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:51:33 561-03:06:36 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:34 561-03:06:35 2492 /usr/sbin/sshd
root 96124 3636 00:00:00 07:57 2583 sendmail: ./4ANMu4tf017508 mail.internetpro.net.: user open
apache 591912 94816 00:00:11 07:38 2733 /usr/sbin/httpd -DSSL
root 96124 3600 00:00:00 06:57 2735 sendmail: ./4AO2IQ0C052396 smtpin2.three.com.au.: user open
root 96124 3600 00:00:00 05:57 2742 sendmail: ./4AOAJx5o136554 14.241.253.27.: user open
apache 588060 72920 00:00:08 05:08 2900 /usr/sbin/httpd -DSSL
root 96124 3572 00:00:00 04:57 2902 sendmail: ./4AOFV04i188977 in.mx2.mailhostbox.com.: user open
root 71720 2020 00:34:19 561-03:06:30 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:34:09 561-03:06:30 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1996 00:34:03 561-03:06:30 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:30 561-03:06:30 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:25 561-03:06:30 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 0 0 00:00:00 04:41 3151 [flush-9:4]
apache 589004 82688 00:00:07 04:22 3153 /usr/sbin/httpd -DSSL
root 96124 3572 00:00:00 03:57 3155 sendmail: ./4AOBEIEV147158 mail.dgs.ca.: user open
root 96124 3392 00:00:00 02:57 3163 sendmail: ./4AOFU5ZA188913 in.mx3.mailhostbox.com.: user open
root 117044 860 00:09:11 561-03:06:19 3359 crond
root 107544 436 00:00:29 561-03:06:17 3407 pure-ftpd (SERVER) 
root 96124 3396 00:00:00 01:57 3467 sendmail: ./4AOFUOAi188960 in.mx3.mailhostbox.com.: user open
root 96124 3372 00:00:00 00:57 3469 sendmail: ./4AOAsDSg142956 edsmxa.mail.eds.net.: user open
apache 569032 25324 00:00:00 00:04 3472 /usr/sbin/httpd -DSSL
root 4060 472 00:00:00 561-03:06:12 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 561-03:06:12 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 561-03:06:12 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 561-03:06:12 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 561-03:06:12 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 561-03:06:12 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 561-03:06:12 3491 /sbin/udevd -d
root 11232 260 00:00:00 561-03:06:12 3492 /sbin/udevd -d
root 110772 2076 00:00:00 00:01 3568 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 3594 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 3595 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 3596 cat
root 110900 1176 00:00:00 00:01 3622 /bin/bash /usr/bin/check_mk_agent
root 13364 1012 00:00:00 00:01 3623 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 3624 tr -s 
root 163092 1172 00:00:44 546-00:31:25 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 800 00:00:00 21:56:09 42595 /usr/sbin/dovecot
dovecot 12980 1056 00:00:00 21:56:09 42597 dovecot/anvil
root 13108 1196 00:00:00 21:56:09 42598 dovecot/log
root 118780 560 00:00:00 159-14:16:56 43438 SCREEN -O
root 108452 1384 00:00:00 159-14:16:56 43439 /bin/bash
root 108452 1384 00:00:00 159-14:15:53 43486 /bin/bash
root 109064 844 00:00:00 32-00:33:37 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:05 32-00:33:36 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 266744 74872 00:00:33 20:58:50 52130 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 171940 61044 00:00:18 44-00:30:42 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:03:05 561-00:44:36 57735 [flush-9:2]
root 0 0 00:02:36 561-00:09:40 68416 [flush-9:1]
root 63348 3900 00:25:24 459-06:20:00 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 459-05:59:26 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4862668 1601208 1027-22:35:47 459-05:59:25 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 268996 76844 00:00:14 15:05:16 108102 spamd child
root 21712 764 00:00:26 159-00:28:43 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 266744 72352 00:00:00 07:20:23 180767 spamd child
root 0 0 00:08:25 87-14:51:45 181185 [flush-9:5]
root 0 0 00:01:13 23-23:52:18 181517 [flush-8:32]
root 568776 36508 00:33:53 87-14:43:12 182912 /usr/sbin/httpd -DSSL
root 154784 45352 00:00:41 455-00:31:31 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:10:12 497-15:13:41 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:07:09 497-15:13:41 238030 sendmail: rejecting connections on daemon MTA: 15 children, max 15
named 739840 58764 04:03:03 497-15:13:26 238586 /usr/sbin/named -u named -4
apache 614272 123460 00:00:36 29:15 244892 /usr/sbin/httpd -DSSL
apache 621588 125916 00:00:51 29:14 244898 /usr/sbin/httpd -DSSL
apache 591696 98300 00:00:50 26:54 245100 /usr/sbin/httpd -DSSL
apache 615436 121536 00:00:44 26:54 245102 /usr/sbin/httpd -DSSL
apache 591380 103364 00:00:39 24:30 245592 /usr/sbin/httpd -DSSL
apache 591620 99504 00:00:34 24:03 245601 /usr/sbin/httpd -DSSL
apache 592524 99732 00:00:46 24:00 245608 /usr/sbin/httpd -DSSL
apache 591436 89404 00:00:41 24:00 245610 /usr/sbin/httpd -DSSL
apache 591788 90756 00:00:34 24:00 245612 /usr/sbin/httpd -DSSL

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-26 00:14

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e49cf918bd

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1732231372
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:01:01 557-02:15:12 1 /sbin/init
root 0 0 00:00:02 557-02:15:12 2 [kthreadd]
root 0 0 1-00:14:03 557-02:15:12 3 [migration/0]
root 0 0 01:09:17 557-02:15:12 4 [ksoftirqd/0]
root 0 0 00:00:00 557-02:15:12 5 [stopper/0]
root 0 0 00:18:29 557-02:15:12 6 [watchdog/0]
root 0 0 10:02:51 557-02:15:12 7 [migration/1]
root 0 0 00:00:00 557-02:15:12 8 [stopper/1]
root 0 0 01:45:39 557-02:15:12 9 [ksoftirqd/1]
root 0 0 00:23:04 557-02:15:12 10 [watchdog/1]
root 0 0 06:34:41 557-02:15:12 11 [migration/2]
root 0 0 00:00:00 557-02:15:12 12 [stopper/2]
root 0 0 00:54:06 557-02:15:12 13 [ksoftirqd/2]
root 0 0 00:20:36 557-02:15:12 14 [watchdog/2]
root 0 0 04:42:19 557-02:15:12 15 [migration/3]
root 0 0 00:00:00 557-02:15:12 16 [stopper/3]
root 0 0 00:39:54 557-02:15:12 17 [ksoftirqd/3]
root 0 0 00:16:21 557-02:15:12 18 [watchdog/3]
root 0 0 17:08:15 557-02:15:12 19 [migration/4]
root 0 0 00:00:00 557-02:15:12 20 [stopper/4]
root 0 0 00:59:17 557-02:15:12 21 [ksoftirqd/4]
root 0 0 00:09:29 557-02:15:12 22 [watchdog/4]
root 0 0 09:12:39 557-02:15:12 23 [migration/5]
root 0 0 00:00:00 557-02:15:12 24 [stopper/5]
root 0 0 00:41:08 557-02:15:12 25 [ksoftirqd/5]
root 0 0 00:19:44 557-02:15:12 26 [watchdog/5]
root 0 0 05:32:32 557-02:15:12 27 [migration/6]
root 0 0 00:00:00 557-02:15:12 28 [stopper/6]
root 0 0 00:31:56 557-02:15:12 29 [ksoftirqd/6]
root 0 0 00:15:10 557-02:15:12 30 [watchdog/6]
root 0 0 04:23:19 557-02:15:12 31 [migration/7]
root 0 0 00:00:00 557-02:15:12 32 [stopper/7]
root 0 0 00:31:37 557-02:15:12 33 [ksoftirqd/7]
root 0 0 00:12:22 557-02:15:12 34 [watchdog/7]
root 0 0 02:43:27 557-02:15:12 35 [events/0]
root 0 0 01:48:04 557-02:15:12 36 [events/1]
root 0 0 01:50:46 557-02:15:12 37 [events/2]
root 0 0 01:54:13 557-02:15:12 38 [events/3]
root 0 0 01:32:37 557-02:15:12 39 [events/4]
root 0 0 01:27:50 557-02:15:12 40 [events/5]
root 0 0 01:35:22 557-02:15:12 41 [events/6]
root 0 0 01:39:48 557-02:15:12 42 [events/7]
root 0 0 00:00:00 557-02:15:12 43 [events/0]
root 0 0 00:00:00 557-02:15:12 44 [events/1]
root 0 0 00:00:00 557-02:15:12 45 [events/2]
root 0 0 00:00:00 557-02:15:12 46 [events/3]
root 0 0 00:00:00 557-02:15:12 47 [events/4]
root 0 0 00:00:00 557-02:15:12 48 [events/5]
root 0 0 00:00:00 557-02:15:12 49 [events/6]
root 0 0 00:00:00 557-02:15:12 50 [events/7]
root 0 0 00:00:00 557-02:15:12 51 [events_long/0]
root 0 0 00:00:00 557-02:15:12 52 [events_long/1]
root 0 0 00:00:00 557-02:15:12 53 [events_long/2]
root 0 0 00:00:00 557-02:15:12 54 [events_long/3]
root 0 0 00:00:00 557-02:15:12 55 [events_long/4]
root 0 0 00:00:00 557-02:15:12 56 [events_long/5]
root 0 0 00:00:00 557-02:15:12 57 [events_long/6]
root 0 0 00:00:00 557-02:15:12 58 [events_long/7]
root 0 0 00:00:00 557-02:15:12 59 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 60 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 61 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 62 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 63 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 64 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 65 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 66 [events_power_ef]
root 0 0 00:00:00 557-02:15:12 67 [cgroup]
root 0 0 00:00:00 557-02:15:12 68 [khelper]
root 0 0 00:00:00 557-02:15:12 69 [netns]
root 0 0 00:00:00 557-02:15:12 70 [async/mgr]
root 0 0 00:00:00 557-02:15:12 71 [pm]
root 0 0 00:06:17 557-02:15:12 72 [sync_supers]
root 0 0 00:00:16 557-02:15:12 73 [bdi-default]
root 0 0 00:00:00 557-02:15:12 74 [kintegrityd/0]
root 0 0 00:00:00 557-02:15:12 75 [kintegrityd/1]
root 0 0 00:00:00 557-02:15:12 76 [kintegrityd/2]
root 0 0 00:00:00 557-02:15:12 77 [kintegrityd/3]
root 0 0 00:00:00 557-02:15:12 78 [kintegrityd/4]
root 0 0 00:00:00 557-02:15:12 79 [kintegrityd/5]
root 0 0 00:00:00 557-02:15:12 80 [kintegrityd/6]
root 0 0 00:00:00 557-02:15:12 81 [kintegrityd/7]
root 0 0 07:11:49 557-02:15:12 82 [kblockd/0]
root 0 0 00:12:47 557-02:15:12 83 [kblockd/1]
root 0 0 00:23:50 557-02:15:12 84 [kblockd/2]
root 0 0 00:04:53 557-02:15:12 85 [kblockd/3]
root 0 0 12:55:00 557-02:15:12 86 [kblockd/4]
root 0 0 00:15:16 557-02:15:12 87 [kblockd/5]
root 0 0 00:09:55 557-02:15:12 88 [kblockd/6]
root 0 0 00:07:37 557-02:15:12 89 [kblockd/7]
root 0 0 00:00:00 557-02:15:12 90 [kacpid]
root 0 0 00:00:00 557-02:15:12 91 [kacpi_notify]
root 0 0 00:00:00 557-02:15:12 92 [kacpi_hotplug]
root 0 0 00:00:00 557-02:15:12 93 [ata_aux]
root 0 0 00:00:00 557-02:15:12 94 [ata_sff/0]
root 0 0 00:00:00 557-02:15:12 95 [ata_sff/1]
root 0 0 00:00:00 557-02:15:12 96 [ata_sff/2]
root 0 0 00:00:00 557-02:15:12 97 [ata_sff/3]
root 0 0 00:00:00 557-02:15:12 98 [ata_sff/4]
root 0 0 00:00:00 557-02:15:12 99 [ata_sff/5]
root 0 0 00:00:00 557-02:15:12 100 [ata_sff/6]
root 0 0 00:00:00 557-02:15:12 101 [ata_sff/7]
root 0 0 00:00:00 557-02:15:12 102 [ksuspend_usbd]
root 0 0 00:00:00 557-02:15:12 103 [khubd]
root 0 0 00:00:00 557-02:15:12 104 [kseriod]
root 0 0 00:00:00 557-02:15:12 105 [md/0]
root 0 0 00:00:00 557-02:15:12 106 [md/1]
root 0 0 00:00:00 557-02:15:12 107 [md/2]
root 0 0 00:00:00 557-02:15:12 108 [md/3]
root 0 0 00:00:00 557-02:15:12 109 [md/4]
root 0 0 00:00:00 557-02:15:12 110 [md/5]
root 0 0 00:00:00 557-02:15:12 111 [md/6]
root 0 0 00:00:00 557-02:15:12 112 [md/7]
root 0 0 00:00:00 557-02:15:12 113 [md_misc/0]
root 0 0 00:00:00 557-02:15:12 114 [md_misc/1]
root 0 0 00:00:00 557-02:15:12 115 [md_misc/2]
root 0 0 00:00:00 557-02:15:12 116 [md_misc/3]
root 0 0 00:00:00 557-02:15:12 117 [md_misc/4]
root 0 0 00:00:00 557-02:15:12 118 [md_misc/5]
root 0 0 00:00:00 557-02:15:12 119 [md_misc/6]
root 0 0 00:00:00 557-02:15:12 120 [md_misc/7]
root 0 0 00:00:00 557-02:15:12 121 [linkwatch]
root 0 0 00:01:14 557-02:15:11 124 [khungtaskd]
root 0 0 1-04:23:53 557-02:15:11 125 [kswapd1]
root 0 0 00:00:00 557-02:15:11 126 [ksmd]
root 0 0 04:12:54 557-02:15:11 127 [khugepaged]
root 0 0 00:00:00 557-02:15:11 128 [aio/0]
root 0 0 00:00:00 557-02:15:11 129 [aio/1]
root 0 0 00:00:00 557-02:15:11 130 [aio/2]
root 0 0 00:00:00 557-02:15:11 131 [aio/3]
root 0 0 00:00:00 557-02:15:11 132 [aio/4]
root 0 0 00:00:00 557-02:15:11 133 [aio/5]
root 0 0 00:00:00 557-02:15:11 134 [aio/6]
root 0 0 00:00:00 557-02:15:11 135 [aio/7]
root 0 0 00:00:00 557-02:15:11 136 [crypto/0]
root 0 0 00:00:00 557-02:15:11 137 [crypto/1]
root 0 0 00:00:00 557-02:15:11 138 [crypto/2]
root 0 0 00:00:00 557-02:15:11 139 [crypto/3]
root 0 0 00:00:00 557-02:15:11 140 [crypto/4]
root 0 0 00:00:00 557-02:15:11 141 [crypto/5]
root 0 0 00:00:00 557-02:15:11 142 [crypto/6]
root 0 0 00:00:00 557-02:15:11 143 [crypto/7]
root 0 0 00:00:00 557-02:15:11 150 [kthrotld/0]
root 0 0 00:00:00 557-02:15:11 151 [kthrotld/1]
root 0 0 00:00:00 557-02:15:11 152 [kthrotld/2]
root 0 0 00:00:00 557-02:15:11 153 [kthrotld/3]
root 0 0 00:00:00 557-02:15:11 154 [kthrotld/4]
root 0 0 00:00:00 557-02:15:11 155 [kthrotld/5]
root 0 0 00:00:00 557-02:15:11 156 [kthrotld/6]
root 0 0 00:00:00 557-02:15:11 157 [kthrotld/7]
root 0 0 00:00:00 557-02:15:11 160 [kpsmoused]
root 0 0 00:00:00 557-02:15:11 161 [usbhid_resumer]
root 0 0 00:00:00 557-02:15:11 162 [deferwq]
root 0 0 00:00:00 557-02:15:11 194 [kdmremove]
root 0 0 00:00:00 557-02:15:11 195 [kstriped]
root 0 0 00:00:00 557-02:15:09 734 [scsi_eh_0]
root 0 0 00:00:00 557-02:15:09 735 [scsi_wq_0]
root 0 0 00:00:00 557-02:15:09 748 [scsi_eh_1]
root 0 0 00:00:00 557-02:15:09 749 [scsi_eh_2]
root 0 0 00:00:00 557-02:15:09 750 [scsi_eh_3]
root 0 0 00:00:00 557-02:15:09 751 [scsi_eh_4]
root 0 0 00:00:00 557-02:15:09 752 [scsi_eh_5]
root 0 0 00:00:00 557-02:15:09 753 [scsi_eh_6]
root 0 0 00:59:32 557-02:15:08 950 [md1_raid1]
root 0 0 00:03:38 557-02:15:07 1011 [jbd2/md1-8]
root 0 0 00:00:00 557-02:15:07 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 557-02:15:06 1105 /sbin/udevd -d
root 0 0 00:39:53 557-02:15:06 1225 [edac-poller]
root 0 0 00:11:15 557-02:15:05 1259 [md0_raid1]
root 0 0 03:16:28 557-02:15:05 1288 [md3_raid1]
root 0 0 2-20:21:20 557-02:15:05 1310 [md5_raid1]
root 0 0 01:11:51 557-02:15:05 1322 [md4_raid1]
root 0 0 00:33:54 557-02:15:05 1336 [md2_raid1]
root 0 0 00:19:35 557-02:15:03 1844 [flush-9:3]
root 0 0 00:00:00 557-02:15:03 1881 [jbd2/md0-8]
root 0 0 00:00:00 557-02:15:03 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 557-02:15:03 1885 [xfs_mru_cache]
root 0 0 01:40:33 557-02:15:03 1886 [xfslogd/0]
root 0 0 00:00:00 557-02:15:03 1887 [xfslogd/1]
root 0 0 00:03:32 557-02:15:03 1888 [xfslogd/2]
root 0 0 00:00:00 557-02:15:03 1889 [xfslogd/3]
root 0 0 03:12:05 557-02:15:03 1890 [xfslogd/4]
root 0 0 00:00:00 557-02:15:03 1891 [xfslogd/5]
root 0 0 00:00:00 557-02:15:03 1892 [xfslogd/6]
root 0 0 00:00:00 557-02:15:03 1893 [xfslogd/7]
root 0 0 03:05:59 557-02:15:03 1894 [xfsdatad/0]
root 0 0 00:00:00 557-02:15:03 1895 [xfsdatad/1]
root 0 0 00:02:18 557-02:15:03 1896 [xfsdatad/2]
root 0 0 00:00:00 557-02:15:03 1897 [xfsdatad/3]
root 0 0 03:28:23 557-02:15:03 1898 [xfsdatad/4]
root 0 0 00:00:00 557-02:15:03 1899 [xfsdatad/5]
root 0 0 00:00:00 557-02:15:03 1900 [xfsdatad/6]
root 0 0 00:00:00 557-02:15:03 1901 [xfsdatad/7]
root 0 0 00:00:00 557-02:15:03 1902 [xfsconvertd/0]
root 0 0 00:00:00 557-02:15:03 1903 [xfsconvertd/1]
root 0 0 00:00:00 557-02:15:03 1904 [xfsconvertd/2]
root 0 0 00:00:00 557-02:15:03 1905 [xfsconvertd/3]
root 0 0 00:00:00 557-02:15:03 1906 [xfsconvertd/4]
root 0 0 00:00:00 557-02:15:03 1907 [xfsconvertd/5]
root 0 0 00:00:00 557-02:15:03 1908 [xfsconvertd/6]
root 0 0 00:00:00 557-02:15:03 1909 [xfsconvertd/7]
root 0 0 00:00:02 557-02:15:03 1910 [xfsalloc/0]
root 0 0 00:00:02 557-02:15:03 1911 [xfsalloc/1]
root 0 0 00:00:03 557-02:15:03 1912 [xfsalloc/2]
root 0 0 00:00:04 557-02:15:03 1913 [xfsalloc/3]
root 0 0 00:00:02 557-02:15:03 1914 [xfsalloc/4]
root 0 0 00:00:03 557-02:15:03 1915 [xfsalloc/5]
root 0 0 00:00:03 557-02:15:03 1916 [xfsalloc/6]
root 0 0 00:00:05 557-02:15:03 1917 [xfsalloc/7]
root 0 0 00:00:11 557-02:15:03 1918 [xfseofblocks/0]
root 0 0 00:00:07 557-02:15:03 1919 [xfseofblocks/1]
root 0 0 00:00:09 557-02:15:03 1920 [xfseofblocks/2]
root 0 0 00:00:12 557-02:15:03 1921 [xfseofblocks/3]
root 0 0 00:00:09 557-02:15:03 1922 [xfseofblocks/4]
root 0 0 00:00:10 557-02:15:03 1923 [xfseofblocks/5]
root 0 0 00:00:04 557-02:15:03 1924 [xfseofblocks/6]
root 0 0 00:02:56 557-02:15:03 1925 [xfseofblocks/7]
root 0 0 00:33:49 557-02:15:03 1926 [xfsbufd/md5]
root 0 0 00:30:39 557-02:15:03 1927 [xfs-cil/md5]
root 0 0 00:59:29 557-02:15:03 1928 [xfssyncd/md5]
root 0 0 07:34:11 557-02:15:03 1929 [xfsaild/md5]
root 0 0 00:03:58 557-02:15:02 1930 [jbd2/md2-8]
root 0 0 00:00:00 557-02:15:02 1931 [ext4-dio-unwrit]
root 0 0 00:09:19 557-02:15:02 1932 [xfsbufd/md4]
root 0 0 00:00:53 557-02:15:02 1933 [xfs-cil/md4]
root 0 0 00:04:00 557-02:15:02 1934 [xfssyncd/md4]
root 0 0 07:12:09 557-02:15:02 1935 [xfsaild/md4]
root 0 0 00:30:16 557-02:15:02 1936 [xfsbufd/md3]
root 0 0 00:39:37 557-02:15:02 1937 [xfs-cil/md3]
root 0 0 00:05:18 557-02:15:02 1938 [xfssyncd/md3]
root 0 0 07:24:54 557-02:15:02 1939 [xfsaild/md3]
root 0 0 00:39:03 557-02:15:02 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 557-02:15:02 1941 [xfs-cil/sdc1]
root 0 0 12:22:57 557-02:15:02 1942 [xfssyncd/sdc1]
root 0 0 1-09:13:10 557-02:15:02 1943 [xfsaild/sdc1]
root 0 0 00:06:42 557-02:15:01 1999 [kauditd]
root 29764 704 00:16:21 557-02:14:44 2254 auditd
root 252156 31248 03:42:04 557-02:14:43 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 04:02:22 557-02:14:43 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:39 557-02:14:42 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 557-02:14:42 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:49:31 557-02:14:42 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:32 557-02:14:41 2492 /usr/sbin/sshd
root 71720 2016 00:34:14 557-02:14:36 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:34:05 557-02:14:36 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:58 557-02:14:36 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:27 557-02:14:36 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:21 557-02:14:36 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:09:06 557-02:14:25 3359 crond
root 107544 436 00:00:28 557-02:14:23 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 557-02:14:18 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 557-02:14:18 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 557-02:14:18 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 557-02:14:18 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 557-02:14:18 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 557-02:14:18 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 557-02:14:18 3491 /sbin/udevd -d
root 11232 260 00:00:00 557-02:14:18 3492 /sbin/udevd -d
root 163092 1172 00:00:44 541-23:39:31 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 155-13:25:02 43438 SCREEN -O
root 108452 1384 00:00:00 155-13:25:02 43439 /bin/bash
root 108452 1384 00:00:00 155-13:23:59 43486 /bin/bash
root 0 0 00:00:00 01:04:47 46127 [flush-9:4]
root 109064 844 00:00:00 27-23:41:43 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:04 27-23:41:42 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
apache 613872 115424 00:00:30 24:24 52817 /usr/sbin/httpd -DSSL
apache 589608 84932 00:00:46 20:22 53483 /usr/sbin/httpd -DSSL
root 171940 63548 00:00:18 39-23:38:48 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
apache 595572 97472 00:00:18 09:32 55293 /usr/sbin/httpd -DSSL
apache 621364 104924 00:00:12 09:24 55294 /usr/sbin/httpd -DSSL
apache 589676 85300 00:00:20 09:04 55298 /usr/sbin/httpd -DSSL
apache 632980 111224 00:00:16 09:04 55299 /usr/sbin/httpd -DSSL
apache 596016 92752 00:00:16 09:03 55300 /usr/sbin/httpd -DSSL
apache 597108 93784 00:00:11 09:02 55308 /usr/sbin/httpd -DSSL
apache 588824 72988 00:00:19 09:02 55310 /usr/sbin/httpd -DSSL
apache 588932 73468 00:00:12 08:35 55321 /usr/sbin/httpd -DSSL
apache 616044 106304 00:00:12 07:07 55738 /usr/sbin/httpd -DSSL
apache 587860 66972 00:00:12 07:07 55739 /usr/sbin/httpd -DSSL
apache 593056 82976 00:00:12 07:02 55740 /usr/sbin/httpd -DSSL
apache 606244 75620 00:00:11 07:01 55742 /usr/sbin/httpd -DSSL
apache 617928 107364 00:00:06 06:59 55743 /usr/sbin/httpd -DSSL
apache 598836 77200 00:00:13 06:58 55744 /usr/sbin/httpd -DSSL
apache 615032 97508 00:00:12 06:57 55748 /usr/sbin/httpd -DSSL
apache 587596 89720 00:00:12 06:56 55752 /usr/sbin/httpd -DSSL
apache 588636 78904 00:00:08 06:56 55753 /usr/sbin/httpd -DSSL
apache 589340 71028 00:00:08 06:56 55754 /usr/sbin/httpd -DSSL
apache 588548 67440 00:00:09 06:56 55755 /usr/sbin/httpd -DSSL
apache 593700 78052 00:00:11 06:56 55757 /usr/sbin/httpd -DSSL
apache 589568 70908 00:00:07 06:46 55760 /usr/sbin/httpd -DSSL
apache 587504 69916 00:00:11 06:44 55762 /usr/sbin/httpd -DSSL
apache 588480 59164 00:00:08 06:41 55765 /usr/sbin/httpd -DSSL
apache 644028 111916 00:00:07 06:41 55766 /usr/sbin/httpd -DSSL
apache 589816 76408 00:00:13 06:40 55769 /usr/sbin/httpd -DSSL
apache 588240 81904 00:00:11 06:39 55772 /usr/sbin/httpd -DSSL
root 40060 2032 00:00:00 04:15 56099 dovecot/ssl-params
apache 601312 65320 00:00:01 02:23 56353 /usr/sbin/httpd -DSSL
root 96124 3596 00:00:00 00:41 56684 sendmail: ./4AL7V6XV156128 go.ststephens.wa.edu.au.: user open
root 110772 2080 00:00:00 00:02 56881 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:02 56903 /bin/bash /usr/bin/check_mk_agent
root 110772 1260 00:00:00 00:02 56904 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:02 56906 cat
root 110900 1180 00:00:00 00:01 56931 /bin/bash /usr/bin/check_mk_agent
root 13364 1012 00:00:00 00:01 56932 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 56933 tr -s 
root 0 0 00:02:49 556-23:52:42 57735 [flush-9:2]
root 0 0 00:02:28 556-23:17:46 68416 [flush-9:1]
root 63348 3988 00:25:01 455-05:28:06 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 455-05:07:32 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4862668 1619464 1002-16:14:25 455-05:07:31 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 19260 796 00:00:01 20:57:57 108917 /usr/sbin/dovecot
dovecot 12980 1076 00:00:00 20:57:57 108919 dovecot/anvil
root 13108 1192 00:00:00 20:57:57 108920 dovecot/log
root 266696 74816 00:00:30 19:12:32 125291 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269172 76904 00:00:25 16:08:55 153324 spamd child
root 21712 764 00:00:24 154-23:36:49 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:07:50 83-13:59:51 181185 [flush-9:5]
root 0 0 00:00:47 19-23:00:24 181517 [flush-8:32]
root 568340 36156 00:28:41 83-13:51:18 182912 /usr/sbin/httpd -DSSL
root 268092 75752 00:00:00 08:17:45 224249 spamd child
root 154784 45352 00:00:41 450-23:39:37 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:10:05 493-14:21:47 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:06:11 493-14:21:47 238030 sendmail: accepting connections
named 739840 58776 03:59:17 493-14:21:32 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-21 23:22

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e497a9768e

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1731889638
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:01:00 553-03:19:38 1 /sbin/init
root 0 0 00:00:02 553-03:19:38 2 [kthreadd]
root 0 0 1-00:03:24 553-03:19:38 3 [migration/0]
root 0 0 01:08:40 553-03:19:38 4 [ksoftirqd/0]
root 0 0 00:00:00 553-03:19:38 5 [stopper/0]
root 0 0 00:18:12 553-03:19:38 6 [watchdog/0]
root 0 0 09:59:45 553-03:19:38 7 [migration/1]
root 0 0 00:00:00 553-03:19:38 8 [stopper/1]
root 0 0 01:44:55 553-03:19:38 9 [ksoftirqd/1]
root 0 0 00:22:42 553-03:19:38 10 [watchdog/1]
root 0 0 06:32:50 553-03:19:38 11 [migration/2]
root 0 0 00:00:00 553-03:19:38 12 [stopper/2]
root 0 0 00:53:34 553-03:19:38 13 [ksoftirqd/2]
root 0 0 00:20:18 553-03:19:38 14 [watchdog/2]
root 0 0 04:41:02 553-03:19:38 15 [migration/3]
root 0 0 00:00:00 553-03:19:38 16 [stopper/3]
root 0 0 00:39:26 553-03:19:38 17 [ksoftirqd/3]
root 0 0 00:16:03 553-03:19:38 18 [watchdog/3]
root 0 0 17:01:02 553-03:19:38 19 [migration/4]
root 0 0 00:00:00 553-03:19:38 20 [stopper/4]
root 0 0 00:58:50 553-03:19:38 21 [ksoftirqd/4]
root 0 0 00:09:20 553-03:19:38 22 [watchdog/4]
root 0 0 09:10:14 553-03:19:38 23 [migration/5]
root 0 0 00:00:00 553-03:19:38 24 [stopper/5]
root 0 0 00:40:51 553-03:19:38 25 [ksoftirqd/5]
root 0 0 00:19:32 553-03:19:38 26 [watchdog/5]
root 0 0 05:31:18 553-03:19:38 27 [migration/6]
root 0 0 00:00:00 553-03:19:38 28 [stopper/6]
root 0 0 00:31:41 553-03:19:38 29 [ksoftirqd/6]
root 0 0 00:15:00 553-03:19:38 30 [watchdog/6]
root 0 0 04:22:27 553-03:19:38 31 [migration/7]
root 0 0 00:00:00 553-03:19:38 32 [stopper/7]
root 0 0 00:31:20 553-03:19:38 33 [ksoftirqd/7]
root 0 0 00:12:14 553-03:19:38 34 [watchdog/7]
root 0 0 02:41:11 553-03:19:38 35 [events/0]
root 0 0 01:45:46 553-03:19:38 36 [events/1]
root 0 0 01:48:36 553-03:19:38 37 [events/2]
root 0 0 01:51:56 553-03:19:38 38 [events/3]
root 0 0 01:31:25 553-03:19:38 39 [events/4]
root 0 0 01:26:41 553-03:19:38 40 [events/5]
root 0 0 01:34:09 553-03:19:38 41 [events/6]
root 0 0 01:38:32 553-03:19:38 42 [events/7]
root 0 0 00:00:00 553-03:19:38 43 [events/0]
root 0 0 00:00:00 553-03:19:38 44 [events/1]
root 0 0 00:00:00 553-03:19:38 45 [events/2]
root 0 0 00:00:00 553-03:19:38 46 [events/3]
root 0 0 00:00:00 553-03:19:38 47 [events/4]
root 0 0 00:00:00 553-03:19:38 48 [events/5]
root 0 0 00:00:00 553-03:19:38 49 [events/6]
root 0 0 00:00:00 553-03:19:38 50 [events/7]
root 0 0 00:00:00 553-03:19:38 51 [events_long/0]
root 0 0 00:00:00 553-03:19:38 52 [events_long/1]
root 0 0 00:00:00 553-03:19:38 53 [events_long/2]
root 0 0 00:00:00 553-03:19:38 54 [events_long/3]
root 0 0 00:00:00 553-03:19:38 55 [events_long/4]
root 0 0 00:00:00 553-03:19:38 56 [events_long/5]
root 0 0 00:00:00 553-03:19:38 57 [events_long/6]
root 0 0 00:00:00 553-03:19:38 58 [events_long/7]
root 0 0 00:00:00 553-03:19:38 59 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 60 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 61 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 62 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 63 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 64 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 65 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 66 [events_power_ef]
root 0 0 00:00:00 553-03:19:38 67 [cgroup]
root 0 0 00:00:00 553-03:19:38 68 [khelper]
root 0 0 00:00:00 553-03:19:38 69 [netns]
root 0 0 00:00:00 553-03:19:38 70 [async/mgr]
root 0 0 00:00:00 553-03:19:38 71 [pm]
root 0 0 00:06:06 553-03:19:38 72 [sync_supers]
root 0 0 00:00:15 553-03:19:38 73 [bdi-default]
root 0 0 00:00:00 553-03:19:38 74 [kintegrityd/0]
root 0 0 00:00:00 553-03:19:38 75 [kintegrityd/1]
root 0 0 00:00:00 553-03:19:38 76 [kintegrityd/2]
root 0 0 00:00:00 553-03:19:38 77 [kintegrityd/3]
root 0 0 00:00:00 553-03:19:38 78 [kintegrityd/4]
root 0 0 00:00:00 553-03:19:38 79 [kintegrityd/5]
root 0 0 00:00:00 553-03:19:38 80 [kintegrityd/6]
root 0 0 00:00:00 553-03:19:38 81 [kintegrityd/7]
root 0 0 07:07:06 553-03:19:38 82 [kblockd/0]
root 0 0 00:12:45 553-03:19:38 83 [kblockd/1]
root 0 0 00:23:49 553-03:19:38 84 [kblockd/2]
root 0 0 00:04:53 553-03:19:38 85 [kblockd/3]
root 0 0 12:46:59 553-03:19:38 86 [kblockd/4]
root 0 0 00:15:13 553-03:19:38 87 [kblockd/5]
root 0 0 00:09:54 553-03:19:38 88 [kblockd/6]
root 0 0 00:07:36 553-03:19:38 89 [kblockd/7]
root 0 0 00:00:00 553-03:19:38 90 [kacpid]
root 0 0 00:00:00 553-03:19:38 91 [kacpi_notify]
root 0 0 00:00:00 553-03:19:38 92 [kacpi_hotplug]
root 0 0 00:00:00 553-03:19:38 93 [ata_aux]
root 0 0 00:00:00 553-03:19:38 94 [ata_sff/0]
root 0 0 00:00:00 553-03:19:38 95 [ata_sff/1]
root 0 0 00:00:00 553-03:19:38 96 [ata_sff/2]
root 0 0 00:00:00 553-03:19:38 97 [ata_sff/3]
root 0 0 00:00:00 553-03:19:38 98 [ata_sff/4]
root 0 0 00:00:00 553-03:19:38 99 [ata_sff/5]
root 0 0 00:00:00 553-03:19:38 100 [ata_sff/6]
root 0 0 00:00:00 553-03:19:38 101 [ata_sff/7]
root 0 0 00:00:00 553-03:19:38 102 [ksuspend_usbd]
root 0 0 00:00:00 553-03:19:38 103 [khubd]
root 0 0 00:00:00 553-03:19:38 104 [kseriod]
root 0 0 00:00:00 553-03:19:38 105 [md/0]
root 0 0 00:00:00 553-03:19:38 106 [md/1]
root 0 0 00:00:00 553-03:19:38 107 [md/2]
root 0 0 00:00:00 553-03:19:38 108 [md/3]
root 0 0 00:00:00 553-03:19:38 109 [md/4]
root 0 0 00:00:00 553-03:19:38 110 [md/5]
root 0 0 00:00:00 553-03:19:38 111 [md/6]
root 0 0 00:00:00 553-03:19:38 112 [md/7]
root 0 0 00:00:00 553-03:19:38 113 [md_misc/0]
root 0 0 00:00:00 553-03:19:38 114 [md_misc/1]
root 0 0 00:00:00 553-03:19:38 115 [md_misc/2]
root 0 0 00:00:00 553-03:19:38 116 [md_misc/3]
root 0 0 00:00:00 553-03:19:38 117 [md_misc/4]
root 0 0 00:00:00 553-03:19:38 118 [md_misc/5]
root 0 0 00:00:00 553-03:19:38 119 [md_misc/6]
root 0 0 00:00:00 553-03:19:38 120 [md_misc/7]
root 0 0 00:00:00 553-03:19:38 121 [linkwatch]
root 0 0 00:01:13 553-03:19:37 124 [khungtaskd]
root 0 0 1-04:16:38 553-03:19:37 125 [kswapd1]
root 0 0 00:00:00 553-03:19:37 126 [ksmd]
root 0 0 04:09:17 553-03:19:37 127 [khugepaged]
root 0 0 00:00:00 553-03:19:37 128 [aio/0]
root 0 0 00:00:00 553-03:19:37 129 [aio/1]
root 0 0 00:00:00 553-03:19:37 130 [aio/2]
root 0 0 00:00:00 553-03:19:37 131 [aio/3]
root 0 0 00:00:00 553-03:19:37 132 [aio/4]
root 0 0 00:00:00 553-03:19:37 133 [aio/5]
root 0 0 00:00:00 553-03:19:37 134 [aio/6]
root 0 0 00:00:00 553-03:19:37 135 [aio/7]
root 0 0 00:00:00 553-03:19:37 136 [crypto/0]
root 0 0 00:00:00 553-03:19:37 137 [crypto/1]
root 0 0 00:00:00 553-03:19:37 138 [crypto/2]
root 0 0 00:00:00 553-03:19:37 139 [crypto/3]
root 0 0 00:00:00 553-03:19:37 140 [crypto/4]
root 0 0 00:00:00 553-03:19:37 141 [crypto/5]
root 0 0 00:00:00 553-03:19:37 142 [crypto/6]
root 0 0 00:00:00 553-03:19:37 143 [crypto/7]
root 0 0 00:00:00 553-03:19:37 150 [kthrotld/0]
root 0 0 00:00:00 553-03:19:37 151 [kthrotld/1]
root 0 0 00:00:00 553-03:19:37 152 [kthrotld/2]
root 0 0 00:00:00 553-03:19:37 153 [kthrotld/3]
root 0 0 00:00:00 553-03:19:37 154 [kthrotld/4]
root 0 0 00:00:00 553-03:19:37 155 [kthrotld/5]
root 0 0 00:00:00 553-03:19:37 156 [kthrotld/6]
root 0 0 00:00:00 553-03:19:37 157 [kthrotld/7]
root 0 0 00:00:00 553-03:19:37 160 [kpsmoused]
root 0 0 00:00:00 553-03:19:37 161 [usbhid_resumer]
root 0 0 00:00:00 553-03:19:37 162 [deferwq]
root 0 0 00:00:00 553-03:19:37 194 [kdmremove]
root 0 0 00:00:00 553-03:19:37 195 [kstriped]
root 0 0 00:00:00 553-03:19:35 734 [scsi_eh_0]
root 0 0 00:00:00 553-03:19:35 735 [scsi_wq_0]
root 0 0 00:00:00 553-03:19:35 748 [scsi_eh_1]
root 0 0 00:00:00 553-03:19:35 749 [scsi_eh_2]
root 0 0 00:00:00 553-03:19:35 750 [scsi_eh_3]
root 0 0 00:00:00 553-03:19:35 751 [scsi_eh_4]
root 0 0 00:00:00 553-03:19:35 752 [scsi_eh_5]
root 0 0 00:00:00 553-03:19:35 753 [scsi_eh_6]
root 0 0 00:59:22 553-03:19:34 950 [md1_raid1]
root 0 0 00:03:36 553-03:19:33 1011 [jbd2/md1-8]
root 0 0 00:00:00 553-03:19:33 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 553-03:19:32 1105 /sbin/udevd -d
root 0 0 00:38:49 553-03:19:32 1225 [edac-poller]
root 0 0 00:11:15 553-03:19:31 1259 [md0_raid1]
root 0 0 03:13:58 553-03:19:31 1288 [md3_raid1]
root 0 0 2-20:03:25 553-03:19:31 1310 [md5_raid1]
root 0 0 01:11:33 553-03:19:31 1322 [md4_raid1]
root 0 0 00:33:37 553-03:19:31 1336 [md2_raid1]
root 0 0 00:19:22 553-03:19:29 1844 [flush-9:3]
root 0 0 00:00:00 553-03:19:29 1881 [jbd2/md0-8]
root 0 0 00:00:00 553-03:19:29 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 553-03:19:29 1885 [xfs_mru_cache]
root 0 0 01:40:29 553-03:19:29 1886 [xfslogd/0]
root 0 0 00:00:00 553-03:19:29 1887 [xfslogd/1]
root 0 0 00:03:32 553-03:19:29 1888 [xfslogd/2]
root 0 0 00:00:00 553-03:19:29 1889 [xfslogd/3]
root 0 0 03:10:43 553-03:19:29 1890 [xfslogd/4]
root 0 0 00:00:00 553-03:19:29 1891 [xfslogd/5]
root 0 0 00:00:00 553-03:19:29 1892 [xfslogd/6]
root 0 0 00:00:00 553-03:19:29 1893 [xfslogd/7]
root 0 0 03:05:52 553-03:19:29 1894 [xfsdatad/0]
root 0 0 00:00:00 553-03:19:29 1895 [xfsdatad/1]
root 0 0 00:02:18 553-03:19:29 1896 [xfsdatad/2]
root 0 0 00:00:00 553-03:19:29 1897 [xfsdatad/3]
root 0 0 03:28:02 553-03:19:29 1898 [xfsdatad/4]
root 0 0 00:00:00 553-03:19:29 1899 [xfsdatad/5]
root 0 0 00:00:00 553-03:19:29 1900 [xfsdatad/6]
root 0 0 00:00:00 553-03:19:29 1901 [xfsdatad/7]
root 0 0 00:00:00 553-03:19:29 1902 [xfsconvertd/0]
root 0 0 00:00:00 553-03:19:29 1903 [xfsconvertd/1]
root 0 0 00:00:00 553-03:19:29 1904 [xfsconvertd/2]
root 0 0 00:00:00 553-03:19:29 1905 [xfsconvertd/3]
root 0 0 00:00:00 553-03:19:29 1906 [xfsconvertd/4]
root 0 0 00:00:00 553-03:19:29 1907 [xfsconvertd/5]
root 0 0 00:00:00 553-03:19:29 1908 [xfsconvertd/6]
root 0 0 00:00:00 553-03:19:29 1909 [xfsconvertd/7]
root 0 0 00:00:02 553-03:19:29 1910 [xfsalloc/0]
root 0 0 00:00:02 553-03:19:29 1911 [xfsalloc/1]
root 0 0 00:00:03 553-03:19:29 1912 [xfsalloc/2]
root 0 0 00:00:04 553-03:19:29 1913 [xfsalloc/3]
root 0 0 00:00:02 553-03:19:29 1914 [xfsalloc/4]
root 0 0 00:00:03 553-03:19:29 1915 [xfsalloc/5]
root 0 0 00:00:03 553-03:19:29 1916 [xfsalloc/6]
root 0 0 00:00:05 553-03:19:29 1917 [xfsalloc/7]
root 0 0 00:00:11 553-03:19:29 1918 [xfseofblocks/0]
root 0 0 00:00:07 553-03:19:29 1919 [xfseofblocks/1]
root 0 0 00:00:09 553-03:19:29 1920 [xfseofblocks/2]
root 0 0 00:00:12 553-03:19:29 1921 [xfseofblocks/3]
root 0 0 00:00:09 553-03:19:29 1922 [xfseofblocks/4]
root 0 0 00:00:10 553-03:19:29 1923 [xfseofblocks/5]
root 0 0 00:00:04 553-03:19:29 1924 [xfseofblocks/6]
root 0 0 00:02:55 553-03:19:29 1925 [xfseofblocks/7]
root 0 0 00:33:12 553-03:19:29 1926 [xfsbufd/md5]
root 0 0 00:30:06 553-03:19:29 1927 [xfs-cil/md5]
root 0 0 00:59:10 553-03:19:29 1928 [xfssyncd/md5]
root 0 0 07:22:43 553-03:19:29 1929 [xfsaild/md5]
root 0 0 00:03:51 553-03:19:28 1930 [jbd2/md2-8]
root 0 0 00:00:00 553-03:19:28 1931 [ext4-dio-unwrit]
root 0 0 00:09:06 553-03:19:28 1932 [xfsbufd/md4]
root 0 0 00:00:52 553-03:19:28 1933 [xfs-cil/md4]
root 0 0 00:03:57 553-03:19:28 1934 [xfssyncd/md4]
root 0 0 07:01:31 553-03:19:28 1935 [xfsaild/md4]
root 0 0 00:29:37 553-03:19:28 1936 [xfsbufd/md3]
root 0 0 00:38:44 553-03:19:28 1937 [xfs-cil/md3]
root 0 0 00:05:13 553-03:19:28 1938 [xfssyncd/md3]
root 0 0 07:13:42 553-03:19:28 1939 [xfsaild/md3]
root 0 0 00:39:03 553-03:19:28 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 553-03:19:28 1941 [xfs-cil/sdc1]
root 0 0 12:22:53 553-03:19:28 1942 [xfssyncd/sdc1]
root 0 0 1-09:02:00 553-03:19:28 1943 [xfsaild/sdc1]
root 0 0 00:06:39 553-03:19:27 1999 [kauditd]
root 29764 704 00:16:16 553-03:19:10 2254 auditd
root 252156 31248 03:39:14 553-03:19:09 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 04:00:45 553-03:19:09 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:39 553-03:19:08 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 553-03:19:08 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:48:18 553-03:19:08 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:30 553-03:19:07 2492 /usr/sbin/sshd
root 71720 2016 00:34:11 553-03:19:02 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:34:02 553-03:19:02 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:55 553-03:19:02 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:23 553-03:19:02 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:18 553-03:19:02 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:09:01 553-03:18:51 3359 crond
root 107544 436 00:00:28 553-03:18:49 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 553-03:18:44 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 553-03:18:44 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 553-03:18:44 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 553-03:18:44 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 553-03:18:44 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 553-03:18:44 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 553-03:18:44 3491 /sbin/udevd -d
root 11232 260 00:00:00 553-03:18:44 3492 /sbin/udevd -d
root 163092 1204 00:00:44 538-00:43:57 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 151-14:29:28 43438 SCREEN -O
root 108452 1384 00:00:00 151-14:29:28 43439 /bin/bash
root 108452 1384 00:00:00 151-14:28:25 43486 /bin/bash
root 109064 844 00:00:00 24-00:46:09 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:03 24-00:46:08 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 36-00:43:14 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:43 553-00:57:08 57735 [flush-9:2]
root 0 0 00:02:25 553-00:22:12 68416 [flush-9:1]
root 63348 3996 00:24:45 451-06:32:32 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 451-06:11:58 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1567824 985-02:33:57 451-06:11:57 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 268988 76788 00:00:34 06:58:51 108412 spamd child
root 21712 764 00:00:23 151-00:41:15 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 96752 5432 00:00:00 18:17 166403 sendmail: ./4AF71qGv072985 mail.msn.fr.: user open
root 97416 6168 00:00:00 17:17 166619 sendmail: ./4AD5f6gC102961 from queue
apache 599684 102952 00:00:42 15:46 166657 /usr/sbin/httpd -DSSL
apache 635824 142092 00:00:32 15:46 166658 /usr/sbin/httpd -DSSL
apache 590356 97272 00:00:32 14:02 166966 /usr/sbin/httpd -DSSL
root 96752 5424 00:00:00 13:17 166970 sendmail: ./4AF5V571057300 smtp.emploi-m2e95.fr.: user open
apache 610212 117380 00:00:32 13:07 166971 /usr/sbin/httpd -DSSL
apache 590732 89644 00:00:36 13:06 166973 /usr/sbin/httpd -DSSL
apache 613464 112028 00:00:42 12:23 167117 /usr/sbin/httpd -DSSL
apache 662704 155316 00:00:28 12:22 167118 /usr/sbin/httpd -DSSL
root 96752 5424 00:00:00 12:17 167335 sendmail: ./4AD8xuiH132445 mail.icloud.co.za.: user open
apache 592384 98644 00:00:31 12:04 167336 /usr/sbin/httpd -DSSL
apache 613456 120088 00:00:35 12:03 167338 /usr/sbin/httpd -DSSL
apache 592992 99484 00:00:27 12:02 167339 /usr/sbin/httpd -DSSL
apache 616880 115328 00:00:34 12:02 167342 /usr/sbin/httpd -DSSL
apache 592156 96948 00:00:28 12:01 167344 /usr/sbin/httpd -DSSL
apache 593884 91124 00:00:24 12:01 167346 /usr/sbin/httpd -DSSL
apache 590668 88776 00:00:21 12:01 167348 /usr/sbin/httpd -DSSL
apache 593972 100652 00:00:26 12:01 167349 /usr/sbin/httpd -DSSL
apache 598772 95456 00:00:24 11:49 167351 /usr/sbin/httpd -DSSL
apache 594324 100812 00:00:23 11:45 167355 /usr/sbin/httpd -DSSL
apache 589604 96984 00:00:27 11:44 167357 /usr/sbin/httpd -DSSL
apache 592388 98264 00:00:29 11:40 167361 /usr/sbin/httpd -DSSL
root 96752 5420 00:00:00 10:17 167382 sendmail: ./4AG0mHmA239997 dnvrco-postmx01.email.rr.com.: user open
root 96752 5412 00:00:00 09:17 167718 sendmail: ./4AFIngTp183053 mail.vglb.com.: user open
root 0 0 00:00:00 09:13 167719 [flush-9:4]
root 96752 5424 00:00:00 08:17 167726 sendmail: ./4AF727QE073058 mail.msn.fr.: user open
apache 597512 103152 00:00:21 07:55 167727 /usr/sbin/httpd -DSSL
root 96752 5416 00:00:00 07:17 168059 sendmail: ./4AF6A5u2063709 mx.dnsassurance.com.: user open
root 96752 5412 00:00:00 06:17 168943 sendmail: ./4AFJnFWw193445 smtpin2.three.com.au.: user open
root 96752 5412 00:00:00 05:17 168945 sendmail: ./4AF5We0E057468 mail2.klgates.com.: user open
root 96752 5416 00:00:00 04:17 169089 sendmail: ./4AFKiGdt201809 lxmailsj1.packeteer.com.: user open
root 96752 5412 00:00:00 03:17 169294 sendmail: ./4AG0m532239991 dnvrco-postmx01.email.rr.com.: user open
root 96752 5392 00:00:00 02:17 169463 sendmail: ./4AFKlG7q202277 mx1.mediageneral.net.: user open
root 96752 5412 00:00:00 01:17 169510 sendmail: ./4AG6KQg4043668 maila53.newtekwebhosting.com.: user open
root 96752 5384 00:00:00 00:17 169542 sendmail: ./4AG6Kk98043677 maila58.newtekwebhosting.com.: user open
root 110772 2076 00:00:00 00:01 169922 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 169944 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 169945 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 169947 cat
root 110900 1176 00:00:00 00:01 169972 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 169973 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 169974 tr -s 
root 0 0 00:07:22 79-15:04:17 181185 [flush-9:5]
root 0 0 00:00:35 16-00:04:50 181517 [flush-8:32]
root 568340 36168 00:26:24 79-14:55:44 182912 /usr/sbin/httpd -DSSL
root 154784 45448 00:00:41 447-00:44:03 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 796 00:00:00 21:45:05 225543 /usr/sbin/dovecot
dovecot 12980 1092 00:00:00 21:45:05 225546 dovecot/anvil
root 13108 1192 00:00:00 21:45:05 225547 dovecot/log
root 266548 74752 00:00:20 21:15:05 230207 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 268688 76304 00:00:02 21:15:00 230210 spamd child
smmsp 78752 788 00:10:00 489-15:26:13 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:05:30 489-15:26:13 238030 sendmail: rejecting connections on daemon MTA: 15 children, max 15
named 739840 58824 03:56:48 489-15:25:58 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-18 00:27

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4760c9084

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1731710587
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:59 551-01:35:27 1 /sbin/init
root 0 0 00:00:02 551-01:35:27 2 [kthreadd]
root 0 0 23:55:33 551-01:35:27 3 [migration/0]
root 0 0 01:08:19 551-01:35:27 4 [ksoftirqd/0]
root 0 0 00:00:00 551-01:35:27 5 [stopper/0]
root 0 0 00:18:03 551-01:35:27 6 [watchdog/0]
root 0 0 09:57:49 551-01:35:27 7 [migration/1]
root 0 0 00:00:00 551-01:35:27 8 [stopper/1]
root 0 0 01:44:32 551-01:35:27 9 [ksoftirqd/1]
root 0 0 00:22:31 551-01:35:27 10 [watchdog/1]
root 0 0 06:31:42 551-01:35:27 11 [migration/2]
root 0 0 00:00:00 551-01:35:27 12 [stopper/2]
root 0 0 00:53:17 551-01:35:27 13 [ksoftirqd/2]
root 0 0 00:20:09 551-01:35:27 14 [watchdog/2]
root 0 0 04:40:07 551-01:35:27 15 [migration/3]
root 0 0 00:00:00 551-01:35:27 16 [stopper/3]
root 0 0 00:39:10 551-01:35:27 17 [ksoftirqd/3]
root 0 0 00:15:55 551-01:35:27 18 [watchdog/3]
root 0 0 16:55:12 551-01:35:27 19 [migration/4]
root 0 0 00:00:00 551-01:35:27 20 [stopper/4]
root 0 0 00:58:37 551-01:35:27 21 [ksoftirqd/4]
root 0 0 00:09:16 551-01:35:27 22 [watchdog/4]
root 0 0 09:08:51 551-01:35:27 23 [migration/5]
root 0 0 00:00:00 551-01:35:27 24 [stopper/5]
root 0 0 00:40:43 551-01:35:27 25 [ksoftirqd/5]
root 0 0 00:19:27 551-01:35:27 26 [watchdog/5]
root 0 0 05:30:33 551-01:35:27 27 [migration/6]
root 0 0 00:00:00 551-01:35:27 28 [stopper/6]
root 0 0 00:31:33 551-01:35:27 29 [ksoftirqd/6]
root 0 0 00:14:55 551-01:35:27 30 [watchdog/6]
root 0 0 04:21:55 551-01:35:27 31 [migration/7]
root 0 0 00:00:00 551-01:35:27 32 [stopper/7]
root 0 0 00:31:12 551-01:35:27 33 [ksoftirqd/7]
root 0 0 00:12:09 551-01:35:27 34 [watchdog/7]
root 0 0 02:40:09 551-01:35:27 35 [events/0]
root 0 0 01:44:50 551-01:35:27 36 [events/1]
root 0 0 01:47:40 551-01:35:27 37 [events/2]
root 0 0 01:50:53 551-01:35:27 38 [events/3]
root 0 0 01:30:52 551-01:35:27 39 [events/4]
root 0 0 01:26:09 551-01:35:27 40 [events/5]
root 0 0 01:33:35 551-01:35:27 41 [events/6]
root 0 0 01:37:53 551-01:35:27 42 [events/7]
root 0 0 00:00:00 551-01:35:27 43 [events/0]
root 0 0 00:00:00 551-01:35:27 44 [events/1]
root 0 0 00:00:00 551-01:35:27 45 [events/2]
root 0 0 00:00:00 551-01:35:27 46 [events/3]
root 0 0 00:00:00 551-01:35:27 47 [events/4]
root 0 0 00:00:00 551-01:35:27 48 [events/5]
root 0 0 00:00:00 551-01:35:27 49 [events/6]
root 0 0 00:00:00 551-01:35:27 50 [events/7]
root 0 0 00:00:00 551-01:35:27 51 [events_long/0]
root 0 0 00:00:00 551-01:35:27 52 [events_long/1]
root 0 0 00:00:00 551-01:35:27 53 [events_long/2]
root 0 0 00:00:00 551-01:35:27 54 [events_long/3]
root 0 0 00:00:00 551-01:35:27 55 [events_long/4]
root 0 0 00:00:00 551-01:35:27 56 [events_long/5]
root 0 0 00:00:00 551-01:35:27 57 [events_long/6]
root 0 0 00:00:00 551-01:35:27 58 [events_long/7]
root 0 0 00:00:00 551-01:35:27 59 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 60 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 61 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 62 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 63 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 64 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 65 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 66 [events_power_ef]
root 0 0 00:00:00 551-01:35:27 67 [cgroup]
root 0 0 00:00:00 551-01:35:27 68 [khelper]
root 0 0 00:00:00 551-01:35:27 69 [netns]
root 0 0 00:00:00 551-01:35:27 70 [async/mgr]
root 0 0 00:00:00 551-01:35:27 71 [pm]
root 0 0 00:06:02 551-01:35:27 72 [sync_supers]
root 0 0 00:00:15 551-01:35:27 73 [bdi-default]
root 0 0 00:00:00 551-01:35:27 74 [kintegrityd/0]
root 0 0 00:00:00 551-01:35:27 75 [kintegrityd/1]
root 0 0 00:00:00 551-01:35:27 76 [kintegrityd/2]
root 0 0 00:00:00 551-01:35:27 77 [kintegrityd/3]
root 0 0 00:00:00 551-01:35:27 78 [kintegrityd/4]
root 0 0 00:00:00 551-01:35:27 79 [kintegrityd/5]
root 0 0 00:00:00 551-01:35:27 80 [kintegrityd/6]
root 0 0 00:00:00 551-01:35:27 81 [kintegrityd/7]
root 0 0 07:03:34 551-01:35:27 82 [kblockd/0]
root 0 0 00:12:41 551-01:35:27 83 [kblockd/1]
root 0 0 00:23:48 551-01:35:27 84 [kblockd/2]
root 0 0 00:04:52 551-01:35:27 85 [kblockd/3]
root 0 0 12:40:13 551-01:35:27 86 [kblockd/4]
root 0 0 00:15:09 551-01:35:27 87 [kblockd/5]
root 0 0 00:09:53 551-01:35:27 88 [kblockd/6]
root 0 0 00:07:36 551-01:35:27 89 [kblockd/7]
root 0 0 00:00:00 551-01:35:27 90 [kacpid]
root 0 0 00:00:00 551-01:35:27 91 [kacpi_notify]
root 0 0 00:00:00 551-01:35:27 92 [kacpi_hotplug]
root 0 0 00:00:00 551-01:35:27 93 [ata_aux]
root 0 0 00:00:00 551-01:35:27 94 [ata_sff/0]
root 0 0 00:00:00 551-01:35:27 95 [ata_sff/1]
root 0 0 00:00:00 551-01:35:27 96 [ata_sff/2]
root 0 0 00:00:00 551-01:35:27 97 [ata_sff/3]
root 0 0 00:00:00 551-01:35:27 98 [ata_sff/4]
root 0 0 00:00:00 551-01:35:27 99 [ata_sff/5]
root 0 0 00:00:00 551-01:35:27 100 [ata_sff/6]
root 0 0 00:00:00 551-01:35:27 101 [ata_sff/7]
root 0 0 00:00:00 551-01:35:27 102 [ksuspend_usbd]
root 0 0 00:00:00 551-01:35:27 103 [khubd]
root 0 0 00:00:00 551-01:35:27 104 [kseriod]
root 0 0 00:00:00 551-01:35:27 105 [md/0]
root 0 0 00:00:00 551-01:35:27 106 [md/1]
root 0 0 00:00:00 551-01:35:27 107 [md/2]
root 0 0 00:00:00 551-01:35:27 108 [md/3]
root 0 0 00:00:00 551-01:35:27 109 [md/4]
root 0 0 00:00:00 551-01:35:27 110 [md/5]
root 0 0 00:00:00 551-01:35:27 111 [md/6]
root 0 0 00:00:00 551-01:35:27 112 [md/7]
root 0 0 00:00:00 551-01:35:27 113 [md_misc/0]
root 0 0 00:00:00 551-01:35:27 114 [md_misc/1]
root 0 0 00:00:00 551-01:35:27 115 [md_misc/2]
root 0 0 00:00:00 551-01:35:27 116 [md_misc/3]
root 0 0 00:00:00 551-01:35:27 117 [md_misc/4]
root 0 0 00:00:00 551-01:35:27 118 [md_misc/5]
root 0 0 00:00:00 551-01:35:27 119 [md_misc/6]
root 0 0 00:00:00 551-01:35:27 120 [md_misc/7]
root 0 0 00:00:00 551-01:35:27 121 [linkwatch]
root 0 0 00:01:12 551-01:35:26 124 [khungtaskd]
root 0 0 1-04:12:30 551-01:35:26 125 [kswapd1]
root 0 0 00:00:00 551-01:35:26 126 [ksmd]
root 0 0 04:07:32 551-01:35:26 127 [khugepaged]
root 0 0 00:00:00 551-01:35:26 128 [aio/0]
root 0 0 00:00:00 551-01:35:26 129 [aio/1]
root 0 0 00:00:00 551-01:35:26 130 [aio/2]
root 0 0 00:00:00 551-01:35:26 131 [aio/3]
root 0 0 00:00:00 551-01:35:26 132 [aio/4]
root 0 0 00:00:00 551-01:35:26 133 [aio/5]
root 0 0 00:00:00 551-01:35:26 134 [aio/6]
root 0 0 00:00:00 551-01:35:26 135 [aio/7]
root 0 0 00:00:00 551-01:35:26 136 [crypto/0]
root 0 0 00:00:00 551-01:35:26 137 [crypto/1]
root 0 0 00:00:00 551-01:35:26 138 [crypto/2]
root 0 0 00:00:00 551-01:35:26 139 [crypto/3]
root 0 0 00:00:00 551-01:35:26 140 [crypto/4]
root 0 0 00:00:00 551-01:35:26 141 [crypto/5]
root 0 0 00:00:00 551-01:35:26 142 [crypto/6]
root 0 0 00:00:00 551-01:35:26 143 [crypto/7]
root 0 0 00:00:00 551-01:35:26 150 [kthrotld/0]
root 0 0 00:00:00 551-01:35:26 151 [kthrotld/1]
root 0 0 00:00:00 551-01:35:26 152 [kthrotld/2]
root 0 0 00:00:00 551-01:35:26 153 [kthrotld/3]
root 0 0 00:00:00 551-01:35:26 154 [kthrotld/4]
root 0 0 00:00:00 551-01:35:26 155 [kthrotld/5]
root 0 0 00:00:00 551-01:35:26 156 [kthrotld/6]
root 0 0 00:00:00 551-01:35:26 157 [kthrotld/7]
root 0 0 00:00:00 551-01:35:26 160 [kpsmoused]
root 0 0 00:00:00 551-01:35:26 161 [usbhid_resumer]
root 0 0 00:00:00 551-01:35:26 162 [deferwq]
root 0 0 00:00:00 551-01:35:26 194 [kdmremove]
root 0 0 00:00:00 551-01:35:26 195 [kstriped]
root 0 0 00:00:00 551-01:35:24 734 [scsi_eh_0]
root 0 0 00:00:00 551-01:35:24 735 [scsi_wq_0]
root 0 0 00:00:00 551-01:35:24 748 [scsi_eh_1]
root 0 0 00:00:00 551-01:35:24 749 [scsi_eh_2]
root 0 0 00:00:00 551-01:35:24 750 [scsi_eh_3]
root 0 0 00:00:00 551-01:35:24 751 [scsi_eh_4]
root 0 0 00:00:00 551-01:35:24 752 [scsi_eh_5]
root 0 0 00:00:00 551-01:35:24 753 [scsi_eh_6]
root 0 0 00:58:46 551-01:35:23 950 [md1_raid1]
root 0 0 00:03:35 551-01:35:22 1011 [jbd2/md1-8]
root 0 0 00:00:00 551-01:35:22 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 551-01:35:21 1105 /sbin/udevd -d
root 0 0 00:38:18 551-01:35:21 1225 [edac-poller]
root 0 0 00:11:06 551-01:35:20 1259 [md0_raid1]
root 0 0 03:09:59 551-01:35:20 1288 [md3_raid1]
root 0 0 2-19:30:26 551-01:35:20 1310 [md5_raid1]
root 0 0 01:10:52 551-01:35:20 1322 [md4_raid1]
root 0 0 00:33:16 551-01:35:20 1336 [md2_raid1]
root 0 0 00:19:16 551-01:35:18 1844 [flush-9:3]
root 0 0 00:00:00 551-01:35:18 1881 [jbd2/md0-8]
root 0 0 00:00:00 551-01:35:18 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 551-01:35:18 1885 [xfs_mru_cache]
root 0 0 01:40:25 551-01:35:18 1886 [xfslogd/0]
root 0 0 00:00:00 551-01:35:18 1887 [xfslogd/1]
root 0 0 00:03:32 551-01:35:18 1888 [xfslogd/2]
root 0 0 00:00:00 551-01:35:18 1889 [xfslogd/3]
root 0 0 03:09:04 551-01:35:18 1890 [xfslogd/4]
root 0 0 00:00:00 551-01:35:18 1891 [xfslogd/5]
root 0 0 00:00:00 551-01:35:18 1892 [xfslogd/6]
root 0 0 00:00:00 551-01:35:18 1893 [xfslogd/7]
root 0 0 03:05:39 551-01:35:18 1894 [xfsdatad/0]
root 0 0 00:00:00 551-01:35:18 1895 [xfsdatad/1]
root 0 0 00:02:18 551-01:35:18 1896 [xfsdatad/2]
root 0 0 00:00:00 551-01:35:18 1897 [xfsdatad/3]
root 0 0 03:27:40 551-01:35:18 1898 [xfsdatad/4]
root 0 0 00:00:00 551-01:35:18 1899 [xfsdatad/5]
root 0 0 00:00:00 551-01:35:18 1900 [xfsdatad/6]
root 0 0 00:00:00 551-01:35:18 1901 [xfsdatad/7]
root 0 0 00:00:00 551-01:35:18 1902 [xfsconvertd/0]
root 0 0 00:00:00 551-01:35:18 1903 [xfsconvertd/1]
root 0 0 00:00:00 551-01:35:18 1904 [xfsconvertd/2]
root 0 0 00:00:00 551-01:35:18 1905 [xfsconvertd/3]
root 0 0 00:00:00 551-01:35:18 1906 [xfsconvertd/4]
root 0 0 00:00:00 551-01:35:18 1907 [xfsconvertd/5]
root 0 0 00:00:00 551-01:35:18 1908 [xfsconvertd/6]
root 0 0 00:00:00 551-01:35:18 1909 [xfsconvertd/7]
root 0 0 00:00:02 551-01:35:18 1910 [xfsalloc/0]
root 0 0 00:00:02 551-01:35:18 1911 [xfsalloc/1]
root 0 0 00:00:03 551-01:35:18 1912 [xfsalloc/2]
root 0 0 00:00:04 551-01:35:18 1913 [xfsalloc/3]
root 0 0 00:00:02 551-01:35:18 1914 [xfsalloc/4]
root 0 0 00:00:03 551-01:35:18 1915 [xfsalloc/5]
root 0 0 00:00:03 551-01:35:18 1916 [xfsalloc/6]
root 0 0 00:00:05 551-01:35:18 1917 [xfsalloc/7]
root 0 0 00:00:11 551-01:35:18 1918 [xfseofblocks/0]
root 0 0 00:00:07 551-01:35:18 1919 [xfseofblocks/1]
root 0 0 00:00:09 551-01:35:18 1920 [xfseofblocks/2]
root 0 0 00:00:12 551-01:35:18 1921 [xfseofblocks/3]
root 0 0 00:00:09 551-01:35:18 1922 [xfseofblocks/4]
root 0 0 00:00:10 551-01:35:18 1923 [xfseofblocks/5]
root 0 0 00:00:04 551-01:35:18 1924 [xfseofblocks/6]
root 0 0 00:02:54 551-01:35:18 1925 [xfseofblocks/7]
root 0 0 00:32:56 551-01:35:18 1926 [xfsbufd/md5]
root 0 0 00:29:53 551-01:35:18 1927 [xfs-cil/md5]
root 0 0 00:59:01 551-01:35:18 1928 [xfssyncd/md5]
root 0 0 07:18:22 551-01:35:18 1929 [xfsaild/md5]
root 0 0 00:03:49 551-01:35:17 1930 [jbd2/md2-8]
root 0 0 00:00:00 551-01:35:17 1931 [ext4-dio-unwrit]
root 0 0 00:09:01 551-01:35:17 1932 [xfsbufd/md4]
root 0 0 00:00:52 551-01:35:17 1933 [xfs-cil/md4]
root 0 0 00:03:55 551-01:35:17 1934 [xfssyncd/md4]
root 0 0 06:57:16 551-01:35:17 1935 [xfsaild/md4]
root 0 0 00:29:15 551-01:35:17 1936 [xfsbufd/md3]
root 0 0 00:37:16 551-01:35:17 1937 [xfs-cil/md3]
root 0 0 00:05:09 551-01:35:17 1938 [xfssyncd/md3]
root 0 0 07:09:20 551-01:35:17 1939 [xfsaild/md3]
root 0 0 00:39:03 551-01:35:17 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 551-01:35:17 1941 [xfs-cil/sdc1]
root 0 0 12:22:50 551-01:35:17 1942 [xfssyncd/sdc1]
root 0 0 1-08:57:47 551-01:35:17 1943 [xfsaild/sdc1]
root 0 0 00:06:38 551-01:35:16 1999 [kauditd]
root 29764 704 00:16:13 551-01:34:59 2254 auditd
root 252156 31244 03:34:58 551-01:34:58 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:59:56 551-01:34:58 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:39 551-01:34:57 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 551-01:34:57 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:47:53 551-01:34:57 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:30 551-01:34:56 2492 /usr/sbin/sshd
root 71720 2016 00:34:11 551-01:34:51 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:34:01 551-01:34:51 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:55 551-01:34:51 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:23 551-01:34:51 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:18 551-01:34:51 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:59 551-01:34:40 3359 crond
root 107544 436 00:00:28 551-01:34:38 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 551-01:34:33 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 551-01:34:33 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 551-01:34:33 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 551-01:34:33 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 551-01:34:33 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 551-01:34:33 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 551-01:34:33 3491 /sbin/udevd -d
root 11232 260 00:00:00 551-01:34:33 3492 /sbin/udevd -d
root 163092 1204 00:00:44 535-22:59:46 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 796 00:00:00 20:24:19 26975 /usr/sbin/dovecot
dovecot 12980 1088 00:00:00 20:24:19 26977 dovecot/anvil
root 13108 1192 00:00:00 20:24:19 26978 dovecot/log
root 118780 560 00:00:00 149-12:45:17 43438 SCREEN -O
root 108452 1384 00:00:00 149-12:45:17 43439 /bin/bash
root 108452 1384 00:00:00 149-12:44:14 43486 /bin/bash
root 266560 74724 00:00:20 18:37:33 44305 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 109064 844 00:00:00 21-23:01:58 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:02 21-23:01:57 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 33-22:59:03 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:41 550-23:12:57 57735 [flush-9:2]
root 0 0 00:02:24 550-22:38:01 68416 [flush-9:1]
root 63348 3996 00:24:37 449-04:48:21 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 449-04:27:47 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1557432 975-18:31:54 449-04:27:46 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 103776 5020 00:00:00 09:41:19 128778 sshd: root@pts/0 
root 108448 1956 00:00:00 09:41:18 128780 -bash
root 21712 764 00:00:23 148-22:57:04 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:07:10 77-13:20:06 181185 [flush-9:5]
root 0 0 00:00:30 13-22:20:39 181517 [flush-8:32]
root 567912 35728 00:25:29 77-13:11:33 182912 /usr/sbin/httpd -DSSL
root 268868 76516 00:00:14 03:11:13 190281 spamd child
root 267960 75648 00:00:00 01:49:10 203181 spamd child
apache 619776 127128 00:01:05 22:01 216075 /usr/sbin/httpd -DSSL
apache 618848 125836 00:00:58 21:58 216087 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 19:02 216520 [flush-9:4]
apache 607024 114840 00:01:01 18:53 216521 /usr/sbin/httpd -DSSL
apache 612128 107008 00:00:59 18:42 216525 /usr/sbin/httpd -DSSL
apache 663804 172620 00:01:06 15:59 217074 /usr/sbin/httpd -DSSL
apache 631784 132124 00:00:54 15:58 217076 /usr/sbin/httpd -DSSL
apache 607872 105924 00:00:56 14:35 217229 /usr/sbin/httpd -DSSL
apache 617692 122260 00:00:46 13:59 217233 /usr/sbin/httpd -DSSL
root 96984 5828 00:00:00 13:15 217236 sendmail: ./4AFIngTp183053 mail.vglb.com.: user open
apache 602236 109604 00:00:42 12:19 217611 /usr/sbin/httpd -DSSL
root 97448 6148 00:00:00 12:15 217612 sendmail: ./4ACCjgtP196755 mail.idealogeek.fr.: user open
root 96780 5464 00:00:00 10:15 217885 sendmail: ./4AF6A5u2063709 mx.dnsassurance.com.: user open
apache 593260 99364 00:00:36 09:54 218123 /usr/sbin/httpd -DSSL
apache 661176 155268 00:00:31 09:53 218124 /usr/sbin/httpd -DSSL
root 96780 5456 00:00:00 08:15 218131 sendmail: ./4AF727QE073058 mail.msn.fr.: user open
apache 660952 154352 00:00:20 07:55 218202 /usr/sbin/httpd -DSSL
apache 616384 114136 00:00:23 07:17 218204 /usr/sbin/httpd -DSSL
root 96780 5464 00:00:00 07:15 218205 sendmail: ./4AF6E8YJ064320 mail.telmedia.fr.: user open
apache 675400 170044 00:00:14 07:13 218208 /usr/sbin/httpd -DSSL
apache 596604 68368 00:00:15 06:19 218415 /usr/sbin/httpd -DSSL
root 96784 5456 00:00:00 06:15 218416 sendmail: ./4AF5mJWE060230 mail1.klgates.com.: user open
apache 588836 79572 00:00:13 06:11 218417 /usr/sbin/httpd -DSSL
apache 602692 86556 00:00:15 06:10 218418 /usr/sbin/httpd -DSSL
apache 631000 122880 00:00:19 06:10 218419 /usr/sbin/httpd -DSSL
apache 589496 84968 00:00:12 05:43 218578 /usr/sbin/httpd -DSSL
apache 590720 84172 00:00:16 05:23 218580 /usr/sbin/httpd -DSSL
root 96784 5420 00:00:00 05:15 218722 sendmail: ./4AFKlG7q202277 mx2.mediageneral.net.: user open
apache 617172 100744 00:00:09 04:26 218727 /usr/sbin/httpd -DSSL
root 96784 5456 00:00:00 04:15 218729 sendmail: ./4AFGuU2C164966 mx.videotron.ca.: client EHLO
root 96784 5452 00:00:00 03:15 218903 sendmail: ./4AFJg1ZI192029 mail.fs-gm.com.: user open
apache 594676 78764 00:00:09 03:01 219266 /usr/sbin/httpd -DSSL
apache 593972 89020 00:00:11 03:00 219268 /usr/sbin/httpd -DSSL
root 96784 5452 00:00:00 02:15 219270 sendmail: ./4AFJnFWw193445 smtpin2.three.com.au.: user open
root 96784 5416 00:00:00 01:15 219275 sendmail: ./4AFKiGdt201809 lxmailsj1.packeteer.com.: user open
root 96784 5412 00:00:00 00:15 219790 sendmail: ./4AFLl9UU210786 mta7.am0.yahoodns.net.: client EHLO
apache 568168 24040 00:00:00 00:03 219794 /usr/sbin/httpd -DSSL
apache 568168 23112 00:00:00 00:02 219795 /usr/sbin/httpd -DSSL
apache 567976 25028 00:00:00 00:02 219796 /usr/sbin/httpd -DSSL
root 110772 2076 00:00:00 00:01 219908 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 219934 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 219935 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 219937 cat
root 110900 1176 00:00:00 00:01 219962 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 219963 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 219964 tr -s 
root 154784 45448 00:00:41 444-22:59:52 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:57 487-13:42:02 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:05:16 487-13:42:02 238030 sendmail: accepting connections
named 739840 58436 03:55:39 487-13:41:47 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-15 22:43

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4c3bf3a9e

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1731536123
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:59 549-01:07:43 1 /sbin/init
root 0 0 00:00:02 549-01:07:43 2 [kthreadd]
root 0 0 23:48:36 549-01:07:43 3 [migration/0]
root 0 0 01:08:04 549-01:07:43 4 [ksoftirqd/0]
root 0 0 00:00:00 549-01:07:43 5 [stopper/0]
root 0 0 00:17:57 549-01:07:43 6 [watchdog/0]
root 0 0 09:55:34 549-01:07:43 7 [migration/1]
root 0 0 00:00:00 549-01:07:43 8 [stopper/1]
root 0 0 01:44:13 549-01:07:43 9 [ksoftirqd/1]
root 0 0 00:22:23 549-01:07:43 10 [watchdog/1]
root 0 0 06:30:22 549-01:07:43 11 [migration/2]
root 0 0 00:00:00 549-01:07:43 12 [stopper/2]
root 0 0 00:53:02 549-01:07:43 13 [ksoftirqd/2]
root 0 0 00:20:03 549-01:07:43 14 [watchdog/2]
root 0 0 04:39:17 549-01:07:43 15 [migration/3]
root 0 0 00:00:00 549-01:07:43 16 [stopper/3]
root 0 0 00:38:59 549-01:07:43 17 [ksoftirqd/3]
root 0 0 00:15:49 549-01:07:43 18 [watchdog/3]
root 0 0 16:49:56 549-01:07:43 19 [migration/4]
root 0 0 00:00:00 549-01:07:43 20 [stopper/4]
root 0 0 00:58:25 549-01:07:43 21 [ksoftirqd/4]
root 0 0 00:09:13 549-01:07:43 22 [watchdog/4]
root 0 0 09:07:06 549-01:07:43 23 [migration/5]
root 0 0 00:00:00 549-01:07:43 24 [stopper/5]
root 0 0 00:40:36 549-01:07:43 25 [ksoftirqd/5]
root 0 0 00:19:21 549-01:07:43 26 [watchdog/5]
root 0 0 05:29:42 549-01:07:43 27 [migration/6]
root 0 0 00:00:00 549-01:07:43 28 [stopper/6]
root 0 0 00:31:26 549-01:07:43 29 [ksoftirqd/6]
root 0 0 00:14:50 549-01:07:43 30 [watchdog/6]
root 0 0 04:21:21 549-01:07:43 31 [migration/7]
root 0 0 00:00:00 549-01:07:43 32 [stopper/7]
root 0 0 00:31:06 549-01:07:43 33 [ksoftirqd/7]
root 0 0 00:12:05 549-01:07:43 34 [watchdog/7]
root 0 0 02:39:23 549-01:07:43 35 [events/0]
root 0 0 01:44:13 549-01:07:43 36 [events/1]
root 0 0 01:47:01 549-01:07:43 37 [events/2]
root 0 0 01:50:13 549-01:07:43 38 [events/3]
root 0 0 01:30:27 549-01:07:43 39 [events/4]
root 0 0 01:25:44 549-01:07:43 40 [events/5]
root 0 0 01:33:08 549-01:07:43 41 [events/6]
root 0 0 01:37:23 549-01:07:43 42 [events/7]
root 0 0 00:00:00 549-01:07:43 43 [events/0]
root 0 0 00:00:00 549-01:07:43 44 [events/1]
root 0 0 00:00:00 549-01:07:43 45 [events/2]
root 0 0 00:00:00 549-01:07:43 46 [events/3]
root 0 0 00:00:00 549-01:07:43 47 [events/4]
root 0 0 00:00:00 549-01:07:43 48 [events/5]
root 0 0 00:00:00 549-01:07:43 49 [events/6]
root 0 0 00:00:00 549-01:07:43 50 [events/7]
root 0 0 00:00:00 549-01:07:43 51 [events_long/0]
root 0 0 00:00:00 549-01:07:43 52 [events_long/1]
root 0 0 00:00:00 549-01:07:43 53 [events_long/2]
root 0 0 00:00:00 549-01:07:43 54 [events_long/3]
root 0 0 00:00:00 549-01:07:43 55 [events_long/4]
root 0 0 00:00:00 549-01:07:43 56 [events_long/5]
root 0 0 00:00:00 549-01:07:43 57 [events_long/6]
root 0 0 00:00:00 549-01:07:43 58 [events_long/7]
root 0 0 00:00:00 549-01:07:43 59 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 60 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 61 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 62 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 63 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 64 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 65 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 66 [events_power_ef]
root 0 0 00:00:00 549-01:07:43 67 [cgroup]
root 0 0 00:00:00 549-01:07:43 68 [khelper]
root 0 0 00:00:00 549-01:07:43 69 [netns]
root 0 0 00:00:00 549-01:07:43 70 [async/mgr]
root 0 0 00:00:00 549-01:07:43 71 [pm]
root 0 0 00:05:59 549-01:07:43 72 [sync_supers]
root 0 0 00:00:15 549-01:07:43 73 [bdi-default]
root 0 0 00:00:00 549-01:07:43 74 [kintegrityd/0]
root 0 0 00:00:00 549-01:07:43 75 [kintegrityd/1]
root 0 0 00:00:00 549-01:07:43 76 [kintegrityd/2]
root 0 0 00:00:00 549-01:07:43 77 [kintegrityd/3]
root 0 0 00:00:00 549-01:07:43 78 [kintegrityd/4]
root 0 0 00:00:00 549-01:07:43 79 [kintegrityd/5]
root 0 0 00:00:00 549-01:07:43 80 [kintegrityd/6]
root 0 0 00:00:00 549-01:07:43 81 [kintegrityd/7]
root 0 0 07:01:46 549-01:07:43 82 [kblockd/0]
root 0 0 00:12:40 549-01:07:43 83 [kblockd/1]
root 0 0 00:23:47 549-01:07:43 84 [kblockd/2]
root 0 0 00:04:52 549-01:07:43 85 [kblockd/3]
root 0 0 12:35:38 549-01:07:43 86 [kblockd/4]
root 0 0 00:15:07 549-01:07:43 87 [kblockd/5]
root 0 0 00:09:53 549-01:07:43 88 [kblockd/6]
root 0 0 00:07:36 549-01:07:43 89 [kblockd/7]
root 0 0 00:00:00 549-01:07:43 90 [kacpid]
root 0 0 00:00:00 549-01:07:43 91 [kacpi_notify]
root 0 0 00:00:00 549-01:07:43 92 [kacpi_hotplug]
root 0 0 00:00:00 549-01:07:43 93 [ata_aux]
root 0 0 00:00:00 549-01:07:43 94 [ata_sff/0]
root 0 0 00:00:00 549-01:07:43 95 [ata_sff/1]
root 0 0 00:00:00 549-01:07:43 96 [ata_sff/2]
root 0 0 00:00:00 549-01:07:43 97 [ata_sff/3]
root 0 0 00:00:00 549-01:07:43 98 [ata_sff/4]
root 0 0 00:00:00 549-01:07:43 99 [ata_sff/5]
root 0 0 00:00:00 549-01:07:43 100 [ata_sff/6]
root 0 0 00:00:00 549-01:07:43 101 [ata_sff/7]
root 0 0 00:00:00 549-01:07:43 102 [ksuspend_usbd]
root 0 0 00:00:00 549-01:07:43 103 [khubd]
root 0 0 00:00:00 549-01:07:43 104 [kseriod]
root 0 0 00:00:00 549-01:07:43 105 [md/0]
root 0 0 00:00:00 549-01:07:43 106 [md/1]
root 0 0 00:00:00 549-01:07:43 107 [md/2]
root 0 0 00:00:00 549-01:07:43 108 [md/3]
root 0 0 00:00:00 549-01:07:43 109 [md/4]
root 0 0 00:00:00 549-01:07:43 110 [md/5]
root 0 0 00:00:00 549-01:07:43 111 [md/6]
root 0 0 00:00:00 549-01:07:43 112 [md/7]
root 0 0 00:00:00 549-01:07:43 113 [md_misc/0]
root 0 0 00:00:00 549-01:07:43 114 [md_misc/1]
root 0 0 00:00:00 549-01:07:43 115 [md_misc/2]
root 0 0 00:00:00 549-01:07:43 116 [md_misc/3]
root 0 0 00:00:00 549-01:07:43 117 [md_misc/4]
root 0 0 00:00:00 549-01:07:43 118 [md_misc/5]
root 0 0 00:00:00 549-01:07:43 119 [md_misc/6]
root 0 0 00:00:00 549-01:07:43 120 [md_misc/7]
root 0 0 00:00:00 549-01:07:43 121 [linkwatch]
root 0 0 00:01:12 549-01:07:42 124 [khungtaskd]
root 0 0 1-04:08:26 549-01:07:42 125 [kswapd1]
root 0 0 00:00:00 549-01:07:42 126 [ksmd]
root 0 0 04:06:05 549-01:07:42 127 [khugepaged]
root 0 0 00:00:00 549-01:07:42 128 [aio/0]
root 0 0 00:00:00 549-01:07:42 129 [aio/1]
root 0 0 00:00:00 549-01:07:42 130 [aio/2]
root 0 0 00:00:00 549-01:07:42 131 [aio/3]
root 0 0 00:00:00 549-01:07:42 132 [aio/4]
root 0 0 00:00:00 549-01:07:42 133 [aio/5]
root 0 0 00:00:00 549-01:07:42 134 [aio/6]
root 0 0 00:00:00 549-01:07:42 135 [aio/7]
root 0 0 00:00:00 549-01:07:42 136 [crypto/0]
root 0 0 00:00:00 549-01:07:42 137 [crypto/1]
root 0 0 00:00:00 549-01:07:42 138 [crypto/2]
root 0 0 00:00:00 549-01:07:42 139 [crypto/3]
root 0 0 00:00:00 549-01:07:42 140 [crypto/4]
root 0 0 00:00:00 549-01:07:42 141 [crypto/5]
root 0 0 00:00:00 549-01:07:42 142 [crypto/6]
root 0 0 00:00:00 549-01:07:42 143 [crypto/7]
root 0 0 00:00:00 549-01:07:42 150 [kthrotld/0]
root 0 0 00:00:00 549-01:07:42 151 [kthrotld/1]
root 0 0 00:00:00 549-01:07:42 152 [kthrotld/2]
root 0 0 00:00:00 549-01:07:42 153 [kthrotld/3]
root 0 0 00:00:00 549-01:07:42 154 [kthrotld/4]
root 0 0 00:00:00 549-01:07:42 155 [kthrotld/5]
root 0 0 00:00:00 549-01:07:42 156 [kthrotld/6]
root 0 0 00:00:00 549-01:07:42 157 [kthrotld/7]
root 0 0 00:00:00 549-01:07:42 160 [kpsmoused]
root 0 0 00:00:00 549-01:07:42 161 [usbhid_resumer]
root 0 0 00:00:00 549-01:07:42 162 [deferwq]
root 0 0 00:00:00 549-01:07:42 194 [kdmremove]
root 0 0 00:00:00 549-01:07:42 195 [kstriped]
root 95868 3128 00:00:00 49:25 350 sendmail: server vipturbo.com.br [191.36.149.57] (may be forged) cmd read
root 0 0 00:00:00 549-01:07:40 734 [scsi_eh_0]
root 0 0 00:00:00 549-01:07:40 735 [scsi_wq_0]
root 0 0 00:00:00 549-01:07:40 748 [scsi_eh_1]
root 0 0 00:00:00 549-01:07:40 749 [scsi_eh_2]
root 0 0 00:00:00 549-01:07:40 750 [scsi_eh_3]
root 0 0 00:00:00 549-01:07:40 751 [scsi_eh_4]
root 0 0 00:00:00 549-01:07:40 752 [scsi_eh_5]
root 0 0 00:00:00 549-01:07:40 753 [scsi_eh_6]
root 0 0 00:58:43 549-01:07:39 950 [md1_raid1]
root 0 0 00:03:34 549-01:07:38 1011 [jbd2/md1-8]
root 0 0 00:00:00 549-01:07:38 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 549-01:07:37 1105 /sbin/udevd -d
root 0 0 00:38:05 549-01:07:37 1225 [edac-poller]
root 0 0 00:11:06 549-01:07:36 1259 [md0_raid1]
root 0 0 03:07:17 549-01:07:36 1288 [md3_raid1]
root 0 0 2-19:21:36 549-01:07:36 1310 [md5_raid1]
root 0 0 01:10:45 549-01:07:36 1322 [md4_raid1]
root 0 0 00:33:13 549-01:07:36 1336 [md2_raid1]
root 0 0 00:19:11 549-01:07:34 1844 [flush-9:3]
root 0 0 00:00:00 549-01:07:34 1881 [jbd2/md0-8]
root 0 0 00:00:00 549-01:07:34 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 549-01:07:34 1885 [xfs_mru_cache]
root 0 0 01:40:23 549-01:07:34 1886 [xfslogd/0]
root 0 0 00:00:00 549-01:07:34 1887 [xfslogd/1]
root 0 0 00:03:32 549-01:07:34 1888 [xfslogd/2]
root 0 0 00:00:00 549-01:07:34 1889 [xfslogd/3]
root 0 0 03:07:50 549-01:07:34 1890 [xfslogd/4]
root 0 0 00:00:00 549-01:07:34 1891 [xfslogd/5]
root 0 0 00:00:00 549-01:07:34 1892 [xfslogd/6]
root 0 0 00:00:00 549-01:07:34 1893 [xfslogd/7]
root 0 0 03:05:32 549-01:07:34 1894 [xfsdatad/0]
root 0 0 00:00:00 549-01:07:34 1895 [xfsdatad/1]
root 0 0 00:02:18 549-01:07:34 1896 [xfsdatad/2]
root 0 0 00:00:00 549-01:07:34 1897 [xfsdatad/3]
root 0 0 03:27:20 549-01:07:34 1898 [xfsdatad/4]
root 0 0 00:00:00 549-01:07:34 1899 [xfsdatad/5]
root 0 0 00:00:00 549-01:07:34 1900 [xfsdatad/6]
root 0 0 00:00:00 549-01:07:34 1901 [xfsdatad/7]
root 0 0 00:00:00 549-01:07:34 1902 [xfsconvertd/0]
root 0 0 00:00:00 549-01:07:34 1903 [xfsconvertd/1]
root 0 0 00:00:00 549-01:07:34 1904 [xfsconvertd/2]
root 0 0 00:00:00 549-01:07:34 1905 [xfsconvertd/3]
root 0 0 00:00:00 549-01:07:34 1906 [xfsconvertd/4]
root 0 0 00:00:00 549-01:07:34 1907 [xfsconvertd/5]
root 0 0 00:00:00 549-01:07:34 1908 [xfsconvertd/6]
root 0 0 00:00:00 549-01:07:34 1909 [xfsconvertd/7]
root 0 0 00:00:02 549-01:07:34 1910 [xfsalloc/0]
root 0 0 00:00:02 549-01:07:34 1911 [xfsalloc/1]
root 0 0 00:00:03 549-01:07:34 1912 [xfsalloc/2]
root 0 0 00:00:04 549-01:07:34 1913 [xfsalloc/3]
root 0 0 00:00:02 549-01:07:34 1914 [xfsalloc/4]
root 0 0 00:00:03 549-01:07:34 1915 [xfsalloc/5]
root 0 0 00:00:03 549-01:07:34 1916 [xfsalloc/6]
root 0 0 00:00:05 549-01:07:34 1917 [xfsalloc/7]
root 0 0 00:00:11 549-01:07:34 1918 [xfseofblocks/0]
root 0 0 00:00:07 549-01:07:34 1919 [xfseofblocks/1]
root 0 0 00:00:09 549-01:07:34 1920 [xfseofblocks/2]
root 0 0 00:00:12 549-01:07:34 1921 [xfseofblocks/3]
root 0 0 00:00:09 549-01:07:34 1922 [xfseofblocks/4]
root 0 0 00:00:10 549-01:07:34 1923 [xfseofblocks/5]
root 0 0 00:00:04 549-01:07:34 1924 [xfseofblocks/6]
root 0 0 00:02:53 549-01:07:34 1925 [xfseofblocks/7]
root 0 0 00:32:48 549-01:07:34 1926 [xfsbufd/md5]
root 0 0 00:29:45 549-01:07:34 1927 [xfs-cil/md5]
root 0 0 00:58:51 549-01:07:34 1928 [xfssyncd/md5]
root 0 0 07:15:43 549-01:07:34 1929 [xfsaild/md5]
root 0 0 00:03:48 549-01:07:33 1930 [jbd2/md2-8]
root 0 0 00:00:00 549-01:07:33 1931 [ext4-dio-unwrit]
root 0 0 00:08:58 549-01:07:33 1932 [xfsbufd/md4]
root 0 0 00:00:52 549-01:07:33 1933 [xfs-cil/md4]
root 0 0 00:03:54 549-01:07:33 1934 [xfssyncd/md4]
root 0 0 06:54:43 549-01:07:33 1935 [xfsaild/md4]
root 0 0 00:29:00 549-01:07:33 1936 [xfsbufd/md3]
root 0 0 00:36:05 549-01:07:33 1937 [xfs-cil/md3]
root 0 0 00:05:07 549-01:07:33 1938 [xfssyncd/md3]
root 0 0 07:06:36 549-01:07:33 1939 [xfsaild/md3]
root 0 0 00:39:03 549-01:07:33 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 549-01:07:33 1941 [xfs-cil/sdc1]
root 0 0 12:22:48 549-01:07:33 1942 [xfssyncd/sdc1]
root 0 0 1-08:55:17 549-01:07:33 1943 [xfsaild/sdc1]
root 0 0 00:06:37 549-01:07:32 1999 [kauditd]
root 29764 704 00:16:10 549-01:07:15 2254 auditd
root 252156 31244 03:31:38 549-01:07:14 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:59:05 549-01:07:14 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:38 549-01:07:13 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 549-01:07:13 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:47:37 549-01:07:13 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:29 549-01:07:12 2492 /usr/sbin/sshd
root 71720 2016 00:34:07 549-01:07:07 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:33:57 549-01:07:07 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:51 549-01:07:07 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:19 549-01:07:07 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:14 549-01:07:07 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:57 549-01:06:56 3359 crond
root 107544 436 00:00:28 549-01:06:54 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 549-01:06:49 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 549-01:06:49 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 549-01:06:49 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 549-01:06:49 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 549-01:06:49 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 549-01:06:49 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 549-01:06:49 3491 /sbin/udevd -d
root 11232 260 00:00:00 549-01:06:49 3492 /sbin/udevd -d
apache 589492 94328 00:00:45 17:53 5311 /usr/sbin/httpd -DSSL
apache 592148 99672 00:00:36 15:52 5480 /usr/sbin/httpd -DSSL
apache 597924 104296 00:00:36 15:19 5792 /usr/sbin/httpd -DSSL
apache 638664 142876 00:00:29 11:31 6523 /usr/sbin/httpd -DSSL
apache 623408 127708 00:00:24 11:17 6529 /usr/sbin/httpd -DSSL
apache 603760 103556 00:00:39 10:25 6532 /usr/sbin/httpd -DSSL
apache 648424 144656 00:00:16 09:26 6597 /usr/sbin/httpd -DSSL
apache 591652 95108 00:00:23 09:25 6598 /usr/sbin/httpd -DSSL
apache 590644 89268 00:00:29 09:25 6599 /usr/sbin/httpd -DSSL
apache 588468 85196 00:00:15 08:20 6809 /usr/sbin/httpd -DSSL
apache 589132 73080 00:00:15 08:17 6866 /usr/sbin/httpd -DSSL
apache 589492 81744 00:00:24 08:10 6952 /usr/sbin/httpd -DSSL
apache 627856 120820 00:00:19 08:09 6953 /usr/sbin/httpd -DSSL
apache 589740 96920 00:00:16 08:09 6954 /usr/sbin/httpd -DSSL
root 97032 6040 00:00:00 05:34 7280 sendmail: ./4ACACKs9173040 smtpz4.laposte.net.: client DATA 354
apache 587280 92612 00:00:05 04:13 7388 /usr/sbin/httpd -DSSL
root 97036 6036 00:00:00 03:34 7390 sendmail: ./4AA2JYli151497 mail.travelforce.com.au.: user open
root 40060 2036 00:00:00 03:23 7394 dovecot/ssl-params
root 97032 6088 00:00:00 02:34 7680 sendmail: ./4AA6SvZs190847 mail.travelforce.com.au.: user open
apache 587312 71252 00:00:04 02:16 7820 /usr/sbin/httpd -DSSL
apache 674100 154284 00:00:05 02:14 7821 /usr/sbin/httpd -DSSL
apache 585776 72824 00:00:05 02:13 7822 /usr/sbin/httpd -DSSL
apache 593992 75424 00:00:04 02:12 7824 /usr/sbin/httpd -DSSL
apache 601860 88440 00:00:04 02:12 7825 /usr/sbin/httpd -DSSL
apache 591196 83832 00:00:05 02:12 7826 /usr/sbin/httpd -DSSL
apache 587860 66144 00:00:03 02:12 7827 /usr/sbin/httpd -DSSL
root 97036 5964 00:00:00 01:34 7830 sendmail: ./4ACA9rvJ172625 smtpz4.laposte.net.: client RCPT
root 97032 5676 00:00:00 00:34 7864 sendmail: ./4ACCjgtP196755 mail.idealogeek.fr.: user open
root 110772 2072 00:00:00 00:01 8318 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 8340 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 8341 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 8342 cat
root 110900 1176 00:00:00 00:01 8368 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 8369 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 8370 tr -s 
root 163092 1204 00:00:44 533-22:32:02 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 147-12:17:33 43438 SCREEN -O
root 108452 1384 00:00:00 147-12:17:33 43439 /bin/bash
root 108452 1384 00:00:00 147-12:16:30 43486 /bin/bash
root 109064 844 00:00:00 19-22:34:14 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:02 19-22:34:13 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 31-22:31:19 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:40 548-22:45:13 57735 [flush-9:2]
root 0 0 00:02:24 548-22:10:17 68416 [flush-9:1]
root 19260 792 00:00:00 19:59:31 72702 /usr/sbin/dovecot
dovecot 12980 1064 00:00:00 19:59:31 72704 dovecot/anvil
root 13108 1200 00:00:00 19:59:31 72705 dovecot/log
root 63348 3996 00:24:29 447-04:20:37 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 447-04:00:03 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1557184 969-11:58:27 447-04:00:02 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 266496 74724 00:00:16 17:07:40 98055 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 21712 764 00:00:23 146-22:29:20 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:06:58 75-12:52:22 181185 [flush-9:5]
root 0 0 00:00:25 11-21:52:55 181517 [flush-8:32]
root 567912 35728 00:24:50 75-12:43:49 182912 /usr/sbin/httpd -DSSL
root 268968 76736 00:00:32 03:32:26 221290 spamd child
root 154784 45448 00:00:41 442-22:32:08 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:55 485-13:14:18 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:04:55 485-13:14:18 238030 sendmail: accepting connections
named 739840 58164 03:54:48 485-13:14:03 238586 /usr/sbin/named -u named -4
root 266496 72204 00:00:00 01:17:02 241881 spamd child
root 0 0 00:00:00 01:10:18 242904 [flush-9:4]

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-13 22:15

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e40a31543f

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1731367318
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:58 547-02:14:18 1 /sbin/init
root 0 0 00:00:01 547-02:14:18 2 [kthreadd]
root 0 0 23:41:04 547-02:14:18 3 [migration/0]
root 0 0 01:07:49 547-02:14:18 4 [ksoftirqd/0]
root 0 0 00:00:00 547-02:14:18 5 [stopper/0]
root 0 0 00:17:50 547-02:14:18 6 [watchdog/0]
root 0 0 09:53:13 547-02:14:18 7 [migration/1]
root 0 0 00:00:00 547-02:14:18 8 [stopper/1]
root 0 0 01:43:57 547-02:14:18 9 [ksoftirqd/1]
root 0 0 00:22:15 547-02:14:18 10 [watchdog/1]
root 0 0 06:28:56 547-02:14:18 11 [migration/2]
root 0 0 00:00:00 547-02:14:18 12 [stopper/2]
root 0 0 00:52:51 547-02:14:18 13 [ksoftirqd/2]
root 0 0 00:19:56 547-02:14:18 14 [watchdog/2]
root 0 0 04:38:21 547-02:14:18 15 [migration/3]
root 0 0 00:00:00 547-02:14:18 16 [stopper/3]
root 0 0 00:38:49 547-02:14:18 17 [ksoftirqd/3]
root 0 0 00:15:43 547-02:14:18 18 [watchdog/3]
root 0 0 16:44:36 547-02:14:18 19 [migration/4]
root 0 0 00:00:00 547-02:14:18 20 [stopper/4]
root 0 0 00:58:14 547-02:14:18 21 [ksoftirqd/4]
root 0 0 00:09:10 547-02:14:18 22 [watchdog/4]
root 0 0 09:05:10 547-02:14:18 23 [migration/5]
root 0 0 00:00:00 547-02:14:18 24 [stopper/5]
root 0 0 00:40:30 547-02:14:18 25 [ksoftirqd/5]
root 0 0 00:19:15 547-02:14:18 26 [watchdog/5]
root 0 0 05:28:49 547-02:14:18 27 [migration/6]
root 0 0 00:00:00 547-02:14:18 28 [stopper/6]
root 0 0 00:31:21 547-02:14:18 29 [ksoftirqd/6]
root 0 0 00:14:46 547-02:14:18 30 [watchdog/6]
root 0 0 04:20:47 547-02:14:18 31 [migration/7]
root 0 0 00:00:00 547-02:14:18 32 [stopper/7]
root 0 0 00:31:00 547-02:14:18 33 [ksoftirqd/7]
root 0 0 00:12:01 547-02:14:18 34 [watchdog/7]
root 0 0 02:38:36 547-02:14:18 35 [events/0]
root 0 0 01:43:32 547-02:14:18 36 [events/1]
root 0 0 01:46:22 547-02:14:18 37 [events/2]
root 0 0 01:49:32 547-02:14:18 38 [events/3]
root 0 0 01:30:00 547-02:14:18 39 [events/4]
root 0 0 01:25:16 547-02:14:18 40 [events/5]
root 0 0 01:32:37 547-02:14:18 41 [events/6]
root 0 0 01:36:52 547-02:14:18 42 [events/7]
root 0 0 00:00:00 547-02:14:18 43 [events/0]
root 0 0 00:00:00 547-02:14:18 44 [events/1]
root 0 0 00:00:00 547-02:14:18 45 [events/2]
root 0 0 00:00:00 547-02:14:18 46 [events/3]
root 0 0 00:00:00 547-02:14:18 47 [events/4]
root 0 0 00:00:00 547-02:14:18 48 [events/5]
root 0 0 00:00:00 547-02:14:18 49 [events/6]
root 0 0 00:00:00 547-02:14:18 50 [events/7]
root 0 0 00:00:00 547-02:14:18 51 [events_long/0]
root 0 0 00:00:00 547-02:14:18 52 [events_long/1]
root 0 0 00:00:00 547-02:14:18 53 [events_long/2]
root 0 0 00:00:00 547-02:14:18 54 [events_long/3]
root 0 0 00:00:00 547-02:14:18 55 [events_long/4]
root 0 0 00:00:00 547-02:14:18 56 [events_long/5]
root 0 0 00:00:00 547-02:14:18 57 [events_long/6]
root 0 0 00:00:00 547-02:14:18 58 [events_long/7]
root 0 0 00:00:00 547-02:14:18 59 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 60 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 61 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 62 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 63 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 64 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 65 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 66 [events_power_ef]
root 0 0 00:00:00 547-02:14:18 67 [cgroup]
root 0 0 00:00:00 547-02:14:18 68 [khelper]
root 0 0 00:00:00 547-02:14:18 69 [netns]
root 0 0 00:00:00 547-02:14:18 70 [async/mgr]
root 0 0 00:00:00 547-02:14:18 71 [pm]
root 0 0 00:05:57 547-02:14:18 72 [sync_supers]
root 0 0 00:00:15 547-02:14:18 73 [bdi-default]
root 0 0 00:00:00 547-02:14:18 74 [kintegrityd/0]
root 0 0 00:00:00 547-02:14:18 75 [kintegrityd/1]
root 0 0 00:00:00 547-02:14:18 76 [kintegrityd/2]
root 0 0 00:00:00 547-02:14:18 77 [kintegrityd/3]
root 0 0 00:00:00 547-02:14:18 78 [kintegrityd/4]
root 0 0 00:00:00 547-02:14:18 79 [kintegrityd/5]
root 0 0 00:00:00 547-02:14:18 80 [kintegrityd/6]
root 0 0 00:00:00 547-02:14:18 81 [kintegrityd/7]
root 0 0 07:00:09 547-02:14:18 82 [kblockd/0]
root 0 0 00:12:38 547-02:14:18 83 [kblockd/1]
root 0 0 00:23:47 547-02:14:18 84 [kblockd/2]
root 0 0 00:04:52 547-02:14:18 85 [kblockd/3]
root 0 0 12:31:47 547-02:14:18 86 [kblockd/4]
root 0 0 00:15:04 547-02:14:18 87 [kblockd/5]
root 0 0 00:09:52 547-02:14:18 88 [kblockd/6]
root 0 0 00:07:35 547-02:14:18 89 [kblockd/7]
root 0 0 00:00:00 547-02:14:18 90 [kacpid]
root 0 0 00:00:00 547-02:14:18 91 [kacpi_notify]
root 0 0 00:00:00 547-02:14:18 92 [kacpi_hotplug]
root 0 0 00:00:00 547-02:14:18 93 [ata_aux]
root 0 0 00:00:00 547-02:14:18 94 [ata_sff/0]
root 0 0 00:00:00 547-02:14:18 95 [ata_sff/1]
root 0 0 00:00:00 547-02:14:18 96 [ata_sff/2]
root 0 0 00:00:00 547-02:14:18 97 [ata_sff/3]
root 0 0 00:00:00 547-02:14:18 98 [ata_sff/4]
root 0 0 00:00:00 547-02:14:18 99 [ata_sff/5]
root 0 0 00:00:00 547-02:14:18 100 [ata_sff/6]
root 0 0 00:00:00 547-02:14:18 101 [ata_sff/7]
root 0 0 00:00:00 547-02:14:18 102 [ksuspend_usbd]
root 0 0 00:00:00 547-02:14:18 103 [khubd]
root 0 0 00:00:00 547-02:14:18 104 [kseriod]
root 0 0 00:00:00 547-02:14:18 105 [md/0]
root 0 0 00:00:00 547-02:14:18 106 [md/1]
root 0 0 00:00:00 547-02:14:18 107 [md/2]
root 0 0 00:00:00 547-02:14:18 108 [md/3]
root 0 0 00:00:00 547-02:14:18 109 [md/4]
root 0 0 00:00:00 547-02:14:18 110 [md/5]
root 0 0 00:00:00 547-02:14:18 111 [md/6]
root 0 0 00:00:00 547-02:14:18 112 [md/7]
root 0 0 00:00:00 547-02:14:18 113 [md_misc/0]
root 0 0 00:00:00 547-02:14:18 114 [md_misc/1]
root 0 0 00:00:00 547-02:14:18 115 [md_misc/2]
root 0 0 00:00:00 547-02:14:18 116 [md_misc/3]
root 0 0 00:00:00 547-02:14:18 117 [md_misc/4]
root 0 0 00:00:00 547-02:14:18 118 [md_misc/5]
root 0 0 00:00:00 547-02:14:18 119 [md_misc/6]
root 0 0 00:00:00 547-02:14:18 120 [md_misc/7]
root 0 0 00:00:00 547-02:14:18 121 [linkwatch]
root 0 0 00:01:12 547-02:14:17 124 [khungtaskd]
root 0 0 1-04:04:40 547-02:14:17 125 [kswapd1]
root 0 0 00:00:00 547-02:14:17 126 [ksmd]
root 0 0 04:04:38 547-02:14:17 127 [khugepaged]
root 0 0 00:00:00 547-02:14:17 128 [aio/0]
root 0 0 00:00:00 547-02:14:17 129 [aio/1]
root 0 0 00:00:00 547-02:14:17 130 [aio/2]
root 0 0 00:00:00 547-02:14:17 131 [aio/3]
root 0 0 00:00:00 547-02:14:17 132 [aio/4]
root 0 0 00:00:00 547-02:14:17 133 [aio/5]
root 0 0 00:00:00 547-02:14:17 134 [aio/6]
root 0 0 00:00:00 547-02:14:17 135 [aio/7]
root 0 0 00:00:00 547-02:14:17 136 [crypto/0]
root 0 0 00:00:00 547-02:14:17 137 [crypto/1]
root 0 0 00:00:00 547-02:14:17 138 [crypto/2]
root 0 0 00:00:00 547-02:14:17 139 [crypto/3]
root 0 0 00:00:00 547-02:14:17 140 [crypto/4]
root 0 0 00:00:00 547-02:14:17 141 [crypto/5]
root 0 0 00:00:00 547-02:14:17 142 [crypto/6]
root 0 0 00:00:00 547-02:14:17 143 [crypto/7]
root 0 0 00:00:00 547-02:14:17 150 [kthrotld/0]
root 0 0 00:00:00 547-02:14:17 151 [kthrotld/1]
root 0 0 00:00:00 547-02:14:17 152 [kthrotld/2]
root 0 0 00:00:00 547-02:14:17 153 [kthrotld/3]
root 0 0 00:00:00 547-02:14:17 154 [kthrotld/4]
root 0 0 00:00:00 547-02:14:17 155 [kthrotld/5]
root 0 0 00:00:00 547-02:14:17 156 [kthrotld/6]
root 0 0 00:00:00 547-02:14:17 157 [kthrotld/7]
root 0 0 00:00:00 547-02:14:17 160 [kpsmoused]
root 0 0 00:00:00 547-02:14:17 161 [usbhid_resumer]
root 0 0 00:00:00 547-02:14:17 162 [deferwq]
root 0 0 00:00:00 547-02:14:17 194 [kdmremove]
root 0 0 00:00:00 547-02:14:17 195 [kstriped]
root 0 0 00:00:00 547-02:14:15 734 [scsi_eh_0]
root 0 0 00:00:00 547-02:14:15 735 [scsi_wq_0]
root 0 0 00:00:00 547-02:14:15 748 [scsi_eh_1]
root 0 0 00:00:00 547-02:14:15 749 [scsi_eh_2]
root 0 0 00:00:00 547-02:14:15 750 [scsi_eh_3]
root 0 0 00:00:00 547-02:14:15 751 [scsi_eh_4]
root 0 0 00:00:00 547-02:14:15 752 [scsi_eh_5]
root 0 0 00:00:00 547-02:14:15 753 [scsi_eh_6]
root 0 0 00:58:39 547-02:14:14 950 [md1_raid1]
root 0 0 00:03:33 547-02:14:13 1011 [jbd2/md1-8]
root 0 0 00:00:00 547-02:14:13 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 547-02:14:12 1105 /sbin/udevd -d
root 0 0 00:37:53 547-02:14:12 1225 [edac-poller]
root 0 0 00:11:06 547-02:14:11 1259 [md0_raid1]
root 0 0 03:05:33 547-02:14:11 1288 [md3_raid1]
root 0 0 2-19:12:55 547-02:14:11 1310 [md5_raid1]
root 0 0 01:10:39 547-02:14:11 1322 [md4_raid1]
root 0 0 00:33:09 547-02:14:11 1336 [md2_raid1]
root 0 0 00:19:06 547-02:14:09 1844 [flush-9:3]
root 0 0 00:00:00 547-02:14:09 1881 [jbd2/md0-8]
root 0 0 00:00:00 547-02:14:09 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 547-02:14:09 1885 [xfs_mru_cache]
root 0 0 01:40:21 547-02:14:09 1886 [xfslogd/0]
root 0 0 00:00:00 547-02:14:09 1887 [xfslogd/1]
root 0 0 00:03:32 547-02:14:09 1888 [xfslogd/2]
root 0 0 00:00:00 547-02:14:09 1889 [xfslogd/3]
root 0 0 03:07:00 547-02:14:09 1890 [xfslogd/4]
root 0 0 00:00:00 547-02:14:09 1891 [xfslogd/5]
root 0 0 00:00:00 547-02:14:09 1892 [xfslogd/6]
root 0 0 00:00:00 547-02:14:09 1893 [xfslogd/7]
root 0 0 03:05:28 547-02:14:09 1894 [xfsdatad/0]
root 0 0 00:00:00 547-02:14:09 1895 [xfsdatad/1]
root 0 0 00:02:18 547-02:14:09 1896 [xfsdatad/2]
root 0 0 00:00:00 547-02:14:09 1897 [xfsdatad/3]
root 0 0 03:27:05 547-02:14:09 1898 [xfsdatad/4]
root 0 0 00:00:00 547-02:14:09 1899 [xfsdatad/5]
root 0 0 00:00:00 547-02:14:09 1900 [xfsdatad/6]
root 0 0 00:00:00 547-02:14:09 1901 [xfsdatad/7]
root 0 0 00:00:00 547-02:14:09 1902 [xfsconvertd/0]
root 0 0 00:00:00 547-02:14:09 1903 [xfsconvertd/1]
root 0 0 00:00:00 547-02:14:09 1904 [xfsconvertd/2]
root 0 0 00:00:00 547-02:14:09 1905 [xfsconvertd/3]
root 0 0 00:00:00 547-02:14:09 1906 [xfsconvertd/4]
root 0 0 00:00:00 547-02:14:09 1907 [xfsconvertd/5]
root 0 0 00:00:00 547-02:14:09 1908 [xfsconvertd/6]
root 0 0 00:00:00 547-02:14:09 1909 [xfsconvertd/7]
root 0 0 00:00:02 547-02:14:09 1910 [xfsalloc/0]
root 0 0 00:00:02 547-02:14:09 1911 [xfsalloc/1]
root 0 0 00:00:03 547-02:14:09 1912 [xfsalloc/2]
root 0 0 00:00:04 547-02:14:09 1913 [xfsalloc/3]
root 0 0 00:00:02 547-02:14:09 1914 [xfsalloc/4]
root 0 0 00:00:03 547-02:14:09 1915 [xfsalloc/5]
root 0 0 00:00:03 547-02:14:09 1916 [xfsalloc/6]
root 0 0 00:00:05 547-02:14:09 1917 [xfsalloc/7]
root 0 0 00:00:11 547-02:14:09 1918 [xfseofblocks/0]
root 0 0 00:00:07 547-02:14:09 1919 [xfseofblocks/1]
root 0 0 00:00:09 547-02:14:09 1920 [xfseofblocks/2]
root 0 0 00:00:12 547-02:14:09 1921 [xfseofblocks/3]
root 0 0 00:00:09 547-02:14:09 1922 [xfseofblocks/4]
root 0 0 00:00:10 547-02:14:09 1923 [xfseofblocks/5]
root 0 0 00:00:04 547-02:14:09 1924 [xfseofblocks/6]
root 0 0 00:02:53 547-02:14:09 1925 [xfseofblocks/7]
root 0 0 00:32:39 547-02:14:09 1926 [xfsbufd/md5]
root 0 0 00:29:37 547-02:14:09 1927 [xfs-cil/md5]
root 0 0 00:58:42 547-02:14:09 1928 [xfssyncd/md5]
root 0 0 07:13:06 547-02:14:09 1929 [xfsaild/md5]
root 0 0 00:03:47 547-02:14:08 1930 [jbd2/md2-8]
root 0 0 00:00:00 547-02:14:08 1931 [ext4-dio-unwrit]
root 0 0 00:08:55 547-02:14:08 1932 [xfsbufd/md4]
root 0 0 00:00:52 547-02:14:08 1933 [xfs-cil/md4]
root 0 0 00:03:54 547-02:14:08 1934 [xfssyncd/md4]
root 0 0 06:52:14 547-02:14:08 1935 [xfsaild/md4]
root 0 0 00:28:46 547-02:14:08 1936 [xfsbufd/md3]
root 0 0 00:35:23 547-02:14:08 1937 [xfs-cil/md3]
root 0 0 00:05:05 547-02:14:08 1938 [xfssyncd/md3]
root 0 0 07:04:03 547-02:14:08 1939 [xfsaild/md3]
root 0 0 00:39:03 547-02:14:08 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 547-02:14:08 1941 [xfs-cil/sdc1]
root 0 0 12:22:47 547-02:14:08 1942 [xfssyncd/sdc1]
root 0 0 1-08:52:53 547-02:14:08 1943 [xfsaild/sdc1]
root 0 0 00:06:35 547-02:14:07 1999 [kauditd]
root 29764 704 00:16:08 547-02:13:50 2254 auditd
root 252156 31228 03:29:39 547-02:13:49 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:58:17 547-02:13:49 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:38 547-02:13:48 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 547-02:13:48 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:47:21 547-02:13:48 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:28 547-02:13:47 2492 /usr/sbin/sshd
root 71720 2016 00:34:04 547-02:13:42 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:33:55 547-02:13:42 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:48 547-02:13:42 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:16 547-02:13:42 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:11 547-02:13:42 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:55 547-02:13:31 3359 crond
root 107544 436 00:00:28 547-02:13:29 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 547-02:13:24 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 547-02:13:24 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 547-02:13:24 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 547-02:13:24 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 547-02:13:24 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 547-02:13:24 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 547-02:13:24 3491 /sbin/udevd -d
root 11232 260 00:00:00 547-02:13:24 3492 /sbin/udevd -d
root 163092 1204 00:00:44 531-23:38:37 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 145-13:24:08 43438 SCREEN -O
root 108452 1384 00:00:00 145-13:24:08 43439 /bin/bash
root 108452 1384 00:00:00 145-13:23:05 43486 /bin/bash
root 109064 844 00:00:00 17-23:40:49 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:02 17-23:40:48 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 29-23:37:54 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:39 546-23:51:48 57735 [flush-9:2]
root 269644 77692 00:00:21 44:36 63597 spamd child
apache 592600 98404 00:00:51 24:42 66763 /usr/sbin/httpd -DSSL
apache 590360 97372 00:00:53 24:35 66764 /usr/sbin/httpd -DSSL
apache 589808 99420 00:00:53 24:33 66769 /usr/sbin/httpd -DSSL
apache 604352 111752 00:00:50 24:33 66770 /usr/sbin/httpd -DSSL
apache 623784 122416 00:00:51 24:31 66771 /usr/sbin/httpd -DSSL
apache 592176 100828 00:00:50 24:05 66916 /usr/sbin/httpd -DSSL
apache 590548 98000 00:00:50 24:05 66917 /usr/sbin/httpd -DSSL
apache 610464 108872 00:00:45 22:47 66931 /usr/sbin/httpd -DSSL
apache 662272 161172 00:00:45 22:47 66932 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 18:53 67957 [flush-9:4]
apache 597568 101672 00:00:33 17:43 67985 /usr/sbin/httpd -DSSL
root 96488 5392 00:00:00 15:13 68251 sendmail: ./4A8DkCa2021673 mail.icloud.co.za.: user open
root 0 0 00:02:23 546-23:16:52 68416 [flush-9:1]
apache 767248 267396 00:00:24 13:41 68698 /usr/sbin/httpd -DSSL
root 96488 5384 00:00:00 13:13 68719 sendmail: ./4A76R0Ac183201 mail.idp365.net.: user open
root 96628 5496 00:00:00 11:13 69083 sendmail: ./4A8FclNe045284 au-smtp-inbound-2.mimecast.com.: client MAIL
root 96488 5384 00:00:00 10:13 69095 sendmail: ./4A8L0RX8102898 mail.pointblanksolutions.co.za.: user open
root 96488 5376 00:00:00 09:13 69407 sendmail: ./4A8E8Sm7025867 mail.icloud.co.za.: user open
apache 589188 92020 00:00:16 08:31 69572 /usr/sbin/httpd -DSSL
apache 573600 78860 00:00:17 08:30 69573 /usr/sbin/httpd -DSSL
apache 589020 83080 00:00:15 08:30 69574 /usr/sbin/httpd -DSSL
apache 588788 91036 00:00:17 08:29 69577 /usr/sbin/httpd -DSSL
apache 592580 72604 00:00:17 08:29 69578 /usr/sbin/httpd -DSSL
apache 593604 97820 00:00:17 08:29 69579 /usr/sbin/httpd -DSSL
apache 608188 99724 00:00:12 08:29 69580 /usr/sbin/httpd -DSSL
root 96488 5372 00:00:00 08:13 69585 sendmail: ./4A8Ew9nv036457 mail.compsolrelay.co.za.: user open
apache 588568 83488 00:00:13 07:52 69603 /usr/sbin/httpd -DSSL
root 96488 5368 00:00:00 07:13 69613 sendmail: ./4A8GKZxO054646 msg.norcod.fr.: user open
root 96488 5360 00:00:00 06:13 69833 sendmail: ./4A8FVtQC043446 mail.murat.fr.: user open
root 96488 5328 00:00:00 05:13 69841 sendmail: ./4AA2JYli151497 mail.travelforce.com.au.: user open
root 96488 5360 00:00:00 04:13 69972 sendmail: ./4A8GbTF9058511 brainsoft.fr.: user open
root 96488 5328 00:00:00 03:13 70280 sendmail: ./4AA6SvZs190847 mail.travelforce.com.au.: user open
apache 587592 58920 00:00:06 03:13 70281 /usr/sbin/httpd -DSSL
root 96488 5292 00:00:00 02:13 70310 sendmail: ./4A8F1mWL037187 skyhqamx31.skyggnir.is.: user open
root 96488 5328 00:00:00 01:13 70442 sendmail: ./4AA21pU0148452 mail.kalpoint.com.: user open
apache 748720 219292 00:00:01 00:29 70647 /usr/sbin/httpd -DSSL
root 96488 5292 00:00:00 00:13 70649 sendmail: ./4A8FlBCF047276 mail1b.citco.com.: user open
root 110772 2072 00:00:00 00:01 70816 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 70838 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 70839 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 70841 cat
root 110900 1176 00:00:00 00:00 70866 /bin/bash /usr/bin/check_mk_agent
root 13360 1016 00:00:00 00:00 70867 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:00 70868 tr -s 
root 63348 3996 00:24:22 445-05:27:12 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 445-05:06:38 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1557920 963-00:07:52 445-05:06:37 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 19260 796 00:00:00 20:48:50 127390 /usr/sbin/dovecot
dovecot 12980 1092 00:00:00 20:48:50 127392 dovecot/anvil
root 13108 1196 00:00:00 20:48:50 127393 dovecot/log
root 266592 74740 00:00:18 18:52:20 145367 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 21712 764 00:00:22 144-23:35:55 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:06:47 73-13:58:57 181185 [flush-9:5]
root 0 0 00:00:22 9-22:59:30 181517 [flush-8:32]
root 567912 35728 00:24:15 73-13:50:24 182912 /usr/sbin/httpd -DSSL
root 154784 45448 00:00:41 440-23:38:43 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 268000 75680 00:00:00 09:19:13 232240 spamd child
smmsp 78752 788 00:09:52 483-14:20:53 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:04:36 483-14:20:53 238030 sendmail: accepting connections
named 739840 58176 03:53:45 483-14:20:38 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-11 23:21

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4c752ad97

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1731187840
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:57 545-00:23:00 1 /sbin/init
root 0 0 00:00:01 545-00:23:00 2 [kthreadd]
root 0 0 23:34:41 545-00:23:00 3 [migration/0]
root 0 0 01:07:33 545-00:23:00 4 [ksoftirqd/0]
root 0 0 00:00:00 545-00:23:00 5 [stopper/0]
root 0 0 00:17:45 545-00:23:00 6 [watchdog/0]
root 0 0 09:51:32 545-00:23:00 7 [migration/1]
root 0 0 00:00:00 545-00:23:00 8 [stopper/1]
root 0 0 01:43:38 545-00:23:00 9 [ksoftirqd/1]
root 0 0 00:22:08 545-00:23:00 10 [watchdog/1]
root 0 0 06:27:52 545-00:23:00 11 [migration/2]
root 0 0 00:00:00 545-00:23:00 12 [stopper/2]
root 0 0 00:52:37 545-00:23:00 13 [ksoftirqd/2]
root 0 0 00:19:50 545-00:23:00 14 [watchdog/2]
root 0 0 04:37:32 545-00:23:00 15 [migration/3]
root 0 0 00:00:00 545-00:23:00 16 [stopper/3]
root 0 0 00:38:37 545-00:23:00 17 [ksoftirqd/3]
root 0 0 00:15:38 545-00:23:00 18 [watchdog/3]
root 0 0 16:39:59 545-00:23:00 19 [migration/4]
root 0 0 00:00:00 545-00:23:00 20 [stopper/4]
root 0 0 00:58:02 545-00:23:00 21 [ksoftirqd/4]
root 0 0 00:09:06 545-00:23:00 22 [watchdog/4]
root 0 0 09:03:49 545-00:23:00 23 [migration/5]
root 0 0 00:00:00 545-00:23:00 24 [stopper/5]
root 0 0 00:40:24 545-00:23:00 25 [ksoftirqd/5]
root 0 0 00:19:11 545-00:23:00 26 [watchdog/5]
root 0 0 05:28:07 545-00:23:00 27 [migration/6]
root 0 0 00:00:00 545-00:23:00 28 [stopper/6]
root 0 0 00:31:16 545-00:23:00 29 [ksoftirqd/6]
root 0 0 00:14:42 545-00:23:00 30 [watchdog/6]
root 0 0 04:20:14 545-00:23:00 31 [migration/7]
root 0 0 00:00:00 545-00:23:00 32 [stopper/7]
root 0 0 00:30:54 545-00:23:00 33 [ksoftirqd/7]
root 0 0 00:11:58 545-00:23:00 34 [watchdog/7]
root 0 0 02:37:49 545-00:23:00 35 [events/0]
root 0 0 01:42:52 545-00:23:00 36 [events/1]
root 0 0 01:45:45 545-00:23:00 37 [events/2]
root 0 0 01:48:50 545-00:23:00 38 [events/3]
root 0 0 01:29:33 545-00:23:00 39 [events/4]
root 0 0 01:24:48 545-00:23:00 40 [events/5]
root 0 0 01:32:08 545-00:23:00 41 [events/6]
root 0 0 01:36:19 545-00:23:00 42 [events/7]
root 0 0 00:00:00 545-00:23:00 43 [events/0]
root 0 0 00:00:00 545-00:23:00 44 [events/1]
root 0 0 00:00:00 545-00:23:00 45 [events/2]
root 0 0 00:00:00 545-00:23:00 46 [events/3]
root 0 0 00:00:00 545-00:23:00 47 [events/4]
root 0 0 00:00:00 545-00:23:00 48 [events/5]
root 0 0 00:00:00 545-00:23:00 49 [events/6]
root 0 0 00:00:00 545-00:23:00 50 [events/7]
root 0 0 00:00:00 545-00:23:00 51 [events_long/0]
root 0 0 00:00:00 545-00:23:00 52 [events_long/1]
root 0 0 00:00:00 545-00:23:00 53 [events_long/2]
root 0 0 00:00:00 545-00:23:00 54 [events_long/3]
root 0 0 00:00:00 545-00:23:00 55 [events_long/4]
root 0 0 00:00:00 545-00:23:00 56 [events_long/5]
root 0 0 00:00:00 545-00:23:00 57 [events_long/6]
root 0 0 00:00:00 545-00:23:00 58 [events_long/7]
root 0 0 00:00:00 545-00:23:00 59 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 60 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 61 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 62 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 63 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 64 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 65 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 66 [events_power_ef]
root 0 0 00:00:00 545-00:23:00 67 [cgroup]
root 0 0 00:00:00 545-00:23:00 68 [khelper]
root 0 0 00:00:00 545-00:23:00 69 [netns]
root 0 0 00:00:00 545-00:23:00 70 [async/mgr]
root 0 0 00:00:00 545-00:23:00 71 [pm]
root 0 0 00:05:54 545-00:23:00 72 [sync_supers]
root 0 0 00:00:15 545-00:23:00 73 [bdi-default]
root 0 0 00:00:00 545-00:23:00 74 [kintegrityd/0]
root 0 0 00:00:00 545-00:23:00 75 [kintegrityd/1]
root 0 0 00:00:00 545-00:23:00 76 [kintegrityd/2]
root 0 0 00:00:00 545-00:23:00 77 [kintegrityd/3]
root 0 0 00:00:00 545-00:23:00 78 [kintegrityd/4]
root 0 0 00:00:00 545-00:23:00 79 [kintegrityd/5]
root 0 0 00:00:00 545-00:23:00 80 [kintegrityd/6]
root 0 0 00:00:00 545-00:23:00 81 [kintegrityd/7]
root 0 0 06:58:12 545-00:23:00 82 [kblockd/0]
root 0 0 00:12:36 545-00:23:00 83 [kblockd/1]
root 0 0 00:23:46 545-00:23:00 84 [kblockd/2]
root 0 0 00:04:52 545-00:23:00 85 [kblockd/3]
root 0 0 12:27:46 545-00:23:00 86 [kblockd/4]
root 0 0 00:15:02 545-00:23:00 87 [kblockd/5]
root 0 0 00:09:51 545-00:23:00 88 [kblockd/6]
root 0 0 00:07:35 545-00:23:00 89 [kblockd/7]
root 0 0 00:00:00 545-00:23:00 90 [kacpid]
root 0 0 00:00:00 545-00:23:00 91 [kacpi_notify]
root 0 0 00:00:00 545-00:23:00 92 [kacpi_hotplug]
root 0 0 00:00:00 545-00:23:00 93 [ata_aux]
root 0 0 00:00:00 545-00:23:00 94 [ata_sff/0]
root 0 0 00:00:00 545-00:23:00 95 [ata_sff/1]
root 0 0 00:00:00 545-00:23:00 96 [ata_sff/2]
root 0 0 00:00:00 545-00:23:00 97 [ata_sff/3]
root 0 0 00:00:00 545-00:23:00 98 [ata_sff/4]
root 0 0 00:00:00 545-00:23:00 99 [ata_sff/5]
root 0 0 00:00:00 545-00:23:00 100 [ata_sff/6]
root 0 0 00:00:00 545-00:23:00 101 [ata_sff/7]
root 0 0 00:00:00 545-00:23:00 102 [ksuspend_usbd]
root 0 0 00:00:00 545-00:23:00 103 [khubd]
root 0 0 00:00:00 545-00:23:00 104 [kseriod]
root 0 0 00:00:00 545-00:23:00 105 [md/0]
root 0 0 00:00:00 545-00:23:00 106 [md/1]
root 0 0 00:00:00 545-00:23:00 107 [md/2]
root 0 0 00:00:00 545-00:23:00 108 [md/3]
root 0 0 00:00:00 545-00:23:00 109 [md/4]
root 0 0 00:00:00 545-00:23:00 110 [md/5]
root 0 0 00:00:00 545-00:23:00 111 [md/6]
root 0 0 00:00:00 545-00:23:00 112 [md/7]
root 0 0 00:00:00 545-00:23:00 113 [md_misc/0]
root 0 0 00:00:00 545-00:23:00 114 [md_misc/1]
root 0 0 00:00:00 545-00:23:00 115 [md_misc/2]
root 0 0 00:00:00 545-00:23:00 116 [md_misc/3]
root 0 0 00:00:00 545-00:23:00 117 [md_misc/4]
root 0 0 00:00:00 545-00:23:00 118 [md_misc/5]
root 0 0 00:00:00 545-00:23:00 119 [md_misc/6]
root 0 0 00:00:00 545-00:23:00 120 [md_misc/7]
root 0 0 00:00:00 545-00:23:00 121 [linkwatch]
root 0 0 00:01:11 545-00:22:59 124 [khungtaskd]
root 0 0 1-04:00:52 545-00:22:59 125 [kswapd1]
root 0 0 00:00:00 545-00:22:59 126 [ksmd]
root 0 0 04:03:09 545-00:22:59 127 [khugepaged]
root 0 0 00:00:00 545-00:22:59 128 [aio/0]
root 0 0 00:00:00 545-00:22:59 129 [aio/1]
root 0 0 00:00:00 545-00:22:59 130 [aio/2]
root 0 0 00:00:00 545-00:22:59 131 [aio/3]
root 0 0 00:00:00 545-00:22:59 132 [aio/4]
root 0 0 00:00:00 545-00:22:59 133 [aio/5]
root 0 0 00:00:00 545-00:22:59 134 [aio/6]
root 0 0 00:00:00 545-00:22:59 135 [aio/7]
root 0 0 00:00:00 545-00:22:59 136 [crypto/0]
root 0 0 00:00:00 545-00:22:59 137 [crypto/1]
root 0 0 00:00:00 545-00:22:59 138 [crypto/2]
root 0 0 00:00:00 545-00:22:59 139 [crypto/3]
root 0 0 00:00:00 545-00:22:59 140 [crypto/4]
root 0 0 00:00:00 545-00:22:59 141 [crypto/5]
root 0 0 00:00:00 545-00:22:59 142 [crypto/6]
root 0 0 00:00:00 545-00:22:59 143 [crypto/7]
root 0 0 00:00:00 545-00:22:59 150 [kthrotld/0]
root 0 0 00:00:00 545-00:22:59 151 [kthrotld/1]
root 0 0 00:00:00 545-00:22:59 152 [kthrotld/2]
root 0 0 00:00:00 545-00:22:59 153 [kthrotld/3]
root 0 0 00:00:00 545-00:22:59 154 [kthrotld/4]
root 0 0 00:00:00 545-00:22:59 155 [kthrotld/5]
root 0 0 00:00:00 545-00:22:59 156 [kthrotld/6]
root 0 0 00:00:00 545-00:22:59 157 [kthrotld/7]
root 0 0 00:00:00 545-00:22:59 160 [kpsmoused]
root 0 0 00:00:00 545-00:22:59 161 [usbhid_resumer]
root 0 0 00:00:00 545-00:22:59 162 [deferwq]
root 0 0 00:00:00 545-00:22:59 194 [kdmremove]
root 0 0 00:00:00 545-00:22:59 195 [kstriped]
root 0 0 00:00:00 545-00:22:57 734 [scsi_eh_0]
root 0 0 00:00:00 545-00:22:57 735 [scsi_wq_0]
root 0 0 00:00:00 545-00:22:57 748 [scsi_eh_1]
root 0 0 00:00:00 545-00:22:57 749 [scsi_eh_2]
root 0 0 00:00:00 545-00:22:57 750 [scsi_eh_3]
root 0 0 00:00:00 545-00:22:57 751 [scsi_eh_4]
root 0 0 00:00:00 545-00:22:57 752 [scsi_eh_5]
root 0 0 00:00:00 545-00:22:57 753 [scsi_eh_6]
root 0 0 00:58:02 545-00:22:56 950 [md1_raid1]
root 0 0 00:03:32 545-00:22:55 1011 [jbd2/md1-8]
root 0 0 00:00:00 545-00:22:55 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 545-00:22:54 1105 /sbin/udevd -d
root 0 0 00:37:37 545-00:22:54 1225 [edac-poller]
root 0 0 00:10:58 545-00:22:53 1259 [md0_raid1]
root 0 0 03:03:52 545-00:22:53 1288 [md3_raid1]
root 0 0 2-18:40:39 545-00:22:53 1310 [md5_raid1]
root 0 0 01:09:59 545-00:22:53 1322 [md4_raid1]
root 0 0 00:32:49 545-00:22:53 1336 [md2_raid1]
root 0 0 00:19:02 545-00:22:51 1844 [flush-9:3]
root 0 0 00:00:00 545-00:22:51 1881 [jbd2/md0-8]
root 0 0 00:00:00 545-00:22:51 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 545-00:22:51 1885 [xfs_mru_cache]
root 0 0 01:40:20 545-00:22:51 1886 [xfslogd/0]
root 0 0 00:00:00 545-00:22:51 1887 [xfslogd/1]
root 0 0 00:03:32 545-00:22:51 1888 [xfslogd/2]
root 0 0 00:00:00 545-00:22:51 1889 [xfslogd/3]
root 0 0 03:06:28 545-00:22:51 1890 [xfslogd/4]
root 0 0 00:00:00 545-00:22:51 1891 [xfslogd/5]
root 0 0 00:00:00 545-00:22:51 1892 [xfslogd/6]
root 0 0 00:00:00 545-00:22:51 1893 [xfslogd/7]
root 0 0 03:05:26 545-00:22:51 1894 [xfsdatad/0]
root 0 0 00:00:00 545-00:22:51 1895 [xfsdatad/1]
root 0 0 00:02:18 545-00:22:51 1896 [xfsdatad/2]
root 0 0 00:00:00 545-00:22:51 1897 [xfsdatad/3]
root 0 0 03:26:56 545-00:22:51 1898 [xfsdatad/4]
root 0 0 00:00:00 545-00:22:51 1899 [xfsdatad/5]
root 0 0 00:00:00 545-00:22:51 1900 [xfsdatad/6]
root 0 0 00:00:00 545-00:22:51 1901 [xfsdatad/7]
root 0 0 00:00:00 545-00:22:51 1902 [xfsconvertd/0]
root 0 0 00:00:00 545-00:22:51 1903 [xfsconvertd/1]
root 0 0 00:00:00 545-00:22:51 1904 [xfsconvertd/2]
root 0 0 00:00:00 545-00:22:51 1905 [xfsconvertd/3]
root 0 0 00:00:00 545-00:22:51 1906 [xfsconvertd/4]
root 0 0 00:00:00 545-00:22:51 1907 [xfsconvertd/5]
root 0 0 00:00:00 545-00:22:51 1908 [xfsconvertd/6]
root 0 0 00:00:00 545-00:22:51 1909 [xfsconvertd/7]
root 0 0 00:00:02 545-00:22:51 1910 [xfsalloc/0]
root 0 0 00:00:02 545-00:22:51 1911 [xfsalloc/1]
root 0 0 00:00:03 545-00:22:51 1912 [xfsalloc/2]
root 0 0 00:00:04 545-00:22:51 1913 [xfsalloc/3]
root 0 0 00:00:02 545-00:22:51 1914 [xfsalloc/4]
root 0 0 00:00:03 545-00:22:51 1915 [xfsalloc/5]
root 0 0 00:00:03 545-00:22:51 1916 [xfsalloc/6]
root 0 0 00:00:05 545-00:22:51 1917 [xfsalloc/7]
root 0 0 00:00:11 545-00:22:51 1918 [xfseofblocks/0]
root 0 0 00:00:07 545-00:22:51 1919 [xfseofblocks/1]
root 0 0 00:00:09 545-00:22:51 1920 [xfseofblocks/2]
root 0 0 00:00:12 545-00:22:51 1921 [xfseofblocks/3]
root 0 0 00:00:08 545-00:22:51 1922 [xfseofblocks/4]
root 0 0 00:00:10 545-00:22:51 1923 [xfseofblocks/5]
root 0 0 00:00:04 545-00:22:51 1924 [xfseofblocks/6]
root 0 0 00:02:52 545-00:22:51 1925 [xfseofblocks/7]
root 0 0 00:32:28 545-00:22:51 1926 [xfsbufd/md5]
root 0 0 00:29:28 545-00:22:51 1927 [xfs-cil/md5]
root 0 0 00:58:33 545-00:22:51 1928 [xfssyncd/md5]
root 0 0 07:10:11 545-00:22:51 1929 [xfsaild/md5]
root 0 0 00:03:46 545-00:22:50 1930 [jbd2/md2-8]
root 0 0 00:00:00 545-00:22:50 1931 [ext4-dio-unwrit]
root 0 0 00:08:52 545-00:22:50 1932 [xfsbufd/md4]
root 0 0 00:00:51 545-00:22:50 1933 [xfs-cil/md4]
root 0 0 00:03:53 545-00:22:50 1934 [xfssyncd/md4]
root 0 0 06:49:35 545-00:22:50 1935 [xfsaild/md4]
root 0 0 00:28:30 545-00:22:50 1936 [xfsbufd/md3]
root 0 0 00:35:02 545-00:22:50 1937 [xfs-cil/md3]
root 0 0 00:05:03 545-00:22:50 1938 [xfssyncd/md3]
root 0 0 07:01:14 545-00:22:50 1939 [xfsaild/md3]
root 0 0 00:39:03 545-00:22:50 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 545-00:22:50 1941 [xfs-cil/sdc1]
root 0 0 12:22:44 545-00:22:50 1942 [xfssyncd/sdc1]
root 0 0 1-08:50:12 545-00:22:50 1943 [xfsaild/sdc1]
root 0 0 00:06:34 545-00:22:49 1999 [kauditd]
root 29764 704 00:16:06 545-00:22:32 2254 auditd
root 252156 31228 03:28:28 545-00:22:31 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:57:27 545-00:22:31 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:38 545-00:22:30 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 545-00:22:30 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:47:04 545-00:22:30 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:28 545-00:22:29 2492 /usr/sbin/sshd
root 71720 2016 00:34:01 545-00:22:24 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:33:52 545-00:22:24 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:45 545-00:22:24 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:13 545-00:22:24 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:08 545-00:22:24 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:53 545-00:22:13 3359 crond
root 107544 436 00:00:28 545-00:22:11 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 545-00:22:06 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 545-00:22:06 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 545-00:22:06 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 545-00:22:06 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 545-00:22:06 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 545-00:22:06 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 545-00:22:06 3491 /sbin/udevd -d
root 11232 260 00:00:00 545-00:22:06 3492 /sbin/udevd -d
root 163092 1256 00:00:44 529-21:47:19 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 143-11:32:50 43438 SCREEN -O
root 108452 1384 00:00:00 143-11:32:50 43439 /bin/bash
root 108452 1384 00:00:00 143-11:31:47 43486 /bin/bash
root 109064 844 00:00:00 15-21:49:31 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:01 15-21:49:30 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 27-21:46:36 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:38 544-22:00:30 57735 [flush-9:2]
root 0 0 00:02:22 544-21:25:34 68416 [flush-9:1]
root 63348 3996 00:24:15 443-03:35:54 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 443-03:15:20 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1556748 954-08:07:04 443-03:15:19 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 268540 76176 00:00:33 01:04:55 93644 spamd child
root 0 0 00:00:00 42:35 97132 [flush-9:4]
root 95868 3128 00:00:00 29:05 99545 sendmail: server vipturbo.com.br [191.36.152.28] (may be forged) cmd read
apache 590172 106356 00:00:27 24:59 100262 /usr/sbin/httpd -DSSL
apache 590256 99556 00:00:23 20:27 101161 /usr/sbin/httpd -DSSL
root 96248 3672 00:00:00 17:02 101602 sendmail: ./4A8E8Sm7025867 mail.icloud.co.za.: user open
root 96740 5548 00:00:00 16:02 101766 sendmail: ./4A77fljr195358 mail.idp365.net.: user open
apache 590048 98216 00:00:23 14:47 102009 /usr/sbin/httpd -DSSL
apache 611808 107800 00:00:18 13:02 102138 /usr/sbin/httpd -DSSL
root 96124 3632 00:00:00 12:02 102347 sendmail: ./4A8FVtQC043446 mail.murat.fr.: user open
root 96124 3640 00:00:00 09:02 102844 sendmail: ./4A8Er5OQ035399 mail.urbisjhd.com.: user open
apache 590648 76264 00:00:16 08:34 102887 /usr/sbin/httpd -DSSL
root 96124 3624 00:00:00 08:02 102991 sendmail: ./4A8FH7QW040327 mail.victas.unitingcare.org.au.: user open
root 96124 3612 00:00:00 07:02 102993 sendmail: ./4A8GKZxO054646 msg.norcod.fr.: user open
apache 588396 82340 00:00:06 06:20 103365 /usr/sbin/httpd -DSSL
apache 589236 89884 00:00:07 06:19 103367 /usr/sbin/httpd -DSSL
root 40060 2036 00:00:00 06:13 103371 dovecot/ssl-params
root 96124 3608 00:00:00 06:02 103374 sendmail: ./4A8GAip7052646 exchangenj1.gsc.com.: user open
apache 589428 76092 00:00:11 06:00 103377 /usr/sbin/httpd -DSSL
root 96124 3612 00:00:00 05:02 103456 sendmail: ./4A8L0RX8102898 mail.pointblanksolutions.co.za.: user open
root 96124 3600 00:00:00 04:02 103458 sendmail: ./4A8FDRUL039764 skyhqamx32.skyggnir.is.: user open
apache 592476 78176 00:00:03 03:18 103786 /usr/sbin/httpd -DSSL
apache 601552 99440 00:00:06 03:10 103787 /usr/sbin/httpd -DSSL
apache 585424 67584 00:00:02 03:09 103788 /usr/sbin/httpd -DSSL
apache 586864 68492 00:00:03 03:09 103789 /usr/sbin/httpd -DSSL
apache 595660 86792 00:00:05 03:08 103790 /usr/sbin/httpd -DSSL
apache 590628 73412 00:00:03 03:08 103791 /usr/sbin/httpd -DSSL
apache 590632 79392 00:00:04 03:08 103792 /usr/sbin/httpd -DSSL
root 96124 3604 00:00:00 03:02 103794 sendmail: ./4A8KOKS9097197 insa-smtp.insa-lyon.fr.: user open
apache 590896 68416 00:00:07 02:46 103796 /usr/sbin/httpd -DSSL
apache 585864 69336 00:00:02 02:45 103797 /usr/sbin/httpd -DSSL
apache 599992 83264 00:00:04 02:44 103802 /usr/sbin/httpd -DSSL
root 96124 3608 00:00:00 02:02 103806 sendmail: ./4A8FlBCF047276 mail3b.citco.com.: user open
apache 622776 91248 00:00:02 01:21 103948 /usr/sbin/httpd -DSSL
apache 584592 52144 00:00:00 01:05 103949 /usr/sbin/httpd -DSSL
apache 587572 69976 00:00:02 01:04 103950 /usr/sbin/httpd -DSSL
root 96124 3364 00:00:00 01:02 103952 sendmail: ./4A9KWWLZ094627 mail.kalpoint.com.: user open
apache 583020 33356 00:00:00 00:22 104214 /usr/sbin/httpd -DSSL
root 15084 3200 00:00:00 00:07 104216 dovecot/config
dovecot 76580 2904 00:00:00 00:07 104217 dovecot/auth
root 96124 3376 00:00:00 00:02 104218 sendmail: ./4A9JpXHj087715 mail.travelforce.com.au.: user open
root 110772 2076 00:00:00 00:01 104383 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 104407 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 104408 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 104409 cat
root 110900 1176 00:00:00 00:01 104435 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 104436 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 104437 tr -s 
root 19260 796 00:00:01 19:04:43 154992 /usr/sbin/dovecot
dovecot 12980 1088 00:00:00 19:04:43 154994 dovecot/anvil
root 13108 1192 00:00:00 19:04:43 154995 dovecot/log
root 21712 764 00:00:22 142-21:44:37 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:06:37 71-12:07:39 181185 [flush-9:5]
root 0 0 00:00:18 7-21:08:12 181517 [flush-8:32]
root 567544 35364 00:23:34 71-11:59:06 182912 /usr/sbin/httpd -DSSL
root 266364 74560 00:03:00 8-18:19:32 218862 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 154784 45448 00:00:41 438-21:47:25 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 268552 76156 00:00:03 11:13:26 236551 spamd child
smmsp 78752 788 00:09:50 481-12:29:35 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:04:17 481-12:29:35 238030 sendmail: accepting connections
named 739840 58296 03:52:40 481-12:29:20 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-09 21:30

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e448762fe1

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1730849567
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:55 541-02:25:07 1 /sbin/init
root 0 0 00:00:01 541-02:25:07 2 [kthreadd]
root 0 0 23:22:24 541-02:25:07 3 [migration/0]
root 0 0 01:06:55 541-02:25:07 4 [ksoftirqd/0]
root 0 0 00:00:00 541-02:25:07 5 [stopper/0]
root 0 0 00:17:31 541-02:25:07 6 [watchdog/0]
root 0 0 09:47:55 541-02:25:07 7 [migration/1]
root 0 0 00:00:00 541-02:25:07 8 [stopper/1]
root 0 0 01:42:56 541-02:25:07 9 [ksoftirqd/1]
root 0 0 00:21:49 541-02:25:07 10 [watchdog/1]
root 0 0 06:25:40 541-02:25:07 11 [migration/2]
root 0 0 00:00:00 541-02:25:07 12 [stopper/2]
root 0 0 00:52:07 541-02:25:07 13 [ksoftirqd/2]
root 0 0 00:19:33 541-02:25:07 14 [watchdog/2]
root 0 0 04:36:02 541-02:25:07 15 [migration/3]
root 0 0 00:00:00 541-02:25:07 16 [stopper/3]
root 0 0 00:38:09 541-02:25:07 17 [ksoftirqd/3]
root 0 0 00:15:22 541-02:25:07 18 [watchdog/3]
root 0 0 16:31:38 541-02:25:07 19 [migration/4]
root 0 0 00:00:00 541-02:25:07 20 [stopper/4]
root 0 0 00:57:37 541-02:25:07 21 [ksoftirqd/4]
root 0 0 00:08:57 541-02:25:07 22 [watchdog/4]
root 0 0 09:01:02 541-02:25:07 23 [migration/5]
root 0 0 00:00:00 541-02:25:07 24 [stopper/5]
root 0 0 00:40:10 541-02:25:07 25 [ksoftirqd/5]
root 0 0 00:18:59 541-02:25:07 26 [watchdog/5]
root 0 0 05:26:45 541-02:25:07 27 [migration/6]
root 0 0 00:00:00 541-02:25:07 28 [stopper/6]
root 0 0 00:31:03 541-02:25:07 29 [ksoftirqd/6]
root 0 0 00:14:32 541-02:25:07 30 [watchdog/6]
root 0 0 04:19:16 541-02:25:07 31 [migration/7]
root 0 0 00:00:00 541-02:25:07 32 [stopper/7]
root 0 0 00:30:39 541-02:25:07 33 [ksoftirqd/7]
root 0 0 00:11:48 541-02:25:07 34 [watchdog/7]
root 0 0 02:35:56 541-02:25:07 35 [events/0]
root 0 0 01:41:04 541-02:25:07 36 [events/1]
root 0 0 01:44:03 541-02:25:07 37 [events/2]
root 0 0 01:47:03 541-02:25:07 38 [events/3]
root 0 0 01:28:31 541-02:25:07 39 [events/4]
root 0 0 01:23:45 541-02:25:07 40 [events/5]
root 0 0 01:31:05 541-02:25:07 41 [events/6]
root 0 0 01:35:09 541-02:25:07 42 [events/7]
root 0 0 00:00:00 541-02:25:07 43 [events/0]
root 0 0 00:00:00 541-02:25:07 44 [events/1]
root 0 0 00:00:00 541-02:25:07 45 [events/2]
root 0 0 00:00:00 541-02:25:07 46 [events/3]
root 0 0 00:00:00 541-02:25:07 47 [events/4]
root 0 0 00:00:00 541-02:25:07 48 [events/5]
root 0 0 00:00:00 541-02:25:07 49 [events/6]
root 0 0 00:00:00 541-02:25:07 50 [events/7]
root 0 0 00:00:00 541-02:25:07 51 [events_long/0]
root 0 0 00:00:00 541-02:25:07 52 [events_long/1]
root 0 0 00:00:00 541-02:25:07 53 [events_long/2]
root 0 0 00:00:00 541-02:25:07 54 [events_long/3]
root 0 0 00:00:00 541-02:25:07 55 [events_long/4]
root 0 0 00:00:00 541-02:25:07 56 [events_long/5]
root 0 0 00:00:00 541-02:25:07 57 [events_long/6]
root 0 0 00:00:00 541-02:25:07 58 [events_long/7]
root 0 0 00:00:00 541-02:25:07 59 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 60 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 61 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 62 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 63 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 64 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 65 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 66 [events_power_ef]
root 0 0 00:00:00 541-02:25:07 67 [cgroup]
root 0 0 00:00:00 541-02:25:07 68 [khelper]
root 0 0 00:00:00 541-02:25:07 69 [netns]
root 0 0 00:00:00 541-02:25:07 70 [async/mgr]
root 0 0 00:00:00 541-02:25:07 71 [pm]
root 0 0 00:05:47 541-02:25:07 72 [sync_supers]
root 0 0 00:00:15 541-02:25:07 73 [bdi-default]
root 0 0 00:00:00 541-02:25:07 74 [kintegrityd/0]
root 0 0 00:00:00 541-02:25:07 75 [kintegrityd/1]
root 0 0 00:00:00 541-02:25:07 76 [kintegrityd/2]
root 0 0 00:00:00 541-02:25:07 77 [kintegrityd/3]
root 0 0 00:00:00 541-02:25:07 78 [kintegrityd/4]
root 0 0 00:00:00 541-02:25:07 79 [kintegrityd/5]
root 0 0 00:00:00 541-02:25:07 80 [kintegrityd/6]
root 0 0 00:00:00 541-02:25:07 81 [kintegrityd/7]
root 0 0 06:54:01 541-02:25:07 82 [kblockd/0]
root 0 0 00:12:33 541-02:25:07 83 [kblockd/1]
root 0 0 00:23:46 541-02:25:07 84 [kblockd/2]
root 0 0 00:04:52 541-02:25:07 85 [kblockd/3]
root 0 0 12:20:28 541-02:25:07 86 [kblockd/4]
root 0 0 00:14:59 541-02:25:07 87 [kblockd/5]
root 0 0 00:09:50 541-02:25:07 88 [kblockd/6]
root 0 0 00:07:35 541-02:25:07 89 [kblockd/7]
root 0 0 00:00:00 541-02:25:07 90 [kacpid]
root 0 0 00:00:00 541-02:25:07 91 [kacpi_notify]
root 0 0 00:00:00 541-02:25:07 92 [kacpi_hotplug]
root 0 0 00:00:00 541-02:25:07 93 [ata_aux]
root 0 0 00:00:00 541-02:25:07 94 [ata_sff/0]
root 0 0 00:00:00 541-02:25:07 95 [ata_sff/1]
root 0 0 00:00:00 541-02:25:07 96 [ata_sff/2]
root 0 0 00:00:00 541-02:25:07 97 [ata_sff/3]
root 0 0 00:00:00 541-02:25:07 98 [ata_sff/4]
root 0 0 00:00:00 541-02:25:07 99 [ata_sff/5]
root 0 0 00:00:00 541-02:25:07 100 [ata_sff/6]
root 0 0 00:00:00 541-02:25:07 101 [ata_sff/7]
root 0 0 00:00:00 541-02:25:07 102 [ksuspend_usbd]
root 0 0 00:00:00 541-02:25:07 103 [khubd]
root 0 0 00:00:00 541-02:25:07 104 [kseriod]
root 0 0 00:00:00 541-02:25:07 105 [md/0]
root 0 0 00:00:00 541-02:25:07 106 [md/1]
root 0 0 00:00:00 541-02:25:07 107 [md/2]
root 0 0 00:00:00 541-02:25:07 108 [md/3]
root 0 0 00:00:00 541-02:25:07 109 [md/4]
root 0 0 00:00:00 541-02:25:07 110 [md/5]
root 0 0 00:00:00 541-02:25:07 111 [md/6]
root 0 0 00:00:00 541-02:25:07 112 [md/7]
root 0 0 00:00:00 541-02:25:07 113 [md_misc/0]
root 0 0 00:00:00 541-02:25:07 114 [md_misc/1]
root 0 0 00:00:00 541-02:25:07 115 [md_misc/2]
root 0 0 00:00:00 541-02:25:07 116 [md_misc/3]
root 0 0 00:00:00 541-02:25:07 117 [md_misc/4]
root 0 0 00:00:00 541-02:25:07 118 [md_misc/5]
root 0 0 00:00:00 541-02:25:07 119 [md_misc/6]
root 0 0 00:00:00 541-02:25:07 120 [md_misc/7]
root 0 0 00:00:00 541-02:25:07 121 [linkwatch]
root 0 0 00:01:11 541-02:25:06 124 [khungtaskd]
root 0 0 1-03:53:31 541-02:25:06 125 [kswapd1]
root 0 0 00:00:00 541-02:25:06 126 [ksmd]
root 0 0 04:00:11 541-02:25:06 127 [khugepaged]
root 0 0 00:00:00 541-02:25:06 128 [aio/0]
root 0 0 00:00:00 541-02:25:06 129 [aio/1]
root 0 0 00:00:00 541-02:25:06 130 [aio/2]
root 0 0 00:00:00 541-02:25:06 131 [aio/3]
root 0 0 00:00:00 541-02:25:06 132 [aio/4]
root 0 0 00:00:00 541-02:25:06 133 [aio/5]
root 0 0 00:00:00 541-02:25:06 134 [aio/6]
root 0 0 00:00:00 541-02:25:06 135 [aio/7]
root 0 0 00:00:00 541-02:25:06 136 [crypto/0]
root 0 0 00:00:00 541-02:25:06 137 [crypto/1]
root 0 0 00:00:00 541-02:25:06 138 [crypto/2]
root 0 0 00:00:00 541-02:25:06 139 [crypto/3]
root 0 0 00:00:00 541-02:25:06 140 [crypto/4]
root 0 0 00:00:00 541-02:25:06 141 [crypto/5]
root 0 0 00:00:00 541-02:25:06 142 [crypto/6]
root 0 0 00:00:00 541-02:25:06 143 [crypto/7]
root 0 0 00:00:00 541-02:25:06 150 [kthrotld/0]
root 0 0 00:00:00 541-02:25:06 151 [kthrotld/1]
root 0 0 00:00:00 541-02:25:06 152 [kthrotld/2]
root 0 0 00:00:00 541-02:25:06 153 [kthrotld/3]
root 0 0 00:00:00 541-02:25:06 154 [kthrotld/4]
root 0 0 00:00:00 541-02:25:06 155 [kthrotld/5]
root 0 0 00:00:00 541-02:25:06 156 [kthrotld/6]
root 0 0 00:00:00 541-02:25:06 157 [kthrotld/7]
root 0 0 00:00:00 541-02:25:06 160 [kpsmoused]
root 0 0 00:00:00 541-02:25:06 161 [usbhid_resumer]
root 0 0 00:00:00 541-02:25:06 162 [deferwq]
root 0 0 00:00:00 541-02:25:06 194 [kdmremove]
root 0 0 00:00:00 541-02:25:06 195 [kstriped]
root 0 0 00:00:00 541-02:25:04 734 [scsi_eh_0]
root 0 0 00:00:00 541-02:25:04 735 [scsi_wq_0]
root 0 0 00:00:00 541-02:25:04 748 [scsi_eh_1]
root 0 0 00:00:00 541-02:25:04 749 [scsi_eh_2]
root 0 0 00:00:00 541-02:25:04 750 [scsi_eh_3]
root 0 0 00:00:00 541-02:25:04 751 [scsi_eh_4]
root 0 0 00:00:00 541-02:25:04 752 [scsi_eh_5]
root 0 0 00:00:00 541-02:25:04 753 [scsi_eh_6]
root 0 0 00:57:53 541-02:25:03 950 [md1_raid1]
root 0 0 00:03:30 541-02:25:02 1011 [jbd2/md1-8]
root 0 0 00:00:00 541-02:25:02 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 541-02:25:01 1105 /sbin/udevd -d
root 0 0 00:36:39 541-02:25:01 1225 [edac-poller]
root 0 0 00:10:58 541-02:25:00 1259 [md0_raid1]
root 0 0 03:01:46 541-02:25:00 1288 [md3_raid1]
root 0 0 2-18:24:28 541-02:25:00 1310 [md5_raid1]
root 0 0 01:09:43 541-02:25:00 1322 [md4_raid1]
root 0 0 00:32:38 541-02:25:00 1336 [md2_raid1]
root 0 0 00:18:51 541-02:24:58 1844 [flush-9:3]
root 0 0 00:00:00 541-02:24:58 1881 [jbd2/md0-8]
root 0 0 00:00:00 541-02:24:58 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 541-02:24:58 1885 [xfs_mru_cache]
root 0 0 01:40:17 541-02:24:58 1886 [xfslogd/0]
root 0 0 00:00:00 541-02:24:58 1887 [xfslogd/1]
root 0 0 00:03:32 541-02:24:58 1888 [xfslogd/2]
root 0 0 00:00:00 541-02:24:58 1889 [xfslogd/3]
root 0 0 03:05:35 541-02:24:58 1890 [xfslogd/4]
root 0 0 00:00:00 541-02:24:58 1891 [xfslogd/5]
root 0 0 00:00:00 541-02:24:58 1892 [xfslogd/6]
root 0 0 00:00:00 541-02:24:58 1893 [xfslogd/7]
root 0 0 03:05:23 541-02:24:58 1894 [xfsdatad/0]
root 0 0 00:00:00 541-02:24:58 1895 [xfsdatad/1]
root 0 0 00:02:18 541-02:24:58 1896 [xfsdatad/2]
root 0 0 00:00:00 541-02:24:58 1897 [xfsdatad/3]
root 0 0 03:26:41 541-02:24:58 1898 [xfsdatad/4]
root 0 0 00:00:00 541-02:24:58 1899 [xfsdatad/5]
root 0 0 00:00:00 541-02:24:58 1900 [xfsdatad/6]
root 0 0 00:00:00 541-02:24:58 1901 [xfsdatad/7]
root 0 0 00:00:00 541-02:24:58 1902 [xfsconvertd/0]
root 0 0 00:00:00 541-02:24:58 1903 [xfsconvertd/1]
root 0 0 00:00:00 541-02:24:58 1904 [xfsconvertd/2]
root 0 0 00:00:00 541-02:24:58 1905 [xfsconvertd/3]
root 0 0 00:00:00 541-02:24:58 1906 [xfsconvertd/4]
root 0 0 00:00:00 541-02:24:58 1907 [xfsconvertd/5]
root 0 0 00:00:00 541-02:24:58 1908 [xfsconvertd/6]
root 0 0 00:00:00 541-02:24:58 1909 [xfsconvertd/7]
root 0 0 00:00:02 541-02:24:58 1910 [xfsalloc/0]
root 0 0 00:00:02 541-02:24:58 1911 [xfsalloc/1]
root 0 0 00:00:03 541-02:24:58 1912 [xfsalloc/2]
root 0 0 00:00:04 541-02:24:58 1913 [xfsalloc/3]
root 0 0 00:00:02 541-02:24:58 1914 [xfsalloc/4]
root 0 0 00:00:03 541-02:24:58 1915 [xfsalloc/5]
root 0 0 00:00:03 541-02:24:58 1916 [xfsalloc/6]
root 0 0 00:00:05 541-02:24:58 1917 [xfsalloc/7]
root 0 0 00:00:11 541-02:24:58 1918 [xfseofblocks/0]
root 0 0 00:00:07 541-02:24:58 1919 [xfseofblocks/1]
root 0 0 00:00:09 541-02:24:58 1920 [xfseofblocks/2]
root 0 0 00:00:12 541-02:24:58 1921 [xfseofblocks/3]
root 0 0 00:00:08 541-02:24:58 1922 [xfseofblocks/4]
root 0 0 00:00:10 541-02:24:58 1923 [xfseofblocks/5]
root 0 0 00:00:04 541-02:24:58 1924 [xfseofblocks/6]
root 0 0 00:02:51 541-02:24:58 1925 [xfseofblocks/7]
root 0 0 00:32:01 541-02:24:58 1926 [xfsbufd/md5]
root 0 0 00:29:00 541-02:24:58 1927 [xfs-cil/md5]
root 0 0 00:58:15 541-02:24:58 1928 [xfssyncd/md5]
root 0 0 07:01:47 541-02:24:58 1929 [xfsaild/md5]
root 0 0 00:03:43 541-02:24:57 1930 [jbd2/md2-8]
root 0 0 00:00:00 541-02:24:57 1931 [ext4-dio-unwrit]
root 0 0 00:08:43 541-02:24:57 1932 [xfsbufd/md4]
root 0 0 00:00:51 541-02:24:57 1933 [xfs-cil/md4]
root 0 0 00:03:50 541-02:24:57 1934 [xfssyncd/md4]
root 0 0 06:41:18 541-02:24:57 1935 [xfsaild/md4]
root 0 0 00:27:54 541-02:24:57 1936 [xfsbufd/md3]
root 0 0 00:34:29 541-02:24:57 1937 [xfs-cil/md3]
root 0 0 00:04:59 541-02:24:57 1938 [xfssyncd/md3]
root 0 0 06:52:53 541-02:24:57 1939 [xfsaild/md3]
root 0 0 00:39:03 541-02:24:57 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 541-02:24:57 1941 [xfs-cil/sdc1]
root 0 0 12:22:40 541-02:24:57 1942 [xfssyncd/sdc1]
root 0 0 1-08:41:55 541-02:24:57 1943 [xfsaild/sdc1]
root 0 0 00:06:31 541-02:24:56 1999 [kauditd]
root 29764 704 00:15:59 541-02:24:39 2254 auditd
root 252156 31228 03:26:03 541-02:24:38 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:55:52 541-02:24:38 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:38 541-02:24:37 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 541-02:24:37 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:46:15 541-02:24:37 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:27 541-02:24:36 2492 /usr/sbin/sshd
root 71720 2012 00:33:53 541-02:24:31 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:44 541-02:24:31 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:37 541-02:24:31 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:05 541-02:24:31 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:34:00 541-02:24:31 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:49 541-02:24:20 3359 crond
root 107544 436 00:00:28 541-02:24:18 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 541-02:24:13 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 541-02:24:13 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 541-02:24:13 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 541-02:24:13 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 541-02:24:13 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 541-02:24:13 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 541-02:24:13 3491 /sbin/udevd -d
root 11232 260 00:00:00 541-02:24:13 3492 /sbin/udevd -d
root 163092 1256 00:00:44 525-23:49:26 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 139-13:34:57 43438 SCREEN -O
root 108452 1384 00:00:00 139-13:34:57 43439 /bin/bash
root 108452 1384 00:00:00 139-13:33:54 43486 /bin/bash
root 109064 844 00:00:00 11-23:51:38 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:01 11-23:51:37 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 23-23:48:43 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:34 541-00:02:37 57735 [flush-9:2]
root 0 0 00:02:20 540-23:27:41 68416 [flush-9:1]
root 63348 3968 00:23:56 439-05:38:01 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 439-05:17:27 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1556136 938-02:13:47 439-05:17:26 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 107548 492 00:00:00 01:16:08 100139 pure-ftpd (IDLE) 
root 109652 604 00:00:00 01:16:08 100140 pure-ftpd (PRIV) 
root 0 0 00:00:00 44:42 105642 [flush-9:4]
root 95868 3056 00:00:00 28:37 108622 sendmail: server syn-208-105-193-045.biz.spectrum.com [208.105.193.45] cmd read
apache 632576 129288 00:01:09 23:44 109554 /usr/sbin/httpd -DSSL
apache 592660 86832 00:00:28 15:17 110543 /usr/sbin/httpd -DSSL
apache 606368 89592 00:00:19 12:03 111094 /usr/sbin/httpd -DSSL
apache 597824 85964 00:00:21 11:54 111115 /usr/sbin/httpd -DSSL
apache 606668 92632 00:00:20 11:52 111127 /usr/sbin/httpd -DSSL
apache 618692 103400 00:00:20 11:52 111135 /usr/sbin/httpd -DSSL
apache 589720 84120 00:00:21 11:51 111146 /usr/sbin/httpd -DSSL
apache 603688 96188 00:00:20 11:51 111148 /usr/sbin/httpd -DSSL
apache 626676 121808 00:00:20 11:51 111166 /usr/sbin/httpd -DSSL
apache 682576 176496 00:00:21 11:36 111403 /usr/sbin/httpd -DSSL
apache 592072 77536 00:00:17 11:36 111409 /usr/sbin/httpd -DSSL
apache 616880 111476 00:00:21 11:35 111419 /usr/sbin/httpd -DSSL
apache 600112 93976 00:00:21 11:35 111422 /usr/sbin/httpd -DSSL
apache 673768 158376 00:00:16 11:34 111434 /usr/sbin/httpd -DSSL
apache 607680 93152 00:00:15 11:34 111446 /usr/sbin/httpd -DSSL
apache 617572 102208 00:00:18 07:54 112123 /usr/sbin/httpd -DSSL
root 268744 76452 00:00:08 07:21 112243 spamd child
apache 658324 136404 00:00:11 06:12 112326 /usr/sbin/httpd -DSSL
apache 617756 109940 00:00:14 06:12 112327 /usr/sbin/httpd -DSSL
apache 617392 98684 00:00:15 06:12 112328 /usr/sbin/httpd -DSSL
apache 590780 75272 00:00:12 06:06 112341 /usr/sbin/httpd -DSSL
apache 598760 91996 00:00:10 06:06 112343 /usr/sbin/httpd -DSSL
apache 605092 90560 00:00:09 06:06 112344 /usr/sbin/httpd -DSSL
apache 658424 139008 00:00:13 05:27 112805 /usr/sbin/httpd -DSSL
apache 615232 105140 00:00:06 02:38 113801 /usr/sbin/httpd -DSSL
root 97268 5996 00:00:00 02:16 113835 sendmail: ./4A48SPDE224430 applynow.net.au.: user open
apache 658592 134820 00:00:06 01:58 113907 /usr/sbin/httpd -DSSL
apache 632644 115200 00:00:05 01:58 113908 /usr/sbin/httpd -DSSL
root 96920 5596 00:00:00 01:16 113953 sendmail: ./4A38o1B7000528 rogue.iinet.net.au.: user open
root 96800 5380 00:00:00 00:44 114009 sendmail: ./4A5NW33j114002 mx4.mail.ovh.net.: client DATA 354
root 96580 4976 00:00:00 00:30 114163 sendmail: ./4A5NWHl4114159 mx1.ovh.net.: client DATA 354
root 96776 5416 00:00:00 00:16 114176 sendmail: ./4A5KQTHl082292 mail.travelforce.com.au.: user open
root 96584 5008 00:00:00 00:07 114188 sendmail: ./4A5NWcm2114184 mx-10.au-east.atmailcloud.com.: client DATA status
root 96584 4964 00:00:00 00:07 114192 sendmail: ./4A5NWeoB114186 mx1.ovh.net.: client RCPT
root 110772 2076 00:00:00 00:01 114291 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 114317 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 114318 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 114320 cat
root 110900 1176 00:00:00 00:01 114345 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 114346 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 114347 tr -s 
root 19260 792 00:00:01 21:21:00 147614 /usr/sbin/dovecot
dovecot 12980 1064 00:00:00 21:21:00 147616 dovecot/anvil
root 13108 1192 00:00:00 21:21:00 147617 dovecot/log
root 21712 764 00:00:21 138-23:46:44 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:06:15 67-14:09:46 181185 [flush-9:5]
root 0 0 00:00:07 3-23:10:19 181517 [flush-8:32]
root 567544 35364 00:21:59 67-14:01:13 182912 /usr/sbin/httpd -DSSL
root 266364 74560 00:01:34 4-20:21:39 218862 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 154784 45448 00:00:41 434-23:49:32 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 268524 76160 00:00:07 3-17:58:04 232578 spamd child
smmsp 78752 788 00:09:45 477-14:31:42 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:03:28 477-14:31:42 238030 sendmail: accepting connections
named 739840 58272 03:50:28 477-14:31:27 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-05 23:32

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e46cd2fbe4

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1730674432
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:54 539-01:46:12 1 /sbin/init
root 0 0 00:00:01 539-01:46:12 2 [kthreadd]
root 0 0 23:17:43 539-01:46:12 3 [migration/0]
root 0 0 01:06:42 539-01:46:12 4 [ksoftirqd/0]
root 0 0 00:00:00 539-01:46:12 5 [stopper/0]
root 0 0 00:17:26 539-01:46:12 6 [watchdog/0]
root 0 0 09:46:18 539-01:46:12 7 [migration/1]
root 0 0 00:00:00 539-01:46:12 8 [stopper/1]
root 0 0 01:42:42 539-01:46:12 9 [ksoftirqd/1]
root 0 0 00:21:43 539-01:46:12 10 [watchdog/1]
root 0 0 06:24:44 539-01:46:12 11 [migration/2]
root 0 0 00:00:00 539-01:46:12 12 [stopper/2]
root 0 0 00:51:56 539-01:46:12 13 [ksoftirqd/2]
root 0 0 00:19:28 539-01:46:12 14 [watchdog/2]
root 0 0 04:35:30 539-01:46:12 15 [migration/3]
root 0 0 00:00:00 539-01:46:12 16 [stopper/3]
root 0 0 00:38:00 539-01:46:12 17 [ksoftirqd/3]
root 0 0 00:15:18 539-01:46:12 18 [watchdog/3]
root 0 0 16:28:22 539-01:46:12 19 [migration/4]
root 0 0 00:00:00 539-01:46:12 20 [stopper/4]
root 0 0 00:57:27 539-01:46:12 21 [ksoftirqd/4]
root 0 0 00:08:55 539-01:46:12 22 [watchdog/4]
root 0 0 08:59:41 539-01:46:12 23 [migration/5]
root 0 0 00:00:00 539-01:46:12 24 [stopper/5]
root 0 0 00:40:05 539-01:46:12 25 [ksoftirqd/5]
root 0 0 00:18:54 539-01:46:12 26 [watchdog/5]
root 0 0 05:26:08 539-01:46:12 27 [migration/6]
root 0 0 00:00:00 539-01:46:12 28 [stopper/6]
root 0 0 00:30:58 539-01:46:12 29 [ksoftirqd/6]
root 0 0 00:14:28 539-01:46:12 30 [watchdog/6]
root 0 0 04:18:53 539-01:46:12 31 [migration/7]
root 0 0 00:00:00 539-01:46:12 32 [stopper/7]
root 0 0 00:30:33 539-01:46:12 33 [ksoftirqd/7]
root 0 0 00:11:45 539-01:46:12 34 [watchdog/7]
root 0 0 02:35:14 539-01:46:12 35 [events/0]
root 0 0 01:40:32 539-01:46:12 36 [events/1]
root 0 0 01:43:29 539-01:46:12 37 [events/2]
root 0 0 01:46:29 539-01:46:12 38 [events/3]
root 0 0 01:28:07 539-01:46:12 39 [events/4]
root 0 0 01:23:23 539-01:46:12 40 [events/5]
root 0 0 01:30:42 539-01:46:12 41 [events/6]
root 0 0 01:34:43 539-01:46:12 42 [events/7]
root 0 0 00:00:00 539-01:46:12 43 [events/0]
root 0 0 00:00:00 539-01:46:12 44 [events/1]
root 0 0 00:00:00 539-01:46:12 45 [events/2]
root 0 0 00:00:00 539-01:46:12 46 [events/3]
root 0 0 00:00:00 539-01:46:12 47 [events/4]
root 0 0 00:00:00 539-01:46:12 48 [events/5]
root 0 0 00:00:00 539-01:46:12 49 [events/6]
root 0 0 00:00:00 539-01:46:12 50 [events/7]
root 0 0 00:00:00 539-01:46:12 51 [events_long/0]
root 0 0 00:00:00 539-01:46:12 52 [events_long/1]
root 0 0 00:00:00 539-01:46:12 53 [events_long/2]
root 0 0 00:00:00 539-01:46:12 54 [events_long/3]
root 0 0 00:00:00 539-01:46:12 55 [events_long/4]
root 0 0 00:00:00 539-01:46:12 56 [events_long/5]
root 0 0 00:00:00 539-01:46:12 57 [events_long/6]
root 0 0 00:00:00 539-01:46:12 58 [events_long/7]
root 0 0 00:00:00 539-01:46:12 59 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 60 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 61 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 62 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 63 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 64 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 65 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 66 [events_power_ef]
root 0 0 00:00:00 539-01:46:12 67 [cgroup]
root 0 0 00:00:00 539-01:46:12 68 [khelper]
root 0 0 00:00:00 539-01:46:12 69 [netns]
root 0 0 00:00:00 539-01:46:12 70 [async/mgr]
root 0 0 00:00:00 539-01:46:12 71 [pm]
root 0 0 00:05:45 539-01:46:12 72 [sync_supers]
root 0 0 00:00:15 539-01:46:12 73 [bdi-default]
root 0 0 00:00:00 539-01:46:12 74 [kintegrityd/0]
root 0 0 00:00:00 539-01:46:12 75 [kintegrityd/1]
root 0 0 00:00:00 539-01:46:12 76 [kintegrityd/2]
root 0 0 00:00:00 539-01:46:12 77 [kintegrityd/3]
root 0 0 00:00:00 539-01:46:12 78 [kintegrityd/4]
root 0 0 00:00:00 539-01:46:12 79 [kintegrityd/5]
root 0 0 00:00:00 539-01:46:12 80 [kintegrityd/6]
root 0 0 00:00:00 539-01:46:12 81 [kintegrityd/7]
root 0 0 06:52:45 539-01:46:12 82 [kblockd/0]
root 0 0 00:12:32 539-01:46:12 83 [kblockd/1]
root 0 0 00:23:45 539-01:46:12 84 [kblockd/2]
root 0 0 00:04:51 539-01:46:12 85 [kblockd/3]
root 0 0 12:17:42 539-01:46:12 86 [kblockd/4]
root 0 0 00:14:57 539-01:46:12 87 [kblockd/5]
root 0 0 00:09:50 539-01:46:12 88 [kblockd/6]
root 0 0 00:07:34 539-01:46:12 89 [kblockd/7]
root 0 0 00:00:00 539-01:46:12 90 [kacpid]
root 0 0 00:00:00 539-01:46:12 91 [kacpi_notify]
root 0 0 00:00:00 539-01:46:12 92 [kacpi_hotplug]
root 0 0 00:00:00 539-01:46:12 93 [ata_aux]
root 0 0 00:00:00 539-01:46:12 94 [ata_sff/0]
root 0 0 00:00:00 539-01:46:12 95 [ata_sff/1]
root 0 0 00:00:00 539-01:46:12 96 [ata_sff/2]
root 0 0 00:00:00 539-01:46:12 97 [ata_sff/3]
root 0 0 00:00:00 539-01:46:12 98 [ata_sff/4]
root 0 0 00:00:00 539-01:46:12 99 [ata_sff/5]
root 0 0 00:00:00 539-01:46:12 100 [ata_sff/6]
root 0 0 00:00:00 539-01:46:12 101 [ata_sff/7]
root 0 0 00:00:00 539-01:46:12 102 [ksuspend_usbd]
root 0 0 00:00:00 539-01:46:12 103 [khubd]
root 0 0 00:00:00 539-01:46:12 104 [kseriod]
root 0 0 00:00:00 539-01:46:12 105 [md/0]
root 0 0 00:00:00 539-01:46:12 106 [md/1]
root 0 0 00:00:00 539-01:46:12 107 [md/2]
root 0 0 00:00:00 539-01:46:12 108 [md/3]
root 0 0 00:00:00 539-01:46:12 109 [md/4]
root 0 0 00:00:00 539-01:46:12 110 [md/5]
root 0 0 00:00:00 539-01:46:12 111 [md/6]
root 0 0 00:00:00 539-01:46:12 112 [md/7]
root 0 0 00:00:00 539-01:46:12 113 [md_misc/0]
root 0 0 00:00:00 539-01:46:12 114 [md_misc/1]
root 0 0 00:00:00 539-01:46:12 115 [md_misc/2]
root 0 0 00:00:00 539-01:46:12 116 [md_misc/3]
root 0 0 00:00:00 539-01:46:12 117 [md_misc/4]
root 0 0 00:00:00 539-01:46:12 118 [md_misc/5]
root 0 0 00:00:00 539-01:46:12 119 [md_misc/6]
root 0 0 00:00:00 539-01:46:12 120 [md_misc/7]
root 0 0 00:00:00 539-01:46:12 121 [linkwatch]
root 0 0 00:01:10 539-01:46:11 124 [khungtaskd]
root 0 0 1-03:49:22 539-01:46:11 125 [kswapd1]
root 0 0 00:00:00 539-01:46:11 126 [ksmd]
root 0 0 03:58:55 539-01:46:11 127 [khugepaged]
root 0 0 00:00:00 539-01:46:11 128 [aio/0]
root 0 0 00:00:00 539-01:46:11 129 [aio/1]
root 0 0 00:00:00 539-01:46:11 130 [aio/2]
root 0 0 00:00:00 539-01:46:11 131 [aio/3]
root 0 0 00:00:00 539-01:46:11 132 [aio/4]
root 0 0 00:00:00 539-01:46:11 133 [aio/5]
root 0 0 00:00:00 539-01:46:11 134 [aio/6]
root 0 0 00:00:00 539-01:46:11 135 [aio/7]
root 0 0 00:00:00 539-01:46:11 136 [crypto/0]
root 0 0 00:00:00 539-01:46:11 137 [crypto/1]
root 0 0 00:00:00 539-01:46:11 138 [crypto/2]
root 0 0 00:00:00 539-01:46:11 139 [crypto/3]
root 0 0 00:00:00 539-01:46:11 140 [crypto/4]
root 0 0 00:00:00 539-01:46:11 141 [crypto/5]
root 0 0 00:00:00 539-01:46:11 142 [crypto/6]
root 0 0 00:00:00 539-01:46:11 143 [crypto/7]
root 0 0 00:00:00 539-01:46:11 150 [kthrotld/0]
root 0 0 00:00:00 539-01:46:11 151 [kthrotld/1]
root 0 0 00:00:00 539-01:46:11 152 [kthrotld/2]
root 0 0 00:00:00 539-01:46:11 153 [kthrotld/3]
root 0 0 00:00:00 539-01:46:11 154 [kthrotld/4]
root 0 0 00:00:00 539-01:46:11 155 [kthrotld/5]
root 0 0 00:00:00 539-01:46:11 156 [kthrotld/6]
root 0 0 00:00:00 539-01:46:11 157 [kthrotld/7]
root 0 0 00:00:00 539-01:46:11 160 [kpsmoused]
root 0 0 00:00:00 539-01:46:11 161 [usbhid_resumer]
root 0 0 00:00:00 539-01:46:11 162 [deferwq]
root 0 0 00:00:00 539-01:46:11 194 [kdmremove]
root 0 0 00:00:00 539-01:46:11 195 [kstriped]
root 0 0 00:00:00 539-01:46:09 734 [scsi_eh_0]
root 0 0 00:00:00 539-01:46:09 735 [scsi_wq_0]
root 0 0 00:00:00 539-01:46:09 748 [scsi_eh_1]
root 0 0 00:00:00 539-01:46:09 749 [scsi_eh_2]
root 0 0 00:00:00 539-01:46:09 750 [scsi_eh_3]
root 0 0 00:00:00 539-01:46:09 751 [scsi_eh_4]
root 0 0 00:00:00 539-01:46:09 752 [scsi_eh_5]
root 0 0 00:00:00 539-01:46:09 753 [scsi_eh_6]
root 0 0 00:57:50 539-01:46:08 950 [md1_raid1]
root 0 0 00:03:30 539-01:46:07 1011 [jbd2/md1-8]
root 0 0 00:00:00 539-01:46:07 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 539-01:46:06 1105 /sbin/udevd -d
root 0 0 00:36:21 539-01:46:06 1225 [edac-poller]
root 0 0 00:10:58 539-01:46:05 1259 [md0_raid1]
root 0 0 03:00:51 539-01:46:05 1288 [md3_raid1]
root 0 0 2-18:16:47 539-01:46:05 1310 [md5_raid1]
root 0 0 01:09:36 539-01:46:05 1322 [md4_raid1]
root 0 0 00:32:34 539-01:46:05 1336 [md2_raid1]
root 0 0 00:18:46 539-01:46:03 1844 [flush-9:3]
root 0 0 00:00:00 539-01:46:03 1881 [jbd2/md0-8]
root 0 0 00:00:00 539-01:46:03 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 539-01:46:03 1885 [xfs_mru_cache]
root 0 0 01:40:16 539-01:46:03 1886 [xfslogd/0]
root 0 0 00:00:00 539-01:46:03 1887 [xfslogd/1]
root 0 0 00:03:32 539-01:46:03 1888 [xfslogd/2]
root 0 0 00:00:00 539-01:46:03 1889 [xfslogd/3]
root 0 0 03:05:12 539-01:46:03 1890 [xfslogd/4]
root 0 0 00:00:00 539-01:46:03 1891 [xfslogd/5]
root 0 0 00:00:00 539-01:46:03 1892 [xfslogd/6]
root 0 0 00:00:00 539-01:46:03 1893 [xfslogd/7]
root 0 0 03:05:22 539-01:46:03 1894 [xfsdatad/0]
root 0 0 00:00:00 539-01:46:03 1895 [xfsdatad/1]
root 0 0 00:02:18 539-01:46:03 1896 [xfsdatad/2]
root 0 0 00:00:00 539-01:46:03 1897 [xfsdatad/3]
root 0 0 03:26:34 539-01:46:03 1898 [xfsdatad/4]
root 0 0 00:00:00 539-01:46:03 1899 [xfsdatad/5]
root 0 0 00:00:00 539-01:46:03 1900 [xfsdatad/6]
root 0 0 00:00:00 539-01:46:03 1901 [xfsdatad/7]
root 0 0 00:00:00 539-01:46:03 1902 [xfsconvertd/0]
root 0 0 00:00:00 539-01:46:03 1903 [xfsconvertd/1]
root 0 0 00:00:00 539-01:46:03 1904 [xfsconvertd/2]
root 0 0 00:00:00 539-01:46:03 1905 [xfsconvertd/3]
root 0 0 00:00:00 539-01:46:03 1906 [xfsconvertd/4]
root 0 0 00:00:00 539-01:46:03 1907 [xfsconvertd/5]
root 0 0 00:00:00 539-01:46:03 1908 [xfsconvertd/6]
root 0 0 00:00:00 539-01:46:03 1909 [xfsconvertd/7]
root 0 0 00:00:02 539-01:46:03 1910 [xfsalloc/0]
root 0 0 00:00:02 539-01:46:03 1911 [xfsalloc/1]
root 0 0 00:00:03 539-01:46:03 1912 [xfsalloc/2]
root 0 0 00:00:04 539-01:46:03 1913 [xfsalloc/3]
root 0 0 00:00:02 539-01:46:03 1914 [xfsalloc/4]
root 0 0 00:00:03 539-01:46:03 1915 [xfsalloc/5]
root 0 0 00:00:03 539-01:46:03 1916 [xfsalloc/6]
root 0 0 00:00:05 539-01:46:03 1917 [xfsalloc/7]
root 0 0 00:00:11 539-01:46:03 1918 [xfseofblocks/0]
root 0 0 00:00:07 539-01:46:03 1919 [xfseofblocks/1]
root 0 0 00:00:09 539-01:46:03 1920 [xfseofblocks/2]
root 0 0 00:00:12 539-01:46:03 1921 [xfseofblocks/3]
root 0 0 00:00:08 539-01:46:03 1922 [xfseofblocks/4]
root 0 0 00:00:10 539-01:46:03 1923 [xfseofblocks/5]
root 0 0 00:00:04 539-01:46:03 1924 [xfseofblocks/6]
root 0 0 00:02:50 539-01:46:03 1925 [xfseofblocks/7]
root 0 0 00:31:51 539-01:46:03 1926 [xfsbufd/md5]
root 0 0 00:28:51 539-01:46:03 1927 [xfs-cil/md5]
root 0 0 00:58:06 539-01:46:03 1928 [xfssyncd/md5]
root 0 0 06:59:17 539-01:46:03 1929 [xfsaild/md5]
root 0 0 00:03:41 539-01:46:02 1930 [jbd2/md2-8]
root 0 0 00:00:00 539-01:46:02 1931 [ext4-dio-unwrit]
root 0 0 00:08:39 539-01:46:02 1932 [xfsbufd/md4]
root 0 0 00:00:50 539-01:46:02 1933 [xfs-cil/md4]
root 0 0 00:03:49 539-01:46:02 1934 [xfssyncd/md4]
root 0 0 06:38:51 539-01:46:02 1935 [xfsaild/md4]
root 0 0 00:27:42 539-01:46:02 1936 [xfsbufd/md3]
root 0 0 00:34:14 539-01:46:02 1937 [xfs-cil/md3]
root 0 0 00:04:58 539-01:46:02 1938 [xfssyncd/md3]
root 0 0 06:50:27 539-01:46:02 1939 [xfsaild/md3]
root 0 0 00:39:03 539-01:46:02 1940 [xfsbufd/sdc1]
root 0 0 00:42:58 539-01:46:02 1941 [xfs-cil/sdc1]
root 0 0 12:22:38 539-01:46:02 1942 [xfssyncd/sdc1]
root 0 0 1-08:39:31 539-01:46:02 1943 [xfsaild/sdc1]
root 0 0 00:06:30 539-01:46:01 1999 [kauditd]
root 29764 704 00:15:56 539-01:45:44 2254 auditd
root 252156 31228 03:25:08 539-01:45:43 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:55:01 539-01:45:43 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:38 539-01:45:42 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 539-01:45:42 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:46:01 539-01:45:42 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:26 539-01:45:41 2492 /usr/sbin/sshd
root 71720 2012 00:33:51 539-01:45:36 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:41 539-01:45:36 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:35 539-01:45:36 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:03 539-01:45:36 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:57 539-01:45:36 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:47 539-01:45:25 3359 crond
root 107544 436 00:00:27 539-01:45:23 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 539-01:45:18 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 539-01:45:18 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 539-01:45:18 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 539-01:45:18 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 539-01:45:18 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 539-01:45:18 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 539-01:45:18 3491 /sbin/udevd -d
root 11232 260 00:00:00 539-01:45:18 3492 /sbin/udevd -d
root 163092 1256 00:00:44 523-23:10:31 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 137-12:56:02 43438 SCREEN -O
root 108452 1384 00:00:00 137-12:56:02 43439 /bin/bash
root 108452 1384 00:00:00 137-12:54:59 43486 /bin/bash
root 109064 844 00:00:00 9-23:12:43 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:00 9-23:12:42 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 21-23:09:48 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:33 538-23:23:42 57735 [flush-9:2]
root 0 0 00:02:19 538-22:48:46 68416 [flush-9:1]
root 63348 3968 00:23:47 437-04:59:06 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 437-04:38:32 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1558032 931-14:42:00 437-04:38:31 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 269096 77252 00:00:35 01:54:08 111956 spamd child
apache 613440 103876 00:00:27 21:15 127212 /usr/sbin/httpd -DSSL
apache 610484 114916 00:00:34 21:11 127213 /usr/sbin/httpd -DSSL
root 96912 5660 00:00:00 18:28 127692 sendmail: ./49VF1CX0107733 smtpin2.three.com.au.: user open
apache 588000 78596 00:00:17 16:35 128063 /usr/sbin/httpd -DSSL
root 97036 5688 00:00:00 13:28 128484 sendmail: ./4A2Il819111772 smtp.te-dns.net.: user open
root 96912 5680 00:00:00 10:28 128822 sendmail: ./4A1HlnNC110393 filter-fr.easynet.fr.: user open
apache 588356 72700 00:00:13 10:14 128824 /usr/sbin/httpd -DSSL
apache 593528 94632 00:00:14 10:13 128825 /usr/sbin/httpd -DSSL
apache 591196 87104 00:00:13 10:13 128826 /usr/sbin/httpd -DSSL
root 96912 5628 00:00:00 09:28 128970 sendmail: ./4A1BndY1054108 equitablepcib.com.: user open
root 96912 5660 00:00:00 08:28 129193 sendmail: ./49VEiQWx105048 smtpin2.three.com.au.: user open
root 96912 5648 00:00:00 07:28 129195 sendmail: ./49U8c5vd075455 mx.e.telefonica.net.: user open
root 40060 2032 00:00:00 07:10 129202 dovecot/ssl-params
apache 587872 79872 00:00:11 06:40 129268 /usr/sbin/httpd -DSSL
root 96912 5632 00:00:00 06:28 129331 sendmail: ./49VH9QDm127754 mailhost.rff.fr.: user open
root 0 0 00:00:00 05:47 129784 [flush-9:4]
apache 584988 55112 00:00:05 05:47 129785 /usr/sbin/httpd -DSSL
root 96632 5384 00:00:00 05:28 129786 sendmail: ./4A38o1B7000528 mx1.iinet.net.au.: user open
apache 585668 66196 00:00:06 05:23 129787 /usr/sbin/httpd -DSSL
apache 587352 85104 00:00:07 05:19 129790 /usr/sbin/httpd -DSSL
apache 586808 80164 00:00:07 05:19 129791 /usr/sbin/httpd -DSSL
apache 589532 75004 00:00:12 05:18 129792 /usr/sbin/httpd -DSSL
apache 588252 82252 00:00:12 05:18 129793 /usr/sbin/httpd -DSSL
apache 586740 57988 00:00:07 05:18 129794 /usr/sbin/httpd -DSSL
apache 585932 65612 00:00:09 05:18 129795 /usr/sbin/httpd -DSSL
apache 587424 56576 00:00:09 05:15 129797 /usr/sbin/httpd -DSSL
apache 586564 79492 00:00:07 05:15 129798 /usr/sbin/httpd -DSSL
apache 587180 70200 00:00:12 04:47 129942 /usr/sbin/httpd -DSSL
apache 585128 57224 00:00:03 04:46 129944 /usr/sbin/httpd -DSSL
root 96912 5588 00:00:00 04:28 129946 sendmail: ./4A1Jgk3I128875 mxs.leecooperkids.fr.: client greeting
root 96912 5584 00:00:00 03:28 130053 sendmail: ./4A33JLJ6195207 smtp.te-dns.net.: user open
root 96912 5584 00:00:00 02:28 130259 sendmail: ./4A2NpdNT159846 mailhost2.rff.fr.: user open
apache 588908 58772 00:00:02 01:59 130261 /usr/sbin/httpd -DSSL
root 96912 5540 00:00:00 01:28 130404 sendmail: ./4A38kqx6245398 mx1.project-patrimoine.fr.: user open
root 139932 1468 00:00:00 00:52 130407 CROND
root 106076 1244 00:00:00 00:52 130408 /bin/sh -c /usr/bin/curl http://www.webdevelopmentseo.com/cgi-bin/wds/awstats.pl?update=1 >/dev/null 2>&1 #Stats for webdevelopmentseo
root 173024 3220 00:00:00 00:52 130410 /usr/bin/curl http://www.webdevelopmentseo.com/cgi-bin/wds/awstats.pl?update=1
apache 39332 10540 00:00:10 00:52 130411 /usr/bin/perl /home/webdevelopmentseo/cgi-bin/wds/awstats.pl
root 15348 3364 00:00:00 00:31 130421 dovecot/config
dovecot 76712 3000 00:00:00 00:31 130422 dovecot/auth
root 78816 3196 00:00:00 00:31 130423 dovecot/auth -w
root 78816 3192 00:00:00 00:29 130425 dovecot/auth -w
root 96632 5376 00:00:00 00:28 130426 sendmail: ./4A3M88CE123411 mail.theclarendon.com.au.: user open
root 110772 2076 00:00:00 00:01 130659 /bin/bash /usr/bin/check_mk_agent
root 110900 1696 00:00:00 00:01 130685 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 130686 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 130687 cat
root 110900 1180 00:00:00 00:01 130713 /bin/bash /usr/bin/check_mk_agent
root 13364 1012 00:00:00 00:01 130714 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 130715 tr -s 
root 21712 764 00:00:21 136-23:07:49 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:06:05 65-13:30:51 181185 [flush-9:5]
root 0 0 00:00:04 1-22:31:24 181517 [flush-8:32]
root 567544 35364 00:21:23 65-13:22:18 182912 /usr/sbin/httpd -DSSL
root 19260 796 00:00:00 20:24:49 186929 /usr/sbin/dovecot
dovecot 12980 1064 00:00:00 20:24:49 186931 dovecot/anvil
root 13108 1196 00:00:00 20:24:49 186932 dovecot/log
root 266364 74560 00:00:57 2-19:42:44 218862 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 154784 45448 00:00:41 432-23:10:37 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 268524 76160 00:00:05 1-17:19:09 232578 spamd child
smmsp 78752 788 00:09:42 475-13:52:47 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:03:09 475-13:52:47 238030 sendmail: accepting connections
named 739840 58264 03:49:34 475-13:52:32 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-03 22:53

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4736540c3

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1730501669
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:53 537-01:46:49 1 /sbin/init
root 0 0 00:00:01 537-01:46:49 2 [kthreadd]
root 0 0 23:12:12 537-01:46:49 3 [migration/0]
root 0 0 01:06:28 537-01:46:49 4 [ksoftirqd/0]
root 0 0 00:00:00 537-01:46:49 5 [stopper/0]
root 0 0 00:17:22 537-01:46:49 6 [watchdog/0]
root 0 0 09:44:27 537-01:46:49 7 [migration/1]
root 0 0 00:00:00 537-01:46:49 8 [stopper/1]
root 0 0 01:42:27 537-01:46:49 9 [ksoftirqd/1]
root 0 0 00:21:38 537-01:46:49 10 [watchdog/1]
root 0 0 06:23:39 537-01:46:49 11 [migration/2]
root 0 0 00:00:00 537-01:46:49 12 [stopper/2]
root 0 0 00:51:46 537-01:46:49 13 [ksoftirqd/2]
root 0 0 00:19:24 537-01:46:49 14 [watchdog/2]
root 0 0 04:34:45 537-01:46:49 15 [migration/3]
root 0 0 00:00:00 537-01:46:49 16 [stopper/3]
root 0 0 00:37:51 537-01:46:49 17 [ksoftirqd/3]
root 0 0 00:15:15 537-01:46:49 18 [watchdog/3]
root 0 0 16:24:22 537-01:46:49 19 [migration/4]
root 0 0 00:00:00 537-01:46:49 20 [stopper/4]
root 0 0 00:57:17 537-01:46:49 21 [ksoftirqd/4]
root 0 0 00:08:53 537-01:46:49 22 [watchdog/4]
root 0 0 08:58:07 537-01:46:49 23 [migration/5]
root 0 0 00:00:00 537-01:46:49 24 [stopper/5]
root 0 0 00:39:58 537-01:46:49 25 [ksoftirqd/5]
root 0 0 00:18:51 537-01:46:49 26 [watchdog/5]
root 0 0 05:25:28 537-01:46:49 27 [migration/6]
root 0 0 00:00:00 537-01:46:49 28 [stopper/6]
root 0 0 00:30:53 537-01:46:49 29 [ksoftirqd/6]
root 0 0 00:14:25 537-01:46:49 30 [watchdog/6]
root 0 0 04:18:27 537-01:46:49 31 [migration/7]
root 0 0 00:00:00 537-01:46:49 32 [stopper/7]
root 0 0 00:30:27 537-01:46:49 33 [ksoftirqd/7]
root 0 0 00:11:42 537-01:46:49 34 [watchdog/7]
root 0 0 02:34:34 537-01:46:49 35 [events/0]
root 0 0 01:40:03 537-01:46:49 36 [events/1]
root 0 0 01:42:59 537-01:46:49 37 [events/2]
root 0 0 01:45:57 537-01:46:49 38 [events/3]
root 0 0 01:27:44 537-01:46:49 39 [events/4]
root 0 0 01:23:01 537-01:46:49 40 [events/5]
root 0 0 01:30:18 537-01:46:49 41 [events/6]
root 0 0 01:34:16 537-01:46:49 42 [events/7]
root 0 0 00:00:00 537-01:46:49 43 [events/0]
root 0 0 00:00:00 537-01:46:49 44 [events/1]
root 0 0 00:00:00 537-01:46:49 45 [events/2]
root 0 0 00:00:00 537-01:46:49 46 [events/3]
root 0 0 00:00:00 537-01:46:49 47 [events/4]
root 0 0 00:00:00 537-01:46:49 48 [events/5]
root 0 0 00:00:00 537-01:46:49 49 [events/6]
root 0 0 00:00:00 537-01:46:49 50 [events/7]
root 0 0 00:00:00 537-01:46:49 51 [events_long/0]
root 0 0 00:00:00 537-01:46:49 52 [events_long/1]
root 0 0 00:00:00 537-01:46:49 53 [events_long/2]
root 0 0 00:00:00 537-01:46:49 54 [events_long/3]
root 0 0 00:00:00 537-01:46:49 55 [events_long/4]
root 0 0 00:00:00 537-01:46:49 56 [events_long/5]
root 0 0 00:00:00 537-01:46:49 57 [events_long/6]
root 0 0 00:00:00 537-01:46:49 58 [events_long/7]
root 0 0 00:00:00 537-01:46:49 59 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 60 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 61 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 62 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 63 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 64 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 65 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 66 [events_power_ef]
root 0 0 00:00:00 537-01:46:49 67 [cgroup]
root 0 0 00:00:00 537-01:46:49 68 [khelper]
root 0 0 00:00:00 537-01:46:49 69 [netns]
root 0 0 00:00:00 537-01:46:49 70 [async/mgr]
root 0 0 00:00:00 537-01:46:49 71 [pm]
root 0 0 00:05:43 537-01:46:49 72 [sync_supers]
root 0 0 00:00:15 537-01:46:49 73 [bdi-default]
root 0 0 00:00:00 537-01:46:49 74 [kintegrityd/0]
root 0 0 00:00:00 537-01:46:49 75 [kintegrityd/1]
root 0 0 00:00:00 537-01:46:49 76 [kintegrityd/2]
root 0 0 00:00:00 537-01:46:49 77 [kintegrityd/3]
root 0 0 00:00:00 537-01:46:49 78 [kintegrityd/4]
root 0 0 00:00:00 537-01:46:49 79 [kintegrityd/5]
root 0 0 00:00:00 537-01:46:49 80 [kintegrityd/6]
root 0 0 00:00:00 537-01:46:49 81 [kintegrityd/7]
root 0 0 06:50:54 537-01:46:49 82 [kblockd/0]
root 0 0 00:12:30 537-01:46:49 83 [kblockd/1]
root 0 0 00:23:45 537-01:46:49 84 [kblockd/2]
root 0 0 00:04:51 537-01:46:49 85 [kblockd/3]
root 0 0 12:13:41 537-01:46:49 86 [kblockd/4]
root 0 0 00:14:54 537-01:46:49 87 [kblockd/5]
root 0 0 00:09:49 537-01:46:49 88 [kblockd/6]
root 0 0 00:07:34 537-01:46:49 89 [kblockd/7]
root 0 0 00:00:00 537-01:46:49 90 [kacpid]
root 0 0 00:00:00 537-01:46:49 91 [kacpi_notify]
root 0 0 00:00:00 537-01:46:49 92 [kacpi_hotplug]
root 0 0 00:00:00 537-01:46:49 93 [ata_aux]
root 0 0 00:00:00 537-01:46:49 94 [ata_sff/0]
root 0 0 00:00:00 537-01:46:49 95 [ata_sff/1]
root 0 0 00:00:00 537-01:46:49 96 [ata_sff/2]
root 0 0 00:00:00 537-01:46:49 97 [ata_sff/3]
root 0 0 00:00:00 537-01:46:49 98 [ata_sff/4]
root 0 0 00:00:00 537-01:46:49 99 [ata_sff/5]
root 0 0 00:00:00 537-01:46:49 100 [ata_sff/6]
root 0 0 00:00:00 537-01:46:49 101 [ata_sff/7]
root 0 0 00:00:00 537-01:46:49 102 [ksuspend_usbd]
root 0 0 00:00:00 537-01:46:49 103 [khubd]
root 0 0 00:00:00 537-01:46:49 104 [kseriod]
root 0 0 00:00:00 537-01:46:49 105 [md/0]
root 0 0 00:00:00 537-01:46:49 106 [md/1]
root 0 0 00:00:00 537-01:46:49 107 [md/2]
root 0 0 00:00:00 537-01:46:49 108 [md/3]
root 0 0 00:00:00 537-01:46:49 109 [md/4]
root 0 0 00:00:00 537-01:46:49 110 [md/5]
root 0 0 00:00:00 537-01:46:49 111 [md/6]
root 0 0 00:00:00 537-01:46:49 112 [md/7]
root 0 0 00:00:00 537-01:46:49 113 [md_misc/0]
root 0 0 00:00:00 537-01:46:49 114 [md_misc/1]
root 0 0 00:00:00 537-01:46:49 115 [md_misc/2]
root 0 0 00:00:00 537-01:46:49 116 [md_misc/3]
root 0 0 00:00:00 537-01:46:49 117 [md_misc/4]
root 0 0 00:00:00 537-01:46:49 118 [md_misc/5]
root 0 0 00:00:00 537-01:46:49 119 [md_misc/6]
root 0 0 00:00:00 537-01:46:49 120 [md_misc/7]
root 0 0 00:00:00 537-01:46:49 121 [linkwatch]
root 0 0 00:01:10 537-01:46:48 124 [khungtaskd]
root 0 0 1-03:45:22 537-01:46:48 125 [kswapd1]
root 0 0 00:00:00 537-01:46:48 126 [ksmd]
root 0 0 03:57:59 537-01:46:48 127 [khugepaged]
root 0 0 00:00:00 537-01:46:48 128 [aio/0]
root 0 0 00:00:00 537-01:46:48 129 [aio/1]
root 0 0 00:00:00 537-01:46:48 130 [aio/2]
root 0 0 00:00:00 537-01:46:48 131 [aio/3]
root 0 0 00:00:00 537-01:46:48 132 [aio/4]
root 0 0 00:00:00 537-01:46:48 133 [aio/5]
root 0 0 00:00:00 537-01:46:48 134 [aio/6]
root 0 0 00:00:00 537-01:46:48 135 [aio/7]
root 0 0 00:00:00 537-01:46:48 136 [crypto/0]
root 0 0 00:00:00 537-01:46:48 137 [crypto/1]
root 0 0 00:00:00 537-01:46:48 138 [crypto/2]
root 0 0 00:00:00 537-01:46:48 139 [crypto/3]
root 0 0 00:00:00 537-01:46:48 140 [crypto/4]
root 0 0 00:00:00 537-01:46:48 141 [crypto/5]
root 0 0 00:00:00 537-01:46:48 142 [crypto/6]
root 0 0 00:00:00 537-01:46:48 143 [crypto/7]
root 0 0 00:00:00 537-01:46:48 150 [kthrotld/0]
root 0 0 00:00:00 537-01:46:48 151 [kthrotld/1]
root 0 0 00:00:00 537-01:46:48 152 [kthrotld/2]
root 0 0 00:00:00 537-01:46:48 153 [kthrotld/3]
root 0 0 00:00:00 537-01:46:48 154 [kthrotld/4]
root 0 0 00:00:00 537-01:46:48 155 [kthrotld/5]
root 0 0 00:00:00 537-01:46:48 156 [kthrotld/6]
root 0 0 00:00:00 537-01:46:48 157 [kthrotld/7]
root 0 0 00:00:00 537-01:46:48 160 [kpsmoused]
root 0 0 00:00:00 537-01:46:48 161 [usbhid_resumer]
root 0 0 00:00:00 537-01:46:48 162 [deferwq]
root 0 0 00:00:00 537-01:46:48 194 [kdmremove]
root 0 0 00:00:00 537-01:46:48 195 [kstriped]
root 0 0 00:00:00 537-01:46:46 734 [scsi_eh_0]
root 0 0 00:00:00 537-01:46:46 735 [scsi_wq_0]
root 0 0 00:00:00 537-01:46:46 748 [scsi_eh_1]
root 0 0 00:00:00 537-01:46:46 749 [scsi_eh_2]
root 0 0 00:00:00 537-01:46:46 750 [scsi_eh_3]
root 0 0 00:00:00 537-01:46:46 751 [scsi_eh_4]
root 0 0 00:00:00 537-01:46:46 752 [scsi_eh_5]
root 0 0 00:00:00 537-01:46:46 753 [scsi_eh_6]
root 0 0 00:57:14 537-01:46:45 950 [md1_raid1]
root 0 0 00:03:29 537-01:46:44 1011 [jbd2/md1-8]
root 0 0 00:00:00 537-01:46:44 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 537-01:46:43 1105 /sbin/udevd -d
root 0 0 00:36:02 537-01:46:43 1225 [edac-poller]
root 0 0 00:10:50 537-01:46:42 1259 [md0_raid1]
root 0 0 02:58:51 537-01:46:42 1288 [md3_raid1]
root 0 0 2-17:42:20 537-01:46:42 1310 [md5_raid1]
root 0 0 01:08:56 537-01:46:42 1322 [md4_raid1]
root 0 0 00:32:14 537-01:46:42 1336 [md2_raid1]
root 0 0 00:18:42 537-01:46:40 1844 [flush-9:3]
root 0 0 00:00:00 537-01:46:40 1881 [jbd2/md0-8]
root 0 0 00:00:00 537-01:46:40 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 537-01:46:40 1885 [xfs_mru_cache]
root 0 0 01:40:11 537-01:46:40 1886 [xfslogd/0]
root 0 0 00:00:00 537-01:46:40 1887 [xfslogd/1]
root 0 0 00:03:32 537-01:46:40 1888 [xfslogd/2]
root 0 0 00:00:00 537-01:46:40 1889 [xfslogd/3]
root 0 0 03:04:27 537-01:46:40 1890 [xfslogd/4]
root 0 0 00:00:00 537-01:46:40 1891 [xfslogd/5]
root 0 0 00:00:00 537-01:46:40 1892 [xfslogd/6]
root 0 0 00:00:00 537-01:46:40 1893 [xfslogd/7]
root 0 0 03:05:19 537-01:46:40 1894 [xfsdatad/0]
root 0 0 00:00:00 537-01:46:40 1895 [xfsdatad/1]
root 0 0 00:02:18 537-01:46:40 1896 [xfsdatad/2]
root 0 0 00:00:00 537-01:46:40 1897 [xfsdatad/3]
root 0 0 03:26:23 537-01:46:40 1898 [xfsdatad/4]
root 0 0 00:00:00 537-01:46:40 1899 [xfsdatad/5]
root 0 0 00:00:00 537-01:46:40 1900 [xfsdatad/6]
root 0 0 00:00:00 537-01:46:40 1901 [xfsdatad/7]
root 0 0 00:00:00 537-01:46:40 1902 [xfsconvertd/0]
root 0 0 00:00:00 537-01:46:40 1903 [xfsconvertd/1]
root 0 0 00:00:00 537-01:46:40 1904 [xfsconvertd/2]
root 0 0 00:00:00 537-01:46:40 1905 [xfsconvertd/3]
root 0 0 00:00:00 537-01:46:40 1906 [xfsconvertd/4]
root 0 0 00:00:00 537-01:46:40 1907 [xfsconvertd/5]
root 0 0 00:00:00 537-01:46:40 1908 [xfsconvertd/6]
root 0 0 00:00:00 537-01:46:40 1909 [xfsconvertd/7]
root 0 0 00:00:02 537-01:46:40 1910 [xfsalloc/0]
root 0 0 00:00:02 537-01:46:40 1911 [xfsalloc/1]
root 0 0 00:00:03 537-01:46:40 1912 [xfsalloc/2]
root 0 0 00:00:04 537-01:46:40 1913 [xfsalloc/3]
root 0 0 00:00:02 537-01:46:40 1914 [xfsalloc/4]
root 0 0 00:00:03 537-01:46:40 1915 [xfsalloc/5]
root 0 0 00:00:03 537-01:46:40 1916 [xfsalloc/6]
root 0 0 00:00:05 537-01:46:40 1917 [xfsalloc/7]
root 0 0 00:00:11 537-01:46:40 1918 [xfseofblocks/0]
root 0 0 00:00:07 537-01:46:40 1919 [xfseofblocks/1]
root 0 0 00:00:09 537-01:46:40 1920 [xfseofblocks/2]
root 0 0 00:00:12 537-01:46:40 1921 [xfseofblocks/3]
root 0 0 00:00:08 537-01:46:40 1922 [xfseofblocks/4]
root 0 0 00:00:10 537-01:46:40 1923 [xfseofblocks/5]
root 0 0 00:00:04 537-01:46:40 1924 [xfseofblocks/6]
root 0 0 00:02:50 537-01:46:40 1925 [xfseofblocks/7]
root 0 0 00:31:43 537-01:46:40 1926 [xfsbufd/md5]
root 0 0 00:28:42 537-01:46:40 1927 [xfs-cil/md5]
root 0 0 00:57:54 537-01:46:40 1928 [xfssyncd/md5]
root 0 0 06:57:08 537-01:46:40 1929 [xfsaild/md5]
root 0 0 00:03:40 537-01:46:39 1930 [jbd2/md2-8]
root 0 0 00:00:00 537-01:46:39 1931 [ext4-dio-unwrit]
root 0 0 00:08:37 537-01:46:39 1932 [xfsbufd/md4]
root 0 0 00:00:50 537-01:46:39 1933 [xfs-cil/md4]
root 0 0 00:03:48 537-01:46:39 1934 [xfssyncd/md4]
root 0 0 06:36:51 537-01:46:39 1935 [xfsaild/md4]
root 0 0 00:27:30 537-01:46:39 1936 [xfsbufd/md3]
root 0 0 00:33:43 537-01:46:39 1937 [xfs-cil/md3]
root 0 0 00:04:56 537-01:46:39 1938 [xfssyncd/md3]
root 0 0 06:48:24 537-01:46:39 1939 [xfsaild/md3]
root 0 0 00:39:01 537-01:46:39 1940 [xfsbufd/sdc1]
root 0 0 00:42:57 537-01:46:39 1941 [xfs-cil/sdc1]
root 0 0 12:22:33 537-01:46:39 1942 [xfssyncd/sdc1]
root 0 0 1-08:36:25 537-01:46:39 1943 [xfsaild/sdc1]
root 0 0 00:06:28 537-01:46:38 1999 [kauditd]
root 29764 704 00:15:54 537-01:46:21 2254 auditd
root 252156 31220 03:23:34 537-01:46:20 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:54:12 537-01:46:20 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:38 537-01:46:19 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 537-01:46:19 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:45:47 537-01:46:19 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:25 537-01:46:18 2492 /usr/sbin/sshd
root 71720 2012 00:33:48 537-01:46:13 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:39 537-01:46:13 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:32 537-01:46:13 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:34:00 537-01:46:13 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:55 537-01:46:13 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:45 537-01:46:02 3359 crond
root 107544 436 00:00:27 537-01:46:00 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 537-01:45:55 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 537-01:45:55 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 537-01:45:55 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 537-01:45:55 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 537-01:45:55 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 537-01:45:55 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 537-01:45:55 3491 /sbin/udevd -d
root 11232 260 00:00:00 537-01:45:55 3492 /sbin/udevd -d
root 163092 1256 00:00:44 521-23:11:08 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 560 00:00:00 135-12:56:39 43438 SCREEN -O
root 108452 1384 00:00:00 135-12:56:39 43439 /bin/bash
root 108452 1384 00:00:00 135-12:55:36 43486 /bin/bash
root 109064 844 00:00:00 7-23:13:20 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:00 7-23:13:19 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 19-23:10:25 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:32 536-23:24:19 57735 [flush-9:2]
root 0 0 00:02:19 536-22:49:23 68416 [flush-9:1]
root 63348 3968 00:23:41 435-04:59:43 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 435-04:39:09 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1562288 925-04:57:03 435-04:39:08 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 269772 77892 00:00:17 03:54:41 121786 spamd child
root 0 0 00:00:00 01:09:24 152483 [flush-9:4]
root 267868 75524 00:00:00 50:27 155878 spamd child
root 15984 4044 00:00:00 37:41 158027 dovecot/config
dovecot 77764 4064 00:00:00 37:41 158028 dovecot/auth
root 21712 764 00:00:21 134-23:08:26 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 78816 3196 00:00:00 28:09 159849 dovecot/auth -w
root 97148 5828 00:00:00 15:09 162772 sendmail: ./49UAEDmF090530 mta7.am0.yahoodns.net.: client MAIL
root 97188 5868 00:00:00 13:09 163208 sendmail: ./49SBdSea142479 mta5.am0.yahoodns.net.: client greeting
root 96884 5652 00:00:00 10:09 163788 sendmail: ./49SAsTuq134856 mx.samsung.co.za.: user open
root 96756 5580 00:00:00 09:09 164205 sendmail: ./49VHj8k9132919 smtp.te-dns.net.: user open
apache 587012 91616 00:00:09 08:04 164288 /usr/sbin/httpd -DSSL
apache 588336 90204 00:00:10 08:04 164289 /usr/sbin/httpd -DSSL
root 96764 5584 00:00:00 07:09 164492 sendmail: ./49T8a3Up097731 mail003.telefonica.com.ar.: user open
root 96904 5620 00:00:00 06:09 164746 sendmail: ./49UNP1OY208548 mail.arco-elect.es.: user open
apache 585904 81908 00:00:07 05:41 164841 /usr/sbin/httpd -DSSL
root 96128 3560 00:00:00 05:09 164853 sendmail: ./4A1BndY1054108 equitablepcib.com.: user open
apache 587276 91860 00:00:05 04:52 165021 /usr/sbin/httpd -DSSL
apache 586252 79432 00:00:06 04:51 165022 /usr/sbin/httpd -DSSL
apache 587400 71700 00:00:05 04:51 165023 /usr/sbin/httpd -DSSL
apache 585672 76160 00:00:02 04:50 165025 /usr/sbin/httpd -DSSL
apache 612188 104392 00:00:03 04:50 165026 /usr/sbin/httpd -DSSL
apache 657912 133768 00:00:03 04:49 165030 /usr/sbin/httpd -DSSL
apache 608512 109716 00:00:06 04:48 165036 /usr/sbin/httpd -DSSL
apache 585632 76252 00:00:03 04:48 165046 /usr/sbin/httpd -DSSL
apache 585036 49856 00:00:02 04:48 165051 /usr/sbin/httpd -DSSL
apache 585392 66676 00:00:03 04:23 165161 /usr/sbin/httpd -DSSL
root 96744 5524 00:00:00 04:09 165167 sendmail: ./49VF1CX0107733 smtpin2.three.com.au.: user open
apache 610652 103368 00:00:05 03:28 165351 /usr/sbin/httpd -DSSL
apache 598444 77388 00:00:02 03:27 165356 /usr/sbin/httpd -DSSL
apache 592468 88228 00:00:05 03:26 165357 /usr/sbin/httpd -DSSL
apache 658232 146736 00:00:04 03:26 165359 /usr/sbin/httpd -DSSL
apache 585580 79636 00:00:02 03:26 165361 /usr/sbin/httpd -DSSL
apache 585776 77816 00:00:03 03:26 165362 /usr/sbin/httpd -DSSL
apache 607064 100860 00:00:04 03:26 165363 /usr/sbin/httpd -DSSL
apache 591060 89412 00:00:04 03:25 165370 /usr/sbin/httpd -DSSL
root 96128 3428 00:00:00 03:09 165407 sendmail: ./4A1Jgk3I128875 mxs.leecooperkids.fr.: client greeting
root 78816 3192 00:00:00 02:45 165411 dovecot/auth -w
root 96128 3556 00:00:00 02:09 165585 sendmail: ./4A1HCDl3104848 mx.insight.synacor.com.: user open
root 139932 1468 00:00:00 01:28 165594 CROND
root 106076 1248 00:00:00 01:28 165595 /bin/sh -c /usr/bin/curl http://www.webdevelopmentseo.com/cgi-bin/wds/awstats.pl?update=1 >/dev/null 2>&1 #Stats for webdevelopmentseo
root 173024 3220 00:00:00 01:28 165596 /usr/bin/curl http://www.webdevelopmentseo.com/cgi-bin/wds/awstats.pl?update=1
apache 39460 10672 00:00:09 01:28 165599 /usr/bin/perl /home/webdevelopmentseo/cgi-bin/wds/awstats.pl
root 96128 3376 00:00:00 01:09 165632 sendmail: ./4A1HlnNC110393 mx3.easynet.fr.: user open
root 40060 2032 00:00:00 00:55 165635 dovecot/ssl-params
dovenull 42592 3492 00:00:00 00:50 165662 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:50 165664 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:50 165665 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:50 165666 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165667 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165668 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165669 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:50 165670 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:50 165671 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165672 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165673 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165674 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165675 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:50 165676 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:49 165677 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:49 165679 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:49 165681 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:49 165682 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:49 165683 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:23 165944 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:23 165945 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:23 165946 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:17 165947 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:17 165948 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:17 165949 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:17 165950 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:17 165951 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165952 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:16 165953 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:16 165954 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165955 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165956 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165957 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:16 165958 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:16 165959 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165960 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:16 165962 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:16 165963 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165965 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165966 dovecot/pop3-login
dovenull 42592 3492 00:00:00 00:16 165967 dovecot/pop3-login
dovenull 42592 3496 00:00:00 00:16 165969 dovecot/pop3-login
root 96128 3368 00:00:00 00:09 165970 sendmail: ./4A1HhKqV109608 higherbracket.ca.: user open
apache 567620 27420 00:00:00 00:09 165971 /usr/sbin/httpd -DSSL
dovenull 42460 3172 00:00:00 00:05 166078 dovecot/pop3-login
root 110772 2080 00:00:00 00:01 166210 /bin/bash /usr/bin/check_mk_agent
root 110900 1696 00:00:00 00:01 166236 /bin/bash /usr/bin/check_mk_agent
root 110772 1260 00:00:00 00:01 166237 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 166242 cat
root 110900 1180 00:00:00 00:01 166264 /bin/bash /usr/bin/check_mk_agent
root 13364 1024 00:00:00 00:01 166265 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 166266 tr -s 
root 0 0 00:05:56 63-13:31:28 181185 [flush-9:5]
root 567096 34916 00:20:43 63-13:22:55 182912 /usr/sbin/httpd -DSSL
root 266364 74560 00:00:19 19:43:21 218862 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 154784 45448 00:00:41 430-23:11:14 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:40 473-13:53:24 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:02:52 473-13:53:24 238030 sendmail: accepting connections
named 739840 58344 03:48:43 473-13:53:09 238586 /usr/sbin/named -u named -4
root 19260 808 00:00:03 17:02:11 243843 /usr/sbin/dovecot
dovecot 13112 1180 00:00:00 17:02:11 243845 dovecot/anvil
root 13108 1200 00:00:00 17:02:11 243846 dovecot/log

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-11-01 22:54

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4678dac65

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1730414905
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:53 536-01:40:45 1 /sbin/init
root 0 0 00:00:01 536-01:40:45 2 [kthreadd]
root 0 0 23:08:53 536-01:40:45 3 [migration/0]
root 0 0 01:06:17 536-01:40:45 4 [ksoftirqd/0]
root 0 0 00:00:00 536-01:40:45 5 [stopper/0]
root 0 0 00:17:19 536-01:40:45 6 [watchdog/0]
root 0 0 09:43:36 536-01:40:45 7 [migration/1]
root 0 0 00:00:00 536-01:40:45 8 [stopper/1]
root 0 0 01:42:14 536-01:40:45 9 [ksoftirqd/1]
root 0 0 00:21:34 536-01:40:45 10 [watchdog/1]
root 0 0 06:23:13 536-01:40:45 11 [migration/2]
root 0 0 00:00:00 536-01:40:45 12 [stopper/2]
root 0 0 00:51:35 536-01:40:45 13 [ksoftirqd/2]
root 0 0 00:19:21 536-01:40:45 14 [watchdog/2]
root 0 0 04:34:24 536-01:40:45 15 [migration/3]
root 0 0 00:00:00 536-01:40:45 16 [stopper/3]
root 0 0 00:37:42 536-01:40:45 17 [ksoftirqd/3]
root 0 0 00:15:12 536-01:40:45 18 [watchdog/3]
root 0 0 16:21:44 536-01:40:45 19 [migration/4]
root 0 0 00:00:00 536-01:40:45 20 [stopper/4]
root 0 0 00:57:08 536-01:40:45 21 [ksoftirqd/4]
root 0 0 00:08:51 536-01:40:45 22 [watchdog/4]
root 0 0 08:57:32 536-01:40:45 23 [migration/5]
root 0 0 00:00:00 536-01:40:45 24 [stopper/5]
root 0 0 00:39:52 536-01:40:45 25 [ksoftirqd/5]
root 0 0 00:18:48 536-01:40:45 26 [watchdog/5]
root 0 0 05:25:11 536-01:40:45 27 [migration/6]
root 0 0 00:00:00 536-01:40:45 28 [stopper/6]
root 0 0 00:30:47 536-01:40:45 29 [ksoftirqd/6]
root 0 0 00:14:23 536-01:40:45 30 [watchdog/6]
root 0 0 04:18:13 536-01:40:45 31 [migration/7]
root 0 0 00:00:00 536-01:40:45 32 [stopper/7]
root 0 0 00:30:22 536-01:40:45 33 [ksoftirqd/7]
root 0 0 00:11:39 536-01:40:45 34 [watchdog/7]
root 0 0 02:34:09 536-01:40:45 35 [events/0]
root 0 0 01:39:42 536-01:40:45 36 [events/1]
root 0 0 01:42:36 536-01:40:45 37 [events/2]
root 0 0 01:45:32 536-01:40:45 38 [events/3]
root 0 0 01:27:30 536-01:40:45 39 [events/4]
root 0 0 01:22:47 536-01:40:45 40 [events/5]
root 0 0 01:30:03 536-01:40:45 41 [events/6]
root 0 0 01:33:58 536-01:40:45 42 [events/7]
root 0 0 00:00:00 536-01:40:45 43 [events/0]
root 0 0 00:00:00 536-01:40:45 44 [events/1]
root 0 0 00:00:00 536-01:40:45 45 [events/2]
root 0 0 00:00:00 536-01:40:45 46 [events/3]
root 0 0 00:00:00 536-01:40:45 47 [events/4]
root 0 0 00:00:00 536-01:40:45 48 [events/5]
root 0 0 00:00:00 536-01:40:45 49 [events/6]
root 0 0 00:00:00 536-01:40:45 50 [events/7]
root 0 0 00:00:00 536-01:40:45 51 [events_long/0]
root 0 0 00:00:00 536-01:40:45 52 [events_long/1]
root 0 0 00:00:00 536-01:40:45 53 [events_long/2]
root 0 0 00:00:00 536-01:40:45 54 [events_long/3]
root 0 0 00:00:00 536-01:40:45 55 [events_long/4]
root 0 0 00:00:00 536-01:40:45 56 [events_long/5]
root 0 0 00:00:00 536-01:40:45 57 [events_long/6]
root 0 0 00:00:00 536-01:40:45 58 [events_long/7]
root 0 0 00:00:00 536-01:40:45 59 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 60 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 61 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 62 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 63 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 64 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 65 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 66 [events_power_ef]
root 0 0 00:00:00 536-01:40:45 67 [cgroup]
root 0 0 00:00:00 536-01:40:45 68 [khelper]
root 0 0 00:00:00 536-01:40:45 69 [netns]
root 0 0 00:00:00 536-01:40:45 70 [async/mgr]
root 0 0 00:00:00 536-01:40:45 71 [pm]
root 0 0 00:05:42 536-01:40:45 72 [sync_supers]
root 0 0 00:00:15 536-01:40:45 73 [bdi-default]
root 0 0 00:00:00 536-01:40:45 74 [kintegrityd/0]
root 0 0 00:00:00 536-01:40:45 75 [kintegrityd/1]
root 0 0 00:00:00 536-01:40:45 76 [kintegrityd/2]
root 0 0 00:00:00 536-01:40:45 77 [kintegrityd/3]
root 0 0 00:00:00 536-01:40:45 78 [kintegrityd/4]
root 0 0 00:00:00 536-01:40:45 79 [kintegrityd/5]
root 0 0 00:00:00 536-01:40:45 80 [kintegrityd/6]
root 0 0 00:00:00 536-01:40:45 81 [kintegrityd/7]
root 0 0 06:48:59 536-01:40:45 82 [kblockd/0]
root 0 0 00:12:28 536-01:40:45 83 [kblockd/1]
root 0 0 00:23:44 536-01:40:45 84 [kblockd/2]
root 0 0 00:04:50 536-01:40:45 85 [kblockd/3]
root 0 0 12:10:08 536-01:40:45 86 [kblockd/4]
root 0 0 00:14:52 536-01:40:45 87 [kblockd/5]
root 0 0 00:09:48 536-01:40:45 88 [kblockd/6]
root 0 0 00:07:33 536-01:40:45 89 [kblockd/7]
root 0 0 00:00:00 536-01:40:45 90 [kacpid]
root 0 0 00:00:00 536-01:40:45 91 [kacpi_notify]
root 0 0 00:00:00 536-01:40:45 92 [kacpi_hotplug]
root 0 0 00:00:00 536-01:40:45 93 [ata_aux]
root 0 0 00:00:00 536-01:40:45 94 [ata_sff/0]
root 0 0 00:00:00 536-01:40:45 95 [ata_sff/1]
root 0 0 00:00:00 536-01:40:45 96 [ata_sff/2]
root 0 0 00:00:00 536-01:40:45 97 [ata_sff/3]
root 0 0 00:00:00 536-01:40:45 98 [ata_sff/4]
root 0 0 00:00:00 536-01:40:45 99 [ata_sff/5]
root 0 0 00:00:00 536-01:40:45 100 [ata_sff/6]
root 0 0 00:00:00 536-01:40:45 101 [ata_sff/7]
root 0 0 00:00:00 536-01:40:45 102 [ksuspend_usbd]
root 0 0 00:00:00 536-01:40:45 103 [khubd]
root 0 0 00:00:00 536-01:40:45 104 [kseriod]
root 0 0 00:00:00 536-01:40:45 105 [md/0]
root 0 0 00:00:00 536-01:40:45 106 [md/1]
root 0 0 00:00:00 536-01:40:45 107 [md/2]
root 0 0 00:00:00 536-01:40:45 108 [md/3]
root 0 0 00:00:00 536-01:40:45 109 [md/4]
root 0 0 00:00:00 536-01:40:45 110 [md/5]
root 0 0 00:00:00 536-01:40:45 111 [md/6]
root 0 0 00:00:00 536-01:40:45 112 [md/7]
root 0 0 00:00:00 536-01:40:45 113 [md_misc/0]
root 0 0 00:00:00 536-01:40:45 114 [md_misc/1]
root 0 0 00:00:00 536-01:40:45 115 [md_misc/2]
root 0 0 00:00:00 536-01:40:45 116 [md_misc/3]
root 0 0 00:00:00 536-01:40:45 117 [md_misc/4]
root 0 0 00:00:00 536-01:40:45 118 [md_misc/5]
root 0 0 00:00:00 536-01:40:45 119 [md_misc/6]
root 0 0 00:00:00 536-01:40:45 120 [md_misc/7]
root 0 0 00:00:00 536-01:40:45 121 [linkwatch]
root 0 0 00:01:10 536-01:40:44 124 [khungtaskd]
root 0 0 1-03:41:30 536-01:40:44 125 [kswapd1]
root 0 0 00:00:00 536-01:40:44 126 [ksmd]
root 0 0 03:57:27 536-01:40:44 127 [khugepaged]
root 0 0 00:00:00 536-01:40:44 128 [aio/0]
root 0 0 00:00:00 536-01:40:44 129 [aio/1]
root 0 0 00:00:00 536-01:40:44 130 [aio/2]
root 0 0 00:00:00 536-01:40:44 131 [aio/3]
root 0 0 00:00:00 536-01:40:44 132 [aio/4]
root 0 0 00:00:00 536-01:40:44 133 [aio/5]
root 0 0 00:00:00 536-01:40:44 134 [aio/6]
root 0 0 00:00:00 536-01:40:44 135 [aio/7]
root 0 0 00:00:00 536-01:40:44 136 [crypto/0]
root 0 0 00:00:00 536-01:40:44 137 [crypto/1]
root 0 0 00:00:00 536-01:40:44 138 [crypto/2]
root 0 0 00:00:00 536-01:40:44 139 [crypto/3]
root 0 0 00:00:00 536-01:40:44 140 [crypto/4]
root 0 0 00:00:00 536-01:40:44 141 [crypto/5]
root 0 0 00:00:00 536-01:40:44 142 [crypto/6]
root 0 0 00:00:00 536-01:40:44 143 [crypto/7]
root 0 0 00:00:00 536-01:40:44 150 [kthrotld/0]
root 0 0 00:00:00 536-01:40:44 151 [kthrotld/1]
root 0 0 00:00:00 536-01:40:44 152 [kthrotld/2]
root 0 0 00:00:00 536-01:40:44 153 [kthrotld/3]
root 0 0 00:00:00 536-01:40:44 154 [kthrotld/4]
root 0 0 00:00:00 536-01:40:44 155 [kthrotld/5]
root 0 0 00:00:00 536-01:40:44 156 [kthrotld/6]
root 0 0 00:00:00 536-01:40:44 157 [kthrotld/7]
root 0 0 00:00:00 536-01:40:44 160 [kpsmoused]
root 0 0 00:00:00 536-01:40:44 161 [usbhid_resumer]
root 0 0 00:00:00 536-01:40:44 162 [deferwq]
root 0 0 00:00:00 536-01:40:44 194 [kdmremove]
root 0 0 00:00:00 536-01:40:44 195 [kstriped]
root 0 0 00:00:00 536-01:40:42 734 [scsi_eh_0]
root 0 0 00:00:00 536-01:40:42 735 [scsi_wq_0]
root 0 0 00:00:00 536-01:40:42 748 [scsi_eh_1]
root 0 0 00:00:00 536-01:40:42 749 [scsi_eh_2]
root 0 0 00:00:00 536-01:40:42 750 [scsi_eh_3]
root 0 0 00:00:00 536-01:40:42 751 [scsi_eh_4]
root 0 0 00:00:00 536-01:40:42 752 [scsi_eh_5]
root 0 0 00:00:00 536-01:40:42 753 [scsi_eh_6]
root 0 0 00:57:12 536-01:40:41 950 [md1_raid1]
root 0 0 00:03:28 536-01:40:40 1011 [jbd2/md1-8]
root 0 0 00:00:00 536-01:40:40 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 536-01:40:39 1105 /sbin/udevd -d
root 0 0 00:35:44 536-01:40:39 1225 [edac-poller]
root 0 0 00:10:50 536-01:40:38 1259 [md0_raid1]
root 0 0 02:56:56 536-01:40:38 1288 [md3_raid1]
root 0 0 2-17:38:42 536-01:40:38 1310 [md5_raid1]
root 0 0 01:08:52 536-01:40:38 1322 [md4_raid1]
root 0 0 00:32:11 536-01:40:38 1336 [md2_raid1]
root 0 0 00:18:39 536-01:40:36 1844 [flush-9:3]
root 0 0 00:00:00 536-01:40:36 1881 [jbd2/md0-8]
root 0 0 00:00:00 536-01:40:36 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 536-01:40:36 1885 [xfs_mru_cache]
root 0 0 01:39:48 536-01:40:36 1886 [xfslogd/0]
root 0 0 00:00:00 536-01:40:36 1887 [xfslogd/1]
root 0 0 00:03:32 536-01:40:36 1888 [xfslogd/2]
root 0 0 00:00:00 536-01:40:36 1889 [xfslogd/3]
root 0 0 03:03:11 536-01:40:36 1890 [xfslogd/4]
root 0 0 00:00:00 536-01:40:36 1891 [xfslogd/5]
root 0 0 00:00:00 536-01:40:36 1892 [xfslogd/6]
root 0 0 00:00:00 536-01:40:36 1893 [xfslogd/7]
root 0 0 03:04:17 536-01:40:36 1894 [xfsdatad/0]
root 0 0 00:00:00 536-01:40:36 1895 [xfsdatad/1]
root 0 0 00:02:18 536-01:40:36 1896 [xfsdatad/2]
root 0 0 00:00:00 536-01:40:36 1897 [xfsdatad/3]
root 0 0 03:25:18 536-01:40:36 1898 [xfsdatad/4]
root 0 0 00:00:00 536-01:40:36 1899 [xfsdatad/5]
root 0 0 00:00:00 536-01:40:36 1900 [xfsdatad/6]
root 0 0 00:00:00 536-01:40:36 1901 [xfsdatad/7]
root 0 0 00:00:00 536-01:40:36 1902 [xfsconvertd/0]
root 0 0 00:00:00 536-01:40:36 1903 [xfsconvertd/1]
root 0 0 00:00:00 536-01:40:36 1904 [xfsconvertd/2]
root 0 0 00:00:00 536-01:40:36 1905 [xfsconvertd/3]
root 0 0 00:00:00 536-01:40:36 1906 [xfsconvertd/4]
root 0 0 00:00:00 536-01:40:36 1907 [xfsconvertd/5]
root 0 0 00:00:00 536-01:40:36 1908 [xfsconvertd/6]
root 0 0 00:00:00 536-01:40:36 1909 [xfsconvertd/7]
root 0 0 00:00:02 536-01:40:36 1910 [xfsalloc/0]
root 0 0 00:00:02 536-01:40:36 1911 [xfsalloc/1]
root 0 0 00:00:02 536-01:40:36 1912 [xfsalloc/2]
root 0 0 00:00:04 536-01:40:36 1913 [xfsalloc/3]
root 0 0 00:00:02 536-01:40:36 1914 [xfsalloc/4]
root 0 0 00:00:03 536-01:40:36 1915 [xfsalloc/5]
root 0 0 00:00:03 536-01:40:36 1916 [xfsalloc/6]
root 0 0 00:00:05 536-01:40:36 1917 [xfsalloc/7]
root 0 0 00:00:11 536-01:40:36 1918 [xfseofblocks/0]
root 0 0 00:00:07 536-01:40:36 1919 [xfseofblocks/1]
root 0 0 00:00:09 536-01:40:36 1920 [xfseofblocks/2]
root 0 0 00:00:12 536-01:40:36 1921 [xfseofblocks/3]
root 0 0 00:00:08 536-01:40:36 1922 [xfseofblocks/4]
root 0 0 00:00:10 536-01:40:36 1923 [xfseofblocks/5]
root 0 0 00:00:04 536-01:40:36 1924 [xfseofblocks/6]
root 0 0 00:02:49 536-01:40:36 1925 [xfseofblocks/7]
root 0 0 00:31:37 536-01:40:36 1926 [xfsbufd/md5]
root 0 0 00:28:36 536-01:40:36 1927 [xfs-cil/md5]
root 0 0 00:57:46 536-01:40:36 1928 [xfssyncd/md5]
root 0 0 06:55:14 536-01:40:36 1929 [xfsaild/md5]
root 0 0 00:03:39 536-01:40:35 1930 [jbd2/md2-8]
root 0 0 00:00:00 536-01:40:35 1931 [ext4-dio-unwrit]
root 0 0 00:08:35 536-01:40:35 1932 [xfsbufd/md4]
root 0 0 00:00:50 536-01:40:35 1933 [xfs-cil/md4]
root 0 0 00:03:47 536-01:40:35 1934 [xfssyncd/md4]
root 0 0 06:34:59 536-01:40:35 1935 [xfsaild/md4]
root 0 0 00:27:20 536-01:40:35 1936 [xfsbufd/md3]
root 0 0 00:32:58 536-01:40:35 1937 [xfs-cil/md3]
root 0 0 00:04:54 536-01:40:35 1938 [xfssyncd/md3]
root 0 0 06:46:28 536-01:40:35 1939 [xfsaild/md3]
root 0 0 00:38:50 536-01:40:35 1940 [xfsbufd/sdc1]
root 0 0 00:42:46 536-01:40:35 1941 [xfs-cil/sdc1]
root 0 0 12:21:33 536-01:40:35 1942 [xfssyncd/sdc1]
root 0 0 1-08:30:35 536-01:40:35 1943 [xfsaild/sdc1]
root 0 0 00:06:28 536-01:40:34 1999 [kauditd]
root 29764 704 00:15:53 536-01:40:17 2254 auditd
root 252156 31220 03:21:30 536-01:40:16 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:53:48 536-01:40:16 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:38 536-01:40:15 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 536-01:40:15 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:45:37 536-01:40:15 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:25 536-01:40:14 2492 /usr/sbin/sshd
root 71720 2012 00:33:47 536-01:40:09 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:37 536-01:40:09 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:31 536-01:40:09 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:59 536-01:40:09 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:53 536-01:40:09 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:44 536-01:39:58 3359 crond
root 107544 436 00:00:27 536-01:39:56 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 536-01:39:51 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 536-01:39:51 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 536-01:39:51 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 536-01:39:51 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 536-01:39:51 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 536-01:39:51 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 536-01:39:51 3491 /sbin/udevd -d
root 11232 260 00:00:00 536-01:39:51 3492 /sbin/udevd -d
root 19260 796 00:00:00 16:59:22 21259 /usr/sbin/dovecot
dovecot 12980 1068 00:00:00 16:59:22 21261 dovecot/anvil
root 13108 1200 00:00:00 16:59:22 21262 dovecot/log
root 163092 1256 00:00:44 520-23:05:04 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 266292 74500 00:00:35 1-17:41:40 42498 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 118780 560 00:00:00 134-12:50:35 43438 SCREEN -O
root 108452 1384 00:00:00 134-12:50:35 43439 /bin/bash
root 108452 1384 00:00:00 134-12:49:32 43486 /bin/bash
root 109064 844 00:00:00 6-23:07:16 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 12860 00:00:00 6-23:07:15 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63548 00:00:18 18-23:04:21 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:31 535-23:18:15 57735 [flush-9:2]
root 0 0 00:02:18 535-22:43:19 68416 [flush-9:1]
root 63348 3968 00:23:37 434-04:53:39 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 434-04:33:05 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1574000 921-01:16:56 434-04:33:04 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 268428 76100 00:00:09 06:14:33 121926 spamd child
root 21712 764 00:00:20 133-23:02:22 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
apache 619676 126776 00:00:54 22:50 174120 /usr/sbin/httpd -DSSL
apache 588692 95556 00:00:42 22:49 174121 /usr/sbin/httpd -DSSL
apache 592484 98676 00:00:44 18:42 174745 /usr/sbin/httpd -DSSL
apache 587428 94696 00:00:43 18:15 175018 /usr/sbin/httpd -DSSL
apache 593516 98640 00:00:45 17:28 175039 /usr/sbin/httpd -DSSL
apache 592664 91756 00:00:42 17:17 175044 /usr/sbin/httpd -DSSL
apache 620348 116524 00:00:31 16:31 175064 /usr/sbin/httpd -DSSL
root 97280 5888 00:00:01 16:07 175211 sendmail: ./49RArSME140090 mta5.am0.yahoodns.net.: client greeting
apache 604748 100240 00:00:34 14:24 175478 /usr/sbin/httpd -DSSL
apache 589124 93724 00:00:23 13:24 175696 /usr/sbin/httpd -DSSL
root 97476 6152 00:00:00 13:07 175697 sendmail: ./49TAbS3E116968 mta7.am0.yahoodns.net.: user open
apache 589400 94520 00:00:29 12:30 175707 /usr/sbin/httpd -DSSL
root 97268 5864 00:00:01 12:07 175952 sendmail: ./49R4ZC3k071506 mta7.am0.yahoodns.net.: user open
root 97264 5864 00:00:00 11:07 176078 sendmail: ./49RBViTH146985 beta.sinix.net.: user open
root 97244 5856 00:00:00 10:07 176084 sendmail: ./49RGh99j197356 mta.supercable.es.: user open
root 97268 5856 00:00:00 09:07 176242 sendmail: ./49T6Mk1O075809 mta5.am0.yahoodns.net.: client EHLO
root 97268 5868 00:00:00 08:07 176493 sendmail: ./49RGg40F197233 mta.supercable.es.: user open
root 96712 5580 00:00:00 07:07 176501 sendmail: ./49T6Pivc076382 mail003.telefonica.com.ar.: user open
root 97136 5808 00:00:00 06:07 176800 sendmail: ./49UA29Dg088927 mta6.am0.yahoodns.net.: user open
apache 604040 98184 00:00:20 05:20 176805 /usr/sbin/httpd -DSSL
apache 598008 92404 00:00:14 05:19 176806 /usr/sbin/httpd -DSSL
apache 588852 76692 00:00:08 05:19 176807 /usr/sbin/httpd -DSSL
root 96704 5572 00:00:00 05:07 176808 sendmail: ./49SAsTuq134856 mx.samsung.co.za.: user open
apache 618864 103368 00:00:10 04:59 176809 /usr/sbin/httpd -DSSL
root 96568 5384 00:00:00 04:07 176819 sendmail: ./49VF1CX0107733 smtpin2.three.com.au.: user open
apache 604624 88580 00:00:05 04:02 176959 /usr/sbin/httpd -DSSL
apache 586804 72412 00:00:12 04:00 176960 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 03:20 177196 [flush-9:4]
apache 615952 97312 00:00:01 03:11 177197 /usr/sbin/httpd -DSSL
root 96836 5576 00:00:00 03:07 177198 sendmail: ./49UNP1OY208548 mail.arco-elect.es.: user open
root 266292 71980 00:00:00 02:48 177206 spamd child
apache 655116 133400 00:00:06 02:33 177211 /usr/sbin/httpd -DSSL
root 96568 5384 00:00:00 02:07 177226 sendmail: ./49VEXcIb103221 smtp.te-dns.net.: user open
root 96568 5372 00:00:00 01:07 177386 sendmail: ./49VH9QDm127754 mailhost.rff.fr.: user open
root 96568 5372 00:00:00 00:07 177603 sendmail: ./49VHj8k9132919 smtp.te-dns.net.: user open
root 110772 2076 00:00:00 00:01 177686 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 177708 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 177709 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 177710 cat
root 110900 1176 00:00:00 00:01 177736 /bin/bash /usr/bin/check_mk_agent
root 13360 1012 00:00:00 00:01 177737 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 177738 tr -s 
root 0 0 00:05:50 62-13:25:24 181185 [flush-9:5]
root 567096 34916 00:20:19 62-13:16:51 182912 /usr/sbin/httpd -DSSL
root 154784 45448 00:00:41 429-23:05:10 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:39 472-13:47:20 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:02:42 472-13:47:20 238030 sendmail: rejecting connections on daemon MTA: 15 children, max 15
named 739840 58104 03:48:13 472-13:47:05 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-31 22:48

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4dc3271ec

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1730240719
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1024 00:00:52 534-01:17:39 1 /sbin/init
root 0 0 00:00:01 534-01:17:39 2 [kthreadd]
root 0 0 23:02:12 534-01:17:39 3 [migration/0]
root 0 0 01:05:57 534-01:17:39 4 [ksoftirqd/0]
root 0 0 00:00:00 534-01:17:39 5 [stopper/0]
root 0 0 00:17:15 534-01:17:39 6 [watchdog/0]
root 0 0 09:41:03 534-01:17:39 7 [migration/1]
root 0 0 00:00:00 534-01:17:39 8 [stopper/1]
root 0 0 01:41:51 534-01:17:39 9 [ksoftirqd/1]
root 0 0 00:21:27 534-01:17:39 10 [watchdog/1]
root 0 0 06:21:07 534-01:17:39 11 [migration/2]
root 0 0 00:00:00 534-01:17:39 12 [stopper/2]
root 0 0 00:51:18 534-01:17:39 13 [ksoftirqd/2]
root 0 0 00:19:17 534-01:17:39 14 [watchdog/2]
root 0 0 04:32:50 534-01:17:39 15 [migration/3]
root 0 0 00:00:00 534-01:17:39 16 [stopper/3]
root 0 0 00:37:27 534-01:17:39 17 [ksoftirqd/3]
root 0 0 00:15:06 534-01:17:39 18 [watchdog/3]
root 0 0 16:15:36 534-01:17:39 19 [migration/4]
root 0 0 00:00:00 534-01:17:39 20 [stopper/4]
root 0 0 00:56:51 534-01:17:39 21 [ksoftirqd/4]
root 0 0 00:08:47 534-01:17:39 22 [watchdog/4]
root 0 0 08:55:28 534-01:17:39 23 [migration/5]
root 0 0 00:00:00 534-01:17:39 24 [stopper/5]
root 0 0 00:39:43 534-01:17:39 25 [ksoftirqd/5]
root 0 0 00:18:42 534-01:17:39 26 [watchdog/5]
root 0 0 05:23:47 534-01:17:39 27 [migration/6]
root 0 0 00:00:00 534-01:17:39 28 [stopper/6]
root 0 0 00:30:38 534-01:17:39 29 [ksoftirqd/6]
root 0 0 00:14:19 534-01:17:39 30 [watchdog/6]
root 0 0 04:16:51 534-01:17:39 31 [migration/7]
root 0 0 00:00:00 534-01:17:39 32 [stopper/7]
root 0 0 00:30:11 534-01:17:39 33 [ksoftirqd/7]
root 0 0 00:11:35 534-01:17:39 34 [watchdog/7]
root 0 0 02:33:30 534-01:17:39 35 [events/0]
root 0 0 01:39:14 534-01:17:39 36 [events/1]
root 0 0 01:42:02 534-01:17:39 37 [events/2]
root 0 0 01:44:58 534-01:17:39 38 [events/3]
root 0 0 01:27:09 534-01:17:39 39 [events/4]
root 0 0 01:22:26 534-01:17:39 40 [events/5]
root 0 0 01:29:38 534-01:17:39 41 [events/6]
root 0 0 01:33:30 534-01:17:39 42 [events/7]
root 0 0 00:00:00 534-01:17:39 43 [events/0]
root 0 0 00:00:00 534-01:17:39 44 [events/1]
root 0 0 00:00:00 534-01:17:39 45 [events/2]
root 0 0 00:00:00 534-01:17:39 46 [events/3]
root 0 0 00:00:00 534-01:17:39 47 [events/4]
root 0 0 00:00:00 534-01:17:39 48 [events/5]
root 0 0 00:00:00 534-01:17:39 49 [events/6]
root 0 0 00:00:00 534-01:17:39 50 [events/7]
root 0 0 00:00:00 534-01:17:39 51 [events_long/0]
root 0 0 00:00:00 534-01:17:39 52 [events_long/1]
root 0 0 00:00:00 534-01:17:39 53 [events_long/2]
root 0 0 00:00:00 534-01:17:39 54 [events_long/3]
root 0 0 00:00:00 534-01:17:39 55 [events_long/4]
root 0 0 00:00:00 534-01:17:39 56 [events_long/5]
root 0 0 00:00:00 534-01:17:39 57 [events_long/6]
root 0 0 00:00:00 534-01:17:39 58 [events_long/7]
root 0 0 00:00:00 534-01:17:39 59 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 60 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 61 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 62 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 63 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 64 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 65 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 66 [events_power_ef]
root 0 0 00:00:00 534-01:17:39 67 [cgroup]
root 0 0 00:00:00 534-01:17:39 68 [khelper]
root 0 0 00:00:00 534-01:17:39 69 [netns]
root 0 0 00:00:00 534-01:17:39 70 [async/mgr]
root 0 0 00:00:00 534-01:17:39 71 [pm]
root 0 0 00:05:40 534-01:17:39 72 [sync_supers]
root 0 0 00:00:15 534-01:17:39 73 [bdi-default]
root 0 0 00:00:00 534-01:17:39 74 [kintegrityd/0]
root 0 0 00:00:00 534-01:17:39 75 [kintegrityd/1]
root 0 0 00:00:00 534-01:17:39 76 [kintegrityd/2]
root 0 0 00:00:00 534-01:17:39 77 [kintegrityd/3]
root 0 0 00:00:00 534-01:17:39 78 [kintegrityd/4]
root 0 0 00:00:00 534-01:17:39 79 [kintegrityd/5]
root 0 0 00:00:00 534-01:17:39 80 [kintegrityd/6]
root 0 0 00:00:00 534-01:17:39 81 [kintegrityd/7]
root 0 0 06:45:30 534-01:17:39 82 [kblockd/0]
root 0 0 00:12:23 534-01:17:39 83 [kblockd/1]
root 0 0 00:23:41 534-01:17:39 84 [kblockd/2]
root 0 0 00:04:48 534-01:17:39 85 [kblockd/3]
root 0 0 12:02:41 534-01:17:39 86 [kblockd/4]
root 0 0 00:14:47 534-01:17:39 87 [kblockd/5]
root 0 0 00:09:44 534-01:17:39 88 [kblockd/6]
root 0 0 00:07:30 534-01:17:39 89 [kblockd/7]
root 0 0 00:00:00 534-01:17:39 90 [kacpid]
root 0 0 00:00:00 534-01:17:39 91 [kacpi_notify]
root 0 0 00:00:00 534-01:17:39 92 [kacpi_hotplug]
root 0 0 00:00:00 534-01:17:39 93 [ata_aux]
root 0 0 00:00:00 534-01:17:39 94 [ata_sff/0]
root 0 0 00:00:00 534-01:17:39 95 [ata_sff/1]
root 0 0 00:00:00 534-01:17:39 96 [ata_sff/2]
root 0 0 00:00:00 534-01:17:39 97 [ata_sff/3]
root 0 0 00:00:00 534-01:17:39 98 [ata_sff/4]
root 0 0 00:00:00 534-01:17:39 99 [ata_sff/5]
root 0 0 00:00:00 534-01:17:39 100 [ata_sff/6]
root 0 0 00:00:00 534-01:17:39 101 [ata_sff/7]
root 0 0 00:00:00 534-01:17:39 102 [ksuspend_usbd]
root 0 0 00:00:00 534-01:17:39 103 [khubd]
root 0 0 00:00:00 534-01:17:39 104 [kseriod]
root 0 0 00:00:00 534-01:17:39 105 [md/0]
root 0 0 00:00:00 534-01:17:39 106 [md/1]
root 0 0 00:00:00 534-01:17:39 107 [md/2]
root 0 0 00:00:00 534-01:17:39 108 [md/3]
root 0 0 00:00:00 534-01:17:39 109 [md/4]
root 0 0 00:00:00 534-01:17:39 110 [md/5]
root 0 0 00:00:00 534-01:17:39 111 [md/6]
root 0 0 00:00:00 534-01:17:39 112 [md/7]
root 0 0 00:00:00 534-01:17:39 113 [md_misc/0]
root 0 0 00:00:00 534-01:17:39 114 [md_misc/1]
root 0 0 00:00:00 534-01:17:39 115 [md_misc/2]
root 0 0 00:00:00 534-01:17:39 116 [md_misc/3]
root 0 0 00:00:00 534-01:17:39 117 [md_misc/4]
root 0 0 00:00:00 534-01:17:39 118 [md_misc/5]
root 0 0 00:00:00 534-01:17:39 119 [md_misc/6]
root 0 0 00:00:00 534-01:17:39 120 [md_misc/7]
root 0 0 00:00:00 534-01:17:39 121 [linkwatch]
root 0 0 00:01:10 534-01:17:38 124 [khungtaskd]
root 0 0 1-03:33:08 534-01:17:38 125 [kswapd1]
root 0 0 00:00:00 534-01:17:38 126 [ksmd]
root 0 0 03:56:23 534-01:17:38 127 [khugepaged]
root 0 0 00:00:00 534-01:17:38 128 [aio/0]
root 0 0 00:00:00 534-01:17:38 129 [aio/1]
root 0 0 00:00:00 534-01:17:38 130 [aio/2]
root 0 0 00:00:00 534-01:17:38 131 [aio/3]
root 0 0 00:00:00 534-01:17:38 132 [aio/4]
root 0 0 00:00:00 534-01:17:38 133 [aio/5]
root 0 0 00:00:00 534-01:17:38 134 [aio/6]
root 0 0 00:00:00 534-01:17:38 135 [aio/7]
root 0 0 00:00:00 534-01:17:38 136 [crypto/0]
root 0 0 00:00:00 534-01:17:38 137 [crypto/1]
root 0 0 00:00:00 534-01:17:38 138 [crypto/2]
root 0 0 00:00:00 534-01:17:38 139 [crypto/3]
root 0 0 00:00:00 534-01:17:38 140 [crypto/4]
root 0 0 00:00:00 534-01:17:38 141 [crypto/5]
root 0 0 00:00:00 534-01:17:38 142 [crypto/6]
root 0 0 00:00:00 534-01:17:38 143 [crypto/7]
root 0 0 00:00:00 534-01:17:38 150 [kthrotld/0]
root 0 0 00:00:00 534-01:17:38 151 [kthrotld/1]
root 0 0 00:00:00 534-01:17:38 152 [kthrotld/2]
root 0 0 00:00:00 534-01:17:38 153 [kthrotld/3]
root 0 0 00:00:00 534-01:17:38 154 [kthrotld/4]
root 0 0 00:00:00 534-01:17:38 155 [kthrotld/5]
root 0 0 00:00:00 534-01:17:38 156 [kthrotld/6]
root 0 0 00:00:00 534-01:17:38 157 [kthrotld/7]
root 0 0 00:00:00 534-01:17:38 160 [kpsmoused]
root 0 0 00:00:00 534-01:17:38 161 [usbhid_resumer]
root 0 0 00:00:00 534-01:17:38 162 [deferwq]
root 0 0 00:00:00 534-01:17:38 194 [kdmremove]
root 0 0 00:00:00 534-01:17:38 195 [kstriped]
root 0 0 00:00:00 534-01:17:36 734 [scsi_eh_0]
root 0 0 00:00:00 534-01:17:36 735 [scsi_wq_0]
root 0 0 00:00:00 534-01:17:36 748 [scsi_eh_1]
root 0 0 00:00:00 534-01:17:36 749 [scsi_eh_2]
root 0 0 00:00:00 534-01:17:36 750 [scsi_eh_3]
root 0 0 00:00:00 534-01:17:36 751 [scsi_eh_4]
root 0 0 00:00:00 534-01:17:36 752 [scsi_eh_5]
root 0 0 00:00:00 534-01:17:36 753 [scsi_eh_6]
root 0 0 00:57:08 534-01:17:35 950 [md1_raid1]
root 0 0 00:03:27 534-01:17:34 1011 [jbd2/md1-8]
root 0 0 00:00:00 534-01:17:34 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 534-01:17:33 1105 /sbin/udevd -d
root 0 0 00:35:27 534-01:17:33 1225 [edac-poller]
root 0 0 00:10:50 534-01:17:32 1259 [md0_raid1]
root 0 0 02:51:52 534-01:17:32 1288 [md3_raid1]
root 0 0 2-17:32:36 534-01:17:32 1310 [md5_raid1]
root 0 0 01:08:45 534-01:17:32 1322 [md4_raid1]
root 0 0 00:32:08 534-01:17:32 1336 [md2_raid1]
root 0 0 00:18:34 534-01:17:30 1844 [flush-9:3]
root 0 0 00:00:00 534-01:17:30 1881 [jbd2/md0-8]
root 0 0 00:00:00 534-01:17:30 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 534-01:17:30 1885 [xfs_mru_cache]
root 0 0 01:38:58 534-01:17:30 1886 [xfslogd/0]
root 0 0 00:00:00 534-01:17:30 1887 [xfslogd/1]
root 0 0 00:03:32 534-01:17:30 1888 [xfslogd/2]
root 0 0 00:00:00 534-01:17:30 1889 [xfslogd/3]
root 0 0 02:59:55 534-01:17:30 1890 [xfslogd/4]
root 0 0 00:00:00 534-01:17:30 1891 [xfslogd/5]
root 0 0 00:00:00 534-01:17:30 1892 [xfslogd/6]
root 0 0 00:00:00 534-01:17:30 1893 [xfslogd/7]
root 0 0 03:01:22 534-01:17:30 1894 [xfsdatad/0]
root 0 0 00:00:00 534-01:17:30 1895 [xfsdatad/1]
root 0 0 00:02:18 534-01:17:30 1896 [xfsdatad/2]
root 0 0 00:00:00 534-01:17:30 1897 [xfsdatad/3]
root 0 0 03:22:36 534-01:17:30 1898 [xfsdatad/4]
root 0 0 00:00:00 534-01:17:30 1899 [xfsdatad/5]
root 0 0 00:00:00 534-01:17:30 1900 [xfsdatad/6]
root 0 0 00:00:00 534-01:17:30 1901 [xfsdatad/7]
root 0 0 00:00:00 534-01:17:30 1902 [xfsconvertd/0]
root 0 0 00:00:00 534-01:17:30 1903 [xfsconvertd/1]
root 0 0 00:00:00 534-01:17:30 1904 [xfsconvertd/2]
root 0 0 00:00:00 534-01:17:30 1905 [xfsconvertd/3]
root 0 0 00:00:00 534-01:17:30 1906 [xfsconvertd/4]
root 0 0 00:00:00 534-01:17:30 1907 [xfsconvertd/5]
root 0 0 00:00:00 534-01:17:30 1908 [xfsconvertd/6]
root 0 0 00:00:00 534-01:17:30 1909 [xfsconvertd/7]
root 0 0 00:00:02 534-01:17:30 1910 [xfsalloc/0]
root 0 0 00:00:02 534-01:17:30 1911 [xfsalloc/1]
root 0 0 00:00:02 534-01:17:30 1912 [xfsalloc/2]
root 0 0 00:00:04 534-01:17:30 1913 [xfsalloc/3]
root 0 0 00:00:02 534-01:17:30 1914 [xfsalloc/4]
root 0 0 00:00:03 534-01:17:30 1915 [xfsalloc/5]
root 0 0 00:00:03 534-01:17:30 1916 [xfsalloc/6]
root 0 0 00:00:05 534-01:17:30 1917 [xfsalloc/7]
root 0 0 00:00:11 534-01:17:30 1918 [xfseofblocks/0]
root 0 0 00:00:07 534-01:17:30 1919 [xfseofblocks/1]
root 0 0 00:00:09 534-01:17:30 1920 [xfseofblocks/2]
root 0 0 00:00:12 534-01:17:30 1921 [xfseofblocks/3]
root 0 0 00:00:08 534-01:17:30 1922 [xfseofblocks/4]
root 0 0 00:00:10 534-01:17:30 1923 [xfseofblocks/5]
root 0 0 00:00:04 534-01:17:30 1924 [xfseofblocks/6]
root 0 0 00:02:49 534-01:17:30 1925 [xfseofblocks/7]
root 0 0 00:31:28 534-01:17:30 1926 [xfsbufd/md5]
root 0 0 00:28:26 534-01:17:30 1927 [xfs-cil/md5]
root 0 0 00:57:32 534-01:17:30 1928 [xfssyncd/md5]
root 0 0 06:52:49 534-01:17:30 1929 [xfsaild/md5]
root 0 0 00:03:39 534-01:17:29 1930 [jbd2/md2-8]
root 0 0 00:00:00 534-01:17:29 1931 [ext4-dio-unwrit]
root 0 0 00:08:33 534-01:17:29 1932 [xfsbufd/md4]
root 0 0 00:00:50 534-01:17:29 1933 [xfs-cil/md4]
root 0 0 00:03:46 534-01:17:29 1934 [xfssyncd/md4]
root 0 0 06:32:38 534-01:17:29 1935 [xfsaild/md4]
root 0 0 00:27:04 534-01:17:29 1936 [xfsbufd/md3]
root 0 0 00:30:47 534-01:17:29 1937 [xfs-cil/md3]
root 0 0 00:04:50 534-01:17:29 1938 [xfssyncd/md3]
root 0 0 06:43:56 534-01:17:29 1939 [xfsaild/md3]
root 0 0 00:38:29 534-01:17:29 1940 [xfsbufd/sdc1]
root 0 0 00:42:25 534-01:17:29 1941 [xfs-cil/sdc1]
root 0 0 12:16:19 534-01:17:29 1942 [xfssyncd/sdc1]
root 0 0 1-08:21:32 534-01:17:29 1943 [xfsaild/sdc1]
root 0 0 00:06:27 534-01:17:28 1999 [kauditd]
root 29764 704 00:15:51 534-01:17:11 2254 auditd
root 252156 31220 03:15:47 534-01:17:10 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:53:01 534-01:17:10 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:37 534-01:17:09 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 534-01:17:09 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:45:23 534-01:17:09 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:25 534-01:17:08 2492 /usr/sbin/sshd
root 71720 2012 00:33:44 534-01:17:03 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:35 534-01:17:03 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:29 534-01:17:03 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:56 534-01:17:03 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:51 534-01:17:03 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:42 534-01:16:52 3359 crond
root 107544 436 00:00:27 534-01:16:50 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 534-01:16:45 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 534-01:16:45 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 534-01:16:45 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 534-01:16:45 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 534-01:16:45 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 534-01:16:45 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 534-01:16:45 3491 /sbin/udevd -d
root 11232 260 00:00:00 534-01:16:45 3492 /sbin/udevd -d
root 163092 1256 00:00:44 518-22:41:58 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 792 00:00:00 19:29:48 42975 /usr/sbin/dovecot
dovecot 12980 1064 00:00:00 19:29:48 42978 dovecot/anvil
root 13108 1196 00:00:00 19:29:48 42979 dovecot/log
root 118780 560 00:00:00 132-12:27:29 43438 SCREEN -O
root 108452 1384 00:00:00 132-12:27:29 43439 /bin/bash
root 108452 1384 00:00:00 132-12:26:26 43486 /bin/bash
root 266412 74532 00:00:16 19:01:59 47499 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 109064 848 00:00:00 4-22:44:10 49426 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 123624 764 00:00:00 4-22:44:09 49427 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
root 171940 63552 00:00:18 16-22:41:15 54551 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 0 0 00:02:31 533-22:55:09 57735 [flush-9:2]
root 0 0 00:02:18 533-22:20:13 68416 [flush-9:1]
root 63348 4140 00:23:31 432-04:30:33 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 432-04:09:59 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1560040 912-11:13:37 432-04:09:58 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 275760 83888 00:01:09 11:38:22 118367 spamd child
root 21712 764 00:00:20 131-22:39:16 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:05:38 60-13:02:18 181185 [flush-9:5]
root 567096 34924 00:19:44 60-12:53:45 182912 /usr/sbin/httpd -DSSL
root 268516 76104 00:00:01 01:01:21 211892 spamd child
apache 661740 165696 00:00:22 18:37 219157 /usr/sbin/httpd -DSSL
apache 589692 70736 00:00:25 17:47 219322 /usr/sbin/httpd -DSSL
apache 587484 92036 00:00:16 16:14 219510 /usr/sbin/httpd -DSSL
apache 588880 100772 00:00:24 15:34 219670 /usr/sbin/httpd -DSSL
apache 587552 92488 00:00:13 13:29 219828 /usr/sbin/httpd -DSSL
apache 587352 91912 00:00:13 12:14 220160 /usr/sbin/httpd -DSSL
apache 590484 91992 00:00:14 12:13 220162 /usr/sbin/httpd -DSSL
root 96856 5672 00:00:01 12:09 220163 sendmail: ./49QBb3Sm141843 mta7.am0.yahoodns.net.: client MAIL
apache 594260 98328 00:00:16 12:05 220167 /usr/sbin/httpd -DSSL
apache 587420 89768 00:00:22 12:05 220168 /usr/sbin/httpd -DSSL
root 97012 5704 00:00:01 11:09 220176 sendmail: ./49PB1hc9160766 mta7.am0.yahoodns.net.: client greeting
apache 587240 84788 00:00:19 10:41 220317 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 10:14 220583 [flush-9:4]
root 97008 5704 00:00:01 10:09 220584 sendmail: ./49PBBsVl162288 mta6.am0.yahoodns.net.: client greeting
root 96856 5672 00:00:00 09:09 220589 sendmail: ./49RBNBcG145110 beta.sinix.net.: user open
apache 585640 74292 00:00:14 09:02 220590 /usr/sbin/httpd -DSSL
apache 591508 86164 00:00:15 09:01 220591 /usr/sbin/httpd -DSSL
apache 587240 82580 00:00:09 08:53 220596 /usr/sbin/httpd -DSSL
root 96856 5624 00:00:00 08:09 220722 sendmail: ./49SAjWHH133495 mta6.am0.yahoodns.net.: client greeting
apache 587120 81720 00:00:10 07:19 220729 /usr/sbin/httpd -DSSL
root 96856 5624 00:00:00 07:09 220985 sendmail: ./49S7guCs104289 mta7.am0.yahoodns.net.: client MAIL
apache 587392 81652 00:00:12 06:43 220996 /usr/sbin/httpd -DSSL
apache 586056 65804 00:00:13 06:37 220997 /usr/sbin/httpd -DSSL
apache 619500 118912 00:00:09 06:16 220998 /usr/sbin/httpd -DSSL
root 96856 5620 00:00:00 06:09 220999 sendmail: ./49T6X9Lo077654 mta7.am0.yahoodns.net.: client EHLO
root 96856 5620 00:00:00 05:09 221251 sendmail: ./49RCVFXf157316 correo.ono.es.: user open
root 96856 5620 00:00:00 04:09 221500 sendmail: ./49T6UCPX077159 mta5.am0.yahoodns.net.: user open
root 96712 5468 00:00:00 03:09 221597 sendmail: ./49TCrsUG137794 mx.e.telefonica.net.: user open
root 96712 5468 00:00:00 02:09 221653 sendmail: ./49T6Pivc076382 mail003.telefonica.com.ar.: user open
root 96712 5440 00:00:00 01:09 221982 sendmail: ./49T8a3Up097731 mail002.telefonica.com.ar.: user open
apache 584984 36612 00:00:00 00:53 222125 /usr/sbin/httpd -DSSL
apache 582756 33652 00:00:00 00:35 222126 /usr/sbin/httpd -DSSL
apache 587864 36556 00:00:00 00:26 222128 /usr/sbin/httpd -DSSL
root 96712 5440 00:00:00 00:09 222191 sendmail: ./49T8Zff5097511 mail002.telefonica.com.ar.: user open
root 110772 2076 00:00:00 00:02 222302 /bin/bash /usr/bin/check_mk_agent
root 110900 1696 00:00:00 00:01 222324 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 222325 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 222328 cat
root 110900 1180 00:00:00 00:01 222352 /bin/bash /usr/bin/check_mk_agent
root 13368 1020 00:00:00 00:01 222353 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 222354 tr -s 
root 154784 45448 00:00:41 427-22:42:04 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:36 470-13:24:14 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 02:02:25 470-13:24:14 238030 sendmail: accepting connections
named 739840 57860 03:47:19 470-13:23:59 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-29 22:25

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e41e785e20

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1728340618
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:46 512-01:29:18 1 /sbin/init
root 0 0 00:00:01 512-01:29:18 2 [kthreadd]
root 0 0 21:58:53 512-01:29:18 3 [migration/0]
root 0 0 01:02:51 512-01:29:18 4 [ksoftirqd/0]
root 0 0 00:00:00 512-01:29:18 5 [stopper/0]
root 0 0 00:16:31 512-01:29:18 6 [watchdog/0]
root 0 0 09:20:30 512-01:29:18 7 [migration/1]
root 0 0 00:00:00 512-01:29:18 8 [stopper/1]
root 0 0 01:38:17 512-01:29:18 9 [ksoftirqd/1]
root 0 0 00:20:27 512-01:29:18 10 [watchdog/1]
root 0 0 06:08:28 512-01:29:18 11 [migration/2]
root 0 0 00:00:00 512-01:29:18 12 [stopper/2]
root 0 0 00:48:37 512-01:29:18 13 [ksoftirqd/2]
root 0 0 00:18:25 512-01:29:18 14 [watchdog/2]
root 0 0 04:21:39 512-01:29:18 15 [migration/3]
root 0 0 00:00:00 512-01:29:18 16 [stopper/3]
root 0 0 00:35:09 512-01:29:18 17 [ksoftirqd/3]
root 0 0 00:14:17 512-01:29:18 18 [watchdog/3]
root 0 0 15:25:19 512-01:29:18 19 [migration/4]
root 0 0 00:00:00 512-01:29:18 20 [stopper/4]
root 0 0 00:54:25 512-01:29:18 21 [ksoftirqd/4]
root 0 0 00:08:23 512-01:29:18 22 [watchdog/4]
root 0 0 08:39:06 512-01:29:18 23 [migration/5]
root 0 0 00:00:00 512-01:29:18 24 [stopper/5]
root 0 0 00:38:17 512-01:29:18 25 [ksoftirqd/5]
root 0 0 00:18:03 512-01:29:18 26 [watchdog/5]
root 0 0 05:14:22 512-01:29:18 27 [migration/6]
root 0 0 00:00:00 512-01:29:18 28 [stopper/6]
root 0 0 00:29:21 512-01:29:18 29 [ksoftirqd/6]
root 0 0 00:13:40 512-01:29:18 30 [watchdog/6]
root 0 0 04:08:29 512-01:29:18 31 [migration/7]
root 0 0 00:00:00 512-01:29:18 32 [stopper/7]
root 0 0 00:28:43 512-01:29:18 33 [ksoftirqd/7]
root 0 0 00:10:57 512-01:29:18 34 [watchdog/7]
root 0 0 02:26:29 512-01:29:18 35 [events/0]
root 0 0 01:34:04 512-01:29:18 36 [events/1]
root 0 0 01:36:42 512-01:29:18 37 [events/2]
root 0 0 01:39:12 512-01:29:18 38 [events/3]
root 0 0 01:23:08 512-01:29:18 39 [events/4]
root 0 0 01:18:31 512-01:29:18 40 [events/5]
root 0 0 01:25:17 512-01:29:18 41 [events/6]
root 0 0 01:28:35 512-01:29:18 42 [events/7]
root 0 0 00:00:00 512-01:29:18 43 [events/0]
root 0 0 00:00:00 512-01:29:18 44 [events/1]
root 0 0 00:00:00 512-01:29:18 45 [events/2]
root 0 0 00:00:00 512-01:29:18 46 [events/3]
root 0 0 00:00:00 512-01:29:18 47 [events/4]
root 0 0 00:00:00 512-01:29:18 48 [events/5]
root 0 0 00:00:00 512-01:29:18 49 [events/6]
root 0 0 00:00:00 512-01:29:18 50 [events/7]
root 0 0 00:00:00 512-01:29:18 51 [events_long/0]
root 0 0 00:00:00 512-01:29:18 52 [events_long/1]
root 0 0 00:00:00 512-01:29:18 53 [events_long/2]
root 0 0 00:00:00 512-01:29:18 54 [events_long/3]
root 0 0 00:00:00 512-01:29:18 55 [events_long/4]
root 0 0 00:00:00 512-01:29:18 56 [events_long/5]
root 0 0 00:00:00 512-01:29:18 57 [events_long/6]
root 0 0 00:00:00 512-01:29:18 58 [events_long/7]
root 0 0 00:00:00 512-01:29:18 59 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 60 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 61 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 62 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 63 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 64 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 65 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 66 [events_power_ef]
root 0 0 00:00:00 512-01:29:18 67 [cgroup]
root 0 0 00:00:00 512-01:29:18 68 [khelper]
root 0 0 00:00:00 512-01:29:18 69 [netns]
root 0 0 00:00:00 512-01:29:18 70 [async/mgr]
root 0 0 00:00:00 512-01:29:18 71 [pm]
root 0 0 00:05:21 512-01:29:18 72 [sync_supers]
root 0 0 00:00:14 512-01:29:18 73 [bdi-default]
root 0 0 00:00:00 512-01:29:18 74 [kintegrityd/0]
root 0 0 00:00:00 512-01:29:18 75 [kintegrityd/1]
root 0 0 00:00:00 512-01:29:18 76 [kintegrityd/2]
root 0 0 00:00:00 512-01:29:18 77 [kintegrityd/3]
root 0 0 00:00:00 512-01:29:18 78 [kintegrityd/4]
root 0 0 00:00:00 512-01:29:18 79 [kintegrityd/5]
root 0 0 00:00:00 512-01:29:18 80 [kintegrityd/6]
root 0 0 00:00:00 512-01:29:18 81 [kintegrityd/7]
root 0 0 06:22:31 512-01:29:18 82 [kblockd/0]
root 0 0 00:11:50 512-01:29:18 83 [kblockd/1]
root 0 0 00:23:23 512-01:29:18 84 [kblockd/2]
root 0 0 00:04:35 512-01:29:18 85 [kblockd/3]
root 0 0 11:09:37 512-01:29:18 86 [kblockd/4]
root 0 0 00:14:04 512-01:29:18 87 [kblockd/5]
root 0 0 00:09:18 512-01:29:18 88 [kblockd/6]
root 0 0 00:07:09 512-01:29:18 89 [kblockd/7]
root 0 0 00:00:00 512-01:29:18 90 [kacpid]
root 0 0 00:00:00 512-01:29:18 91 [kacpi_notify]
root 0 0 00:00:00 512-01:29:18 92 [kacpi_hotplug]
root 0 0 00:00:00 512-01:29:18 93 [ata_aux]
root 0 0 00:00:00 512-01:29:18 94 [ata_sff/0]
root 0 0 00:00:00 512-01:29:18 95 [ata_sff/1]
root 0 0 00:00:00 512-01:29:18 96 [ata_sff/2]
root 0 0 00:00:00 512-01:29:18 97 [ata_sff/3]
root 0 0 00:00:00 512-01:29:18 98 [ata_sff/4]
root 0 0 00:00:00 512-01:29:18 99 [ata_sff/5]
root 0 0 00:00:00 512-01:29:18 100 [ata_sff/6]
root 0 0 00:00:00 512-01:29:18 101 [ata_sff/7]
root 0 0 00:00:00 512-01:29:18 102 [ksuspend_usbd]
root 0 0 00:00:00 512-01:29:18 103 [khubd]
root 0 0 00:00:00 512-01:29:18 104 [kseriod]
root 0 0 00:00:00 512-01:29:18 105 [md/0]
root 0 0 00:00:00 512-01:29:18 106 [md/1]
root 0 0 00:00:00 512-01:29:18 107 [md/2]
root 0 0 00:00:00 512-01:29:18 108 [md/3]
root 0 0 00:00:00 512-01:29:18 109 [md/4]
root 0 0 00:00:00 512-01:29:18 110 [md/5]
root 0 0 00:00:00 512-01:29:18 111 [md/6]
root 0 0 00:00:00 512-01:29:18 112 [md/7]
root 0 0 00:00:00 512-01:29:18 113 [md_misc/0]
root 0 0 00:00:00 512-01:29:18 114 [md_misc/1]
root 0 0 00:00:00 512-01:29:18 115 [md_misc/2]
root 0 0 00:00:00 512-01:29:18 116 [md_misc/3]
root 0 0 00:00:00 512-01:29:18 117 [md_misc/4]
root 0 0 00:00:00 512-01:29:18 118 [md_misc/5]
root 0 0 00:00:00 512-01:29:18 119 [md_misc/6]
root 0 0 00:00:00 512-01:29:18 120 [md_misc/7]
root 0 0 00:00:00 512-01:29:18 121 [linkwatch]
root 0 0 00:01:06 512-01:29:17 124 [khungtaskd]
root 0 0 1-02:30:17 512-01:29:17 125 [kswapd1]
root 0 0 00:00:00 512-01:29:17 126 [ksmd]
root 0 0 03:45:20 512-01:29:17 127 [khugepaged]
root 0 0 00:00:00 512-01:29:17 128 [aio/0]
root 0 0 00:00:00 512-01:29:17 129 [aio/1]
root 0 0 00:00:00 512-01:29:17 130 [aio/2]
root 0 0 00:00:00 512-01:29:17 131 [aio/3]
root 0 0 00:00:00 512-01:29:17 132 [aio/4]
root 0 0 00:00:00 512-01:29:17 133 [aio/5]
root 0 0 00:00:00 512-01:29:17 134 [aio/6]
root 0 0 00:00:00 512-01:29:17 135 [aio/7]
root 0 0 00:00:00 512-01:29:17 136 [crypto/0]
root 0 0 00:00:00 512-01:29:17 137 [crypto/1]
root 0 0 00:00:00 512-01:29:17 138 [crypto/2]
root 0 0 00:00:00 512-01:29:17 139 [crypto/3]
root 0 0 00:00:00 512-01:29:17 140 [crypto/4]
root 0 0 00:00:00 512-01:29:17 141 [crypto/5]
root 0 0 00:00:00 512-01:29:17 142 [crypto/6]
root 0 0 00:00:00 512-01:29:17 143 [crypto/7]
root 0 0 00:00:00 512-01:29:17 150 [kthrotld/0]
root 0 0 00:00:00 512-01:29:17 151 [kthrotld/1]
root 0 0 00:00:00 512-01:29:17 152 [kthrotld/2]
root 0 0 00:00:00 512-01:29:17 153 [kthrotld/3]
root 0 0 00:00:00 512-01:29:17 154 [kthrotld/4]
root 0 0 00:00:00 512-01:29:17 155 [kthrotld/5]
root 0 0 00:00:00 512-01:29:17 156 [kthrotld/6]
root 0 0 00:00:00 512-01:29:17 157 [kthrotld/7]
root 0 0 00:00:00 512-01:29:17 160 [kpsmoused]
root 0 0 00:00:00 512-01:29:17 161 [usbhid_resumer]
root 0 0 00:00:00 512-01:29:17 162 [deferwq]
root 0 0 00:00:00 512-01:29:17 194 [kdmremove]
root 0 0 00:00:00 512-01:29:17 195 [kstriped]
root 0 0 00:00:00 512-01:29:15 734 [scsi_eh_0]
root 0 0 00:00:00 512-01:29:15 735 [scsi_wq_0]
root 0 0 00:00:00 512-01:29:15 748 [scsi_eh_1]
root 0 0 00:00:00 512-01:29:15 749 [scsi_eh_2]
root 0 0 00:00:00 512-01:29:15 750 [scsi_eh_3]
root 0 0 00:00:00 512-01:29:15 751 [scsi_eh_4]
root 0 0 00:00:00 512-01:29:15 752 [scsi_eh_5]
root 0 0 00:00:00 512-01:29:15 753 [scsi_eh_6]
root 0 0 00:54:52 512-01:29:14 950 [md1_raid1]
root 0 0 00:03:18 512-01:29:13 1011 [jbd2/md1-8]
root 0 0 00:00:00 512-01:29:13 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 512-01:29:12 1105 /sbin/udevd -d
root 0 0 00:33:14 512-01:29:12 1225 [edac-poller]
root 0 0 00:10:25 512-01:29:11 1259 [md0_raid1]
root 0 0 02:21:53 512-01:29:11 1288 [md3_raid1]
root 0 0 2-15:02:52 512-01:29:11 1310 [md5_raid1]
root 0 0 01:05:56 512-01:29:11 1322 [md4_raid1]
root 0 0 00:30:46 512-01:29:11 1336 [md2_raid1]
root 0 0 00:17:45 512-01:29:09 1844 [flush-9:3]
root 0 0 00:00:00 512-01:29:09 1881 [jbd2/md0-8]
root 0 0 00:00:00 512-01:29:09 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 512-01:29:09 1885 [xfs_mru_cache]
root 0 0 01:34:53 512-01:29:09 1886 [xfslogd/0]
root 0 0 00:00:00 512-01:29:09 1887 [xfslogd/1]
root 0 0 00:03:32 512-01:29:09 1888 [xfslogd/2]
root 0 0 00:00:00 512-01:29:09 1889 [xfslogd/3]
root 0 0 02:43:03 512-01:29:09 1890 [xfslogd/4]
root 0 0 00:00:00 512-01:29:09 1891 [xfslogd/5]
root 0 0 00:00:00 512-01:29:09 1892 [xfslogd/6]
root 0 0 00:00:00 512-01:29:09 1893 [xfslogd/7]
root 0 0 02:52:03 512-01:29:09 1894 [xfsdatad/0]
root 0 0 00:00:00 512-01:29:09 1895 [xfsdatad/1]
root 0 0 00:02:18 512-01:29:09 1896 [xfsdatad/2]
root 0 0 00:00:00 512-01:29:09 1897 [xfsdatad/3]
root 0 0 03:11:58 512-01:29:09 1898 [xfsdatad/4]
root 0 0 00:00:00 512-01:29:09 1899 [xfsdatad/5]
root 0 0 00:00:00 512-01:29:09 1900 [xfsdatad/6]
root 0 0 00:00:00 512-01:29:09 1901 [xfsdatad/7]
root 0 0 00:00:00 512-01:29:09 1902 [xfsconvertd/0]
root 0 0 00:00:00 512-01:29:09 1903 [xfsconvertd/1]
root 0 0 00:00:00 512-01:29:09 1904 [xfsconvertd/2]
root 0 0 00:00:00 512-01:29:09 1905 [xfsconvertd/3]
root 0 0 00:00:00 512-01:29:09 1906 [xfsconvertd/4]
root 0 0 00:00:00 512-01:29:09 1907 [xfsconvertd/5]
root 0 0 00:00:00 512-01:29:09 1908 [xfsconvertd/6]
root 0 0 00:00:00 512-01:29:09 1909 [xfsconvertd/7]
root 0 0 00:00:02 512-01:29:09 1910 [xfsalloc/0]
root 0 0 00:00:02 512-01:29:09 1911 [xfsalloc/1]
root 0 0 00:00:02 512-01:29:09 1912 [xfsalloc/2]
root 0 0 00:00:03 512-01:29:09 1913 [xfsalloc/3]
root 0 0 00:00:02 512-01:29:09 1914 [xfsalloc/4]
root 0 0 00:00:02 512-01:29:09 1915 [xfsalloc/5]
root 0 0 00:00:03 512-01:29:09 1916 [xfsalloc/6]
root 0 0 00:00:05 512-01:29:09 1917 [xfsalloc/7]
root 0 0 00:00:10 512-01:29:09 1918 [xfseofblocks/0]
root 0 0 00:00:07 512-01:29:09 1919 [xfseofblocks/1]
root 0 0 00:00:09 512-01:29:09 1920 [xfseofblocks/2]
root 0 0 00:00:12 512-01:29:09 1921 [xfseofblocks/3]
root 0 0 00:00:07 512-01:29:09 1922 [xfseofblocks/4]
root 0 0 00:00:09 512-01:29:09 1923 [xfseofblocks/5]
root 0 0 00:00:04 512-01:29:09 1924 [xfseofblocks/6]
root 0 0 00:02:43 512-01:29:09 1925 [xfseofblocks/7]
root 0 0 00:29:51 512-01:29:09 1926 [xfsbufd/md5]
root 0 0 00:26:51 512-01:29:09 1927 [xfs-cil/md5]
root 0 0 00:55:11 512-01:29:09 1928 [xfssyncd/md5]
root 0 0 06:27:40 512-01:29:09 1929 [xfsaild/md5]
root 0 0 00:03:28 512-01:29:08 1930 [jbd2/md2-8]
root 0 0 00:00:00 512-01:29:08 1931 [ext4-dio-unwrit]
root 0 0 00:08:05 512-01:29:08 1932 [xfsbufd/md4]
root 0 0 00:00:48 512-01:29:08 1933 [xfs-cil/md4]
root 0 0 00:03:36 512-01:29:08 1934 [xfssyncd/md4]
root 0 0 06:08:30 512-01:29:08 1935 [xfsaild/md4]
root 0 0 00:24:41 512-01:29:08 1936 [xfsbufd/md3]
root 0 0 00:19:40 512-01:29:08 1937 [xfs-cil/md3]
root 0 0 00:04:21 512-01:29:08 1938 [xfssyncd/md3]
root 0 0 06:18:39 512-01:29:08 1939 [xfsaild/md3]
root 0 0 00:37:02 512-01:29:08 1940 [xfsbufd/sdc1]
root 0 0 00:40:54 512-01:29:08 1941 [xfs-cil/sdc1]
root 0 0 11:49:45 512-01:29:08 1942 [xfssyncd/sdc1]
root 0 0 1-07:21:07 512-01:29:08 1943 [xfsaild/sdc1]
root 0 0 00:06:17 512-01:29:07 1999 [kauditd]
root 29764 704 00:15:27 512-01:28:50 2254 auditd
root 252156 31220 02:44:44 512-01:28:49 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:44:23 512-01:28:49 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:36 512-01:28:48 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 512-01:28:48 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:42:45 512-01:28:48 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:19 512-01:28:47 2492 /usr/sbin/sshd
root 71720 2008 00:33:18 512-01:28:42 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:09 512-01:28:42 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:03 512-01:28:42 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:30 512-01:28:42 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:25 512-01:28:42 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:22 512-01:28:31 3359 crond
root 107544 436 00:00:26 512-01:28:29 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 512-01:28:24 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 512-01:28:24 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 512-01:28:24 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 512-01:28:24 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 512-01:28:24 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 512-01:28:24 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 512-01:28:24 3491 /sbin/udevd -d
root 11232 260 00:00:00 512-01:28:24 3492 /sbin/udevd -d
root 163092 1504 00:00:44 496-22:53:37 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 564 00:00:00 110-12:39:08 43438 SCREEN -O
root 108452 1384 00:00:00 110-12:39:08 43439 /bin/bash
root 108452 1388 00:00:00 110-12:38:05 43486 /bin/bash
root 0 0 00:02:22 511-23:06:48 57735 [flush-9:2]
root 0 0 00:02:10 511-22:31:52 68416 [flush-9:1]
root 63348 4196 00:22:17 410-04:42:12 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 410-04:21:38 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1578208 824-23:31:09 410-04:21:37 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 0 0 00:00:00 21:53 128841 [flush-9:4]
root 267972 75664 00:00:00 15:34 129958 spamd child
apache 586924 73780 00:00:13 13:42 130113 /usr/sbin/httpd -DSSL
apache 597152 101852 00:00:17 13:39 130149 /usr/sbin/httpd -DSSL
apache 590816 79252 00:00:15 12:11 130393 /usr/sbin/httpd -DSSL
apache 586004 84476 00:00:17 12:11 130394 /usr/sbin/httpd -DSSL
apache 618144 111996 00:00:15 11:35 130472 /usr/sbin/httpd -DSSL
apache 588464 92040 00:00:14 11:13 130613 /usr/sbin/httpd -DSSL
apache 586456 84020 00:00:11 10:17 130638 /usr/sbin/httpd -DSSL
apache 585928 67532 00:00:14 10:08 130639 /usr/sbin/httpd -DSSL
apache 586888 83464 00:00:13 09:59 130644 /usr/sbin/httpd -DSSL
apache 586244 82736 00:00:11 09:53 130781 /usr/sbin/httpd -DSSL
apache 585908 78272 00:00:11 09:52 130816 /usr/sbin/httpd -DSSL
apache 585720 73216 00:00:10 09:52 130822 /usr/sbin/httpd -DSSL
apache 586580 89096 00:00:14 09:52 130823 /usr/sbin/httpd -DSSL
apache 604236 101360 00:00:09 09:52 130826 /usr/sbin/httpd -DSSL
apache 586288 91652 00:00:14 08:20 131059 /usr/sbin/httpd -DSSL
root 96740 5532 00:00:00 07:24 131081 sendmail: ./4951SWdp212424 mail.salesteam.co.za.: user open
apache 658316 149212 00:00:15 06:51 131357 /usr/sbin/httpd -DSSL
root 96124 3560 00:00:00 06:24 131362 sendmail: ./4952D05i222203 tfrmxext1.telindus.fr.: user open
root 96768 5524 00:00:00 05:24 131504 sendmail: ./4952YG8H226243 mail.paperclip.co.za.: user open
root 96124 3560 00:00:00 04:24 131637 sendmail: ./4952rcr6229774 omega.santillana.com.mx.: user open
root 96124 3556 00:00:00 03:24 131796 sendmail: ./49515TrK207050 mail1.pagenet.ca.: user open
apache 586040 69532 00:00:08 02:54 131799 /usr/sbin/httpd -DSSL
root 96124 3548 00:00:00 02:24 131801 sendmail: ./4969kWYR048280 dface.de.: user open
apache 583800 63084 00:00:03 02:18 131804 /usr/sbin/httpd -DSSL
apache 623016 104952 00:00:04 02:11 131805 /usr/sbin/httpd -DSSL
apache 655924 132676 00:00:03 02:02 131806 /usr/sbin/httpd -DSSL
apache 587476 68228 00:00:01 02:01 131808 /usr/sbin/httpd -DSSL
root 96124 3552 00:00:00 01:24 131882 sendmail: ./4969sO2X049686 mail.teamxtream.de.: user open
root 96124 3352 00:00:00 00:24 132228 sendmail: ./496KE0tb143278 smtp.comune.at.: user open
root 110772 2072 00:00:00 00:01 132323 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 132349 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 132350 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 132362 cat
root 110900 1176 00:00:00 00:01 132377 /bin/bash /usr/bin/check_mk_agent
root 13360 1012 00:00:00 00:01 132378 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 132379 tr -s 
root 21712 768 00:00:16 109-22:50:55 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:03:33 38-13:13:57 181185 [flush-9:5]
root 565796 33796 00:12:31 38-13:05:24 182912 /usr/sbin/httpd -DSSL
root 19260 792 00:00:00 20:00:14 202454 /usr/sbin/dovecot
dovecot 12980 1056 00:00:00 20:00:14 202456 dovecot/anvil
root 13108 1192 00:00:00 20:00:14 202457 dovecot/log
root 266584 74752 00:00:16 18:48:00 213059 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 268676 76300 00:00:00 18:47:55 213075 spamd child
root 154784 45448 00:00:41 405-22:53:43 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:11 448-13:35:53 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:59:17 448-13:35:53 238030 sendmail: accepting connections
named 724240 39848 03:34:40 448-13:35:38 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-07 22:36

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e44e27e127

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1728160074
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:46 509-23:20:14 1 /sbin/init
root 0 0 00:00:01 509-23:20:14 2 [kthreadd]
root 0 0 21:54:36 509-23:20:14 3 [migration/0]
root 0 0 01:02:33 509-23:20:14 4 [ksoftirqd/0]
root 0 0 00:00:00 509-23:20:14 5 [stopper/0]
root 0 0 00:16:12 509-23:20:14 6 [watchdog/0]
root 0 0 09:18:58 509-23:20:14 7 [migration/1]
root 0 0 00:00:00 509-23:20:14 8 [stopper/1]
root 0 0 01:37:57 509-23:20:14 9 [ksoftirqd/1]
root 0 0 00:20:22 509-23:20:14 10 [watchdog/1]
root 0 0 06:07:40 509-23:20:14 11 [migration/2]
root 0 0 00:00:00 509-23:20:14 12 [stopper/2]
root 0 0 00:48:22 509-23:20:14 13 [ksoftirqd/2]
root 0 0 00:17:43 509-23:20:14 14 [watchdog/2]
root 0 0 04:20:58 509-23:20:14 15 [migration/3]
root 0 0 00:00:00 509-23:20:14 16 [stopper/3]
root 0 0 00:34:55 509-23:20:14 17 [ksoftirqd/3]
root 0 0 00:14:10 509-23:20:14 18 [watchdog/3]
root 0 0 15:22:00 509-23:20:14 19 [migration/4]
root 0 0 00:00:00 509-23:20:14 20 [stopper/4]
root 0 0 00:54:11 509-23:20:14 21 [ksoftirqd/4]
root 0 0 00:08:21 509-23:20:14 22 [watchdog/4]
root 0 0 08:38:06 509-23:20:14 23 [migration/5]
root 0 0 00:00:00 509-23:20:14 24 [stopper/5]
root 0 0 00:38:08 509-23:20:14 25 [ksoftirqd/5]
root 0 0 00:18:00 509-23:20:14 26 [watchdog/5]
root 0 0 05:13:24 509-23:20:14 27 [migration/6]
root 0 0 00:00:00 509-23:20:14 28 [stopper/6]
root 0 0 00:29:12 509-23:20:14 29 [ksoftirqd/6]
root 0 0 00:13:30 509-23:20:14 30 [watchdog/6]
root 0 0 04:07:55 509-23:20:14 31 [migration/7]
root 0 0 00:00:00 509-23:20:14 32 [stopper/7]
root 0 0 00:28:34 509-23:20:14 33 [ksoftirqd/7]
root 0 0 00:10:52 509-23:20:14 34 [watchdog/7]
root 0 0 02:25:30 509-23:20:14 35 [events/0]
root 0 0 01:33:27 509-23:20:14 36 [events/1]
root 0 0 01:35:22 509-23:20:14 37 [events/2]
root 0 0 01:38:33 509-23:20:14 38 [events/3]
root 0 0 01:22:42 509-23:20:14 39 [events/4]
root 0 0 01:18:08 509-23:20:14 40 [events/5]
root 0 0 01:24:39 509-23:20:14 41 [events/6]
root 0 0 01:28:01 509-23:20:14 42 [events/7]
root 0 0 00:00:00 509-23:20:14 43 [events/0]
root 0 0 00:00:00 509-23:20:14 44 [events/1]
root 0 0 00:00:00 509-23:20:14 45 [events/2]
root 0 0 00:00:00 509-23:20:14 46 [events/3]
root 0 0 00:00:00 509-23:20:14 47 [events/4]
root 0 0 00:00:00 509-23:20:14 48 [events/5]
root 0 0 00:00:00 509-23:20:14 49 [events/6]
root 0 0 00:00:00 509-23:20:14 50 [events/7]
root 0 0 00:00:00 509-23:20:14 51 [events_long/0]
root 0 0 00:00:00 509-23:20:14 52 [events_long/1]
root 0 0 00:00:00 509-23:20:14 53 [events_long/2]
root 0 0 00:00:00 509-23:20:14 54 [events_long/3]
root 0 0 00:00:00 509-23:20:14 55 [events_long/4]
root 0 0 00:00:00 509-23:20:14 56 [events_long/5]
root 0 0 00:00:00 509-23:20:14 57 [events_long/6]
root 0 0 00:00:00 509-23:20:14 58 [events_long/7]
root 0 0 00:00:00 509-23:20:14 59 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 60 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 61 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 62 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 63 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 64 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 65 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 66 [events_power_ef]
root 0 0 00:00:00 509-23:20:14 67 [cgroup]
root 0 0 00:00:00 509-23:20:14 68 [khelper]
root 0 0 00:00:00 509-23:20:14 69 [netns]
root 0 0 00:00:00 509-23:20:14 70 [async/mgr]
root 0 0 00:00:00 509-23:20:14 71 [pm]
root 0 0 00:05:18 509-23:20:14 72 [sync_supers]
root 0 0 00:00:13 509-23:20:14 73 [bdi-default]
root 0 0 00:00:00 509-23:20:14 74 [kintegrityd/0]
root 0 0 00:00:00 509-23:20:14 75 [kintegrityd/1]
root 0 0 00:00:00 509-23:20:14 76 [kintegrityd/2]
root 0 0 00:00:00 509-23:20:14 77 [kintegrityd/3]
root 0 0 00:00:00 509-23:20:14 78 [kintegrityd/4]
root 0 0 00:00:00 509-23:20:14 79 [kintegrityd/5]
root 0 0 00:00:00 509-23:20:14 80 [kintegrityd/6]
root 0 0 00:00:00 509-23:20:14 81 [kintegrityd/7]
root 0 0 06:19:59 509-23:20:14 82 [kblockd/0]
root 0 0 00:11:48 509-23:20:14 83 [kblockd/1]
root 0 0 00:23:23 509-23:20:14 84 [kblockd/2]
root 0 0 00:04:35 509-23:20:14 85 [kblockd/3]
root 0 0 11:05:17 509-23:20:14 86 [kblockd/4]
root 0 0 00:14:02 509-23:20:14 87 [kblockd/5]
root 0 0 00:09:17 509-23:20:14 88 [kblockd/6]
root 0 0 00:07:08 509-23:20:14 89 [kblockd/7]
root 0 0 00:00:00 509-23:20:14 90 [kacpid]
root 0 0 00:00:00 509-23:20:14 91 [kacpi_notify]
root 0 0 00:00:00 509-23:20:14 92 [kacpi_hotplug]
root 0 0 00:00:00 509-23:20:14 93 [ata_aux]
root 0 0 00:00:00 509-23:20:14 94 [ata_sff/0]
root 0 0 00:00:00 509-23:20:14 95 [ata_sff/1]
root 0 0 00:00:00 509-23:20:14 96 [ata_sff/2]
root 0 0 00:00:00 509-23:20:14 97 [ata_sff/3]
root 0 0 00:00:00 509-23:20:14 98 [ata_sff/4]
root 0 0 00:00:00 509-23:20:14 99 [ata_sff/5]
root 0 0 00:00:00 509-23:20:14 100 [ata_sff/6]
root 0 0 00:00:00 509-23:20:14 101 [ata_sff/7]
root 0 0 00:00:00 509-23:20:14 102 [ksuspend_usbd]
root 0 0 00:00:00 509-23:20:14 103 [khubd]
root 0 0 00:00:00 509-23:20:14 104 [kseriod]
root 0 0 00:00:00 509-23:20:14 105 [md/0]
root 0 0 00:00:00 509-23:20:14 106 [md/1]
root 0 0 00:00:00 509-23:20:14 107 [md/2]
root 0 0 00:00:00 509-23:20:14 108 [md/3]
root 0 0 00:00:00 509-23:20:14 109 [md/4]
root 0 0 00:00:00 509-23:20:14 110 [md/5]
root 0 0 00:00:00 509-23:20:14 111 [md/6]
root 0 0 00:00:00 509-23:20:14 112 [md/7]
root 0 0 00:00:00 509-23:20:14 113 [md_misc/0]
root 0 0 00:00:00 509-23:20:14 114 [md_misc/1]
root 0 0 00:00:00 509-23:20:14 115 [md_misc/2]
root 0 0 00:00:00 509-23:20:14 116 [md_misc/3]
root 0 0 00:00:00 509-23:20:14 117 [md_misc/4]
root 0 0 00:00:00 509-23:20:14 118 [md_misc/5]
root 0 0 00:00:00 509-23:20:14 119 [md_misc/6]
root 0 0 00:00:00 509-23:20:14 120 [md_misc/7]
root 0 0 00:00:00 509-23:20:14 121 [linkwatch]
root 0 0 00:01:06 509-23:20:13 124 [khungtaskd]
root 0 0 1-02:25:34 509-23:20:13 125 [kswapd1]
root 0 0 00:00:00 509-23:20:13 126 [ksmd]
root 0 0 03:44:19 509-23:20:13 127 [khugepaged]
root 0 0 00:00:00 509-23:20:13 128 [aio/0]
root 0 0 00:00:00 509-23:20:13 129 [aio/1]
root 0 0 00:00:00 509-23:20:13 130 [aio/2]
root 0 0 00:00:00 509-23:20:13 131 [aio/3]
root 0 0 00:00:00 509-23:20:13 132 [aio/4]
root 0 0 00:00:00 509-23:20:13 133 [aio/5]
root 0 0 00:00:00 509-23:20:13 134 [aio/6]
root 0 0 00:00:00 509-23:20:13 135 [aio/7]
root 0 0 00:00:00 509-23:20:13 136 [crypto/0]
root 0 0 00:00:00 509-23:20:13 137 [crypto/1]
root 0 0 00:00:00 509-23:20:13 138 [crypto/2]
root 0 0 00:00:00 509-23:20:13 139 [crypto/3]
root 0 0 00:00:00 509-23:20:13 140 [crypto/4]
root 0 0 00:00:00 509-23:20:13 141 [crypto/5]
root 0 0 00:00:00 509-23:20:13 142 [crypto/6]
root 0 0 00:00:00 509-23:20:13 143 [crypto/7]
root 0 0 00:00:00 509-23:20:13 150 [kthrotld/0]
root 0 0 00:00:00 509-23:20:13 151 [kthrotld/1]
root 0 0 00:00:00 509-23:20:13 152 [kthrotld/2]
root 0 0 00:00:00 509-23:20:13 153 [kthrotld/3]
root 0 0 00:00:00 509-23:20:13 154 [kthrotld/4]
root 0 0 00:00:00 509-23:20:13 155 [kthrotld/5]
root 0 0 00:00:00 509-23:20:13 156 [kthrotld/6]
root 0 0 00:00:00 509-23:20:13 157 [kthrotld/7]
root 0 0 00:00:00 509-23:20:13 160 [kpsmoused]
root 0 0 00:00:00 509-23:20:13 161 [usbhid_resumer]
root 0 0 00:00:00 509-23:20:13 162 [deferwq]
root 0 0 00:00:00 509-23:20:13 194 [kdmremove]
root 0 0 00:00:00 509-23:20:13 195 [kstriped]
root 0 0 00:00:00 509-23:20:11 734 [scsi_eh_0]
root 0 0 00:00:00 509-23:20:11 735 [scsi_wq_0]
root 0 0 00:00:00 509-23:20:11 748 [scsi_eh_1]
root 0 0 00:00:00 509-23:20:11 749 [scsi_eh_2]
root 0 0 00:00:00 509-23:20:11 750 [scsi_eh_3]
root 0 0 00:00:00 509-23:20:11 751 [scsi_eh_4]
root 0 0 00:00:00 509-23:20:11 752 [scsi_eh_5]
root 0 0 00:00:00 509-23:20:11 753 [scsi_eh_6]
root 0 0 00:54:13 509-23:20:10 950 [md1_raid1]
root 0 0 00:03:18 509-23:20:09 1011 [jbd2/md1-8]
root 0 0 00:00:00 509-23:20:09 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 509-23:20:08 1105 /sbin/udevd -d
root 0 0 00:32:52 509-23:20:08 1225 [edac-poller]
root 0 0 00:10:16 509-23:20:07 1259 [md0_raid1]
root 0 0 02:20:06 509-23:20:07 1288 [md3_raid1]
root 0 0 2-14:32:00 509-23:20:07 1310 [md5_raid1]
root 0 0 01:05:15 509-23:20:07 1322 [md4_raid1]
root 0 0 00:30:24 509-23:20:07 1336 [md2_raid1]
root 0 0 00:17:40 509-23:20:05 1844 [flush-9:3]
root 0 0 00:00:00 509-23:20:05 1881 [jbd2/md0-8]
root 0 0 00:00:00 509-23:20:05 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 509-23:20:05 1885 [xfs_mru_cache]
root 0 0 01:34:30 509-23:20:05 1886 [xfslogd/0]
root 0 0 00:00:00 509-23:20:05 1887 [xfslogd/1]
root 0 0 00:03:32 509-23:20:05 1888 [xfslogd/2]
root 0 0 00:00:00 509-23:20:05 1889 [xfslogd/3]
root 0 0 02:42:18 509-23:20:05 1890 [xfslogd/4]
root 0 0 00:00:00 509-23:20:05 1891 [xfslogd/5]
root 0 0 00:00:00 509-23:20:05 1892 [xfslogd/6]
root 0 0 00:00:00 509-23:20:05 1893 [xfslogd/7]
root 0 0 02:51:49 509-23:20:05 1894 [xfsdatad/0]
root 0 0 00:00:00 509-23:20:05 1895 [xfsdatad/1]
root 0 0 00:02:18 509-23:20:05 1896 [xfsdatad/2]
root 0 0 00:00:00 509-23:20:05 1897 [xfsdatad/3]
root 0 0 03:11:35 509-23:20:05 1898 [xfsdatad/4]
root 0 0 00:00:00 509-23:20:05 1899 [xfsdatad/5]
root 0 0 00:00:00 509-23:20:05 1900 [xfsdatad/6]
root 0 0 00:00:00 509-23:20:05 1901 [xfsdatad/7]
root 0 0 00:00:00 509-23:20:05 1902 [xfsconvertd/0]
root 0 0 00:00:00 509-23:20:05 1903 [xfsconvertd/1]
root 0 0 00:00:00 509-23:20:05 1904 [xfsconvertd/2]
root 0 0 00:00:00 509-23:20:05 1905 [xfsconvertd/3]
root 0 0 00:00:00 509-23:20:05 1906 [xfsconvertd/4]
root 0 0 00:00:00 509-23:20:05 1907 [xfsconvertd/5]
root 0 0 00:00:00 509-23:20:05 1908 [xfsconvertd/6]
root 0 0 00:00:00 509-23:20:05 1909 [xfsconvertd/7]
root 0 0 00:00:02 509-23:20:05 1910 [xfsalloc/0]
root 0 0 00:00:02 509-23:20:05 1911 [xfsalloc/1]
root 0 0 00:00:02 509-23:20:05 1912 [xfsalloc/2]
root 0 0 00:00:03 509-23:20:05 1913 [xfsalloc/3]
root 0 0 00:00:02 509-23:20:05 1914 [xfsalloc/4]
root 0 0 00:00:02 509-23:20:05 1915 [xfsalloc/5]
root 0 0 00:00:03 509-23:20:05 1916 [xfsalloc/6]
root 0 0 00:00:05 509-23:20:05 1917 [xfsalloc/7]
root 0 0 00:00:10 509-23:20:05 1918 [xfseofblocks/0]
root 0 0 00:00:07 509-23:20:05 1919 [xfseofblocks/1]
root 0 0 00:00:09 509-23:20:05 1920 [xfseofblocks/2]
root 0 0 00:00:12 509-23:20:05 1921 [xfseofblocks/3]
root 0 0 00:00:07 509-23:20:05 1922 [xfseofblocks/4]
root 0 0 00:00:09 509-23:20:05 1923 [xfseofblocks/5]
root 0 0 00:00:04 509-23:20:05 1924 [xfseofblocks/6]
root 0 0 00:02:42 509-23:20:05 1925 [xfseofblocks/7]
root 0 0 00:29:40 509-23:20:05 1926 [xfsbufd/md5]
root 0 0 00:26:40 509-23:20:05 1927 [xfs-cil/md5]
root 0 0 00:54:58 509-23:20:05 1928 [xfssyncd/md5]
root 0 0 06:24:23 509-23:20:05 1929 [xfsaild/md5]
root 0 0 00:03:24 509-23:20:04 1930 [jbd2/md2-8]
root 0 0 00:00:00 509-23:20:04 1931 [ext4-dio-unwrit]
root 0 0 00:08:02 509-23:20:04 1932 [xfsbufd/md4]
root 0 0 00:00:47 509-23:20:04 1933 [xfs-cil/md4]
root 0 0 00:03:35 509-23:20:04 1934 [xfssyncd/md4]
root 0 0 06:05:19 509-23:20:04 1935 [xfsaild/md4]
root 0 0 00:24:26 509-23:20:04 1936 [xfsbufd/md3]
root 0 0 00:19:20 509-23:20:04 1937 [xfs-cil/md3]
root 0 0 00:04:19 509-23:20:04 1938 [xfssyncd/md3]
root 0 0 06:15:19 509-23:20:04 1939 [xfsaild/md3]
root 0 0 00:36:53 509-23:20:04 1940 [xfsbufd/sdc1]
root 0 0 00:40:50 509-23:20:04 1941 [xfs-cil/sdc1]
root 0 0 11:46:25 509-23:20:04 1942 [xfssyncd/sdc1]
root 0 0 1-07:13:37 509-23:20:04 1943 [xfsaild/sdc1]
root 0 0 00:06:17 509-23:20:03 1999 [kauditd]
root 29764 704 00:15:25 509-23:19:46 2254 auditd
root 252156 31220 02:43:26 509-23:19:45 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:43:34 509-23:19:45 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:36 509-23:19:44 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 509-23:19:44 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:42:24 509-23:19:44 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:18 509-23:19:43 2492 /usr/sbin/sshd
root 71720 2008 00:33:16 509-23:19:38 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:07 509-23:19:38 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:01 509-23:19:38 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:28 509-23:19:38 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:23 509-23:19:38 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:20 509-23:19:27 3359 crond
root 107544 436 00:00:26 509-23:19:25 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 509-23:19:20 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 509-23:19:20 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 509-23:19:20 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 509-23:19:20 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 509-23:19:20 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 509-23:19:20 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 509-23:19:20 3491 /sbin/udevd -d
root 11232 260 00:00:00 509-23:19:20 3492 /sbin/udevd -d
root 163092 1504 00:00:44 494-20:44:33 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 564 00:00:00 108-10:30:04 43438 SCREEN -O
root 108452 1384 00:00:00 108-10:30:04 43439 /bin/bash
root 108452 1388 00:00:00 108-10:29:01 43486 /bin/bash
root 0 0 00:02:20 509-20:57:44 57735 [flush-9:2]
root 0 0 00:02:09 509-20:22:48 68416 [flush-9:1]
root 63348 4196 00:22:09 408-02:33:08 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 408-02:12:34 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1581144 815-06:53:12 408-02:12:33 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 269624 77800 00:00:22 52:25 156187 spamd child
root 21712 768 00:00:16 107-20:41:51 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
apache 615432 125740 00:00:39 39:27 158954 /usr/sbin/httpd -DSSL
root 95868 3140 00:00:00 39:00 159001 sendmail: server assigned-for-regional-consumer-asn55828.drikict.net [45.115.115.158] (may be forged) cmd read
apache 591380 88060 00:00:34 38:13 159053 /usr/sbin/httpd -DSSL
apache 587376 93016 00:00:29 35:28 159545 /usr/sbin/httpd -DSSL
apache 588808 98592 00:00:47 35:25 159621 /usr/sbin/httpd -DSSL
apache 587440 96060 00:00:32 34:26 159830 /usr/sbin/httpd -DSSL
apache 587132 84980 00:00:20 33:36 160097 /usr/sbin/httpd -DSSL
apache 625836 110336 00:00:30 33:04 160122 /usr/sbin/httpd -DSSL
apache 590980 86416 00:00:31 32:33 160205 /usr/sbin/httpd -DSSL
apache 588976 98480 00:00:42 24:00 161731 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 22:49 161800 [flush-9:4]
apache 586616 82904 00:00:18 21:02 161995 /usr/sbin/httpd -DSSL
apache 589636 85500 00:00:25 18:43 162675 /usr/sbin/httpd -DSSL
apache 590852 77516 00:00:09 11:01 163845 /usr/sbin/httpd -DSSL
apache 584508 66396 00:00:12 10:59 163849 /usr/sbin/httpd -DSSL
apache 587040 82848 00:00:13 10:59 163850 /usr/sbin/httpd -DSSL
apache 659428 150688 00:00:15 10:58 163852 /usr/sbin/httpd -DSSL
apache 584988 78992 00:00:17 10:58 163853 /usr/sbin/httpd -DSSL
apache 585596 81512 00:00:11 10:58 163857 /usr/sbin/httpd -DSSL
root 96776 5600 00:00:00 10:27 164142 sendmail: ./492LXrhi198951 mars.aviation.denel.co.za.: user open
root 96756 5556 00:00:00 09:27 164399 sendmail: ./4951gjeO215646 mxgate.oricom.ca.: user open
apache 587424 72720 00:00:09 08:35 164401 /usr/sbin/httpd -DSSL
root 96756 5572 00:00:00 08:27 164402 sendmail: ./494JeJwm148343 mail.svnet.co.za.: user open
root 96756 5544 00:00:00 07:27 164508 sendmail: ./49515TrK207050 mail1.pagenet.ca.: user open
root 96768 5556 00:00:00 06:27 164719 sendmail: ./4956KsUe020517 mxgate.oricom.ca.: user open
apache 594252 86932 00:00:10 06:09 164721 /usr/sbin/httpd -DSSL
apache 602096 81968 00:00:07 06:08 164722 /usr/sbin/httpd -DSSL
apache 584784 36472 00:00:01 06:08 164723 /usr/sbin/httpd -DSSL
root 96768 5568 00:00:00 05:27 164988 sendmail: ./49531N4W231427 mx0.didge.ch.: user open
root 15084 3200 00:00:00 05:21 164990 dovecot/config
dovecot 76712 2988 00:00:00 05:21 164991 dovecot/auth
apache 583552 55372 00:00:01 04:48 164997 /usr/sbin/httpd -DSSL
root 96776 5548 00:00:00 04:27 164998 sendmail: ./4952YG8H226243 mail.paperclip.co.za.: user open
apache 584048 56888 00:00:02 03:50 165202 /usr/sbin/httpd -DSSL
apache 595624 46104 00:00:04 03:49 165203 /usr/sbin/httpd -DSSL
apache 594748 71464 00:00:05 03:49 165204 /usr/sbin/httpd -DSSL
apache 582164 51048 00:00:02 03:46 165205 /usr/sbin/httpd -DSSL
apache 583112 35120 00:00:01 03:31 165206 /usr/sbin/httpd -DSSL
root 96736 5556 00:00:00 03:27 165207 sendmail: ./4957bRAg034016 mail.glaube.de.: user open
apache 568116 47204 00:00:01 03:06 165208 /usr/sbin/httpd -DSSL
apache 605584 73164 00:00:03 03:05 165209 /usr/sbin/httpd -DSSL
apache 581604 33884 00:00:00 03:05 165210 /usr/sbin/httpd -DSSL
root 96776 5548 00:00:00 02:27 165274 sendmail: ./4951SWdp212424 mail.salesteam.co.za.: user open
root 78816 3196 00:00:00 01:36 165282 dovecot/auth -w
root 96648 5532 00:00:00 01:27 165283 sendmail: ./4952rcr6229774 interbase.santillana.com.mx.: user open
root 40060 2032 00:00:00 00:42 165633 dovecot/ssl-params
root 96124 3360 00:00:00 00:27 165776 sendmail: ./495KEhIn163546 smtp2.comune.at.: user open
root 110772 2076 00:00:00 00:01 165880 /bin/bash /usr/bin/check_mk_agent
root 110900 1696 00:00:00 00:01 165906 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 165907 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 165908 cat
root 110900 1180 00:00:00 00:01 165934 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 165935 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 165936 tr -s 
root 0 0 00:03:20 36-11:04:53 181185 [flush-9:5]
root 565376 33384 00:11:42 36-10:56:20 182912 /usr/sbin/httpd -DSSL
root 19260 796 00:00:00 18:23:15 220090 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 18:23:15 220093 dovecot/anvil
root 13108 1192 00:00:00 18:23:15 220094 dovecot/log
root 154784 45448 00:00:41 403-20:44:39 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 266628 74804 00:00:18 17:23:56 232155 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269508 77692 00:00:50 17:23:53 232167 spamd child
smmsp 78752 788 00:09:08 446-11:26:49 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:58:56 446-11:26:49 238030 sendmail: accepting connections
named 724240 39844 03:33:34 446-11:26:34 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-05 20:27

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4730a2305

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1727989615
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:44 507-23:59:15 1 /sbin/init
root 0 0 00:00:01 507-23:59:15 2 [kthreadd]
root 0 0 21:49:57 507-23:59:15 3 [migration/0]
root 0 0 01:02:10 507-23:59:15 4 [ksoftirqd/0]
root 0 0 00:00:00 507-23:59:15 5 [stopper/0]
root 0 0 00:16:06 507-23:59:15 6 [watchdog/0]
root 0 0 09:17:52 507-23:59:15 7 [migration/1]
root 0 0 00:00:00 507-23:59:15 8 [stopper/1]
root 0 0 01:37:31 507-23:59:15 9 [ksoftirqd/1]
root 0 0 00:20:15 507-23:59:15 10 [watchdog/1]
root 0 0 06:06:58 507-23:59:15 11 [migration/2]
root 0 0 00:00:00 507-23:59:15 12 [stopper/2]
root 0 0 00:48:01 507-23:59:15 13 [ksoftirqd/2]
root 0 0 00:17:38 507-23:59:15 14 [watchdog/2]
root 0 0 04:20:25 507-23:59:15 15 [migration/3]
root 0 0 00:00:00 507-23:59:15 16 [stopper/3]
root 0 0 00:34:37 507-23:59:15 17 [ksoftirqd/3]
root 0 0 00:14:00 507-23:59:15 18 [watchdog/3]
root 0 0 15:18:37 507-23:59:15 19 [migration/4]
root 0 0 00:00:00 507-23:59:15 20 [stopper/4]
root 0 0 00:53:54 507-23:59:15 21 [ksoftirqd/4]
root 0 0 00:08:18 507-23:59:15 22 [watchdog/4]
root 0 0 08:37:14 507-23:59:15 23 [migration/5]
root 0 0 00:00:00 507-23:59:15 24 [stopper/5]
root 0 0 00:37:57 507-23:59:15 25 [ksoftirqd/5]
root 0 0 00:17:56 507-23:59:15 26 [watchdog/5]
root 0 0 05:12:53 507-23:59:15 27 [migration/6]
root 0 0 00:00:00 507-23:59:15 28 [stopper/6]
root 0 0 00:29:02 507-23:59:15 29 [ksoftirqd/6]
root 0 0 00:13:27 507-23:59:15 30 [watchdog/6]
root 0 0 04:07:29 507-23:59:15 31 [migration/7]
root 0 0 00:00:00 507-23:59:15 32 [stopper/7]
root 0 0 00:28:23 507-23:59:15 33 [ksoftirqd/7]
root 0 0 00:10:46 507-23:59:15 34 [watchdog/7]
root 0 0 02:24:40 507-23:59:15 35 [events/0]
root 0 0 01:32:39 507-23:59:15 36 [events/1]
root 0 0 01:34:43 507-23:59:15 37 [events/2]
root 0 0 01:37:34 507-23:59:15 38 [events/3]
root 0 0 01:22:14 507-23:59:15 39 [events/4]
root 0 0 01:17:39 507-23:59:15 40 [events/5]
root 0 0 01:24:12 507-23:59:15 41 [events/6]
root 0 0 01:27:24 507-23:59:15 42 [events/7]
root 0 0 00:00:00 507-23:59:15 43 [events/0]
root 0 0 00:00:00 507-23:59:15 44 [events/1]
root 0 0 00:00:00 507-23:59:15 45 [events/2]
root 0 0 00:00:00 507-23:59:15 46 [events/3]
root 0 0 00:00:00 507-23:59:15 47 [events/4]
root 0 0 00:00:00 507-23:59:15 48 [events/5]
root 0 0 00:00:00 507-23:59:15 49 [events/6]
root 0 0 00:00:00 507-23:59:15 50 [events/7]
root 0 0 00:00:00 507-23:59:15 51 [events_long/0]
root 0 0 00:00:00 507-23:59:15 52 [events_long/1]
root 0 0 00:00:00 507-23:59:15 53 [events_long/2]
root 0 0 00:00:00 507-23:59:15 54 [events_long/3]
root 0 0 00:00:00 507-23:59:15 55 [events_long/4]
root 0 0 00:00:00 507-23:59:15 56 [events_long/5]
root 0 0 00:00:00 507-23:59:15 57 [events_long/6]
root 0 0 00:00:00 507-23:59:15 58 [events_long/7]
root 0 0 00:00:00 507-23:59:15 59 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 60 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 61 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 62 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 63 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 64 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 65 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 66 [events_power_ef]
root 0 0 00:00:00 507-23:59:15 67 [cgroup]
root 0 0 00:00:00 507-23:59:15 68 [khelper]
root 0 0 00:00:00 507-23:59:15 69 [netns]
root 0 0 00:00:00 507-23:59:15 70 [async/mgr]
root 0 0 00:00:00 507-23:59:15 71 [pm]
root 0 0 00:05:14 507-23:59:15 72 [sync_supers]
root 0 0 00:00:13 507-23:59:15 73 [bdi-default]
root 0 0 00:00:00 507-23:59:15 74 [kintegrityd/0]
root 0 0 00:00:00 507-23:59:15 75 [kintegrityd/1]
root 0 0 00:00:00 507-23:59:15 76 [kintegrityd/2]
root 0 0 00:00:00 507-23:59:15 77 [kintegrityd/3]
root 0 0 00:00:00 507-23:59:15 78 [kintegrityd/4]
root 0 0 00:00:00 507-23:59:15 79 [kintegrityd/5]
root 0 0 00:00:00 507-23:59:15 80 [kintegrityd/6]
root 0 0 00:00:00 507-23:59:15 81 [kintegrityd/7]
root 0 0 06:17:43 507-23:59:15 82 [kblockd/0]
root 0 0 00:11:45 507-23:59:15 83 [kblockd/1]
root 0 0 00:23:21 507-23:59:15 84 [kblockd/2]
root 0 0 00:04:33 507-23:59:15 85 [kblockd/3]
root 0 0 11:01:22 507-23:59:15 86 [kblockd/4]
root 0 0 00:13:59 507-23:59:15 87 [kblockd/5]
root 0 0 00:09:15 507-23:59:15 88 [kblockd/6]
root 0 0 00:07:06 507-23:59:15 89 [kblockd/7]
root 0 0 00:00:00 507-23:59:15 90 [kacpid]
root 0 0 00:00:00 507-23:59:15 91 [kacpi_notify]
root 0 0 00:00:00 507-23:59:15 92 [kacpi_hotplug]
root 0 0 00:00:00 507-23:59:15 93 [ata_aux]
root 0 0 00:00:00 507-23:59:15 94 [ata_sff/0]
root 0 0 00:00:00 507-23:59:15 95 [ata_sff/1]
root 0 0 00:00:00 507-23:59:15 96 [ata_sff/2]
root 0 0 00:00:00 507-23:59:15 97 [ata_sff/3]
root 0 0 00:00:00 507-23:59:15 98 [ata_sff/4]
root 0 0 00:00:00 507-23:59:15 99 [ata_sff/5]
root 0 0 00:00:00 507-23:59:15 100 [ata_sff/6]
root 0 0 00:00:00 507-23:59:15 101 [ata_sff/7]
root 0 0 00:00:00 507-23:59:15 102 [ksuspend_usbd]
root 0 0 00:00:00 507-23:59:15 103 [khubd]
root 0 0 00:00:00 507-23:59:15 104 [kseriod]
root 0 0 00:00:00 507-23:59:15 105 [md/0]
root 0 0 00:00:00 507-23:59:15 106 [md/1]
root 0 0 00:00:00 507-23:59:15 107 [md/2]
root 0 0 00:00:00 507-23:59:15 108 [md/3]
root 0 0 00:00:00 507-23:59:15 109 [md/4]
root 0 0 00:00:00 507-23:59:15 110 [md/5]
root 0 0 00:00:00 507-23:59:15 111 [md/6]
root 0 0 00:00:00 507-23:59:15 112 [md/7]
root 0 0 00:00:00 507-23:59:15 113 [md_misc/0]
root 0 0 00:00:00 507-23:59:15 114 [md_misc/1]
root 0 0 00:00:00 507-23:59:15 115 [md_misc/2]
root 0 0 00:00:00 507-23:59:15 116 [md_misc/3]
root 0 0 00:00:00 507-23:59:15 117 [md_misc/4]
root 0 0 00:00:00 507-23:59:15 118 [md_misc/5]
root 0 0 00:00:00 507-23:59:15 119 [md_misc/6]
root 0 0 00:00:00 507-23:59:15 120 [md_misc/7]
root 0 0 00:00:00 507-23:59:15 121 [linkwatch]
root 0 0 00:01:05 507-23:59:14 124 [khungtaskd]
root 0 0 1-02:19:06 507-23:59:14 125 [kswapd1]
root 0 0 00:00:00 507-23:59:14 126 [ksmd]
root 0 0 03:43:04 507-23:59:14 127 [khugepaged]
root 0 0 00:00:00 507-23:59:14 128 [aio/0]
root 0 0 00:00:00 507-23:59:14 129 [aio/1]
root 0 0 00:00:00 507-23:59:14 130 [aio/2]
root 0 0 00:00:00 507-23:59:14 131 [aio/3]
root 0 0 00:00:00 507-23:59:14 132 [aio/4]
root 0 0 00:00:00 507-23:59:14 133 [aio/5]
root 0 0 00:00:00 507-23:59:14 134 [aio/6]
root 0 0 00:00:00 507-23:59:14 135 [aio/7]
root 0 0 00:00:00 507-23:59:14 136 [crypto/0]
root 0 0 00:00:00 507-23:59:14 137 [crypto/1]
root 0 0 00:00:00 507-23:59:14 138 [crypto/2]
root 0 0 00:00:00 507-23:59:14 139 [crypto/3]
root 0 0 00:00:00 507-23:59:14 140 [crypto/4]
root 0 0 00:00:00 507-23:59:14 141 [crypto/5]
root 0 0 00:00:00 507-23:59:14 142 [crypto/6]
root 0 0 00:00:00 507-23:59:14 143 [crypto/7]
root 0 0 00:00:00 507-23:59:14 150 [kthrotld/0]
root 0 0 00:00:00 507-23:59:14 151 [kthrotld/1]
root 0 0 00:00:00 507-23:59:14 152 [kthrotld/2]
root 0 0 00:00:00 507-23:59:14 153 [kthrotld/3]
root 0 0 00:00:00 507-23:59:14 154 [kthrotld/4]
root 0 0 00:00:00 507-23:59:14 155 [kthrotld/5]
root 0 0 00:00:00 507-23:59:14 156 [kthrotld/6]
root 0 0 00:00:00 507-23:59:14 157 [kthrotld/7]
root 0 0 00:00:00 507-23:59:14 160 [kpsmoused]
root 0 0 00:00:00 507-23:59:14 161 [usbhid_resumer]
root 0 0 00:00:00 507-23:59:14 162 [deferwq]
root 0 0 00:00:00 507-23:59:14 194 [kdmremove]
root 0 0 00:00:00 507-23:59:14 195 [kstriped]
root 0 0 00:00:00 507-23:59:12 734 [scsi_eh_0]
root 0 0 00:00:00 507-23:59:12 735 [scsi_wq_0]
root 0 0 00:00:00 507-23:59:12 748 [scsi_eh_1]
root 0 0 00:00:00 507-23:59:12 749 [scsi_eh_2]
root 0 0 00:00:00 507-23:59:12 750 [scsi_eh_3]
root 0 0 00:00:00 507-23:59:12 751 [scsi_eh_4]
root 0 0 00:00:00 507-23:59:12 752 [scsi_eh_5]
root 0 0 00:00:00 507-23:59:12 753 [scsi_eh_6]
root 0 0 00:54:09 507-23:59:11 950 [md1_raid1]
root 0 0 00:03:17 507-23:59:10 1011 [jbd2/md1-8]
root 0 0 00:00:00 507-23:59:10 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 507-23:59:09 1105 /sbin/udevd -d
root 0 0 00:32:20 507-23:59:09 1225 [edac-poller]
root 0 0 00:10:16 507-23:59:08 1259 [md0_raid1]
root 0 0 02:19:15 507-23:59:08 1288 [md3_raid1]
root 0 0 2-14:24:52 507-23:59:08 1310 [md5_raid1]
root 0 0 01:05:07 507-23:59:08 1322 [md4_raid1]
root 0 0 00:30:20 507-23:59:08 1336 [md2_raid1]
root 0 0 00:17:35 507-23:59:06 1844 [flush-9:3]
root 0 0 00:00:00 507-23:59:06 1881 [jbd2/md0-8]
root 0 0 00:00:00 507-23:59:06 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 507-23:59:06 1885 [xfs_mru_cache]
root 0 0 01:33:55 507-23:59:06 1886 [xfslogd/0]
root 0 0 00:00:00 507-23:59:06 1887 [xfslogd/1]
root 0 0 00:03:32 507-23:59:06 1888 [xfslogd/2]
root 0 0 00:00:00 507-23:59:06 1889 [xfslogd/3]
root 0 0 02:41:20 507-23:59:06 1890 [xfslogd/4]
root 0 0 00:00:00 507-23:59:06 1891 [xfslogd/5]
root 0 0 00:00:00 507-23:59:06 1892 [xfslogd/6]
root 0 0 00:00:00 507-23:59:06 1893 [xfslogd/7]
root 0 0 02:50:51 507-23:59:06 1894 [xfsdatad/0]
root 0 0 00:00:00 507-23:59:06 1895 [xfsdatad/1]
root 0 0 00:02:18 507-23:59:06 1896 [xfsdatad/2]
root 0 0 00:00:00 507-23:59:06 1897 [xfsdatad/3]
root 0 0 03:10:33 507-23:59:06 1898 [xfsdatad/4]
root 0 0 00:00:00 507-23:59:06 1899 [xfsdatad/5]
root 0 0 00:00:00 507-23:59:06 1900 [xfsdatad/6]
root 0 0 00:00:00 507-23:59:06 1901 [xfsdatad/7]
root 0 0 00:00:00 507-23:59:06 1902 [xfsconvertd/0]
root 0 0 00:00:00 507-23:59:06 1903 [xfsconvertd/1]
root 0 0 00:00:00 507-23:59:06 1904 [xfsconvertd/2]
root 0 0 00:00:00 507-23:59:06 1905 [xfsconvertd/3]
root 0 0 00:00:00 507-23:59:06 1906 [xfsconvertd/4]
root 0 0 00:00:00 507-23:59:06 1907 [xfsconvertd/5]
root 0 0 00:00:00 507-23:59:06 1908 [xfsconvertd/6]
root 0 0 00:00:00 507-23:59:06 1909 [xfsconvertd/7]
root 0 0 00:00:02 507-23:59:06 1910 [xfsalloc/0]
root 0 0 00:00:02 507-23:59:06 1911 [xfsalloc/1]
root 0 0 00:00:02 507-23:59:06 1912 [xfsalloc/2]
root 0 0 00:00:03 507-23:59:06 1913 [xfsalloc/3]
root 0 0 00:00:02 507-23:59:06 1914 [xfsalloc/4]
root 0 0 00:00:02 507-23:59:06 1915 [xfsalloc/5]
root 0 0 00:00:03 507-23:59:06 1916 [xfsalloc/6]
root 0 0 00:00:05 507-23:59:06 1917 [xfsalloc/7]
root 0 0 00:00:10 507-23:59:06 1918 [xfseofblocks/0]
root 0 0 00:00:06 507-23:59:06 1919 [xfseofblocks/1]
root 0 0 00:00:09 507-23:59:06 1920 [xfseofblocks/2]
root 0 0 00:00:12 507-23:59:06 1921 [xfseofblocks/3]
root 0 0 00:00:07 507-23:59:06 1922 [xfseofblocks/4]
root 0 0 00:00:09 507-23:59:06 1923 [xfseofblocks/5]
root 0 0 00:00:04 507-23:59:06 1924 [xfseofblocks/6]
root 0 0 00:02:42 507-23:59:06 1925 [xfseofblocks/7]
root 0 0 00:29:26 507-23:59:06 1926 [xfsbufd/md5]
root 0 0 00:26:27 507-23:59:06 1927 [xfs-cil/md5]
root 0 0 00:54:43 507-23:59:06 1928 [xfssyncd/md5]
root 0 0 06:20:35 507-23:59:06 1929 [xfsaild/md5]
root 0 0 00:03:23 507-23:59:05 1930 [jbd2/md2-8]
root 0 0 00:00:00 507-23:59:05 1931 [ext4-dio-unwrit]
root 0 0 00:07:58 507-23:59:05 1932 [xfsbufd/md4]
root 0 0 00:00:47 507-23:59:05 1933 [xfs-cil/md4]
root 0 0 00:03:34 507-23:59:05 1934 [xfssyncd/md4]
root 0 0 06:01:36 507-23:59:05 1935 [xfsaild/md4]
root 0 0 00:24:12 507-23:59:05 1936 [xfsbufd/md3]
root 0 0 00:19:08 507-23:59:05 1937 [xfs-cil/md3]
root 0 0 00:04:18 507-23:59:05 1938 [xfssyncd/md3]
root 0 0 06:11:29 507-23:59:05 1939 [xfsaild/md3]
root 0 0 00:36:36 507-23:59:05 1940 [xfsbufd/sdc1]
root 0 0 00:40:37 507-23:59:05 1941 [xfs-cil/sdc1]
root 0 0 11:43:10 507-23:59:05 1942 [xfssyncd/sdc1]
root 0 0 1-07:00:02 507-23:59:05 1943 [xfsaild/sdc1]
root 0 0 00:06:14 507-23:59:04 1999 [kauditd]
root 29764 704 00:15:22 507-23:58:47 2254 auditd
root 252156 31220 02:42:30 507-23:58:46 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:42:48 507-23:58:46 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:36 507-23:58:45 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 507-23:58:45 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:42:02 507-23:58:45 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:18 507-23:58:44 2492 /usr/sbin/sshd
root 71720 2008 00:33:10 507-23:58:39 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:03 507-23:58:39 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:55 507-23:58:39 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:23 507-23:58:39 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:18 507-23:58:39 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:18 507-23:58:28 3359 crond
root 107544 436 00:00:26 507-23:58:26 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 507-23:58:21 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 507-23:58:21 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 507-23:58:21 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 507-23:58:21 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 507-23:58:21 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 507-23:58:21 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 507-23:58:21 3491 /sbin/udevd -d
root 11232 260 00:00:00 507-23:58:21 3492 /sbin/udevd -d
root 266596 74740 00:00:17 18:04:30 12899 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269196 76928 00:00:13 18:04:26 12902 spamd child
root 266596 72228 00:00:00 18:04:26 12904 spamd child
root 163092 1504 00:00:44 492-21:23:34 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 796 00:00:01 15:30:20 37774 /usr/sbin/dovecot
dovecot 12980 1092 00:00:00 15:30:20 37777 dovecot/anvil
root 13108 1192 00:00:00 15:30:20 37778 dovecot/log
root 118780 568 00:00:00 106-11:09:05 43438 SCREEN -O
root 108452 1384 00:00:00 106-11:09:05 43439 /bin/bash
root 108452 1388 00:00:00 106-11:08:02 43486 /bin/bash
root 0 0 00:02:19 507-21:36:45 57735 [flush-9:2]
root 0 0 00:02:08 507-21:01:49 68416 [flush-9:1]
root 63348 4204 00:22:02 406-03:12:09 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 406-02:51:35 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857728 1602156 805-17:56:17 406-02:51:34 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 0 0 00:00:00 02:57:50 154157 [flush-9:4]
root 21712 768 00:00:16 105-21:20:52 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
apache 589600 88844 00:00:18 33:59 176722 /usr/sbin/httpd -DSSL
apache 588940 86208 00:00:14 24:12 178535 /usr/sbin/httpd -DSSL
apache 601700 108956 00:00:21 23:20 178543 /usr/sbin/httpd -DSSL
apache 586952 84216 00:00:13 17:50 179191 /usr/sbin/httpd -DSSL
apache 593316 83072 00:00:14 16:04 179308 /usr/sbin/httpd -DSSL
apache 609432 97236 00:00:12 16:03 179309 /usr/sbin/httpd -DSSL
apache 586164 59252 00:00:12 16:03 179310 /usr/sbin/httpd -DSSL
root 40060 2036 00:00:00 14:32 179672 dovecot/ssl-params
apache 593152 91072 00:00:07 13:32 179829 /usr/sbin/httpd -DSSL
root 96124 3560 00:00:00 09:34 180384 sendmail: ./48SLnEWG025584 cscl.com.: user open
apache 586716 79596 00:00:05 09:08 180524 /usr/sbin/httpd -DSSL
apache 594176 80600 00:00:04 08:05 180527 /usr/sbin/httpd -DSSL
apache 582476 36492 00:00:01 06:08 180796 /usr/sbin/httpd -DSSL
root 96124 3556 00:00:00 05:34 180935 sendmail: ./48UFP0rc186274 mx.cablevision.net.mx.: user open
apache 582908 36444 00:00:01 05:14 180988 /usr/sbin/httpd -DSSL
apache 625696 112860 00:00:07 05:01 180990 /usr/sbin/httpd -DSSL
apache 602052 72480 00:00:03 04:39 181135 /usr/sbin/httpd -DSSL
root 96124 3568 00:00:00 04:34 181136 sendmail: ./48T5KMM3098602 numercable.fr.: user open
apache 582592 37264 00:00:05 04:33 181137 /usr/sbin/httpd -DSSL
apache 591868 63556 00:00:02 04:32 181144 /usr/sbin/httpd -DSSL
root 0 0 00:03:09 34-11:43:54 181185 [flush-9:5]
apache 581556 34240 00:00:00 04:07 181280 /usr/sbin/httpd -DSSL
apache 586264 54544 00:00:02 04:06 181281 /usr/sbin/httpd -DSSL
apache 606472 84900 00:00:02 03:38 181496 /usr/sbin/httpd -DSSL
root 96124 3544 00:00:00 03:34 181497 sendmail: ./48SMwUZT036650 sciborg.uwaterloo.ca.: user open
apache 581408 34876 00:00:00 02:56 181499 /usr/sbin/httpd -DSSL
root 96124 3544 00:00:00 02:34 181500 sendmail: ./48UDE5XE166425 mx.insight.synacor.com.: user open
apache 584056 46632 00:00:00 02:29 181502 /usr/sbin/httpd -DSSL
apache 588036 41332 00:00:01 02:06 181503 /usr/sbin/httpd -DSSL
apache 594848 62188 00:00:01 01:52 181567 /usr/sbin/httpd -DSSL
apache 599268 50460 00:00:00 01:34 181568 /usr/sbin/httpd -DSSL
root 96124 3372 00:00:00 01:34 181569 sendmail: ./48U8ix0E125188 in.mx2.mailhostbox.com.: user open
apache 570536 30288 00:00:00 01:24 181570 /usr/sbin/httpd -DSSL
apache 582568 33376 00:00:00 01:23 181571 /usr/sbin/httpd -DSSL
apache 617600 68284 00:00:01 01:22 181573 /usr/sbin/httpd -DSSL
apache 592164 42372 00:00:00 01:22 181574 /usr/sbin/httpd -DSSL
apache 602900 53628 00:00:00 01:22 181575 /usr/sbin/httpd -DSSL
apache 582412 32900 00:00:01 01:22 181576 /usr/sbin/httpd -DSSL
apache 597884 49908 00:00:00 01:08 181578 /usr/sbin/httpd -DSSL
root 96124 3360 00:00:00 00:34 181736 sendmail: ./492LXrhi198951 mars.aviation.denel.co.za.: user open
root 110772 2072 00:00:00 00:01 181904 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 181926 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 181927 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 181928 cat
root 110900 1176 00:00:00 00:01 181954 /bin/bash /usr/bin/check_mk_agent
root 13360 1012 00:00:00 00:01 181955 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 181956 tr -s 
root 565376 33384 00:10:54 34-11:35:21 182912 /usr/sbin/httpd -DSSL
root 154784 45448 00:00:41 401-21:23:40 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:06 444-12:05:50 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:58:27 444-12:05:50 238030 sendmail: accepting connections
named 724240 39860 03:32:23 444-12:05:35 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-03 21:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e451d4b25b

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1727815475
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:44 505-23:36:55 1 /sbin/init
root 0 0 00:00:01 505-23:36:55 2 [kthreadd]
root 0 0 21:42:48 505-23:36:55 3 [migration/0]
root 0 0 01:01:49 505-23:36:55 4 [ksoftirqd/0]
root 0 0 00:00:00 505-23:36:55 5 [stopper/0]
root 0 0 00:15:58 505-23:36:55 6 [watchdog/0]
root 0 0 09:16:08 505-23:36:55 7 [migration/1]
root 0 0 00:00:00 505-23:36:55 8 [stopper/1]
root 0 0 01:37:07 505-23:36:55 9 [ksoftirqd/1]
root 0 0 00:20:06 505-23:36:55 10 [watchdog/1]
root 0 0 06:05:32 505-23:36:55 11 [migration/2]
root 0 0 00:00:00 505-23:36:55 12 [stopper/2]
root 0 0 00:47:42 505-23:36:55 13 [ksoftirqd/2]
root 0 0 00:17:31 505-23:36:55 14 [watchdog/2]
root 0 0 04:19:33 505-23:36:55 15 [migration/3]
root 0 0 00:00:00 505-23:36:55 16 [stopper/3]
root 0 0 00:34:19 505-23:36:55 17 [ksoftirqd/3]
root 0 0 00:13:55 505-23:36:55 18 [watchdog/3]
root 0 0 15:13:29 505-23:36:55 19 [migration/4]
root 0 0 00:00:00 505-23:36:55 20 [stopper/4]
root 0 0 00:53:38 505-23:36:55 21 [ksoftirqd/4]
root 0 0 00:08:15 505-23:36:55 22 [watchdog/4]
root 0 0 08:35:11 505-23:36:55 23 [migration/5]
root 0 0 00:00:00 505-23:36:55 24 [stopper/5]
root 0 0 00:37:46 505-23:36:55 25 [ksoftirqd/5]
root 0 0 00:17:50 505-23:36:55 26 [watchdog/5]
root 0 0 05:11:10 505-23:36:55 27 [migration/6]
root 0 0 00:00:00 505-23:36:55 28 [stopper/6]
root 0 0 00:28:52 505-23:36:55 29 [ksoftirqd/6]
root 0 0 00:13:21 505-23:36:55 30 [watchdog/6]
root 0 0 04:06:16 505-23:36:55 31 [migration/7]
root 0 0 00:00:00 505-23:36:55 32 [stopper/7]
root 0 0 00:28:11 505-23:36:55 33 [ksoftirqd/7]
root 0 0 00:10:41 505-23:36:55 34 [watchdog/7]
root 0 0 02:23:45 505-23:36:55 35 [events/0]
root 0 0 01:31:45 505-23:36:55 36 [events/1]
root 0 0 01:33:48 505-23:36:55 37 [events/2]
root 0 0 01:36:37 505-23:36:55 38 [events/3]
root 0 0 01:21:43 505-23:36:55 39 [events/4]
root 0 0 01:17:08 505-23:36:55 40 [events/5]
root 0 0 01:23:37 505-23:36:55 41 [events/6]
root 0 0 01:26:48 505-23:36:55 42 [events/7]
root 0 0 00:00:00 505-23:36:55 43 [events/0]
root 0 0 00:00:00 505-23:36:55 44 [events/1]
root 0 0 00:00:00 505-23:36:55 45 [events/2]
root 0 0 00:00:00 505-23:36:55 46 [events/3]
root 0 0 00:00:00 505-23:36:55 47 [events/4]
root 0 0 00:00:00 505-23:36:55 48 [events/5]
root 0 0 00:00:00 505-23:36:55 49 [events/6]
root 0 0 00:00:00 505-23:36:55 50 [events/7]
root 0 0 00:00:00 505-23:36:55 51 [events_long/0]
root 0 0 00:00:00 505-23:36:55 52 [events_long/1]
root 0 0 00:00:00 505-23:36:55 53 [events_long/2]
root 0 0 00:00:00 505-23:36:55 54 [events_long/3]
root 0 0 00:00:00 505-23:36:55 55 [events_long/4]
root 0 0 00:00:00 505-23:36:55 56 [events_long/5]
root 0 0 00:00:00 505-23:36:55 57 [events_long/6]
root 0 0 00:00:00 505-23:36:55 58 [events_long/7]
root 0 0 00:00:00 505-23:36:55 59 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 60 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 61 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 62 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 63 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 64 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 65 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 66 [events_power_ef]
root 0 0 00:00:00 505-23:36:55 67 [cgroup]
root 0 0 00:00:00 505-23:36:55 68 [khelper]
root 0 0 00:00:00 505-23:36:55 69 [netns]
root 0 0 00:00:00 505-23:36:55 70 [async/mgr]
root 0 0 00:00:00 505-23:36:55 71 [pm]
root 0 0 00:05:11 505-23:36:55 72 [sync_supers]
root 0 0 00:00:13 505-23:36:55 73 [bdi-default]
root 0 0 00:00:00 505-23:36:55 74 [kintegrityd/0]
root 0 0 00:00:00 505-23:36:55 75 [kintegrityd/1]
root 0 0 00:00:00 505-23:36:55 76 [kintegrityd/2]
root 0 0 00:00:00 505-23:36:55 77 [kintegrityd/3]
root 0 0 00:00:00 505-23:36:55 78 [kintegrityd/4]
root 0 0 00:00:00 505-23:36:55 79 [kintegrityd/5]
root 0 0 00:00:00 505-23:36:55 80 [kintegrityd/6]
root 0 0 00:00:00 505-23:36:55 81 [kintegrityd/7]
root 0 0 06:14:09 505-23:36:55 82 [kblockd/0]
root 0 0 00:11:40 505-23:36:55 83 [kblockd/1]
root 0 0 00:23:18 505-23:36:55 84 [kblockd/2]
root 0 0 00:04:30 505-23:36:55 85 [kblockd/3]
root 0 0 10:56:43 505-23:36:55 86 [kblockd/4]
root 0 0 00:13:54 505-23:36:55 87 [kblockd/5]
root 0 0 00:09:11 505-23:36:55 88 [kblockd/6]
root 0 0 00:07:03 505-23:36:55 89 [kblockd/7]
root 0 0 00:00:00 505-23:36:55 90 [kacpid]
root 0 0 00:00:00 505-23:36:55 91 [kacpi_notify]
root 0 0 00:00:00 505-23:36:55 92 [kacpi_hotplug]
root 0 0 00:00:00 505-23:36:55 93 [ata_aux]
root 0 0 00:00:00 505-23:36:55 94 [ata_sff/0]
root 0 0 00:00:00 505-23:36:55 95 [ata_sff/1]
root 0 0 00:00:00 505-23:36:55 96 [ata_sff/2]
root 0 0 00:00:00 505-23:36:55 97 [ata_sff/3]
root 0 0 00:00:00 505-23:36:55 98 [ata_sff/4]
root 0 0 00:00:00 505-23:36:55 99 [ata_sff/5]
root 0 0 00:00:00 505-23:36:55 100 [ata_sff/6]
root 0 0 00:00:00 505-23:36:55 101 [ata_sff/7]
root 0 0 00:00:00 505-23:36:55 102 [ksuspend_usbd]
root 0 0 00:00:00 505-23:36:55 103 [khubd]
root 0 0 00:00:00 505-23:36:55 104 [kseriod]
root 0 0 00:00:00 505-23:36:55 105 [md/0]
root 0 0 00:00:00 505-23:36:55 106 [md/1]
root 0 0 00:00:00 505-23:36:55 107 [md/2]
root 0 0 00:00:00 505-23:36:55 108 [md/3]
root 0 0 00:00:00 505-23:36:55 109 [md/4]
root 0 0 00:00:00 505-23:36:55 110 [md/5]
root 0 0 00:00:00 505-23:36:55 111 [md/6]
root 0 0 00:00:00 505-23:36:55 112 [md/7]
root 0 0 00:00:00 505-23:36:55 113 [md_misc/0]
root 0 0 00:00:00 505-23:36:55 114 [md_misc/1]
root 0 0 00:00:00 505-23:36:55 115 [md_misc/2]
root 0 0 00:00:00 505-23:36:55 116 [md_misc/3]
root 0 0 00:00:00 505-23:36:55 117 [md_misc/4]
root 0 0 00:00:00 505-23:36:55 118 [md_misc/5]
root 0 0 00:00:00 505-23:36:55 119 [md_misc/6]
root 0 0 00:00:00 505-23:36:55 120 [md_misc/7]
root 0 0 00:00:00 505-23:36:55 121 [linkwatch]
root 0 0 00:01:05 505-23:36:54 124 [khungtaskd]
root 0 0 1-02:10:40 505-23:36:54 125 [kswapd1]
root 0 0 00:00:00 505-23:36:54 126 [ksmd]
root 0 0 03:41:00 505-23:36:54 127 [khugepaged]
root 0 0 00:00:00 505-23:36:54 128 [aio/0]
root 0 0 00:00:00 505-23:36:54 129 [aio/1]
root 0 0 00:00:00 505-23:36:54 130 [aio/2]
root 0 0 00:00:00 505-23:36:54 131 [aio/3]
root 0 0 00:00:00 505-23:36:54 132 [aio/4]
root 0 0 00:00:00 505-23:36:54 133 [aio/5]
root 0 0 00:00:00 505-23:36:54 134 [aio/6]
root 0 0 00:00:00 505-23:36:54 135 [aio/7]
root 0 0 00:00:00 505-23:36:54 136 [crypto/0]
root 0 0 00:00:00 505-23:36:54 137 [crypto/1]
root 0 0 00:00:00 505-23:36:54 138 [crypto/2]
root 0 0 00:00:00 505-23:36:54 139 [crypto/3]
root 0 0 00:00:00 505-23:36:54 140 [crypto/4]
root 0 0 00:00:00 505-23:36:54 141 [crypto/5]
root 0 0 00:00:00 505-23:36:54 142 [crypto/6]
root 0 0 00:00:00 505-23:36:54 143 [crypto/7]
root 0 0 00:00:00 505-23:36:54 150 [kthrotld/0]
root 0 0 00:00:00 505-23:36:54 151 [kthrotld/1]
root 0 0 00:00:00 505-23:36:54 152 [kthrotld/2]
root 0 0 00:00:00 505-23:36:54 153 [kthrotld/3]
root 0 0 00:00:00 505-23:36:54 154 [kthrotld/4]
root 0 0 00:00:00 505-23:36:54 155 [kthrotld/5]
root 0 0 00:00:00 505-23:36:54 156 [kthrotld/6]
root 0 0 00:00:00 505-23:36:54 157 [kthrotld/7]
root 0 0 00:00:00 505-23:36:54 160 [kpsmoused]
root 0 0 00:00:00 505-23:36:54 161 [usbhid_resumer]
root 0 0 00:00:00 505-23:36:54 162 [deferwq]
root 0 0 00:00:00 505-23:36:54 194 [kdmremove]
root 0 0 00:00:00 505-23:36:54 195 [kstriped]
root 0 0 00:00:00 505-23:36:52 734 [scsi_eh_0]
root 0 0 00:00:00 505-23:36:52 735 [scsi_wq_0]
root 0 0 00:00:00 505-23:36:52 748 [scsi_eh_1]
root 0 0 00:00:00 505-23:36:52 749 [scsi_eh_2]
root 0 0 00:00:00 505-23:36:52 750 [scsi_eh_3]
root 0 0 00:00:00 505-23:36:52 751 [scsi_eh_4]
root 0 0 00:00:00 505-23:36:52 752 [scsi_eh_5]
root 0 0 00:00:00 505-23:36:52 753 [scsi_eh_6]
root 0 0 00:54:04 505-23:36:51 950 [md1_raid1]
root 0 0 00:03:16 505-23:36:50 1011 [jbd2/md1-8]
root 0 0 00:00:00 505-23:36:50 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 505-23:36:49 1105 /sbin/udevd -d
root 0 0 00:31:55 505-23:36:49 1225 [edac-poller]
root 0 0 00:10:16 505-23:36:48 1259 [md0_raid1]
root 0 0 02:18:31 505-23:36:48 1288 [md3_raid1]
root 0 0 2-14:14:11 505-23:36:48 1310 [md5_raid1]
root 0 0 01:04:58 505-23:36:48 1322 [md4_raid1]
root 0 0 00:30:15 505-23:36:48 1336 [md2_raid1]
root 0 0 00:17:30 505-23:36:46 1844 [flush-9:3]
root 0 0 00:00:00 505-23:36:46 1881 [jbd2/md0-8]
root 0 0 00:00:00 505-23:36:46 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 505-23:36:46 1885 [xfs_mru_cache]
root 0 0 01:32:53 505-23:36:46 1886 [xfslogd/0]
root 0 0 00:00:00 505-23:36:46 1887 [xfslogd/1]
root 0 0 00:03:32 505-23:36:46 1888 [xfslogd/2]
root 0 0 00:00:00 505-23:36:46 1889 [xfslogd/3]
root 0 0 02:40:01 505-23:36:46 1890 [xfslogd/4]
root 0 0 00:00:00 505-23:36:46 1891 [xfslogd/5]
root 0 0 00:00:00 505-23:36:46 1892 [xfslogd/6]
root 0 0 00:00:00 505-23:36:46 1893 [xfslogd/7]
root 0 0 02:47:43 505-23:36:46 1894 [xfsdatad/0]
root 0 0 00:00:00 505-23:36:46 1895 [xfsdatad/1]
root 0 0 00:02:18 505-23:36:46 1896 [xfsdatad/2]
root 0 0 00:00:00 505-23:36:46 1897 [xfsdatad/3]
root 0 0 03:08:11 505-23:36:46 1898 [xfsdatad/4]
root 0 0 00:00:00 505-23:36:46 1899 [xfsdatad/5]
root 0 0 00:00:00 505-23:36:46 1900 [xfsdatad/6]
root 0 0 00:00:00 505-23:36:46 1901 [xfsdatad/7]
root 0 0 00:00:00 505-23:36:46 1902 [xfsconvertd/0]
root 0 0 00:00:00 505-23:36:46 1903 [xfsconvertd/1]
root 0 0 00:00:00 505-23:36:46 1904 [xfsconvertd/2]
root 0 0 00:00:00 505-23:36:46 1905 [xfsconvertd/3]
root 0 0 00:00:00 505-23:36:46 1906 [xfsconvertd/4]
root 0 0 00:00:00 505-23:36:46 1907 [xfsconvertd/5]
root 0 0 00:00:00 505-23:36:46 1908 [xfsconvertd/6]
root 0 0 00:00:00 505-23:36:46 1909 [xfsconvertd/7]
root 0 0 00:00:02 505-23:36:46 1910 [xfsalloc/0]
root 0 0 00:00:02 505-23:36:46 1911 [xfsalloc/1]
root 0 0 00:00:02 505-23:36:46 1912 [xfsalloc/2]
root 0 0 00:00:03 505-23:36:46 1913 [xfsalloc/3]
root 0 0 00:00:02 505-23:36:46 1914 [xfsalloc/4]
root 0 0 00:00:02 505-23:36:46 1915 [xfsalloc/5]
root 0 0 00:00:03 505-23:36:46 1916 [xfsalloc/6]
root 0 0 00:00:05 505-23:36:46 1917 [xfsalloc/7]
root 0 0 00:00:10 505-23:36:46 1918 [xfseofblocks/0]
root 0 0 00:00:06 505-23:36:46 1919 [xfseofblocks/1]
root 0 0 00:00:09 505-23:36:46 1920 [xfseofblocks/2]
root 0 0 00:00:11 505-23:36:46 1921 [xfseofblocks/3]
root 0 0 00:00:07 505-23:36:46 1922 [xfseofblocks/4]
root 0 0 00:00:09 505-23:36:46 1923 [xfseofblocks/5]
root 0 0 00:00:04 505-23:36:46 1924 [xfseofblocks/6]
root 0 0 00:02:41 505-23:36:46 1925 [xfseofblocks/7]
root 0 0 00:29:06 505-23:36:46 1926 [xfsbufd/md5]
root 0 0 00:26:11 505-23:36:46 1927 [xfs-cil/md5]
root 0 0 00:54:30 505-23:36:46 1928 [xfssyncd/md5]
root 0 0 06:16:25 505-23:36:46 1929 [xfsaild/md5]
root 0 0 00:03:21 505-23:36:45 1930 [jbd2/md2-8]
root 0 0 00:00:00 505-23:36:45 1931 [ext4-dio-unwrit]
root 0 0 00:07:51 505-23:36:45 1932 [xfsbufd/md4]
root 0 0 00:00:47 505-23:36:45 1933 [xfs-cil/md4]
root 0 0 00:03:33 505-23:36:45 1934 [xfssyncd/md4]
root 0 0 05:57:29 505-23:36:45 1935 [xfsaild/md4]
root 0 0 00:23:54 505-23:36:45 1936 [xfsbufd/md3]
root 0 0 00:19:00 505-23:36:45 1937 [xfs-cil/md3]
root 0 0 00:04:16 505-23:36:45 1938 [xfssyncd/md3]
root 0 0 06:07:15 505-23:36:45 1939 [xfsaild/md3]
root 0 0 00:36:09 505-23:36:45 1940 [xfsbufd/sdc1]
root 0 0 00:40:12 505-23:36:45 1941 [xfs-cil/sdc1]
root 0 0 11:41:35 505-23:36:45 1942 [xfssyncd/sdc1]
root 0 0 1-06:48:17 505-23:36:45 1943 [xfsaild/sdc1]
root 0 0 00:06:13 505-23:36:44 1999 [kauditd]
root 29764 704 00:15:19 505-23:36:27 2254 auditd
root 252156 31220 02:41:56 505-23:36:26 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:42:01 505-23:36:26 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:35 505-23:36:25 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 505-23:36:25 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:41:39 505-23:36:25 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:17 505-23:36:24 2492 /usr/sbin/sshd
root 71720 2008 00:33:10 505-23:36:19 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:02 505-23:36:19 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:54 505-23:36:19 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:22 505-23:36:19 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:17 505-23:36:19 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:16 505-23:36:08 3359 crond
root 107544 436 00:00:26 505-23:36:06 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 505-23:36:01 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 505-23:36:01 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 505-23:36:01 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 505-23:36:01 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 505-23:36:01 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 505-23:36:01 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 505-23:36:01 3491 /sbin/udevd -d
root 11232 260 00:00:00 505-23:36:01 3492 /sbin/udevd -d
root 163092 1504 00:00:44 490-21:01:14 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 796 00:00:00 18:32:56 38166 /usr/sbin/dovecot
dovecot 12980 1076 00:00:00 18:32:56 38168 dovecot/anvil
root 13108 1196 00:00:00 18:32:56 38169 dovecot/log
root 266588 74760 00:00:19 18:32:18 38724 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270684 78964 00:00:22 18:32:14 38725 spamd child
root 266588 72248 00:00:00 18:32:14 38727 spamd child
root 118780 568 00:00:00 104-10:46:45 43438 SCREEN -O
root 108452 1384 00:00:00 104-10:46:45 43439 /bin/bash
root 108452 1388 00:00:00 104-10:45:42 43486 /bin/bash
root 0 0 00:02:17 505-21:14:25 57735 [flush-9:2]
root 0 0 00:02:07 505-20:39:29 68416 [flush-9:1]
root 63348 4204 00:21:55 404-02:49:49 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 404-02:29:15 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857208 1570320 796-20:55:50 404-02:29:14 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 21712 768 00:00:15 103-20:58:32 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:02:52 32-11:21:34 181185 [flush-9:5]
root 565376 33384 00:10:01 32-11:13:01 182912 /usr/sbin/httpd -DSSL
root 95868 3132 00:00:00 38:12 204668 sendmail: server syn-208-105-193-045.biz.spectrum.com [208.105.193.45] cmd read
apache 587824 87792 00:01:02 33:43 205306 /usr/sbin/httpd -DSSL
apache 587664 86320 00:00:54 27:51 206026 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 20:29 207262 [flush-9:4]
apache 587204 84664 00:00:44 19:22 207328 /usr/sbin/httpd -DSSL
apache 587796 77932 00:00:38 19:20 207329 /usr/sbin/httpd -DSSL
apache 587972 89436 00:00:47 17:27 207837 /usr/sbin/httpd -DSSL
apache 588560 76884 00:00:40 17:08 207867 /usr/sbin/httpd -DSSL
root 96868 5668 00:00:00 16:20 207880 sendmail: ./48RGKRvR002882 mx.expedient.net.: user open
apache 636612 141816 00:00:39 16:12 207881 /usr/sbin/httpd -DSSL
apache 587952 95124 00:00:27 12:46 208329 /usr/sbin/httpd -DSSL
apache 604748 90480 00:00:27 12:44 208433 /usr/sbin/httpd -DSSL
root 96124 3568 00:00:00 11:20 208763 sendmail: ./48S1SoZe088581 smtp2.mybirch.net.: user open
apache 602400 89996 00:00:19 10:38 208770 /usr/sbin/httpd -DSSL
apache 588260 71520 00:00:21 10:37 208771 /usr/sbin/httpd -DSSL
apache 589608 78632 00:00:17 10:37 208772 /usr/sbin/httpd -DSSL
apache 585432 73584 00:00:22 10:31 208773 /usr/sbin/httpd -DSSL
apache 588668 93496 00:00:26 10:30 208775 /usr/sbin/httpd -DSSL
root 96124 3620 00:00:00 10:20 208776 sendmail: ./48RGhgeq006796 mail.virginvieathome.com.: user open
apache 585232 73168 00:00:11 08:54 208846 /usr/sbin/httpd -DSSL
apache 657872 142352 00:00:22 08:50 208847 /usr/sbin/httpd -DSSL
apache 595424 87888 00:00:19 08:49 208848 /usr/sbin/httpd -DSSL
root 96124 3616 00:00:00 08:20 209137 sendmail: ./48SKmKOl016466 mail.startrek.com.: user open
root 96124 3624 00:00:00 07:20 209422 sendmail: ./48SIwSF7000370 mailstation.uu.net.: user open
apache 764364 253952 00:00:19 06:28 209439 /usr/sbin/httpd -DSSL
apache 592412 85088 00:00:22 06:20 209442 /usr/sbin/httpd -DSSL
root 96124 3616 00:00:00 06:20 209443 sendmail: ./48SMwUZT036650 sciborg.uwaterloo.ca.: user open
apache 588800 75964 00:00:13 06:16 209444 /usr/sbin/httpd -DSSL
root 96124 3552 00:00:00 05:20 209694 sendmail: ./48UDqUSa172170 conecta.ciatej.net.mx.: user open
root 96124 3548 00:00:00 04:20 209802 sendmail: ./48RHvARx018602 in.mx3.mailhostbox.com.: user open
root 96124 3552 00:00:00 03:20 209807 sendmail: ./48SLbKGP023825 mailhost.rff.fr.: user open
apache 586328 55644 00:00:05 03:15 209808 /usr/sbin/httpd -DSSL
root 96124 3544 00:00:00 02:20 210295 sendmail: ./48UFP0rc186274 mx.cablevision.net.mx.: user open
root 96124 3528 00:00:00 01:20 210300 sendmail: ./48UDE5XE166425 mx.insight.synacor.com.: user open
apache 580552 32124 00:00:00 00:55 210301 /usr/sbin/httpd -DSSL
root 96124 3356 00:00:00 00:20 210306 sendmail: ./48UNk9dS015617 ochre.school.za.: user open
root 110772 2076 00:00:00 00:01 210399 /bin/bash /usr/bin/check_mk_agent
root 110900 1692 00:00:00 00:01 210425 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 210426 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 210428 cat
root 110900 1176 00:00:00 00:01 210453 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 210454 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 210455 tr -s 
root 154784 45448 00:00:41 399-21:01:20 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:03 442-11:43:30 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:58:09 442-11:43:30 238030 sendmail: accepting connections
named 724240 39856 03:31:07 442-11:43:15 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-10-01 20:44

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4706c89b6

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1727641049
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:43 503-23:09:49 1 /sbin/init
root 0 0 00:00:01 503-23:09:49 2 [kthreadd]
root 0 0 21:38:20 503-23:09:49 3 [migration/0]
root 0 0 01:01:26 503-23:09:49 4 [ksoftirqd/0]
root 0 0 00:00:00 503-23:09:49 5 [stopper/0]
root 0 0 00:15:50 503-23:09:49 6 [watchdog/0]
root 0 0 09:15:03 503-23:09:49 7 [migration/1]
root 0 0 00:00:00 503-23:09:49 8 [stopper/1]
root 0 0 01:36:42 503-23:09:49 9 [ksoftirqd/1]
root 0 0 00:19:54 503-23:09:49 10 [watchdog/1]
root 0 0 06:04:45 503-23:09:49 11 [migration/2]
root 0 0 00:00:00 503-23:09:49 12 [stopper/2]
root 0 0 00:47:22 503-23:09:49 13 [ksoftirqd/2]
root 0 0 00:17:24 503-23:09:49 14 [watchdog/2]
root 0 0 04:18:50 503-23:09:49 15 [migration/3]
root 0 0 00:00:00 503-23:09:49 16 [stopper/3]
root 0 0 00:34:01 503-23:09:49 17 [ksoftirqd/3]
root 0 0 00:13:49 503-23:09:49 18 [watchdog/3]
root 0 0 15:10:20 503-23:09:49 19 [migration/4]
root 0 0 00:00:00 503-23:09:49 20 [stopper/4]
root 0 0 00:53:21 503-23:09:49 21 [ksoftirqd/4]
root 0 0 00:08:11 503-23:09:49 22 [watchdog/4]
root 0 0 08:34:16 503-23:09:49 23 [migration/5]
root 0 0 00:00:00 503-23:09:49 24 [stopper/5]
root 0 0 00:37:35 503-23:09:49 25 [ksoftirqd/5]
root 0 0 00:17:43 503-23:09:49 26 [watchdog/5]
root 0 0 05:10:22 503-23:09:49 27 [migration/6]
root 0 0 00:00:00 503-23:09:49 28 [stopper/6]
root 0 0 00:28:42 503-23:09:49 29 [ksoftirqd/6]
root 0 0 00:13:16 503-23:09:49 30 [watchdog/6]
root 0 0 04:05:18 503-23:09:49 31 [migration/7]
root 0 0 00:00:00 503-23:09:49 32 [stopper/7]
root 0 0 00:28:01 503-23:09:49 33 [ksoftirqd/7]
root 0 0 00:10:33 503-23:09:49 34 [watchdog/7]
root 0 0 02:22:44 503-23:09:49 35 [events/0]
root 0 0 01:30:48 503-23:09:49 36 [events/1]
root 0 0 01:32:52 503-23:09:49 37 [events/2]
root 0 0 01:35:40 503-23:09:49 38 [events/3]
root 0 0 01:21:10 503-23:09:49 39 [events/4]
root 0 0 01:16:37 503-23:09:49 40 [events/5]
root 0 0 01:23:06 503-23:09:49 41 [events/6]
root 0 0 01:26:14 503-23:09:49 42 [events/7]
root 0 0 00:00:00 503-23:09:49 43 [events/0]
root 0 0 00:00:00 503-23:09:49 44 [events/1]
root 0 0 00:00:00 503-23:09:49 45 [events/2]
root 0 0 00:00:00 503-23:09:49 46 [events/3]
root 0 0 00:00:00 503-23:09:49 47 [events/4]
root 0 0 00:00:00 503-23:09:49 48 [events/5]
root 0 0 00:00:00 503-23:09:49 49 [events/6]
root 0 0 00:00:00 503-23:09:49 50 [events/7]
root 0 0 00:00:00 503-23:09:49 51 [events_long/0]
root 0 0 00:00:00 503-23:09:49 52 [events_long/1]
root 0 0 00:00:00 503-23:09:49 53 [events_long/2]
root 0 0 00:00:00 503-23:09:49 54 [events_long/3]
root 0 0 00:00:00 503-23:09:49 55 [events_long/4]
root 0 0 00:00:00 503-23:09:49 56 [events_long/5]
root 0 0 00:00:00 503-23:09:49 57 [events_long/6]
root 0 0 00:00:00 503-23:09:49 58 [events_long/7]
root 0 0 00:00:00 503-23:09:49 59 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 60 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 61 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 62 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 63 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 64 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 65 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 66 [events_power_ef]
root 0 0 00:00:00 503-23:09:49 67 [cgroup]
root 0 0 00:00:00 503-23:09:49 68 [khelper]
root 0 0 00:00:00 503-23:09:49 69 [netns]
root 0 0 00:00:00 503-23:09:49 70 [async/mgr]
root 0 0 00:00:00 503-23:09:49 71 [pm]
root 0 0 00:05:06 503-23:09:49 72 [sync_supers]
root 0 0 00:00:13 503-23:09:49 73 [bdi-default]
root 0 0 00:00:00 503-23:09:49 74 [kintegrityd/0]
root 0 0 00:00:00 503-23:09:49 75 [kintegrityd/1]
root 0 0 00:00:00 503-23:09:49 76 [kintegrityd/2]
root 0 0 00:00:00 503-23:09:49 77 [kintegrityd/3]
root 0 0 00:00:00 503-23:09:49 78 [kintegrityd/4]
root 0 0 00:00:00 503-23:09:49 79 [kintegrityd/5]
root 0 0 00:00:00 503-23:09:49 80 [kintegrityd/6]
root 0 0 00:00:00 503-23:09:49 81 [kintegrityd/7]
root 0 0 06:11:37 503-23:09:49 82 [kblockd/0]
root 0 0 00:11:38 503-23:09:49 83 [kblockd/1]
root 0 0 00:23:18 503-23:09:49 84 [kblockd/2]
root 0 0 00:04:30 503-23:09:49 85 [kblockd/3]
root 0 0 10:52:46 503-23:09:49 86 [kblockd/4]
root 0 0 00:13:53 503-23:09:49 87 [kblockd/5]
root 0 0 00:09:10 503-23:09:49 88 [kblockd/6]
root 0 0 00:07:02 503-23:09:49 89 [kblockd/7]
root 0 0 00:00:00 503-23:09:49 90 [kacpid]
root 0 0 00:00:00 503-23:09:49 91 [kacpi_notify]
root 0 0 00:00:00 503-23:09:49 92 [kacpi_hotplug]
root 0 0 00:00:00 503-23:09:49 93 [ata_aux]
root 0 0 00:00:00 503-23:09:49 94 [ata_sff/0]
root 0 0 00:00:00 503-23:09:49 95 [ata_sff/1]
root 0 0 00:00:00 503-23:09:49 96 [ata_sff/2]
root 0 0 00:00:00 503-23:09:49 97 [ata_sff/3]
root 0 0 00:00:00 503-23:09:49 98 [ata_sff/4]
root 0 0 00:00:00 503-23:09:49 99 [ata_sff/5]
root 0 0 00:00:00 503-23:09:49 100 [ata_sff/6]
root 0 0 00:00:00 503-23:09:49 101 [ata_sff/7]
root 0 0 00:00:00 503-23:09:49 102 [ksuspend_usbd]
root 0 0 00:00:00 503-23:09:49 103 [khubd]
root 0 0 00:00:00 503-23:09:49 104 [kseriod]
root 0 0 00:00:00 503-23:09:49 105 [md/0]
root 0 0 00:00:00 503-23:09:49 106 [md/1]
root 0 0 00:00:00 503-23:09:49 107 [md/2]
root 0 0 00:00:00 503-23:09:49 108 [md/3]
root 0 0 00:00:00 503-23:09:49 109 [md/4]
root 0 0 00:00:00 503-23:09:49 110 [md/5]
root 0 0 00:00:00 503-23:09:49 111 [md/6]
root 0 0 00:00:00 503-23:09:49 112 [md/7]
root 0 0 00:00:00 503-23:09:49 113 [md_misc/0]
root 0 0 00:00:00 503-23:09:49 114 [md_misc/1]
root 0 0 00:00:00 503-23:09:49 115 [md_misc/2]
root 0 0 00:00:00 503-23:09:49 116 [md_misc/3]
root 0 0 00:00:00 503-23:09:49 117 [md_misc/4]
root 0 0 00:00:00 503-23:09:49 118 [md_misc/5]
root 0 0 00:00:00 503-23:09:49 119 [md_misc/6]
root 0 0 00:00:00 503-23:09:49 120 [md_misc/7]
root 0 0 00:00:00 503-23:09:49 121 [linkwatch]
root 0 0 00:01:05 503-23:09:48 124 [khungtaskd]
root 0 0 1-02:06:28 503-23:09:48 125 [kswapd1]
root 0 0 00:00:00 503-23:09:48 126 [ksmd]
root 0 0 03:38:39 503-23:09:48 127 [khugepaged]
root 0 0 00:00:00 503-23:09:48 128 [aio/0]
root 0 0 00:00:00 503-23:09:48 129 [aio/1]
root 0 0 00:00:00 503-23:09:48 130 [aio/2]
root 0 0 00:00:00 503-23:09:48 131 [aio/3]
root 0 0 00:00:00 503-23:09:48 132 [aio/4]
root 0 0 00:00:00 503-23:09:48 133 [aio/5]
root 0 0 00:00:00 503-23:09:48 134 [aio/6]
root 0 0 00:00:00 503-23:09:48 135 [aio/7]
root 0 0 00:00:00 503-23:09:48 136 [crypto/0]
root 0 0 00:00:00 503-23:09:48 137 [crypto/1]
root 0 0 00:00:00 503-23:09:48 138 [crypto/2]
root 0 0 00:00:00 503-23:09:48 139 [crypto/3]
root 0 0 00:00:00 503-23:09:48 140 [crypto/4]
root 0 0 00:00:00 503-23:09:48 141 [crypto/5]
root 0 0 00:00:00 503-23:09:48 142 [crypto/6]
root 0 0 00:00:00 503-23:09:48 143 [crypto/7]
root 0 0 00:00:00 503-23:09:48 150 [kthrotld/0]
root 0 0 00:00:00 503-23:09:48 151 [kthrotld/1]
root 0 0 00:00:00 503-23:09:48 152 [kthrotld/2]
root 0 0 00:00:00 503-23:09:48 153 [kthrotld/3]
root 0 0 00:00:00 503-23:09:48 154 [kthrotld/4]
root 0 0 00:00:00 503-23:09:48 155 [kthrotld/5]
root 0 0 00:00:00 503-23:09:48 156 [kthrotld/6]
root 0 0 00:00:00 503-23:09:48 157 [kthrotld/7]
root 0 0 00:00:00 503-23:09:48 160 [kpsmoused]
root 0 0 00:00:00 503-23:09:48 161 [usbhid_resumer]
root 0 0 00:00:00 503-23:09:48 162 [deferwq]
root 0 0 00:00:00 503-23:09:48 194 [kdmremove]
root 0 0 00:00:00 503-23:09:48 195 [kstriped]
apache 584288 63976 00:00:07 09:35 598 /usr/sbin/httpd -DSSL
apache 583272 49036 00:00:03 09:26 603 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 503-23:09:46 734 [scsi_eh_0]
root 0 0 00:00:00 503-23:09:46 735 [scsi_wq_0]
root 0 0 00:00:00 503-23:09:46 748 [scsi_eh_1]
root 0 0 00:00:00 503-23:09:46 749 [scsi_eh_2]
root 0 0 00:00:00 503-23:09:46 750 [scsi_eh_3]
root 0 0 00:00:00 503-23:09:46 751 [scsi_eh_4]
root 0 0 00:00:00 503-23:09:46 752 [scsi_eh_5]
root 0 0 00:00:00 503-23:09:46 753 [scsi_eh_6]
root 0 0 00:53:59 503-23:09:45 950 [md1_raid1]
root 0 0 00:03:15 503-23:09:44 1011 [jbd2/md1-8]
root 0 0 00:00:00 503-23:09:44 1012 [ext4-dio-unwrit]
apache 582632 49364 00:00:01 07:22 1062 /usr/sbin/httpd -DSSL
apache 585264 48908 00:00:03 07:21 1067 /usr/sbin/httpd -DSSL
apache 582208 33828 00:00:01 07:21 1070 /usr/sbin/httpd -DSSL
apache 597096 69940 00:00:03 07:21 1073 /usr/sbin/httpd -DSSL
apache 612148 112044 00:00:09 07:00 1088 /usr/sbin/httpd -DSSL
apache 582144 35112 00:00:03 06:57 1099 /usr/sbin/httpd -DSSL
root 11236 280 00:00:01 503-23:09:43 1105 /sbin/udevd -d
apache 583076 50800 00:00:02 06:49 1113 /usr/sbin/httpd -DSSL
apache 594740 61252 00:00:04 06:49 1114 /usr/sbin/httpd -DSSL
apache 581700 33692 00:00:01 05:55 1131 /usr/sbin/httpd -DSSL
apache 583184 55540 00:00:01 05:52 1132 /usr/sbin/httpd -DSSL
apache 585500 37256 00:00:01 05:49 1134 /usr/sbin/httpd -DSSL
apache 628484 107020 00:00:02 05:48 1136 /usr/sbin/httpd -DSSL
apache 585496 56544 00:00:02 05:48 1139 /usr/sbin/httpd -DSSL
apache 583460 64620 00:00:02 05:47 1141 /usr/sbin/httpd -DSSL
apache 586580 36404 00:00:02 05:47 1145 /usr/sbin/httpd -DSSL
root 0 0 00:31:28 503-23:09:43 1225 [edac-poller]
root 0 0 00:10:16 503-23:09:42 1259 [md0_raid1]
root 0 0 02:17:47 503-23:09:42 1288 [md3_raid1]
root 0 0 2-14:06:28 503-23:09:42 1310 [md5_raid1]
root 0 0 01:04:49 503-23:09:42 1322 [md4_raid1]
root 0 0 00:30:06 503-23:09:42 1336 [md2_raid1]
apache 595844 71696 00:00:04 05:11 1555 /usr/sbin/httpd -DSSL
apache 640180 115756 00:00:04 05:10 1575 /usr/sbin/httpd -DSSL
apache 581364 33948 00:00:01 05:09 1577 /usr/sbin/httpd -DSSL
apache 587336 53336 00:00:02 04:18 1698 /usr/sbin/httpd -DSSL
apache 597160 55104 00:00:00 04:05 1710 /usr/sbin/httpd -DSSL
apache 586912 56256 00:00:03 04:04 1715 /usr/sbin/httpd -DSSL
apache 581064 32808 00:00:00 04:04 1718 /usr/sbin/httpd -DSSL
root 0 0 00:17:24 503-23:09:40 1844 [flush-9:3]
root 0 0 00:00:00 503-23:09:40 1881 [jbd2/md0-8]
root 0 0 00:00:00 503-23:09:40 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 503-23:09:40 1885 [xfs_mru_cache]
root 0 0 01:32:37 503-23:09:40 1886 [xfslogd/0]
root 0 0 00:00:00 503-23:09:40 1887 [xfslogd/1]
root 0 0 00:03:32 503-23:09:40 1888 [xfslogd/2]
root 0 0 00:00:00 503-23:09:40 1889 [xfslogd/3]
root 0 0 02:39:27 503-23:09:40 1890 [xfslogd/4]
root 0 0 00:00:00 503-23:09:40 1891 [xfslogd/5]
root 0 0 00:00:00 503-23:09:40 1892 [xfslogd/6]
root 0 0 00:00:00 503-23:09:40 1893 [xfslogd/7]
root 0 0 02:46:57 503-23:09:40 1894 [xfsdatad/0]
root 0 0 00:00:00 503-23:09:40 1895 [xfsdatad/1]
root 0 0 00:02:18 503-23:09:40 1896 [xfsdatad/2]
root 0 0 00:00:00 503-23:09:40 1897 [xfsdatad/3]
root 0 0 03:07:37 503-23:09:40 1898 [xfsdatad/4]
root 0 0 00:00:00 503-23:09:40 1899 [xfsdatad/5]
root 0 0 00:00:00 503-23:09:40 1900 [xfsdatad/6]
root 0 0 00:00:00 503-23:09:40 1901 [xfsdatad/7]
root 0 0 00:00:00 503-23:09:40 1902 [xfsconvertd/0]
root 0 0 00:00:00 503-23:09:40 1903 [xfsconvertd/1]
root 0 0 00:00:00 503-23:09:40 1904 [xfsconvertd/2]
root 0 0 00:00:00 503-23:09:40 1905 [xfsconvertd/3]
root 0 0 00:00:00 503-23:09:40 1906 [xfsconvertd/4]
root 0 0 00:00:00 503-23:09:40 1907 [xfsconvertd/5]
root 0 0 00:00:00 503-23:09:40 1908 [xfsconvertd/6]
root 0 0 00:00:00 503-23:09:40 1909 [xfsconvertd/7]
root 0 0 00:00:02 503-23:09:40 1910 [xfsalloc/0]
root 0 0 00:00:02 503-23:09:40 1911 [xfsalloc/1]
root 0 0 00:00:02 503-23:09:40 1912 [xfsalloc/2]
root 0 0 00:00:03 503-23:09:40 1913 [xfsalloc/3]
root 0 0 00:00:02 503-23:09:40 1914 [xfsalloc/4]
root 0 0 00:00:02 503-23:09:40 1915 [xfsalloc/5]
root 0 0 00:00:03 503-23:09:40 1916 [xfsalloc/6]
root 0 0 00:00:05 503-23:09:40 1917 [xfsalloc/7]
root 0 0 00:00:10 503-23:09:40 1918 [xfseofblocks/0]
root 0 0 00:00:06 503-23:09:40 1919 [xfseofblocks/1]
root 0 0 00:00:09 503-23:09:40 1920 [xfseofblocks/2]
root 0 0 00:00:10 503-23:09:40 1921 [xfseofblocks/3]
root 0 0 00:00:07 503-23:09:40 1922 [xfseofblocks/4]
root 0 0 00:00:09 503-23:09:40 1923 [xfseofblocks/5]
root 0 0 00:00:04 503-23:09:40 1924 [xfseofblocks/6]
root 0 0 00:02:41 503-23:09:40 1925 [xfseofblocks/7]
root 0 0 00:28:50 503-23:09:40 1926 [xfsbufd/md5]
root 0 0 00:25:58 503-23:09:40 1927 [xfs-cil/md5]
root 0 0 00:54:16 503-23:09:40 1928 [xfssyncd/md5]
root 0 0 06:11:20 503-23:09:40 1929 [xfsaild/md5]
root 0 0 00:03:18 503-23:09:39 1930 [jbd2/md2-8]
root 0 0 00:00:00 503-23:09:39 1931 [ext4-dio-unwrit]
root 0 0 00:07:46 503-23:09:39 1932 [xfsbufd/md4]
root 0 0 00:00:47 503-23:09:39 1933 [xfs-cil/md4]
root 0 0 00:03:32 503-23:09:39 1934 [xfssyncd/md4]
root 0 0 05:52:42 503-23:09:39 1935 [xfsaild/md4]
root 0 0 00:23:36 503-23:09:39 1936 [xfsbufd/md3]
root 0 0 00:18:52 503-23:09:39 1937 [xfs-cil/md3]
root 0 0 00:04:15 503-23:09:39 1938 [xfssyncd/md3]
root 0 0 06:02:10 503-23:09:39 1939 [xfsaild/md3]
root 0 0 00:35:59 503-23:09:39 1940 [xfsbufd/sdc1]
root 0 0 00:40:06 503-23:09:39 1941 [xfs-cil/sdc1]
root 0 0 11:40:48 503-23:09:39 1942 [xfssyncd/sdc1]
root 0 0 1-06:40:59 503-23:09:39 1943 [xfsaild/sdc1]
root 0 0 00:06:12 503-23:09:38 1999 [kauditd]
root 29764 704 00:15:17 503-23:09:21 2254 auditd
root 252156 31224 02:41:16 503-23:09:20 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:41:13 503-23:09:20 2291 irqbalance --pid=/var/run/irqbalance.pid
root 96632 5384 00:00:00 00:28 2299 sendmail: ./48SLbKGP023825 mailhost.rff.fr.: user open
root 4988 844 00:00:35 503-23:09:19 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 503-23:09:19 2458 /usr/sbin/mcelog --daemon
root 95868 3044 00:00:00 00:02 2466 sendmail: server [43.224.116.202] cmd read
memcached 330840 512 00:41:10 503-23:09:19 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:17 503-23:09:18 2492 /usr/sbin/sshd
root 110772 2072 00:00:00 00:02 2521 /bin/bash /usr/bin/check_mk_agent
root 110900 1680 00:00:00 00:01 2547 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 2548 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 2549 cat
root 110900 1176 00:00:00 00:01 2575 /bin/bash /usr/bin/check_mk_agent
root 13360 1012 00:00:00 00:01 2576 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 2577 tr -s 
root 71720 2008 00:33:09 503-23:09:13 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:33:01 503-23:09:13 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:54 503-23:09:13 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:21 503-23:09:13 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:17 503-23:09:13 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:13 503-23:09:02 3359 crond
root 107544 436 00:00:26 503-23:09:00 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 503-23:08:55 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 503-23:08:55 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 503-23:08:55 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 503-23:08:55 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 503-23:08:55 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 503-23:08:55 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 503-23:08:55 3491 /sbin/udevd -d
root 11232 260 00:00:00 503-23:08:55 3492 /sbin/udevd -d
root 163092 1504 00:00:44 488-20:34:08 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 568 00:00:00 102-10:19:39 43438 SCREEN -O
root 108452 1384 00:00:00 102-10:19:39 43439 /bin/bash
root 108452 1388 00:00:00 102-10:18:36 43486 /bin/bash
root 0 0 00:02:14 503-20:47:19 57735 [flush-9:2]
root 0 0 00:02:05 503-20:12:23 68416 [flush-9:1]
root 19260 792 00:00:00 17:47:45 72333 /usr/sbin/dovecot
dovecot 12980 1064 00:00:00 17:47:45 72335 dovecot/anvil
root 13108 1192 00:00:00 17:47:45 72336 dovecot/log
root 266588 74760 00:00:18 17:21:38 76277 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 63348 4204 00:21:47 402-02:22:43 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 402-02:02:09 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4857208 1553016 787-00:47:31 402-02:02:08 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 0 0 00:00:00 09:53:21 144417 [flush-9:4]
root 21712 768 00:00:15 101-20:31:26 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:02:39 30-10:54:28 181185 [flush-9:5]
root 565376 33384 00:08:46 30-10:45:55 182912 /usr/sbin/httpd -DSSL
root 270040 78208 00:00:37 05:57:34 185179 spamd child
root 266588 72236 00:00:00 03:02:13 216252 spamd child
root 154784 45448 00:00:41 397-20:34:14 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:09:01 440-11:16:24 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:57:48 440-11:16:24 238030 sendmail: accepting connections
named 724240 39856 03:29:46 440-11:16:09 238586 /usr/sbin/named -u named -4
apache 595356 90792 00:00:26 20:36 243737 /usr/sbin/httpd -DSSL
apache 599356 79008 00:00:08 10:36 245759 /usr/sbin/httpd -DSSL

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-29 20:17

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e463b3ebb8

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1727469985
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:43 501-23:38:45 1 /sbin/init
root 0 0 00:00:01 501-23:38:45 2 [kthreadd]
root 0 0 21:34:33 501-23:38:45 3 [migration/0]
root 0 0 01:01:09 501-23:38:45 4 [ksoftirqd/0]
root 0 0 00:00:00 501-23:38:45 5 [stopper/0]
root 0 0 00:15:45 501-23:38:45 6 [watchdog/0]
root 0 0 09:13:49 501-23:38:45 7 [migration/1]
root 0 0 00:00:00 501-23:38:45 8 [stopper/1]
root 0 0 01:36:24 501-23:38:45 9 [ksoftirqd/1]
root 0 0 00:19:48 501-23:38:45 10 [watchdog/1]
root 0 0 06:04:07 501-23:38:45 11 [migration/2]
root 0 0 00:00:00 501-23:38:45 12 [stopper/2]
root 0 0 00:47:09 501-23:38:45 13 [ksoftirqd/2]
root 0 0 00:17:19 501-23:38:45 14 [watchdog/2]
root 0 0 04:18:25 501-23:38:45 15 [migration/3]
root 0 0 00:00:00 501-23:38:45 16 [stopper/3]
root 0 0 00:33:49 501-23:38:45 17 [ksoftirqd/3]
root 0 0 00:13:44 501-23:38:45 18 [watchdog/3]
root 0 0 15:07:40 501-23:38:45 19 [migration/4]
root 0 0 00:00:00 501-23:38:45 20 [stopper/4]
root 0 0 00:53:09 501-23:38:45 21 [ksoftirqd/4]
root 0 0 00:08:09 501-23:38:45 22 [watchdog/4]
root 0 0 08:33:25 501-23:38:45 23 [migration/5]
root 0 0 00:00:00 501-23:38:45 24 [stopper/5]
root 0 0 00:37:27 501-23:38:45 25 [ksoftirqd/5]
root 0 0 00:17:39 501-23:38:45 26 [watchdog/5]
root 0 0 05:09:53 501-23:38:45 27 [migration/6]
root 0 0 00:00:00 501-23:38:45 28 [stopper/6]
root 0 0 00:28:34 501-23:38:45 29 [ksoftirqd/6]
root 0 0 00:13:13 501-23:38:45 30 [watchdog/6]
root 0 0 04:04:59 501-23:38:45 31 [migration/7]
root 0 0 00:00:00 501-23:38:45 32 [stopper/7]
root 0 0 00:27:53 501-23:38:45 33 [ksoftirqd/7]
root 0 0 00:10:30 501-23:38:45 34 [watchdog/7]
root 0 0 02:22:00 501-23:38:45 35 [events/0]
root 0 0 01:30:10 501-23:38:45 36 [events/1]
root 0 0 01:32:10 501-23:38:45 37 [events/2]
root 0 0 01:35:01 501-23:38:45 38 [events/3]
root 0 0 01:20:46 501-23:38:45 39 [events/4]
root 0 0 01:16:11 501-23:38:45 40 [events/5]
root 0 0 01:22:40 501-23:38:45 41 [events/6]
root 0 0 01:25:47 501-23:38:45 42 [events/7]
root 0 0 00:00:00 501-23:38:45 43 [events/0]
root 0 0 00:00:00 501-23:38:45 44 [events/1]
root 0 0 00:00:00 501-23:38:45 45 [events/2]
root 0 0 00:00:00 501-23:38:45 46 [events/3]
root 0 0 00:00:00 501-23:38:45 47 [events/4]
root 0 0 00:00:00 501-23:38:45 48 [events/5]
root 0 0 00:00:00 501-23:38:45 49 [events/6]
root 0 0 00:00:00 501-23:38:45 50 [events/7]
root 0 0 00:00:00 501-23:38:45 51 [events_long/0]
root 0 0 00:00:00 501-23:38:45 52 [events_long/1]
root 0 0 00:00:00 501-23:38:45 53 [events_long/2]
root 0 0 00:00:00 501-23:38:45 54 [events_long/3]
root 0 0 00:00:00 501-23:38:45 55 [events_long/4]
root 0 0 00:00:00 501-23:38:45 56 [events_long/5]
root 0 0 00:00:00 501-23:38:45 57 [events_long/6]
root 0 0 00:00:00 501-23:38:45 58 [events_long/7]
root 0 0 00:00:00 501-23:38:45 59 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 60 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 61 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 62 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 63 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 64 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 65 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 66 [events_power_ef]
root 0 0 00:00:00 501-23:38:45 67 [cgroup]
root 0 0 00:00:00 501-23:38:45 68 [khelper]
root 0 0 00:00:00 501-23:38:45 69 [netns]
root 0 0 00:00:00 501-23:38:45 70 [async/mgr]
root 0 0 00:00:00 501-23:38:45 71 [pm]
root 0 0 00:05:03 501-23:38:45 72 [sync_supers]
root 0 0 00:00:13 501-23:38:45 73 [bdi-default]
root 0 0 00:00:00 501-23:38:45 74 [kintegrityd/0]
root 0 0 00:00:00 501-23:38:45 75 [kintegrityd/1]
root 0 0 00:00:00 501-23:38:45 76 [kintegrityd/2]
root 0 0 00:00:00 501-23:38:45 77 [kintegrityd/3]
root 0 0 00:00:00 501-23:38:45 78 [kintegrityd/4]
root 0 0 00:00:00 501-23:38:45 79 [kintegrityd/5]
root 0 0 00:00:00 501-23:38:45 80 [kintegrityd/6]
root 0 0 00:00:00 501-23:38:45 81 [kintegrityd/7]
root 0 0 06:09:28 501-23:38:45 82 [kblockd/0]
root 0 0 00:11:37 501-23:38:45 83 [kblockd/1]
root 0 0 00:23:17 501-23:38:45 84 [kblockd/2]
root 0 0 00:04:30 501-23:38:45 85 [kblockd/3]
root 0 0 10:49:13 501-23:38:45 86 [kblockd/4]
root 0 0 00:13:51 501-23:38:45 87 [kblockd/5]
root 0 0 00:09:10 501-23:38:45 88 [kblockd/6]
root 0 0 00:07:02 501-23:38:45 89 [kblockd/7]
root 0 0 00:00:00 501-23:38:45 90 [kacpid]
root 0 0 00:00:00 501-23:38:45 91 [kacpi_notify]
root 0 0 00:00:00 501-23:38:45 92 [kacpi_hotplug]
root 0 0 00:00:00 501-23:38:45 93 [ata_aux]
root 0 0 00:00:00 501-23:38:45 94 [ata_sff/0]
root 0 0 00:00:00 501-23:38:45 95 [ata_sff/1]
root 0 0 00:00:00 501-23:38:45 96 [ata_sff/2]
root 0 0 00:00:00 501-23:38:45 97 [ata_sff/3]
root 0 0 00:00:00 501-23:38:45 98 [ata_sff/4]
root 0 0 00:00:00 501-23:38:45 99 [ata_sff/5]
root 0 0 00:00:00 501-23:38:45 100 [ata_sff/6]
root 0 0 00:00:00 501-23:38:45 101 [ata_sff/7]
root 0 0 00:00:00 501-23:38:45 102 [ksuspend_usbd]
root 0 0 00:00:00 501-23:38:45 103 [khubd]
root 0 0 00:00:00 501-23:38:45 104 [kseriod]
root 0 0 00:00:00 501-23:38:45 105 [md/0]
root 0 0 00:00:00 501-23:38:45 106 [md/1]
root 0 0 00:00:00 501-23:38:45 107 [md/2]
root 0 0 00:00:00 501-23:38:45 108 [md/3]
root 0 0 00:00:00 501-23:38:45 109 [md/4]
root 0 0 00:00:00 501-23:38:45 110 [md/5]
root 0 0 00:00:00 501-23:38:45 111 [md/6]
root 0 0 00:00:00 501-23:38:45 112 [md/7]
root 0 0 00:00:00 501-23:38:45 113 [md_misc/0]
root 0 0 00:00:00 501-23:38:45 114 [md_misc/1]
root 0 0 00:00:00 501-23:38:45 115 [md_misc/2]
root 0 0 00:00:00 501-23:38:45 116 [md_misc/3]
root 0 0 00:00:00 501-23:38:45 117 [md_misc/4]
root 0 0 00:00:00 501-23:38:45 118 [md_misc/5]
root 0 0 00:00:00 501-23:38:45 119 [md_misc/6]
root 0 0 00:00:00 501-23:38:45 120 [md_misc/7]
root 0 0 00:00:00 501-23:38:45 121 [linkwatch]
root 0 0 00:01:04 501-23:38:44 124 [khungtaskd]
root 0 0 1-02:01:57 501-23:38:44 125 [kswapd1]
root 0 0 00:00:00 501-23:38:44 126 [ksmd]
root 0 0 03:37:24 501-23:38:44 127 [khugepaged]
root 0 0 00:00:00 501-23:38:44 128 [aio/0]
root 0 0 00:00:00 501-23:38:44 129 [aio/1]
root 0 0 00:00:00 501-23:38:44 130 [aio/2]
root 0 0 00:00:00 501-23:38:44 131 [aio/3]
root 0 0 00:00:00 501-23:38:44 132 [aio/4]
root 0 0 00:00:00 501-23:38:44 133 [aio/5]
root 0 0 00:00:00 501-23:38:44 134 [aio/6]
root 0 0 00:00:00 501-23:38:44 135 [aio/7]
root 0 0 00:00:00 501-23:38:44 136 [crypto/0]
root 0 0 00:00:00 501-23:38:44 137 [crypto/1]
root 0 0 00:00:00 501-23:38:44 138 [crypto/2]
root 0 0 00:00:00 501-23:38:44 139 [crypto/3]
root 0 0 00:00:00 501-23:38:44 140 [crypto/4]
root 0 0 00:00:00 501-23:38:44 141 [crypto/5]
root 0 0 00:00:00 501-23:38:44 142 [crypto/6]
root 0 0 00:00:00 501-23:38:44 143 [crypto/7]
root 0 0 00:00:00 501-23:38:44 150 [kthrotld/0]
root 0 0 00:00:00 501-23:38:44 151 [kthrotld/1]
root 0 0 00:00:00 501-23:38:44 152 [kthrotld/2]
root 0 0 00:00:00 501-23:38:44 153 [kthrotld/3]
root 0 0 00:00:00 501-23:38:44 154 [kthrotld/4]
root 0 0 00:00:00 501-23:38:44 155 [kthrotld/5]
root 0 0 00:00:00 501-23:38:44 156 [kthrotld/6]
root 0 0 00:00:00 501-23:38:44 157 [kthrotld/7]
root 0 0 00:00:00 501-23:38:44 160 [kpsmoused]
root 0 0 00:00:00 501-23:38:44 161 [usbhid_resumer]
root 0 0 00:00:00 501-23:38:44 162 [deferwq]
root 0 0 00:00:00 501-23:38:44 194 [kdmremove]
root 0 0 00:00:00 501-23:38:44 195 [kstriped]
root 0 0 00:00:00 501-23:38:42 734 [scsi_eh_0]
root 0 0 00:00:00 501-23:38:42 735 [scsi_wq_0]
root 0 0 00:00:00 501-23:38:42 748 [scsi_eh_1]
root 0 0 00:00:00 501-23:38:42 749 [scsi_eh_2]
root 0 0 00:00:00 501-23:38:42 750 [scsi_eh_3]
root 0 0 00:00:00 501-23:38:42 751 [scsi_eh_4]
root 0 0 00:00:00 501-23:38:42 752 [scsi_eh_5]
root 0 0 00:00:00 501-23:38:42 753 [scsi_eh_6]
root 0 0 00:53:25 501-23:38:41 950 [md1_raid1]
root 0 0 00:03:14 501-23:38:40 1011 [jbd2/md1-8]
root 0 0 00:00:00 501-23:38:40 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 501-23:38:39 1105 /sbin/udevd -d
root 0 0 00:31:13 501-23:38:39 1225 [edac-poller]
root 0 0 00:10:07 501-23:38:38 1259 [md0_raid1]
root 0 0 02:16:37 501-23:38:38 1288 [md3_raid1]
root 0 0 2-13:34:45 501-23:38:38 1310 [md5_raid1]
root 0 0 01:04:09 501-23:38:38 1322 [md4_raid1]
root 0 0 00:29:45 501-23:38:38 1336 [md2_raid1]
root 0 0 00:17:19 501-23:38:36 1844 [flush-9:3]
root 0 0 00:00:00 501-23:38:36 1881 [jbd2/md0-8]
root 0 0 00:00:00 501-23:38:36 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 501-23:38:36 1885 [xfs_mru_cache]
root 0 0 01:32:29 501-23:38:36 1886 [xfslogd/0]
root 0 0 00:00:00 501-23:38:36 1887 [xfslogd/1]
root 0 0 00:03:32 501-23:38:36 1888 [xfslogd/2]
root 0 0 00:00:00 501-23:38:36 1889 [xfslogd/3]
root 0 0 02:39:00 501-23:38:36 1890 [xfslogd/4]
root 0 0 00:00:00 501-23:38:36 1891 [xfslogd/5]
root 0 0 00:00:00 501-23:38:36 1892 [xfslogd/6]
root 0 0 00:00:00 501-23:38:36 1893 [xfslogd/7]
root 0 0 02:46:51 501-23:38:36 1894 [xfsdatad/0]
root 0 0 00:00:00 501-23:38:36 1895 [xfsdatad/1]
root 0 0 00:02:18 501-23:38:36 1896 [xfsdatad/2]
root 0 0 00:00:00 501-23:38:36 1897 [xfsdatad/3]
root 0 0 03:07:26 501-23:38:36 1898 [xfsdatad/4]
root 0 0 00:00:00 501-23:38:36 1899 [xfsdatad/5]
root 0 0 00:00:00 501-23:38:36 1900 [xfsdatad/6]
root 0 0 00:00:00 501-23:38:36 1901 [xfsdatad/7]
root 0 0 00:00:00 501-23:38:36 1902 [xfsconvertd/0]
root 0 0 00:00:00 501-23:38:36 1903 [xfsconvertd/1]
root 0 0 00:00:00 501-23:38:36 1904 [xfsconvertd/2]
root 0 0 00:00:00 501-23:38:36 1905 [xfsconvertd/3]
root 0 0 00:00:00 501-23:38:36 1906 [xfsconvertd/4]
root 0 0 00:00:00 501-23:38:36 1907 [xfsconvertd/5]
root 0 0 00:00:00 501-23:38:36 1908 [xfsconvertd/6]
root 0 0 00:00:00 501-23:38:36 1909 [xfsconvertd/7]
root 0 0 00:00:02 501-23:38:36 1910 [xfsalloc/0]
root 0 0 00:00:02 501-23:38:36 1911 [xfsalloc/1]
root 0 0 00:00:02 501-23:38:36 1912 [xfsalloc/2]
root 0 0 00:00:03 501-23:38:36 1913 [xfsalloc/3]
root 0 0 00:00:02 501-23:38:36 1914 [xfsalloc/4]
root 0 0 00:00:02 501-23:38:36 1915 [xfsalloc/5]
root 0 0 00:00:03 501-23:38:36 1916 [xfsalloc/6]
root 0 0 00:00:05 501-23:38:36 1917 [xfsalloc/7]
root 0 0 00:00:10 501-23:38:36 1918 [xfseofblocks/0]
root 0 0 00:00:06 501-23:38:36 1919 [xfseofblocks/1]
root 0 0 00:00:09 501-23:38:36 1920 [xfseofblocks/2]
root 0 0 00:00:10 501-23:38:36 1921 [xfseofblocks/3]
root 0 0 00:00:07 501-23:38:36 1922 [xfseofblocks/4]
root 0 0 00:00:09 501-23:38:36 1923 [xfseofblocks/5]
root 0 0 00:00:04 501-23:38:36 1924 [xfseofblocks/6]
root 0 0 00:02:40 501-23:38:36 1925 [xfseofblocks/7]
root 0 0 00:28:38 501-23:38:36 1926 [xfsbufd/md5]
root 0 0 00:25:47 501-23:38:36 1927 [xfs-cil/md5]
root 0 0 00:54:04 501-23:38:36 1928 [xfssyncd/md5]
root 0 0 06:08:13 501-23:38:36 1929 [xfsaild/md5]
root 0 0 00:03:16 501-23:38:35 1930 [jbd2/md2-8]
root 0 0 00:00:00 501-23:38:35 1931 [ext4-dio-unwrit]
root 0 0 00:07:41 501-23:38:35 1932 [xfsbufd/md4]
root 0 0 00:00:46 501-23:38:35 1933 [xfs-cil/md4]
root 0 0 00:03:31 501-23:38:35 1934 [xfssyncd/md4]
root 0 0 05:49:45 501-23:38:35 1935 [xfsaild/md4]
root 0 0 00:23:24 501-23:38:35 1936 [xfsbufd/md3]
root 0 0 00:18:44 501-23:38:35 1937 [xfs-cil/md3]
root 0 0 00:04:13 501-23:38:35 1938 [xfssyncd/md3]
root 0 0 05:59:10 501-23:38:35 1939 [xfsaild/md3]
root 0 0 00:35:56 501-23:38:35 1940 [xfsbufd/sdc1]
root 0 0 00:40:05 501-23:38:35 1941 [xfs-cil/sdc1]
root 0 0 11:38:29 501-23:38:35 1942 [xfssyncd/sdc1]
root 0 0 1-06:37:05 501-23:38:35 1943 [xfsaild/sdc1]
root 0 0 00:06:11 501-23:38:34 1999 [kauditd]
root 29764 704 00:15:15 501-23:38:17 2254 auditd
root 252156 31224 02:40:43 501-23:38:16 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:40:25 501-23:38:16 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:35 501-23:38:15 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 501-23:38:15 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:40:53 501-23:38:15 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:16 501-23:38:14 2492 /usr/sbin/sshd
root 71720 2008 00:33:07 501-23:38:09 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:59 501-23:38:09 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:52 501-23:38:09 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:20 501-23:38:09 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:15 501-23:38:09 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:11 501-23:37:58 3359 crond
root 107544 436 00:00:26 501-23:37:56 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 501-23:37:51 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 501-23:37:51 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 501-23:37:51 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 501-23:37:51 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 501-23:37:51 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 501-23:37:51 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 501-23:37:51 3491 /sbin/udevd -d
root 11232 260 00:00:00 501-23:37:51 3492 /sbin/udevd -d
root 163092 1628 00:00:44 486-21:03:04 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
apache 587196 95488 00:00:28 27:17 39824 /usr/sbin/httpd -DSSL
apache 609208 113116 00:00:31 24:37 40233 /usr/sbin/httpd -DSSL
apache 638060 135952 00:00:32 24:33 40235 /usr/sbin/httpd -DSSL
apache 587300 85816 00:00:33 24:31 40237 /usr/sbin/httpd -DSSL
apache 586620 81572 00:00:28 19:22 41253 /usr/sbin/httpd -DSSL
apache 585092 72892 00:00:17 18:25 41379 /usr/sbin/httpd -DSSL
apache 586764 83868 00:00:21 18:23 41381 /usr/sbin/httpd -DSSL
apache 584692 79952 00:00:09 14:48 41808 /usr/sbin/httpd -DSSL
apache 584516 70724 00:00:10 14:44 41809 /usr/sbin/httpd -DSSL
apache 594740 89108 00:00:14 14:08 41962 /usr/sbin/httpd -DSSL
root 96608 5484 00:00:00 13:35 41964 sendmail: ./48NFM2YC094511 smtp3.comune.at.: user open
apache 603616 97816 00:00:12 13:26 41965 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 13:20 42119 [flush-9:4]
apache 584848 80972 00:00:09 12:28 42263 /usr/sbin/httpd -DSSL
apache 584812 81372 00:00:20 12:05 42266 /usr/sbin/httpd -DSSL
apache 655304 121352 00:00:12 11:47 42267 /usr/sbin/httpd -DSSL
root 96612 5468 00:00:00 09:35 42504 sendmail: ./48N6BUAg010142 mail.radler.han-solo.net.: user open
apache 583724 54804 00:00:09 07:37 42787 /usr/sbin/httpd -DSSL
apache 584808 64284 00:00:07 07:36 42788 /usr/sbin/httpd -DSSL
root 96632 5464 00:00:00 07:35 42790 sendmail: ./48NCjGp8071770 smtp2.comune.at.: user open
apache 583836 81236 00:00:08 07:34 42791 /usr/sbin/httpd -DSSL
apache 590836 78112 00:00:13 07:32 42792 /usr/sbin/httpd -DSSL
root 96628 5448 00:00:00 06:35 42998 sendmail: ./48NB5ISS057313 smtp1.comune.at.: user open
apache 584524 69256 00:00:11 06:30 42999 /usr/sbin/httpd -DSSL
apache 656152 144224 00:00:12 05:37 43115 /usr/sbin/httpd -DSSL
root 96124 3552 00:00:00 05:35 43117 sendmail: ./48RGhgeq006796 mail.virginvieathome.com.: user open
root 96628 5468 00:00:00 04:35 43125 sendmail: ./48NFCkJi093360 ctmail2.gibb.co.za.: user open
root 118780 572 00:00:00 100-10:48:35 43438 SCREEN -O
root 108452 1384 00:00:00 100-10:48:35 43439 /bin/bash
root 108452 1388 00:00:00 100-10:47:32 43486 /bin/bash
apache 582144 44928 00:00:04 03:37 43525 /usr/sbin/httpd -DSSL
apache 585272 68324 00:00:02 03:36 43526 /usr/sbin/httpd -DSSL
root 96632 5136 00:00:00 03:35 43528 sendmail: ./48RF4pAq236199 mail.smartcape.org.za.: user open
apache 582668 54976 00:00:01 02:52 43534 /usr/sbin/httpd -DSSL
root 96796 5764 00:00:00 02:35 43675 sendmail: ./48NFeLsW097163 smtp1.comune.at.: user open
root 96124 3364 00:00:00 01:35 43690 sendmail: ./48RHvARx018602 in.mx2.mailhostbox.com.: user open
root 96124 3344 00:00:00 00:35 44047 sendmail: ./48RG8jIN000855 nolaprox.nola.co.za.: user open
root 110772 2076 00:00:00 00:01 44145 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 44167 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 44168 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 44170 cat
root 110900 1176 00:00:00 00:01 44195 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 44196 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 44197 tr -s 
root 0 0 00:02:13 501-21:16:15 57735 [flush-9:2]
root 0 0 00:02:04 501-20:41:19 68416 [flush-9:1]
root 63348 4212 00:21:40 400-02:51:39 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 400-02:31:05 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1567896 779-01:38:45 400-02:31:04 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 19260 792 00:00:00 18:58:55 98466 /usr/sbin/dovecot
dovecot 12980 1056 00:00:00 18:58:55 98469 dovecot/anvil
root 13108 1196 00:00:00 18:58:55 98470 dovecot/log
root 266640 74756 00:00:36 1-17:13:34 137447 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270196 78356 00:00:52 1-17:13:27 137450 spamd child
root 21712 768 00:00:14 99-21:00:22 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:02:28 28-11:23:24 181185 [flush-9:5]
root 564956 32952 00:08:00 28-11:14:51 182912 /usr/sbin/httpd -DSSL
root 268004 75684 00:00:00 09:24:27 198320 spamd child
root 154784 45448 00:00:41 395-21:03:10 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:58 438-11:45:20 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:57:30 438-11:45:20 238030 sendmail: accepting connections
named 724240 39868 03:28:51 438-11:45:05 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-27 20:46

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e46ab3b1ae

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1727297881
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:43 499-23:50:21 1 /sbin/init
root 0 0 00:00:01 499-23:50:21 2 [kthreadd]
root 0 0 21:30:05 499-23:50:21 3 [migration/0]
root 0 0 01:00:51 499-23:50:21 4 [ksoftirqd/0]
root 0 0 00:00:00 499-23:50:21 5 [stopper/0]
root 0 0 00:15:38 499-23:50:21 6 [watchdog/0]
root 0 0 09:12:13 499-23:50:21 7 [migration/1]
root 0 0 00:00:00 499-23:50:21 8 [stopper/1]
root 0 0 01:36:03 499-23:50:21 9 [ksoftirqd/1]
root 0 0 00:19:38 499-23:50:21 10 [watchdog/1]
root 0 0 06:03:03 499-23:50:21 11 [migration/2]
root 0 0 00:00:00 499-23:50:21 12 [stopper/2]
root 0 0 00:46:54 499-23:50:21 13 [ksoftirqd/2]
root 0 0 00:17:12 499-23:50:21 14 [watchdog/2]
root 0 0 04:17:37 499-23:50:21 15 [migration/3]
root 0 0 00:00:00 499-23:50:21 16 [stopper/3]
root 0 0 00:33:36 499-23:50:21 17 [ksoftirqd/3]
root 0 0 00:13:37 499-23:50:21 18 [watchdog/3]
root 0 0 15:04:26 499-23:50:21 19 [migration/4]
root 0 0 00:00:00 499-23:50:21 20 [stopper/4]
root 0 0 00:52:54 499-23:50:21 21 [ksoftirqd/4]
root 0 0 00:08:04 499-23:50:21 22 [watchdog/4]
root 0 0 08:32:22 499-23:50:21 23 [migration/5]
root 0 0 00:00:00 499-23:50:21 24 [stopper/5]
root 0 0 00:37:19 499-23:50:21 25 [ksoftirqd/5]
root 0 0 00:17:33 499-23:50:21 26 [watchdog/5]
root 0 0 05:09:12 499-23:50:21 27 [migration/6]
root 0 0 00:00:00 499-23:50:21 28 [stopper/6]
root 0 0 00:28:26 499-23:50:21 29 [ksoftirqd/6]
root 0 0 00:13:08 499-23:50:21 30 [watchdog/6]
root 0 0 04:04:19 499-23:50:21 31 [migration/7]
root 0 0 00:00:00 499-23:50:21 32 [stopper/7]
root 0 0 00:27:45 499-23:50:21 33 [ksoftirqd/7]
root 0 0 00:10:24 499-23:50:21 34 [watchdog/7]
root 0 0 02:21:06 499-23:50:21 35 [events/0]
root 0 0 01:29:15 499-23:50:21 36 [events/1]
root 0 0 01:31:23 499-23:50:21 37 [events/2]
root 0 0 01:34:12 499-23:50:21 38 [events/3]
root 0 0 01:20:15 499-23:50:21 39 [events/4]
root 0 0 01:15:39 499-23:50:21 40 [events/5]
root 0 0 01:22:07 499-23:50:21 41 [events/6]
root 0 0 01:25:08 499-23:50:21 42 [events/7]
root 0 0 00:00:00 499-23:50:21 43 [events/0]
root 0 0 00:00:00 499-23:50:21 44 [events/1]
root 0 0 00:00:00 499-23:50:21 45 [events/2]
root 0 0 00:00:00 499-23:50:21 46 [events/3]
root 0 0 00:00:00 499-23:50:21 47 [events/4]
root 0 0 00:00:00 499-23:50:21 48 [events/5]
root 0 0 00:00:00 499-23:50:21 49 [events/6]
root 0 0 00:00:00 499-23:50:21 50 [events/7]
root 0 0 00:00:00 499-23:50:21 51 [events_long/0]
root 0 0 00:00:00 499-23:50:21 52 [events_long/1]
root 0 0 00:00:00 499-23:50:21 53 [events_long/2]
root 0 0 00:00:00 499-23:50:21 54 [events_long/3]
root 0 0 00:00:00 499-23:50:21 55 [events_long/4]
root 0 0 00:00:00 499-23:50:21 56 [events_long/5]
root 0 0 00:00:00 499-23:50:21 57 [events_long/6]
root 0 0 00:00:00 499-23:50:21 58 [events_long/7]
root 0 0 00:00:00 499-23:50:21 59 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 60 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 61 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 62 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 63 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 64 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 65 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 66 [events_power_ef]
root 0 0 00:00:00 499-23:50:21 67 [cgroup]
root 0 0 00:00:00 499-23:50:21 68 [khelper]
root 0 0 00:00:00 499-23:50:21 69 [netns]
root 0 0 00:00:00 499-23:50:21 70 [async/mgr]
root 0 0 00:00:00 499-23:50:21 71 [pm]
root 0 0 00:04:59 499-23:50:21 72 [sync_supers]
root 0 0 00:00:13 499-23:50:21 73 [bdi-default]
root 0 0 00:00:00 499-23:50:21 74 [kintegrityd/0]
root 0 0 00:00:00 499-23:50:21 75 [kintegrityd/1]
root 0 0 00:00:00 499-23:50:21 76 [kintegrityd/2]
root 0 0 00:00:00 499-23:50:21 77 [kintegrityd/3]
root 0 0 00:00:00 499-23:50:21 78 [kintegrityd/4]
root 0 0 00:00:00 499-23:50:21 79 [kintegrityd/5]
root 0 0 00:00:00 499-23:50:21 80 [kintegrityd/6]
root 0 0 00:00:00 499-23:50:21 81 [kintegrityd/7]
root 0 0 06:07:28 499-23:50:21 82 [kblockd/0]
root 0 0 00:11:35 499-23:50:21 83 [kblockd/1]
root 0 0 00:23:17 499-23:50:21 84 [kblockd/2]
root 0 0 00:04:30 499-23:50:21 85 [kblockd/3]
root 0 0 10:45:54 499-23:50:21 86 [kblockd/4]
root 0 0 00:13:50 499-23:50:21 87 [kblockd/5]
root 0 0 00:09:09 499-23:50:21 88 [kblockd/6]
root 0 0 00:07:01 499-23:50:21 89 [kblockd/7]
root 0 0 00:00:00 499-23:50:21 90 [kacpid]
root 0 0 00:00:00 499-23:50:21 91 [kacpi_notify]
root 0 0 00:00:00 499-23:50:21 92 [kacpi_hotplug]
root 0 0 00:00:00 499-23:50:21 93 [ata_aux]
root 0 0 00:00:00 499-23:50:21 94 [ata_sff/0]
root 0 0 00:00:00 499-23:50:21 95 [ata_sff/1]
root 0 0 00:00:00 499-23:50:21 96 [ata_sff/2]
root 0 0 00:00:00 499-23:50:21 97 [ata_sff/3]
root 0 0 00:00:00 499-23:50:21 98 [ata_sff/4]
root 0 0 00:00:00 499-23:50:21 99 [ata_sff/5]
root 0 0 00:00:00 499-23:50:21 100 [ata_sff/6]
root 0 0 00:00:00 499-23:50:21 101 [ata_sff/7]
root 0 0 00:00:00 499-23:50:21 102 [ksuspend_usbd]
root 0 0 00:00:00 499-23:50:21 103 [khubd]
root 0 0 00:00:00 499-23:50:21 104 [kseriod]
root 0 0 00:00:00 499-23:50:21 105 [md/0]
root 0 0 00:00:00 499-23:50:21 106 [md/1]
root 0 0 00:00:00 499-23:50:21 107 [md/2]
root 0 0 00:00:00 499-23:50:21 108 [md/3]
root 0 0 00:00:00 499-23:50:21 109 [md/4]
root 0 0 00:00:00 499-23:50:21 110 [md/5]
root 0 0 00:00:00 499-23:50:21 111 [md/6]
root 0 0 00:00:00 499-23:50:21 112 [md/7]
root 0 0 00:00:00 499-23:50:21 113 [md_misc/0]
root 0 0 00:00:00 499-23:50:21 114 [md_misc/1]
root 0 0 00:00:00 499-23:50:21 115 [md_misc/2]
root 0 0 00:00:00 499-23:50:21 116 [md_misc/3]
root 0 0 00:00:00 499-23:50:21 117 [md_misc/4]
root 0 0 00:00:00 499-23:50:21 118 [md_misc/5]
root 0 0 00:00:00 499-23:50:21 119 [md_misc/6]
root 0 0 00:00:00 499-23:50:21 120 [md_misc/7]
root 0 0 00:00:00 499-23:50:21 121 [linkwatch]
root 0 0 00:01:04 499-23:50:20 124 [khungtaskd]
root 0 0 1-01:57:32 499-23:50:20 125 [kswapd1]
root 0 0 00:00:00 499-23:50:20 126 [ksmd]
root 0 0 03:36:07 499-23:50:20 127 [khugepaged]
root 0 0 00:00:00 499-23:50:20 128 [aio/0]
root 0 0 00:00:00 499-23:50:20 129 [aio/1]
root 0 0 00:00:00 499-23:50:20 130 [aio/2]
root 0 0 00:00:00 499-23:50:20 131 [aio/3]
root 0 0 00:00:00 499-23:50:20 132 [aio/4]
root 0 0 00:00:00 499-23:50:20 133 [aio/5]
root 0 0 00:00:00 499-23:50:20 134 [aio/6]
root 0 0 00:00:00 499-23:50:20 135 [aio/7]
root 0 0 00:00:00 499-23:50:20 136 [crypto/0]
root 0 0 00:00:00 499-23:50:20 137 [crypto/1]
root 0 0 00:00:00 499-23:50:20 138 [crypto/2]
root 0 0 00:00:00 499-23:50:20 139 [crypto/3]
root 0 0 00:00:00 499-23:50:20 140 [crypto/4]
root 0 0 00:00:00 499-23:50:20 141 [crypto/5]
root 0 0 00:00:00 499-23:50:20 142 [crypto/6]
root 0 0 00:00:00 499-23:50:20 143 [crypto/7]
root 0 0 00:00:00 499-23:50:20 150 [kthrotld/0]
root 0 0 00:00:00 499-23:50:20 151 [kthrotld/1]
root 0 0 00:00:00 499-23:50:20 152 [kthrotld/2]
root 0 0 00:00:00 499-23:50:20 153 [kthrotld/3]
root 0 0 00:00:00 499-23:50:20 154 [kthrotld/4]
root 0 0 00:00:00 499-23:50:20 155 [kthrotld/5]
root 0 0 00:00:00 499-23:50:20 156 [kthrotld/6]
root 0 0 00:00:00 499-23:50:20 157 [kthrotld/7]
root 0 0 00:00:00 499-23:50:20 160 [kpsmoused]
root 0 0 00:00:00 499-23:50:20 161 [usbhid_resumer]
root 0 0 00:00:00 499-23:50:20 162 [deferwq]
root 0 0 00:00:00 499-23:50:20 194 [kdmremove]
root 0 0 00:00:00 499-23:50:20 195 [kstriped]
root 0 0 00:00:00 499-23:50:18 734 [scsi_eh_0]
root 0 0 00:00:00 499-23:50:18 735 [scsi_wq_0]
root 0 0 00:00:00 499-23:50:18 748 [scsi_eh_1]
root 0 0 00:00:00 499-23:50:18 749 [scsi_eh_2]
root 0 0 00:00:00 499-23:50:18 750 [scsi_eh_3]
root 0 0 00:00:00 499-23:50:18 751 [scsi_eh_4]
root 0 0 00:00:00 499-23:50:18 752 [scsi_eh_5]
root 0 0 00:00:00 499-23:50:18 753 [scsi_eh_6]
root 0 0 00:53:20 499-23:50:17 950 [md1_raid1]
root 0 0 00:03:13 499-23:50:16 1011 [jbd2/md1-8]
root 0 0 00:00:00 499-23:50:16 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 499-23:50:15 1105 /sbin/udevd -d
root 0 0 00:30:53 499-23:50:15 1225 [edac-poller]
root 0 0 00:10:07 499-23:50:14 1259 [md0_raid1]
root 0 0 02:16:10 499-23:50:14 1288 [md3_raid1]
root 0 0 2-13:25:07 499-23:50:14 1310 [md5_raid1]
root 0 0 01:04:01 499-23:50:14 1322 [md4_raid1]
root 0 0 00:29:38 499-23:50:14 1336 [md2_raid1]
root 0 0 00:17:14 499-23:50:12 1844 [flush-9:3]
root 0 0 00:00:00 499-23:50:12 1881 [jbd2/md0-8]
root 0 0 00:00:00 499-23:50:12 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 499-23:50:12 1885 [xfs_mru_cache]
root 0 0 01:32:18 499-23:50:12 1886 [xfslogd/0]
root 0 0 00:00:00 499-23:50:12 1887 [xfslogd/1]
root 0 0 00:03:32 499-23:50:12 1888 [xfslogd/2]
root 0 0 00:00:00 499-23:50:12 1889 [xfslogd/3]
root 0 0 02:38:28 499-23:50:12 1890 [xfslogd/4]
root 0 0 00:00:00 499-23:50:12 1891 [xfslogd/5]
root 0 0 00:00:00 499-23:50:12 1892 [xfslogd/6]
root 0 0 00:00:00 499-23:50:12 1893 [xfslogd/7]
root 0 0 02:46:43 499-23:50:12 1894 [xfsdatad/0]
root 0 0 00:00:00 499-23:50:12 1895 [xfsdatad/1]
root 0 0 00:02:18 499-23:50:12 1896 [xfsdatad/2]
root 0 0 00:00:00 499-23:50:12 1897 [xfsdatad/3]
root 0 0 03:07:12 499-23:50:12 1898 [xfsdatad/4]
root 0 0 00:00:00 499-23:50:12 1899 [xfsdatad/5]
root 0 0 00:00:00 499-23:50:12 1900 [xfsdatad/6]
root 0 0 00:00:00 499-23:50:12 1901 [xfsdatad/7]
root 0 0 00:00:00 499-23:50:12 1902 [xfsconvertd/0]
root 0 0 00:00:00 499-23:50:12 1903 [xfsconvertd/1]
root 0 0 00:00:00 499-23:50:12 1904 [xfsconvertd/2]
root 0 0 00:00:00 499-23:50:12 1905 [xfsconvertd/3]
root 0 0 00:00:00 499-23:50:12 1906 [xfsconvertd/4]
root 0 0 00:00:00 499-23:50:12 1907 [xfsconvertd/5]
root 0 0 00:00:00 499-23:50:12 1908 [xfsconvertd/6]
root 0 0 00:00:00 499-23:50:12 1909 [xfsconvertd/7]
root 0 0 00:00:02 499-23:50:12 1910 [xfsalloc/0]
root 0 0 00:00:02 499-23:50:12 1911 [xfsalloc/1]
root 0 0 00:00:02 499-23:50:12 1912 [xfsalloc/2]
root 0 0 00:00:03 499-23:50:12 1913 [xfsalloc/3]
root 0 0 00:00:02 499-23:50:12 1914 [xfsalloc/4]
root 0 0 00:00:02 499-23:50:12 1915 [xfsalloc/5]
root 0 0 00:00:03 499-23:50:12 1916 [xfsalloc/6]
root 0 0 00:00:05 499-23:50:12 1917 [xfsalloc/7]
root 0 0 00:00:10 499-23:50:12 1918 [xfseofblocks/0]
root 0 0 00:00:06 499-23:50:12 1919 [xfseofblocks/1]
root 0 0 00:00:09 499-23:50:12 1920 [xfseofblocks/2]
root 0 0 00:00:10 499-23:50:12 1921 [xfseofblocks/3]
root 0 0 00:00:07 499-23:50:12 1922 [xfseofblocks/4]
root 0 0 00:00:09 499-23:50:12 1923 [xfseofblocks/5]
root 0 0 00:00:04 499-23:50:12 1924 [xfseofblocks/6]
root 0 0 00:02:39 499-23:50:12 1925 [xfseofblocks/7]
root 0 0 00:28:26 499-23:50:12 1926 [xfsbufd/md5]
root 0 0 00:25:33 499-23:50:12 1927 [xfs-cil/md5]
root 0 0 00:53:52 499-23:50:12 1928 [xfssyncd/md5]
root 0 0 06:04:26 499-23:50:12 1929 [xfsaild/md5]
root 0 0 00:03:14 499-23:50:11 1930 [jbd2/md2-8]
root 0 0 00:00:00 499-23:50:11 1931 [ext4-dio-unwrit]
root 0 0 00:07:37 499-23:50:11 1932 [xfsbufd/md4]
root 0 0 00:00:46 499-23:50:11 1933 [xfs-cil/md4]
root 0 0 00:03:30 499-23:50:11 1934 [xfssyncd/md4]
root 0 0 05:46:03 499-23:50:11 1935 [xfsaild/md4]
root 0 0 00:23:09 499-23:50:11 1936 [xfsbufd/md3]
root 0 0 00:18:40 499-23:50:11 1937 [xfs-cil/md3]
root 0 0 00:04:12 499-23:50:11 1938 [xfssyncd/md3]
root 0 0 05:55:21 499-23:50:11 1939 [xfsaild/md3]
root 0 0 00:35:53 499-23:50:11 1940 [xfsbufd/sdc1]
root 0 0 00:40:03 499-23:50:11 1941 [xfs-cil/sdc1]
root 0 0 11:31:42 499-23:50:11 1942 [xfssyncd/sdc1]
root 0 0 1-06:31:30 499-23:50:11 1943 [xfsaild/sdc1]
root 0 0 00:06:10 499-23:50:10 1999 [kauditd]
root 29764 704 00:15:13 499-23:49:53 2254 auditd
root 252156 31224 02:40:21 499-23:49:52 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:39:38 499-23:49:52 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:35 499-23:49:51 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 499-23:49:51 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:40:32 499-23:49:51 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:16 499-23:49:50 2492 /usr/sbin/sshd
root 71720 2008 00:33:06 499-23:49:45 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:58 499-23:49:45 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:50 499-23:49:45 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:18 499-23:49:45 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:13 499-23:49:45 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:10 499-23:49:34 3359 crond
root 107544 436 00:00:26 499-23:49:32 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 499-23:49:27 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 499-23:49:27 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 499-23:49:27 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 499-23:49:27 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 499-23:49:27 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 499-23:49:27 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 499-23:49:27 3491 /sbin/udevd -d
root 11232 260 00:00:00 499-23:49:27 3492 /sbin/udevd -d
root 163092 1628 00:00:44 484-21:14:40 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 572 00:00:00 98-11:00:11 43438 SCREEN -O
root 108452 1384 00:00:00 98-11:00:11 43439 /bin/bash
root 108452 1388 00:00:00 98-10:59:08 43486 /bin/bash
root 0 0 00:02:11 499-21:27:51 57735 [flush-9:2]
root 0 0 00:02:03 499-20:52:55 68416 [flush-9:1]
root 0 0 00:00:00 37:56 70833 [flush-9:4]
apache 595272 94468 00:00:52 33:37 71467 /usr/sbin/httpd -DSSL
apache 651156 149388 00:00:54 33:33 71468 /usr/sbin/httpd -DSSL
apache 586480 86592 00:00:49 30:47 71813 /usr/sbin/httpd -DSSL
apache 590508 93404 00:00:58 29:40 71922 /usr/sbin/httpd -DSSL
apache 588500 87692 00:00:51 27:38 72329 /usr/sbin/httpd -DSSL
apache 603320 93852 00:00:41 27:37 72331 /usr/sbin/httpd -DSSL
apache 653604 153044 00:00:57 27:35 72332 /usr/sbin/httpd -DSSL
apache 600848 91664 00:00:53 27:24 72333 /usr/sbin/httpd -DSSL
apache 605552 106552 00:00:45 22:15 72888 /usr/sbin/httpd -DSSL
root 40060 2032 00:00:00 20:37 73199 dovecot/ssl-params
apache 627256 133972 00:00:40 20:04 73202 /usr/sbin/httpd -DSSL
apache 623796 122828 00:00:28 18:47 73505 /usr/sbin/httpd -DSSL
apache 625808 115220 00:00:27 14:28 73971 /usr/sbin/httpd -DSSL
apache 586740 87272 00:00:21 14:01 74113 /usr/sbin/httpd -DSSL
apache 586296 83332 00:00:20 12:04 74390 /usr/sbin/httpd -DSSL
apache 586228 84668 00:00:22 11:47 74396 /usr/sbin/httpd -DSSL
apache 596048 85112 00:00:24 11:46 74398 /usr/sbin/httpd -DSSL
apache 598012 87232 00:00:16 11:45 74399 /usr/sbin/httpd -DSSL
apache 616304 103216 00:00:13 11:45 74400 /usr/sbin/httpd -DSSL
apache 597132 95300 00:00:21 11:45 74401 /usr/sbin/httpd -DSSL
apache 598636 87400 00:00:20 09:28 74782 /usr/sbin/httpd -DSSL
root 15084 3200 00:00:00 06:57 75266 dovecot/config
dovecot 76580 2904 00:00:00 06:57 75267 dovecot/auth
apache 588928 84168 00:00:12 06:48 75268 /usr/sbin/httpd -DSSL
root 96124 3540 00:00:00 06:20 75270 sendmail: ./48MG3rC1131735 mail.schule.luebeck.de.: user open
root 96124 3540 00:00:00 05:20 75405 sendmail: ./48N6BUAg010142 mail.radler.han-solo.net.: user open
root 96124 3540 00:00:00 04:20 75423 sendmail: ./48MFjl1e129009 mail.lightedge.co.za.: user open
root 96124 3532 00:00:00 02:20 75865 sendmail: ./48NFCkJi093360 ctmail2.gibb.co.za.: user open
root 96124 3328 00:00:00 01:20 75879 sendmail: ./48NFM2YC094511 smtp1.comune.at.: user open
root 96124 3328 00:00:00 00:20 76260 sendmail: ./48MGjYm3137570 gpmx04.1dial.net.: user open
root 96584 4776 00:00:00 00:04 76266 sendmail: ./48PKvsB8076264 securemail-mx3.synaq.com.: client RCPT
root 110772 2072 00:00:00 00:01 76411 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 76433 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 76434 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 76442 cat
root 110900 1176 00:00:00 00:01 76461 /bin/bash /usr/bin/check_mk_agent
root 13364 1012 00:00:00 00:01 76462 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 76463 tr -s 
root 63348 4212 00:21:33 398-03:03:15 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 398-02:42:41 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1566936 769-13:26:49 398-02:42:40 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 21712 768 00:00:14 97-21:11:58 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:02:16 26-11:35:00 181185 [flush-9:5]
root 564956 32952 00:07:11 26-11:26:27 182912 /usr/sbin/httpd -DSSL
root 266616 74792 00:00:31 1-17:02:43 208309 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270832 79012 00:01:07 1-17:02:39 208311 spamd child
root 266616 72280 00:00:00 1-17:02:39 208313 spamd child
root 19260 792 00:00:00 13:08:40 208979 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 13:08:40 208981 dovecot/anvil
root 13108 1192 00:00:00 13:08:40 208982 dovecot/log
root 154784 45448 00:00:41 393-21:14:46 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:56 436-11:56:56 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:57:07 436-11:56:56 238030 sendmail: accepting connections
named 724240 39856 03:27:49 436-11:56:41 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-25 20:58

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e45997474d

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1727125565
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:43 497-23:58:25 1 /sbin/init
root 0 0 00:00:01 497-23:58:25 2 [kthreadd]
root 0 0 21:25:03 497-23:58:25 3 [migration/0]
root 0 0 01:00:37 497-23:58:25 4 [ksoftirqd/0]
root 0 0 00:00:00 497-23:58:25 5 [stopper/0]
root 0 0 00:15:35 497-23:58:25 6 [watchdog/0]
root 0 0 09:10:50 497-23:58:25 7 [migration/1]
root 0 0 00:00:00 497-23:58:25 8 [stopper/1]
root 0 0 01:35:47 497-23:58:25 9 [ksoftirqd/1]
root 0 0 00:19:34 497-23:58:25 10 [watchdog/1]
root 0 0 06:01:58 497-23:58:25 11 [migration/2]
root 0 0 00:00:00 497-23:58:25 12 [stopper/2]
root 0 0 00:46:40 497-23:58:25 13 [ksoftirqd/2]
root 0 0 00:17:08 497-23:58:25 14 [watchdog/2]
root 0 0 04:16:51 497-23:58:25 15 [migration/3]
root 0 0 00:00:00 497-23:58:25 16 [stopper/3]
root 0 0 00:33:24 497-23:58:25 17 [ksoftirqd/3]
root 0 0 00:13:34 497-23:58:25 18 [watchdog/3]
root 0 0 15:01:02 497-23:58:25 19 [migration/4]
root 0 0 00:00:00 497-23:58:25 20 [stopper/4]
root 0 0 00:52:41 497-23:58:25 21 [ksoftirqd/4]
root 0 0 00:08:02 497-23:58:25 22 [watchdog/4]
root 0 0 08:31:17 497-23:58:25 23 [migration/5]
root 0 0 00:00:00 497-23:58:25 24 [stopper/5]
root 0 0 00:37:12 497-23:58:25 25 [ksoftirqd/5]
root 0 0 00:17:29 497-23:58:25 26 [watchdog/5]
root 0 0 05:08:38 497-23:58:25 27 [migration/6]
root 0 0 00:00:00 497-23:58:25 28 [stopper/6]
root 0 0 00:28:20 497-23:58:25 29 [ksoftirqd/6]
root 0 0 00:13:05 497-23:58:25 30 [watchdog/6]
root 0 0 04:03:34 497-23:58:25 31 [migration/7]
root 0 0 00:00:00 497-23:58:25 32 [stopper/7]
root 0 0 00:27:36 497-23:58:25 33 [ksoftirqd/7]
root 0 0 00:10:22 497-23:58:25 34 [watchdog/7]
root 0 0 02:20:28 497-23:58:25 35 [events/0]
root 0 0 01:28:46 497-23:58:25 36 [events/1]
root 0 0 01:30:57 497-23:58:25 37 [events/2]
root 0 0 01:33:43 497-23:58:25 38 [events/3]
root 0 0 01:19:53 497-23:58:25 39 [events/4]
root 0 0 01:15:19 497-23:58:25 40 [events/5]
root 0 0 01:21:47 497-23:58:25 41 [events/6]
root 0 0 01:24:44 497-23:58:25 42 [events/7]
root 0 0 00:00:00 497-23:58:25 43 [events/0]
root 0 0 00:00:00 497-23:58:25 44 [events/1]
root 0 0 00:00:00 497-23:58:25 45 [events/2]
root 0 0 00:00:00 497-23:58:25 46 [events/3]
root 0 0 00:00:00 497-23:58:25 47 [events/4]
root 0 0 00:00:00 497-23:58:25 48 [events/5]
root 0 0 00:00:00 497-23:58:25 49 [events/6]
root 0 0 00:00:00 497-23:58:25 50 [events/7]
root 0 0 00:00:00 497-23:58:25 51 [events_long/0]
root 0 0 00:00:00 497-23:58:25 52 [events_long/1]
root 0 0 00:00:00 497-23:58:25 53 [events_long/2]
root 0 0 00:00:00 497-23:58:25 54 [events_long/3]
root 0 0 00:00:00 497-23:58:25 55 [events_long/4]
root 0 0 00:00:00 497-23:58:25 56 [events_long/5]
root 0 0 00:00:00 497-23:58:25 57 [events_long/6]
root 0 0 00:00:00 497-23:58:25 58 [events_long/7]
root 0 0 00:00:00 497-23:58:25 59 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 60 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 61 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 62 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 63 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 64 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 65 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 66 [events_power_ef]
root 0 0 00:00:00 497-23:58:25 67 [cgroup]
root 0 0 00:00:00 497-23:58:25 68 [khelper]
root 0 0 00:00:00 497-23:58:25 69 [netns]
root 0 0 00:00:00 497-23:58:25 70 [async/mgr]
root 0 0 00:00:00 497-23:58:25 71 [pm]
root 0 0 00:04:57 497-23:58:25 72 [sync_supers]
root 0 0 00:00:13 497-23:58:25 73 [bdi-default]
root 0 0 00:00:00 497-23:58:25 74 [kintegrityd/0]
root 0 0 00:00:00 497-23:58:25 75 [kintegrityd/1]
root 0 0 00:00:00 497-23:58:25 76 [kintegrityd/2]
root 0 0 00:00:00 497-23:58:25 77 [kintegrityd/3]
root 0 0 00:00:00 497-23:58:25 78 [kintegrityd/4]
root 0 0 00:00:00 497-23:58:25 79 [kintegrityd/5]
root 0 0 00:00:00 497-23:58:25 80 [kintegrityd/6]
root 0 0 00:00:00 497-23:58:25 81 [kintegrityd/7]
root 0 0 06:05:04 497-23:58:25 82 [kblockd/0]
root 0 0 00:11:30 497-23:58:25 83 [kblockd/1]
root 0 0 00:23:14 497-23:58:25 84 [kblockd/2]
root 0 0 00:04:27 497-23:58:25 85 [kblockd/3]
root 0 0 10:42:26 497-23:58:25 86 [kblockd/4]
root 0 0 00:13:44 497-23:58:25 87 [kblockd/5]
root 0 0 00:09:04 497-23:58:25 88 [kblockd/6]
root 0 0 00:06:57 497-23:58:25 89 [kblockd/7]
root 0 0 00:00:00 497-23:58:25 90 [kacpid]
root 0 0 00:00:00 497-23:58:25 91 [kacpi_notify]
root 0 0 00:00:00 497-23:58:25 92 [kacpi_hotplug]
root 0 0 00:00:00 497-23:58:25 93 [ata_aux]
root 0 0 00:00:00 497-23:58:25 94 [ata_sff/0]
root 0 0 00:00:00 497-23:58:25 95 [ata_sff/1]
root 0 0 00:00:00 497-23:58:25 96 [ata_sff/2]
root 0 0 00:00:00 497-23:58:25 97 [ata_sff/3]
root 0 0 00:00:00 497-23:58:25 98 [ata_sff/4]
root 0 0 00:00:00 497-23:58:25 99 [ata_sff/5]
root 0 0 00:00:00 497-23:58:25 100 [ata_sff/6]
root 0 0 00:00:00 497-23:58:25 101 [ata_sff/7]
root 0 0 00:00:00 497-23:58:25 102 [ksuspend_usbd]
root 0 0 00:00:00 497-23:58:25 103 [khubd]
root 0 0 00:00:00 497-23:58:25 104 [kseriod]
root 0 0 00:00:00 497-23:58:25 105 [md/0]
root 0 0 00:00:00 497-23:58:25 106 [md/1]
root 0 0 00:00:00 497-23:58:25 107 [md/2]
root 0 0 00:00:00 497-23:58:25 108 [md/3]
root 0 0 00:00:00 497-23:58:25 109 [md/4]
root 0 0 00:00:00 497-23:58:25 110 [md/5]
root 0 0 00:00:00 497-23:58:25 111 [md/6]
root 0 0 00:00:00 497-23:58:25 112 [md/7]
root 0 0 00:00:00 497-23:58:25 113 [md_misc/0]
root 0 0 00:00:00 497-23:58:25 114 [md_misc/1]
root 0 0 00:00:00 497-23:58:25 115 [md_misc/2]
root 0 0 00:00:00 497-23:58:25 116 [md_misc/3]
root 0 0 00:00:00 497-23:58:25 117 [md_misc/4]
root 0 0 00:00:00 497-23:58:25 118 [md_misc/5]
root 0 0 00:00:00 497-23:58:25 119 [md_misc/6]
root 0 0 00:00:00 497-23:58:25 120 [md_misc/7]
root 0 0 00:00:00 497-23:58:25 121 [linkwatch]
root 0 0 00:01:04 497-23:58:24 124 [khungtaskd]
root 0 0 1-01:47:56 497-23:58:24 125 [kswapd1]
root 0 0 00:00:00 497-23:58:24 126 [ksmd]
root 0 0 03:35:11 497-23:58:24 127 [khugepaged]
root 0 0 00:00:00 497-23:58:24 128 [aio/0]
root 0 0 00:00:00 497-23:58:24 129 [aio/1]
root 0 0 00:00:00 497-23:58:24 130 [aio/2]
root 0 0 00:00:00 497-23:58:24 131 [aio/3]
root 0 0 00:00:00 497-23:58:24 132 [aio/4]
root 0 0 00:00:00 497-23:58:24 133 [aio/5]
root 0 0 00:00:00 497-23:58:24 134 [aio/6]
root 0 0 00:00:00 497-23:58:24 135 [aio/7]
root 0 0 00:00:00 497-23:58:24 136 [crypto/0]
root 0 0 00:00:00 497-23:58:24 137 [crypto/1]
root 0 0 00:00:00 497-23:58:24 138 [crypto/2]
root 0 0 00:00:00 497-23:58:24 139 [crypto/3]
root 0 0 00:00:00 497-23:58:24 140 [crypto/4]
root 0 0 00:00:00 497-23:58:24 141 [crypto/5]
root 0 0 00:00:00 497-23:58:24 142 [crypto/6]
root 0 0 00:00:00 497-23:58:24 143 [crypto/7]
root 0 0 00:00:00 497-23:58:24 150 [kthrotld/0]
root 0 0 00:00:00 497-23:58:24 151 [kthrotld/1]
root 0 0 00:00:00 497-23:58:24 152 [kthrotld/2]
root 0 0 00:00:00 497-23:58:24 153 [kthrotld/3]
root 0 0 00:00:00 497-23:58:24 154 [kthrotld/4]
root 0 0 00:00:00 497-23:58:24 155 [kthrotld/5]
root 0 0 00:00:00 497-23:58:24 156 [kthrotld/6]
root 0 0 00:00:00 497-23:58:24 157 [kthrotld/7]
root 0 0 00:00:00 497-23:58:24 160 [kpsmoused]
root 0 0 00:00:00 497-23:58:24 161 [usbhid_resumer]
root 0 0 00:00:00 497-23:58:24 162 [deferwq]
root 0 0 00:00:00 497-23:58:24 194 [kdmremove]
root 0 0 00:00:00 497-23:58:24 195 [kstriped]
root 0 0 00:00:00 497-23:58:22 734 [scsi_eh_0]
root 0 0 00:00:00 497-23:58:22 735 [scsi_wq_0]
root 0 0 00:00:00 497-23:58:22 748 [scsi_eh_1]
root 0 0 00:00:00 497-23:58:22 749 [scsi_eh_2]
root 0 0 00:00:00 497-23:58:22 750 [scsi_eh_3]
root 0 0 00:00:00 497-23:58:22 751 [scsi_eh_4]
root 0 0 00:00:00 497-23:58:22 752 [scsi_eh_5]
root 0 0 00:00:00 497-23:58:22 753 [scsi_eh_6]
root 0 0 00:53:17 497-23:58:21 950 [md1_raid1]
root 0 0 00:03:12 497-23:58:20 1011 [jbd2/md1-8]
root 0 0 00:00:00 497-23:58:20 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 497-23:58:19 1105 /sbin/udevd -d
root 0 0 00:30:44 497-23:58:19 1225 [edac-poller]
root 0 0 00:10:07 497-23:58:18 1259 [md0_raid1]
root 0 0 02:15:47 497-23:58:18 1288 [md3_raid1]
root 0 0 2-13:15:11 497-23:58:18 1310 [md5_raid1]
root 0 0 01:03:55 497-23:58:18 1322 [md4_raid1]
root 0 0 00:29:35 497-23:58:18 1336 [md2_raid1]
root 0 0 00:17:10 497-23:58:16 1844 [flush-9:3]
root 0 0 00:00:00 497-23:58:16 1881 [jbd2/md0-8]
root 0 0 00:00:00 497-23:58:16 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 497-23:58:16 1885 [xfs_mru_cache]
root 0 0 01:31:28 497-23:58:16 1886 [xfslogd/0]
root 0 0 00:00:00 497-23:58:16 1887 [xfslogd/1]
root 0 0 00:03:32 497-23:58:16 1888 [xfslogd/2]
root 0 0 00:00:00 497-23:58:16 1889 [xfslogd/3]
root 0 0 02:37:26 497-23:58:16 1890 [xfslogd/4]
root 0 0 00:00:00 497-23:58:16 1891 [xfslogd/5]
root 0 0 00:00:00 497-23:58:16 1892 [xfslogd/6]
root 0 0 00:00:00 497-23:58:16 1893 [xfslogd/7]
root 0 0 02:44:37 497-23:58:16 1894 [xfsdatad/0]
root 0 0 00:00:00 497-23:58:16 1895 [xfsdatad/1]
root 0 0 00:02:18 497-23:58:16 1896 [xfsdatad/2]
root 0 0 00:00:00 497-23:58:16 1897 [xfsdatad/3]
root 0 0 03:04:53 497-23:58:16 1898 [xfsdatad/4]
root 0 0 00:00:00 497-23:58:16 1899 [xfsdatad/5]
root 0 0 00:00:00 497-23:58:16 1900 [xfsdatad/6]
root 0 0 00:00:00 497-23:58:16 1901 [xfsdatad/7]
root 0 0 00:00:00 497-23:58:16 1902 [xfsconvertd/0]
root 0 0 00:00:00 497-23:58:16 1903 [xfsconvertd/1]
root 0 0 00:00:00 497-23:58:16 1904 [xfsconvertd/2]
root 0 0 00:00:00 497-23:58:16 1905 [xfsconvertd/3]
root 0 0 00:00:00 497-23:58:16 1906 [xfsconvertd/4]
root 0 0 00:00:00 497-23:58:16 1907 [xfsconvertd/5]
root 0 0 00:00:00 497-23:58:16 1908 [xfsconvertd/6]
root 0 0 00:00:00 497-23:58:16 1909 [xfsconvertd/7]
root 0 0 00:00:02 497-23:58:16 1910 [xfsalloc/0]
root 0 0 00:00:02 497-23:58:16 1911 [xfsalloc/1]
root 0 0 00:00:02 497-23:58:16 1912 [xfsalloc/2]
root 0 0 00:00:03 497-23:58:16 1913 [xfsalloc/3]
root 0 0 00:00:02 497-23:58:16 1914 [xfsalloc/4]
root 0 0 00:00:02 497-23:58:16 1915 [xfsalloc/5]
root 0 0 00:00:03 497-23:58:16 1916 [xfsalloc/6]
root 0 0 00:00:04 497-23:58:16 1917 [xfsalloc/7]
root 0 0 00:00:10 497-23:58:16 1918 [xfseofblocks/0]
root 0 0 00:00:06 497-23:58:16 1919 [xfseofblocks/1]
root 0 0 00:00:09 497-23:58:16 1920 [xfseofblocks/2]
root 0 0 00:00:10 497-23:58:16 1921 [xfseofblocks/3]
root 0 0 00:00:07 497-23:58:16 1922 [xfseofblocks/4]
root 0 0 00:00:09 497-23:58:16 1923 [xfseofblocks/5]
root 0 0 00:00:04 497-23:58:16 1924 [xfseofblocks/6]
root 0 0 00:02:39 497-23:58:16 1925 [xfseofblocks/7]
root 0 0 00:28:17 497-23:58:16 1926 [xfsbufd/md5]
root 0 0 00:25:23 497-23:58:16 1927 [xfs-cil/md5]
root 0 0 00:53:38 497-23:58:16 1928 [xfssyncd/md5]
root 0 0 06:02:21 497-23:58:16 1929 [xfsaild/md5]
root 0 0 00:03:13 497-23:58:15 1930 [jbd2/md2-8]
root 0 0 00:00:00 497-23:58:15 1931 [ext4-dio-unwrit]
root 0 0 00:07:35 497-23:58:15 1932 [xfsbufd/md4]
root 0 0 00:00:46 497-23:58:15 1933 [xfs-cil/md4]
root 0 0 00:03:29 497-23:58:15 1934 [xfssyncd/md4]
root 0 0 05:44:02 497-23:58:15 1935 [xfsaild/md4]
root 0 0 00:23:01 497-23:58:15 1936 [xfsbufd/md3]
root 0 0 00:18:37 497-23:58:15 1937 [xfs-cil/md3]
root 0 0 00:04:11 497-23:58:15 1938 [xfssyncd/md3]
root 0 0 05:53:13 497-23:58:15 1939 [xfsaild/md3]
root 0 0 00:35:30 497-23:58:15 1940 [xfsbufd/sdc1]
root 0 0 00:39:39 497-23:58:15 1941 [xfs-cil/sdc1]
root 0 0 11:27:48 497-23:58:15 1942 [xfssyncd/sdc1]
root 0 0 1-06:20:13 497-23:58:15 1943 [xfsaild/sdc1]
root 0 0 00:06:10 497-23:58:14 1999 [kauditd]
root 29764 704 00:15:11 497-23:57:57 2254 auditd
root 252156 31224 02:40:03 497-23:57:56 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:38:51 497-23:57:56 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:35 497-23:57:55 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 497-23:57:55 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:40:18 497-23:57:55 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:15 497-23:57:54 2492 /usr/sbin/sshd
root 71720 2008 00:33:05 497-23:57:49 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:57 497-23:57:49 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:50 497-23:57:49 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:18 497-23:57:49 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:12 497-23:57:49 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:08 497-23:57:38 3359 crond
root 107544 436 00:00:26 497-23:57:36 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 497-23:57:31 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 497-23:57:31 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 497-23:57:31 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 497-23:57:31 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 497-23:57:31 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 497-23:57:31 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 497-23:57:31 3491 /sbin/udevd -d
root 11232 260 00:00:00 497-23:57:31 3492 /sbin/udevd -d
root 163092 1628 00:00:44 482-21:22:44 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 572 00:00:00 96-11:08:15 43438 SCREEN -O
root 108452 1384 00:00:00 96-11:08:15 43439 /bin/bash
root 108452 1388 00:00:00 96-11:07:12 43486 /bin/bash
root 0 0 00:02:10 497-21:35:55 57735 [flush-9:2]
root 0 0 00:02:02 497-21:00:59 68416 [flush-9:1]
root 63348 4212 00:21:26 396-03:11:19 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 396-02:50:45 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1552112 761-13:50:45 396-02:50:44 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
apache 592204 111884 00:00:52 27:07 140878 /usr/sbin/httpd -DSSL
apache 610280 118504 00:00:58 25:56 141190 /usr/sbin/httpd -DSSL
apache 612916 112704 00:00:46 20:02 141852 /usr/sbin/httpd -DSSL
apache 587824 87388 00:00:50 17:51 142338 /usr/sbin/httpd -DSSL
apache 588124 87088 00:00:37 17:50 142339 /usr/sbin/httpd -DSSL
apache 586788 86616 00:00:37 17:27 142343 /usr/sbin/httpd -DSSL
apache 626904 124224 00:00:40 17:14 142484 /usr/sbin/httpd -DSSL
apache 588960 84296 00:00:27 16:34 142486 /usr/sbin/httpd -DSSL
apache 587612 84920 00:00:41 16:25 142488 /usr/sbin/httpd -DSSL
apache 588068 94112 00:00:26 16:21 142490 /usr/sbin/httpd -DSSL
apache 586796 85104 00:00:27 16:07 142491 /usr/sbin/httpd -DSSL
apache 601768 100468 00:00:25 13:55 142817 /usr/sbin/httpd -DSSL
apache 592804 89916 00:00:18 09:55 143311 /usr/sbin/httpd -DSSL
apache 605544 99748 00:00:24 08:18 143614 /usr/sbin/httpd -DSSL
root 96484 5376 00:00:00 06:29 143763 sendmail: ./48N6BUAg010142 mail.radler.han-solo.net.: user open
apache 598152 83832 00:00:10 05:53 144027 /usr/sbin/httpd -DSSL
apache 585256 79208 00:00:09 05:52 144028 /usr/sbin/httpd -DSSL
apache 597744 94888 00:00:06 05:52 144029 /usr/sbin/httpd -DSSL
root 96484 5364 00:00:00 05:29 144030 sendmail: ./48MGjYm3137570 gpmx04.1dial.net.: user open
apache 587676 84528 00:00:11 05:02 144063 /usr/sbin/httpd -DSSL
apache 594200 73168 00:00:06 05:01 144068 /usr/sbin/httpd -DSSL
apache 608676 92868 00:00:10 05:01 144069 /usr/sbin/httpd -DSSL
apache 663540 142620 00:00:07 04:37 144137 /usr/sbin/httpd -DSSL
root 96484 5364 00:00:00 03:29 144348 sendmail: ./48NFCkJi093360 ctmail2.gibb.co.za.: user open
apache 586820 68984 00:00:04 02:41 144512 /usr/sbin/httpd -DSSL
apache 613004 63660 00:00:01 02:40 144513 /usr/sbin/httpd -DSSL
apache 583552 54484 00:00:03 02:40 144514 /usr/sbin/httpd -DSSL
apache 585532 54232 00:00:02 02:37 144515 /usr/sbin/httpd -DSSL
root 96484 5340 00:00:00 02:29 144516 sendmail: ./48NFM2YC094511 smtp2.comune.at.: user open
apache 582840 54580 00:00:02 02:22 144658 /usr/sbin/httpd -DSSL
apache 580704 32116 00:00:00 02:07 144660 /usr/sbin/httpd -DSSL
apache 582732 53164 00:00:01 02:01 144661 /usr/sbin/httpd -DSSL
root 96484 5344 00:00:00 01:29 144662 sendmail: ./48NEm5mo089749 mail2-alt.rcv.ch.: user open
root 0 0 00:00:00 01:00 144726 [flush-9:4]
apache 580048 28432 00:00:00 01:00 144727 /usr/sbin/httpd -DSSL
apache 580508 28300 00:00:00 00:47 144728 /usr/sbin/httpd -DSSL
apache 614896 82176 00:00:01 00:46 144729 /usr/sbin/httpd -DSSL
apache 583300 63864 00:00:02 00:46 144730 /usr/sbin/httpd -DSSL
apache 580504 28196 00:00:00 00:41 144731 /usr/sbin/httpd -DSSL
apache 590736 72160 00:00:02 00:37 144732 /usr/sbin/httpd -DSSL
apache 581724 31512 00:00:01 00:35 144733 /usr/sbin/httpd -DSSL
apache 608720 76500 00:00:01 00:30 144734 /usr/sbin/httpd -DSSL
root 96484 5340 00:00:00 00:29 144735 sendmail: ./48NFeLsW097163 smtp.comune.at.: user open
apache 580124 30476 00:00:00 00:23 144737 /usr/sbin/httpd -DSSL
root 110772 2080 00:00:00 00:01 144965 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:01 144987 /bin/bash /usr/bin/check_mk_agent
root 110772 1260 00:00:00 00:01 144988 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 144990 cat
root 110900 1180 00:00:00 00:01 145015 /bin/bash /usr/bin/check_mk_agent
root 13364 1020 00:00:00 00:01 145016 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 145017 tr -s 
root 21712 768 00:00:14 95-21:20:02 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:02:04 24-11:43:04 181185 [flush-9:5]
root 564956 32952 00:06:39 24-11:34:31 182912 /usr/sbin/httpd -DSSL
root 19260 792 00:00:00 19:32:20 215778 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 19:32:20 215781 dovecot/anvil
root 13108 1196 00:00:00 19:32:20 215782 dovecot/log
root 154784 45448 00:00:41 391-21:22:50 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 266616 74736 00:00:16 17:54:47 230058 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270768 78936 00:00:34 17:54:43 230059 spamd child
root 267980 75104 00:00:00 17:54:43 230061 spamd child
smmsp 78752 788 00:08:54 434-12:05:00 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:56:51 434-12:05:00 238030 sendmail: accepting connections
named 724240 39856 03:26:59 434-12:04:45 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-23 21:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e47f0e5e5b

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1726951484
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:42 495-23:37:04 1 /sbin/init
root 0 0 00:00:01 495-23:37:04 2 [kthreadd]
root 0 0 21:17:37 495-23:37:04 3 [migration/0]
root 0 0 01:00:16 495-23:37:04 4 [ksoftirqd/0]
root 0 0 00:00:00 495-23:37:04 5 [stopper/0]
root 0 0 00:15:27 495-23:37:04 6 [watchdog/0]
root 0 0 09:08:30 495-23:37:04 7 [migration/1]
root 0 0 00:00:00 495-23:37:04 8 [stopper/1]
root 0 0 01:35:24 495-23:37:04 9 [ksoftirqd/1]
root 0 0 00:19:25 495-23:37:04 10 [watchdog/1]
root 0 0 06:00:04 495-23:37:04 11 [migration/2]
root 0 0 00:00:00 495-23:37:04 12 [stopper/2]
root 0 0 00:46:21 495-23:37:04 13 [ksoftirqd/2]
root 0 0 00:17:02 495-23:37:04 14 [watchdog/2]
root 0 0 04:15:31 495-23:37:04 15 [migration/3]
root 0 0 00:00:00 495-23:37:04 16 [stopper/3]
root 0 0 00:33:09 495-23:37:04 17 [ksoftirqd/3]
root 0 0 00:13:26 495-23:37:04 18 [watchdog/3]
root 0 0 14:55:43 495-23:37:04 19 [migration/4]
root 0 0 00:00:00 495-23:37:04 20 [stopper/4]
root 0 0 00:52:26 495-23:37:04 21 [ksoftirqd/4]
root 0 0 00:07:58 495-23:37:04 22 [watchdog/4]
root 0 0 08:28:47 495-23:37:04 23 [migration/5]
root 0 0 00:00:00 495-23:37:04 24 [stopper/5]
root 0 0 00:37:03 495-23:37:04 25 [ksoftirqd/5]
root 0 0 00:17:23 495-23:37:04 26 [watchdog/5]
root 0 0 05:06:56 495-23:37:04 27 [migration/6]
root 0 0 00:00:00 495-23:37:04 28 [stopper/6]
root 0 0 00:28:12 495-23:37:04 29 [ksoftirqd/6]
root 0 0 00:12:57 495-23:37:04 30 [watchdog/6]
root 0 0 04:02:29 495-23:37:04 31 [migration/7]
root 0 0 00:00:00 495-23:37:04 32 [stopper/7]
root 0 0 00:27:26 495-23:37:04 33 [ksoftirqd/7]
root 0 0 00:10:17 495-23:37:04 34 [watchdog/7]
root 0 0 02:19:39 495-23:37:04 35 [events/0]
root 0 0 01:28:03 495-23:37:04 36 [events/1]
root 0 0 01:30:15 495-23:37:04 37 [events/2]
root 0 0 01:32:57 495-23:37:04 38 [events/3]
root 0 0 01:19:25 495-23:37:04 39 [events/4]
root 0 0 01:14:51 495-23:37:04 40 [events/5]
root 0 0 01:21:13 495-23:37:04 41 [events/6]
root 0 0 01:24:10 495-23:37:04 42 [events/7]
root 0 0 00:00:00 495-23:37:04 43 [events/0]
root 0 0 00:00:00 495-23:37:04 44 [events/1]
root 0 0 00:00:00 495-23:37:04 45 [events/2]
root 0 0 00:00:00 495-23:37:04 46 [events/3]
root 0 0 00:00:00 495-23:37:04 47 [events/4]
root 0 0 00:00:00 495-23:37:04 48 [events/5]
root 0 0 00:00:00 495-23:37:04 49 [events/6]
root 0 0 00:00:00 495-23:37:04 50 [events/7]
root 0 0 00:00:00 495-23:37:04 51 [events_long/0]
root 0 0 00:00:00 495-23:37:04 52 [events_long/1]
root 0 0 00:00:00 495-23:37:04 53 [events_long/2]
root 0 0 00:00:00 495-23:37:04 54 [events_long/3]
root 0 0 00:00:00 495-23:37:04 55 [events_long/4]
root 0 0 00:00:00 495-23:37:04 56 [events_long/5]
root 0 0 00:00:00 495-23:37:04 57 [events_long/6]
root 0 0 00:00:00 495-23:37:04 58 [events_long/7]
root 0 0 00:00:00 495-23:37:04 59 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 60 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 61 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 62 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 63 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 64 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 65 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 66 [events_power_ef]
root 0 0 00:00:00 495-23:37:04 67 [cgroup]
root 0 0 00:00:00 495-23:37:04 68 [khelper]
root 0 0 00:00:00 495-23:37:04 69 [netns]
root 0 0 00:00:00 495-23:37:04 70 [async/mgr]
root 0 0 00:00:00 495-23:37:04 71 [pm]
root 0 0 00:04:55 495-23:37:04 72 [sync_supers]
root 0 0 00:00:13 495-23:37:04 73 [bdi-default]
root 0 0 00:00:00 495-23:37:04 74 [kintegrityd/0]
root 0 0 00:00:00 495-23:37:04 75 [kintegrityd/1]
root 0 0 00:00:00 495-23:37:04 76 [kintegrityd/2]
root 0 0 00:00:00 495-23:37:04 77 [kintegrityd/3]
root 0 0 00:00:00 495-23:37:04 78 [kintegrityd/4]
root 0 0 00:00:00 495-23:37:04 79 [kintegrityd/5]
root 0 0 00:00:00 495-23:37:04 80 [kintegrityd/6]
root 0 0 00:00:00 495-23:37:04 81 [kintegrityd/7]
root 0 0 06:02:34 495-23:37:04 82 [kblockd/0]
root 0 0 00:11:26 495-23:37:04 83 [kblockd/1]
root 0 0 00:23:12 495-23:37:04 84 [kblockd/2]
root 0 0 00:04:26 495-23:37:04 85 [kblockd/3]
root 0 0 10:38:37 495-23:37:04 86 [kblockd/4]
root 0 0 00:13:41 495-23:37:04 87 [kblockd/5]
root 0 0 00:09:03 495-23:37:04 88 [kblockd/6]
root 0 0 00:06:56 495-23:37:04 89 [kblockd/7]
root 0 0 00:00:00 495-23:37:04 90 [kacpid]
root 0 0 00:00:00 495-23:37:04 91 [kacpi_notify]
root 0 0 00:00:00 495-23:37:04 92 [kacpi_hotplug]
root 0 0 00:00:00 495-23:37:04 93 [ata_aux]
root 0 0 00:00:00 495-23:37:04 94 [ata_sff/0]
root 0 0 00:00:00 495-23:37:04 95 [ata_sff/1]
root 0 0 00:00:00 495-23:37:04 96 [ata_sff/2]
root 0 0 00:00:00 495-23:37:04 97 [ata_sff/3]
root 0 0 00:00:00 495-23:37:04 98 [ata_sff/4]
root 0 0 00:00:00 495-23:37:04 99 [ata_sff/5]
root 0 0 00:00:00 495-23:37:04 100 [ata_sff/6]
root 0 0 00:00:00 495-23:37:04 101 [ata_sff/7]
root 0 0 00:00:00 495-23:37:04 102 [ksuspend_usbd]
root 0 0 00:00:00 495-23:37:04 103 [khubd]
root 0 0 00:00:00 495-23:37:04 104 [kseriod]
root 0 0 00:00:00 495-23:37:04 105 [md/0]
root 0 0 00:00:00 495-23:37:04 106 [md/1]
root 0 0 00:00:00 495-23:37:04 107 [md/2]
root 0 0 00:00:00 495-23:37:04 108 [md/3]
root 0 0 00:00:00 495-23:37:04 109 [md/4]
root 0 0 00:00:00 495-23:37:04 110 [md/5]
root 0 0 00:00:00 495-23:37:04 111 [md/6]
root 0 0 00:00:00 495-23:37:04 112 [md/7]
root 0 0 00:00:00 495-23:37:04 113 [md_misc/0]
root 0 0 00:00:00 495-23:37:04 114 [md_misc/1]
root 0 0 00:00:00 495-23:37:04 115 [md_misc/2]
root 0 0 00:00:00 495-23:37:04 116 [md_misc/3]
root 0 0 00:00:00 495-23:37:04 117 [md_misc/4]
root 0 0 00:00:00 495-23:37:04 118 [md_misc/5]
root 0 0 00:00:00 495-23:37:04 119 [md_misc/6]
root 0 0 00:00:00 495-23:37:04 120 [md_misc/7]
root 0 0 00:00:00 495-23:37:04 121 [linkwatch]
root 0 0 00:01:03 495-23:37:03 124 [khungtaskd]
root 0 0 1-01:41:52 495-23:37:03 125 [kswapd1]
root 0 0 00:00:00 495-23:37:03 126 [ksmd]
root 0 0 03:33:14 495-23:37:03 127 [khugepaged]
root 0 0 00:00:00 495-23:37:03 128 [aio/0]
root 0 0 00:00:00 495-23:37:03 129 [aio/1]
root 0 0 00:00:00 495-23:37:03 130 [aio/2]
root 0 0 00:00:00 495-23:37:03 131 [aio/3]
root 0 0 00:00:00 495-23:37:03 132 [aio/4]
root 0 0 00:00:00 495-23:37:03 133 [aio/5]
root 0 0 00:00:00 495-23:37:03 134 [aio/6]
root 0 0 00:00:00 495-23:37:03 135 [aio/7]
root 0 0 00:00:00 495-23:37:03 136 [crypto/0]
root 0 0 00:00:00 495-23:37:03 137 [crypto/1]
root 0 0 00:00:00 495-23:37:03 138 [crypto/2]
root 0 0 00:00:00 495-23:37:03 139 [crypto/3]
root 0 0 00:00:00 495-23:37:03 140 [crypto/4]
root 0 0 00:00:00 495-23:37:03 141 [crypto/5]
root 0 0 00:00:00 495-23:37:03 142 [crypto/6]
root 0 0 00:00:00 495-23:37:03 143 [crypto/7]
root 0 0 00:00:00 495-23:37:03 150 [kthrotld/0]
root 0 0 00:00:00 495-23:37:03 151 [kthrotld/1]
root 0 0 00:00:00 495-23:37:03 152 [kthrotld/2]
root 0 0 00:00:00 495-23:37:03 153 [kthrotld/3]
root 0 0 00:00:00 495-23:37:03 154 [kthrotld/4]
root 0 0 00:00:00 495-23:37:03 155 [kthrotld/5]
root 0 0 00:00:00 495-23:37:03 156 [kthrotld/6]
root 0 0 00:00:00 495-23:37:03 157 [kthrotld/7]
root 0 0 00:00:00 495-23:37:03 160 [kpsmoused]
root 0 0 00:00:00 495-23:37:03 161 [usbhid_resumer]
root 0 0 00:00:00 495-23:37:03 162 [deferwq]
root 0 0 00:00:00 495-23:37:03 194 [kdmremove]
root 0 0 00:00:00 495-23:37:03 195 [kstriped]
root 0 0 00:00:00 495-23:37:01 734 [scsi_eh_0]
root 0 0 00:00:00 495-23:37:01 735 [scsi_wq_0]
root 0 0 00:00:00 495-23:37:01 748 [scsi_eh_1]
root 0 0 00:00:00 495-23:37:01 749 [scsi_eh_2]
root 0 0 00:00:00 495-23:37:01 750 [scsi_eh_3]
root 0 0 00:00:00 495-23:37:01 751 [scsi_eh_4]
root 0 0 00:00:00 495-23:37:01 752 [scsi_eh_5]
root 0 0 00:00:00 495-23:37:01 753 [scsi_eh_6]
root 0 0 00:52:42 495-23:37:00 950 [md1_raid1]
root 0 0 00:03:11 495-23:36:59 1011 [jbd2/md1-8]
root 0 0 00:00:00 495-23:36:59 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 495-23:36:58 1105 /sbin/udevd -d
root 0 0 00:30:29 495-23:36:58 1225 [edac-poller]
root 0 0 00:09:59 495-23:36:57 1259 [md0_raid1]
root 0 0 02:14:53 495-23:36:57 1288 [md3_raid1]
root 0 0 2-12:43:10 495-23:36:57 1310 [md5_raid1]
root 0 0 01:03:15 495-23:36:57 1322 [md4_raid1]
root 0 0 00:29:15 495-23:36:57 1336 [md2_raid1]
root 0 0 00:17:06 495-23:36:55 1844 [flush-9:3]
root 0 0 00:00:00 495-23:36:55 1881 [jbd2/md0-8]
root 0 0 00:00:00 495-23:36:55 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 495-23:36:55 1885 [xfs_mru_cache]
root 0 0 01:31:01 495-23:36:55 1886 [xfslogd/0]
root 0 0 00:00:00 495-23:36:55 1887 [xfslogd/1]
root 0 0 00:03:32 495-23:36:55 1888 [xfslogd/2]
root 0 0 00:00:00 495-23:36:55 1889 [xfslogd/3]
root 0 0 02:36:46 495-23:36:55 1890 [xfslogd/4]
root 0 0 00:00:00 495-23:36:55 1891 [xfslogd/5]
root 0 0 00:00:00 495-23:36:55 1892 [xfslogd/6]
root 0 0 00:00:00 495-23:36:55 1893 [xfslogd/7]
root 0 0 02:43:25 495-23:36:55 1894 [xfsdatad/0]
root 0 0 00:00:00 495-23:36:55 1895 [xfsdatad/1]
root 0 0 00:02:18 495-23:36:55 1896 [xfsdatad/2]
root 0 0 00:00:00 495-23:36:55 1897 [xfsdatad/3]
root 0 0 03:03:48 495-23:36:55 1898 [xfsdatad/4]
root 0 0 00:00:00 495-23:36:55 1899 [xfsdatad/5]
root 0 0 00:00:00 495-23:36:55 1900 [xfsdatad/6]
root 0 0 00:00:00 495-23:36:55 1901 [xfsdatad/7]
root 0 0 00:00:00 495-23:36:55 1902 [xfsconvertd/0]
root 0 0 00:00:00 495-23:36:55 1903 [xfsconvertd/1]
root 0 0 00:00:00 495-23:36:55 1904 [xfsconvertd/2]
root 0 0 00:00:00 495-23:36:55 1905 [xfsconvertd/3]
root 0 0 00:00:00 495-23:36:55 1906 [xfsconvertd/4]
root 0 0 00:00:00 495-23:36:55 1907 [xfsconvertd/5]
root 0 0 00:00:00 495-23:36:55 1908 [xfsconvertd/6]
root 0 0 00:00:00 495-23:36:55 1909 [xfsconvertd/7]
root 0 0 00:00:02 495-23:36:55 1910 [xfsalloc/0]
root 0 0 00:00:02 495-23:36:55 1911 [xfsalloc/1]
root 0 0 00:00:02 495-23:36:55 1912 [xfsalloc/2]
root 0 0 00:00:03 495-23:36:55 1913 [xfsalloc/3]
root 0 0 00:00:02 495-23:36:55 1914 [xfsalloc/4]
root 0 0 00:00:02 495-23:36:55 1915 [xfsalloc/5]
root 0 0 00:00:03 495-23:36:55 1916 [xfsalloc/6]
root 0 0 00:00:04 495-23:36:55 1917 [xfsalloc/7]
root 0 0 00:00:10 495-23:36:55 1918 [xfseofblocks/0]
root 0 0 00:00:06 495-23:36:55 1919 [xfseofblocks/1]
root 0 0 00:00:09 495-23:36:55 1920 [xfseofblocks/2]
root 0 0 00:00:10 495-23:36:55 1921 [xfseofblocks/3]
root 0 0 00:00:07 495-23:36:55 1922 [xfseofblocks/4]
root 0 0 00:00:09 495-23:36:55 1923 [xfseofblocks/5]
root 0 0 00:00:04 495-23:36:55 1924 [xfseofblocks/6]
root 0 0 00:02:38 495-23:36:55 1925 [xfseofblocks/7]
root 0 0 00:28:06 495-23:36:55 1926 [xfsbufd/md5]
root 0 0 00:25:12 495-23:36:55 1927 [xfs-cil/md5]
root 0 0 00:53:25 495-23:36:55 1928 [xfssyncd/md5]
root 0 0 05:59:14 495-23:36:55 1929 [xfsaild/md5]
root 0 0 00:03:12 495-23:36:54 1930 [jbd2/md2-8]
root 0 0 00:00:00 495-23:36:54 1931 [ext4-dio-unwrit]
root 0 0 00:07:31 495-23:36:54 1932 [xfsbufd/md4]
root 0 0 00:00:45 495-23:36:54 1933 [xfs-cil/md4]
root 0 0 00:03:27 495-23:36:54 1934 [xfssyncd/md4]
root 0 0 05:41:00 495-23:36:54 1935 [xfsaild/md4]
root 0 0 00:22:51 495-23:36:54 1936 [xfsbufd/md3]
root 0 0 00:18:34 495-23:36:54 1937 [xfs-cil/md3]
root 0 0 00:04:09 495-23:36:54 1938 [xfssyncd/md3]
root 0 0 05:50:05 495-23:36:54 1939 [xfsaild/md3]
root 0 0 00:35:19 495-23:36:54 1940 [xfsbufd/sdc1]
root 0 0 00:39:29 495-23:36:54 1941 [xfs-cil/sdc1]
root 0 0 11:23:31 495-23:36:54 1942 [xfssyncd/sdc1]
root 0 0 1-06:11:37 495-23:36:54 1943 [xfsaild/sdc1]
root 0 0 00:06:09 495-23:36:53 1999 [kauditd]
root 29764 704 00:15:09 495-23:36:36 2254 auditd
root 252156 31224 02:39:46 495-23:36:35 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:38:04 495-23:36:35 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:35 495-23:36:34 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 495-23:36:34 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:40:00 495-23:36:34 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:15 495-23:36:33 2492 /usr/sbin/sshd
root 71720 2008 00:33:04 495-23:36:28 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:56 495-23:36:28 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:49 495-23:36:28 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:16 495-23:36:28 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:11 495-23:36:28 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:06 495-23:36:17 3359 crond
root 107544 436 00:00:26 495-23:36:15 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 495-23:36:10 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 495-23:36:10 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 495-23:36:10 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 495-23:36:10 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 495-23:36:10 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 495-23:36:10 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 495-23:36:10 3491 /sbin/udevd -d
root 11232 260 00:00:00 495-23:36:10 3492 /sbin/udevd -d
root 163092 1628 00:00:44 480-21:01:23 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 572 00:00:00 94-10:46:54 43438 SCREEN -O
root 108452 1384 00:00:00 94-10:46:54 43439 /bin/bash
root 108452 1388 00:00:00 94-10:45:51 43486 /bin/bash
root 19260 796 00:00:00 18:24:12 46192 /usr/sbin/dovecot
dovecot 12980 1056 00:00:00 18:24:12 46194 dovecot/anvil
root 13108 1196 00:00:00 18:24:12 46195 dovecot/log
root 266636 74792 00:00:16 18:15:57 47539 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 268944 76724 00:00:08 18:15:54 47541 spamd child
root 266636 72280 00:00:00 18:15:54 47543 spamd child
root 0 0 00:02:09 495-21:14:34 57735 [flush-9:2]
root 0 0 00:02:01 495-20:39:38 68416 [flush-9:1]
root 63348 4212 00:21:19 394-02:49:58 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 394-02:29:24 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1571204 753-09:28:10 394-02:29:23 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 21712 768 00:00:13 93-20:58:41 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:01:53 22-11:21:43 181185 [flush-9:5]
root 564572 32568 00:05:57 22-11:13:10 182912 /usr/sbin/httpd -DSSL
apache 589156 100504 00:00:36 25:02 200646 /usr/sbin/httpd -DSSL
apache 589876 96396 00:00:41 18:10 201426 /usr/sbin/httpd -DSSL
apache 587864 93248 00:00:28 15:27 201878 /usr/sbin/httpd -DSSL
apache 586264 81472 00:00:21 13:27 202157 /usr/sbin/httpd -DSSL
apache 602272 96372 00:00:16 10:26 202612 /usr/sbin/httpd -DSSL
root 96124 3556 00:00:00 05:13 203283 sendmail: ./48HIEX9U090040 from queue
apache 583496 59028 00:00:12 04:57 203286 /usr/sbin/httpd -DSSL
apache 582220 59148 00:00:04 04:21 203392 /usr/sbin/httpd -DSSL
apache 622648 95040 00:00:07 04:20 203394 /usr/sbin/httpd -DSSL
apache 665820 136276 00:00:05 03:36 203401 /usr/sbin/httpd -DSSL
apache 745888 201324 00:00:05 03:35 203402 /usr/sbin/httpd -DSSL
apache 583036 54168 00:00:05 03:35 203403 /usr/sbin/httpd -DSSL
apache 589876 41524 00:00:07 02:27 203846 /usr/sbin/httpd -DSSL
apache 589348 70188 00:00:06 02:26 203847 /usr/sbin/httpd -DSSL
apache 580476 32816 00:00:01 02:25 203853 /usr/sbin/httpd -DSSL
apache 591552 62164 00:00:09 02:25 203858 /usr/sbin/httpd -DSSL
apache 587844 52556 00:00:02 02:25 203859 /usr/sbin/httpd -DSSL
apache 597216 68152 00:00:03 02:24 203861 /usr/sbin/httpd -DSSL
apache 581848 63300 00:00:02 02:24 203863 /usr/sbin/httpd -DSSL
apache 587768 41152 00:00:04 02:24 203864 /usr/sbin/httpd -DSSL
apache 583072 47404 00:00:08 02:24 203865 /usr/sbin/httpd -DSSL
apache 652756 102872 00:00:01 02:24 203867 /usr/sbin/httpd -DSSL
apache 585328 37524 00:00:01 02:24 203869 /usr/sbin/httpd -DSSL
apache 587596 38700 00:00:02 02:24 203870 /usr/sbin/httpd -DSSL
apache 594500 66612 00:00:07 02:24 203871 /usr/sbin/httpd -DSSL
apache 598644 48980 00:00:02 02:24 203872 /usr/sbin/httpd -DSSL
apache 591780 70080 00:00:03 02:24 203874 /usr/sbin/httpd -DSSL
apache 587584 39996 00:00:03 02:24 203875 /usr/sbin/httpd -DSSL
root 96124 3544 00:00:00 02:13 203877 sendmail: ./48IAMEl6233093 mail.hiwpt.edu.sa.: user open
apache 604404 71232 00:00:03 01:07 203885 /usr/sbin/httpd -DSSL
apache 581772 34380 00:00:02 01:07 203886 /usr/sbin/httpd -DSSL
apache 582252 32652 00:00:01 00:50 203888 /usr/sbin/httpd -DSSL
root 96124 3344 00:00:00 00:13 203892 sendmail: ./48H3ZAXP208830 mail.lightedge.co.za.: user open
root 110772 2072 00:00:00 00:02 203980 /bin/bash /usr/bin/check_mk_agent
root 110900 1680 00:00:00 00:01 204006 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 204007 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 204012 cat
root 110900 1172 00:00:00 00:01 204034 /bin/bash /usr/bin/check_mk_agent
root 13364 1020 00:00:00 00:01 204035 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 204036 tr -s 
root 154784 45448 00:00:41 389-21:01:29 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:51 432-11:43:39 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:56:35 432-11:43:39 238030 sendmail: accepting connections
named 724240 39852 03:25:42 432-11:43:24 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-21 20:44

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e48961213e

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1726780326
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:42 494-00:04:26 1 /sbin/init
root 0 0 00:00:01 494-00:04:26 2 [kthreadd]
root 0 0 21:12:00 494-00:04:26 3 [migration/0]
root 0 0 00:59:57 494-00:04:26 4 [ksoftirqd/0]
root 0 0 00:00:00 494-00:04:26 5 [stopper/0]
root 0 0 00:15:19 494-00:04:26 6 [watchdog/0]
root 0 0 09:05:59 494-00:04:26 7 [migration/1]
root 0 0 00:00:00 494-00:04:26 8 [stopper/1]
root 0 0 01:35:05 494-00:04:26 9 [ksoftirqd/1]
root 0 0 00:19:20 494-00:04:26 10 [watchdog/1]
root 0 0 05:58:35 494-00:04:26 11 [migration/2]
root 0 0 00:00:00 494-00:04:26 12 [stopper/2]
root 0 0 00:46:07 494-00:04:26 13 [ksoftirqd/2]
root 0 0 00:16:52 494-00:04:26 14 [watchdog/2]
root 0 0 04:14:05 494-00:04:26 15 [migration/3]
root 0 0 00:00:00 494-00:04:26 16 [stopper/3]
root 0 0 00:32:57 494-00:04:26 17 [ksoftirqd/3]
root 0 0 00:13:21 494-00:04:26 18 [watchdog/3]
root 0 0 14:51:29 494-00:04:26 19 [migration/4]
root 0 0 00:00:00 494-00:04:26 20 [stopper/4]
root 0 0 00:52:12 494-00:04:26 21 [ksoftirqd/4]
root 0 0 00:07:53 494-00:04:26 22 [watchdog/4]
root 0 0 08:26:47 494-00:04:26 23 [migration/5]
root 0 0 00:00:00 494-00:04:26 24 [stopper/5]
root 0 0 00:36:54 494-00:04:26 25 [ksoftirqd/5]
root 0 0 00:17:18 494-00:04:26 26 [watchdog/5]
root 0 0 05:05:35 494-00:04:26 27 [migration/6]
root 0 0 00:00:00 494-00:04:26 28 [stopper/6]
root 0 0 00:28:05 494-00:04:26 29 [ksoftirqd/6]
root 0 0 00:12:52 494-00:04:26 30 [watchdog/6]
root 0 0 04:01:03 494-00:04:26 31 [migration/7]
root 0 0 00:00:00 494-00:04:26 32 [stopper/7]
root 0 0 00:27:18 494-00:04:26 33 [ksoftirqd/7]
root 0 0 00:10:10 494-00:04:26 34 [watchdog/7]
root 0 0 02:18:54 494-00:04:26 35 [events/0]
root 0 0 01:27:26 494-00:04:26 36 [events/1]
root 0 0 01:29:43 494-00:04:26 37 [events/2]
root 0 0 01:32:19 494-00:04:26 38 [events/3]
root 0 0 01:18:59 494-00:04:26 39 [events/4]
root 0 0 01:14:27 494-00:04:26 40 [events/5]
root 0 0 01:20:47 494-00:04:26 41 [events/6]
root 0 0 01:23:41 494-00:04:26 42 [events/7]
root 0 0 00:00:00 494-00:04:26 43 [events/0]
root 0 0 00:00:00 494-00:04:26 44 [events/1]
root 0 0 00:00:00 494-00:04:26 45 [events/2]
root 0 0 00:00:00 494-00:04:26 46 [events/3]
root 0 0 00:00:00 494-00:04:26 47 [events/4]
root 0 0 00:00:00 494-00:04:26 48 [events/5]
root 0 0 00:00:00 494-00:04:26 49 [events/6]
root 0 0 00:00:00 494-00:04:26 50 [events/7]
root 0 0 00:00:00 494-00:04:26 51 [events_long/0]
root 0 0 00:00:00 494-00:04:26 52 [events_long/1]
root 0 0 00:00:00 494-00:04:26 53 [events_long/2]
root 0 0 00:00:00 494-00:04:26 54 [events_long/3]
root 0 0 00:00:00 494-00:04:26 55 [events_long/4]
root 0 0 00:00:00 494-00:04:26 56 [events_long/5]
root 0 0 00:00:00 494-00:04:26 57 [events_long/6]
root 0 0 00:00:00 494-00:04:26 58 [events_long/7]
root 0 0 00:00:00 494-00:04:26 59 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 60 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 61 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 62 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 63 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 64 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 65 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 66 [events_power_ef]
root 0 0 00:00:00 494-00:04:26 67 [cgroup]
root 0 0 00:00:00 494-00:04:26 68 [khelper]
root 0 0 00:00:00 494-00:04:26 69 [netns]
root 0 0 00:00:00 494-00:04:26 70 [async/mgr]
root 0 0 00:00:00 494-00:04:26 71 [pm]
root 0 0 00:04:52 494-00:04:26 72 [sync_supers]
root 0 0 00:00:13 494-00:04:26 73 [bdi-default]
root 0 0 00:00:00 494-00:04:26 74 [kintegrityd/0]
root 0 0 00:00:00 494-00:04:26 75 [kintegrityd/1]
root 0 0 00:00:00 494-00:04:26 76 [kintegrityd/2]
root 0 0 00:00:00 494-00:04:26 77 [kintegrityd/3]
root 0 0 00:00:00 494-00:04:26 78 [kintegrityd/4]
root 0 0 00:00:00 494-00:04:26 79 [kintegrityd/5]
root 0 0 00:00:00 494-00:04:26 80 [kintegrityd/6]
root 0 0 00:00:00 494-00:04:26 81 [kintegrityd/7]
root 0 0 06:00:57 494-00:04:26 82 [kblockd/0]
root 0 0 00:11:24 494-00:04:26 83 [kblockd/1]
root 0 0 00:23:12 494-00:04:26 84 [kblockd/2]
root 0 0 00:04:26 494-00:04:26 85 [kblockd/3]
root 0 0 10:35:43 494-00:04:26 86 [kblockd/4]
root 0 0 00:13:40 494-00:04:26 87 [kblockd/5]
root 0 0 00:09:02 494-00:04:26 88 [kblockd/6]
root 0 0 00:06:56 494-00:04:26 89 [kblockd/7]
root 0 0 00:00:00 494-00:04:26 90 [kacpid]
root 0 0 00:00:00 494-00:04:26 91 [kacpi_notify]
root 0 0 00:00:00 494-00:04:26 92 [kacpi_hotplug]
root 0 0 00:00:00 494-00:04:26 93 [ata_aux]
root 0 0 00:00:00 494-00:04:26 94 [ata_sff/0]
root 0 0 00:00:00 494-00:04:26 95 [ata_sff/1]
root 0 0 00:00:00 494-00:04:26 96 [ata_sff/2]
root 0 0 00:00:00 494-00:04:26 97 [ata_sff/3]
root 0 0 00:00:00 494-00:04:26 98 [ata_sff/4]
root 0 0 00:00:00 494-00:04:26 99 [ata_sff/5]
root 0 0 00:00:00 494-00:04:26 100 [ata_sff/6]
root 0 0 00:00:00 494-00:04:26 101 [ata_sff/7]
root 0 0 00:00:00 494-00:04:26 102 [ksuspend_usbd]
root 0 0 00:00:00 494-00:04:26 103 [khubd]
root 0 0 00:00:00 494-00:04:26 104 [kseriod]
root 0 0 00:00:00 494-00:04:26 105 [md/0]
root 0 0 00:00:00 494-00:04:26 106 [md/1]
root 0 0 00:00:00 494-00:04:26 107 [md/2]
root 0 0 00:00:00 494-00:04:26 108 [md/3]
root 0 0 00:00:00 494-00:04:26 109 [md/4]
root 0 0 00:00:00 494-00:04:26 110 [md/5]
root 0 0 00:00:00 494-00:04:26 111 [md/6]
root 0 0 00:00:00 494-00:04:26 112 [md/7]
root 0 0 00:00:00 494-00:04:26 113 [md_misc/0]
root 0 0 00:00:00 494-00:04:26 114 [md_misc/1]
root 0 0 00:00:00 494-00:04:26 115 [md_misc/2]
root 0 0 00:00:00 494-00:04:26 116 [md_misc/3]
root 0 0 00:00:00 494-00:04:26 117 [md_misc/4]
root 0 0 00:00:00 494-00:04:26 118 [md_misc/5]
root 0 0 00:00:00 494-00:04:26 119 [md_misc/6]
root 0 0 00:00:00 494-00:04:26 120 [md_misc/7]
root 0 0 00:00:00 494-00:04:26 121 [linkwatch]
root 0 0 00:01:03 494-00:04:25 124 [khungtaskd]
root 0 0 1-01:36:56 494-00:04:25 125 [kswapd1]
root 0 0 00:00:00 494-00:04:25 126 [ksmd]
root 0 0 03:32:04 494-00:04:25 127 [khugepaged]
root 0 0 00:00:00 494-00:04:25 128 [aio/0]
root 0 0 00:00:00 494-00:04:25 129 [aio/1]
root 0 0 00:00:00 494-00:04:25 130 [aio/2]
root 0 0 00:00:00 494-00:04:25 131 [aio/3]
root 0 0 00:00:00 494-00:04:25 132 [aio/4]
root 0 0 00:00:00 494-00:04:25 133 [aio/5]
root 0 0 00:00:00 494-00:04:25 134 [aio/6]
root 0 0 00:00:00 494-00:04:25 135 [aio/7]
root 0 0 00:00:00 494-00:04:25 136 [crypto/0]
root 0 0 00:00:00 494-00:04:25 137 [crypto/1]
root 0 0 00:00:00 494-00:04:25 138 [crypto/2]
root 0 0 00:00:00 494-00:04:25 139 [crypto/3]
root 0 0 00:00:00 494-00:04:25 140 [crypto/4]
root 0 0 00:00:00 494-00:04:25 141 [crypto/5]
root 0 0 00:00:00 494-00:04:25 142 [crypto/6]
root 0 0 00:00:00 494-00:04:25 143 [crypto/7]
root 0 0 00:00:00 494-00:04:25 150 [kthrotld/0]
root 0 0 00:00:00 494-00:04:25 151 [kthrotld/1]
root 0 0 00:00:00 494-00:04:25 152 [kthrotld/2]
root 0 0 00:00:00 494-00:04:25 153 [kthrotld/3]
root 0 0 00:00:00 494-00:04:25 154 [kthrotld/4]
root 0 0 00:00:00 494-00:04:25 155 [kthrotld/5]
root 0 0 00:00:00 494-00:04:25 156 [kthrotld/6]
root 0 0 00:00:00 494-00:04:25 157 [kthrotld/7]
root 0 0 00:00:00 494-00:04:25 160 [kpsmoused]
root 0 0 00:00:00 494-00:04:25 161 [usbhid_resumer]
root 0 0 00:00:00 494-00:04:25 162 [deferwq]
root 0 0 00:00:00 494-00:04:25 194 [kdmremove]
root 0 0 00:00:00 494-00:04:25 195 [kstriped]
root 0 0 00:00:00 494-00:04:23 734 [scsi_eh_0]
root 0 0 00:00:00 494-00:04:23 735 [scsi_wq_0]
root 0 0 00:00:00 494-00:04:23 748 [scsi_eh_1]
root 0 0 00:00:00 494-00:04:23 749 [scsi_eh_2]
root 0 0 00:00:00 494-00:04:23 750 [scsi_eh_3]
root 0 0 00:00:00 494-00:04:23 751 [scsi_eh_4]
root 0 0 00:00:00 494-00:04:23 752 [scsi_eh_5]
root 0 0 00:00:00 494-00:04:23 753 [scsi_eh_6]
root 0 0 00:52:38 494-00:04:22 950 [md1_raid1]
root 0 0 00:03:11 494-00:04:21 1011 [jbd2/md1-8]
root 0 0 00:00:00 494-00:04:21 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 494-00:04:20 1105 /sbin/udevd -d
root 0 0 00:30:15 494-00:04:20 1225 [edac-poller]
root 0 0 00:09:59 494-00:04:19 1259 [md0_raid1]
root 0 0 02:14:31 494-00:04:19 1288 [md3_raid1]
root 0 0 2-12:36:26 494-00:04:19 1310 [md5_raid1]
root 0 0 01:03:08 494-00:04:19 1322 [md4_raid1]
root 0 0 00:29:12 494-00:04:19 1336 [md2_raid1]
root 0 0 00:17:01 494-00:04:17 1844 [flush-9:3]
root 0 0 00:00:00 494-00:04:17 1881 [jbd2/md0-8]
root 0 0 00:00:00 494-00:04:17 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 494-00:04:17 1885 [xfs_mru_cache]
root 0 0 01:30:43 494-00:04:17 1886 [xfslogd/0]
root 0 0 00:00:00 494-00:04:17 1887 [xfslogd/1]
root 0 0 00:03:32 494-00:04:17 1888 [xfslogd/2]
root 0 0 00:00:00 494-00:04:17 1889 [xfslogd/3]
root 0 0 02:36:16 494-00:04:17 1890 [xfslogd/4]
root 0 0 00:00:00 494-00:04:17 1891 [xfslogd/5]
root 0 0 00:00:00 494-00:04:17 1892 [xfslogd/6]
root 0 0 00:00:00 494-00:04:17 1893 [xfslogd/7]
root 0 0 02:43:05 494-00:04:17 1894 [xfsdatad/0]
root 0 0 00:00:00 494-00:04:17 1895 [xfsdatad/1]
root 0 0 00:02:18 494-00:04:17 1896 [xfsdatad/2]
root 0 0 00:00:00 494-00:04:17 1897 [xfsdatad/3]
root 0 0 03:03:27 494-00:04:17 1898 [xfsdatad/4]
root 0 0 00:00:00 494-00:04:17 1899 [xfsdatad/5]
root 0 0 00:00:00 494-00:04:17 1900 [xfsdatad/6]
root 0 0 00:00:00 494-00:04:17 1901 [xfsdatad/7]
root 0 0 00:00:00 494-00:04:17 1902 [xfsconvertd/0]
root 0 0 00:00:00 494-00:04:17 1903 [xfsconvertd/1]
root 0 0 00:00:00 494-00:04:17 1904 [xfsconvertd/2]
root 0 0 00:00:00 494-00:04:17 1905 [xfsconvertd/3]
root 0 0 00:00:00 494-00:04:17 1906 [xfsconvertd/4]
root 0 0 00:00:00 494-00:04:17 1907 [xfsconvertd/5]
root 0 0 00:00:00 494-00:04:17 1908 [xfsconvertd/6]
root 0 0 00:00:00 494-00:04:17 1909 [xfsconvertd/7]
root 0 0 00:00:02 494-00:04:17 1910 [xfsalloc/0]
root 0 0 00:00:02 494-00:04:17 1911 [xfsalloc/1]
root 0 0 00:00:02 494-00:04:17 1912 [xfsalloc/2]
root 0 0 00:00:03 494-00:04:17 1913 [xfsalloc/3]
root 0 0 00:00:02 494-00:04:17 1914 [xfsalloc/4]
root 0 0 00:00:02 494-00:04:17 1915 [xfsalloc/5]
root 0 0 00:00:03 494-00:04:17 1916 [xfsalloc/6]
root 0 0 00:00:04 494-00:04:17 1917 [xfsalloc/7]
root 0 0 00:00:10 494-00:04:17 1918 [xfseofblocks/0]
root 0 0 00:00:06 494-00:04:17 1919 [xfseofblocks/1]
root 0 0 00:00:09 494-00:04:17 1920 [xfseofblocks/2]
root 0 0 00:00:10 494-00:04:17 1921 [xfseofblocks/3]
root 0 0 00:00:06 494-00:04:17 1922 [xfseofblocks/4]
root 0 0 00:00:09 494-00:04:17 1923 [xfseofblocks/5]
root 0 0 00:00:04 494-00:04:17 1924 [xfseofblocks/6]
root 0 0 00:02:38 494-00:04:17 1925 [xfseofblocks/7]
root 0 0 00:27:55 494-00:04:17 1926 [xfsbufd/md5]
root 0 0 00:24:59 494-00:04:17 1927 [xfs-cil/md5]
root 0 0 00:53:15 494-00:04:17 1928 [xfssyncd/md5]
root 0 0 05:56:14 494-00:04:17 1929 [xfsaild/md5]
root 0 0 00:03:11 494-00:04:16 1930 [jbd2/md2-8]
root 0 0 00:00:00 494-00:04:16 1931 [ext4-dio-unwrit]
root 0 0 00:07:28 494-00:04:16 1932 [xfsbufd/md4]
root 0 0 00:00:45 494-00:04:16 1933 [xfs-cil/md4]
root 0 0 00:03:26 494-00:04:16 1934 [xfssyncd/md4]
root 0 0 05:38:08 494-00:04:16 1935 [xfsaild/md4]
root 0 0 00:22:40 494-00:04:16 1936 [xfsbufd/md3]
root 0 0 00:18:31 494-00:04:16 1937 [xfs-cil/md3]
root 0 0 00:04:08 494-00:04:16 1938 [xfssyncd/md3]
root 0 0 05:47:11 494-00:04:16 1939 [xfsaild/md3]
root 0 0 00:35:12 494-00:04:16 1940 [xfsbufd/sdc1]
root 0 0 00:39:22 494-00:04:16 1941 [xfs-cil/sdc1]
root 0 0 11:20:35 494-00:04:16 1942 [xfssyncd/sdc1]
root 0 0 1-06:03:30 494-00:04:16 1943 [xfsaild/sdc1]
root 0 0 00:06:07 494-00:04:15 1999 [kauditd]
root 29764 704 00:15:07 494-00:03:58 2254 auditd
root 252156 31224 02:39:29 494-00:03:57 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:37:18 494-00:03:57 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:35 494-00:03:56 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 494-00:03:56 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:39:42 494-00:03:56 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:14 494-00:03:55 2492 /usr/sbin/sshd
root 71720 2008 00:33:01 494-00:03:50 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:53 494-00:03:50 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:46 494-00:03:50 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:13 494-00:03:50 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:08 494-00:03:50 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:04 494-00:03:39 3359 crond
root 107544 436 00:00:25 494-00:03:37 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 494-00:03:32 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 494-00:03:32 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 494-00:03:32 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 494-00:03:32 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 494-00:03:32 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 494-00:03:32 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 494-00:03:32 3491 /sbin/udevd -d
root 11232 260 00:00:00 494-00:03:32 3492 /sbin/udevd -d
root 163092 1628 00:00:44 478-21:28:45 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
apache 605632 111256 00:00:52 28:44 31232 /usr/sbin/httpd -DSSL
apache 591376 91232 00:00:41 28:19 31235 /usr/sbin/httpd -DSSL
apache 593100 102364 00:00:25 25:44 31468 /usr/sbin/httpd -DSSL
apache 609824 119772 00:00:32 25:16 31614 /usr/sbin/httpd -DSSL
apache 601820 100592 00:00:31 18:10 32482 /usr/sbin/httpd -DSSL
apache 607932 104480 00:00:15 13:11 33207 /usr/sbin/httpd -DSSL
apache 582600 63660 00:00:04 13:09 33211 /usr/sbin/httpd -DSSL
apache 586440 80048 00:00:14 13:09 33212 /usr/sbin/httpd -DSSL
apache 586200 89172 00:00:21 13:09 33213 /usr/sbin/httpd -DSSL
apache 594296 89972 00:00:14 10:41 33614 /usr/sbin/httpd -DSSL
apache 604288 99296 00:00:16 10:40 33620 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 09:01 34114 [flush-9:4]
apache 593808 85564 00:00:14 07:49 34120 /usr/sbin/httpd -DSSL
root 15084 3200 00:00:00 07:49 34122 dovecot/config
dovecot 76580 2904 00:00:00 07:49 34123 dovecot/auth
root 40060 2032 00:00:00 07:49 34124 dovecot/ssl-params
apache 585980 65608 00:00:07 07:19 34127 /usr/sbin/httpd -DSSL
apache 597200 91304 00:00:12 07:11 34131 /usr/sbin/httpd -DSSL
apache 584832 64840 00:00:05 05:50 34354 /usr/sbin/httpd -DSSL
apache 588844 79780 00:00:10 05:09 34501 /usr/sbin/httpd -DSSL
apache 591200 53204 00:00:02 03:49 34648 /usr/sbin/httpd -DSSL
apache 581624 45416 00:00:01 03:48 34649 /usr/sbin/httpd -DSSL
apache 621548 97656 00:00:06 03:48 34650 /usr/sbin/httpd -DSSL
apache 610556 102288 00:00:05 03:46 34651 /usr/sbin/httpd -DSSL
apache 584492 78088 00:00:06 03:45 34652 /usr/sbin/httpd -DSSL
apache 583320 63352 00:00:06 03:44 34654 /usr/sbin/httpd -DSSL
apache 595016 72532 00:00:05 03:44 34655 /usr/sbin/httpd -DSSL
apache 596496 89324 00:00:08 03:44 34656 /usr/sbin/httpd -DSSL
apache 586012 69968 00:00:04 03:44 34657 /usr/sbin/httpd -DSSL
root 96124 3544 00:00:00 02:38 34818 sendmail: ./48IAMEl6233093 mail.hiwpt.edu.sa.: user open
root 96124 3512 00:00:00 00:38 34930 sendmail: ./48H3ZAXP208830 mail.lightedge.co.za.: user open
root 117348 64908 00:00:00 00:05 35232 /usr/local/webmin/webmin-1.860/webmincron/webmincron.pl
root 136484 82844 00:00:00 00:04 35233 /usr/local/webmin/webmin-1.860/virtual-server/collectinfo.pl
root 95620 1816 00:00:00 00:03 35270 sendmail: startup with dsl-189-231-241-139-dyn.prod-infinitum.com.mx
root 110772 2072 00:00:00 00:01 35379 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 35405 /bin/bash /usr/bin/check_mk_agent
root 110772 1252 00:00:00 00:01 35406 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 35407 cat
root 110900 1176 00:00:00 00:01 35433 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 35434 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 35435 tr -s 
root 118780 572 00:00:00 92-11:14:16 43438 SCREEN -O
root 108452 1384 00:00:00 92-11:14:16 43439 /bin/bash
root 108452 1388 00:00:00 92-11:13:13 43486 /bin/bash
root 0 0 00:02:08 493-21:41:56 57735 [flush-9:2]
root 0 0 00:02:01 493-21:07:00 68416 [flush-9:1]
root 63348 4216 00:21:12 392-03:17:20 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 392-02:56:46 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1568352 743-23:30:07 392-02:56:45 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 19260 796 00:00:00 19:16:28 118629 /usr/sbin/dovecot
dovecot 12980 1084 00:00:00 19:16:28 118632 dovecot/anvil
root 13108 1192 00:00:00 19:16:28 118633 dovecot/log
root 21712 768 00:00:13 91-21:26:03 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 266584 74796 00:00:31 1-17:44:09 174792 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270380 78544 00:00:47 1-17:44:05 174803 spamd child
root 268184 75364 00:00:00 1-17:44:05 174805 spamd child
root 0 0 00:01:42 20-11:49:05 181185 [flush-9:5]
root 564572 32568 00:05:20 20-11:40:32 182912 /usr/sbin/httpd -DSSL
root 154784 45448 00:00:41 387-21:28:51 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:49 430-12:11:01 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:56:14 430-12:11:01 238030 sendmail: accepting connections
named 724240 39848 03:24:05 430-12:10:46 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-19 21:12

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e43b2de77d

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1726604936
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:42 491-23:21:16 1 /sbin/init
root 0 0 00:00:01 491-23:21:16 2 [kthreadd]
root 0 0 21:07:47 491-23:21:16 3 [migration/0]
root 0 0 00:59:44 491-23:21:16 4 [ksoftirqd/0]
root 0 0 00:00:00 491-23:21:16 5 [stopper/0]
root 0 0 00:15:15 491-23:21:16 6 [watchdog/0]
root 0 0 09:04:43 491-23:21:16 7 [migration/1]
root 0 0 00:00:00 491-23:21:16 8 [stopper/1]
root 0 0 01:34:50 491-23:21:16 9 [ksoftirqd/1]
root 0 0 00:19:16 491-23:21:16 10 [watchdog/1]
root 0 0 05:57:51 491-23:21:16 11 [migration/2]
root 0 0 00:00:00 491-23:21:16 12 [stopper/2]
root 0 0 00:45:56 491-23:21:16 13 [ksoftirqd/2]
root 0 0 00:16:48 491-23:21:16 14 [watchdog/2]
root 0 0 04:13:31 491-23:21:16 15 [migration/3]
root 0 0 00:00:00 491-23:21:16 16 [stopper/3]
root 0 0 00:32:47 491-23:21:16 17 [ksoftirqd/3]
root 0 0 00:13:18 491-23:21:16 18 [watchdog/3]
root 0 0 14:48:31 491-23:21:16 19 [migration/4]
root 0 0 00:00:00 491-23:21:16 20 [stopper/4]
root 0 0 00:52:02 491-23:21:16 21 [ksoftirqd/4]
root 0 0 00:07:51 491-23:21:16 22 [watchdog/4]
root 0 0 08:25:44 491-23:21:16 23 [migration/5]
root 0 0 00:00:00 491-23:21:16 24 [stopper/5]
root 0 0 00:36:49 491-23:21:16 25 [ksoftirqd/5]
root 0 0 00:17:16 491-23:21:16 26 [watchdog/5]
root 0 0 05:05:04 491-23:21:16 27 [migration/6]
root 0 0 00:00:00 491-23:21:16 28 [stopper/6]
root 0 0 00:28:00 491-23:21:16 29 [ksoftirqd/6]
root 0 0 00:12:49 491-23:21:16 30 [watchdog/6]
root 0 0 04:00:36 491-23:21:16 31 [migration/7]
root 0 0 00:00:00 491-23:21:16 32 [stopper/7]
root 0 0 00:27:12 491-23:21:16 33 [ksoftirqd/7]
root 0 0 00:10:07 491-23:21:16 34 [watchdog/7]
root 0 0 02:18:16 491-23:21:16 35 [events/0]
root 0 0 01:27:05 491-23:21:16 36 [events/1]
root 0 0 01:29:19 491-23:21:16 37 [events/2]
root 0 0 01:31:52 491-23:21:16 38 [events/3]
root 0 0 01:18:39 491-23:21:16 39 [events/4]
root 0 0 01:14:07 491-23:21:16 40 [events/5]
root 0 0 01:20:27 491-23:21:16 41 [events/6]
root 0 0 01:23:18 491-23:21:16 42 [events/7]
root 0 0 00:00:00 491-23:21:16 43 [events/0]
root 0 0 00:00:00 491-23:21:16 44 [events/1]
root 0 0 00:00:00 491-23:21:16 45 [events/2]
root 0 0 00:00:00 491-23:21:16 46 [events/3]
root 0 0 00:00:00 491-23:21:16 47 [events/4]
root 0 0 00:00:00 491-23:21:16 48 [events/5]
root 0 0 00:00:00 491-23:21:16 49 [events/6]
root 0 0 00:00:00 491-23:21:16 50 [events/7]
root 0 0 00:00:00 491-23:21:16 51 [events_long/0]
root 0 0 00:00:00 491-23:21:16 52 [events_long/1]
root 0 0 00:00:00 491-23:21:16 53 [events_long/2]
root 0 0 00:00:00 491-23:21:16 54 [events_long/3]
root 0 0 00:00:00 491-23:21:16 55 [events_long/4]
root 0 0 00:00:00 491-23:21:16 56 [events_long/5]
root 0 0 00:00:00 491-23:21:16 57 [events_long/6]
root 0 0 00:00:00 491-23:21:16 58 [events_long/7]
root 0 0 00:00:00 491-23:21:16 59 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 60 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 61 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 62 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 63 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 64 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 65 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 66 [events_power_ef]
root 0 0 00:00:00 491-23:21:16 67 [cgroup]
root 0 0 00:00:00 491-23:21:16 68 [khelper]
root 0 0 00:00:00 491-23:21:16 69 [netns]
root 0 0 00:00:00 491-23:21:16 70 [async/mgr]
root 0 0 00:00:00 491-23:21:16 71 [pm]
root 0 0 00:04:51 491-23:21:16 72 [sync_supers]
root 0 0 00:00:13 491-23:21:16 73 [bdi-default]
root 0 0 00:00:00 491-23:21:16 74 [kintegrityd/0]
root 0 0 00:00:00 491-23:21:16 75 [kintegrityd/1]
root 0 0 00:00:00 491-23:21:16 76 [kintegrityd/2]
root 0 0 00:00:00 491-23:21:16 77 [kintegrityd/3]
root 0 0 00:00:00 491-23:21:16 78 [kintegrityd/4]
root 0 0 00:00:00 491-23:21:16 79 [kintegrityd/5]
root 0 0 00:00:00 491-23:21:16 80 [kintegrityd/6]
root 0 0 00:00:00 491-23:21:16 81 [kintegrityd/7]
root 0 0 05:59:40 491-23:21:16 82 [kblockd/0]
root 0 0 00:11:23 491-23:21:16 83 [kblockd/1]
root 0 0 00:23:11 491-23:21:16 84 [kblockd/2]
root 0 0 00:04:26 491-23:21:16 85 [kblockd/3]
root 0 0 10:33:16 491-23:21:16 86 [kblockd/4]
root 0 0 00:13:39 491-23:21:16 87 [kblockd/5]
root 0 0 00:09:02 491-23:21:16 88 [kblockd/6]
root 0 0 00:06:56 491-23:21:16 89 [kblockd/7]
root 0 0 00:00:00 491-23:21:16 90 [kacpid]
root 0 0 00:00:00 491-23:21:16 91 [kacpi_notify]
root 0 0 00:00:00 491-23:21:16 92 [kacpi_hotplug]
root 0 0 00:00:00 491-23:21:16 93 [ata_aux]
root 0 0 00:00:00 491-23:21:16 94 [ata_sff/0]
root 0 0 00:00:00 491-23:21:16 95 [ata_sff/1]
root 0 0 00:00:00 491-23:21:16 96 [ata_sff/2]
root 0 0 00:00:00 491-23:21:16 97 [ata_sff/3]
root 0 0 00:00:00 491-23:21:16 98 [ata_sff/4]
root 0 0 00:00:00 491-23:21:16 99 [ata_sff/5]
root 0 0 00:00:00 491-23:21:16 100 [ata_sff/6]
root 0 0 00:00:00 491-23:21:16 101 [ata_sff/7]
root 0 0 00:00:00 491-23:21:16 102 [ksuspend_usbd]
root 0 0 00:00:00 491-23:21:16 103 [khubd]
root 0 0 00:00:00 491-23:21:16 104 [kseriod]
root 0 0 00:00:00 491-23:21:16 105 [md/0]
root 0 0 00:00:00 491-23:21:16 106 [md/1]
root 0 0 00:00:00 491-23:21:16 107 [md/2]
root 0 0 00:00:00 491-23:21:16 108 [md/3]
root 0 0 00:00:00 491-23:21:16 109 [md/4]
root 0 0 00:00:00 491-23:21:16 110 [md/5]
root 0 0 00:00:00 491-23:21:16 111 [md/6]
root 0 0 00:00:00 491-23:21:16 112 [md/7]
root 0 0 00:00:00 491-23:21:16 113 [md_misc/0]
root 0 0 00:00:00 491-23:21:16 114 [md_misc/1]
root 0 0 00:00:00 491-23:21:16 115 [md_misc/2]
root 0 0 00:00:00 491-23:21:16 116 [md_misc/3]
root 0 0 00:00:00 491-23:21:16 117 [md_misc/4]
root 0 0 00:00:00 491-23:21:16 118 [md_misc/5]
root 0 0 00:00:00 491-23:21:16 119 [md_misc/6]
root 0 0 00:00:00 491-23:21:16 120 [md_misc/7]
root 0 0 00:00:00 491-23:21:16 121 [linkwatch]
root 0 0 00:01:03 491-23:21:15 124 [khungtaskd]
root 0 0 1-01:32:04 491-23:21:15 125 [kswapd1]
root 0 0 00:00:00 491-23:21:15 126 [ksmd]
root 0 0 03:31:08 491-23:21:15 127 [khugepaged]
root 0 0 00:00:00 491-23:21:15 128 [aio/0]
root 0 0 00:00:00 491-23:21:15 129 [aio/1]
root 0 0 00:00:00 491-23:21:15 130 [aio/2]
root 0 0 00:00:00 491-23:21:15 131 [aio/3]
root 0 0 00:00:00 491-23:21:15 132 [aio/4]
root 0 0 00:00:00 491-23:21:15 133 [aio/5]
root 0 0 00:00:00 491-23:21:15 134 [aio/6]
root 0 0 00:00:00 491-23:21:15 135 [aio/7]
root 0 0 00:00:00 491-23:21:15 136 [crypto/0]
root 0 0 00:00:00 491-23:21:15 137 [crypto/1]
root 0 0 00:00:00 491-23:21:15 138 [crypto/2]
root 0 0 00:00:00 491-23:21:15 139 [crypto/3]
root 0 0 00:00:00 491-23:21:15 140 [crypto/4]
root 0 0 00:00:00 491-23:21:15 141 [crypto/5]
root 0 0 00:00:00 491-23:21:15 142 [crypto/6]
root 0 0 00:00:00 491-23:21:15 143 [crypto/7]
root 0 0 00:00:00 491-23:21:15 150 [kthrotld/0]
root 0 0 00:00:00 491-23:21:15 151 [kthrotld/1]
root 0 0 00:00:00 491-23:21:15 152 [kthrotld/2]
root 0 0 00:00:00 491-23:21:15 153 [kthrotld/3]
root 0 0 00:00:00 491-23:21:15 154 [kthrotld/4]
root 0 0 00:00:00 491-23:21:15 155 [kthrotld/5]
root 0 0 00:00:00 491-23:21:15 156 [kthrotld/6]
root 0 0 00:00:00 491-23:21:15 157 [kthrotld/7]
root 0 0 00:00:00 491-23:21:15 160 [kpsmoused]
root 0 0 00:00:00 491-23:21:15 161 [usbhid_resumer]
root 0 0 00:00:00 491-23:21:15 162 [deferwq]
root 0 0 00:00:00 491-23:21:15 194 [kdmremove]
root 0 0 00:00:00 491-23:21:15 195 [kstriped]
root 0 0 00:00:00 491-23:21:13 734 [scsi_eh_0]
root 0 0 00:00:00 491-23:21:13 735 [scsi_wq_0]
root 0 0 00:00:00 491-23:21:13 748 [scsi_eh_1]
root 0 0 00:00:00 491-23:21:13 749 [scsi_eh_2]
root 0 0 00:00:00 491-23:21:13 750 [scsi_eh_3]
root 0 0 00:00:00 491-23:21:13 751 [scsi_eh_4]
root 0 0 00:00:00 491-23:21:13 752 [scsi_eh_5]
root 0 0 00:00:00 491-23:21:13 753 [scsi_eh_6]
root 0 0 00:52:35 491-23:21:12 950 [md1_raid1]
root 0 0 00:03:10 491-23:21:11 1011 [jbd2/md1-8]
root 0 0 00:00:00 491-23:21:11 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 491-23:21:10 1105 /sbin/udevd -d
root 0 0 00:30:05 491-23:21:10 1225 [edac-poller]
root 0 0 00:09:59 491-23:21:09 1259 [md0_raid1]
root 0 0 02:14:06 491-23:21:09 1288 [md3_raid1]
root 0 0 2-12:28:22 491-23:21:09 1310 [md5_raid1]
root 0 0 01:03:03 491-23:21:09 1322 [md4_raid1]
root 0 0 00:29:10 491-23:21:09 1336 [md2_raid1]
root 0 0 00:16:58 491-23:21:07 1844 [flush-9:3]
root 0 0 00:00:00 491-23:21:07 1881 [jbd2/md0-8]
root 0 0 00:00:00 491-23:21:07 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 491-23:21:07 1885 [xfs_mru_cache]
root 0 0 01:30:35 491-23:21:07 1886 [xfslogd/0]
root 0 0 00:00:00 491-23:21:07 1887 [xfslogd/1]
root 0 0 00:03:32 491-23:21:07 1888 [xfslogd/2]
root 0 0 00:00:00 491-23:21:07 1889 [xfslogd/3]
root 0 0 02:35:54 491-23:21:07 1890 [xfslogd/4]
root 0 0 00:00:00 491-23:21:07 1891 [xfslogd/5]
root 0 0 00:00:00 491-23:21:07 1892 [xfslogd/6]
root 0 0 00:00:00 491-23:21:07 1893 [xfslogd/7]
root 0 0 02:42:55 491-23:21:07 1894 [xfsdatad/0]
root 0 0 00:00:00 491-23:21:07 1895 [xfsdatad/1]
root 0 0 00:02:18 491-23:21:07 1896 [xfsdatad/2]
root 0 0 00:00:00 491-23:21:07 1897 [xfsdatad/3]
root 0 0 03:03:16 491-23:21:07 1898 [xfsdatad/4]
root 0 0 00:00:00 491-23:21:07 1899 [xfsdatad/5]
root 0 0 00:00:00 491-23:21:07 1900 [xfsdatad/6]
root 0 0 00:00:00 491-23:21:07 1901 [xfsdatad/7]
root 0 0 00:00:00 491-23:21:07 1902 [xfsconvertd/0]
root 0 0 00:00:00 491-23:21:07 1903 [xfsconvertd/1]
root 0 0 00:00:00 491-23:21:07 1904 [xfsconvertd/2]
root 0 0 00:00:00 491-23:21:07 1905 [xfsconvertd/3]
root 0 0 00:00:00 491-23:21:07 1906 [xfsconvertd/4]
root 0 0 00:00:00 491-23:21:07 1907 [xfsconvertd/5]
root 0 0 00:00:00 491-23:21:07 1908 [xfsconvertd/6]
root 0 0 00:00:00 491-23:21:07 1909 [xfsconvertd/7]
root 0 0 00:00:02 491-23:21:07 1910 [xfsalloc/0]
root 0 0 00:00:02 491-23:21:07 1911 [xfsalloc/1]
root 0 0 00:00:02 491-23:21:07 1912 [xfsalloc/2]
root 0 0 00:00:03 491-23:21:07 1913 [xfsalloc/3]
root 0 0 00:00:02 491-23:21:07 1914 [xfsalloc/4]
root 0 0 00:00:02 491-23:21:07 1915 [xfsalloc/5]
root 0 0 00:00:03 491-23:21:07 1916 [xfsalloc/6]
root 0 0 00:00:04 491-23:21:07 1917 [xfsalloc/7]
root 0 0 00:00:10 491-23:21:07 1918 [xfseofblocks/0]
root 0 0 00:00:06 491-23:21:07 1919 [xfseofblocks/1]
root 0 0 00:00:09 491-23:21:07 1920 [xfseofblocks/2]
root 0 0 00:00:10 491-23:21:07 1921 [xfseofblocks/3]
root 0 0 00:00:06 491-23:21:07 1922 [xfseofblocks/4]
root 0 0 00:00:09 491-23:21:07 1923 [xfseofblocks/5]
root 0 0 00:00:04 491-23:21:07 1924 [xfseofblocks/6]
root 0 0 00:02:37 491-23:21:07 1925 [xfseofblocks/7]
root 0 0 00:27:47 491-23:21:07 1926 [xfsbufd/md5]
root 0 0 00:24:52 491-23:21:07 1927 [xfs-cil/md5]
root 0 0 00:53:05 491-23:21:07 1928 [xfssyncd/md5]
root 0 0 05:54:27 491-23:21:07 1929 [xfsaild/md5]
root 0 0 00:03:10 491-23:21:06 1930 [jbd2/md2-8]
root 0 0 00:00:00 491-23:21:06 1931 [ext4-dio-unwrit]
root 0 0 00:07:27 491-23:21:06 1932 [xfsbufd/md4]
root 0 0 00:00:45 491-23:21:06 1933 [xfs-cil/md4]
root 0 0 00:03:26 491-23:21:06 1934 [xfssyncd/md4]
root 0 0 05:36:26 491-23:21:06 1935 [xfsaild/md4]
root 0 0 00:22:33 491-23:21:06 1936 [xfsbufd/md3]
root 0 0 00:18:28 491-23:21:06 1937 [xfs-cil/md3]
root 0 0 00:04:07 491-23:21:06 1938 [xfssyncd/md3]
root 0 0 05:45:26 491-23:21:06 1939 [xfsaild/md3]
root 0 0 00:35:10 491-23:21:06 1940 [xfsbufd/sdc1]
root 0 0 00:39:21 491-23:21:06 1941 [xfs-cil/sdc1]
root 0 0 11:19:16 491-23:21:06 1942 [xfssyncd/sdc1]
root 0 0 1-06:00:35 491-23:21:06 1943 [xfsaild/sdc1]
root 0 0 00:06:07 491-23:21:05 1999 [kauditd]
root 29764 704 00:15:05 491-23:20:48 2254 auditd
root 252156 31224 02:39:09 491-23:20:47 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18368 560 03:36:29 491-23:20:47 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:34 491-23:20:46 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 491-23:20:46 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:39:30 491-23:20:46 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:14 491-23:20:45 2492 /usr/sbin/sshd
root 71720 2008 00:32:58 491-23:20:40 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:50 491-23:20:40 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:43 491-23:20:40 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:11 491-23:20:40 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:05 491-23:20:40 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:02 491-23:20:29 3359 crond
root 107544 436 00:00:25 491-23:20:27 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 491-23:20:22 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 491-23:20:22 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 491-23:20:22 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 491-23:20:22 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 491-23:20:22 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 491-23:20:22 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 491-23:20:22 3491 /sbin/udevd -d
root 11232 260 00:00:00 491-23:20:22 3492 /sbin/udevd -d
root 163092 1628 00:00:44 476-20:45:35 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 572 00:00:00 90-10:31:06 43438 SCREEN -O
root 108452 1384 00:00:00 90-10:31:06 43439 /bin/bash
root 108452 1388 00:00:00 90-10:30:03 43486 /bin/bash
root 0 0 00:02:07 491-20:58:46 57735 [flush-9:2]
root 0 0 00:02:00 491-20:23:50 68416 [flush-9:1]
root 63348 4216 00:21:05 390-02:34:10 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 390-02:13:36 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1570976 736-03:03:45 390-02:13:35 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 95868 3052 00:00:00 36:14 104319 sendmail: server host-185-22-58-52.mywic.eu [185.22.58.52] cmd read
apache 624920 119676 00:00:20 21:30 107114 /usr/sbin/httpd -DSSL
apache 612920 104764 00:00:19 21:26 107115 /usr/sbin/httpd -DSSL
apache 609064 114348 00:00:28 20:37 107117 /usr/sbin/httpd -DSSL
apache 586072 81556 00:00:23 20:12 107123 /usr/sbin/httpd -DSSL
apache 598204 102088 00:00:25 17:32 107541 /usr/sbin/httpd -DSSL
apache 604008 106188 00:00:16 16:53 107755 /usr/sbin/httpd -DSSL
apache 588884 93812 00:00:28 16:52 107790 /usr/sbin/httpd -DSSL
apache 592836 95804 00:00:23 16:52 107791 /usr/sbin/httpd -DSSL
apache 601036 98884 00:00:25 16:51 107809 /usr/sbin/httpd -DSSL
apache 604980 99128 00:00:18 16:51 107810 /usr/sbin/httpd -DSSL
apache 585716 83916 00:00:15 16:51 107811 /usr/sbin/httpd -DSSL
apache 602772 98552 00:00:24 11:32 108415 /usr/sbin/httpd -DSSL
root 40060 2036 00:00:00 09:41 108588 dovecot/ssl-params
apache 585404 79484 00:00:12 07:09 109004 /usr/sbin/httpd -DSSL
apache 607360 87584 00:00:11 06:56 109005 /usr/sbin/httpd -DSSL
apache 592816 72712 00:00:11 06:53 109017 /usr/sbin/httpd -DSSL
apache 589976 91272 00:00:12 06:51 109066 /usr/sbin/httpd -DSSL
apache 641576 135180 00:00:08 06:46 109150 /usr/sbin/httpd -DSSL
apache 666848 146996 00:00:08 06:45 109151 /usr/sbin/httpd -DSSL
apache 586784 75012 00:00:10 06:45 109152 /usr/sbin/httpd -DSSL
apache 606276 97648 00:00:08 04:56 109339 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 04:51 109372 [flush-9:4]
root 96124 3556 00:00:00 04:35 109374 sendmail: ./48E9tZLt127883 ochre.school.za.: user open
root 96124 3364 00:00:00 01:35 109970 sendmail: ./48HICQc1090029 mx01.corp.cablevision.net.mx.: user open
apache 583360 46880 00:00:01 00:44 109976 /usr/sbin/httpd -DSSL
root 96124 3464 00:00:00 00:35 109977 sendmail: ./48H3ZAXP208830 mail.lightedge.co.za.: user open
apache 565060 24204 00:00:00 00:08 109982 /usr/sbin/httpd -DSSL
apache 565028 22740 00:00:00 00:07 109983 /usr/sbin/httpd -DSSL
apache 744804 199196 00:00:00 00:07 109984 /usr/sbin/httpd -DSSL
root 95620 1772 00:00:00 00:05 109985 sendmail: startup with [165.154.213.180]
root 110772 2080 00:00:00 00:01 110076 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:01 110098 /bin/bash /usr/bin/check_mk_agent
root 110772 1260 00:00:00 00:01 110099 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 110101 cat
root 110900 1180 00:00:00 00:00 110126 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:00 110127 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:00 110128 tr -s 
root 21712 768 00:00:13 89-20:42:53 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:01:32 18-11:05:55 181185 [flush-9:5]
root 564572 32568 00:04:53 18-10:57:22 182912 /usr/sbin/httpd -DSSL
root 19260 796 00:00:00 18:18:04 196245 /usr/sbin/dovecot
dovecot 12980 1084 00:00:00 18:18:04 196248 dovecot/anvil
root 13108 1196 00:00:00 18:18:04 196249 dovecot/log
root 266544 74676 00:00:14 16:28:12 212496 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269760 77912 00:00:22 16:28:08 212498 spamd child
root 266544 72164 00:00:00 16:28:08 212499 spamd child
root 154784 45448 00:00:41 385-20:45:41 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:46 428-11:27:51 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:55:54 428-11:27:51 238030 sendmail: accepting connections
named 724240 39736 03:22:32 428-11:27:36 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-17 20:28

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e40563bde1

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1726433228
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:42 489-23:39:28 1 /sbin/init
root 0 0 00:00:01 489-23:39:28 2 [kthreadd]
root 0 0 21:01:49 489-23:39:28 3 [migration/0]
root 0 0 00:59:29 489-23:39:28 4 [ksoftirqd/0]
root 0 0 00:00:00 489-23:39:28 5 [stopper/0]
root 0 0 00:15:10 489-23:39:28 6 [watchdog/0]
root 0 0 09:02:41 489-23:39:28 7 [migration/1]
root 0 0 00:00:00 489-23:39:28 8 [stopper/1]
root 0 0 01:34:32 489-23:39:28 9 [ksoftirqd/1]
root 0 0 00:19:10 489-23:39:28 10 [watchdog/1]
root 0 0 05:56:38 489-23:39:28 11 [migration/2]
root 0 0 00:00:00 489-23:39:28 12 [stopper/2]
root 0 0 00:45:43 489-23:39:28 13 [ksoftirqd/2]
root 0 0 00:16:43 489-23:39:28 14 [watchdog/2]
root 0 0 04:12:32 489-23:39:28 15 [migration/3]
root 0 0 00:00:00 489-23:39:28 16 [stopper/3]
root 0 0 00:32:36 489-23:39:28 17 [ksoftirqd/3]
root 0 0 00:13:13 489-23:39:28 18 [watchdog/3]
root 0 0 14:44:32 489-23:39:28 19 [migration/4]
root 0 0 00:00:00 489-23:39:28 20 [stopper/4]
root 0 0 00:51:49 489-23:39:28 21 [ksoftirqd/4]
root 0 0 00:07:48 489-23:39:28 22 [watchdog/4]
root 0 0 08:24:12 489-23:39:28 23 [migration/5]
root 0 0 00:00:00 489-23:39:28 24 [stopper/5]
root 0 0 00:36:41 489-23:39:28 25 [ksoftirqd/5]
root 0 0 00:17:12 489-23:39:28 26 [watchdog/5]
root 0 0 05:04:21 489-23:39:28 27 [migration/6]
root 0 0 00:00:00 489-23:39:28 28 [stopper/6]
root 0 0 00:27:52 489-23:39:28 29 [ksoftirqd/6]
root 0 0 00:12:46 489-23:39:28 30 [watchdog/6]
root 0 0 03:59:42 489-23:39:28 31 [migration/7]
root 0 0 00:00:00 489-23:39:28 32 [stopper/7]
root 0 0 00:27:04 489-23:39:28 33 [ksoftirqd/7]
root 0 0 00:10:04 489-23:39:28 34 [watchdog/7]
root 0 0 02:17:36 489-23:39:28 35 [events/0]
root 0 0 01:26:37 489-23:39:28 36 [events/1]
root 0 0 01:28:50 489-23:39:28 37 [events/2]
root 0 0 01:31:19 489-23:39:28 38 [events/3]
root 0 0 01:18:17 489-23:39:28 39 [events/4]
root 0 0 01:13:45 489-23:39:28 40 [events/5]
root 0 0 01:20:03 489-23:39:28 41 [events/6]
root 0 0 01:22:52 489-23:39:28 42 [events/7]
root 0 0 00:00:00 489-23:39:28 43 [events/0]
root 0 0 00:00:00 489-23:39:28 44 [events/1]
root 0 0 00:00:00 489-23:39:28 45 [events/2]
root 0 0 00:00:00 489-23:39:28 46 [events/3]
root 0 0 00:00:00 489-23:39:28 47 [events/4]
root 0 0 00:00:00 489-23:39:28 48 [events/5]
root 0 0 00:00:00 489-23:39:28 49 [events/6]
root 0 0 00:00:00 489-23:39:28 50 [events/7]
root 0 0 00:00:00 489-23:39:28 51 [events_long/0]
root 0 0 00:00:00 489-23:39:28 52 [events_long/1]
root 0 0 00:00:00 489-23:39:28 53 [events_long/2]
root 0 0 00:00:00 489-23:39:28 54 [events_long/3]
root 0 0 00:00:00 489-23:39:28 55 [events_long/4]
root 0 0 00:00:00 489-23:39:28 56 [events_long/5]
root 0 0 00:00:00 489-23:39:28 57 [events_long/6]
root 0 0 00:00:00 489-23:39:28 58 [events_long/7]
root 0 0 00:00:00 489-23:39:28 59 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 60 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 61 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 62 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 63 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 64 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 65 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 66 [events_power_ef]
root 0 0 00:00:00 489-23:39:28 67 [cgroup]
root 0 0 00:00:00 489-23:39:28 68 [khelper]
root 0 0 00:00:00 489-23:39:28 69 [netns]
root 0 0 00:00:00 489-23:39:28 70 [async/mgr]
root 0 0 00:00:00 489-23:39:28 71 [pm]
root 0 0 00:04:50 489-23:39:28 72 [sync_supers]
root 0 0 00:00:12 489-23:39:28 73 [bdi-default]
root 0 0 00:00:00 489-23:39:28 74 [kintegrityd/0]
root 0 0 00:00:00 489-23:39:28 75 [kintegrityd/1]
root 0 0 00:00:00 489-23:39:28 76 [kintegrityd/2]
root 0 0 00:00:00 489-23:39:28 77 [kintegrityd/3]
root 0 0 00:00:00 489-23:39:28 78 [kintegrityd/4]
root 0 0 00:00:00 489-23:39:28 79 [kintegrityd/5]
root 0 0 00:00:00 489-23:39:28 80 [kintegrityd/6]
root 0 0 00:00:00 489-23:39:28 81 [kintegrityd/7]
root 0 0 05:57:53 489-23:39:28 82 [kblockd/0]
root 0 0 00:11:20 489-23:39:28 83 [kblockd/1]
root 0 0 00:23:10 489-23:39:28 84 [kblockd/2]
root 0 0 00:04:24 489-23:39:28 85 [kblockd/3]
root 0 0 10:30:20 489-23:39:28 86 [kblockd/4]
root 0 0 00:13:35 489-23:39:28 87 [kblockd/5]
root 0 0 00:09:00 489-23:39:28 88 [kblockd/6]
root 0 0 00:06:54 489-23:39:28 89 [kblockd/7]
root 0 0 00:00:00 489-23:39:28 90 [kacpid]
root 0 0 00:00:00 489-23:39:28 91 [kacpi_notify]
root 0 0 00:00:00 489-23:39:28 92 [kacpi_hotplug]
root 0 0 00:00:00 489-23:39:28 93 [ata_aux]
root 0 0 00:00:00 489-23:39:28 94 [ata_sff/0]
root 0 0 00:00:00 489-23:39:28 95 [ata_sff/1]
root 0 0 00:00:00 489-23:39:28 96 [ata_sff/2]
root 0 0 00:00:00 489-23:39:28 97 [ata_sff/3]
root 0 0 00:00:00 489-23:39:28 98 [ata_sff/4]
root 0 0 00:00:00 489-23:39:28 99 [ata_sff/5]
root 0 0 00:00:00 489-23:39:28 100 [ata_sff/6]
root 0 0 00:00:00 489-23:39:28 101 [ata_sff/7]
root 0 0 00:00:00 489-23:39:28 102 [ksuspend_usbd]
root 0 0 00:00:00 489-23:39:28 103 [khubd]
root 0 0 00:00:00 489-23:39:28 104 [kseriod]
root 0 0 00:00:00 489-23:39:28 105 [md/0]
root 0 0 00:00:00 489-23:39:28 106 [md/1]
root 0 0 00:00:00 489-23:39:28 107 [md/2]
root 0 0 00:00:00 489-23:39:28 108 [md/3]
root 0 0 00:00:00 489-23:39:28 109 [md/4]
root 0 0 00:00:00 489-23:39:28 110 [md/5]
root 0 0 00:00:00 489-23:39:28 111 [md/6]
root 0 0 00:00:00 489-23:39:28 112 [md/7]
root 0 0 00:00:00 489-23:39:28 113 [md_misc/0]
root 0 0 00:00:00 489-23:39:28 114 [md_misc/1]
root 0 0 00:00:00 489-23:39:28 115 [md_misc/2]
root 0 0 00:00:00 489-23:39:28 116 [md_misc/3]
root 0 0 00:00:00 489-23:39:28 117 [md_misc/4]
root 0 0 00:00:00 489-23:39:28 118 [md_misc/5]
root 0 0 00:00:00 489-23:39:28 119 [md_misc/6]
root 0 0 00:00:00 489-23:39:28 120 [md_misc/7]
root 0 0 00:00:00 489-23:39:28 121 [linkwatch]
root 0 0 00:01:02 489-23:39:27 124 [khungtaskd]
root 0 0 1-01:24:44 489-23:39:27 125 [kswapd1]
root 0 0 00:00:00 489-23:39:27 126 [ksmd]
root 0 0 03:29:52 489-23:39:27 127 [khugepaged]
root 0 0 00:00:00 489-23:39:27 128 [aio/0]
root 0 0 00:00:00 489-23:39:27 129 [aio/1]
root 0 0 00:00:00 489-23:39:27 130 [aio/2]
root 0 0 00:00:00 489-23:39:27 131 [aio/3]
root 0 0 00:00:00 489-23:39:27 132 [aio/4]
root 0 0 00:00:00 489-23:39:27 133 [aio/5]
root 0 0 00:00:00 489-23:39:27 134 [aio/6]
root 0 0 00:00:00 489-23:39:27 135 [aio/7]
root 0 0 00:00:00 489-23:39:27 136 [crypto/0]
root 0 0 00:00:00 489-23:39:27 137 [crypto/1]
root 0 0 00:00:00 489-23:39:27 138 [crypto/2]
root 0 0 00:00:00 489-23:39:27 139 [crypto/3]
root 0 0 00:00:00 489-23:39:27 140 [crypto/4]
root 0 0 00:00:00 489-23:39:27 141 [crypto/5]
root 0 0 00:00:00 489-23:39:27 142 [crypto/6]
root 0 0 00:00:00 489-23:39:27 143 [crypto/7]
root 0 0 00:00:00 489-23:39:27 150 [kthrotld/0]
root 0 0 00:00:00 489-23:39:27 151 [kthrotld/1]
root 0 0 00:00:00 489-23:39:27 152 [kthrotld/2]
root 0 0 00:00:00 489-23:39:27 153 [kthrotld/3]
root 0 0 00:00:00 489-23:39:27 154 [kthrotld/4]
root 0 0 00:00:00 489-23:39:27 155 [kthrotld/5]
root 0 0 00:00:00 489-23:39:27 156 [kthrotld/6]
root 0 0 00:00:00 489-23:39:27 157 [kthrotld/7]
root 0 0 00:00:00 489-23:39:27 160 [kpsmoused]
root 0 0 00:00:00 489-23:39:27 161 [usbhid_resumer]
root 0 0 00:00:00 489-23:39:27 162 [deferwq]
root 0 0 00:00:00 489-23:39:27 194 [kdmremove]
root 0 0 00:00:00 489-23:39:27 195 [kstriped]
root 0 0 00:00:00 489-23:39:25 734 [scsi_eh_0]
root 0 0 00:00:00 489-23:39:25 735 [scsi_wq_0]
root 0 0 00:00:00 489-23:39:25 748 [scsi_eh_1]
root 0 0 00:00:00 489-23:39:25 749 [scsi_eh_2]
root 0 0 00:00:00 489-23:39:25 750 [scsi_eh_3]
root 0 0 00:00:00 489-23:39:25 751 [scsi_eh_4]
root 0 0 00:00:00 489-23:39:25 752 [scsi_eh_5]
root 0 0 00:00:00 489-23:39:25 753 [scsi_eh_6]
root 0 0 00:52:32 489-23:39:24 950 [md1_raid1]
root 0 0 00:03:09 489-23:39:23 1011 [jbd2/md1-8]
root 0 0 00:00:00 489-23:39:23 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 489-23:39:22 1105 /sbin/udevd -d
root 0 0 00:29:55 489-23:39:22 1225 [edac-poller]
root 0 0 00:09:59 489-23:39:21 1259 [md0_raid1]
root 0 0 02:13:44 489-23:39:21 1288 [md3_raid1]
root 0 0 2-12:19:48 489-23:39:21 1310 [md5_raid1]
root 0 0 01:02:57 489-23:39:21 1322 [md4_raid1]
root 0 0 00:29:07 489-23:39:21 1336 [md2_raid1]
root 0 0 00:16:53 489-23:39:19 1844 [flush-9:3]
root 0 0 00:00:00 489-23:39:19 1881 [jbd2/md0-8]
root 0 0 00:00:00 489-23:39:19 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 489-23:39:19 1885 [xfs_mru_cache]
root 0 0 01:30:10 489-23:39:19 1886 [xfslogd/0]
root 0 0 00:00:00 489-23:39:19 1887 [xfslogd/1]
root 0 0 00:03:32 489-23:39:19 1888 [xfslogd/2]
root 0 0 00:00:00 489-23:39:19 1889 [xfslogd/3]
root 0 0 02:35:18 489-23:39:19 1890 [xfslogd/4]
root 0 0 00:00:00 489-23:39:19 1891 [xfslogd/5]
root 0 0 00:00:00 489-23:39:19 1892 [xfslogd/6]
root 0 0 00:00:00 489-23:39:19 1893 [xfslogd/7]
root 0 0 02:41:50 489-23:39:19 1894 [xfsdatad/0]
root 0 0 00:00:00 489-23:39:19 1895 [xfsdatad/1]
root 0 0 00:02:18 489-23:39:19 1896 [xfsdatad/2]
root 0 0 00:00:00 489-23:39:19 1897 [xfsdatad/3]
root 0 0 03:02:08 489-23:39:19 1898 [xfsdatad/4]
root 0 0 00:00:00 489-23:39:19 1899 [xfsdatad/5]
root 0 0 00:00:00 489-23:39:19 1900 [xfsdatad/6]
root 0 0 00:00:00 489-23:39:19 1901 [xfsdatad/7]
root 0 0 00:00:00 489-23:39:19 1902 [xfsconvertd/0]
root 0 0 00:00:00 489-23:39:19 1903 [xfsconvertd/1]
root 0 0 00:00:00 489-23:39:19 1904 [xfsconvertd/2]
root 0 0 00:00:00 489-23:39:19 1905 [xfsconvertd/3]
root 0 0 00:00:00 489-23:39:19 1906 [xfsconvertd/4]
root 0 0 00:00:00 489-23:39:19 1907 [xfsconvertd/5]
root 0 0 00:00:00 489-23:39:19 1908 [xfsconvertd/6]
root 0 0 00:00:00 489-23:39:19 1909 [xfsconvertd/7]
root 0 0 00:00:02 489-23:39:19 1910 [xfsalloc/0]
root 0 0 00:00:02 489-23:39:19 1911 [xfsalloc/1]
root 0 0 00:00:02 489-23:39:19 1912 [xfsalloc/2]
root 0 0 00:00:03 489-23:39:19 1913 [xfsalloc/3]
root 0 0 00:00:02 489-23:39:19 1914 [xfsalloc/4]
root 0 0 00:00:02 489-23:39:19 1915 [xfsalloc/5]
root 0 0 00:00:03 489-23:39:19 1916 [xfsalloc/6]
root 0 0 00:00:04 489-23:39:19 1917 [xfsalloc/7]
root 0 0 00:00:10 489-23:39:19 1918 [xfseofblocks/0]
root 0 0 00:00:06 489-23:39:19 1919 [xfseofblocks/1]
root 0 0 00:00:09 489-23:39:19 1920 [xfseofblocks/2]
root 0 0 00:00:10 489-23:39:19 1921 [xfseofblocks/3]
root 0 0 00:00:06 489-23:39:19 1922 [xfseofblocks/4]
root 0 0 00:00:09 489-23:39:19 1923 [xfseofblocks/5]
root 0 0 00:00:04 489-23:39:19 1924 [xfseofblocks/6]
root 0 0 00:02:36 489-23:39:19 1925 [xfseofblocks/7]
root 0 0 00:27:39 489-23:39:19 1926 [xfsbufd/md5]
root 0 0 00:24:43 489-23:39:19 1927 [xfs-cil/md5]
root 0 0 00:52:52 489-23:39:19 1928 [xfssyncd/md5]
root 0 0 05:52:16 489-23:39:19 1929 [xfsaild/md5]
root 0 0 00:03:09 489-23:39:18 1930 [jbd2/md2-8]
root 0 0 00:00:00 489-23:39:18 1931 [ext4-dio-unwrit]
root 0 0 00:07:24 489-23:39:18 1932 [xfsbufd/md4]
root 0 0 00:00:45 489-23:39:18 1933 [xfs-cil/md4]
root 0 0 00:03:25 489-23:39:18 1934 [xfssyncd/md4]
root 0 0 05:34:20 489-23:39:18 1935 [xfsaild/md4]
root 0 0 00:22:25 489-23:39:18 1936 [xfsbufd/md3]
root 0 0 00:18:25 489-23:39:18 1937 [xfs-cil/md3]
root 0 0 00:04:06 489-23:39:18 1938 [xfssyncd/md3]
root 0 0 05:43:13 489-23:39:18 1939 [xfsaild/md3]
root 0 0 00:35:00 489-23:39:18 1940 [xfsbufd/sdc1]
root 0 0 00:39:10 489-23:39:18 1941 [xfs-cil/sdc1]
root 0 0 11:13:34 489-23:39:18 1942 [xfssyncd/sdc1]
root 0 0 1-05:54:16 489-23:39:18 1943 [xfsaild/sdc1]
root 0 0 00:06:06 489-23:39:17 1999 [kauditd]
root 29764 704 00:15:03 489-23:39:00 2254 auditd
root 252156 31224 02:38:50 489-23:38:59 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:35:42 489-23:38:59 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:34 489-23:38:58 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 489-23:38:58 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:39:16 489-23:38:58 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:13 489-23:38:57 2492 /usr/sbin/sshd
root 71720 2008 00:32:57 489-23:38:52 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:49 489-23:38:52 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:41 489-23:38:52 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:09 489-23:38:52 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:04 489-23:38:52 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:08:00 489-23:38:41 3359 crond
root 107544 436 00:00:25 489-23:38:39 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 489-23:38:34 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 489-23:38:34 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 489-23:38:34 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 489-23:38:34 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 489-23:38:34 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 489-23:38:34 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 489-23:38:34 3491 /sbin/udevd -d
root 11232 260 00:00:00 489-23:38:34 3492 /sbin/udevd -d
root 163092 1628 00:00:44 474-21:03:47 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 19260 792 00:00:00 18:38:05 26595 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 18:38:05 26597 dovecot/anvil
root 13108 1196 00:00:00 18:38:05 26598 dovecot/log
root 266604 74732 00:00:15 16:50:40 42488 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269108 76904 00:00:35 16:50:36 42490 spamd child
root 266604 72220 00:00:00 16:50:36 42492 spamd child
root 118780 572 00:00:00 88-10:49:18 43438 SCREEN -O
root 108452 1384 00:00:00 88-10:49:18 43439 /bin/bash
root 108452 1388 00:00:00 88-10:48:15 43486 /bin/bash
root 0 0 00:02:07 489-21:16:58 57735 [flush-9:2]
root 0 0 00:01:59 489-20:42:02 68416 [flush-9:1]
root 63348 4216 00:20:59 388-02:52:22 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 388-02:31:48 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1593704 728-01:23:05 388-02:31:47 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 21712 768 00:00:12 87-21:01:05 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:01:21 16-11:24:07 181185 [flush-9:5]
apache 586868 93652 00:00:49 34:23 182047 /usr/sbin/httpd -DSSL
apache 586520 91556 00:00:30 31:04 182420 /usr/sbin/httpd -DSSL
root 564572 32568 00:04:24 16-11:15:34 182912 /usr/sbin/httpd -DSSL
apache 590776 89404 00:00:43 23:20 183383 /usr/sbin/httpd -DSSL
apache 599464 106280 00:00:32 21:52 183605 /usr/sbin/httpd -DSSL
apache 607896 94704 00:00:21 21:11 183749 /usr/sbin/httpd -DSSL
apache 586340 85520 00:00:18 20:52 183751 /usr/sbin/httpd -DSSL
apache 588348 84164 00:00:11 18:35 184042 /usr/sbin/httpd -DSSL
apache 590080 85228 00:00:17 18:18 184046 /usr/sbin/httpd -DSSL
apache 588612 92976 00:00:19 18:03 184047 /usr/sbin/httpd -DSSL
apache 595644 92132 00:00:15 16:30 184314 /usr/sbin/httpd -DSSL
apache 586496 99988 00:00:22 16:29 184330 /usr/sbin/httpd -DSSL
apache 603636 103040 00:00:15 16:29 184331 /usr/sbin/httpd -DSSL
apache 588528 86148 00:00:15 15:05 184509 /usr/sbin/httpd -DSSL
apache 609764 105836 00:00:11 10:35 185186 /usr/sbin/httpd -DSSL
apache 599876 84420 00:00:12 09:48 185313 /usr/sbin/httpd -DSSL
apache 656072 159588 00:00:05 09:25 185315 /usr/sbin/httpd -DSSL
apache 585592 75908 00:00:10 08:47 185323 /usr/sbin/httpd -DSSL
apache 586176 82620 00:00:09 08:37 185324 /usr/sbin/httpd -DSSL
apache 585244 79336 00:00:13 08:35 185326 /usr/sbin/httpd -DSSL
apache 586220 75828 00:00:13 08:26 185327 /usr/sbin/httpd -DSSL
apache 601524 74924 00:00:10 07:25 185484 /usr/sbin/httpd -DSSL
apache 584156 66044 00:00:03 04:19 186032 /usr/sbin/httpd -DSSL
apache 602256 82544 00:00:04 04:11 186033 /usr/sbin/httpd -DSSL
apache 583068 67556 00:00:01 03:05 186040 /usr/sbin/httpd -DSSL
root 96488 5340 00:00:00 02:51 186041 sendmail: ./48BF6wpf025844 mail.msn.fr.: user open
root 0 0 00:00:00 02:03 186263 [flush-9:4]
root 96124 3344 00:00:00 01:51 186264 sendmail: ./48B00X4i138147 sintelti.com.mx.: user open
root 96484 5300 00:00:00 00:51 186405 sendmail: ./48BF3PT5025492 mail.msn.fr.: user open
root 117348 64908 00:00:00 00:05 186407 /usr/local/webmin/webmin-1.860/webmincron/webmincron.pl
root 136484 82876 00:00:01 00:04 186408 /usr/local/webmin/webmin-1.860/virtual-server/collectinfo.pl
root 110772 2076 00:00:00 00:01 186540 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:01 186566 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 186567 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 186575 cat
root 110900 1180 00:00:00 00:01 186594 /bin/bash /usr/bin/check_mk_agent
root 13364 1016 00:00:00 00:01 186595 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 186596 tr -s 
root 154784 45448 00:00:41 383-21:03:53 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:44 426-11:46:03 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:55:37 426-11:46:03 238030 sendmail: accepting connections
named 724240 39724 03:21:28 426-11:45:48 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-15 20:47

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e4d312a76e

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1726259871
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:42 487-23:30:11 1 /sbin/init
root 0 0 00:00:01 487-23:30:11 2 [kthreadd]
root 0 0 20:52:58 487-23:30:11 3 [migration/0]
root 0 0 00:59:13 487-23:30:11 4 [ksoftirqd/0]
root 0 0 00:00:00 487-23:30:11 5 [stopper/0]
root 0 0 00:15:06 487-23:30:11 6 [watchdog/0]
root 0 0 08:54:39 487-23:30:11 7 [migration/1]
root 0 0 00:00:00 487-23:30:11 8 [stopper/1]
root 0 0 01:34:15 487-23:30:11 9 [ksoftirqd/1]
root 0 0 00:18:59 487-23:30:11 10 [watchdog/1]
root 0 0 05:50:47 487-23:30:11 11 [migration/2]
root 0 0 00:00:00 487-23:30:11 12 [stopper/2]
root 0 0 00:45:30 487-23:30:11 13 [ksoftirqd/2]
root 0 0 00:16:31 487-23:30:11 14 [watchdog/2]
root 0 0 04:06:21 487-23:30:11 15 [migration/3]
root 0 0 00:00:00 487-23:30:11 16 [stopper/3]
root 0 0 00:32:24 487-23:30:11 17 [ksoftirqd/3]
root 0 0 00:13:05 487-23:30:11 18 [watchdog/3]
root 0 0 14:36:24 487-23:30:11 19 [migration/4]
root 0 0 00:00:00 487-23:30:11 20 [stopper/4]
root 0 0 00:51:38 487-23:30:11 21 [ksoftirqd/4]
root 0 0 00:07:46 487-23:30:11 22 [watchdog/4]
root 0 0 08:16:47 487-23:30:11 23 [migration/5]
root 0 0 00:00:00 487-23:30:11 24 [stopper/5]
root 0 0 00:36:34 487-23:30:11 25 [ksoftirqd/5]
root 0 0 00:17:06 487-23:30:11 26 [watchdog/5]
root 0 0 04:57:34 487-23:30:11 27 [migration/6]
root 0 0 00:00:00 487-23:30:11 28 [stopper/6]
root 0 0 00:27:46 487-23:30:11 29 [ksoftirqd/6]
root 0 0 00:12:36 487-23:30:11 30 [watchdog/6]
root 0 0 03:52:36 487-23:30:11 31 [migration/7]
root 0 0 00:00:00 487-23:30:11 32 [stopper/7]
root 0 0 00:26:56 487-23:30:11 33 [ksoftirqd/7]
root 0 0 00:09:57 487-23:30:11 34 [watchdog/7]
root 0 0 02:16:56 487-23:30:11 35 [events/0]
root 0 0 01:26:07 487-23:30:11 36 [events/1]
root 0 0 01:28:20 487-23:30:11 37 [events/2]
root 0 0 01:30:50 487-23:30:11 38 [events/3]
root 0 0 01:17:55 487-23:30:11 39 [events/4]
root 0 0 01:13:24 487-23:30:11 40 [events/5]
root 0 0 01:19:41 487-23:30:11 41 [events/6]
root 0 0 01:22:24 487-23:30:11 42 [events/7]
root 0 0 00:00:00 487-23:30:11 43 [events/0]
root 0 0 00:00:00 487-23:30:11 44 [events/1]
root 0 0 00:00:00 487-23:30:11 45 [events/2]
root 0 0 00:00:00 487-23:30:11 46 [events/3]
root 0 0 00:00:00 487-23:30:11 47 [events/4]
root 0 0 00:00:00 487-23:30:11 48 [events/5]
root 0 0 00:00:00 487-23:30:11 49 [events/6]
root 0 0 00:00:00 487-23:30:11 50 [events/7]
root 0 0 00:00:00 487-23:30:11 51 [events_long/0]
root 0 0 00:00:00 487-23:30:11 52 [events_long/1]
root 0 0 00:00:00 487-23:30:11 53 [events_long/2]
root 0 0 00:00:00 487-23:30:11 54 [events_long/3]
root 0 0 00:00:00 487-23:30:11 55 [events_long/4]
root 0 0 00:00:00 487-23:30:11 56 [events_long/5]
root 0 0 00:00:00 487-23:30:11 57 [events_long/6]
root 0 0 00:00:00 487-23:30:11 58 [events_long/7]
root 0 0 00:00:00 487-23:30:11 59 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 60 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 61 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 62 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 63 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 64 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 65 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 66 [events_power_ef]
root 0 0 00:00:00 487-23:30:11 67 [cgroup]
root 0 0 00:00:00 487-23:30:11 68 [khelper]
root 0 0 00:00:00 487-23:30:11 69 [netns]
root 0 0 00:00:00 487-23:30:11 70 [async/mgr]
root 0 0 00:00:00 487-23:30:11 71 [pm]
root 0 0 00:04:48 487-23:30:11 72 [sync_supers]
root 0 0 00:00:12 487-23:30:11 73 [bdi-default]
root 0 0 00:00:00 487-23:30:11 74 [kintegrityd/0]
root 0 0 00:00:00 487-23:30:11 75 [kintegrityd/1]
root 0 0 00:00:00 487-23:30:11 76 [kintegrityd/2]
root 0 0 00:00:00 487-23:30:11 77 [kintegrityd/3]
root 0 0 00:00:00 487-23:30:11 78 [kintegrityd/4]
root 0 0 00:00:00 487-23:30:11 79 [kintegrityd/5]
root 0 0 00:00:00 487-23:30:11 80 [kintegrityd/6]
root 0 0 00:00:00 487-23:30:11 81 [kintegrityd/7]
root 0 0 05:56:10 487-23:30:11 82 [kblockd/0]
root 0 0 00:11:16 487-23:30:11 83 [kblockd/1]
root 0 0 00:23:09 487-23:30:11 84 [kblockd/2]
root 0 0 00:04:23 487-23:30:11 85 [kblockd/3]
root 0 0 10:27:13 487-23:30:11 86 [kblockd/4]
root 0 0 00:13:33 487-23:30:11 87 [kblockd/5]
root 0 0 00:08:59 487-23:30:11 88 [kblockd/6]
root 0 0 00:06:52 487-23:30:11 89 [kblockd/7]
root 0 0 00:00:00 487-23:30:11 90 [kacpid]
root 0 0 00:00:00 487-23:30:11 91 [kacpi_notify]
root 0 0 00:00:00 487-23:30:11 92 [kacpi_hotplug]
root 0 0 00:00:00 487-23:30:11 93 [ata_aux]
root 0 0 00:00:00 487-23:30:11 94 [ata_sff/0]
root 0 0 00:00:00 487-23:30:11 95 [ata_sff/1]
root 0 0 00:00:00 487-23:30:11 96 [ata_sff/2]
root 0 0 00:00:00 487-23:30:11 97 [ata_sff/3]
root 0 0 00:00:00 487-23:30:11 98 [ata_sff/4]
root 0 0 00:00:00 487-23:30:11 99 [ata_sff/5]
root 0 0 00:00:00 487-23:30:11 100 [ata_sff/6]
root 0 0 00:00:00 487-23:30:11 101 [ata_sff/7]
root 0 0 00:00:00 487-23:30:11 102 [ksuspend_usbd]
root 0 0 00:00:00 487-23:30:11 103 [khubd]
root 0 0 00:00:00 487-23:30:11 104 [kseriod]
root 0 0 00:00:00 487-23:30:11 105 [md/0]
root 0 0 00:00:00 487-23:30:11 106 [md/1]
root 0 0 00:00:00 487-23:30:11 107 [md/2]
root 0 0 00:00:00 487-23:30:11 108 [md/3]
root 0 0 00:00:00 487-23:30:11 109 [md/4]
root 0 0 00:00:00 487-23:30:11 110 [md/5]
root 0 0 00:00:00 487-23:30:11 111 [md/6]
root 0 0 00:00:00 487-23:30:11 112 [md/7]
root 0 0 00:00:00 487-23:30:11 113 [md_misc/0]
root 0 0 00:00:00 487-23:30:11 114 [md_misc/1]
root 0 0 00:00:00 487-23:30:11 115 [md_misc/2]
root 0 0 00:00:00 487-23:30:11 116 [md_misc/3]
root 0 0 00:00:00 487-23:30:11 117 [md_misc/4]
root 0 0 00:00:00 487-23:30:11 118 [md_misc/5]
root 0 0 00:00:00 487-23:30:11 119 [md_misc/6]
root 0 0 00:00:00 487-23:30:11 120 [md_misc/7]
root 0 0 00:00:00 487-23:30:11 121 [linkwatch]
root 0 0 00:01:02 487-23:30:10 124 [khungtaskd]
root 0 0 1-01:19:39 487-23:30:10 125 [kswapd1]
root 0 0 00:00:00 487-23:30:10 126 [ksmd]
root 0 0 03:28:57 487-23:30:10 127 [khugepaged]
root 0 0 00:00:00 487-23:30:10 128 [aio/0]
root 0 0 00:00:00 487-23:30:10 129 [aio/1]
root 0 0 00:00:00 487-23:30:10 130 [aio/2]
root 0 0 00:00:00 487-23:30:10 131 [aio/3]
root 0 0 00:00:00 487-23:30:10 132 [aio/4]
root 0 0 00:00:00 487-23:30:10 133 [aio/5]
root 0 0 00:00:00 487-23:30:10 134 [aio/6]
root 0 0 00:00:00 487-23:30:10 135 [aio/7]
root 0 0 00:00:00 487-23:30:10 136 [crypto/0]
root 0 0 00:00:00 487-23:30:10 137 [crypto/1]
root 0 0 00:00:00 487-23:30:10 138 [crypto/2]
root 0 0 00:00:00 487-23:30:10 139 [crypto/3]
root 0 0 00:00:00 487-23:30:10 140 [crypto/4]
root 0 0 00:00:00 487-23:30:10 141 [crypto/5]
root 0 0 00:00:00 487-23:30:10 142 [crypto/6]
root 0 0 00:00:00 487-23:30:10 143 [crypto/7]
root 0 0 00:00:00 487-23:30:10 150 [kthrotld/0]
root 0 0 00:00:00 487-23:30:10 151 [kthrotld/1]
root 0 0 00:00:00 487-23:30:10 152 [kthrotld/2]
root 0 0 00:00:00 487-23:30:10 153 [kthrotld/3]
root 0 0 00:00:00 487-23:30:10 154 [kthrotld/4]
root 0 0 00:00:00 487-23:30:10 155 [kthrotld/5]
root 0 0 00:00:00 487-23:30:10 156 [kthrotld/6]
root 0 0 00:00:00 487-23:30:10 157 [kthrotld/7]
root 0 0 00:00:00 487-23:30:10 160 [kpsmoused]
root 0 0 00:00:00 487-23:30:10 161 [usbhid_resumer]
root 0 0 00:00:00 487-23:30:10 162 [deferwq]
root 0 0 00:00:00 487-23:30:10 194 [kdmremove]
root 0 0 00:00:00 487-23:30:10 195 [kstriped]
root 0 0 00:00:00 487-23:30:08 734 [scsi_eh_0]
root 0 0 00:00:00 487-23:30:08 735 [scsi_wq_0]
root 0 0 00:00:00 487-23:30:08 748 [scsi_eh_1]
root 0 0 00:00:00 487-23:30:08 749 [scsi_eh_2]
root 0 0 00:00:00 487-23:30:08 750 [scsi_eh_3]
root 0 0 00:00:00 487-23:30:08 751 [scsi_eh_4]
root 0 0 00:00:00 487-23:30:08 752 [scsi_eh_5]
root 0 0 00:00:00 487-23:30:08 753 [scsi_eh_6]
apache 596380 95140 00:00:53 22:53 947 /usr/sbin/httpd -DSSL
apache 586072 89952 00:00:41 22:52 948 /usr/sbin/httpd -DSSL
root 0 0 00:51:55 487-23:30:07 950 [md1_raid1]
root 0 0 00:03:08 487-23:30:06 1011 [jbd2/md1-8]
root 0 0 00:00:00 487-23:30:06 1012 [ext4-dio-unwrit]
apache 598572 95132 00:00:37 22:51 1046 /usr/sbin/httpd -DSSL
apache 592232 100676 00:00:38 22:51 1047 /usr/sbin/httpd -DSSL
apache 608492 111692 00:00:34 22:51 1048 /usr/sbin/httpd -DSSL
root 11236 280 00:00:01 487-23:30:05 1105 /sbin/udevd -d
root 0 0 00:00:00 22:46 1222 [flush-9:4]
root 0 0 00:29:45 487-23:30:05 1225 [edac-poller]
root 0 0 00:09:51 487-23:30:04 1259 [md0_raid1]
root 0 0 02:12:41 487-23:30:04 1288 [md3_raid1]
root 0 0 2-11:48:44 487-23:30:04 1310 [md5_raid1]
root 0 0 01:02:17 487-23:30:04 1322 [md4_raid1]
root 0 0 00:28:48 487-23:30:04 1336 [md2_raid1]
apache 587316 93528 00:00:37 20:34 1390 /usr/sbin/httpd -DSSL
apache 592672 87336 00:00:35 20:23 1393 /usr/sbin/httpd -DSSL
apache 587724 84424 00:00:40 20:23 1394 /usr/sbin/httpd -DSSL
apache 597816 100456 00:00:36 20:05 1396 /usr/sbin/httpd -DSSL
apache 585640 82904 00:00:32 20:04 1397 /usr/sbin/httpd -DSSL
apache 586004 91804 00:00:40 20:04 1398 /usr/sbin/httpd -DSSL
apache 598456 105488 00:00:27 20:03 1400 /usr/sbin/httpd -DSSL
apache 610212 113832 00:00:30 20:03 1402 /usr/sbin/httpd -DSSL
root 0 0 00:16:49 487-23:30:02 1844 [flush-9:3]
apache 589932 85856 00:00:34 17:12 1873 /usr/sbin/httpd -DSSL
apache 586544 93684 00:00:33 17:11 1874 /usr/sbin/httpd -DSSL
apache 597496 93172 00:00:28 17:11 1875 /usr/sbin/httpd -DSSL
root 0 0 00:00:00 487-23:30:02 1881 [jbd2/md0-8]
root 0 0 00:00:00 487-23:30:02 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 487-23:30:02 1885 [xfs_mru_cache]
root 0 0 01:29:55 487-23:30:02 1886 [xfslogd/0]
root 0 0 00:00:00 487-23:30:02 1887 [xfslogd/1]
root 0 0 00:03:32 487-23:30:02 1888 [xfslogd/2]
root 0 0 00:00:00 487-23:30:02 1889 [xfslogd/3]
root 0 0 02:34:46 487-23:30:02 1890 [xfslogd/4]
root 0 0 00:00:00 487-23:30:02 1891 [xfslogd/5]
root 0 0 00:00:00 487-23:30:02 1892 [xfslogd/6]
root 0 0 00:00:00 487-23:30:02 1893 [xfslogd/7]
root 0 0 02:41:41 487-23:30:02 1894 [xfsdatad/0]
root 0 0 00:00:00 487-23:30:02 1895 [xfsdatad/1]
root 0 0 00:02:18 487-23:30:02 1896 [xfsdatad/2]
root 0 0 00:00:00 487-23:30:02 1897 [xfsdatad/3]
root 0 0 03:01:56 487-23:30:02 1898 [xfsdatad/4]
root 0 0 00:00:00 487-23:30:02 1899 [xfsdatad/5]
root 0 0 00:00:00 487-23:30:02 1900 [xfsdatad/6]
root 0 0 00:00:00 487-23:30:02 1901 [xfsdatad/7]
root 0 0 00:00:00 487-23:30:02 1902 [xfsconvertd/0]
root 0 0 00:00:00 487-23:30:02 1903 [xfsconvertd/1]
root 0 0 00:00:00 487-23:30:02 1904 [xfsconvertd/2]
root 0 0 00:00:00 487-23:30:02 1905 [xfsconvertd/3]
root 0 0 00:00:00 487-23:30:02 1906 [xfsconvertd/4]
root 0 0 00:00:00 487-23:30:02 1907 [xfsconvertd/5]
root 0 0 00:00:00 487-23:30:02 1908 [xfsconvertd/6]
root 0 0 00:00:00 487-23:30:02 1909 [xfsconvertd/7]
root 0 0 00:00:02 487-23:30:02 1910 [xfsalloc/0]
root 0 0 00:00:02 487-23:30:02 1911 [xfsalloc/1]
root 0 0 00:00:02 487-23:30:02 1912 [xfsalloc/2]
root 0 0 00:00:03 487-23:30:02 1913 [xfsalloc/3]
root 0 0 00:00:02 487-23:30:02 1914 [xfsalloc/4]
root 0 0 00:00:02 487-23:30:02 1915 [xfsalloc/5]
root 0 0 00:00:03 487-23:30:02 1916 [xfsalloc/6]
root 0 0 00:00:04 487-23:30:02 1917 [xfsalloc/7]
root 0 0 00:00:09 487-23:30:02 1918 [xfseofblocks/0]
root 0 0 00:00:06 487-23:30:02 1919 [xfseofblocks/1]
root 0 0 00:00:09 487-23:30:02 1920 [xfseofblocks/2]
root 0 0 00:00:10 487-23:30:02 1921 [xfseofblocks/3]
root 0 0 00:00:06 487-23:30:02 1922 [xfseofblocks/4]
root 0 0 00:00:09 487-23:30:02 1923 [xfseofblocks/5]
root 0 0 00:00:04 487-23:30:02 1924 [xfseofblocks/6]
root 0 0 00:02:36 487-23:30:02 1925 [xfseofblocks/7]
root 0 0 00:27:30 487-23:30:02 1926 [xfsbufd/md5]
root 0 0 00:24:34 487-23:30:02 1927 [xfs-cil/md5]
root 0 0 00:52:39 487-23:30:02 1928 [xfssyncd/md5]
root 0 0 05:50:03 487-23:30:02 1929 [xfsaild/md5]
root 0 0 00:03:08 487-23:30:01 1930 [jbd2/md2-8]
root 0 0 00:00:00 487-23:30:01 1931 [ext4-dio-unwrit]
root 0 0 00:07:22 487-23:30:01 1932 [xfsbufd/md4]
root 0 0 00:00:45 487-23:30:01 1933 [xfs-cil/md4]
root 0 0 00:03:24 487-23:30:01 1934 [xfssyncd/md4]
root 0 0 05:32:12 487-23:30:01 1935 [xfsaild/md4]
root 0 0 00:22:16 487-23:30:01 1936 [xfsbufd/md3]
root 0 0 00:18:20 487-23:30:01 1937 [xfs-cil/md3]
root 0 0 00:04:05 487-23:30:01 1938 [xfssyncd/md3]
root 0 0 05:41:02 487-23:30:01 1939 [xfsaild/md3]
root 0 0 00:34:53 487-23:30:01 1940 [xfsbufd/sdc1]
root 0 0 00:39:05 487-23:30:01 1941 [xfs-cil/sdc1]
root 0 0 11:05:51 487-23:30:01 1942 [xfssyncd/sdc1]
root 0 0 1-05:46:02 487-23:30:01 1943 [xfsaild/sdc1]
root 0 0 00:06:05 487-23:30:00 1999 [kauditd]
apache 586804 90668 00:00:30 15:03 2227 /usr/sbin/httpd -DSSL
root 29764 704 00:15:01 487-23:29:43 2254 auditd
root 252156 31228 02:38:28 487-23:29:42 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:34:54 487-23:29:42 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:34 487-23:29:41 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
apache 585244 78580 00:00:26 13:57 2382 /usr/sbin/httpd -DSSL
root 6776 224 00:00:00 487-23:29:41 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:39:02 487-23:29:41 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:13 487-23:29:40 2492 /usr/sbin/sshd
root 40060 2032 00:00:00 12:14 2624 dovecot/ssl-params
root 71720 2008 00:32:56 487-23:29:35 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:48 487-23:29:35 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:41 487-23:29:35 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:09 487-23:29:35 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:03 487-23:29:35 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:07:58 487-23:29:24 3359 crond
root 96764 5544 00:00:00 08:37 3402 sendmail: ./488MdakT207208 mf.bandcon.com.: user open
apache 585104 68100 00:00:12 08:00 3404 /usr/sbin/httpd -DSSL
root 107544 436 00:00:25 487-23:29:22 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 487-23:29:17 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 487-23:29:17 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 487-23:29:17 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 487-23:29:17 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 487-23:29:17 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 487-23:29:17 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 487-23:29:17 3491 /sbin/udevd -d
root 11232 260 00:00:00 487-23:29:17 3492 /sbin/udevd -d
apache 599716 94900 00:00:17 07:04 3787 /usr/sbin/httpd -DSSL
root 96636 5572 00:00:00 06:37 3796 sendmail: ./48A3rGeq209998 from queue
apache 596132 75324 00:00:14 05:42 3926 /usr/sbin/httpd -DSSL
root 96124 3344 00:00:00 03:37 4284 sendmail: ./48B00X4i138147 sintelti.com.mx.: user open
root 96124 3332 00:00:00 02:37 4349 sendmail: ./48AKEdIr104275 mx2.uydunet.net.: user open
root 96124 3524 00:00:00 01:37 4559 sendmail: ./48ANkipU135382 mx.cablevision.net.mx.: user open
root 96124 3320 00:00:00 00:37 4703 sendmail: ./48BF3PT5025492 mail.msn.fr.: user open
apache 568956 29624 00:00:00 00:21 4704 /usr/sbin/httpd -DSSL
apache 616048 83364 00:00:01 00:19 4706 /usr/sbin/httpd -DSSL
root 110772 2076 00:00:00 00:01 4803 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 4829 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 4830 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 4832 cat
root 110900 1176 00:00:00 00:01 4857 /bin/bash /usr/bin/check_mk_agent
root 13368 1016 00:00:00 00:01 4858 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 4859 tr -s 
root 163092 1628 00:00:44 472-20:54:30 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 572 00:00:00 86-10:40:01 43438 SCREEN -O
root 108452 1384 00:00:00 86-10:40:01 43439 /bin/bash
root 108452 1388 00:00:00 86-10:38:58 43486 /bin/bash
root 0 0 00:02:06 487-21:07:41 57735 [flush-9:2]
root 0 0 00:01:59 487-20:32:45 68416 [flush-9:1]
root 63348 4228 00:20:52 386-02:43:05 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 108316 1288 00:00:00 386-02:22:31 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1566920 719-15:13:10 386-02:22:30 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 19260 796 00:00:00 18:49:40 85385 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 18:49:40 85388 dovecot/anvil
root 13108 1192 00:00:00 18:49:40 85389 dovecot/log
root 266508 74680 00:00:31 1-16:40:26 140232 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270584 78788 00:00:43 1-16:40:21 140234 spamd child
root 266508 72168 00:00:00 1-16:40:21 140236 spamd child
root 21712 768 00:00:12 85-20:51:48 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:01:11 14-11:14:50 181185 [flush-9:5]
root 564132 32040 00:03:49 14-11:06:17 182912 /usr/sbin/httpd -DSSL
root 154784 45448 00:00:41 381-20:54:36 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:42 424-11:36:46 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:55:23 424-11:36:46 238030 sendmail: accepting connections
named 724240 39744 03:20:20 424-11:36:31 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-13 20:37

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e43876ef65

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1726088819
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:42 485-23:59:19 1 /sbin/init
root 0 0 00:00:01 485-23:59:19 2 [kthreadd]
root 0 0 20:47:54 485-23:59:19 3 [migration/0]
root 0 0 00:58:55 485-23:59:19 4 [ksoftirqd/0]
root 0 0 00:00:00 485-23:59:19 5 [stopper/0]
root 0 0 00:15:02 485-23:59:19 6 [watchdog/0]
root 0 0 08:52:53 485-23:59:19 7 [migration/1]
root 0 0 00:00:00 485-23:59:19 8 [stopper/1]
root 0 0 01:33:56 485-23:59:19 9 [ksoftirqd/1]
root 0 0 00:18:55 485-23:59:19 10 [watchdog/1]
root 0 0 05:49:41 485-23:59:19 11 [migration/2]
root 0 0 00:00:00 485-23:59:19 12 [stopper/2]
root 0 0 00:45:15 485-23:59:19 13 [ksoftirqd/2]
root 0 0 00:16:26 485-23:59:19 14 [watchdog/2]
root 0 0 04:05:09 485-23:59:19 15 [migration/3]
root 0 0 00:00:00 485-23:59:19 16 [stopper/3]
root 0 0 00:32:12 485-23:59:19 17 [ksoftirqd/3]
root 0 0 00:13:00 485-23:59:19 18 [watchdog/3]
root 0 0 14:32:43 485-23:59:19 19 [migration/4]
root 0 0 00:00:00 485-23:59:19 20 [stopper/4]
root 0 0 00:51:22 485-23:59:19 21 [ksoftirqd/4]
root 0 0 00:07:44 485-23:59:19 22 [watchdog/4]
root 0 0 08:15:14 485-23:59:19 23 [migration/5]
root 0 0 00:00:00 485-23:59:19 24 [stopper/5]
root 0 0 00:36:25 485-23:59:19 25 [ksoftirqd/5]
root 0 0 00:17:02 485-23:59:19 26 [watchdog/5]
root 0 0 04:56:49 485-23:59:19 27 [migration/6]
root 0 0 00:00:00 485-23:59:19 28 [stopper/6]
root 0 0 00:27:38 485-23:59:19 29 [ksoftirqd/6]
root 0 0 00:12:33 485-23:59:19 30 [watchdog/6]
root 0 0 03:51:39 485-23:59:19 31 [migration/7]
root 0 0 00:00:00 485-23:59:19 32 [stopper/7]
root 0 0 00:26:48 485-23:59:19 33 [ksoftirqd/7]
root 0 0 00:09:54 485-23:59:19 34 [watchdog/7]
root 0 0 02:16:19 485-23:59:19 35 [events/0]
root 0 0 01:25:40 485-23:59:19 36 [events/1]
root 0 0 01:27:52 485-23:59:19 37 [events/2]
root 0 0 01:30:20 485-23:59:19 38 [events/3]
root 0 0 01:17:32 485-23:59:19 39 [events/4]
root 0 0 01:13:05 485-23:59:19 40 [events/5]
root 0 0 01:19:19 485-23:59:19 41 [events/6]
root 0 0 01:21:58 485-23:59:19 42 [events/7]
root 0 0 00:00:00 485-23:59:19 43 [events/0]
root 0 0 00:00:00 485-23:59:19 44 [events/1]
root 0 0 00:00:00 485-23:59:19 45 [events/2]
root 0 0 00:00:00 485-23:59:19 46 [events/3]
root 0 0 00:00:00 485-23:59:19 47 [events/4]
root 0 0 00:00:00 485-23:59:19 48 [events/5]
root 0 0 00:00:00 485-23:59:19 49 [events/6]
root 0 0 00:00:00 485-23:59:19 50 [events/7]
root 0 0 00:00:00 485-23:59:19 51 [events_long/0]
root 0 0 00:00:00 485-23:59:19 52 [events_long/1]
root 0 0 00:00:00 485-23:59:19 53 [events_long/2]
root 0 0 00:00:00 485-23:59:19 54 [events_long/3]
root 0 0 00:00:00 485-23:59:19 55 [events_long/4]
root 0 0 00:00:00 485-23:59:19 56 [events_long/5]
root 0 0 00:00:00 485-23:59:19 57 [events_long/6]
root 0 0 00:00:00 485-23:59:19 58 [events_long/7]
root 0 0 00:00:00 485-23:59:19 59 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 60 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 61 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 62 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 63 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 64 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 65 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 66 [events_power_ef]
root 0 0 00:00:00 485-23:59:19 67 [cgroup]
root 0 0 00:00:00 485-23:59:19 68 [khelper]
root 0 0 00:00:00 485-23:59:19 69 [netns]
root 0 0 00:00:00 485-23:59:19 70 [async/mgr]
root 0 0 00:00:00 485-23:59:19 71 [pm]
root 0 0 00:04:46 485-23:59:19 72 [sync_supers]
root 0 0 00:00:12 485-23:59:19 73 [bdi-default]
root 0 0 00:00:00 485-23:59:19 74 [kintegrityd/0]
root 0 0 00:00:00 485-23:59:19 75 [kintegrityd/1]
root 0 0 00:00:00 485-23:59:19 76 [kintegrityd/2]
root 0 0 00:00:00 485-23:59:19 77 [kintegrityd/3]
root 0 0 00:00:00 485-23:59:19 78 [kintegrityd/4]
root 0 0 00:00:00 485-23:59:19 79 [kintegrityd/5]
root 0 0 00:00:00 485-23:59:19 80 [kintegrityd/6]
root 0 0 00:00:00 485-23:59:19 81 [kintegrityd/7]
root 0 0 05:54:03 485-23:59:19 82 [kblockd/0]
root 0 0 00:11:12 485-23:59:19 83 [kblockd/1]
root 0 0 00:23:06 485-23:59:19 84 [kblockd/2]
root 0 0 00:04:21 485-23:59:19 85 [kblockd/3]
root 0 0 10:23:54 485-23:59:19 86 [kblockd/4]
root 0 0 00:13:29 485-23:59:19 87 [kblockd/5]
root 0 0 00:08:55 485-23:59:19 88 [kblockd/6]
root 0 0 00:06:48 485-23:59:19 89 [kblockd/7]
root 0 0 00:00:00 485-23:59:19 90 [kacpid]
root 0 0 00:00:00 485-23:59:19 91 [kacpi_notify]
root 0 0 00:00:00 485-23:59:19 92 [kacpi_hotplug]
root 0 0 00:00:00 485-23:59:19 93 [ata_aux]
root 0 0 00:00:00 485-23:59:19 94 [ata_sff/0]
root 0 0 00:00:00 485-23:59:19 95 [ata_sff/1]
root 0 0 00:00:00 485-23:59:19 96 [ata_sff/2]
root 0 0 00:00:00 485-23:59:19 97 [ata_sff/3]
root 0 0 00:00:00 485-23:59:19 98 [ata_sff/4]
root 0 0 00:00:00 485-23:59:19 99 [ata_sff/5]
root 0 0 00:00:00 485-23:59:19 100 [ata_sff/6]
root 0 0 00:00:00 485-23:59:19 101 [ata_sff/7]
root 0 0 00:00:00 485-23:59:19 102 [ksuspend_usbd]
root 0 0 00:00:00 485-23:59:19 103 [khubd]
root 0 0 00:00:00 485-23:59:19 104 [kseriod]
root 0 0 00:00:00 485-23:59:19 105 [md/0]
root 0 0 00:00:00 485-23:59:19 106 [md/1]
root 0 0 00:00:00 485-23:59:19 107 [md/2]
root 0 0 00:00:00 485-23:59:19 108 [md/3]
root 0 0 00:00:00 485-23:59:19 109 [md/4]
root 0 0 00:00:00 485-23:59:19 110 [md/5]
root 0 0 00:00:00 485-23:59:19 111 [md/6]
root 0 0 00:00:00 485-23:59:19 112 [md/7]
root 0 0 00:00:00 485-23:59:19 113 [md_misc/0]
root 0 0 00:00:00 485-23:59:19 114 [md_misc/1]
root 0 0 00:00:00 485-23:59:19 115 [md_misc/2]
root 0 0 00:00:00 485-23:59:19 116 [md_misc/3]
root 0 0 00:00:00 485-23:59:19 117 [md_misc/4]
root 0 0 00:00:00 485-23:59:19 118 [md_misc/5]
root 0 0 00:00:00 485-23:59:19 119 [md_misc/6]
root 0 0 00:00:00 485-23:59:19 120 [md_misc/7]
root 0 0 00:00:00 485-23:59:19 121 [linkwatch]
root 0 0 00:01:02 485-23:59:18 124 [khungtaskd]
root 0 0 1-01:09:49 485-23:59:18 125 [kswapd1]
root 0 0 00:00:00 485-23:59:18 126 [ksmd]
root 0 0 03:27:54 485-23:59:18 127 [khugepaged]
root 0 0 00:00:00 485-23:59:18 128 [aio/0]
root 0 0 00:00:00 485-23:59:18 129 [aio/1]
root 0 0 00:00:00 485-23:59:18 130 [aio/2]
root 0 0 00:00:00 485-23:59:18 131 [aio/3]
root 0 0 00:00:00 485-23:59:18 132 [aio/4]
root 0 0 00:00:00 485-23:59:18 133 [aio/5]
root 0 0 00:00:00 485-23:59:18 134 [aio/6]
root 0 0 00:00:00 485-23:59:18 135 [aio/7]
root 0 0 00:00:00 485-23:59:18 136 [crypto/0]
root 0 0 00:00:00 485-23:59:18 137 [crypto/1]
root 0 0 00:00:00 485-23:59:18 138 [crypto/2]
root 0 0 00:00:00 485-23:59:18 139 [crypto/3]
root 0 0 00:00:00 485-23:59:18 140 [crypto/4]
root 0 0 00:00:00 485-23:59:18 141 [crypto/5]
root 0 0 00:00:00 485-23:59:18 142 [crypto/6]
root 0 0 00:00:00 485-23:59:18 143 [crypto/7]
root 0 0 00:00:00 485-23:59:18 150 [kthrotld/0]
root 0 0 00:00:00 485-23:59:18 151 [kthrotld/1]
root 0 0 00:00:00 485-23:59:18 152 [kthrotld/2]
root 0 0 00:00:00 485-23:59:18 153 [kthrotld/3]
root 0 0 00:00:00 485-23:59:18 154 [kthrotld/4]
root 0 0 00:00:00 485-23:59:18 155 [kthrotld/5]
root 0 0 00:00:00 485-23:59:18 156 [kthrotld/6]
root 0 0 00:00:00 485-23:59:18 157 [kthrotld/7]
root 0 0 00:00:00 485-23:59:18 160 [kpsmoused]
root 0 0 00:00:00 485-23:59:18 161 [usbhid_resumer]
root 0 0 00:00:00 485-23:59:18 162 [deferwq]
root 0 0 00:00:00 485-23:59:18 194 [kdmremove]
root 0 0 00:00:00 485-23:59:18 195 [kstriped]
root 0 0 00:00:00 485-23:59:16 734 [scsi_eh_0]
root 0 0 00:00:00 485-23:59:16 735 [scsi_wq_0]
root 0 0 00:00:00 485-23:59:16 748 [scsi_eh_1]
root 0 0 00:00:00 485-23:59:16 749 [scsi_eh_2]
root 0 0 00:00:00 485-23:59:16 750 [scsi_eh_3]
root 0 0 00:00:00 485-23:59:16 751 [scsi_eh_4]
root 0 0 00:00:00 485-23:59:16 752 [scsi_eh_5]
root 0 0 00:00:00 485-23:59:16 753 [scsi_eh_6]
root 0 0 00:51:52 485-23:59:15 950 [md1_raid1]
root 0 0 00:03:08 485-23:59:14 1011 [jbd2/md1-8]
root 0 0 00:00:00 485-23:59:14 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 485-23:59:13 1105 /sbin/udevd -d
root 0 0 00:29:35 485-23:59:13 1225 [edac-poller]
root 0 0 00:09:51 485-23:59:12 1259 [md0_raid1]
root 0 0 02:12:12 485-23:59:12 1288 [md3_raid1]
root 0 0 2-11:39:50 485-23:59:12 1310 [md5_raid1]
root 0 0 01:02:11 485-23:59:12 1322 [md4_raid1]
root 0 0 00:28:45 485-23:59:12 1336 [md2_raid1]
root 0 0 00:16:45 485-23:59:10 1844 [flush-9:3]
root 0 0 00:00:00 485-23:59:10 1881 [jbd2/md0-8]
root 0 0 00:00:00 485-23:59:10 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 485-23:59:10 1885 [xfs_mru_cache]
root 0 0 01:28:57 485-23:59:10 1886 [xfslogd/0]
root 0 0 00:00:00 485-23:59:10 1887 [xfslogd/1]
root 0 0 00:03:32 485-23:59:10 1888 [xfslogd/2]
root 0 0 00:00:00 485-23:59:10 1889 [xfslogd/3]
root 0 0 02:33:29 485-23:59:10 1890 [xfslogd/4]
root 0 0 00:00:00 485-23:59:10 1891 [xfslogd/5]
root 0 0 00:00:00 485-23:59:10 1892 [xfslogd/6]
root 0 0 00:00:00 485-23:59:10 1893 [xfslogd/7]
root 0 0 02:39:02 485-23:59:10 1894 [xfsdatad/0]
root 0 0 00:00:00 485-23:59:10 1895 [xfsdatad/1]
root 0 0 00:02:18 485-23:59:10 1896 [xfsdatad/2]
root 0 0 00:00:00 485-23:59:10 1897 [xfsdatad/3]
root 0 0 02:59:43 485-23:59:10 1898 [xfsdatad/4]
root 0 0 00:00:00 485-23:59:10 1899 [xfsdatad/5]
root 0 0 00:00:00 485-23:59:10 1900 [xfsdatad/6]
root 0 0 00:00:00 485-23:59:10 1901 [xfsdatad/7]
root 0 0 00:00:00 485-23:59:10 1902 [xfsconvertd/0]
root 0 0 00:00:00 485-23:59:10 1903 [xfsconvertd/1]
root 0 0 00:00:00 485-23:59:10 1904 [xfsconvertd/2]
root 0 0 00:00:00 485-23:59:10 1905 [xfsconvertd/3]
root 0 0 00:00:00 485-23:59:10 1906 [xfsconvertd/4]
root 0 0 00:00:00 485-23:59:10 1907 [xfsconvertd/5]
root 0 0 00:00:00 485-23:59:10 1908 [xfsconvertd/6]
root 0 0 00:00:00 485-23:59:10 1909 [xfsconvertd/7]
root 0 0 00:00:02 485-23:59:10 1910 [xfsalloc/0]
root 0 0 00:00:02 485-23:59:10 1911 [xfsalloc/1]
root 0 0 00:00:02 485-23:59:10 1912 [xfsalloc/2]
root 0 0 00:00:03 485-23:59:10 1913 [xfsalloc/3]
root 0 0 00:00:02 485-23:59:10 1914 [xfsalloc/4]
root 0 0 00:00:02 485-23:59:10 1915 [xfsalloc/5]
root 0 0 00:00:03 485-23:59:10 1916 [xfsalloc/6]
root 0 0 00:00:04 485-23:59:10 1917 [xfsalloc/7]
root 0 0 00:00:09 485-23:59:10 1918 [xfseofblocks/0]
root 0 0 00:00:05 485-23:59:10 1919 [xfseofblocks/1]
root 0 0 00:00:09 485-23:59:10 1920 [xfseofblocks/2]
root 0 0 00:00:10 485-23:59:10 1921 [xfseofblocks/3]
root 0 0 00:00:06 485-23:59:10 1922 [xfseofblocks/4]
root 0 0 00:00:09 485-23:59:10 1923 [xfseofblocks/5]
root 0 0 00:00:04 485-23:59:10 1924 [xfseofblocks/6]
root 0 0 00:02:35 485-23:59:10 1925 [xfseofblocks/7]
root 0 0 00:27:22 485-23:59:10 1926 [xfsbufd/md5]
root 0 0 00:24:24 485-23:59:10 1927 [xfs-cil/md5]
root 0 0 00:52:24 485-23:59:10 1928 [xfssyncd/md5]
root 0 0 05:47:52 485-23:59:10 1929 [xfsaild/md5]
root 0 0 00:03:08 485-23:59:09 1930 [jbd2/md2-8]
root 0 0 00:00:00 485-23:59:09 1931 [ext4-dio-unwrit]
root 0 0 00:07:19 485-23:59:09 1932 [xfsbufd/md4]
root 0 0 00:00:44 485-23:59:09 1933 [xfs-cil/md4]
root 0 0 00:03:23 485-23:59:09 1934 [xfssyncd/md4]
root 0 0 05:30:07 485-23:59:09 1935 [xfsaild/md4]
root 0 0 00:22:07 485-23:59:09 1936 [xfsbufd/md3]
root 0 0 00:18:16 485-23:59:09 1937 [xfs-cil/md3]
root 0 0 00:04:04 485-23:59:09 1938 [xfssyncd/md3]
root 0 0 05:38:55 485-23:59:09 1939 [xfsaild/md3]
root 0 0 00:34:28 485-23:59:09 1940 [xfsbufd/sdc1]
root 0 0 00:38:37 485-23:59:09 1941 [xfs-cil/sdc1]
root 0 0 11:04:09 485-23:59:09 1942 [xfssyncd/sdc1]
root 0 0 1-05:35:00 485-23:59:09 1943 [xfsaild/sdc1]
root 0 0 00:06:05 485-23:59:08 1999 [kauditd]
root 29764 704 00:15:00 485-23:58:51 2254 auditd
root 252156 31220 02:38:07 485-23:58:50 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:34:07 485-23:58:50 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:34 485-23:58:49 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 485-23:58:49 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:38:48 485-23:58:49 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:12 485-23:58:48 2492 /usr/sbin/sshd
root 71720 2008 00:32:55 485-23:58:43 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:47 485-23:58:43 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:40 485-23:58:43 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:07 485-23:58:43 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:02 485-23:58:43 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:07:56 485-23:58:32 3359 crond
root 107544 436 00:00:25 485-23:58:30 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 485-23:58:25 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 485-23:58:25 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 485-23:58:25 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 485-23:58:25 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 485-23:58:25 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 485-23:58:25 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 485-23:58:25 3491 /sbin/udevd -d
root 11232 260 00:00:00 485-23:58:25 3492 /sbin/udevd -d
root 163092 1628 00:00:44 470-21:23:38 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 572 00:00:00 84-11:09:09 43438 SCREEN -O
root 108452 1384 00:00:00 84-11:09:09 43439 /bin/bash
root 108452 1388 00:00:00 84-11:08:06 43486 /bin/bash
root 0 0 00:02:05 485-21:36:49 57735 [flush-9:2]
root 0 0 00:00:00 01:51:54 62604 [flush-9:4]
root 0 0 00:01:58 485-21:01:53 68416 [flush-9:1]
apache 605828 112772 00:00:44 27:56 75000 /usr/sbin/httpd -DSSL
apache 594744 83676 00:00:47 20:43 75840 /usr/sbin/httpd -DSSL
apache 624464 131544 00:00:39 20:11 75843 /usr/sbin/httpd -DSSL
apache 585080 74792 00:00:27 19:02 75977 /usr/sbin/httpd -DSSL
apache 587164 96096 00:00:29 18:44 76402 /usr/sbin/httpd -DSSL
apache 586436 81360 00:00:33 18:44 76403 /usr/sbin/httpd -DSSL
apache 666452 154292 00:00:26 18:43 76404 /usr/sbin/httpd -DSSL
apache 604964 91736 00:00:23 18:43 76405 /usr/sbin/httpd -DSSL
apache 585756 86548 00:00:29 18:43 76406 /usr/sbin/httpd -DSSL
apache 586296 92460 00:00:27 14:24 76877 /usr/sbin/httpd -DSSL
root 95868 3080 00:00:00 14:10 76878 sendmail: server 111-70-49-187.emome-ip.hinet.net [111.70.49.187] cmd read
apache 586700 84284 00:00:31 13:55 77034 /usr/sbin/httpd -DSSL
root 95868 3060 00:00:00 13:33 77038 sendmail: server syn-208-105-196-214.biz.spectrum.com [208.105.196.214] cmd read
root 95868 3060 00:00:00 12:56 77330 sendmail: server syn-208-105-196-214.biz.spectrum.com [208.105.196.214] cmd read
apache 585260 81896 00:00:20 09:24 77704 /usr/sbin/httpd -DSSL
apache 585096 72652 00:00:15 09:16 77705 /usr/sbin/httpd -DSSL
apache 583928 79128 00:00:10 09:05 77706 /usr/sbin/httpd -DSSL
apache 589312 81840 00:00:12 07:29 77858 /usr/sbin/httpd -DSSL
apache 583968 55128 00:00:07 05:48 78185 /usr/sbin/httpd -DSSL
apache 762472 246020 00:00:12 05:39 78229 /usr/sbin/httpd -DSSL
apache 584864 79260 00:00:09 05:38 78238 /usr/sbin/httpd -DSSL
apache 598964 94364 00:00:10 05:35 78256 /usr/sbin/httpd -DSSL
apache 585240 82248 00:00:09 05:34 78261 /usr/sbin/httpd -DSSL
root 40060 2032 00:00:00 05:24 78296 dovecot/ssl-params
apache 610712 96060 00:00:07 05:24 78297 /usr/sbin/httpd -DSSL
apache 584808 67888 00:00:04 05:24 78298 /usr/sbin/httpd -DSSL
apache 586376 66412 00:00:02 05:23 78324 /usr/sbin/httpd -DSSL
apache 597076 79888 00:00:09 05:23 78325 /usr/sbin/httpd -DSSL
apache 612720 97276 00:00:06 05:05 78327 /usr/sbin/httpd -DSSL
root 96484 5336 00:00:00 04:48 78397 sendmail: ./48B00X4i138147 sintelti.com.mx.: user open
root 96484 5336 00:00:00 03:48 78851 sendmail: ./488D42tf128472 mail.oac.uncor.edu.: user open
apache 587532 58320 00:00:03 02:56 78854 /usr/sbin/httpd -DSSL
apache 591568 60708 00:00:02 02:55 78855 /usr/sbin/httpd -DSSL
apache 581832 53056 00:00:02 02:55 78856 /usr/sbin/httpd -DSSL
root 96484 5324 00:00:00 02:48 78858 sendmail: ./48AKEdIr104275 mx1.uydunet.net.: user open
root 96632 5452 00:00:00 01:48 78925 sendmail: ./48ANkipU135382 mx.cablevision.net.mx.: user open
apache 598280 66984 00:00:01 01:44 78926 /usr/sbin/httpd -DSSL
root 63348 4228 00:20:46 384-03:12:13 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
root 96632 5392 00:00:00 00:48 79085 sendmail: ./48BF3PT5025492 mail.msn.fr.: user open
apache 579404 29572 00:00:00 00:09 79087 /usr/sbin/httpd -DSSL
apache 564656 23772 00:00:00 00:04 79088 /usr/sbin/httpd -DSSL
root 110772 2076 00:00:00 00:01 79176 /bin/bash /usr/bin/check_mk_agent
root 110900 1684 00:00:00 00:01 79202 /bin/bash /usr/bin/check_mk_agent
root 110772 1256 00:00:00 00:01 79203 /bin/bash /usr/bin/check_mk_agent
root 4092 496 00:00:00 00:01 79208 cat
root 110900 1176 00:00:00 00:01 79230 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 79231 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 540 00:00:00 00:01 79232 tr -s 
root 108316 1288 00:00:00 384-02:51:39 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1563476 711-10:35:29 384-02:51:38 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 19260 792 00:00:00 18:58:51 158094 /usr/sbin/dovecot
dovecot 12980 1068 00:00:00 18:58:51 158097 dovecot/anvil
root 13108 1196 00:00:00 18:58:51 158098 dovecot/log
root 21712 768 00:00:12 83-21:20:56 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 266432 74652 00:00:15 17:56:44 167218 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 270300 78484 00:00:49 17:56:40 167219 spamd child
root 266432 72140 00:00:00 17:56:40 167221 spamd child
root 0 0 00:01:00 12-11:43:58 181185 [flush-9:5]
root 564132 32040 00:03:17 12-11:35:25 182912 /usr/sbin/httpd -DSSL
root 154784 45448 00:00:41 379-21:23:44 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:40 422-12:05:54 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:55:08 422-12:05:54 238030 sendmail: accepting connections
named 724240 39744 03:18:56 422-12:05:39 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-11 21:06

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd104dd596fb6c84a04de7d21b1cc78e454d92c3d

Found public CheckMk agent:
Version: 2.3.0p5
AgentOS: linux
Hostname: ns58.mycyberhosting.com
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OSType: linux
FailedPythonReason: 
SSHClient: 

Found linux process list through CheckMk:
[time]
1725990047
[processes]
[header] USER VSZ RSS TIME ELAPSED PID COMMAND
root 19356 1020 00:00:41 484-20:33:07 1 /sbin/init
root 0 0 00:00:01 484-20:33:07 2 [kthreadd]
root 0 0 20:45:37 484-20:33:07 3 [migration/0]
root 0 0 00:58:46 484-20:33:07 4 [ksoftirqd/0]
root 0 0 00:00:00 484-20:33:07 5 [stopper/0]
root 0 0 00:15:01 484-20:33:07 6 [watchdog/0]
root 0 0 08:52:20 484-20:33:07 7 [migration/1]
root 0 0 00:00:00 484-20:33:07 8 [stopper/1]
root 0 0 01:33:47 484-20:33:07 9 [ksoftirqd/1]
root 0 0 00:18:53 484-20:33:07 10 [watchdog/1]
root 0 0 05:49:10 484-20:33:07 11 [migration/2]
root 0 0 00:00:00 484-20:33:07 12 [stopper/2]
root 0 0 00:45:08 484-20:33:07 13 [ksoftirqd/2]
root 0 0 00:16:25 484-20:33:07 14 [watchdog/2]
root 0 0 04:04:39 484-20:33:07 15 [migration/3]
root 0 0 00:00:00 484-20:33:07 16 [stopper/3]
root 0 0 00:32:07 484-20:33:07 17 [ksoftirqd/3]
root 0 0 00:12:58 484-20:33:07 18 [watchdog/3]
root 0 0 14:31:02 484-20:33:07 19 [migration/4]
root 0 0 00:00:00 484-20:33:07 20 [stopper/4]
root 0 0 00:51:17 484-20:33:07 21 [ksoftirqd/4]
root 0 0 00:07:43 484-20:33:07 22 [watchdog/4]
root 0 0 08:14:44 484-20:33:07 23 [migration/5]
root 0 0 00:00:00 484-20:33:07 24 [stopper/5]
root 0 0 00:36:22 484-20:33:07 25 [ksoftirqd/5]
root 0 0 00:17:01 484-20:33:07 26 [watchdog/5]
root 0 0 04:56:30 484-20:33:07 27 [migration/6]
root 0 0 00:00:00 484-20:33:07 28 [stopper/6]
root 0 0 00:27:35 484-20:33:07 29 [ksoftirqd/6]
root 0 0 00:12:32 484-20:33:07 30 [watchdog/6]
root 0 0 03:51:18 484-20:33:07 31 [migration/7]
root 0 0 00:00:00 484-20:33:07 32 [stopper/7]
root 0 0 00:26:44 484-20:33:07 33 [ksoftirqd/7]
root 0 0 00:09:53 484-20:33:07 34 [watchdog/7]
root 0 0 02:15:59 484-20:33:07 35 [events/0]
root 0 0 01:25:27 484-20:33:07 36 [events/1]
root 0 0 01:27:39 484-20:33:07 37 [events/2]
root 0 0 01:30:04 484-20:33:07 38 [events/3]
root 0 0 01:17:20 484-20:33:07 39 [events/4]
root 0 0 01:12:54 484-20:33:07 40 [events/5]
root 0 0 01:19:08 484-20:33:07 41 [events/6]
root 0 0 01:21:46 484-20:33:07 42 [events/7]
root 0 0 00:00:00 484-20:33:07 43 [events/0]
root 0 0 00:00:00 484-20:33:07 44 [events/1]
root 0 0 00:00:00 484-20:33:07 45 [events/2]
root 0 0 00:00:00 484-20:33:07 46 [events/3]
root 0 0 00:00:00 484-20:33:07 47 [events/4]
root 0 0 00:00:00 484-20:33:07 48 [events/5]
root 0 0 00:00:00 484-20:33:07 49 [events/6]
root 0 0 00:00:00 484-20:33:07 50 [events/7]
root 0 0 00:00:00 484-20:33:07 51 [events_long/0]
root 0 0 00:00:00 484-20:33:07 52 [events_long/1]
root 0 0 00:00:00 484-20:33:07 53 [events_long/2]
root 0 0 00:00:00 484-20:33:07 54 [events_long/3]
root 0 0 00:00:00 484-20:33:07 55 [events_long/4]
root 0 0 00:00:00 484-20:33:07 56 [events_long/5]
root 0 0 00:00:00 484-20:33:07 57 [events_long/6]
root 0 0 00:00:00 484-20:33:07 58 [events_long/7]
root 0 0 00:00:00 484-20:33:07 59 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 60 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 61 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 62 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 63 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 64 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 65 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 66 [events_power_ef]
root 0 0 00:00:00 484-20:33:07 67 [cgroup]
root 0 0 00:00:00 484-20:33:07 68 [khelper]
root 0 0 00:00:00 484-20:33:07 69 [netns]
root 0 0 00:00:00 484-20:33:07 70 [async/mgr]
root 0 0 00:00:00 484-20:33:07 71 [pm]
root 0 0 00:04:45 484-20:33:07 72 [sync_supers]
root 0 0 00:00:12 484-20:33:07 73 [bdi-default]
root 0 0 00:00:00 484-20:33:07 74 [kintegrityd/0]
root 0 0 00:00:00 484-20:33:07 75 [kintegrityd/1]
root 0 0 00:00:00 484-20:33:07 76 [kintegrityd/2]
root 0 0 00:00:00 484-20:33:07 77 [kintegrityd/3]
root 0 0 00:00:00 484-20:33:07 78 [kintegrityd/4]
root 0 0 00:00:00 484-20:33:07 79 [kintegrityd/5]
root 0 0 00:00:00 484-20:33:07 80 [kintegrityd/6]
root 0 0 00:00:00 484-20:33:07 81 [kintegrityd/7]
root 0 0 05:53:27 484-20:33:07 82 [kblockd/0]
root 0 0 00:11:11 484-20:33:07 83 [kblockd/1]
root 0 0 00:23:06 484-20:33:07 84 [kblockd/2]
root 0 0 00:04:21 484-20:33:07 85 [kblockd/3]
root 0 0 10:22:36 484-20:33:07 86 [kblockd/4]
root 0 0 00:13:28 484-20:33:07 87 [kblockd/5]
root 0 0 00:08:55 484-20:33:07 88 [kblockd/6]
root 0 0 00:06:48 484-20:33:07 89 [kblockd/7]
root 0 0 00:00:00 484-20:33:07 90 [kacpid]
root 0 0 00:00:00 484-20:33:07 91 [kacpi_notify]
root 0 0 00:00:00 484-20:33:07 92 [kacpi_hotplug]
root 0 0 00:00:00 484-20:33:07 93 [ata_aux]
root 0 0 00:00:00 484-20:33:07 94 [ata_sff/0]
root 0 0 00:00:00 484-20:33:07 95 [ata_sff/1]
root 0 0 00:00:00 484-20:33:07 96 [ata_sff/2]
root 0 0 00:00:00 484-20:33:07 97 [ata_sff/3]
root 0 0 00:00:00 484-20:33:07 98 [ata_sff/4]
root 0 0 00:00:00 484-20:33:07 99 [ata_sff/5]
root 0 0 00:00:00 484-20:33:07 100 [ata_sff/6]
root 0 0 00:00:00 484-20:33:07 101 [ata_sff/7]
root 0 0 00:00:00 484-20:33:07 102 [ksuspend_usbd]
root 0 0 00:00:00 484-20:33:07 103 [khubd]
root 0 0 00:00:00 484-20:33:07 104 [kseriod]
root 0 0 00:00:00 484-20:33:07 105 [md/0]
root 0 0 00:00:00 484-20:33:07 106 [md/1]
root 0 0 00:00:00 484-20:33:07 107 [md/2]
root 0 0 00:00:00 484-20:33:07 108 [md/3]
root 0 0 00:00:00 484-20:33:07 109 [md/4]
root 0 0 00:00:00 484-20:33:07 110 [md/5]
root 0 0 00:00:00 484-20:33:07 111 [md/6]
root 0 0 00:00:00 484-20:33:07 112 [md/7]
root 0 0 00:00:00 484-20:33:07 113 [md_misc/0]
root 0 0 00:00:00 484-20:33:07 114 [md_misc/1]
root 0 0 00:00:00 484-20:33:07 115 [md_misc/2]
root 0 0 00:00:00 484-20:33:07 116 [md_misc/3]
root 0 0 00:00:00 484-20:33:07 117 [md_misc/4]
root 0 0 00:00:00 484-20:33:07 118 [md_misc/5]
root 0 0 00:00:00 484-20:33:07 119 [md_misc/6]
root 0 0 00:00:00 484-20:33:07 120 [md_misc/7]
root 0 0 00:00:00 484-20:33:07 121 [linkwatch]
root 0 0 00:01:02 484-20:33:06 124 [khungtaskd]
root 0 0 1-01:07:28 484-20:33:06 125 [kswapd1]
root 0 0 00:00:00 484-20:33:06 126 [ksmd]
root 0 0 03:27:27 484-20:33:06 127 [khugepaged]
root 0 0 00:00:00 484-20:33:06 128 [aio/0]
root 0 0 00:00:00 484-20:33:06 129 [aio/1]
root 0 0 00:00:00 484-20:33:06 130 [aio/2]
root 0 0 00:00:00 484-20:33:06 131 [aio/3]
root 0 0 00:00:00 484-20:33:06 132 [aio/4]
root 0 0 00:00:00 484-20:33:06 133 [aio/5]
root 0 0 00:00:00 484-20:33:06 134 [aio/6]
root 0 0 00:00:00 484-20:33:06 135 [aio/7]
root 0 0 00:00:00 484-20:33:06 136 [crypto/0]
root 0 0 00:00:00 484-20:33:06 137 [crypto/1]
root 0 0 00:00:00 484-20:33:06 138 [crypto/2]
root 0 0 00:00:00 484-20:33:06 139 [crypto/3]
root 0 0 00:00:00 484-20:33:06 140 [crypto/4]
root 0 0 00:00:00 484-20:33:06 141 [crypto/5]
root 0 0 00:00:00 484-20:33:06 142 [crypto/6]
root 0 0 00:00:00 484-20:33:06 143 [crypto/7]
root 0 0 00:00:00 484-20:33:06 150 [kthrotld/0]
root 0 0 00:00:00 484-20:33:06 151 [kthrotld/1]
root 0 0 00:00:00 484-20:33:06 152 [kthrotld/2]
root 0 0 00:00:00 484-20:33:06 153 [kthrotld/3]
root 0 0 00:00:00 484-20:33:06 154 [kthrotld/4]
root 0 0 00:00:00 484-20:33:06 155 [kthrotld/5]
root 0 0 00:00:00 484-20:33:06 156 [kthrotld/6]
root 0 0 00:00:00 484-20:33:06 157 [kthrotld/7]
root 0 0 00:00:00 484-20:33:06 160 [kpsmoused]
root 0 0 00:00:00 484-20:33:06 161 [usbhid_resumer]
root 0 0 00:00:00 484-20:33:06 162 [deferwq]
root 0 0 00:00:00 484-20:33:06 194 [kdmremove]
root 0 0 00:00:00 484-20:33:06 195 [kstriped]
root 0 0 00:00:00 484-20:33:04 734 [scsi_eh_0]
root 0 0 00:00:00 484-20:33:04 735 [scsi_wq_0]
root 0 0 00:00:00 484-20:33:04 748 [scsi_eh_1]
root 0 0 00:00:00 484-20:33:04 749 [scsi_eh_2]
root 0 0 00:00:00 484-20:33:04 750 [scsi_eh_3]
root 0 0 00:00:00 484-20:33:04 751 [scsi_eh_4]
root 0 0 00:00:00 484-20:33:04 752 [scsi_eh_5]
root 0 0 00:00:00 484-20:33:04 753 [scsi_eh_6]
root 0 0 00:51:50 484-20:33:03 950 [md1_raid1]
root 0 0 00:03:07 484-20:33:02 1011 [jbd2/md1-8]
root 0 0 00:00:00 484-20:33:02 1012 [ext4-dio-unwrit]
root 11236 280 00:00:01 484-20:33:01 1105 /sbin/udevd -d
root 0 0 00:29:30 484-20:33:01 1225 [edac-poller]
root 0 0 00:09:50 484-20:33:00 1259 [md0_raid1]
root 0 0 02:11:57 484-20:33:00 1288 [md3_raid1]
root 0 0 2-11:36:18 484-20:33:00 1310 [md5_raid1]
root 0 0 01:02:08 484-20:33:00 1322 [md4_raid1]
root 0 0 00:28:43 484-20:33:00 1336 [md2_raid1]
root 0 0 00:16:43 484-20:32:58 1844 [flush-9:3]
root 0 0 00:00:00 484-20:32:58 1881 [jbd2/md0-8]
root 0 0 00:00:00 484-20:32:58 1882 [ext4-dio-unwrit]
root 0 0 00:00:00 484-20:32:58 1885 [xfs_mru_cache]
root 0 0 01:28:49 484-20:32:58 1886 [xfslogd/0]
root 0 0 00:00:00 484-20:32:58 1887 [xfslogd/1]
root 0 0 00:03:32 484-20:32:58 1888 [xfslogd/2]
root 0 0 00:00:00 484-20:32:58 1889 [xfslogd/3]
root 0 0 02:33:16 484-20:32:58 1890 [xfslogd/4]
root 0 0 00:00:00 484-20:32:58 1891 [xfslogd/5]
root 0 0 00:00:00 484-20:32:58 1892 [xfslogd/6]
root 0 0 00:00:00 484-20:32:58 1893 [xfslogd/7]
root 0 0 02:38:58 484-20:32:58 1894 [xfsdatad/0]
root 0 0 00:00:00 484-20:32:58 1895 [xfsdatad/1]
root 0 0 00:02:18 484-20:32:58 1896 [xfsdatad/2]
root 0 0 00:00:00 484-20:32:58 1897 [xfsdatad/3]
root 0 0 02:59:38 484-20:32:58 1898 [xfsdatad/4]
root 0 0 00:00:00 484-20:32:58 1899 [xfsdatad/5]
root 0 0 00:00:00 484-20:32:58 1900 [xfsdatad/6]
root 0 0 00:00:00 484-20:32:58 1901 [xfsdatad/7]
root 0 0 00:00:00 484-20:32:58 1902 [xfsconvertd/0]
root 0 0 00:00:00 484-20:32:58 1903 [xfsconvertd/1]
root 0 0 00:00:00 484-20:32:58 1904 [xfsconvertd/2]
root 0 0 00:00:00 484-20:32:58 1905 [xfsconvertd/3]
root 0 0 00:00:00 484-20:32:58 1906 [xfsconvertd/4]
root 0 0 00:00:00 484-20:32:58 1907 [xfsconvertd/5]
root 0 0 00:00:00 484-20:32:58 1908 [xfsconvertd/6]
root 0 0 00:00:00 484-20:32:58 1909 [xfsconvertd/7]
root 0 0 00:00:02 484-20:32:58 1910 [xfsalloc/0]
root 0 0 00:00:02 484-20:32:58 1911 [xfsalloc/1]
root 0 0 00:00:02 484-20:32:58 1912 [xfsalloc/2]
root 0 0 00:00:03 484-20:32:58 1913 [xfsalloc/3]
root 0 0 00:00:02 484-20:32:58 1914 [xfsalloc/4]
root 0 0 00:00:02 484-20:32:58 1915 [xfsalloc/5]
root 0 0 00:00:03 484-20:32:58 1916 [xfsalloc/6]
root 0 0 00:00:04 484-20:32:58 1917 [xfsalloc/7]
root 0 0 00:00:09 484-20:32:58 1918 [xfseofblocks/0]
root 0 0 00:00:05 484-20:32:58 1919 [xfseofblocks/1]
root 0 0 00:00:09 484-20:32:58 1920 [xfseofblocks/2]
root 0 0 00:00:10 484-20:32:58 1921 [xfseofblocks/3]
root 0 0 00:00:06 484-20:32:58 1922 [xfseofblocks/4]
root 0 0 00:00:09 484-20:32:58 1923 [xfseofblocks/5]
root 0 0 00:00:04 484-20:32:58 1924 [xfseofblocks/6]
root 0 0 00:02:35 484-20:32:58 1925 [xfseofblocks/7]
root 0 0 00:27:17 484-20:32:58 1926 [xfsbufd/md5]
root 0 0 00:24:20 484-20:32:58 1927 [xfs-cil/md5]
root 0 0 00:52:19 484-20:32:58 1928 [xfssyncd/md5]
root 0 0 05:46:45 484-20:32:58 1929 [xfsaild/md5]
root 0 0 00:03:07 484-20:32:57 1930 [jbd2/md2-8]
root 0 0 00:00:00 484-20:32:57 1931 [ext4-dio-unwrit]
root 0 0 00:07:18 484-20:32:57 1932 [xfsbufd/md4]
root 0 0 00:00:44 484-20:32:57 1933 [xfs-cil/md4]
root 0 0 00:03:22 484-20:32:57 1934 [xfssyncd/md4]
root 0 0 05:29:04 484-20:32:57 1935 [xfsaild/md4]
root 0 0 00:22:02 484-20:32:57 1936 [xfsbufd/md3]
root 0 0 00:18:14 484-20:32:57 1937 [xfs-cil/md3]
root 0 0 00:04:04 484-20:32:57 1938 [xfssyncd/md3]
root 0 0 05:37:50 484-20:32:57 1939 [xfsaild/md3]
root 0 0 00:34:25 484-20:32:57 1940 [xfsbufd/sdc1]
root 0 0 00:38:34 484-20:32:57 1941 [xfs-cil/sdc1]
root 0 0 11:03:25 484-20:32:57 1942 [xfssyncd/sdc1]
root 0 0 1-05:31:43 484-20:32:57 1943 [xfsaild/sdc1]
root 0 0 00:06:04 484-20:32:56 1999 [kauditd]
root 29764 704 00:14:59 484-20:32:39 2254 auditd
root 252156 31228 02:37:56 484-20:32:38 2276 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 18364 556 03:33:41 484-20:32:38 2291 irqbalance --pid=/var/run/irqbalance.pid
root 4988 844 00:00:34 484-20:32:37 2335 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
root 6776 224 00:00:00 484-20:32:37 2458 /usr/sbin/mcelog --daemon
memcached 330840 512 00:38:41 484-20:32:37 2470 memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
root 66676 608 00:08:12 484-20:32:36 2492 /usr/sbin/sshd
root 71720 2008 00:32:54 484-20:32:31 3132 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1984 00:32:46 484-20:32:31 3133 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1988 00:32:39 484-20:32:31 3134 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1992 00:33:07 484-20:32:31 3135 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 71716 1980 00:33:01 484-20:32:31 3136 /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
root 117044 860 00:07:55 484-20:32:20 3359 crond
root 107544 436 00:00:25 484-20:32:18 3407 pure-ftpd (SERVER) 
root 4060 472 00:00:00 484-20:32:13 3480 /sbin/mingetty /dev/tty1
root 4060 472 00:00:00 484-20:32:13 3482 /sbin/mingetty /dev/tty2
root 4060 472 00:00:00 484-20:32:13 3484 /sbin/mingetty /dev/tty3
root 4060 472 00:00:00 484-20:32:13 3486 /sbin/mingetty /dev/tty4
root 4060 472 00:00:00 484-20:32:13 3488 /sbin/mingetty /dev/tty5
root 4060 472 00:00:00 484-20:32:13 3490 /sbin/mingetty /dev/tty6
root 11232 260 00:00:00 484-20:32:13 3491 /sbin/udevd -d
root 11232 260 00:00:00 484-20:32:13 3492 /sbin/udevd -d
root 163092 1628 00:00:44 469-17:57:26 21337 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
root 118780 572 00:00:00 83-07:42:57 43438 SCREEN -O
root 108452 1384 00:00:00 83-07:42:57 43439 /bin/bash
root 108452 1388 00:00:00 83-07:41:54 43486 /bin/bash
root 0 0 00:02:05 484-18:10:37 57735 [flush-9:2]
root 0 0 00:01:58 484-17:35:41 68416 [flush-9:1]
root 0 0 00:00:00 46:42 74614 [flush-9:4]
apache 586048 84460 00:00:17 23:56 77816 /usr/sbin/httpd -DSSL
apache 607500 115372 00:00:23 23:46 77818 /usr/sbin/httpd -DSSL
apache 585628 89560 00:00:15 23:40 77819 /usr/sbin/httpd -DSSL
apache 596552 93556 00:00:22 23:35 77891 /usr/sbin/httpd -DSSL
apache 596412 91308 00:00:20 23:20 77951 /usr/sbin/httpd -DSSL
apache 590984 96992 00:00:17 21:43 78319 /usr/sbin/httpd -DSSL
apache 586068 89660 00:00:15 21:42 78324 /usr/sbin/httpd -DSSL
apache 587544 86484 00:00:13 21:15 78329 /usr/sbin/httpd -DSSL
apache 616928 120280 00:00:21 20:17 78444 /usr/sbin/httpd -DSSL
apache 607928 99768 00:00:13 18:40 78611 /usr/sbin/httpd -DSSL
apache 586924 71176 00:00:15 18:38 78614 /usr/sbin/httpd -DSSL
apache 587732 73220 00:00:13 18:37 78653 /usr/sbin/httpd -DSSL
root 63348 4228 00:20:42 382-23:46:01 78991 /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
apache 584404 89360 00:00:11 15:20 79254 /usr/sbin/httpd -DSSL
apache 584484 90392 00:00:09 14:20 79260 /usr/sbin/httpd -DSSL
apache 630916 118128 00:00:07 09:57 80007 /usr/sbin/httpd -DSSL
apache 588212 82948 00:00:07 09:55 80008 /usr/sbin/httpd -DSSL
apache 605428 77148 00:00:08 09:47 80010 /usr/sbin/httpd -DSSL
apache 585368 67476 00:00:09 08:53 80021 /usr/sbin/httpd -DSSL
apache 583904 76312 00:00:06 08:45 80085 /usr/sbin/httpd -DSSL
apache 675460 162236 00:00:09 08:18 80174 /usr/sbin/httpd -DSSL
apache 582976 64680 00:00:06 08:17 80175 /usr/sbin/httpd -DSSL
apache 581160 35840 00:00:03 07:51 80178 /usr/sbin/httpd -DSSL
root 95868 3048 00:00:00 07:20 80474 sendmail: server [196.41.62.210] cmd read
root 40060 2032 00:00:00 06:14 80481 dovecot/ssl-params
apache 606336 101348 00:00:11 05:00 80552 /usr/sbin/httpd -DSSL
apache 681452 179224 00:00:06 03:25 80887 /usr/sbin/httpd -DSSL
apache 590040 71540 00:00:06 03:20 80889 /usr/sbin/httpd -DSSL
apache 582040 49176 00:00:02 03:02 80891 /usr/sbin/httpd -DSSL
apache 583248 35852 00:00:01 02:51 80895 /usr/sbin/httpd -DSSL
apache 580944 43704 00:00:01 02:47 81035 /usr/sbin/httpd -DSSL
root 96124 3528 00:00:00 01:39 81204 sendmail: ./488D42tf128472 mail.oac.uncor.edu.: user open
apache 582292 64564 00:00:03 01:30 81205 /usr/sbin/httpd -DSSL
root 96124 3580 00:00:00 00:39 81315 sendmail: ./488Ldcru198796 mail.parktons.com.: user open
root 110772 2080 00:00:00 00:01 81465 /bin/bash /usr/bin/check_mk_agent
root 110900 1688 00:00:00 00:01 81489 /bin/bash /usr/bin/check_mk_agent
root 110772 1260 00:00:00 00:01 81490 /bin/bash /usr/bin/check_mk_agent
root 4092 500 00:00:00 00:01 81493 cat
root 110900 1180 00:00:00 00:01 81517 /bin/bash /usr/bin/check_mk_agent
root 13360 1008 00:00:00 00:01 81518 ps ax -ww -o user:32,vsz,rss,cputime,etime,pid,command
root 4092 544 00:00:00 00:01 81519 tr -s 
root 108316 1288 00:00:00 382-23:25:27 84805 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
mysql 4856168 1565300 706-12:49:16 382-23:25:26 85324 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
root 21712 768 00:00:12 82-17:54:44 158479 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 0 0 00:00:54 11-08:17:46 181185 [flush-9:5]
root 564132 32040 00:03:01 11-08:09:13 182912 /usr/sbin/httpd -DSSL
root 19260 792 00:00:00 15:34:48 194080 /usr/sbin/dovecot
dovecot 12980 1060 00:00:00 15:34:48 194082 dovecot/anvil
root 13108 1196 00:00:00 15:34:48 194083 dovecot/log
root 266452 74636 00:00:13 14:32:34 203491 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
root 269296 77564 00:00:15 14:32:31 203494 spamd child
root 266452 72124 00:00:00 14:32:31 203495 spamd child
root 154784 45448 00:00:41 378-17:57:32 224672 /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
smmsp 78752 788 00:08:38 421-08:39:42 238028 sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
root 93548 1340 01:54:58 421-08:39:42 238030 sendmail: accepting connections
named 724240 39744 03:18:10 421-08:39:27 238586 /usr/sbin/named -u named -4

Found network interfaces through CheckMk:
[start_iplink]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1e:67:cf:4d:48 brd ff:ff:ff:ff:ff:ff
    inet 178.237.35.43/24 brd 178.237.35.255 scope global eth0
    inet 95.142.100.16/24 brd 95.142.100.255 scope global eth0:1
    inet 178.237.38.81/24 brd 178.237.35.255 scope global eth0:2
    inet 178.237.35.40/24 brd 178.237.35.255 scope global secondary eth0:3
    inet6 fe80::21e:67ff:fecf:4d48/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:1e:67:cf:4d:49 brd ff:ff:ff:ff:ff:ff
[end_iplink]

Found on 2024-09-10 17:40

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46ada5227a9a4

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1052,00:00:43,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,02:15:30,3) [migration/0]
(root,0,0,00:12:56,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:01:18,6) [watchdog/0]
(root,0,0,01:26:21,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:15:09,9) [ksoftirqd/1]
(root,0,0,00:02:38,10) [watchdog/1]
(root,0,0,00:44:41,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:07:08,13) [ksoftirqd/2]
(root,0,0,00:01:40,14) [watchdog/2]
(root,0,0,00:35:32,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:03:31,17) [ksoftirqd/3]
(root,0,0,00:01:18,18) [watchdog/3]
(root,0,0,01:07:35,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:08:22,21) [ksoftirqd/4]
(root,0,0,00:01:17,22) [watchdog/4]
(root,0,0,00:51:22,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:08:37,25) [ksoftirqd/5]
(root,0,0,00:01:53,26) [watchdog/5]
(root,0,0,00:49:57,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:03:49,29) [ksoftirqd/6]
(root,0,0,00:00:40,30) [watchdog/6]
(root,0,0,00:24:37,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:03:31,33) [ksoftirqd/7]
(root,0,0,00:00:59,34) [watchdog/7]
(root,0,0,00:34:01,35) [events/0]
(root,0,0,00:14:52,36) [events/1]
(root,0,0,00:15:01,37) [events/2]
(root,0,0,00:15:40,38) [events/3]
(root,0,0,00:10:34,39) [events/4]
(root,0,0,00:15:24,40) [events/5]
(root,0,0,00:12:46,41) [events/6]
(root,0,0,00:14:33,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:01:05,72) [sync_supers]
(root,0,0,00:00:01,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:58:19,82) [kblockd/0]
(root,0,0,00:02:04,83) [kblockd/1]
(root,0,0,00:00:49,84) [kblockd/2]
(root,0,0,00:00:20,85) [kblockd/3]
(root,0,0,00:01:33,86) [kblockd/4]
(root,0,0,00:01:12,87) [kblockd/5]
(root,0,0,02:29:29,88) [kblockd/6]
(root,0,0,00:00:31,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:12,124) [khungtaskd]
(root,0,0,05:09:43,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:21:41,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:19:09,958) [md1_raid1]
(root,0,0,00:00:56,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,404,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:06:21,1237) [edac-poller]
(root,0,0,00:03:42,1286) [md0_raid1]
(root,0,0,00:09:47,1336) [md2_raid1]
(root,0,0,00:36:46,1486) [md3_raid1]
(root,0,0,00:23:04,1629) [md4_raid1]
(root,0,0,21:20:09,1644) [md5_raid1]
(root,0,0,00:04:40,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:16:42,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:29:38,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:28:35,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:31:16,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:32,1923) [xfseofblocks/0]
(root,0,0,00:00:01,1924) [xfseofblocks/1]
(root,0,0,00:00:01,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:02,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:01,1930) [xfseofblocks/7]
(root,0,0,00:07:03,1931) [xfsbufd/md5]
(root,0,0,00:06:28,1932) [xfs-cil/md5]
(root,0,0,00:10:07,1933) [xfssyncd/md5]
(root,0,0,01:11:57,1934) [xfsaild/md5]
(root,0,0,00:00:51,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:02:09,1937) [xfsbufd/md4]
(root,0,0,00:00:15,1938) [xfs-cil/md4]
(root,0,0,00:01:15,1939) [xfssyncd/md4]
(root,0,0,01:08:07,1940) [xfsaild/md4]
(root,0,0,00:05:10,1941) [xfsbufd/md3]
(root,0,0,00:00:47,1942) [xfs-cil/md3]
(root,0,0,00:01:28,1943) [xfssyncd/md3]
(root,0,0,01:09:43,1944) [xfsaild/md3]
(root,0,0,00:05:26,1945) [xfsbufd/sdc1]
(root,0,0,00:07:29,1946) [xfs-cil/sdc1]
(root,0,0,03:03:33,1947) [xfssyncd/sdc1]
(root,0,0,06:22:40,1948) [xfsaild/sdc1]
(root,0,0,00:03:14,2046) [kauditd]
(root,29764,704,00:06:57,2300) auditd
(root,252160,31232,00:30:59,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,560,00:32:09,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1140,00:00:27,2353) /sbin/rsyslogd
(named,779524,33840,05:09:58,2357) /usr/sbin/named -u named -4
(root,4988,748,00:00:08,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,156,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,372,00:08:43,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,604,00:05:31,2540) /usr/sbin/sshd
(root,21712,728,00:01:35,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1200,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4851464,701428,143-22:24:31,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,73428,2040,00:05:19,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:05:17,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:05:18,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2020,00:05:18,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2024,00:05:19,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,63000,00:39:14,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2652,00:21:23,3384) sendmail: accepting connections
(smmsp,80440,2052,00:02:35,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:02:22,3417) crond
(root,107544,516,00:00:08,3471) pure-ftpd (SERVER)                                                  
(root,63332,17508,00:07:36,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:25,31413) [flush-9:2]
(root,0,0,00:00:00,36265) [flush-9:4]
(root,0,0,00:00:31,38799) [flush-9:1]
(root,264888,65612,00:00:03,98432) spamd child
(root,0,0,00:00:17,107869) [flush-9:5]
(root,10640,464,00:00:00,141763) /sbin/udevd -d
(root,10640,456,00:00:00,141766) /sbin/udevd -d
(root,19264,704,00:00:00,145857) /usr/sbin/dovecot
(dovecot,12984,960,00:00:00,145859) dovecot/anvil
(root,13108,1096,00:00:00,145860) dovecot/log
(apache,596148,102800,00:00:44,197547) /usr/sbin/httpd -DSSL -k start
(apache,594556,97356,00:00:35,198427) /usr/sbin/httpd -DSSL -k start
(apache,605196,107236,00:00:30,198432) /usr/sbin/httpd -DSSL -k start
(apache,595768,97740,00:00:25,198518) /usr/sbin/httpd -DSSL -k start
(apache,595444,98540,00:00:32,198519) /usr/sbin/httpd -DSSL -k start
(apache,595328,97368,00:00:27,198522) /usr/sbin/httpd -DSSL -k start
(apache,595048,98100,00:00:28,198527) /usr/sbin/httpd -DSSL -k start
(apache,594100,94928,00:00:19,199570) /usr/sbin/httpd -DSSL -k start
(apache,594832,93392,00:00:21,199671) /usr/sbin/httpd -DSSL -k start
(apache,593736,99340,00:00:18,199672) /usr/sbin/httpd -DSSL -k start
(apache,594892,97640,00:00:22,199804) /usr/sbin/httpd -DSSL -k start
(apache,606700,108592,00:00:30,199890) /usr/sbin/httpd -DSSL -k start
(root,15088,3100,00:00:00,201035) dovecot/config
(dovecot,78716,2816,00:00:00,201036) dovecot/auth
(apache,591908,72116,00:00:05,201133) /usr/sbin/httpd -DSSL -k start
(apache,593360,85384,00:00:05,201657) /usr/sbin/httpd -DSSL -k start
(apache,615572,94172,00:00:02,202326) /usr/sbin/httpd -DSSL -k start
(apache,592232,86656,00:00:06,202327) /usr/sbin/httpd -DSSL -k start
(apache,591028,71064,00:00:05,202329) /usr/sbin/httpd -DSSL -k start
(apache,590700,59056,00:00:01,202813) /usr/sbin/httpd -DSSL -k start
(apache,590392,56184,00:00:01,202814) /usr/sbin/httpd -DSSL -k start
(apache,648580,134736,00:00:02,202816) /usr/sbin/httpd -DSSL -k start
(apache,589056,40816,00:00:00,202818) /usr/sbin/httpd -DSSL -k start
(apache,590720,59436,00:00:02,202819) /usr/sbin/httpd -DSSL -k start
(root,109652,848,00:00:00,203429) pure-ftpd (IDLE)                                                    
(root,109652,632,00:00:00,203430) pure-ftpd (PRIV)                                                    
(apache,588340,38036,00:00:00,203772) /usr/sbin/httpd -DSSL -k start
(apache,588280,35488,00:00:00,203779) /usr/sbin/httpd -DSSL -k start
(apache,588160,34340,00:00:00,203780) /usr/sbin/httpd -DSSL -k start
(root,110284,1420,00:00:00,203971) /bin/bash /usr/bin/check_mk_agent
(root,13372,1000,00:00:00,203990) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,812,00:00:00,203991) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,572592,38320,00:29:47,210298) /usr/sbin/httpd -DSSL -k start
(root,263948,61440,00:00:01,242736) spamd child

Found on 2023-03-19 07:04

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46ada77298314

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1052,00:00:41,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,02:01:48,3) [migration/0]
(root,0,0,00:11:35,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:01:13,6) [watchdog/0]
(root,0,0,01:17:44,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:13:38,9) [ksoftirqd/1]
(root,0,0,00:02:21,10) [watchdog/1]
(root,0,0,00:40:55,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:06:22,13) [ksoftirqd/2]
(root,0,0,00:01:33,14) [watchdog/2]
(root,0,0,00:32:20,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:03:08,17) [ksoftirqd/3]
(root,0,0,00:01:11,18) [watchdog/3]
(root,0,0,01:00:53,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:07:31,21) [ksoftirqd/4]
(root,0,0,00:01:09,22) [watchdog/4]
(root,0,0,00:46:42,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:07:46,25) [ksoftirqd/5]
(root,0,0,00:01:43,26) [watchdog/5]
(root,0,0,00:45:12,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:03:25,29) [ksoftirqd/6]
(root,0,0,00:00:36,30) [watchdog/6]
(root,0,0,00:22:36,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:03:09,33) [ksoftirqd/7]
(root,0,0,00:00:52,34) [watchdog/7]
(root,0,0,00:30:49,35) [events/0]
(root,0,0,00:13:29,36) [events/1]
(root,0,0,00:13:34,37) [events/2]
(root,0,0,00:14:11,38) [events/3]
(root,0,0,00:09:32,39) [events/4]
(root,0,0,00:13:56,40) [events/5]
(root,0,0,00:11:36,41) [events/6]
(root,0,0,00:13:09,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:59,72) [sync_supers]
(root,0,0,00:00:01,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:52:08,82) [kblockd/0]
(root,0,0,00:01:51,83) [kblockd/1]
(root,0,0,00:00:44,84) [kblockd/2]
(root,0,0,00:00:18,85) [kblockd/3]
(root,0,0,00:01:25,86) [kblockd/4]
(root,0,0,00:01:06,87) [kblockd/5]
(root,0,0,02:15:06,88) [kblockd/6]
(root,0,0,00:00:28,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:11,124) [khungtaskd]
(root,0,0,04:39:48,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:19:34,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:17:24,958) [md1_raid1]
(root,0,0,00:00:51,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,404,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:05:48,1237) [edac-poller]
(root,0,0,00:03:22,1286) [md0_raid1]
(root,0,0,00:08:54,1336) [md2_raid1]
(root,0,0,00:33:21,1486) [md3_raid1]
(root,0,0,00:20:57,1629) [md4_raid1]
(root,0,0,19:14:25,1644) [md5_raid1]
(root,0,0,00:04:14,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:14:58,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:26:41,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:25:12,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:27:45,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:29,1923) [xfseofblocks/0]
(root,0,0,00:00:01,1924) [xfseofblocks/1]
(root,0,0,00:00:01,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:02,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:06:21,1931) [xfsbufd/md5]
(root,0,0,00:05:51,1932) [xfs-cil/md5]
(root,0,0,00:09:10,1933) [xfssyncd/md5]
(root,0,0,01:05:09,1934) [xfsaild/md5]
(root,0,0,00:00:47,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:01:57,1937) [xfsbufd/md4]
(root,0,0,00:00:13,1938) [xfs-cil/md4]
(root,0,0,00:01:08,1939) [xfssyncd/md4]
(root,0,0,01:01:41,1940) [xfsaild/md4]
(root,0,0,00:04:40,1941) [xfsbufd/md3]
(root,0,0,00:00:43,1942) [xfs-cil/md3]
(root,0,0,00:01:19,1943) [xfssyncd/md3]
(root,0,0,01:03:08,1944) [xfsaild/md3]
(root,0,0,00:04:50,1945) [xfsbufd/sdc1]
(root,0,0,00:06:41,1946) [xfs-cil/sdc1]
(root,0,0,02:44:32,1947) [xfssyncd/sdc1]
(root,0,0,05:45:13,1948) [xfsaild/sdc1]
(root,0,0,00:02:59,2046) [kauditd]
(root,29764,704,00:06:24,2300) auditd
(root,252160,31228,00:28:36,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,560,00:29:09,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1140,00:00:26,2353) /sbin/rsyslogd
(named,778224,32272,04:52:30,2357) /usr/sbin/named -u named -4
(root,4988,748,00:00:08,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,156,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,372,00:07:53,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,604,00:05:06,2540) /usr/sbin/sshd
(root,21712,728,00:01:26,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1200,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4851464,678108,127-12:25:05,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:11:14,3256) [flush-9:5]
(root,73428,2040,00:04:43,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:04:42,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,88028,2168,00:04:43,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2020,00:04:42,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2024,00:04:42,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,65544,00:35:37,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2652,00:19:10,3384) sendmail: accepting connections
(smmsp,80440,2052,00:02:21,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:02:09,3417) crond
(root,107544,516,00:00:07,3471) pure-ftpd (SERVER)                                                  
(root,63332,17508,00:06:55,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:23,31413) [flush-9:2]
(root,19264,708,00:00:00,35149) /usr/sbin/dovecot
(dovecot,12984,988,00:00:00,35151) dovecot/anvil
(root,13108,1096,00:00:00,35152) dovecot/log
(root,0,0,00:00:28,38799) [flush-9:1]
(root,0,0,00:00:00,96012) [flush-9:4]
(root,10640,464,00:00:00,141763) /sbin/udevd -d
(root,10640,456,00:00:00,141766) /sbin/udevd -d
(apache,591964,76568,00:00:14,144624) /usr/sbin/httpd -DSSL -k start
(apache,595360,88924,00:00:15,144634) /usr/sbin/httpd -DSSL -k start
(apache,602928,85376,00:00:08,144936) /usr/sbin/httpd -DSSL -k start
(apache,594692,72172,00:00:08,145445) /usr/sbin/httpd -DSSL -k start
(apache,613308,92996,00:00:05,146074) /usr/sbin/httpd -DSSL -k start
(apache,602656,85940,00:00:05,146078) /usr/sbin/httpd -DSSL -k start
(apache,594412,86968,00:00:09,146082) /usr/sbin/httpd -DSSL -k start
(apache,595156,71400,00:00:04,146641) /usr/sbin/httpd -DSSL -k start
(apache,593328,88824,00:00:06,146642) /usr/sbin/httpd -DSSL -k start
(apache,603640,92836,00:00:04,146643) /usr/sbin/httpd -DSSL -k start
(apache,590760,76312,00:00:03,146645) /usr/sbin/httpd -DSSL -k start
(apache,593768,83072,00:00:04,146740) /usr/sbin/httpd -DSSL -k start
(apache,594360,81860,00:00:03,147196) /usr/sbin/httpd -DSSL -k start
(apache,602716,67088,00:00:03,147198) /usr/sbin/httpd -DSSL -k start
(apache,590196,56208,00:00:03,147199) /usr/sbin/httpd -DSSL -k start
(apache,589968,66160,00:00:02,147289) /usr/sbin/httpd -DSSL -k start
(apache,615752,90976,00:00:02,147290) /usr/sbin/httpd -DSSL -k start
(apache,587940,36512,00:00:00,147714) /usr/sbin/httpd -DSSL -k start
(apache,587672,36412,00:00:00,147715) /usr/sbin/httpd -DSSL -k start
(apache,606500,102728,00:00:04,147716) /usr/sbin/httpd -DSSL -k start
(apache,611488,74972,00:00:01,147719) /usr/sbin/httpd -DSSL -k start
(apache,588024,49900,00:00:01,147813) /usr/sbin/httpd -DSSL -k start
(apache,597368,60564,00:00:01,147814) /usr/sbin/httpd -DSSL -k start
(apache,589408,56528,00:00:01,147815) /usr/sbin/httpd -DSSL -k start
(apache,587964,37124,00:00:00,147816) /usr/sbin/httpd -DSSL -k start
(apache,587668,35212,00:00:00,147819) /usr/sbin/httpd -DSSL -k start
(apache,590408,51420,00:00:00,147820) /usr/sbin/httpd -DSSL -k start
(apache,587568,34200,00:00:00,147821) /usr/sbin/httpd -DSSL -k start
(apache,617092,80768,00:00:01,147825) /usr/sbin/httpd -DSSL -k start
(apache,587100,36512,00:00:00,147826) /usr/sbin/httpd -DSSL -k start
(apache,587556,35840,00:00:00,147827) /usr/sbin/httpd -DSSL -k start
(apache,573016,29444,00:00:00,147828) /usr/sbin/httpd -DSSL -k start
(apache,601872,50688,00:00:00,147829) /usr/sbin/httpd -DSSL -k start
(apache,572480,30232,00:00:00,147833) /usr/sbin/httpd -DSSL -k start
(apache,588176,35148,00:00:00,147834) /usr/sbin/httpd -DSSL -k start
(root,97552,4216,00:00:00,148066) sendmail: server slow.woinsta.com [141.98.11.46] (may be forged) cmd read
(root,110284,1424,00:00:00,148168) /bin/bash /usr/bin/check_mk_agent
(root,13364,996,00:00:00,148187) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,816,00:00:00,148188) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,571836,37560,00:26:32,210298) /usr/sbin/httpd -DSSL -k start
(root,266496,69308,00:00:18,241497) spamd child
(root,263948,63904,00:00:00,242736) spamd child

Found on 2023-03-05 11:23

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46adaf71001f4

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1052,00:00:37,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,01:51:59,3) [migration/0]
(root,0,0,00:10:28,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:01:06,6) [watchdog/0]
(root,0,0,01:11:45,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:12:22,9) [ksoftirqd/1]
(root,0,0,00:02:12,10) [watchdog/1]
(root,0,0,00:38:08,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:05:45,13) [ksoftirqd/2]
(root,0,0,00:01:26,14) [watchdog/2]
(root,0,0,00:30:53,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:02:49,17) [ksoftirqd/3]
(root,0,0,00:01:07,18) [watchdog/3]
(root,0,0,00:56:49,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:06:51,21) [ksoftirqd/4]
(root,0,0,00:01:04,22) [watchdog/4]
(root,0,0,00:43:48,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:07:03,25) [ksoftirqd/5]
(root,0,0,00:01:36,26) [watchdog/5]
(root,0,0,00:41:59,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:03:05,29) [ksoftirqd/6]
(root,0,0,00:00:33,30) [watchdog/6]
(root,0,0,00:21:34,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:02:50,33) [ksoftirqd/7]
(root,0,0,00:00:49,34) [watchdog/7]
(root,0,0,00:27:55,35) [events/0]
(root,0,0,00:12:17,36) [events/1]
(root,0,0,00:12:16,37) [events/2]
(root,0,0,00:12:50,38) [events/3]
(root,0,0,00:08:37,39) [events/4]
(root,0,0,00:12:35,40) [events/5]
(root,0,0,00:10:32,41) [events/6]
(root,0,0,00:11:53,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:53,72) [sync_supers]
(root,0,0,00:00:01,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:46:46,82) [kblockd/0]
(root,0,0,00:01:40,83) [kblockd/1]
(root,0,0,00:00:39,84) [kblockd/2]
(root,0,0,00:00:16,85) [kblockd/3]
(root,0,0,00:01:17,86) [kblockd/4]
(root,0,0,00:01:01,87) [kblockd/5]
(root,0,0,02:02:23,88) [kblockd/6]
(root,0,0,00:00:26,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:09,124) [khungtaskd]
(root,0,0,04:11:19,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:17:48,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:15:39,958) [md1_raid1]
(root,0,0,00:00:46,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,404,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:05:22,1237) [edac-poller]
(root,0,0,00:03:01,1286) [md0_raid1]
(root,0,0,00:08:01,1336) [md2_raid1]
(root,0,0,00:30:13,1486) [md3_raid1]
(root,0,0,00:18:53,1629) [md4_raid1]
(root,0,0,17:23:44,1644) [md5_raid1]
(root,0,0,00:03:51,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:13:29,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:24:05,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:21:27,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:24:19,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:26,1923) [xfseofblocks/0]
(root,0,0,00:00:01,1924) [xfseofblocks/1]
(root,0,0,00:00:01,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:01,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:05:44,1931) [xfsbufd/md5]
(root,0,0,00:05:20,1932) [xfs-cil/md5]
(root,0,0,00:08:14,1933) [xfssyncd/md5]
(root,0,0,00:59:00,1934) [xfsaild/md5]
(root,0,0,00:00:42,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:01:46,1937) [xfsbufd/md4]
(root,0,0,00:00:12,1938) [xfs-cil/md4]
(root,0,0,00:01:01,1939) [xfssyncd/md4]
(root,0,0,00:55:52,1940) [xfsaild/md4]
(root,0,0,00:04:14,1941) [xfsbufd/md3]
(root,0,0,00:00:40,1942) [xfs-cil/md3]
(root,0,0,00:01:12,1943) [xfssyncd/md3]
(root,0,0,00:57:10,1944) [xfsaild/md3]
(root,0,0,00:04:16,1945) [xfsbufd/sdc1]
(root,0,0,00:05:57,1946) [xfs-cil/sdc1]
(root,0,0,02:30:19,1947) [xfssyncd/sdc1]
(root,0,0,05:14:42,1948) [xfsaild/sdc1]
(root,0,0,00:02:43,2046) [kauditd]
(root,29764,704,00:05:50,2300) auditd
(root,252160,31192,00:26:20,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,560,00:26:18,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1140,00:00:23,2353) /sbin/rsyslogd
(named,778224,32272,04:36:47,2357) /usr/sbin/named -u named -4
(root,4988,748,00:00:07,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,156,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,372,00:07:07,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,604,00:04:38,2540) /usr/sbin/sshd
(root,21712,728,00:01:18,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1200,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4851464,682372,112-03:50:07,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:10:10,3256) [flush-9:5]
(root,73428,2040,00:04:18,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:04:16,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:04:17,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2020,00:04:17,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,88024,2168,00:04:17,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,67232,00:32:14,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2652,00:17:25,3384) sendmail: accepting connections
(smmsp,80440,2052,00:02:07,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:01:57,3417) crond
(root,107544,516,00:00:06,3471) pure-ftpd (SERVER)                                                  
(root,63332,17508,00:06:17,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:20,31413) [flush-9:2]
(root,265024,68520,00:00:17,35801) spamd child
(root,0,0,00:00:25,38799) [flush-9:1]
(root,0,0,00:00:00,74024) [flush-9:4]
(apache,593736,87164,00:00:23,74865) /usr/sbin/httpd -DSSL -k start
(apache,594800,87232,00:00:32,75269) /usr/sbin/httpd -DSSL -k start
(apache,615328,108996,00:00:32,76582) /usr/sbin/httpd -DSSL -k start
(apache,592408,90640,00:00:19,77027) /usr/sbin/httpd -DSSL -k start
(apache,603584,94816,00:00:20,77746) /usr/sbin/httpd -DSSL -k start
(apache,629964,120312,00:00:13,77907) /usr/sbin/httpd -DSSL -k start
(apache,590240,80136,00:00:06,78201) /usr/sbin/httpd -DSSL -k start
(apache,596956,88904,00:00:14,78204) /usr/sbin/httpd -DSSL -k start
(apache,606356,99596,00:00:19,78206) /usr/sbin/httpd -DSSL -k start
(apache,590736,81860,00:00:12,78228) /usr/sbin/httpd -DSSL -k start
(apache,605816,88516,00:00:10,78953) /usr/sbin/httpd -DSSL -k start
(apache,612104,98860,00:00:04,79818) /usr/sbin/httpd -DSSL -k start
(apache,594056,81192,00:00:10,79824) /usr/sbin/httpd -DSSL -k start
(apache,591676,70908,00:00:05,79825) /usr/sbin/httpd -DSSL -k start
(apache,604764,97868,00:00:09,79828) /usr/sbin/httpd -DSSL -k start
(apache,590384,81068,00:00:06,79829) /usr/sbin/httpd -DSSL -k start
(apache,608496,97800,00:00:04,79831) /usr/sbin/httpd -DSSL -k start
(apache,615308,98212,00:00:12,79832) /usr/sbin/httpd -DSSL -k start
(apache,602260,83012,00:00:07,79833) /usr/sbin/httpd -DSSL -k start
(apache,625024,108224,00:00:14,79834) /usr/sbin/httpd -DSSL -k start
(apache,615532,107676,00:00:09,79835) /usr/sbin/httpd -DSSL -k start
(apache,606428,96588,00:00:08,79836) /usr/sbin/httpd -DSSL -k start
(apache,616840,97020,00:00:10,79932) /usr/sbin/httpd -DSSL -k start
(apache,612780,96768,00:00:11,79938) /usr/sbin/httpd -DSSL -k start
(apache,608328,96784,00:00:04,80674) /usr/sbin/httpd -DSSL -k start
(apache,586220,32988,00:00:00,81130) /usr/sbin/httpd -DSSL -k start
(apache,610024,72580,00:00:00,81131) /usr/sbin/httpd -DSSL -k start
(apache,590104,54668,00:00:01,81132) /usr/sbin/httpd -DSSL -k start
(apache,598216,73336,00:00:01,81133) /usr/sbin/httpd -DSSL -k start
(apache,586712,34200,00:00:00,81134) /usr/sbin/httpd -DSSL -k start
(apache,615776,91916,00:00:01,81135) /usr/sbin/httpd -DSSL -k start
(apache,586696,35104,00:00:00,81137) /usr/sbin/httpd -DSSL -k start
(apache,600428,77016,00:00:01,81138) /usr/sbin/httpd -DSSL -k start
(apache,571384,24544,00:00:00,81139) /usr/sbin/httpd -DSSL -k start
(apache,586172,33040,00:00:00,81140) /usr/sbin/httpd -DSSL -k start
(root,97552,4220,00:00:00,81247) sendmail: server icne-punitive.themedestiny.com [141.98.11.84] (may be forged) cmd read
(root,110284,1420,00:00:00,81428) /bin/bash /usr/bin/check_mk_agent
(root,13364,1000,00:00:00,81447) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,816,00:00:00,81448) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,10640,464,00:00:00,141763) /sbin/udevd -d
(root,10640,456,00:00:00,141766) /sbin/udevd -d
(root,19264,704,00:00:00,181245) /usr/sbin/dovecot
(dovecot,12984,992,00:00:00,181247) dovecot/anvil
(root,13108,1092,00:00:00,181248) dovecot/log
(root,571128,36848,00:23:48,210298) /usr/sbin/httpd -DSSL -k start
(root,266496,70428,00:00:14,241497) spamd child

Found on 2023-02-20 13:50

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46ada166a977b

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1052,00:00:34,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,01:43:41,3) [migration/0]
(root,0,0,00:09:30,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:01:02,6) [watchdog/0]
(root,0,0,01:05:53,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:11:12,9) [ksoftirqd/1]
(root,0,0,00:02:02,10) [watchdog/1]
(root,0,0,00:34:58,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:05:15,13) [ksoftirqd/2]
(root,0,0,00:01:18,14) [watchdog/2]
(root,0,0,00:28:17,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:02:35,17) [ksoftirqd/3]
(root,0,0,00:01:04,18) [watchdog/3]
(root,0,0,00:53:00,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:06:14,21) [ksoftirqd/4]
(root,0,0,00:00:59,22) [watchdog/4]
(root,0,0,00:40:35,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:06:23,25) [ksoftirqd/5]
(root,0,0,00:01:30,26) [watchdog/5]
(root,0,0,00:38:49,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:02:49,29) [ksoftirqd/6]
(root,0,0,00:00:31,30) [watchdog/6]
(root,0,0,00:20:02,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:02:34,33) [ksoftirqd/7]
(root,0,0,00:00:46,34) [watchdog/7]
(root,0,0,00:25:15,35) [events/0]
(root,0,0,00:11:09,36) [events/1]
(root,0,0,00:11:12,37) [events/2]
(root,0,0,00:11:38,38) [events/3]
(root,0,0,00:07:49,39) [events/4]
(root,0,0,00:11:26,40) [events/5]
(root,0,0,00:09:30,41) [events/6]
(root,0,0,00:10:47,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:48,72) [sync_supers]
(root,0,0,00:00:01,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:42:10,82) [kblockd/0]
(root,0,0,00:01:30,83) [kblockd/1]
(root,0,0,00:00:36,84) [kblockd/2]
(root,0,0,00:00:14,85) [kblockd/3]
(root,0,0,00:01:09,86) [kblockd/4]
(root,0,0,00:00:54,87) [kblockd/5]
(root,0,0,01:50:26,88) [kblockd/6]
(root,0,0,00:00:23,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:08,124) [khungtaskd]
(root,0,0,03:46:07,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:16:10,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:13:57,958) [md1_raid1]
(root,0,0,00:00:41,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,404,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:04:56,1237) [edac-poller]
(root,0,0,00:02:41,1286) [md0_raid1]
(root,0,0,00:07:10,1336) [md2_raid1]
(root,0,0,00:27:13,1486) [md3_raid1]
(root,0,0,00:16:55,1629) [md4_raid1]
(root,0,0,15:34:49,1644) [md5_raid1]
(root,0,0,00:03:28,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:12:22,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:22:04,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:19:28,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:22:09,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:23,1923) [xfseofblocks/0]
(root,0,0,00:00:01,1924) [xfseofblocks/1]
(root,0,0,00:00:01,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:01,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:05:08,1931) [xfsbufd/md5]
(root,0,0,00:04:51,1932) [xfs-cil/md5]
(root,0,0,00:07:28,1933) [xfssyncd/md5]
(root,0,0,00:53:18,1934) [xfsaild/md5]
(root,0,0,00:00:38,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:01:36,1937) [xfsbufd/md4]
(root,0,0,00:00:11,1938) [xfs-cil/md4]
(root,0,0,00:00:55,1939) [xfssyncd/md4]
(root,0,0,00:50:31,1940) [xfsaild/md4]
(root,0,0,00:03:50,1941) [xfsbufd/md3]
(root,0,0,00:00:37,1942) [xfs-cil/md3]
(root,0,0,00:01:05,1943) [xfssyncd/md3]
(root,0,0,00:51:40,1944) [xfsaild/md3]
(root,0,0,00:03:56,1945) [xfsbufd/sdc1]
(root,0,0,00:05:29,1946) [xfs-cil/sdc1]
(root,0,0,02:13:01,1947) [xfssyncd/sdc1]
(root,0,0,04:53:50,1948) [xfsaild/sdc1]
(root,0,0,00:02:28,2046) [kauditd]
(root,29764,704,00:05:18,2300) auditd
(root,252160,31132,00:23:26,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,560,00:23:42,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1140,00:00:22,2353) /sbin/rsyslogd
(named,778224,32232,04:20:17,2357) /usr/sbin/named -u named -4
(root,4988,744,00:00:06,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,156,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,372,00:06:27,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,604,00:04:14,2540) /usr/sbin/sshd
(root,21712,728,00:01:11,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1200,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4851464,671792,101-09:46:40,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:09:11,3256) [flush-9:5]
(root,73428,2040,00:03:51,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:03:50,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:03:51,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2020,00:03:50,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2024,00:03:51,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,67232,00:29:08,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2652,00:15:42,3384) sendmail: accepting connections
(smmsp,80440,2052,00:01:54,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:01:45,3417) crond
(root,107544,516,00:00:06,3471) pure-ftpd (SERVER)                                                  
(root,63332,17508,00:05:41,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:18,31413) [flush-9:2]
(root,0,0,00:00:23,38799) [flush-9:1]
(apache,591492,82600,00:00:10,44391) /usr/sbin/httpd -DSSL -k start
(apache,598480,94408,00:00:14,44492) /usr/sbin/httpd -DSSL -k start
(apache,591744,79600,00:00:04,47400) /usr/sbin/httpd -DSSL -k start
(apache,591296,85368,00:00:09,47401) /usr/sbin/httpd -DSSL -k start
(apache,591888,85000,00:00:09,47402) /usr/sbin/httpd -DSSL -k start
(apache,589548,78704,00:00:06,47553) /usr/sbin/httpd -DSSL -k start
(apache,589088,66100,00:00:04,47650) /usr/sbin/httpd -DSSL -k start
(apache,596568,88500,00:00:05,48308) /usr/sbin/httpd -DSSL -k start
(apache,591720,88604,00:00:11,48309) /usr/sbin/httpd -DSSL -k start
(apache,589644,71472,00:00:05,48486) /usr/sbin/httpd -DSSL -k start
(apache,589424,76548,00:00:05,48491) /usr/sbin/httpd -DSSL -k start
(apache,590928,75760,00:00:07,48500) /usr/sbin/httpd -DSSL -k start
(apache,588636,62728,00:00:02,48501) /usr/sbin/httpd -DSSL -k start
(apache,588372,59504,00:00:02,48502) /usr/sbin/httpd -DSSL -k start
(apache,590044,73276,00:00:04,48504) /usr/sbin/httpd -DSSL -k start
(apache,603748,93488,00:00:07,48506) /usr/sbin/httpd -DSSL -k start
(apache,589264,79472,00:00:04,48508) /usr/sbin/httpd -DSSL -k start
(apache,588856,57668,00:00:02,48509) /usr/sbin/httpd -DSSL -k start
(apache,588852,67660,00:00:02,48511) /usr/sbin/httpd -DSSL -k start
(apache,589876,71216,00:00:04,48513) /usr/sbin/httpd -DSSL -k start
(apache,589004,58320,00:00:02,48977) /usr/sbin/httpd -DSSL -k start
(root,97552,4148,00:00:00,49712) sendmail: server 216.189.223.114.broad.wx.js.dynamic.163data.com.cn [114.223.189.216] (may be forged) cmd read
(apache,587816,51416,00:00:01,49796) /usr/sbin/httpd -DSSL -k start
(apache,590972,77548,00:00:03,49797) /usr/sbin/httpd -DSSL -k start
(apache,614660,100976,00:00:04,49799) /usr/sbin/httpd -DSSL -k start
(apache,588892,58860,00:00:03,49800) /usr/sbin/httpd -DSSL -k start
(apache,594884,61012,00:00:01,49801) /usr/sbin/httpd -DSSL -k start
(root,110284,1420,00:00:00,50654) /bin/bash /usr/bin/check_mk_agent
(root,13372,1000,00:00:00,50673) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,816,00:00:00,50674) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,19264,700,00:00:00,87007) /usr/sbin/dovecot
(dovecot,12984,964,00:00:00,87009) dovecot/anvil
(root,13108,1100,00:00:00,87010) dovecot/log
(root,10640,464,00:00:00,141763) /sbin/udevd -d
(root,10640,456,00:00:00,141766) /sbin/udevd -d
(root,0,0,00:00:00,170893) [flush-9:4]
(root,267956,72236,00:00:45,195381) spamd child
(root,570360,36076,00:21:06,210298) /usr/sbin/httpd -DSSL -k start
(root,266496,70436,00:00:13,241497) spamd child

Found on 2023-02-08 16:36

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46ada69d85209

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1052,00:00:32,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,01:38:07,3) [migration/0]
(root,0,0,00:08:44,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:00:58,6) [watchdog/0]
(root,0,0,01:02:30,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:10:19,9) [ksoftirqd/1]
(root,0,0,00:01:56,10) [watchdog/1]
(root,0,0,00:33:40,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:04:49,13) [ksoftirqd/2]
(root,0,0,00:01:13,14) [watchdog/2]
(root,0,0,00:27:31,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:02:23,17) [ksoftirqd/3]
(root,0,0,00:01:02,18) [watchdog/3]
(root,0,0,00:51:03,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:05:46,21) [ksoftirqd/4]
(root,0,0,00:00:57,22) [watchdog/4]
(root,0,0,00:38:45,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:05:51,25) [ksoftirqd/5]
(root,0,0,00:01:24,26) [watchdog/5]
(root,0,0,00:37:05,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:02:35,29) [ksoftirqd/6]
(root,0,0,00:00:29,30) [watchdog/6]
(root,0,0,00:19:26,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:02:20,33) [ksoftirqd/7]
(root,0,0,00:00:44,34) [watchdog/7]
(root,0,0,00:23:05,35) [events/0]
(root,0,0,00:10:12,36) [events/1]
(root,0,0,00:10:17,37) [events/2]
(root,0,0,00:10:40,38) [events/3]
(root,0,0,00:07:09,39) [events/4]
(root,0,0,00:10:27,40) [events/5]
(root,0,0,00:08:43,41) [events/6]
(root,0,0,00:09:50,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:44,72) [sync_supers]
(root,0,0,00:00:01,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:38:33,82) [kblockd/0]
(root,0,0,00:01:21,83) [kblockd/1]
(root,0,0,00:00:32,84) [kblockd/2]
(root,0,0,00:00:12,85) [kblockd/3]
(root,0,0,00:01:02,86) [kblockd/4]
(root,0,0,00:00:49,87) [kblockd/5]
(root,0,0,01:41:20,88) [kblockd/6]
(root,0,0,00:00:20,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:07,124) [khungtaskd]
(root,0,0,03:25:19,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:14:45,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:12:58,958) [md1_raid1]
(root,0,0,00:00:38,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,404,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:04:36,1237) [edac-poller]
(root,0,0,00:02:31,1286) [md0_raid1]
(root,0,0,00:06:40,1336) [md2_raid1]
(root,0,0,00:25:06,1486) [md3_raid1]
(root,0,0,00:15:42,1629) [md4_raid1]
(root,0,0,14:25:09,1644) [md5_raid1]
(root,0,0,00:03:11,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:11:16,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:20:05,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:17:22,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:19:52,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:21,1923) [xfseofblocks/0]
(root,0,0,00:00:01,1924) [xfseofblocks/1]
(root,0,0,00:00:00,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:01,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:04:40,1931) [xfsbufd/md5]
(root,0,0,00:04:27,1932) [xfs-cil/md5]
(root,0,0,00:06:47,1933) [xfssyncd/md5]
(root,0,0,00:48:46,1934) [xfsaild/md5]
(root,0,0,00:00:35,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:01:27,1937) [xfsbufd/md4]
(root,0,0,00:00:10,1938) [xfs-cil/md4]
(root,0,0,00:00:50,1939) [xfssyncd/md4]
(root,0,0,00:46:12,1940) [xfsaild/md4]
(root,0,0,00:03:29,1941) [xfsbufd/md3]
(root,0,0,00:00:34,1942) [xfs-cil/md3]
(root,0,0,00:00:59,1943) [xfssyncd/md3]
(root,0,0,00:47:14,1944) [xfsaild/md3]
(root,0,0,00:03:34,1945) [xfsbufd/sdc1]
(root,0,0,00:04:57,1946) [xfs-cil/sdc1]
(root,0,0,02:06:11,1947) [xfssyncd/sdc1]
(root,0,0,04:30:16,1948) [xfsaild/sdc1]
(root,0,0,00:02:17,2046) [kauditd]
(root,29764,704,00:04:55,2300) auditd
(root,252160,31092,00:21:56,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,560,00:21:33,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1140,00:00:20,2353) /sbin/rsyslogd
(named,778224,32228,04:08:43,2357) /usr/sbin/named -u named -4
(root,4988,744,00:00:06,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,156,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,372,00:05:53,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,604,00:03:53,2540) /usr/sbin/sshd
(root,21712,728,00:01:05,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1200,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4850660,665204,90-13:23:00,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:08:23,3256) [flush-9:5]
(root,73428,2040,00:03:43,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:03:42,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2024,00:03:43,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2020,00:03:42,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2024,00:03:43,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,67232,00:26:35,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2652,00:14:42,3384) sendmail: accepting connections
(smmsp,80440,2052,00:01:44,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:01:36,3417) crond
(root,107544,516,00:00:05,3471) pure-ftpd (SERVER)                                                  
(root,63332,17484,00:05:12,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:17,31413) [flush-9:2]
(root,0,0,00:00:21,38799) [flush-9:1]
(root,265828,69396,00:00:38,91823) spamd child
(root,19264,700,00:00:00,117098) /usr/sbin/dovecot
(dovecot,12984,964,00:00:00,117100) dovecot/anvil
(root,13108,1092,00:00:00,117101) dovecot/log
(root,10640,464,00:00:00,141763) /sbin/udevd -d
(root,10640,456,00:00:00,141766) /sbin/udevd -d
(root,139900,1860,00:00:00,171595) CROND
(root,106112,1148,00:00:00,171605) /bin/sh -c /usr/local/sbin/incrun.sh > /dev/null 2>&1
(root,106112,1276,00:00:00,171608) /bin/bash /usr/local/sbin/incrun.sh
(root,0,0,00:00:00,172405) [flush-8:32]
(root,0,0,00:00:00,172608) [flush-9:4]
(apache,593336,74676,00:00:06,174927) /usr/sbin/httpd -DSSL -k start
(apache,602120,100220,00:00:10,174942) /usr/sbin/httpd -DSSL -k start
(apache,598160,86784,00:00:13,174947) /usr/sbin/httpd -DSSL -k start
(apache,592508,88520,00:00:09,174977) /usr/sbin/httpd -DSSL -k start
(apache,618996,97308,00:00:04,175113) /usr/sbin/httpd -DSSL -k start
(apache,593008,77264,00:00:10,175181) /usr/sbin/httpd -DSSL -k start
(apache,611724,94180,00:00:06,175182) /usr/sbin/httpd -DSSL -k start
(apache,657580,146740,00:00:07,175183) /usr/sbin/httpd -DSSL -k start
(apache,591324,62412,00:00:05,175186) /usr/sbin/httpd -DSSL -k start
(apache,592184,77108,00:00:11,175199) /usr/sbin/httpd -DSSL -k start
(apache,616428,99556,00:00:08,175201) /usr/sbin/httpd -DSSL -k start
(apache,590412,58940,00:00:03,175205) /usr/sbin/httpd -DSSL -k start
(apache,592996,78956,00:00:11,175215) /usr/sbin/httpd -DSSL -k start
(apache,603752,88348,00:00:07,175220) /usr/sbin/httpd -DSSL -k start
(apache,603088,98200,00:00:10,175226) /usr/sbin/httpd -DSSL -k start
(apache,591880,78004,00:00:09,175233) /usr/sbin/httpd -DSSL -k start
(apache,599156,67284,00:00:02,177575) /usr/sbin/httpd -DSSL -k start
(apache,604832,87752,00:00:04,177826) /usr/sbin/httpd -DSSL -k start
(apache,592984,62956,00:00:04,177831) /usr/sbin/httpd -DSSL -k start
(apache,588908,38288,00:00:00,178614) /usr/sbin/httpd -DSSL -k start
(apache,586052,35652,00:00:00,178879) /usr/sbin/httpd -DSSL -k start
(apache,614464,63608,00:00:00,179416) /usr/sbin/httpd -DSSL -k start
(apache,579172,54960,00:00:01,179417) /usr/sbin/httpd -DSSL -k start
(apache,608672,68588,00:00:00,179418) /usr/sbin/httpd -DSSL -k start
(root,64776,4152,00:00:00,179507) ssh -C -n 178.237.35.146 /usr/bin/mysqldump -QqCc --skip-extended-insert --default-character-set=utf8 paperpk
(root,4300,468,00:00:00,179508) gzip
(root,107548,548,00:00:00,179511) pure-ftpd (IDLE)                                                    
(root,109652,632,00:00:00,179512) pure-ftpd (PRIV)                                                    
(root,110284,1420,00:00:00,179634) /bin/bash /usr/bin/check_mk_agent
(root,13364,996,00:00:00,179653) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,816,00:00:00,179654) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,569984,35704,00:19:07,210298) /usr/sbin/httpd -DSSL -k start
(root,266204,69836,00:00:11,241497) spamd child

Found on 2023-01-30 00:49

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46adab3d7293e

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1068,00:00:26,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,01:16:30,3) [migration/0]
(root,0,0,00:06:44,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:00:46,6) [watchdog/0]
(root,0,0,00:50:21,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:07:57,9) [ksoftirqd/1]
(root,0,0,00:01:32,10) [watchdog/1]
(root,0,0,00:28:07,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:03:33,13) [ksoftirqd/2]
(root,0,0,00:00:57,14) [watchdog/2]
(root,0,0,00:23:55,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:01:45,17) [ksoftirqd/3]
(root,0,0,00:00:53,18) [watchdog/3]
(root,0,0,00:41:58,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:04:29,21) [ksoftirqd/4]
(root,0,0,00:00:48,22) [watchdog/4]
(root,0,0,00:32:07,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:04:34,25) [ksoftirqd/5]
(root,0,0,00:01:07,26) [watchdog/5]
(root,0,0,00:29:17,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:01:56,29) [ksoftirqd/6]
(root,0,0,00:00:22,30) [watchdog/6]
(root,0,0,00:16:57,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:01:44,33) [ksoftirqd/7]
(root,0,0,00:00:37,34) [watchdog/7]
(root,0,0,00:17:48,35) [events/0]
(root,0,0,00:07:49,36) [events/1]
(root,0,0,00:07:46,37) [events/2]
(root,0,0,00:08:10,38) [events/3]
(root,0,0,00:05:30,39) [events/4]
(root,0,0,00:08:00,40) [events/5]
(root,0,0,00:06:36,41) [events/6]
(root,0,0,00:07:30,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:34,72) [sync_supers]
(root,0,0,00:00:00,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:29:08,82) [kblockd/0]
(root,0,0,00:01:01,83) [kblockd/1]
(root,0,0,00:00:24,84) [kblockd/2]
(root,0,0,00:00:09,85) [kblockd/3]
(root,0,0,00:00:46,86) [kblockd/4]
(root,0,0,00:00:37,87) [kblockd/5]
(root,0,0,01:18:01,88) [kblockd/6]
(root,0,0,00:00:15,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:05,124) [khungtaskd]
(root,0,0,02:40:30,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:10:49,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:09:35,958) [md1_raid1]
(root,0,0,00:00:29,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,404,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:03:46,1237) [edac-poller]
(root,0,0,00:01:50,1286) [md0_raid1]
(root,0,0,00:04:58,1336) [md2_raid1]
(root,0,0,00:19:05,1486) [md3_raid1]
(root,0,0,00:11:45,1629) [md4_raid1]
(root,0,0,10:52:23,1644) [md5_raid1]
(root,0,0,00:02:26,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:08:35,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:15:38,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:12:51,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:14:50,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:16,1923) [xfseofblocks/0]
(root,0,0,00:00:01,1924) [xfseofblocks/1]
(root,0,0,00:00:00,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:00,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:03:38,1931) [xfsbufd/md5]
(root,0,0,00:03:28,1932) [xfs-cil/md5]
(root,0,0,00:05:18,1933) [xfssyncd/md5]
(root,0,0,00:37:53,1934) [xfsaild/md5]
(root,0,0,00:00:27,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:01:08,1937) [xfsbufd/md4]
(root,0,0,00:00:08,1938) [xfs-cil/md4]
(root,0,0,00:00:39,1939) [xfssyncd/md4]
(root,0,0,00:35:50,1940) [xfsaild/md4]
(root,0,0,00:02:43,1941) [xfsbufd/md3]
(root,0,0,00:00:28,1942) [xfs-cil/md3]
(root,0,0,00:00:46,1943) [xfssyncd/md3]
(root,0,0,00:36:38,1944) [xfsaild/md3]
(root,0,0,00:02:40,1945) [xfsbufd/sdc1]
(root,0,0,00:03:48,1946) [xfs-cil/sdc1]
(root,0,0,01:39:36,1947) [xfssyncd/sdc1]
(root,0,0,03:31:53,1948) [xfsaild/sdc1]
(root,0,0,00:01:44,2046) [kauditd]
(root,29764,704,00:03:39,2300) auditd
(root,252160,30652,00:16:47,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,560,00:16:50,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1144,00:00:16,2353) /sbin/rsyslogd
(named,778224,32272,03:39:47,2357) /usr/sbin/named -u named -4
(root,4988,748,00:00:04,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,156,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,656,00:04:32,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,1252,00:03:06,2540) /usr/sbin/sshd
(root,21712,932,00:00:50,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1512,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4793176,635964,66-13:00:48,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:06:32,3256) [flush-9:5]
(root,73428,2432,00:02:07,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:02:06,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:02:07,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2412,00:02:06,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2416,00:02:07,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,70024,00:20:43,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2768,00:09:59,3384) sendmail: accepting connections
(smmsp,80440,2132,00:01:21,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:01:15,3417) crond
(root,107544,516,00:00:04,3471) pure-ftpd (SERVER)                                                  
(root,63332,17628,00:04:05,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:13,31413) [flush-9:2]
(root,0,0,00:00:16,38799) [flush-9:1]
(root,0,0,00:00:00,93200) [flush-9:4]
(apache,591248,89732,00:00:28,98938) /usr/sbin/httpd -DSSL -k start
(apache,612092,96368,00:00:10,100860) /usr/sbin/httpd -DSSL -k start
(apache,591088,86040,00:00:19,101658) /usr/sbin/httpd -DSSL -k start
(apache,613788,100536,00:00:13,102133) /usr/sbin/httpd -DSSL -k start
(apache,588920,82652,00:00:09,102524) /usr/sbin/httpd -DSSL -k start
(apache,590952,90304,00:00:16,102525) /usr/sbin/httpd -DSSL -k start
(apache,591732,74512,00:00:08,104604) /usr/sbin/httpd -DSSL -k start
(root,15088,3100,00:00:00,104895) dovecot/config
(dovecot,78716,2812,00:00:00,104896) dovecot/auth
(root,42196,1440,00:00:00,104897) dovecot/ssl-params
(apache,586288,51132,00:00:02,105178) /usr/sbin/httpd -DSSL -k start
(apache,595548,87744,00:00:04,105183) /usr/sbin/httpd -DSSL -k start
(apache,592992,59188,00:00:02,105265) /usr/sbin/httpd -DSSL -k start
(apache,603484,69452,00:00:06,105266) /usr/sbin/httpd -DSSL -k start
(apache,598316,80132,00:00:05,105268) /usr/sbin/httpd -DSSL -k start
(apache,588384,69884,00:00:03,105269) /usr/sbin/httpd -DSSL -k start
(apache,586788,56272,00:00:03,105270) /usr/sbin/httpd -DSSL -k start
(apache,600396,91464,00:00:05,105278) /usr/sbin/httpd -DSSL -k start
(apache,587852,57440,00:00:02,105774) /usr/sbin/httpd -DSSL -k start
(apache,584484,35412,00:00:00,105775) /usr/sbin/httpd -DSSL -k start
(apache,598372,66984,00:00:03,105873) /usr/sbin/httpd -DSSL -k start
(apache,586300,55140,00:00:02,105875) /usr/sbin/httpd -DSSL -k start
(apache,614596,93856,00:00:03,105876) /usr/sbin/httpd -DSSL -k start
(apache,586492,37880,00:00:01,105944) /usr/sbin/httpd -DSSL -k start
(apache,584412,35648,00:00:00,105946) /usr/sbin/httpd -DSSL -k start
(apache,632636,110964,00:00:03,105949) /usr/sbin/httpd -DSSL -k start
(apache,584928,34872,00:00:00,105952) /usr/sbin/httpd -DSSL -k start
(apache,584920,35556,00:00:00,105955) /usr/sbin/httpd -DSSL -k start
(apache,585816,36112,00:00:00,105956) /usr/sbin/httpd -DSSL -k start
(apache,584144,29876,00:00:00,106632) /usr/sbin/httpd -DSSL -k start
(apache,583364,31276,00:00:00,106639) /usr/sbin/httpd -DSSL -k start
(apache,584148,30604,00:00:00,106640) /usr/sbin/httpd -DSSL -k start
(apache,568812,21912,00:00:00,106647) /usr/sbin/httpd -DSSL -k start
(apache,568556,21688,00:00:00,106648) /usr/sbin/httpd -DSSL -k start
(apache,568812,21896,00:00:00,106649) /usr/sbin/httpd -DSSL -k start
(apache,569040,25112,00:00:00,106650) /usr/sbin/httpd -DSSL -k start
(apache,568556,21656,00:00:00,106669) /usr/sbin/httpd -DSSL -k start
(root,103304,3976,00:00:00,106682) sshd: unknown [priv]
(sshd,70144,1852,00:00:00,106683) sshd: unknown [net]
(root,103304,3984,00:00:00,106684) sshd: unknown [priv]
(sshd,70144,1848,00:00:00,106685) sshd: unknown [net]
(root,103304,3980,00:00:00,106686) sshd: unknown [priv]
(sshd,70144,1852,00:00:00,106687) sshd: unknown [net]
(root,103304,3980,00:00:00,106688) sshd: unknown [priv]
(root,103304,3976,00:00:00,106689) sshd: unknown [priv]
(sshd,70144,1852,00:00:00,106690) sshd: unknown [net]
(sshd,70144,1844,00:00:00,106691) sshd: unknown [net]
(root,103304,3976,00:00:00,106692) sshd: unknown [priv]
(sshd,70144,1852,00:00:00,106693) sshd: unknown [net]
(root,70144,3468,00:00:00,106780) sshd: [accepted] 
(root,70144,3460,00:00:00,106781) sshd: [accepted] 
(sshd,70144,1668,00:00:00,106782) sshd: [net]      
(sshd,70144,1664,00:00:00,106783) sshd: [net]      
(root,70144,3380,00:00:00,106816) sshd: [accepted] 
(sshd,70144,1480,00:00:00,106817) sshd: [net]      
(root,110284,1424,00:00:00,106818) /bin/bash /usr/bin/check_mk_agent
(root,13368,1008,00:00:00,106837) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,816,00:00:00,106838) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,265020,70440,00:00:46,120283) spamd child
(root,10640,472,00:00:00,141763) /sbin/udevd -d
(root,10640,464,00:00:00,141766) /sbin/udevd -d
(root,19264,704,00:00:00,206534) /usr/sbin/dovecot
(dovecot,12984,980,00:00:00,206536) dovecot/anvil
(root,13108,1092,00:00:00,206537) dovecot/log
(root,568556,34512,00:14:24,210298) /usr/sbin/httpd -DSSL -k start
(root,266204,72332,00:00:10,241497) spamd child

Found on 2023-01-07 13:28

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46ada14b49061

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1068,00:00:23,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,01:00:26,3) [migration/0]
(root,0,0,00:05:16,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:00:36,6) [watchdog/0]
(root,0,0,00:40:19,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:06:08,9) [ksoftirqd/1]
(root,0,0,00:01:16,10) [watchdog/1]
(root,0,0,00:23:26,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:02:42,13) [ksoftirqd/2]
(root,0,0,00:00:46,14) [watchdog/2]
(root,0,0,00:19:20,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:01:21,17) [ksoftirqd/3]
(root,0,0,00:00:46,18) [watchdog/3]
(root,0,0,00:34:19,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:03:32,21) [ksoftirqd/4]
(root,0,0,00:00:40,22) [watchdog/4]
(root,0,0,00:26:27,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:03:33,25) [ksoftirqd/5]
(root,0,0,00:00:54,26) [watchdog/5]
(root,0,0,00:23:49,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:01:30,29) [ksoftirqd/6]
(root,0,0,00:00:17,30) [watchdog/6]
(root,0,0,00:14:26,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:01:21,33) [ksoftirqd/7]
(root,0,0,00:00:31,34) [watchdog/7]
(root,0,0,00:14:05,35) [events/0]
(root,0,0,00:06:09,36) [events/1]
(root,0,0,00:06:02,37) [events/2]
(root,0,0,00:06:28,38) [events/3]
(root,0,0,00:04:18,39) [events/4]
(root,0,0,00:06:14,40) [events/5]
(root,0,0,00:05:12,41) [events/6]
(root,0,0,00:05:53,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:27,72) [sync_supers]
(root,0,0,00:00:00,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:22:41,82) [kblockd/0]
(root,0,0,00:00:46,83) [kblockd/1]
(root,0,0,00:00:19,84) [kblockd/2]
(root,0,0,00:00:07,85) [kblockd/3]
(root,0,0,00:00:35,86) [kblockd/4]
(root,0,0,00:00:29,87) [kblockd/5]
(root,0,0,01:02:07,88) [kblockd/6]
(root,0,0,00:00:12,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:04,124) [khungtaskd]
(root,0,0,02:07:07,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:08:40,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(apache,586800,63464,00:00:02,531) /usr/sbin/httpd -DSSL -k start
(apache,598100,63892,00:00:02,615) /usr/sbin/httpd -DSSL -k start
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,15088,3108,00:00:00,832) dovecot/config
(dovecot,78848,2880,00:00:00,833) dovecot/auth
(root,80952,3112,00:00:00,834) dovecot/auth -w
(apache,584248,34356,00:00:00,843) /usr/sbin/httpd -DSSL -k start
(apache,597728,64588,00:00:02,845) /usr/sbin/httpd -DSSL -k start
(apache,583916,34636,00:00:00,846) /usr/sbin/httpd -DSSL -k start
(apache,583524,32472,00:00:00,847) /usr/sbin/httpd -DSSL -k start
(apache,596468,61684,00:00:01,848) /usr/sbin/httpd -DSSL -k start
(root,0,0,00:07:49,958) [md1_raid1]
(root,0,0,00:00:23,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,472,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:03:06,1237) [edac-poller]
(apache,585952,33976,00:00:00,1273) /usr/sbin/httpd -DSSL -k start
(apache,588804,51252,00:00:00,1275) /usr/sbin/httpd -DSSL -k start
(apache,583540,33336,00:00:00,1276) /usr/sbin/httpd -DSSL -k start
(apache,568352,26928,00:00:00,1284) /usr/sbin/httpd -DSSL -k start
(apache,583496,31128,00:00:00,1285) /usr/sbin/httpd -DSSL -k start
(root,0,0,00:01:30,1286) [md0_raid1]
(apache,568448,24964,00:00:00,1287) /usr/sbin/httpd -DSSL -k start
(apache,583492,30972,00:00:00,1288) /usr/sbin/httpd -DSSL -k start
(root,97804,4396,00:00:00,1290) sendmail: ./2BLC0cME172923 gemil.com.: user open
(apache,609556,74116,00:00:01,1291) /usr/sbin/httpd -DSSL -k start
(apache,591404,57684,00:00:01,1292) /usr/sbin/httpd -DSSL -k start
(apache,571324,43904,00:00:00,1293) /usr/sbin/httpd -DSSL -k start
(apache,567820,20904,00:00:00,1294) /usr/sbin/httpd -DSSL -k start
(apache,593344,56708,00:00:01,1296) /usr/sbin/httpd -DSSL -k start
(apache,583168,40644,00:00:00,1297) /usr/sbin/httpd -DSSL -k start
(root,0,0,00:04:02,1336) [md2_raid1]
(root,0,0,00:15:18,1486) [md3_raid1]
(root,110284,1424,00:00:00,1597) /bin/bash /usr/bin/check_mk_agent
(root,13368,1000,00:00:00,1616) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,816,00:00:00,1617) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,0,0,00:09:31,1629) [md4_raid1]
(root,0,0,08:51:11,1644) [md5_raid1]
(root,0,0,00:01:53,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:06:40,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:12:13,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:09:56,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:11:08,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:13,1923) [xfseofblocks/0]
(root,0,0,00:00:01,1924) [xfseofblocks/1]
(root,0,0,00:00:00,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:00,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:02:52,1931) [xfsbufd/md5]
(root,0,0,00:02:47,1932) [xfs-cil/md5]
(root,0,0,00:04:13,1933) [xfssyncd/md5]
(root,0,0,00:30:09,1934) [xfsaild/md5]
(root,0,0,00:00:21,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:00:54,1937) [xfsbufd/md4]
(root,0,0,00:00:06,1938) [xfs-cil/md4]
(root,0,0,00:00:31,1939) [xfssyncd/md4]
(root,0,0,00:28:29,1940) [xfsaild/md4]
(root,0,0,00:02:09,1941) [xfsbufd/md3]
(root,0,0,00:00:23,1942) [xfs-cil/md3]
(root,0,0,00:00:36,1943) [xfssyncd/md3]
(root,0,0,00:29:07,1944) [xfsaild/md3]
(root,0,0,00:02:02,1945) [xfsbufd/sdc1]
(root,0,0,00:02:56,1946) [xfs-cil/sdc1]
(root,0,0,01:18:14,1947) [xfssyncd/sdc1]
(root,0,0,02:40:28,1948) [xfsaild/sdc1]
(root,0,0,00:01:22,2046) [kauditd]
(root,29764,704,00:02:48,2300) auditd
(root,252160,29444,00:12:55,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,560,00:13:21,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1144,00:00:13,2353) /sbin/rsyslogd
(named,777964,32212,03:19:04,2357) /usr/sbin/named -u named -4
(root,4988,816,00:00:03,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,268,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,664,00:03:35,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,1252,00:02:35,2540) /usr/sbin/sshd
(root,21712,932,00:00:39,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1512,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4793176,631692,51-11:51:44,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:05:11,3256) [flush-9:5]
(root,73428,2432,00:00:50,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:00:49,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:00:50,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2412,00:00:49,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2412,00:00:49,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,70024,00:16:32,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2768,00:06:19,3384) sendmail: accepting connections
(smmsp,80440,2132,00:01:04,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:00:59,3417) crond
(root,107544,516,00:00:04,3471) pure-ftpd (SERVER)                                                  
(root,63332,17612,00:03:18,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:10,31413) [flush-9:2]
(root,265700,71244,00:00:22,32241) spamd child
(root,0,0,00:00:13,38799) [flush-9:1]
(root,10640,564,00:00:00,141763) /sbin/udevd -d
(root,10640,556,00:00:00,141766) /sbin/udevd -d
(root,19264,708,00:00:00,144107) /usr/sbin/dovecot
(dovecot,12984,988,00:00:00,144109) dovecot/anvil
(root,13108,1092,00:00:00,144110) dovecot/log
(root,0,0,00:00:00,176379) [flush-9:4]
(root,567820,33764,00:11:07,210298) /usr/sbin/httpd -DSSL -k start
(apache,593196,91684,00:00:21,240364) /usr/sbin/httpd -DSSL -k start
(apache,590664,91176,00:00:29,240366) /usr/sbin/httpd -DSSL -k start
(apache,589660,91504,00:00:17,241096) /usr/sbin/httpd -DSSL -k start
(root,265736,71304,00:00:08,241497) spamd child
(apache,594104,85592,00:00:13,242578) /usr/sbin/httpd -DSSL -k start
(apache,590700,91112,00:00:19,242646) /usr/sbin/httpd -DSSL -k start
(apache,666584,160580,00:00:10,243247) /usr/sbin/httpd -DSSL -k start
(apache,588140,82224,00:00:08,243865) /usr/sbin/httpd -DSSL -k start
(apache,587072,78508,00:00:05,243868) /usr/sbin/httpd -DSSL -k start
(apache,588220,81320,00:00:10,244290) /usr/sbin/httpd -DSSL -k start
(apache,588360,82944,00:00:08,244490) /usr/sbin/httpd -DSSL -k start
(apache,586760,67988,00:00:04,244493) /usr/sbin/httpd -DSSL -k start
(apache,587824,80908,00:00:07,244498) /usr/sbin/httpd -DSSL -k start
(apache,588104,85304,00:00:09,244500) /usr/sbin/httpd -DSSL -k start
(apache,589128,84276,00:00:10,244501) /usr/sbin/httpd -DSSL -k start
(apache,592736,86240,00:00:09,245079) /usr/sbin/httpd -DSSL -k start
(apache,587168,81932,00:00:07,245172) /usr/sbin/httpd -DSSL -k start
(apache,600120,78568,00:00:09,245181) /usr/sbin/httpd -DSSL -k start

Found on 2022-12-22 10:20

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46adaeb7cef3c

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1068,00:00:14,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:26:46,3) [migration/0]
(root,0,0,00:02:36,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:00:15,6) [watchdog/0]
(root,0,0,00:17:55,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:02:59,9) [ksoftirqd/1]
(root,0,0,00:00:29,10) [watchdog/1]
(root,0,0,00:09:14,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:01:17,13) [ksoftirqd/2]
(root,0,0,00:00:17,14) [watchdog/2]
(root,0,0,00:06:23,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:00:40,17) [ksoftirqd/3]
(root,0,0,00:00:12,18) [watchdog/3]
(root,0,0,00:14:19,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:01:50,21) [ksoftirqd/4]
(root,0,0,00:00:19,22) [watchdog/4]
(root,0,0,00:10:22,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:01:45,25) [ksoftirqd/5]
(root,0,0,00:00:20,26) [watchdog/5]
(root,0,0,00:09:38,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:00:44,29) [ksoftirqd/6]
(root,0,0,00:00:07,30) [watchdog/6]
(root,0,0,00:05:06,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:00:39,33) [ksoftirqd/7]
(root,0,0,00:00:12,34) [watchdog/7]
(root,0,0,00:07:10,35) [events/0]
(root,0,0,00:03:07,36) [events/1]
(root,0,0,00:03:05,37) [events/2]
(root,0,0,00:03:17,38) [events/3]
(root,0,0,00:02:12,39) [events/4]
(root,0,0,00:03:08,40) [events/5]
(root,0,0,00:02:39,41) [events/6]
(root,0,0,00:03:00,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:13,72) [sync_supers]
(root,0,0,00:00:00,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:11:22,82) [kblockd/0]
(root,0,0,00:00:23,83) [kblockd/1]
(root,0,0,00:00:09,84) [kblockd/2]
(root,0,0,00:00:03,85) [kblockd/3]
(root,0,0,00:00:15,86) [kblockd/4]
(root,0,0,00:00:13,87) [kblockd/5]
(root,0,0,00:32:32,88) [kblockd/6]
(root,0,0,00:00:05,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:02,124) [khungtaskd]
(root,0,0,01:05:03,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:04:29,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:04:20,958) [md1_raid1]
(root,0,0,00:00:12,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,10644,472,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:01:32,1237) [edac-poller]
(root,0,0,00:00:51,1286) [md0_raid1]
(root,0,0,00:02:12,1336) [md2_raid1]
(root,0,0,00:08:29,1486) [md3_raid1]
(root,0,0,00:05:11,1629) [md4_raid1]
(root,0,0,04:33:52,1644) [md5_raid1]
(root,0,0,00:01:00,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:03:16,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:06:21,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:04:46,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:05:14,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:07,1923) [xfseofblocks/0]
(root,0,0,00:00:00,1924) [xfseofblocks/1]
(root,0,0,00:00:00,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:00,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:01:30,1931) [xfsbufd/md5]
(root,0,0,00:01:24,1932) [xfs-cil/md5]
(root,0,0,00:02:10,1933) [xfssyncd/md5]
(root,0,0,00:15:35,1934) [xfsaild/md5]
(root,0,0,00:00:11,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:00:27,1937) [xfsbufd/md4]
(root,0,0,00:00:03,1938) [xfs-cil/md4]
(root,0,0,00:00:16,1939) [xfssyncd/md4]
(root,0,0,00:14:42,1940) [xfsaild/md4]
(root,0,0,00:01:09,1941) [xfsbufd/md3]
(root,0,0,00:00:15,1942) [xfs-cil/md3]
(root,0,0,00:00:19,1943) [xfssyncd/md3]
(root,0,0,00:15:02,1944) [xfsaild/md3]
(root,0,0,00:01:01,1945) [xfsbufd/sdc1]
(root,0,0,00:01:28,1946) [xfs-cil/sdc1]
(root,0,0,00:38:46,1947) [xfssyncd/sdc1]
(root,0,0,01:22:57,1948) [xfsaild/sdc1]
(root,0,0,00:00:46,2046) [kauditd]
(root,29764,836,00:01:34,2300) auditd
(root,252160,25932,00:08:20,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,700,00:06:46,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1408,00:00:07,2353) /sbin/rsyslogd
(named,777704,36128,02:41:44,2357) /usr/sbin/named -u named -4
(root,4988,816,00:00:02,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,268,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,664,00:01:49,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,1252,00:01:25,2540) /usr/sbin/sshd
(root,21712,932,00:00:20,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1524,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4790204,622136,23-13:02:15,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:02:38,3256) [flush-9:5]
(root,73428,2432,00:00:30,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:00:30,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:00:30,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2412,00:00:30,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2412,00:00:30,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,70264,00:08:38,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2776,00:03:26,3384) sendmail: accepting connections
(smmsp,80440,2132,00:00:32,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:00:30,3417) crond
(root,107544,408,00:00:02,3471) pure-ftpd (SERVER)                                                  
(root,63332,17612,00:01:44,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,536,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,536,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,536,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,532,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,532,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,532,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,0,0,00:00:00,26230) [flush-9:4]
(root,0,0,00:00:05,31413) [flush-9:2]
(root,0,0,00:00:06,38799) [flush-9:1]
(apache,592744,88468,00:00:35,50713) /usr/sbin/httpd -DSSL -k start
(apache,589236,88692,00:00:19,50796) /usr/sbin/httpd -DSSL -k start
(apache,592768,88588,00:00:14,51063) /usr/sbin/httpd -DSSL -k start
(apache,621908,105532,00:00:09,53618) /usr/sbin/httpd -DSSL -k start
(apache,588320,71864,00:00:10,55554) /usr/sbin/httpd -DSSL -k start
(apache,587068,70308,00:00:15,55558) /usr/sbin/httpd -DSSL -k start
(apache,587464,77776,00:00:17,55562) /usr/sbin/httpd -DSSL -k start
(apache,613128,106380,00:00:16,55563) /usr/sbin/httpd -DSSL -k start
(apache,588632,74880,00:00:18,55859) /usr/sbin/httpd -DSSL -k start
(apache,586488,78000,00:00:17,55946) /usr/sbin/httpd -DSSL -k start
(apache,590036,86268,00:00:10,56174) /usr/sbin/httpd -DSSL -k start
(apache,587172,84840,00:00:13,56177) /usr/sbin/httpd -DSSL -k start
(apache,599732,94752,00:00:12,56178) /usr/sbin/httpd -DSSL -k start
(apache,588576,72360,00:00:12,56833) /usr/sbin/httpd -DSSL -k start
(apache,585924,72752,00:00:07,56836) /usr/sbin/httpd -DSSL -k start
(apache,586548,84568,00:00:13,56983) /usr/sbin/httpd -DSSL -k start
(apache,592452,82540,00:00:11,56984) /usr/sbin/httpd -DSSL -k start
(apache,585876,66428,00:00:04,56985) /usr/sbin/httpd -DSSL -k start
(apache,593496,86396,00:00:07,56986) /usr/sbin/httpd -DSSL -k start
(apache,621640,111196,00:00:05,57630) /usr/sbin/httpd -DSSL -k start
(apache,584676,66452,00:00:03,57889) /usr/sbin/httpd -DSSL -k start
(apache,607376,74628,00:00:01,58004) /usr/sbin/httpd -DSSL -k start
(apache,584528,63100,00:00:02,58007) /usr/sbin/httpd -DSSL -k start
(apache,594692,73500,00:00:01,58469) /usr/sbin/httpd -DSSL -k start
(apache,585052,48860,00:00:01,58470) /usr/sbin/httpd -DSSL -k start
(apache,584776,64920,00:00:02,58471) /usr/sbin/httpd -DSSL -k start
(apache,576884,79180,00:00:05,58473) /usr/sbin/httpd -DSSL -k start
(apache,588040,61028,00:00:01,58474) /usr/sbin/httpd -DSSL -k start
(apache,584984,66132,00:00:05,58476) /usr/sbin/httpd -DSSL -k start
(apache,618200,106708,00:00:04,58560) /usr/sbin/httpd -DSSL -k start
(apache,566880,24796,00:00:00,58648) /usr/sbin/httpd -DSSL -k start
(root,139900,1860,00:00:00,59038) CROND
(root,106112,1276,00:00:00,59039) /bin/bash /usr/bin/run-parts /etc/cron.hourly
(root,122200,2004,00:00:00,59051) /usr/bin/perl /usr/share/awstats/tools/awstats_updateall.pl now -configdir=/etc/awstats -awstatsprog=/usr/share/awstats/wwwroot/cgi-bin/awstats.pl
(root,105968,900,00:00:00,59052) awk -v progname=/etc/cron.hourly/awstats progname {?????   print progname ":\n"?????   progname="";????       }????       { print; }
(root,103304,4012,00:00:00,59170) sshd: root [priv]
(sshd,70144,1748,00:00:00,59171) sshd: root [net] 
(root,106112,1164,00:00:00,59176) sh -c "/usr/share/awstats/wwwroot/cgi-bin/awstats.pl" -update -config=www.enews.pk -configdir="/etc/awstats" 2>&1
(root,151760,27824,00:00:00,59177) /usr/bin/perl /usr/share/awstats/wwwroot/cgi-bin/awstats.pl -update -config=www.enews.pk -configdir=/etc/awstats
(root,110284,1420,00:00:00,59274) /bin/bash /usr/bin/check_mk_agent
(root,13372,1004,00:00:00,59293) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,812,00:00:00,59294) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,10640,592,00:00:00,186090) /sbin/udevd -d
(root,10640,556,00:00:00,186093) /sbin/udevd -d
(root,566336,32272,00:04:49,210298) /usr/sbin/httpd -DSSL -k start
(root,265836,71468,00:00:40,222733) spamd child
(root,19264,700,00:00:00,231668) /usr/sbin/dovecot
(dovecot,12984,964,00:00:00,231670) dovecot/anvil
(root,13108,1092,00:00:00,231671) dovecot/log
(root,265736,71348,00:00:06,241497) spamd child

Found on 2022-11-22 08:01

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46adaefeee12b

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19352,1416,00:00:09,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:15:31,3) [migration/0]
(root,0,0,00:01:11,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:00:08,6) [watchdog/0]
(root,0,0,00:09:47,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,00:01:24,9) [ksoftirqd/1]
(root,0,0,00:00:16,10) [watchdog/1]
(root,0,0,00:05:33,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,00:00:40,13) [ksoftirqd/2]
(root,0,0,00:00:09,14) [watchdog/2]
(root,0,0,00:03:47,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:00:21,17) [ksoftirqd/3]
(root,0,0,00:00:06,18) [watchdog/3]
(root,0,0,00:08:32,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,00:00:51,21) [ksoftirqd/4]
(root,0,0,00:00:13,22) [watchdog/4]
(root,0,0,00:05:56,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,00:00:49,25) [ksoftirqd/5]
(root,0,0,00:00:12,26) [watchdog/5]
(root,0,0,00:05:50,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:00:23,29) [ksoftirqd/6]
(root,0,0,00:00:04,30) [watchdog/6]
(root,0,0,00:02:56,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:00:21,33) [ksoftirqd/7]
(root,0,0,00:00:07,34) [watchdog/7]
(root,0,0,00:03:53,35) [events/0]
(root,0,0,00:01:42,36) [events/1]
(root,0,0,00:01:41,37) [events/2]
(root,0,0,00:01:47,38) [events/3]
(root,0,0,00:01:11,39) [events/4]
(root,0,0,00:01:42,40) [events/5]
(root,0,0,00:01:24,41) [events/6]
(root,0,0,00:01:40,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:00:07,72) [sync_supers]
(root,0,0,00:00:00,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,00:06:08,82) [kblockd/0]
(root,0,0,00:00:12,83) [kblockd/1]
(root,0,0,00:00:04,84) [kblockd/2]
(root,0,0,00:00:01,85) [kblockd/3]
(root,0,0,00:00:09,86) [kblockd/4]
(root,0,0,00:00:07,87) [kblockd/5]
(root,0,0,00:17:17,88) [kblockd/6]
(root,0,0,00:00:03,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:00:01,124) [khungtaskd]
(root,0,0,00:32:43,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,00:02:26,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,737) [scsi_eh_0]
(root,0,0,00:00:00,738) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,00:02:30,958) [md1_raid1]
(root,0,0,00:00:06,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,11060,1176,00:00:01,1113) /sbin/udevd -d
(root,0,0,00:00:40,1237) [edac-poller]
(root,0,0,00:00:30,1286) [md0_raid1]
(root,0,0,00:01:15,1336) [md2_raid1]
(root,0,0,00:04:54,1486) [md3_raid1]
(root,0,0,00:02:57,1629) [md4_raid1]
(root,0,0,02:36:42,1644) [md5_raid1]
(root,0,0,00:00:33,1859) [flush-9:3]
(root,0,0,00:00:00,1886) [jbd2/md0-8]
(root,0,0,00:00:00,1887) [ext4-dio-unwrit]
(root,0,0,00:00:00,1890) [xfs_mru_cache]
(root,0,0,00:01:41,1891) [xfslogd/0]
(root,0,0,00:00:00,1892) [xfslogd/1]
(root,0,0,00:00:00,1893) [xfslogd/2]
(root,0,0,00:00:00,1894) [xfslogd/3]
(root,0,0,00:00:00,1895) [xfslogd/4]
(root,0,0,00:00:00,1896) [xfslogd/5]
(root,0,0,00:03:12,1897) [xfslogd/6]
(root,0,0,00:00:00,1898) [xfslogd/7]
(root,0,0,00:01:47,1899) [xfsdatad/0]
(root,0,0,00:00:00,1900) [xfsdatad/1]
(root,0,0,00:00:00,1901) [xfsdatad/2]
(root,0,0,00:00:00,1902) [xfsdatad/3]
(root,0,0,00:00:00,1903) [xfsdatad/4]
(root,0,0,00:00:00,1904) [xfsdatad/5]
(root,0,0,00:02:16,1905) [xfsdatad/6]
(root,0,0,00:00:00,1906) [xfsdatad/7]
(root,0,0,00:00:00,1907) [xfsconvertd/0]
(root,0,0,00:00:00,1908) [xfsconvertd/1]
(root,0,0,00:00:00,1909) [xfsconvertd/2]
(root,0,0,00:00:00,1910) [xfsconvertd/3]
(root,0,0,00:00:00,1911) [xfsconvertd/4]
(root,0,0,00:00:00,1912) [xfsconvertd/5]
(root,0,0,00:00:00,1913) [xfsconvertd/6]
(root,0,0,00:00:00,1914) [xfsconvertd/7]
(root,0,0,00:00:00,1915) [xfsalloc/0]
(root,0,0,00:00:00,1916) [xfsalloc/1]
(root,0,0,00:00:00,1917) [xfsalloc/2]
(root,0,0,00:00:00,1918) [xfsalloc/3]
(root,0,0,00:00:00,1919) [xfsalloc/4]
(root,0,0,00:00:00,1920) [xfsalloc/5]
(root,0,0,00:00:00,1921) [xfsalloc/6]
(root,0,0,00:00:00,1922) [xfsalloc/7]
(root,0,0,00:00:03,1923) [xfseofblocks/0]
(root,0,0,00:00:00,1924) [xfseofblocks/1]
(root,0,0,00:00:00,1925) [xfseofblocks/2]
(root,0,0,00:00:00,1926) [xfseofblocks/3]
(root,0,0,00:00:00,1927) [xfseofblocks/4]
(root,0,0,00:00:00,1928) [xfseofblocks/5]
(root,0,0,00:00:00,1929) [xfseofblocks/6]
(root,0,0,00:00:00,1930) [xfseofblocks/7]
(root,0,0,00:00:47,1931) [xfsbufd/md5]
(root,0,0,00:00:43,1932) [xfs-cil/md5]
(root,0,0,00:01:06,1933) [xfssyncd/md5]
(root,0,0,00:08:23,1934) [xfsaild/md5]
(root,0,0,00:00:05,1935) [jbd2/md2-8]
(root,0,0,00:00:00,1936) [ext4-dio-unwrit]
(root,0,0,00:00:15,1937) [xfsbufd/md4]
(root,0,0,00:00:01,1938) [xfs-cil/md4]
(root,0,0,00:00:08,1939) [xfssyncd/md4]
(root,0,0,00:07:55,1940) [xfsaild/md4]
(root,0,0,00:00:39,1941) [xfsbufd/md3]
(root,0,0,00:00:11,1942) [xfs-cil/md3]
(root,0,0,00:00:10,1943) [xfssyncd/md3]
(root,0,0,00:08:06,1944) [xfsaild/md3]
(root,0,0,00:00:29,1945) [xfsbufd/sdc1]
(root,0,0,00:00:40,1946) [xfs-cil/sdc1]
(root,0,0,00:23:04,1947) [xfssyncd/sdc1]
(root,0,0,00:44:10,1948) [xfsaild/sdc1]
(root,0,0,00:00:27,2046) [kauditd]
(root,29764,840,00:00:55,2300) auditd
(root,252160,21260,00:05:48,2322) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,724,00:03:32,2337) irqbalance --pid=/var/run/irqbalance.pid
(root,21836,1420,00:00:04,2353) /sbin/rsyslogd
(named,775624,33840,02:22:13,2357) /usr/sbin/named -u named -4
(root,4988,852,00:00:01,2383) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,268,00:00:00,2506) /usr/sbin/mcelog --daemon
(496,330848,664,00:00:59,2518) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,1252,00:00:48,2540) /usr/sbin/sshd
(root,21712,932,00:00:11,2551) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,108352,1524,00:00:00,2590) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4779028,605660,15-00:30:52,3109) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,0,0,00:01:27,3256) [flush-9:5]
(root,73428,2432,00:00:20,3290) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:00:20,3291) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2416,00:00:20,3292) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2412,00:00:20,3293) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2412,00:00:20,3294) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,263948,70564,00:04:47,3362) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,95228,2768,00:01:59,3384) sendmail: accepting connections
(smmsp,80440,2132,00:00:17,3393) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,117012,1384,00:00:16,3417) crond
(root,107544,420,00:00:01,3471) pure-ftpd (SERVER)                                                  
(root,63332,17612,00:00:54,3538) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,540,00:00:00,3546) /sbin/mingetty /dev/tty1
(root,4060,540,00:00:00,3548) /sbin/mingetty /dev/tty2
(root,4060,540,00:00:00,3550) /sbin/mingetty /dev/tty3
(root,4060,536,00:00:00,3552) /sbin/mingetty /dev/tty4
(root,4060,536,00:00:00,3554) /sbin/mingetty /dev/tty5
(root,4060,536,00:00:00,3556) /sbin/mingetty /dev/tty6
(root,10640,732,00:00:00,3558) /sbin/udevd -d
(root,10640,732,00:00:00,3559) /sbin/udevd -d
(root,19264,704,00:00:00,17507) /usr/sbin/dovecot
(dovecot,12984,988,00:00:00,17509) dovecot/anvil
(root,13108,1092,00:00:00,17510) dovecot/log
(root,0,0,00:00:02,31413) [flush-9:2]
(root,0,0,00:00:03,38799) [flush-9:1]
(root,0,0,00:00:00,209598) [flush-9:4]
(root,565568,31420,00:01:32,210298) /usr/sbin/httpd -DSSL -k start
(root,265864,71372,00:00:05,215236) spamd child
(apache,586808,84444,00:00:20,227030) /usr/sbin/httpd -DSSL -k start
(apache,589104,84888,00:00:18,228612) /usr/sbin/httpd -DSSL -k start
(apache,586308,84412,00:00:20,228615) /usr/sbin/httpd -DSSL -k start
(apache,585364,67300,00:00:13,228616) /usr/sbin/httpd -DSSL -k start
(apache,584660,74632,00:00:04,230008) /usr/sbin/httpd -DSSL -k start
(apache,651248,141516,00:00:12,230014) /usr/sbin/httpd -DSSL -k start
(apache,591148,81068,00:00:14,230100) /usr/sbin/httpd -DSSL -k start
(apache,585140,76700,00:00:13,230101) /usr/sbin/httpd -DSSL -k start
(apache,588860,81404,00:00:13,230103) /usr/sbin/httpd -DSSL -k start
(apache,585072,76600,00:00:13,230108) /usr/sbin/httpd -DSSL -k start
(apache,586188,64304,00:00:09,230109) /usr/sbin/httpd -DSSL -k start
(apache,590676,82620,00:00:13,230112) /usr/sbin/httpd -DSSL -k start
(apache,585216,79204,00:00:10,230116) /usr/sbin/httpd -DSSL -k start
(apache,619516,110336,00:00:07,230118) /usr/sbin/httpd -DSSL -k start
(apache,609160,97576,00:00:15,230119) /usr/sbin/httpd -DSSL -k start
(apache,586024,79928,00:00:08,230122) /usr/sbin/httpd -DSSL -k start
(apache,590908,80600,00:00:11,230131) /usr/sbin/httpd -DSSL -k start
(apache,585240,58576,00:00:04,231207) /usr/sbin/httpd -DSSL -k start
(apache,583092,47112,00:00:04,231437) /usr/sbin/httpd -DSSL -k start
(apache,584120,63036,00:00:03,231438) /usr/sbin/httpd -DSSL -k start
(apache,582872,46288,00:00:00,231597) /usr/sbin/httpd -DSSL -k start
(apache,584168,62560,00:00:02,231744) /usr/sbin/httpd -DSSL -k start
(apache,581140,29860,00:00:00,231767) /usr/sbin/httpd -DSSL -k start
(apache,586032,53588,00:00:01,231768) /usr/sbin/httpd -DSSL -k start
(apache,566340,25776,00:00:00,231772) /usr/sbin/httpd -DSSL -k start
(apache,588172,64144,00:00:01,231775) /usr/sbin/httpd -DSSL -k start
(apache,592092,53828,00:00:00,231776) /usr/sbin/httpd -DSSL -k start
(root,103304,4020,00:00:00,231905) sshd: root [priv]
(sshd,70144,1756,00:00:00,231906) sshd: root [net] 
(root,110284,1420,00:00:00,232009) /bin/bash /usr/bin/check_mk_agent
(root,13368,1000,00:00:00,232028) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,816,00:00:00,232029) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,265736,71292,00:00:02,241497) spamd child

Found on 2022-11-07 18:08

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f1659cfab280e4458b85a46ada065a8f46

Found public CheckMk agent:
Version: 1.2.6p16
AgentOS: linux
AgentDirectory: /etc/check-mk-agent
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/share/check-mk-agent/plugins
LocalDirectory: /usr/share/check-mk-agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,19228,1024,00:16:56,1) /sbin/init
(root,0,0,00:00:07,2) [kthreadd]
(root,0,0,17:40:06,3) [migration/0]
(root,0,0,02:14:51,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [stopper/0]
(root,0,0,00:13:34,6) [watchdog/0]
(root,0,0,11:27:42,7) [migration/1]
(root,0,0,00:00:00,8) [stopper/1]
(root,0,0,02:17:55,9) [ksoftirqd/1]
(root,0,0,00:22:35,10) [watchdog/1]
(root,0,0,05:26:31,11) [migration/2]
(root,0,0,00:00:00,12) [stopper/2]
(root,0,0,01:20:09,13) [ksoftirqd/2]
(root,0,0,00:14:07,14) [watchdog/2]
(root,0,0,03:56:15,15) [migration/3]
(root,0,0,00:00:00,16) [stopper/3]
(root,0,0,00:51:30,17) [ksoftirqd/3]
(root,0,0,00:09:40,18) [watchdog/3]
(root,0,0,07:09:15,19) [migration/4]
(root,0,0,00:00:00,20) [stopper/4]
(root,0,0,01:40:37,21) [ksoftirqd/4]
(root,0,0,00:09:59,22) [watchdog/4]
(root,0,0,05:53:16,23) [migration/5]
(root,0,0,00:00:00,24) [stopper/5]
(root,0,0,01:25:16,25) [ksoftirqd/5]
(root,0,0,00:13:47,26) [watchdog/5]
(root,0,0,08:02:01,27) [migration/6]
(root,0,0,00:00:00,28) [stopper/6]
(root,0,0,00:48:08,29) [ksoftirqd/6]
(root,0,0,00:06:37,30) [watchdog/6]
(root,0,0,02:47:13,31) [migration/7]
(root,0,0,00:00:00,32) [stopper/7]
(root,0,0,00:45:25,33) [ksoftirqd/7]
(root,0,0,00:06:32,34) [watchdog/7]
(root,0,0,03:34:31,35) [events/0]
(root,0,0,03:58:45,36) [events/1]
(root,0,0,02:25:31,37) [events/2]
(root,0,0,02:33:13,38) [events/3]
(root,0,0,01:40:55,39) [events/4]
(root,0,0,02:19:59,40) [events/5]
(root,0,0,01:58:10,41) [events/6]
(root,0,0,02:16:49,42) [events/7]
(root,0,0,00:00:00,43) [events/0]
(root,0,0,00:00:00,44) [events/1]
(root,0,0,00:00:00,45) [events/2]
(root,0,0,00:00:00,46) [events/3]
(root,0,0,00:00:00,47) [events/4]
(root,0,0,00:00:00,48) [events/5]
(root,0,0,00:00:00,49) [events/6]
(root,0,0,00:00:00,50) [events/7]
(root,0,0,00:00:00,51) [events_long/0]
(root,0,0,00:00:00,52) [events_long/1]
(root,0,0,00:00:00,53) [events_long/2]
(root,0,0,00:00:00,54) [events_long/3]
(root,0,0,00:00:00,55) [events_long/4]
(root,0,0,00:00:00,56) [events_long/5]
(root,0,0,00:00:00,57) [events_long/6]
(root,0,0,00:00:00,58) [events_long/7]
(root,0,0,00:00:00,59) [events_power_ef]
(root,0,0,00:00:00,60) [events_power_ef]
(root,0,0,00:00:00,61) [events_power_ef]
(root,0,0,00:00:00,62) [events_power_ef]
(root,0,0,00:00:00,63) [events_power_ef]
(root,0,0,00:00:00,64) [events_power_ef]
(root,0,0,00:00:00,65) [events_power_ef]
(root,0,0,00:00:00,66) [events_power_ef]
(root,0,0,00:00:00,67) [cgroup]
(root,0,0,00:00:00,68) [khelper]
(root,0,0,00:00:00,69) [netns]
(root,0,0,00:00:00,70) [async/mgr]
(root,0,0,00:00:00,71) [pm]
(root,0,0,00:10:09,72) [sync_supers]
(root,0,0,00:00:24,73) [bdi-default]
(root,0,0,00:00:00,74) [kintegrityd/0]
(root,0,0,00:00:00,75) [kintegrityd/1]
(root,0,0,00:00:00,76) [kintegrityd/2]
(root,0,0,00:00:00,77) [kintegrityd/3]
(root,0,0,00:00:00,78) [kintegrityd/4]
(root,0,0,00:00:00,79) [kintegrityd/5]
(root,0,0,00:00:00,80) [kintegrityd/6]
(root,0,0,00:00:00,81) [kintegrityd/7]
(root,0,0,08:35:13,82) [kblockd/0]
(root,0,0,00:11:59,83) [kblockd/1]
(root,0,0,00:04:32,84) [kblockd/2]
(root,0,0,00:02:14,85) [kblockd/3]
(root,0,0,00:09:39,86) [kblockd/4]
(root,0,0,00:07:49,87) [kblockd/5]
(root,0,0,1-01:32:19,88) [kblockd/6]
(root,0,0,00:03:17,89) [kblockd/7]
(root,0,0,00:00:00,90) [kacpid]
(root,0,0,00:00:00,91) [kacpi_notify]
(root,0,0,00:00:00,92) [kacpi_hotplug]
(root,0,0,00:00:00,93) [ata_aux]
(root,0,0,00:00:00,94) [ata_sff/0]
(root,0,0,00:00:00,95) [ata_sff/1]
(root,0,0,00:00:00,96) [ata_sff/2]
(root,0,0,00:00:00,97) [ata_sff/3]
(root,0,0,00:00:00,98) [ata_sff/4]
(root,0,0,00:00:00,99) [ata_sff/5]
(root,0,0,00:00:00,100) [ata_sff/6]
(root,0,0,00:00:00,101) [ata_sff/7]
(root,0,0,00:00:00,102) [ksuspend_usbd]
(root,0,0,00:00:00,103) [khubd]
(root,0,0,00:00:00,104) [kseriod]
(root,0,0,00:00:00,105) [md/0]
(root,0,0,00:00:00,106) [md/1]
(root,0,0,00:00:00,107) [md/2]
(root,0,0,00:00:00,108) [md/3]
(root,0,0,00:00:00,109) [md/4]
(root,0,0,00:00:00,110) [md/5]
(root,0,0,00:00:00,111) [md/6]
(root,0,0,00:00:00,112) [md/7]
(root,0,0,00:00:00,113) [md_misc/0]
(root,0,0,00:00:00,114) [md_misc/1]
(root,0,0,00:00:00,115) [md_misc/2]
(root,0,0,00:00:00,116) [md_misc/3]
(root,0,0,00:00:00,117) [md_misc/4]
(root,0,0,00:00:00,118) [md_misc/5]
(root,0,0,00:00:00,119) [md_misc/6]
(root,0,0,00:00:00,120) [md_misc/7]
(root,0,0,00:00:00,121) [linkwatch]
(root,0,0,00:02:11,124) [khungtaskd]
(root,0,0,1-23:08:39,125) [kswapd1]
(root,0,0,00:00:00,126) [ksmd]
(root,0,0,04:09:13,127) [khugepaged]
(root,0,0,00:00:00,128) [aio/0]
(root,0,0,00:00:00,129) [aio/1]
(root,0,0,00:00:00,130) [aio/2]
(root,0,0,00:00:00,131) [aio/3]
(root,0,0,00:00:00,132) [aio/4]
(root,0,0,00:00:00,133) [aio/5]
(root,0,0,00:00:00,134) [aio/6]
(root,0,0,00:00:00,135) [aio/7]
(root,0,0,00:00:00,136) [crypto/0]
(root,0,0,00:00:00,137) [crypto/1]
(root,0,0,00:00:00,138) [crypto/2]
(root,0,0,00:00:00,139) [crypto/3]
(root,0,0,00:00:00,140) [crypto/4]
(root,0,0,00:00:00,141) [crypto/5]
(root,0,0,00:00:00,142) [crypto/6]
(root,0,0,00:00:00,143) [crypto/7]
(root,0,0,00:00:00,150) [kthrotld/0]
(root,0,0,00:00:00,151) [kthrotld/1]
(root,0,0,00:00:00,152) [kthrotld/2]
(root,0,0,00:00:00,153) [kthrotld/3]
(root,0,0,00:00:00,154) [kthrotld/4]
(root,0,0,00:00:00,155) [kthrotld/5]
(root,0,0,00:00:00,156) [kthrotld/6]
(root,0,0,00:00:00,157) [kthrotld/7]
(root,0,0,00:00:00,160) [kpsmoused]
(root,0,0,00:00:00,161) [usbhid_resumer]
(root,0,0,00:00:00,162) [deferwq]
(root,0,0,00:00:00,194) [kdmremove]
(root,0,0,00:00:00,195) [kstriped]
(root,0,0,00:00:00,738) [scsi_eh_0]
(root,0,0,00:00:00,739) [scsi_wq_0]
(root,0,0,00:00:00,748) [scsi_eh_1]
(root,0,0,00:00:00,749) [scsi_eh_2]
(root,0,0,00:00:00,750) [scsi_eh_3]
(root,0,0,00:00:00,751) [scsi_eh_4]
(root,0,0,00:00:00,752) [scsi_eh_5]
(root,0,0,00:00:00,753) [scsi_eh_6]
(root,0,0,02:36:10,958) [md1_raid1]
(root,0,0,00:08:08,1019) [jbd2/md1-8]
(root,0,0,00:00:00,1020) [ext4-dio-unwrit]
(root,11068,512,00:03:06,1113) /sbin/udevd -d
(root,0,0,00:58:42,1239) [edac-poller]
(root,0,0,03:05:35,1602) [md4_raid1]
(root,0,0,01:24:31,1622) [md2_raid1]
(root,0,0,00:30:47,1760) [md0_raid1]
(root,0,0,12:06:50,1787) [md3_raid1]
(root,0,0,8-14:39:26,1802) [md5_raid1]
(root,0,0,00:00:00,1873) [jbd2/md0-8]
(root,0,0,00:00:00,1874) [ext4-dio-unwrit]
(root,0,0,00:00:00,1877) [xfs_mru_cache]
(root,0,0,04:00:46,1878) [xfslogd/0]
(root,0,0,00:00:00,1879) [xfslogd/1]
(root,0,0,00:00:00,1880) [xfslogd/2]
(root,0,0,00:00:00,1881) [xfslogd/3]
(root,0,0,00:00:00,1882) [xfslogd/4]
(root,0,0,00:00:00,1883) [xfslogd/5]
(root,0,0,10:02:17,1884) [xfslogd/6]
(root,0,0,00:00:00,1885) [xfslogd/7]
(root,0,0,00:56:12,1886) [xfsdatad/0]
(root,0,0,00:00:00,1887) [xfsdatad/1]
(root,0,0,00:00:00,1888) [xfsdatad/2]
(root,0,0,00:00:00,1889) [xfsdatad/3]
(root,0,0,00:00:00,1890) [xfsdatad/4]
(root,0,0,00:00:00,1891) [xfsdatad/5]
(root,0,0,02:13:19,1892) [xfsdatad/6]
(root,0,0,00:00:00,1893) [xfsdatad/7]
(root,0,0,00:00:00,1894) [xfsconvertd/0]
(root,0,0,00:00:00,1895) [xfsconvertd/1]
(root,0,0,00:00:00,1896) [xfsconvertd/2]
(root,0,0,00:00:00,1897) [xfsconvertd/3]
(root,0,0,00:00:00,1898) [xfsconvertd/4]
(root,0,0,00:00:00,1899) [xfsconvertd/5]
(root,0,0,00:00:00,1900) [xfsconvertd/6]
(root,0,0,00:00:00,1901) [xfsconvertd/7]
(root,0,0,00:00:00,1902) [xfsalloc/0]
(root,0,0,00:00:00,1903) [xfsalloc/1]
(root,0,0,00:00:00,1904) [xfsalloc/2]
(root,0,0,00:00:00,1905) [xfsalloc/3]
(root,0,0,00:00:00,1906) [xfsalloc/4]
(root,0,0,00:00:00,1907) [xfsalloc/5]
(root,0,0,00:00:01,1908) [xfsalloc/6]
(root,0,0,00:00:00,1909) [xfsalloc/7]
(root,0,0,00:00:08,1910) [xfseofblocks/0]
(root,0,0,00:00:06,1911) [xfseofblocks/1]
(root,0,0,00:00:05,1912) [xfseofblocks/2]
(root,0,0,00:00:12,1913) [xfseofblocks/3]
(root,0,0,00:00:06,1914) [xfseofblocks/4]
(root,0,0,00:04:38,1915) [xfseofblocks/5]
(root,0,0,00:00:06,1916) [xfseofblocks/6]
(root,0,0,00:00:14,1917) [xfseofblocks/7]
(root,0,0,00:53:48,1918) [xfsbufd/md5]
(root,0,0,00:54:42,1919) [xfs-cil/md5]
(root,0,0,01:30:42,1920) [xfssyncd/md5]
(root,0,0,11:16:46,1921) [xfsaild/md5]
(root,0,0,00:08:18,1922) [jbd2/md2-8]
(root,0,0,00:00:00,1923) [ext4-dio-unwrit]
(root,0,0,00:18:36,1924) [xfsbufd/md4]
(root,0,0,00:02:04,1925) [xfs-cil/md4]
(root,0,0,00:10:13,1926) [xfssyncd/md4]
(root,0,0,10:46:09,1927) [xfsaild/md4]
(root,0,0,01:05:11,1928) [xfsbufd/md3]
(root,0,0,04:20:43,1929) [xfs-cil/md3]
(root,0,0,00:59:48,1930) [xfssyncd/md3]
(root,0,0,11:21:03,1931) [xfsaild/md3]
(root,0,0,01:19:27,1932) [xfsbufd/sdc1]
(root,0,0,01:32:17,1933) [xfs-cil/sdc1]
(root,0,0,07:56:46,1934) [xfssyncd/sdc1]
(root,0,0,4-22:53:41,1935) [xfsaild/sdc1]
(root,0,0,00:04:41,1997) [flush-9:2]
(root,0,0,00:44:34,1999) [flush-9:3]
(root,0,0,00:28:03,2036) [kauditd]
(root,29764,660,00:39:53,2289) auditd
(root,252156,31292,17:11:12,2311) /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
(root,18380,556,03:56:47,2326) irqbalance --pid=/var/run/irqbalance.pid
(root,17368,1288,00:04:41,2342) /sbin/udevd
(root,4988,744,00:01:16,2372) mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid
(root,6780,236,00:00:00,2495) /usr/sbin/mcelog --daemon
(496,330848,372,01:16:35,2507) memcached -d -p 11211 -u memcached -m 64 -c 1024 -P /var/run/memcached/memcached.pid -l 127.0.0.1
(root,68380,616,00:49:54,2529) /usr/sbin/sshd
(root,21712,720,00:12:36,2540) xinetd -stayalive -pidfile /var/run/xinetd.pid
(root,73424,2012,00:16:10,3179) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,1996,00:16:04,3180) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,1996,00:16:11,3181) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73428,2000,00:16:08,3182) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,73424,2004,00:16:10,3183) /usr/sbin/saslauthd -m /var/run/saslauthd -a pam
(root,117048,1152,00:18:43,3308) crond
(root,107544,436,00:03:06,3359) pure-ftpd (SERVER)                                                  
(root,63476,13804,01:08:21,3661) /usr/bin/perl /usr/local/webmin/webmin-1.860/miniserv.pl /etc/webmin/miniserv.conf
(root,4060,460,00:00:00,3669) /sbin/mingetty /dev/tty1
(root,4060,460,00:00:00,3671) /sbin/mingetty /dev/tty2
(root,4060,460,00:00:00,3673) /sbin/mingetty /dev/tty3
(root,4060,460,00:00:00,3675) /sbin/mingetty /dev/tty4
(root,4060,460,00:00:00,3677) /sbin/mingetty /dev/tty5
(root,4060,460,00:00:00,3679) /sbin/mingetty /dev/tty6
(root,0,0,00:04:46,54764) [flush-9:1]
(root,10644,580,00:04:12,71683) /sbin/udevd -d
(root,11064,380,00:00:00,71684) /sbin/udevd -d
(root,0,0,00:00:00,79733) [flush-9:4]
(root,265768,48596,00:00:11,80613) spamd child
(root,97548,4216,00:00:00,89170) sendmail: server [203.153.118.110] cmd read
(apache,612696,112888,00:00:18,91405) /usr/sbin/httpd -DSSL
(apache,607456,112316,00:00:12,91470) /usr/sbin/httpd -DSSL
(apache,636704,132368,00:00:09,92210) /usr/sbin/httpd -DSSL
(apache,605260,104572,00:00:09,92665) /usr/sbin/httpd -DSSL
(apache,611268,109192,00:00:08,92884) /usr/sbin/httpd -DSSL
(apache,644964,140832,00:00:08,92912) /usr/sbin/httpd -DSSL
(apache,648660,144848,00:00:10,92915) /usr/sbin/httpd -DSSL
(apache,605296,92912,00:00:03,93845) /usr/sbin/httpd -DSSL
(apache,606500,88436,00:00:03,93847) /usr/sbin/httpd -DSSL
(apache,619684,115188,00:00:04,93848) /usr/sbin/httpd -DSSL
(apache,605756,108096,00:00:09,93849) /usr/sbin/httpd -DSSL
(apache,618584,100776,00:00:04,93932) /usr/sbin/httpd -DSSL
(apache,631736,118412,00:00:03,93934) /usr/sbin/httpd -DSSL
(apache,604664,101956,00:00:05,93937) /usr/sbin/httpd -DSSL
(apache,611472,94988,00:00:06,93938) /usr/sbin/httpd -DSSL
(apache,635932,130336,00:00:05,93939) /usr/sbin/httpd -DSSL
(apache,604780,105344,00:00:04,93940) /usr/sbin/httpd -DSSL
(apache,619160,92804,00:00:01,94615) /usr/sbin/httpd -DSSL
(apache,611560,98016,00:00:05,94981) /usr/sbin/httpd -DSSL
(apache,626864,107504,00:00:03,94991) /usr/sbin/httpd -DSSL
(root,0,0,00:00:00,95371) [flush-8:0]
(apache,624504,118224,00:00:01,95573) /usr/sbin/httpd -DSSL
(root,15088,3104,00:00:00,95582) dovecot/config
(dovecot,78848,2880,00:00:00,95583) dovecot/auth
(root,80952,3104,00:00:00,95584) dovecot/auth -w
(apache,598704,48588,00:00:00,95588) /usr/sbin/httpd -DSSL
(apache,598908,51936,00:00:00,95672) /usr/sbin/httpd -DSSL
(apache,598924,51688,00:00:00,95673) /usr/sbin/httpd -DSSL
(root,97548,4176,00:00:00,96052) sendmail: server [179.40.18.220] cmd read
(root,110284,1420,00:00:00,96152) /bin/bash /usr/bin/check_mk_agent
(root,13372,1008,00:00:00,96171) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8388,812,00:00:00,96172) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,19264,708,00:00:00,115381) /usr/sbin/dovecot
(dovecot,12984,988,00:00:00,115383) dovecot/anvil
(root,13108,1096,00:00:00,115384) dovecot/log
(root,0,0,00:49:43,139117) [flush-9:5]
(root,149068,41288,00:01:23,154791) /usr/bin/rsync -azSvy --partial --exclude-from=exclude.home --numeric-ids --delete --delete-excluded --link-dest=../home.1 /home/ home.0/
(root,108352,1220,00:00:00,186251) /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql
(mysql,4859940,1157388,712-05:33:29,186770) /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock
(root,598448,60240,03:26:39,186838) /usr/sbin/httpd -DSSL
(root,263840,27188,03:59:35,198068) /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
(root,109072,708,00:00:00,226659) /usr/bin/rsync -azSvy --partial --exclude-from=exclude.etc --numeric-ids --delete --delete-excluded --link-dest=../etc.1 /etc/ etc.0/
(smmsp,80436,2124,00:00:01,235206) sendmail: Queue runner@00:01:00 for /var/spool/clientmqueue
(root,95228,2772,00:00:05,235208) sendmail: accepting connections
(named,771728,29004,00:20:40,235315) /usr/sbin/named -u named -4
(named,705928,13704,00:00:46,237252) /usr/sbin/named -u named -4
(root,265728,48468,00:00:08,245312) spamd child

Found on 2022-10-17 19:45

Create report

Open service 95.142.100.16:443 · result2018.pk

2024-12-14 16:39

HTTP/1.1 301 Moved Permanently
Date: Sat, 14 Dec 2024 16:39:11 GMT
Server: Apache
Cache-control: no-store, no-cache, must-revalidate
Set-Cookie: PHPSESSID=be65d181be5ec5ef18ecdee1b5f12797; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Location: https://list.com.pk
Vary: Accept-Encoding,User-Agent
Content-Length: 1
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-12-14 by HttpPlugin

Create report

Open service 95.142.100.16:80 · result2018.pk

2024-12-14 16:39

HTTP/1.1 301 Moved Permanently
Date: Sat, 14 Dec 2024 16:39:11 GMT
Server: Apache
Cache-control: no-store, no-cache, must-revalidate
Set-Cookie: PHPSESSID=d1675b17ab951b715e9412cb1d7ff4b2; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Location: https://www.result2018.pk
Vary: Accept-Encoding,User-Agent
Content-Length: 1
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-12-14 by HttpPlugin

Create report

dictionary.list.com.pklist.com.pkprizebond.list.com.pkwww.list.com.pk

Fingerprint:

6f17ea34cb44faeee9123423a83b1794f1501a00e15154da98e718c734e070a9

CN:

list.com.pk

Key:

RSA-4096

Issuer:

Not before:

2022-10-31 14:47

Not after:

2023-01-29 14:47

Domain summary

result2018.pk 1

1 recorded