8.4.27

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 1.7 0.4 177192 16600 ? Ss Oct23 144:24 /usr/lib/systemd/systemd --switched-root --system --deserialize 31 root 2 0.0 0.0 0 0 ? S Oct23 0:00 [kthreadd] root 3 0.0 0.0 0 0 ? S Oct23 0:00 [pool_workqueue_] root 4 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-rcu_g] root 5 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-sync_] root 6 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-slub_] root 7 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-netns] root 9 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/0:0H-events_highpri] root 10 0.0 0.0 0 0 ? I Oct23 0:00 [kworker/u16:0-events_unbound] root 11 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-mm_pe] root 12 0.0 0.0 0 0 ? I Oct23 0:00 [kworker/u16:1-netns] root 13 0.0 0.0 0 0 ? I Oct23 0:00 [rcu_tasks_kthre] root 14 0.0 0.0 0 0 ? I Oct23 0:00 [rcu_tasks_rude_] root 15 0.0 0.0 0 0 ? I Oct23 0:00 [rcu_tasks_trace] root 16 0.0 0.0 0 0 ? S Oct23 3:05 [ksoftirqd/0] root 17 0.0 0.0 0 0 ? I Oct23 6:16 [rcu_preempt] root 18 0.0 0.0 0 0 ? S Oct23 0:00 [rcu_exp_par_gp_] root 19 0.0 0.0 0 0 ? S Oct23 0:09 [rcu_exp_gp_kthr] root 20 0.0 0.0 0 0 ? S Oct23 0:04 [migration/0] root 21 0.0 0.0 0 0 ? S Oct23 0:00 [idle_inject/0] root 23 0.0 0.0 0 0 ? S Oct23 0:00 [cpuhp/0] root 24 0.0 0.0 0 0 ? S Oct23 0:00 [cpuhp/1] root 25 0.0 0.0 0 0 ? S Oct23 0:00 [idle_inject/1] root 26 0.0 0.0 0 0 ? S Oct23 0:04 [migration/1] root 27 0.0 0.0 0 0 ? S Oct23 3:01 [ksoftirqd/1] root 29 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/1:0H-events_highpri] root 30 0.0 0.0 0 0 ? S Oct23 0:00 [cpuhp/2] root 31 0.0 0.0 0 0 ? S Oct23 0:00 [idle_inject/2] root 32 0.0 0.0 0 0 ? S Oct23 0:04 [migration/2] root 33 0.0 0.0 0 0 ? S Oct23 3:02 [ksoftirqd/2] root 35 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/2:0H-events_highpri] root 36 0.0 0.0 0 0 ? S Oct23 0:00 [cpuhp/3] root 37 0.0 0.0 0 0 ? S Oct23 0:00 [idle_inject/3] root 38 0.0 0.0 0 0 ? S Oct23 0:05 [migration/3] root 39 0.0 0.0 0 0 ? S Oct23 3:00 [ksoftirqd/3] root 41 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/3:0H-events_highpri] root 49 0.0 0.0 0 0 ? S Oct23 0:00 [kdevtmpfs] root 50 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-inet_] root 51 0.0 0.0 0 0 ? S Oct23 0:11 [kauditd] root 52 0.0 0.0 0 0 ? S Oct23 0:00 [khungtaskd] root 54 0.0 0.0 0 0 ? S Oct23 0:00 [oom_reaper] root 56 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-write] root 57 0.0 0.0 0 0 ? S Oct23 2:47 [kcompactd0] root 58 0.0 0.0 0 0 ? SN Oct23 0:00 [ksmd] root 59 0.0 0.0 0 0 ? SN Oct23 0:27 [khugepaged] root 60 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-crypt] root 61 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-kinte] root 62 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-kbloc] root 63 0.0 0.0 0 0 ? S Oct23 0:00 [irq/9-acpi] root 65 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-tpm_d] root 66 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-md] root 67 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-md_bi] root 68 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-edac-] root 69 0.0 0.0 0 0 ? S Oct23 0:00 [watchdogd] root 73 0.0 0.0 0 0 ? S Oct23 1:59 [kswapd0] root 90 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-kthro] root 95 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-acpi_] root 96 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-kmpat] root 97 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-kalua] root 99 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-mld] root 100 0.0 0.0 0 0 ? I< Oct23 0:13 [kworker/1:1H-kblockd] root 101 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-ipv6_] root 106 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-kstrp] root 112 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/u21:0] root 113 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/u22:0] root 114 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/u23:0] root 115 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/u24:0] root 116 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/u25:0] root 416 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-ata_s] root 417 0.0 0.0 0 0 ? S Oct23 0:00 [scsi_eh_0] root 418 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-scsi_] root 419 0.0 0.0 0 0 ? S Oct23 0:00 [scsi_eh_1] root 420 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-scsi_] root 442 0.0 0.0 0 0 ? S Oct23 0:45 [jbd2/vda1-8] root 443 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-ext4-] root 553 0.0 0.0 0 0 ? S Oct23 0:00 [jbd2/loop0-8] root 554 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-ext4-] root 571 0.0 0.0 20016 1836 ? S /dev/null 2>&1 root 553123 0.0 0.0 3076 1840 ? S 07:00 0:00 sleep 1789 root 558824 0.0 0.0 0 0 ? I 07:00 0:00 [kworker/u18:1-flush-253:0] root 593183 0.0 0.0 0 0 ? I 07:07 0:00 [kworker/2:2-events] root 597790 0.0 0.0 0 0 ? I 07:07 0:00 [kworker/u19:1-flush-7:1] root 608608 0.0 0.0 0 0 ? I 07:09 0:00 [kworker/u20:1-flush-7:1] root 614414 0.0 0.2 23964 10632 ? S 07:10 0:00 dovecot/auth -w root 620575 0.0 0.0 0 0 ? I 07:12 0:00 [kworker/0:4-events] root 625179 0.0 0.0 0 0 ? I 07:12 0:00 [kworker/u18:2-events_unbound] root 648130 0.0 0.3 22184 14652 ? S 07:16 0:00 cPhulkd - dbprocessor root 653452 0.0 0.0 0 0 ? I 07:17 0:00 [kworker/0:0-cgroup_destroy] root 654283 0.0 0.0 0 0 ? I 07:18 0:00 [kworker/3:0-cgroup_destroy] root 664488 0.0 0.0 0 0 ? I 07:19 0:00 [kworker/3:1-events] root 664703 0.0 0.0 0 0 ? I 07:19 0:00 [kworker/1:0-cgroup_destroy] root 670196 0.0 0.0 0 0 ? I 07:20 0:00 [kworker/u17:0-events_unbound] root 670208 0.0 0.0 0 0 ? I 07:20 0:00 [kworker/1:3-events] root 671126 0.0 0.0 0 0 ? I 07:21 0:00 [kworker/0:3-cgroup_destroy] root 678343 0.0 0.0 0 0 ? I 07:22 0:00 [kworker/2:3-cgroup_destroy] root 691386 0.0 0.0 0 0 ? I 07:23 0:00 [kworker/u18:3-events_unbound] root 705577 0.0 0.0 0 0 ? I 07:26 0:00 [kworker/3:2-mm_percpu_wq] root 705590 0.0 0.0 0 0 ? I 07:26 0:00 [kworker/3:3-cgroup_destroy] root 709313 0.0 0.0 0 0 ? I 07:26 0:00 [kworker/1:1-events] root 709317 0.0 0.0 0 0 ? I 07:26 0:00 [kworker/1:2-mm_percpu_wq] root 710845 0.0 0.0 6640 1508 ? S 07:27 0:00 /usr/sbin/CROND -n root 710852 0.0 0.0 4620 3288 ? Ss 07:27 0:00 /bin/sh -c /usr/bin/perl /usr/local/seclayer/crons.pl >> /var/seclayer/logs/crons.log 2>&1 root 710856 0.3 0.4 19448 16504 ? S 07:27 0:00 /usr/bin/perl /usr/local/seclayer/crons.pl softuser 715860 0.0 0.7 260852 27816 ? S 07:27 0:00 php-fpm: pool nuftp_com softuser 715897 0.0 0.0 7268 3244 ? R 07:27 0:00 ps aux root 884963 0.0 0.0 0 0 ? I< Oct23 0:00 [kworker/R-dio/v] root 2392296 0.0 0.9 50872 33752 ? Ss 00:00 0:15 lfd - sleeping root 3060947 0.0 0.0 0 0 ? I< 02:00 0:00 [kworker/2:2H-kblockd] root 3759164 0.0 0.0 5924 3020 ? S 04:03 0:00 /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=cpanel.nuftp.com --suffix=-bytes_log root 3759165 0.0 0.0 5924 2988 ? S 04:03 0:00 /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log root 3759166 0.0 0.0 6056 3028 ? S 04:03 0:00 /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=cpanel.nuftp.com --mainout=/etc/apache2/logs/access_log root 3759168 0.0 0.3 17012 13288 ? S 04:03 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect root 3759731 0.0 0.1 95672 7420 ? Ss 04:03 0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf) root 3759752 0.0 0.0 4832 3096 ? Ss 04:03 0:00 /bin/bash /usr/local/simuzo/bin/simuzo-cli --audit-daemon root 3759753 0.0 0.6 98808 25900 ? S 04:03 0:00 /usr/local/simuzo/bin/php /usr/local/simuzo/cli.php --audit-daemon softtest 3760020 1.2 0.4 26308 15484 ? Ss 04:03 2:38 /usr/lib/systemd/systemd --user softtest 3760023 0.0 0.1 178824 7024 ? S 04:03 0:00 (sd-pam) softtest 3760059 0.0 0.0 1104 56 ? S 04:03 0:00 catatonit -P softtest 3760086 0.0 0.3 14100 11300 ? Ss 04:03 0:01 /usr/bin/fuse-overlayfs -o lowerdir=/home/softtest/.local/share/containers/storage/overlay/l/V36ID4XY7TGC27MFMNQLFGKCJ5:/home/softtest/.local/share/containers/storage/overlay/l/3CSYNEDFBPFDL2VEMLZXYABAQP:/home/softtest/.local/share/containers/storage/overlay/l/QPJCXRIQVAXKXAUJXYOM4B2GXH:/home/softtest/.local/share/containers/storage/overlay/l/KEHSXJ2VPDJI2NDQE5NHDAROSC:/home/softtest/.local/share/containers/storage/overlay/l/DZ5LETUZNGPFHK3T5IUZZHHLVZ:/home/softtest/.local/share/containers/storage/overlay/l/QSSYXQJNFUJCEDQWYSYIQ2Z54F:/home/softtest/.local/share/containers/storage/overlay/l/7CTZSRSXK3UBSGBW4MWYNVREWW:/home/softtest/.local/share/containers/storage/overlay/l/2A2LXYTDJNH2EZOEPU2D6NE2SO:/home/softtest/.local/share/containers/storage/overlay/l/X6NUNVNQZGIDOBBNKTUOLR6FVQ:/home/softtest/.local/share/containers/storage/overlay/l/DHERS4MWFBLUVZBV6J6ZMFIJ6V:/home/softtest/.local/share/containers/storage/overlay/l/X3DUQYNEABPD524IGX35DKQMYJ:/home/softtest/.local/share/containers/storage/overlay/l/P2LZ5FJS6SNKSQXFC5EM57KZJ2:/home/softtest/.local/share/containers/storage/overlay/l/4LYNGXYETB4YXIRYVZH27RLPND:/home/softtest/.local/share/containers/storage/overlay/l/IQUSHG2GF6G3DYWFK325QOT3GM:/home/softtest/.local/share/containers/storage/overlay/l/4I3ZC4JRR5VOMR4VBFIIPR4YL7,upperdir=/home/softtest/.local/share/containers/storage/overlay/8b160cda2c664cbae437e1d8c4028a84d165914a98ffd51f355ef934d1aba29c/diff,workdir=/home/softtest/.local/share/containers/storage/overlay/8b160cda2c664cbae437e1d8c4028a84d165914a98ffd51f355ef934d1aba29c/work /home/softtest/.local/share/containers/storage/overlay/8b160cda2c664cbae437e1d8c4028a84d165914a98ffd51f355ef934d1aba29c/merged softtest 3760090 0.0 0.6 192144 23924 ? Ss 04:03 0:00 /usr/bin/pasta --config-net --pid /run/user/1013/containers/networks/rootless-netns/rootless-netns-conn.pid --dns-forward 169.254.1.1 -t none -u none -T none -U none --no-map-gw --quiet --netns /run/user/1013/containers/networks/rootless-netns/rootless-netns --map-guest-addr 169.254.1.2 softtest 3760092 0.0 0.1 10688 4316 ? Ss 04:03 0:00 /usr/bin/dbus-broker-launch --scope user softtest 3760096 0.0 0.0 4916 2616 ? S 04:03 0:00 dbus-broker --log 4 --controller 9 --machine-id ea62d3bd3be14760b453f32d7cabbc52 --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000 root 3760117 0.0 0.8 260484 32028 ? Ss 04:03 0:00 php-fpm: master process (/opt/cpanel/ea-php84/root/etc/php-fpm.conf) softtest 3760171 0.0 0.0 73580 1824 ? Ssl 04:03 0:00 /usr/libexec/podman/aardvark-dns --config /run/user/1013/containers/networks/aardvark-dns -p 53 run softtest 3760174 0.0 0.2 1821648 8996 ? Sl 04:03 0:00 rootlessport softtest 3760181 0.0 0.2 1674184 8548 ? Sl 04:03 0:00 rootlessport-child softtest 3760191 0.0 0.0 8592 2056 ? Ss 04:03 0:00 /usr/bin/conmon --api-version 1 -c b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c -u b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c -r /usr/bin/crun -b /home/softtest/.local/share/containers/storage/overlay-containers/b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c/userdata -p /run/user/1013/containers/overlay-containers/b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c/userdata/pidfile -n uptimekuma-qnpmox_uptime-kuma --exit-dir /run/user/1013/libpod/tmp/exits --persist-dir /run/user/1013/libpod/tmp/persist/b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c --full-attach -s -l k8s-file:/home/softtest/.local/share/containers/storage/overlay-containers/b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c/userdata/ctr.log --log-level info --syslog --runtime-arg --log-format=json --runtime-arg --log --runtime-arg=/run/user/1013/containers/overlay-containers/b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c/userdata/oci-log --conmon-pidfile /run/user/1013/containers/overlay-containers/b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c/userdata/conmon.pid --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /home/softtest/.local/share/containers/storage --exit-command-arg --runroot --exit-command-arg /run/user/1013/containers --exit-command-arg --log-level --exit-command-arg info --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /run/user/1013/libpod/tmp --exit-command-arg --network-config-dir --exit-command-arg --exit-command-arg --network-backend --exit-command-arg netavark --exit-command-arg --volumepath --exit-command-arg /home/softtest/.local/share/containers/storage/volumes --exit-command-arg --db-backend --exit-command-arg sqlite --exit-command-arg --transient-store=false --exit-command-arg --hooks-dir --exit-command-arg /usr/share/containers/oci/hooks.d --exit-command-arg --runtime --exit-command-arg crun --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.mount_program=/usr/bin/fuse-overlayfs --exit-command-arg --storage-opt --exit-command-arg overlay.mountopt=nodev --exit-command-arg --events-backend --exit-command-arg file --exit-command-arg container --exit-command-arg cleanup --exit-command-arg --stopped-only --exit-command-arg b860e14d54ad354bca177ecaedc146e64071a30bf227ad22dfb67eb993db608c softtest 3760193 0.0 0.0 2336 444 ? Ss 04:03 0:00 /usr/bin/dumb-init -- node server/server.js softtest 3760195 0.3 3.5 32883540 133616 ? Ssl 04:03 0:46 uptime-kuma root 3760222 0.0 0.6 264288 24324 ? Ss 04:03 0:00 php-fpm: master process (/opt/cpanel/ea-php82/root/etc/php-fpm.conf) root 3760245 0.0 0.0 4832 3128 ? Ss 04:03 0:00 /bin/bash /usr/local/simuzo/bin/simuzo-cli --stats-daemon root 3760247 0.0 0.7 99548 29628 ? S 04:03 0:06 /usr/local/simuzo/bin/php /usr/local/simuzo/cli.php --stats-daemon wp-tool+ 3760269 0.0 0.8 108628 32072 ? Ss 04:03 0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php wp-tool+ 3760291 0.0 1.3 133604 49244 ? Ss 04:03 0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php root 3760312 0.0 0.4 164360 18288 ? Ss 04:03 0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) root 3760868 0.0 0.0 4832 3108 ? Ss 04:03 0:00 /bin/bash /usr/local/simuzo/bin/simuzo-cli --mysql-governor root 3760870 0.4 0.7 99020 28044 ? S 04:03 0:55 /usr/local/simuzo/bin/php /usr/local/simuzo/cli.php --mysql-governor root 3760898 0.0 0.6 266092 25736 ? Ss 04:03 0:00 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) root 3761051 0.0 0.6 264760 23560 ? Ss 04:03 0:00 php-fpm: master process (/opt/cpanel/ea-php85/root/etc/php-fpm.conf) softtest 3761445 0.0 0.0 245372 932 ? Ssl 04:03 0:00 /usr/sbin/nscd root 3767848 0.0 4.4 191388 164748 ? Ss 04:04 0:04 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 root 3829192 0.0 4.2 192812 159556 ? S 04:15 0:00 spamd child root 3829193 0.0 4.0 191388 152476 ? S 04:15 0:00 spamd child root 3990660 0.0 0.0 0 0 ? I< Oct28 0:01 [kworker/0:1H-kblockd] root 4008460 0.0 0.2 26324 10996 ? Ss Oct28 0:03 queueprocd - waiting up to 60s to process a task named 4010357 0.0 0.8 1186400 33120 ? Ssl Oct28 0:03 /usr/sbin/named -u named -c /etc/named.conf nscd 4010912 0.2 0.1 1597600 6328 ? Ssl Oct28 3:29 /usr/sbin/nscd cpanelc+ 4011117 0.1 0.1 7232 4016 ? Ss Oct28 2:41 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0 root 4011128 0.0 0.1 8876 4336 ? SN Oct28 0:00 cpanellogd - sleeping for logs root 4012503 0.0 0.0 6428 2864 ? Ss Oct28 0:06 /usr/sbin/crond -n mysql 4014795 1.8 6.3 8592115364 236696 ? Ssl Oct28 30:06 /usr/sbin/mariadbd simuzou+ 4016223 0.9 0.4 26104 15156 ? Ss Oct28 16:10 /usr/lib/systemd/systemd --user simuzou+ 4016225 0.0 0.0 178752 3716 ? S Oct28 0:00 (sd-pam) softacu+ 4017212 0.9 0.3 26104 13912 ? Ss Oct28 16:03 /usr/lib/systemd/systemd --user softacu+ 4017219 0.0 0.0 178752 2304 ? S Oct28 0:00 (sd-pam) rpc 4017466 0.0 0.1 14776 4828 ? Ss Oct28 0:00 /usr/bin/rpcbind -w -f root 4017486 0.0 1.1 601996 42588 ? Ssl Oct28 1:19 /usr/bin/python3 /usr/local/bin/agent360 root 4017525 0.0 0.3 46124 14448 ? Ss Oct28 0:42 /usr/lib/systemd/systemd-journald postgres 4017616 0.0 0.3 210408 11732 ? Ss Oct28 0:00 /usr/bin/postmaster -D /var/lib/pgsql/data postgres 4017617 0.0 0.0 64552 2724 ? Ss Oct28 0:00 postgres: logger postgres 4017619 0.0 0.0 210520 3484 ? Ss Oct28 0:00 postgres: checkpointer postgres 4017620 0.0 0.0 210408 2944 ? Ss Oct28 0:01 postgres: background writer postgres 4017621 0.0 0.0 210408 2780 ? Ss Oct28 0:01 postgres: walwriter postgres 4017622 0.0 0.1 210956 4956 ? Ss Oct28 0:00 postgres: autovacuum launcher postgres 4017623 0.0 0.0 64764 2724 ? Ss Oct28 0:01 postgres: stats collector postgres 4017624 0.0 0.1 210836 4312 ? Ss Oct28 0:00 postgres: logical replication launcher root 4017694 0.0 0.2 35000 7920 ? Ss Oct28 0:00 /usr/lib/systemd/systemd-udevd root 4017718 0.0 0.0 82744 3688 ? Ssl Oct28 0:03 /usr/sbin/irqbalance root 4017771 0.0 0.1 15776 4420 ? Ss Oct28 0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf root 4017772 0.0 0.0 11380 3044 ? S Oct28 0:00 dovecot/anvil dovenull 4017773 0.0 0.2 20328 9352 ? S Oct28 0:00 dovecot/imap-login dovenull 4017774 0.0 0.1 18944 5772 ? S Oct28 0:00 dovecot/managesieve-login dovenull 4017775 0.0 0.2 19500 9212 ? S Oct28 0:00 dovecot/pop3-login root 4017776 0.0 0.0 11488 2996 ? S Oct28 0:00 dovecot/log dovenull 4017777 0.0 0.2 20344 9364 ? S Oct28 0:00 dovecot/imap-login dovenull 4017778 0.0 0.2 19376 9224 ? S Oct28 0:00 dovecot/pop3-login dovenull 4017779 0.0 0.1 18944 5756 ? S Oct28 0:00 dovecot/managesieve-login root 4017780 0.0 0.1 48996 3768 ? S Oct28 0:00 dovecot/config dovecot 4017781 0.0 0.0 11568 3172 ? S Oct28 0:00 dovecot/stats dovecot 4017784 0.0 0.2 24320 7868 ? S Oct28 0:00 dovecot/auth helpcp 4017802 0.9 0.4 26100 15176 ? Ss Oct28 16:02 /usr/lib/systemd/systemd --user helpcp 4017804 0.0 0.1 178752 5364 ? S Oct28 0:00 (sd-pam) softuser 4018150 0.9 0.4 26108 15176 ? Ss Oct28 15:59 /usr/lib/systemd/systemd --user softuser 4018152 0.0 0.1 178752 7116 ? S Oct28 0:00 (sd-pam) root 4018197 0.0 0.3 295864 13372 ? Ssl Oct28 0:30 /usr/sbin/rsyslogd -n



Current Root Inode: 0 Realpath of /: / I can see /etc. Scanning for system files... CRITICAL: I can see /etc/shadow. Jailing FAILED. root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin systemd-coredump:x:999:996:systemd Core Dumper:/:/sbin/nologin dbus:x:81:81:System message bus:/:/sbin/nologin tss:x:59:59:Account used for TPM access:/dev/null:/sbin/nologin sssd:x:998:995:User for sssd:/:/sbin/nologin chrony:x:997:994::/var/lib/chrony:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/usr/share/empty.sshd:/sbin/nologin systemd-oom:x:992:992:systemd Userspace OOM Killer:/:/usr/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/usr/sbin/nologin named:x:25:25:Named:/var/named:/sbin/nologin mailman:x:991:990:GNU Mailing List Manager:/usr/local/cpanel/3rdparty/mailman:/usr/local/cpanel/bin/noshell cpanel:x:990:989::/var/cpanel/userhomes/cpanel:/usr/local/cpanel/bin/noshell cpanelcabcache:x:989:988::/var/cpanel/userhomes/cpanelcabcache:/usr/local/cpanel/bin/noshell cpanellogin:x:988:987::/var/cpanel/userhomes/cpanellogin:/usr/local/cpanel/bin/noshell cpaneleximfilter:x:987:986::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell cpaneleximscanner:x:986:985::/var/cpanel/userhomes/cpaneleximscanner:/usr/local/cpanel/bin/noshell cpanelroundcube:x:985:984::/var/cpanel/userhomes/cpanelroundcube:/usr/local/cpanel/bin/noshell cpanelconnecttrack:x:984:983::/var/cpanel/userhomes/cpanelconnecttrack:/usr/local/cpanel/bin/noshell cpanelanalytics:x:983:982::/var/cpanel/userhomes/cpanelanalytics:/usr/local/cpanel/bin/noshell cpses:x:982:981::/var/cpanel/cpses:/sbin/nologin dovecot:x:97:97:Dovecot IMAP server:/usr/libexec/dovecot:/sbin/nologin dovenull:x:981:980:Dovecot's unauthorized user:/usr/libexec/dovecot:/sbin/nologin mailnull:x:47:47:Exim:/var/spool/mqueue:/bin/false mysql:x:980:978:MariaDB server:/var/lib/mysql:/sbin/nologin cpanelphppgadmin:x:979:977:phpPgAdmin for cPanel & WHM:/var/cpanel/userhomes/cpanelphppgadmin:/usr/local/cpanel/bin/noshell cpanelphpmyadmin:x:978:976:phpMyAdmin for cPanel & WHM:/var/cpanel/userhomes/cpanelphpmyadmin:/usr/local/cpanel/bin/noshell agent360:x:977:975::/home/agent360:/bin/false polkitd:x:976:973:User for polkitd:/:/sbin/nologin rtkit:x:172:172:RealtimeKit:/:/sbin/nologin rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin pipewire:x:975:972:PipeWire System Daemon:/run/pipewire:/usr/sbin/nologin geoclue:x:974:971:User for geoclue:/var/lib/geoclue:/sbin/nologin flatpak:x:973:970:Flatpak system helper:/:/usr/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin _imunify:x:972:969::/home/_imunify:/bin/false softuser:x:1001:1002::/home/softuser:/usr/local/cpanel/bin/noshell wp-toolkit:x:971:967::/usr/local/cpanel/3rdparty/wp-toolkit/var:/bin/false script:x:1002:1003::/home/script:/usr/local/cpanel/bin/noshell billing:x:1003:1004::/home/billing:/usr/local/cpanel/bin/noshell backuply:x:970:966::/home/backuply:/bin/bash simuzo:x:969:965::/home/simuzo:/bin/bash imp:x:1006:1007::/home/imp:/usr/local/cpanel/bin/noshell cpuser:x:1007:1008::/home/cpuser:/usr/local/cpanel/bin/noshell pooja:x:1008:1009::/home/pooja:/usr/local/cpanel/bin/noshell deepaknuftp:x:1009:1010::/home/deepaknuftp:/usr/local/cpanel/bin/noshell anil:x:1010:1011::/home/anil:/bin/bash ampps:x:1011:1012::/home/ampps:/usr/local/cpanel/bin/noshell sunil:x:1012:1013::/home/sunil:/bin/bash softtest:x:1013:1014::/home/softtest:/usr/local/cpanel/bin/noshell postgres:x:26:26:PostgreSQL Server:/var/lib/pgsql:/bin/bash simuzouser:x:1015:1016::/home/simuzouser:/bin/bash alicecp:x:1016:1017::/home3/alicecp:/bin/bash helpcp:x:1019:1020::/home/helpcp:/usr/local/cpanel/bin/noshell bobnuftp:x:1022:1023::/home/bobnuftp:/usr/local/cpanel/bin/noshell alicenuftp:x:1023:1024::/home/alicenuftp:/usr/local/cpanel/bin/noshell alex15:x:1024:1025::/home/alex15:/usr/local/cpanel/bin/noshell tcpdump:x:72:72::/:/sbin/nologin impostorage:x:1025:1026::/home2/impostorage:/usr/local/cpanel/bin/noshell wwe:x:1026:1027::/home/wwe:/usr/local/cpanel/bin/noshell seclayer:x:968:964::/home/seclayer:/sbin/nologin reseller:x:1028:1029::/home/reseller:/usr/local/cpanel/bin/noshell softacc1:x:1050:1051::/home/softacc1:/usr/local/cpanel/bin/noshell ygdywdg:x:1053:1054::/home/ygdywdg:/usr/local/cpanel/bin/noshell merre:x:1054:1055::/home/merre:/usr/local/cpanel/bin/noshell softaculous:x:967:963::/var/softaculous-data:/sbin/nologin