USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 552 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:18 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:25 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:33 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 456 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 556 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 316 ? S Apr16 0:01 dovecot/anvil 881 2149 0.3 0.0 245724 21132 ? S 00:47 0:01 /usr/bin/php nobody 2291 0.0 0.0 114324 7688 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2294 0.0 0.0 114196 7556 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2295 0.0 0.0 114192 7640 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2297 0.0 0.0 114484 8556 ? D 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2298 0.0 0.0 115520 9056 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2299 0.0 0.0 114196 7560 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2300 0.0 0.0 114192 7672 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start root 2307 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2308 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2309 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2310 0.0 0.0 142436 836 ? S 00:52 0:00 CROND root 2311 0.0 0.0 142440 1024 ? S 00:52 0:00 CROND root 2312 0.0 0.0 142440 1024 ? S 00:52 0:00 CROND root 2313 0.0 0.0 142440 1024 ? S 00:52 0:00 CROND root 2314 0.0 0.0 142440 1020 ? S 00:52 0:00 CROND root 2315 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2316 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2317 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2319 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2326 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2329 0.0 0.0 142436 988 ? S 00:52 0:00 CROND root 2330 0.0 0.0 142436 836 ? S 00:52 0:00 CROND root 2331 0.0 0.0 142440 1024 ? S 00:52 0:00 CROND root 2332 0.0 0.0 142440 1012 ? S 00:52 0:00 CROND root 2333 0.0 0.0 142440 1024 ? S 00:52 0:00 CROND root 2334 0.0 0.0 142436 840 ? S 00:52 0:00 CROND root 2335 0.0 0.0 142436 836 ? S 00:52 0:00 CROND root 2336 0.0 0.0 142436 840 ? S 00:52 0:00 CROND root 2337 0.0 0.0 142436 844 ? S 00:52 0:00 CROND postgres 2350 0.0 0.0 216640 2108 ? Ds 00:52 0:00 postgres: autovacuum worker process iasdcent_iasdlondrina nobody 2351 0.0 0.0 114324 7872 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2352 0.0 0.0 114060 7408 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2353 0.0 0.0 114060 7460 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2358 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2359 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2360 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2361 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start mailnull 2376 0.0 0.0 74020 1296 ? S 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2383 0.1 0.0 170456 11652 ? D 00:52 0:00 lfd - (child) closing mailnull 2393 0.0 0.0 74880 1180 ? S 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 2402 0.0 0.0 114060 9384 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2403 0.0 0.0 169980 10924 ? D 00:52 0:00 lfd - (child) closing nobody 2405 0.0 0.0 114060 9276 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2406 0.0 0.0 114060 9384 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2407 0.0 0.0 114060 9292 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2408 0.0 0.0 114060 9296 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2409 0.0 0.0 169980 11076 ? D 00:52 0:00 lfd - (child) closing nobody 2410 0.0 0.0 116176 9828 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2411 0.0 0.0 169980 11092 ? D 00:52 0:00 lfd - (child) closing root 2412 0.0 0.0 169980 10988 ? D 00:52 0:00 lfd - (child) closing mailnull 2413 0.0 0.0 75092 1444 ? D 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2414 0.0 0.0 169980 11084 ? D 00:52 0:00 lfd - (child) closing root 2415 0.0 0.0 169980 10980 ? D 00:52 0:00 lfd - (child) closing root 2416 0.0 0.0 169980 10980 ? D 00:52 0:00 lfd - (child) closing root 2417 0.0 0.0 169980 10976 ? D 00:52 0:00 lfd - (child) closing root 2418 0.0 0.0 169980 11092 ? D 00:52 0:00 lfd - (child) closing root 2419 0.0 0.0 169980 11104 ? D 00:52 0:00 lfd - (child) closing root 2420 0.0 0.0 106120 912 ? Ss 00:52 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 2423 0.0 0.0 106120 916 ? Ss 00:52 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 2424 0.0 0.0 106120 944 ? Ss 00:52 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 2425 0.0 0.0 106120 960 ? Ss 00:52 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 2426 0.0 0.0 106120 928 ? Ss 00:52 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 2430 0.0 0.0 106120 916 ? Ss 00:52 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 2431 0.0 0.0 106124 912 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2433 0.0 0.0 106120 916 ? Ss 00:52 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 nobody 2435 0.0 0.0 114060 7364 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2436 0.0 0.0 116072 9880 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2437 0.0 0.0 4352 488 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2438 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2439 0.0 0.0 4352 476 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 2440 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 2441 0.0 0.0 4612 804 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 2442 0.0 0.0 4352 484 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2443 0.0 0.0 4352 500 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2445 0.0 0.0 4352 496 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2446 0.0 0.0 4612 804 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 2447 0.0 0.0 4352 492 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2448 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 2449 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2450 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 2451 0.0 0.0 4352 500 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2452 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114060 7376 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2456 0.0 0.0 114060 7356 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2458 0.0 0.0 115728 10672 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2459 0.0 0.0 45352 7124 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 2460 0.0 0.0 45352 7032 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 2461 0.0 0.0 45352 7064 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 2462 0.0 0.0 45352 7044 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 2463 0.0 0.0 45352 7052 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 2464 0.0 0.0 45352 7076 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 2465 0.0 0.0 45352 7100 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 2466 0.0 0.0 45352 7068 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 2468 0.0 0.0 169980 11076 ? D 00:52 0:00 lfd - (child) closing root 2469 0.0 0.0 169980 11072 ? D 00:52 0:00 lfd - (child) closing nobody 2470 0.0 0.0 115624 9800 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2471 0.0 0.0 114060 9324 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2472 0.0 0.0 169980 11096 ? D 00:52 0:00 lfd - (child) closing root 2473 0.0 0.0 169980 11080 ? D 00:52 0:00 lfd - (child) closing root 2474 0.0 0.0 169980 11096 ? D 00:52 0:00 lfd - (child) closing root 2475 0.0 0.0 169980 11116 ? D 00:52 0:00 lfd - (child) closing root 2476 0.0 0.0 169980 11112 ? D 00:52 0:00 lfd - (child) closing root 2477 0.0 0.0 169980 11112 ? D 00:52 0:00 lfd - (child) closing root 2478 0.0 0.0 169980 11088 ? D 00:52 0:00 lfd - (child) closing nobody 2479 0.0 0.0 114196 9424 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2480 0.0 0.0 114196 9356 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2484 0.0 0.0 106124 1176 ? S 00:52 0:00 /bin/bash /bin/verifica-spf.sh root 2485 0.0 0.0 106124 1132 ? S 00:52 0:00 /bin/bash /bin/monitora-load.sh root 2486 0.0 0.0 106124 1188 ? S 00:52 0:00 /bin/bash /bin/brut-filtro.sh root 2487 0.0 0.0 106124 1196 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2489 0.0 0.0 139932 984 ? D 00:52 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 2491 0.0 0.0 106120 980 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2495 0.0 0.0 106120 1204 ? S 00:52 0:00 /bin/bash /bin/malv-block.sh root 2496 0.0 0.0 124676 2292 ? D 00:52 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 nobody 2497 0.0 0.0 114192 9448 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2498 0.0 0.0 115520 10768 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2499 0.0 0.0 114216 7832 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2501 0.0 0.0 114060 7704 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114060 7520 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2503 0.0 0.0 114060 9388 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2504 0.0 0.0 114060 7460 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114060 7708 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2506 0.0 0.0 114060 7520 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start postgres 2507 0.0 0.0 216640 2092 ? Ds 00:52 0:00 postgres: autovacuum worker process postgres nobody 2508 0.0 0.0 114060 9380 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2509 0.0 0.0 114060 7468 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2519 0.0 0.0 106120 492 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2526 0.0 0.0 139260 2032 ? S 00:52 0:00 lynx -source http://testedeip.conectadohost.com.br/ nobody 2527 0.0 0.0 114060 9372 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2528 0.0 0.0 103360 796 ? S 00:52 0:00 grep sim root 2530 0.0 0.0 100976 600 ? S 00:52 0:00 wc -l root 2550 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2551 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2552 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2553 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2554 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2555 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2556 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2557 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2558 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2559 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2560 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2562 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2565 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2567 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2569 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2570 0.0 0.0 142432 1164 ? D 00:53 0:00 CROND root 2572 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2573 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2574 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2575 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2576 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2577 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2578 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2579 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2580 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2585 0.0 0.0 169980 11112 ? D 00:53 0:00 lfd - (child) closing root 2586 0.0 0.0 169980 11172 ? D 00:53 0:00 lfd - (child) closing root 2587 0.0 0.0 169980 11132 ? D 00:53 0:00 lfd - (child) closing root 2588 0.0 0.0 169980 11132 ? D 00:53 0:00 lfd - (child) closing root 2589 0.0 0.0 169980 11140 ? D 00:53 0:00 lfd - (child) closing root 2590 0.0 0.0 169980 11140 ? D 00:53 0:00 lfd - (child) closing root 2591 0.0 0.0 169980 11140 ? D 00:53 0:00 lfd - (child) closing root 2592 0.0 0.0 169980 11140 ? D 00:53 0:00 lfd - (child) closing root 2593 0.0 0.0 169980 11164 ? D 00:53 0:00 lfd - (child) closing root 2594 0.0 0.0 169980 11144 ? D 00:53 0:00 lfd - (child) closing root 2595 0.0 0.0 169980 11140 ? D 00:53 0:00 lfd - (child) closing nobody 2597 0.0 0.0 114060 9296 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2601 0.0 0.0 169980 11152 ? D 00:53 0:00 lfd - (child) closing root 2602 0.0 0.0 169980 11160 ? D 00:53 0:00 lfd - (child) closing nobody 2603 0.0 0.0 114060 7428 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2611 0.0 0.0 116244 9244 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2632 0.0 0.0 106124 592 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2646 0.0 0.0 114060 9328 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2658 0.0 0.0 106124 720 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh root 2729 0.0 0.0 169980 11056 ? D 00:53 0:00 lfd - child closing root 2730 0.0 0.0 169980 10692 ? D 00:53 0:00 lfd - (child) closing conhecsc 2737 54.0 93.9 74966496 61990508 ? R 00:35 10:23 /usr/local/cpanel/bin/autossl_check --all mailnull 2748 0.0 0.0 74016 992 ? D 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid postgres 2775 0.0 0.0 216640 2016 ? Ds 00:53 0:00 postgres: autovacuum worker process root 2838 0.0 0.0 169980 10500 ? D 00:53 0:00 lfd - (child) closing root 2839 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 2840 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 2841 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 2842 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 2843 0.0 0.0 169980 10492 ? D 00:53 0:00 lfd - (child) closing root 2844 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 2845 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 2846 0.0 0.0 169980 10416 ? D 00:53 0:00 lfd - (child) closing root 2857 0.0 0.0 169980 10492 ? D 00:53 0:00 lfd - (child) closing root 2858 0.0 0.0 169980 10508 ? D 00:53 0:00 lfd - (child) closing root 2859 0.0 0.0 169980 10508 ? D 00:53 0:00 lfd - (child) closing nobody 2881 0.0 0.0 114060 7544 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2885 0.0 0.0 114060 7576 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2886 0.0 0.0 114060 7568 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2903 0.0 0.0 114060 8144 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2904 0.0 0.0 114060 8316 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 440 ? S 00:34 0:00 CROND root 3059 0.3 0.0 252468 1632 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3112 0.0 0.0 114060 7568 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3113 0.0 0.0 114060 7804 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3114 0.0 0.0 114060 7592 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3115 0.0 0.0 114060 7572 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 3120 0.0 0.0 74880 844 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 828 3173 2.2 0.0 274064 16932 ? S 00:49 0:06 /usr/bin/php dovenull 3299 0.0 0.0 42760 536 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 424 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 456 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 540 ? D 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 540 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 608 ? S 00:45 0:00 dovecot/auth nobody 3470 0.0 0.0 114060 8148 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3494 0.0 0.0 114060 8132 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3495 0.0 0.0 114060 8156 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3496 0.0 0.0 114060 8148 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3497 0.0 0.0 114060 8140 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3514 0.0 0.0 114060 7588 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3723 0.0 0.0 114060 7540 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3725 0.0 0.0 169980 10588 ? D 00:53 0:00 child - aborting nobody 3739 0.0 0.0 114060 7508 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] nobody 3994 0.0 0.0 114060 8372 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 1172 ? S 00:47 0:00 /usr/bin/php maisg647 4243 0.2 0.0 259052 16920 ? S 00:47 0:00 /usr/bin/php maisg647 4263 0.1 0.0 240260 16916 ? S 00:47 0:00 /usr/bin/php agitae 4278 0.1 0.0 229500 16928 ? S 00:47 0:00 /usr/bin/php nobody 4485 0.0 0.0 114060 8160 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 4486 0.0 0.0 74016 960 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 4518 0.0 0.0 114060 8452 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 4519 0.0 0.0 74880 1060 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 4532 0.0 0.0 114060 8204 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4669 0.0 0.0 114060 8188 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4670 0.0 0.0 169980 10368 ? D 00:53 0:00 lfd - (child) closing nobody 4680 0.0 0.0 114060 7428 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4681 0.0 0.0 4352 528 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 4682 0.0 0.0 4352 536 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 4683 0.0 0.0 114060 8188 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4692 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 4693 0.0 0.0 4352 548 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 4696 0.0 0.0 106120 1068 ? Ss 00:53 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 4698 0.0 0.0 106120 1076 ? Ss 00:53 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 4700 0.0 0.0 106120 1080 ? Ss 00:53 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 4702 0.0 0.0 4352 528 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 4703 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 4704 0.0 0.0 4352 544 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 4705 0.0 0.0 106120 1068 ? Ss 00:53 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 4706 0.0 0.0 4352 552 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 4707 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 4709 0.0 0.0 4352 548 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 4711 0.0 0.0 106120 1088 ? Ss 00:53 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 4712 0.0 0.0 106120 1052 ? Ss 00:53 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 4714 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 4715 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 4716 0.0 0.0 4352 524 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:rebuild --force --batch-limit=300 root 4717 0.0 0.0 4352 544 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 4718 0.0 0.0 4352 540 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 4719 0.0 0.0 106120 1088 ? Ss 00:53 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 4720 0.0 0.0 106120 1096 ? Ss 00:53 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 4721 0.0 0.0 0 0 ? S Apr17 0:00 [kworker/6:0] root 4722 0.0 0.0 106120 1096 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 688 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114196 7512 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4725 0.0 0.0 117056 7672 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.9 0.0 234216 18792 ? S 00:45 0:05 /usr/bin/php diadiapr 4808 0.5 0.0 222608 17812 ? S 00:45 0:02 /usr/bin/php nobody 4809 13.7 0.0 114324 8148 ? S 00:45 1:14 /usr/local/apache/bin/httpd -k start conhecsc 4812 11.0 0.0 187440 5296 ? S 00:45 1:00 /usr/bin/php progress 4846 0.6 0.0 268336 20188 ? S 00:45 0:03 /usr/bin/php nobody 4860 0.0 0.0 116072 8096 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4865 0.1 0.0 236324 16916 ? S 00:45 0:00 /usr/bin/php nobody 4973 0.0 0.0 116176 7896 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4992 0.0 0.0 115640 7896 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5023 0.0 0.0 0 0 ? S 00:34 0:00 [kworker/9:0] root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5091 0.0 0.0 116112 7924 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 5094 0.0 0.0 116244 7372 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start icowebra 5097 0.3 0.0 194540 780 ? S 00:45 0:01 /usr/bin/php root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] root 5423 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/10:4] nobody 5674 0.0 0.0 112412 752 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6864 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6864 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6864 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 528 ? S Apr17 0:00 /usr/bin/php mailnull 5763 0.0 0.0 74880 900 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5840 0.0 0.0 106120 1256 ? S 00:53 0:00 /bin/bash /bin/brut-filtro.sh root 5842 0.0 0.0 139932 896 ? D 00:53 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 5844 0.0 0.0 106120 1316 ? S 00:53 0:00 /bin/bash /bin/bloqueia-envio.sh root 5906 0.0 0.0 106124 1256 ? S 00:53 0:00 /bin/bash /bin/monitora-load.sh root 5907 0.0 0.0 124676 2320 ? D 00:53 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 5910 0.0 0.0 106124 1244 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh root 5919 0.0 0.0 106120 1292 ? S 00:53 0:00 /bin/bash /bin/malv-block.sh pdvxyz 5923 0.0 0.0 185472 624 ? S 00:46 0:00 /usr/bin/php root 5929 0.0 0.0 144420 1328 ? D 00:53 0:00 mail -s LOAD ALTO admin@conectadohost.com.br root 5946 0.0 0.0 106124 1272 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 5947 0.0 0.0 106120 1072 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5956 0.0 0.0 106120 504 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5957 0.0 0.0 139260 1896 ? S 00:53 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 5958 0.0 0.0 103360 844 ? S 00:53 0:00 grep sim root 5959 0.0 0.0 100976 652 ? S 00:53 0:00 wc -l icowebra 6242 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 424 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4424 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 185052 ? Sl Apr17 235:32 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6553 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:2] root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] root 6730 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 6733 0.0 0.0 169980 10524 ? D 00:53 0:00 lfd - (child) closing root 6752 0.0 0.0 0 0 ? S 00:20 0:00 [kworker/8:3] nobody 6779 0.0 0.0 114196 8044 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 6785 0.0 0.0 169980 10536 ? D 00:53 0:00 lfd - (child) closing root 6786 0.0 0.0 169980 10532 ? D 00:53 0:00 lfd - (child) closing root 6787 0.0 0.0 169980 10504 ? D 00:53 0:00 lfd - (child) closing root 6788 0.0 0.0 169980 10524 ? D 00:53 0:00 lfd - (child) closing root 6795 0.0 0.0 169980 10528 ? D 00:53 0:00 lfd - (child) closing root 6796 0.0 0.0 169980 10528 ? D 00:53 0:00 lfd - (child) closing root 6797 0.0 0.0 169980 10532 ? D 00:53 0:00 lfd - (child) closing root 6798 0.0 0.0 169980 10540 ? D 00:53 0:00 lfd - (child) closing root 6799 0.0 0.0 169980 10536 ? D 00:53 0:00 lfd - (child) closing root 6800 0.0 0.0 169980 10524 ? D 00:53 0:00 lfd - (child) closing root 6801 0.0 0.0 169980 10536 ? D 00:53 0:00 lfd - (child) closing root 6802 0.0 0.0 169980 10536 ? D 00:53 0:00 lfd - (child) closing root 6803 0.0 0.0 169980 10528 ? D 00:53 0:00 lfd - (child) closing icowebra 6842 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 6937 0.0 0.0 114060 8032 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 6942 0.0 0.0 74880 1056 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 992 7038 0.0 0.0 184964 528 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 596 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 7084 0.0 0.0 114060 8152 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] root 7318 0.0 0.0 0 0 ? S 00:18 0:00 [kworker/10:3] nobody 7454 0.0 0.0 117056 8288 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7468 0.0 0.0 106120 1220 ? S 00:53 0:00 /bin/bash /bin/malv2-block.sh nobody 7489 0.0 0.0 114060 8148 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7492 0.0 0.0 106124 720 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh nobody 7506 0.0 0.0 115640 8420 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7544 0.0 0.0 106124 396 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7545 0.0 0.0 100988 568 ? D 00:53 0:00 cat /var/log/exim_mainlog root 7546 0.0 0.0 103360 852 ? S 00:53 0:00 grep 104.130.11.193 nobody 7574 0.0 0.0 114192 8268 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7575 0.0 0.0 114060 7548 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7488 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114060 7560 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 8091 0.0 0.0 116004 8528 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8095 0.0 0.0 106124 652 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8120 0.0 0.0 0 0 ? S 00:30 0:00 [kworker/1:1] root 8124 0.0 0.0 169980 10572 ? D 00:54 0:00 lfd - (child) closing root 8125 0.1 0.0 169980 10568 ? D 00:54 0:00 lfd - (child) closing root 8126 0.0 0.0 169980 10560 ? D 00:54 0:00 lfd - (child) closing root 8127 0.0 0.0 169980 10568 ? D 00:54 0:00 lfd - (child) closing root 8128 0.0 0.0 169980 10484 ? D 00:54 0:00 lfd - (child) closing root 8129 0.0 0.0 169980 10492 ? D 00:54 0:00 lfd - (child) closing root 8268 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8271 0.0 0.0 142436 1152 ? S 00:54 0:00 CROND root 8273 0.0 0.0 142436 1156 ? S 00:54 0:00 CROND root 8274 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8276 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8278 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8280 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8281 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8282 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8283 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8284 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8285 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8286 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8288 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8289 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8293 0.0 0.0 140364 1336 ? D 00:54 0:00 CROND root 8295 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8296 0.0 0.0 140364 1336 ? D 00:54 0:00 CROND root 8297 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8298 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8299 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8300 0.0 0.0 142436 1172 ? S 00:54 0:00 CROND root 8301 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8303 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8305 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8307 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8309 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8310 0.0 0.0 142436 1160 ? S 00:54 0:00 CROND root 8312 0.0 0.0 142436 1164 ? S 00:54 0:00 CROND root 8313 0.0 0.0 142436 1168 ? S 00:54 0:00 CROND root 8371 0.0 0.0 169980 10480 ? D 00:54 0:00 lfd - (child) closing root 8372 0.0 0.0 169980 10484 ? D 00:54 0:00 lfd - (child) closing root 8373 0.0 0.0 169980 10492 ? D 00:54 0:00 lfd - (child) closing root 8374 0.0 0.0 169980 10488 ? D 00:54 0:00 lfd - (child) closing nobody 8426 0.0 0.0 114060 7864 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8427 0.0 0.0 106124 536 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8428 0.0 0.0 59504 1560 ? D 00:54 0:00 nslookup 200.103.73.25 root 8429 0.0 0.0 103360 840 ? S 00:54 0:00 grep br root 8437 0.0 0.0 100976 648 ? S 00:54 0:00 wc -l nobody 8489 0.0 0.0 116112 8568 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8493 0.0 0.0 114060 8192 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8497 0.0 0.0 114060 8188 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 8502 0.0 0.0 74880 1036 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8503 0.0 0.0 114060 7908 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8504 0.0 0.0 114196 8116 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8509 0.0 0.0 114060 7908 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8510 0.0 0.0 114060 7916 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8538 0.0 0.0 114060 8204 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 8565 0.0 0.0 74880 1040 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 8566 0.0 0.0 169980 10536 ? D 00:54 0:00 lfd - (child) closing root 8567 0.0 0.0 169980 10536 ? D 00:54 0:00 lfd - (child) closing root 8581 0.0 0.0 169980 10532 ? D 00:54 0:00 lfd - (child) closing root 8681 0.0 0.0 169980 10544 ? D 00:54 0:00 lfd - (child) closing root 8682 0.0 0.0 169980 10540 ? D 00:54 0:00 lfd - (child) closing root 8683 0.0 0.0 169980 10540 ? D 00:54 0:00 lfd - (child) closing root 8684 0.0 0.0 169980 10540 ? D 00:54 0:00 lfd - (child) closing nobody 8714 0.0 0.0 114196 8064 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8748 0.0 0.0 69976 620 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 8812 0.0 0.0 114060 8044 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8825 0.1 0.0 106124 900 ? S 00:54 0:00 /bin/bash /bin/malv-block.sh mailnull 8831 0.0 0.0 74880 1220 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8839 0.0 0.0 114060 7736 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114060 8032 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 9827 0.0 0.0 169980 10416 ? D 00:54 0:00 lfd - child closing root 9828 0.0 0.0 169980 10148 ? D 00:54 0:00 lfd - (child) closing nobody 9840 0.0 0.0 114060 7584 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114060 8044 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9842 0.0 0.0 114060 7576 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9843 0.0 0.0 114060 7584 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10618 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-clientes.sh > /dev/null 2>&1 root 10619 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 10620 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 10621 0.0 0.0 106120 1096 ? Ss 00:54 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 10622 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/minuto-a-minuto.sh > /dev/null 2>&1 root 10623 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 10624 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 10625 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 10626 0.0 0.0 106120 1080 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf.sh > /dev/null 2>&1 root 10627 0.0 0.0 106120 1116 ? Ss 00:54 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 10628 0.0 0.0 106120 1128 ? Ss 00:54 0:00 /bin/sh -c /bin/block-malv.sh > /dev/null 2>&1 root 10629 0.0 0.0 106124 1100 ? Ss 00:54 0:00 /bin/sh -c /bin/block-cloud.sh > /dev/null 2>&1 root 10630 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 mailnull 10634 0.0 0.0 74004 1168 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 10677 0.0 0.0 169980 9796 ? D 00:54 0:00 lfd - (child) closing root 10678 0.0 0.0 169980 9800 ? D 00:54 0:00 lfd - (child) closing root 10679 0.0 0.0 169980 9800 ? D 00:54 0:00 lfd - (child) closing root 10680 0.0 0.0 169980 9808 ? D 00:54 0:00 lfd - (child) closing root 10681 0.0 0.0 169980 9804 ? D 00:54 0:00 lfd - (child) closing root 10682 0.0 0.0 169980 9800 ? D 00:54 0:00 lfd - (child) closing root 10683 0.0 0.0 169980 9804 ? D 00:54 0:00 lfd - (child) closing root 10684 0.0 0.0 169980 9796 ? D 00:54 0:00 lfd - (child) closing root 10685 0.0 0.0 4352 568 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 10686 0.0 0.0 4352 584 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 10687 0.0 0.0 4352 584 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 10688 0.0 0.0 4356 596 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 10689 0.0 0.0 4352 564 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 10690 0.0 0.0 4352 580 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 10691 0.0 0.0 4356 580 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 10692 0.0 0.0 4352 580 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 10693 0.0 0.0 4352 580 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 10694 0.0 0.0 4352 596 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 10695 0.0 0.0 4352 596 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10697 0.0 0.0 4352 592 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 10698 0.0 0.0 4352 596 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 10699 0.0 0.0 4352 592 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 10701 0.0 0.0 4352 596 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 10723 0.0 0.0 106124 384 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10724 0.0 0.0 100992 556 ? D 00:54 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt root 10725 0.0 0.0 103360 852 ? S 00:54 0:00 grep 104.130.11.193 root 10834 0.0 0.0 170112 10524 ? D 00:54 0:00 lfd - (child) process tracking... root 10842 0.0 0.0 106124 1108 ? S 00:54 0:00 /bin/bash /bin/liberar-clientes.sh root 10843 0.0 0.0 106124 1280 ? S 00:54 0:00 /bin/bash /bin/verifica-spf.sh root 10845 0.0 0.0 106120 1300 ? D 00:54 0:00 /bin/bash /bin/bloqueia-envio.sh root 10846 0.0 0.0 106124 1244 ? S 00:54 0:00 /bin/bash /bin/monitora-load.sh root 10847 0.0 0.0 65944 500 ? D 00:54 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 10848 0.0 0.0 106120 1272 ? S 00:54 0:00 /bin/bash /bin/liberar-csf.sh root 10849 0.0 0.0 106120 1308 ? S 00:54 0:00 /bin/bash /bin/malv-block.sh root 10850 0.0 0.0 106120 1108 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10851 0.0 0.0 106124 1316 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10852 0.0 0.0 106120 1244 ? S 00:54 0:00 /bin/bash /bin/minuto-a-minuto.sh root 10853 0.0 0.0 122216 1884 ? D 00:54 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 10854 0.2 0.0 108344 1132 ? R 00:54 0:00 ps aux root 10874 0.0 0.0 106120 1280 ? S 00:54 0:00 /bin/bash /bin/block-malv.sh root 10875 0.0 0.0 106120 1300 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 10876 0.0 0.0 106124 1312 ? S 00:54 0:00 /bin/bash /bin/block-cloud.sh root 10911 0.0 0.0 106120 504 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10913 0.0 0.0 41160 684 ? D 00:54 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 10914 0.0 0.0 103360 840 ? S 00:54 0:00 grep sim root 10915 0.0 0.0 100976 648 ? S 00:54 0:00 wc -l root 10926 0.0 0.0 4640 240 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 336 ? Ss Apr16 0:00 dbus-daemon --system root 10983 0.0 0.0 0 0 ? S 00:40 0:00 [kworker/5:2] nscd 11003 0.1 0.0 2789012 1800 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd mailnull 11055 0.0 0.0 74876 1276 ? D 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 11070 0.0 0.0 169980 9804 ? D 00:54 0:00 lfd - (child) closing nobody 11086 0.0 0.0 114060 7308 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11087 0.0 0.0 114060 7308 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11088 0.0 0.0 114060 7308 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11089 0.0 0.0 114060 7308 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11090 0.1 0.0 114060 7308 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11194 0.0 0.0 32428 368 ? D 00:54 0:00 mail -s LOAD ALTO admin@conectadohost.com.br postgres 11213 0.0 0.0 215388 712 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11231 0.0 0.0 0 0 ? S 00:40 0:00 [kworker/11:4] nobody 11237 0.0 0.0 114324 7452 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 224 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 576 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 668 ? Ss Apr16 0:07 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 580 ? Ss Apr16 0:08 postgres: stats collector process nobody 11358 0.0 0.0 114060 7324 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11363 0.1 0.0 169980 10000 ? Ds 00:00 0:05 lfd - scanning log files root 11410 0.0 0.0 106124 776 ? S 00:54 0:00 /bin/bash /bin/block-cloud.sh nobody 11441 0.0 0.0 114060 7512 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11457 0.0 0.0 114060 7336 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11458 0.0 0.0 114060 7328 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11472 0.0 0.0 106120 1160 ? S 00:54 0:00 /bin/bash /bin/block-mal2.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 500 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 220 ? Ss Apr16 0:00 /usr/sbin/atd root 12560 0.0 0.0 4108 232 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 236 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 232 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 236 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 232 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 232 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 13645 0.0 0.0 114060 8656 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 364 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3516 ? D Apr16 0:03 queueprocd - process next scheduled task root 15606 0.0 0.0 86956 2336 ? Ds Apr16 0:23 dnsadmin - server mode mailman 16010 0.0 0.0 120748 1340 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1020 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1220 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1008 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1008 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1020 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1072 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 1012 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 732 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1052 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 2508 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 conhecsc 17197 0.0 0.0 191140 13084 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] noticias 18706 0.0 0.0 205684 16916 ? S 00:46 0:00 /usr/bin/php root 19022 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/u24:0] root 19132 2.3 0.0 240980 47216 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream root 19138 0.0 0.0 88412 5180 ? D 00:50 0:00 dnsadmin - waiting for request on connected socket 882 19151 0.2 0.0 243772 47504 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 12.0 0.0 23760 8784 ? S 00:50 0:27 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 6080 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.6 0.0 249740 16920 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 7908 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.1 0.0 234712 16916 ? S 00:48 0:00 /usr/bin/php 992 20178 0.0 0.0 187384 7800 ? S 00:46 0:00 /usr/bin/php wwwfacul 20446 0.1 0.0 265704 16912 ? S 00:46 0:00 /usr/bin/php regis 20754 0.0 0.0 186880 6580 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 7916 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.1 0.0 263164 16916 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 21246 0.0 0.0 0 0 ? S 00:37 0:00 [kworker/10:0] root 22248 0.0 0.0 0 0 ? S 00:35 0:00 [kworker/5:0] root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] root 23533 0.0 0.0 0 0 ? S 00:43 0:00 [kworker/4:2] root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 746844 4092 ? Ssl Apr17 0:38 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25005 0.0 0.0 0 0 ? S 00:43 0:00 [kworker/2:3] root 25628 0.2 0.0 0 0 ? D Apr17 0:13 [kworker/u24:1] maisg647 26560 0.0 0.0 241460 16928 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 16916 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 16152 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7624 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1652 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 8960 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 820 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11512 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 416 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 300 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] mailnull 29882 0.0 0.0 74248 2540 ? S 00:51 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid icowebra 30070 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 30851 0.3 0.0 49988 6560 ? Ds Apr16 6:13 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2308 ? S 00:49 0:00 /usr/bin/php nobody 32182 0.0 0.0 115728 8796 ? S 00:47 0:00 /usr/local/apache/bin/httpd -k start USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 552 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:18 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:25 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? D Apr16 3:34 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 456 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 548 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 288 ? S Apr16 0:01 dovecot/anvil 881 2149 0.3 0.0 245724 21132 ? S 00:47 0:01 /usr/bin/php nobody 2291 0.0 0.0 114484 8540 ? D 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2294 0.0 0.0 114196 7552 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2295 0.0 0.0 114192 7628 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2297 0.0 0.0 114484 8500 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2298 0.0 0.0 115520 9052 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2299 0.0 0.0 114196 7556 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2300 0.0 0.0 114192 7668 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start root 2307 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2308 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2309 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2310 0.0 0.0 142436 836 ? S 00:52 0:00 CROND root 2311 0.0 0.0 142436 1024 ? S 00:52 0:00 CROND root 2312 0.0 0.0 142436 1024 ? S 00:52 0:00 CROND root 2313 0.0 0.0 142436 1024 ? S 00:52 0:00 CROND root 2314 0.0 0.0 142436 1024 ? S 00:52 0:00 CROND root 2315 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2317 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2319 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 844 ? S 00:52 0:00 CROND root 2329 0.0 0.0 142436 988 ? S 00:52 0:00 CROND root 2330 0.0 0.0 142436 836 ? S 00:52 0:00 CROND root 2331 0.0 0.0 142436 1024 ? S 00:52 0:00 CROND root 2332 0.0 0.0 142436 1024 ? S 00:52 0:00 CROND root 2333 0.0 0.0 142436 1024 ? S 00:52 0:00 CROND root 2334 0.0 0.0 142436 840 ? S 00:52 0:00 CROND root 2335 0.0 0.0 142436 836 ? S 00:52 0:00 CROND root 2336 0.0 0.0 142436 840 ? S 00:52 0:00 CROND root 2337 0.0 0.0 142436 844 ? S 00:52 0:00 CROND postgres 2350 0.0 0.0 216640 2320 ? Ds 00:52 0:00 postgres: autovacuum worker process iasdcent_iasdlondrina nobody 2351 0.0 0.0 114324 7864 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2352 0.0 0.0 114060 7408 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2353 0.0 0.0 114060 7456 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2358 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2359 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2360 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2361 0.0 0.0 114060 7496 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start mailnull 2376 0.0 0.0 74020 1236 ? S 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2383 0.1 0.0 170456 11860 ? D 00:52 0:00 lfd - (child) closing nobody 2402 0.0 0.0 114060 9520 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2403 0.0 0.0 169980 11112 ? D 00:52 0:00 lfd - (child) closing nobody 2405 0.0 0.0 114060 9416 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2406 0.0 0.0 114060 9516 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2407 0.0 0.0 114060 9428 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2408 0.0 0.0 114060 9432 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2409 0.0 0.0 169980 11248 ? D 00:52 0:00 lfd - (child) closing nobody 2410 0.0 0.0 116176 9964 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2411 0.0 0.0 169980 11264 ? D 00:52 0:00 lfd - (child) closing root 2412 0.0 0.0 169980 11196 ? D 00:52 0:00 lfd - (child) closing mailnull 2413 0.0 0.0 74880 1516 ? S 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2414 0.0 0.0 169980 11264 ? D 00:52 0:00 lfd - (child) closing root 2415 0.0 0.0 169980 11184 ? D 00:52 0:00 lfd - (child) closing root 2416 0.0 0.0 169980 11188 ? D 00:52 0:00 lfd - (child) closing root 2417 0.0 0.0 169980 11180 ? D 00:52 0:00 lfd - (child) closing root 2418 0.0 0.0 169980 11272 ? D 00:52 0:00 lfd - (child) closing root 2419 0.0 0.0 169980 11176 ? D 00:52 0:00 lfd - (child) closing root 2420 0.0 0.0 106120 912 ? Ss 00:52 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 2423 0.0 0.0 106120 916 ? Ss 00:52 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 2424 0.0 0.0 106120 944 ? Ss 00:52 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 2430 0.0 0.0 106120 916 ? Ss 00:52 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 2431 0.0 0.0 106124 912 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2433 0.0 0.0 106120 916 ? Ss 00:52 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 nobody 2435 0.0 0.0 114060 7360 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2436 0.0 0.0 116072 10016 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2438 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2440 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 2441 0.0 0.0 4612 804 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 2446 0.0 0.0 4612 804 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 2448 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 2449 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2450 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 2452 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114060 7372 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2456 0.0 0.0 114060 7352 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2458 0.0 0.0 115728 10812 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2459 0.0 0.0 45616 7500 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 2460 0.0 0.0 45616 7404 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 2461 0.0 0.0 45616 7444 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 2462 0.0 0.0 45616 7416 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 2463 0.0 0.0 45616 7436 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 2464 0.0 0.0 45616 7448 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 2465 0.0 0.0 45616 7472 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 2466 0.0 0.0 45616 7452 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 2468 0.0 0.0 169980 11260 ? D 00:52 0:00 lfd - (child) closing root 2469 0.0 0.0 169980 11256 ? D 00:52 0:00 lfd - (child) closing nobody 2470 0.0 0.0 115624 9936 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2471 0.0 0.0 114060 9464 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2472 0.0 0.0 169980 11276 ? D 00:52 0:00 lfd - (child) closing root 2473 0.0 0.0 169980 11272 ? D 00:52 0:00 lfd - (child) closing root 2474 0.0 0.0 169980 11276 ? D 00:52 0:00 lfd - (child) closing root 2475 0.0 0.0 169980 11292 ? D 00:52 0:00 lfd - (child) closing root 2476 0.0 0.0 169980 11292 ? D 00:52 0:00 lfd - (child) closing root 2477 0.0 0.0 169980 11292 ? D 00:52 0:00 lfd - (child) closing root 2478 0.0 0.0 169980 11276 ? D 00:52 0:00 lfd - (child) closing nobody 2479 0.0 0.0 114196 9560 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2480 0.0 0.0 114196 9496 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2484 0.0 0.0 106124 1176 ? S 00:52 0:00 /bin/bash /bin/verifica-spf.sh root 2486 0.0 0.0 106124 1188 ? S 00:52 0:00 /bin/bash /bin/brut-filtro.sh root 2487 0.0 0.0 106124 1196 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2489 0.0 0.0 139932 1592 ? D 00:52 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 2491 0.0 0.0 106120 980 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2496 0.0 0.0 130232 3900 ? D 00:52 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 nobody 2497 0.0 0.0 114192 9584 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2498 0.0 0.0 115520 10904 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2499 0.0 0.0 114216 8012 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2501 0.0 0.0 114060 7700 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114060 7512 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2503 0.0 0.0 114060 9524 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2504 0.0 0.0 114060 7456 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114060 7700 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2506 0.0 0.0 114060 7512 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start postgres 2507 0.0 0.0 216640 2288 ? Ds 00:52 0:00 postgres: autovacuum worker process postgres nobody 2508 0.0 0.0 114060 9520 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2509 0.0 0.0 114060 7464 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2519 0.0 0.0 106120 492 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2526 0.0 0.0 139260 2008 ? S 00:52 0:00 lynx -source http://testedeip.conectadohost.com.br/ nobody 2527 0.0 0.0 114060 9512 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2528 0.0 0.0 103360 796 ? S 00:52 0:00 grep sim root 2530 0.0 0.0 100976 600 ? S 00:52 0:00 wc -l root 2550 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2551 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2552 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2553 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2554 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2555 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2556 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2557 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2558 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2559 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2560 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2565 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2569 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2572 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2573 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2574 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2575 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2576 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2577 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2578 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2579 0.0 0.0 142436 1008 ? S 00:53 0:00 CROND root 2580 0.0 0.0 142436 1004 ? S 00:53 0:00 CROND root 2585 0.0 0.0 169980 11308 ? D 00:53 0:00 lfd - (child) closing root 2586 0.0 0.0 169980 11344 ? D 00:53 0:00 lfd - (child) closing root 2587 0.0 0.0 169980 11320 ? D 00:53 0:00 lfd - (child) closing root 2588 0.0 0.0 169980 11320 ? D 00:53 0:00 lfd - (child) closing root 2589 0.0 0.0 169980 11328 ? D 00:53 0:00 lfd - (child) closing root 2590 0.0 0.0 169980 11324 ? D 00:53 0:00 lfd - (child) closing root 2591 0.0 0.0 169980 11328 ? D 00:53 0:00 lfd - (child) closing root 2592 0.0 0.0 169980 11328 ? D 00:53 0:00 lfd - (child) closing root 2593 0.0 0.0 169980 11340 ? D 00:53 0:00 lfd - (child) closing root 2594 0.0 0.0 169980 11336 ? D 00:53 0:00 lfd - (child) closing root 2595 0.0 0.0 169980 11324 ? D 00:53 0:00 lfd - (child) closing nobody 2597 0.0 0.0 114060 9436 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2601 0.0 0.0 169980 11336 ? D 00:53 0:00 lfd - (child) closing root 2602 0.0 0.0 169980 11344 ? D 00:53 0:00 lfd - (child) closing nobody 2603 0.0 0.0 114060 7420 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2611 0.0 0.0 116244 9384 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2632 0.0 0.0 106124 592 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2646 0.0 0.0 114060 9464 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2658 0.0 0.0 106124 720 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh root 2729 0.0 0.0 169980 11236 ? D 00:53 0:00 lfd - child closing root 2730 0.0 0.0 169980 10908 ? D 00:53 0:00 lfd - (child) closing conhecsc 2737 53.2 93.9 74966496 62018572 ? D 00:35 10:24 /usr/local/cpanel/bin/autossl_check --all postgres 2775 0.0 0.0 216640 1984 ? Ds 00:53 0:00 postgres: autovacuum worker process root 2838 0.0 0.0 169980 10692 ? D 00:53 0:00 lfd - (child) closing root 2839 0.0 0.0 169980 10632 ? D 00:53 0:00 lfd - (child) closing root 2840 0.0 0.0 169980 10696 ? D 00:53 0:00 lfd - (child) closing root 2841 0.0 0.0 169980 10692 ? D 00:53 0:00 lfd - (child) closing root 2842 0.0 0.0 169980 10696 ? D 00:53 0:00 lfd - (child) closing root 2843 0.0 0.0 169980 10680 ? D 00:53 0:00 lfd - (child) closing root 2844 0.0 0.0 169980 10692 ? D 00:53 0:00 lfd - (child) closing root 2845 0.0 0.0 169980 10688 ? D 00:53 0:00 lfd - (child) closing root 2846 0.0 0.0 169980 10636 ? D 00:53 0:00 lfd - (child) closing root 2857 0.0 0.0 169980 10684 ? D 00:53 0:00 lfd - (child) closing root 2858 0.0 0.0 169980 10632 ? D 00:53 0:00 lfd - (child) closing root 2859 0.0 0.0 169980 10640 ? D 00:53 0:00 lfd - (child) closing nobody 2881 0.0 0.0 114060 7536 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2885 0.0 0.0 114060 7568 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2886 0.0 0.0 114060 7560 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2903 0.0 0.0 114060 8332 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2904 0.0 0.0 114060 8504 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 440 ? S 00:34 0:00 CROND root 3059 0.3 0.0 252468 1632 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3112 0.0 0.0 114060 7560 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3113 0.0 0.0 114060 7796 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3114 0.0 0.0 114060 7584 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3115 0.0 0.0 114060 7564 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 2.1 0.0 274064 16932 ? S 00:49 0:06 /usr/bin/php dovenull 3299 0.0 0.0 42760 528 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 424 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 640 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 672 ? D 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 540 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 772 ? S 00:45 0:00 dovecot/auth nobody 3470 0.0 0.0 114060 8336 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3494 0.0 0.0 114060 8324 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3495 0.0 0.0 114060 8344 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3496 0.0 0.0 114060 8348 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3497 0.0 0.0 114060 8328 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3514 0.0 0.0 114060 7580 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3723 0.0 0.0 114060 7532 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3725 0.0 0.0 169980 10720 ? D 00:53 0:00 child - aborting nobody 3739 0.0 0.0 114060 7500 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] nobody 3994 0.0 0.0 114060 8560 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 1172 ? S 00:47 0:00 /usr/bin/php maisg647 4243 0.2 0.0 259052 16920 ? S 00:47 0:00 /usr/bin/php maisg647 4263 0.1 0.0 240260 16916 ? S 00:47 0:00 /usr/bin/php agitae 4278 0.1 0.0 229500 16928 ? S 00:47 0:00 /usr/bin/php nobody 4485 0.0 0.0 114060 8344 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 4486 0.0 0.0 74016 960 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 4518 0.0 0.0 114060 8636 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4532 0.0 0.0 114060 8396 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4669 0.0 0.0 114060 8380 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4670 0.0 0.0 169980 10556 ? D 00:53 0:00 lfd - (child) closing nobody 4680 0.0 0.0 114060 7420 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4681 0.0 0.0 4352 528 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 4682 0.0 0.0 4352 536 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 4683 0.0 0.0 114060 8376 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4692 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 4693 0.0 0.0 4352 548 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 4696 0.0 0.0 106120 1068 ? Ss 00:53 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 4702 0.0 0.0 4352 528 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 4703 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 4704 0.0 0.0 4352 544 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 4705 0.0 0.0 106120 1068 ? Ss 00:53 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 4706 0.0 0.0 4352 552 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 4707 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 4709 0.0 0.0 4352 548 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 4711 0.0 0.0 106120 1088 ? Ss 00:53 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 4712 0.0 0.0 106120 1052 ? Ss 00:53 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 4714 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 4715 0.0 0.0 4352 556 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 4716 0.0 0.0 4352 524 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:rebuild --force --batch-limit=300 root 4717 0.0 0.0 4352 544 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 4718 0.0 0.0 4352 540 ? Ss 00:53 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 4719 0.0 0.0 106120 1088 ? Ss 00:53 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 4720 0.0 0.0 106120 1096 ? Ss 00:53 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 4721 0.0 0.0 0 0 ? S Apr17 0:00 [kworker/6:0] root 4722 0.0 0.0 106120 1096 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 688 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114196 7500 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4725 0.0 0.0 117056 7664 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.9 0.0 234216 18792 ? S 00:45 0:05 /usr/bin/php diadiapr 4808 0.5 0.0 222608 17812 ? S 00:45 0:02 /usr/bin/php nobody 4809 13.2 0.0 114324 7992 ? S 00:45 1:14 /usr/local/apache/bin/httpd -k start conhecsc 4812 10.7 0.0 187440 5296 ? S 00:45 1:00 /usr/bin/php progress 4846 0.6 0.0 268336 20188 ? S 00:45 0:03 /usr/bin/php nobody 4860 0.0 0.0 116072 8092 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4865 0.1 0.0 236324 16916 ? S 00:45 0:00 /usr/bin/php nobody 4973 0.0 0.0 116176 7896 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4992 0.0 0.0 115640 7884 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5023 0.0 0.0 0 0 ? S 00:34 0:00 [kworker/9:0] root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5091 0.0 0.0 116112 7908 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 5094 0.0 0.0 116244 7368 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start icowebra 5097 0.3 0.0 194540 780 ? S 00:45 0:01 /usr/bin/php root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 752 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6864 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6864 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6864 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 528 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5842 0.0 0.0 139932 1692 ? D 00:53 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 5906 0.0 0.0 106124 1256 ? S 00:53 0:00 /bin/bash /bin/monitora-load.sh root 5907 0.0 0.0 130104 3904 ? D 00:53 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 5910 0.0 0.0 106124 1244 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh root 5919 0.0 0.0 106120 1292 ? S 00:53 0:00 /bin/bash /bin/malv-block.sh pdvxyz 5923 0.0 0.0 185472 624 ? S 00:46 0:00 /usr/bin/php root 5946 0.0 0.0 106124 1272 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 5947 0.0 0.0 106120 1072 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5956 0.0 0.0 106120 504 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5957 0.0 0.0 139260 1876 ? S 00:53 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 5958 0.0 0.0 103360 844 ? S 00:53 0:00 grep sim root 5959 0.0 0.0 100976 652 ? S 00:53 0:00 wc -l icowebra 6242 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 424 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4424 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 185108 ? Sl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6553 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:2] root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] root 6730 0.0 0.0 169980 10700 ? D 00:53 0:00 lfd - (child) closing root 6733 0.0 0.0 169980 10716 ? D 00:53 0:00 lfd - (child) closing root 6752 0.0 0.0 0 0 ? S 00:20 0:00 [kworker/8:3] root 6785 0.0 0.0 169980 10724 ? D 00:53 0:00 lfd - (child) closing root 6786 0.0 0.0 169980 10720 ? D 00:53 0:00 lfd - (child) closing root 6787 0.0 0.0 169980 10696 ? D 00:53 0:00 lfd - (child) closing root 6788 0.0 0.0 169980 10708 ? D 00:53 0:00 lfd - (child) closing root 6795 0.0 0.0 169980 10716 ? D 00:53 0:00 lfd - (child) closing root 6796 0.0 0.0 169980 10712 ? D 00:53 0:00 lfd - (child) closing root 6797 0.0 0.0 169980 10720 ? D 00:53 0:00 lfd - (child) closing root 6798 0.0 0.0 169980 10736 ? D 00:53 0:00 lfd - (child) closing root 6799 0.0 0.0 169980 10720 ? D 00:53 0:00 lfd - (child) closing root 6800 0.0 0.0 169980 10712 ? D 00:53 0:00 lfd - (child) closing root 6801 0.0 0.0 169980 10720 ? D 00:53 0:00 lfd - (child) closing root 6802 0.0 0.0 169980 10720 ? D 00:53 0:00 lfd - (child) closing root 6803 0.0 0.0 169980 10716 ? D 00:53 0:00 lfd - (child) closing icowebra 6842 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 6937 0.0 0.0 114060 7932 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 6942 0.0 0.0 74880 1056 ? D 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 992 7038 0.0 0.0 184964 528 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 596 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 7084 0.0 0.0 114060 8336 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] nobody 7454 0.0 0.0 117056 8476 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7489 0.0 0.0 114060 8332 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7492 0.0 0.0 106124 720 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh nobody 7506 0.0 0.0 115640 8608 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7544 0.0 0.0 106124 396 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7545 0.0 0.0 100988 568 ? D 00:53 0:00 cat /var/log/exim_mainlog root 7546 0.0 0.0 103360 852 ? S 00:53 0:00 grep 104.130.11.193 nobody 7574 0.0 0.0 114192 8452 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7575 0.0 0.0 114060 7532 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7472 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114060 7544 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 8091 0.0 0.0 116004 8720 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8095 0.0 0.0 106124 652 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8120 0.0 0.0 0 0 ? S 00:30 0:00 [kworker/1:1] root 8124 0.0 0.0 169980 10684 ? D 00:54 0:00 lfd - (child) closing root 8125 0.0 0.0 169980 10684 ? D 00:54 0:00 lfd - (child) closing root 8126 0.0 0.0 169980 10740 ? D 00:54 0:00 lfd - (child) closing root 8127 0.0 0.0 169980 10688 ? D 00:54 0:00 lfd - (child) closing root 8128 0.0 0.0 169980 10696 ? D 00:54 0:00 lfd - (child) closing root 8129 0.0 0.0 169980 10696 ? D 00:54 0:00 lfd - (child) closing root 8268 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8271 0.0 0.0 142436 1128 ? S 00:54 0:00 CROND root 8273 0.0 0.0 142436 1128 ? S 00:54 0:00 CROND root 8274 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8276 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8278 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8280 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8281 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8282 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8283 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8284 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8286 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8288 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8289 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8295 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8297 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8298 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8299 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8300 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8301 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8303 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8305 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8307 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8309 0.0 0.0 142436 1140 ? S 00:54 0:00 CROND root 8310 0.0 0.0 142436 1136 ? S 00:54 0:00 CROND root 8312 0.0 0.0 142436 1140 ? S 00:54 0:00 CROND root 8313 0.0 0.0 142436 1144 ? S 00:54 0:00 CROND root 8371 0.0 0.0 169980 10688 ? D 00:54 0:00 lfd - (child) closing root 8372 0.0 0.0 169980 10700 ? D 00:54 0:00 lfd - (child) closing root 8373 0.0 0.0 169980 10696 ? D 00:54 0:00 lfd - (child) closing root 8374 0.0 0.0 169980 10696 ? D 00:54 0:00 lfd - (child) closing nobody 8426 0.0 0.0 114060 7756 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8427 0.0 0.0 106124 536 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8428 0.0 0.0 59596 1500 ? D 00:54 0:00 nslookup 200.103.73.25 root 8429 0.0 0.0 103360 840 ? S 00:54 0:00 grep br root 8437 0.0 0.0 100976 648 ? S 00:54 0:00 wc -l nobody 8489 0.0 0.0 116112 8756 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8493 0.0 0.0 114060 8384 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8497 0.0 0.0 114060 8376 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 8502 0.0 0.0 74880 1032 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8503 0.0 0.0 114060 7800 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8504 0.0 0.0 114196 8528 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8509 0.0 0.0 114060 7800 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8510 0.0 0.0 114060 7808 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8538 0.0 0.0 114060 8392 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 8565 0.0 0.0 74880 1032 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 8566 0.0 0.0 169980 10728 ? D 00:54 0:00 lfd - (child) closing root 8567 0.0 0.0 169980 10732 ? D 00:54 0:00 lfd - (child) closing root 8581 0.0 0.0 169980 10728 ? D 00:54 0:00 lfd - (child) closing root 8681 0.0 0.0 169980 10736 ? D 00:54 0:00 lfd - (child) closing root 8682 0.0 0.0 169980 10732 ? D 00:54 0:00 lfd - (child) closing root 8683 0.0 0.0 169980 10736 ? D 00:54 0:00 lfd - (child) closing root 8684 0.0 0.0 169980 10736 ? D 00:54 0:00 lfd - (child) closing nobody 8714 0.0 0.0 114196 8252 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8748 0.0 0.0 70084 1900 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 8812 0.0 0.0 114060 7812 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8825 0.1 0.0 106124 900 ? S 00:54 0:00 /bin/bash /bin/malv-block.sh mailnull 8831 0.0 0.0 74880 1176 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8839 0.0 0.0 114060 8000 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114060 7816 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 9827 0.0 0.0 169980 10604 ? D 00:54 0:00 lfd - child closing root 9828 0.0 0.0 169980 10300 ? D 00:54 0:00 lfd - (child) closing nobody 9840 0.0 0.0 114208 8272 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114060 7832 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9842 0.0 0.0 114060 7828 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9843 0.0 0.0 114060 8108 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10619 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 10620 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 10621 0.0 0.0 106120 1096 ? Ss 00:54 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 10622 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/minuto-a-minuto.sh > /dev/null 2>&1 root 10623 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 10624 0.0 0.0 106120 1092 ? Ss 00:54 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 10625 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 10626 0.0 0.0 106120 1080 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf.sh > /dev/null 2>&1 root 10627 0.0 0.0 106120 1116 ? Ss 00:54 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 10628 0.0 0.0 106120 1128 ? Ss 00:54 0:00 /bin/sh -c /bin/block-malv.sh > /dev/null 2>&1 root 10629 0.0 0.0 106124 1100 ? Ss 00:54 0:00 /bin/sh -c /bin/block-cloud.sh > /dev/null 2>&1 root 10630 0.0 0.0 106120 1104 ? Ss 00:54 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 mailnull 10634 0.0 0.0 74008 1364 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 10677 0.0 0.0 169980 10088 ? D 00:54 0:00 lfd - (child) closing root 10678 0.0 0.0 169980 10092 ? D 00:54 0:00 lfd - (child) closing root 10679 0.0 0.0 169980 10000 ? D 00:54 0:00 lfd - (child) closing root 10680 0.0 0.0 169980 9996 ? D 00:54 0:00 lfd - (child) closing root 10681 0.0 0.0 169980 10088 ? D 00:54 0:00 lfd - (child) closing root 10682 0.0 0.0 169980 10088 ? D 00:54 0:00 lfd - (child) closing root 10683 0.0 0.0 169980 10092 ? D 00:54 0:00 lfd - (child) closing root 10684 0.0 0.0 169980 10088 ? D 00:54 0:00 lfd - (child) closing root 10685 0.0 0.0 4352 536 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 10686 0.0 0.0 4352 536 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 10687 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 10688 0.0 0.0 4356 572 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 10689 0.0 0.0 4352 532 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 10690 0.0 0.0 4352 548 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 10691 0.0 0.0 4356 548 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 10692 0.0 0.0 4352 548 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 10693 0.0 0.0 4352 548 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 10694 0.0 0.0 4352 564 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 10695 0.0 0.0 4352 564 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10697 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 10698 0.0 0.0 4352 548 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 10699 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 10701 0.0 0.0 4352 564 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 10723 0.0 0.0 106124 384 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10724 0.0 0.0 100992 556 ? D 00:54 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt root 10725 0.0 0.0 103360 852 ? S 00:54 0:00 grep 104.130.11.193 root 10834 0.1 0.0 170456 10732 ? D 00:54 0:00 lfd - (child) process tracking... root 10843 0.0 0.0 106124 1280 ? S 00:54 0:00 /bin/bash /bin/verifica-spf.sh root 10845 0.0 0.0 106120 1292 ? S 00:54 0:00 /bin/bash /bin/bloqueia-envio.sh root 10846 0.0 0.0 106124 1244 ? S 00:54 0:00 /bin/bash /bin/monitora-load.sh root 10847 0.0 0.0 117104 720 ? D 00:54 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 10848 0.0 0.0 106120 1360 ? S 00:54 0:00 /bin/bash /bin/liberar-csf.sh root 10849 0.0 0.0 106120 1308 ? S 00:54 0:00 /bin/bash /bin/malv-block.sh root 10850 0.0 0.0 106120 1108 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10851 0.0 0.0 106124 1316 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10852 0.0 0.0 106120 1244 ? S 00:54 0:00 /bin/bash /bin/minuto-a-minuto.sh root 10853 0.1 0.0 130232 3952 ? D 00:54 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 10874 0.0 0.0 106120 1280 ? S 00:54 0:00 /bin/bash /bin/block-malv.sh root 10875 0.0 0.0 106120 1296 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 10876 0.0 0.0 106124 1312 ? S 00:54 0:00 /bin/bash /bin/block-cloud.sh root 10911 0.0 0.0 106120 504 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10913 0.0 0.0 41252 1308 ? D 00:54 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 10914 0.0 0.0 103360 840 ? S 00:54 0:00 grep sim root 10915 0.0 0.0 100976 648 ? S 00:54 0:00 wc -l root 10926 0.0 0.0 4640 240 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 336 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1976 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd mailnull 11055 0.0 0.0 74880 1236 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 11070 0.0 0.0 169980 9896 ? D 00:54 0:00 lfd - (child) closing nobody 11086 0.0 0.0 114060 7480 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11087 0.0 0.0 114060 7484 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11088 0.0 0.0 114060 7480 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11089 0.0 0.0 114060 7484 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11090 0.0 0.0 114060 7488 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11194 0.0 0.0 47448 956 ? D 00:54 0:00 mail -s LOAD ALTO admin@conectadohost.com.br postgres 11213 0.0 0.0 215388 712 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11231 0.0 0.0 0 0 ? S 00:40 0:00 [kworker/11:4] nobody 11237 0.0 0.0 114324 7624 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 224 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 576 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 668 ? Ss Apr16 0:07 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 572 ? Ss Apr16 0:08 postgres: stats collector process nobody 11358 0.0 0.0 114060 7408 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11363 0.1 0.0 169980 10040 ? Ss 00:00 0:05 lfd - sleeping root 11410 0.0 0.0 106124 776 ? S 00:54 0:00 /bin/bash /bin/block-cloud.sh nobody 11441 0.0 0.0 114060 7976 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11457 0.0 0.0 114060 7420 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11458 0.0 0.0 114060 7412 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11472 0.0 0.0 106120 1324 ? S 00:54 0:00 /bin/bash /bin/block-mal2.sh root 11565 0.0 0.0 69992 1112 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11566 0.0 0.0 69992 1104 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11567 0.0 0.0 69992 1088 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11568 0.0 0.0 69992 1112 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11569 0.0 0.0 69992 1104 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11571 0.0 0.0 74876 1252 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 11575 0.0 0.0 69992 1100 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11580 0.0 0.0 69992 1080 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11587 0.0 0.0 106124 604 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] root 11651 0.0 0.0 106124 724 ? S 00:54 0:00 /bin/bash /bin/verifica-spf.sh root 11654 0.0 0.0 69996 1096 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br mailnull 11655 0.0 0.0 74880 1260 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 11690 0.0 0.0 114060 7692 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 496 ? Ds Apr16 0:16 crond root 11743 0.0 0.0 106124 396 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11744 0.0 0.0 100988 576 ? D 00:54 0:00 cat /var/log/exim_mainlog root 11745 0.0 0.0 103360 852 ? S 00:54 0:00 grep 104.130.11.193 root 11749 0.0 0.0 19472 220 ? Ss Apr16 0:00 /usr/sbin/atd root 11762 0.0 0.0 169980 10040 ? D 00:54 0:00 lfd - (child) closing root 11763 0.0 0.0 169980 10052 ? D 00:54 0:00 lfd - (child) closing root 11764 0.0 0.0 169980 10060 ? D 00:54 0:00 lfd - (child) closing root 11765 0.0 0.0 169980 10064 ? D 00:54 0:00 lfd - (child) closing root 11770 0.0 0.0 169980 10044 ? D 00:54 0:00 lfd - (child) closing root 11771 0.0 0.0 169980 10052 ? D 00:54 0:00 lfd - (child) closing nobody 11777 0.0 0.0 114060 7596 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 11778 0.0 0.0 74012 1224 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 11806 0.0 0.0 114060 7428 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11833 0.0 0.0 114060 7428 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11834 0.0 0.0 114060 7808 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114060 7600 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11841 0.0 0.0 114484 7788 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114060 8004 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11843 0.0 0.0 114060 7972 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11844 0.0 0.0 114060 7604 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11845 0.0 0.0 114060 7608 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 12090 0.0 0.0 106124 832 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 12112 0.0 0.0 169980 10076 ? D 00:54 0:00 lfd - (child) closing root 12113 0.0 0.0 169980 10076 ? D 00:54 0:00 lfd - (child) closing root 12114 0.0 0.0 169980 10080 ? D 00:54 0:00 lfd - (child) closing root 12115 0.0 0.0 169980 10080 ? D 00:54 0:00 lfd - (child) closing root 12116 0.0 0.0 169980 10092 ? D 00:54 0:00 lfd - (child) closing root 12560 0.0 0.0 4108 232 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 236 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 232 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 236 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 232 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 232 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 mailnull 12997 0.0 0.0 74876 1308 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 13024 0.6 0.0 108348 1184 ? R 00:54 0:00 ps aux mailnull 13083 0.0 0.0 74020 1308 ? D 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 13101 0.0 0.0 100996 576 ? D 00:54 0:00 rm -rf /home/liberar-csf/email2.txt /home/liberar-csf/email-cliente1.txt /home/liberar-csf/email-cliente.txt /home/liberar-csf/email.txt /home/liberar-csf/IP.txt root 13117 0.0 0.0 105312 768 ? D 00:54 0:00 sed s/".*$// /home/malv-block/diretorio.txt root 13118 0.0 0.0 105308 796 ? S 00:54 0:00 sed /^$/d root 13119 0.0 0.0 106004 880 ? S 00:54 0:00 awk -F {print "DIRETORIO /home/"$1" """ } root 13123 0.0 0.0 106120 544 ? S 00:54 0:00 /bin/bash /bin/minuto-a-minuto.sh root 13124 0.0 0.0 8372 208 ? D 00:54 0:00 netstat -anp root 13125 0.0 0.0 103360 844 ? S 00:54 0:00 grep tcp\|udp root 13126 0.0 0.0 106004 880 ? S 00:54 0:00 awk {print $1} root 13127 0.0 0.0 101012 576 ? S 00:54 0:00 cut -d: -f1 root 13128 0.0 0.0 8340 212 ? D 00:54 0:00 sort root 13129 0.0 0.0 100976 572 ? S 00:54 0:00 uniq -c root 13130 0.0 0.0 8340 212 ? D 00:54 0:00 sort -n root 13645 0.0 0.0 114060 8660 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 364 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3508 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 86956 2444 ? Ds Apr16 0:23 dnsadmin - server mode mailman 16010 0.0 0.0 120748 1340 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1020 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1220 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1008 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1008 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1024 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1072 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 1012 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 732 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1056 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 2488 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 conhecsc 17197 0.0 0.0 191140 13084 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] noticias 18706 0.0 0.0 205684 16916 ? S 00:46 0:00 /usr/bin/php root 19022 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/u24:0] root 19132 2.1 0.0 240980 47212 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream root 19138 0.0 0.0 88412 5304 ? D 00:50 0:00 dnsadmin - waiting for request on connected socket 882 19151 0.2 0.0 243772 47504 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 11.1 0.0 23760 8784 ? S 00:50 0:27 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 6080 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.5 0.0 249740 16920 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 7904 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.1 0.0 234712 16916 ? S 00:48 0:00 /usr/bin/php 992 20178 0.0 0.0 187384 7800 ? S 00:46 0:00 /usr/bin/php wwwfacul 20446 0.1 0.0 265704 16912 ? S 00:46 0:00 /usr/bin/php regis 20754 0.0 0.0 186880 6580 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 7908 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.1 0.0 263164 16916 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 746844 4168 ? Ssl Apr17 0:38 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25628 0.2 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] maisg647 26560 0.0 0.0 241460 16928 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 16916 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 16152 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7624 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1652 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 8960 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 820 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11512 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 416 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 300 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] mailnull 29882 0.0 0.0 74248 2532 ? S 00:51 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid icowebra 30070 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 30851 0.3 0.0 50252 7048 ? Ds Apr16 6:13 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2308 ? S 00:49 0:00 /usr/bin/php nobody 32182 0.0 0.0 115728 8792 ? S 00:47 0:00 /usr/local/apache/bin/httpd -k start USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 552 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:25 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? D Apr16 3:37 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 452 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 464 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 384 ? S Apr16 0:01 dovecot/anvil 881 2149 0.3 0.0 245724 21128 ? S 00:47 0:01 /usr/bin/php nobody 2291 0.0 0.0 114484 8300 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2294 0.0 0.0 114196 8084 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2295 0.0 0.0 114192 7524 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2297 0.0 0.0 114484 8036 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2298 0.0 0.0 115520 9472 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2299 0.0 0.0 114196 8016 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2300 0.0 0.0 114192 8164 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start root 2307 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2308 0.0 0.0 142436 816 ? S 00:52 0:00 CROND root 2309 0.0 0.0 142436 816 ? S 00:52 0:00 CROND root 2310 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2311 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2312 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2313 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2314 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2315 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2317 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2319 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2329 0.0 0.0 142436 976 ? S 00:52 0:00 CROND root 2330 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2331 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2332 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2333 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2334 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2335 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2336 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2337 0.0 0.0 142436 832 ? S 00:52 0:00 CROND nobody 2351 0.0 0.0 114500 8588 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2352 0.0 0.0 114192 8232 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2353 0.0 0.0 114200 8268 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2358 0.0 0.0 115520 9436 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2359 0.0 0.0 114192 8128 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2360 0.0 0.0 114196 8084 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2361 0.0 0.0 115520 9396 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2383 0.0 0.0 170456 13036 ? D 00:52 0:00 lfd - (child) closing root 2403 0.0 0.0 169980 11976 ? D 00:52 0:00 lfd - (child) closing root 2409 0.0 0.0 169980 11972 ? D 00:52 0:00 lfd - (child) closing root 2411 0.0 0.0 169980 12012 ? D 00:52 0:00 lfd - (child) closing root 2412 0.0 0.0 169980 12068 ? D 00:52 0:00 lfd - (child) closing mailnull 2413 0.0 0.0 74880 1300 ? S 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2414 0.0 0.0 169980 12028 ? D 00:52 0:00 lfd - (child) closing root 2415 0.0 0.0 169980 12016 ? D 00:52 0:00 lfd - (child) closing root 2416 0.0 0.0 169980 12064 ? D 00:52 0:00 lfd - (child) closing root 2417 0.0 0.0 169980 12040 ? D 00:52 0:00 lfd - (child) closing root 2418 0.0 0.0 169980 11988 ? D 00:52 0:00 lfd - (child) closing root 2419 0.0 0.0 169980 12024 ? D 00:52 0:00 lfd - (child) closing root 2420 0.0 0.0 106120 872 ? Ss 00:52 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 2423 0.0 0.0 106120 876 ? Ss 00:52 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 2424 0.0 0.0 106120 904 ? Ss 00:52 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 2430 0.0 0.0 106120 876 ? Ss 00:52 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 2431 0.0 0.0 106124 872 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2433 0.0 0.0 106120 876 ? Ss 00:52 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2440 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 2441 0.0 0.0 4612 804 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 2446 0.0 0.0 4612 804 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 2448 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 2449 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2450 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 2452 0.0 0.0 4612 808 ? Ss 00:52 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114196 8080 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2456 0.0 0.0 114192 8168 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2459 0.0 0.0 46748 9452 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 2460 0.0 0.0 46752 9448 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 2461 0.0 0.0 46748 9276 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 2462 0.0 0.0 46748 9444 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 2463 0.0 0.0 46752 9440 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 2464 0.0 0.0 46752 9452 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 2465 0.0 0.0 46752 9440 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 2466 0.0 0.0 46748 9444 ? D 00:52 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 2468 0.0 0.0 169980 11992 ? D 00:52 0:00 lfd - (child) closing root 2469 0.0 0.0 169980 11992 ? D 00:52 0:00 lfd - (child) closing root 2472 0.0 0.0 169980 12160 ? D 00:52 0:00 lfd - (child) closing root 2473 0.0 0.0 169980 12024 ? D 00:52 0:00 lfd - (child) closing root 2474 0.0 0.0 169980 12008 ? D 00:52 0:00 lfd - (child) closing root 2475 0.0 0.0 169980 12052 ? D 00:52 0:00 lfd - (child) closing root 2476 0.0 0.0 169980 12016 ? D 00:52 0:00 lfd - (child) closing root 2477 0.0 0.0 169980 12068 ? D 00:52 0:00 lfd - (child) closing root 2478 0.0 0.0 169980 12160 ? D 00:52 0:00 lfd - (child) closing root 2484 0.0 0.0 106124 1128 ? S 00:52 0:00 /bin/bash /bin/verifica-spf.sh root 2486 0.0 0.0 106124 1136 ? S 00:52 0:00 /bin/bash /bin/brut-filtro.sh root 2487 0.0 0.0 106124 1148 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2489 0.0 0.0 139936 1880 ? D 00:52 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 2491 0.0 0.0 106120 932 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2496 0.0 0.0 130232 3444 ? S 00:52 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 nobody 2499 0.0 0.0 114216 8036 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2501 0.0 0.0 114060 7616 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114060 7424 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2504 0.0 0.0 114192 8248 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114060 7612 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2506 0.0 0.0 114060 7424 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2509 0.0 0.0 114192 8228 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2519 0.0 0.0 106120 468 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2526 0.0 0.0 139260 1896 ? S 00:52 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 2528 0.0 0.0 103360 704 ? S 00:52 0:00 grep sim root 2530 0.0 0.0 100976 584 ? S 00:52 0:00 wc -l root 2550 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2551 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2552 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2553 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2554 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2555 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2556 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2557 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2558 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2560 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2565 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2569 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2572 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2573 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2574 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2575 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2576 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2577 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2578 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2579 0.0 0.0 142436 1096 ? S 00:53 0:00 CROND root 2580 0.0 0.0 142436 1092 ? S 00:53 0:00 CROND root 2585 0.0 0.0 169980 12156 ? D 00:53 0:00 lfd - (child) closing root 2586 0.0 0.0 169980 12064 ? D 00:53 0:00 lfd - (child) closing root 2587 0.0 0.0 169980 12184 ? D 00:53 0:00 lfd - (child) closing root 2588 0.0 0.0 169980 12188 ? D 00:53 0:00 lfd - (child) closing root 2589 0.0 0.0 169980 12212 ? D 00:53 0:00 lfd - (child) closing root 2590 0.0 0.0 169980 12216 ? D 00:53 0:00 lfd - (child) closing root 2591 0.0 0.0 169980 12192 ? D 00:53 0:00 lfd - (child) closing root 2592 0.0 0.0 169980 12056 ? D 00:53 0:00 lfd - (child) closing root 2593 0.0 0.0 169980 12076 ? D 00:53 0:00 lfd - (child) closing root 2594 0.0 0.0 169980 12204 ? D 00:53 0:00 lfd - (child) closing root 2595 0.0 0.0 169980 12208 ? D 00:53 0:00 lfd - (child) closing root 2601 0.0 0.0 169980 12212 ? D 00:53 0:00 lfd - (child) closing root 2602 0.0 0.0 169980 12072 ? D 00:53 0:00 lfd - (child) closing nobody 2603 0.0 0.0 114060 7328 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2632 0.0 0.0 106124 588 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2658 0.0 0.0 106124 700 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh root 2729 0.0 0.0 169980 12096 ? D 00:53 0:00 lfd - child closing root 2730 0.0 0.0 169980 12412 ? D 00:53 0:00 lfd - (child) closing conhecsc 2737 50.6 93.2 74966496 61569404 ? D 00:35 10:26 /usr/local/cpanel/bin/autossl_check --all root 2838 0.0 0.0 169980 12084 ? D 00:53 0:00 lfd - (child) closing root 2839 0.0 0.0 169980 12124 ? D 00:53 0:00 lfd - (child) closing root 2840 0.0 0.0 169980 12124 ? D 00:53 0:00 lfd - (child) closing root 2841 0.0 0.0 169980 12068 ? D 00:53 0:00 lfd - (child) closing root 2842 0.0 0.0 169980 12100 ? D 00:53 0:00 lfd - (child) closing root 2843 0.0 0.0 169980 12092 ? D 00:53 0:00 lfd - (child) closing root 2844 0.0 0.0 169980 12128 ? D 00:53 0:00 lfd - (child) closing root 2845 0.0 0.0 169980 12092 ? D 00:53 0:00 lfd - (child) closing root 2846 0.0 0.0 169980 12144 ? D 00:53 0:00 lfd - (child) closing root 2857 0.0 0.0 169980 12124 ? D 00:53 0:00 lfd - (child) closing root 2858 0.0 0.0 169980 12140 ? D 00:53 0:00 lfd - (child) closing root 2859 0.0 0.0 169980 12096 ? D 00:53 0:00 lfd - (child) closing nobody 2881 0.0 0.0 114060 7444 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2885 0.0 0.0 114060 7476 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2886 0.0 0.0 114060 7468 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2903 0.0 0.0 114060 9304 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2904 0.0 0.0 114060 9480 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 436 ? S 00:34 0:00 CROND root 3059 0.3 0.0 252468 1600 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3112 0.0 0.0 114060 7468 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3113 0.0 0.0 114060 7704 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3114 0.0 0.0 114060 7492 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3115 0.0 0.0 114060 7472 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 1.7 0.0 274064 16928 ? S 00:49 0:06 /usr/bin/php dovenull 3299 0.0 0.0 42760 480 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 424 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 552 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 552 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 540 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 676 ? S 00:45 0:00 dovecot/auth nobody 3470 0.0 0.0 114060 9288 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3494 0.0 0.0 114060 9280 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3495 0.0 0.0 114060 9300 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3496 0.0 0.0 114060 9324 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3497 0.0 0.0 114060 9304 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3514 0.0 0.0 114060 7488 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3723 0.0 0.0 114060 7424 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3725 0.0 0.0 169980 12220 ? D 00:53 0:00 child - aborting nobody 3739 0.0 0.0 114060 7392 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] nobody 3994 0.0 0.0 114060 9548 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 1172 ? S 00:47 0:00 /usr/bin/php maisg647 4243 0.1 0.0 259052 16916 ? S 00:47 0:00 /usr/bin/php maisg647 4263 0.1 0.0 240260 16912 ? S 00:47 0:00 /usr/bin/php agitae 4278 0.1 0.0 229500 16924 ? S 00:47 0:00 /usr/bin/php nobody 4485 0.0 0.0 114060 9332 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4518 0.0 0.0 114060 9476 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4532 0.0 0.0 114060 9252 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4669 0.0 0.0 114060 9236 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4670 0.0 0.0 169980 12028 ? D 00:53 0:00 lfd - (child) closing nobody 4680 0.0 0.0 114060 7312 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4683 0.0 0.0 114060 9216 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4696 0.0 0.0 106120 976 ? Ss 00:53 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 4711 0.0 0.0 106120 996 ? Ss 00:53 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 4712 0.0 0.0 106120 960 ? Ss 00:53 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 4719 0.0 0.0 106120 996 ? Ss 00:53 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 4720 0.0 0.0 106120 1004 ? Ss 00:53 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 4722 0.0 0.0 106120 1004 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 668 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114196 7496 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4725 0.0 0.0 117056 7580 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.8 0.0 234216 18788 ? S 00:45 0:05 /usr/bin/php diadiapr 4808 0.4 0.0 222608 17808 ? S 00:45 0:02 /usr/bin/php nobody 4809 11.9 0.0 114324 7680 ? S 00:45 1:14 /usr/local/apache/bin/httpd -k start conhecsc 4812 9.6 0.0 187440 5292 ? S 00:45 1:00 /usr/bin/php progress 4846 0.6 0.0 268336 20184 ? S 00:45 0:03 /usr/bin/php nobody 4860 0.0 0.0 116072 8628 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4865 0.1 0.0 236324 16912 ? S 00:45 0:00 /usr/bin/php nobody 4973 0.0 0.0 116176 8432 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4992 0.0 0.0 115640 7808 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5091 0.0 0.0 116112 7792 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 5094 0.0 0.0 116244 7956 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start icowebra 5097 0.3 0.0 194540 1012 ? D 00:45 0:01 /usr/bin/php root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 728 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 528 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5842 0.0 0.0 139936 1848 ? D 00:53 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 5907 0.0 0.0 130236 3444 ? S 00:53 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 5910 0.0 0.0 106124 1152 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh root 5919 0.0 0.0 106120 1184 ? S 00:53 0:00 /bin/bash /bin/malv-block.sh pdvxyz 5923 0.0 0.0 185472 624 ? S 00:46 0:00 /usr/bin/php root 5946 0.0 0.0 106124 1176 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 5947 0.0 0.0 106120 980 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5956 0.0 0.0 106120 480 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5957 0.0 0.0 139260 1764 ? S 00:53 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 5958 0.0 0.0 103360 740 ? S 00:53 0:00 grep sim root 5959 0.0 0.0 100976 612 ? S 00:53 0:00 wc -l icowebra 6242 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 420 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4396 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 185228 ? Sl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] root 6730 0.0 0.0 169980 12200 ? D 00:53 0:00 lfd - (child) closing root 6733 0.0 0.0 169980 12136 ? D 00:53 0:00 lfd - (child) closing root 6785 0.0 0.0 169980 12148 ? D 00:53 0:00 lfd - (child) closing root 6786 0.0 0.0 169980 12136 ? D 00:53 0:00 lfd - (child) closing root 6787 0.0 0.0 169980 12228 ? D 00:53 0:00 lfd - (child) closing root 6788 0.0 0.0 169980 12228 ? D 00:53 0:00 lfd - (child) closing root 6795 0.0 0.0 169980 12108 ? D 00:53 0:00 lfd - (child) closing root 6796 0.0 0.0 169980 12220 ? D 00:53 0:00 lfd - (child) closing root 6797 0.0 0.0 169980 12088 ? D 00:53 0:00 lfd - (child) closing root 6798 0.0 0.0 169980 12148 ? D 00:53 0:00 lfd - (child) closing root 6799 0.0 0.0 169980 12232 ? D 00:53 0:00 lfd - (child) closing root 6800 0.0 0.0 169980 12232 ? D 00:53 0:00 lfd - (child) closing root 6801 0.0 0.0 169980 12116 ? D 00:53 0:00 lfd - (child) closing root 6802 0.0 0.0 169980 12096 ? D 00:53 0:00 lfd - (child) closing root 6803 0.0 0.0 169980 12252 ? D 00:53 0:00 lfd - (child) closing icowebra 6842 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 6937 0.0 0.0 114060 7548 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 6942 0.0 0.0 75092 1624 ? D 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 992 7038 0.0 0.0 184964 528 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 592 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 7084 0.0 0.0 114060 9312 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] nobody 7454 0.0 0.0 117056 9460 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7489 0.0 0.0 114060 9300 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7492 0.0 0.0 106124 700 ? S 00:53 0:00 /bin/bash /bin/verifica-spf.sh nobody 7506 0.0 0.0 115640 9436 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7574 0.0 0.0 114192 9436 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7575 0.0 0.0 114060 7424 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7400 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114060 7436 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 8091 0.0 0.0 116004 9688 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8095 0.0 0.0 106124 624 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8124 0.0 0.0 169980 12188 ? D 00:54 0:00 lfd - (child) closing root 8125 0.0 0.0 169980 12148 ? D 00:54 0:00 lfd - (child) closing root 8126 0.0 0.0 169980 12136 ? D 00:54 0:00 lfd - (child) closing root 8127 0.0 0.0 169980 12188 ? D 00:54 0:00 lfd - (child) closing root 8128 0.0 0.0 169980 12200 ? D 00:54 0:00 lfd - (child) closing root 8129 0.0 0.0 169980 12184 ? D 00:54 0:00 lfd - (child) closing root 8268 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8271 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8273 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8274 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8276 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8278 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8280 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8281 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8282 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8283 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8284 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8286 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8295 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8297 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8300 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8301 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8303 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8305 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8307 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8309 0.0 0.0 142436 1020 ? S 00:54 0:00 CROND root 8310 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8312 0.0 0.0 142436 1020 ? S 00:54 0:00 CROND root 8313 0.0 0.0 142436 1024 ? S 00:54 0:00 CROND root 8371 0.0 0.0 169980 12188 ? D 00:54 0:00 lfd - (child) closing root 8372 0.0 0.0 169980 12192 ? D 00:54 0:00 lfd - (child) closing root 8373 0.0 0.0 169980 12180 ? D 00:54 0:00 lfd - (child) closing root 8374 0.0 0.0 169980 12164 ? D 00:54 0:00 lfd - (child) closing nobody 8426 0.0 0.0 114060 7372 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8427 0.0 0.0 106124 532 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8428 0.0 0.0 246740 2324 ? D 00:54 0:00 nslookup 200.103.73.25 root 8429 0.0 0.0 103360 736 ? S 00:54 0:00 grep br root 8437 0.0 0.0 100976 608 ? S 00:54 0:00 wc -l nobody 8489 0.0 0.0 116112 9576 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8493 0.0 0.0 114060 9244 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8497 0.0 0.0 114060 9240 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114060 7416 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8509 0.0 0.0 114060 7416 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8510 0.0 0.0 114060 7424 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8538 0.0 0.0 114060 9256 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8566 0.0 0.0 169980 12268 ? D 00:54 0:00 lfd - (child) closing root 8567 0.0 0.0 169980 12240 ? D 00:54 0:00 lfd - (child) closing root 8581 0.0 0.0 169980 12228 ? D 00:54 0:00 lfd - (child) closing root 8681 0.0 0.0 169980 12236 ? D 00:54 0:00 lfd - (child) closing root 8682 0.0 0.0 169980 12260 ? D 00:54 0:00 lfd - (child) closing root 8683 0.0 0.0 169980 12240 ? D 00:54 0:00 lfd - (child) closing root 8684 0.0 0.0 169980 12236 ? D 00:54 0:00 lfd - (child) closing mailnull 8748 0.0 0.0 71044 2208 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 8812 0.0 0.0 114060 7384 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8839 0.0 0.0 114060 7572 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114060 7388 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 9827 0.0 0.0 169980 12096 ? D 00:54 0:00 lfd - child closing root 9828 0.0 0.0 169980 12428 ? D 00:54 0:00 lfd - (child) closing nobody 9840 0.0 0.0 114208 8104 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114060 7404 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9842 0.0 0.0 114060 7400 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9843 0.0 0.0 114060 7680 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 968 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10619 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 10620 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 10621 0.0 0.0 106120 972 ? Ss 00:54 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 10623 0.0 0.0 106120 968 ? Ss 00:54 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 10624 0.0 0.0 106120 968 ? Ss 00:54 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 10625 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 10627 0.0 0.0 106120 992 ? Ss 00:54 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 10630 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 10677 0.0 0.0 169980 12144 ? D 00:54 0:00 lfd - (child) closing root 10678 0.0 0.0 169980 12260 ? D 00:54 0:00 lfd - (child) closing root 10679 0.0 0.0 169980 12132 ? D 00:54 0:00 lfd - (child) closing root 10680 0.0 0.0 169980 12252 ? D 00:54 0:00 lfd - (child) closing root 10681 0.0 0.0 169980 12236 ? D 00:54 0:00 lfd - (child) closing root 10682 0.0 0.0 169980 12272 ? D 00:54 0:00 lfd - (child) closing root 10683 0.0 0.0 169980 12244 ? D 00:54 0:00 lfd - (child) closing root 10684 0.0 0.0 169980 12256 ? D 00:54 0:00 lfd - (child) closing root 10685 0.0 0.0 4352 532 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 10686 0.0 0.0 4352 532 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 10687 0.0 0.0 4352 540 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 10688 0.0 0.0 4356 568 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 10689 0.0 0.0 4352 528 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 10690 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 10691 0.0 0.0 4356 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 10692 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 10693 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 10694 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 10695 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10697 0.0 0.0 4352 556 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 10698 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 10699 0.0 0.0 4352 556 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 10701 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 10834 0.1 0.0 170456 13200 ? D 00:54 0:00 lfd - (child) closing root 10843 0.0 0.0 106124 1152 ? S 00:54 0:00 /bin/bash /bin/verifica-spf.sh root 10845 0.0 0.0 106120 1224 ? S 00:54 0:00 /bin/bash /bin/bloqueia-envio.sh root 10846 0.0 0.0 106124 1188 ? S 00:54 0:00 /bin/bash /bin/monitora-load.sh root 10847 0.0 0.0 139936 1744 ? D 00:54 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 10849 0.0 0.0 106120 1192 ? S 00:54 0:00 /bin/bash /bin/malv-block.sh root 10850 0.0 0.0 106120 984 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10851 0.0 0.0 106124 1188 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10853 0.0 0.0 130232 3460 ? S 00:54 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 10875 0.0 0.0 106120 1168 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 10911 0.0 0.0 106120 480 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10913 0.0 0.0 139260 2072 ? S 00:54 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 10914 0.0 0.0 103360 736 ? S 00:54 0:00 grep sim root 10915 0.0 0.0 100976 604 ? S 00:54 0:00 wc -l root 10926 0.0 0.0 4640 240 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 336 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1756 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd root 11070 0.0 0.0 169980 12156 ? D 00:54 0:00 lfd - (child) closing nobody 11086 0.0 0.0 114060 8116 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11087 0.0 0.0 114060 8232 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11088 0.0 0.0 114060 8204 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11089 0.0 0.0 114060 8216 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11090 0.0 0.0 114060 8224 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start postgres 11213 0.0 0.0 215388 684 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11231 0.0 0.0 0 0 ? S 00:40 0:00 [kworker/11:4] nobody 11237 0.0 0.0 114324 8268 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 224 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 576 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215664 728 ? Ds Apr16 0:07 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 572 ? Ss Apr16 0:08 postgres: stats collector process nobody 11358 0.0 0.0 114060 8132 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11363 0.1 0.0 169980 10264 ? Ss 00:00 0:05 lfd - processing nobody 11441 0.0 0.0 114060 7560 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11457 0.0 0.0 114060 8172 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11458 0.0 0.0 114060 8140 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 11565 0.0 0.0 71036 2196 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11566 0.0 0.0 71036 2188 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11567 0.0 0.0 71044 2184 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11568 0.0 0.0 71040 2172 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11569 0.0 0.0 71044 2180 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11571 0.0 0.0 74880 932 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 11575 0.0 0.0 71036 2172 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11580 0.0 0.0 71040 2176 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11587 0.0 0.0 106124 596 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] root 11651 0.1 0.0 106124 700 ? S 00:54 0:00 /bin/bash /bin/verifica-spf.sh mailnull 11654 0.0 0.0 71044 2204 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 11690 0.0 0.0 114060 8436 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 620 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 220 ? Ss Apr16 0:00 /usr/sbin/atd root 11762 0.0 0.0 169980 12252 ? D 00:54 0:00 lfd - (child) closing root 11763 0.0 0.0 169980 12260 ? D 00:54 0:00 lfd - (child) closing root 11764 0.0 0.0 169980 12196 ? D 00:54 0:00 lfd - (child) closing root 11765 0.0 0.0 169980 12204 ? D 00:54 0:00 lfd - (child) closing root 11770 0.0 0.0 169980 12132 ? D 00:54 0:00 lfd - (child) closing root 11771 0.0 0.0 169980 12192 ? D 00:54 0:00 lfd - (child) closing nobody 11777 0.0 0.0 114060 7808 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 11778 0.0 0.0 74016 912 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 11806 0.0 0.0 114060 8164 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11833 0.0 0.0 114060 8164 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11834 0.0 0.0 114060 7596 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114060 7424 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11841 0.0 0.0 114484 8528 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114060 7612 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11843 0.0 0.0 114060 7576 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11844 0.0 0.0 114060 7460 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11845 0.0 0.0 114060 7828 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 12090 0.0 0.0 106124 828 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 12112 0.0 0.0 169980 12208 ? D 00:54 0:00 lfd - (child) closing root 12113 0.0 0.0 169980 12228 ? D 00:54 0:00 lfd - (child) closing root 12114 0.0 0.0 169980 12204 ? D 00:54 0:00 lfd - (child) closing root 12115 0.0 0.0 169980 12160 ? D 00:54 0:00 lfd - (child) closing root 12116 0.0 0.0 169980 12216 ? D 00:54 0:00 lfd - (child) closing root 12560 0.0 0.0 4108 232 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 236 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 232 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 236 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 232 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 232 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 mailnull 13083 0.0 0.0 74020 1188 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 13203 0.0 0.0 114060 7940 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13217 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13218 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13219 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13220 0.0 0.0 142436 1068 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142436 1068 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13227 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13238 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13239 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13241 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13242 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13245 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13248 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13253 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13257 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13258 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13259 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13261 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13262 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13265 0.0 0.0 142436 1084 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13274 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13276 0.0 0.0 142436 1092 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13278 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13280 0.0 0.0 142436 1080 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142436 1080 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142436 1080 ? S 00:55 0:00 CROND root 13288 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13289 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13290 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND root 13293 0.0 0.0 142436 1088 ? S 00:55 0:00 CROND nobody 13390 0.0 0.0 114060 8228 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13392 0.0 0.0 114060 8208 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13393 0.0 0.0 114060 8220 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13412 0.0 0.0 114060 8296 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13413 0.0 0.0 114060 7896 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13414 0.0 0.0 114060 8232 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13415 0.0 0.0 114060 8224 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13442 0.0 0.0 106124 524 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13443 0.0 0.0 100988 552 ? D 00:55 0:00 cat /var/log/messages root 13445 0.0 0.0 169980 12164 ? D 00:55 0:00 lfd - (child) closing root 13446 0.0 0.0 169980 12200 ? D 00:55 0:00 lfd - (child) closing root 13447 0.0 0.0 169980 12180 ? D 00:55 0:00 lfd - (child) closing root 13448 0.0 0.0 169980 12132 ? D 00:55 0:00 lfd - (child) closing root 13449 0.0 0.0 169980 12156 ? D 00:55 0:00 lfd - (child) closing root 13450 0.0 0.0 169980 12260 ? D 00:55 0:00 lfd - (child) closing root 13451 0.0 0.0 169980 12172 ? D 00:55 0:00 lfd - (child) closing root 13452 0.0 0.0 169980 12160 ? D 00:55 0:00 lfd - (child) closing root 13453 0.0 0.0 169980 12184 ? D 00:55 0:00 lfd - (child) closing root 13454 0.0 0.0 169980 12188 ? D 00:55 0:00 lfd - (child) closing root 13455 0.0 0.0 169980 12168 ? D 00:55 0:00 lfd - (child) closing root 13456 0.0 0.0 169980 12196 ? D 00:55 0:00 lfd - (child) closing mailnull 13465 0.0 0.0 74880 956 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 13490 0.0 0.0 103360 740 ? S 00:55 0:00 grep 104.130.11.193 root 13491 0.0 0.0 103360 740 ? S 00:55 0:00 grep user root 13645 0.0 0.0 114060 8628 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 364 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14218 0.1 0.0 106124 872 ? S 00:55 0:00 /bin/bash /bin/malv-block.sh mailnull 14241 0.0 0.0 74880 1132 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3616 ? D Apr16 0:03 queueprocd - process next scheduled task root 15606 0.0 0.0 86956 2948 ? Ds Apr16 0:23 dnsadmin - server mode postgres 15678 0.0 0.0 216504 1744 ? Ds 00:55 0:00 postgres: autovacuum worker process nobody 15746 0.0 0.0 114060 7876 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 15853 0.0 0.0 169980 12256 ? D 00:55 0:00 lfd - (child) closing root 15854 0.0 0.0 169980 12188 ? D 00:55 0:00 lfd - (child) closing root 15855 0.0 0.0 169980 12216 ? D 00:55 0:00 lfd - (child) closing root 15856 0.0 0.0 169980 12196 ? D 00:55 0:00 lfd - (child) closing root 15897 0.0 0.0 169980 12284 ? D 00:55 0:00 lfd - (child) closing root 15898 0.0 0.0 169980 12104 ? D 00:55 0:00 lfd - (child) closing root 15899 0.0 0.0 169980 12284 ? D 00:55 0:00 lfd - (child) closing root 15945 0.0 0.0 35124 3616 ? D 00:55 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply nobody 15948 0.0 0.0 114060 7876 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 15957 0.0 0.0 35124 3592 ? D 00:55 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply mailman 16010 0.0 0.0 120748 1340 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1020 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1220 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1008 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1008 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1024 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1072 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 1012 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 708 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1004 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 2260 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 nobody 17175 0.0 0.0 114216 8408 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17178 0.0 0.0 114484 8564 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17179 0.0 0.0 114500 8840 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start conhecsc 17197 0.0 0.0 191140 13080 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] noticias 18706 0.0 0.0 205684 16912 ? S 00:46 0:00 /usr/bin/php root 19132 1.7 0.0 240980 47340 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream root 19138 0.0 0.0 88412 5780 ? D 00:50 0:00 dnsadmin - waiting for request on connected socket 882 19151 0.2 0.0 243772 47628 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 8.9 0.0 23760 8732 ? S 00:50 0:27 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 6080 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.5 0.0 249740 16916 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8448 ? D 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.1 0.0 234712 16912 ? S 00:48 0:00 /usr/bin/php nobody 20146 0.0 0.0 114060 8276 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20147 0.0 0.0 114060 8260 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20148 0.0 0.0 114060 8264 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20149 0.0 0.0 114060 7964 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 20157 0.0 0.0 74880 1124 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 992 20178 0.0 0.0 187384 7796 ? S 00:46 0:00 /usr/bin/php root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] nobody 20219 0.0 0.0 114060 8192 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20222 0.0 0.0 114060 7940 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20232 0.0 0.0 114060 8364 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.1 0.0 265704 16908 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114060 7996 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20489 0.0 0.0 169980 10480 ? D 00:55 0:00 lfd - child closing nobody 20490 0.0 0.0 114060 8276 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20491 0.0 0.0 114060 7976 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4352 524 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20496 0.0 0.0 4352 552 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 20497 0.0 0.0 4352 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4352 528 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20502 0.0 0.0 4352 552 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 20503 0.0 0.0 106120 1124 ? Ss 00:55 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 20504 0.0 0.0 106120 1120 ? Ss 00:55 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 20505 0.0 0.0 106120 1132 ? Ss 00:55 0:00 /bin/sh -c /bin/minuto-a-minuto.sh > /dev/null 2>&1 root 20506 0.0 0.0 106120 1108 ? Ss 00:55 0:00 /bin/sh -c /bin/block-cloud.sh > /dev/null 2>&1 root 20507 0.0 0.0 106120 1088 ? Ss 00:55 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 20509 0.0 0.0 106120 1136 ? Ss 00:55 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 20510 0.0 0.0 106120 1136 ? Ss 00:55 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 20512 0.0 0.0 106120 1140 ? Ss 00:55 0:00 /bin/sh -c /bin/block-malv.sh > /dev/null 2>&1 root 20514 0.0 0.0 106120 1132 ? Ss 00:55 0:00 /bin/sh -c /bin/protege-banco.sh > /dev/null 2>&1 root 20515 0.0 0.0 106120 1104 ? Ss 00:55 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20516 0.0 0.0 106120 1112 ? Ss 00:55 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 20517 0.0 0.0 106120 1100 ? Ss 00:55 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 20518 0.0 0.0 106120 1132 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf.sh > /dev/null 2>&1 root 20519 0.0 0.0 106120 1132 ? Ss 00:55 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 20520 0.0 0.0 4356 532 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20521 0.0 0.0 4356 524 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20522 0.0 0.0 4352 532 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron nobody 20523 0.0 0.0 114060 8000 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20524 0.0 0.0 114060 8000 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20525 0.0 0.0 114060 8296 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20526 0.0 0.0 4352 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send root 20528 0.0 0.0 106120 1120 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4352 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20535 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 20536 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4356 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 892 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20540 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php root 20541 0.0 0.0 4352 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 20542 0.0 0.0 4352 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20543 0.0 0.0 4612 892 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 20544 0.0 0.0 4612 892 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 20545 0.0 0.0 4616 892 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 20546 0.0 0.0 4612 892 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php nobody 20554 0.0 0.0 114060 8184 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20555 0.0 0.0 114196 8088 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20556 0.0 0.0 106124 1276 ? S 00:55 0:00 /bin/bash /bin/verifica-spf.sh root 20557 0.0 0.0 106120 1308 ? S 00:55 0:00 /bin/bash /bin/bloqueia-envio.sh nobody 20573 0.0 0.0 114060 8292 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 20574 0.0 0.0 74880 1284 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20575 0.0 0.0 106124 1320 ? S 00:55 0:00 /bin/bash /bin/block-cloud.sh root 20577 0.0 0.0 124676 2604 ? D 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 nobody 20578 0.0 0.0 114196 8108 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20579 0.0 0.0 114196 8108 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20581 0.0 0.0 25988 1232 ? DN 00:55 0:00 cpanellogd - sleeping for logs root 20584 0.0 0.0 106120 1308 ? S 00:55 0:00 /bin/bash /bin/brut-filtro.sh root 20585 0.0 0.0 80108 596 ? D 00:55 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 20586 0.0 0.0 33632 820 ? D 00:55 0:00 /usr/local/cpanel/bin/dcpumon root 20587 0.0 0.0 106120 1288 ? S 00:55 0:00 /bin/bash /bin/malv2-block.sh root 20590 0.0 0.0 106120 1248 ? S 00:55 0:00 /bin/bash /bin/minuto-a-minuto.sh root 20593 0.0 0.0 106120 1292 ? S 00:55 0:00 /bin/bash /bin/block-malv.sh root 20595 0.0 0.0 106120 1344 ? S 00:55 0:00 /bin/bash /bin/malv-block.sh root 20596 0.0 0.0 106120 1288 ? S 00:55 0:00 /bin/bash /bin/liberar-csf.sh root 20597 0.0 0.0 106120 1116 ? S 00:55 0:00 /bin/bash /bin/corrigir-ips.sh root 20599 0.0 0.0 106124 1292 ? S 00:55 0:00 /bin/bash /bin/monitora-load.sh root 20600 0.0 0.0 106120 1228 ? S 00:55 0:00 /bin/bash /bin/protege-banco.sh nobody 20605 0.0 0.0 114060 8228 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20606 0.0 0.0 69992 1304 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20607 0.0 0.0 69992 1328 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20611 0.0 0.0 106120 500 ? S 00:55 0:00 /bin/bash /bin/corrigir-ips.sh root 20614 0.0 0.0 41160 1160 ? D 00:55 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 20620 0.0 0.0 69992 1324 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20622 0.0 0.0 103360 844 ? S 00:55 0:00 grep sim root 20623 0.0 0.0 100976 648 ? S 00:55 0:00 wc -l root 20624 0.0 0.0 69992 1332 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20625 0.0 0.0 69992 1348 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root regis 20754 0.0 0.0 186880 6576 ? S 00:46 0:00 /usr/bin/php root 20764 0.0 0.0 69996 1328 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 20827 0.0 0.0 116004 7832 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.1 0.0 263164 16912 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 21182 0.0 0.0 69992 1328 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 21183 0.0 0.0 69992 1336 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 21184 0.0 0.0 69992 1320 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 21218 0.0 0.0 114196 8132 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21219 0.0 0.0 114196 8180 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21220 0.0 0.0 114196 8084 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 21221 0.0 0.0 69992 1320 ? D 00:55 0:00 send-mail -i -- admin@conectadohost.com.br root 21231 0.0 0.0 130236 2600 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21232 0.0 0.0 130232 2752 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21233 0.0 0.0 130232 2600 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21237 0.0 0.0 106124 1320 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21238 0.0 0.0 114196 8096 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 21248 0.0 0.0 74880 1280 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 21253 0.0 0.0 25240 1904 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/check.pl root 21254 0.0 0.0 25240 1900 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/check.pl root 21255 0.0 0.0 25240 1856 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/check.pl root 21256 0.0 0.0 130232 2608 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21257 0.0 0.0 130236 2600 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21258 0.0 0.0 130232 2604 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21259 0.0 0.0 130232 2604 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21260 0.0 0.0 130236 2604 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21261 0.0 0.0 25240 1944 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/hddinfo.pl root 21262 0.0 0.0 25240 1864 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/hddinfo.pl root 21263 0.0 0.0 130232 2608 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21264 0.0 0.0 130236 2608 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21265 0.0 0.0 130232 2604 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21266 0.0 0.0 25504 2132 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage-root.pl root 21267 0.0 0.0 25504 2120 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage-root.pl root 21268 0.0 0.0 25372 2112 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage-root.pl root 21269 0.0 0.0 130232 2604 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 21270 0.0 0.0 25240 1940 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/hddinfo.pl root 21271 0.0 0.0 25640 2284 ? D 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage.pl root 21272 0.0 0.0 25636 2280 ? D 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage.pl root 21273 0.0 0.0 25636 2292 ? D 00:55 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage.pl nobody 21274 0.0 0.0 114060 8280 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21276 0.0 0.0 114196 8152 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start postgres 21281 0.0 0.0 215392 832 ? Ds 00:55 0:00 postgres: autovacuum worker process root 21291 0.0 0.0 69992 616 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 21294 0.0 0.0 69992 1336 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 21295 0.0 0.0 69992 620 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 21296 0.0 0.0 69992 1308 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 21297 0.0 0.0 69992 1332 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 21298 0.0 0.0 69992 1316 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 21305 0.0 0.0 114196 8100 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 21306 0.0 0.0 44028 836 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 707 root 21307 0.0 0.0 44028 836 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 root 21308 0.0 0.0 44028 836 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1030 root 21309 0.0 0.0 44028 832 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 21310 0.0 0.0 44028 836 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 788 root 21311 0.0 0.0 44028 836 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 21312 0.0 0.0 44028 836 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 21313 0.0 0.0 44032 836 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 699 nobody 21317 0.0 0.0 114060 8288 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21724 0.0 0.0 114060 8192 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 21746 0.0 0.0 47448 480 ? D 00:55 0:00 mail -s LOAD ALTO admin@conectadohost.com.br nobody 21772 0.0 0.0 114196 8252 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 21781 0.0 0.0 106124 532 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 21782 0.0 0.0 100988 544 ? D 00:55 0:00 cat /var/log/messages root 21783 0.0 0.0 103364 852 ? S 00:55 0:00 grep 104.130.11.193 root 21784 0.0 0.0 103360 840 ? S 00:55 0:00 grep user nobody 22142 0.0 0.0 115520 9624 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22168 0.0 0.0 106124 776 ? S 00:55 0:00 /bin/bash /bin/block-cloud.sh root 22190 0.0 0.0 106124 896 ? S 00:55 0:00 /bin/bash /bin/malv-block.sh root 22191 0.4 0.0 108344 1180 ? R 00:55 0:00 ps aux mailnull 22199 0.0 0.0 74004 1304 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 22202 0.0 0.0 114060 8648 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22234 0.0 0.0 106124 892 ? S 00:55 0:00 /bin/bash /bin/block-malv.sh mailnull 22246 0.0 0.0 74876 1300 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 22296 0.0 0.0 106124 600 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 22305 0.0 0.0 106124 860 ? S 00:55 0:00 /bin/bash /bin/liberar-csf.sh nobody 22310 0.0 0.0 114196 8296 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22354 0.0 0.0 106124 396 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 22355 0.0 0.0 100988 576 ? D 00:55 0:00 cat /var/log/exim_mainlog root 22356 0.0 0.0 103360 852 ? S 00:55 0:00 grep 104.130.11.193 nobody 22377 0.0 0.0 114060 7288 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 746844 4384 ? Ssl Apr17 0:38 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25628 0.1 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] maisg647 26560 0.0 0.0 241460 16924 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 16912 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 16148 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7620 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1648 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 8956 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 816 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11508 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 416 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 300 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] mailnull 29882 0.0 0.0 74248 2488 ? S 00:51 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid icowebra 30070 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 30851 0.3 0.0 80532 15596 ? Ds Apr16 6:14 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2304 ? S 00:49 0:00 /usr/bin/php nobody 32182 0.0 0.0 115728 9368 ? S 00:47 0:00 /usr/local/apache/bin/httpd -k start USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 552 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:25 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 552 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:25 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:40 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:40 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 452 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 464 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 384 ? S Apr16 0:01 dovecot/anvil 881 2149 0.2 0.0 245724 21128 ? S 00:47 0:01 /usr/bin/php nobody 2291 0.0 0.0 114484 7940 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2294 0.0 0.0 114328 8420 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2295 0.0 0.0 114192 7484 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2297 0.0 0.0 114484 7960 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2298 0.0 0.0 115520 9048 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2299 0.0 0.0 114196 7656 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2300 0.0 0.0 114192 7748 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start root 2308 0.0 0.0 142436 816 ? S 00:52 0:00 CROND root 2310 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2311 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2312 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2313 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2314 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2317 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2319 0.0 0.0 142436 0 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 452 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 464 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 384 ? S Apr16 0:01 dovecot/anvil 881 2149 0.2 0.0 245724 21128 ? S 00:47 0:01 /usr/bin/php nobody 2291 0.0 0.0 114484 7940 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2294 0.0 0.0 114328 8420 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2295 0.0 0.0 114192 7484 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2297 0.0 0.0 114484 7960 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2298 0.0 0.0 115520 9048 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2299 0.0 0.0 114196 7656 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start nobody 2300 0.0 0.0 114192 7748 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start root 2308 0.0 0.0 142436 816 ? S 00:52 0:00 CROND root 2310 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2311 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2312 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2313 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2314 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2317 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2319 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2329 0.0 0.0 142436 976 ? S 00:52 0:00 CROND root 2330 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2331 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2332 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2333 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2334 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2335 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2336 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2337 0.0 0.0 142440 1016 ? S 00:52 0:00 CROND nobody 2351 0.0 0.0 114500 8232 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2352 0.0 0.0 114324 8316 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2353 0.0 0.0 114200 8328 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2358 0.0 0.0 115520 10732 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2359 0.0 0.0 114192 8196 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2360 0.0 0.0 114196 7620 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2361 0.0 0.0 115520 9160 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start mailnull 2413 0.0 0.0 74880 1176 ? S 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2420 0.0 0.0 106120 872 ? Ss 00:52 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 2424 0.0 0.0 106120 904 ? Ss 00:52 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 2430 0.0 0.0 106120 876 ? Ss 00:52 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 2431 0.0 0.0 106124 872 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2440 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (pdvxyz) [26433] hell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 2441 0.0 0.0 4612 804 ? Ss 00:52 0:00 jailshell (centralnetstream) [8481] hp -q /home/centralnetstream/pastasw/crons/cron.php escalations root 2446 0.0 0.0 4612 792 ? Ss 00:52 0:00 jailshell (zedeveva) [26669] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 2449 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2450 0.0 0.0 0 0 ? Zs 00:52 0:00 [jailshell] root 2452 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114196 8440 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2456 0.0 0.0 114324 8456 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2486 0.0 0.0 106124 1136 ? S 00:52 0:00 /bin/bash /bin/brut-filtro.sh root 2487 0.0 0.0 106124 1148 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2489 0.0 0.0 140028 2156 ? D 00:52 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 2491 0.0 0.0 106120 932 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh nobody 2499 0.0 0.0 114216 7616 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2501 0.0 0.0 114060 7588 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobod 832 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 832 ? S 00:52 0:00 CROND root 2329 0.0 0.0 142436 976 ? S 00:52 0:00 CROND root 2330 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2331 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2332 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2333 0.0 0.0 142436 1004 ? S 00:52 0:00 CROND root 2334 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2335 0.0 0.0 142436 824 ? S 00:52 0:00 CROND root 2336 0.0 0.0 142436 828 ? S 00:52 0:00 CROND root 2337 0.0 0.0 142440 1016 ? S 00:52 0:00 CROND nobody 2351 0.0 0.0 114500 8232 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2352 0.0 0.0 114324 8316 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2353 0.0 0.0 114200 8328 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2358 0.0 0.0 115520 10732 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2359 0.0 0.0 114192 8196 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2360 0.0 0.0 114196 7620 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2361 0.0 0.0 115520 9160 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start mailnull 2413 0.0 0.0 74880 1176 ? S 00:52 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2420 0.0 0.0 106120 872 ? Ss 00:52 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 2424 0.0 0.0 106120 904 ? Ss 00:52 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 2430 0.0 0.0 106120 876 ? Ss 00:52 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 2431 0.0 0.0 106124 872 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2440 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (pdvxyz) [26433] hell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 2441 0.0 0.0 4612 804 ? Ss 00:52 0:00 jailshell (centralnetstream) [8481] hp -q /home/centralnetstream/pastasw/crons/cron.php escalations root 2446 0.0 0.0 4612 792 ? Ss 00:52 0:00 jailshell (zedeveva) [26669] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 2449 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2450 0.0 0.0 0 0 ? Zs 00:52 0:00 [jailshell] root 2452 0.0 0.0 4612 796 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114196 8440 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2456 0.0 0.0 114324 8456 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2486 0.0 0.0 106124 1136 ? S 00:52 0:00 /bin/bash /bin/brut-filtro.sh root 2487 0.0 0.0 106124 1148 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2489 0.0 0.0 140028 2156 ? D 00:52 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 2491 0.0 0.0 106120 932 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh nobody 2499 0.0 0.0 114216 7616 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2501 0.0 0.0 114060 7588 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114060 7384 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2504 0.0 0.0 114324 8356 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114060 7572 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2506 0.0 0.0 114060 7384 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2509 0.0 0.0 114192 8280 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2519 0.0 0.0 106120 468 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2526 0.0 0.0 139260 1896 ? S 00:52 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 2528 0.0 0.0 103360 704 ? S 00:52 0:00 grep sim root 2530 0.0 0.0 100976 584 ? S 00:52 0:00 wc -l root 2551 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2552 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2553 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2554 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2555 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2556 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2557 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2560 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2565 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2572 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2573 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2574 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2575 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2576 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2577 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2578 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2579 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2580 0.0 0.0 142436 1080 ? S 00:53 0:00 CROND nobody 2603 0.0 0.0 114060 7288 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2632 0.0 0.0 106124 588 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 49.3 93.9 74966496 61972976 ? D 00:35 10:27 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114060 7400 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2885 0.0 0.0 114060 7432 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2886 0.0 0.0 114060 7424 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2903 0.0 0.0 114060 9416 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2904 0.0 0.0 114060 9592 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 436 ? S 00:34 0:00 CROND root 3059 0.2 0.0 252468 1600 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3112 0.0 0.0 114060 7424 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3113 0.0 0.0 114060 7660 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3114 0.0 0.0 114060 7448 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3115 0.0 0.0 114060 7428 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 1.6 0.0 274064 16928 ? S 00:49 0:06 /usr/bin/php root 3269 0.0 0.0 106124 600 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 3297 0.0 0.0 106124 392 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh dovenull 3299 0.0 0.0 42760 480 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 424 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 552 ? S 00:45 0:00 dovecot/log root 3306 0.0 y 2502 0.0 0.0 114060 7384 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2504 0.0 0.0 114324 8356 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114060 7572 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2506 0.0 0.0 114060 7384 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2509 0.0 0.0 114192 8280 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2519 0.0 0.0 106120 468 ? S 00:52 0:00 /bin/bash /bin/corrigir-ips.sh root 2526 0.0 0.0 139260 1896 ? S 00:52 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 2528 0.0 0.0 103360 704 ? S 00:52 0:00 grep sim root 2530 0.0 0.0 100976 584 ? S 00:52 0:00 wc -l root 2551 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2552 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2553 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2554 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2555 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2556 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2557 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2560 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2565 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2572 0.0 0.0 142436 948 ? S 00:53 0:00 CROND root 2573 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2574 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2575 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2576 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2577 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2578 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2579 0.0 0.0 142436 1084 ? S 00:53 0:00 CROND root 2580 0.0 0.0 142436 1080 ? S 00:53 0:00 CROND nobody 2603 0.0 0.0 114060 7288 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2632 0.0 0.0 106124 588 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 49.3 93.9 74966496 61972976 ? D 00:35 10:27 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114060 7400 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2885 0.0 0.0 114060 7432 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2886 0.0 0.0 114060 7424 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2903 0.0 0.0 114060 9416 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2904 0.0 0.0 114060 9592 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 436 ? S 00:34 0:00 CROND root 3059 0.2 0.0 252468 1600 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3112 0.0 0.0 114060 7424 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3113 0.0 0.0 114060 7660 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3114 0.0 0.0 114060 7448 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3115 0.0 0.0 114060 7428 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 1.6 0.0 274064 16928 ? S 00:49 0:06 /usr/bin/php root 3269 0.0 0.0 106124 600 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 3297 0.0 0.0 106124 392 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh dovenull 3299 0.0 0.0 42760 480 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 424 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 552 ? S 00:45 0:00 dovecot/log root 3306 0.0 0.0 100988 576 ? D 00:56 0:00 cat /var/log/exim_mainlog dovenull 3307 0.0 0.0 42760 552 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 540 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login root 3311 0.0 0.0 103360 852 ? S 00:56 0:00 grep 104.130.11.193 dovecot 3321 0.0 0.0 32012 676 ? S 00:45 0:00 dovecot/auth nobody 3470 0.0 0.0 114060 9404 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3494 0.0 0.0 114060 9532 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3495 0.0 0.0 114060 9416 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3496 0.0 0.0 114060 9440 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3497 0.0 0.0 114060 9416 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3514 0.0 0.0 114060 7444 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3626 0.0 0.0 106124 784 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh nobody 3723 0.0 0.0 114060 7380 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3739 0.0 0.0 114060 7348 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] nobody 3994 0.0 0.0 114060 9660 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 1172 ? S 00:47 0:00 /usr/bin/php maisg647 4243 0.1 0.0 259052 16916 ? S 00:47 0:00 /usr/bin/php maisg647 4263 0.1 0.0 240260 16912 ? S 00:47 0:00 /usr/bin/php agitae 4278 0.1 0.0 229500 16924 ? S 00:47 0:00 /usr/bin/php nobody 4485 0.0 0.0 114060 9444 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4518 0.0 0.0 114060 9744 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4532 0.0 0.0 114060 9520 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4669 0.0 0.0 114060 9496 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4680 0.0 0.0 114060 7268 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4683 0.0 0.0 114060 9484 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4696 0.0 0.0 106120 976 ? Ss 00:53 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 4720 0.0 0.0 106120 1004 ? Ss 00:53 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 4722 0.0 0.0 106120 1004 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 668 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114332 7608 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4725 0.0 0.0 117056 7556 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.8 0.0 234216 18788 ? S 00:45 0:05 /usr/bin/php diadiapr 4808 0.4 0.0 222608 17808 ? S 00:45 0:02 /usr/bin/php nobody 4809 11.2 0.0 114324 7624 ? S 00:45 1:14 /usr/local/apache/bin/httpd -k start conhecsc 4812 9.1 0.0 187440 5292 ? S 00:45 1:00 /usr/bin/php progress 4846 0.5 0.0 268336 20184 ? S 00:45 0:03 /usr/bin/php nobody 4860 0.0 0.0 116072 8796 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4865 0.1 0.0 236324 16912 ? S 00:45 0:00 /usr/bin/php nobody 4973 0.0 0.00.0 100988 576 ? D 00:56 0:00 cat /var/log/exim_mainlog dovenull 3307 0.0 0.0 42760 552 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 540 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login root 3311 0.0 0.0 103360 852 ? S 00:56 0:00 grep 104.130.11.193 dovecot 3321 0.0 0.0 32012 676 ? S 00:45 0:00 dovecot/auth nobody 3470 0.0 0.0 114060 9404 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3494 0.0 0.0 114060 9532 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3495 0.0 0.0 114060 9416 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3496 0.0 0.0 114060 9440 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3497 0.0 0.0 114060 9416 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3514 0.0 0.0 114060 7444 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3626 0.0 0.0 106124 784 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh nobody 3723 0.0 0.0 114060 7380 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3739 0.0 0.0 114060 7348 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] nobody 3994 0.0 0.0 114060 9660 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 1172 ? S 00:47 0:00 /usr/bin/php maisg647 4243 0.1 0.0 259052 16916 ? S 00:47 0:00 /usr/bin/php maisg647 4263 0.1 0.0 240260 16912 ? S 00:47 0:00 /usr/bin/php agitae 4278 0.1 0.0 229500 16924 ? S 00:47 0:00 /usr/bin/php nobody 4485 0.0 0.0 114060 9444 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4518 0.0 0.0 114060 9744 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4532 0.0 0.0 114060 9520 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4669 0.0 0.0 114060 9496 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4680 0.0 0.0 114060 7268 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 4683 0.0 0.0 114060 9484 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4696 0.0 0.0 106120 976 ? Ss 00:53 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 4720 0.0 0.0 106120 1004 ? Ss 00:53 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 4722 0.0 0.0 106120 1004 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 668 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114332 7608 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4725 0.0 0.0 117056 7556 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.8 0.0 234216 18788 ? S 00:45 0:05 /usr/bin/php diadiapr 4808 0.4 0.0 222608 17808 ? S 00:45 0:02 /usr/bin/php nobody 4809 11.2 0.0 114324 7624 ? S 00:45 1:14 /usr/local/apache/bin/httpd -k start conhecsc 4812 9.1 0.0 187440 5292 ? S 00:45 1:00 /usr/bin/php progress 4846 0.5 0.0 268336 20184 ? S 00:45 0:03 /usr/bin/php nobody 4860 0.0 0.0 116072 8796 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4865 0.1 0.0 236324 16912 ? S 00:45 0:00 /usr/bin/php nobody 4973 0.0 0.0 116176 8080 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4992 0.0 0.0 115640 7788 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5091 0.0 0.0 116112 7768 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 5094 0.0 0.0 116244 8292 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 724 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 528 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] root 5842 0.0 0.0 140028 2164 ? D 00:53 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php pdvxyz 5923 0.0 0.0 185472 624 ? S 00:46 0:00 /usr/bin/php root 5946 0.0 0.0 106124 1176 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 5947 0.0 0.0 106120 980 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5956 0.0 0.0 106120 480 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5957 0.0 0.0 139260 1764 ? S 00:53 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 5958 0.0 0.0 103360 740 ? S 00:53 0:00 grep sim root 5959 0.0 0.0 100976 612 ? S 00:53 0:00 wc -l icowebra 6242 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 420 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4392 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 185212 ? Sl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 6937 0.0 0.0 114060 7464 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 6942 0.0 0.0 74880 1208 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 992 7038 0.0 0.0 184964 528 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 592 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 7084 0.0 0.0 114060 9424 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] nobody 7454 0.0 0.0 117056 9576 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7489 0.0 0.0 114060 9412 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7506 0.0 0.0 115640 9712 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7574 0.0 0.0 114192 9548 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7575 0.0 0.0 114060 7380 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7364 ? S 116176 8080 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 4992 0.0 0.0 115640 7788 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5091 0.0 0.0 116112 7768 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start nobody 5094 0.0 0.0 116244 8292 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 724 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6860 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 528 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] root 5842 0.0 0.0 140028 2164 ? D 00:53 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php pdvxyz 5923 0.0 0.0 185472 624 ? S 00:46 0:00 /usr/bin/php root 5946 0.0 0.0 106124 1176 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 5947 0.0 0.0 106120 980 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5956 0.0 0.0 106120 480 ? S 00:53 0:00 /bin/bash /bin/corrigir-ips.sh root 5957 0.0 0.0 139260 1764 ? S 00:53 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 5958 0.0 0.0 103360 740 ? S 00:53 0:00 grep sim root 5959 0.0 0.0 100976 612 ? S 00:53 0:00 wc -l icowebra 6242 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 420 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4392 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 185212 ? Sl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 6937 0.0 0.0 114060 7464 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start mailnull 6942 0.0 0.0 74880 1208 ? S 00:53 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 992 7038 0.0 0.0 184964 528 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 592 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 7084 0.0 0.0 114060 9424 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] nobody 7454 0.0 0.0 117056 9576 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7489 0.0 0.0 114060 9412 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7506 0.0 0.0 115640 9712 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7574 0.0 0.0 114192 9548 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7575 0.0 0.0 114060 7380 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7364 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114060 7392 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 8091 0.0 0.0 116004 9800 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8095 0.0 0.0 106128 808 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8271 0.0 0.0 142436 1000 ? S 00:54 0:00 CROND root 8273 0.0 0.0 142436 1000 ? S 00:54 0:00 CROND root 8274 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8276 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8278 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8280 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8281 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8284 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8286 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8297 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8300 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8301 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8303 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8305 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8307 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8309 0.0 0.0 142436 1012 ? S 00:54 0:00 CROND root 8310 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8312 0.0 0.0 142436 1012 ? S 00:54 0:00 CROND root 8313 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114060 7288 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start 782 8481 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralnetstream) [init] hp -q /home/centralnetstream/pastasw/crons/cron.php escalations nobody 8489 0.0 0.0 116112 9848 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8493 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8497 0.0 0.0 114060 9496 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114060 7332 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8509 0.0 0.0 114060 7332 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8510 0.0 0.0 114060 7340 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8538 0.0 0.0 114060 9516 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8667 0.2 0.0 169980 10624 ? D 00:56 0:00 lfd - (child) closing mailnull 8748 0.0 0.0 73992 6244 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 8812 0.0 0.0 114060 7296 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8839 0.0 0.0 114060 7484 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114060 7300 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8896 0.0 0.0 114060 8080 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 9414 0.0 0.0 106120 1176 ? S 00:56 0:00 /bin/bash /bin/corrigir-ips.sh nobody 9840 0.0 0.0 114208 8420 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114060 7316 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9842 0.0 0.0 114060 7312 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9843 0.0 0.0 114060 7592 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 10093 0.0 0.0 114060 8308 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 10100 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 900:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114060 7392 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 8091 0.0 0.0 116004 9800 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8095 0.0 0.0 106128 808 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 8271 0.0 0.0 142436 1000 ? S 00:54 0:00 CROND root 8273 0.0 0.0 142436 1000 ? S 00:54 0:00 CROND root 8274 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8276 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8278 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8280 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8281 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8284 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8286 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8297 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8300 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND root 8301 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8303 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8305 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8307 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8309 0.0 0.0 142436 1012 ? S 00:54 0:00 CROND root 8310 0.0 0.0 142436 1008 ? S 00:54 0:00 CROND root 8312 0.0 0.0 142436 1012 ? S 00:54 0:00 CROND root 8313 0.0 0.0 142436 1016 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114060 7288 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start 782 8481 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralnetstream) [init] hp -q /home/centralnetstream/pastasw/crons/cron.php escalations nobody 8489 0.0 0.0 116112 9848 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8493 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8497 0.0 0.0 114060 9496 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114060 7332 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8509 0.0 0.0 114060 7332 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8510 0.0 0.0 114060 7340 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8538 0.0 0.0 114060 9516 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 8667 0.2 0.0 169980 10624 ? D 00:56 0:00 lfd - (child) closing mailnull 8748 0.0 0.0 73992 6244 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 8812 0.0 0.0 114060 7296 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8839 0.0 0.0 114060 7484 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114060 7300 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8896 0.0 0.0 114060 8080 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 9414 0.0 0.0 106120 1176 ? S 00:56 0:00 /bin/bash /bin/corrigir-ips.sh nobody 9840 0.0 0.0 114208 8420 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114060 7316 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9842 0.0 0.0 114060 7312 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9843 0.0 0.0 114060 7592 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 10093 0.0 0.0 114060 8308 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 10100 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 968 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10619 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 10620 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 10627 0.0 0.0 106120 992 ? Ss 00:54 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 10630 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 10685 0.0 0.0 4612 888 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 10686 0.0 0.0 4352 532 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 10687 0.0 0.0 4612 888 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 10688 0.0 0.0 4616 852 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 10689 0.0 0.0 4352 528 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 10690 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 10691 0.0 0.0 4356 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 10692 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 10693 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 10694 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 10695 0.0 0.0 4612 888 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10697 0.0 0.0 4352 556 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 10698 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 10699 0.0 0.0 4352 556 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 10701 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 10847 0.0 0.0 140028 2844 ? D 00:54 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 10849 0.0 0.0 106120 1188 ? S 00:54 0:00 /bin/bash /bin/malv-block.sh root 10850 0.0 0.0 106120 984 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10851 0.0 0.0 106124 1188 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10875 0.0 0.0 106120 1172 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 10911 0.0 0.0 106120 480 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10913 0.0 0.0 139260 1976 ? S 00:54 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 10914 0.0 0.0 103360 736 ? S 00:54 0:00 grep sim root 10915 0.0 0.0 100976 604 ? S 00:54 0:00 wc -l root 10926 0.0 0.0 4640 240 ? 68 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10619 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 10620 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 10627 0.0 0.0 106120 992 ? Ss 00:54 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 10630 0.0 0.0 106120 980 ? Ss 00:54 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 10685 0.0 0.0 4612 888 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 10686 0.0 0.0 4352 532 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 10687 0.0 0.0 4612 888 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 10688 0.0 0.0 4616 852 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 10689 0.0 0.0 4352 528 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 10690 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 10691 0.0 0.0 4356 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 10692 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 10693 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 10694 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 10695 0.0 0.0 4612 888 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10697 0.0 0.0 4352 556 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 10698 0.0 0.0 4352 544 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 10699 0.0 0.0 4352 556 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 10701 0.0 0.0 4352 560 ? Ss 00:54 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 10847 0.0 0.0 140028 2844 ? D 00:54 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 10849 0.0 0.0 106120 1188 ? S 00:54 0:00 /bin/bash /bin/malv-block.sh root 10850 0.0 0.0 106120 984 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10851 0.0 0.0 106124 1188 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10875 0.0 0.0 106120 1172 ? S 00:54 0:00 /bin/bash /bin/brut-filtro.sh root 10911 0.0 0.0 106120 480 ? S 00:54 0:00 /bin/bash /bin/corrigir-ips.sh root 10913 0.0 0.0 139260 1976 ? S 00:54 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 10914 0.0 0.0 103360 736 ? S 00:54 0:00 grep sim root 10915 0.0 0.0 100976 604 ? S 00:54 0:00 wc -l root 10926 0.0 0.0 4640 240 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 336 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1936 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd root 11034 0.0 0.0 106120 500 ? S 00:56 0:00 /bin/bash /bin/corrigir-ips.sh root 11035 0.0 0.0 139260 3304 ? S 00:56 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 11037 0.0 0.0 103360 844 ? S 00:56 0:00 grep sim root 11039 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l nobody 11086 0.0 0.0 114060 9472 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11087 0.0 0.0 114060 9480 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11088 0.0 0.0 114060 9452 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11089 0.0 0.0 114060 9472 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11090 0.0 0.0 114060 9472 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start postgres 11213 0.0 0.0 215388 732 ? D Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data nobody 11237 0.0 0.0 114324 9636 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 224 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 576 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 792 ? Ds Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process nobody 11358 0.0 0.0 114060 9496 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11363 0.1 0.0 169980 10552 ? Ds 00:00 0:05 lfd - processing nobody 11441 0.0 0.0 114060 7456 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11457 0.0 0.0 114060 9540 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11458 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 11565 0.0 0.0 73956 6260 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11566 0.0 0.0 73968 6260 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11567 0.0 0.0 73992 6244 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11568 0.0 0.0 73964 6252 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11569 0.0 0.0 73988 6252 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11575 0.0 0.0 73968 6256 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11580 0.0 0.0 73964 6248 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11587 0.0 0.0 106124 596 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] 782 11643 0.0 0.0 139936 3452 ? D 00:56 0:00 php -q /home/centralnetstream/pastasw/crons/cron.php escalations mailnull 11654 0.0 0.0 73992 6244 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 11690 0.0 0.0 114060 9636 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11713 0.0 0.0 136204 104 ? Ss Apr Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 336 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1936 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd root 11034 0.0 0.0 106120 500 ? S 00:56 0:00 /bin/bash /bin/corrigir-ips.sh root 11035 0.0 0.0 139260 3304 ? S 00:56 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 11037 0.0 0.0 103360 844 ? S 00:56 0:00 grep sim root 11039 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l nobody 11086 0.0 0.0 114060 9472 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11087 0.0 0.0 114060 9480 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11088 0.0 0.0 114060 9452 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11089 0.0 0.0 114060 9472 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11090 0.0 0.0 114060 9472 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start postgres 11213 0.0 0.0 215388 732 ? D Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data nobody 11237 0.0 0.0 114324 9636 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 224 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 576 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 792 ? Ds Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process nobody 11358 0.0 0.0 114060 9496 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11363 0.1 0.0 169980 10552 ? Ds 00:00 0:05 lfd - processing nobody 11441 0.0 0.0 114060 7456 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11457 0.0 0.0 114060 9540 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11458 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start mailnull 11565 0.0 0.0 73956 6260 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11566 0.0 0.0 73968 6260 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11567 0.0 0.0 73992 6244 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11568 0.0 0.0 73964 6252 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11569 0.0 0.0 73988 6252 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11575 0.0 0.0 73968 6256 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 11580 0.0 0.0 73964 6248 ? D 00:54 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 11587 0.0 0.0 106124 596 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] 782 11643 0.0 0.0 139936 3452 ? D 00:56 0:00 php -q /home/centralnetstream/pastasw/crons/cron.php escalations mailnull 11654 0.0 0.0 73992 6244 ? D 00:54 0:00 send-mail -i -- admin@conectadohost.com.br nobody 11690 0.0 0.0 114060 9636 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 536 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 216 ? Ss Apr16 0:00 /usr/sbin/atd nobody 11777 0.0 0.0 114060 7376 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] nobody 11806 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11833 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11834 0.0 0.0 114060 7492 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114060 7320 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11841 0.0 0.0 114484 9720 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114060 7508 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11843 0.0 0.0 114060 7472 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11844 0.0 0.0 114060 7356 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11845 0.0 0.0 114060 7396 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11878 0.0 0.0 106124 832 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 12191 0.0 0.0 106124 784 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 12560 0.0 0.0 4108 232 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 236 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 232 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 236 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 232 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 232 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12699 0.0 0.0 44956 7112 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 782 mailnull 13083 0.0 0.0 74020 1160 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 13203 0.0 0.0 114060 7500 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13217 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13218 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13219 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13220 0.0 0.0 142436 1032 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142436 1032 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13238 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13239 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13241 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13242 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13257 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13261 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13262 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13265 0.0 0.0 142436 1048 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13274 0.0 0.0 142436 1056 ? S 16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 536 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 216 ? Ss Apr16 0:00 /usr/sbin/atd nobody 11777 0.0 0.0 114060 7376 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] nobody 11806 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11833 0.0 0.0 114060 9504 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11834 0.0 0.0 114060 7492 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114060 7320 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11841 0.0 0.0 114484 9720 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114060 7508 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11843 0.0 0.0 114060 7472 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11844 0.0 0.0 114060 7356 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11845 0.0 0.0 114060 7396 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11878 0.0 0.0 106124 832 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 12191 0.0 0.0 106124 784 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 12560 0.0 0.0 4108 232 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 236 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 232 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 236 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 232 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 232 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12699 0.0 0.0 44956 7112 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 782 mailnull 13083 0.0 0.0 74020 1160 ? S 00:54 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 13203 0.0 0.0 114060 7500 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13217 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13218 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13219 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13220 0.0 0.0 142436 1032 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142436 1032 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13238 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13239 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13241 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13242 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13257 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13261 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13262 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13265 0.0 0.0 142436 1048 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13274 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13276 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13278 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13280 0.0 0.0 142436 1044 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142436 1044 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142436 1044 ? S 00:55 0:00 CROND root 13288 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13289 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13290 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13293 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] nobody 13390 0.0 0.0 114060 9472 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13392 0.0 0.0 114060 9448 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13393 0.0 0.0 114060 9448 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13412 0.0 0.0 114060 9552 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13413 0.0 0.0 114060 7456 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13414 0.0 0.0 114060 9472 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13415 0.0 0.0 114060 9476 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13645 0.0 0.0 114060 8652 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start nobody 13650 0.0 0.0 114332 7640 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 324 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh mailnull 14241 0.0 0.0 74880 1384 ? D 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] nobody 15057 0.0 0.0 115520 9280 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 15166 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15170 0.0 0.0 169980 10240 ? D 00:56 0:00 lfd - (child) closing root 15176 0.0 0.0 169980 10240 ? D 00:56 0:00 lfd - (child) closing root 15180 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15184 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15190 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3536 ? D Apr16 0:03 queueprocd - process next scheduled task root 15606 0.0 0.0 86956 3232 ? Ds Apr16 0:23 dnsadmin - server mode postgres 15678 0.0 0.0 216640 2640 ? Ds 00:55 0:00 postgres: autovacuum worker process castelof_banner nobody 15746 0.0 0.0 114060 7432 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 15945 0.0 0.0 36444 6560 ? S 00:55 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply nobody 15948 0.0 0.0 114060 7428 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 15957 0.0 0.0 36656 7044 ? D 00:55 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply root 15984 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 15986 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 15992 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 15995 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closin00:55 0:00 CROND root 13276 0.0 0.0 142436 1056 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13278 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13280 0.0 0.0 142436 1044 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142436 1044 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142436 1044 ? S 00:55 0:00 CROND root 13288 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13289 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13290 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13293 0.0 0.0 142436 1052 ? S 00:55 0:00 CROND root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] nobody 13390 0.0 0.0 114060 9472 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13392 0.0 0.0 114060 9448 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13393 0.0 0.0 114060 9448 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13412 0.0 0.0 114060 9552 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13413 0.0 0.0 114060 7456 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13414 0.0 0.0 114060 9472 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 13415 0.0 0.0 114060 9476 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13645 0.0 0.0 114060 8652 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start nobody 13650 0.0 0.0 114332 7640 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 324 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh mailnull 14241 0.0 0.0 74880 1384 ? D 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] nobody 15057 0.0 0.0 115520 9280 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 15166 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15170 0.0 0.0 169980 10240 ? D 00:56 0:00 lfd - (child) closing root 15176 0.0 0.0 169980 10240 ? D 00:56 0:00 lfd - (child) closing root 15180 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15184 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15190 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3536 ? D Apr16 0:03 queueprocd - process next scheduled task root 15606 0.0 0.0 86956 3232 ? Ds Apr16 0:23 dnsadmin - server mode postgres 15678 0.0 0.0 216640 2640 ? Ds 00:55 0:00 postgres: autovacuum worker process castelof_banner nobody 15746 0.0 0.0 114060 7432 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 15945 0.0 0.0 36444 6560 ? S 00:55 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply nobody 15948 0.0 0.0 114060 7428 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 15957 0.0 0.0 36656 7044 ? D 00:55 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply root 15984 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 15986 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 15992 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 15995 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16000 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16004 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16008 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing mailman 16010 0.0 0.0 120748 1340 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start root 16013 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16018 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16020 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 16027 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16029 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16035 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16038 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16040 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16044 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16049 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16053 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16058 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16062 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing mailman 16093 0.0 0.0 118440 1020 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1220 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1008 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1008 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1024 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1072 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 1012 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 708 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16634 0.0 0.0 0 0 ? Z 00:56 0:00 [rtm] root 16636 0.0 0.0 130232 2812 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 16637 0.0 0.0 130232 2812 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 16639 0.0 0.0 130232 2640 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 16681 0.0 0.0 25856 1004 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 2240 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 nobody 17175 0.0 0.0 114216 9564 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17178 0.0 0.0 114484 9836 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17179 0.0 0.0 114500 10044 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17195 0.0 0.0 114332 7536 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start conhecsc 17197 0.0 0.0 191140 13080 ? S g root 16000 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16004 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16008 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing mailman 16010 0.0 0.0 120748 1340 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start root 16013 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16018 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16020 0.0 0.0 169980 10244 ? D 00:56 0:00 lfd - (child) closing root 16027 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16029 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16035 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16038 0.0 0.0 169980 10248 ? D 00:56 0:00 lfd - (child) closing root 16040 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16044 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16049 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16053 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16058 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing root 16062 0.0 0.0 169980 10252 ? D 00:56 0:00 lfd - (child) closing mailman 16093 0.0 0.0 118440 1020 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1220 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1008 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1008 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1024 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1072 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 1012 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 708 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16634 0.0 0.0 0 0 ? Z 00:56 0:00 [rtm] root 16636 0.0 0.0 130232 2812 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 16637 0.0 0.0 130232 2812 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 16639 0.0 0.0 130232 2640 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 16681 0.0 0.0 25856 1004 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 2240 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 nobody 17175 0.0 0.0 114216 9564 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17178 0.0 0.0 114484 9836 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17179 0.0 0.0 114500 10044 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 17195 0.0 0.0 114332 7536 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start conhecsc 17197 0.0 0.0 191140 13080 ? S 00:48 0:00 /usr/bin/php root 17239 0.0 0.0 23368 312 ? D 00:56 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 17603 0.0 0.0 114060 7876 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 17719 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17726 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17727 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17735 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17736 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17743 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17745 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17747 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17754 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17758 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 17764 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17767 0.0 0.0 169980 10264 ? D 00:56 0:00 lfd - (child) closing root 17770 0.0 0.0 169980 10264 ? D 00:56 0:00 lfd - (child) closing root 17775 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17779 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17784 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17788 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17791 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17797 0.0 0.0 169980 10276 ? D 00:56 0:00 lfd - (child) closing root 17800 0.0 0.0 169980 10276 ? D 00:56 0:00 lfd - (child) closing root 17806 0.0 0.0 169980 10276 ? D 00:56 0:00 lfd - (child) closing root 17807 0.0 0.0 169980 10272 ? D 00:56 0:00 lfd - (child) closing root 17808 0.0 0.0 169980 10280 ? D 00:56 0:00 lfd - (child) closing root 17809 0.0 0.0 169980 10280 ? D 00:56 0:00 lfd - (child) closing root 17810 0.0 0.0 169980 10280 ? D 00:56 0:00 lfd - (child) closing root 17811 0.0 0.0 106124 508 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 17812 0.0 0.0 59504 1564 ? D 00:56 0:00 nslookup 124.123.91.228 root 17813 0.0 0.0 106124 540 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17814 0.0 0.0 103360 840 ? S 00:56 0:00 grep br root 17815 0.0 0.0 100976 656 ? S 00:56 0:00 wc -l root 17816 0.0 0.0 59504 1560 ? D 00:56 0:00 nslookup 201.15.116.61 root 17817 0.0 0.0 103360 840 ? S 00:56 0:00 grep br root 17818 0.0 0.0 100976 656 ? S 00:56 0:00 wc -l root 17819 0.0 0.0 106128 540 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17820 0.0 0.0 59504 1524 ? D 00:56 0:00 nslookup 201.43.98.25 root 17821 0.0 0.0 103360 844 ? S 00:56 0:00 grep br root 17822 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l root 17823 0.0 0.0 106124 540 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17824 0.0 0.0 59504 1544 ? D 00:56 0:00 nslookup 201.15.116.61 root 17825 0.0 0.0 103360 844 ? S 00:56 0:00 grep br root 17826 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l root 17827 0.0 0.0 106124 508 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 17828 0.0 0.0 59504 1568 ? D 00:56 0:00 nslookup 124.123.91.228 root 17829 0.0 0.0 103360 836 ? S 00:56 0:00 grep br root 17830 0.0 000:48 0:00 /usr/bin/php root 17239 0.0 0.0 23368 312 ? D 00:56 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 17603 0.0 0.0 114060 7876 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 17719 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17726 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17727 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17735 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17736 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17743 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17745 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17747 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17754 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17758 0.0 0.0 169980 10256 ? D 00:56 0:00 lfd - (child) closing root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 17764 0.0 0.0 169980 10260 ? D 00:56 0:00 lfd - (child) closing root 17767 0.0 0.0 169980 10264 ? D 00:56 0:00 lfd - (child) closing root 17770 0.0 0.0 169980 10264 ? D 00:56 0:00 lfd - (child) closing root 17775 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17779 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17784 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17788 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17791 0.0 0.0 169980 10268 ? D 00:56 0:00 lfd - (child) closing root 17797 0.0 0.0 169980 10276 ? D 00:56 0:00 lfd - (child) closing root 17800 0.0 0.0 169980 10276 ? D 00:56 0:00 lfd - (child) closing root 17806 0.0 0.0 169980 10276 ? D 00:56 0:00 lfd - (child) closing root 17807 0.0 0.0 169980 10272 ? D 00:56 0:00 lfd - (child) closing root 17808 0.0 0.0 169980 10280 ? D 00:56 0:00 lfd - (child) closing root 17809 0.0 0.0 169980 10280 ? D 00:56 0:00 lfd - (child) closing root 17810 0.0 0.0 169980 10280 ? D 00:56 0:00 lfd - (child) closing root 17811 0.0 0.0 106124 508 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 17812 0.0 0.0 59504 1564 ? D 00:56 0:00 nslookup 124.123.91.228 root 17813 0.0 0.0 106124 540 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17814 0.0 0.0 103360 840 ? S 00:56 0:00 grep br root 17815 0.0 0.0 100976 656 ? S 00:56 0:00 wc -l root 17816 0.0 0.0 59504 1560 ? D 00:56 0:00 nslookup 201.15.116.61 root 17817 0.0 0.0 103360 840 ? S 00:56 0:00 grep br root 17818 0.0 0.0 100976 656 ? S 00:56 0:00 wc -l root 17819 0.0 0.0 106128 540 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17820 0.0 0.0 59504 1524 ? D 00:56 0:00 nslookup 201.43.98.25 root 17821 0.0 0.0 103360 844 ? S 00:56 0:00 grep br root 17822 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l root 17823 0.0 0.0 106124 540 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17824 0.0 0.0 59504 1544 ? D 00:56 0:00 nslookup 201.15.116.61 root 17825 0.0 0.0 103360 844 ? S 00:56 0:00 grep br root 17826 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l root 17827 0.0 0.0 106124 508 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 17828 0.0 0.0 59504 1568 ? D 00:56 0:00 nslookup 124.123.91.228 root 17829 0.0 0.0 103360 836 ? S 00:56 0:00 grep br root 17830 0.0 0.0 100976 656 ? S 00:56 0:00 wc -l root 17831 0.0 0.0 106124 536 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17832 0.0 0.0 59504 1588 ? D 00:56 0:00 nslookup 144.217.34.53 root 17833 0.0 0.0 103360 840 ? S 00:56 0:00 grep br root 17834 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l root 17836 0.0 0.0 25240 2080 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/hddinfo.pl root 17837 0.0 0.0 25504 2220 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage-root.pl root 17838 0.0 0.0 25636 2376 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage.pl nobody 17839 0.0 0.0 114332 7544 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 17840 0.0 0.0 114060 7688 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 17841 0.0 0.0 114060 7680 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 17845 0.0 0.0 114332 7552 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 18018 0.0 0.0 114332 7560 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 18020 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 18021 0.0 0.0 23368 312 ? D 00:56 0:00 send-mail -i -- admin@conectadohost.com.br root 18022 0.0 0.0 106124 528 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18023 0.0 0.0 100988 576 ? D 00:56 0:00 cat /usr/local/cpanel/logs/access_log root 18024 0.0 0.0 103360 848 ? S 00:56 0:00 grep 104.130.11.193 root 18025 0.0 0.0 103360 844 ? S 00:56 0:00 grep user root 18026 2.0 0.0 108344 1092 ? S 00:56 0:00 ps -o user:32,pid,pcpu,pmem,args ax root 18079 0.0 0.0 106120 1328 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh noticias 18706 0.0 0.0 205684 16912 ? S 00:46 0:00 /usr/bin/php root 18780 0.0 0.0 23368 312 ? D 00:56 0:00 send-mail -i -- admin@conectadohost.com.br root 19132 1.5 0.0 240980 10112 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream root 19138 0.0 0.0 88412 6056 ? D 00:50 0:00 dnsadmin - waiting for request on connected socket 882 19151 0.2 0.0 243772 10256 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 8.1 0.0 23760 8920 ? S 00:50 0:28 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable root 19367 1.0 0.0 108344 1180 ? R 00:56 0:00 ps aux root 19368 1.0 0.0 108348 1184 ? R 00:56 0:00 ps aux 894 19776 0.0 0.0 186828 6080 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.4 0.0 249740 16916 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8724 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.1 0.0 234712 16912 ? S 00:48 0:00 /usr/bin/php nobody 20126 0.0 0.0 114332 7568 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20146 0.0 0.0 114060 9392 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20147 0.0 0.0 114060 9460 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20148 0.0 0.0 114060 9452 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20149 0.0 0.0 114060 7516 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20150 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 20157 0.0 0.0 74880 992 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20158 0.0 0.0 6752 208 ? D 00:56 0:00 /bin/ls -1 /usr/lo.0 100976 656 ? S 00:56 0:00 wc -l root 17831 0.0 0.0 106124 536 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 17832 0.0 0.0 59504 1588 ? D 00:56 0:00 nslookup 144.217.34.53 root 17833 0.0 0.0 103360 840 ? S 00:56 0:00 grep br root 17834 0.0 0.0 100976 652 ? S 00:56 0:00 wc -l root 17836 0.0 0.0 25240 2080 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/hddinfo.pl root 17837 0.0 0.0 25504 2220 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage-root.pl root 17838 0.0 0.0 25636 2376 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage.pl nobody 17839 0.0 0.0 114332 7544 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 17840 0.0 0.0 114060 7688 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 17841 0.0 0.0 114060 7680 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 17845 0.0 0.0 114332 7552 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 18018 0.0 0.0 114332 7560 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 18020 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 18021 0.0 0.0 23368 312 ? D 00:56 0:00 send-mail -i -- admin@conectadohost.com.br root 18022 0.0 0.0 106124 528 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18023 0.0 0.0 100988 576 ? D 00:56 0:00 cat /usr/local/cpanel/logs/access_log root 18024 0.0 0.0 103360 848 ? S 00:56 0:00 grep 104.130.11.193 root 18025 0.0 0.0 103360 844 ? S 00:56 0:00 grep user root 18026 2.0 0.0 108344 1092 ? S 00:56 0:00 ps -o user:32,pid,pcpu,pmem,args ax root 18079 0.0 0.0 106120 1328 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh noticias 18706 0.0 0.0 205684 16912 ? S 00:46 0:00 /usr/bin/php root 18780 0.0 0.0 23368 312 ? D 00:56 0:00 send-mail -i -- admin@conectadohost.com.br root 19132 1.5 0.0 240980 10112 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream root 19138 0.0 0.0 88412 6056 ? D 00:50 0:00 dnsadmin - waiting for request on connected socket 882 19151 0.2 0.0 243772 10256 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 8.1 0.0 23760 8920 ? S 00:50 0:28 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable root 19367 1.0 0.0 108344 1180 ? R 00:56 0:00 ps aux root 19368 1.0 0.0 108348 1184 ? R 00:56 0:00 ps aux 894 19776 0.0 0.0 186828 6080 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.4 0.0 249740 16916 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8724 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.1 0.0 234712 16912 ? S 00:48 0:00 /usr/bin/php nobody 20126 0.0 0.0 114332 7568 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20146 0.0 0.0 114060 9392 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20147 0.0 0.0 114060 9460 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20148 0.0 0.0 114060 9452 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20149 0.0 0.0 114060 7516 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20150 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 114060 7796 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 20157 0.0 0.0 74880 992 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20158 0.0 0.0 6752 208 ? D 00:56 0:00 /bin/ls -1 /usr/local/rtm/scripts/daily 992 20178 0.0 0.0 187384 7796 ? S 00:46 0:00 /usr/bin/php root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] nobody 20219 0.0 0.0 114060 9488 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20222 0.0 0.0 114060 7492 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20232 0.0 0.0 114060 7916 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.1 0.0 265704 16908 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114060 7548 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20489 0.0 0.0 169980 11208 ? D 00:55 0:00 lfd - child closing nobody 20490 0.0 0.0 114060 9456 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20491 0.0 0.0 114060 7528 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4352 520 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4352 536 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20496 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 20497 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4352 524 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4352 536 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4352 536 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20502 0.0 0.0 4352 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 20507 0.0 0.0 106120 1036 ? Ss 00:55 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 20509 0.0 0.0 106120 1084 ? Ss 00:55 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 20510 0.0 0.0 106120 1084 ? Ss 00:55 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 20514 0.0 0.0 106120 1080 ? Ss 00:55 0:00 /bin/sh -c /bin/protege-banco.sh > /dev/null 2>&1 root 20515 0.0 0.0 106120 1052 ? Ss 00:55 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20516 0.0 0.0 106120 1060 ? Ss 00:55 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 20517 0.0 0.0 106120 1048 ? Ss 00:55 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 20519 0.0 0.0 106120 1080 ? Ss 00:55 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 20520 0.0 0.0 4356 528 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20521 0.0 0.0 4616 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -cal/rtm/scripts/daily 992 20178 0.0 0.0 187384 7796 ? S 00:46 0:00 /usr/bin/php root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] nobody 20219 0.0 0.0 114060 9488 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20222 0.0 0.0 114060 7492 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20232 0.0 0.0 114060 7916 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.1 0.0 265704 16908 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114060 7548 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20489 0.0 0.0 169980 11208 ? D 00:55 0:00 lfd - child closing nobody 20490 0.0 0.0 114060 9456 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20491 0.0 0.0 114060 7528 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4352 520 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4352 536 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20496 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 20497 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4352 524 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4352 536 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4352 536 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20502 0.0 0.0 4352 548 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 20507 0.0 0.0 106120 1036 ? Ss 00:55 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 20509 0.0 0.0 106120 1084 ? Ss 00:55 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 20510 0.0 0.0 106120 1084 ? Ss 00:55 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 20514 0.0 0.0 106120 1080 ? Ss 00:55 0:00 /bin/sh -c /bin/protege-banco.sh > /dev/null 2>&1 root 20515 0.0 0.0 106120 1052 ? Ss 00:55 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20516 0.0 0.0 106120 1060 ? Ss 00:55 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 20517 0.0 0.0 106120 1048 ? Ss 00:55 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 20519 0.0 0.0 106120 1080 ? Ss 00:55 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 20520 0.0 0.0 4356 528 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20521 0.0 0.0 4616 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20522 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron nobody 20523 0.0 0.0 114060 7552 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20524 0.0 0.0 114060 7552 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20525 0.0 0.0 114060 9516 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20526 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send root 20528 0.0 0.0 106120 1068 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20535 0.0 0.0 4612 868 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 20536 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4356 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 868 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20540 0.0 0.0 4612 868 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php root 20541 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 20542 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20543 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 20544 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 20545 0.0 0.0 4616 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 20546 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php nobody 20554 0.0 0.0 114060 9488 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20555 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 20573 0.0 0.0 114060 9492 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 20574 0.0 0.0 74880 1036 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20577 0.0 0.0 130232 4172 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 nobody 20578 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 20579 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] root 20581 0.0 0.0 26660 2732 ? DN 00:55 0:00 cpanellogd - sleeping for logs root 20584 0.0 0.0 106120 1252 ? S 00:55 0:00 /bin/bash /bin/brut-filtro.sh root 20585 0.0 0.0 139936 3908 ? D 00:55 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 20586 0.0 0.0 132672 6340 ? D 00:55 0:00 /usr/local/c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20522 0.0 0.0 4612 888 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron nobody 20523 0.0 0.0 114060 7552 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20524 0.0 0.0 114060 7552 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20525 0.0 0.0 114060 9516 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20526 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send root 20528 0.0 0.0 106120 1068 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20535 0.0 0.0 4612 868 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 20536 0.0 0.0 4352 540 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4356 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 868 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20540 0.0 0.0 4612 868 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php root 20541 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 20542 0.0 0.0 4352 544 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20543 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 20544 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 20545 0.0 0.0 4616 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 20546 0.0 0.0 4612 872 ? Ss 00:55 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php nobody 20554 0.0 0.0 114060 9488 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20555 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 20573 0.0 0.0 114060 9492 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 20574 0.0 0.0 74880 1036 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20577 0.0 0.0 130232 4172 ? S 00:55 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 nobody 20578 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 20579 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] root 20581 0.0 0.0 26660 2732 ? DN 00:55 0:00 cpanellogd - sleeping for logs root 20584 0.0 0.0 106120 1252 ? S 00:55 0:00 /bin/bash /bin/brut-filtro.sh root 20585 0.0 0.0 139936 3908 ? D 00:55 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 20586 0.0 0.0 132672 6340 ? D 00:55 0:00 /usr/local/cpanel/bin/dcpumon root 20595 0.0 0.0 106120 1264 ? S 00:55 0:00 /bin/bash /bin/malv-block.sh root 20597 0.0 0.0 106120 1064 ? S 00:55 0:00 /bin/bash /bin/corrigir-ips.sh root 20599 0.0 0.0 106124 1236 ? S 00:55 0:00 /bin/bash /bin/monitora-load.sh root 20600 0.0 0.0 106120 1280 ? S 00:55 0:00 /bin/bash /bin/protege-banco.sh nobody 20605 0.0 0.0 114060 9388 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 20606 0.1 0.0 73972 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20607 0.1 0.0 73992 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20611 0.0 0.0 106120 500 ? S 00:55 0:00 /bin/bash /bin/corrigir-ips.sh root 20614 0.0 0.0 139260 2684 ? S 00:55 0:00 lynx -source http://testedeip.conectadohost.com.br/ mailnull 20620 0.1 0.0 73960 6876 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20622 0.0 0.0 103360 844 ? S 00:55 0:00 grep sim root 20623 0.0 0.0 100976 644 ? S 00:55 0:00 wc -l mailnull 20624 0.1 0.0 73964 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20625 0.1 0.0 73964 6884 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root regis 20754 0.0 0.0 186880 6576 ? S 00:46 0:00 /usr/bin/php mailnull 20764 0.1 0.0 73964 6884 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 20827 0.0 0.0 116004 7812 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.1 0.0 263164 16912 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] mailnull 21182 0.1 0.0 73968 6876 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21183 0.1 0.0 73996 6872 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21184 0.0 0.0 73968 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 21218 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 21219 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 21220 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] mailnull 21221 0.1 0.0 73972 6868 ? D 00:55 0:00 send-mail -i -- admin@conectadohost.com.br root 21237 0.0 0.0 106124 1268 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21238 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] mailnull 21248 0.0 0.0 74880 1032 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 21274 0.0 0.0 114060 9484 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21276 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] postgres 21281 0.0 0.0 216640 2740 ? Ds 00:55 0:00 postgres: autovacuum worker process focasist_loja mailnull 21291 0.1 0.0 73972 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21294 0.1 0.0 73960 6884 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21295 0.1 0.0 73988 6888 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21296 0.1 0.0 73936 6888 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21297 0.1 0.0 73964 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21298 0.1 0.0 73960 6892 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 21305 0.0 0.0 0 0 ? Zcpanel/bin/dcpumon root 20595 0.0 0.0 106120 1264 ? S 00:55 0:00 /bin/bash /bin/malv-block.sh root 20597 0.0 0.0 106120 1064 ? S 00:55 0:00 /bin/bash /bin/corrigir-ips.sh root 20599 0.0 0.0 106124 1236 ? S 00:55 0:00 /bin/bash /bin/monitora-load.sh root 20600 0.0 0.0 106120 1280 ? S 00:55 0:00 /bin/bash /bin/protege-banco.sh nobody 20605 0.0 0.0 114060 9388 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 20606 0.1 0.0 73972 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20607 0.1 0.0 73992 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20611 0.0 0.0 106120 500 ? S 00:55 0:00 /bin/bash /bin/corrigir-ips.sh root 20614 0.0 0.0 139260 2684 ? S 00:55 0:00 lynx -source http://testedeip.conectadohost.com.br/ mailnull 20620 0.1 0.0 73960 6876 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20622 0.0 0.0 103360 844 ? S 00:55 0:00 grep sim root 20623 0.0 0.0 100976 644 ? S 00:55 0:00 wc -l mailnull 20624 0.1 0.0 73964 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20625 0.1 0.0 73964 6884 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root regis 20754 0.0 0.0 186880 6576 ? S 00:46 0:00 /usr/bin/php mailnull 20764 0.1 0.0 73964 6884 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 20827 0.0 0.0 116004 7812 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.1 0.0 263164 16912 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] mailnull 21182 0.1 0.0 73968 6876 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21183 0.1 0.0 73996 6872 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21184 0.0 0.0 73968 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 21218 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 21219 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] nobody 21220 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] mailnull 21221 0.1 0.0 73972 6868 ? D 00:55 0:00 send-mail -i -- admin@conectadohost.com.br root 21237 0.0 0.0 106124 1268 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21238 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] mailnull 21248 0.0 0.0 74880 1032 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 21274 0.0 0.0 114060 9484 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21276 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] postgres 21281 0.0 0.0 216640 2740 ? Ds 00:55 0:00 postgres: autovacuum worker process focasist_loja mailnull 21291 0.1 0.0 73972 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21294 0.1 0.0 73960 6884 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21295 0.1 0.0 73988 6888 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21296 0.1 0.0 73936 6888 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21297 0.1 0.0 73964 6880 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 21298 0.1 0.0 73960 6892 ? D 00:55 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 21305 0.0 0.0 0 0 ? Z 00:55 0:00 [httpd] root 21306 0.0 0.0 44956 7020 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 707 root 21307 0.0 0.0 44956 7040 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 root 21308 0.0 0.0 44956 6904 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1030 root 21309 0.0 0.0 44956 7096 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 21310 0.0 0.0 44956 7044 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 788 root 21311 0.0 0.0 44956 7032 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 21312 0.0 0.0 44956 7020 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 21313 0.0 0.0 44960 7076 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 699 nobody 21317 0.0 0.0 114060 9496 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21724 0.0 0.0 114060 9504 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21772 0.0 0.0 114196 9516 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 21781 0.0 0.0 106124 532 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 21782 0.0 0.0 100988 544 ? D 00:55 0:00 cat /var/log/messages root 21783 0.0 0.0 103364 852 ? S 00:55 0:00 grep 104.130.11.193 root 21784 0.0 0.0 103360 840 ? S 00:55 0:00 grep user nobody 22142 0.0 0.0 115520 10944 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 22199 0.0 0.0 74008 1000 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 22202 0.0 0.0 114060 9800 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 22246 0.0 0.0 74880 1052 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 22296 0.0 0.0 106124 600 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22310 0.0 0.0 114196 9576 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22354 0.0 0.0 106124 396 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 22355 0.0 0.0 100988 576 ? D 00:55 0:00 cat /var/log/exim_mainlog root 22356 0.0 0.0 103360 852 ? S 00:55 0:00 grep 104.130.11.193 nobody 22377 0.0 0.0 114060 8064 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] nobody 22511 0.0 0.0 116176 8132 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22550 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22557 0.0 0.0 142436 1244 ? S 00:56 0:00 CROND root 22622 0.0 0.0 106124 388 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 22623 0.0 0.0 100992 540 ? D 00:56 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.201 00:55 0:00 [httpd] root 21306 0.0 0.0 44956 7020 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 707 root 21307 0.0 0.0 44956 7040 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 root 21308 0.0 0.0 44956 6904 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1030 root 21309 0.0 0.0 44956 7096 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 21310 0.0 0.0 44956 7044 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 788 root 21311 0.0 0.0 44956 7032 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 21312 0.0 0.0 44956 7020 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 21313 0.0 0.0 44960 7076 ? D 00:55 0:00 /usr/local/cpanel/bin/setupvirtfs 699 nobody 21317 0.0 0.0 114060 9496 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21724 0.0 0.0 114060 9504 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 21772 0.0 0.0 114196 9516 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 21781 0.0 0.0 106124 532 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 21782 0.0 0.0 100988 544 ? D 00:55 0:00 cat /var/log/messages root 21783 0.0 0.0 103364 852 ? S 00:55 0:00 grep 104.130.11.193 root 21784 0.0 0.0 103360 840 ? S 00:55 0:00 grep user nobody 22142 0.0 0.0 115520 10944 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 22199 0.0 0.0 74008 1000 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 22202 0.0 0.0 114060 9800 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start mailnull 22246 0.0 0.0 74880 1052 ? S 00:55 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 22296 0.0 0.0 106124 600 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22310 0.0 0.0 114196 9576 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22354 0.0 0.0 106124 396 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 22355 0.0 0.0 100988 576 ? D 00:55 0:00 cat /var/log/exim_mainlog root 22356 0.0 0.0 103360 852 ? S 00:55 0:00 grep 104.130.11.193 nobody 22377 0.0 0.0 114060 8064 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] nobody 22511 0.0 0.0 116176 8132 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22550 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22557 0.0 0.0 142436 1244 ? S 00:56 0:00 CROND root 22622 0.0 0.0 106124 388 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 22623 0.0 0.0 100992 540 ? D 00:56 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt root 22624 0.0 0.0 103360 852 ? S 00:56 0:00 grep 104.130.11.193 root 22647 0.0 0.0 142436 1240 ? S 00:56 0:00 CROND root 22651 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22654 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22658 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22664 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22665 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22667 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22670 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22674 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22677 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22678 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22682 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22683 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22687 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND nobody 22704 0.0 0.0 114060 7932 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] mailnull 23431 0.0 0.0 74880 1072 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 23656 0.0 0.0 114060 7952 ? S 00:56 0:7_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt root 22624 0.0 0.0 103360 852 ? S 00:56 0:00 grep 104.130.11.193 root 22647 0.0 0.0 142436 1240 ? S 00:56 0:00 CROND root 22651 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22654 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22658 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22664 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22665 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22667 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22670 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22674 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22677 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND root 22678 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22682 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22683 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142436 1236 ? S 00:56 0:00 CROND root 22687 0.0 0.0 142436 1232 ? S 00:56 0:00 CROND nobody 22704 0.0 0.0 114060 7932 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] mailnull 23431 0.0 0.0 74880 1072 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 23656 0.0 0.0 114060 7952 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 23709 0.0 0.0 114192 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 746844 4484 ? Ssl Apr17 0:38 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25628 0.1 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 1100 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 pdvxyz 26433 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (pdvxyz) [init] shell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron nobody 26435 0.0 0.0 115520 8988 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 26436 0.0 0.0 114060 7980 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start postgres 26440 0.0 0.0 216640 2788 ? Ds 00:56 0:00 postgres: autovacuum worker process fielgui_bdfgon maisg647 26560 0.0 0.0 241460 16924 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 16912 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 16148 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7620 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1648 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114060 8008 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 26645 0.0 0.0 114208 8828 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 26646 0.0 0.0 74016 1312 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid pdvxyz 26667 0.1 0.0 135264 2104 ? S 00:56 0:00 wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron zedeveva 26669 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 recordho 26670 0.0 0.0 139936 3348 ? D 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 1092 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 zedeveva 26674 0.0 0.0 139940 3428 ? D 00:56 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 26678 0.0 0.0 106120 1252 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 26687 0.0 0.0 44956 7148 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 26688 0.0 0.0 44956 7172 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 26689 0.0 0.0 44956 7164 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 861 992 26701 0.0 0.0 187676 8956 ? S Apr17 0:00 /usr/bin/php root 26710 0.0 0.0 44956 7112 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 26711 0.0 0.0 44956 7232 ? D 000 /usr/local/apache/bin/httpd -k start nobody 23709 0.0 0.0 114192 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 746844 4484 ? Ssl Apr17 0:38 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25628 0.1 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 1100 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 pdvxyz 26433 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (pdvxyz) [init] shell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron nobody 26435 0.0 0.0 115520 8988 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 26436 0.0 0.0 114060 7980 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start postgres 26440 0.0 0.0 216640 2788 ? Ds 00:56 0:00 postgres: autovacuum worker process fielgui_bdfgon maisg647 26560 0.0 0.0 241460 16924 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 16912 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 16148 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7620 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1648 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114060 8008 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 26645 0.0 0.0 114208 8828 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 26646 0.0 0.0 74016 1312 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid pdvxyz 26667 0.1 0.0 135264 2104 ? S 00:56 0:00 wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron zedeveva 26669 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 recordho 26670 0.0 0.0 139936 3348 ? D 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 1092 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 zedeveva 26674 0.0 0.0 139940 3428 ? D 00:56 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 26678 0.0 0.0 106120 1252 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh root 26687 0.0 0.0 44956 7148 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 26688 0.0 0.0 44956 7172 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 26689 0.0 0.0 44956 7164 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 861 992 26701 0.0 0.0 187676 8956 ? S Apr17 0:00 /usr/bin/php root 26710 0.0 0.0 44956 7112 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 26711 0.0 0.0 44956 7232 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 523 1037 26715 0.0 0.0 185756 816 ? S Apr17 0:00 /usr/bin/php root 26733 0.0 0.0 44956 7340 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 loppelco 26734 0.0 0.0 187200 11508 ? S Apr17 0:00 /usr/bin/php root 26735 0.0 0.0 44956 7208 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 592 mailnull 26736 0.0 0.0 74880 1344 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 1125 26765 0.0 0.0 136464 3940 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 139936 3408 ? D 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 26802 0.0 0.0 114060 8160 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 416 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 300 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth root 28048 0.0 0.0 106124 840 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 28049 0.0 0.0 106124 832 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh mailnull 28058 0.0 0.0 74876 1308 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 28105 0.0 0.0 114060 8184 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28106 0.0 0.0 114208 8468 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28133 0.0 0.0 114060 8520 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 114060 8276 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28135 0.0 0.0 114060 8252 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28136 0.0 0.0 114060 8248 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28145 0.0 0.0 114060 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28146 0.0 0.0 114060 7676 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28147 0.0 0.0 114060 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28148 0.0 0.0 114060 7668 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28149 0.0 0.0 114060 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28150 0.0 0.0 106120 1188 ? Ss 00:56 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 28162 0.0 0.0 106120 1192 ? Ss 00:56 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 28166 0.0 0.0 106120 1184 ? Ss 00:56 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 28169 0.0 0.0 106120 1188 ? Ss 00:56 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 28172 0.0 0.0 106120 1184 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28173 0.0 0.0 106120 1188 ? Ss 00:56 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 28181 0.0 0.0 106120 1180 ? Ss 00:56 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 28182 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 28183 0.0 0.0 4352 588 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/po0:56 0:00 /usr/local/cpanel/bin/setupvirtfs 523 1037 26715 0.0 0.0 185756 816 ? S Apr17 0:00 /usr/bin/php root 26733 0.0 0.0 44956 7340 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 loppelco 26734 0.0 0.0 187200 11508 ? S Apr17 0:00 /usr/bin/php root 26735 0.0 0.0 44956 7208 ? D 00:56 0:00 /usr/local/cpanel/bin/setupvirtfs 592 mailnull 26736 0.0 0.0 74880 1344 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 1125 26765 0.0 0.0 136464 3940 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 139936 3408 ? D 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 26802 0.0 0.0 114060 8160 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 416 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 300 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth root 28048 0.0 0.0 106124 840 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh root 28049 0.0 0.0 106124 832 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh mailnull 28058 0.0 0.0 74876 1308 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 28105 0.0 0.0 114060 8184 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28106 0.0 0.0 114208 8468 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28133 0.0 0.0 114060 8520 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 114060 8276 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28135 0.0 0.0 114060 8252 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28136 0.0 0.0 114060 8248 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28145 0.0 0.0 114060 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28146 0.0 0.0 114060 7676 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28147 0.0 0.0 114060 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28148 0.0 0.0 114060 7668 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28149 0.0 0.0 114060 7684 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28150 0.0 0.0 106120 1188 ? Ss 00:56 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 28162 0.0 0.0 106120 1192 ? Ss 00:56 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 28166 0.0 0.0 106120 1184 ? Ss 00:56 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 28169 0.0 0.0 106120 1188 ? Ss 00:56 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 28172 0.0 0.0 106120 1184 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28173 0.0 0.0 106120 1188 ? Ss 00:56 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 28181 0.0 0.0 106120 1180 ? Ss 00:56 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 28182 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 28183 0.0 0.0 4352 588 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4356 588 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28187 0.0 0.0 4352 600 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 28188 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28189 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 28190 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 28191 0.0 0.0 4352 580 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28194 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 28195 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4356 584 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] nobody 28782 0.0 0.0 115624 8268 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29230 0.2 0.0 130232 4304 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 29231 0.0 0.0 106124 1388 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29236 0.0 0.0 139936 3392 ? D 00:56 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 29237 0.0 0.0 106124 1356 ? S 00:56 0:00 /bin/bash /bin/monitora-load.sh root 29240 0.0 0.0 106120 1412 ? S 00:56 0:00 /bin/bash /bin/malv-block.sh root 29282 0.0 0.0 106120 1376 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh nobody 29380 0.0 0.0 114196 7828 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 29387 0.0 0.0 106120 1328 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh nobody 29576 0.0 0.0 114332 7632 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] mailnull 29882 0.0 0.0 74248 2232 ? S 00:51 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 29946 0.0 0.0 114060 7712 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 29958 0.0 0.0 114060 7712 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start icowebra 30070 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114208 9056 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851saufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4356 588 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28187 0.0 0.0 4352 600 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 28188 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28189 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 28190 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 28191 0.0 0.0 4352 580 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28194 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 28195 0.0 0.0 4352 604 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4356 584 ? Ss 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] nobody 28782 0.0 0.0 115624 8268 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29230 0.2 0.0 130232 4304 ? S 00:56 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 29231 0.0 0.0 106124 1388 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29236 0.0 0.0 139936 3392 ? D 00:56 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 29237 0.0 0.0 106124 1356 ? S 00:56 0:00 /bin/bash /bin/monitora-load.sh root 29240 0.0 0.0 106120 1412 ? S 00:56 0:00 /bin/bash /bin/malv-block.sh root 29282 0.0 0.0 106120 1376 ? S 00:56 0:00 /bin/bash /bin/brut-filtro.sh nobody 29380 0.0 0.0 114196 7828 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 29387 0.0 0.0 106120 1328 ? S 00:56 0:00 /bin/bash /bin/malv2-block.sh nobody 29576 0.0 0.0 114332 7632 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] mailnull 29882 0.0 0.0 74248 2232 ? S 00:51 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 29946 0.0 0.0 114060 7712 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 29958 0.0 0.0 114060 7712 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start icowebra 30070 0.0 0.0 192900 560 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114208 9056 ? D 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.0 90752 19376 ? Ds Apr16 6:14 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2304 ? S 00:49 0:00 /usr/bin/php nobody 32182 0.0 0.0 115728 9676 ? S 00:47 0:00 /usr/local/apache/bin/httpd -k start root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] 0.3 0.0 90752 19376 ? Ds Apr16 6:14 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2304 ? S 00:49 0:00 /usr/bin/php nobody 32182 0.0 0.0 115728 9676 ? S 00:47 0:00 /usr/local/apache/bin/httpd -k start root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 524 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:25 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:42 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 mailnull 1910 0.0 0.0 74004 1316 ? S 00:57 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 1937 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/9:0] 1125 1950 0.0 0.0 9460 1120 ? S 00:57 0:00 /bin/sh php.cgi 1125 1951 0.0 0.0 9456 1108 ? S 00:57 0:00 /bin/sh php.cgi 1125 1952 0.0 0.0 9456 1112 ? S 00:57 0:00 /bin/sh php.cgi 1125 1953 0.0 0.0 9456 1120 ? S 00:57 0:00 /bin/sh php.cgi 1125 1960 0.1 0.0 140180 13892 ? D 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1961 0.0 0.0 140176 13888 ? D 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1962 0.0 0.0 140180 13892 ? D 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1963 0.0 0.0 140176 13892 ? D 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi root 1970 0.0 0.0 106124 412 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 700 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 400 ? S Apr16 0:01 dovecot/anvil nobody 2026 0.0 0.0 133436 5756 ? D 00:57 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 41.188.67.67 1125 2038 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2042 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2044 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 2057 0.0 0.0 106120 1188 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 2058 0.2 0.0 288048 20548 ? S 00:57 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 2060 0.0 0.0 106124 1188 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2066 0.0 0.0 282324 14188 ? D 00:57 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2067 0.1 0.0 282328 14360 ? D 00:57 0:00 php /home/posaufacom/public_html/postador/cron/misc.php evsinfo 2087 0.1 0.0 185952 16880 ? D 00:57 0:00 /usr/bin/php evsinfo 2089 0.1 0.0 186252 16908 ? D 00:57 0:00 /usr/bin/php 879 2096 0.2 0.0 185920 16896 ? D 00:57 0:00 /usr/bin/php root 2097 0.0 0.0 106124 388 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2098 0.0 0.0 100988 576 ? D 00:57 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt root 2099 0.0 0.0 103360 852 ? S 00:57 0:00 grep 104.130.11.193 879 2100 0.2 0.0 185920 16908 ? D 00:57 0:00 /usr/bin/php 879 2107 0.2 0.0 185924 16900 ? D 00:57 0:00 /usr/bin/php 879 2108 0.2 0.0 185924 16896 ? D 00:57 0:00 /usr/bin/php 879 2112 0.2 0.0 185924 16900 ? D 00:57 0:00 /usr/bin/php kadufern 2116 0.1 0.0 185476 14200 ? D 00:58 0:00 /usr/bin/php 881 2117 0.2 0.0 185612 15500 ? D 00:58 0:00 /usr/bin/php 1125 2118 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2119 0.0 0.0 106120 1148 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 2120 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2121 0.0 0.0 106120 1152 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2122 0.1 0.0 282324 14188 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 2123 0.1 0.0 282324 14192 ? D 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 2127 0.1 0.0 194448 19404 ? D 00:58 0:00 /usr/bin/php 1125 2128 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 2130 0.0 0.0 106120 1188 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2131 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 2132 0.0 0.0 106120 1192 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2133 0.1 0.0 282328 14360 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 2134 0.1 0.0 282324 14188 ? D 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 2141 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2144 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2145 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2146 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2147 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2148 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2150 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2156 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2163 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2164 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2165 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2166 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2167 0.0 0.0 142436 1460 ? S 00:58 0:00 CROND root 2168 0.0 0.0 142436 1536 ? S 00:58 0:00 CROND root 2170 0.0 0.0 142440 1460 ? S 00:58 0:00 CROND diadiapr 2176 0.2 0.0 185896 16380 ? D 00:58 0:00 /usr/bin/php 861 2177 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2178 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2179 0.0 0.0 106120 1180 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2180 0.0 0.0 106120 1148 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2181 0.1 0.0 282324 14204 ? D 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2182 0.0 0.0 136464 4464 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2191 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2192 0.0 0.0 106120 1188 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2193 0.1 0.0 282324 14196 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php guiame 2194 0.1 0.0 185484 13896 ? D 00:58 0:00 /usr/bin/php 1125 2200 0.0 0.0 9456 1116 ? S 00:58 0:00 /bin/sh php.cgi 1125 2201 0.0 0.0 140180 13892 ? D 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi guiame 2202 0.1 0.0 185484 13896 ? D 00:58 0:00 /usr/bin/php root 2203 0.0 0.0 106124 388 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2204 0.0 0.0 100992 580 ? D 00:58 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt root 2205 0.0 0.0 103360 852 ? S 00:58 0:00 grep 104.168.170.128 root 2206 0.0 0.0 106124 392 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2207 0.0 0.0 100992 560 ? D 00:58 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt root 2208 0.0 0.0 103360 852 ? S 00:58 0:00 grep 104.168.170.128 root 2216 0.0 0.0 4612 952 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2287] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2218 0.0 0.0 106120 1180 ? Ss 00:58 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 2223 0.0 0.0 4612 948 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2514] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2225 0.0 0.0 106120 1196 ? Ss 00:58 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 2226 0.0 0.0 4612 952 ? Ss 00:58 0:00 jailshell (recordho) [2300] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2227 0.0 0.0 4612 936 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2266] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2229 0.0 0.0 106124 1192 ? Ss 00:58 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 2232 0.0 0.0 4612 952 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2347] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2235 0.0 0.0 4612 936 ? Ss 00:58 0:00 jailshell (posaufacom) [2379] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2236 0.0 0.0 106120 1192 ? Ss 00:58 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2237 0.1 0.0 4612 956 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2378] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2238 0.0 0.0 106124 1356 ? S 00:58 0:00 /bin/bash /bin/monitora-load.sh root 2242 0.0 0.0 4612 948 ? Ss 00:58 0:00 jailshell (posaufacom) [2349] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2245 0.0 0.0 4616 936 ? Ss 00:58 0:00 jailshell (posaufacom) [2298] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2249 0.1 0.0 4612 936 ? Ss 00:58 0:00 jailshell (posaufacom) [5904] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 2254 0.0 0.0 132376 4420 ? D 00:58 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 881 2262 0.2 0.0 186176 16572 ? D 00:58 0:00 /usr/bin/php 1125 2266 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2267 0.0 0.0 106120 1192 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2268 0.1 0.0 282324 14192 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 881 2269 0.3 0.0 186444 16596 ? D 00:58 0:00 /usr/bin/php root 2275 0.0 0.0 106124 1388 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 2276 0.1 0.0 282328 14008 ? S 00:58 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php 1125 2287 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 nobody 2294 0.0 0.0 114508 9420 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start root 2297 0.0 0.0 144420 1824 ? D 00:58 0:00 mail -s LOAD ALTO admin@conectadohost.com.br 861 2298 0.0 0.0 4616 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 nobody 2299 0.0 0.0 115520 10244 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start recordho 2300 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2310 0.0 0.0 142436 792 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 800 ? S 00:52 0:00 CROND 861 2323 0.0 0.0 106120 1172 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2324 0.0 0.0 106120 1164 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 recordho 2327 0.3 0.0 288048 20552 ? S 00:58 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2330 0.0 0.0 142436 792 ? S 00:52 0:00 CROND 861 2332 0.1 0.0 282324 14352 ? D 00:58 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2333 0.1 0.0 282324 14352 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 2336 0.0 0.0 142440 968 ? S 00:52 0:00 CROND 881 2337 0.2 0.0 186444 16576 ? D 00:58 0:00 /usr/bin/php 1125 2347 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 2348 0.0 0.0 106120 1184 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2349 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2350 0.0 0.0 106120 1172 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 2351 0.0 0.0 114500 8948 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2352 0.0 0.0 115532 10424 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2354 0.0 0.0 282324 14188 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2355 0.1 0.0 283392 16004 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php nossojor 2356 0.1 0.0 185480 13648 ? D 00:58 0:00 /usr/bin/php nobody 2358 0.0 0.0 115712 10564 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2359 0.0 0.0 114340 10392 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2378 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2379 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2380 0.0 0.0 106120 1152 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2381 0.0 0.0 106120 1160 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 2382 0.0 0.0 282328 14196 ? D 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2383 0.0 0.0 136464 4460 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2386 0.0 0.0 9456 1116 ? S 00:58 0:00 /bin/sh php.cgi 1125 2387 0.0 0.0 140180 13892 ? D 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2431 0.0 0.0 106124 516 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 788 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2449 0.0 0.0 4612 788 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2452 0.0 0.0 4612 788 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114328 8616 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2456 0.0 0.0 114484 9104 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2487 0.0 0.0 106124 756 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2501 0.0 0.0 114192 8816 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114192 8124 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2504 0.0 0.0 115528 10344 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114216 9176 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2506 0.0 0.0 114328 8592 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2514 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2515 0.0 0.0 106120 1188 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2520 0.1 0.0 282324 14200 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php root 2565 0.0 0.0 142436 880 ? S 00:53 0:00 CROND nobody 2603 0.0 0.0 114196 8744 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2632 0.0 0.0 106124 720 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 45.9 92.9 74966496 61327188 ? D 00:35 10:27 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114192 8112 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 404 ? S 00:34 0:00 CROND root 3059 0.2 0.0 252468 1560 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3112 0.0 0.0 114192 8632 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3113 0.0 0.0 114328 8796 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3114 0.0 0.0 114196 8104 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3115 0.0 0.0 114192 8100 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 1.3 0.0 274064 16892 ? S 00:49 0:06 /usr/bin/php root 3269 0.0 0.0 106124 452 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh dovenull 3299 0.0 0.0 42760 464 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 408 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 492 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 732 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1804 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 352 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 1000 ? S 00:45 0:00 dovecot/auth nobody 3514 0.0 0.0 114324 8644 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3723 0.0 0.0 114328 10844 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3739 0.0 0.0 114192 8520 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] root 4198 0.0 0.0 106124 600 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh metalma 4212 0.0 0.0 186284 1136 ? S 00:47 0:00 /usr/bin/php maisg647 4263 0.1 0.0 240260 18172 ? D 00:47 0:00 /usr/bin/php root 4333 0.0 0.0 106124 388 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 4336 0.0 0.0 100992 580 ? D 00:58 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt root 4338 0.0 0.0 103360 852 ? S 00:58 0:00 grep 104.130.11.193 root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4680 0.0 0.0 114192 8508 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4722 0.0 0.0 106120 620 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 660 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 8068 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.7 0.0 234216 18752 ? S 00:45 0:05 /usr/bin/php conhecsc 4812 7.9 0.0 187440 5256 ? S 00:45 1:00 /usr/bin/php progress 4846 0.5 0.0 268336 20148 ? S 00:45 0:03 /usr/bin/php nobody 4860 0.0 0.0 116072 9636 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4865 0.0 0.0 236324 16876 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5091 0.0 0.0 116112 8676 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] 867 5545 0.2 0.0 185780 15236 ? D 00:58 0:00 /usr/bin/php nobody 5674 0.0 0.0 112412 720 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6824 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6824 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6824 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 492 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] 861 5904 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5906 0.0 0.0 106120 1192 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5911 0.1 0.0 282324 14188 ? D 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 5946 0.0 0.0 106124 760 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh icowebra 6242 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 380 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4752 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 180436 ? Dl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php nobody 6937 0.0 0.0 114196 8880 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 992 7038 0.0 0.0 184964 492 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 756 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] nobody 7575 0.0 0.0 114196 8748 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7360 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114192 8608 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 8274 0.0 0.0 142436 932 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 940 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114356 11844 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114520 11612 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8510 0.0 0.0 115520 11420 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8812 0.0 0.0 114324 8668 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8839 0.0 0.0 114324 8428 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114328 9256 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9840 0.0 0.0 114332 10048 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114192 8004 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9842 0.0 0.0 115672 10616 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9843 0.0 0.0 114216 8864 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 10093 0.0 0.0 114192 8980 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 584 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10695 0.0 0.0 4612 868 ? Ss 00:54 0:00 jailshell (inovesocialcom) [22587] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10851 0.0 0.0 106124 764 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10926 0.0 0.0 4640 236 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 336 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 2000 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd postgres 11213 0.0 0.0 215388 732 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 220 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 576 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 800 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11363 0.1 0.0 169980 10912 ? Ds 00:00 0:06 lfd - scanning log files nobody 11441 0.0 0.0 114060 9260 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11587 0.0 0.0 106124 772 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] diadiapr 11666 0.2 0.0 185900 16376 ? D 00:58 0:00 /usr/bin/php loppelco 11669 0.2 0.0 186780 16608 ? D 00:58 0:00 /usr/bin/php root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 612 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 196 ? Ss Apr16 0:00 /usr/sbin/atd root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] loppelco 11805 0.5 0.0 186496 21828 ? S 00:58 0:00 /usr/bin/php nobody 11834 0.0 0.0 115520 9512 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114192 8192 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114192 8532 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11843 0.0 0.0 114192 8860 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11845 0.0 0.0 114324 8604 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start loppelco 12091 0.8 0.0 186452 21668 ? S 00:58 0:00 /usr/bin/php root 12560 0.0 0.0 4108 232 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 236 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 232 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 236 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 232 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 232 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 loppelco 12827 1.0 0.0 186588 22128 ? S 00:58 0:00 /usr/bin/php mailnull 12834 0.3 0.0 71028 3424 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12835 0.3 0.0 71032 3424 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12873 0.0 0.0 106124 396 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12874 0.0 0.0 100992 580 ? D 00:58 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt root 12875 0.0 0.0 103360 852 ? S 00:58 0:00 grep 104.168.170.128 root 12912 0.0 0.0 106120 1324 ? S 00:58 0:00 /bin/bash /bin/iptbloqueando-ddos.sh mailnull 12934 0.0 0.0 74020 1560 ? S 00:58 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid rmaiasa 12977 0.2 0.0 185480 13644 ? D 00:58 0:00 /usr/bin/php loppelco 12981 0.8 0.0 186456 21668 ? S 00:58 0:00 /usr/bin/php loppelco 12985 0.0 0.0 139932 2732 ? D 00:58 0:00 /usr/bin/php root 12992 0.0 0.0 130232 2660 ? S 00:58 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12993 0.0 0.0 130232 2664 ? S 00:58 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12994 0.0 0.0 25240 2004 ? S 00:58 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/check.pl root 12995 0.0 0.0 130232 2664 ? S 00:58 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12996 0.0 0.0 25240 2044 ? S 00:58 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/hddinfo.pl root 12997 0.0 0.0 0 0 ? Z 00:58 0:00 [rtm] root 12998 0.0 0.0 25500 2280 ? D 00:58 0:00 /usr/bin/perl /usr/local/rtm/scripts/min/usage-root.pl loppelco 13000 0.0 0.0 13368 4 ? D 00:58 0:00 /usr/bin/php nobody 13003 0.0 0.0 9456 1316 ? S 00:58 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.2 root 13011 0.0 0.0 106120 1296 ? S 00:58 0:00 /bin/bash /bin/iptbloqueando-ddos2.sh root 13013 0.0 0.0 9244 1092 ? S 00:58 0:00 sh -c dmesg | grep -i "allocation failed" root 13014 0.0 0.0 18796 280 ? D 00:58 0:00 ls /proc/ide loppelco 13016 0.0 0.0 13368 176 ? D 00:58 0:00 /usr/bin/php loppelco 13020 0.0 0.0 13368 176 ? D 00:58 0:00 /usr/bin/php root 13021 0.0 0.0 3776 4 ? D 00:58 0:00 [dovecot-auth] root 13023 0.0 0.0 4104 524 ? S 00:58 0:00 dmesg root 13025 0.0 0.0 2720 152 ? D 00:58 0:00 grep -i allocation failed nobody 13031 0.0 0.0 2724 152 ? D 00:58 0:00 grep ^10.71.192.2 /usr/share/ilabs_antimalware/firewall/ipdeny.txt nobody 13033 0.0 0.0 9456 1316 ? S 00:58 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 164.132.161.85 root 13034 0.0 0.0 1408 4 ? D 00:58 0:00 [exim] root 13035 0.0 0.0 108344 1180 ? R 00:58 0:00 ps aux mailnull 13036 0.0 0.0 74876 1312 ? S 00:58 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 13038 0.0 0.0 106120 180 ? D 00:58 0:00 /bin/bash /bin/iptbloqueando-ddos2.sh nobody 13203 0.0 0.0 114324 8672 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13220 0.0 0.0 142436 896 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142436 896 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142440 1040 ? S 00:55 0:00 CROND root 13278 0.0 0.0 142440 1036 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142440 1040 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142440 1040 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142440 1036 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142440 1036 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142440 1032 ? S 00:55 0:00 CROND root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] root 13645 0.0 0.0 114060 8672 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 284 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3492 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 89840 6016 ? Ds Apr16 0:23 dnsadmin - server mode nobody 15746 0.0 0.0 114196 9176 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 15948 0.0 0.0 114196 9324 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailman 16010 0.0 0.0 120748 1328 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1020 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1220 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1008 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1008 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1024 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1072 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 1000 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 704 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1004 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 2200 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 conhecsc 17197 0.0 0.0 191140 13044 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] nobody 18020 0.0 0.0 114192 9228 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start noticias 18706 0.0 0.0 205684 16876 ? S 00:46 0:00 /usr/bin/php root 19132 1.2 0.0 240980 6620 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream root 19138 0.0 0.0 88412 7600 ? D 00:50 0:00 dnsadmin - waiting for request on connected socket 882 19151 0.1 0.0 243772 6704 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 6.6 0.0 23760 8808 ? S 00:50 0:29 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 6044 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.3 0.0 249740 16880 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8440 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.1 0.0 234712 16876 ? S 00:48 0:00 /usr/bin/php nobody 20150 0.0 0.0 114344 10908 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 114192 8720 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 992 20178 0.0 0.0 187384 7760 ? S 00:46 0:00 /usr/bin/php root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] nobody 20222 0.0 0.0 114192 8476 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20232 0.0 0.0 114192 8900 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.1 0.0 265704 16872 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114324 8708 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20491 0.0 0.0 114324 8628 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (posaufacom) [22997] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (posaufacom) [22984] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4612 880 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22986] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22900] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20497 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (posaufacom) [22965] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22996] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (inovesocialcom) [23010] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4612 880 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22967] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 868 ? Ss 00:55 0:00 jailshell (posaufacom) [22630] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20521 0.0 0.0 4616 868 ? Ss 00:55 0:00 jailshell (recordho) [22619] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 20524 0.0 0.0 114328 10872 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20528 0.0 0.0 106120 604 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4612 876 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22899] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20535 0.0 0.0 4612 848 ? Ss 00:55 0:00 jailshell (centralc) [22646] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 20536 0.0 0.0 4612 880 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22895] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4616 880 ? Ss 00:55 0:00 jailshell (centralgib) [22883] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 852 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22636] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 848 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22641] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20542 0.0 0.0 4612 876 ? Ss 00:55 0:00 jailshell (centralc) [22897] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20546 0.0 0.0 4612 852 ? Ss 00:55 0:00 jailshell (centralgib) [22657] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 20581 0.0 0.0 38568 8588 ? DN 00:55 0:00 cpanellogd - sleeping for logs regis 20754 0.0 0.0 186880 6540 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 8824 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.0 0.0 263164 16876 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 21237 0.0 0.0 106124 760 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21514 0.0 0.0 114192 8760 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22183 0.0 0.0 170684 11236 ? D 00:56 0:00 lfd - checking directories root 22296 0.0 0.0 106124 472 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22377 0.0 0.0 114196 9272 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] 1125 22587 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22610 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 22615 0.0 0.0 114200 8740 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 22619 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 22623 0.0 0.0 288180 16296 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 22629 0.0 0.0 136464 3600 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 22630 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22631 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22633 0.0 0.0 283392 11740 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1120 22636 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 22637 0.0 0.0 287692 15972 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 22641 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 699 22642 0.0 0.0 288180 16316 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations centralc 22646 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php centralc 22650 0.0 0.0 287560 15808 ? S 00:56 0:00 php -q /home/centralc/public_html/pipe/pipe.php root 22651 0.0 0.0 142436 928 ? S 00:56 0:00 CROND nobody 22653 0.0 0.0 114216 8892 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22654 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 928 ? S 00:56 0:00 CROND 1077 22657 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22658 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 928 ? S 00:56 0:00 CROND 1077 22661 0.0 0.0 238100 10988 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22670 0.0 0.0 142436 936 ? S 00:56 0:00 CROND nobody 22674 0.0 0.0 114192 9424 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22678 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142440 1052 ? S 00:56 0:00 CROND nobody 22688 0.0 0.0 115532 10752 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22689 0.0 0.0 114192 8736 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22690 0.0 0.0 114192 8744 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22691 0.0 0.0 114192 8760 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22704 0.0 0.0 114196 9468 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] nobody 22869 0.0 0.0 114464 9612 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 1077 22883 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 22884 0.0 0.0 238760 11728 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 22886 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 recordho 22890 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 22894 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 699 22895 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 861 22896 0.0 0.0 283528 11984 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php centralc 22897 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22899 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22900 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 recordho 22907 0.0 0.0 288180 16296 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 699 22909 0.0 0.0 287692 15976 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 22911 0.0 0.0 288180 16384 ? S 00:56 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22912 0.0 0.0 288180 16316 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22913 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22915 0.0 0.0 283524 12008 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22939 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22940 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 22941 0.0 0.0 106120 592 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22944 0.0 0.0 106120 596 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22947 0.0 0.0 283392 11736 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22948 0.0 0.0 283528 11924 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1086 22951 0.0 0.0 9464 604 ? S 00:56 0:00 /bin/sh php.cgi 1086 22952 0.0 0.0 9460 596 ? S 00:56 0:00 /bin/sh php.cgi 1125 22954 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22955 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22956 0.0 0.0 283524 12148 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 22960 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22961 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22962 0.0 0.0 283528 12148 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 22965 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22966 0.0 0.0 106120 604 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 22967 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22968 0.0 0.0 106120 588 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22969 0.0 0.0 283524 12008 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22970 0.0 0.0 283528 12000 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 22975 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22976 0.0 0.0 106124 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22977 0.0 0.0 283524 12008 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22979 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22980 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22981 0.0 0.0 283528 12000 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 22984 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22985 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 22986 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 22987 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 22988 0.0 0.0 283388 11888 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 22989 0.0 0.0 283524 12016 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 22991 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22992 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22993 0.0 0.0 136464 3396 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 22996 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22997 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 22998 0.0 0.0 106120 588 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22999 0.0 0.0 106120 592 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 23000 0.0 0.0 283524 11968 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 23001 0.0 0.0 283524 12152 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 23005 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23006 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23007 0.0 0.0 283524 12008 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 952 23008 0.0 0.0 140960 12860 ? D 00:56 0:00 php.cgi 1125 23010 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23011 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23012 0.0 0.0 136464 3492 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1086 23024 0.0 0.0 141236 12996 ? D 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi 1086 23025 0.0 0.0 141232 12988 ? D 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23092 0.0 0.0 142436 1136 ? S 00:57 0:00 CROND root 23093 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23094 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23095 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23096 0.0 0.0 142436 1136 ? S 00:57 0:00 CROND root 23098 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23104 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23112 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23113 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23114 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23115 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23118 0.0 0.0 142440 1132 ? S 00:57 0:00 CROND pdvxyz 23169 0.0 0.0 184960 9484 ? S 00:57 0:00 /usr/bin/php conect 23178 0.0 0.0 184964 9608 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 184960 9604 ? S 00:57 0:00 /usr/bin/php conect 23186 0.0 0.0 184964 9600 ? S 00:57 0:00 /usr/bin/php conect 23187 0.0 0.0 184960 9608 ? S 00:57 0:00 /usr/bin/php conect 23188 0.0 0.0 184960 9608 ? S 00:57 0:00 /usr/bin/php conect 23189 0.0 0.0 184960 9592 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 184960 9484 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 9484 ? S 00:57 0:00 /usr/bin/php conect 23195 0.0 0.0 184964 9604 ? S 00:57 0:00 /usr/bin/php 879 23199 0.1 0.0 187048 15460 ? D 00:57 0:00 /usr/bin/php conect 23200 0.0 0.0 184964 9600 ? S 00:57 0:00 /usr/bin/php conect 23201 0.0 0.0 184960 9604 ? S 00:57 0:00 /usr/bin/php conect 23203 0.0 0.0 184960 9600 ? S 00:57 0:00 /usr/bin/php conect 23204 0.0 0.0 184964 9604 ? S 00:57 0:00 /usr/bin/php 879 23208 0.2 0.0 187024 13292 ? S 00:57 0:00 /usr/bin/php 879 23210 0.1 0.0 187048 15456 ? D 00:57 0:00 /usr/bin/php root 23227 0.0 0.0 4612 892 ? Ss 00:57 0:00 jailshell (posaufacom) [2042] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 23228 0.0 0.0 106124 736 ? Ss 00:57 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 23231 0.0 0.0 4612 892 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2038] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 23235 0.0 0.0 106120 740 ? Ss 00:57 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 23239 0.0 0.0 4612 928 ? Ss 00:57 0:00 jailshell (posaufacom) [2177] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 23245 0.0 0.0 4612 896 ? Ss 00:57 0:00 jailshell (recordho) [2044] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 23250 0.0 0.0 4612 924 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2178] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 23252 0.0 0.0 4612 920 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2118] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 23253 0.0 0.0 4612 924 ? Ss 00:57 0:00 jailshell (posaufacom) [2120] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 23254 0.0 0.0 4612 924 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2191] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 23255 0.0 0.0 4612 928 ? Ss 00:57 0:00 jailshell (posaufacom) [2131] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 23257 0.0 0.0 4612 928 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2128] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 23258 0.0 0.0 106124 896 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 23259 0.0 0.0 106124 1016 ? S 00:57 0:00 /bin/bash /bin/monitora-load.sh mailnull 23284 0.0 0.0 71032 3100 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23286 0.0 0.0 71032 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23287 0.0 0.0 71028 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] mailnull 23295 0.0 0.0 71036 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23296 0.0 0.0 71028 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23297 0.0 0.0 71032 3100 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23298 0.0 0.0 71036 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23299 0.0 0.0 71036 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23300 0.0 0.0 71028 3100 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23303 0.0 0.0 170112 11276 ? S 00:57 0:00 lfd - (child) blocking 177.133.74.217 root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] nobody 23364 0.0 0.0 114192 8796 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start root 23404 0.0 0.0 106124 540 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 23656 0.0 0.0 115520 10128 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 748664 7948 ? Ssl Apr17 0:39 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25628 0.1 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 596 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 26436 0.0 0.0 114324 8572 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start maisg647 26560 0.0 0.0 241460 16888 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 16876 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 16112 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7584 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1612 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114196 9064 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 26646 0.0 0.0 74248 4128 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid recordho 26670 0.0 0.0 288180 16288 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 588 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 992 26701 0.0 0.0 187676 8920 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 780 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11472 ? S Apr17 0:00 /usr/bin/php 1125 26765 0.0 0.0 136464 3576 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 283524 12004 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 408 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 300 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 28133 0.0 0.0 114192 9400 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 114196 9400 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28172 0.0 0.0 106120 620 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28183 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (posaufacom) [22939] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4616 884 ? Ss 00:56 0:00 jailshell (recordho) [22890] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (posaufacom) [22960] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4612 880 ? Ss 00:56 0:00 jailshell (posaufacom) [22979] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28188 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (posaufacom) [22886] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28191 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (inovesocialcom) [23005] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22975] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4612 888 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22954] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28195 0.0 0.0 4612 888 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22991] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4616 884 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22940] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] 861 28782 0.0 0.0 141756 12444 ? S 00:56 0:00 php.cgi root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29231 0.0 0.0 106124 768 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] icowebra 30070 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114344 10844 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.0 176880 56288 ? Ds Apr16 6:15 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2268 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 524 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:25 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:43 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S radiosat 1539 0.0 0.0 0 0 ? Z 00:57 0:00 [php] 881 1541 0.1 0.0 185932 18068 ? D 00:57 0:00 /usr/bin/php suzantol 1543 0.1 0.0 185956 16628 ? D 00:57 0:00 /usr/bin/php jornaloa 1555 0.1 0.0 185644 16440 ? D 00:57 0:00 /usr/bin/php jornaloa 1558 0.0 0.0 185644 16436 ? D 00:57 0:00 /usr/bin/php loppelco 1560 0.1 0.0 186772 17868 ? D 00:57 0:00 /usr/bin/php loppelco 1565 0.1 0.0 186772 17868 ? D 00:57 0:00 /usr/bin/php loppelco 1568 0.0 0.0 186772 17872 ? D 00:57 0:00 /usr/bin/php loppelco 1569 0.1 0.0 186772 17868 ? D 00:57 0:00 /usr/bin/php nobody 1570 0.0 0.0 114192 8932 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start nobody 1571 0.0 0.0 114192 8952 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start loppelco 1573 0.1 0.0 186772 17864 ? D 00:57 0:00 /usr/bin/php loppelco 1574 0.1 0.0 186772 17868 ? D 00:57 0:00 /usr/bin/php loppelco 1575 0.1 0.0 186768 17864 ? D 00:57 0:00 /usr/bin/php nobody 1577 0.0 0.0 114192 8972 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start nobody 1578 0.0 0.0 114192 8956 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start nobody 1579 0.0 0.0 114196 9124 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start root 1688 0.0 0.0 106124 532 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 1689 0.0 0.0 100988 560 ? D 00:57 0:00 cat /usr/local/cpanel/logs/access_log root 1690 0.0 0.0 106124 532 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 1691 0.0 0.0 103360 852 ? S 00:57 0:00 grep 104.130.11.193 root 1692 0.0 0.0 100988 560 ? D 00:57 0:00 cat /usr/local/cpanel/logs/access_log root 1693 0.0 0.0 103360 844 ? S 00:57 0:00 grep user root 1695 0.0 0.0 103364 852 ? S 00:57 0:00 grep 104.130.11.193 root 1696 0.0 0.0 103360 844 ? S 00:57 0:00 grep user root 1700 0.0 0.0 243372 3444 ? Sl Apr16 0:28 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5 nobody 1728 0.0 0.0 115532 10292 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start nobody 1738 0.0 0.0 145216 8780 ? D 00:57 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 66.249.64.193 root 1742 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/7:1] root 1743 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/5:0] root 1847 0.0 0.0 142436 400 ? S Apr17 0:00 CROND root 1879 0.0 0.0 106120 280 ? Ss Apr17 0:00 /bin/sh -c /bin/backup-de-segunda.sh > /dev/null 2>&1 mailnull 1910 0.0 0.0 74272 4080 ? S 00:57 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 1937 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/9:0] 1125 1950 0.0 0.0 9460 1120 ? S 00:57 0:00 /bin/sh php.cgi 1125 1951 0.0 0.0 9456 1108 ? S 00:57 0:00 /bin/sh php.cgi 1125 1952 0.0 0.0 9456 1112 ? S 00:57 0:00 /bin/sh php.cgi 1125 1953 0.0 0.0 9456 1120 ? S 00:57 0:00 /bin/sh php.cgi 1125 1960 0.1 0.0 142008 16004 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1961 0.1 0.0 142000 16000 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1962 0.1 0.0 142004 16000 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1963 0.1 0.0 142000 15996 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi root 1970 0.0 0.0 106124 412 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 696 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 400 ? S Apr16 0:01 dovecot/anvil nobody 2026 0.0 0.0 145220 8776 ? D 00:57 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 41.188.67.67 1125 2038 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2042 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2044 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 2057 0.0 0.0 106120 1188 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 2058 0.1 0.0 288180 20648 ? S 00:57 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 2060 0.0 0.0 106124 1188 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2066 0.0 0.0 283388 15860 ? S 00:57 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2067 0.0 0.0 283388 16224 ? S 00:57 0:00 php /home/posaufacom/public_html/postador/cron/misc.php evsinfo 2087 0.1 0.0 186208 17944 ? S 00:57 0:00 /usr/bin/php evsinfo 2089 0.1 0.0 186196 17968 ? S 00:57 0:00 /usr/bin/php 879 2096 0.1 0.0 186204 17932 ? S 00:57 0:00 /usr/bin/php 879 2100 0.1 0.0 186204 17944 ? S 00:57 0:00 /usr/bin/php 879 2107 0.1 0.0 186208 17944 ? S 00:57 0:00 /usr/bin/php 879 2108 0.1 0.0 186208 17940 ? S 00:57 0:00 /usr/bin/php 879 2112 0.1 0.0 186208 17940 ? S 00:57 0:00 /usr/bin/php kadufern 2116 0.1 0.0 186152 15460 ? D 00:58 0:00 /usr/bin/php 881 2117 0.1 0.0 185932 18076 ? D 00:58 0:00 /usr/bin/php 1125 2118 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2119 0.0 0.0 106120 1148 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 2120 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2121 0.0 0.0 106120 1152 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2122 0.1 0.0 283388 15860 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 2123 0.1 0.0 283388 15860 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 2127 0.4 0.0 193928 22928 ? S 00:58 0:00 /usr/bin/php 1125 2128 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 2130 0.0 0.0 106120 1188 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2131 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 2132 0.0 0.0 106120 1192 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2133 0.0 0.0 283388 16204 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 2134 0.0 0.0 283388 15860 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 2144 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2145 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2146 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2147 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2148 0.0 0.0 142436 1448 ? S 00:58 0:00 CROND root 2150 0.0 0.0 142436 1444 ? S 00:58 0:00 CROND root 2156 0.0 0.0 142436 1444 ? S 00:58 0:00 CROND root 2164 0.0 0.0 142436 1452 ? S 00:58 0:00 CROND root 2165 0.0 0.0 142436 1452 ? S 00:58 0:00 CROND root 2166 0.0 0.0 142436 1452 ? S 00:58 0:00 CROND root 2167 0.0 0.0 142436 1456 ? S 00:58 0:00 CROND root 2170 0.0 0.0 142440 1456 ? S 00:58 0:00 CROND diadiapr 2176 0.1 0.0 186356 17852 ? D 00:58 0:00 /usr/bin/php 861 2177 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2178 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2179 0.0 0.0 106120 1180 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2180 0.0 0.0 106120 1148 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2181 0.0 0.0 283388 15880 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2182 0.0 0.0 136464 4404 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2191 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2192 0.0 0.0 106120 1188 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2193 0.0 0.0 283388 15872 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php guiame 2194 0.0 0.0 185480 13808 ? S 00:58 0:00 /usr/bin/php 1125 2200 0.0 0.0 9456 1116 ? S 00:58 0:00 /bin/sh php.cgi 1125 2201 0.1 0.0 142004 16000 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi guiame 2202 0.0 0.0 185480 13812 ? S 00:58 0:00 /usr/bin/php root 2216 0.0 0.0 4612 952 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2287] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2218 0.0 0.0 106120 1180 ? Ss 00:58 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 2223 0.0 0.0 4612 948 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2514] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2226 0.0 0.0 4612 952 ? Ss 00:58 0:00 jailshell (recordho) [2300] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2227 0.0 0.0 4612 936 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2266] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2232 0.0 0.0 4612 952 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2347] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2235 0.0 0.0 4612 936 ? Ss 00:58 0:00 jailshell (posaufacom) [2379] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2236 0.0 0.0 106120 1192 ? Ss 00:58 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2237 0.0 0.0 4612 956 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2378] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2238 0.0 0.0 106124 1356 ? S 00:58 0:00 /bin/bash /bin/monitora-load.sh root 2242 0.0 0.0 4612 948 ? Ss 00:58 0:00 jailshell (posaufacom) [2349] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2245 0.0 0.0 4616 936 ? Ss 00:58 0:00 jailshell (posaufacom) [2298] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2249 0.0 0.0 4612 936 ? Ss 00:58 0:00 jailshell (posaufacom) [5904] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 881 2262 0.3 0.0 189272 22212 ? D 00:58 0:00 /usr/bin/php 1125 2266 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2267 0.0 0.0 106120 1192 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2268 0.0 0.0 283388 15864 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 881 2269 0.3 0.0 189276 22216 ? D 00:58 0:00 /usr/bin/php root 2275 0.0 0.0 106124 1388 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1125 2287 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 nobody 2294 0.0 0.0 114508 9416 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start 861 2298 0.0 0.0 4616 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2300 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2310 0.0 0.0 142436 792 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 800 ? S 00:52 0:00 CROND 861 2323 0.0 0.0 106120 1172 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2324 0.0 0.0 106120 1164 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 recordho 2327 0.1 0.0 288180 20644 ? S 00:58 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2330 0.0 0.0 142436 792 ? S 00:52 0:00 CROND 861 2332 0.0 0.0 283388 16000 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2333 0.0 0.0 283388 16004 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 2336 0.0 0.0 142440 964 ? S 00:52 0:00 CROND 881 2337 0.3 0.0 189276 22216 ? D 00:58 0:00 /usr/bin/php 1125 2347 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 2348 0.0 0.0 106120 1184 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2349 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2350 0.0 0.0 106120 1172 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 2351 0.0 0.0 114500 8948 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2352 0.0 0.0 115532 10444 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2354 0.0 0.0 283388 15860 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2355 0.0 0.0 283528 16368 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php nossojor 2356 0.1 0.0 185512 14772 ? D 00:58 0:00 /usr/bin/php nobody 2358 0.0 0.0 115712 10884 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2359 0.0 0.0 114340 10388 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2378 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2379 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2380 0.0 0.0 106120 1152 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2381 0.0 0.0 106120 1160 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 2382 0.0 0.0 283388 15876 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2383 0.0 0.0 136464 4400 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2386 0.0 0.0 9456 1116 ? S 00:58 0:00 /bin/sh php.cgi 1125 2387 0.1 0.0 142004 16004 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2431 0.0 0.0 106124 516 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 788 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2449 0.0 0.0 4612 788 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2452 0.0 0.0 4612 788 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114328 8616 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2456 0.0 0.0 115020 9804 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2487 0.0 0.0 106124 756 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2501 0.0 0.0 114192 9056 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114192 8124 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2504 0.0 0.0 115528 10340 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114216 9172 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2506 0.0 0.0 114328 8592 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2514 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2515 0.0 0.0 106120 1188 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2520 0.0 0.0 283388 15876 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php root 2565 0.0 0.0 142436 880 ? S 00:53 0:00 CROND nobody 2603 0.0 0.0 114196 8744 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2632 0.0 0.0 106124 764 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 45.4 92.8 74966496 61260408 ? D 00:35 10:27 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114192 8112 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 404 ? S 00:34 0:00 CROND root 3059 0.2 0.0 252468 1472 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3112 0.0 0.0 114192 8632 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3113 0.0 0.0 114512 9284 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3114 0.0 0.0 114196 8104 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3115 0.0 0.0 114192 8100 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 1.2 0.0 274064 16892 ? S 00:49 0:06 /usr/bin/php root 3269 0.0 0.0 106124 452 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh dovenull 3299 0.0 0.0 42760 464 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 408 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 492 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 732 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1796 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 352 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 996 ? S 00:45 0:00 dovecot/auth nobody 3514 0.0 0.0 114324 8644 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3723 0.0 0.0 114328 10836 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3739 0.0 0.0 114192 8772 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] root 4198 0.0 0.0 106124 600 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh metalma 4212 0.0 0.0 186284 1136 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4680 0.0 0.0 114192 8736 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4722 0.0 0.0 106120 620 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 660 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 8072 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.6 0.0 234216 18140 ? S 00:45 0:05 /usr/bin/php conhecsc 4812 7.8 0.0 187440 5160 ? S 00:45 1:00 /usr/bin/php progress 4846 0.4 0.0 268336 19116 ? S 00:45 0:03 /usr/bin/php nobody 4860 0.0 0.0 116072 9924 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4865 0.0 0.0 236324 15956 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5091 0.0 0.0 116112 8676 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] 867 5545 0.1 0.0 186288 17836 ? D 00:58 0:00 /usr/bin/php nobody 5674 0.0 0.0 112412 720 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6372 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6628 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6256 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 492 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] 861 5904 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5906 0.0 0.0 106120 1192 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5911 0.1 0.0 283388 15860 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 5946 0.0 0.0 106124 760 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh icowebra 6242 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 380 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4720 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 175628 ? Dl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 496 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php nobody 6937 0.0 0.0 115520 10292 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 992 7038 0.0 0.0 184964 492 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 756 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] nobody 7575 0.0 0.0 114196 8748 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7360 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114192 8852 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 8274 0.0 0.0 142436 932 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 940 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114356 11836 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114520 11604 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8510 0.0 0.0 115520 11416 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8812 0.0 0.0 114324 8668 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8839 0.0 0.0 114324 8428 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114328 9240 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9840 0.0 0.0 114332 10044 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114192 8004 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9842 0.0 0.0 115672 10652 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9843 0.0 0.0 114216 9196 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 584 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10695 0.0 0.0 4612 868 ? Ss 00:54 0:00 jailshell (inovesocialcom) [22587] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10851 0.0 0.0 106124 764 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10926 0.0 0.0 4640 236 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 336 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 2040 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd postgres 11213 0.0 0.0 215388 752 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 220 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 576 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 800 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11363 0.1 0.0 169980 10888 ? Ss 00:00 0:06 lfd - sleeping root 11587 0.0 0.0 106124 772 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] diadiapr 11666 0.1 0.0 186068 17588 ? D 00:58 0:00 /usr/bin/php loppelco 11669 0.1 0.0 186772 17868 ? D 00:58 0:00 /usr/bin/php root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 604 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 196 ? Ss Apr16 0:00 /usr/sbin/atd root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] loppelco 11805 0.2 0.0 186640 21944 ? S 00:58 0:00 /usr/bin/php nobody 11834 0.0 0.0 115520 9512 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114192 8192 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114192 9016 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11843 0.0 0.0 114192 8856 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11845 0.0 0.0 114324 8604 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start loppelco 12091 0.2 0.0 186584 22000 ? S 00:58 0:00 /usr/bin/php root 12560 0.0 0.0 4108 232 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 236 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 232 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 236 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 232 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 232 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 loppelco 12827 0.2 0.0 186588 21984 ? S 00:58 0:00 /usr/bin/php mailnull 12834 0.0 0.0 71028 3416 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12835 0.0 0.0 71032 3416 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12934 0.0 0.0 74020 1560 ? S 00:58 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid rmaiasa 12977 0.1 0.0 185624 16712 ? D 00:58 0:00 /usr/bin/php loppelco 12981 0.2 0.0 186588 21784 ? S 00:58 0:00 /usr/bin/php loppelco 12985 0.1 0.0 186772 17864 ? D 00:58 0:00 /usr/bin/php loppelco 13000 0.2 0.0 186768 17864 ? D 00:58 0:00 /usr/bin/php loppelco 13016 0.2 0.0 186772 17872 ? D 00:58 0:00 /usr/bin/php loppelco 13020 0.2 0.0 186080 20820 ? D 00:58 0:00 /usr/bin/php loppelco 13058 0.3 0.0 186772 17872 ? D 00:58 0:00 /usr/bin/php loppelco 13067 0.3 0.0 186084 20820 ? D 00:58 0:00 /usr/bin/php loppelco 13076 0.3 0.0 186772 17864 ? D 00:58 0:00 /usr/bin/php loppelco 13082 0.3 0.0 186772 17872 ? D 00:58 0:00 /usr/bin/php loppelco 13083 0.3 0.0 186772 17868 ? D 00:58 0:00 /usr/bin/php loppelco 13087 0.3 0.0 186772 17872 ? D 00:58 0:00 /usr/bin/php loppelco 13098 0.7 0.0 186080 20816 ? D 00:58 0:00 /usr/bin/php loppelco 13100 0.3 0.0 186016 18880 ? D 00:58 0:00 /usr/bin/php root 13101 0.0 0.0 106124 536 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13102 0.0 0.0 106124 532 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13103 0.0 0.0 106124 532 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13104 0.0 0.0 106124 532 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13105 0.0 0.0 106124 528 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13106 0.1 0.0 100988 572 ? D 00:58 0:00 cat /var/log/messages root 13107 0.0 0.0 100988 572 ? D 00:58 0:00 cat /var/log/messages root 13108 0.0 0.0 100988 568 ? D 00:58 0:00 cat /var/log/messages root 13109 0.1 0.0 100988 556 ? D 00:58 0:00 cat /var/log/messages root 13110 0.1 0.0 100988 552 ? D 00:58 0:00 cat /var/log/messages root 13111 0.1 0.0 103360 852 ? S 00:58 0:00 grep 104.168.170.128 root 13112 0.1 0.0 103360 852 ? S 00:58 0:00 grep 104.130.11.193 root 13113 0.1 0.0 103360 852 ? S 00:58 0:00 grep 104.168.170.128 root 13114 0.1 0.0 103360 852 ? S 00:58 0:00 grep 104.130.11.193 root 13115 0.1 0.0 103360 852 ? S 00:58 0:00 grep 104.168.170.128 root 13116 0.0 0.0 103360 844 ? S 00:58 0:00 grep user root 13117 0.0 0.0 103360 840 ? S 00:58 0:00 grep user root 13118 0.0 0.0 103360 840 ? S 00:58 0:00 grep user root 13119 0.0 0.0 103360 844 ? S 00:58 0:00 grep user root 13120 0.0 0.0 103360 844 ? S 00:58 0:00 grep user 992 13149 0.0 0.0 70416 540 ? D 00:58 0:00 /usr/bin/php root 13153 0.0 0.0 174892 15056 ? D 00:58 0:00 lfd - (child) Stats Report... mailnull 13154 0.0 0.0 74876 1308 ? S 00:58 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid diadiapr 13156 0.0 0.0 70416 540 ? D 00:58 0:00 /usr/bin/php root 13157 0.0 0.0 33232 364 ? D 00:58 0:00 /usr/sbin/sendmail -f root -t root 13161 0.0 0.0 33236 368 ? D 00:58 0:00 send-mail -i -- admin@conectadohost.com.br root 13162 0.3 0.0 108348 1184 ? R 00:58 0:00 ps aux root 13163 0.0 0.0 169980 12584 ? D 00:58 0:00 lfd - (child) closing root 13164 0.0 0.0 169980 12564 ? D 00:58 0:00 lfd - (child) closing root 13165 0.0 0.0 169980 12584 ? D 00:58 0:00 lfd - (child) closing root 13166 0.0 0.0 170112 11296 ? S 00:58 0:00 lfd - (child) blocking 177.133.74.217 nobody 13167 0.0 0.0 116072 8528 ? D 00:58 0:00 /usr/local/apache/bin/httpd -k start nobody 13203 0.0 0.0 114324 8672 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13220 0.0 0.0 142436 896 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142436 896 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 920 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142440 1036 ? S 00:55 0:00 CROND root 13278 0.0 0.0 142440 1032 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142440 1036 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142440 1036 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142440 1032 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142440 1032 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142440 1028 ? S 00:55 0:00 CROND root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] root 13645 0.0 0.0 114060 8672 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 284 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3456 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 91912 8368 ? Ds Apr16 0:23 dnsadmin - server mode nobody 15746 0.0 0.0 114196 9160 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 15948 0.0 0.0 114196 9308 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailman 16010 0.0 0.0 120748 1320 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1020 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1220 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1008 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1008 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1024 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1072 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 1000 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 680 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1004 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 2200 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 conhecsc 17197 0.0 0.0 191140 13044 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] nobody 18020 0.0 0.0 114192 9224 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start noticias 18706 0.0 0.0 205684 16432 ? S 00:46 0:00 /usr/bin/php root 19132 1.2 0.0 240980 6352 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream root 19138 0.0 0.0 88412 7976 ? D 00:50 0:00 dnsadmin - waiting for request on connected socket 882 19151 0.1 0.0 243772 6440 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 6.4 0.0 23760 8808 ? S 00:50 0:29 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 6044 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.3 0.0 249740 16880 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8440 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.1 0.0 234712 16876 ? S 00:48 0:00 /usr/bin/php nobody 20150 0.0 0.0 114344 10900 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 114192 8964 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 992 20178 0.0 0.0 187384 7544 ? D 00:46 0:00 /usr/bin/php root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] nobody 20222 0.0 0.0 114192 8704 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20232 0.0 0.0 114192 9148 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.1 0.0 265704 16552 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114324 8708 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 20491 0.0 0.0 114324 8628 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (posaufacom) [22997] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (posaufacom) [22984] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4612 880 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22986] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22900] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20497 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (posaufacom) [22965] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22996] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4612 884 ? Ss 00:55 0:00 jailshell (inovesocialcom) [23010] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4612 880 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22967] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 868 ? Ss 00:55 0:00 jailshell (posaufacom) [22630] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20521 0.0 0.0 4616 868 ? Ss 00:55 0:00 jailshell (recordho) [22619] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 20524 0.0 0.0 114328 10864 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20528 0.0 0.0 106120 604 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4612 876 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22899] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20535 0.0 0.0 4612 848 ? Ss 00:55 0:00 jailshell (centralc) [22646] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 20536 0.0 0.0 4612 880 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22895] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4616 880 ? Ss 00:55 0:00 jailshell (centralgib) [22883] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 852 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22636] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 848 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22641] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20542 0.0 0.0 4612 876 ? Ss 00:55 0:00 jailshell (centralc) [22897] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20546 0.0 0.0 4612 852 ? Ss 00:55 0:00 jailshell (centralgib) [22657] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 20581 0.0 0.0 38568 8588 ? DN 00:55 0:00 cpanellogd - sleeping for logs regis 20754 0.0 0.0 186880 6092 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 8824 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.0 0.0 263164 16096 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 21237 0.0 0.0 106124 760 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21514 0.0 0.0 114192 8992 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22183 0.0 0.0 170820 11196 ? D 00:56 0:00 lfd - checking directories root 22296 0.0 0.0 106124 472 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22377 0.0 0.0 114196 9268 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] 1125 22587 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22610 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 22615 0.0 0.0 114200 8976 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 22619 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 22623 0.0 0.0 288180 16292 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 22629 0.0 0.0 136464 3552 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 22630 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22631 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22633 0.0 0.0 283528 12000 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1120 22636 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 22637 0.0 0.0 287692 15968 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 22641 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 699 22642 0.0 0.0 288180 16312 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations centralc 22646 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php centralc 22650 0.0 0.0 287560 15804 ? S 00:56 0:00 php -q /home/centralc/public_html/pipe/pipe.php root 22651 0.0 0.0 142436 928 ? S 00:56 0:00 CROND nobody 22653 0.0 0.0 114216 10296 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22654 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 928 ? S 00:56 0:00 CROND 1077 22657 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22658 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 928 ? S 00:56 0:00 CROND 1077 22661 0.0 0.0 238740 11520 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22670 0.0 0.0 142436 936 ? S 00:56 0:00 CROND nobody 22674 0.0 0.0 114192 9420 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22678 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 928 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142440 1048 ? S 00:56 0:00 CROND nobody 22689 0.0 0.0 114192 8972 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22690 0.0 0.0 114192 8980 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22691 0.0 0.0 114192 8760 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22704 0.0 0.0 114196 9464 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] nobody 22869 0.0 0.0 114464 9608 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 1077 22883 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 22884 0.0 0.0 239404 12252 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 22886 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 recordho 22890 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 22894 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 699 22895 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 861 22896 0.0 0.0 283528 11980 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php centralc 22897 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22899 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22900 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 recordho 22907 0.0 0.0 288180 16292 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 699 22909 0.0 0.0 287692 15972 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 22911 0.0 0.0 288180 16380 ? S 00:56 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22912 0.0 0.0 288180 16312 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22913 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22915 0.0 0.0 283524 12004 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22939 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22940 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 22941 0.0 0.0 106120 592 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22944 0.0 0.0 106120 596 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22947 0.0 0.0 283528 11996 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22948 0.0 0.0 283528 11920 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1086 22951 0.0 0.0 9464 604 ? S 00:56 0:00 /bin/sh php.cgi 1086 22952 0.0 0.0 9460 596 ? S 00:56 0:00 /bin/sh php.cgi 1125 22954 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22955 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22956 0.0 0.0 283524 12144 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 22960 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22961 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22962 0.0 0.0 283528 12144 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 22965 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22966 0.0 0.0 106120 604 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 22967 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22968 0.0 0.0 106120 588 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22969 0.0 0.0 283524 12004 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22970 0.0 0.0 283528 11996 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 22975 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22976 0.0 0.0 106124 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22977 0.0 0.0 283524 12004 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22979 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22980 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22981 0.0 0.0 283528 11996 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 22984 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22985 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 22986 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 22987 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 22988 0.0 0.0 283388 11884 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 22989 0.0 0.0 283524 12012 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 22991 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22992 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22993 0.0 0.0 136464 3348 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 22996 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22997 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 22998 0.0 0.0 106120 588 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22999 0.0 0.0 106120 592 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 23000 0.0 0.0 283524 11964 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 23001 0.0 0.0 283524 12148 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 23005 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23006 0.0 0.0 106120 616 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23007 0.0 0.0 283524 12004 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 952 23008 0.0 0.0 141736 13380 ? S 00:56 0:00 php.cgi 1125 23010 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23011 0.0 0.0 106120 612 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23012 0.0 0.0 136464 3444 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1086 23024 0.0 0.0 141748 13596 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi 1086 23025 0.0 0.0 141744 13584 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23092 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23093 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23094 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23095 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23096 0.0 0.0 142436 1132 ? S 00:57 0:00 CROND root 23104 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23112 0.0 0.0 142436 1128 ? S 00:57 0:00 CROND root 23113 0.0 0.0 142436 1124 ? S 00:57 0:00 CROND root 23114 0.0 0.0 142436 1124 ? S 00:57 0:00 CROND root 23115 0.0 0.0 142436 1124 ? S 00:57 0:00 CROND root 23118 0.0 0.0 142440 1128 ? S 00:57 0:00 CROND pdvxyz 23169 0.0 0.0 184960 9484 ? S 00:57 0:00 /usr/bin/php conect 23178 0.0 0.0 184964 9608 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 184960 9604 ? S 00:57 0:00 /usr/bin/php conect 23186 0.0 0.0 184964 9600 ? S 00:57 0:00 /usr/bin/php conect 23187 0.0 0.0 184960 9608 ? S 00:57 0:00 /usr/bin/php conect 23188 0.0 0.0 184960 9608 ? S 00:57 0:00 /usr/bin/php conect 23189 0.0 0.0 184960 9592 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 184960 9484 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 9484 ? S 00:57 0:00 /usr/bin/php conect 23195 0.0 0.0 184964 9604 ? S 00:57 0:00 /usr/bin/php 879 23199 0.1 0.0 187020 16492 ? S 00:57 0:00 /usr/bin/php conect 23200 0.0 0.0 184964 9600 ? S 00:57 0:00 /usr/bin/php conect 23201 0.0 0.0 184960 9604 ? S 00:57 0:00 /usr/bin/php conect 23203 0.0 0.0 184960 9600 ? S 00:57 0:00 /usr/bin/php conect 23204 0.0 0.0 184964 9604 ? S 00:57 0:00 /usr/bin/php 879 23208 0.1 0.0 187024 13292 ? S 00:57 0:00 /usr/bin/php 879 23210 0.1 0.0 187020 16484 ? S 00:57 0:00 /usr/bin/php root 23227 0.0 0.0 4612 892 ? Ss 00:57 0:00 jailshell (posaufacom) [2042] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 23231 0.0 0.0 4612 892 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2038] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 23235 0.0 0.0 106120 740 ? Ss 00:57 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 23239 0.0 0.0 4612 928 ? Ss 00:57 0:00 jailshell (posaufacom) [2177] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 23245 0.0 0.0 4612 896 ? Ss 00:57 0:00 jailshell (recordho) [2044] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 23250 0.0 0.0 4612 924 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2178] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 23252 0.0 0.0 4612 920 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2118] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 23253 0.0 0.0 4612 924 ? Ss 00:57 0:00 jailshell (posaufacom) [2120] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 23254 0.0 0.0 4612 924 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2191] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 23255 0.0 0.0 4612 928 ? Ss 00:57 0:00 jailshell (posaufacom) [2131] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 23257 0.0 0.0 4612 928 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2128] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 23258 0.0 0.0 106124 896 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 23284 0.0 0.0 71032 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23286 0.0 0.0 71032 3092 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23287 0.0 0.0 71028 3092 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] mailnull 23295 0.0 0.0 71036 3092 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23296 0.0 0.0 71028 3092 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23297 0.0 0.0 71032 3092 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23298 0.0 0.0 71036 3092 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23299 0.0 0.0 71036 3088 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23300 0.0 0.0 71028 3096 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23303 0.0 0.0 170112 11524 ? S 00:57 0:00 lfd - (child) sending alert email for 177.133.74.217 root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] nobody 23364 0.0 0.0 114192 9032 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start root 23404 0.0 0.0 106124 540 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 23656 0.0 0.0 115520 10124 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 748664 7708 ? Ssl Apr17 0:39 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25628 0.1 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 596 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 26436 0.0 0.0 114324 8572 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start maisg647 26560 0.0 0.0 241460 16240 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 15936 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 15928 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7436 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1612 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114196 9060 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 26646 0.0 0.0 74248 4124 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid recordho 26670 0.0 0.0 288180 16284 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 588 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 992 26701 0.0 0.0 187676 8500 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 780 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11080 ? S Apr17 0:00 /usr/bin/php 1125 26765 0.0 0.0 136464 3528 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 283524 12000 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 408 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 300 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 28133 0.0 0.0 114192 9396 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 114336 10564 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28172 0.0 0.0 106120 620 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28183 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (posaufacom) [22939] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4616 884 ? Ss 00:56 0:00 jailshell (recordho) [22890] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (posaufacom) [22960] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4612 880 ? Ss 00:56 0:00 jailshell (posaufacom) [22979] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28188 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (posaufacom) [22886] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28191 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (inovesocialcom) [23005] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4612 884 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22975] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4612 888 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22954] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28195 0.0 0.0 4612 888 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22991] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4616 884 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22940] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] 861 28782 0.0 0.0 141756 12048 ? S 00:56 0:00 php.cgi root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29231 0.0 0.0 106124 768 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] icowebra 30070 0.0 0.0 192900 524 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114344 10836 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.1 200352 76316 ? Ds Apr16 6:15 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2268 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 592 ? Ds Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:26 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:47 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1937 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/9:0] 1125 1950 0.0 0.0 9460 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1951 0.0 0.0 9456 468 ? S 00:57 0:00 /bin/sh php.cgi 1125 1952 0.0 0.0 9456 472 ? S 00:57 0:00 /bin/sh php.cgi 1125 1953 0.0 0.0 9456 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1960 0.0 0.0 142008 8596 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1961 0.0 0.0 142000 8592 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1962 0.0 0.0 142004 8592 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1963 0.0 0.0 142000 8588 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi root 1970 0.0 0.0 106124 380 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 484 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 380 ? S Apr16 0:01 dovecot/anvil 1125 2038 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2042 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2044 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 2057 0.0 0.0 106120 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 2058 0.0 0.0 288180 12924 ? S 00:57 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 2060 0.0 0.0 106124 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2066 0.0 0.0 283388 8556 ? S 00:57 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2067 0.0 0.0 283528 9052 ? S 00:57 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2118 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2119 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 2120 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2121 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2122 0.0 0.0 283388 8556 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 2123 0.0 0.0 283524 8964 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 2127 0.2 0.0 194440 16456 ? S 00:58 0:00 /usr/bin/php 1125 2128 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 2130 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2131 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 2132 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2133 0.0 0.0 283528 9012 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 2134 0.0 0.0 283528 8960 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 2144 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2145 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2146 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2147 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2148 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2156 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2164 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2165 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2166 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2167 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2170 0.0 0.0 142440 864 ? S 00:58 0:00 CROND 861 2177 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2178 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2179 0.0 0.0 106120 476 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2180 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2181 0.0 0.0 283528 9024 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2182 0.0 0.0 136464 2276 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2191 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2192 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2193 0.0 0.0 283524 8868 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 2200 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2201 0.0 0.0 142004 8592 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2216 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2287] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2223 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2514] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2226 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (recordho) [2300] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2227 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2266] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2232 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2347] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2235 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2379] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2236 0.0 0.0 106120 504 ? Ss 00:58 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2237 0.0 0.0 4612 768 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2378] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2242 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (posaufacom) [2349] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2245 0.0 0.0 4616 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2298] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2249 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [5904] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2266 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2267 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2268 0.0 0.0 283524 8876 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php root 2275 0.0 0.0 106124 640 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1125 2287 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 nobody 2294 0.0 0.0 114508 8724 ? S 00:51 0:00 /usr/local/apache/bin/httpd -k start 861 2298 0.0 0.0 4616 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2300 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2310 0.0 0.0 142436 736 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 744 ? S 00:52 0:00 CROND 861 2323 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2324 0.0 0.0 106120 460 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 recordho 2327 0.0 0.0 288180 12880 ? S 00:58 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2330 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2332 0.0 0.0 283524 9140 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2333 0.0 0.0 283524 9640 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 2336 0.0 0.0 142440 892 ? S 00:52 0:00 CROND 1125 2347 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 2348 0.0 0.0 106120 480 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2349 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2350 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 2352 0.0 0.0 115532 9848 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2354 0.0 0.0 283524 8912 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2355 0.0 0.0 283528 9016 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php nobody 2358 0.0 0.0 115712 9860 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2378 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2379 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2380 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2381 0.0 0.0 106120 456 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 2382 0.0 0.0 283528 8976 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2383 0.0 0.0 136464 2272 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2386 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2387 0.0 0.0 142004 8596 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2431 0.0 0.0 106124 428 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2449 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2452 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114484 8768 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2487 0.0 0.0 106124 620 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2501 0.0 0.0 116332 10620 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114192 7616 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2505 0.0 0.0 114216 8356 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2514 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2515 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2520 0.0 0.0 283524 9512 ? D 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php root 2565 0.0 0.0 142436 784 ? S 00:53 0:00 CROND root 2632 0.0 0.0 106124 732 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 43.3 93.0 74966496 61392884 ? D 00:35 10:28 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114192 7588 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 372 ? S 00:34 0:00 CROND root 3059 0.2 0.0 252468 1416 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 114192 7572 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 1.1 0.0 274064 15880 ? S 00:49 0:06 /usr/bin/php root 3269 0.0 0.0 106124 616 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh dovenull 3299 0.0 0.0 42760 420 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 396 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 576 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1528 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 308 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 836 ? S 00:45 0:00 dovecot/auth nobody 3514 0.0 0.0 115532 9524 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3723 0.0 0.0 114328 8844 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3739 0.0 0.0 114492 8540 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] root 4198 0.0 0.0 106124 768 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh metalma 4212 0.0 0.0 186284 1084 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4680 0.0 0.0 114476 8516 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4722 0.0 0.0 106120 488 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 624 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 8056 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.6 0.0 234216 16216 ? S 00:45 0:05 /usr/bin/php conhecsc 4812 7.1 0.0 187440 4900 ? S 00:45 1:00 /usr/bin/php progress 4846 0.4 0.0 268336 15792 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 15904 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 696 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6320 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6576 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6204 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 440 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] 861 5904 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5906 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5911 0.0 0.0 283524 8768 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 5946 0.0 0.0 106124 624 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh icowebra 6242 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 348 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4492 ? S Apr17 0:07 tailwatchd mysql 6514 18.7 0.2 6959344 177988 ? Dl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 444 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 440 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 736 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7823 0.0 0.0 114060 7736 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 7824 0.0 0.0 114324 8516 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 8274 0.0 0.0 142436 828 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 836 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114356 9572 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114520 9392 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8839 0.0 0.0 115532 9636 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114480 9008 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9840 0.0 0.0 114332 9196 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114192 7476 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 452 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10695 0.0 0.0 4612 744 ? Ss 00:54 0:00 jailshell (inovesocialcom) [22587] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10851 0.0 0.0 106124 628 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10926 0.0 0.0 4640 232 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 332 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1832 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd postgres 11213 0.0 0.0 215388 724 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 220 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 752 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 784 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 588 ? Ss Apr16 0:08 postgres: stats collector process root 11363 0.1 0.0 169980 10776 ? Ss 00:00 0:06 lfd - sleeping root 11587 0.0 0.0 106124 672 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 472 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 196 ? Ss Apr16 0:00 /usr/sbin/atd root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] nobody 11834 0.0 0.0 115520 9516 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114192 7656 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114192 8228 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11845 0.0 0.0 115536 9680 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 12560 0.0 0.0 4108 224 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 228 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 224 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 228 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 224 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 224 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 mailnull 12834 0.0 0.0 71028 1512 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12835 0.0 0.0 71032 1512 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 13203 0.0 0.0 114484 8604 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13220 0.0 0.0 142436 788 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142436 788 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 812 ? S 00:55 0:00 CROND mailnull 13239 0.0 0.0 75156 3848 ? D 00:58 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 881 13241 0.0 0.0 166288 5220 ? D 00:58 0:00 /usr/bin/php 881 13242 0.0 0.0 166288 5216 ? D 00:58 0:00 /usr/bin/php 881 13244 0.1 0.0 166288 5232 ? D 00:58 0:00 /usr/bin/php nossojor 13245 0.0 0.0 166288 5204 ? D 00:58 0:00 /usr/bin/php root 13250 0.0 0.0 142436 812 ? S 00:55 0:00 CROND mailnull 13251 0.0 0.0 74280 3924 ? S 00:58 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid loppelco 13266 0.1 0.0 166288 5232 ? D 00:58 0:00 /usr/bin/php root 13267 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 812 ? S 00:55 0:00 CROND loppelco 13271 0.1 0.0 166284 5228 ? D 00:58 0:00 /usr/bin/php root 13272 0.0 0.0 142436 812 ? S 00:55 0:00 CROND loppelco 13273 0.1 0.0 166288 5220 ? D 00:58 0:00 /usr/bin/php rmaiasa 13274 0.1 0.0 166288 5240 ? D 00:58 0:00 /usr/bin/php root 13277 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13278 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142440 916 ? S 00:55 0:00 CROND loppelco 13312 0.1 0.0 166288 5220 ? D 00:58 0:00 /usr/bin/php loppelco 13314 0.0 0.0 166288 5212 ? D 00:58 0:00 /usr/bin/php 894 13328 0.1 0.1 231228 99772 ? D 00:58 0:00 spamd child root 13329 0.0 0.1 222024 95628 ? S 00:58 0:00 spamd child loppelco 13330 0.1 0.0 166284 5220 ? D 00:58 0:00 /usr/bin/php loppelco 13334 0.1 0.0 166288 5236 ? D 00:58 0:00 /usr/bin/php root 13342 0.3 0.0 170728 12168 ? S 00:58 0:00 lfd - (child) (PT) sending alert email for process 22993 loppelco 13346 0.0 0.0 166288 5232 ? D 00:58 0:00 /usr/bin/php loppelco 13352 0.1 0.0 166288 5220 ? D 00:58 0:00 /usr/bin/php root 13353 0.1 0.0 31664 5792 ? DN 00:58 0:00 cpanellogd - updating bandwidth root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] 800 13403 0.0 0.0 127424 1932 ? D 00:59 0:00 php.cgi rmaiasa 13404 0.1 0.0 166288 5228 ? D 00:59 0:00 /usr/bin/php root 13419 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13420 0.0 0.0 142436 1020 ? S 00:59 0:00 CROND root 13421 0.0 0.0 142436 1020 ? S 00:59 0:00 CROND root 13422 0.0 0.0 142436 1028 ? S 00:59 0:00 CROND root 13423 0.0 0.0 142436 1028 ? S 00:59 0:00 CROND root 13424 0.0 0.0 142436 1028 ? S 00:59 0:00 CROND root 13425 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13426 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13427 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13428 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13429 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13431 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13433 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13434 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13436 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13438 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13439 0.0 0.0 142432 1144 ? D 00:59 0:00 CROND root 13441 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13442 0.0 0.0 142432 1144 ? D 00:59 0:00 CROND root 13443 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13444 0.0 0.0 142436 1028 ? S 00:59 0:00 CROND root 13445 0.0 0.0 142436 1028 ? S 00:59 0:00 CROND root 13446 0.0 0.0 142436 1036 ? S 00:59 0:00 CROND root 13447 0.0 0.0 142436 1032 ? S 00:59 0:00 CROND root 13448 0.0 0.0 142436 1028 ? S 00:59 0:00 CROND root 13449 0.0 0.0 142436 1028 ? S 00:59 0:00 CROND root 13450 0.0 0.0 142436 1032 ? S 00:59 0:00 CROND loppelco 13468 0.0 0.0 140028 3080 ? D 00:59 0:00 /usr/bin/php root 13479 0.0 0.0 106124 376 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13480 0.0 0.0 106124 380 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13481 0.0 0.0 100992 560 ? D 00:59 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt root 13482 0.0 0.0 100988 556 ? D 00:59 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt root 13483 0.0 0.0 103360 752 ? S 00:59 0:00 grep 104.168.170.128 root 13484 0.0 0.0 103360 752 ? S 00:59 0:00 grep 104.168.170.128 nobody 13520 0.0 0.0 128600 1120 ? D 00:59 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/modsec_name_scan.php Big Data.png agitae 13522 0.0 0.0 140028 3076 ? D 00:59 0:00 /usr/bin/php nobody 13534 0.0 0.0 128600 1116 ? D 00:59 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 47.31.15.239 root 13536 0.0 0.0 4352 536 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 13537 0.0 0.0 4352 512 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 13538 0.0 0.0 4612 876 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 13539 0.0 0.0 4616 876 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 13541 0.0 0.0 4612 872 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 13542 0.0 0.0 106120 1012 ? Ss 00:59 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 13545 0.0 0.0 106120 1004 ? Ss 00:59 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 13546 0.0 0.0 106120 1012 ? Ss 00:59 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 13547 0.0 0.0 4612 872 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 13549 0.0 0.0 4612 872 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 13550 0.0 0.0 4352 552 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 13551 0.0 0.0 4352 552 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 13552 0.0 0.0 4352 548 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 13553 0.0 0.0 106120 984 ? Ss 00:59 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 13554 0.0 0.0 106120 984 ? Ss 00:59 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 13555 0.0 0.0 106120 980 ? Ss 00:59 0:00 /bin/sh -c /bin/liberar-csf.sh > /dev/null 2>&1 root 13556 0.0 0.0 106120 976 ? Ss 00:59 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 13558 0.0 0.0 106120 1004 ? Ss 00:59 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 13560 0.0 0.0 140028 3076 ? D 00:59 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 13562 0.0 0.0 106124 984 ? Ss 00:59 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 13563 0.0 0.0 106124 1128 ? S 00:59 0:00 /bin/bash /bin/monitora-load.sh root 13564 0.0 0.0 4612 872 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 13566 0.0 0.0 4612 812 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 13567 0.0 0.0 4612 876 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send root 13568 0.0 0.0 4352 548 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 13570 0.0 0.0 106124 1004 ? Ss 00:59 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 13571 0.0 0.0 4352 548 ? Ss 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 13572 0.0 0.0 106120 980 ? S 00:59 0:00 /bin/bash /bin/corrigir-ips.sh root 13577 0.0 0.0 106120 480 ? S 00:59 0:00 /bin/bash /bin/corrigir-ips.sh root 13578 0.0 0.0 138388 2448 ? D 00:59 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 13579 0.0 0.0 103360 740 ? S 00:59 0:00 grep sim root 13580 0.0 0.0 100976 636 ? S 00:59 0:00 wc -l 879 13584 0.0 0.0 140028 3080 ? D 00:59 0:00 /usr/bin/php 881 13591 0.0 0.0 140028 3076 ? D 00:59 0:00 /usr/bin/php root 13592 0.0 0.0 106120 1256 ? S 00:59 0:00 /bin/bash /bin/liberar-csf.sh root 13593 0.0 0.0 106120 1160 ? S 00:59 0:00 /bin/bash /bin/brut-filtro.sh root 13595 0.0 0.0 106124 1180 ? D 00:59 0:00 /bin/bash /bin/verifica-spf.sh root 13596 0.0 0.0 106128 1164 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13600 0.0 0.0 106120 1232 ? S 00:59 0:00 /bin/bash /bin/malv-block.sh root 13601 0.0 0.0 124412 2324 ? D 00:59 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 voarloca 13617 0.0 0.0 140028 3076 ? D 00:59 0:00 /usr/bin/php 879 13621 0.0 0.0 140028 3080 ? D 00:59 0:00 /usr/bin/php root 13622 0.0 0.0 106120 1224 ? S 00:59 0:00 /bin/bash /bin/bloqueia-envio.sh picapau 13627 0.0 0.0 140028 3076 ? D 00:59 0:00 /usr/bin/php root 13645 0.0 0.0 114060 8596 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13655 0.1 0.0 44164 4244 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 13656 0.0 0.0 44164 4360 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 13657 0.0 0.0 44164 4260 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 13658 0.0 0.0 44164 4252 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs root 13659 0.0 0.0 44164 4356 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 13660 0.0 0.0 44164 4248 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 13661 0.1 0.0 44164 4372 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 13662 0.0 0.0 44164 4360 ? D 00:59 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 nobody 13676 0.1 0.0 114192 8688 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 13687 0.0 0.0 106128 556 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 13713 0.0 0.0 114476 8780 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 13730 0.0 0.0 106128 384 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13734 0.0 0.0 100988 556 ? D 00:59 0:00 cat /var/log/exim_mainlog root 13735 0.0 0.0 103360 752 ? S 00:59 0:00 grep 104.130.11.193 root 13821 0.0 0.0 106128 280 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh nobody 13825 0.0 0.0 114352 9108 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 13837 0.0 0.0 114060 8428 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 13846 0.0 0.0 114336 9084 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start mailnull 14217 0.0 0.0 74876 1280 ? S 00:59 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 14231 0.0 0.0 74020 1528 ? S 00:59 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 14236 0.0 0.0 169980 12908 ? D 00:59 0:00 lfd - (child) closing root 14237 0.0 0.0 169980 12972 ? D 00:59 0:00 lfd - (child) closing root 14238 0.0 0.0 169980 13024 ? D 00:59 0:00 lfd - (child) closing root 14239 0.0 0.0 169980 12996 ? D 00:59 0:00 lfd - (child) closing nobody 14240 0.0 0.0 115712 10164 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 14241 0.0 0.0 114192 8656 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 14242 0.0 0.0 114492 8864 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 14243 0.0 0.0 116332 10904 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 14244 0.0 0.0 114484 9064 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 14245 0.0 0.0 115536 9960 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 14249 0.0 0.0 59284 532 ? D 00:59 0:00 send-mail -i -- admin@conectadohost.com.br nobody 14250 0.0 0.0 114736 8876 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3456 ? S Apr16 0:03 queueprocd - wait to process a task root 15554 0.0 0.0 35124 1528 ? D 00:59 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply postgres 15555 0.0 0.0 215388 664 ? Ds 00:59 0:00 postgres: autovacuum worker process nobody 15556 0.0 0.0 114520 9208 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 15557 0.0 0.0 114736 8872 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 15606 0.0 0.0 25860 1704 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 nobody 15746 0.0 0.0 114520 8956 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start nobody 15948 0.0 0.0 114512 8876 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailman 16010 0.0 0.0 120748 1300 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1012 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1212 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1000 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1016 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1064 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 992 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 992 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] nobody 16172 0.0 0.0 114736 8876 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 16326 0.0 0.0 169980 13036 ? D 00:59 0:00 lfd - (child) closing root 16327 0.0 0.0 169980 13028 ? D 00:59 0:00 lfd - (child) closing root 16328 0.0 0.0 169980 12960 ? D 00:59 0:00 lfd - (child) closing root 16332 0.0 0.0 169980 12976 ? D 00:59 0:00 lfd - (child) closing root 16333 0.0 0.0 169980 12884 ? D 00:59 0:00 lfd - (child) closing root 16337 0.0 0.0 169980 13036 ? D 00:59 0:00 lfd - (child) closing nobody 16369 0.0 0.0 114736 8872 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 16370 0.0 0.0 114508 9112 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 16526 0.0 0.0 26212 632 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 nobody 16639 0.0 0.0 114736 8876 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 16681 0.0 0.0 25856 1156 ? SN Apr16 0:00 cpanellogd - updating bandwidth root 16733 0.0 0.0 26208 1864 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 conhecsc 17197 0.0 0.0 191140 12992 ? S 00:48 0:00 /usr/bin/php root 17508 0.0 0.0 59284 532 ? D 00:59 0:00 /usr/sbin/sendmail -f root -t root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18001 0.0 0.0 108344 1180 ? R 00:59 0:00 ps aux nobody 18626 0.0 0.0 114736 8876 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start noticias 18706 0.0 0.0 205684 16380 ? S 00:46 0:00 /usr/bin/php root 19132 1.1 0.0 240980 4012 ? S 00:50 0:05 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 3908 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.7 0.0 23760 8932 ? S 00:50 0:30 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 5896 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.3 0.0 249740 16828 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8120 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.0 0.0 234712 16792 ? S 00:48 0:00 /usr/bin/php nobody 20148 0.0 0.0 114480 9052 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 20150 0.0 0.0 114344 8840 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 114192 8252 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 20208 0.0 0.0 100988 576 ? D 00:59 0:00 cat /home/bloqueia-envio/pode-bloquear.txt root 20210 0.0 0.0 155488 1816 ? S 00:59 0:00 sort root 20212 0.0 0.0 106120 396 ? D 00:59 0:00 /bin/bash /bin/bloqueia-envio.sh root 20216 0.0 0.0 106120 648 ? S 00:59 0:00 /bin/bash /bin/brut-filtro.sh root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] root 20310 0.0 0.0 100992 576 ? D 00:59 0:00 rm -rf /home/liberar-csf/email2.txt /home/liberar-csf/email-cliente1.txt /home/liberar-csf/email-cliente.txt /home/liberar-csf/email.txt /home/liberar-csf/IP.txt wwwfacul 20446 0.1 0.0 265704 16500 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114324 8428 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22997] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22984] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22986] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22900] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20497 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22965] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22996] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [23010] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22967] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 744 ? Ss 00:55 0:00 jailshell (posaufacom) [22630] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20521 0.0 0.0 4616 744 ? Ss 00:55 0:00 jailshell (recordho) [22619] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 20524 0.0 0.0 114328 8864 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20528 0.0 0.0 106120 472 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22899] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20535 0.0 0.0 4612 724 ? Ss 00:55 0:00 jailshell (centralc) [22646] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 20536 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22895] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4616 756 ? Ss 00:55 0:00 jailshell (centralgib) [22883] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22636] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 724 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22641] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20542 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralc) [22897] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20546 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralgib) [22657] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php regis 20754 0.0 0.0 186880 6040 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 8852 ? D 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.0 0.0 263164 16044 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 21186 0.0 0.0 106124 1328 ? S 00:59 0:00 /bin/bash /bin/malv2-block.sh root 21207 0.0 0.0 106120 532 ? S 00:59 0:00 /bin/bash /bin/brut-filtro.sh root 21209 0.0 0.0 2568 156 ? D 00:59 0:00 nslookup 143.0.115.31 root 21210 0.0 0.0 103364 844 ? S 00:59 0:00 grep br root 21211 0.0 0.0 100976 656 ? S 00:59 0:00 wc -l root 21237 0.0 0.0 106124 624 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21514 0.0 0.0 114332 8664 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22296 0.0 0.0 106124 640 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22377 0.0 0.0 114196 8604 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] 1125 22587 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22610 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 22615 0.0 0.0 114200 8220 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 22619 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 22623 0.0 0.0 288180 12736 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 22629 0.0 0.0 136464 2276 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 22630 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22631 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22633 0.0 0.0 283528 8804 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1120 22636 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 22637 0.0 0.0 287692 12412 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 22641 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 699 22642 0.0 0.0 288180 12760 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations centralc 22646 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php centralc 22650 0.0 0.0 287560 12524 ? S 00:56 0:00 php -q /home/centralc/public_html/pipe/pipe.php root 22651 0.0 0.0 142436 804 ? S 00:56 0:00 CROND nobody 22653 0.0 0.0 114352 8676 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22654 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22657 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22658 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22661 0.0 0.0 240768 10004 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22670 0.0 0.0 142436 812 ? S 00:56 0:00 CROND nobody 22674 0.0 0.0 114192 8476 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22678 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142440 920 ? S 00:56 0:00 CROND nobody 22689 0.0 0.0 114324 8336 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22690 0.0 0.0 114192 8344 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22704 0.0 0.0 114488 9048 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22757 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:0] nobody 22869 0.0 0.0 0 0 ? Z 00:56 0:00 [httpd] 1077 22883 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 22884 0.0 0.0 240844 9996 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 22886 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 recordho 22890 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 22894 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 699 22895 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 861 22896 0.0 0.0 283528 8784 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php centralc 22897 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22899 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22900 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 recordho 22907 0.0 0.0 288180 12736 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 699 22909 0.0 0.0 287692 12420 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 22911 0.0 0.0 288180 12764 ? S 00:56 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22912 0.0 0.0 288180 12756 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22913 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22915 0.0 0.0 283524 8808 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22939 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22940 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 22941 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22944 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22947 0.0 0.0 283528 8952 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22948 0.0 0.0 283528 8724 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1086 22951 0.0 0.0 9464 456 ? S 00:56 0:00 /bin/sh php.cgi 1086 22952 0.0 0.0 9460 448 ? S 00:56 0:00 /bin/sh php.cgi 1125 22954 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22955 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22956 0.0 0.0 283524 8948 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 22960 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22961 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22962 0.0 0.0 283528 8948 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 22965 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22966 0.0 0.0 106120 460 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 22967 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22968 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22969 0.0 0.0 283524 8808 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22970 0.0 0.0 283528 8800 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 22975 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22976 0.0 0.0 106124 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22977 0.0 0.0 283524 8808 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22979 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22980 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22981 0.0 0.0 283528 8800 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 22984 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22985 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 22986 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 22987 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 22988 0.0 0.0 283388 8916 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 22989 0.0 0.0 283524 8816 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 22991 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22992 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22993 0.0 0.0 136464 2072 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 22996 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22997 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 22998 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22999 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 23000 0.0 0.0 283524 8768 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 23001 0.0 0.0 283524 8952 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 23005 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23006 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23007 0.0 0.0 283524 8808 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 952 23008 0.0 0.0 141736 8504 ? D 00:56 0:00 php.cgi 1125 23010 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23011 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23012 0.0 0.0 136464 2168 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1086 23024 0.0 0.0 141748 8928 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi 1086 23025 0.0 0.0 141744 8812 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23092 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23093 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23094 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23095 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23096 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23104 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23112 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23113 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23114 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23115 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23118 0.0 0.0 142440 844 ? S 00:57 0:00 CROND pdvxyz 23169 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23178 0.0 0.0 184964 6968 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 184960 6964 ? S 00:57 0:00 /usr/bin/php conect 23186 0.0 0.0 184964 6960 ? S 00:57 0:00 /usr/bin/php conect 23187 0.0 0.0 184960 6968 ? S 00:57 0:00 /usr/bin/php conect 23188 0.0 0.0 184960 6968 ? S 00:57 0:00 /usr/bin/php conect 23189 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 6904 ? S 00:57 0:00 /usr/bin/php conect 23195 0.0 0.0 184964 6964 ? S 00:57 0:00 /usr/bin/php conect 23200 0.0 0.0 184964 6960 ? S 00:57 0:00 /usr/bin/php conect 23201 0.0 0.0 184960 6964 ? S 00:57 0:00 /usr/bin/php conect 23203 0.0 0.0 184960 6960 ? S 00:57 0:00 /usr/bin/php conect 23204 0.0 0.0 184964 6964 ? S 00:57 0:00 /usr/bin/php 879 23208 0.1 0.0 187024 9636 ? S 00:57 0:00 /usr/bin/php root 23227 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (posaufacom) [2042] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 23231 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2038] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 23235 0.0 0.0 106120 504 ? Ss 00:57 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 23239 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2177] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 23245 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (recordho) [2044] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 23250 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2178] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 23252 0.0 0.0 4612 760 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2118] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 23253 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (posaufacom) [2120] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 23254 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2191] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 23255 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2131] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 23257 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2128] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 23258 0.0 0.0 106124 640 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 23284 0.0 0.0 71032 1512 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23286 0.0 0.0 71032 1508 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23287 0.0 0.0 71028 1508 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] mailnull 23295 0.0 0.0 71036 1508 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23296 0.0 0.0 71028 1508 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23297 0.0 0.0 71032 1508 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23298 0.0 0.0 71036 1508 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23299 0.0 0.0 71036 1508 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23300 0.0 0.0 71028 1516 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] nobody 23364 0.0 0.0 114192 8056 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start root 23404 0.0 0.0 106124 768 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 23656 0.0 0.0 115520 9472 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24386 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/8:0] root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] named 24611 0.1 0.0 748664 8440 ? Ssl Apr17 0:39 /usr/sbin/named -u named -t /var/named/chroot root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] root 25628 0.1 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 maisg647 26560 0.0 0.0 241460 16188 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 15884 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 15876 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 7384 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1560 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114328 8396 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 26646 0.0 0.0 74248 2684 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid recordho 26670 0.0 0.0 288180 12728 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 992 26701 0.0 0.0 187676 8448 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 728 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11028 ? S Apr17 0:00 /usr/bin/php 1125 26765 0.0 0.0 136464 2252 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 283524 8804 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 396 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 296 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 28133 0.0 0.0 114192 8680 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 114336 8808 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28172 0.0 0.0 106120 480 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28183 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22939] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (recordho) [22890] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22960] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4612 756 ? Ss 00:56 0:00 jailshell (posaufacom) [22979] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28188 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22886] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28191 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [23005] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22975] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22954] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28195 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22991] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22940] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] 861 28782 0.0 0.0 141756 8384 ? D 00:56 0:00 php.cgi root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29231 0.0 0.0 106124 624 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] icowebra 30070 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114344 8776 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.1 222024 96044 ? Ss Apr16 6:16 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2148 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 484 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:26 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:49 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1937 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/9:0] 1125 1950 0.0 0.0 9460 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1951 0.0 0.0 9456 468 ? S 00:57 0:00 /bin/sh php.cgi 1125 1952 0.0 0.0 9456 472 ? S 00:57 0:00 /bin/sh php.cgi 1125 1953 0.0 0.0 9456 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1960 0.0 0.0 142776 10240 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1961 0.0 0.0 142768 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1962 0.0 0.0 142772 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1963 0.0 0.0 142768 10228 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi root 1970 0.0 0.0 106124 380 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 664 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 484 ? S Apr16 0:01 dovecot/anvil 1125 2038 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2042 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2044 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 2057 0.0 0.0 106120 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 2058 0.0 0.0 288180 12900 ? S 00:57 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 2060 0.0 0.0 106124 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2066 0.0 0.0 283524 9084 ? S 00:57 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2067 0.0 0.0 283528 9028 ? S 00:57 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2118 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2119 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 2120 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2121 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2122 0.0 0.0 283524 9084 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 2123 0.0 0.0 283524 8940 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 2127 0.2 0.0 194440 17064 ? S 00:58 0:00 /usr/bin/php 1125 2128 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 2130 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2131 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 2132 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2133 0.0 0.0 283528 8988 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 2134 0.0 0.0 283528 8936 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 2144 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2145 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2146 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2147 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2148 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2156 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2164 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2165 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2166 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2167 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2170 0.0 0.0 142440 864 ? S 00:58 0:00 CROND 861 2177 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2178 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2179 0.0 0.0 106120 476 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2180 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2181 0.0 0.0 283528 9004 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2182 0.0 0.0 136464 2264 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2191 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2192 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2193 0.0 0.0 283524 8836 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 2200 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2201 0.0 0.0 142772 10228 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2216 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2287] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2223 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2514] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2226 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (recordho) [2300] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2227 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2266] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2232 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2347] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2235 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2379] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2236 0.0 0.0 106120 504 ? Ss 00:58 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2237 0.0 0.0 4612 768 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2378] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2242 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (posaufacom) [2349] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2245 0.0 0.0 4616 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2298] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2249 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [5904] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2266 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2267 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2268 0.0 0.0 283524 8844 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php root 2275 0.0 0.0 106124 640 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1125 2287 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2298 0.0 0.0 4616 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2300 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2310 0.0 0.0 142436 736 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2323 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2324 0.0 0.0 106120 460 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 recordho 2327 0.0 0.0 288180 12856 ? S 00:58 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2330 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2332 0.0 0.0 283524 9120 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2333 0.0 0.0 283524 9368 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 2336 0.0 0.0 142440 892 ? S 00:52 0:00 CROND 1125 2347 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 2348 0.0 0.0 106120 480 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2349 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2350 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 2352 0.0 0.0 115532 9744 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2354 0.0 0.0 283524 8880 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2355 0.0 0.0 283528 8996 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php nobody 2358 0.0 0.0 115712 9816 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2366 0.0 0.0 114060 8296 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start 1125 2378 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2379 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2380 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2381 0.0 0.0 106120 456 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 2382 0.0 0.0 283528 8952 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2383 0.0 0.0 136464 2260 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2386 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2387 0.0 0.0 142772 10236 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2431 0.0 0.0 106124 428 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2449 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2452 0.0 0.0 4612 628 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114484 8760 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2487 0.0 0.0 106124 620 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2501 0.0 0.0 116332 10864 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114192 7592 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2514 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2515 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2520 0.0 0.0 283524 9224 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php root 2565 0.0 0.0 142436 784 ? S 00:53 0:00 CROND root 2632 0.0 0.0 106124 656 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 41.9 93.0 75032032 61429884 ? D 00:35 10:29 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114192 7560 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 2989 0.0 0.0 106120 368 ? S 01:00 0:00 /bin/bash /bin/malv2-block.sh nobody 2990 0.0 0.0 114060 8300 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 2991 0.0 0.0 114060 7784 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 2992 0.0 0.0 106120 508 ? S 01:00 0:00 /bin/bash /bin/malv2-block.sh root 2993 0.0 0.0 84592 2984 ? Dl 01:00 0:00 nslookup 112.113.241.207 root 2994 0.0 0.0 103360 840 ? S 01:00 0:00 grep br root 2995 0.0 0.0 100976 652 ? S 01:00 0:00 wc -l nobody 2996 0.0 0.0 114060 7844 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 2998 0.0 0.0 114192 8024 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 2999 0.0 0.0 114324 8064 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 3000 0.0 0.0 114060 7844 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 3001 0.0 0.0 169980 10804 ? D 01:00 0:00 lfd - child closing nobody 3002 0.0 0.0 115668 10160 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start mailnull 3004 0.0 0.0 73980 680 ? D 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 3006 0.0 0.0 15048 264 ? D 01:00 0:00 send-mail -i -- admin@conectadohost.com.br nobody 3007 0.0 0.0 114488 8520 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 3008 0.0 0.0 114060 7844 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 3010 0.0 0.0 108344 1180 ? R 01:00 0:00 ps aux nobody 3011 0.0 0.0 114060 7784 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 3013 0.0 0.0 169980 10232 ? D 01:00 0:00 lfd - checking system integrity root 3037 0.0 0.0 142436 372 ? S 00:34 0:00 CROND root 3059 0.2 0.0 252468 1416 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 114192 7544 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 1.0 0.0 274064 15880 ? S 00:49 0:06 /usr/bin/php root 3269 0.0 0.0 106124 548 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh dovenull 3299 0.0 0.0 42760 420 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 500 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 576 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1528 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 308 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 748 ? S 00:45 0:00 dovecot/auth nobody 3514 0.0 0.0 115668 11344 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3723 0.0 0.0 114328 8812 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] root 4198 0.0 0.0 106124 648 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh metalma 4212 0.0 0.0 186284 1084 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] nobody 4680 0.0 0.0 114476 8472 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 4722 0.0 0.0 106120 488 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 624 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 8056 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.6 0.0 234216 16216 ? S 00:45 0:05 /usr/bin/php conhecsc 4812 6.7 0.0 187440 4900 ? S 00:45 1:00 /usr/bin/php progress 4846 0.4 0.0 268336 15792 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 15904 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 696 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6320 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6576 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6204 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 440 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] 861 5904 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5906 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5911 0.0 0.0 283524 8748 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 5946 0.0 0.0 106124 624 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh icowebra 6242 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 348 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4492 ? S Apr17 0:07 tailwatchd mysql 6514 18.6 0.2 6959344 182992 ? Sl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 444 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 440 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 604 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] nobody 7824 0.0 0.0 114488 8964 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 8274 0.0 0.0 142436 828 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 836 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114356 9540 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114520 9360 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8840 0.0 0.0 114480 8820 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9840 0.0 0.0 114332 9472 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114192 7448 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 452 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10695 0.0 0.0 4612 744 ? Ss 00:54 0:00 jailshell (inovesocialcom) [22587] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10851 0.0 0.0 106124 628 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10926 0.0 0.0 4640 232 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 332 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 2076 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd postgres 11213 0.0 0.0 215388 688 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 220 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 752 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 800 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11363 0.1 0.0 169980 10908 ? Ss 00:00 0:06 lfd - sleeping root 11587 0.0 0.0 106124 608 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 576 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 196 ? Ss Apr16 0:00 /usr/sbin/atd root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] nobody 11834 0.0 0.0 115520 9648 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114192 7628 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114192 8608 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 12560 0.0 0.0 4108 224 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 228 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 224 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 228 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 224 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 224 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 mailnull 12834 0.0 0.0 71028 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12835 0.0 0.0 71032 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 13203 0.0 0.0 114484 8508 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13220 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142440 916 ? S 00:55 0:00 CROND 894 13328 0.1 0.1 232440 100668 ? D 00:58 0:00 spamd child root 13329 0.0 0.1 222024 95620 ? S 00:58 0:00 spamd child root 13342 0.2 0.0 170868 12316 ? S 00:58 0:00 lfd - (child) (PT) checking user processes root 13353 0.1 0.0 58608 15640 ? DN 00:58 0:00 cpanellogd - updating bandwidth root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] 800 13403 0.0 0.0 139296 6604 ? D 00:59 0:00 php.cgi root 13422 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13423 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13424 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13425 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13426 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13434 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13443 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13444 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13445 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13446 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13449 0.0 0.0 142440 984 ? S 00:59 0:00 CROND nobody 13520 0.0 0.0 147408 7048 ? D 00:59 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/modsec_name_scan.php Big Data.png nobody 13534 0.0 0.0 147408 7052 ? D 00:59 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 47.31.15.239 root 13536 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24395] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 13537 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24418] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 13538 0.0 0.0 4612 848 ? Ss 00:59 0:00 jailshell (posaufacom) [24365] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 13541 0.0 0.0 4612 844 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24378] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 13550 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24410] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 13551 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24393] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 13552 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24401] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 13553 0.0 0.0 106120 788 ? Ss 00:59 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 13566 0.0 0.0 4612 784 ? Ss 00:59 0:00 jailshell (recordho) [24366] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 13568 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24403] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 13571 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24411] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 879 13584 0.1 0.0 186256 10224 ? S 00:59 0:00 /usr/bin/php root 13596 0.0 0.0 106128 952 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh 879 13621 0.0 0.0 185412 9084 ? S 00:59 0:00 /usr/bin/php root 13645 0.0 0.0 114060 8620 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13687 0.0 0.0 106128 536 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13821 0.0 0.0 106128 280 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3428 ? S Apr16 0:03 queueprocd - wait to process a task loppelco 15557 0.1 0.0 0 0 ? Z 00:59 0:00 [php] root 15606 0.0 0.0 25860 1700 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 nobody 15948 0.0 0.0 114512 8864 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailman 16010 0.0 0.0 120748 1300 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1012 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1212 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1000 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1016 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1064 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 992 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 992 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] loppelco 16172 0.1 0.0 0 0 ? Z 00:59 0:00 [php] loppelco 16369 0.0 0.0 0 0 ? Z 00:59 0:00 [php] root 16526 0.0 0.0 26212 632 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 loppelco 16639 0.1 0.0 0 0 ? Z 00:59 0:00 [php] root 16681 0.0 0.0 25856 1152 ? SN Apr16 0:00 cpanellogd - updating bandwidth root 16733 0.0 0.0 26208 1864 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 conhecsc 17197 0.0 0.0 191140 12992 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] loppelco 18626 0.1 0.0 0 0 ? Z 00:59 0:00 [php] noticias 18706 0.0 0.0 205684 16380 ? S 00:46 0:00 /usr/bin/php root 19132 1.0 0.0 240980 3964 ? S 00:50 0:06 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 3868 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.4 0.0 23760 8876 ? S 00:50 0:31 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 5896 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.3 0.0 249740 16828 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8096 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.0 0.0 234712 16792 ? S 00:48 0:00 /usr/bin/php nobody 20150 0.0 0.0 114344 8808 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 114192 8228 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] wwwfacul 20446 0.1 0.0 265704 16500 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114324 8508 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22997] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22984] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22986] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22900] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20497 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22965] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22996] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [23010] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22967] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 744 ? Ss 00:55 0:00 jailshell (posaufacom) [22630] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20521 0.0 0.0 4616 744 ? Ss 00:55 0:00 jailshell (recordho) [22619] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 20524 0.0 0.0 114328 8832 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20528 0.0 0.0 106120 472 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22899] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20536 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22895] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4616 756 ? Ss 00:55 0:00 jailshell (centralgib) [22883] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22636] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 724 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22641] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20542 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralc) [22897] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20546 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralgib) [22657] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php regis 20754 0.0 0.0 186880 6040 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 9784 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.0 0.0 263164 16044 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 21237 0.0 0.0 106124 624 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21514 0.0 0.0 114332 8600 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22296 0.0 0.0 106124 572 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22377 0.0 0.0 114196 8828 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] 1125 22587 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22610 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 22615 0.0 0.0 114200 8120 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 22619 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 22623 0.0 0.0 288180 12720 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 22629 0.0 0.0 136464 2264 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 22630 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22631 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22633 0.0 0.0 283528 8788 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1120 22636 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 22637 0.0 0.0 287692 12396 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 22641 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 699 22642 0.0 0.0 288180 12744 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 22651 0.0 0.0 142436 804 ? S 00:56 0:00 CROND nobody 22653 0.0 0.0 114352 8840 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22654 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22657 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22658 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22661 0.0 0.0 241636 11740 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22670 0.0 0.0 142436 812 ? S 00:56 0:00 CROND nobody 22674 0.0 0.0 114324 8584 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22678 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142440 920 ? S 00:56 0:00 CROND nobody 22689 0.0 0.0 114360 8512 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22690 0.0 0.0 114192 8400 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22704 0.0 0.0 114488 9048 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 1077 22883 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 22884 0.0 0.0 241624 11740 ? D 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 22886 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 recordho 22890 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 22894 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 699 22895 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 861 22896 0.0 0.0 283528 8768 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php centralc 22897 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22899 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22900 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 recordho 22907 0.0 0.0 288180 12720 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 699 22909 0.0 0.0 287692 12404 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 22911 0.0 0.0 288180 12748 ? S 00:56 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22912 0.0 0.0 288180 12740 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22913 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22915 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22939 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22940 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 22941 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22944 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22947 0.0 0.0 283528 8936 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22948 0.0 0.0 283528 8708 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1086 22951 0.0 0.0 9464 456 ? S 00:56 0:00 /bin/sh php.cgi 1086 22952 0.0 0.0 9460 448 ? S 00:56 0:00 /bin/sh php.cgi 1125 22954 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22955 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22956 0.0 0.0 283524 8932 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 22960 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22961 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22962 0.0 0.0 283528 8932 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 22965 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22966 0.0 0.0 106120 460 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 22967 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22968 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22969 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22970 0.0 0.0 283528 8784 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 22975 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22976 0.0 0.0 106124 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22977 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22979 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22980 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22981 0.0 0.0 283528 8784 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 22984 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22985 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 22986 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 22987 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 22988 0.0 0.0 283388 8900 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 22989 0.0 0.0 283524 8800 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 22991 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22992 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22993 0.0 0.0 136464 2060 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 22996 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22997 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 22998 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22999 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 23000 0.0 0.0 283524 8752 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 23001 0.0 0.0 283524 8936 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 23005 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23006 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23007 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 952 23008 0.0 0.0 141736 8472 ? S 00:56 0:00 php.cgi 1125 23010 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23011 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23012 0.0 0.0 136464 2156 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1086 23024 0.0 0.0 142528 9956 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi 1086 23025 0.0 0.0 142524 9948 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23092 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23093 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23094 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23095 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23096 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23104 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23112 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23113 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23114 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23115 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23118 0.0 0.0 142440 844 ? S 00:57 0:00 CROND pdvxyz 23169 0.0 0.0 185472 7104 ? S 00:57 0:00 /usr/bin/php conect 23178 0.0 0.0 184964 6952 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 184960 6948 ? S 00:57 0:00 /usr/bin/php conect 23186 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23187 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23188 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23189 0.0 0.0 184960 6936 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 184960 6936 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 6888 ? S 00:57 0:00 /usr/bin/php conect 23195 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php conect 23200 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23201 0.0 0.0 184960 6948 ? S 00:57 0:00 /usr/bin/php conect 23203 0.0 0.0 184960 6944 ? S 00:57 0:00 /usr/bin/php conect 23204 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php 879 23208 0.1 0.0 187024 9620 ? S 00:57 0:00 /usr/bin/php root 23227 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (posaufacom) [2042] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 23231 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2038] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 23235 0.0 0.0 106120 504 ? Ss 00:57 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 23239 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2177] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 23245 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (recordho) [2044] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 23250 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2178] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 23252 0.0 0.0 4612 760 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2118] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 23253 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (posaufacom) [2120] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 23254 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2191] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 23255 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2131] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 23257 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2128] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 23258 0.0 0.0 106124 640 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 23284 0.0 0.0 71032 1500 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23286 0.0 0.0 71032 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23287 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] mailnull 23295 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23296 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23298 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23299 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23300 0.0 0.0 71028 1504 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] nobody 23364 0.0 0.0 114324 8716 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start root 23404 0.0 0.0 106124 660 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 23656 0.0 0.0 115520 10976 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start rmaiasa 24094 0.1 0.0 185976 12272 ? D 00:59 0:00 /usr/bin/php root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] 861 24365 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 24366 0.0 0.0 4612 328 ? S 00:59 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 24373 0.0 0.0 288180 14144 ? S 00:59 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 24376 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 24378 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 24379 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 24385 0.0 0.0 283528 10352 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 24387 0.0 0.0 283524 10212 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 24393 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 24394 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 24395 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 24396 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 24397 0.0 0.0 283524 10208 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 24398 0.0 0.0 136464 2624 ? S 00:59 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 24401 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 24402 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 24403 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 24404 0.0 0.0 106124 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 24405 0.0 0.0 283524 10220 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 24406 0.0 0.0 283524 10188 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 24410 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24411 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 24412 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24413 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 24414 0.0 0.0 283528 10212 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 24415 0.0 0.0 283532 10220 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 24418 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24419 0.0 0.0 106120 820 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24420 0.0 0.0 283528 10328 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php nobody 24445 0.0 0.0 115520 9592 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24469 0.0 0.0 114060 7948 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24472 0.0 0.0 114208 8504 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24526 0.0 0.0 147408 7060 ? D 00:59 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 47.31.15.239 1125 24527 0.0 0.0 9456 816 ? S 00:59 0:00 /bin/sh php.cgi mailnull 24533 0.0 0.0 71032 2304 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 24537 0.1 0.0 140044 7920 ? D 00:59 0:00 /opt/php/php-5.6.26/bin/php-cgi diadiapr 24538 0.1 0.0 185920 11080 ? D 00:59 0:00 /usr/bin/php wdcpubli 24539 0.0 0.0 135656 4028 ? D 00:59 0:00 php.cgi icowebra 24540 0.3 0.0 193924 17476 ? S 00:59 0:00 /usr/bin/php picapau 24541 0.1 0.0 185936 11708 ? D 00:59 0:00 /usr/bin/php 881 24550 0.3 0.0 189280 16456 ? D 00:59 0:00 /usr/bin/php icowebra 24551 0.2 0.0 212472 34804 ? D 00:59 0:00 /usr/bin/php mailnull 24557 0.0 0.0 74020 1284 ? D 00:59 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] loppelco 24582 0.1 0.0 186764 12648 ? D 00:59 0:00 /usr/bin/php root 24590 0.0 0.0 170112 11292 ? S 00:59 0:00 lfd - (child) blocking 177.133.74.217 named 24611 0.1 0.0 748664 8556 ? Ssl Apr17 0:39 /usr/sbin/named -u named -t /var/named/chroot samuel 24627 0.0 0.0 9456 812 ? S 00:59 0:00 /bin/sh php.cgi voarloca 24631 0.2 0.0 185932 11760 ? D 00:59 0:00 /usr/bin/php samuel 24632 0.0 0.0 126576 4304 ? D 00:59 0:00 /opt/php/php-5.5.6/bin/php-cgi root 24633 0.3 0.0 144612 12608 ? D 00:59 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf -d 177.133.74.217 lfd: (smtpauth) Failed SMTP AUTH login from 177.133.74.217 (BR/Brazil/177.133.74.217.dynamic.adsl.gvt.net.br): 5 in the last 3600 secs mailnull 24634 0.0 0.0 71028 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 24635 0.0 0.0 71032 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 24640 0.0 0.0 114736 9996 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24641 0.0 0.0 114060 9612 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start root 24643 0.0 0.0 170112 11216 ? D 00:59 0:00 lfd - (child) closing nobody 24649 0.0 0.0 114324 10208 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24650 0.0 0.0 114736 9996 ? D 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24651 0.0 0.0 114208 10276 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start mailnull 24652 0.0 0.0 75092 1996 ? D 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 24653 0.0 0.0 114480 10164 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24654 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24657 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24658 0.0 0.0 142436 1296 ? S 01:00 0:00 CROND root 24659 0.0 0.0 142436 1296 ? S 01:00 0:00 CROND root 24660 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND nobody 24661 0.0 0.0 114328 10024 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24662 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24663 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24664 0.0 0.0 142436 1296 ? S 01:00 0:00 CROND root 24665 0.0 0.0 142436 1296 ? S 01:00 0:00 CROND root 24666 0.0 0.0 142436 1296 ? S 01:00 0:00 CROND root 24667 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24668 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24669 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24670 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24671 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24674 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24675 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24677 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24678 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24681 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24685 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24686 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24689 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24690 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24691 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24692 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24693 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24694 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24695 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24696 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24697 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24698 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24699 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24700 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24701 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24702 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24703 0.0 0.0 142436 1280 ? S 01:00 0:00 CROND root 24704 0.0 0.0 142436 1264 ? S 01:00 0:00 CROND root 24705 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24706 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24707 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24708 0.0 0.0 142436 1288 ? S 01:00 0:00 CROND root 24709 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND root 24710 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24711 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24712 0.0 0.0 142436 1284 ? S 01:00 0:00 CROND root 24713 0.0 0.0 142436 1276 ? S 01:00 0:00 CROND nobody 24714 0.0 0.0 114488 10464 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24715 0.0 0.0 169980 10944 ? D 01:00 0:00 child - aborting mailnull 24716 0.1 0.0 71968 5212 ? D 01:00 0:00 /usr/sbin/sendmail -f root -t nobody 24717 0.0 0.0 115712 9524 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24718 0.0 0.0 106124 436 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24719 0.0 0.0 100988 552 ? D 01:00 0:00 cat /usr/local/cpanel/logs/access_log root 24720 0.0 0.0 103360 844 ? S 01:00 0:00 grep 104.168.170.128 root 24721 0.0 0.0 103360 836 ? S 01:00 0:00 grep user root 24722 0.0 0.0 106124 436 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24723 0.0 0.0 100988 556 ? D 01:00 0:00 cat /usr/local/cpanel/logs/access_log root 24724 0.0 0.0 103360 848 ? S 01:00 0:00 grep 104.168.170.128 root 24725 0.0 0.0 103360 844 ? S 01:00 0:00 grep user nobody 24726 0.0 0.0 115608 9756 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24727 0.0 0.0 169980 10800 ? D 01:00 0:00 lfd - (child) closing mailnull 24728 0.0 0.0 74004 1256 ? S 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 24730 0.0 0.0 74880 1300 ? S 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 24731 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24732 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24733 0.0 0.0 169980 10888 ? D 01:00 0:00 lfd - (child) closing root 24734 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24735 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24736 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24737 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24738 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24739 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing root 24740 0.0 0.0 169980 10884 ? D 01:00 0:00 lfd - (child) closing nobody 24741 0.0 0.0 114360 8188 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24742 0.0 0.0 106124 532 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24743 0.0 0.0 106124 536 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24744 0.0 0.0 106124 532 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24745 0.0 0.0 106124 528 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24746 0.0 0.0 106124 532 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24747 0.0 0.0 106128 532 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24748 0.0 0.0 100988 568 ? D 01:00 0:00 cat /var/log/messages root 24749 0.0 0.0 100988 564 ? D 01:00 0:00 cat /var/log/messages root 24750 0.0 0.0 100988 568 ? D 01:00 0:00 cat /var/log/messages root 24751 0.0 0.0 100988 556 ? D 01:00 0:00 cat /var/log/messages root 24752 0.0 0.0 100992 524 ? D 01:00 0:00 cat /var/log/messages root 24753 0.0 0.0 100988 548 ? D 01:00 0:00 cat /var/log/messages root 24754 0.1 0.0 103360 848 ? S 01:00 0:00 grep 104.130.11.193 root 24755 0.1 0.0 103360 848 ? S 01:00 0:00 grep 104.198.121.116 root 24756 0.1 0.0 103360 844 ? S 01:00 0:00 grep 104.168.170.128 root 24757 0.1 0.0 103360 848 ? S 01:00 0:00 grep 104.168.170.128 root 24758 0.1 0.0 103360 848 ? S 01:00 0:00 grep 104.198.121.116 root 24759 0.1 0.0 103360 848 ? S 01:00 0:00 grep 104.198.121.116 root 24760 0.0 0.0 103360 844 ? S 01:00 0:00 grep user root 24761 0.0 0.0 103360 844 ? S 01:00 0:00 grep user root 24762 0.0 0.0 103360 836 ? S 01:00 0:00 grep user root 24763 0.0 0.0 103360 840 ? S 01:00 0:00 grep user root 24764 0.0 0.0 103360 844 ? S 01:00 0:00 grep user root 24765 0.0 0.0 103360 840 ? S 01:00 0:00 grep user root 24767 0.0 0.0 106120 1148 ? Ss 01:00 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 24768 0.0 0.0 4612 948 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 24769 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 24770 0.0 0.0 4612 932 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto3.php root 24771 0.0 0.0 4612 928 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 24772 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 24773 0.0 0.0 4612 924 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 24777 0.0 0.0 128688 3684 ? Ds 01:00 0:00 /usr/local/cpanel/3rdparty/bin/php /usr/share/ilabs_antimalware/cron/cronjobs.php root 24778 0.0 0.0 4612 936 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 24779 0.0 0.0 4352 604 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 24780 0.0 0.0 4612 944 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 24782 0.0 0.0 4352 604 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 24783 0.0 0.0 106120 1188 ? Ss 01:00 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 24784 0.0 0.0 106120 1188 ? Ss 01:00 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 24786 0.0 0.0 106120 1188 ? Ss 01:00 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 24787 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto.php root 24788 0.0 0.0 4352 604 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 24789 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://posaufa.com.br/sis/index.php/cron root 24791 0.0 0.0 4612 932 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:email:fetch root 24792 0.0 0.0 106120 1180 ? Ss 01:00 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 24793 0.0 0.0 4616 936 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 24795 0.0 0.0 4352 604 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php root 24798 0.0 0.0 106120 1188 ? Ss 01:00 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 24799 0.0 0.0 106120 1184 ? Ss 01:00 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 24800 0.0 0.0 4352 604 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 24801 0.0 0.0 106120 1184 ? Ss 01:00 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 24802 0.0 0.0 106120 1184 ? Ss 01:00 0:00 /bin/sh -c /bin/corrigir-problemas.sh > /dev/null 2>&1 root 24803 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 24804 0.2 0.0 133660 5600 ? Ds 01:00 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpbackup root 24805 0.0 0.0 4612 940 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 24807 0.0 0.0 106120 1152 ? Ss 01:00 0:00 /bin/sh -c /bin/protege-banco.sh > /dev/null 2>&1 root 24808 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:webhooks:process root 24809 0.0 0.0 4612 936 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php root 24810 0.0 0.0 4612 936 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 24811 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 24812 0.0 0.0 4612 952 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 24813 0.0 0.0 4612 948 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 24814 0.0 0.0 4352 604 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 24815 0.0 0.0 4352 600 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 24816 0.0 0.0 4352 588 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 24817 0.0 0.0 4612 884 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 24818 0.0 0.0 4612 948 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/portal/public_html/pipe/pop.php root 24819 0.0 0.0 4612 936 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 24820 0.0 0.0 4352 596 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 24821 0.0 0.0 4612 948 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 24822 0.0 0.0 4352 596 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 24823 0.0 0.0 4612 944 ? Ss 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php nobody 24824 0.0 0.0 114196 8488 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 24825 0.0 0.0 114060 8220 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24829 0.0 0.0 140028 4620 ? D 01:00 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 24830 0.0 0.0 106120 1372 ? S 01:00 0:00 /bin/bash /bin/brut-filtro.sh root 24832 0.0 0.0 46752 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 24833 0.1 0.0 46756 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 24834 0.0 0.0 46752 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 24835 0.0 0.0 46748 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 24836 0.1 0.0 46672 10780 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 879 root 24837 0.0 0.0 46752 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 24842 0.0 0.0 106120 1404 ? S 01:00 0:00 /bin/bash /bin/malv-block.sh root 24843 0.0 0.0 106124 1164 ? S 01:00 0:00 /bin/bash /bin/corrigir-problemas.sh root 24848 0.2 0.0 133464 7260 ? D 01:00 0:00 /usr/local/cpanel/bin/dcpumon root 24849 0.0 0.0 106124 1380 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24852 0.0 0.0 46748 10960 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs root 24853 0.0 0.0 106124 1348 ? S 01:00 0:00 /bin/bash /bin/monitora-load.sh root 24854 0.0 0.0 106120 1172 ? S 01:00 0:00 /bin/bash /bin/corrigir-ips.sh root 24855 0.0 0.0 46752 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 24856 0.0 0.0 46756 10968 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 24858 0.0 0.0 106120 504 ? S 01:00 0:00 /bin/bash /bin/corrigir-ips.sh root 24863 0.0 0.0 139260 3308 ? S 01:00 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 24865 0.0 0.0 103360 840 ? S 01:00 0:00 grep sim root 24867 0.0 0.0 100976 652 ? S 01:00 0:00 wc -l root 24873 0.0 0.0 130236 4072 ? S 01:00 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] nobody 24884 0.0 0.0 115520 9288 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 24894 0.0 0.0 114060 8264 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24916 0.0 0.0 106124 604 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24939 0.0 0.0 106124 396 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24940 0.0 0.0 100988 568 ? D 01:00 0:00 cat /var/log/exim_mainlog root 24941 0.0 0.0 103360 844 ? S 01:00 0:00 grep 104.130.11.193 root 25628 0.1 0.0 0 0 ? S Apr17 0:13 [kworker/u24:1] root 26367 0.0 0.0 106120 1296 ? S 01:00 0:00 /bin/bash /bin/protege-banco.sh 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 26437 0.0 0.0 46748 10960 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 1030 root 26438 0.1 0.0 46756 10968 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 707 maisg647 26560 0.0 0.0 241460 16188 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 15884 ? S Apr17 0:00 /usr/bin/php nobody 26584 0.0 0.0 114192 8308 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start loppelco 26592 0.0 0.0 187260 15876 ? S Apr17 0:00 /usr/bin/php nobody 26595 0.0 0.0 114736 8212 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 26601 0.0 0.0 119004 1568 ? D 01:00 0:00 mysqlcheck --repair eximstats postgres 26602 0.0 0.0 216640 2332 ? Ds 01:00 0:00 postgres: autovacuum worker process 860 26614 0.0 0.0 186420 7384 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1560 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 304 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114328 8524 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start mailnull 26646 0.0 0.0 76328 3512 ? S 00:56 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid recordho 26670 0.0 0.0 288180 12712 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 992 26701 0.0 0.0 187676 8448 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 728 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11028 ? S Apr17 0:00 /usr/bin/php 1125 26765 0.0 0.0 136464 2240 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 283524 8788 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 396 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 296 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 27359 0.0 0.0 114736 8212 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start root 27734 0.0 0.0 106120 652 ? S 01:00 0:00 /bin/bash /bin/brut-filtro.sh root 27844 0.0 0.0 106120 536 ? S 01:00 0:00 /bin/bash /bin/brut-filtro.sh root 27846 0.0 0.0 84596 2984 ? Dl 01:00 0:00 nslookup 143.0.115.31 root 27848 0.0 0.0 103360 844 ? S 01:00 0:00 grep br root 27850 0.0 0.0 100976 648 ? S 01:00 0:00 wc -l root 28054 0.0 0.0 46752 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 699 nobody 28133 0.0 0.0 114192 8744 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 115608 10036 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28172 0.0 0.0 106120 480 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28183 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22939] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (recordho) [22890] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22960] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4612 756 ? Ss 00:56 0:00 jailshell (posaufacom) [22979] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28188 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22886] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28191 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [23005] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22975] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22954] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28195 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22991] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22940] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] 861 28782 0.0 0.0 141756 8296 ? S 00:56 0:00 php.cgi root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29231 0.0 0.0 106124 624 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] root 29930 0.0 0.0 46752 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 icowebra 30070 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114344 8744 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.1 222024 96028 ? Ss Apr16 6:16 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 nobody 31456 0.0 0.0 116004 9532 ? D 01:00 0:00 /usr/local/apache/bin/httpd -k start gfebe 31861 0.0 0.0 185676 2148 ? S 00:49 0:00 /usr/bin/php root 32007 0.0 0.0 106120 1332 ? S 01:00 0:00 /bin/bash /bin/malv2-block.sh root 32028 0.1 0.0 46804 11088 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 784 root 32093 0.1 0.0 46748 10960 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 32094 0.1 0.0 46748 10960 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 32114 0.2 0.0 46752 10964 ? D 01:00 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] root 32642 0.0 0.0 106120 628 ? S 01:00 0:00 /bin/bash /bin/protege-banco.sh root 32644 0.0 0.0 106120 508 ? S 01:00 0:00 /bin/bash /bin/protege-banco.sh root 32646 0.0 0.0 84592 2988 ? Dl 01:00 0:00 nslookup 177.133.84.253 root 32648 0.0 0.0 103360 840 ? S 01:00 0:00 grep br root 32650 0.0 0.0 100976 652 ? S 01:00 0:00 wc -l USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 708 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:26 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:50 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1937 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/9:0] 1125 1950 0.0 0.0 9460 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1951 0.0 0.0 9456 468 ? S 00:57 0:00 /bin/sh php.cgi 1125 1952 0.0 0.0 9456 472 ? S 00:57 0:00 /bin/sh php.cgi 1125 1953 0.0 0.0 9456 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1960 0.0 0.0 142776 10240 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1961 0.0 0.0 142768 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1962 0.0 0.0 142772 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1963 0.0 0.0 142768 10228 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi root 1970 0.0 0.0 106124 380 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 664 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 480 ? S Apr16 0:01 dovecot/anvil 1125 2038 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2042 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2044 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 2057 0.0 0.0 106120 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 2058 0.0 0.0 288180 12900 ? S 00:57 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 2060 0.0 0.0 106124 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2066 0.0 0.0 283524 9084 ? S 00:57 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2067 0.0 0.0 283528 9028 ? S 00:57 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2118 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2119 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 2120 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2121 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2122 0.0 0.0 283524 9084 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 2123 0.0 0.0 283524 8940 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 2127 0.1 0.0 194440 17328 ? D 00:58 0:00 /usr/bin/php 1125 2128 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 2130 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2131 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 2132 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2133 0.0 0.0 283528 8988 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 2134 0.0 0.0 283528 8936 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 2144 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2145 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2146 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2147 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2148 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2156 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2164 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2165 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2166 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2167 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2170 0.0 0.0 142440 864 ? S 00:58 0:00 CROND 861 2177 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2178 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2179 0.0 0.0 106120 476 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2180 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2181 0.0 0.0 283528 9004 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2182 0.0 0.0 136464 2264 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2191 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2192 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2193 0.0 0.0 283524 8836 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 2200 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2201 0.0 0.0 142772 10228 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2216 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2287] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2223 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2514] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2226 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (recordho) [2300] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2227 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2266] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2232 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2347] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2235 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2379] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2236 0.0 0.0 106120 504 ? Ss 00:58 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2237 0.0 0.0 4612 768 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2378] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2242 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (posaufacom) [2349] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2245 0.0 0.0 4616 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2298] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2249 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [5904] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2266 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2267 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2268 0.0 0.0 283524 8844 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php root 2275 0.0 0.0 106124 640 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1125 2287 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2298 0.0 0.0 4616 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2300 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2310 0.0 0.0 142436 736 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2323 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2324 0.0 0.0 106120 460 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 recordho 2327 0.0 0.0 288180 12856 ? S 00:58 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2330 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2332 0.0 0.0 283524 9120 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2333 0.0 0.0 283524 9368 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 2336 0.0 0.0 142440 892 ? S 00:52 0:00 CROND 1125 2347 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 2348 0.0 0.0 106120 480 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2349 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2350 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2354 0.0 0.0 283524 8880 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2355 0.0 0.0 283528 8996 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php nobody 2366 0.0 0.0 114500 9764 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start 1125 2378 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2379 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2380 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2381 0.0 0.0 106120 456 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 2382 0.0 0.0 283528 8952 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2383 0.0 0.0 136464 2260 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2386 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2387 0.0 0.0 142772 10236 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2431 0.0 0.0 106124 428 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2449 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2452 0.0 0.0 4612 628 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 114488 9260 ? D 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2487 0.0 0.0 106124 620 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2501 0.0 0.0 116332 10864 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114192 7592 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2514 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2515 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2520 0.0 0.0 283524 9224 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php root 2565 0.0 0.0 142436 784 ? S 00:53 0:00 CROND root 2632 0.0 0.0 106124 700 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 40.7 73.7 50051140 48686340 ? D 00:35 10:30 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114192 7560 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2990 0.0 0.0 115540 10708 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 2991 0.0 0.0 115520 10248 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 3001 0.0 0.0 169980 12068 ? D 01:00 0:00 lfd - child closing nobody 3011 0.0 0.0 114324 9408 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 3013 0.0 0.0 169980 10680 ? S 01:00 0:00 lfd - checking system integrity nobody 3027 0.0 0.0 114200 8968 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 3031 0.0 0.0 114332 8976 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start picapau 3032 0.1 0.0 185932 17396 ? D 01:00 0:00 /usr/bin/php 699 3034 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 1125 3036 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 3037 0.0 0.0 142436 372 ? S 00:34 0:00 CROND centralc 3039 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php 1077 3041 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php 1120 3042 0.0 0.0 4612 332 ? S 01:00 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1125 3044 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 699 3046 0.1 0.0 287692 20420 ? S 01:00 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 3048 0.1 0.0 287692 20424 ? S 01:00 0:00 php -q /home/centralc/public_html/pipe/pipe.php 1120 3051 0.1 0.0 287692 20432 ? S 01:00 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 3052 0.0 0.0 241372 18004 ? D 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php root 3059 0.2 0.0 252468 1416 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all recordho 3063 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 3068 0.1 0.0 288180 20752 ? S 01:00 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 3074 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 3075 0.0 0.0 106120 1124 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 3076 0.0 0.0 100988 724 ? D 01:00 0:00 /usr/bin/md5sum --check /var/lib/csf/csf.tempint 861 3080 0.0 0.0 283524 16436 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 3081 0.0 0.0 283524 16460 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php nobody 3115 0.0 0.0 114192 7544 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 0.9 0.0 274064 15880 ? S 00:49 0:06 /usr/bin/php 881 3245 0.1 0.0 186008 18312 ? D 01:00 0:00 /usr/bin/php root 3269 0.0 0.0 106124 740 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 3294 0.0 0.0 169980 12316 ? D 01:00 0:00 lfd - (child) closing root 3295 0.0 0.0 169980 12168 ? D 01:00 0:00 lfd - (child) closing root 3296 0.0 0.0 169980 12164 ? D 01:00 0:00 lfd - (child) closing root 3297 0.0 0.0 169980 12308 ? D 01:00 0:00 lfd - (child) closing root 3298 0.0 0.0 169980 12288 ? D 01:00 0:00 lfd - (child) closing dovenull 3299 0.0 0.0 42760 420 ? D 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 484 ? S 00:45 0:00 dovecot/log root 3302 0.0 0.0 169980 12168 ? D 01:00 0:00 lfd - (child) closing root 3303 0.0 0.0 169980 12304 ? D 01:00 0:00 lfd - (child) closing root 3304 0.0 0.0 169980 12288 ? D 01:00 0:00 lfd - (child) closing root 3305 0.0 0.0 169980 12296 ? D 01:00 0:00 lfd - (child) closing dovenull 3307 0.0 0.0 42760 576 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1528 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 308 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 896 ? S 00:45 0:00 dovecot/auth loppelco 3325 0.1 0.0 186780 18036 ? D 01:00 0:00 /usr/bin/php root 3376 0.0 0.0 169980 12320 ? D 01:00 0:00 lfd - (child) closing guiame 3388 0.1 0.0 185608 14492 ? S 01:00 0:00 /usr/bin/php 879 3435 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (distribuidoresaz) [init] get -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto3.php 879 3436 0.0 0.0 135264 2052 ? S 01:00 0:00 wget -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto3.php portal 3443 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (portal) [init] shell -c php -q /home/portal/public_html/pipe/pop.php portal 3444 0.1 0.0 288848 20240 ? S 01:00 0:00 php -q /home/portal/public_html/pipe/pop.php mailnull 3445 0.0 0.0 71032 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3451 0.0 0.0 74020 1556 ? S 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid loppelco 3454 0.1 0.0 186780 18032 ? D 01:00 0:00 /usr/bin/php 879 3455 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (distribuidoresaz) [init] get -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto.php 699 3456 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 1125 3457 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 centralc 3458 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 3459 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 861 3463 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 loppelco 3464 0.1 0.0 186780 18032 ? D 01:00 0:00 /usr/bin/php 1077 3465 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 3466 0.0 0.0 106120 1112 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 699 3467 0.1 0.0 288180 20756 ? S 01:00 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 879 3468 0.0 0.0 135264 2052 ? S 01:00 0:00 wget -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto.php centralc 3469 0.1 0.0 288180 20752 ? S 01:00 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 3471 0.1 0.0 288180 20744 ? S 01:00 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 861 3474 0.0 0.0 106120 1104 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1077 3475 0.1 0.0 241368 18008 ? D 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 3476 0.0 0.0 283528 16588 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 3477 0.1 0.0 283528 16604 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/misc.php mailnull 3478 0.0 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 861 3489 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c wget -O - -q -t 1 http://posaufa.com.br/sis/index.php/cron 1125 3490 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1077 3491 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1125 3492 0.0 0.0 106120 1108 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 3493 0.0 0.0 135264 2032 ? S 01:00 0:00 wget -O - -q -t 1 http://posaufa.com.br/sis/index.php/cron 1077 3494 0.1 0.0 241376 18020 ? D 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1125 3495 0.0 0.0 283524 16360 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 3498 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 3499 0.0 0.0 106120 1120 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 3500 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 3501 0.0 0.0 106120 1092 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 3502 0.0 0.0 283524 16440 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 861 3503 0.0 0.0 283524 16456 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 3506 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 3507 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 3508 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 3509 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 3510 0.0 0.0 283524 16464 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 3511 0.0 0.0 136464 4364 ? S 01:00 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron nobody 3514 0.0 0.0 115668 11812 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start loppelco 3518 0.2 0.0 186636 22072 ? S 01:00 0:00 /usr/bin/php 881 3521 0.3 0.0 189352 22424 ? D 01:00 0:00 /usr/bin/php 881 3546 0.3 0.0 189352 22420 ? D 01:00 0:00 /usr/bin/php guiame 3551 0.1 0.0 185608 14836 ? S 01:00 0:00 /usr/bin/php 1037 3560 0.1 0.0 185624 14792 ? S 01:00 0:00 /usr/bin/php 1003 3561 0.1 0.0 185608 14576 ? S 01:00 0:00 /usr/bin/php 861 3565 0.0 0.0 140832 14476 ? D 01:00 0:00 php.cgi 1053 3567 0.1 0.0 185740 15356 ? D 01:00 0:00 /usr/bin/php root 3569 0.0 0.0 169980 12196 ? D 01:00 0:00 lfd - (child) closing root 3570 0.0 0.0 169980 12224 ? D 01:00 0:00 lfd - (child) closing root 3571 0.0 0.0 169980 12220 ? D 01:00 0:00 lfd - (child) closing root 3572 0.0 0.0 169980 12224 ? D 01:00 0:00 lfd - (child) closing root 3573 0.0 0.0 169980 12228 ? D 01:00 0:00 lfd - (child) closing root 3574 0.0 0.0 169980 12208 ? D 01:00 0:00 lfd - (child) closing root 3575 0.0 0.0 169980 12220 ? D 01:00 0:00 lfd - (child) closing root 3576 0.0 0.0 169980 12224 ? D 01:00 0:00 lfd - (child) closing root 3577 0.0 0.0 169980 12224 ? D 01:00 0:00 lfd - (child) closing 881 3578 0.3 0.0 189352 22464 ? D 01:00 0:00 /usr/bin/php root 3579 0.0 0.0 169980 12416 ? D 01:00 0:00 lfd - child closing root 3580 0.0 0.0 169980 12376 ? D 01:00 0:00 lfd - child closing root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] mailnull 3598 0.0 0.0 74280 2764 ? S 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid samuel 3599 0.0 0.0 9456 1120 ? S 01:00 0:00 /bin/sh php.cgi mailnull 3602 0.1 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3603 0.1 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3605 0.1 0.0 71028 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3608 0.0 0.0 71028 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3611 0.0 0.0 71036 3392 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3612 0.1 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3614 0.1 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3616 0.1 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 3617 4.4 0.5 531024 373776 ? D 01:00 0:01 lfd - (child) closing root 3637 0.0 0.0 169980 12244 ? D 01:00 0:00 lfd - (child) closing root 3638 0.0 0.0 169980 12268 ? D 01:00 0:00 lfd - (child) closing root 3639 0.0 0.0 169980 12256 ? D 01:00 0:00 lfd - (child) closing root 3640 0.0 0.0 169980 12248 ? D 01:00 0:00 lfd - (child) closing samuel 3660 0.1 0.0 140516 15184 ? S 01:00 0:00 /opt/php/php-5.5.6/bin/php-cgi 1125 3670 0.0 0.0 9456 1124 ? S 01:00 0:00 /bin/sh php.cgi 1125 3671 0.0 0.0 140040 13596 ? D 01:00 0:00 /opt/php/php-5.6.26/bin/php-cgi agitae 3672 0.1 0.0 185660 16020 ? D 01:00 0:00 /usr/bin/php root 3673 0.0 0.0 119400 1808 ? S 01:00 0:00 mysqladmin processlist root 3677 0.0 0.0 169980 12316 ? D 01:00 0:00 lfd - (child) closing root 3678 0.0 0.0 169980 12184 ? D 01:00 0:00 lfd - (child) closing root 3679 0.0 0.0 169980 12196 ? D 01:00 0:00 lfd - (child) closing root 3680 0.0 0.0 169980 12204 ? D 01:00 0:00 lfd - (child) closing root 3681 0.0 0.0 169980 12328 ? D 01:00 0:00 lfd - (child) closing 992 3695 0.1 0.0 185492 14220 ? D 01:00 0:00 /usr/bin/php root 3721 0.0 0.0 142436 1448 ? S 01:01 0:00 CROND root 3722 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND nobody 3723 0.0 0.0 114328 8812 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3724 0.0 0.0 142436 1472 ? S 01:01 0:00 CROND root 3725 0.0 0.0 142436 1472 ? S 01:01 0:00 CROND root 3726 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3727 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3728 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3729 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3730 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3732 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND root 3733 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND root 3735 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND root 3738 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND root 3742 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND root 3746 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3747 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3748 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3749 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3750 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3751 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND root 3752 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3753 0.0 0.0 142436 1448 ? S 01:01 0:00 CROND root 3756 0.0 0.0 169980 12184 ? D 01:01 0:00 lfd - child closing root 3757 0.0 0.0 169980 12580 ? D 01:01 0:00 lfd - (child) closing root 3758 0.0 0.0 169980 12336 ? D 01:01 0:00 lfd - (child) closing root 3759 0.0 0.0 169980 12340 ? D 01:01 0:00 lfd - (child) closing root 3760 0.0 0.0 169980 12188 ? D 01:01 0:00 lfd - (child) closing root 3768 0.0 0.0 106124 536 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 3769 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/messages root 3770 0.0 0.0 103360 852 ? S 01:01 0:00 grep 104.130.11.193 root 3771 0.0 0.0 103360 844 ? S 01:01 0:00 grep user root 3780 0.0 0.0 169980 12384 ? D 01:01 0:00 child - aborting root 3781 0.0 0.0 169980 12216 ? D 01:01 0:00 lfd - (child) closing nossojor 3782 0.2 0.0 185628 15756 ? D 01:01 0:00 /usr/bin/php 881 3795 0.8 0.0 189356 22432 ? D 01:01 0:00 /usr/bin/php voarloca 3796 0.2 0.0 185648 16244 ? D 01:01 0:00 /usr/bin/php nobody 3803 0.0 0.0 114196 9100 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start voarloca 3816 0.2 0.0 185648 16244 ? D 01:01 0:00 /usr/bin/php 1003 3822 0.0 0.0 137036 688 ? S 01:01 0:00 pure-ftpd (IDLE) root 3823 0.0 0.0 136824 128 ? S 01:01 0:00 pure-ftpd (PRIV) root 3830 0.0 0.0 106124 388 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 3831 0.0 0.0 106124 392 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 3832 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 3833 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 3834 0.0 0.0 103360 852 ? S 01:01 0:00 grep 104.198.121.116 root 3835 0.0 0.0 103364 852 ? S 01:01 0:00 grep 104.198.121.116 root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3840 0.0 0.0 169980 12232 ? D 01:01 0:00 lfd - (child) closing root 3841 0.0 0.0 169980 12232 ? D 01:01 0:00 lfd - (child) closing root 3842 0.0 0.0 169980 12236 ? D 01:01 0:00 lfd - (child) closing root 3843 0.0 0.0 169980 12240 ? D 01:01 0:00 lfd - (child) closing root 3852 0.0 0.0 106120 1184 ? Ss 01:01 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 3853 0.0 0.0 4612 936 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 3854 0.0 0.0 106120 1408 ? Ss 01:01 0:00 /bin/bash /usr/bin/run-parts /etc/cron.hourly root 3856 0.0 0.0 4352 572 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 3857 0.0 0.0 4352 588 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 3859 0.0 0.0 4612 952 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 3862 0.0 0.0 4612 936 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 3863 0.0 0.0 4612 924 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 3864 0.0 0.0 4352 596 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 3865 0.0 0.0 4352 588 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 3866 0.0 0.0 106120 1192 ? Ss 01:01 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 3868 0.0 0.0 4352 604 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 3869 0.0 0.0 106120 1188 ? Ss 01:01 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 3870 0.0 0.0 106120 1188 ? Ss 01:01 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 3872 0.0 0.0 4352 596 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 3873 0.0 0.0 106120 1192 ? Ss 01:01 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 3874 0.0 0.0 106120 1196 ? Ss 01:01 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 3876 0.0 0.0 4612 936 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 3877 0.0 0.0 4612 940 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 3878 0.0 0.0 4352 604 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 3880 0.0 0.0 4612 952 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 3881 0.0 0.0 4612 932 ? Ss 01:01 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 3884 0.0 0.0 106120 1420 ? S 01:01 0:00 /bin/bash /bin/malv-block.sh root 3888 0.0 0.0 106120 1380 ? S 01:01 0:00 /bin/bash /bin/brut-filtro.sh root 3899 0.0 0.0 106120 1176 ? S 01:01 0:00 /bin/bash /bin/corrigir-ips.sh root 3909 0.0 0.0 106120 504 ? S 01:01 0:00 /bin/bash /bin/corrigir-ips.sh root 3910 0.0 0.0 138128 2532 ? D 01:01 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 3911 0.0 0.0 103360 840 ? S 01:01 0:00 grep sim root 3912 0.0 0.0 100976 652 ? S 01:01 0:00 wc -l root 3915 0.2 0.0 129704 3660 ? D 01:01 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 3916 0.0 0.0 106124 1392 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 3917 0.0 0.0 106124 1360 ? S 01:01 0:00 /bin/bash /bin/monitora-load.sh nobody 3921 0.0 0.0 114060 8300 ? D 01:01 0:00 /usr/local/apache/bin/httpd -k start root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] nobody 4001 0.0 0.0 114324 9236 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start nobody 4002 0.0 0.0 114060 7784 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start root 4055 0.0 0.0 106124 604 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 4067 0.0 0.0 106124 396 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 4068 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 4071 0.0 0.0 103360 848 ? S 01:01 0:00 grep 104.130.11.193 root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] mailnull 4170 1.3 0.0 73980 7736 ? D 01:01 0:00 /usr/sbin/sendmail -f root -t root 4198 0.0 0.0 106124 696 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh metalma 4212 0.0 0.0 186284 1084 ? S 00:47 0:00 /usr/bin/php root 4642 0.0 0.0 44164 1088 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 4643 0.0 0.0 44164 1080 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 4644 0.0 0.0 44164 1060 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 4645 0.0 0.0 44164 1052 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 4646 0.0 0.0 44164 1084 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 4648 0.0 0.0 44164 1064 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4658 0.0 0.0 44164 1076 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 4660 0.0 0.0 44164 1072 ? D 01:01 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 4722 0.0 0.0 106120 488 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 624 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 8056 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.5 0.0 234216 16216 ? S 00:45 0:05 /usr/bin/php conhecsc 4812 6.4 0.0 187440 4900 ? S 00:45 1:00 /usr/bin/php progress 4846 0.4 0.0 268336 15792 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 15904 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] mailnull 5523 0.0 0.0 74876 1312 ? S 01:01 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 5674 0.0 0.0 112412 696 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6320 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6576 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6204 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 440 ? S Apr17 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] 861 5904 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5906 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5911 0.0 0.0 283524 8748 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 5946 0.0 0.0 106124 624 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh icowebra 6242 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 348 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4492 ? S Apr17 0:07 tailwatchd mysql 6514 18.6 0.2 6960904 185896 ? Dl Apr17 235:33 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] root 6799 0.0 0.0 106120 660 ? S 01:01 0:00 /bin/bash /bin/brut-filtro.sh root 6800 0.0 0.0 106120 536 ? S 01:01 0:00 /bin/bash /bin/brut-filtro.sh root 6803 0.0 0.0 6268 184 ? D 01:01 0:00 nslookup 143.0.115.31 root 6805 0.0 0.0 103360 840 ? S 01:01 0:00 grep br root 6807 0.0 0.0 100976 652 ? S 01:01 0:00 wc -l icowebra 6842 0.0 0.0 192900 444 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 6883 0.0 0.0 106124 388 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 6885 0.0 0.0 106124 388 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 6886 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 6887 0.0 0.0 106124 392 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 6888 0.0 0.0 100988 572 ? D 01:01 0:00 cat /var/log/exim_mainlog root 6889 0.0 0.0 103360 852 ? S 01:01 0:00 grep 107.15.142.207 root 6891 0.0 0.0 103360 852 ? S 01:01 0:00 grep 107.15.142.207 root 6893 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 6894 0.0 0.0 103360 852 ? S 01:01 0:00 grep 107.15.142.207 root 6895 0.0 0.0 106124 392 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 6896 0.0 0.0 106124 396 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 6897 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 6898 0.0 0.0 103360 852 ? S 01:01 0:00 grep 104.198.121.116 root 6899 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 6900 0.0 0.0 103360 852 ? S 01:01 0:00 grep 104.198.121.116 root 6901 0.0 0.0 106128 388 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 6902 0.0 0.0 100988 576 ? D 01:01 0:00 cat /var/log/exim_mainlog root 6903 0.0 0.0 103360 852 ? S 01:01 0:00 grep 104.168.170.128 992 7038 0.0 0.0 184964 440 ? S Apr17 0:00 /usr/bin/php root 7055 0.0 0.0 169980 12244 ? D 01:01 0:00 lfd - (child) closing root 7060 0.0 0.0 169980 12236 ? D 01:01 0:00 lfd - (child) closing root 7066 0.0 0.0 106124 736 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 7206 2.0 0.0 73996 7588 ? D 01:01 0:00 send-mail -i -- admin@conectadohost.com.br root 7207 0.5 0.0 108344 1180 ? R 01:01 0:00 ps aux root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] root 8274 0.0 0.0 142436 828 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 836 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114356 9540 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114520 9360 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114192 7448 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 452 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10695 0.0 0.0 4612 744 ? Ss 00:54 0:00 jailshell (inovesocialcom) [22587] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10851 0.0 0.0 106124 628 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10926 0.0 0.0 4640 232 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 332 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 2116 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd picapau 11209 1.0 0.0 184964 14680 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 744 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 220 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 752 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 792 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11363 0.1 0.0 169980 11040 ? Ss 00:00 0:06 lfd - sleeping root 11587 0.0 0.0 106124 740 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11611 0.0 0.0 0 0 ? S 00:46 0:00 [kworker/11:0] root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 604 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 196 ? Ss Apr16 0:00 /usr/sbin/atd root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] nobody 11834 0.0 0.0 115520 10012 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114192 7628 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11842 0.0 0.0 114192 9148 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 12560 0.0 0.0 4108 224 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 228 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 224 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12565 0.0 0.0 106120 1332 ? S 01:01 0:00 /bin/bash /bin/malv2-block.sh root 12566 0.0 0.0 4108 228 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 224 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 224 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12737 0.0 0.0 106120 1172 ? S 01:01 0:00 /bin/bash /etc/cron.hourly/0anacron root 12738 0.0 0.0 106004 884 ? S 01:01 0:00 awk -v progname=/etc/cron.hourly/0anacron progname {????? print progname ":\n"????? progname="";???? }???? { print; } mailnull 12834 0.0 0.0 71028 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12835 0.0 0.0 71032 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 13203 0.0 0.0 114480 9320 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13220 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142440 916 ? S 00:55 0:00 CROND 894 13328 0.1 0.1 232440 100928 ? D 00:58 0:00 spamd child root 13329 0.0 0.1 222024 95620 ? S 00:58 0:00 spamd child root 13342 0.1 0.0 170868 12340 ? S 00:58 0:00 lfd - (child) (PT) checking user processes root 13348 0.0 0.0 106120 376 ? S 01:01 0:00 /bin/bash /bin/malv2-block.sh root 13349 0.0 0.0 106120 504 ? S 01:01 0:00 /bin/bash /bin/malv2-block.sh root 13350 0.0 0.0 100988 576 ? D 01:01 0:00 cat /home/malv-block/comp/lista-comp.txt root 13351 0.0 0.0 103360 848 ? S 01:01 0:00 grep 101.190.73.9 root 13352 0.0 0.0 100976 656 ? S 01:01 0:00 wc -l root 13353 0.1 0.0 68252 22932 ? DN 00:58 0:00 cpanellogd - updating bandwidth root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] 800 13403 0.0 0.0 141988 10484 ? S 00:59 0:00 php.cgi root 13422 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13423 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13424 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13425 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13426 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13434 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13443 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13444 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13445 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13446 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13449 0.0 0.0 142440 984 ? S 00:59 0:00 CROND root 13536 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24395] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 13537 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24418] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 13538 0.0 0.0 4612 848 ? Ss 00:59 0:00 jailshell (posaufacom) [24365] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 13541 0.0 0.0 4612 844 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24378] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 13550 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24410] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 13551 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24393] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 13552 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24401] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 13553 0.0 0.0 106120 788 ? Ss 00:59 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 13566 0.0 0.0 4612 784 ? Ss 00:59 0:00 jailshell (recordho) [24366] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 13568 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24403] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 13571 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24411] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 879 13584 0.1 0.0 187024 15968 ? D 00:59 0:00 /usr/bin/php root 13596 0.0 0.0 106128 952 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh 879 13621 0.1 0.0 185924 11288 ? S 00:59 0:00 /usr/bin/php root 13645 0.0 0.0 114060 8632 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13687 0.0 0.0 106128 768 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13821 0.0 0.0 106128 280 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] root 15351 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/6:1] root 15373 0.0 0.0 61336 3428 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 1700 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 nobody 15948 0.0 0.0 114512 8864 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailman 16010 0.0 0.0 120748 1300 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1012 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1212 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1000 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1016 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1064 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 992 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 992 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 632 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1152 ? SN Apr16 0:00 cpanellogd - updating bandwidth root 16733 0.0 0.0 26208 1864 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 conhecsc 17197 0.0 0.0 191140 12992 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] noticias 18706 0.0 0.0 205684 16380 ? S 00:46 0:00 /usr/bin/php root 19132 0.9 0.0 240980 3964 ? S 00:50 0:06 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 3868 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.1 0.0 23760 8876 ? S 00:50 0:32 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 5896 ? S 00:48 0:00 /usr/bin/php acinpcdl 19835 0.2 0.0 249740 16828 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8096 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.0 0.0 234712 16792 ? S 00:48 0:00 /usr/bin/php nobody 20150 0.0 0.0 114344 8808 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 114192 8644 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] wwwfacul 20446 0.1 0.0 265704 16500 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114456 9312 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22997] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22984] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22986] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22900] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20497 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22965] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22996] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [23010] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22967] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 744 ? Ss 00:55 0:00 jailshell (posaufacom) [22630] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20521 0.0 0.0 4616 744 ? Ss 00:55 0:00 jailshell (recordho) [22619] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 20524 0.0 0.0 114328 8832 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20528 0.0 0.0 106120 472 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22899] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20536 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22895] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4616 756 ? Ss 00:55 0:00 jailshell (centralgib) [22883] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22636] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 724 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22641] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20542 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralc) [22897] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20546 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralgib) [22657] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php regis 20754 0.0 0.0 186880 6040 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 10144 ? D 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.0 0.0 263164 16044 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] root 21237 0.0 0.0 106124 624 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21514 0.0 0.0 114464 8988 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22296 0.0 0.0 106124 740 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22377 0.0 0.0 114484 9604 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 22412 0.0 0.0 0 0 ? S 00:29 0:00 [kworker/3:2] 1125 22587 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22610 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 22615 0.0 0.0 114200 8896 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 22619 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 22623 0.0 0.0 288180 12720 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 22629 0.0 0.0 136464 2264 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 22630 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22631 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22633 0.0 0.0 283528 8788 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1120 22636 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 22637 0.0 0.0 287692 12396 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 22641 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 699 22642 0.0 0.0 288180 12744 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 22651 0.0 0.0 142436 804 ? S 00:56 0:00 CROND nobody 22653 0.0 0.0 114352 8840 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22654 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22657 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22658 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22661 0.0 0.0 244344 16384 ? S 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22670 0.0 0.0 142436 812 ? S 00:56 0:00 CROND root 22678 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142440 920 ? S 00:56 0:00 CROND nobody 22689 0.0 0.0 114360 9300 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22690 0.0 0.0 114328 9020 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22704 0.0 0.0 115528 12892 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 1077 22883 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 22884 0.0 0.0 244340 16608 ? S 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 22886 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 recordho 22890 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 22894 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 699 22895 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 861 22896 0.0 0.0 283528 8768 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php centralc 22897 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22899 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22900 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 recordho 22907 0.0 0.0 288180 12720 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 699 22909 0.0 0.0 287692 12404 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 22911 0.0 0.0 288180 12748 ? S 00:56 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22912 0.0 0.0 288180 12740 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22913 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22915 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22939 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22940 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 22941 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22944 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22947 0.0 0.0 283528 8936 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22948 0.0 0.0 283528 8708 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1086 22951 0.0 0.0 9464 456 ? S 00:56 0:00 /bin/sh php.cgi 1086 22952 0.0 0.0 9460 448 ? S 00:56 0:00 /bin/sh php.cgi 1125 22954 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22955 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22956 0.0 0.0 283524 8932 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 22960 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22961 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22962 0.0 0.0 283528 8932 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 22965 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22966 0.0 0.0 106120 460 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 22967 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22968 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22969 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22970 0.0 0.0 283528 8784 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 22975 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22976 0.0 0.0 106124 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22977 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22979 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22980 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22981 0.0 0.0 283528 8784 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 22984 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22985 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 22986 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 22987 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 22988 0.0 0.0 283388 8900 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 22989 0.0 0.0 283524 8800 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 22991 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22992 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22993 0.0 0.0 136464 2060 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 22996 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22997 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 22998 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22999 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 23000 0.0 0.0 283524 8752 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 23001 0.0 0.0 283524 8936 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 23005 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23006 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23007 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 952 23008 0.0 0.0 142516 10556 ? S 00:56 0:00 php.cgi 1125 23010 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23011 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23012 0.0 0.0 136464 2156 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1086 23024 0.0 0.0 142528 9956 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi 1086 23025 0.0 0.0 142524 9948 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi root 23040 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/1:4] root 23092 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23093 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23094 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23095 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23096 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23104 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23112 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23113 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23114 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23115 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23118 0.0 0.0 142440 844 ? S 00:57 0:00 CROND pdvxyz 23169 0.0 0.0 185472 7104 ? S 00:57 0:00 /usr/bin/php conect 23178 0.0 0.0 184964 6952 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 184960 6948 ? S 00:57 0:00 /usr/bin/php conect 23186 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23187 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23188 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23189 0.0 0.0 184960 6936 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 7420 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 6888 ? S 00:57 0:00 /usr/bin/php conect 23195 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php conect 23200 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23201 0.0 0.0 184960 6948 ? S 00:57 0:00 /usr/bin/php conect 23203 0.0 0.0 184960 6944 ? S 00:57 0:00 /usr/bin/php conect 23204 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php 879 23208 0.1 0.0 187024 15652 ? D 00:57 0:00 /usr/bin/php root 23227 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (posaufacom) [2042] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 23231 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2038] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 23235 0.0 0.0 106120 504 ? Ss 00:57 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 23239 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2177] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 23245 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (recordho) [2044] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 23250 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2178] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 23252 0.0 0.0 4612 760 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2118] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 23253 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (posaufacom) [2120] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 23254 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2191] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 23255 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2131] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 23257 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2128] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 23258 0.0 0.0 106124 640 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 23284 0.0 0.0 71032 1500 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23286 0.0 0.0 71032 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23287 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] mailnull 23295 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23296 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23298 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23299 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23300 0.0 0.0 71028 1504 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23356 0.1 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] nobody 23364 0.0 0.0 114324 9068 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start root 23404 0.0 0.0 106124 692 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 23656 0.0 0.0 115520 10976 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] 861 24365 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 24366 0.0 0.0 4612 328 ? S 00:59 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 24373 0.0 0.0 288180 14128 ? S 00:59 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 24376 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 24378 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 24379 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 24385 0.0 0.0 283528 10344 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 24387 0.0 0.0 283524 10204 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 24393 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 24394 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 24395 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 24396 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 24397 0.0 0.0 283524 10200 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 24398 0.0 0.0 136464 2624 ? S 00:59 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 24401 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 24402 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 24403 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 24404 0.0 0.0 106124 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 24405 0.0 0.0 283524 10212 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 24406 0.0 0.0 283524 10180 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 24410 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24411 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 24412 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24413 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 24414 0.0 0.0 283528 10204 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 24415 0.0 0.0 283532 10212 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 24418 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24419 0.0 0.0 106120 820 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24420 0.0 0.0 283528 10320 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php nobody 24445 0.0 0.0 115520 10160 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24469 0.0 0.0 114200 8736 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24472 0.0 0.0 114340 9632 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start 1125 24527 0.0 0.0 9456 816 ? S 00:59 0:00 /bin/sh php.cgi mailnull 24533 0.0 0.0 71032 2304 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 24537 0.0 0.0 142776 12008 ? S 00:59 0:00 /opt/php/php-5.6.26/bin/php-cgi wdcpubli 24539 0.0 0.0 141736 13540 ? S 00:59 0:00 php.cgi icowebra 24540 0.1 0.0 194436 17764 ? D 00:59 0:00 /usr/bin/php icowebra 24551 0.2 0.0 194028 17608 ? S 00:59 0:00 /usr/bin/php root 24558 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/4:1] root 24590 0.0 0.0 170112 13092 ? D 00:59 0:00 lfd - child closing named 24611 0.1 0.0 748664 8548 ? Ssl Apr17 0:39 /usr/sbin/named -u named -t /var/named/chroot samuel 24627 0.0 0.0 9456 812 ? S 00:59 0:00 /bin/sh php.cgi samuel 24632 0.0 0.0 140520 14996 ? S 00:59 0:00 /opt/php/php-5.5.6/bin/php-cgi mailnull 24634 0.0 0.0 71028 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 24635 0.0 0.0 71032 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 24643 0.0 0.0 170112 12436 ? D 00:59 0:00 lfd - (child) closing root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24660 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24662 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24663 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24664 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24665 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24666 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24667 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24668 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24669 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24670 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24671 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24681 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24685 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24690 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24691 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24693 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24694 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24695 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24696 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24697 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24702 0.0 0.0 142440 1180 ? S 01:00 0:00 CROND root 24703 0.0 0.0 142440 1180 ? S 01:00 0:00 CROND root 24705 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24706 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24707 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24708 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24712 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24715 0.0 0.0 169980 12264 ? D 01:00 0:00 child - aborting root 24727 0.0 0.0 169980 12128 ? D 01:00 0:00 lfd - (child) closing mailnull 24728 0.0 0.0 74280 4988 ? S 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 24731 0.0 0.0 169980 12144 ? D 01:00 0:00 lfd - (child) closing root 24732 0.0 0.0 169980 12240 ? D 01:00 0:00 lfd - (child) closing root 24733 0.0 0.0 169980 12112 ? D 01:00 0:00 lfd - (child) closing root 24734 0.0 0.0 169980 12268 ? D 01:00 0:00 lfd - (child) closing root 24735 0.0 0.0 169980 12116 ? D 01:00 0:00 lfd - (child) closing root 24736 0.0 0.0 169980 12140 ? D 01:00 0:00 lfd - (child) closing root 24737 0.0 0.0 169980 12120 ? D 01:00 0:00 lfd - (child) closing root 24738 0.0 0.0 169980 12132 ? D 01:00 0:00 lfd - (child) closing root 24739 0.0 0.0 169980 12140 ? D 01:00 0:00 lfd - (child) closing root 24740 0.0 0.0 169980 12124 ? D 01:00 0:00 lfd - (child) closing root 24768 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (recordho) [3063] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 24769 0.0 0.0 4612 940 ? Ss 01:00 0:00 jailshell (posaufacom) [3463] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 24770 0.0 0.0 4612 928 ? Ss 01:00 0:00 jailshell (distribuidoresaz) [3435] get -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto3.php root 24771 0.0 0.0 4612 924 ? Ss 01:00 0:00 jailshell (posaufacom) [3074] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 24772 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (posaufacom) [3506] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 24778 0.0 0.0 4612 932 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3036] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 24779 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3498] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 24782 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3457] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 24784 0.0 0.0 106120 1136 ? Ss 01:00 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 24787 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (distribuidoresaz) [3455] get -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto.php root 24788 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3508] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 24789 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (posaufacom) [3489] l -c wget -O - -q -t 1 http://posaufa.com.br/sis/index.php/cron root 24798 0.0 0.0 106120 1136 ? Ss 01:00 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 24800 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3490] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 24802 0.0 0.0 106120 1132 ? Ss 01:00 0:00 /bin/sh -c /bin/corrigir-problemas.sh > /dev/null 2>&1 root 24803 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (posaufacom) [3500] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 24804 0.1 0.0 145336 11068 ? Ds 01:00 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpbackup root 24809 0.0 0.0 4612 932 ? Ss 01:00 0:00 jailshell (centralgib) [3041] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php root 24811 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (centralgib) [3491] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 24812 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (centralagenciaw3) [3034] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php root 24813 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (centralc) [3039] ell -c php -q /home/centralc/public_html/pipe/pipe.php root 24814 0.0 0.0 4612 956 ? Ss 01:00 0:00 jailshell (centralc) [3458] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 24815 0.0 0.0 4612 964 ? Ss 01:00 0:00 jailshell (centralagenciaw3) [3456] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 24816 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (centralgib) [3465] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 24817 0.0 0.0 4612 880 ? Ss 01:00 0:00 jailshell (centralpluginscp) [3042] hp -q /home/centralpluginscp/public_html/pipe/pipe.php root 24818 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (portal) [3443] shell -c php -q /home/portal/public_html/pipe/pop.php root 24822 0.0 0.0 4612 960 ? Ss 01:00 0:00 jailshell (centralpluginscp) [3459] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 24843 0.0 0.0 106124 1092 ? S 01:00 0:00 /bin/bash /bin/corrigir-problemas.sh root 24848 0.0 0.0 136072 7400 ? S 01:00 0:00 /usr/local/cpanel/bin/dcpumon root 24849 0.0 0.0 106124 1304 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] nobody 24894 0.0 0.0 115520 11648 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24916 0.0 0.0 106124 592 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 maisg647 26560 0.0 0.0 241460 16188 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 15884 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 15876 ? S Apr17 0:00 /usr/bin/php root 26601 0.0 0.0 119136 1728 ? S 01:00 0:00 mysqlcheck --repair eximstats 860 26614 0.0 0.0 186420 7384 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1560 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 304 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114328 9088 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 26670 0.0 0.0 288180 12712 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 992 26701 0.0 0.0 187676 8448 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 728 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11028 ? S Apr17 0:00 /usr/bin/php 1125 26765 0.0 0.0 136464 2240 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 283524 8788 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 448 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 296 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 28133 0.0 0.0 114480 9664 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 115608 10708 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28172 0.0 0.0 106120 480 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28183 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22939] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (recordho) [22890] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22960] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4612 756 ? Ss 00:56 0:00 jailshell (posaufacom) [22979] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28188 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22886] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28191 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [23005] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22975] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22954] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28195 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22991] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22940] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 28439 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:2] 861 28782 0.0 0.0 142296 10144 ? S 00:56 0:00 php.cgi root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29231 0.0 0.0 106124 624 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] icowebra 30070 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114344 8744 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.1 222024 96028 ? Ss Apr16 6:16 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2148 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 708 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:26 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:50 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S root 1700 0.0 0.0 243372 3544 ? Sl Apr16 0:28 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5 root 1742 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/7:1] root 1743 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/5:0] root 1847 0.0 0.0 142436 368 ? S Apr17 0:00 CROND root 1879 0.0 0.0 106120 252 ? Ss Apr17 0:00 /bin/sh -c /bin/backup-de-segunda.sh > /dev/null 2>&1 root 1937 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/9:0] 1125 1950 0.0 0.0 9460 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1951 0.0 0.0 9456 468 ? S 00:57 0:00 /bin/sh php.cgi 1125 1952 0.0 0.0 9456 472 ? S 00:57 0:00 /bin/sh php.cgi 1125 1953 0.0 0.0 9456 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1960 0.0 0.0 142776 10240 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1961 0.0 0.0 142768 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1962 0.0 0.0 142772 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1963 0.0 0.0 142768 10228 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi root 1970 0.0 0.0 106124 380 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 664 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 480 ? S Apr16 0:01 dovecot/anvil 1125 2038 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2042 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2044 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 2057 0.0 0.0 106120 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 2058 0.0 0.0 288180 12900 ? S 00:57 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 2060 0.0 0.0 106124 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2066 0.0 0.0 283524 9084 ? S 00:57 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2067 0.0 0.0 283528 9028 ? S 00:57 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2118 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2119 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 2120 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2121 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2122 0.0 0.0 283524 9084 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 2123 0.0 0.0 283524 8940 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 2127 0.2 0.0 221424 44440 ? S 00:58 0:00 /usr/bin/php 1125 2128 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 2130 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2131 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 2132 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2133 0.0 0.0 283528 8988 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 2134 0.0 0.0 283528 8936 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 2144 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2145 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2146 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2147 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2148 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2156 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2164 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2165 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2166 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2167 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2170 0.0 0.0 142440 864 ? S 00:58 0:00 CROND 861 2177 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2178 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2179 0.0 0.0 106120 476 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2180 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2181 0.0 0.0 283528 9004 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2182 0.0 0.0 136464 2264 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2191 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2192 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2193 0.0 0.0 283524 8836 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 2200 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2201 0.0 0.0 142772 10228 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2216 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2287] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2223 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2514] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2226 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (recordho) [2300] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2227 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2266] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2232 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2347] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2235 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2379] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2236 0.0 0.0 106120 504 ? Ss 00:58 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2237 0.0 0.0 4612 768 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2378] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2242 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (posaufacom) [2349] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2245 0.0 0.0 4616 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2298] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2249 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [5904] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2266 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2267 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2268 0.0 0.0 283524 8844 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php root 2275 0.0 0.0 106124 640 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1125 2287 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2298 0.0 0.0 4616 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2300 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2310 0.0 0.0 142436 736 ? S 00:52 0:00 CROND root 2322 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2323 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2324 0.0 0.0 106120 460 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 recordho 2327 0.0 0.0 288180 12856 ? S 00:58 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2330 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2332 0.0 0.0 283524 9120 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2333 0.0 0.0 283524 9368 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 2336 0.0 0.0 142440 892 ? S 00:52 0:00 CROND 1125 2347 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 2348 0.0 0.0 106120 480 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2349 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2350 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2354 0.0 0.0 283524 8880 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2355 0.0 0.0 283528 8996 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php nobody 2366 0.0 0.0 115536 10928 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start 1125 2378 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2379 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2380 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2381 0.0 0.0 106120 456 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 2382 0.0 0.0 283528 8952 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2383 0.0 0.0 136464 2260 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2386 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2387 0.0 0.0 142772 10236 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2431 0.0 0.0 106124 428 ? Ss 00:52 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 2438 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2449 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2452 0.0 0.0 4612 628 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2455 0.0 0.0 115568 12988 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start root 2487 0.0 0.0 106124 620 ? S 00:52 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 2501 0.0 0.0 116332 11128 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114192 8952 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2514 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2515 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2520 0.0 0.0 283524 9224 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php root 2565 0.0 0.0 142436 784 ? S 00:53 0:00 CROND root 2632 0.0 0.0 106124 732 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh conhecsc 2737 39.5 73.7 50051140 48690680 ? D 00:35 10:30 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114192 7744 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 2991 0.0 0.0 115520 10248 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start nobody 3011 0.0 0.0 114324 9408 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 3013 0.0 0.0 169980 10680 ? S 01:00 0:00 lfd - checking system integrity nobody 3027 0.0 0.0 0 0 ? Z 01:00 0:00 [httpd] nobody 3031 0.0 0.0 114332 9208 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start 699 3034 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 1125 3036 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 3037 0.0 0.0 142436 372 ? S 00:34 0:00 CROND centralc 3039 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php 1077 3041 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php 1120 3042 0.0 0.0 4612 332 ? S 01:00 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1125 3044 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 699 3046 0.0 0.0 287692 20420 ? S 01:00 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 3048 0.0 0.0 287692 20424 ? S 01:00 0:00 php -q /home/centralc/public_html/pipe/pipe.php 1120 3051 0.0 0.0 287692 20432 ? S 01:00 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 3052 0.0 0.0 244328 21836 ? S 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php root 3059 0.2 0.0 252468 3356 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all recordho 3063 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 3068 0.0 0.0 288180 20752 ? S 01:00 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 3074 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 3075 0.0 0.0 106120 1124 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 3076 0.0 0.0 100988 724 ? D 01:00 0:00 /usr/bin/md5sum --check /var/lib/csf/csf.tempint 861 3080 0.0 0.0 283524 16436 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 3081 0.0 0.0 283524 16460 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php nobody 3115 0.0 0.0 114192 7724 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 0.9 0.0 274064 15880 ? S 00:49 0:06 /usr/bin/php root 3269 0.0 0.0 106124 740 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh dovenull 3299 0.0 0.0 42760 812 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 484 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 576 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1780 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 308 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 996 ? S 00:45 0:00 dovecot/auth 879 3435 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (distribuidoresaz) [init] get -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto3.php 879 3436 0.0 0.0 135264 2052 ? S 01:00 0:00 wget -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto3.php portal 3443 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (portal) [init] shell -c php -q /home/portal/public_html/pipe/pop.php portal 3444 0.0 0.0 292168 23724 ? S 01:00 0:00 php -q /home/portal/public_html/pipe/pop.php mailnull 3445 0.0 0.0 71032 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 879 3455 0.0 0.0 0 0 ? D 01:00 0:00 [jailshell] 699 3456 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 1125 3457 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 centralc 3458 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 3459 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 861 3463 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1077 3465 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 3466 0.0 0.0 106120 1112 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 699 3467 0.0 0.0 288180 20756 ? S 01:00 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations centralc 3469 0.0 0.0 288180 20752 ? S 01:00 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 3471 0.0 0.0 288180 20744 ? S 01:00 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 861 3474 0.0 0.0 106120 1104 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1077 3475 0.0 0.0 244340 21920 ? S 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 3476 0.0 0.0 283528 16588 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 3477 0.0 0.0 283528 16604 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/misc.php mailnull 3478 0.0 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 3490 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1077 3491 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1125 3492 0.0 0.0 106120 1108 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1077 3494 0.0 0.0 244344 21920 ? S 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1125 3495 0.0 0.0 283524 16360 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 3498 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 3499 0.0 0.0 106120 1120 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 3500 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 3501 0.0 0.0 106120 1092 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 3502 0.0 0.0 283524 16440 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 861 3503 0.0 0.0 283524 16456 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 3506 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 3507 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 3508 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 3509 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 3510 0.0 0.0 283524 16464 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 3511 0.0 0.0 136464 4364 ? S 01:00 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] mailnull 3598 0.0 0.0 74248 4148 ? S 01:00 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid samuel 3599 0.0 0.0 9456 1120 ? S 01:00 0:00 /bin/sh php.cgi mailnull 3602 0.0 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3603 0.0 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3605 0.0 0.0 71028 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3608 0.0 0.0 71028 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3611 0.0 0.0 71036 3392 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3612 0.0 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3614 0.0 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3616 0.0 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root samuel 3660 0.0 0.0 140648 15420 ? S 01:00 0:00 /opt/php/php-5.5.6/bin/php-cgi 1125 3670 0.0 0.0 9456 1124 ? S 01:00 0:00 /bin/sh php.cgi 1125 3671 0.0 0.0 142768 17092 ? S 01:00 0:00 /opt/php/php-5.6.26/bin/php-cgi nobody 3723 0.0 0.0 114328 8812 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3726 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3727 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3728 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3729 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3730 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3738 0.0 0.0 142436 1452 ? S 01:01 0:00 CROND root 3746 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3747 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3748 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3749 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3752 0.0 0.0 142440 1460 ? S 01:01 0:00 CROND nobody 3803 0.0 0.0 114328 9392 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start 1003 3822 0.0 0.0 137036 688 ? S 01:01 0:00 pure-ftpd (IDLE) root 3823 0.0 0.0 136824 128 ? S 01:01 0:00 pure-ftpd (PRIV) root 3838 0.0 0.0 0 0 ? S 00:32 0:00 [kworker/7:0] root 3856 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (posaufacom) [14781] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 3857 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14778] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 3862 0.0 0.0 4612 936 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14761] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 3864 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14824] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 3865 0.0 0.0 4612 948 ? Ss 01:01 0:00 jailshell (posaufacom) [14793] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 3868 0.0 0.0 4612 948 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14791] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 3872 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (posaufacom) [14812] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 3874 0.0 0.0 106120 1196 ? Ss 01:01 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 3876 0.0 0.0 4612 936 ? Ss 01:01 0:00 jailshell (posaufacom) [14772] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 3878 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14810] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 3880 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (recordho) [14769] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 3916 0.0 0.0 106124 1392 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 3921 0.0 0.0 114192 9068 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] nobody 4001 0.0 0.0 114324 9468 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start nobody 4002 0.0 0.0 115120 10516 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start root 4055 0.2 0.0 106124 780 ? S 01:01 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] root 4198 0.0 0.0 106124 740 ? S 00:58 0:00 /bin/bash /bin/liberar-csf-brasil.sh metalma 4212 0.0 0.0 186284 1084 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4722 0.0 0.0 106120 488 ? Ss 00:53 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 4723 0.0 0.0 54580 624 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 8056 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.5 0.0 234216 16216 ? S 00:45 0:05 /usr/bin/php conhecsc 4812 6.1 0.0 187440 4900 ? S 00:45 1:00 /usr/bin/php progress 4846 0.3 0.0 268336 15792 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 15904 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 696 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start root 5689 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/5:1] loppelco 5695 0.0 0.0 186104 6320 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6576 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6204 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 440 ? S Apr17 0:00 /usr/bin/php nossojor 5809 0.3 0.0 186348 19968 ? S 01:01 0:00 /usr/bin/php 881 5826 1.3 0.0 188160 22804 ? R 01:01 0:00 /usr/bin/php root 5834 0.0 0.0 0 0 ? S 00:44 0:00 [kworker/9:1] root 5841 0.0 0.0 0 0 ? D 00:56 0:00 [kworker/10:0] voarloca 5876 0.2 0.0 185948 18332 ? S 01:01 0:00 /usr/bin/php 861 5904 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5906 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5911 0.0 0.0 283524 8748 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 5946 0.0 0.0 106124 624 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh icowebra 6242 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 348 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4728 ? S Apr17 0:07 tailwatchd mysql 6514 18.6 0.3 6973904 203580 ? Sl Apr17 235:34 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 444 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 440 ? S Apr17 0:00 /usr/bin/php root 7066 0.0 0.0 106124 736 ? S 00:53 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] voarloca 8115 0.2 0.0 185548 18288 ? S 01:01 0:00 /usr/bin/php root 8274 0.0 0.0 142436 828 ? S 00:54 0:00 CROND root 8291 0.0 0.0 142436 836 ? S 00:54 0:00 CROND diadiapr 8348 0.2 0.0 185896 16160 ? D 01:01 0:00 /usr/bin/php nobody 8426 0.0 0.0 114356 9540 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114520 9360 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9841 0.0 0.0 114192 7936 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10616 0.0 0.0 106120 452 ? Ss 00:54 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 10695 0.0 0.0 4612 744 ? Ss 00:54 0:00 jailshell (inovesocialcom) [22587] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10851 0.0 0.0 106124 628 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10926 0.0 0.0 4640 232 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 332 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 2124 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd picapau 11209 0.0 0.0 184964 14680 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 748 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 220 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 752 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 792 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ds Apr16 0:08 postgres: stats collector process root 11363 0.1 0.0 169980 11060 ? Ss 00:00 0:06 lfd - sleeping root 11587 0.0 0.0 106124 740 ? S 00:54 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 604 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 196 ? Ss Apr16 0:00 /usr/sbin/atd root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] nobody 11834 0.0 0.0 115520 10136 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114192 7840 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 12560 0.0 0.0 4108 224 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 228 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 224 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 228 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 224 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 224 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 mailnull 12834 0.0 0.0 71028 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12835 0.0 0.0 71032 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 13203 0.0 0.0 115144 9936 ? D 00:55 0:00 /usr/local/apache/bin/httpd -k start root 13220 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13250 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142440 916 ? S 00:55 0:00 CROND root 13328 0.3 0.1 237248 107468 ? S 00:58 0:00 spamd child limpussc 13329 0.1 0.1 232956 103280 ? D 00:58 0:00 spamd child root 13342 0.1 0.0 170868 12340 ? S 00:58 0:00 lfd - (child) (PT) checking user processes root 13353 0.2 0.0 111468 32364 ? DN 00:58 0:00 cpanellogd - processing bandwidth nobody 13363 0.0 0.0 115120 10312 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start mailnull 13364 0.0 0.0 71028 3416 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 13365 0.0 0.0 71028 3416 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 13366 0.0 0.0 71032 3420 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] 800 13403 0.0 0.0 142768 12000 ? S 00:59 0:00 php.cgi root 13422 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13423 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13424 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13425 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13426 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13434 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13443 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13444 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13445 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13446 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13449 0.0 0.0 142440 984 ? S 00:59 0:00 CROND root 13536 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24395] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 13537 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24418] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 13538 0.0 0.0 4612 848 ? Ss 00:59 0:00 jailshell (posaufacom) [24365] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 13541 0.0 0.0 4612 844 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24378] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 13550 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24410] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 13551 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24393] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 13552 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24401] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 13553 0.0 0.0 106120 788 ? Ss 00:59 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 13566 0.0 0.0 4612 784 ? Ss 00:59 0:00 jailshell (recordho) [24366] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 13568 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24403] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 13571 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24411] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 13596 0.0 0.0 106128 952 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh 879 13621 0.1 0.0 186856 16216 ? S 00:59 0:00 /usr/bin/php root 13645 0.0 0.0 114060 8632 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13687 0.0 0.0 106128 768 ? S 00:59 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 13821 0.0 0.0 106128 280 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] nossojor 14371 0.0 0.0 186352 19940 ? S 01:01 0:00 /usr/bin/php voarloca 14472 0.0 0.0 187516 19956 ? S 01:01 0:00 /usr/bin/php loppelco 14736 0.1 0.0 186896 18640 ? S 01:01 0:00 /usr/bin/php loppelco 14739 0.0 0.0 186900 18644 ? S 01:01 0:00 /usr/bin/php loppelco 14741 0.0 0.0 186900 18632 ? S 01:01 0:00 /usr/bin/php 881 14752 0.1 0.0 186636 20468 ? S 01:01 0:00 /usr/bin/php 1125 14761 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 14763 0.0 0.0 106120 1192 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 14769 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 14771 0.0 0.0 288180 20800 ? S 01:01 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 14772 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 14773 0.0 0.0 106120 1192 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 14774 0.1 0.0 282324 14188 ? D 01:01 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 14775 0.0 0.0 283528 16508 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 14778 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 881 14779 0.1 0.0 186632 20472 ? S 01:01 0:00 /usr/bin/php 1125 14780 0.0 0.0 106120 1160 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 14781 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 14782 0.0 0.0 106120 1160 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 14783 0.0 0.0 283528 16660 ? S 01:01 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 14784 0.0 0.0 283524 16516 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 14791 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 14792 0.0 0.0 106120 1196 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 14793 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 14794 0.0 0.0 106124 1192 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 14795 0.0 0.0 283524 16528 ? S 01:01 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 861 14796 0.0 0.0 283524 16516 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/hid.php mailnull 14808 0.0 0.0 71032 3412 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 14810 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 14811 0.0 0.0 106120 1196 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 14812 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 14813 0.0 0.0 106120 1188 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 14814 0.0 0.0 283528 16512 ? S 01:01 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 14815 0.0 0.0 283524 16648 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 879 14817 0.0 0.0 186840 19620 ? S 01:01 0:00 /usr/bin/php 1125 14824 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 14825 0.0 0.0 106120 1192 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 14826 0.0 0.0 136464 4460 ? S 01:01 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1053 14829 0.1 0.0 186220 17540 ? D 01:01 0:00 /usr/bin/php 879 14832 0.4 0.0 187020 17352 ? S 01:01 0:00 /usr/bin/php root 14833 0.0 0.0 0 0 ? S 01:01 0:00 [kworker/8:0] 881 14848 0.1 0.0 186636 20464 ? S 01:01 0:00 /usr/bin/php 1125 14895 0.0 0.0 9464 1124 ? S 01:01 0:00 /bin/sh php.cgi 1125 14896 0.1 0.0 142772 17100 ? S 01:01 0:00 /opt/php/php-5.6.26/bin/php-cgi wdcpubli 14897 0.0 0.0 142656 16728 ? S 01:01 0:00 php.cgi root 15373 0.0 0.0 61336 3428 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 1700 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 nobody 15948 0.0 0.0 114512 8864 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailman 16010 0.0 0.0 120748 1300 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1012 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1212 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1000 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1016 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1064 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 992 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 992 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 632 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1152 ? SN Apr16 0:00 cpanellogd - updating bandwidth root 16733 0.0 0.0 26208 1864 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 1053 16832 0.5 0.0 186216 17536 ? D 01:01 0:00 /usr/bin/php mailnull 16851 0.0 0.0 74876 1312 ? S 01:01 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid conhecsc 17197 0.0 0.0 191140 12992 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] mailnull 17997 0.0 0.0 74020 1560 ? S 01:01 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid noticias 18706 0.0 0.0 205684 16380 ? S 00:46 0:00 /usr/bin/php root 19132 0.9 0.0 240980 3964 ? S 00:50 0:06 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 3868 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 4.9 0.0 23760 8876 ? S 00:50 0:33 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 5896 ? S 00:48 0:00 /usr/bin/php root 19818 36.4 0.5 545076 383588 ? R 01:01 0:01 lfd - (child) closing nossojor 19819 1.8 0.0 185832 20316 ? S 01:01 0:00 /usr/bin/php acinpcdl 19835 0.2 0.0 249740 16828 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8268 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.0 0.0 234712 16792 ? S 00:48 0:00 /usr/bin/php mailnull 20075 1.2 0.0 73996 7728 ? D 01:01 0:00 /usr/sbin/sendmail -f root -t nobody 20150 0.0 0.0 114344 8808 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 115696 11948 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] 881 20251 0.4 0.0 189264 23896 ? S 01:01 0:00 /usr/bin/php wwwfacul 20446 0.1 0.0 265704 16500 ? S 00:46 0:00 /usr/bin/php nobody 20488 0.0 0.0 114436 9624 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20492 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22997] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22984] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22986] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22900] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20497 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22965] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22996] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [23010] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22967] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 744 ? Ss 00:55 0:00 jailshell (posaufacom) [22630] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20521 0.0 0.0 4616 744 ? Ss 00:55 0:00 jailshell (recordho) [22619] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 20524 0.0 0.0 114328 8832 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20528 0.0 0.0 106120 472 ? Ss 00:55 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22899] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20536 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22895] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4616 756 ? Ss 00:55 0:00 jailshell (centralgib) [22883] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22636] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 724 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22641] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20542 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralc) [22897] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20546 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralgib) [22657] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php mailnull 20631 1.5 0.0 73980 7636 ? D 01:01 0:00 /usr/sbin/sendmail -f root -t regis 20754 0.0 0.0 186880 6040 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 12624 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.0 0.0 263164 16044 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] 881 21110 0.4 0.0 189264 23896 ? S 01:01 0:00 /usr/bin/php root 21237 0.0 0.0 106124 624 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 21514 0.0 0.0 114464 9124 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22296 0.0 0.0 106124 740 ? S 00:55 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 22377 0.0 0.0 114484 9604 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start 1125 22587 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22610 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 22615 0.0 0.0 114200 8896 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 22619 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 22623 0.0 0.0 288180 12720 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 22629 0.0 0.0 136464 2264 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 22630 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22631 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22633 0.0 0.0 283528 8788 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1120 22636 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 22637 0.0 0.0 287968 14480 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 22641 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 699 22642 0.0 0.0 288748 14816 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 22651 0.0 0.0 142436 804 ? S 00:56 0:00 CROND nobody 22653 0.0 0.0 114352 8840 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22654 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22657 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22658 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22661 0.0 0.0 244344 16608 ? S 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22670 0.0 0.0 142436 812 ? S 00:56 0:00 CROND root 22678 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142440 920 ? S 00:56 0:00 CROND nobody 22689 0.0 0.0 115020 10128 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22690 0.0 0.0 114328 9168 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22704 0.0 0.0 115528 12892 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 1077 22883 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 22884 0.0 0.0 244340 16608 ? S 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 22886 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 recordho 22890 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 22894 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 699 22895 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 861 22896 0.0 0.0 284276 12188 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php centralc 22897 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22899 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22900 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 recordho 22907 0.0 0.0 288492 14760 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 699 22909 0.0 0.0 287692 12404 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 22911 0.0 0.0 288748 14804 ? S 00:56 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22912 0.0 0.0 288180 12740 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22913 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22915 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22939 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22940 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 22941 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22944 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22947 0.0 0.0 283528 8936 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22948 0.0 0.0 283528 8708 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1086 22951 0.0 0.0 9464 456 ? S 00:56 0:00 /bin/sh php.cgi 1086 22952 0.0 0.0 9460 448 ? S 00:56 0:00 /bin/sh php.cgi 1125 22954 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22955 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22956 0.0 0.0 284792 12472 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 22960 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22961 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22962 0.0 0.0 283528 8932 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 22965 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22966 0.0 0.0 106120 460 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 22967 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22968 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22969 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22970 0.0 0.0 283528 8784 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 22975 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22976 0.0 0.0 106124 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22977 0.0 0.0 283524 8792 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22979 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22980 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22981 0.0 0.0 284792 12596 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 22984 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22985 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 22986 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 22987 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 22988 0.0 0.0 283388 8900 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 22989 0.0 0.0 283524 8800 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 22991 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22992 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22993 0.0 0.0 136464 2060 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 22996 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22997 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 22998 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22999 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 23000 0.0 0.0 284276 12196 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 23001 0.0 0.0 284792 12476 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 23005 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23006 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23007 0.0 0.0 284788 12628 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 952 23008 0.0 0.0 142516 10556 ? S 00:56 0:00 php.cgi 1125 23010 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23011 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23012 0.0 0.0 136464 2156 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1086 23024 0.0 0.0 142528 9956 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi 1086 23025 0.0 0.0 142656 10164 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi root 23092 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23093 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23094 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23095 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23096 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23104 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23112 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23113 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23114 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23115 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23118 0.0 0.0 142440 844 ? S 00:57 0:00 CROND pdvxyz 23169 0.0 0.0 185472 7104 ? S 00:57 0:00 /usr/bin/php conect 23178 0.0 0.0 184964 6952 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 184960 6948 ? S 00:57 0:00 /usr/bin/php conect 23186 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23187 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23188 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23189 0.0 0.0 184960 6936 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 7420 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 7408 ? S 00:57 0:00 /usr/bin/php conect 23195 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php conect 23200 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23201 0.0 0.0 184960 6948 ? S 00:57 0:00 /usr/bin/php conect 23203 0.0 0.0 184960 6944 ? S 00:57 0:00 /usr/bin/php conect 23204 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php root 23227 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (posaufacom) [2042] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 23231 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2038] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 23235 0.0 0.0 106120 504 ? Ss 00:57 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 23239 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2177] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 23245 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (recordho) [2044] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 23250 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2178] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 23252 0.0 0.0 4612 760 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2118] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 23253 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (posaufacom) [2120] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 23254 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2191] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 23255 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2131] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 23257 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2128] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 23258 0.0 0.0 106124 640 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 23284 0.0 0.0 71032 1500 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23286 0.0 0.0 71032 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23287 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] mailnull 23295 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23296 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23298 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23299 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23300 0.0 0.0 71028 1504 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23356 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] nobody 23364 0.0 0.0 115796 10732 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start root 23404 0.0 0.0 106124 740 ? S 00:57 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 23656 0.0 0.0 115520 10976 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24293 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24295 0.0 0.0 142436 1468 ? S 01:02 0:00 CROND root 24296 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24297 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24298 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24299 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24300 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24301 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24302 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24305 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24306 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24308 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24310 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24312 0.0 0.0 142436 1452 ? S 01:02 0:00 CROND root 24313 0.0 0.0 106120 1188 ? Ss 01:02 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 24315 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24317 0.0 0.0 142436 1448 ? S 01:02 0:00 CROND root 24318 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24319 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24320 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24321 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24322 0.0 0.0 142436 1528 ? S 01:02 0:00 CROND root 24323 0.0 0.0 142440 1452 ? S 01:02 0:00 CROND root 24324 0.0 0.0 142440 1456 ? S 01:02 0:00 CROND root 24325 0.0 0.0 142440 1448 ? S 01:02 0:00 CROND root 24326 0.0 0.0 106120 1184 ? Ss 01:02 0:00 /bin/sh -c /bin/block-cloud.sh > /dev/null 2>&1 root 24329 0.0 0.0 4612 948 ? Ss 01:02 0:00 jailshell (inovesocialcom) [25355] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 24330 1.0 0.0 4612 936 ? Ss 01:02 0:00 jailshell (inovesocialcom) [24556] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 24332 0.0 0.0 106120 1196 ? Ss 01:02 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 24333 2.0 0.0 132340 4464 ? S 01:02 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 24337 0.0 0.0 106124 1392 ? S 01:02 0:00 /bin/bash /bin/block-cloud.sh root 24338 0.0 0.0 4612 948 ? Ss 01:02 0:00 jailshell (posaufacom) [25446] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 24339 0.0 0.0 106120 1192 ? Ss 01:02 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 24340 0.0 0.0 106120 1192 ? Ss 01:02 0:00 /bin/sh -c /bin/minuto-a-minuto.sh > /dev/null 2>&1 root 24341 1.0 0.0 4612 936 ? Ss 01:02 0:00 jailshell (posaufacom) [24507] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 24347 0.0 0.0 106120 1192 ? Ss 01:02 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 24350 3.0 0.0 4612 952 ? Ss 01:02 0:00 jailshell (recordho) [24780] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 24352 1.0 0.0 4612 952 ? Ss 01:02 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 24357 0.0 0.0 106120 1420 ? S 01:02 0:00 /bin/bash /bin/malv-block.sh root 24359 0.0 0.0 106124 1160 ? Ss 01:02 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 24360 0.0 0.0 106120 1380 ? S 01:02 0:00 /bin/bash /bin/bloqueia-envio.sh 861 24365 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 24366 0.0 0.0 4612 328 ? S 00:59 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 24369 0.0 0.0 4612 952 ? Ss 01:02 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 24370 0.0 0.0 106120 1196 ? Ss 01:02 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 24371 1.0 0.0 4612 932 ? Ss 01:02 0:00 jailshell (agegames) [24599] ll -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron recordho 24373 0.0 0.0 288180 14128 ? S 00:59 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 24376 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 24377 4.0 0.0 4616 936 ? Ss 01:02 0:00 jailshell (zedeveva) [25021] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:rebuild --force --batch-limit=300 1125 24378 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 24379 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 24384 0.0 0.0 4612 936 ? Ss 01:02 0:00 jailshell (posaufacom) [25277] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 24385 0.0 0.0 283528 10344 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 24387 0.0 0.0 283524 10204 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php root 24389 0.0 0.0 106120 1184 ? Ss 01:02 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 24390 0.0 0.0 106120 1196 ? Ss 01:02 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 861 24393 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 24394 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 24395 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 24396 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 24397 0.0 0.0 283524 10200 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 24398 0.0 0.0 136464 2624 ? S 00:59 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron root 24399 1.0 0.0 4612 936 ? Ss 01:02 0:00 jailshell (inovesocialcom) [24888] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24401 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 24402 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 24403 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 24404 0.0 0.0 106124 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 24405 0.0 0.0 283524 10212 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 24406 0.0 0.0 283524 10180 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 24410 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24411 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 24412 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24413 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 24414 0.0 0.0 283528 10204 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 24415 0.0 0.0 283532 10212 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 24418 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24419 0.0 0.0 106120 820 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24420 0.0 0.0 283528 10320 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 24423 0.0 0.0 4352 584 ? Ss 01:02 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 24428 2.0 0.0 4612 952 ? Ss 01:02 0:00 jailshell (mgfilmes) [25271] ll -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron nobody 24445 0.0 0.0 115520 10336 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start root 24461 0.0 0.0 106120 1176 ? S 01:02 0:00 /bin/bash /bin/minuto-a-minuto.sh nobody 24469 0.0 0.0 114200 9016 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start nobody 24472 0.0 0.0 114504 10520 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start root 24477 0.0 0.0 106124 780 ? S 01:02 0:00 /bin/bash /bin/block-cloud.sh 861 24507 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] root 24508 0.0 0.0 106124 1388 ? S 01:02 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24509 2.0 0.0 282324 14004 ? S 01:02 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 24511 0.0 0.0 106120 1380 ? S 01:02 0:00 /bin/bash /bin/brut-filtro.sh root 24512 0.0 0.0 106124 1356 ? S 01:02 0:00 /bin/bash /bin/monitora-load.sh 1125 24527 0.0 0.0 9456 816 ? S 00:59 0:00 /bin/sh php.cgi mailnull 24533 0.0 0.0 71032 2304 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 24537 0.0 0.0 142776 12008 ? S 00:59 0:00 /opt/php/php-5.6.26/bin/php-cgi wdcpubli 24539 0.0 0.0 142656 14848 ? S 00:59 0:00 php.cgi icowebra 24540 0.1 0.0 194436 18332 ? S 00:59 0:00 /usr/bin/php icowebra 24551 0.2 0.0 221420 44528 ? S 00:59 0:00 /usr/bin/php root 24553 0.0 0.0 106124 1332 ? S 01:02 0:00 /bin/bash /bin/verifica-spf.sh 1125 24556 0.0 0.0 4612 396 ? S 01:02 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 24584 0.0 0.0 106120 1320 ? S 01:02 0:00 /bin/bash /bin/iptbloqueando-ddos.sh agegames 24599 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] 1125 24600 0.0 0.0 106120 1192 ? S 01:02 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 named 24611 0.1 0.0 748664 8548 ? Ssl Apr17 0:39 /usr/sbin/named -u named -t /var/named/chroot samuel 24627 0.0 0.0 9456 812 ? S 00:59 0:00 /bin/sh php.cgi samuel 24632 0.0 0.0 140652 15240 ? S 00:59 0:00 /opt/php/php-5.5.6/bin/php-cgi mailnull 24634 0.0 0.0 71028 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 24635 0.0 0.0 71032 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 24637 1.0 0.0 136464 4460 ? S 01:02 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron root 24640 0.0 0.0 106124 776 ? S 01:02 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24660 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24662 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24663 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24664 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24665 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24666 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24667 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24668 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24669 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24670 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24671 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24681 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24685 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24693 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24694 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24695 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24696 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24702 0.0 0.0 142440 1180 ? S 01:00 0:00 CROND root 24703 0.0 0.0 142440 1180 ? S 01:00 0:00 CROND root 24705 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24706 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24707 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24708 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24712 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24720 0.0 0.0 106124 832 ? S 01:02 0:00 /bin/bash /bin/brut-filtro.sh root 24764 0.0 0.0 106124 720 ? S 01:02 0:00 /bin/bash /bin/verifica-spf.sh root 24768 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (recordho) [3063] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 24769 0.0 0.0 4612 940 ? Ss 01:00 0:00 jailshell (posaufacom) [3463] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 24770 0.0 0.0 4612 928 ? Ss 01:00 0:00 jailshell (distribuidoresaz) [3435] get -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto3.php root 24771 0.0 0.0 4612 924 ? Ss 01:00 0:00 jailshell (posaufacom) [3074] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 24772 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (posaufacom) [3506] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 24778 0.0 0.0 4612 932 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3036] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 24779 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3498] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 recordho 24780 0.0 0.0 4612 392 ? S 01:02 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 24782 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3457] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 24787 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (distribuidoresaz) [3455] get -O /dev/null http://distribuidoresazenka.com.br/wp-content/plugins/FanMachine2Pro/auto.php root 24788 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3508] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 24798 0.0 0.0 106120 1136 ? Ss 01:00 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 24800 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3490] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 24802 0.0 0.0 106120 1132 ? Ss 01:00 0:00 /bin/sh -c /bin/corrigir-problemas.sh > /dev/null 2>&1 root 24803 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (posaufacom) [3500] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 24805 0.0 0.0 106124 900 ? S 01:02 0:00 /bin/bash /bin/malv-block.sh root 24809 0.0 0.0 4612 932 ? Ss 01:00 0:00 jailshell (centralgib) [3041] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php root 24811 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (centralgib) [3491] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 24812 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (centralagenciaw3) [3034] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php root 24813 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (centralc) [3039] ell -c php -q /home/centralc/public_html/pipe/pipe.php root 24814 0.0 0.0 4612 956 ? Ss 01:00 0:00 jailshell (centralc) [3458] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 24815 0.0 0.0 4612 964 ? Ss 01:00 0:00 jailshell (centralagenciaw3) [3456] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 24816 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (centralgib) [3465] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 24817 0.0 0.0 4612 880 ? Ss 01:00 0:00 jailshell (centralpluginscp) [3042] hp -q /home/centralpluginscp/public_html/pipe/pipe.php root 24818 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (portal) [3443] shell -c php -q /home/portal/public_html/pipe/pop.php root 24822 0.0 0.0 4612 960 ? Ss 01:00 0:00 jailshell (centralpluginscp) [3459] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 24843 0.0 0.0 106124 1092 ? S 01:00 0:00 /bin/bash /bin/corrigir-problemas.sh root 24849 0.0 0.0 106124 1304 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1125 24865 0.0 0.0 9460 1124 ? S 01:02 0:00 /bin/sh php.cgi root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] 1125 24888 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] nobody 24894 0.0 0.0 115616 12064 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 24916 0.1 0.0 106124 776 ? S 01:00 0:00 /bin/bash /bin/liberar-csf-brasil.sh zedeveva 25021 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] recordho 25269 4.0 0.0 288392 20804 ? D 01:02 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 25270 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/1:2] mgfilmes 25271 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] 861 25277 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] mailnull 25320 2.0 0.0 71036 3420 ? D 01:02 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 25323 2.0 0.0 71032 3412 ? S 01:02 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 25355 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] mailnull 25387 3.0 0.0 71032 3416 ? S 01:02 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 861 25446 0.0 0.0 0 0 ? D 01:02 0:00 [jailshell] mailnull 25495 3.0 0.0 71040 3416 ? D 01:02 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 25507 0.0 0.0 106124 532 ? S 01:02 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 25509 2.0 0.0 0 0 ? R 01:02 0:00 [cat] root 25510 12.0 0.0 103360 852 ? R 01:02 0:00 grep 77.74.54.21 root 25511 0.0 0.0 103360 840 ? S 01:02 0:00 grep user 1125 25676 5.0 0.0 142004 16076 ? D 01:02 0:00 /opt/php/php-5.6.26/bin/php-cgi root 25683 0.0 0.0 0 0 ? Z 01:02 0:00 [rtm] root 25685 0.0 0.0 0 0 ? Z 01:02 0:00 [rtm] root 25686 0.0 0.0 130236 2676 ? S 01:02 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 25688 0.0 0.0 0 0 ? Z 01:02 0:00 [rtm] mailnull 25707 2.0 0.0 71040 3404 ? D 01:02 0:00 send-mail -i -- admin@conectadohost.com.br root 25708 5.0 0.0 108348 1184 ? R 01:02 0:00 ps aux root 26353 0.1 0.0 170120 11644 ? S 01:01 0:00 lfd - (child) sending alert email for 177.133.74.217 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 maisg647 26560 0.0 0.0 241460 16188 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 15884 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 15876 ? S Apr17 0:00 /usr/bin/php root 26601 0.0 0.0 119136 1728 ? S 01:00 0:00 mysqlcheck --repair eximstats 860 26614 0.0 0.0 186420 7384 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1560 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 304 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114328 9236 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 26670 0.0 0.0 288180 12712 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 992 26701 0.0 0.0 187676 8448 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 728 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11028 ? S Apr17 0:00 /usr/bin/php 1125 26765 0.0 0.0 136464 2240 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 284276 12180 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 448 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 296 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth agitae 26982 0.1 0.0 186576 19180 ? S 01:01 0:00 /usr/bin/php nobody 28133 0.0 0.0 114480 9700 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 115608 10708 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28172 0.0 0.0 106120 480 ? Ss 00:56 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 28183 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22939] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (recordho) [22890] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22960] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4612 756 ? Ss 00:56 0:00 jailshell (posaufacom) [22979] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28188 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22886] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28191 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [23005] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22975] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22954] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28195 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22991] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22940] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 28782 0.0 0.0 142296 10144 ? S 00:56 0:00 php.cgi root 28970 0.0 0.0 0 0 ? S 01:01 0:00 [kworker/6:1] root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29231 0.0 0.0 106124 624 ? S 00:56 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] icowebra 30070 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114344 8744 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.1 222024 96132 ? Ss Apr16 6:16 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2148 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 708 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:19 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:26 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 3:50 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:37 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1937 0.0 0.0 0 0 ? S 00:57 0:00 [kworker/9:0] 1125 1950 0.0 0.0 9460 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1951 0.0 0.0 9456 468 ? S 00:57 0:00 /bin/sh php.cgi 1125 1952 0.0 0.0 9456 472 ? S 00:57 0:00 /bin/sh php.cgi 1125 1953 0.0 0.0 9456 480 ? S 00:57 0:00 /bin/sh php.cgi 1125 1960 0.0 0.0 142776 10240 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1961 0.0 0.0 142768 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1962 0.0 0.0 142772 10232 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 1963 0.0 0.0 142768 11140 ? S 00:57 0:00 /opt/php/php-5.6.26/bin/php-cgi root 1970 0.0 0.0 106124 380 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 764 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 480 ? S Apr16 0:01 dovecot/anvil 1125 2038 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2042 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2044 0.0 0.0 4612 392 ? S 00:57 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 2057 0.0 0.0 106120 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 2058 0.0 0.0 288492 14764 ? S 00:57 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 2060 0.0 0.0 106124 484 ? S 00:57 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2066 0.0 0.0 283524 9084 ? S 00:57 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2067 0.0 0.0 283528 9028 ? S 00:57 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2118 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2119 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 2120 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2121 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2122 0.0 0.0 283524 9084 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 2123 0.0 0.0 283524 8940 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 2127 0.3 0.0 221424 44440 ? S 00:58 0:01 /usr/bin/php 1125 2128 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 2130 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2131 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 2132 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2133 0.0 0.0 284792 12500 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 2134 0.0 0.0 283528 8936 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 2144 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2145 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2146 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2147 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2148 0.0 0.0 142436 868 ? S 00:58 0:00 CROND root 2164 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2165 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2166 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2167 0.0 0.0 142436 860 ? S 00:58 0:00 CROND root 2170 0.0 0.0 142440 864 ? S 00:58 0:00 CROND 861 2177 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2178 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2179 0.0 0.0 106120 476 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2180 0.0 0.0 106120 444 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2181 0.0 0.0 284276 12204 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2182 0.0 0.0 136464 2264 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2191 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2192 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2193 0.0 0.0 284792 12660 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 2200 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2201 0.0 0.0 142772 10228 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2216 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2287] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 2223 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2514] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 2226 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (recordho) [2300] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2227 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2266] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 2232 0.0 0.0 4612 764 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2347] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 2235 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2379] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 2237 0.0 0.0 4612 768 ? Ss 00:58 0:00 jailshell (inovesocialcom) [2378] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2242 0.0 0.0 4612 760 ? Ss 00:58 0:00 jailshell (posaufacom) [2349] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2245 0.0 0.0 4616 748 ? Ss 00:58 0:00 jailshell (posaufacom) [2298] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 2249 0.0 0.0 4612 748 ? Ss 00:58 0:00 jailshell (posaufacom) [5904] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 2266 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2267 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 2268 0.0 0.0 283524 8844 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 2287 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 2298 0.0 0.0 4616 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 2300 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2310 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2323 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 2324 0.0 0.0 106120 460 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 recordho 2327 0.0 0.0 288180 12856 ? S 00:58 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations root 2330 0.0 0.0 142436 736 ? S 00:52 0:00 CROND 861 2332 0.0 0.0 284792 12476 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 2333 0.0 0.0 283524 9368 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 2336 0.0 0.0 142440 892 ? S 00:52 0:00 CROND 1125 2347 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 2348 0.0 0.0 106120 480 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 2349 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 2350 0.0 0.0 106120 468 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 2354 0.0 0.0 283524 8880 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 2355 0.0 0.0 284276 12192 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 2378 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2379 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 2380 0.0 0.0 106120 448 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 2381 0.0 0.0 106120 456 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 2382 0.0 0.0 283528 8952 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 2383 0.0 0.0 136464 2260 ? S 00:58 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 2386 0.0 0.0 9456 476 ? S 00:58 0:00 /bin/sh php.cgi 1125 2387 0.0 0.0 142772 10236 ? S 00:58 0:00 /opt/php/php-5.6.26/bin/php-cgi root 2438 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (posaufacom) [26643] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 2449 0.0 0.0 4612 724 ? Ss 00:52 0:00 jailshell (inovesocialcom) [26410] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 2452 0.0 0.0 4612 628 ? Ss 00:52 0:00 jailshell (recordho) [26642] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 2501 0.0 0.0 117044 12300 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start nobody 2502 0.0 0.0 114192 9028 ? S 00:52 0:00 /usr/local/apache/bin/httpd -k start 1125 2514 0.0 0.0 4612 396 ? S 00:58 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2515 0.0 0.0 106120 484 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 2520 0.0 0.0 283524 9224 ? S 00:58 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php conhecsc 2737 38.1 73.7 50051140 48699328 ? D 00:35 10:30 /usr/local/cpanel/bin/autossl_check --all nobody 2881 0.0 0.0 114192 7744 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3011 0.0 0.0 114548 10884 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start root 3013 0.0 0.0 169980 10680 ? S 01:00 0:00 lfd - checking system integrity nobody 3031 0.0 0.0 115524 10840 ? S 01:00 0:00 /usr/local/apache/bin/httpd -k start 699 3034 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 1125 3036 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 3037 0.0 0.0 142436 372 ? S 00:34 0:00 CROND centralc 3039 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php 1077 3041 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php 1120 3042 0.0 0.0 4612 332 ? S 01:00 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1125 3044 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 699 3046 0.0 0.0 287692 20420 ? S 01:00 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 3048 0.0 0.0 287960 20832 ? S 01:00 0:00 php -q /home/centralc/public_html/pipe/pipe.php 1120 3051 0.0 0.0 287964 20832 ? S 01:00 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 3052 0.0 0.0 244328 21836 ? S 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php root 3059 0.2 0.0 252468 3356 ? Ss 00:34 0:04 /usr/local/cpanel/bin/autossl_check --all recordho 3063 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 3068 0.0 0.0 288180 20752 ? S 01:00 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 3074 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 3075 0.0 0.0 106120 1124 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 3076 0.1 0.0 100988 724 ? D 01:00 0:00 /usr/bin/md5sum --check /var/lib/csf/csf.tempint 861 3080 0.0 0.0 283524 16436 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 3081 0.0 0.0 283524 16460 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php nobody 3115 0.0 0.0 114192 7724 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start 828 3173 0.8 0.0 274064 15880 ? S 00:49 0:06 /usr/bin/php dovenull 3299 0.0 0.0 42760 812 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 368 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 720 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42760 576 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 2088 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 308 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 1020 ? S 00:45 0:00 dovecot/auth portal 3443 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (portal) [init] shell -c php -q /home/portal/public_html/pipe/pop.php portal 3444 0.0 0.0 292168 23724 ? S 01:00 0:00 php -q /home/portal/public_html/pipe/pop.php 699 3456 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 1125 3457 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 centralc 3458 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 3459 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 861 3463 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1077 3465 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 3466 0.0 0.0 106120 1112 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 699 3467 0.0 0.0 288748 21192 ? S 01:00 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations centralc 3469 0.0 0.0 288180 20752 ? S 01:00 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 3471 0.0 0.0 288748 21192 ? S 01:00 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 861 3474 0.0 0.0 106120 1104 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1077 3475 0.0 0.0 244340 21920 ? S 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 3476 0.0 0.0 283528 16588 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 3477 0.0 0.0 283528 16604 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 3490 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1077 3491 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1125 3492 0.0 0.0 106120 1108 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1077 3494 0.0 0.0 244344 21920 ? S 01:00 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1125 3495 0.0 0.0 283524 16360 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 3498 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 3499 0.0 0.0 106120 1120 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 3500 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 3501 0.0 0.0 106120 1092 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 3502 0.0 0.0 283524 16440 ? S 01:00 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 861 3503 0.0 0.0 283524 16456 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 3506 0.0 0.0 4612 392 ? S 01:00 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 3507 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 3508 0.0 0.0 4612 396 ? S 01:00 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 3509 0.0 0.0 106120 1140 ? S 01:00 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 3510 0.0 0.0 283524 16464 ? S 01:00 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 3511 0.0 0.0 136464 4364 ? S 01:00 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] samuel 3599 0.0 0.0 9456 1120 ? S 01:00 0:00 /bin/sh php.cgi mailnull 3602 0.0 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3603 0.0 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3605 0.0 0.0 71028 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3608 0.0 0.0 71028 3400 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3611 0.0 0.0 71036 3392 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3612 0.0 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3614 0.0 0.0 71032 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 3616 0.0 0.0 71028 3396 ? S 01:00 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root samuel 3660 0.0 0.0 140648 15420 ? S 01:00 0:00 /opt/php/php-5.5.6/bin/php-cgi 1125 3670 0.0 0.0 9456 1124 ? S 01:00 0:00 /bin/sh php.cgi 1125 3671 0.0 0.0 142768 17092 ? S 01:00 0:00 /opt/php/php-5.6.26/bin/php-cgi nobody 3723 0.0 0.0 114328 8984 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3726 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3728 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3729 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3730 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3746 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3747 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3748 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3749 0.0 0.0 142436 1460 ? S 01:01 0:00 CROND root 3752 0.0 0.0 142440 1460 ? S 01:01 0:00 CROND nobody 3803 0.0 0.0 114480 11084 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start 1003 3822 0.0 0.0 137036 688 ? S 01:01 0:00 pure-ftpd (IDLE) root 3823 0.0 0.0 136824 128 ? S 01:01 0:00 pure-ftpd (PRIV) root 3856 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (posaufacom) [14781] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 3857 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14778] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 3864 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14824] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 3865 0.0 0.0 4612 948 ? Ss 01:01 0:00 jailshell (posaufacom) [14793] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 3868 0.0 0.0 4612 948 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14791] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 3872 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (posaufacom) [14812] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 3876 0.0 0.0 4612 936 ? Ss 01:01 0:00 jailshell (posaufacom) [14772] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 3878 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (inovesocialcom) [14810] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 3880 0.0 0.0 4612 952 ? Ss 01:01 0:00 jailshell (recordho) [14769] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 3921 0.0 0.0 115116 10292 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start root 3938 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/4:2] nobody 4002 0.0 0.0 115120 10516 ? S 01:01 0:00 /usr/local/apache/bin/httpd -k start root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 1084 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 624 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 8056 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start 828 4778 0.5 0.0 234216 16216 ? S 00:45 0:05 /usr/bin/php conhecsc 4812 5.7 0.0 187440 4900 ? S 00:45 1:00 /usr/bin/php progress 4846 0.3 0.0 268336 15792 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 15904 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5311 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/2:1] nobody 5674 0.0 0.0 112412 696 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 6320 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 6576 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 6204 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 440 ? S Apr17 0:00 /usr/bin/php 881 5826 0.6 0.0 0 0 ? Z 01:01 0:00 [php] root 5841 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/10:0] voarloca 5876 0.0 0.0 185948 18364 ? S 01:01 0:00 /usr/bin/php 861 5904 0.0 0.0 4612 392 ? S 00:58 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5906 0.0 0.0 106120 488 ? S 00:58 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 5911 0.0 0.0 284792 12608 ? S 00:58 0:00 php /home/posaufacom/public_html/postador/cron/hid.php icowebra 6242 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 348 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104360 4728 ? S Apr17 0:07 tailwatchd mysql 6514 18.6 0.3 6973904 221736 ? Sl Apr17 235:34 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6609 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/9:3] icowebra 6842 0.0 0.0 192900 444 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 440 ? S Apr17 0:00 /usr/bin/php root 7266 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/0:0] root 7313 0.0 0.0 0 0 ? S 00:00 0:00 [kworker/8:2] samuel 7398 0.0 0.0 9456 1120 ? S 01:02 0:00 /bin/sh php.cgi 1125 7534 0.0 0.0 142768 17096 ? S 01:02 0:00 /opt/php/php-5.6.26/bin/php-cgi samuel 7537 0.0 0.0 140648 15448 ? S 01:02 0:00 /opt/php/php-5.5.6/bin/php-cgi diadiapr 7691 0.3 0.0 186520 21480 ? S 01:02 0:00 /usr/bin/php root 7755 0.0 0.0 0 0 ? S 00:50 0:00 [kworker/4:0] voarloca 8115 0.0 0.0 185548 18288 ? S 01:01 0:00 /usr/bin/php root 8274 0.0 0.0 142436 828 ? S 00:54 0:00 CROND nobody 8426 0.0 0.0 114356 9540 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 8503 0.0 0.0 114520 9360 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 9386 0.0 0.0 114460 10924 ? S 01:02 0:00 /usr/local/apache/bin/httpd -k start nobody 9403 0.0 0.0 114328 9380 ? S 01:02 0:00 /usr/local/apache/bin/httpd -k start 881 9538 0.6 0.0 189608 25176 ? S 01:02 0:00 /usr/bin/php 881 9541 0.3 0.0 189448 24804 ? S 01:02 0:00 /usr/bin/php buffetlu 9577 0.1 0.0 186052 18792 ? S 01:02 0:00 /usr/bin/php loppelco 9747 0.1 0.0 185944 18520 ? S 01:02 0:00 /usr/bin/php nobody 9841 0.0 0.0 115124 10248 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 10695 0.0 0.0 4612 744 ? Ss 00:54 0:00 jailshell (inovesocialcom) [22587] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 10859 0.1 0.0 53076 5248 ? S 01:02 0:00 dovecot/lmtp root 10926 0.0 0.0 4640 232 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 332 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 2152 ? Ssl Apr16 4:12 /usr/sbin/nscd root 11030 0.0 0.0 64392 276 ? Ss Apr16 0:00 /usr/sbin/sshd picapau 11209 0.0 0.0 184964 14680 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 748 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178120 220 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 752 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 236 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 792 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11363 0.1 0.0 169980 11092 ? Ss 00:00 0:06 lfd - sleeping root 11635 0.0 0.0 13676 1132 ? S 01:02 0:00 dovecot/ssl-params root 11713 0.0 0.0 136204 104 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 608 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 196 ? Ss Apr16 0:00 /usr/sbin/atd root 11793 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/11:2] nobody 11834 0.0 0.0 115520 12476 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 114192 7840 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start root 11922 0.5 0.0 31880 2040 ? S 01:02 0:00 dovecot/auth -w root 12560 0.0 0.0 4108 224 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 228 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 224 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 228 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 224 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 224 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 1053 12757 0.7 0.0 186324 19716 ? S 01:02 0:00 /usr/bin/php root 12798 0.0 0.0 0 0 ? Z 01:02 0:00 [cpsrvd (SSL) - ] noticias 12810 0.8 0.0 185824 18924 ? S 01:02 0:00 /usr/bin/php mailnull 12828 0.0 0.0 74004 1316 ? S 01:02 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 12834 0.0 0.0 71028 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12835 0.0 0.0 71032 1500 ? S 00:58 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12842 0.0 0.0 74020 1560 ? S 01:02 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid evsinfo 12852 1.2 0.0 185900 17132 ? D 01:02 0:00 /usr/bin/php guiame 12853 0.8 0.0 185104 14932 ? S 01:02 0:00 /usr/bin/php 1037 12865 1.6 0.0 185108 14916 ? S 01:02 0:00 /usr/bin/php mailnull 12866 0.0 0.0 74876 1312 ? S 01:02 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 12874 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12875 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12876 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12877 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12878 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12879 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12880 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12881 0.0 0.0 142436 1452 ? S 01:03 0:00 CROND root 12882 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12883 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12885 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12886 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12887 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12888 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12889 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12892 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12894 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12895 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12896 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12897 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12898 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12899 0.0 0.0 142436 1452 ? S 01:03 0:00 CROND root 12900 0.0 0.0 106120 1188 ? Ss 01:03 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 12901 0.0 0.0 4352 604 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 12902 0.0 0.0 106120 1176 ? Ss 01:03 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 12904 0.0 0.0 106120 1188 ? Ss 01:03 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 12905 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12906 0.0 0.0 4612 916 ? Ds 01:03 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 12907 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12908 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12909 0.0 0.0 142436 1444 ? S 01:03 0:00 CROND root 12910 0.0 0.0 142436 1448 ? S 01:03 0:00 CROND root 12911 0.0 0.0 142436 1444 ? S 01:03 0:00 CROND root 12912 3.0 0.0 4612 916 ? Rs 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 12913 0.0 0.0 106120 1196 ? Ss 01:03 0:00 /bin/sh -c /bin/liberar-csf.sh > /dev/null 2>&1 root 12914 0.0 0.0 4352 604 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 12915 0.0 0.0 4352 604 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 12916 0.0 0.0 106120 1192 ? Ss 01:03 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12918 0.0 0.0 106120 1184 ? Ss 01:03 0:00 /bin/sh -c /bin/block-cloud.sh > /dev/null 2>&1 root 12919 0.0 0.0 106120 1192 ? Ss 01:03 0:00 /bin/sh -c /bin/liberar-clientes.sh > /dev/null 2>&1 root 12920 0.0 0.0 106120 1192 ? Ss 01:03 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 12921 0.0 0.0 4612 916 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 12922 0.0 0.0 106120 1188 ? Ss 01:03 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 12923 0.0 0.0 106120 1192 ? Ss 01:03 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 12925 0.0 0.0 4352 600 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 12927 0.0 0.0 106124 1336 ? S 01:03 0:00 /bin/bash /bin/verifica-spf.sh root 12928 0.0 0.0 4352 604 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 12929 0.0 0.0 4352 620 ? Ds 01:03 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 12930 0.0 0.0 106120 1196 ? Ss 01:03 0:00 /bin/sh -c /bin/minuto-a-minuto.sh > /dev/null 2>&1 root 12931 0.0 0.0 106120 1196 ? Ss 01:03 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 12932 2.0 0.0 130232 4364 ? S 01:03 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12933 0.0 0.0 4612 916 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 12934 0.0 0.0 106124 1356 ? S 01:03 0:00 /bin/bash /bin/monitora-load.sh root 12936 0.0 0.0 106124 1384 ? S 01:03 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12937 0.0 0.0 106120 1392 ? S 01:03 0:00 /bin/bash /bin/malv-block.sh root 12938 0.0 0.0 4352 624 ? Ds 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 12939 0.0 0.0 4352 624 ? Ds 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 12941 0.0 0.0 106120 1196 ? Ss 01:03 0:00 /bin/sh -c /bin/block-malv.sh > /dev/null 2>&1 root 12942 0.0 0.0 4352 600 ? Ss 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 12950 0.0 0.0 4352 624 ? Ds 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 12955 0.0 0.0 4356 624 ? Ds 01:03 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 mailnull 12974 3.0 0.0 71044 3360 ? D 01:03 0:00 send-mail -i -- admin@conectadohost.com.br root 12975 2.0 0.0 108344 1184 ? R 01:03 0:00 ps aux root 12980 0.0 0.0 106124 724 ? S 01:03 0:00 /bin/bash /bin/verifica-spf.sh root 13220 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13221 0.0 0.0 142440 928 ? S 00:55 0:00 CROND root 13222 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13223 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13224 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13225 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13226 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13267 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13269 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13270 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13272 0.0 0.0 142436 812 ? S 00:55 0:00 CROND root 13277 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13281 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13284 0.0 0.0 142440 924 ? S 00:55 0:00 CROND root 13286 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13287 0.0 0.0 142440 920 ? S 00:55 0:00 CROND root 13292 0.0 0.0 142440 916 ? S 00:55 0:00 CROND root 13328 0.2 0.1 237248 107468 ? S 00:58 0:00 spamd child root 13329 0.1 0.1 233376 103688 ? S 00:58 0:00 spamd child mailnull 13364 0.0 0.0 71028 3416 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 13365 0.0 0.0 71028 3416 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 13366 0.0 0.0 71032 3420 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 13377 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/6:0] 800 13403 0.0 0.0 142916 12000 ? S 00:59 0:00 php.cgi root 13422 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13423 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13424 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13425 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13426 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13443 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13444 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13445 0.0 0.0 142436 1008 ? S 00:59 0:00 CROND root 13446 0.0 0.0 142436 1016 ? S 00:59 0:00 CROND root 13449 0.0 0.0 142440 984 ? S 00:59 0:00 CROND root 13536 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24395] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 13537 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24418] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 13538 0.0 0.0 4612 848 ? Ss 00:59 0:00 jailshell (posaufacom) [24365] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 13541 0.0 0.0 4612 844 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24378] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 13550 0.0 0.0 4612 880 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24410] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 13551 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24393] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 13552 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24401] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 13566 0.0 0.0 4612 784 ? Ss 00:59 0:00 jailshell (recordho) [24366] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 13568 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (inovesocialcom) [24403] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 13571 0.0 0.0 4612 876 ? Ss 00:59 0:00 jailshell (posaufacom) [24411] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 13645 0.0 0.0 114060 8632 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13821 0.0 0.0 106128 280 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14317 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/3:1] recordho 14769 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 14771 0.0 0.0 288180 20800 ? S 01:01 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 14772 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 14773 0.0 0.0 106120 1192 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 14775 0.0 0.0 283528 16508 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 14778 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 14780 0.0 0.0 106120 1160 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 14781 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 14782 0.0 0.0 106120 1160 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 14783 0.0 0.0 283528 16660 ? S 01:01 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 14784 0.0 0.0 283524 16516 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 14791 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 14792 0.0 0.0 106120 1196 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 14793 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 14794 0.0 0.0 106124 1192 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 14795 0.0 0.0 283524 16528 ? S 01:01 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 861 14796 0.0 0.0 283524 16516 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/hid.php mailnull 14808 0.0 0.0 71032 3412 ? S 01:01 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 14810 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 14811 0.0 0.0 106120 1196 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 14812 0.0 0.0 4612 396 ? S 01:01 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 14813 0.0 0.0 106120 1188 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 14814 0.0 0.0 283528 16512 ? S 01:01 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 14815 0.0 0.0 283524 16648 ? S 01:01 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 14824 0.0 0.0 4612 392 ? S 01:01 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 14825 0.0 0.0 106120 1192 ? S 01:01 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 14826 0.0 0.0 136464 4460 ? S 01:01 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 879 14832 0.4 0.0 187020 18056 ? S 01:01 0:00 /usr/bin/php root 14833 0.0 0.0 0 0 ? S 01:01 0:00 [kworker/8:0] 1125 14895 0.0 0.0 9464 1124 ? S 01:01 0:00 /bin/sh php.cgi 1125 14896 0.0 0.0 142772 17100 ? S 01:01 0:00 /opt/php/php-5.6.26/bin/php-cgi wdcpubli 14897 0.0 0.0 142656 16728 ? S 01:01 0:00 php.cgi root 15373 0.0 0.0 61336 3428 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 1700 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 nobody 15948 0.0 0.0 114512 8864 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start mailman 16010 0.0 0.0 120748 1300 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 1012 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1212 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 1000 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 1000 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 1016 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1064 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 992 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 992 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16110 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/0:1] root 16526 0.0 0.0 26212 632 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1212 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 101892 28204 ? S Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 1053 16832 0.0 0.0 187116 20684 ? S 01:01 0:00 /usr/bin/php conhecsc 17197 0.0 0.0 191140 12992 ? S 00:48 0:00 /usr/bin/php root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] noticias 18706 0.0 0.0 0 0 ? Z 00:46 0:00 [php] root 19132 0.9 0.0 240980 3964 ? S 00:50 0:06 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 3868 ? D 00:50 0:00 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 4.9 0.0 23760 8876 ? S 00:50 0:36 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 5896 ? S 00:48 0:00 /usr/bin/php nossojor 19819 0.1 0.0 185832 20316 ? S 01:01 0:00 /usr/bin/php acinpcdl 19835 0.2 0.0 249740 16828 ? S 00:48 0:02 /usr/bin/php nobody 19844 0.0 0.0 115624 8268 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start acinpcdl 19845 0.0 0.0 234712 16792 ? S 00:48 0:00 /usr/bin/php nobody 20150 0.0 0.0 114344 8968 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 20151 0.0 0.0 115308 12056 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] wwwfacul 20446 0.0 0.0 265704 16500 ? S 00:46 0:00 /usr/bin/php root 20492 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22997] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20493 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22984] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20494 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22986] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20495 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22900] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20497 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (posaufacom) [22965] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20498 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22996] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20499 0.0 0.0 4612 760 ? Ss 00:55 0:00 jailshell (inovesocialcom) [23010] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20500 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (inovesocialcom) [22967] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20501 0.0 0.0 4612 744 ? Ss 00:55 0:00 jailshell (posaufacom) [22630] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20521 0.0 0.0 4616 744 ? Ss 00:55 0:00 jailshell (recordho) [22619] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 20524 0.0 0.0 114328 9008 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20534 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22899] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 20536 0.0 0.0 4612 756 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22895] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 20537 0.0 0.0 4616 756 ? Ss 00:55 0:00 jailshell (centralgib) [22883] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 20538 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralpluginscp) [22636] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 20539 0.0 0.0 4612 724 ? Ss 00:55 0:00 jailshell (centralagenciaw3) [22641] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 20542 0.0 0.0 4612 752 ? Ss 00:55 0:00 jailshell (centralc) [22897] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 20546 0.0 0.0 4612 728 ? Ss 00:55 0:00 jailshell (centralgib) [22657] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php regis 20754 0.0 0.0 186880 6040 ? S 00:46 0:00 /usr/bin/php nobody 20827 0.0 0.0 116004 12624 ? S 00:46 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20831 0.0 0.0 263164 16044 ? S 00:46 0:00 /usr/bin/php root 21000 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/1:0] nobody 22377 0.0 0.0 115572 10912 ? S 00:55 0:00 /usr/local/apache/bin/httpd -k start 1125 22587 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22610 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 nobody 22615 0.0 0.0 114200 8896 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 22619 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 22623 0.0 0.0 288180 12720 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 22629 0.0 0.0 136464 2264 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 22630 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22631 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 22633 0.0 0.0 283528 8788 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1120 22636 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 22637 0.0 0.0 287968 14480 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 22641 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 699 22642 0.0 0.0 288748 14816 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 22651 0.0 0.0 142436 804 ? S 00:56 0:00 CROND nobody 22653 0.0 0.0 114352 8840 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 22654 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22656 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22657 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22658 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22659 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/6:3] root 22660 0.0 0.0 142436 804 ? S 00:56 0:00 CROND 1077 22661 0.0 0.0 244344 16608 ? S 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 22678 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22679 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22680 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22681 0.0 0.0 142436 804 ? S 00:56 0:00 CROND root 22684 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/3:0] root 22685 0.0 0.0 142440 920 ? S 00:56 0:00 CROND nobody 22690 0.0 0.0 116748 11980 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 22704 0.0 0.0 115528 12892 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start 1077 22883 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 22884 0.0 0.0 244340 16608 ? S 00:56 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 22886 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 recordho 22890 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 22894 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 699 22895 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 861 22896 0.0 0.0 284276 12188 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php centralc 22897 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22899 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22900 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 recordho 22907 0.0 0.0 288492 14760 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 699 22909 0.0 0.0 287692 12404 ? S 00:56 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 22911 0.0 0.0 288748 14804 ? S 00:56 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 1120 22912 0.0 0.0 288180 12740 ? S 00:56 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 22913 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22915 0.0 0.0 284276 12192 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22939 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22940 0.0 0.0 4616 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 22941 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 22944 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 22947 0.0 0.0 284276 12196 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 22948 0.0 0.0 284276 12188 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1086 22951 0.0 0.0 9464 456 ? S 00:56 0:00 /bin/sh php.cgi 1086 22952 0.0 0.0 9460 448 ? S 00:56 0:00 /bin/sh php.cgi 1125 22954 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22955 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 22956 0.0 0.0 284792 12472 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 22960 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22961 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22962 0.0 0.0 284796 12468 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 22965 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22966 0.0 0.0 106120 460 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 22967 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22968 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22969 0.0 0.0 284792 12608 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22970 0.0 0.0 284792 12600 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 22975 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22976 0.0 0.0 106124 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 22977 0.0 0.0 284788 12616 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 22979 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22980 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 22981 0.0 0.0 284792 12596 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 861 22984 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 22985 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 22986 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 22987 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 22988 0.0 0.0 283388 8900 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 22989 0.0 0.0 284792 12640 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 22991 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22992 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 22993 0.0 0.0 136464 2060 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 22996 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22997 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 22998 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 22999 0.0 0.0 106120 448 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 23000 0.0 0.0 284276 12196 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 23001 0.0 0.0 284792 12476 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 23005 0.0 0.0 4612 396 ? S 00:56 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23006 0.0 0.0 106120 472 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 23007 0.0 0.0 284788 12628 ? S 00:56 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 952 23008 0.0 0.0 142672 10736 ? S 00:56 0:00 php.cgi 1125 23010 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23011 0.0 0.0 106120 468 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 23012 0.0 0.0 136464 2156 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1086 23024 0.0 0.0 142660 10180 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi 1086 23025 0.0 0.0 157616 26584 ? S 00:56 0:00 /opt/php/php-5.6.26/bin/php-cgi root 23092 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23093 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23094 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23095 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23096 0.0 0.0 142436 868 ? S 00:57 0:00 CROND root 23112 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23113 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23114 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23115 0.0 0.0 142436 864 ? S 00:57 0:00 CROND root 23118 0.0 0.0 142440 844 ? S 00:57 0:00 CROND pdvxyz 23169 0.0 0.0 185472 7104 ? S 00:57 0:00 /usr/bin/php conect 23178 0.0 0.0 184964 6952 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 7852 ? S 00:57 0:00 /usr/bin/php conect 23186 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23187 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23188 0.0 0.0 184960 6952 ? S 00:57 0:00 /usr/bin/php conect 23189 0.0 0.0 184960 6936 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 7420 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 7408 ? S 00:57 0:00 /usr/bin/php conect 23195 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php conect 23200 0.0 0.0 184964 6944 ? S 00:57 0:00 /usr/bin/php conect 23201 0.0 0.0 184960 6948 ? S 00:57 0:00 /usr/bin/php conect 23203 0.0 0.0 184960 6944 ? S 00:57 0:00 /usr/bin/php conect 23204 0.0 0.0 184964 6948 ? S 00:57 0:00 /usr/bin/php root 23227 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (posaufacom) [2042] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 23231 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2038] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 23239 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2177] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 23245 0.0 0.0 4612 736 ? Ss 00:57 0:00 jailshell (recordho) [2044] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 23250 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2178] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 23252 0.0 0.0 4612 760 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2118] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 23253 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (posaufacom) [2120] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 23254 0.0 0.0 4612 764 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2191] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 23255 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (posaufacom) [2131] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 23257 0.0 0.0 4612 768 ? Ss 00:57 0:00 jailshell (inovesocialcom) [2128] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 mailnull 23284 0.0 0.0 71032 1500 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23286 0.0 0.0 71032 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23287 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] mailnull 23295 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23296 0.0 0.0 71028 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23298 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23299 0.0 0.0 71036 1496 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23300 0.0 0.0 71028 1504 ? S 00:57 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23356 0.0 0.0 0 0 ? S 00:49 0:00 [kworker/0:4] nobody 23364 0.0 0.0 115812 12024 ? S 00:57 0:00 /usr/local/apache/bin/httpd -k start nobody 23656 0.0 0.0 115520 10976 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24296 0.0 0.0 142436 1456 ? S 01:02 0:00 CROND root 24330 0.0 0.0 4612 936 ? Ss 01:02 0:00 jailshell (inovesocialcom) [24556] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 24365 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 24366 0.0 0.0 4612 328 ? S 00:59 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 24373 0.0 0.0 288180 14128 ? S 00:59 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 24376 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 24378 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 24379 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 24385 0.0 0.0 283528 10344 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 24387 0.0 0.0 283524 10204 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 861 24393 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 24394 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 24395 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 24396 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 24397 0.0 0.0 283524 10200 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 24398 0.0 0.0 136464 2624 ? S 00:59 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 24401 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 24402 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 24403 0.0 0.0 4612 396 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 24404 0.0 0.0 106124 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 24405 0.0 0.0 283524 10212 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 24406 0.0 0.0 283524 10180 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 1125 24410 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24411 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 24412 0.0 0.0 106120 812 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 24413 0.0 0.0 106120 816 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 24414 0.0 0.0 283528 10204 ? S 00:59 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 24415 0.0 0.0 283532 10212 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 24418 0.0 0.0 4612 392 ? S 00:59 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24419 0.0 0.0 106120 820 ? S 00:59 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 24420 0.0 0.0 283528 10320 ? S 00:59 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php nobody 24469 0.0 0.0 114340 9348 ? S 00:59 0:00 /usr/local/apache/bin/httpd -k start 1125 24527 0.0 0.0 9456 816 ? S 00:59 0:00 /bin/sh php.cgi mailnull 24533 0.0 0.0 71032 2304 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 24537 0.0 0.0 142776 12008 ? S 00:59 0:00 /opt/php/php-5.6.26/bin/php-cgi wdcpubli 24539 0.0 0.0 142656 14848 ? S 00:59 0:00 php.cgi icowebra 24540 0.2 0.0 221420 45096 ? S 00:59 0:00 /usr/bin/php icowebra 24551 0.1 0.0 194540 18152 ? S 00:59 0:00 /usr/bin/php 1125 24556 0.0 0.0 4612 396 ? S 01:02 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 24600 0.0 0.0 106120 1192 ? S 01:02 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 named 24611 0.1 0.0 748664 8548 ? Ssl Apr17 0:39 /usr/sbin/named -u named -t /var/named/chroot samuel 24627 0.0 0.0 9456 812 ? S 00:59 0:00 /bin/sh php.cgi samuel 24632 0.0 0.0 140652 15240 ? S 00:59 0:00 /opt/php/php-5.5.6/bin/php-cgi mailnull 24634 0.0 0.0 71028 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 24635 0.0 0.0 71032 2308 ? S 00:59 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 24637 0.0 0.0 136464 4460 ? S 01:02 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron root 24655 0.0 0.0 0 0 ? S 00:41 0:00 [kworker/5:3] root 24660 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24664 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24665 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24666 0.0 0.0 142440 1192 ? S 01:00 0:00 CROND root 24667 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24668 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24669 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24670 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24671 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24685 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24693 0.0 0.0 142436 1192 ? S 01:00 0:00 CROND root 24694 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24695 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24696 0.0 0.0 142436 1188 ? S 01:00 0:00 CROND root 24702 0.0 0.0 142440 1180 ? S 01:00 0:00 CROND root 24703 0.0 0.0 142440 1180 ? S 01:00 0:00 CROND root 24705 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24706 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24707 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24708 0.0 0.0 142440 1184 ? S 01:00 0:00 CROND root 24712 0.0 0.0 142440 1188 ? S 01:00 0:00 CROND root 24768 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (recordho) [3063] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 24769 0.0 0.0 4612 940 ? Ss 01:00 0:00 jailshell (posaufacom) [3463] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 24771 0.0 0.0 4612 924 ? Ss 01:00 0:00 jailshell (posaufacom) [3074] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 24772 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (posaufacom) [3506] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 24778 0.0 0.0 4612 932 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3036] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 24779 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3498] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 24782 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3457] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 24788 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3508] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 24800 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (inovesocialcom) [3490] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 24802 0.0 0.0 106120 1132 ? Ss 01:00 0:00 /bin/sh -c /bin/corrigir-problemas.sh > /dev/null 2>&1 root 24803 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (posaufacom) [3500] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 24809 0.0 0.0 4612 932 ? Ss 01:00 0:00 jailshell (centralgib) [3041] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php root 24811 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (centralgib) [3491] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 24812 0.0 0.0 4612 948 ? Ss 01:00 0:00 jailshell (centralagenciaw3) [3034] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php root 24813 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (centralc) [3039] ell -c php -q /home/centralc/public_html/pipe/pipe.php root 24814 0.0 0.0 4612 956 ? Ss 01:00 0:00 jailshell (centralc) [3458] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 24815 0.0 0.0 4612 964 ? Ss 01:00 0:00 jailshell (centralagenciaw3) [3456] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 24816 0.0 0.0 4612 952 ? Ss 01:00 0:00 jailshell (centralgib) [3465] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 24817 0.0 0.0 4612 880 ? Ss 01:00 0:00 jailshell (centralpluginscp) [3042] hp -q /home/centralpluginscp/public_html/pipe/pipe.php root 24818 0.0 0.0 4612 944 ? Ss 01:00 0:00 jailshell (portal) [3443] shell -c php -q /home/portal/public_html/pipe/pop.php root 24822 0.0 0.0 4612 960 ? Ss 01:00 0:00 jailshell (centralpluginscp) [3459] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 24843 0.0 0.0 106124 1092 ? S 01:00 0:00 /bin/bash /bin/corrigir-problemas.sh root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] nobody 24894 0.0 0.0 0 0 ? Z 01:00 0:00 [httpd] root 25270 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/1:2] root 25774 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/10:2] root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] root 26100 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/2:3] root 26142 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/11:0] root 26247 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:3] 1125 26410 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 26411 0.0 0.0 106120 452 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 maisg647 26560 0.0 0.0 241460 16188 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 15884 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 15876 ? S Apr17 0:00 /usr/bin/php root 26601 0.0 0.0 119136 1728 ? S 01:00 0:00 mysqlcheck --repair eximstats 860 26614 0.0 0.0 186420 7384 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 1560 ? S Apr17 0:00 /usr/bin/php recordho 26642 0.0 0.0 4612 304 ? S 00:56 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26643 0.0 0.0 4612 392 ? S 00:56 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 nobody 26644 0.0 0.0 114328 9272 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start recordho 26670 0.0 0.0 288180 12712 ? S 00:56 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 26672 0.0 0.0 106120 444 ? S 00:56 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 992 26701 0.0 0.0 187676 8448 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 728 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 11028 ? S Apr17 0:00 /usr/bin/php 1125 26765 0.0 0.0 136464 2240 ? S 00:56 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 26766 0.0 0.0 284276 12180 ? S 00:56 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 26771 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 448 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 296 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 28133 0.0 0.0 114468 9852 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start nobody 28134 0.0 0.0 115632 10884 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 28183 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22939] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 28184 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (recordho) [22890] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 28185 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22960] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 28186 0.0 0.0 4612 756 ? Ss 00:56 0:00 jailshell (posaufacom) [22979] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 28188 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (posaufacom) [22886] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 28191 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [23005] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 28192 0.0 0.0 4612 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22975] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 28193 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22954] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 28195 0.0 0.0 4612 764 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22991] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 28196 0.0 0.0 4616 760 ? Ss 00:56 0:00 jailshell (inovesocialcom) [22940] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 28782 0.0 0.0 142528 10352 ? S 00:56 0:00 php.cgi root 28970 0.0 0.0 0 0 ? S 01:01 0:00 [kworker/6:1] root 29099 0.0 0.0 0 0 ? S 00:05 0:00 [kworker/2:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] icowebra 30070 0.0 0.0 192900 472 ? S Apr17 0:00 /usr/bin/php nobody 30280 0.0 0.0 114344 8872 ? S 00:56 0:00 /usr/local/apache/bin/httpd -k start root 30851 0.3 0.1 222024 96132 ? Ss Apr16 6:16 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 185676 2148 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 380 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? D Apr16 4:07 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 328 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 500 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 296 ? S Apr16 0:01 dovecot/anvil root 3037 0.0 0.0 142436 288 ? S 00:34 0:00 CROND conhecsc 3059 15.6 94.5 78261004 62411908 ? Ds 00:34 6:37 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115260 6856 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start dovenull 3299 0.0 0.0 42760 520 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 492 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 524 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 860 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1512 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 564 ? S 00:45 0:00 dovecot/auth root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 416 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 544 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 5440 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.2 0.0 268336 412 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 408 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] root 5289 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:3] nobody 5674 0.0 0.0 112412 376 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 404 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 3532 ? S 01:01 0:00 /usr/bin/php icowebra 6242 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 324 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 5960 ? D Apr17 0:08 tailwatchd mysql 6514 18.5 0.1 6973904 121172 ? Sl Apr17 236:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid icowebra 6842 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 404 ? S Apr17 0:00 /usr/bin/php 879 7198 0.4 0.0 0 0 ? Z 01:08 0:02 [php] root 7334 0.0 0.0 74292 4976 ? S 01:12 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH mailnull 7499 0.0 0.0 74248 2468 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7500 0.0 0.0 169980 7680 ? D 01:12 0:00 lfd - (child) closing root 7501 0.0 0.0 169980 7716 ? D 01:12 0:00 lfd - (child) closing root 7502 0.0 0.0 169980 7716 ? D 01:12 0:00 lfd - (child) closing root 7503 0.0 0.0 169980 7664 ? D 01:12 0:00 lfd - (child) closing root 7504 0.0 0.0 169980 7804 ? D 01:12 0:00 lfd - (child) closing nobody 7507 0.0 0.0 114192 6944 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7510 0.0 0.0 114192 6948 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7511 0.0 0.0 114196 6908 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7512 0.0 0.0 169980 7692 ? D 01:12 0:00 lfd - child closing nobody 7514 0.0 0.0 115520 8116 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7516 0.0 0.0 114192 7348 ? D 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7517 0.0 0.0 114196 6896 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7519 0.0 0.0 169980 8124 ? D 01:12 0:00 lfd - (child) closing root 7521 0.0 0.0 169980 7724 ? D 01:12 0:00 lfd - (child) closing root 7522 0.0 0.0 169980 7720 ? D 01:12 0:00 lfd - (child) closing root 7523 0.0 0.0 169980 7752 ? D 01:12 0:00 lfd - (child) closing root 7524 0.0 0.0 169980 7832 ? D 01:12 0:00 lfd - (child) closing root 7525 0.0 0.0 169980 7876 ? D 01:12 0:00 lfd - (child) closing root 7526 0.0 0.0 169980 7852 ? D 01:12 0:00 lfd - (child) closing root 7527 0.0 0.0 169980 7756 ? D 01:12 0:00 lfd - (child) closing root 7528 0.0 0.0 169980 7764 ? D 01:12 0:00 lfd - (child) closing root 7529 0.0 0.0 169980 7780 ? D 01:12 0:00 lfd - (child) closing mailnull 7530 0.0 0.0 74280 2312 ? D 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7532 0.0 0.0 170456 7520 ? D 01:12 0:00 lfd - (child) closing root 7533 0.0 0.0 169980 7776 ? D 01:12 0:00 lfd - (child) closing postgres 7534 0.0 0.0 216640 2108 ? Ds 01:12 0:00 postgres: autovacuum worker process castelof_banner root 7536 0.0 0.0 169980 7928 ? D 01:12 0:00 lfd - (child) closing root 7537 0.0 0.0 169980 7892 ? D 01:12 0:00 lfd - (child) closing root 7538 0.0 0.0 169980 7888 ? D 01:12 0:00 lfd - (child) closing root 7539 0.0 0.0 169980 7880 ? D 01:12 0:00 lfd - (child) closing root 7540 0.0 0.0 169980 7908 ? D 01:12 0:00 lfd - (child) closing root 7541 0.0 0.0 169980 7956 ? D 01:12 0:00 lfd - (child) closing root 7542 0.0 0.0 169980 7932 ? D 01:12 0:00 lfd - (child) closing root 7543 0.0 0.0 169980 7888 ? D 01:12 0:00 lfd - (child) closing root 7544 0.0 0.0 169980 7948 ? D 01:12 0:00 lfd - (child) closing root 7545 0.0 0.0 169980 7944 ? D 01:12 0:00 lfd - (child) closing root 7546 0.0 0.0 169980 7816 ? D 01:12 0:00 lfd - (child) closing root 7547 0.0 0.0 169980 7844 ? D 01:12 0:00 lfd - (child) closing root 7548 0.0 0.0 169980 7940 ? D 01:12 0:00 lfd - (child) closing root 7549 0.0 0.0 169980 7944 ? D 01:12 0:00 lfd - (child) closing root 7550 0.0 0.0 169980 7968 ? D 01:12 0:00 lfd - (child) closing root 7551 0.0 0.0 169980 7940 ? D 01:12 0:00 lfd - (child) closing root 7552 0.0 0.0 169980 7960 ? D 01:12 0:00 lfd - (child) closing root 7553 0.0 0.0 169980 7972 ? D 01:12 0:00 lfd - (child) closing mailnull 7554 0.0 0.0 74272 2220 ? D 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7561 0.0 0.0 142436 860 ? S 01:13 0:00 CROND root 7562 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7563 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7564 0.0 0.0 142436 968 ? S 01:13 0:00 CROND root 7565 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7566 0.0 0.0 142436 968 ? S 01:13 0:00 CROND root 7567 0.0 0.0 142436 968 ? S 01:13 0:00 CROND root 7568 0.0 0.0 142436 968 ? S 01:13 0:00 CROND root 7569 0.0 0.0 142436 860 ? S 01:13 0:00 CROND root 7570 0.0 0.0 142436 860 ? S 01:13 0:00 CROND root 7571 0.0 0.0 142436 860 ? S 01:13 0:00 CROND root 7573 0.0 0.0 142436 860 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 860 ? S 01:13 0:00 CROND root 7583 0.0 0.0 142436 860 ? S 01:13 0:00 CROND root 7584 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7585 0.0 0.0 142436 968 ? S 01:13 0:00 CROND root 7586 0.0 0.0 142436 968 ? S 01:13 0:00 CROND root 7587 0.0 0.0 142436 968 ? S 01:13 0:00 CROND root 7588 0.0 0.0 142436 852 ? S 01:13 0:00 CROND root 7589 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7591 0.0 0.0 142436 852 ? S 01:13 0:00 CROND root 7593 0.0 0.0 169980 7880 ? D 01:13 0:00 lfd - (child) closing root 7594 0.0 0.0 169980 7900 ? D 01:13 0:00 lfd - (child) closing root 7595 0.0 0.0 169980 7860 ? D 01:13 0:00 lfd - (child) closing root 7596 0.0 0.0 169980 7940 ? D 01:13 0:00 lfd - (child) closing root 7597 0.0 0.0 169980 7880 ? D 01:13 0:00 lfd - (child) closing root 7598 0.0 0.0 169980 7920 ? D 01:13 0:00 lfd - (child) closing root 7599 0.0 0.0 169980 7940 ? D 01:13 0:00 lfd - (child) closing root 7600 0.0 0.0 169980 7908 ? D 01:13 0:00 lfd - (child) closing root 7601 0.0 0.0 169980 7904 ? D 01:13 0:00 lfd - (child) closing root 7602 0.0 0.0 169980 7956 ? D 01:13 0:00 lfd - (child) closing root 7603 0.0 0.0 169980 7980 ? D 01:13 0:00 lfd - (child) closing mailnull 7607 0.0 0.0 74272 2204 ? D 01:13 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7611 0.0 0.0 169980 7920 ? D 01:13 0:00 lfd - (child) closing root 7612 0.0 0.0 169980 7964 ? D 01:13 0:00 lfd - (child) closing root 7613 0.0 0.0 169980 7888 ? D 01:13 0:00 lfd - (child) closing root 7614 0.0 0.0 169980 7872 ? D 01:13 0:00 lfd - (child) closing root 7615 0.0 0.0 169980 7900 ? D 01:13 0:00 lfd - (child) closing root 7616 0.0 0.0 169980 7896 ? D 01:13 0:00 lfd - (child) closing root 7617 0.0 0.0 169980 7920 ? D 01:13 0:00 lfd - (child) closing nobody 7618 0.0 0.0 114192 7248 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7627 0.0 0.0 114196 6916 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114060 6480 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7645 0.0 0.0 114060 6416 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 7160 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7647 0.0 0.0 114192 7348 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7648 0.0 0.0 114332 7304 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7665 0.0 0.0 169980 7908 ? D 01:13 0:00 lfd - child closing root 7666 0.0 0.0 169980 8212 ? D 01:13 0:00 lfd - (child) closing root 7667 0.0 0.0 169980 7896 ? D 01:13 0:00 lfd - (child) closing root 7668 0.0 0.0 169980 7980 ? D 01:13 0:00 lfd - (child) closing root 7669 0.0 0.0 169980 7904 ? D 01:13 0:00 lfd - (child) closing postgres 7676 0.0 0.0 216640 2116 ? Ds 01:13 0:00 postgres: autovacuum worker process focasist_loja root 7677 0.0 0.0 169980 8008 ? D 01:13 0:00 lfd - (child) closing root 7678 0.0 0.0 169980 8004 ? D 01:13 0:00 lfd - (child) closing nobody 7679 0.0 0.0 114196 7252 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 7036 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7685 0.0 0.0 115520 8008 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7686 0.0 0.0 114192 7144 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 6916 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7689 0.0 0.0 114192 7008 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7693 0.0 0.0 114192 7448 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7694 0.0 0.0 114196 6916 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7695 0.0 0.0 114192 7388 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7696 0.0 0.0 114192 6912 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7697 0.0 0.0 114192 6840 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7702 0.0 0.0 114192 7296 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7704 0.0 0.0 114192 7080 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7705 0.0 0.0 114324 7208 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 114060 6452 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 8076 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7712 0.0 0.0 115520 8032 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7713 0.0 0.0 114192 7296 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7714 0.0 0.0 114192 6916 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 114196 6916 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114324 7140 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7720 0.0 0.0 114196 6904 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7721 0.0 0.0 114192 7096 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7722 0.0 0.0 114060 6468 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7723 0.0 0.0 114192 7356 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7724 0.0 0.0 114192 7156 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7725 0.0 0.0 114060 6480 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114060 6220 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7727 0.0 0.0 114060 6220 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7728 0.0 0.0 114060 6480 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7735 0.0 0.0 169980 7952 ? D 01:13 0:00 child - aborting root 7738 0.0 0.0 106120 912 ? Ss 01:13 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 7740 0.0 0.0 106120 888 ? Ss 01:13 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 7742 0.0 0.0 106124 904 ? Ss 01:13 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 7745 0.0 0.0 106120 904 ? Ss 01:13 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 7747 0.0 0.0 106120 904 ? Ss 01:13 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 7750 0.0 0.0 106120 916 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7751 0.0 0.0 106120 904 ? Ss 01:13 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 7753 0.0 0.0 169980 7864 ? D 01:13 0:00 lfd - (child) closing root 7754 0.0 0.0 4612 860 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 7755 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 7757 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7758 0.0 0.0 4612 860 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 7759 0.0 0.0 4612 860 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 7760 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 7761 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 7765 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 7771 0.0 0.0 45220 6752 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 7772 0.0 0.0 45220 6756 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 7773 0.0 0.0 45220 6760 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 7774 0.0 0.0 45220 6788 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 7775 0.0 0.0 45220 6776 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 7776 0.0 0.0 45220 6708 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 7777 0.0 0.0 45220 6804 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 7779 0.0 0.0 169980 7956 ? D 01:13 0:00 lfd - (child) closing root 7780 0.0 0.0 169980 7940 ? D 01:13 0:00 lfd - (child) closing root 7781 0.0 0.0 169980 7904 ? D 01:13 0:00 lfd - (child) closing root 7782 0.0 0.0 169980 7976 ? D 01:13 0:00 lfd - (child) closing root 7783 0.0 0.0 169980 7960 ? D 01:13 0:00 lfd - (child) closing root 7784 0.0 0.0 169980 7972 ? D 01:13 0:00 lfd - (child) closing root 7785 0.0 0.0 169980 7964 ? D 01:13 0:00 lfd - (child) closing root 7786 0.0 0.0 169980 7948 ? D 01:13 0:00 lfd - (child) closing root 7787 0.0 0.0 169980 7948 ? D 01:13 0:00 lfd - (child) closing root 7788 0.0 0.0 169980 7952 ? D 01:13 0:00 lfd - (child) closing root 7789 0.0 0.0 169980 7940 ? D 01:13 0:00 lfd - (child) closing root 7790 0.0 0.0 45220 6584 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 7791 0.0 0.0 169980 7988 ? D 01:13 0:00 lfd - (child) closing root 7792 0.0 0.0 169980 7956 ? D 01:13 0:00 lfd - (child) closing root 7793 0.0 0.0 169980 7968 ? D 01:13 0:00 lfd - (child) closing root 7794 0.0 0.0 169980 7920 ? D 01:13 0:00 lfd - (child) closing root 7795 0.0 0.0 169980 7928 ? D 01:13 0:00 lfd - (child) closing nobody 7797 0.0 0.0 5480 184 ? D 01:13 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 189.48.173.74 postgres 7798 0.0 0.0 216640 1644 ? Ds 01:13 0:00 postgres: autovacuum worker process root 7801 0.0 0.0 106124 1072 ? S 01:13 0:00 /bin/bash /bin/verifica-spf.sh root 7806 0.0 0.0 106124 1104 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7807 0.0 0.0 124280 1584 ? D 01:13 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 7809 0.0 0.0 106124 1032 ? S 01:13 0:00 /bin/bash /bin/monitora-load.sh root 7811 0.0 0.0 139932 988 ? D 01:13 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 7812 0.0 0.0 106120 900 ? S 01:13 0:00 /bin/bash /bin/corrigir-ips.sh root 7815 0.0 0.0 106120 1096 ? S 01:13 0:00 /bin/bash /bin/brut-filtro.sh nobody 7816 0.0 0.0 9460 888 ? D 01:13 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 187.64.133.142 nobody 7817 0.0 0.0 9456 884 ? D 01:13 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 217.182.132.74 nobody 7818 0.0 0.0 9460 892 ? D 01:13 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 51.255.65.72 nobody 7819 0.0 0.0 115284 8680 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7821 0.0 0.0 9460 888 ? D 01:13 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 187.15.144.9 nobody 7822 0.0 0.0 114060 6660 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7823 0.0 0.0 115260 9148 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7824 0.0 0.0 74880 1176 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 7825 0.0 0.0 114060 6408 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 7826 0.0 0.0 114060 6404 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 7840 0.0 0.0 106120 500 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 7843 0.0 0.0 138260 1708 ? D 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 7845 0.0 0.0 103360 656 ? S 01:14 0:00 grep sim root 7846 0.0 0.0 100976 572 ? S 01:14 0:00 wc -l nobody 7860 0.0 0.0 3416 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 51.255.65.67 root 7864 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7865 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7866 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7867 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7868 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7869 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7870 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7871 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7872 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7873 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7874 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7876 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7879 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7881 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7883 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7886 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7887 0.0 0.0 142436 924 ? S 01:14 0:00 CROND root 7888 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7889 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7890 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7891 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7892 0.0 0.0 142436 920 ? S 01:14 0:00 CROND root 7893 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7894 0.0 0.0 142436 912 ? S 01:14 0:00 CROND root 7895 0.0 0.0 142436 916 ? S 01:14 0:00 CROND nobody 7900 0.0 0.0 9460 896 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 66.249.64.188 nobody 7902 0.0 0.0 114060 6272 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74228 1372 ? D 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 8024 0.0 0.0 106124 712 ? S 01:14 0:00 /bin/bash /bin/verifica-spf.sh nobody 8034 0.0 0.0 114060 6268 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8035 0.0 0.0 114060 6316 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8042 0.0 0.0 169980 8036 ? D 01:14 0:00 lfd - (child) closing root 8046 0.0 0.0 169980 8012 ? D 01:14 0:00 lfd - (child) closing root 8047 0.0 0.0 169980 7932 ? D 01:14 0:00 lfd - (child) closing root 8048 0.0 0.0 169980 8024 ? D 01:14 0:00 lfd - (child) closing root 8049 0.0 0.0 169980 7972 ? D 01:14 0:00 lfd - (child) closing root 8050 0.0 0.0 169980 8016 ? D 01:14 0:00 lfd - (child) closing root 8051 0.0 0.0 169980 8016 ? D 01:14 0:00 lfd - (child) closing root 8052 0.0 0.0 169980 7984 ? D 01:14 0:00 lfd - (child) closing root 8053 0.0 0.0 169980 7936 ? D 01:14 0:00 lfd - (child) closing root 8081 0.0 0.0 169980 7944 ? D 01:14 0:00 lfd - (child) closing nobody 8082 0.0 0.0 116100 8240 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8090 0.0 0.0 106124 572 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 3528 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114060 6596 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8157 0.0 0.0 114060 6408 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8158 0.0 0.0 114208 6988 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8160 0.0 0.0 114060 6340 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8161 0.0 0.0 114060 6360 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114060 6392 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8163 0.0 0.0 114060 6228 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8497 0.0 0.0 169980 7996 ? D 01:14 0:00 lfd - (child) closing root 8498 0.0 0.0 169980 7996 ? D 01:14 0:00 lfd - (child) closing root 8521 0.0 0.0 169980 8024 ? D 01:14 0:00 lfd - (child) closing root 8522 0.0 0.0 169980 8052 ? D 01:14 0:00 lfd - (child) closing 867 8567 0.1 0.0 0 0 ? Z 01:08 0:00 [php] modaest 8819 0.0 0.0 0 0 ? Z 01:08 0:00 [php] nobody 8901 0.0 0.0 114460 6144 ? S 01:06 0:00 /usr/local/apache/bin/httpd -k start root 9117 0.0 0.0 169980 8036 ? D 01:14 0:00 lfd - (child) closing root 9118 0.0 0.0 169980 8052 ? D 01:14 0:00 lfd - (child) closing root 9119 0.0 0.0 169980 8032 ? D 01:14 0:00 lfd - (child) closing root 9120 0.0 0.0 169980 8032 ? D 01:14 0:00 lfd - (child) closing root 9194 0.0 0.0 169980 8044 ? D 01:14 0:00 lfd - (child) closing root 9197 0.0 0.0 169980 8052 ? D 01:14 0:00 lfd - (child) closing nobody 9243 0.0 0.0 9456 884 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 216.244.66.232 nobody 9244 0.0 0.0 9460 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 172.68.27.97 nobody 9245 0.0 0.0 9456 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.2 nobody 9246 0.0 0.0 9456 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 82.178.59.163 nobody 9247 0.0 0.0 9460 884 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 9248 0.0 0.0 9456 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 179.111.160.173 nobody 9249 0.0 0.0 9464 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9250 0.0 0.0 9456 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9251 0.0 0.0 9116 464 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.1 root 9252 0.0 0.0 35784 4504 ? D 01:14 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply root 9253 0.0 0.0 169980 8004 ? D 01:14 0:00 lfd - child closing root 9254 0.0 0.0 169980 8416 ? D 01:14 0:00 lfd - (child) closing nobody 9263 0.0 0.0 114500 7956 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9264 0.0 0.0 114060 6396 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9271 0.0 0.0 114060 6372 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9272 0.0 0.0 114060 6308 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9274 0.0 0.0 114060 6388 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9275 0.0 0.0 114060 6396 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114060 6312 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114060 6416 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9278 0.0 0.0 106120 908 ? Ss 01:14 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 9279 0.0 0.0 4352 560 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 9280 0.0 0.0 106120 900 ? Ss 01:14 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 9281 0.0 0.0 4352 540 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 9282 0.0 0.0 4352 544 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 9284 0.0 0.0 4352 548 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 9285 0.0 0.0 4356 548 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 9286 0.0 0.0 4352 556 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:rebuild --force --batch-limit=300 root 9289 0.0 0.0 4352 540 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 9290 0.0 0.0 106120 928 ? Ss 01:14 0:00 /bin/sh -c /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1 root 9291 0.0 0.0 4352 536 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 9292 0.0 0.0 106120 944 ? Ss 01:14 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 9294 0.0 0.0 106120 940 ? Ss 01:14 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 9295 0.0 0.0 4352 556 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 9296 0.0 0.0 4352 560 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 9298 0.0 0.0 4352 564 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 9299 0.0 0.0 4352 564 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 9300 0.0 0.0 4352 564 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 9301 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 9303 0.0 0.0 4356 564 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 9304 0.0 0.0 106120 940 ? Ss 01:14 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 9306 0.0 0.0 106120 892 ? Ss 01:14 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 9307 0.0 0.0 4352 564 ? Ss 01:14 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 9308 0.0 0.0 106120 940 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 9309 0.0 0.0 106120 940 ? Ss 01:14 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 nobody 9310 0.0 0.0 9456 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.2 nobody 9311 0.0 0.0 3420 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 137.74.207.110 nobody 9312 0.0 0.0 9456 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 51.255.65.12 nobody 9313 0.0 0.0 3416 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.1 nobody 9314 0.0 0.0 9460 892 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 217.182.132.66 nobody 9315 0.0 0.0 9456 884 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 66.249.69.37 nobody 9316 0.0 0.0 9464 892 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 187.59.168.134 root 9324 0.0 0.0 2620 132 ? D 01:14 0:00 /usr/local/apache/bin/suexec 868 867 php.cgi root 9325 0.0 0.0 106120 880 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9327 0.0 0.0 106120 1160 ? S 01:14 0:00 /bin/bash /bin/bloqueia-envio.sh nobody 9334 0.0 0.0 9456 888 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 131.0.86.103 root 9347 0.0 0.0 106120 1128 ? S 01:14 0:00 /bin/bash /bin/malv-block.sh nobody 9356 0.0 0.0 3416 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.1 nobody 9357 0.0 0.0 0 0 ? Z 01:14 0:00 [httpd] root 9358 0.0 0.0 169980 8116 ? D 01:14 0:00 lfd - (child) closing nobody 9359 0.0 0.0 3420 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 82.178.59.163 nobody 9360 0.0 0.0 9464 884 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 217.182.132.32 nobody 9361 0.0 0.0 9456 884 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 217.182.132.83 nobody 9362 0.0 0.0 9116 464 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.1 nobody 9363 0.0 0.0 3420 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.2 root 9364 0.0 0.0 169980 8108 ? D 01:14 0:00 lfd - (child) closing nobody 9365 0.0 0.0 3416 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 189.35.145.47 nobody 9366 0.0 0.0 9456 884 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 10.71.192.2 nobody 9367 0.0 0.0 9460 884 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 187.59.168.134 root 9368 0.0 0.0 169980 8088 ? D 01:14 0:00 lfd - (child) closing root 9369 0.0 0.0 169980 8004 ? D 01:14 0:00 lfd - (child) closing root 9370 0.0 0.0 169980 8140 ? D 01:14 0:00 lfd - (child) closing root 9371 0.0 0.0 169980 8108 ? D 01:14 0:00 lfd - (child) closing root 9372 0.0 0.0 169980 8116 ? D 01:14 0:00 lfd - (child) closing root 9373 0.0 0.0 123496 3088 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/bin/dnsqueue root 9374 0.0 0.0 106120 500 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9375 0.0 0.0 138260 1880 ? D 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 9376 0.0 0.0 103360 656 ? S 01:14 0:00 grep sim root 9377 0.0 0.0 100976 580 ? S 01:14 0:00 wc -l nobody 9398 0.0 0.0 3416 160 ? D 01:14 0:00 /bin/sh -c /usr/share/ilabs_antimalware/firewall/checkdenied.sh 51.255.65.18 root 9399 0.0 0.0 139932 1096 ? D 01:14 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 9409 0.0 0.0 169980 8040 ? D 01:14 0:00 lfd - (child) closing root 9410 0.0 0.0 169980 8040 ? D 01:14 0:00 lfd - (child) closing root 9411 0.0 0.0 169980 8008 ? D 01:14 0:00 lfd - (child) closing root 9412 0.0 0.0 169980 8120 ? D 01:14 0:00 lfd - (child) closing root 9413 0.0 0.0 169980 8024 ? D 01:14 0:00 lfd - (child) closing root 9414 0.0 0.0 169980 8132 ? D 01:14 0:00 lfd - (child) closing root 9415 0.0 0.0 169980 8040 ? D 01:14 0:00 lfd - (child) closing root 9416 0.0 0.0 169980 8032 ? D 01:14 0:00 lfd - (child) closing root 9548 0.0 0.0 106124 1064 ? S 01:14 0:00 /bin/bash /bin/monitora-load.sh root 9556 0.0 0.0 124280 1536 ? D 01:14 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 buffetlu 9577 0.0 0.0 200280 16900 ? S 01:02 0:00 /usr/bin/php nobody 9586 0.0 0.0 0 0 ? Z 01:14 0:00 [httpd] root 9743 0.0 0.0 106124 1100 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 9747 0.0 0.0 106124 1072 ? S 01:14 0:00 /bin/bash /bin/verifica-spf.sh root 9757 0.0 0.0 106120 1096 ? S 01:14 0:00 /bin/bash /bin/brut-filtro.sh nobody 9775 0.0 0.0 115156 7756 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9776 0.0 0.0 115520 8748 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9777 0.0 0.0 115520 8760 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9778 0.0 0.0 116224 7296 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9869 0.0 0.0 169980 5848 ? D 01:14 0:00 child - aborting nobody 9876 0.0 0.0 115520 8776 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9920 0.0 0.0 144416 1152 ? D 01:15 0:00 mail -s LOAD ALTO admin@conectadohost.com.br nobody 10078 0.0 0.0 115520 8792 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] icowebra 10832 0.1 0.0 0 0 ? Z 01:10 0:00 [php] root 10926 0.0 0.0 4640 200 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 316 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1432 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 224 ? Ss Apr16 0:00 /usr/sbin/sshd root 11169 0.0 0.0 106120 624 ? S 01:15 0:00 /bin/bash /bin/brut-filtro.sh root 11175 0.0 0.0 169980 5740 ? D 01:15 0:00 lfd - (child) closing root 11195 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11196 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11197 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11198 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11200 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11201 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11202 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11203 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11204 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11205 0.0 0.0 142436 1016 ? S 01:15 0:00 CROND root 11207 0.0 0.0 142436 872 ? S 01:15 0:00 CROND root 11208 0.0 0.0 142436 872 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 876 ? S 01:01 0:00 /usr/bin/php root 11210 0.0 0.0 119548 1036 ? D 01:15 0:00 CROND root 11211 0.0 0.0 142436 872 ? S 01:15 0:00 CROND root 11212 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND postgres 11213 0.0 0.0 215388 480 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11214 0.0 0.0 142436 872 ? S 01:15 0:00 CROND root 11215 0.0 0.0 142436 1012 ? S 01:15 0:00 CROND root 11216 0.0 0.0 142436 1012 ? S 01:15 0:00 CROND root 11217 0.0 0.0 119548 1028 ? D 01:15 0:00 CROND root 11218 0.0 0.0 142436 1012 ? S 01:15 0:00 CROND root 11220 0.0 0.0 142436 872 ? S 01:15 0:00 CROND root 11221 0.0 0.0 142436 872 ? S 01:15 0:00 CROND root 11222 0.0 0.0 142436 872 ? S 01:15 0:00 CROND root 11223 0.0 0.0 142436 872 ? S 01:15 0:00 CROND root 11224 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11225 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11226 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11227 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11228 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11229 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11230 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11231 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11232 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11235 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11236 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11240 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11241 0.0 0.0 142436 1020 ? S 01:15 0:00 CROND root 11242 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11243 0.0 0.0 142436 864 ? S 01:15 0:00 CROND root 11244 0.0 0.0 142436 868 ? S 01:15 0:00 CROND root 11287 0.0 0.0 106120 532 ? S 01:15 0:00 /bin/bash /bin/brut-filtro.sh root 11290 0.0 0.0 59596 1332 ? D 01:15 0:00 nslookup 143.0.115.31 root 11293 0.0 0.0 103360 656 ? S 01:15 0:00 grep br root 11297 0.0 0.0 100976 568 ? S 01:15 0:00 wc -l root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 284 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 312 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 220 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 756 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 548 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 568 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11351 0.0 0.0 114060 6472 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11352 0.0 0.0 114060 6480 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11353 0.0 0.0 106124 396 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 11354 0.0 0.0 100988 528 ? D 01:15 0:00 cat /var/log/exim_mainlog root 11355 0.0 0.0 103360 660 ? S 01:15 0:00 grep 104.130.11.193 root 11362 0.0 0.0 169980 5904 ? D 01:15 0:00 lfd - (child) closing root 11363 0.1 0.0 169980 5376 ? Ds 00:00 0:07 lfd - processing nobody 11364 0.0 0.0 114060 7440 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11365 0.0 0.0 114060 7524 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11366 0.0 0.0 114060 7544 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11367 0.0 0.0 114060 7528 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11368 0.0 0.0 114060 7544 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11369 0.0 0.0 114060 7548 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11370 0.0 0.0 114060 7560 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11371 0.0 0.0 116816 7832 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11376 0.0 0.0 114060 6476 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11377 0.0 0.0 114060 6472 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11378 0.0 0.0 114060 6404 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11379 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11398 0.0 0.0 106124 708 ? S 01:15 0:00 /bin/bash /bin/verifica-spf.sh root 11439 0.0 0.0 169980 5916 ? D 01:15 0:00 lfd - (child) closing root 11440 0.0 0.0 169980 5912 ? D 01:15 0:00 lfd - (child) closing root 11441 0.0 0.0 169980 5920 ? D 01:15 0:00 lfd - (child) closing root 11442 0.0 0.0 169980 5924 ? D 01:15 0:00 lfd - (child) closing root 11443 0.0 0.0 169980 5924 ? D 01:15 0:00 lfd - (child) closing root 11444 0.0 0.0 169980 5912 ? D 01:15 0:00 lfd - (child) closing root 11445 0.0 0.0 169980 5928 ? D 01:15 0:00 lfd - (child) closing root 11451 0.0 0.0 169980 5928 ? D 01:15 0:00 lfd - (child) closing root 11452 0.0 0.0 169980 5928 ? D 01:15 0:00 lfd - (child) closing root 11453 0.0 0.0 169980 5928 ? D 01:15 0:00 lfd - (child) closing noticias 11454 1.6 0.0 237856 17576 ? D 01:08 0:07 /usr/bin/php root 11459 0.0 0.0 169980 5932 ? D 01:15 0:00 lfd - (child) closing root 11461 0.0 0.0 169980 5932 ? D 01:15 0:00 lfd - (child) closing root 11462 0.0 0.0 169980 5936 ? D 01:15 0:00 lfd - (child) closing root 11463 0.0 0.0 169980 5932 ? D 01:15 0:00 lfd - (child) closing root 11464 0.0 0.0 169980 5936 ? D 01:15 0:00 lfd - (child) closing root 11465 0.0 0.0 169980 5932 ? D 01:15 0:00 lfd - (child) closing root 11466 0.0 0.0 169980 5936 ? D 01:15 0:00 lfd - (child) closing root 11467 0.0 0.0 169980 5932 ? D 01:15 0:00 lfd - (child) closing root 11468 0.0 0.0 169980 5936 ? D 01:15 0:00 lfd - (child) closing nobody 11485 0.0 0.0 116100 6196 ? D 01:08 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 7628 ? D 01:08 0:00 /usr/local/apache/bin/httpd -k start noticias 11551 0.2 0.0 206116 18348 ? D 01:10 0:00 /usr/bin/php nobody 11568 0.0 0.0 115516 6848 ? S 01:10 0:00 /usr/local/apache/bin/httpd -k start noticias 11569 0.3 0.0 0 0 ? Z 01:10 0:01 [php] noticias 11579 1.2 0.0 0 0 ? Z 01:10 0:04 [php] root 11592 0.1 0.0 171172 8928 ? D 01:10 0:00 lfd - child closing named 11603 0.6 0.0 745552 3896 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11628 0.3 0.0 236956 5644 ? S 01:10 0:01 spamd child root 11629 0.1 0.0 236680 1780 ? S 01:10 0:00 spamd child root 11713 0.0 0.0 136204 68 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 468 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 188 ? Ss Apr16 0:00 /usr/sbin/atd icowebra 11779 0.0 0.0 194796 1200 ? S 01:10 0:00 /usr/bin/php 867 11821 0.4 0.0 224388 17108 ? D 01:08 0:02 /usr/bin/php nobody 11834 0.0 0.0 115520 6412 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 116224 6656 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start sistemam 11853 0.1 0.0 187276 868 ? S 01:08 0:00 /usr/bin/php queroupa 11862 0.0 0.0 198652 16900 ? S 01:08 0:00 /usr/bin/php sistemam 11875 0.1 0.0 0 0 ? Z 01:08 0:00 [php] diadiapr 11886 0.3 0.0 0 0 ? Z 01:08 0:01 [php] 828 11898 0.2 0.0 232656 16904 ? S 01:08 0:00 /usr/bin/php 828 11899 0.2 0.0 234724 18016 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 528 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] mailnull 12319 0.0 0.0 79056 1316 ? S 01:15 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] root 12415 0.0 0.0 106124 536 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12416 0.0 0.0 100988 528 ? D 01:15 0:00 cat /var/log/messages root 12417 0.0 0.0 103360 660 ? S 01:15 0:00 grep 144.217.225.171 root 12418 0.0 0.0 103360 652 ? S 01:15 0:00 grep user root 12419 0.0 0.0 106124 388 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12420 0.0 0.0 100992 532 ? D 01:15 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt root 12421 0.0 0.0 103360 660 ? S 01:15 0:00 grep 104.130.11.193 mailnull 12455 0.0 0.0 74880 940 ? S 01:15 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 12469 0.0 0.0 114060 6488 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12483 0.0 0.0 169980 5920 ? D 01:15 0:00 lfd - child closing root 12484 0.0 0.0 169980 6340 ? D 01:15 0:00 lfd - (child) closing nobody 12497 0.0 0.0 114060 6456 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12498 0.0 0.0 114060 6756 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start guiame 12520 0.0 0.0 0 0 ? Z 01:06 0:00 [php] nobody 12523 0.0 0.0 114060 6512 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12524 0.0 0.0 114060 6504 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114060 6516 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12526 0.0 0.0 114060 6476 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start mailnull 12530 0.0 0.0 74880 948 ? S 01:15 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 12535 0.0 0.0 169980 5964 ? D 01:15 0:00 lfd - (child) closing root 12539 0.0 0.0 106120 964 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf.sh > /dev/null 2>&1 root 12540 0.0 0.0 106120 976 ? Ss 01:15 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 12541 0.0 0.0 106120 952 ? Ss 01:15 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 12542 0.0 0.0 106120 968 ? Ss 01:15 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 12544 0.0 0.0 106120 968 ? Ss 01:15 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 12545 0.0 0.0 106120 968 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12546 0.0 0.0 106120 964 ? Ss 01:15 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 12547 0.0 0.0 106120 960 ? Ss 01:15 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 12548 0.0 0.0 106120 960 ? Ss 01:15 0:00 /bin/sh -c /bin/block-cloud.sh > /dev/null 2>&1 root 12549 0.0 0.0 106120 964 ? Ss 01:15 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 12550 0.0 0.0 169980 5956 ? D 01:15 0:00 lfd - (child) closing root 12555 0.0 0.0 106120 960 ? Ss 01:15 0:00 /bin/sh -c /bin/protege-banco.sh > /dev/null 2>&1 root 12556 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 12558 0.0 0.0 4352 564 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 12559 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 12560 0.0 0.0 4108 216 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12561 0.0 0.0 4612 868 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 12562 0.0 0.0 4108 220 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12563 0.0 0.0 4352 568 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 12564 0.0 0.0 4108 216 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12565 0.0 0.0 169980 6052 ? D 01:15 0:00 lfd - (child) closing root 12566 0.0 0.0 4108 220 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12567 0.0 0.0 4352 568 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 12568 0.0 0.0 4108 216 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12569 0.0 0.0 169980 6052 ? D 01:15 0:00 lfd - (child) closing root 12570 0.0 0.0 4108 216 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12572 0.0 0.0 4616 868 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 12573 0.0 0.0 4612 868 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 12574 0.0 0.0 4612 868 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12575 0.0 0.0 4352 568 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://posaufa.com.br/sis/index.php/cron root 12576 0.0 0.0 4612 864 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 12577 0.0 0.0 106120 1056 ? Ss 01:15 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 12578 0.0 0.0 106120 1076 ? Ss 01:15 0:00 /bin/sh -c /bin/minuto-a-minuto.sh > /dev/null 2>&1 root 12579 0.0 0.0 106120 1056 ? Ss 01:15 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 12580 0.0 0.0 106120 1096 ? Ss 01:15 0:00 /bin/sh -c /bin/block-malv.sh > /dev/null 2>&1 root 12583 0.0 0.0 4612 864 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12584 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 12585 0.0 0.0 170508 6836 ? D 01:15 0:00 lfd - (child) closing root 12587 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 12588 0.0 0.0 4352 560 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 12589 0.0 0.0 4352 564 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:email:fetch root 12590 0.0 0.0 4612 868 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 12591 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 12592 0.0 0.0 4612 864 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php root 12593 0.0 0.0 4352 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 12594 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4352 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 12596 0.0 0.0 4352 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 12597 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 12598 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 12599 0.0 0.0 114736 5588 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12600 0.0 0.0 114060 6800 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nossojor 12601 0.0 0.0 198320 16900 ? S 01:06 0:00 /usr/bin/php nobody 12602 0.0 0.0 114060 6788 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12603 0.0 0.0 114060 6788 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12604 0.0 0.0 114060 6980 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12605 0.0 0.0 114060 6792 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12606 0.0 0.0 114060 6808 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12607 0.0 0.0 114060 6784 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12608 0.0 0.0 4356 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 12609 0.0 0.0 4352 564 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 12610 0.0 0.0 4352 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 12611 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 12623 0.0 0.0 70644 1616 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12624 0.0 0.0 70644 1612 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12625 0.0 0.0 70644 1608 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12626 0.0 0.0 70644 1608 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root rkembala 12628 0.0 0.0 186792 4060 ? S 01:06 0:00 /usr/bin/php root 12633 0.0 0.0 70640 1604 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 992 12634 0.0 0.0 187084 7616 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3540 ? S 01:06 0:00 /usr/bin/php root 12636 0.0 0.0 70644 1600 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12637 0.0 0.0 70644 1612 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12638 0.0 0.0 136824 432 ? S 01:15 0:00 pure-ftpd (IDLE) root 12639 0.6 0.0 170456 6920 ? D 01:15 0:00 lfd - (child) (PT) checking user processes mailnull 12640 0.0 0.0 74880 872 ? S 01:15 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 12644 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12645 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12646 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12647 0.1 0.0 142436 1112 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12653 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12654 0.1 0.0 142436 1112 ? S 01:16 0:00 CROND root 12655 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12656 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12657 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12658 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12659 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12661 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12662 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12663 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12664 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12665 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12666 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12667 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12668 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12670 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12671 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12672 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12673 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142436 1112 ? S 01:16 0:00 CROND root 12675 0.0 0.0 142436 1104 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 1268 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12677 0.1 0.0 130572 2380 ? D 01:16 0:00 /usr/local/cpanel/bin/dcpumon root 12678 0.0 0.0 106124 1036 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 12679 0.0 0.0 106120 1248 ? S 01:16 0:00 /bin/bash /bin/liberar-csf.sh root 12680 0.0 0.0 106120 1248 ? S 01:16 0:00 /bin/bash /bin/bloqueia-envio.sh root 12682 0.0 0.0 106124 1240 ? S 01:16 0:00 /bin/bash /bin/verifica-spf.sh root 12684 0.1 0.0 122084 1356 ? D 01:16 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12685 0.0 0.0 106124 1264 ? S 01:16 0:00 /bin/bash /bin/block-cloud.sh root 12686 0.0 0.0 106124 1188 ? S 01:16 0:00 /bin/bash /bin/protege-banco.sh root 12687 0.0 0.0 106124 1224 ? S 01:16 0:00 /bin/bash /bin/monitora-load.sh root 12688 0.0 0.0 106120 1244 ? S 01:16 0:00 /bin/bash /bin/brut-filtro.sh root 12699 0.0 0.0 169980 6140 ? D 01:16 0:00 lfd - (child) closing root 12700 0.0 0.0 44164 2664 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 707 root 12701 0.0 0.0 44164 2668 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 12702 0.1 0.0 44164 2672 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 12703 0.2 0.0 44164 2668 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 nobody 12704 0.0 0.0 115572 6808 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 12705 0.0 0.0 114488 6868 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 12706 0.0 0.0 74880 880 ? S 01:16 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 12710 0.1 0.0 44164 2672 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 12722 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/0:2] root 12723 0.0 0.0 109240 608 ? D 01:16 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php 1053 12757 0.0 0.0 0 0 ? Z 01:02 0:00 [php] nobody 12759 0.0 0.0 116816 6804 ? S 01:04 0:00 /usr/local/apache/bin/httpd -k start nobody 12764 0.0 0.0 114060 6616 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3932 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 712 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5224 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13706 0.0 0.0 106124 500 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 13707 0.0 0.0 138124 1516 ? D 01:16 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 13708 0.0 0.0 103360 828 ? S 01:16 0:00 grep sim root 13709 0.0 0.0 100976 620 ? S 01:16 0:00 wc -l root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] nobody 13722 0.0 0.0 114060 6496 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13723 0.0 0.0 114060 6868 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 13738 0.0 0.0 69992 1324 ? D 01:16 0:00 send-mail -i -- admin@conectadohost.com.br root 13744 0.0 0.0 144412 1172 ? D 01:16 0:00 mail -s LOAD ALTO admin@conectadohost.com.br root 13747 0.3 0.0 106124 892 ? S 01:16 0:00 /bin/bash /bin/malv-block.sh root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 204 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh nobody 14499 0.0 0.0 114060 6504 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14500 0.0 0.0 114060 6516 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14501 0.0 0.0 114060 6312 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14502 0.0 0.0 114060 6612 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 14504 0.0 0.0 106120 1228 ? S 01:16 0:00 /bin/bash /bin/minuto-a-minuto.sh root 14505 0.0 0.0 106120 1252 ? S 01:16 0:00 /bin/bash /bin/malv-block.sh root 14670 0.0 0.0 106120 1224 ? S 01:16 0:00 /bin/bash /bin/block-malv.sh root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] nobody 15187 0.0 0.0 114060 6844 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15188 0.1 0.0 114060 6844 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15189 0.1 0.0 114060 6876 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15190 0.1 0.0 114192 7536 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15191 0.0 0.0 114060 6860 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15193 0.0 0.0 114060 6868 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15205 0.4 0.0 114060 6876 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15206 0.0 0.0 114060 6852 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15207 0.1 0.0 116120 7356 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15208 0.2 0.0 114060 6848 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15210 0.0 0.0 114060 7076 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15219 0.1 0.0 114192 7520 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15220 0.0 0.0 114060 7040 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15222 0.2 0.0 114196 7412 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 15373 0.0 0.0 61336 1852 ? D Apr16 0:03 queueprocd - process next scheduled task root 15606 0.0 0.0 25860 560 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 536 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 988 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1188 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 980 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 976 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 992 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1232 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 968 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 632 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16394 0.3 0.0 106124 772 ? S 01:16 0:00 /bin/bash /bin/block-cloud.sh root 16408 0.0 0.0 106124 620 ? S 01:16 0:00 /bin/bash /bin/protege-banco.sh root 16526 0.0 0.0 26212 904 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 536 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 101896 2012 ? D Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 root 16761 0.0 0.0 106124 504 ? S 01:16 0:00 /bin/bash /bin/protege-banco.sh root 16763 0.1 0.0 59596 1244 ? D 01:16 0:00 nslookup 177.133.84.253 root 16765 0.0 0.0 103360 808 ? S 01:16 0:00 grep br root 16766 0.0 0.0 100976 616 ? S 01:16 0:00 wc -l nobody 16788 0.0 0.0 114060 6444 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 16791 0.8 0.0 108344 1068 ? R 01:16 0:00 ps aux mailnull 16792 0.0 0.0 74880 1028 ? S 01:16 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 16793 0.0 0.0 114736 5852 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 17155 0.0 0.0 74296 4436 ? S 01:16 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH nobody 17173 0.0 0.0 114060 6688 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 1.1 0.0 240980 1896 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1268 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 6.2 0.0 23760 8700 ? S 00:50 1:35 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 404 ? S 00:48 0:00 /usr/bin/php nobody 19844 0.0 0.0 116120 6880 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] wwwfacul 20446 0.0 0.0 265704 408 ? S 00:46 0:00 /usr/bin/php root 20533 0.0 0.0 0 0 ? D 00:55 0:00 [kworker/u24:0] wwwfacul 20831 0.0 0.0 263164 408 ? S 00:46 0:00 /usr/bin/php pdvxyz 23169 0.0 0.0 185472 268 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 440 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 320 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 308 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] icowebra 23714 0.0 0.0 194796 1196 ? S 01:11 0:00 /usr/bin/php nobody 23899 0.0 0.0 115284 6692 ? D 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 23901 0.0 0.0 115572 6512 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start icowebra 23992 0.0 0.0 194796 1296 ? S 01:11 0:00 /usr/bin/php nobody 24106 0.0 0.0 114500 5604 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] icowebra 24540 0.2 0.0 194796 588 ? S 00:59 0:02 /usr/bin/php icowebra 24551 0.2 0.0 194796 552 ? S 00:59 0:02 /usr/bin/php root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] suzantol 25425 0.2 0.0 219216 16900 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] maisg647 26560 0.0 0.0 241460 420 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 408 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 412 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 412 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 412 ? S Apr17 0:00 /usr/bin/php conhecsc 26639 0.0 0.0 191244 11440 ? D 01:05 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 412 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 408 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 412 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 324 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 260 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 27399 0.0 0.0 114488 6632 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 27400 0.0 0.0 115156 6928 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start ferre461 27442 0.1 0.0 232664 16900 ? S 01:09 0:00 /usr/bin/php icowebra 27490 0.1 0.0 0 0 ? Z 01:09 0:00 [php] suzantol 27523 0.0 0.0 217924 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27534 0.1 0.0 210508 16916 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] radiosat 27560 0.0 0.0 185600 688 ? S 01:07 0:00 /usr/bin/php nobody 27566 0.0 0.0 115420 8168 ? D 01:11 0:00 /usr/local/apache/bin/httpd -k start facildia 27623 0.0 0.0 198808 16900 ? S 01:07 0:00 /usr/bin/php root 27867 0.0 0.0 142436 700 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 464 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 608 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 668 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.1 0.0 219724 18304 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 16904 ? S 01:07 0:00 /usr/bin/php nobody 28098 0.0 0.0 115732 6516 ? D 01:07 0:00 /usr/local/apache/bin/httpd -k start root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] loppelco 28739 0.1 0.0 0 0 ? Z 01:05 0:01 [php] conhecsc 28761 9.4 0.0 0 0 ? Z 01:05 1:00 [php] ecfoto 28919 0.0 0.0 185820 3932 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 6816 ? D 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.1 0.0 215808 16904 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30851 0.3 0.0 221996 3544 ? Ds Apr16 6:21 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 186292 7292 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 380 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 380 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:13 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:13 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 336 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 640 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 280 ? S Apr16 0:01 dovecot/anvil root 2024 0.0 0.0 169980 5508 ? S 01:18 0:00 lfd - (child) Statistics... root 2025 0.0 0.0 169980 5500 ? S 01:18 0:00 lfd - (child) Statistics... root 2026 0.0 0.0 169980 5508 ? S 01:18 0:00 lfd - (child) Statistics... root 2027 0.0 0.0 169980 5508 ? S 01:18 0:00 lfd - (child) Statistics... root 2028 0.0 0.0 169980 5504 ? S 01:18 0:00 lfd - (child) Statistics... root 2029 0.0 0.0 169980 5496 ? S 01:18 0:00 lfd - (child) Statistics... root 2030 0.0 0.0 169980 5512 ? S 01:18 0:00 lfd - (child) Statistics... root 2031 0.0 0.0 169980 5524 ? S 01:18 0:00 lfd - (child) Statistics... root 2037 0.0 0.0 140092 1020 ? D 0 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 336 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 640 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 280 ? S Apr16 0:01 dovecot/anvil root 2024 0.0 0.0 169980 5508 ? S 01:18 0:00 lfd - (child) Statistics... root 2025 0.0 0.0 169980 5500 ? S 01:18 0:00 lfd - (child) Statistics... root 2026 0.0 0.0 169980 5508 ? S 01:18 0:00 lfd - (child) Statistics... root 2027 0.0 0.0 169980 5508 ? S 01:18 0:00 lfd - (child) Statistics... root 2028 0.0 0.0 169980 5504 ? S 01:18 0:00 lfd - (child) Statistics... root 2029 0.0 0.0 169980 5496 ? S 01:18 0:00 lfd - (child) Statistics... root 2030 0.0 0.0 169980 5512 ? S 01:18 0:00 lfd - (child) Statistics... root 2031 0.0 0.0 169980 5524 ? S 01:18 0:00 lfd - (child) Statistics... root 2037 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2038 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2039 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2040 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2041 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2042 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2043 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2044 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2045 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2046 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2047 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2048 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2049 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2050 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2051 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2052 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2053 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2054 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2055 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2056 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2057 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2058 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2059 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2060 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2061 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2062 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2063 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2064 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2065 0.0 0.0 140092 1012 ? D 01:18 0:00 crond root 2066 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2067 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2089 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2090 0.0 0.0 169980 5524 ? S 01:18 0:00 lfd - (child) Statistics... root 2091 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2092 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2093 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2094 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2095 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2111 0.0 0.0 169980 5536 ? S 01:18 0:00 lfd - (child) Statistics... root 2112 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2113 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2114 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2115 0.0 0.0 169980 5536 ? S 01:18 0:00 lfd - (child) Statistics... root 2116 0.0 0.0 169980 5540 ? S 01:18 0:00 lfd - (child) Statistics... nobody 2139 0.0 0.0 114060 7052 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 2140 0.0 0.0 74876 1308 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2141 0.0 0.0 169980 5540 ? S 01:18 0:00 lfd - (child) Statistics... root 2142 0.0 0.0 169980 5544 ? S 01:18 0:00 lfd - (child) Statistics... root 2143 0.0 0.0 169980 5548 ? S 01:18 0:00 lfd - (child) Statistics... root 2144 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statistics... root 2145 0.0 0.0 169980 5556 ? S 01:18 0:00 lfd - (child) Statistics... nobody 2146 0.0 0.0 114060 6540 ? 01:18 0:00 crond root 2038 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2039 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2040 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2041 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2042 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2043 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2044 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2045 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2046 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2047 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2048 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2049 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2050 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2051 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2052 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2053 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2054 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2055 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2056 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2057 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2058 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2059 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2060 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2061 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2062 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2063 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2064 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2065 0.0 0.0 140092 1012 ? D 01:18 0:00 crond root 2066 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2067 0.0 0.0 140092 1020 ? D 01:18 0:00 crond root 2089 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2090 0.0 0.0 169980 5524 ? S 01:18 0:00 lfd - (child) Statistics... root 2091 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2092 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2093 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2094 0.0 0.0 169980 5528 ? S 01:18 0:00 lfd - (child) Statistics... root 2095 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2111 0.0 0.0 169980 5536 ? S 01:18 0:00 lfd - (child) Statistics... root 2112 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2113 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2114 0.0 0.0 169980 5532 ? S 01:18 0:00 lfd - (child) Statistics... root 2115 0.0 0.0 169980 5536 ? S 01:18 0:00 lfd - (child) Statistics... root 2116 0.0 0.0 169980 5540 ? S 01:18 0:00 lfd - (child) Statistics... nobody 2139 0.0 0.0 114060 7052 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 2140 0.0 0.0 74876 1308 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2141 0.0 0.0 169980 5540 ? S 01:18 0:00 lfd - (child) Statistics... root 2142 0.0 0.0 169980 5544 ? S 01:18 0:00 lfd - (child) Statistics... root 2143 0.0 0.0 169980 5548 ? S 01:18 0:00 lfd - (child) Statistics... root 2144 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statistics... root 2145 0.0 0.0 169980 5556 ? S 01:18 0:00 lfd - (child) Statistics... nobody 2146 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2147 0.0 0.0 114060 6532 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2148 0.0 0.0 114060 6544 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2149 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2150 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2151 0.0 0.0 114060 6548 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 2155 0.0 0.0 108344 1184 ? R 01:18 0:00 ps aux root 2156 0.0 0.0 108344 1184 ? R 01:18 0:00 ps aux mailnull 2791 0.0 0.0 71036 1416 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2792 0.0 0.0 71040 1392 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2793 0.0 0.0 71040 1396 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2794 0.0 0.0 71036 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2795 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2796 0.0 0.0 71036 1416 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2797 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2798 0.0 0.0 71036 1408 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2799 0.0 0.0 71040 1396 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2800 0.0 0.0 71040 1396 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2801 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2802 0.0 0.0 71040 1404 ? D 01:18 0:00 send-mail -i -- admin@conectadohost.com.br mailnull 2803 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2804 0.0 0.0 71040 1412 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2805 0.0 0.0 71040 1380 ? D 01:18 0:00 send-mail -i -- admin@conectadohost.com.br mailnull 2806 0.0 0.0 71040 1412 ? D 01:18 0:00 /usr/sbin/sendmail -f root -t mailnull 2807 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2808 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 2817 0.0 0.0 106124 540 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 2818 0.0 0.0 44648 440 ? D 01:18 0:00 nslookup 144.217.34.53 root 2819 0.0 0.0 103360 840 ? S 01:18 0:00 grep br root 2820 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l nobody 2837 0.0 0.0 114060 6728 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2843 0.0 0.0 114060 6652 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 288 ? S 00:34 0:00 CROND conhecsc 3059 15.1 94.4 78261004 62362132 ? Ds 00:34 6:39 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115260 7256 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3181 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 3182 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3183 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3184 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statist D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2147 0.0 0.0 114060 6532 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2148 0.0 0.0 114060 6544 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2149 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2150 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2151 0.0 0.0 114060 6548 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 2155 0.0 0.0 108344 1184 ? R 01:18 0:00 ps aux root 2156 0.0 0.0 108344 1184 ? R 01:18 0:00 ps aux mailnull 2791 0.0 0.0 71036 1416 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2792 0.0 0.0 71040 1392 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2793 0.0 0.0 71040 1396 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2794 0.0 0.0 71036 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2795 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2796 0.0 0.0 71036 1416 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2797 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2798 0.0 0.0 71036 1408 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2799 0.0 0.0 71040 1396 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2800 0.0 0.0 71040 1396 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2801 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2802 0.0 0.0 71040 1404 ? D 01:18 0:00 send-mail -i -- admin@conectadohost.com.br mailnull 2803 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2804 0.0 0.0 71040 1412 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2805 0.0 0.0 71040 1380 ? D 01:18 0:00 send-mail -i -- admin@conectadohost.com.br mailnull 2806 0.0 0.0 71040 1412 ? D 01:18 0:00 /usr/sbin/sendmail -f root -t mailnull 2807 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 2808 0.0 0.0 71040 1400 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 2817 0.0 0.0 106124 540 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 2818 0.0 0.0 44648 440 ? D 01:18 0:00 nslookup 144.217.34.53 root 2819 0.0 0.0 103360 840 ? S 01:18 0:00 grep br root 2820 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l nobody 2837 0.0 0.0 114060 6728 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2843 0.0 0.0 114060 6652 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 288 ? S 00:34 0:00 CROND conhecsc 3059 15.1 94.4 78261004 62362132 ? Ds 00:34 6:39 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115260 7256 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3181 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 3182 0.0 0.0 114060 6540 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3183 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3184 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statistics... root 3185 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statistics... root 3186 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3187 0.0 0.0 169980 5556 ? S 01:18 0:00 lfd - (child) Statistics... root 3188 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statistics... root 3189 0.0 0.0 169980 5564 ? S 01:18 0:00 lfd - (child) Statistics... root 3190 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3191 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3192 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3278 0.0 0.0 106120 652 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 3279 0.0 0.0 106120 532 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 3280 0.0 0.0 44648 440 ? D 01:18 0:00 nslookup 143.0.115.31 root 3281 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 3282 0.0 0.0 100976 648 ? S 01:18 0:00 wc -l dovenull 3299 0.0 0.0 42760 488 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 492 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 604 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 1000 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1660 ? D 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 1028 ? D 00:45 0:00 dovecot/auth root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 416 ? S 00:47 0:00 /usr/bin/php root 4308 0.0 0.0 106124 540 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 4309 0.0 0.0 44648 436 ? D 01:18 0:00 nslookup 144.217.34.53 root 4310 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 4311 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l root 4329 0.0 0.0 169980 5568 ? S 01:18 0:00 lfd - (child) Statistics... root 4330 0.0 0.0 169980 5568 ? S 01:18 0:00 lfd - (child) Statistics... root 4331 0.0 0.0 169980 5572 ? S 01:18 0:00 lfd - (child) Statistics... root 4332 0.0 0.0 169980 5568 ? S 01:18 0:00 lfd - (child) Statistics... root 4333 0.0 0.0 169980 5572 ? S 01:18 0:00 lfd - (child) Statistics... root 4334 0.0 0.0 169980 5580 ? S 01:18 0:00 lfd - (child) Statistics... root 4335 0.0 0.0 169980 5580 ? S 01:18 0:00 lfd - (child) Statistics... root 4336 0.0 0.0 169980 5580 ? S 01:18 0:00 lfd - (child) Statistics... root 4337 0.0 0.0 169980 5576 ? S 01:18 0:00 lfd - (child) Statistics... root 4338 0.0 0.0 169980 5584 ? S 01:18 0:00 lfd - (child) Statistics... root 4339 0.0 0.0 169980 5584 ? S 01:18 0:00 lfd - (child) Statistics... nobody 4340 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4341 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4342 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4343 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 4380 0.0 0.0 169980 5588 ? S 01:18 0:00 lfd - (child) Statistics... root 4381 0.0 0.0 169980 5588 ? S 01:18 0:00 lfd - (child) Statistics... root 4382 0.0 0.0 169980 5588 ? S 01:18 0:00 lfd - (child) Statistics..ics... root 3185 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statistics... root 3186 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3187 0.0 0.0 169980 5556 ? S 01:18 0:00 lfd - (child) Statistics... root 3188 0.0 0.0 169980 5552 ? S 01:18 0:00 lfd - (child) Statistics... root 3189 0.0 0.0 169980 5564 ? S 01:18 0:00 lfd - (child) Statistics... root 3190 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3191 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3192 0.0 0.0 169980 5560 ? S 01:18 0:00 lfd - (child) Statistics... root 3278 0.0 0.0 106120 652 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 3279 0.0 0.0 106120 532 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 3280 0.0 0.0 44648 440 ? D 01:18 0:00 nslookup 143.0.115.31 root 3281 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 3282 0.0 0.0 100976 648 ? S 01:18 0:00 wc -l dovenull 3299 0.0 0.0 42760 488 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 492 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 604 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 1000 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1660 ? D 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 32012 1028 ? D 00:45 0:00 dovecot/auth root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 416 ? S 00:47 0:00 /usr/bin/php root 4308 0.0 0.0 106124 540 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 4309 0.0 0.0 44648 436 ? D 01:18 0:00 nslookup 144.217.34.53 root 4310 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 4311 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l root 4329 0.0 0.0 169980 5568 ? S 01:18 0:00 lfd - (child) Statistics... root 4330 0.0 0.0 169980 5568 ? S 01:18 0:00 lfd - (child) Statistics... root 4331 0.0 0.0 169980 5572 ? S 01:18 0:00 lfd - (child) Statistics... root 4332 0.0 0.0 169980 5568 ? S 01:18 0:00 lfd - (child) Statistics... root 4333 0.0 0.0 169980 5572 ? S 01:18 0:00 lfd - (child) Statistics... root 4334 0.0 0.0 169980 5580 ? S 01:18 0:00 lfd - (child) Statistics... root 4335 0.0 0.0 169980 5580 ? S 01:18 0:00 lfd - (child) Statistics... root 4336 0.0 0.0 169980 5580 ? S 01:18 0:00 lfd - (child) Statistics... root 4337 0.0 0.0 169980 5576 ? S 01:18 0:00 lfd - (child) Statistics... root 4338 0.0 0.0 169980 5584 ? S 01:18 0:00 lfd - (child) Statistics... root 4339 0.0 0.0 169980 5584 ? S 01:18 0:00 lfd - (child) Statistics... nobody 4340 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4341 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4342 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4343 0.0 0.0 114060 6600 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 4380 0.0 0.0 169980 5588 ? S 01:18 0:00 lfd - (child) Statistics... root 4381 0.0 0.0 169980 5588 ? S 01:18 0:00 lfd - (child) Statistics... root 4382 0.0 0.0 169980 5588 ? S 01:18 0:00 lfd - (child) Statistics... root 4383 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4384 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4385 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4386 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4387 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4388 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4389 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4390 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4391 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4392 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4393 0.0 0.0 169980 5604 ? S 01:18 0:00 lfd - (child) Statistics... root 4394 0.0 0.0 169980 5608 ? S 01:18 0:00 lfd - (child) Statistics... root 4395 0.0 0.0 169980 5608 ? S 01:18 0:00 lfd - (child) Statistics... root 4396 0.0 0.0 169980 5608 ? S 01:18 0:00 lfd - (child) Statistics... root 4413 0.0 0.0 15044 264 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 4414 0.0 0.0 15044 264 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 4415 0.0 0.0 15044 264 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 532 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 5400 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 412 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 408 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] nobody 5674 0.0 0.0 112412 376 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 404 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 3532 ? S 01:01 0:00 /usr/bin/php icowebra 6242 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 328 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 6260 ? D Apr17 0:08 tailwatchd mysql 6514 18.4 0.1 6973904 120492 ? Sl Apr17 236:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid icowebra 6842 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 404 ? S Apr17 0:00 /usr/bin/php root 7334 0.0 0.0 74292 4892 ? S 01:12 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH mailnull 7499 0.0 0.0 74248 2408 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7500 0.0 0.0 169980 8240 ? D 01:12 0:00 lfd - (child) closing root 7501 0.0 0.0 169980 8168 ? D 01:12 0:00 lfd - (child) c. root 4383 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4384 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4385 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4386 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4387 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4388 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4389 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4390 0.0 0.0 169980 5592 ? S 01:18 0:00 lfd - (child) Statistics... root 4391 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4392 0.0 0.0 169980 5596 ? S 01:18 0:00 lfd - (child) Statistics... root 4393 0.0 0.0 169980 5604 ? S 01:18 0:00 lfd - (child) Statistics... root 4394 0.0 0.0 169980 5608 ? S 01:18 0:00 lfd - (child) Statistics... root 4395 0.0 0.0 169980 5608 ? S 01:18 0:00 lfd - (child) Statistics... root 4396 0.0 0.0 169980 5608 ? S 01:18 0:00 lfd - (child) Statistics... root 4413 0.0 0.0 15044 264 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 4414 0.0 0.0 15044 264 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 4415 0.0 0.0 15044 264 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 532 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 5400 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 412 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 408 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] nobody 5674 0.0 0.0 112412 376 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 404 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 3532 ? S 01:01 0:00 /usr/bin/php icowebra 6242 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 328 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 6260 ? D Apr17 0:08 tailwatchd mysql 6514 18.4 0.1 6973904 120492 ? Sl Apr17 236:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid icowebra 6842 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 404 ? S Apr17 0:00 /usr/bin/php root 7334 0.0 0.0 74292 4892 ? S 01:12 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH mailnull 7499 0.0 0.0 74248 2408 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7500 0.0 0.0 169980 8240 ? D 01:12 0:00 lfd - (child) closing root 7501 0.0 0.0 169980 8168 ? D 01:12 0:00 lfd - (child) closing root 7502 0.0 0.0 169980 8148 ? D 01:12 0:00 lfd - (child) closing root 7503 0.0 0.0 169980 8256 ? D 01:12 0:00 lfd - (child) closing root 7504 0.0 0.0 169980 8224 ? D 01:12 0:00 lfd - (child) closing nobody 7507 0.0 0.0 114192 6932 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7510 0.0 0.0 114192 6936 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7511 0.0 0.0 114060 7820 ? D 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7512 0.0 0.0 169980 8260 ? D 01:12 0:00 lfd - child closing nobody 7514 0.0 0.0 115520 8092 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7516 0.0 0.0 114192 7612 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7517 0.0 0.0 114196 7548 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7519 0.0 0.0 169980 8564 ? D 01:12 0:00 lfd - (child) closing root 7521 0.0 0.0 169980 8308 ? D 01:12 0:00 lfd - (child) closing root 7522 0.0 0.0 169980 8308 ? D 01:12 0:00 lfd - (child) closing root 7523 0.0 0.0 169980 8296 ? D 01:12 0:00 lfd - (child) closing root 7524 0.0 0.0 169980 8256 ? D 01:12 0:00 lfd - (child) closing root 7525 0.0 0.0 169980 8296 ? D 01:12 0:00 lfd - (child) closing root 7526 0.0 0.0 169980 8280 ? D 01:12 0:00 lfd - (child) closing root 7527 0.0 0.0 169980 8324 ? D 01:12 0:00 lfd - (child) closing root 7528 0.0 0.0 169980 8316 ? D 01:12 0:00 lfd - (child) closing root 7529 0.0 0.0 169980 8340 ? D 01:12 0:00 lfd - (child) closing mailnull 7530 0.0 0.0 74280 3124 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7532 0.0 0.0 170456 9892 ? D 01:12 0:00 lfd - (child) closing root 7533 0.0 0.0 169980 8360 ? D 01:12 0:00 lfd - (child) closing postgres 7534 0.0 0.0 216640 2096 ? Ds 01:12 0:00 postgres: autovacuum worker process castelof_banner root 7536 0.0 0.0 169980 8340 ? D 01:12 0:00 lfd - (child) closing root 7537 0.0 0.0 169980 8328 ? D 01:12 0:00 lfd - (child) closing root 7538 0.0 0.0 169980 8308 ? D 01:12 0:00 lfd - (child) closing root 7539 0.0 0.0 169980 8312 ? D 01:12 0:00 lfd - (child) closing root 7540 0.0 0.0 169980 8324 ? D 01:12 0:00 lfd - (child) closing root 7541 0.0 0.0 169980 8376 ? D 01:12 0:00 lfd - (child) closing root 7542 0.0 0.0 169980 8348 ? D 01:12 0:00 lfd - (child) closing root 7543 0.0 0.0 169980 8296 ? D 01:12 0:00 lfd - (child) closing root 7544 0.0 0.0 169980 8372 ? D 01:12 0:00 lfd - (child) closing root 7545 0.0 0.0 169980 8364 ? D 01:12 0:00 lfd - (child) closing root 7546 0.0 0.0 169980 8396 ? D 01:12 0:00 lfd - (child) closing root 7547 0.0 0.0 169980 8400 ? D 01:12 0:00 lfd - (child) closing root 7548 0.0 0.0 169980 8364 ? D 01:12 0:00 lfd - (child) closing root 7549 0.0 0.0 169980 8360 ? D 01:12 0:00 lfd - (child) closing root 7550 0.0 0.0 169980 8372 ? D 01:12 0:00 lfd - (child) closing root 7551 0.0 0.0 169980 8356 ? D 01:12 0:00 lfd - (child) closing root 7552 0.0 0.0 169980 8368 ? D 01:12 0:00 lfd - (child) closing root 7553 0.0 0.0 169980 8388 ? D 01:12 0:00 lfd - (child) closing mailnull 7554 0.0 0.0 74272 2276 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7561 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7562 0.0 0.0 142436 840 ? S 01:13 0:00 CROND rolosing root 7502 0.0 0.0 169980 8148 ? D 01:12 0:00 lfd - (child) closing root 7503 0.0 0.0 169980 8256 ? D 01:12 0:00 lfd - (child) closing root 7504 0.0 0.0 169980 8224 ? D 01:12 0:00 lfd - (child) closing nobody 7507 0.0 0.0 114192 6932 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7510 0.0 0.0 114192 6936 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7511 0.0 0.0 114060 7820 ? D 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7512 0.0 0.0 169980 8260 ? D 01:12 0:00 lfd - child closing nobody 7514 0.0 0.0 115520 8092 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7516 0.0 0.0 114192 7612 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7517 0.0 0.0 114196 7548 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7519 0.0 0.0 169980 8564 ? D 01:12 0:00 lfd - (child) closing root 7521 0.0 0.0 169980 8308 ? D 01:12 0:00 lfd - (child) closing root 7522 0.0 0.0 169980 8308 ? D 01:12 0:00 lfd - (child) closing root 7523 0.0 0.0 169980 8296 ? D 01:12 0:00 lfd - (child) closing root 7524 0.0 0.0 169980 8256 ? D 01:12 0:00 lfd - (child) closing root 7525 0.0 0.0 169980 8296 ? D 01:12 0:00 lfd - (child) closing root 7526 0.0 0.0 169980 8280 ? D 01:12 0:00 lfd - (child) closing root 7527 0.0 0.0 169980 8324 ? D 01:12 0:00 lfd - (child) closing root 7528 0.0 0.0 169980 8316 ? D 01:12 0:00 lfd - (child) closing root 7529 0.0 0.0 169980 8340 ? D 01:12 0:00 lfd - (child) closing mailnull 7530 0.0 0.0 74280 3124 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7532 0.0 0.0 170456 9892 ? D 01:12 0:00 lfd - (child) closing root 7533 0.0 0.0 169980 8360 ? D 01:12 0:00 lfd - (child) closing postgres 7534 0.0 0.0 216640 2096 ? Ds 01:12 0:00 postgres: autovacuum worker process castelof_banner root 7536 0.0 0.0 169980 8340 ? D 01:12 0:00 lfd - (child) closing root 7537 0.0 0.0 169980 8328 ? D 01:12 0:00 lfd - (child) closing root 7538 0.0 0.0 169980 8308 ? D 01:12 0:00 lfd - (child) closing root 7539 0.0 0.0 169980 8312 ? D 01:12 0:00 lfd - (child) closing root 7540 0.0 0.0 169980 8324 ? D 01:12 0:00 lfd - (child) closing root 7541 0.0 0.0 169980 8376 ? D 01:12 0:00 lfd - (child) closing root 7542 0.0 0.0 169980 8348 ? D 01:12 0:00 lfd - (child) closing root 7543 0.0 0.0 169980 8296 ? D 01:12 0:00 lfd - (child) closing root 7544 0.0 0.0 169980 8372 ? D 01:12 0:00 lfd - (child) closing root 7545 0.0 0.0 169980 8364 ? D 01:12 0:00 lfd - (child) closing root 7546 0.0 0.0 169980 8396 ? D 01:12 0:00 lfd - (child) closing root 7547 0.0 0.0 169980 8400 ? D 01:12 0:00 lfd - (child) closing root 7548 0.0 0.0 169980 8364 ? D 01:12 0:00 lfd - (child) closing root 7549 0.0 0.0 169980 8360 ? D 01:12 0:00 lfd - (child) closing root 7550 0.0 0.0 169980 8372 ? D 01:12 0:00 lfd - (child) closing root 7551 0.0 0.0 169980 8356 ? D 01:12 0:00 lfd - (child) closing root 7552 0.0 0.0 169980 8368 ? D 01:12 0:00 lfd - (child) closing root 7553 0.0 0.0 169980 8388 ? D 01:12 0:00 lfd - (child) closing mailnull 7554 0.0 0.0 74272 2276 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7561 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7562 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7563 0.0 0.0 142436 836 ? S 01:13 0:00 CROND root 7564 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7565 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7566 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7567 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7568 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7569 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7571 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7573 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7583 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7584 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7585 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7586 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7587 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7588 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7589 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7591 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7593 0.0 0.0 169980 8308 ? D 01:13 0:00 lfd - (child) closing root 7594 0.0 0.0 169980 8312 ? D 01:13 0:00 lfd - (child) closing root 7595 0.0 0.0 169980 8416 ? D 01:13 0:00 lfd - (child) closing root 7596 0.0 0.0 169980 8368 ? D 01:13 0:00 lfd - (child) closing root 7597 0.0 0.0 169980 8440 ? D 01:13 0:00 lfd - (child) closing root 7598 0.0 0.0 169980 8340 ? D 01:13 0:00 lfd - (child) closing root 7599 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - (child) closing root 7600 0.0 0.0 169980 8336 ? D 01:13 0:00 lfd - (child) closing root 7601 0.0 0.0 169980 8344 ? D 01:13 0:00 lfd - (child) closing root 7602 0.0 0.0 169980 8364 ? D 01:13 0:00 lfd - (child) closing root 7603 0.0 0.0 169980 8404 ? D 01:13 0:00 lfd - (child) closing mailnull 7607 0.0 0.0 74272 2244 ? S 01:13 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7611 0.0 0.0 169980 8344 ? D 01:13 0:00 lfd - (child) closing root 7612 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7613 0.0 0.0 169980 8316 ? D 01:13 0:00 lfd - (child) closing root 7614 0.0 0.0 169980 8316 ? D 01:13 0:00 lfd - (child) closing root 7615 0.0 0.0 169980 8456 ? D 01:13 0:00 lfd - (child) closing root 7616 0.0 0.0 169980 8448 ? D 01:13 0:00 lfd - (child) closing root 7617 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - (child) closing nobody 7618 0.0 0.0 114192 7180 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7627 0.0 0.0 114196 7088 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114060 6472 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7645 0.0 0.0 114060 8064 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 7152 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7647 0.0 0.0 114328 7644 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7648 0.0 0.0 114332 7256 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7665 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - child closing root 7666 0.0 0.0 169980 8640 ? D 01:13 0:00 lfd - (child) closing root 7667 0.0 0.0 169980 8340 ? D 01:13 0:00 lfd - (child) closing root 7668 0.0 0.0 169980 8412 ? D 01:13 0:00 lfd - (child) clot 7563 0.0 0.0 142436 836 ? S 01:13 0:00 CROND root 7564 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7565 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7566 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7567 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7568 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7569 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7571 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7573 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7583 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7584 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7585 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7586 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7587 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7588 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7589 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7591 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7593 0.0 0.0 169980 8308 ? D 01:13 0:00 lfd - (child) closing root 7594 0.0 0.0 169980 8312 ? D 01:13 0:00 lfd - (child) closing root 7595 0.0 0.0 169980 8416 ? D 01:13 0:00 lfd - (child) closing root 7596 0.0 0.0 169980 8368 ? D 01:13 0:00 lfd - (child) closing root 7597 0.0 0.0 169980 8440 ? D 01:13 0:00 lfd - (child) closing root 7598 0.0 0.0 169980 8340 ? D 01:13 0:00 lfd - (child) closing root 7599 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - (child) closing root 7600 0.0 0.0 169980 8336 ? D 01:13 0:00 lfd - (child) closing root 7601 0.0 0.0 169980 8344 ? D 01:13 0:00 lfd - (child) closing root 7602 0.0 0.0 169980 8364 ? D 01:13 0:00 lfd - (child) closing root 7603 0.0 0.0 169980 8404 ? D 01:13 0:00 lfd - (child) closing mailnull 7607 0.0 0.0 74272 2244 ? S 01:13 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7611 0.0 0.0 169980 8344 ? D 01:13 0:00 lfd - (child) closing root 7612 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7613 0.0 0.0 169980 8316 ? D 01:13 0:00 lfd - (child) closing root 7614 0.0 0.0 169980 8316 ? D 01:13 0:00 lfd - (child) closing root 7615 0.0 0.0 169980 8456 ? D 01:13 0:00 lfd - (child) closing root 7616 0.0 0.0 169980 8448 ? D 01:13 0:00 lfd - (child) closing root 7617 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - (child) closing nobody 7618 0.0 0.0 114192 7180 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7627 0.0 0.0 114196 7088 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114060 6472 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7645 0.0 0.0 114060 8064 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 7152 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7647 0.0 0.0 114328 7644 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7648 0.0 0.0 114332 7256 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7665 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - child closing root 7666 0.0 0.0 169980 8640 ? D 01:13 0:00 lfd - (child) closing root 7667 0.0 0.0 169980 8340 ? D 01:13 0:00 lfd - (child) closing root 7668 0.0 0.0 169980 8412 ? D 01:13 0:00 lfd - (child) closing root 7669 0.0 0.0 169980 8336 ? D 01:13 0:00 lfd - (child) closing postgres 7676 0.0 0.0 216640 2104 ? Ds 01:13 0:00 postgres: autovacuum worker process focasist_loja root 7677 0.0 0.0 169980 8432 ? D 01:13 0:00 lfd - (child) closing root 7678 0.0 0.0 169980 8424 ? D 01:13 0:00 lfd - (child) closing nobody 7679 0.0 0.0 114196 7120 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 7020 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7685 0.0 0.0 115520 7984 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7686 0.0 0.0 114192 7100 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 7300 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7689 0.0 0.0 114192 6988 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7693 0.0 0.0 114192 7768 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7694 0.0 0.0 114060 7836 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7695 0.0 0.0 114192 7648 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7696 0.0 0.0 114192 7556 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7697 0.0 0.0 114192 6820 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7702 0.0 0.0 114192 7164 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7704 0.0 0.0 114192 7332 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7705 0.0 0.0 114324 7160 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 114060 6444 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 8052 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7712 0.0 0.0 115520 8008 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7713 0.0 0.0 114192 7556 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7714 0.0 0.0 114192 6884 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 9484 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114324 7096 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7720 0.0 0.0 114196 7500 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7721 0.0 0.0 114192 7080 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7722 0.0 0.0 114060 6460 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7723 0.0 0.0 114192 7220 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7724 0.0 0.0 114192 7364 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7725 0.0 0.0 114192 8028 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114192 7464 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7727 0.0 0.0 114192 7508 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7728 0.0 0.0 114324 7680 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7735 0.0 0.0 169980 8380 ? D 01:13 0:00 child - aborting root 7738 0.0 0.0 106120 908 ? Ss 01:13 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 7740 0.0 0.0 106120 884 ? Ss 01:13 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 7742 0.0 0.0 106124 900 ? Ss 01:13 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 7745 0.0 0.0 106120 900 ? Ss 01:13 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 7750 0.0 0.0 106120 912 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasilosing root 7669 0.0 0.0 169980 8336 ? D 01:13 0:00 lfd - (child) closing postgres 7676 0.0 0.0 216640 2104 ? Ds 01:13 0:00 postgres: autovacuum worker process focasist_loja root 7677 0.0 0.0 169980 8432 ? D 01:13 0:00 lfd - (child) closing root 7678 0.0 0.0 169980 8424 ? D 01:13 0:00 lfd - (child) closing nobody 7679 0.0 0.0 114196 7120 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 7020 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7685 0.0 0.0 115520 7984 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7686 0.0 0.0 114192 7100 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 7300 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7689 0.0 0.0 114192 6988 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7693 0.0 0.0 114192 7768 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7694 0.0 0.0 114060 7836 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7695 0.0 0.0 114192 7648 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7696 0.0 0.0 114192 7556 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7697 0.0 0.0 114192 6820 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7702 0.0 0.0 114192 7164 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7704 0.0 0.0 114192 7332 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7705 0.0 0.0 114324 7160 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 114060 6444 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 8052 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7712 0.0 0.0 115520 8008 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7713 0.0 0.0 114192 7556 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7714 0.0 0.0 114192 6884 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 9484 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114324 7096 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7720 0.0 0.0 114196 7500 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7721 0.0 0.0 114192 7080 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7722 0.0 0.0 114060 6460 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7723 0.0 0.0 114192 7220 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7724 0.0 0.0 114192 7364 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7725 0.0 0.0 114192 8028 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114192 7464 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7727 0.0 0.0 114192 7508 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7728 0.0 0.0 114324 7680 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7735 0.0 0.0 169980 8380 ? D 01:13 0:00 child - aborting root 7738 0.0 0.0 106120 908 ? Ss 01:13 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 7740 0.0 0.0 106120 884 ? Ss 01:13 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 7742 0.0 0.0 106124 900 ? Ss 01:13 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 7745 0.0 0.0 106120 900 ? Ss 01:13 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 7750 0.0 0.0 106120 912 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7751 0.0 0.0 106120 896 ? Ss 01:13 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 7753 0.0 0.0 169980 8308 ? D 01:13 0:00 lfd - (child) closing root 7754 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 7755 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 7757 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7758 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 7759 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 7760 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 7761 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 7765 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 7771 0.0 0.0 46408 8856 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 7772 0.0 0.0 46408 8848 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 7773 0.0 0.0 46408 8884 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 7774 0.0 0.0 46408 8860 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 7775 0.0 0.0 46408 8880 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 7776 0.0 0.0 46408 8808 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 7777 0.0 0.0 46408 8688 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 7779 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7780 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - (child) closing root 7781 0.0 0.0 169980 8456 ? D 01:13 0:00 lfd - (child) closing root 7782 0.0 0.0 169980 8404 ? D 01:13 0:00 lfd - (child) closing root 7783 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7784 0.0 0.0 169980 8396 ? D 01:13 0:00 lfd - (child) closing root 7785 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7786 0.0 0.0 169980 8372 ? D 01:13 0:00 lfd - (child) closing root 7787 0.0 0.0 169980 8360 ? D 01:13 0:00 lfd - (child) closing root 7788 0.0 0.0 169980 8368 ? D 01:13 0:00 lfd - (child) closing root 7789 0.0 0.0 169980 8376 ? D 01:13 0:00 lfd - (child) closing root 7790 0.0 0.0 46408 8684 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 7791 0.0 0.0 169980 8412 ? D 01:13 0:00 lfd - (child) closing root 7792 0.0 0.0 169980 8396 ? D 01:13 0:00 lfd - (child) closing root 7793 0.0 0.0 169980 8408 ? D 01:13 0:00 lfd - (child) closing root 7794 0.0 0.0 169980 8476 ? D 01:13 0:00 lfd - (child) closing root 7795 0.0 0.0 169980 8492 ? D 01:13 0:00 lfd - (child) closing postgres 7798 0.0 0.0 216640 1852 ? Ds 01:13 0:00 postgres: autovacuum worker process root 7801 0.0 0.0 106124 1068 ? S 01:13 0:00 /bin/bash /bin/verifica-spf.sh root 7806 0.0 0.0 106124.sh > /dev/null 2>&1 root 7751 0.0 0.0 106120 896 ? Ss 01:13 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 7753 0.0 0.0 169980 8308 ? D 01:13 0:00 lfd - (child) closing root 7754 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 7755 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 7757 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7758 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 7759 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 7760 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 7761 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 7765 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 7771 0.0 0.0 46408 8856 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 7772 0.0 0.0 46408 8848 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 7773 0.0 0.0 46408 8884 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 7774 0.0 0.0 46408 8860 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 7775 0.0 0.0 46408 8880 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 7776 0.0 0.0 46408 8808 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 7777 0.0 0.0 46408 8688 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 7779 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7780 0.0 0.0 169980 8348 ? D 01:13 0:00 lfd - (child) closing root 7781 0.0 0.0 169980 8456 ? D 01:13 0:00 lfd - (child) closing root 7782 0.0 0.0 169980 8404 ? D 01:13 0:00 lfd - (child) closing root 7783 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7784 0.0 0.0 169980 8396 ? D 01:13 0:00 lfd - (child) closing root 7785 0.0 0.0 169980 8380 ? D 01:13 0:00 lfd - (child) closing root 7786 0.0 0.0 169980 8372 ? D 01:13 0:00 lfd - (child) closing root 7787 0.0 0.0 169980 8360 ? D 01:13 0:00 lfd - (child) closing root 7788 0.0 0.0 169980 8368 ? D 01:13 0:00 lfd - (child) closing root 7789 0.0 0.0 169980 8376 ? D 01:13 0:00 lfd - (child) closing root 7790 0.0 0.0 46408 8684 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 7791 0.0 0.0 169980 8412 ? D 01:13 0:00 lfd - (child) closing root 7792 0.0 0.0 169980 8396 ? D 01:13 0:00 lfd - (child) closing root 7793 0.0 0.0 169980 8408 ? D 01:13 0:00 lfd - (child) closing root 7794 0.0 0.0 169980 8476 ? D 01:13 0:00 lfd - (child) closing root 7795 0.0 0.0 169980 8492 ? D 01:13 0:00 lfd - (child) closing postgres 7798 0.0 0.0 216640 1852 ? Ds 01:13 0:00 postgres: autovacuum worker process root 7801 0.0 0.0 106124 1068 ? S 01:13 0:00 /bin/bash /bin/verifica-spf.sh root 7806 0.0 0.0 106124 1100 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7807 0.0 0.0 127012 2648 ? D 01:13 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 7811 0.0 0.0 139932 2712 ? D 01:13 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 7812 0.0 0.0 106120 900 ? S 01:13 0:00 /bin/bash /bin/corrigir-ips.sh root 7815 0.0 0.0 106120 1092 ? S 01:13 0:00 /bin/bash /bin/brut-filtro.sh nobody 7822 0.0 0.0 114192 7700 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start mailnull 7824 0.0 0.0 75140 1596 ? D 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 7825 0.0 0.0 119696 9224 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 7826 0.0 0.0 114192 7424 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 7840 0.0 0.0 106120 496 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 7843 0.0 0.0 139260 1900 ? S 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 7845 0.0 0.0 103360 652 ? S 01:14 0:00 grep sim root 7846 0.0 0.0 100976 572 ? S 01:14 0:00 wc -l root 7864 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7865 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7866 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7867 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7868 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7869 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7870 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7871 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7872 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7873 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7874 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7876 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7879 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7883 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7886 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7887 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7888 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7889 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7890 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7891 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7892 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7893 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7894 0.0 0.0 142436 1020 ? S 01:14 0:00 CROND root 7895 0.0 0.0 142436 1020 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 114060 6472 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74016 1188 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 8024 0.0 0.0 106124 716 ? S 01:14 0:00 /bin/bash /bin/verifica-spf.sh nobody 8034 0.0 0.0 119696 9236 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8035 0.0 0.0 114192 7436 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8042 0.0 0.0 169980 8448 ? D 01:14 0:00 lfd - (child) closing root 8046 0.0 0.0 169980 8436 ? D 01:14 0:00 lfd - (child) closing root 8047 0.0 0.0 169980 8348 ? D 01:14 0:00 lfd - (child) closing root 8048 0.0 0.0 169980 8436 ? D 01:14 0:00 lfd - (child) closing root 8049 0.0 0.0 169980 8392 ? D 01:14 0:00 lfd - (child) closing root 8050 0.0 0.0 169980 8424 ? D 01:14 0:00 lfd - (child) closing root 8051 0.0 0.0 169980 8424 ? 1100 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7807 0.0 0.0 127012 2648 ? D 01:13 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 7811 0.0 0.0 139932 2712 ? D 01:13 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 7812 0.0 0.0 106120 900 ? S 01:13 0:00 /bin/bash /bin/corrigir-ips.sh root 7815 0.0 0.0 106120 1092 ? S 01:13 0:00 /bin/bash /bin/brut-filtro.sh nobody 7822 0.0 0.0 114192 7700 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start mailnull 7824 0.0 0.0 75140 1596 ? D 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 7825 0.0 0.0 119696 9224 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 7826 0.0 0.0 114192 7424 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 7840 0.0 0.0 106120 496 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 7843 0.0 0.0 139260 1900 ? S 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 7845 0.0 0.0 103360 652 ? S 01:14 0:00 grep sim root 7846 0.0 0.0 100976 572 ? S 01:14 0:00 wc -l root 7864 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7865 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7866 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7867 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7868 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7869 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7870 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7871 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7872 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7873 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7874 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7876 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7879 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7883 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7886 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7887 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7888 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7889 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7890 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7891 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7892 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7893 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7894 0.0 0.0 142436 1020 ? S 01:14 0:00 CROND root 7895 0.0 0.0 142436 1020 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 114060 6472 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74016 1188 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 8024 0.0 0.0 106124 716 ? S 01:14 0:00 /bin/bash /bin/verifica-spf.sh nobody 8034 0.0 0.0 119696 9236 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8035 0.0 0.0 114192 7436 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8042 0.0 0.0 169980 8448 ? D 01:14 0:00 lfd - (child) closing root 8046 0.0 0.0 169980 8436 ? D 01:14 0:00 lfd - (child) closing root 8047 0.0 0.0 169980 8348 ? D 01:14 0:00 lfd - (child) closing root 8048 0.0 0.0 169980 8436 ? D 01:14 0:00 lfd - (child) closing root 8049 0.0 0.0 169980 8392 ? D 01:14 0:00 lfd - (child) closing root 8050 0.0 0.0 169980 8424 ? D 01:14 0:00 lfd - (child) closing root 8051 0.0 0.0 169980 8424 ? D 01:14 0:00 lfd - (child) closing root 8052 0.0 0.0 169980 8408 ? D 01:14 0:00 lfd - (child) closing root 8053 0.0 0.0 169980 8492 ? D 01:14 0:00 lfd - (child) closing root 8081 0.0 0.0 169980 8500 ? D 01:14 0:00 lfd - (child) closing root 8090 0.0 0.0 106124 568 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 3528 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114192 7628 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8157 0.0 0.0 114192 7588 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8158 0.0 0.0 114208 6736 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8160 0.0 0.0 114192 7444 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8161 0.0 0.0 114192 7492 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114060 6628 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8163 0.0 0.0 114060 8068 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8497 0.0 0.0 169980 8400 ? D 01:14 0:00 lfd - (child) closing root 8498 0.0 0.0 169980 8392 ? D 01:14 0:00 lfd - (child) closing root 8521 0.0 0.0 169980 8440 ? D 01:14 0:00 lfd - (child) closing root 8522 0.0 0.0 169980 8460 ? D 01:14 0:00 lfd - (child) closing nobody 8901 0.0 0.0 114460 6140 ? S 01:06 0:00 /usr/local/apache/bin/httpd -k start root 9117 0.0 0.0 169980 8440 ? D 01:14 0:00 lfd - (child) closing root 9118 0.0 0.0 169980 8444 ? D 01:14 0:00 lfd - (child) closing root 9119 0.0 0.0 169980 8440 ? D 01:14 0:00 lfd - (child) closing root 9120 0.0 0.0 169980 8460 ? D 01:14 0:00 lfd - (child) closing root 9194 0.0 0.0 169980 8456 ? D 01:14 0:00 lfd - (child) closing root 9197 0.0 0.0 169980 8472 ? D 01:14 0:00 lfd - (child) closing nobody 9247 0.0 0.0 128572 916 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 9249 0.0 0.0 128572 916 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9250 0.0 0.0 128572 916 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 root 9252 0.0 0.0 36580 6228 ? D 01:14 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply root 9253 0.0 0.0 169980 8424 ? D 01:14 0:00 lfd - child closing root 9254 0.0 0.0 169980 8788 ? D 01:14 0:00 lfd - (child) closing nobody 9263 0.0 0.0 128568 912 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9264 0.0 0.0 114060 6376 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9271 0.0 0.0 114060 6352 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9272 0.0 0.0 114060 6288 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9274 0.0 0.0 114060 6368 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9275 0.0 0.0 114060 6376 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114060 6292 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114060 6396 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9278 0.0 0.0 106120 904 ? Ss 01:14 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 9290 0.0 0.0 106120 924 ? Ss 01:14 0:00 /bin/sh -c /usr/local/cpanel/whostmgr/ D 01:14 0:00 lfd - (child) closing root 8052 0.0 0.0 169980 8408 ? D 01:14 0:00 lfd - (child) closing root 8053 0.0 0.0 169980 8492 ? D 01:14 0:00 lfd - (child) closing root 8081 0.0 0.0 169980 8500 ? D 01:14 0:00 lfd - (child) closing root 8090 0.0 0.0 106124 568 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 3528 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114192 7628 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8157 0.0 0.0 114192 7588 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8158 0.0 0.0 114208 6736 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8160 0.0 0.0 114192 7444 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8161 0.0 0.0 114192 7492 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114060 6628 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8163 0.0 0.0 114060 8068 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8497 0.0 0.0 169980 8400 ? D 01:14 0:00 lfd - (child) closing root 8498 0.0 0.0 169980 8392 ? D 01:14 0:00 lfd - (child) closing root 8521 0.0 0.0 169980 8440 ? D 01:14 0:00 lfd - (child) closing root 8522 0.0 0.0 169980 8460 ? D 01:14 0:00 lfd - (child) closing nobody 8901 0.0 0.0 114460 6140 ? S 01:06 0:00 /usr/local/apache/bin/httpd -k start root 9117 0.0 0.0 169980 8440 ? D 01:14 0:00 lfd - (child) closing root 9118 0.0 0.0 169980 8444 ? D 01:14 0:00 lfd - (child) closing root 9119 0.0 0.0 169980 8440 ? D 01:14 0:00 lfd - (child) closing root 9120 0.0 0.0 169980 8460 ? D 01:14 0:00 lfd - (child) closing root 9194 0.0 0.0 169980 8456 ? D 01:14 0:00 lfd - (child) closing root 9197 0.0 0.0 169980 8472 ? D 01:14 0:00 lfd - (child) closing nobody 9247 0.0 0.0 128572 916 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 9249 0.0 0.0 128572 916 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9250 0.0 0.0 128572 916 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 root 9252 0.0 0.0 36580 6228 ? D 01:14 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply root 9253 0.0 0.0 169980 8424 ? D 01:14 0:00 lfd - child closing root 9254 0.0 0.0 169980 8788 ? D 01:14 0:00 lfd - (child) closing nobody 9263 0.0 0.0 128568 912 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9264 0.0 0.0 114060 6376 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9271 0.0 0.0 114060 6352 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9272 0.0 0.0 114060 6288 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9274 0.0 0.0 114060 6368 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9275 0.0 0.0 114060 6376 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114060 6292 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114060 6396 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9278 0.0 0.0 106120 904 ? Ss 01:14 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 9290 0.0 0.0 106120 924 ? Ss 01:14 0:00 /bin/sh -c /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1 root 9292 0.0 0.0 106120 940 ? Ss 01:14 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 9294 0.0 0.0 106120 932 ? Ss 01:14 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 9301 0.0 0.0 106120 932 ? Ss 01:14 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 9304 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 9306 0.0 0.0 106120 888 ? Ss 01:14 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 9308 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 9309 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 127324 2460 ? D 01:14 0:00 php.cgi root 9325 0.0 0.0 106120 880 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9347 0.0 0.0 106120 1124 ? S 01:14 0:00 /bin/bash /bin/malv-block.sh root 9358 0.0 0.0 169980 8492 ? D 01:14 0:00 lfd - (child) closing root 9364 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9368 0.0 0.0 169980 8456 ? D 01:14 0:00 lfd - (child) closing root 9369 0.0 0.0 169980 8528 ? D 01:14 0:00 lfd - (child) closing root 9370 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9371 0.0 0.0 169980 8488 ? D 01:14 0:00 lfd - (child) closing root 9372 0.0 0.0 169980 8492 ? D 01:14 0:00 lfd - (child) closing root 9373 0.0 0.0 124968 4584 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/bin/dnsqueue root 9374 0.0 0.0 106120 496 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9375 0.0 0.0 139260 1904 ? S 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 9376 0.0 0.0 103360 652 ? S 01:14 0:00 grep sim root 9377 0.0 0.0 100976 580 ? S 01:14 0:00 wc -l root 9399 0.0 0.0 139932 2556 ? D 01:14 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 9409 0.0 0.0 169980 8424 ? D 01:14 0:00 lfd - (child) closing root 9410 0.0 0.0 169980 8436 ? D 01:14 0:00 lfd - (child) closing root 9411 0.0 0.0 169980 8524 ? D 01:14 0:00 lfd - (child) closing root 9412 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9413 0.0 0.0 169980 8544 ? D 01:14 0:00 lfd - (child) closing root 9414 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9415 0.0 0.0 169980 8428 ? D 01:14 0:00 lfd - (child) closing root 9416 0.0 0.0 169980 8420 ? D 01:14 0:00 lfd - (child) closing root 9548 0.0 0.0 106124 1060 ? S 01:14 0:00 /bin/bash /bin/monitora-load.sh root 9556 0.0 0.0 127012 2636 ? D 01:14 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 buffetlu 9577 0.0 0.0 200280 16900 ? S 01:02 0:00 /usr/bin/php root 9743 0.0 0.0 106124 1096 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 9747 0.0 0.0 106124 1068 ? S 01:14 0:00 /bin/bash /bin/verifica-spf.sh root 9757 0.0 0.0 106120 1092 ? S 01:14 0:00 /bin/bash /bin/brut-filtro.sh nobody 9775 0.0 0.0 115156 9036 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9776 0.0 0.0 115520 10040 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9777 0.0 0.0 115520 10040 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9778 0.0 0.0 116224 8576 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root bin/dnsqueue > /dev/null 2>&1 root 9292 0.0 0.0 106120 940 ? Ss 01:14 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 9294 0.0 0.0 106120 932 ? Ss 01:14 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 9301 0.0 0.0 106120 932 ? Ss 01:14 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 9304 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 9306 0.0 0.0 106120 888 ? Ss 01:14 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 9308 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 9309 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 127324 2460 ? D 01:14 0:00 php.cgi root 9325 0.0 0.0 106120 880 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9347 0.0 0.0 106120 1124 ? S 01:14 0:00 /bin/bash /bin/malv-block.sh root 9358 0.0 0.0 169980 8492 ? D 01:14 0:00 lfd - (child) closing root 9364 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9368 0.0 0.0 169980 8456 ? D 01:14 0:00 lfd - (child) closing root 9369 0.0 0.0 169980 8528 ? D 01:14 0:00 lfd - (child) closing root 9370 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9371 0.0 0.0 169980 8488 ? D 01:14 0:00 lfd - (child) closing root 9372 0.0 0.0 169980 8492 ? D 01:14 0:00 lfd - (child) closing root 9373 0.0 0.0 124968 4584 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/bin/dnsqueue root 9374 0.0 0.0 106120 496 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9375 0.0 0.0 139260 1904 ? S 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 9376 0.0 0.0 103360 652 ? S 01:14 0:00 grep sim root 9377 0.0 0.0 100976 580 ? S 01:14 0:00 wc -l root 9399 0.0 0.0 139932 2556 ? D 01:14 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 9409 0.0 0.0 169980 8424 ? D 01:14 0:00 lfd - (child) closing root 9410 0.0 0.0 169980 8436 ? D 01:14 0:00 lfd - (child) closing root 9411 0.0 0.0 169980 8524 ? D 01:14 0:00 lfd - (child) closing root 9412 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9413 0.0 0.0 169980 8544 ? D 01:14 0:00 lfd - (child) closing root 9414 0.0 0.0 169980 8504 ? D 01:14 0:00 lfd - (child) closing root 9415 0.0 0.0 169980 8428 ? D 01:14 0:00 lfd - (child) closing root 9416 0.0 0.0 169980 8420 ? D 01:14 0:00 lfd - (child) closing root 9548 0.0 0.0 106124 1060 ? S 01:14 0:00 /bin/bash /bin/monitora-load.sh root 9556 0.0 0.0 127012 2636 ? D 01:14 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 buffetlu 9577 0.0 0.0 200280 16900 ? S 01:02 0:00 /usr/bin/php root 9743 0.0 0.0 106124 1096 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 9747 0.0 0.0 106124 1068 ? S 01:14 0:00 /bin/bash /bin/verifica-spf.sh root 9757 0.0 0.0 106120 1092 ? S 01:14 0:00 /bin/bash /bin/brut-filtro.sh nobody 9775 0.0 0.0 115156 9036 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9776 0.0 0.0 115520 10040 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9777 0.0 0.0 115520 10040 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9778 0.0 0.0 116224 8576 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9869 0.0 0.0 169980 8484 ? D 01:14 0:00 child - aborting nobody 9876 0.0 0.0 115520 10060 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 10078 0.0 0.0 115520 10096 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] root 10926 0.0 0.0 4640 204 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 316 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1348 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 224 ? Ss Apr16 0:00 /usr/sbin/sshd root 11169 0.0 0.0 106124 800 ? S 01:15 0:00 /bin/bash /bin/brut-filtro.sh root 11175 0.0 0.0 169980 8368 ? D 01:15 0:00 lfd - (child) closing root 11195 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11196 0.0 0.0 142436 844 ? S 01:15 0:00 CROND root 11197 0.0 0.0 142436 844 ? S 01:15 0:00 CROND root 11198 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11200 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11201 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11202 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11203 0.0 0.0 142440 1008 ? S 01:15 0:00 CROND root 11204 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11205 0.0 0.0 142436 1004 ? S 01:15 0:00 CROND root 11207 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11208 0.0 0.0 142436 860 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 876 ? S 01:01 0:00 /usr/bin/php root 11211 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11212 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND postgres 11213 0.0 0.0 215388 464 ? D Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 1000 ? S 01:15 0:00 CROND root 11220 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11223 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11224 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11225 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11226 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11227 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11228 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11229 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11230 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11231 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11232 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11235 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11236 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11240 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11241 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11242 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11243 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11244 0.0 0.0 142440 1032 ? S 01 9869 0.0 0.0 169980 8484 ? D 01:14 0:00 child - aborting nobody 9876 0.0 0.0 115520 10060 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 10078 0.0 0.0 115520 10096 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] root 10926 0.0 0.0 4640 204 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 316 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1348 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 224 ? Ss Apr16 0:00 /usr/sbin/sshd root 11169 0.0 0.0 106124 800 ? S 01:15 0:00 /bin/bash /bin/brut-filtro.sh root 11175 0.0 0.0 169980 8368 ? D 01:15 0:00 lfd - (child) closing root 11195 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11196 0.0 0.0 142436 844 ? S 01:15 0:00 CROND root 11197 0.0 0.0 142436 844 ? S 01:15 0:00 CROND root 11198 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11200 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11201 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11202 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11203 0.0 0.0 142440 1008 ? S 01:15 0:00 CROND root 11204 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11205 0.0 0.0 142436 1004 ? S 01:15 0:00 CROND root 11207 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11208 0.0 0.0 142436 860 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 876 ? S 01:01 0:00 /usr/bin/php root 11211 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11212 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND postgres 11213 0.0 0.0 215388 464 ? D Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 1000 ? S 01:15 0:00 CROND root 11220 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11223 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11224 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11225 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11226 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11227 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11228 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11229 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11230 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11231 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11232 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11235 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11236 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11240 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11241 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11242 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11243 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11244 0.0 0.0 142440 1032 ? S 01:15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 288 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 312 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 220 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 876 ? Ds Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 592 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 564 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114060 6408 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11351 0.0 0.0 114060 6436 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11352 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11362 0.0 0.0 169980 8500 ? D 01:15 0:00 lfd - (child) closing root 11363 0.1 0.0 169980 6024 ? Ds 00:00 0:08 lfd - scanning log files nobody 11364 0.0 0.0 114060 8408 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11365 0.0 0.0 114060 8476 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11366 0.0 0.0 114060 8524 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11367 0.0 0.0 114060 8504 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11368 0.0 0.0 114060 8528 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11369 0.0 0.0 114060 8408 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11370 0.0 0.0 114060 8420 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11371 0.0 0.0 116816 8660 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11376 0.0 0.0 114060 6440 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11377 0.0 0.0 114060 6436 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11378 0.0 0.0 114060 6368 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11379 0.0 0.0 114060 6408 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11398 0.0 0.0 106124 720 ? S 01:15 0:00 /bin/bash /bin/verifica-spf.sh root 11439 0.0 0.0 169980 8532 ? D 01:15 0:00 lfd - (child) closing root 11440 0.0 0.0 169980 8408 ? D 01:15 0:00 lfd - (child) closing root 11441 0.0 0.0 169980 8544 ? D 01:15 0:00 lfd - (child) closing root 11442 0.0 0.0 169980 8536 ? D 01:15 0:00 lfd - (child) closing root 11443 0.0 0.0 169980 8548 ? D 01:15 0:00 lfd - (child) closing root 11444 0.0 0.0 169980 8524 ? D 01:15 0:00 lfd - (child) closing root 11445 0.0 0.0 169980 8564 ? D 01:15 0:00 lfd - (child) closing root 11451 0.0 0.0 169980 8404 ? D 01:15 0:00 lfd - (child) closing root 11452 0.0 0.0 169980 8392 ? D 01:15 0:00 lfd - (child) closing root 11453 0.0 0.0 169980 8500 ? D 01:15 0:00 lfd - (child) closing noticias 11454 1.3 0.0 237856 17920 ? D 01:08 0:07 /usr/bin/php root 11459 0.0 0.0 169980 8564 ? D 01:15 0:00 lfd - (child) closing root 11461 0.0 0.0 169980 8568 ? D 01:15 0:00 lfd - (child) closing root 11462 0.0 0.0 169980 8532 ? D 01:15 0:00 lfd - (child) closing root 11463 0.0 0.0 169980 8576 ? D 01:15 0:00 lfd - (child) closing root 11464 0.0 0.0 169980 8548 ? D 01:15 0:00 lfd - (child) closing root 11465 0.0 0.0 169980 8516 ? D :15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 288 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 312 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 220 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 876 ? Ds Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 592 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 564 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114060 6408 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11351 0.0 0.0 114060 6436 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11352 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11362 0.0 0.0 169980 8500 ? D 01:15 0:00 lfd - (child) closing root 11363 0.1 0.0 169980 6024 ? Ds 00:00 0:08 lfd - scanning log files nobody 11364 0.0 0.0 114060 8408 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11365 0.0 0.0 114060 8476 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11366 0.0 0.0 114060 8524 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11367 0.0 0.0 114060 8504 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11368 0.0 0.0 114060 8528 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11369 0.0 0.0 114060 8408 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11370 0.0 0.0 114060 8420 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11371 0.0 0.0 116816 8660 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11376 0.0 0.0 114060 6440 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11377 0.0 0.0 114060 6436 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11378 0.0 0.0 114060 6368 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11379 0.0 0.0 114060 6408 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11398 0.0 0.0 106124 720 ? S 01:15 0:00 /bin/bash /bin/verifica-spf.sh root 11439 0.0 0.0 169980 8532 ? D 01:15 0:00 lfd - (child) closing root 11440 0.0 0.0 169980 8408 ? D 01:15 0:00 lfd - (child) closing root 11441 0.0 0.0 169980 8544 ? D 01:15 0:00 lfd - (child) closing root 11442 0.0 0.0 169980 8536 ? D 01:15 0:00 lfd - (child) closing root 11443 0.0 0.0 169980 8548 ? D 01:15 0:00 lfd - (child) closing root 11444 0.0 0.0 169980 8524 ? D 01:15 0:00 lfd - (child) closing root 11445 0.0 0.0 169980 8564 ? D 01:15 0:00 lfd - (child) closing root 11451 0.0 0.0 169980 8404 ? D 01:15 0:00 lfd - (child) closing root 11452 0.0 0.0 169980 8392 ? D 01:15 0:00 lfd - (child) closing root 11453 0.0 0.0 169980 8500 ? D 01:15 0:00 lfd - (child) closing noticias 11454 1.3 0.0 237856 17920 ? D 01:08 0:07 /usr/bin/php root 11459 0.0 0.0 169980 8564 ? D 01:15 0:00 lfd - (child) closing root 11461 0.0 0.0 169980 8568 ? D 01:15 0:00 lfd - (child) closing root 11462 0.0 0.0 169980 8532 ? D 01:15 0:00 lfd - (child) closing root 11463 0.0 0.0 169980 8576 ? D 01:15 0:00 lfd - (child) closing root 11464 0.0 0.0 169980 8548 ? D 01:15 0:00 lfd - (child) closing root 11465 0.0 0.0 169980 8516 ? D 01:15 0:00 lfd - (child) closing root 11466 0.0 0.0 169980 8396 ? D 01:15 0:00 lfd - (child) closing root 11467 0.0 0.0 169980 8488 ? D 01:15 0:00 lfd - (child) closing root 11468 0.0 0.0 169980 8556 ? D 01:15 0:00 lfd - (child) closing nobody 11485 0.0 0.0 116100 6928 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 8276 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start noticias 11551 0.1 0.0 206116 18712 ? D 01:10 0:00 /usr/bin/php nobody 11568 0.0 0.0 115516 6664 ? S 01:10 0:00 /usr/local/apache/bin/httpd -k start root 11592 0.1 0.0 171172 9340 ? D 01:10 0:00 lfd - child closing named 11603 0.5 0.0 745552 4372 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11628 0.2 0.0 236956 5616 ? S 01:10 0:01 spamd child root 11629 0.1 0.0 236680 1752 ? S 01:10 0:00 spamd child root 11713 0.0 0.0 136204 68 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 528 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 188 ? Ss Apr16 0:00 /usr/sbin/atd icowebra 11779 0.0 0.0 194796 1200 ? S 01:10 0:00 /usr/bin/php 867 11821 0.3 0.0 224388 17448 ? D 01:08 0:02 /usr/bin/php nobody 11834 0.0 0.0 115520 6396 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 116224 6644 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start sistemam 11853 0.0 0.0 187276 868 ? S 01:08 0:00 /usr/bin/php queroupa 11862 0.0 0.0 198652 16900 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16904 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 18016 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 528 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12469 0.0 0.0 114060 6416 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12483 0.0 0.0 169980 8372 ? D 01:15 0:00 lfd - child closing root 12484 0.0 0.0 169980 8864 ? D 01:15 0:00 lfd - (child) closing nobody 12497 0.0 0.0 114060 6384 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12498 0.0 0.0 114060 6684 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12523 0.0 0.0 114060 6440 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12524 0.0 0.0 114060 6432 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12526 0.0 0.0 114060 6404 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12535 0.0 0.0 169980 8560 ? D 01:15 0:00 lfd - (child) closing root 12540 0.0 0.0 106120 944 ? Ss 01:15 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 12541 0.0 0.0 106120 920 ? Ss 01:15 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 12544 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 12545 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12546 0.0 0.0 106120 932 ? Ss 01:15 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 12547 0.0 0.0 106120 928 ? Ss 01:15 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 12549 0.0 0.0 106120 932 ? Ss 01:15 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 12550 0.0 0.0 169980 8556 ? 01:15 0:00 lfd - (child) closing root 11466 0.0 0.0 169980 8396 ? D 01:15 0:00 lfd - (child) closing root 11467 0.0 0.0 169980 8488 ? D 01:15 0:00 lfd - (child) closing root 11468 0.0 0.0 169980 8556 ? D 01:15 0:00 lfd - (child) closing nobody 11485 0.0 0.0 116100 6928 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 8276 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start noticias 11551 0.1 0.0 206116 18712 ? D 01:10 0:00 /usr/bin/php nobody 11568 0.0 0.0 115516 6664 ? S 01:10 0:00 /usr/local/apache/bin/httpd -k start root 11592 0.1 0.0 171172 9340 ? D 01:10 0:00 lfd - child closing named 11603 0.5 0.0 745552 4372 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11628 0.2 0.0 236956 5616 ? S 01:10 0:01 spamd child root 11629 0.1 0.0 236680 1752 ? S 01:10 0:00 spamd child root 11713 0.0 0.0 136204 68 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 528 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 188 ? Ss Apr16 0:00 /usr/sbin/atd icowebra 11779 0.0 0.0 194796 1200 ? S 01:10 0:00 /usr/bin/php 867 11821 0.3 0.0 224388 17448 ? D 01:08 0:02 /usr/bin/php nobody 11834 0.0 0.0 115520 6396 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 116224 6644 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start sistemam 11853 0.0 0.0 187276 868 ? S 01:08 0:00 /usr/bin/php queroupa 11862 0.0 0.0 198652 16900 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16904 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 18016 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 528 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12469 0.0 0.0 114060 6416 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12483 0.0 0.0 169980 8372 ? D 01:15 0:00 lfd - child closing root 12484 0.0 0.0 169980 8864 ? D 01:15 0:00 lfd - (child) closing nobody 12497 0.0 0.0 114060 6384 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12498 0.0 0.0 114060 6684 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12523 0.0 0.0 114060 6440 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12524 0.0 0.0 114060 6432 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12526 0.0 0.0 114060 6404 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12535 0.0 0.0 169980 8560 ? D 01:15 0:00 lfd - (child) closing root 12540 0.0 0.0 106120 944 ? Ss 01:15 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 12541 0.0 0.0 106120 920 ? Ss 01:15 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 12544 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 12545 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12546 0.0 0.0 106120 932 ? Ss 01:15 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 12547 0.0 0.0 106120 928 ? Ss 01:15 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 12549 0.0 0.0 106120 932 ? Ss 01:15 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 12550 0.0 0.0 169980 8556 ? D 01:15 0:00 lfd - (child) closing root 12555 0.0 0.0 106120 928 ? Ss 01:15 0:00 /bin/sh -c /bin/protege-banco.sh > /dev/null 2>&1 root 12556 0.0 0.0 4352 536 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 12558 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 12559 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 12560 0.0 0.0 4108 220 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12561 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 12562 0.0 0.0 4108 224 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12563 0.0 0.0 4352 560 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 12564 0.0 0.0 4108 220 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12565 0.0 0.0 169980 8596 ? D 01:15 0:00 lfd - (child) closing root 12566 0.0 0.0 4108 224 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12567 0.0 0.0 4352 560 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 12568 0.0 0.0 4108 220 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12569 0.0 0.0 169980 8512 ? D 01:15 0:00 lfd - (child) closing root 12570 0.0 0.0 4108 220 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12572 0.0 0.0 4616 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 12573 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 12574 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12575 0.0 0.0 4352 560 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://posaufa.com.br/sis/index.php/cron root 12576 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 12577 0.0 0.0 106120 940 ? Ss 01:15 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 12579 0.0 0.0 106120 944 ? Ss 01:15 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 12583 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12584 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 12585 0.0 0.0 170508 9176 ? D 01:15 0:00 lfd - (child) closing root 12587 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 12588 0.0 0.0 4352 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 12589 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:email:fetch root 12590 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 12591 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/c D 01:15 0:00 lfd - (child) closing root 12555 0.0 0.0 106120 928 ? Ss 01:15 0:00 /bin/sh -c /bin/protege-banco.sh > /dev/null 2>&1 root 12556 0.0 0.0 4352 536 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 12558 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 12559 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 12560 0.0 0.0 4108 220 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12561 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 12562 0.0 0.0 4108 224 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12563 0.0 0.0 4352 560 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 12564 0.0 0.0 4108 220 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12565 0.0 0.0 169980 8596 ? D 01:15 0:00 lfd - (child) closing root 12566 0.0 0.0 4108 224 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12567 0.0 0.0 4352 560 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 12568 0.0 0.0 4108 220 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12569 0.0 0.0 169980 8512 ? D 01:15 0:00 lfd - (child) closing root 12570 0.0 0.0 4108 220 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12572 0.0 0.0 4616 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 12573 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 12574 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12575 0.0 0.0 4352 560 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://posaufa.com.br/sis/index.php/cron root 12576 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 12577 0.0 0.0 106120 940 ? Ss 01:15 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 12579 0.0 0.0 106120 944 ? Ss 01:15 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 12583 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12584 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 12585 0.0 0.0 170508 9176 ? D 01:15 0:00 lfd - (child) closing root 12587 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 12588 0.0 0.0 4352 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 12589 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:email:fetch root 12590 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 12591 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 12592 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php root 12593 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 12594 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 12596 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 12597 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 12598 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 12599 0.0 0.0 114736 5976 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12600 0.0 0.0 114060 7192 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nossojor 12601 0.0 0.0 198320 17040 ? D 01:06 0:00 /usr/bin/php nobody 12602 0.0 0.0 114060 7180 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12603 0.0 0.0 114060 7176 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12604 0.0 0.0 114060 7368 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12605 0.0 0.0 114060 7176 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12606 0.0 0.0 114060 7192 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12607 0.0 0.0 114060 7176 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12608 0.0 0.0 4356 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 12609 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 12610 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 12611 0.0 0.0 4352 536 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 mailnull 12623 0.0 0.0 71036 2400 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12624 0.0 0.0 71032 2400 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12625 0.0 0.0 71036 2184 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12626 0.0 0.0 71032 2184 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root rkembala 12628 0.0 0.0 186792 4060 ? S 01:06 0:00 /usr/bin/php mailnull 12633 0.0 0.0 71036 2176 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 992 12634 0.0 0.0 187084 7616 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3540 ? S 01:06 0:00 /usr/bin/php mailnull 12636 0.0 0.0 71032 2184 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12637 0.0 0.0 71032 2388 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12638 0.0 0.0 136824 420 ? S 01:15 0:00 pure-ftpd (IDLE) panel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 12592 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php root 12593 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 12594 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 12596 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 12597 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 12598 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 12599 0.0 0.0 114736 5976 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12600 0.0 0.0 114060 7192 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nossojor 12601 0.0 0.0 198320 17040 ? D 01:06 0:00 /usr/bin/php nobody 12602 0.0 0.0 114060 7180 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12603 0.0 0.0 114060 7176 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12604 0.0 0.0 114060 7368 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12605 0.0 0.0 114060 7176 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12606 0.0 0.0 114060 7192 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12607 0.0 0.0 114060 7176 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12608 0.0 0.0 4356 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 12609 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 12610 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 12611 0.0 0.0 4352 536 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 mailnull 12623 0.0 0.0 71036 2400 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12624 0.0 0.0 71032 2400 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12625 0.0 0.0 71036 2184 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12626 0.0 0.0 71032 2184 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root rkembala 12628 0.0 0.0 186792 4060 ? S 01:06 0:00 /usr/bin/php mailnull 12633 0.0 0.0 71036 2176 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 992 12634 0.0 0.0 187084 7616 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3540 ? S 01:06 0:00 /usr/bin/php mailnull 12636 0.0 0.0 71032 2184 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12637 0.0 0.0 71032 2388 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12638 0.0 0.0 136824 420 ? S 01:15 0:00 pure-ftpd (IDLE) root 12639 0.1 0.0 170456 7124 ? S 01:15 0:00 lfd - (child) (PT) checking user processes root 12644 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12645 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12646 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12647 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12653 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12654 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12655 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12657 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12662 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12664 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12667 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12668 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12670 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12671 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12672 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12673 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12675 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 1148 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12677 0.0 0.0 131624 4468 ? D 01:16 0:00 /usr/local/cpanel/bin/dcpumon root 12678 0.0 0.0 106124 924 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 12682 0.0 0.0 106124 1120 ? S 01:16 0:00 /bin/bash /bin/verifica-spf.sh root 12684 0.0 0.0 127144 2808 ? D 01:16 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12686 0.0 0.0 106124 1112 ? S 01:16 0:00 /bin/bash /bin/protege-banco.sh root 12687 0.0 0.0 106124 1088 ? S 01:16 0:00 /bin/bash /bin/monitora-load.sh root 12688 0.0 0.0 106120 1132 ? S 01:16 0:00 /bin/bash /bin/brut-filtro.sh root 12699 0.0 0.0 169980 8532 ? D 01:16 0:00 lfd - (child) closing root 12700 0.0 0.0 45088 6992 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 707 root 12701 0.0 0.0 45088 6968 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 12702 0.0 0.0 45088 7004 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 12703 0.0 0.0 45088 7008 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 nobody 12704 0.0 0.0 115572 7188 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 12705 0.0 0.0 114488 7252 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 12710 0.0 0.0 45088 6996 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 12722 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/0:2] root 12723 0.0 0.0 139932 3020 ? D 01:16 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php nobody 12759 0.0 0.0 116816 6784 ? S 01:04 0:00 /usr/local/apache/bin/httpd -k start nobody 12764 0.0 0.0 114060 6508 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3932 ? root 12639 0.1 0.0 170456 7124 ? S 01:15 0:00 lfd - (child) (PT) checking user processes root 12644 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12645 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12646 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12647 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12653 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12654 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12655 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12657 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12662 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12664 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12667 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12668 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12670 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12671 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12672 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12673 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142436 932 ? S 01:16 0:00 CROND root 12675 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 1148 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12677 0.0 0.0 131624 4468 ? D 01:16 0:00 /usr/local/cpanel/bin/dcpumon root 12678 0.0 0.0 106124 924 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 12682 0.0 0.0 106124 1120 ? S 01:16 0:00 /bin/bash /bin/verifica-spf.sh root 12684 0.0 0.0 127144 2808 ? D 01:16 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12686 0.0 0.0 106124 1112 ? S 01:16 0:00 /bin/bash /bin/protege-banco.sh root 12687 0.0 0.0 106124 1088 ? S 01:16 0:00 /bin/bash /bin/monitora-load.sh root 12688 0.0 0.0 106120 1132 ? S 01:16 0:00 /bin/bash /bin/brut-filtro.sh root 12699 0.0 0.0 169980 8532 ? D 01:16 0:00 lfd - (child) closing root 12700 0.0 0.0 45088 6992 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 707 root 12701 0.0 0.0 45088 6968 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 12702 0.0 0.0 45088 7004 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 12703 0.0 0.0 45088 7008 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 nobody 12704 0.0 0.0 115572 7188 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 12705 0.0 0.0 114488 7252 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 12710 0.0 0.0 45088 6996 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 12722 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/0:2] root 12723 0.0 0.0 139932 3020 ? D 01:16 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php nobody 12759 0.0 0.0 116816 6784 ? S 01:04 0:00 /usr/local/apache/bin/httpd -k start nobody 12764 0.0 0.0 114060 6508 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3932 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 712 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5244 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13706 0.0 0.0 106124 496 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 13707 0.0 0.0 138388 2260 ? D 01:16 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 13708 0.0 0.0 103360 672 ? S 01:16 0:00 grep sim root 13709 0.0 0.0 100976 592 ? S 01:16 0:00 wc -l root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] nobody 13722 0.0 0.0 114060 6388 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13723 0.0 0.0 114060 6992 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 13738 0.0 0.0 71032 2364 ? D 01:16 0:00 send-mail -i -- admin@conectadohost.com.br root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 212 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh nobody 14499 0.0 0.0 114060 6444 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14500 0.0 0.0 114060 6456 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14501 0.0 0.0 114060 6252 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14502 0.0 0.0 114060 6508 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 14505 0.0 0.0 106120 1184 ? S 01:16 0:00 /bin/bash /bin/malv-block.sh root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] nobody 15187 0.0 0.0 114060 7216 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15188 0.0 0.0 114060 7220 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15189 0.0 0.0 114060 7152 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15190 0.0 0.0 114192 7816 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15191 0.0 0.0 114060 7228 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15193 0.0 0.0 114060 7144 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15205 0.0 0.0 114060 7152 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15206 0.0 0.0 114060 7220 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15207 0.0 0.0 116120 7732 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15208 0.0 0.0 114060 7224 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15210 0.0 0.0 114060 7452 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15219 0.0 0.0 114192 7796 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15220 0.0 0.0 114060 7316 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15222 0.0 0.0 114196 7788 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 15373 0.0 0.0 61336 2016 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 540 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 536 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 992 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1192 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 980 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 980 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mai S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 712 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5244 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13706 0.0 0.0 106124 496 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 13707 0.0 0.0 138388 2260 ? D 01:16 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 13708 0.0 0.0 103360 672 ? S 01:16 0:00 grep sim root 13709 0.0 0.0 100976 592 ? S 01:16 0:00 wc -l root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] nobody 13722 0.0 0.0 114060 6388 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13723 0.0 0.0 114060 6992 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 13738 0.0 0.0 71032 2364 ? D 01:16 0:00 send-mail -i -- admin@conectadohost.com.br root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 212 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh nobody 14499 0.0 0.0 114060 6444 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14500 0.0 0.0 114060 6456 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14501 0.0 0.0 114060 6252 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14502 0.0 0.0 114060 6508 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 14505 0.0 0.0 106120 1184 ? S 01:16 0:00 /bin/bash /bin/malv-block.sh root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] nobody 15187 0.0 0.0 114060 7216 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15188 0.0 0.0 114060 7220 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15189 0.0 0.0 114060 7152 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15190 0.0 0.0 114192 7816 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15191 0.0 0.0 114060 7228 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15193 0.0 0.0 114060 7144 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15205 0.0 0.0 114060 7152 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15206 0.0 0.0 114060 7220 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15207 0.0 0.0 116120 7732 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15208 0.0 0.0 114060 7224 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15210 0.0 0.0 114060 7452 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15219 0.0 0.0 114192 7796 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15220 0.0 0.0 114060 7316 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15222 0.0 0.0 114196 7788 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 15373 0.0 0.0 61336 2016 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 540 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 536 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 992 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1192 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 980 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 980 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 996 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1236 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 972 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 640 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 896 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 524 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 101896 2128 ? D Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 nobody 16788 0.0 0.0 114060 6372 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 16793 0.0 0.0 114736 6124 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 17155 0.0 0.0 74296 4436 ? S 01:16 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH nobody 17173 0.0 0.0 114060 6556 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17195 0.0 0.0 106124 576 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 17233 0.1 0.0 106124 724 ? S 01:16 0:00 /bin/bash /bin/verifica-spf.sh nobody 17299 0.0 0.0 114060 6532 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17310 0.0 0.0 114060 6520 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17311 0.0 0.0 114060 6584 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17312 0.0 0.0 44164 4152 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 699 root 17313 0.0 0.0 44164 4044 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs root 17314 0.0 0.0 44164 4080 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 788 root 17325 0.0 0.0 106124 396 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 17330 0.0 0.0 100988 536 ? D 01:16 0:00 cat /var/log/exim_mainlog root 17335 0.0 0.0 103360 676 ? S 01:16 0:00 grep 104.130.11.193 nobody 17408 0.0 0.0 114060 6800 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 17454 0.0 0.0 74880 992 ? S 01:16 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 17455 0.0 0.0 114736 6116 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17485 0.0 0.0 104492 6208 ? D 01:16 0:00 tailwatchd - chkservd root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18724 0.0 0.0 106124 816 ? S 01:16 0:00 /bin/bash /bin/brut-filtro.sh root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 1.1 0.0 240980 1852 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1260 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.8 0.0 23760 8700 ? S 00:50 1:35 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 404 ? S 00:48 0:00 /usr/bin/php nobody 19844 0.0 0.0 116120 6880 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start root 19963 0.0 0.0 136824 128 ? S 01:16 0:00 pure-ftpd (PRIV) lman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 996 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1236 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 972 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 640 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 896 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 524 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 101896 2128 ? D Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 nobody 16788 0.0 0.0 114060 6372 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 16793 0.0 0.0 114736 6124 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 17155 0.0 0.0 74296 4436 ? S 01:16 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH nobody 17173 0.0 0.0 114060 6556 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17195 0.0 0.0 106124 576 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 17233 0.1 0.0 106124 724 ? S 01:16 0:00 /bin/bash /bin/verifica-spf.sh nobody 17299 0.0 0.0 114060 6532 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17310 0.0 0.0 114060 6520 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17311 0.0 0.0 114060 6584 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17312 0.0 0.0 44164 4152 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 699 root 17313 0.0 0.0 44164 4044 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs root 17314 0.0 0.0 44164 4080 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 788 root 17325 0.0 0.0 106124 396 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 17330 0.0 0.0 100988 536 ? D 01:16 0:00 cat /var/log/exim_mainlog root 17335 0.0 0.0 103360 676 ? S 01:16 0:00 grep 104.130.11.193 nobody 17408 0.0 0.0 114060 6800 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 17454 0.0 0.0 74880 992 ? S 01:16 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 17455 0.0 0.0 114736 6116 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17485 0.0 0.0 104492 6208 ? D 01:16 0:00 tailwatchd - chkservd root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18724 0.0 0.0 106124 816 ? S 01:16 0:00 /bin/bash /bin/brut-filtro.sh root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 1.1 0.0 240980 1852 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1260 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.8 0.0 23760 8700 ? S 00:50 1:35 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 404 ? S 00:48 0:00 /usr/bin/php nobody 19844 0.0 0.0 116120 6880 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start root 19963 0.0 0.0 136824 128 ? S 01:16 0:00 pure-ftpd (PRIV) nobody 19971 0.0 0.0 115516 7264 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19979 0.0 0.0 114060 7192 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19980 0.0 0.0 114060 7200 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19981 0.0 0.0 114208 7516 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19982 0.0 0.0 114060 7200 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19983 0.0 0.0 114060 7232 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 19988 0.0 0.0 70900 2932 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19989 0.0 0.0 70900 2936 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19990 0.0 0.0 70904 2952 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19991 0.0 0.0 70900 2928 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19995 0.0 0.0 70904 2928 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19996 0.0 0.0 70904 2932 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19997 0.0 0.0 70904 2928 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19998 0.0 0.0 70904 2932 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20025 0.0 0.0 34668 3228 ? D 01:16 0:00 /usr/local/cpanel/bin/pureauth nobody 20028 0.0 0.0 114196 7872 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20029 0.0 0.0 114060 7432 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20030 0.0 0.0 114196 7780 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20031 0.0 0.0 114060 7248 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20032 0.0 0.0 115696 6924 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 20041 0.0 0.0 74880 876 ? S 01:16 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20042 0.0 0.0 114060 7308 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20046 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20047 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20048 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20049 0.0 0.0 4356 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20052 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20054 0.0 0.0 106120 960 ? Ss 01:16 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 20055 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 20056 0.0 0.0 4356 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 20057 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20058 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/s nobody 19971 0.0 0.0 115516 7264 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19979 0.0 0.0 114060 7192 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19980 0.0 0.0 114060 7200 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19981 0.0 0.0 114208 7516 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19982 0.0 0.0 114060 7200 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19983 0.0 0.0 114060 7232 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 19988 0.0 0.0 70900 2932 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19989 0.0 0.0 70900 2936 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19990 0.0 0.0 70904 2952 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19991 0.0 0.0 70900 2928 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19995 0.0 0.0 70904 2928 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19996 0.0 0.0 70904 2932 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19997 0.0 0.0 70904 2928 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 19998 0.0 0.0 70904 2932 ? S 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20025 0.0 0.0 34668 3228 ? D 01:16 0:00 /usr/local/cpanel/bin/pureauth nobody 20028 0.0 0.0 114196 7872 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20029 0.0 0.0 114060 7432 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20030 0.0 0.0 114196 7780 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20031 0.0 0.0 114060 7248 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20032 0.0 0.0 115696 6924 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 20041 0.0 0.0 74880 876 ? S 01:16 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20042 0.0 0.0 114060 7308 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20046 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20047 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20048 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20049 0.0 0.0 4356 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20052 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20054 0.0 0.0 106120 960 ? Ss 01:16 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 20055 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 20056 0.0 0.0 4356 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 20057 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20058 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 20059 0.0 0.0 114060 6892 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20060 0.0 0.0 114060 7044 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20061 0.0 0.0 106120 960 ? Ss 01:16 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 20063 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20065 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20066 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 1232 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20068 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 20069 0.0 0.0 106120 976 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20071 0.0 0.0 106120 1040 ? Ss 01:16 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 20072 0.0 0.0 4352 536 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20073 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 20074 0.0 0.0 106120 1048 ? Ss 01:16 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 20079 0.0 0.0 106120 1048 ? Ss 01:16 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 20080 0.0 0.0 106120 1044 ? Ss 01:16 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 20082 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations nobody 20083 0.0 0.0 114060 7072 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20084 0.0 0.0 114060 7048 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20085 0.0 0.0 114060 7148 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20086 0.0 0.0 114060 6868 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20091 0.0 0.0 70900 2940 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20092 0.0 0.0 70904 2932 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20093 0.0 0.0 70900 2936 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20104 0.0 0.0 70900 2948 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20105 0.0 0.0 74880 880 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20106 0.0 0.0 106124 532 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20107 0.0 0.0 100988 544 ? D 01:17 0:00 cat /var/log/messages root 20108 0.0 0.0 103360 668 ? S 01:17 0:00 grep 104.130.11.193 root 20109 0.0 0.0 103360 668 ? S 01:17 0:00 grep user root 20111 0.0 0.0 106124 1136 ? S 01:17 0:00 /bin/bash /bin/verifica-spf.sh root 20114 0.0 0.0 139932 2948 ? D 01:17 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 20115 0.0 0.0 70904 2948 ? S 01:17 tats.php >/dev/null 2>&1 nobody 20059 0.0 0.0 114060 6892 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20060 0.0 0.0 114060 7044 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20061 0.0 0.0 106120 960 ? Ss 01:16 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 20063 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20065 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20066 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 1232 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20068 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 20069 0.0 0.0 106120 976 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20071 0.0 0.0 106120 1040 ? Ss 01:16 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 20072 0.0 0.0 4352 536 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20073 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 20074 0.0 0.0 106120 1048 ? Ss 01:16 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 20079 0.0 0.0 106120 1048 ? Ss 01:16 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 20080 0.0 0.0 106120 1044 ? Ss 01:16 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 20082 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations nobody 20083 0.0 0.0 114060 7072 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20084 0.0 0.0 114060 7048 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20085 0.0 0.0 114060 7148 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20086 0.0 0.0 114060 6868 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20091 0.0 0.0 70900 2940 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20092 0.0 0.0 70904 2932 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20093 0.0 0.0 70900 2936 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20104 0.0 0.0 70900 2948 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20105 0.0 0.0 74880 880 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20106 0.0 0.0 106124 532 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20107 0.0 0.0 100988 544 ? D 01:17 0:00 cat /var/log/messages root 20108 0.0 0.0 103360 668 ? S 01:17 0:00 grep 104.130.11.193 root 20109 0.0 0.0 103360 668 ? S 01:17 0:00 grep user root 20111 0.0 0.0 106124 1136 ? S 01:17 0:00 /bin/bash /bin/verifica-spf.sh root 20114 0.0 0.0 139932 2948 ? D 01:17 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 20115 0.0 0.0 70904 2948 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20116 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20117 0.0 0.0 142224 1160 ? D 01:17 0:00 crond root 20118 0.0 0.0 142224 1160 ? D 01:17 0:00 crond root 20119 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20120 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20121 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20122 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20123 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20124 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20125 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20126 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20127 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20128 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20129 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20130 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20131 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20132 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20133 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20134 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20135 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20136 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20137 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20138 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20139 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20140 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20141 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20142 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20143 0.0 0.0 142224 1156 ? D 01:17 0:00 crond root 20144 0.0 0.0 142224 1156 ? D 01:17 0:00 crond root 20145 0.0 0.0 142224 1156 ? D 01:17 0:00 crond root 20146 0.0 0.0 142224 1160 ? D 01:17 0:00 crond root 20152 0.0 0.0 127144 2796 ? D 01:17 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 20154 0.0 0.0 70904 2940 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20155 0.0 0.0 70900 2916 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20177 0.0 0.0 106124 1168 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] mailnull 20222 0.0 0.0 79056 1664 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20258 0.0 0.0 114060 6912 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20274 0.0 0.0 106120 1220 ? S 01:17 0:00 /bin/bash /bin/bloqueia-envio.sh mailnull 20319 0.0 0.0 74880 1440 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 20355 0.0 0.0 74880 1428 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20356 0.0 0.0 114060 6452 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20357 0.0 0.0 114060 6456 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20358 0.0 0.0 114060 6460 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20359 0.0 0.0 114060 6464 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20360 0.0 0.0 114060 6696 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start mailnull 20370 0.0 0.0 74012 1228 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20378 0.0 0.0 106124 388 ? S 01:17 0:00 /bi0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20116 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20117 0.0 0.0 142224 1160 ? D 01:17 0:00 crond root 20118 0.0 0.0 142224 1160 ? D 01:17 0:00 crond root 20119 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20120 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20121 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20122 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20123 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20124 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20125 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20126 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20127 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20128 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20129 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20130 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20131 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20132 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20133 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20134 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20135 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20136 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20137 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20138 0.0 0.0 142224 1164 ? D 01:17 0:00 crond root 20139 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20140 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20141 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20142 0.0 0.0 142224 1168 ? D 01:17 0:00 crond root 20143 0.0 0.0 142224 1156 ? D 01:17 0:00 crond root 20144 0.0 0.0 142224 1156 ? D 01:17 0:00 crond root 20145 0.0 0.0 142224 1156 ? D 01:17 0:00 crond root 20146 0.0 0.0 142224 1160 ? D 01:17 0:00 crond root 20152 0.0 0.0 127144 2796 ? D 01:17 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 20154 0.0 0.0 70904 2940 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20155 0.0 0.0 70900 2916 ? S 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20177 0.0 0.0 106124 1168 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] mailnull 20222 0.0 0.0 79056 1664 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20258 0.0 0.0 114060 6912 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20274 0.0 0.0 106120 1220 ? S 01:17 0:00 /bin/bash /bin/bloqueia-envio.sh mailnull 20319 0.0 0.0 74880 1440 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 20355 0.0 0.0 74880 1428 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20356 0.0 0.0 114060 6452 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20357 0.0 0.0 114060 6456 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20358 0.0 0.0 114060 6460 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20359 0.0 0.0 114060 6464 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20360 0.0 0.0 114060 6696 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start mailnull 20370 0.0 0.0 74012 1228 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20378 0.0 0.0 106124 388 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20379 0.0 0.0 100992 580 ? D 01:17 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt root 20380 0.0 0.0 103360 812 ? S 01:17 0:00 grep 104.130.11.193 mailnull 20384 0.0 0.0 74880 1228 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1hn/bash /bin/liberar-csf-brasil.sh root 20379 0.0 0.0 100992 580 ? D 01:17 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt root 20380 0.0 0.0 103360 812 ? S 01:17 0:00 grep 104.130.11.193 mailnull 20384 0.0 0.0 74880 1228 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20385 0.0 0.0 106120 1312 ? S 01:17 0:00 /bin/bash /bin/malv-block.sh root 20387 0.0 0.0 106124 1220 ? S 01:17 0:00 /bin/bash /bin/monitora-load.sh root 20388 0.0 0.0 106120 1036 ? S 01:17 0:00 /bin/bash /bin/corrigir-ips.sh root 20390 0.0 0.0 106120 1272 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh root 20391 0.0 0.0 19112 1108 ? S 01:17 0:00 dovecot/lmtp nobody 20406 0.0 0.0 114060 7296 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20410 0.0 0.0 114192 7336 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20411 0.0 0.0 114192 7160 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20412 0.0 0.0 114192 7136 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20413 0.0 0.0 114328 7236 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20414 0.0 0.0 114192 7152 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20415 0.0 0.0 114192 7048 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20416 0.0 0.0 114060 6500 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20417 0.0 0.0 114060 6484 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20418 0.0 0.0 114060 6496 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20419 0.0 0.0 114060 6500 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20420 0.0 0.0 114060 7116 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20421 0.0 0.0 114060 7276 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20422 0.0 0.0 114060 6752 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20425 0.0 0.0 114060 6748 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20426 0.0 0.0 114060 7088 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20427 0.0 0.0 114060 7272 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20429 0.0 0.0 106120 504 ? S 01:17 0:00 /bin/bash /bin/corrigir-ips.sh root 20431 0.0 0.0 138128 2480 ? D 01:17 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 20433 0.0 0.0 103360 840 ? S 01:17 0:00 grep sim root 20436 0.0 0.0 100976 656 ? S 01:17 0:00 wc -l wwwfacul 20446 0.0 0.0 265704 408 ? S 00:46 0:00 /usr/bin/php nobody 20447 0.0 0.0 114060 6496 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20448 0.0 0.0 114060 7136 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20449 0.0 0.0 114060 7248 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20474 0.0 0.0 114192 7428 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20478 0.0 0.0 106124 604 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20481 0.0 0.0 70904 3000 ? S 01:17 0:00 /usr/sbin/sendmail -f root -t mailnull 20482 0.0 0.0 74880 1308 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20656 1.1 0.0 106124 728 ? S 01:17 0:00 /bin/bash /bin/verifica-spf.sh root 20798 0.0 0.0 35124 2440 ? D 01:17 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply nobody 20800 0.0 0.0 116100 6476 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20801 0.0 0.0 119696 8236 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20802 0.0 0.0 119696 8640 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20803 0.0 0.0 119732 7844 ? D 01:17 0:00 /usr/l -oP /var/spool/exim/exim-daemon.pid root 20385 0.0 0.0 106120 1312 ? S 01:17 0:00 /bin/bash /bin/malv-block.sh root 20387 0.0 0.0 106124 1220 ? S 01:17 0:00 /bin/bash /bin/monitora-load.sh root 20388 0.0 0.0 106120 1036 ? S 01:17 0:00 /bin/bash /bin/corrigir-ips.sh root 20390 0.0 0.0 106120 1272 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh root 20391 0.0 0.0 19112 1108 ? S 01:17 0:00 dovecot/lmtp nobody 20406 0.0 0.0 114060 7296 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20410 0.0 0.0 114192 7336 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20411 0.0 0.0 114192 7160 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20412 0.0 0.0 114192 7136 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20413 0.0 0.0 114328 7236 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20414 0.0 0.0 114192 7152 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20415 0.0 0.0 114192 7048 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20416 0.0 0.0 114060 6500 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20417 0.0 0.0 114060 6484 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20418 0.0 0.0 114060 6496 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20419 0.0 0.0 114060 6500 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20420 0.0 0.0 114060 7116 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20421 0.0 0.0 114060 7276 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20422 0.0 0.0 114060 6752 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20425 0.0 0.0 114060 6748 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20426 0.0 0.0 114060 7088 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20427 0.0 0.0 114060 7272 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20429 0.0 0.0 106120 504 ? S 01:17 0:00 /bin/bash /bin/corrigir-ips.sh root 20431 0.0 0.0 138128 2480 ? D 01:17 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 20433 0.0 0.0 103360 840 ? S 01:17 0:00 grep sim root 20436 0.0 0.0 100976 656 ? S 01:17 0:00 wc -l wwwfacul 20446 0.0 0.0 265704 408 ? S 00:46 0:00 /usr/bin/php nobody 20447 0.0 0.0 114060 6496 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20448 0.0 0.0 114060 7136 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20449 0.0 0.0 114060 7248 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20474 0.0 0.0 114192 7428 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20478 0.0 0.0 106124 604 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20481 0.0 0.0 70904 3000 ? S 01:17 0:00 /usr/sbin/sendmail -f root -t mailnull 20482 0.0 0.0 74880 1308 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] root 20656 1.1 0.0 106124 728 ? S 01:17 0:00 /bin/bash /bin/verifica-spf.sh root 20798 0.0 0.0 35124 2440 ? D 01:17 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply nobody 20800 0.0 0.0 116100 6476 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20801 0.0 0.0 119696 8236 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20802 0.0 0.0 119696 8640 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20803 0.0 0.0 119732 7844 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20804 0.0 0.0 119696 8240 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20805 0.0 0.0 106124 396 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20806 0.0 0.0 100988 576 ? D 01:17 0:00 cat /var/log/exim_mainlog root 20807 0.0 0.0 103360 852 ? S 01:17 0:00 grep 104.130.11.193 root 20820 0.0 0.0 47448 984 ? D 01:17 0:00 mail -s LOAD ALTO admin@conectadohost.com.br wwwfacul 20831 0.0 0.0 263164 408 ? S 00:46 0:00 /usr/bin/php root 20869 0.0 0.0 70904 3016 ? S 01:17 0:00 send-mail -i -- admin@conectadohost.com.br root 20874 0.0 0.0 106120 1096 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f pdvxyz 23169 0.0 0.0 185472 268 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 440 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 320 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 308 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] icowebra 23714 0.0 0.0 194796 1196 ? S 01:11 0:00 /usr/bin/php nobody 23899 0.0 0.0 115284 7412 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 23901 0.0 0.0 115572 6496 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start icowebra 23992 0.0 0.0 194796 1296 ? S 01:11 0:00 /usr/bin/php nobody 24106 0.0 0.0 114500 5604 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] icowebra 24540 0.2 0.0 194796 588 ? S 00:59 0:02 /usr/bin/php icowebra 24551 0.2 0.0 194796 552 ? S 00:59 0:02 /usr/bin/php root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] suzantol 25425 0.2 0.0 219216 16900 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] maisg647 26560 0.0 0.0 241460 420 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 408 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 412 ? S Apr17 0:00 /usr/bin/php root 26612 0.0 0.0 106120 652 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh 860 26614 0.0 0.0 186420 412 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 412 ? S Apr17 0:00 /usr/bin/php conhecsc 26639 0.0 0.0 191244 11624 ? D 01:05 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 412 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 408 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 412 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 324 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 260 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 27399 0.0 0.0 114488 6632 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 27400 0.0 0.0 115156 6912 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start ferre461 27442 0.1 0.0 232664 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27534 0.1 0.0 210508 16916 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 ocal/apache/bin/httpd -k start nobody 20804 0.0 0.0 119696 8240 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20805 0.0 0.0 106124 396 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20806 0.0 0.0 100988 576 ? D 01:17 0:00 cat /var/log/exim_mainlog root 20807 0.0 0.0 103360 852 ? S 01:17 0:00 grep 104.130.11.193 root 20820 0.0 0.0 47448 984 ? D 01:17 0:00 mail -s LOAD ALTO admin@conectadohost.com.br wwwfacul 20831 0.0 0.0 263164 408 ? S 00:46 0:00 /usr/bin/php root 20869 0.0 0.0 70904 3016 ? S 01:17 0:00 send-mail -i -- admin@conectadohost.com.br root 20874 0.0 0.0 106120 1096 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f pdvxyz 23169 0.0 0.0 185472 268 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 440 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 320 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 308 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] icowebra 23714 0.0 0.0 194796 1196 ? S 01:11 0:00 /usr/bin/php nobody 23899 0.0 0.0 115284 7412 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 23901 0.0 0.0 115572 6496 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start icowebra 23992 0.0 0.0 194796 1296 ? S 01:11 0:00 /usr/bin/php nobody 24106 0.0 0.0 114500 5604 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] icowebra 24540 0.2 0.0 194796 588 ? S 00:59 0:02 /usr/bin/php icowebra 24551 0.2 0.0 194796 552 ? S 00:59 0:02 /usr/bin/php root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] suzantol 25425 0.2 0.0 219216 16900 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] maisg647 26560 0.0 0.0 241460 420 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 408 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 412 ? S Apr17 0:00 /usr/bin/php root 26612 0.0 0.0 106120 652 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh 860 26614 0.0 0.0 186420 412 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 412 ? S Apr17 0:00 /usr/bin/php conhecsc 26639 0.0 0.0 191244 11624 ? D 01:05 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 412 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 408 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 412 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 324 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 260 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 27399 0.0 0.0 114488 6632 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 27400 0.0 0.0 115156 6912 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start ferre461 27442 0.1 0.0 232664 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27534 0.1 0.0 210508 16916 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] radiosat 27560 0.0 0.0 185600 688 ? S 01:07 0:00 /usr/bin/php nobody 27566 0.0 0.0 119732 8776 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 27612 0.0 0.0 70904 3020 ? S 01:17 0:00 send-mail -i -- admin@conectadohost.com.br root 27613 0.0 0.0 106120 1256 ? S 01:17 0:00 /bin/bash /bin/malv2-block.sh facildia 27623 0.0 0.0 198808 16900 ? S 01:07 0:00 /usr/bin/php root 27694 0.0 0.0 106120 536 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh root 27696 0.0 0.0 59504 1544 ? D 01:17 0:00 nslookup 143.0.115.31 root 27698 0.0 0.0 103360 840 ? S 01:17 0:00 grep br root 27700 0.0 0.0 100976 652 ? S 01:17 0:00 wc -l root 27867 0.0 0.0 142436 700 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 464 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 608 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 668 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 18304 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 16904 ? S 01:07 0:00 /usr/bin/php nobody 28098 0.0 0.0 115732 6664 ? S 01:07 0:00 /usr/local/apache/bin/httpd -k start root 28527 0.0 0.0 106124 536 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 28528 0.0 0.0 100988 576 ? D 01:17 0:00 cat /usr/local/cpanel/logs/access_log root 28529 0.0 0.0 103360 848 ? S 01:17 0:00 grep 144.217.225.171 root 28530 0.0 0.0 103360 840 ? S 01:17 0:00 grep user root 28532 0.0 0.0 43964 372 ? D 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28551 0.0 0.0 106124 800 ? D 01:17 0:00 /bin/bash /bin/malv2-block.sh root 28602 0.0 0.0 106120 1256 ? S 01:17 0:00 /bin/bash /bin/malv2-block.sh root 28675 0.0 0.0 106124 788 ? D 01:17 0:00 /bin/bash /bin/malv2-block.sh root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] ecfoto 28919 0.0 0.0 185820 3932 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 6756 ? S 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.1 0.0 215808 16904 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] root 30851 0.3 0.0 221996 3924 ? Ds Apr16 6:21 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 186292 7292 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] 0 ? S 01:11 0:00 [kworker/u24:2] radiosat 27560 0.0 0.0 185600 688 ? S 01:07 0:00 /usr/bin/php nobody 27566 0.0 0.0 119732 8776 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 27612 0.0 0.0 70904 3020 ? S 01:17 0:00 send-mail -i -- admin@conectadohost.com.br root 27613 0.0 0.0 106120 1256 ? S 01:17 0:00 /bin/bash /bin/malv2-block.sh facildia 27623 0.0 0.0 198808 16900 ? S 01:07 0:00 /usr/bin/php root 27694 0.0 0.0 106120 536 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh root 27696 0.0 0.0 59504 1544 ? D 01:17 0:00 nslookup 143.0.115.31 root 27698 0.0 0.0 103360 840 ? S 01:17 0:00 grep br root 27700 0.0 0.0 100976 652 ? S 01:17 0:00 wc -l root 27867 0.0 0.0 142436 700 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 464 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 608 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 668 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 18304 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 16904 ? S 01:07 0:00 /usr/bin/php nobody 28098 0.0 0.0 115732 6664 ? S 01:07 0:00 /usr/local/apache/bin/httpd -k start root 28527 0.0 0.0 106124 536 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 28528 0.0 0.0 100988 576 ? D 01:17 0:00 cat /usr/local/cpanel/logs/access_log root 28529 0.0 0.0 103360 848 ? S 01:17 0:00 grep 144.217.225.171 root 28530 0.0 0.0 103360 840 ? S 01:17 0:00 grep user root 28532 0.0 0.0 43964 372 ? D 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28551 0.0 0.0 106124 800 ? D 01:17 0:00 /bin/bash /bin/malv2-block.sh root 28602 0.0 0.0 106120 1256 ? S 01:17 0:00 /bin/bash /bin/malv2-block.sh root 28675 0.0 0.0 106124 788 ? D 01:17 0:00 /bin/bash /bin/malv2-block.sh root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] ecfoto 28919 0.0 0.0 185820 3932 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 6756 ? S 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.1 0.0 215808 16904 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] root 30851 0.3 0.0 221996 3924 ? Ds Apr16 6:21 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 186292 7292 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 380 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:13 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 336 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 628 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 484 ? S Apr16 0:01 dovecot/anvil root 2024 0.0 0.0 169980 5860 ? D 01:18 0:00 lfd - (child) closing root 2025 0.0 0.0 169980 5868 ? D 01:18 0:00 lfd - (child) closing root 2026 0.0 0.0 169980 5872 ? D 01:18 0:00 lfd - (child) closing root 2027 0.0 0.0 169980 5864 ? D 01:18 0:00 lfd - (child) closing root 2028 0.0 0.0 169980 5868 ? D 01:18 0:00 lfd - (child) closing root 2029 0.0 0.0 169980 5872 ? D 01:18 0:00 lfd - (child) closing root 2030 0.0 0.0 169980 5876 ? D 01:18 0:00 lfd - (child) closing root 2031 0.0 0.0 169980 5880 ? D 01:18 0:00 lfd - (child) closing root 2037 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2038 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2039 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2040 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2041 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2042 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2043 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2044 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2045 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2046 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2047 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2048 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2049 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2050 0.0 0.0 142432 1368 ? D 01:18 0:00 CROND root 2051 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2052 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2054 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2055 0.0 0.0 142432 1368 ? D 01:18 0:00 CROND root 2056 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2057 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2058 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2059 0.0 0.0 142436 1304 ? S 01:18 0:00 CROND root 2060 0.0 0.0 142436 1308 ? S 01:18 0:00 CROND root 2061 0.0 0.0 142436 1308 ? S 01:18 0:00 CROND root 2062 0.0 0.0 142436 1308 ? S 01:18 0:00 CROND root 2063 0.0 0.0 142436 1308 ? S 01:18 0:00 CROND root 2064 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2065 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2066 0.0 0.0 142436 1300 ? S 01:18 0:00 CROND root 2067 0.0 0.0 142436 1296 ? S 01:18 0:00 CROND root 2089 0.0 0.0 169980 5884 ? D 01:18 0:00 lfd - (child) closing root 2090 0.0 0.0 169980 5884 ? D 01:18 0:00 lfd - (child) closing root 2091 0.0 0.0 169980 5884 ? D 01:18 0:00 lfd - (child) closing root 2092 0.0 0.0 169980 5888 ? D 01:18 0:00 lfd - (child) closing root 2093 0.0 0.0 169980 5884 ? D 01:18 0:00 lfd - (child) closing root 2094 0.0 0.0 169980 5856 ? D 01:18 0:00 lfd - (child) closing root 2095 0.0 0.0 169980 5892 ? D 01:18 0:00 lfd - (child) closing root 2111 0.0 0.0 169980 5860 ? D 01:18 0:00 lfd - (child) closing root 2112 0.0 0.0 169980 5860 ? D 01:18 0:00 lfd - (child) closing root 2113 0.0 0.0 169980 5864 ? D 01:18 0:00 lfd - (child) closing root 2114 0.0 0.0 169980 5864 ? D 01:18 0:00 lfd - (child) closing root 2115 0.0 0.0 169980 5864 ? D 01:18 0:00 lfd - (child) closing root 2116 0.0 0.0 169980 5864 ? D 01:18 0:00 lfd - (child) closing nobody 2139 0.0 0.0 114060 7028 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 2140 0.0 0.0 74880 1268 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2141 0.0 0.0 169980 5868 ? D 01:18 0:00 lfd - (child) closing root 2142 0.0 0.0 169980 5868 ? D 01:18 0:00 lfd - (child) closing root 2143 0.0 0.0 169980 5868 ? D 01:18 0:00 lfd - (child) closing root 2144 0.0 0.0 169980 5876 ? D 01:18 0:00 lfd - (child) closing root 2145 0.0 0.0 169980 5876 ? D 01:18 0:00 lfd - (child) closing nobody 2146 0.0 0.0 114060 7796 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2147 0.0 0.0 114060 7796 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2148 0.0 0.0 114060 7780 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2149 0.0 0.0 114060 7812 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2150 0.0 0.0 114060 7804 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2151 0.0 0.0 114060 7808 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2837 0.0 0.0 114060 7728 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2843 0.0 0.0 114060 7128 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 288 ? S 00:34 0:00 CROND conhecsc 3059 15.0 94.0 78261004 62096328 ? Ds 00:34 6:39 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115260 7220 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start nobody 3181 0.0 0.0 114060 7808 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 3182 0.0 0.0 114060 7808 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3183 0.0 0.0 169980 5880 ? D 01:18 0:00 lfd - (child) closing root 3184 0.0 0.0 169980 5880 ? D 01:18 0:00 lfd - (child) closing root 3185 0.0 0.0 169980 5880 ? D 01:18 0:00 lfd - (child) closing root 3186 0.0 0.0 169980 5880 ? D 01:18 0:00 lfd - (child) closing root 3187 0.0 0.0 169980 5880 ? D 01:18 0:00 lfd - (child) closing root 3188 0.0 0.0 169980 5880 ? D 01:18 0:00 lfd - (child) closing root 3189 0.0 0.0 169980 5888 ? D 01:18 0:00 lfd - (child) closing root 3190 0.0 0.0 169980 5888 ? D 01:18 0:00 lfd - (child) closing root 3191 0.0 0.0 169980 5888 ? D 01:18 0:00 lfd - (child) closing root 3192 0.0 0.0 169980 5888 ? D 01:18 0:00 lfd - (child) closing root 3278 0.0 0.0 106124 832 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh dovenull 3299 0.0 0.0 42760 488 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 492 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 588 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 896 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1824 ? D 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login dovecot 3321 0.0 0.0 27328 1080 ? D 00:45 0:00 dovecot/auth root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 416 ? S 00:47 0:00 /usr/bin/php root 4329 0.0 0.0 169980 5892 ? D 01:18 0:00 lfd - (child) closing root 4330 0.0 0.0 169980 5932 ? D 01:18 0:00 lfd - (child) closing root 4331 0.0 0.0 169980 5896 ? D 01:18 0:00 lfd - (child) closing root 4332 0.0 0.0 169980 5896 ? D 01:18 0:00 lfd - (child) closing root 4333 0.0 0.0 169980 5896 ? D 01:18 0:00 lfd - (child) closing root 4334 0.0 0.0 169980 5904 ? D 01:18 0:00 lfd - (child) closing root 4335 0.0 0.0 169980 5904 ? D 01:18 0:00 lfd - (child) closing root 4336 0.0 0.0 169980 5904 ? D 01:18 0:00 lfd - (child) closing root 4337 0.0 0.0 169980 5904 ? D 01:18 0:00 lfd - (child) closing root 4338 0.0 0.0 169980 5912 ? D 01:18 0:00 lfd - (child) closing root 4339 0.0 0.0 169980 5948 ? D 01:18 0:00 lfd - (child) closing nobody 4340 0.0 0.0 114060 7080 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4341 0.0 0.0 114060 7080 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4342 0.0 0.0 114060 7068 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4343 0.0 0.0 114060 7080 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 4380 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4381 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4382 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4383 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4384 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4385 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4386 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4387 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4388 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4389 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4390 0.0 0.0 169980 5916 ? D 01:18 0:00 lfd - (child) closing root 4391 0.0 0.0 169980 5920 ? D 01:18 0:00 lfd - (child) closing root 4392 0.0 0.0 169980 5920 ? D 01:18 0:00 lfd - (child) closing root 4393 0.0 0.0 169980 5924 ? D 01:18 0:00 lfd - (child) closing root 4394 0.0 0.0 169980 5928 ? D 01:18 0:00 lfd - (child) closing root 4395 0.0 0.0 169980 5928 ? D 01:18 0:00 lfd - (child) closing root 4396 0.0 0.0 169980 5932 ? D 01:18 0:00 lfd - (child) closing mailnull 4413 0.2 0.0 73952 7244 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 4414 0.3 0.0 73992 7412 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 4415 0.2 0.0 73996 7332 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 4444 0.0 0.0 169980 5936 ? D 01:18 0:00 lfd - (child) closing root 4445 0.0 0.0 169980 5940 ? D 01:18 0:00 lfd - (child) closing root 4446 0.0 0.0 169980 5940 ? D 01:18 0:00 lfd - (child) closing root 4447 0.0 0.0 169980 5944 ? D 01:18 0:00 lfd - (child) closing root 4448 0.0 0.0 169980 5944 ? D 01:18 0:00 lfd - (child) closing root 4449 0.0 0.0 169980 5944 ? D 01:18 0:00 lfd - (child) closing root 4450 0.0 0.0 169980 5944 ? D 01:18 0:00 lfd - (child) closing root 4451 0.0 0.0 169980 5944 ? D 01:18 0:00 lfd - (child) closing root 4452 0.0 0.0 169980 5944 ? D 01:18 0:00 lfd - (child) closing root 4453 0.0 0.0 169980 5944 ? D 01:18 0:00 lfd - (child) closing root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 532 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 5556 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 412 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 408 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] nobody 5674 0.0 0.0 112412 376 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 404 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 3532 ? S 01:01 0:00 /usr/bin/php root 6027 0.0 0.0 169980 5948 ? D 01:18 0:00 lfd - (child) closing root 6028 0.0 0.0 169980 5948 ? D 01:18 0:00 lfd - (child) closing root 6029 0.0 0.0 169980 5948 ? D 01:18 0:00 lfd - (child) closing root 6030 0.0 0.0 169980 5952 ? D 01:18 0:00 lfd - (child) closing icowebra 6242 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 328 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 6456 ? D Apr17 0:08 tailwatchd mysql 6514 18.4 0.1 6973904 120116 ? Sl Apr17 236:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6840 0.0 0.0 169980 5612 ? S 01:18 0:00 lfd - (child) Statistics... root 6841 0.0 0.0 169980 5612 ? S 01:18 0:00 lfd - (child) Statistics... icowebra 6842 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6843 0.0 0.0 169980 5620 ? S 01:18 0:00 lfd - (child) Statistics... root 6844 0.0 0.0 169980 5620 ? S 01:18 0:00 lfd - (child) Statistics... root 6845 0.0 0.0 169980 5620 ? S 01:18 0:00 lfd - (child) Statistics... root 6846 0.0 0.0 169980 5620 ? S 01:18 0:00 lfd - (child) Statistics... root 6847 0.0 0.0 169980 5620 ? S 01:18 0:00 lfd - (child) Statistics... root 6848 0.0 0.0 169980 5628 ? S 01:18 0:00 lfd - (child) Statistics... root 6849 0.0 0.0 169980 5628 ? S 01:18 0:00 lfd - (child) Statistics... root 6850 0.0 0.0 169980 5628 ? S 01:18 0:00 lfd - (child) Statistics... root 6851 0.0 0.0 169980 5628 ? S 01:18 0:00 lfd - (child) Statistics... icowebra 6855 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php postgres 6868 0.0 0.0 215388 660 ? Ds 01:18 0:00 postgres: autovacuum worker process root 6869 0.0 0.0 169980 5632 ? S 01:18 0:00 lfd - (child) Statistics... root 6870 0.0 0.0 169980 5632 ? S 01:18 0:00 lfd - (child) Statistics... root 6871 0.0 0.0 169980 5632 ? S 01:18 0:00 lfd - (child) Statistics... root 7021 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send 992 7038 0.0 0.0 184964 404 ? S Apr17 0:00 /usr/bin/php root 7334 0.0 0.0 74292 4892 ? S 01:12 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH mailnull 7499 0.0 0.0 74248 2396 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7500 0.0 0.0 169980 8388 ? D 01:12 0:00 lfd - (child) closing root 7501 0.0 0.0 169980 8452 ? D 01:12 0:00 lfd - (child) closing root 7502 0.0 0.0 169980 8436 ? D 01:12 0:00 lfd - (child) closing root 7503 0.0 0.0 169980 8408 ? D 01:12 0:00 lfd - (child) closing root 7504 0.0 0.0 169980 8508 ? D 01:12 0:00 lfd - (child) closing nobody 7507 0.0 0.0 114192 7180 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7510 0.0 0.0 114192 7156 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7512 0.0 0.0 169980 8408 ? D 01:12 0:00 lfd - child closing nobody 7514 0.0 0.0 115520 8092 ? D 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7516 0.0 0.0 114192 7608 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7517 0.0 0.0 114196 7512 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7519 0.0 0.0 169980 8700 ? D 01:12 0:00 lfd - (child) closing root 7521 0.0 0.0 169980 8460 ? D 01:12 0:00 lfd - (child) closing root 7522 0.0 0.0 169980 8448 ? D 01:12 0:00 lfd - (child) closing root 7523 0.0 0.0 169980 8448 ? D 01:12 0:00 lfd - (child) closing root 7524 0.0 0.0 169980 8532 ? D 01:12 0:00 lfd - (child) closing root 7525 0.0 0.0 169980 8440 ? D 01:12 0:00 lfd - (child) closing root 7526 0.0 0.0 169980 8408 ? D 01:12 0:00 lfd - (child) closing root 7527 0.0 0.0 169980 8476 ? D 01:12 0:00 lfd - (child) closing root 7528 0.0 0.0 169980 8456 ? D 01:12 0:00 lfd - (child) closing root 7529 0.0 0.0 169980 8484 ? D 01:12 0:00 lfd - (child) closing mailnull 7530 0.0 0.0 74280 2932 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7532 0.0 0.0 170456 10192 ? D 01:12 0:00 lfd - (child) closing root 7533 0.0 0.0 169980 8496 ? D 01:12 0:00 lfd - (child) closing postgres 7534 0.0 0.0 216640 2552 ? Ds 01:12 0:00 postgres: autovacuum worker process castelof_banner root 7536 0.0 0.0 169980 8464 ? D 01:12 0:00 lfd - (child) closing root 7537 0.0 0.0 169980 8608 ? D 01:12 0:00 lfd - (child) closing root 7538 0.0 0.0 169980 8596 ? D 01:12 0:00 lfd - (child) closing root 7539 0.0 0.0 169980 8620 ? D 01:12 0:00 lfd - (child) closing root 7540 0.0 0.0 169980 8588 ? D 01:12 0:00 lfd - (child) closing root 7541 0.0 0.0 169980 8512 ? D 01:12 0:00 lfd - (child) closing root 7542 0.0 0.0 169980 8632 ? D 01:12 0:00 lfd - (child) closing root 7543 0.0 0.0 169980 8572 ? D 01:12 0:00 lfd - (child) closing root 7544 0.0 0.0 169980 8520 ? D 01:12 0:00 lfd - (child) closing root 7545 0.0 0.0 169980 8496 ? D 01:12 0:00 lfd - (child) closing root 7546 0.0 0.0 169980 8528 ? D 01:12 0:00 lfd - (child) closing root 7547 0.0 0.0 169980 8532 ? D 01:12 0:00 lfd - (child) closing root 7548 0.0 0.0 169980 8492 ? D 01:12 0:00 lfd - (child) closing root 7549 0.0 0.0 169980 8480 ? D 01:12 0:00 lfd - (child) closing root 7550 0.0 0.0 169980 8516 ? D 01:12 0:00 lfd - (child) closing root 7551 0.0 0.0 169980 8480 ? D 01:12 0:00 lfd - (child) closing root 7552 0.0 0.0 169980 8644 ? D 01:12 0:00 lfd - (child) closing root 7553 0.0 0.0 169980 8532 ? D 01:12 0:00 lfd - (child) closing mailnull 7554 0.0 0.0 74280 2364 ? D 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7561 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7562 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7563 0.0 0.0 142436 836 ? S 01:13 0:00 CROND root 7564 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7565 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7566 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7567 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7568 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7571 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7573 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7583 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7584 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7585 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7586 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7587 0.0 0.0 142436 964 ? S 01:13 0:00 CROND root 7588 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7589 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7591 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7593 0.0 0.0 169980 8604 ? D 01:13 0:00 lfd - (child) closing root 7594 0.0 0.0 169980 8608 ? D 01:13 0:00 lfd - (child) closing root 7595 0.0 0.0 169980 8568 ? D 01:13 0:00 lfd - (child) closing root 7596 0.0 0.0 169980 8652 ? D 01:13 0:00 lfd - (child) closing root 7597 0.0 0.0 169980 8596 ? D 01:13 0:00 lfd - (child) closing root 7598 0.0 0.0 169980 8640 ? D 01:13 0:00 lfd - (child) closing root 7599 0.0 0.0 169980 8624 ? D 01:13 0:00 lfd - (child) closing root 7600 0.0 0.0 169980 8632 ? D 01:13 0:00 lfd - (child) closing root 7601 0.0 0.0 169980 8620 ? D 01:13 0:00 lfd - (child) closing root 7602 0.0 0.0 169980 8644 ? D 01:13 0:00 lfd - (child) closing root 7603 0.0 0.0 169980 8532 ? D 01:13 0:00 lfd - (child) closing mailnull 7607 0.0 0.0 74280 2328 ? D 01:13 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7611 0.0 0.0 169980 8628 ? D 01:13 0:00 lfd - (child) closing root 7612 0.0 0.0 169980 8664 ? D 01:13 0:00 lfd - (child) closing root 7613 0.0 0.0 169980 8612 ? D 01:13 0:00 lfd - (child) closing root 7614 0.0 0.0 169980 8604 ? D 01:13 0:00 lfd - (child) closing root 7615 0.0 0.0 169980 8584 ? D 01:13 0:00 lfd - (child) closing root 7616 0.0 0.0 169980 8588 ? D 01:13 0:00 lfd - (child) closing root 7617 0.0 0.0 169980 8644 ? D 01:13 0:00 lfd - (child) closing nobody 7618 0.0 0.0 114192 7180 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7627 0.0 0.0 114196 7088 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114060 6472 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 7152 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7647 0.0 0.0 114328 7640 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7648 0.0 0.0 114332 7256 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7665 0.0 0.0 169980 8612 ? D 01:13 0:00 lfd - child closing root 7666 0.0 0.0 169980 8916 ? D 01:13 0:00 lfd - (child) closing root 7667 0.0 0.0 169980 8620 ? D 01:13 0:00 lfd - (child) closing root 7668 0.0 0.0 169980 8700 ? D 01:13 0:00 lfd - (child) closing root 7669 0.0 0.0 169980 8632 ? D 01:13 0:00 lfd - (child) closing postgres 7676 0.0 0.0 216640 2552 ? Ds 01:13 0:00 postgres: autovacuum worker process focasist_loja root 7677 0.0 0.0 169980 8560 ? D 01:13 0:00 lfd - (child) closing root 7678 0.0 0.0 169980 8704 ? D 01:13 0:00 lfd - (child) closing nobody 7679 0.0 0.0 114196 7120 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 7020 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7685 0.0 0.0 115520 8164 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7686 0.0 0.0 114192 7100 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 7268 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7689 0.0 0.0 114192 6988 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7693 0.0 0.0 114192 7764 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7695 0.0 0.0 114192 7644 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7696 0.0 0.0 114192 7520 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7697 0.0 0.0 114192 6820 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7702 0.0 0.0 114192 7164 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7704 0.0 0.0 114192 7300 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7705 0.0 0.0 114324 7160 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 114060 6444 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 8232 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7712 0.0 0.0 115520 8192 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7713 0.0 0.0 114192 7552 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7714 0.0 0.0 114192 7140 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 9420 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114324 7096 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7720 0.0 0.0 114196 7472 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7721 0.0 0.0 114192 7080 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7722 0.0 0.0 114060 6460 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7723 0.0 0.0 114192 7220 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7724 0.0 0.0 114192 7332 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7725 0.0 0.0 114192 7984 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114192 7428 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7727 0.0 0.0 114192 7472 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7728 0.0 0.0 114324 7644 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7735 0.0 0.0 169980 8664 ? D 01:13 0:00 child - aborting root 7738 0.0 0.0 106120 908 ? Ss 01:13 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 7740 0.0 0.0 106120 884 ? Ss 01:13 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 7742 0.0 0.0 106124 900 ? Ss 01:13 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 7750 0.0 0.0 106120 912 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7751 0.0 0.0 106120 896 ? Ss 01:13 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 7753 0.0 0.0 169980 8584 ? D 01:13 0:00 lfd - (child) closing root 7754 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 7755 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 7757 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7758 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 7759 0.0 0.0 4612 856 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 7760 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 7761 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 7765 0.0 0.0 4612 852 ? Ss 01:13 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 7771 0.0 0.0 46752 9864 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 7772 0.0 0.0 46752 9864 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 7773 0.0 0.0 46748 9860 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 7774 0.0 0.0 46748 9892 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 7775 0.0 0.0 46748 9860 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 7776 0.0 0.0 46752 9864 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 7777 0.0 0.0 46748 9864 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 7779 0.0 0.0 169980 8668 ? D 01:13 0:00 lfd - (child) closing root 7780 0.0 0.0 169980 8632 ? D 01:13 0:00 lfd - (child) closing root 7781 0.0 0.0 169980 8596 ? D 01:13 0:00 lfd - (child) closing root 7782 0.0 0.0 169980 8704 ? D 01:13 0:00 lfd - (child) closing root 7783 0.0 0.0 169980 8652 ? D 01:13 0:00 lfd - (child) closing root 7784 0.0 0.0 169980 8668 ? D 01:13 0:00 lfd - (child) closing root 7785 0.0 0.0 169980 8648 ? D 01:13 0:00 lfd - (child) closing root 7786 0.0 0.0 169980 8636 ? D 01:13 0:00 lfd - (child) closing root 7787 0.0 0.0 169980 8632 ? D 01:13 0:00 lfd - (child) closing root 7788 0.0 0.0 169980 8648 ? D 01:13 0:00 lfd - (child) closing root 7789 0.0 0.0 169980 8664 ? D 01:13 0:00 lfd - (child) closing root 7790 0.0 0.0 46752 9864 ? D 01:13 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 7791 0.0 0.0 169980 8692 ? D 01:13 0:00 lfd - (child) closing root 7792 0.0 0.0 169980 8664 ? D 01:13 0:00 lfd - (child) closing root 7793 0.0 0.0 169980 8704 ? D 01:13 0:00 lfd - (child) closing root 7794 0.0 0.0 169980 8620 ? D 01:13 0:00 lfd - (child) closing root 7795 0.0 0.0 169980 8648 ? D 01:13 0:00 lfd - (child) closing postgres 7798 0.0 0.0 216640 2768 ? Ds 01:13 0:00 postgres: autovacuum worker process fielgui_bdfgon root 7806 0.0 0.0 106124 1100 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7807 0.0 0.0 130232 4064 ? S 01:13 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 7811 0.0 0.0 140028 2976 ? D 01:13 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 7812 0.0 0.0 106120 900 ? S 01:13 0:00 /bin/bash /bin/corrigir-ips.sh root 7815 0.0 0.0 106120 1092 ? S 01:13 0:00 /bin/bash /bin/brut-filtro.sh nobody 7822 0.0 0.0 114192 7664 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7825 0.0 0.0 119696 9168 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 7826 0.0 0.0 114192 7392 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 7840 0.0 0.0 106120 496 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 7843 0.0 0.0 139260 1860 ? S 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 7845 0.0 0.0 103360 652 ? S 01:14 0:00 grep sim root 7846 0.0 0.0 100976 572 ? S 01:14 0:00 wc -l root 7864 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7865 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7866 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7867 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7868 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7869 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7870 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7871 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7874 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7876 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7879 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7883 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7886 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7888 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7889 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7890 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7891 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7892 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7893 0.0 0.0 142436 1024 ? S 01:14 0:00 CROND root 7894 0.0 0.0 142436 1020 ? S 01:14 0:00 CROND root 7895 0.0 0.0 142436 1020 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 114060 6472 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74016 1176 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8034 0.0 0.0 119696 9180 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8035 0.0 0.0 114192 7400 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8042 0.0 0.0 169980 8720 ? D 01:14 0:00 lfd - (child) closing root 8046 0.0 0.0 169980 8560 ? D 01:14 0:00 lfd - (child) closing root 8047 0.0 0.0 169980 8620 ? D 01:14 0:00 lfd - (child) closing root 8048 0.0 0.0 169980 8716 ? D 01:14 0:00 lfd - (child) closing root 8049 0.0 0.0 169980 8672 ? D 01:14 0:00 lfd - (child) closing root 8050 0.0 0.0 169980 8704 ? D 01:14 0:00 lfd - (child) closing root 8051 0.0 0.0 169980 8680 ? D 01:14 0:00 lfd - (child) closing root 8052 0.0 0.0 169980 8676 ? D 01:14 0:00 lfd - (child) closing root 8053 0.0 0.0 169980 8632 ? D 01:14 0:00 lfd - (child) closing root 8081 0.0 0.0 169980 8628 ? D 01:14 0:00 lfd - (child) closing root 8090 0.0 0.0 106124 568 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 3528 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114192 7596 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8157 0.0 0.0 114192 7540 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8158 0.0 0.0 114208 6736 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8160 0.0 0.0 114192 7416 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8161 0.0 0.0 114192 7460 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114060 6628 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8497 0.0 0.0 169980 8696 ? D 01:14 0:00 lfd - (child) closing root 8498 0.0 0.0 169980 8672 ? D 01:14 0:00 lfd - (child) closing root 8521 0.0 0.0 169980 8724 ? D 01:14 0:00 lfd - (child) closing root 8522 0.0 0.0 169980 8584 ? D 01:14 0:00 lfd - (child) closing nobody 8901 0.0 0.0 114460 6364 ? S 01:06 0:00 /usr/local/apache/bin/httpd -k start root 9117 0.0 0.0 169980 8716 ? D 01:14 0:00 lfd - (child) closing root 9118 0.0 0.0 169980 8712 ? D 01:14 0:00 lfd - (child) closing root 9119 0.0 0.0 169980 8712 ? D 01:14 0:00 lfd - (child) closing root 9120 0.0 0.0 169980 8748 ? D 01:14 0:00 lfd - (child) closing root 9194 0.0 0.0 169980 8732 ? D 01:14 0:00 lfd - (child) closing root 9197 0.0 0.0 169980 8760 ? D 01:14 0:00 lfd - (child) closing nobody 9247 0.0 0.0 128600 2632 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 9249 0.0 0.0 128600 2548 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9250 0.0 0.0 128600 2532 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 root 9252 0.0 0.0 0 0 ? Z 01:14 0:00 [checkpassword-r] root 9253 0.0 0.0 169980 8700 ? D 01:14 0:00 lfd - child closing root 9254 0.0 0.0 169980 8936 ? D 01:14 0:00 lfd - (child) closing nobody 9263 0.0 0.0 128596 2488 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9264 0.0 0.0 114060 6576 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9271 0.0 0.0 114060 6560 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9272 0.0 0.0 114060 6500 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9274 0.0 0.0 114060 6564 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9275 0.0 0.0 114060 6576 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114060 6472 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114060 6396 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9278 0.0 0.0 106120 904 ? Ss 01:14 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 9292 0.0 0.0 106120 940 ? Ss 01:14 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 9294 0.0 0.0 106120 932 ? Ss 01:14 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 9301 0.0 0.0 106120 932 ? Ss 01:14 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 9308 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 9309 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 127420 2820 ? D 01:14 0:00 php.cgi root 9325 0.0 0.0 106120 880 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9347 0.0 0.0 106120 1124 ? S 01:14 0:00 /bin/bash /bin/malv-block.sh root 9358 0.0 0.0 169980 8628 ? D 01:14 0:00 lfd - (child) closing root 9364 0.0 0.0 169980 8640 ? D 01:14 0:00 lfd - (child) closing root 9368 0.0 0.0 169980 8748 ? D 01:14 0:00 lfd - (child) closing root 9369 0.0 0.0 169980 8684 ? D 01:14 0:00 lfd - (child) closing root 9370 0.0 0.0 169980 8652 ? D 01:14 0:00 lfd - (child) closing root 9371 0.0 0.0 169980 8616 ? D 01:14 0:00 lfd - (child) closing root 9372 0.0 0.0 169980 8628 ? D 01:14 0:00 lfd - (child) closing root 9374 0.0 0.0 106120 496 ? S 01:14 0:00 /bin/bash /bin/corrigir-ips.sh root 9375 0.0 0.0 139260 1864 ? S 01:14 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 9376 0.0 0.0 103360 652 ? S 01:14 0:00 grep sim root 9377 0.0 0.0 100976 580 ? S 01:14 0:00 wc -l root 9399 0.0 0.0 140028 2976 ? D 01:14 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 9409 0.0 0.0 169980 8700 ? D 01:14 0:00 lfd - (child) closing root 9410 0.0 0.0 169980 8720 ? D 01:14 0:00 lfd - (child) closing root 9411 0.0 0.0 169980 8664 ? D 01:14 0:00 lfd - (child) closing root 9412 0.0 0.0 169980 8632 ? D 01:14 0:00 lfd - (child) closing root 9413 0.0 0.0 169980 8692 ? D 01:14 0:00 lfd - (child) closing root 9414 0.0 0.0 169980 8636 ? D 01:14 0:00 lfd - (child) closing root 9415 0.0 0.0 169980 8708 ? D 01:14 0:00 lfd - (child) closing root 9416 0.0 0.0 169980 8704 ? D 01:14 0:00 lfd - (child) closing root 9556 0.0 0.0 130232 4056 ? S 01:14 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 buffetlu 9577 0.0 0.0 200280 16900 ? S 01:02 0:00 /usr/bin/php mailnull 9590 0.2 0.0 71044 3084 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 9667 0.0 0.0 114060 8304 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 9743 0.0 0.0 106124 1096 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 9757 0.0 0.0 106120 1092 ? S 01:14 0:00 /bin/bash /bin/brut-filtro.sh root 9869 0.0 0.0 169980 8808 ? D 01:14 0:00 child - aborting root 10317 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/4:2] nobody 10623 0.0 0.0 114060 7812 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] root 10926 0.0 0.0 4640 204 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 316 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1496 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 224 ? Ss Apr16 0:00 /usr/sbin/sshd root 11169 0.0 0.0 106124 800 ? S 01:15 0:00 /bin/bash /bin/brut-filtro.sh root 11175 0.0 0.0 169980 8680 ? D 01:15 0:00 lfd - (child) closing root 11195 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11196 0.0 0.0 142436 844 ? S 01:15 0:00 CROND root 11197 0.0 0.0 142436 844 ? S 01:15 0:00 CROND root 11198 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11200 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11201 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11202 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11203 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11204 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11208 0.0 0.0 142436 860 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 876 ? S 01:01 0:00 /usr/bin/php root 11212 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND postgres 11213 0.0 0.0 215388 452 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 1000 ? S 01:15 0:00 CROND root 11220 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11223 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11224 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11225 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11226 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11227 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11228 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11229 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11230 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11231 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11232 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11235 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11236 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11240 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11241 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11242 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11243 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11244 0.0 0.0 142436 1048 ? S 01:15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 288 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 312 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 220 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 876 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ds Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 564 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114060 6408 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11351 0.0 0.0 114060 6436 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11352 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11362 0.0 0.0 169980 8776 ? D 01:15 0:00 lfd - (child) closing root 11363 0.1 0.0 169980 6148 ? Ds 00:00 0:08 lfd - processing nobody 11376 0.0 0.0 114060 6440 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11377 0.0 0.0 114060 6436 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11378 0.0 0.0 114060 6368 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11379 0.0 0.0 114060 6408 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11439 0.0 0.0 169980 8684 ? D 01:15 0:00 lfd - (child) closing root 11440 0.0 0.0 169980 8728 ? D 01:15 0:00 lfd - (child) closing root 11441 0.0 0.0 169980 8688 ? D 01:15 0:00 lfd - (child) closing root 11442 0.0 0.0 169980 8684 ? D 01:15 0:00 lfd - (child) closing root 11443 0.0 0.0 169980 8696 ? D 01:15 0:00 lfd - (child) closing root 11444 0.0 0.0 169980 8788 ? D 01:15 0:00 lfd - (child) closing root 11445 0.0 0.0 169980 8712 ? D 01:15 0:00 lfd - (child) closing root 11451 0.0 0.0 169980 8728 ? D 01:15 0:00 lfd - (child) closing root 11452 0.0 0.0 169980 8720 ? D 01:15 0:00 lfd - (child) closing root 11453 0.0 0.0 169980 8788 ? D 01:15 0:00 lfd - (child) closing noticias 11454 1.2 0.0 237856 17972 ? D 01:08 0:07 /usr/bin/php root 11459 0.0 0.0 169980 8716 ? D 01:15 0:00 lfd - (child) closing root 11461 0.0 0.0 169980 8704 ? D 01:15 0:00 lfd - (child) closing root 11462 0.0 0.0 169980 8664 ? D 01:15 0:00 lfd - (child) closing root 11463 0.0 0.0 169980 8720 ? D 01:15 0:00 lfd - (child) closing root 11464 0.0 0.0 169980 8688 ? D 01:15 0:00 lfd - (child) closing root 11465 0.0 0.0 169980 8796 ? D 01:15 0:00 lfd - (child) closing root 11466 0.0 0.0 169980 8732 ? D 01:15 0:00 lfd - (child) closing root 11467 0.0 0.0 169980 8772 ? D 01:15 0:00 lfd - (child) closing root 11468 0.0 0.0 169980 8704 ? D 01:15 0:00 lfd - (child) closing nobody 11485 0.0 0.0 116100 6884 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 8236 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start noticias 11551 0.1 0.0 206116 18900 ? D 01:10 0:00 /usr/bin/php nobody 11568 0.0 0.0 115516 6664 ? S 01:10 0:00 /usr/local/apache/bin/httpd -k start root 11592 0.1 0.0 171172 9492 ? D 01:10 0:00 lfd - child closing named 11603 0.5 0.0 745552 4556 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11628 0.2 0.0 236956 5608 ? S 01:10 0:01 spamd child root 11713 0.0 0.0 136204 68 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 524 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 188 ? Ss Apr16 0:00 /usr/sbin/atd icowebra 11779 0.0 0.0 194796 1200 ? S 01:10 0:00 /usr/bin/php 867 11821 0.3 0.0 224388 17580 ? D 01:08 0:02 /usr/bin/php nobody 11834 0.0 0.0 115520 6392 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 116224 6644 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start sistemam 11853 0.0 0.0 187276 868 ? S 01:08 0:00 /usr/bin/php queroupa 11862 0.0 0.0 198652 16900 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16904 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 18016 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 528 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12469 0.0 0.0 114060 6416 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12483 0.0 0.0 169980 8688 ? D 01:15 0:00 lfd - child closing root 12484 0.0 0.0 169980 9004 ? D 01:15 0:00 lfd - (child) closing nobody 12497 0.0 0.0 114060 6384 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12498 0.0 0.0 114060 6684 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12523 0.0 0.0 114060 6440 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12524 0.0 0.0 114060 6432 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114060 6444 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12526 0.0 0.0 114060 6404 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12535 0.0 0.0 169980 8704 ? D 01:15 0:00 lfd - (child) closing root 12540 0.0 0.0 106120 944 ? Ss 01:15 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 12541 0.0 0.0 106120 920 ? Ss 01:15 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 12544 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 12545 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12546 0.0 0.0 106120 932 ? Ss 01:15 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 12550 0.0 0.0 169980 8700 ? D 01:15 0:00 lfd - (child) closing root 12560 0.0 0.0 4108 220 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12561 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centrapw/pastasw/crons/pop.php root 12562 0.0 0.0 4108 224 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 220 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12565 0.0 0.0 169980 8744 ? D 01:15 0:00 lfd - (child) closing root 12566 0.0 0.0 4108 224 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 220 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12569 0.0 0.0 169980 8800 ? D 01:15 0:00 lfd - (child) closing root 12570 0.0 0.0 4108 220 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12572 0.0 0.0 4616 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c GET http://netstreamhost.com.br/conta/admin/cron.php root 12573 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/pipe/pipe.php root 12574 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12576 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/pipe/pipe.php root 12577 0.0 0.0 106120 940 ? Ss 01:15 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 12579 0.0 0.0 106120 944 ? Ss 01:15 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 12583 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12584 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/conectad/public_html/arearestrita/cron.php root 12585 0.0 0.0 170508 9428 ? D 01:15 0:00 lfd - (child) closing root 12587 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 12588 0.0 0.0 4352 552 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 12589 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:email:fetch root 12590 0.0 0.0 4612 856 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/pipe/pipe.php root 12591 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 12592 0.0 0.0 4612 852 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/streamhostnet/sistema/crons/cron.php root 12593 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 12594 0.0 0.0 4352 540 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 12596 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 12597 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 12598 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 12599 0.0 0.0 0 0 ? Z 01:15 0:00 [httpd] nobody 12600 0.0 0.0 114060 7740 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nossojor 12601 0.0 0.0 198320 17136 ? D 01:06 0:00 /usr/bin/php nobody 12602 0.0 0.0 114060 7760 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12603 0.0 0.0 114060 7760 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12604 0.0 0.0 114060 7964 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12605 0.0 0.0 114060 7752 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12606 0.0 0.0 114060 7784 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12607 0.0 0.0 114060 7752 ? D 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12608 0.0 0.0 4356 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 12609 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 12610 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 12611 0.0 0.0 4352 536 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 mailnull 12623 0.0 0.0 73972 6552 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12624 0.0 0.0 73952 6404 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12625 0.0 0.0 73968 6576 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12626 0.0 0.0 73964 6388 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root rkembala 12628 0.0 0.0 186792 4060 ? S 01:06 0:00 /usr/bin/php mailnull 12633 0.0 0.0 73996 6464 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 992 12634 0.0 0.0 187084 7616 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3540 ? S 01:06 0:00 /usr/bin/php mailnull 12636 0.0 0.0 73976 6456 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 12637 0.0 0.0 73964 6568 ? D 01:15 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 12638 0.0 0.0 136824 420 ? S 01:15 0:00 pure-ftpd (IDLE) root 12639 0.1 0.0 170456 7116 ? S 01:15 0:00 lfd - (child) (PT) checking user processes root 12644 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12645 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12646 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12647 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12654 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12655 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12657 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12664 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12667 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12668 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12670 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12671 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12672 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12673 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12675 0.0 0.0 142436 916 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 1148 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12677 0.0 0.0 133740 6784 ? D 01:16 0:00 /usr/local/cpanel/bin/dcpumon root 12678 0.0 0.0 106124 924 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 12684 0.0 0.0 130232 4084 ? S 01:16 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 12688 0.0 0.0 106120 1132 ? S 01:16 0:00 /bin/bash /bin/brut-filtro.sh root 12699 0.0 0.0 169980 8684 ? D 01:16 0:00 lfd - (child) closing root 12700 0.0 0.0 46748 10380 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 707 root 12701 0.0 0.0 46752 10384 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 522 root 12702 0.0 0.0 46752 10384 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1077 root 12703 0.0 0.0 46748 10380 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1084 nobody 12704 0.0 0.0 115572 7840 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 12705 0.0 0.0 114488 7896 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 12710 0.0 0.0 46748 10384 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 12722 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/0:2] root 12723 0.0 0.0 140028 3008 ? D 01:16 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php nobody 12759 0.0 0.0 116816 6940 ? D 01:04 0:00 /usr/local/apache/bin/httpd -k start nobody 12764 0.0 0.0 114060 6508 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3932 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 712 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5248 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13706 0.0 0.0 106124 496 ? S 01:16 0:00 /bin/bash /bin/corrigir-ips.sh root 13707 0.0 0.0 139260 2116 ? S 01:16 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 13708 0.0 0.0 103360 672 ? S 01:16 0:00 grep sim root 13709 0.0 0.0 100976 592 ? S 01:16 0:00 wc -l root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] nobody 13722 0.0 0.0 114060 6388 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13723 0.0 0.0 114060 6992 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13727 0.0 0.0 114060 7076 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 13738 0.0 0.0 73976 6516 ? D 01:16 0:00 send-mail -i -- admin@conectadohost.com.br root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 212 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 13956 0.0 0.0 106124 788 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 13958 0.0 0.0 106124 788 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 14245 0.0 0.0 106128 788 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 14250 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/9:0] nobody 14251 0.0 0.0 114736 6760 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14268 0.0 0.0 114060 7784 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14269 0.0 0.0 114060 7820 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14270 0.0 0.0 106120 1168 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-clientes.sh > /dev/null 2>&1 root 14272 0.0 0.0 106120 1176 ? Ss 01:18 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 14273 0.0 0.0 106120 1192 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-csf.sh > /dev/null 2>&1 root 14274 0.0 0.0 106120 1180 ? Ss 01:18 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 14275 0.0 0.0 106120 1164 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 14276 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 14277 0.0 0.0 106120 1164 ? Ss 01:18 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 14278 0.0 0.0 106120 1160 ? Ss 01:18 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 14280 0.0 0.0 106120 1156 ? Ss 01:18 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 14281 0.0 0.0 4352 600 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 14282 0.0 0.0 106120 1188 ? Ss 01:18 0:00 /bin/sh -c /bin/minuto-a-minuto.sh > /dev/null 2>&1 root 14284 0.0 0.0 106120 1192 ? Ss 01:18 0:00 /bin/sh -c /bin/block-malv.sh > /dev/null 2>&1 root 14285 0.0 0.0 106120 1156 ? Ss 01:18 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 14286 0.0 0.0 106120 1184 ? Ss 01:18 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 14287 0.0 0.0 106120 1180 ? Ss 01:18 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 nobody 14288 0.0 0.0 114060 7080 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14289 0.0 0.0 114060 6576 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 14290 0.1 0.0 71036 3096 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 14291 0.0 0.0 4352 588 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 14292 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 14293 0.0 0.0 4352 576 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 14294 0.0 0.0 4352 576 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 14295 0.0 0.0 4352 588 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 14296 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 14297 0.0 0.0 4352 600 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 14298 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 14304 0.0 0.0 4352 600 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 14305 0.0 0.0 4352 588 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 14306 0.0 0.0 142432 692 ? S 01:18 0:00 CROND root 14307 0.0 0.0 4352 584 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 14308 0.0 0.0 142432 692 ? S 01:18 0:00 CROND nobody 14326 0.0 0.0 114060 7832 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14327 0.0 0.0 114060 6576 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14328 0.0 0.0 114060 6576 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14329 0.0 0.0 114060 6576 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14330 0.0 0.0 114060 6576 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14355 0.0 0.0 114736 6792 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14356 0.0 0.0 169980 5828 ? D 01:18 0:00 lfd - (child) checking mail queue... root 14357 0.0 0.0 106124 1340 ? S 01:18 0:00 /bin/bash /bin/verifica-spf.sh root 14359 0.0 0.0 106124 1360 ? S 01:18 0:00 /bin/bash /bin/monitora-load.sh root 14360 0.0 0.0 106120 1304 ? S 01:18 0:00 /bin/bash /bin/liberar-clientes.sh root 14361 0.0 0.0 80108 600 ? D 01:18 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 14362 0.0 0.0 106120 1344 ? S 01:18 0:00 /bin/bash /bin/liberar-csf.sh root 14364 0.0 0.0 25108 976 ? D 01:18 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 14365 0.0 0.0 106128 1392 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14366 0.0 0.0 106120 1376 ? S 01:18 0:00 /bin/bash /bin/bloqueia-envio.sh nobody 14386 0.0 0.0 114736 6796 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14398 0.0 0.0 106120 1180 ? S 01:18 0:00 /bin/bash /bin/minuto-a-minuto.sh nobody 14400 0.0 0.0 114736 6808 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14401 0.0 0.0 114736 6800 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14402 0.0 0.0 17208 280 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 14407 0.0 0.0 8172 216 ? D 01:18 0:00 send-mail -i -- admin@conectadohost.com.br mailnull 14413 0.0 0.0 74876 1308 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 14422 0.0 0.0 114060 7820 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14425 0.0 0.0 106128 604 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14426 0.3 0.0 169980 5844 ? D 01:18 0:00 lfd - checking system exploit root 14427 0.0 0.0 106124 512 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 14428 0.0 0.0 106124 512 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 14429 0.0 0.0 59492 556 ? D 01:18 0:00 nslookup 177.206.155.39 root 14430 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 14431 0.0 0.0 59492 556 ? D 01:18 0:00 nslookup 177.206.155.39 root 14432 0.0 0.0 100976 648 ? S 01:18 0:00 wc -l root 14433 0.0 0.0 103360 840 ? S 01:18 0:00 grep br root 14434 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l root 14435 0.0 0.0 106128 512 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 14436 0.0 0.0 59492 556 ? D 01:18 0:00 nslookup 177.206.155.39 root 14437 0.0 0.0 103360 840 ? S 01:18 0:00 grep br root 14438 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l root 14456 0.0 0.0 36808 404 ? D 01:18 0:00 mail -s LOAD ALTO admin@conectadohost.com.br root 14458 0.0 0.0 106128 396 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14459 0.0 0.0 100992 568 ? D 01:18 0:00 cat /var/log/exim_mainlog root 14460 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 root 14461 0.0 0.0 106124 540 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 14462 0.0 0.0 59492 556 ? D 01:18 0:00 nslookup 177.134.101.246 root 14463 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 14464 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l root 14465 0.0 0.0 106120 1384 ? S 01:18 0:00 /bin/bash /bin/malv-block.sh root 14466 0.0 0.0 106120 1368 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh nobody 14470 0.0 0.0 114060 7872 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14471 0.0 0.0 114060 7776 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14472 0.0 0.0 6752 208 ? D 01:18 0:00 /bin/ls -1 /usr/local/rtm/scripts/daily root 14473 0.0 0.0 6752 208 ? D 01:18 0:00 /bin/ls -1 /usr/local/rtm/scripts/daily root 14474 0.0 0.0 106120 1172 ? S 01:18 0:00 /bin/bash /bin/corrigir-ips.sh root 14475 0.0 0.0 6752 208 ? D 01:18 0:00 /bin/ls -1 /usr/local/rtm/scripts/daily root 14477 0.0 0.0 106124 540 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 14479 0.0 0.0 106124 540 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 14480 0.0 0.0 59496 556 ? D 01:18 0:00 nslookup 144.217.34.53 root 14482 0.0 0.0 106124 536 ? S 01:18 0:00 /bin/bash /bin/brut-filtro.sh root 14483 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 14485 0.0 0.0 59492 552 ? D 01:18 0:00 nslookup 177.134.101.246 root 14486 0.0 0.0 100976 652 ? S 01:18 0:00 wc -l root 14487 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 14488 0.0 0.0 100980 652 ? S 01:18 0:00 wc -l root 14489 0.0 0.0 59492 556 ? D 01:18 0:00 nslookup 144.217.34.53 root 14490 0.0 0.0 103360 844 ? S 01:18 0:00 grep br root 14491 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l nobody 14499 0.0 0.0 114060 6444 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14500 0.0 0.0 114060 6456 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14501 0.0 0.0 114060 6252 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14502 0.0 0.0 114060 6508 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 14505 0.0 0.0 106120 1180 ? S 01:16 0:00 /bin/bash /bin/malv-block.sh root 14520 3.3 0.0 106124 728 ? S 01:18 0:00 /bin/bash /bin/verifica-spf.sh root 14529 0.0 0.0 106120 1352 ? S 01:18 0:00 /bin/bash /bin/block-malv.sh root 14532 0.0 0.0 106120 500 ? S 01:18 0:00 /bin/bash /bin/corrigir-ips.sh root 14533 0.0 0.0 6752 208 ? D 01:18 0:00 /bin/ls -1 /usr/local/rtm/scripts/daily root 14534 0.0 0.0 6876 172 ? D 01:18 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 14535 0.0 0.0 103360 844 ? S 01:18 0:00 grep sim root 14536 0.0 0.0 100976 656 ? S 01:18 0:00 wc -l root 14556 0.0 0.0 106120 560 ? S 01:18 0:00 /bin/bash /bin/minuto-a-minuto.sh root 14557 7.6 0.0 105308 768 ? R 01:18 0:00 netstat -anp root 14558 0.0 0.0 103360 844 ? S 01:18 0:00 grep tcp\|udp root 14559 0.0 0.0 106004 880 ? S 01:18 0:00 awk {print $5} root 14560 0.0 0.0 101016 576 ? S 01:18 0:00 cut -d: -f1 root 14567 0.0 0.0 155488 1808 ? S 01:18 0:00 sort root 14568 0.0 0.0 100976 576 ? S 01:18 0:00 uniq -c root 14569 0.0 0.0 155488 1816 ? S 01:18 0:00 sort -n root 14574 0.0 0.0 100988 552 ? D 01:18 0:00 cat /usr/local/cpanel/logs/cphulkd.log root 14575 3.0 0.0 108344 1184 ? R 01:18 0:00 ps aux root 14577 0.0 0.0 2860 152 ? D 01:18 0:00 iptables -D INPUT -s 138.94.202.0/24 -j DROP nobody 14603 0.0 0.0 114736 6736 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14604 0.0 0.0 169980 5728 ? D 01:18 0:00 lfd - child closing root 14916 0.0 0.0 192 4 ? D 01:18 0:00 [tail] root 14917 0.0 0.0 105308 800 ? S 01:18 0:00 sed s/IPP// root 14918 0.0 0.0 105308 796 ? S 01:18 0:00 sed s/G//g root 14919 0.0 0.0 106120 372 ? S 01:18 0:00 /bin/bash /bin/liberar-csf.sh root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] nobody 15187 0.0 0.0 114060 7804 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15188 0.0 0.0 114060 7704 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15189 0.0 0.0 114060 7800 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15190 0.0 0.0 114192 8404 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15191 0.0 0.0 114060 7704 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15193 0.0 0.0 114060 7732 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15205 0.0 0.0 114060 7716 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15206 0.0 0.0 114060 7696 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15207 0.0 0.0 116120 8308 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15208 0.0 0.0 114060 7716 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15210 0.0 0.0 114060 8040 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15219 0.0 0.0 114192 8368 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15220 0.0 0.0 114060 7964 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 15222 0.0 0.0 114196 8360 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start root 15373 0.0 0.0 61336 2016 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 540 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 536 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 992 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1192 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 980 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 980 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 996 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1236 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 972 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 640 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 896 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 524 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 25584 568 ? D Apr16 0:17 /usr/local/cpanel/libexec/cpsrvd-dormant --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 nobody 16788 0.0 0.0 114060 6372 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 16793 0.0 0.0 0 0 ? Z 01:16 0:00 [httpd] root 16989 0.0 0.0 160 4 ? D 01:18 0:00 [paste] mailnull 17155 0.0 0.0 74296 4436 ? S 01:16 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH nobody 17173 0.0 0.0 114060 6556 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17195 0.0 0.0 106124 576 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 17299 0.0 0.0 114060 6532 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17310 0.0 0.0 114060 6520 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17311 0.0 0.0 114060 6584 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17312 0.0 0.0 45880 8564 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 699 root 17313 0.0 0.0 46408 9556 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs root 17314 0.0 0.0 46408 9644 ? D 01:16 0:00 /usr/local/cpanel/bin/setupvirtfs 788 root 17325 0.0 0.0 106124 396 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 17330 0.0 0.0 100988 536 ? D 01:16 0:00 cat /var/log/exim_mainlog root 17335 0.0 0.0 103360 676 ? S 01:16 0:00 grep 104.130.11.193 nobody 17408 0.0 0.0 114060 6800 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17485 0.0 0.0 104492 6312 ? D 01:16 0:00 tailwatchd - chkservd root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18724 0.0 0.0 106124 816 ? S 01:16 0:00 /bin/bash /bin/brut-filtro.sh root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 1.0 0.0 240980 1792 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1260 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.8 0.0 23760 8612 ? S 00:50 1:35 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 404 ? S 00:48 0:00 /usr/bin/php nobody 19844 0.0 0.0 116120 6880 ? S 00:48 0:00 /usr/local/apache/bin/httpd -k start root 19963 0.0 0.0 136824 128 ? S 01:16 0:00 pure-ftpd (PRIV) nobody 19971 0.0 0.0 115516 7828 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19979 0.0 0.0 114060 7792 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19980 0.0 0.0 114060 7780 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19981 0.0 0.0 114208 8104 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19982 0.0 0.0 114060 7776 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 19983 0.0 0.0 114060 7796 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 19988 0.0 0.0 73968 7392 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 19989 0.1 0.0 73968 7232 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 19990 0.0 0.0 73980 7304 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 19991 0.0 0.0 73964 7256 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 19995 0.0 0.0 73968 7392 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 19996 0.0 0.0 73996 7396 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 19997 0.0 0.0 73980 7264 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 19998 0.0 0.0 74000 7308 ? D 01:16 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20025 0.0 0.0 35856 6104 ? D 01:16 0:00 /usr/local/cpanel/bin/pureauth nobody 20028 0.0 0.0 114196 8448 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20029 0.0 0.0 114060 8008 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20030 0.0 0.0 114196 8264 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20031 0.0 0.0 114060 7840 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20032 0.0 0.0 115696 7384 ? D 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 20041 0.0 0.0 74880 1080 ? D 01:16 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20042 0.0 0.0 114060 7304 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20046 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20047 0.0 0.0 106120 960 ? Ss 01:16 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20048 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20049 0.0 0.0 4356 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20052 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20054 0.0 0.0 106120 952 ? Ss 01:16 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 20056 0.0 0.0 4356 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 20057 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20058 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 20059 0.0 0.0 114060 6876 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20060 0.0 0.0 114060 7040 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20063 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20065 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20066 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 1216 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20068 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 20069 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20071 0.0 0.0 106120 1028 ? Ss 01:16 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 20072 0.0 0.0 4352 536 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20073 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 20074 0.0 0.0 106120 1036 ? Ss 01:16 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 20079 0.0 0.0 106120 1036 ? Ss 01:16 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 20080 0.0 0.0 106120 1032 ? Ss 01:16 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 20082 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations nobody 20083 0.0 0.0 114060 7056 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20084 0.0 0.0 114060 7044 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20085 0.0 0.0 114060 7144 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20086 0.0 0.0 114060 6852 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 20091 0.1 0.0 73964 7400 ? D 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20092 0.0 0.0 74000 7312 ? D 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20093 0.1 0.0 73976 7264 ? D 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20104 0.1 0.0 73996 7328 ? D 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20105 0.0 0.0 75092 1708 ? D 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20106 0.0 0.0 106124 532 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20107 0.0 0.0 100988 544 ? D 01:17 0:00 cat /var/log/messages root 20108 0.0 0.0 103360 668 ? S 01:17 0:00 grep 104.130.11.193 root 20109 0.0 0.0 103360 668 ? S 01:17 0:00 grep user root 20114 0.0 0.0 140028 3008 ? D 01:17 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php mailnull 20115 0.0 0.0 73996 7392 ? D 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20144 0.0 0.0 142436 1248 ? S 01:17 0:00 CROND root 20152 0.0 0.0 130232 4080 ? S 01:17 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 mailnull 20154 0.0 0.0 74000 7320 ? D 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 20155 0.0 0.0 73964 7408 ? D 01:17 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 20177 0.0 0.0 106124 1160 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] mailnull 20222 0.0 0.0 79056 1636 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20258 0.0 0.0 114060 8244 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start mailnull 20319 0.0 0.0 74880 1400 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 20355 0.0 0.0 74880 1388 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20356 0.0 0.0 114060 7752 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20357 0.0 0.0 114060 7828 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20358 0.0 0.0 114060 7820 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20359 0.0 0.0 114060 7844 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20360 0.0 0.0 114060 8072 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start mailnull 20370 0.0 0.0 74016 1388 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20378 0.0 0.0 106124 388 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20379 0.0 0.0 100992 580 ? D 01:17 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt root 20380 0.0 0.0 103360 812 ? S 01:17 0:00 grep 104.130.11.193 mailnull 20384 0.0 0.0 74880 1188 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20385 0.0 0.0 106120 1292 ? S 01:17 0:00 /bin/bash /bin/malv-block.sh root 20387 0.0 0.0 106124 1200 ? S 01:17 0:00 /bin/bash /bin/monitora-load.sh root 20388 0.0 0.0 106120 1020 ? S 01:17 0:00 /bin/bash /bin/corrigir-ips.sh root 20390 0.0 0.0 106120 1256 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh root 20391 0.0 0.0 19112 664 ? S 01:17 0:00 dovecot/lmtp nobody 20406 0.0 0.0 114060 7260 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20410 0.0 0.0 114192 8680 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20411 0.0 0.0 114192 8524 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20412 0.0 0.0 114192 8468 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20413 0.0 0.0 114328 8504 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20414 0.0 0.0 114192 8496 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20415 0.0 0.0 114192 8404 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20416 0.0 0.0 114060 7856 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20417 0.0 0.0 114060 7856 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20418 0.0 0.0 114060 7860 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20419 0.0 0.0 114060 7764 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20420 0.0 0.0 114060 7080 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20421 0.0 0.0 114060 7252 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20422 0.0 0.0 114060 8096 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20425 0.0 0.0 114060 8108 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20426 0.0 0.0 114060 7064 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20427 0.0 0.0 114060 7248 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20429 0.0 0.0 106120 504 ? S 01:17 0:00 /bin/bash /bin/corrigir-ips.sh root 20431 0.0 0.0 139260 2548 ? S 01:17 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 20433 0.0 0.0 103360 840 ? S 01:17 0:00 grep sim root 20436 0.0 0.0 100976 656 ? S 01:17 0:00 wc -l wwwfacul 20446 0.0 0.0 265704 408 ? S 00:46 0:00 /usr/bin/php nobody 20447 0.0 0.0 114060 7876 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20448 0.0 0.0 114060 7112 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20449 0.0 0.0 114060 7224 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20474 0.0 0.0 114192 8684 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20478 0.0 0.0 106124 604 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 20481 0.2 0.0 73940 7332 ? D 01:17 0:00 /usr/sbin/sendmail -f root -t mailnull 20482 0.0 0.0 74880 1260 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20533 0.0 0.0 0 0 ? D 00:55 0:00 [kworker/u24:0] root 20798 0.0 0.0 36312 5960 ? D 01:17 0:00 /usr/local/cpanel/bin/dovecot-wrap /usr/libexec/dovecot/checkpassword-reply nobody 20800 0.0 0.0 116100 7800 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20801 0.0 0.0 119696 9488 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20802 0.0 0.0 119696 9908 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20803 0.0 0.0 119732 9100 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20804 0.0 0.0 119696 9496 ? D 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20805 0.0 0.0 106124 396 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20806 0.0 0.0 100988 576 ? D 01:17 0:00 cat /var/log/exim_mainlog root 20807 0.0 0.0 103360 852 ? S 01:17 0:00 grep 104.130.11.193 wwwfacul 20831 0.0 0.0 263164 408 ? S 00:46 0:00 /usr/bin/php mailnull 20869 0.1 0.0 73940 7328 ? D 01:17 0:00 send-mail -i -- admin@conectadohost.com.br root 20874 0.0 0.0 106120 1080 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f pdvxyz 23169 0.0 0.0 185472 268 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 440 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 320 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 308 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] icowebra 23714 0.0 0.0 194796 1196 ? S 01:11 0:00 /usr/bin/php nobody 23899 0.0 0.0 115284 7380 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 23901 0.0 0.0 115572 6496 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start icowebra 23992 0.0 0.0 194796 1296 ? S 01:11 0:00 /usr/bin/php nobody 24106 0.0 0.0 114500 5604 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] icowebra 24540 0.2 0.0 194796 588 ? S 00:59 0:02 /usr/bin/php icowebra 24551 0.2 0.0 194796 552 ? S 00:59 0:02 /usr/bin/php root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] suzantol 25425 0.2 0.0 219216 16900 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] maisg647 26560 0.0 0.0 241460 420 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 408 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 412 ? S Apr17 0:00 /usr/bin/php root 26612 0.0 0.0 106124 844 ? S 01:17 0:00 /bin/bash /bin/brut-filtro.sh 860 26614 0.0 0.0 186420 412 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 412 ? S Apr17 0:00 /usr/bin/php conhecsc 26639 0.0 0.0 191244 11812 ? D 01:05 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 412 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 408 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 412 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 324 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 260 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 27399 0.0 0.0 114488 6632 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 27400 0.0 0.0 115156 7108 ? D 01:11 0:00 /usr/local/apache/bin/httpd -k start ferre461 27442 0.1 0.0 232664 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27534 0.1 0.0 210508 16916 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] radiosat 27560 0.0 0.0 185600 688 ? S 01:07 0:00 /usr/bin/php nobody 27566 0.0 0.0 119732 8724 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start mailnull 27612 0.2 0.0 73972 7248 ? D 01:17 0:00 send-mail -i -- admin@conectadohost.com.br root 27613 0.0 0.0 106120 1244 ? S 01:17 0:00 /bin/bash /bin/malv2-block.sh facildia 27623 0.0 0.0 198808 16900 ? S 01:07 0:00 /usr/bin/php root 27867 0.0 0.0 142436 700 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 464 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 608 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 668 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 18304 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 16904 ? S 01:07 0:00 /usr/bin/php nobody 28098 0.0 0.0 115732 6632 ? S 01:07 0:00 /usr/local/apache/bin/httpd -k start root 28527 0.0 0.0 106124 536 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 28528 0.0 0.0 100988 576 ? D 01:17 0:00 cat /usr/local/cpanel/logs/access_log root 28529 0.0 0.0 103360 848 ? S 01:17 0:00 grep 144.217.225.171 root 28530 0.0 0.0 103360 840 ? S 01:17 0:00 grep user root 28532 0.0 0.0 128596 2636 ? D 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28602 0.0 0.0 106120 1244 ? S 01:17 0:00 /bin/bash /bin/malv2-block.sh root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] ecfoto 28919 0.0 0.0 185820 3932 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 6724 ? S 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.1 0.0 215808 16904 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] root 30851 0.3 0.0 221996 4220 ? Ds Apr16 6:21 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 186292 7292 ? S 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 724 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:13 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? S Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 336 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 628 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 484 ? S Apr16 0:01 dovecot/anvil root 2024 0.0 0.0 169980 6036 ? D 01:18 0:00 lfd - (child) closing root 2025 0.0 0.0 169980 6044 ? D 01:18 0:00 lfd - (child) closing root 2026 0.0 0.0 169980 6048 ? D 01:18 0:00 lfd - (child) closing root 2027 0.0 0.0 169980 6040 ? D 01:18 0:00 lfd - (child) closing root 2028 0.0 0.0 169980 6044 ? D 01:18 0:00 lfd - (child) closing root 2029 0.0 0.0 169980 6048 ? D 01:18 0:00 lfd - (child) closing root 2030 0.0 0.0 169980 6052 ? D 01:18 0:00 lfd - (child) closing root 2031 0.0 0.0 169980 6056 ? D 01:18 0:00 lfd - (child) closing root 2038 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2039 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2040 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2041 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2042 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2043 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2044 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2046 0.0 0.0 142436 1288 ? S 01:18 0:00 CROND root 2052 0.0 0.0 142436 1288 ? S 01:18 0:00 CROND root 2059 0.0 0.0 142436 1288 ? S 01:18 0:00 CROND root 2060 0.0 0.0 142436 1292 ? S 01:18 0:00 CROND root 2061 0.0 0.0 142436 1292 ? S 01:18 0:00 CROND root 2062 0.0 0.0 142436 1292 ? S 01:18 0:00 CROND root 2063 0.0 0.0 142436 1292 ? S 01:18 0:00 CROND root 2064 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2065 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2066 0.0 0.0 142436 1284 ? S 01:18 0:00 CROND root 2067 0.0 0.0 142436 1280 ? S 01:18 0:00 CROND root 2089 0.0 0.0 169980 6060 ? D 01:18 0:00 lfd - (child) closing root 2090 0.0 0.0 169980 6064 ? D 01:18 0:00 lfd - (child) closing root 2091 0.0 0.0 169980 6064 ? D 01:18 0:00 lfd - (child) closing root 2092 0.0 0.0 169980 6064 ? D 01:18 0:00 lfd - (child) closing root 2093 0.0 0.0 169980 6060 ? D 01:18 0:00 lfd - (child) closing root 2094 0.0 0.0 169980 6080 ? D 01:18 0:00 lfd - (child) closing root 2095 0.0 0.0 169980 6068 ? D 01:18 0:00 lfd - (child) closing root 2111 0.0 0.0 169980 6084 ? D 01:18 0:00 lfd - (child) closing root 2112 0.0 0.0 169980 6084 ? D 01:18 0:00 lfd - (child) closing root 2113 0.0 0.0 169980 6088 ? D 01:18 0:00 lfd - (child) closing root 2114 0.0 0.0 169980 6088 ? D 01:18 0:00 lfd - (child) closing root 2115 0.0 0.0 169980 6088 ? D 01:18 0:00 lfd - (child) closing root 2116 0.0 0.0 169980 6088 ? D 01:18 0:00 lfd - (child) closing nobody 2139 0.0 0.0 114192 8180 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 2140 0.0 0.0 74880 2072 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 2141 0.0 0.0 169980 6092 ? D 01:18 0:00 lfd - (child) closing root 2142 0.0 0.0 169980 6092 ? D 01:18 0:00 lfd - (child) closing root 2143 0.0 0.0 169980 5988 ? D 01:18 0:00 lfd - (child) closing root 2144 0.0 0.0 169980 6096 ? D 01:18 0:00 lfd - (child) closing root 2145 0.0 0.0 169980 6100 ? D 01:18 0:00 lfd - (child) closing nobody 2837 0.0 0.0 114328 9096 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 2843 0.1 0.0 115520 9288 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 288 ? S 00:34 0:00 CROND conhecsc 3059 14.9 94.0 78261004 62087352 ? Ds 00:34 6:39 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115260 7216 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start root 3183 0.0 0.0 169980 5992 ? D 01:18 0:00 lfd - (child) closing root 3184 0.0 0.0 169980 6104 ? D 01:18 0:00 lfd - (child) closing root 3185 0.0 0.0 169980 5996 ? D 01:18 0:00 lfd - (child) closing root 3186 0.0 0.0 169980 6104 ? D 01:18 0:00 lfd - (child) closing root 3187 0.0 0.0 169980 6104 ? D 01:18 0:00 lfd - (child) closing root 3188 0.0 0.0 169980 6100 ? D 01:18 0:00 lfd - (child) closing root 3189 0.0 0.0 169980 6108 ? D 01:18 0:00 lfd - (child) closing root 3190 0.0 0.0 169980 6108 ? D 01:18 0:00 lfd - (child) closing root 3191 0.0 0.0 169980 6108 ? D 01:18 0:00 lfd - (child) closing root 3192 0.0 0.0 169980 6108 ? D 01:18 0:00 lfd - (child) closing dovenull 3299 0.0 0.0 42760 488 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 492 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 588 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 1068 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1964 ? D 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 416 ? S 00:47 0:00 /usr/bin/php root 4329 0.0 0.0 169980 6116 ? D 01:18 0:00 lfd - (child) closing root 4330 0.0 0.0 169980 6112 ? D 01:18 0:00 lfd - (child) closing root 4331 0.0 0.0 169980 6116 ? D 01:18 0:00 lfd - (child) closing root 4332 0.0 0.0 169980 6116 ? D 01:18 0:00 lfd - (child) closing root 4333 0.0 0.0 169980 6116 ? D 01:18 0:00 lfd - (child) closing root 4334 0.0 0.0 169980 6124 ? D 01:18 0:00 lfd - (child) closing root 4335 0.0 0.0 169980 6124 ? D 01:18 0:00 lfd - (child) closing root 4336 0.0 0.0 169980 6124 ? D 01:18 0:00 lfd - (child) closing root 4337 0.0 0.0 169980 6124 ? D 01:18 0:00 lfd - (child) closing root 4338 0.0 0.0 169980 6132 ? D 01:18 0:00 lfd - (child) closing root 4339 0.0 0.0 169980 6128 ? D 01:18 0:00 lfd - (child) closing nobody 4340 0.0 0.0 114192 8176 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4341 0.0 0.0 114192 8176 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4342 0.0 0.0 114192 8436 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 4343 0.1 0.0 115520 9252 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 4380 0.0 0.0 169980 6136 ? D 01:18 0:00 lfd - (child) closing root 4381 0.0 0.0 169980 6140 ? D 01:18 0:00 lfd - (child) closing root 4382 0.0 0.0 169980 6136 ? D 01:18 0:00 lfd - (child) closing root 4383 0.0 0.0 169980 6136 ? D 01:18 0:00 lfd - (child) closing root 4384 0.0 0.0 169980 6136 ? D 01:18 0:00 lfd - (child) closing root 4385 0.0 0.0 169980 6028 ? D 01:18 0:00 lfd - (child) closing root 4386 0.0 0.0 169980 6028 ? D 01:18 0:00 lfd - (child) closing root 4387 0.0 0.0 169980 6140 ? D 01:18 0:00 lfd - (child) closing root 4388 0.0 0.0 169980 6140 ? D 01:18 0:00 lfd - (child) closing root 4389 0.0 0.0 169980 6140 ? D 01:18 0:00 lfd - (child) closing root 4390 0.0 0.0 169980 6136 ? D 01:18 0:00 lfd - (child) closing root 4391 0.0 0.0 169980 6140 ? D 01:18 0:00 lfd - (child) closing root 4392 0.0 0.0 169980 6132 ? D 01:18 0:00 lfd - (child) closing root 4393 0.0 0.0 169980 6144 ? D 01:18 0:00 lfd - (child) closing root 4394 0.0 0.0 169980 6040 ? D 01:18 0:00 lfd - (child) closing root 4395 0.0 0.0 169980 6152 ? D 01:18 0:00 lfd - (child) closing root 4396 0.0 0.0 169980 6148 ? D 01:18 0:00 lfd - (child) closing root 4444 0.0 0.0 169980 6056 ? D 01:18 0:00 lfd - (child) closing root 4445 0.0 0.0 169980 6060 ? D 01:18 0:00 lfd - (child) closing root 4446 0.0 0.0 169980 6056 ? D 01:18 0:00 lfd - (child) closing root 4447 0.0 0.0 169980 6164 ? D 01:18 0:00 lfd - (child) closing root 4448 0.0 0.0 169980 6164 ? D 01:18 0:00 lfd - (child) closing root 4449 0.0 0.0 169980 6168 ? D 01:18 0:00 lfd - (child) closing root 4450 0.0 0.0 169980 6168 ? D 01:18 0:00 lfd - (child) closing root 4451 0.0 0.0 169980 6164 ? D 01:18 0:00 lfd - (child) closing root 4452 0.0 0.0 169980 6056 ? D 01:18 0:00 lfd - (child) closing root 4453 0.0 0.0 169980 6060 ? D 01:18 0:00 lfd - (child) closing root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 532 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 114736 5616 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 412 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 408 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] nobody 5674 0.0 0.0 112412 376 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 404 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 3532 ? S 01:01 0:00 /usr/bin/php root 6027 0.0 0.0 169980 6064 ? D 01:18 0:00 lfd - (child) closing root 6028 0.0 0.0 169980 6172 ? D 01:18 0:00 lfd - (child) closing root 6029 0.0 0.0 169980 6068 ? D 01:18 0:00 lfd - (child) closing root 6030 0.0 0.0 169980 6176 ? D 01:18 0:00 lfd - (child) closing icowebra 6242 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 328 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 6616 ? S Apr17 0:08 tailwatchd mysql 6514 18.4 0.1 6973904 120120 ? Sl Apr17 236:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6840 0.0 0.0 169980 6072 ? D 01:18 0:00 lfd - (child) closing root 6841 0.0 0.0 169980 6180 ? D 01:18 0:00 lfd - (child) closing icowebra 6842 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6843 0.0 0.0 169980 6080 ? D 01:18 0:00 lfd - (child) closing root 6844 0.0 0.0 169980 6080 ? D 01:18 0:00 lfd - (child) closing root 6845 0.0 0.0 169980 6080 ? D 01:18 0:00 lfd - (child) closing root 6846 0.0 0.0 169980 6076 ? D 01:18 0:00 lfd - (child) closing root 6847 0.0 0.0 169980 6080 ? D 01:18 0:00 lfd - (child) closing root 6848 0.0 0.0 169980 6084 ? D 01:18 0:00 lfd - (child) closing root 6849 0.0 0.0 169980 6088 ? D 01:18 0:00 lfd - (child) closing root 6850 0.0 0.0 169980 6080 ? D 01:18 0:00 lfd - (child) closing root 6851 0.0 0.0 169980 6084 ? D 01:18 0:00 lfd - (child) closing icowebra 6855 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php postgres 6868 0.0 0.0 216640 2172 ? Ds 01:18 0:00 postgres: autovacuum worker process root 6869 0.0 0.0 169980 6092 ? D 01:18 0:00 lfd - (child) closing root 6870 0.0 0.0 169980 6096 ? D 01:18 0:00 lfd - (child) closing root 6871 0.0 0.0 169980 6088 ? D 01:18 0:00 lfd - (child) closing root 7021 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send 992 7038 0.0 0.0 184964 404 ? S Apr17 0:00 /usr/bin/php root 7334 0.0 0.0 74292 4892 ? S 01:12 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH mailnull 7499 0.0 0.0 74248 2396 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 7507 0.0 0.0 114192 7180 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7510 0.0 0.0 114192 7156 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7514 0.0 0.0 115520 9208 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7517 0.0 0.0 114196 7508 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start postgres 7534 0.0 0.0 216640 2908 ? Ds 01:12 0:00 postgres: autovacuum worker process castelof_banner mailnull 7554 0.0 0.0 74280 2720 ? D 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7562 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7565 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7583 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7584 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7588 0.0 0.0 142436 848 ? S 01:13 0:00 CROND root 7589 0.0 0.0 142436 840 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7591 0.0 0.0 142436 848 ? S 01:13 0:00 CROND mailnull 7607 0.0 0.0 74280 2676 ? D 01:13 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 7618 0.0 0.0 114192 7432 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7627 0.0 0.0 114196 7088 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114060 6472 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 7152 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7647 0.0 0.0 114328 7816 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7648 0.0 0.0 114332 7256 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start postgres 7676 0.0 0.0 216640 2904 ? Ds 01:13 0:00 postgres: autovacuum worker process focasist_loja nobody 7679 0.0 0.0 114196 7984 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 7020 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7685 0.0 0.0 115520 9292 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7686 0.0 0.0 114192 7100 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 7264 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7689 0.0 0.0 114192 6988 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7693 0.0 0.0 0 0 ? Z 01:13 0:00 [httpd] nobody 7695 0.0 0.0 114192 8016 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7696 0.0 0.0 114192 7516 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7697 0.0 0.0 114192 6820 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7702 0.0 0.0 114192 8044 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7704 0.0 0.0 114192 7296 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7705 0.0 0.0 114324 7160 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 114060 6444 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 9360 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7712 0.0 0.0 115520 9456 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7713 0.0 0.0 114192 8176 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7714 0.0 0.0 114192 7140 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 10012 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114324 7344 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7720 0.0 0.0 114196 7468 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7721 0.0 0.0 114192 7324 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7722 0.0 0.0 114060 6460 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7723 0.0 0.0 115532 9360 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7724 0.0 0.0 114192 7328 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7725 0.0 0.0 114192 8464 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114192 7424 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7727 0.0 0.0 114192 7468 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7728 0.0 0.0 114324 8120 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7735 0.0 0.0 169980 8816 ? D 01:13 0:00 child - aborting root 7750 0.0 0.0 106120 912 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7751 0.0 0.0 106120 896 ? Ss 01:13 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 7754 0.0 0.0 4612 856 ? Ss 01:13 0:00 jailshell (pdvxyz) [25064] hell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 7755 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (agegames) [25066] ll -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 7757 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (inovesocialcom) [25067] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7759 0.0 0.0 4612 856 ? Ss 01:13 0:00 jailshell (posaufacom) [25068] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 7760 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (recordho) [25063] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 7761 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (zedeveva) [25061] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 7765 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (centralnetstream) [25062] p -q /home/centralnetstream/pastasw/crons/cron.php escalations postgres 7798 0.0 0.0 216640 3304 ? Ds 01:13 0:00 postgres: autovacuum worker process fielgui_bdfgon root 7806 0.0 0.0 106124 1100 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7811 0.0 0.0 240340 5376 ? D 01:13 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php nobody 7822 0.0 0.0 114192 7912 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7825 0.0 0.0 119696 9564 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 7826 0.0 0.0 114192 7388 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 7879 0.0 0.0 142436 916 ? S 01:14 0:00 CROND root 7886 0.0 0.0 142436 916 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 114060 6472 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74280 2320 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8034 0.0 0.0 119696 10000 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8035 0.0 0.0 114192 7396 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8090 0.0 0.0 106124 580 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 3528 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114192 7592 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8157 0.0 0.0 115520 9436 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8158 0.0 0.0 115612 9168 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8160 0.0 0.0 114192 7412 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8161 0.0 0.0 114192 7456 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114060 6628 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8901 0.0 0.0 114460 6364 ? S 01:06 0:00 /usr/local/apache/bin/httpd -k start nobody 9247 0.0 0.0 130428 4120 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 9249 0.0 0.0 130428 4128 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9250 0.0 0.0 130428 4136 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9263 0.0 0.0 130424 4128 ? D 01:14 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 9264 0.0 0.0 114060 6576 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9271 0.0 0.0 115520 9020 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9272 0.0 0.0 114196 7936 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9274 0.0 0.0 115520 9004 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9275 0.0 0.0 114192 8028 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114196 7652 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114196 7792 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9294 0.0 0.0 106120 932 ? Ss 01:14 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 9308 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 128708 3380 ? D 01:14 0:00 php.cgi root 9399 0.0 0.0 240340 5360 ? D 01:14 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php buffetlu 9577 0.0 0.0 200280 16900 ? S 01:02 0:00 /usr/bin/php root 9743 0.0 0.0 106124 1096 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 9869 0.0 0.0 169980 8936 ? D 01:14 0:00 child - aborting root 10317 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/4:2] root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] root 10926 0.0 0.0 4640 204 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 316 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1544 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 224 ? Ss Apr16 0:00 /usr/sbin/sshd root 11196 0.0 0.0 142436 844 ? S 01:15 0:00 CROND root 11197 0.0 0.0 142440 1020 ? S 01:15 0:00 CROND root 11198 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11201 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11202 0.0 0.0 142440 1012 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 876 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 452 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 1000 ? S 01:15 0:00 CROND root 11223 0.0 0.0 142436 860 ? S 01:15 0:00 CROND root 11224 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11225 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11226 0.0 0.0 142440 1020 ? S 01:15 0:00 CROND root 11227 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11229 0.0 0.0 142440 1012 ? S 01:15 0:00 CROND root 11230 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11231 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11232 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11235 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11236 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142436 848 ? S 01:15 0:00 CROND root 11240 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11241 0.0 0.0 142436 1052 ? S 01:15 0:00 CROND root 11242 0.0 0.0 142436 856 ? S 01:15 0:00 CROND root 11243 0.0 0.0 142436 1048 ? S 01:15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 288 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 312 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 220 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 884 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 564 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114060 6604 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11351 0.0 0.0 115520 8948 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11352 0.0 0.0 114060 6852 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 11363 0.1 0.0 127768 3896 ? Ds 00:00 0:08 /usr/local/cpanel/3rdparty/bin/perl /usr/sbin/lfd nobody 11376 0.0 0.0 114192 8160 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11377 0.0 0.0 114196 7940 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11378 0.0 0.0 114192 8052 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11379 0.0 0.0 114192 8100 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11485 0.0 0.0 116100 7348 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 8232 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start nobody 11568 0.0 0.0 115516 7512 ? S 01:10 0:00 /usr/local/apache/bin/httpd -k start named 11603 0.5 0.0 745552 4692 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11628 0.2 0.0 236956 5608 ? S 01:10 0:01 spamd child root 11713 0.0 0.0 136204 68 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 524 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 188 ? Ss Apr16 0:00 /usr/sbin/atd icowebra 11779 0.0 0.0 0 0 ? Z 01:10 0:00 [php] nobody 11834 0.0 0.0 115520 6392 ? S 00:54 0:00 /usr/local/apache/bin/httpd -k start nobody 11835 0.0 0.0 116224 7284 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start sistemam 11853 0.0 0.0 187276 868 ? S 01:08 0:00 /usr/bin/php queroupa 11862 0.0 0.0 198652 16900 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16904 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 18016 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 528 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12469 0.0 0.0 114192 7876 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12497 0.0 0.0 114196 7944 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12498 0.0 0.0 114324 8396 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12523 0.0 0.0 114192 8132 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12524 0.0 0.0 114192 7896 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114196 7940 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12526 0.0 0.0 114192 8100 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12540 0.0 0.0 106120 944 ? Ss 01:15 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 12545 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12560 0.0 0.0 4108 220 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12561 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (centrapw) [25070] ll -c php -q /home/centrapw/pastasw/crons/pop.php root 12562 0.0 0.0 4108 224 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 220 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 224 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 220 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 220 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12572 0.0 0.0 4616 856 ? Ss 01:15 0:00 jailshell (netstreamhost) [25074] GET http://netstreamhost.com.br/conta/admin/cron.php root 12573 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (conectad) [25069] ll -c php -q /home/conectad/public_html/pipe/pipe.php root 12574 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (centralgib) [25072] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12576 0.0 0.0 4612 852 ? Ss 01:15 0:00 jailshell (centralpluginscp) [25071] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 12577 0.0 0.0 106120 940 ? Ss 01:15 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 12583 0.0 0.0 4612 852 ? Ss 01:15 0:00 jailshell (centralagenciaw3) [25196] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12590 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (centralc) [25202] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 12592 0.0 0.0 4612 852 ? Ss 01:15 0:00 jailshell (streamhostnet) [25215] php -q /home/streamhostnet/sistema/crons/cron.php root 12593 0.0 0.0 4612 900 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 12594 0.0 0.0 4612 904 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4612 900 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 12596 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 12597 0.0 0.0 4612 904 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 12598 0.0 0.0 4352 548 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nossojor 12601 0.0 0.0 198320 17240 ? D 01:06 0:00 /usr/bin/php root 12608 0.0 0.0 4356 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 12609 0.0 0.0 4352 556 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 12610 0.0 0.0 4352 544 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 12611 0.0 0.0 4612 900 ? Ss 01:15 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 rkembala 12628 0.0 0.0 186792 4060 ? S 01:06 0:00 /usr/bin/php 992 12634 0.0 0.0 187084 7616 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3540 ? S 01:06 0:00 /usr/bin/php 664 12638 0.0 0.0 137036 420 ? D 01:15 0:00 pure-ftpd (IDLE) root 12639 0.1 0.0 170456 7504 ? D 01:15 0:00 lfd - stopping root 12645 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12646 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12647 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12664 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12667 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12668 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12670 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12671 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12672 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12673 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12675 0.0 0.0 142436 916 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 1148 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12677 0.0 0.0 136368 7480 ? S 01:16 0:00 /usr/local/cpanel/bin/dcpumon root 12722 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/0:2] root 12723 0.0 0.0 240340 5352 ? D 01:16 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php nobody 12759 0.0 0.0 116816 7720 ? S 01:04 0:00 /usr/local/apache/bin/httpd -k start nobody 12764 0.0 0.0 114196 7728 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3932 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 712 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5244 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] nobody 13722 0.0 0.0 114192 8076 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13723 0.0 0.0 114328 8684 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13727 0.0 0.0 114196 8164 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 212 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14245 0.0 0.0 106128 792 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 14250 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/9:0] nobody 14251 0.0 0.0 114736 7992 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14272 0.0 0.0 106120 1176 ? Ss 01:18 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 14275 0.0 0.0 106120 1164 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 14276 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 14280 0.0 0.0 106120 1156 ? Ss 01:18 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 14281 0.0 0.0 4352 600 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron nobody 14288 0.0 0.0 114196 8164 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14289 0.0 0.0 114192 8456 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14291 0.0 0.0 4612 940 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 14292 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 14293 0.0 0.0 4352 576 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 14294 0.0 0.0 4352 576 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 14295 0.0 0.0 4352 588 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 14296 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 14297 0.0 0.0 4352 600 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 14298 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 14304 0.0 0.0 4352 600 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 14305 0.0 0.0 4352 588 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 14306 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 14307 0.0 0.0 4352 584 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 14308 0.0 0.0 4352 604 ? Ss 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 nobody 14327 0.0 0.0 114332 8668 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14355 0.0 0.0 114736 7920 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14356 0.0 0.0 169980 6308 ? D 01:18 0:00 lfd - stopping root 14359 0.0 0.0 106124 1360 ? S 01:18 0:00 /bin/bash /bin/monitora-load.sh root 14361 0.0 0.0 240340 6856 ? D 01:18 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 14365 0.0 0.0 106128 1392 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 14386 0.0 0.0 114736 7932 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14400 0.0 0.0 114736 7936 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14401 0.0 0.0 114736 7944 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 14402 0.1 0.0 71036 3384 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 14407 0.0 0.0 71032 3376 ? D 01:18 0:00 send-mail -i -- admin@conectadohost.com.br mailnull 14413 0.0 0.0 74880 2100 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 14425 0.0 0.0 106128 604 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14426 0.1 0.0 169980 6128 ? D 01:18 0:00 lfd - child closing root 14458 0.0 0.0 106128 396 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14459 0.0 0.0 100992 568 ? D 01:18 0:00 cat /var/log/exim_mainlog root 14460 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 nobody 14499 0.0 0.0 114196 7940 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14500 0.0 0.0 114192 7944 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14501 0.0 0.0 114196 7940 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14502 0.0 0.0 114192 8212 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 14603 0.0 0.0 114736 7960 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14604 0.0 0.0 169980 5976 ? D 01:18 0:00 lfd - child closing root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] root 15373 0.0 0.0 61336 2016 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 540 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 536 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 992 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1192 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 980 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 980 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 996 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1236 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 972 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 640 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 896 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 524 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 26208 3096 ? S Apr16 0:17 cpsrvd (SSL) - dormant mode - accepting --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 nobody 16788 0.0 0.0 114192 8040 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 17155 0.0 0.0 74296 4436 ? S 01:16 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH nobody 17173 0.0 0.0 114192 8180 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17195 0.0 0.0 106124 576 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 17299 0.0 0.0 114192 7940 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17310 0.0 0.0 114196 7952 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17311 0.0 0.0 115520 9028 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17408 0.0 0.0 114324 8476 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17485 0.0 0.0 104492 6552 ? D 01:16 0:00 tailwatchd - chkservd root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 1.0 0.0 240980 1792 ? D 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1260 ? S 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.7 0.0 23760 8796 ? S 00:50 1:35 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable nobody 19436 0.0 0.0 130424 4684 ? D 01:18 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 82.178.59.163 894 19776 0.0 0.0 186828 404 ? S 00:48 0:00 /usr/bin/php nobody 19844 0.0 0.0 116120 7552 ? D 00:48 0:00 /usr/local/apache/bin/httpd -k start root 19963 0.0 0.0 136824 128 ? S 01:16 0:00 pure-ftpd (PRIV) nobody 20028 0.0 0.0 130424 4664 ? D 01:16 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 20029 0.0 0.0 130424 4668 ? D 01:16 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 20030 0.0 0.0 130424 4676 ? D 01:16 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 82.178.59.163 nobody 20031 0.0 0.0 130424 4656 ? D 01:16 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 82.178.59.163 nobody 20032 0.0 0.0 130428 4684 ? D 01:16 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.15.144.9 nobody 20042 0.0 0.0 114324 8516 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20046 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20047 0.0 0.0 106120 960 ? Ss 01:16 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20048 0.0 0.0 4612 900 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20049 0.0 0.0 4356 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20052 0.0 0.0 4352 552 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20056 0.0 0.0 4616 904 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 20057 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20058 0.0 0.0 4612 904 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 20059 0.0 0.0 114192 8308 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20060 0.0 0.0 115520 9024 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20063 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20065 0.0 0.0 4352 556 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20066 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 1216 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20068 0.0 0.0 4612 904 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 20069 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4352 560 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20072 0.0 0.0 4352 536 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20073 0.0 0.0 4352 548 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 20074 0.0 0.0 106120 1036 ? Ss 01:16 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 20082 0.0 0.0 4612 904 ? Ss 01:16 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations nobody 20083 0.0 0.0 114192 8216 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20084 0.0 0.0 114192 8224 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20085 0.0 0.0 114192 8356 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20086 0.0 0.0 114192 8292 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 20105 0.0 0.0 75140 1956 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20114 0.0 0.0 240340 5388 ? D 01:17 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 20144 0.0 0.0 142436 1232 ? S 01:17 0:00 CROND root 20177 0.0 0.0 106124 1160 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] mailnull 20222 0.0 0.0 79316 2560 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 20319 0.0 0.0 75140 2280 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 20370 0.0 0.0 74228 2100 ? D 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 20384 0.0 0.0 74880 2040 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20385 0.0 0.0 106120 1292 ? S 01:17 0:00 /bin/bash /bin/malv-block.sh root 20391 0.0 0.0 19112 664 ? S 01:17 0:00 dovecot/lmtp nobody 20406 0.0 0.0 114192 8392 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20420 0.0 0.0 114192 8212 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20421 0.0 0.0 114196 8164 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20426 0.0 0.0 114192 8396 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20427 0.0 0.0 114196 8164 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.0 0.0 265704 408 ? S 00:46 0:00 /usr/bin/php nobody 20448 0.0 0.0 114192 8176 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20449 0.1 0.0 115520 9148 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start root 20478 0.0 0.0 106124 604 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 20482 0.0 0.0 74880 2056 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] wwwfacul 20831 0.0 0.0 263164 408 ? S 00:46 0:00 /usr/bin/php root 20874 0.0 0.0 106120 1080 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f nobody 22094 0.0 0.0 114060 6816 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start pdvxyz 23169 0.0 0.0 185472 268 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 440 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 320 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 308 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] icowebra 23714 0.0 0.0 0 0 ? Z 01:11 0:00 [php] mailnull 23777 0.0 0.0 74876 1308 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 23820 0.0 0.0 130428 4684 ? D 01:18 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 187.59.168.134 nobody 23894 0.0 0.0 130424 4668 ? D 01:18 0:00 /usr/local/cpanel/3rdparty/bin/php -q /usr/share/ilabs_antimalware/adicionales/bf_test.php 82.178.59.163 nobody 23899 0.0 0.0 115284 7376 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 23901 0.0 0.0 115572 7036 ? D 01:11 0:00 /usr/local/apache/bin/httpd -k start mailnull 23924 0.2 0.0 71036 3380 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23925 0.2 0.0 71032 3384 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23934 0.2 0.0 71032 3384 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23935 0.1 0.0 71036 3380 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 23936 0.2 0.0 71032 3384 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 23937 0.0 0.0 27196 1788 ? S 01:18 0:00 dovecot/auth root 23946 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/7:1] icowebra 23992 0.0 0.0 0 0 ? Z 01:11 0:00 [php] nobody 24106 0.0 0.0 114500 5604 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] icowebra 24540 0.2 0.0 0 0 ? Z 00:59 0:02 [php] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] 760 25007 0.0 0.0 127424 4352 ? D 01:18 0:00 php.cgi root 25010 0.0 0.0 106124 388 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 25011 0.0 0.0 100992 580 ? D 01:18 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt root 25012 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 mailnull 25056 0.0 0.0 73984 1312 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 25058 0.0 0.0 114736 7948 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start zedeveva 25061 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 782 25062 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralnetstream) [init] hp -q /home/centralnetstream/pastasw/crons/cron.php escalations recordho 25063 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations pdvxyz 25064 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (pdvxyz) [init] shell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron agegames 25066 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (agegames) [init] ell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron 1125 25067 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 25068 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 conectad 25069 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (conectad) [init] ell -c php -q /home/conectad/public_html/pipe/pipe.php centrapw 25070 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (centrapw) [init] ell -c php -q /home/centrapw/pastasw/crons/pop.php 1120 25071 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25072 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 522 25074 0.0 0.0 4616 396 ? S 01:18 0:00 jailshell (netstreamhost) [init] c GET http://netstreamhost.com.br/conta/admin/cron.php zedeveva 25075 0.0 0.0 240340 6628 ? D 01:18 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 782 25076 0.0 0.0 240340 6628 ? D 01:18 0:00 php -q /home/centralnetstream/pastasw/crons/cron.php escalations recordho 25077 0.0 0.0 237132 5184 ? D 01:18 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations agegames 25078 0.0 0.0 135264 2104 ? D 01:18 0:00 wget -O - -q -t 1 http://agegames.com.br/index.php/cron 1125 25079 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 pdvxyz 25081 0.0 0.0 135264 2104 ? S 01:18 0:00 wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron conectad 25082 0.0 0.0 240340 6632 ? D 01:18 0:00 php -q /home/conectad/public_html/pipe/pipe.php 861 25083 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 centrapw 25084 0.0 0.0 240340 6628 ? D 01:18 0:00 php -q /home/centrapw/pastasw/crons/pop.php 1120 25085 0.0 0.0 240340 6632 ? D 01:18 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25086 0.0 0.0 127452 4348 ? D 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 25087 0.0 0.0 44164 3564 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs root 25088 0.0 0.0 44164 3604 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 25089 0.0 0.0 44164 3608 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 25090 0.0 0.0 44164 3616 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 25091 0.0 0.0 44164 3596 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 25092 0.0 0.0 44164 3644 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 25093 0.0 0.0 44164 3608 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 782 522 25094 0.0 0.0 122744 2820 ? D 01:18 0:00 /usr/bin/perl -w /usr/bin/GET http://netstreamhost.com.br/conta/admin/cron.php root 25095 0.0 0.0 44164 3640 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 root 25096 0.0 0.0 44164 3608 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 1120 root 25097 0.0 0.0 44164 3584 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 861 25163 0.0 0.0 240340 6628 ? D 01:18 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 25164 0.0 0.0 240340 6632 ? D 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php root 25193 0.0 0.0 106124 392 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 25194 0.0 0.0 100992 580 ? D 01:18 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt root 25195 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 699 25196 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 699 25197 0.0 0.0 240340 6864 ? D 01:18 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php root 25198 0.0 0.0 106124 536 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 25199 0.0 0.0 100988 576 ? D 01:18 0:00 cat /usr/local/cpanel/logs/access_log root 25200 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 root 25201 0.0 0.0 103360 836 ? S 01:18 0:00 grep user centralc 25202 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php centralc 25203 0.0 0.0 240340 6632 ? D 01:18 0:00 php -q /home/centralc/public_html/pipe/pipe.php root 25214 0.0 0.0 44164 3544 ? D 01:18 0:00 /usr/local/cpanel/bin/setupvirtfs 1030 788 25215 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (streamhostnet) [init] c php -q /home/streamhostnet/sistema/crons/cron.php 788 25216 0.0 0.0 240340 6628 ? D 01:18 0:00 php -q /home/streamhostnet/sistema/crons/cron.php nobody 25402 0.0 0.0 114736 7956 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start suzantol 25425 0.2 0.0 219216 16900 ? S 01:09 0:01 /usr/bin/php root 25460 0.0 0.0 106124 532 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 25461 0.0 0.0 100988 576 ? D 01:18 0:00 cat /var/log/messages root 25462 0.0 0.0 103360 848 ? S 01:18 0:00 grep 104.130.11.193 root 25463 0.0 0.0 103360 840 ? S 01:18 0:00 grep user nobody 25515 0.0 0.0 114736 7956 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 25798 0.0 0.0 114736 7956 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] nobody 26194 0.0 0.0 114736 7960 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 26253 0.0 0.0 114736 7956 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 26511 0.0 0.0 114736 7956 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start root 26512 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/11:2] maisg647 26560 0.0 0.0 241460 420 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 408 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 412 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 412 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 412 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 412 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 408 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 412 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 324 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 260 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth nobody 26991 0.0 0.0 114736 7956 ? D 01:18 0:00 /usr/local/apache/bin/httpd -k start mailnull 27007 1.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27008 2.0 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27009 2.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27010 1.0 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27011 1.0 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 27066 0.0 0.0 136368 5720 ? D 01:18 0:00 /usr/local/cpanel/bin/dcpumon root 27074 0.0 0.0 106128 512 ? S 01:18 0:00 /bin/bash /bin/malv2-block.sh root 27075 0.0 0.0 246968 3484 ? Sl 01:18 0:00 nslookup 201.47.62.183 root 27076 0.0 0.0 103364 840 ? S 01:18 0:00 grep br root 27077 0.0 0.0 100976 652 ? S 01:18 0:00 wc -l mailnull 27081 1.0 0.0 71036 3372 ? D 01:18 0:00 send-mail -i -- admin@conectadohost.com.br root 27082 2.0 0.0 108348 1188 ? R 01:18 0:00 ps aux nobody 27399 0.0 0.0 114488 7476 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 27400 0.0 0.0 115156 7880 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start ferre461 27442 0.0 0.0 232664 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 16900 ? S 01:09 0:00 /usr/bin/php suzantol 27534 0.1 0.0 210508 16916 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] radiosat 27560 0.0 0.0 185600 688 ? S 01:07 0:00 /usr/bin/php nobody 27566 0.0 0.0 119732 9392 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start facildia 27623 0.0 0.0 198808 16900 ? S 01:07 0:00 /usr/bin/php root 27867 0.0 0.0 142436 700 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 464 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 608 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 668 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 18304 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 16904 ? S 01:07 0:00 /usr/bin/php nobody 28098 0.0 0.0 115732 6628 ? S 01:07 0:00 /usr/local/apache/bin/httpd -k start root 28527 0.0 0.0 106124 536 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 28528 0.0 0.0 100988 576 ? D 01:17 0:00 cat /usr/local/cpanel/logs/access_log root 28529 0.0 0.0 103360 848 ? S 01:17 0:00 grep 144.217.225.171 root 28530 0.0 0.0 103360 840 ? S 01:17 0:00 grep user root 28532 0.0 0.0 227268 4156 ? D 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] ecfoto 28919 0.0 0.0 185820 3932 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 6720 ? S 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.1 0.0 215808 16904 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] root 30851 0.3 0.0 221996 4220 ? Ds Apr16 6:21 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 31861 0.0 0.0 186296 7740 ? D 00:49 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 724 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:14 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 336 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 672 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 484 ? S Apr16 0:01 dovecot/anvil root 2040 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2041 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2042 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2043 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2044 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2052 0.0 0.0 142436 1256 ? S 01:18 0:00 CROND root 2060 0.0 0.0 142436 1260 ? S 01:18 0:00 CROND root 2061 0.0 0.0 142436 1260 ? S 01:18 0:00 CROND root 2062 0.0 0.0 142436 1260 ? S 01:18 0:00 CROND root 2063 0.0 0.0 142436 1260 ? S 01:18 0:00 CROND root 2065 0.0 0.0 142440 1252 ? S 01:18 0:00 CROND root 2066 0.0 0.0 142440 1252 ? S 01:18 0:00 CROND nobody 2837 0.0 0.0 114464 9096 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 3037 0.0 0.0 142436 288 ? S 00:34 0:00 CROND conhecsc 3059 14.7 94.1 78261004 62103092 ? Ds 00:34 6:40 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115260 7408 ? D 00:53 0:00 /usr/local/apache/bin/httpd -k start dovenull 3299 0.0 0.0 42760 488 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 492 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 588 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 1068 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 2316 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 416 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 532 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 115008 5924 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 412 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 408 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] conhecsc 5287 0.5 0.0 185488 14100 ? D 01:19 0:00 /usr/bin/php nobody 5674 0.0 0.0 112412 376 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 404 ? S Apr17 0:00 /usr/bin/php root 5868 0.0 0.0 106120 368 ? S 01:19 0:00 /bin/bash /bin/malv2-block.sh root 5869 0.0 0.0 106120 508 ? S 01:19 0:00 /bin/bash /bin/malv2-block.sh root 5870 0.0 0.0 21340 288 ? D 01:19 0:00 nslookup 112.113.241.207 root 5871 0.0 0.0 103360 844 ? S 01:19 0:00 grep br root 5872 0.0 0.0 100980 652 ? S 01:19 0:00 wc -l voarloca 5876 0.0 0.0 185948 3532 ? S 01:01 0:00 /usr/bin/php mailnull 5880 2.0 0.0 71044 3364 ? D 01:19 0:00 send-mail -i -- admin@conectadohost.com.br root 5881 0.0 0.0 108344 1184 ? R 01:19 0:00 ps aux 800 5886 0.0 0.0 127308 832 ? D 01:19 0:00 php.cgi loppelco 5889 0.0 0.0 186780 16704 ? D 01:19 0:00 /usr/bin/php icowebra 6242 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 328 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 6608 ? S Apr17 0:08 tailwatchd mysql 6514 18.4 0.1 6973904 123812 ? Dl Apr17 236:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid icowebra 6842 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 7021 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (zedeveva) [27278] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send 992 7038 0.0 0.0 184964 404 ? S Apr17 0:00 /usr/bin/php root 7334 0.0 0.0 74292 4892 ? S 01:12 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH mailnull 7499 0.0 0.0 74248 2396 ? S 01:12 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 7507 0.0 0.0 114324 7948 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7510 0.0 0.0 114324 7932 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7514 0.0 0.0 115520 9540 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7517 0.0 0.0 114196 8012 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7565 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7584 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7589 0.0 0.0 142440 980 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142440 980 ? S 01:13 0:00 CROND nobody 7618 0.0 0.0 114192 7948 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7627 0.0 0.0 114196 8196 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114192 8332 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 8260 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7648 0.0 0.0 114332 8028 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7679 0.0 0.0 114536 8740 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 7020 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7685 0.0 0.0 115520 9292 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7686 0.0 0.0 114420 8636 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 7264 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7689 0.0 0.0 114192 6988 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7696 0.0 0.0 114192 8032 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7697 0.0 0.0 114192 6820 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7702 0.0 0.0 114192 8044 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7704 0.0 0.0 114192 8028 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7705 0.0 0.0 114484 8108 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 114192 8372 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 9360 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7714 0.0 0.0 114192 7652 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 10012 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114500 8124 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7720 0.0 0.0 114516 8888 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7721 0.0 0.0 114192 8096 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7722 0.0 0.0 114192 8272 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7724 0.0 0.0 114192 7828 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114192 8184 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7727 0.0 0.0 114192 8224 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7728 0.0 0.0 114324 8120 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7750 0.0 0.0 106120 912 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7757 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (inovesocialcom) [25067] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7759 0.0 0.0 4612 856 ? Ss 01:13 0:00 jailshell (posaufacom) [25068] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 7760 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (recordho) [25063] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 7761 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (zedeveva) [25061] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 7806 0.0 0.0 106124 1096 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 7822 0.0 0.0 114192 8420 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7826 0.0 0.0 114192 7892 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 7879 0.0 0.0 142436 916 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 114192 7880 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74248 3980 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8035 0.0 0.0 114192 7396 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8090 0.0 0.0 106124 704 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 3528 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114192 8100 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8157 0.0 0.0 115576 10080 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8158 0.0 0.0 0 0 ? Z 01:14 0:00 [httpd] nobody 8161 0.0 0.0 114192 7968 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114192 8152 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8901 0.0 0.0 114460 6848 ? S 01:06 0:00 /usr/local/apache/bin/httpd -k start nobody 9264 0.0 0.0 114192 7956 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9272 0.0 0.0 114196 8292 ? D 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114480 8312 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114480 8208 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9308 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 141736 14104 ? S 01:14 0:00 php.cgi buffetlu 9577 0.0 0.0 200280 16900 ? S 01:02 0:00 /usr/bin/php root 9743 0.0 0.0 106124 1092 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10317 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/4:2] root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] root 10926 0.0 0.0 4640 204 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 316 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1576 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 224 ? Ss Apr16 0:00 /usr/sbin/sshd root 11198 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142436 1008 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 876 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 616 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 1000 ? S 01:15 0:00 CROND root 11225 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11227 0.0 0.0 142436 852 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142440 1032 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142440 1020 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 288 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 312 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 220 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 892 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 572 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114192 7992 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11352 0.0 0.0 114192 8220 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11378 0.0 0.0 114468 8932 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11379 0.0 0.0 114496 8932 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 8688 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start nobody 11568 0.0 0.0 115516 7780 ? D 01:10 0:00 /usr/local/apache/bin/httpd -k start named 11603 0.5 0.0 746072 5736 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11713 0.0 0.0 136204 68 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 532 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 188 ? Ss Apr16 0:00 /usr/sbin/atd nobody 11834 0.0 0.0 115520 7624 ? D 00:54 0:00 /usr/local/apache/bin/httpd -k start sistemam 11853 0.0 0.0 187276 3436 ? D 01:08 0:00 /usr/bin/php queroupa 11862 0.0 0.0 198652 16900 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16904 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 18016 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 528 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12469 0.0 0.0 114192 8124 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12497 0.0 0.0 114328 10776 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12498 0.0 0.0 114324 8636 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12523 0.0 0.0 114192 8132 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12524 0.0 0.0 114192 8384 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114328 10708 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12545 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12560 0.0 0.0 4108 220 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 224 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 220 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 224 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 220 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 220 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12572 0.0 0.0 4616 856 ? Ss 01:15 0:00 jailshell (netstreamhost) [25074] GET http://netstreamhost.com.br/conta/admin/cron.php root 12574 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (centralgib) [25072] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12576 0.0 0.0 4612 852 ? Ss 01:15 0:00 jailshell (centralpluginscp) [25071] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 12583 0.0 0.0 4612 852 ? Ss 01:15 0:00 jailshell (centralagenciaw3) [25196] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12590 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (centralc) [25202] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 12594 0.0 0.0 4612 904 ? Ss 01:15 0:00 jailshell (centralgib) [27234] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4612 900 ? Ss 01:15 0:00 jailshell (centralc) [27223] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 12597 0.0 0.0 4612 904 ? Ss 01:15 0:00 jailshell (centralpluginscp) [27248] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 12611 0.0 0.0 4612 900 ? Ss 01:15 0:00 jailshell (posaufacom) [27257] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 rkembala 12628 0.0 0.0 186792 4060 ? S 01:06 0:00 /usr/bin/php 992 12634 0.0 0.0 187084 7616 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3540 ? S 01:06 0:00 /usr/bin/php root 12645 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12668 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12670 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12671 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12673 0.0 0.0 142440 1088 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142440 1084 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 1140 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12722 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/0:2] nobody 12759 0.0 0.0 116964 7968 ? S 01:04 0:00 /usr/local/apache/bin/httpd -k start nobody 12764 0.0 0.0 114480 8140 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3932 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 712 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5244 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] nobody 13722 0.0 0.0 114192 8316 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 13723 0.0 0.0 114328 8684 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 212 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14250 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/9:0] root 14275 0.0 0.0 106120 1164 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 14276 0.0 0.0 4612 936 ? Ss 01:18 0:00 jailshell (recordho) [27242] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 14288 0.0 0.0 114196 8500 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14289 0.0 0.0 114192 8456 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14291 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (zedeveva) [27229] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 root 14292 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (posaufacom) [27341] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 14293 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (posaufacom) [27358] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 14297 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (posaufacom) [27352] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 14298 0.0 0.0 4612 944 ? Ss 01:18 0:00 jailshell (posaufacom) [27332] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 14304 0.0 0.0 4612 936 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27368] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 14305 0.0 0.0 4612 944 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27334] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 14306 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27360] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 14307 0.0 0.0 4612 944 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27343] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 14308 0.0 0.0 4612 944 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27315] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 14365 0.0 0.0 106128 1368 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14425 0.0 0.0 106128 588 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 14499 0.0 0.0 115528 10016 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] root 15373 0.0 0.0 61336 2016 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 540 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 536 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 992 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1192 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 980 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 980 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 996 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1236 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 972 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 640 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 896 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 524 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 95892 16572 ? D Apr16 0:17 /usr/local/cpanel/cpsrvd --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 nobody 16788 0.0 0.0 114192 8284 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start mailnull 17155 0.0 0.0 74296 4436 ? S 01:16 0:00 /usr/sbin/exim -Mc 1d0KUi-0006lc-SH root 17195 0.0 0.0 106124 580 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 17299 0.0 0.0 114192 8184 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17310 0.0 0.0 114196 8312 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17408 0.0 0.0 114324 8476 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17485 0.0 0.0 104624 7532 ? D 01:16 0:00 tailwatchd - chkservd root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 1.0 0.0 240980 1960 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1260 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.6 0.0 23760 8796 ? S 00:50 1:36 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 404 ? S 00:48 0:00 /usr/bin/php nobody 19844 0.0 0.0 116120 8736 ? D 00:48 0:00 /usr/local/apache/bin/httpd -k start nobody 20042 0.0 0.0 114324 8516 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20046 0.0 0.0 4612 900 ? Ss 01:16 0:00 jailshell (posaufacom) [27279] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 20048 0.0 0.0 4612 900 ? Ss 01:16 0:00 jailshell (recordho) [27227] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20049 0.0 0.0 4616 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27281] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20052 0.0 0.0 4612 908 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27299] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20057 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27324] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20058 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27252] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 20059 0.0 0.0 114192 8308 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20063 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (posaufacom) [27298] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 20066 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (posaufacom) [27322] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 1200 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20069 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27350] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20072 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (posaufacom) [27314] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 20073 0.0 0.0 4612 908 ? Ss 01:16 0:00 jailshell (zedeveva) [27241] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 nobody 20083 0.0 0.0 114192 8460 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20084 0.0 0.0 114192 8224 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20085 0.0 0.0 114192 8356 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20086 0.0 0.0 114496 8744 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20144 0.0 0.0 142440 1204 ? S 01:17 0:00 CROND root 20177 0.0 0.0 106124 1144 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] mailnull 20370 0.0 0.0 74248 4144 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20391 0.0 0.0 52336 3876 ? S 01:17 0:00 dovecot/lmtp nobody 20406 0.0 0.0 114464 9148 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20421 0.0 0.0 114196 8768 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.0 0.0 265704 408 ? S 00:46 0:00 /usr/bin/php root 20478 0.0 0.0 106124 584 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] wwwfacul 20831 0.0 0.0 263164 408 ? S 00:46 0:00 /usr/bin/php root 20874 0.0 0.0 106120 1072 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f nobody 22094 0.0 0.0 115520 9916 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start pdvxyz 23169 0.0 0.0 185472 2928 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 440 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 2796 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 2812 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] nobody 23899 0.0 0.0 115284 7756 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start dovecot 23937 0.0 0.0 31880 2032 ? S 01:18 0:00 dovecot/auth root 23946 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/7:1] nobody 24106 0.0 0.0 114500 7136 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] 760 25007 0.0 0.0 140044 13432 ? D 01:18 0:00 php.cgi mailnull 25056 0.0 0.0 74280 3632 ? S 01:18 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid agitae 25058 0.1 0.0 0 0 ? Z 01:18 0:00 [php] zedeveva 25061 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 recordho 25063 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 25067 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 25068 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1120 25071 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25072 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 522 25074 0.0 0.0 4616 396 ? S 01:18 0:00 jailshell (netstreamhost) [init] c GET http://netstreamhost.com.br/conta/admin/cron.php zedeveva 25075 0.1 0.0 289392 26156 ? D 01:18 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 recordho 25077 0.1 0.0 288048 20532 ? S 01:18 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 25079 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 25083 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1120 25085 0.1 0.0 287556 20220 ? S 01:18 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25086 0.0 0.0 238496 14220 ? D 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 522 25094 0.2 0.0 155356 12300 ? D 01:18 0:00 /usr/bin/perl -w /usr/bin/GET http://netstreamhost.com.br/conta/admin/cron.php 861 25163 0.0 0.0 283528 16496 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 25164 0.0 0.0 283388 15992 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 699 25196 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 699 25197 0.0 0.0 287560 20220 ? S 01:18 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 25202 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php centralc 25203 0.0 0.0 287524 20216 ? S 01:18 0:00 php -q /home/centralc/public_html/pipe/pipe.php 879 25402 0.0 0.0 0 0 ? Z 01:18 0:00 [php] suzantol 25425 0.2 0.0 219216 16900 ? S 01:09 0:01 /usr/bin/php 879 25515 0.0 0.0 0 0 ? Z 01:18 0:00 [php] modaest 25798 0.1 0.0 0 0 ? Z 01:18 0:00 [php] root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] agitae 26194 0.1 0.0 0 0 ? Z 01:18 0:00 [php] 879 26253 0.2 0.0 187024 17356 ? S 01:18 0:00 /usr/bin/php 1003 26511 0.0 0.0 185612 14604 ? S 01:18 0:00 /usr/bin/php root 26512 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/11:2] maisg647 26560 0.0 0.0 241460 420 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 408 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 412 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 412 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 412 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 412 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 408 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 412 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 324 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 260 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth 879 26991 0.1 0.0 186252 16764 ? S 01:18 0:00 /usr/bin/php conhecsc 27084 0.1 0.0 185968 17372 ? D 01:18 0:00 /usr/bin/php root 27087 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/6:1] loppelco 27204 0.1 0.0 186780 16684 ? D 01:18 0:00 /usr/bin/php 881 27205 0.1 0.0 186180 16116 ? D 01:18 0:00 /usr/bin/php conhecsc 27207 0.1 0.0 185932 17216 ? S 01:18 0:00 /usr/bin/php 879 27210 0.1 0.0 188324 16776 ? S 01:18 0:00 /usr/bin/php loppelco 27211 0.0 0.0 186780 16684 ? D 01:18 0:00 /usr/bin/php loppelco 27213 0.1 0.0 186780 16680 ? D 01:18 0:00 /usr/bin/php diadiapr 27214 0.1 0.0 185908 16264 ? D 01:18 0:00 /usr/bin/php diadiapr 27215 0.1 0.0 185908 16268 ? D 01:18 0:00 /usr/bin/php 867 27216 0.1 0.0 186208 17292 ? D 01:18 0:00 /usr/bin/php agitae 27217 0.1 0.0 185616 16700 ? D 01:18 0:00 /usr/bin/php loppelco 27218 0.0 0.0 186780 16692 ? D 01:18 0:00 /usr/bin/php 851 27219 0.1 0.0 185772 15520 ? D 01:18 0:00 /usr/bin/php iasdcent 27220 0.1 0.0 185224 16176 ? S 01:18 0:00 /usr/bin/php diadiapr 27221 0.1 0.0 185904 16268 ? D 01:18 0:00 /usr/bin/php diadiapr 27222 0.0 0.0 185908 16256 ? D 01:18 0:00 /usr/bin/php centralc 27223 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations centralc 27224 0.0 0.0 288048 20532 ? S 01:18 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations icowebra 27225 0.0 0.0 185220 14388 ? S 01:18 0:00 /usr/bin/php recordho 27227 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations zedeveva 27229 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 zedeveva 27232 0.1 0.0 289392 26156 ? D 01:18 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:segments:update --force --batch-limit=300 recordho 27233 0.0 0.0 288048 20528 ? S 01:18 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1077 27234 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1077 27235 0.0 0.0 237580 13480 ? D 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php icowebra 27239 0.0 0.0 185220 14380 ? S 01:18 0:00 /usr/bin/php zedeveva 27241 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 recordho 27242 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations diadiapr 27247 0.1 0.0 185908 16264 ? D 01:18 0:00 /usr/bin/php 1120 27248 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 27252 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 loppelco 27255 0.1 0.0 186780 16688 ? D 01:18 0:00 /usr/bin/php zedeveva 27256 0.1 0.0 289392 26156 ? D 01:18 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 861 27257 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 recordho 27260 0.1 0.0 288044 20532 ? S 01:18 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 861 27262 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 27263 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1120 27264 0.1 0.0 288052 20536 ? S 01:18 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 861 27267 0.0 0.0 283388 16140 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 1125 27268 0.0 0.0 283388 15996 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php loppelco 27269 0.1 0.0 0 0 ? Z 01:18 0:00 [php] icowebra 27277 0.0 0.0 185220 14384 ? S 01:18 0:00 /usr/bin/php zedeveva 27278 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send 861 27279 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 27281 0.0 0.0 4616 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 27284 0.0 0.0 106120 1176 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 zedeveva 27286 0.1 0.0 289392 26160 ? D 01:18 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send 1125 27289 0.0 0.0 106120 1176 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 27292 0.0 0.0 283392 16220 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 861 27293 0.0 0.0 283392 15988 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 861 27298 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 27299 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 27300 0.0 0.0 106124 1152 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 27301 0.0 0.0 106120 1180 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 27302 0.0 0.0 283528 16488 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 27303 0.0 0.0 283388 16188 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php diadiapr 27306 0.1 0.0 185904 16252 ? D 01:18 0:00 /usr/bin/php 861 27314 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 27315 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 27316 0.0 0.0 106120 1168 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 27317 0.0 0.0 106120 1156 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 861 27318 0.0 0.0 283392 16008 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 27319 0.0 0.0 283388 16008 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 861 27322 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 27323 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 27324 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27325 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27326 0.0 0.0 136464 4388 ? S 01:18 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 27327 0.0 0.0 283384 16132 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 27332 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 27333 0.0 0.0 106120 1144 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 27334 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27335 0.0 0.0 106120 1180 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 27336 0.0 0.0 282324 14172 ? D 01:18 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 27337 0.0 0.0 283388 16136 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php diadiapr 27338 0.1 0.0 185908 16272 ? D 01:18 0:00 /usr/bin/php 861 27341 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 861 27342 0.0 0.0 106120 1196 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 27343 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27344 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 861 27345 0.0 0.0 283528 16472 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/hid.php 1125 27346 0.0 0.0 136468 4396 ? S 01:18 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron loppelco 27347 0.1 0.0 186780 16680 ? D 01:18 0:00 /usr/bin/php 1125 27350 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27351 0.0 0.0 106120 1148 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 27352 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 27353 0.0 0.0 106120 1152 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 27354 0.0 0.0 283388 16140 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 27355 0.0 0.0 283524 16612 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 27358 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 27359 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 27360 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27361 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 27362 0.0 0.0 283388 16008 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 27363 0.0 0.0 283392 15984 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php diadiapr 27366 0.1 0.0 185908 16264 ? D 01:18 0:00 /usr/bin/php 1125 27368 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 27369 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 27370 0.0 0.0 283388 15992 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php conhecsc 27371 0.1 0.0 185932 17212 ? S 01:18 0:00 /usr/bin/php loppelco 27375 0.1 0.0 186780 16684 ? D 01:18 0:00 /usr/bin/php 881 27378 0.1 0.0 185968 16064 ? D 01:18 0:00 /usr/bin/php diadiapr 27385 0.1 0.0 185908 16268 ? D 01:18 0:00 /usr/bin/php root 27386 0.0 0.0 13676 1132 ? S 01:18 0:00 dovecot/ssl-params nobody 27399 0.0 0.0 114488 7640 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start nobody 27400 0.0 0.0 115480 8680 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start loppelco 27413 0.1 0.0 186780 16680 ? D 01:18 0:00 /usr/bin/php 881 27417 0.0 0.0 186180 16116 ? D 01:18 0:00 /usr/bin/php ferre461 27442 0.0 0.0 232664 16900 ? S 01:09 0:00 /usr/bin/php 1125 27447 0.0 0.0 9456 1096 ? S 01:18 0:00 /bin/sh php.cgi 1125 27448 0.0 0.0 9464 1104 ? S 01:18 0:00 /bin/sh php.cgi root 27449 0.2 0.0 31880 2036 ? S 01:18 0:00 dovecot/auth -w 881 27452 0.1 0.0 185976 16016 ? D 01:18 0:00 /usr/bin/php 1125 27454 0.0 0.0 139524 12380 ? D 01:18 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 27455 0.0 0.0 139524 12376 ? D 01:18 0:00 /opt/php/php-5.6.26/bin/php-cgi mailnull 27462 0.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27463 0.0 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27464 0.1 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27465 0.0 0.0 71028 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27466 0.0 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27467 0.0 0.0 71028 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27468 0.1 0.0 71028 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27470 0.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27472 0.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27473 0.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27475 0.0 0.0 71028 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27477 0.0 0.0 71032 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root agitae 27479 0.1 0.0 185612 16720 ? D 01:18 0:00 /usr/bin/php agitae 27487 0.1 0.0 185616 16716 ? D 01:18 0:00 /usr/bin/php 879 27489 0.3 0.0 186252 16640 ? S 01:18 0:00 /usr/bin/php 879 27497 0.4 0.0 187024 17696 ? S 01:18 0:00 /usr/bin/php 879 27500 0.3 0.0 186252 16764 ? S 01:18 0:00 /usr/bin/php 879 27510 0.3 0.0 186252 16640 ? S 01:18 0:00 /usr/bin/php 879 27511 0.3 0.0 186252 16648 ? S 01:18 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 16900 ? S 01:09 0:00 /usr/bin/php gfebe 27524 0.1 0.0 185628 15404 ? D 01:18 0:00 /usr/bin/php 879 27525 0.4 0.0 186252 16756 ? S 01:18 0:00 /usr/bin/php 879 27526 0.3 0.0 186256 16652 ? S 01:18 0:00 /usr/bin/php root 27527 0.0 0.0 106124 536 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27528 0.0 0.0 106124 536 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27529 0.0 0.0 106124 532 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27530 0.0 0.0 106128 536 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27531 0.0 0.0 100988 576 ? D 01:18 0:00 cat /usr/local/cpanel/logs/access_log root 27532 0.0 0.0 100988 576 ? D 01:18 0:00 cat /usr/local/cpanel/logs/access_log root 27533 0.0 0.0 100988 572 ? D 01:18 0:00 cat /usr/local/cpanel/logs/access_log suzantol 27534 0.1 0.0 210508 16916 ? S 01:09 0:00 /usr/bin/php root 27535 0.0 0.0 100988 576 ? D 01:18 0:00 cat /usr/local/cpanel/logs/access_log root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] root 27537 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 root 27538 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 root 27539 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 root 27540 0.0 0.0 103360 852 ? S 01:18 0:00 grep 104.130.11.193 root 27541 0.0 0.0 103360 844 ? S 01:18 0:00 grep user root 27542 0.0 0.0 103360 840 ? S 01:18 0:00 grep user root 27543 0.0 0.0 103360 840 ? S 01:18 0:00 grep user root 27544 0.0 0.0 103360 844 ? S 01:18 0:00 grep user 879 27545 0.4 0.0 186252 16688 ? S 01:18 0:00 /usr/bin/php 879 27546 0.3 0.0 186256 16640 ? S 01:18 0:00 /usr/bin/php 879 27557 0.3 0.0 186252 16644 ? S 01:18 0:00 /usr/bin/php radiosat 27560 0.0 0.0 185600 688 ? S 01:07 0:00 /usr/bin/php nobody 27566 0.0 0.0 119732 9392 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start 879 27578 0.4 0.0 186252 16652 ? S 01:18 0:00 /usr/bin/php loppelco 27579 0.3 0.0 186640 22068 ? S 01:18 0:00 /usr/bin/php 879 27585 0.3 0.0 186252 16640 ? S 01:18 0:00 /usr/bin/php nossojor 27617 0.2 0.0 185492 14352 ? D 01:19 0:00 /usr/bin/php facildia 27623 0.0 0.0 198808 16900 ? S 01:07 0:00 /usr/bin/php pdvxyz 27624 0.2 0.0 184964 13820 ? S 01:19 0:00 /usr/bin/php root 27625 0.0 0.0 142436 1456 ? S 01:19 0:00 CROND root 27626 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND root 27627 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27628 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27629 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND root 27630 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND root 27631 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27632 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND root 27634 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27635 0.0 0.0 142436 1456 ? S 01:19 0:00 CROND root 27637 0.0 0.0 142436 1456 ? S 01:19 0:00 CROND root 27640 0.0 0.0 142436 1456 ? S 01:19 0:00 CROND root 27644 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27648 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27649 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27650 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27651 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27652 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND root 27653 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND root 27654 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND root 27655 0.0 0.0 142436 1448 ? S 01:19 0:00 CROND 867 27671 0.3 0.0 186212 17320 ? D 01:19 0:00 /usr/bin/php 867 27717 0.3 0.0 186208 17332 ? D 01:19 0:00 /usr/bin/php 879 27720 0.5 0.0 186252 16648 ? S 01:19 0:00 /usr/bin/php icowebra 27723 0.5 0.0 186092 15064 ? S 01:19 0:00 /usr/bin/php 879 27725 1.0 0.0 187020 17356 ? S 01:19 0:00 /usr/bin/php agitae 27732 0.4 0.0 185616 16960 ? D 01:19 0:00 /usr/bin/php agitae 27735 0.3 0.0 185612 16956 ? D 01:19 0:00 /usr/bin/php agitae 27739 0.3 0.0 185612 16964 ? D 01:19 0:00 /usr/bin/php root 27740 0.0 0.0 4612 920 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:rebuild --force --batch-limit=300 root 27742 0.0 0.0 4612 924 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 27743 0.0 0.0 4612 924 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 27745 0.0 0.0 106120 1192 ? Ss 01:19 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27746 0.0 0.0 106120 1184 ? Ss 01:19 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 27748 0.0 0.0 4352 600 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 27751 0.0 0.0 4616 924 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 27753 0.0 0.0 4352 580 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 27755 0.0 0.0 4352 588 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 27756 0.0 0.0 106120 1196 ? Ss 01:19 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 27757 0.0 0.0 4352 600 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 27759 0.0 0.0 4352 604 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 27761 0.0 0.0 106120 1156 ? Ss 01:19 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 27762 0.0 0.0 106120 1160 ? Ss 01:19 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 27764 0.0 0.0 106120 1140 ? Ss 01:19 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 27765 0.0 0.0 4612 924 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 27768 0.0 0.0 106124 1392 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27769 0.0 0.0 4612 924 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 27771 0.0 0.0 4352 604 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 27772 0.0 0.0 106124 1356 ? S 01:19 0:00 /bin/bash /bin/monitora-load.sh root 27773 0.0 0.0 4352 604 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 27775 0.0 0.0 4612 924 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 27776 0.0 0.0 4612 924 ? Ss 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations agitae 27801 0.2 0.0 185612 16976 ? D 01:19 0:00 /usr/bin/php root 27819 0.1 0.0 244384 11660 ? D 01:19 0:00 /usr/local/cpanel/3rdparty/bin/php -i root 27820 0.0 0.0 44164 4800 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 27821 0.0 0.0 44164 4760 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 27822 0.0 0.0 44164 4760 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs 1125 root 27823 0.0 0.0 44164 4772 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs 861 acinpcdl 27825 0.2 0.0 185620 15096 ? D 01:19 0:00 /usr/bin/php acinpcdl 27826 0.2 0.0 185620 15080 ? D 01:19 0:00 /usr/bin/php root 27835 0.0 0.0 106124 608 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27840 0.0 0.0 106124 400 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27841 0.0 0.0 100992 576 ? D 01:19 0:00 cat /var/log/exim_mainlog root 27842 0.0 0.0 103360 852 ? S 01:19 0:00 grep 104.130.11.193 root 27860 0.2 0.0 167684 26936 ? Ds 01:19 0:00 lfd - starting root 27867 0.0 0.0 142436 700 ? S 01:12 0:00 CROND root 27870 0.0 0.0 106120 1416 ? S 01:19 0:00 /bin/bash /bin/malv-block.sh root 27871 0.0 0.0 106120 1180 ? S 01:19 0:00 /bin/bash /bin/corrigir-ips.sh root 27874 0.0 0.0 106120 1380 ? S 01:19 0:00 /bin/bash /bin/brut-filtro.sh 1053 27881 0.4 0.0 186308 18008 ? D 01:19 0:00 /usr/bin/php root 27891 0.0 0.0 106120 464 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 608 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh 1053 27920 0.2 0.0 186308 18000 ? D 01:19 0:00 /usr/bin/php root 27976 0.0 0.0 106124 672 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 18304 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 16904 ? S 01:07 0:00 /usr/bin/php nobody 28098 0.0 0.0 115732 7200 ? D 01:07 0:00 /usr/local/apache/bin/httpd -k start root 28498 0.0 0.0 44164 4752 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 28532 0.0 0.0 233972 11564 ? S 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] ecfoto 28919 0.0 0.0 185820 3932 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 6720 ? D 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29277 0.0 0.0 44164 4776 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs root 29291 0.0 0.0 106120 504 ? S 01:19 0:00 /bin/bash /bin/corrigir-ips.sh root 29292 0.0 0.0 138260 3132 ? D 01:19 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 29293 0.0 0.0 103364 840 ? S 01:19 0:00 grep sim root 29294 0.0 0.0 100976 652 ? S 01:19 0:00 wc -l 1053 29297 0.5 0.0 186308 17988 ? D 01:19 0:00 /usr/bin/php 1053 29298 0.5 0.0 186308 17988 ? D 01:19 0:00 /usr/bin/php 1053 29306 0.5 0.0 186304 17748 ? D 01:19 0:00 /usr/bin/php root 29310 0.1 0.0 127544 3564 ? D 01:19 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 29312 0.0 0.0 44164 4768 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 879 29418 0.4 0.0 185932 15516 ? D 01:19 0:00 /usr/bin/php root 29471 0.0 0.0 44164 4748 ? D 01:19 0:00 /usr/local/cpanel/bin/setupvirtfs 782 879 29501 0.4 0.0 185932 15512 ? D 01:19 0:00 /usr/bin/php acinpcdl 29535 0.4 0.0 185624 15100 ? D 01:19 0:00 /usr/bin/php root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.1 0.0 215808 16904 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] 879 30750 0.5 0.0 185932 15516 ? D 01:19 0:00 /usr/bin/php root 30851 0.3 0.0 55492 8768 ? Ds Apr16 6:21 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 acinpcdl 31087 0.5 0.0 185620 15080 ? D 01:19 0:00 /usr/bin/php root 31371 0.0 0.0 106120 652 ? S 01:19 0:00 /bin/bash /bin/brut-filtro.sh root 31372 0.0 0.0 106120 536 ? S 01:19 0:00 /bin/bash /bin/brut-filtro.sh root 31374 0.0 0.0 21340 288 ? D 01:19 0:00 nslookup 143.0.115.31 root 31377 0.0 0.0 103360 844 ? S 01:19 0:00 grep br root 31378 0.0 0.0 100976 656 ? S 01:19 0:00 wc -l gfebe 32262 0.5 0.0 185628 15436 ? D 01:19 0:00 /usr/bin/php root 32346 0.0 0.0 106120 1332 ? S 01:19 0:00 /bin/bash /bin/malv2-block.sh agitae 32378 0.5 0.0 185612 16748 ? D 01:19 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 704 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:50 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:15 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 196 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 336 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 676 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 484 ? S Apr16 0:01 dovecot/anvil root 2040 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2042 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2043 0.0 0.0 142436 1252 ? S 01:18 0:00 CROND root 2052 0.0 0.0 142436 1256 ? S 01:18 0:00 CROND root 2060 0.0 0.0 142436 1260 ? S 01:18 0:00 CROND root 2061 0.0 0.0 142436 1260 ? S 01:18 0:00 CROND root 2063 0.0 0.0 142436 1260 ? S 01:18 0:00 CROND root 2066 0.0 0.0 142440 1252 ? S 01:18 0:00 CROND root 3037 0.0 0.0 142436 288 ? S 00:34 0:00 CROND conhecsc 3059 14.4 93.9 78261004 62032704 ? Ds 00:34 6:40 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115260 7892 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start dovenull 3299 0.0 0.0 42760 712 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 492 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 588 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 1068 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 2316 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 972 ? S 00:45 0:00 dovecot/imap-login root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 416 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 532 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 115008 5996 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 412 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 408 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] nobody 5674 0.0 0.0 112412 376 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 412 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 404 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 3532 ? S 01:01 0:00 /usr/bin/php 800 5886 0.1 0.0 142528 16468 ? S 01:19 0:00 php.cgi loppelco 5907 0.0 0.0 186900 18636 ? S 01:19 0:00 /usr/bin/php root 5916 0.0 0.0 167816 25948 ? S 01:19 0:00 lfd - checking system integrity loppelco 5917 0.0 0.0 186900 18640 ? S 01:19 0:00 /usr/bin/php root 5920 0.1 0.0 100988 756 ? D 01:19 0:00 /usr/bin/md5sum --check /var/lib/csf/csf.tempint conhecsc 5926 0.1 0.0 186604 18072 ? D 01:19 0:00 /usr/bin/php recordho 5995 0.0 0.0 4612 396 ? S 01:19 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 6001 0.1 0.0 296212 29412 ? S 01:19 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations loppelco 6009 0.0 0.0 186900 18632 ? S 01:19 0:00 /usr/bin/php 1125 6010 0.0 0.0 4612 396 ? S 01:19 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 6019 0.0 0.0 106120 1192 ? S 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 6022 0.0 0.0 284280 18680 ? S 01:19 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php wannessa 6024 0.1 0.0 186576 19092 ? S 01:19 0:00 /usr/bin/php 851 6040 0.1 0.0 187104 20352 ? S 01:19 0:00 /usr/bin/php 861 6059 0.0 0.0 4612 392 ? S 01:19 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 6061 0.0 0.0 106120 1144 ? S 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 6063 0.0 0.0 284276 18688 ? S 01:19 0:00 php /home/posaufacom/public_html/postador/cron/poster.php conhecsc 6099 0.1 0.0 186600 18076 ? D 01:19 0:00 /usr/bin/php 1125 6100 0.0 0.0 4612 396 ? S 01:19 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 6101 0.0 0.0 106124 1188 ? S 01:19 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 6102 0.0 0.0 136464 4456 ? S 01:19 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 6148 0.0 0.0 4612 392 ? S 01:19 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 6149 0.0 0.0 106120 1192 ? S 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 6150 0.0 0.0 283524 16448 ? S 01:19 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 6242 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php loppelco 6262 0.0 0.0 186896 18632 ? S 01:19 0:00 /usr/bin/php mailnull 6267 0.0 0.0 71028 3384 ? S 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 6278 0.0 0.0 9460 1124 ? S 01:19 0:00 /bin/sh php.cgi 1125 6279 0.1 0.0 142772 17100 ? S 01:19 0:00 /opt/php/php-5.6.26/bin/php-cgi 881 6297 0.1 0.0 186648 20600 ? S 01:19 0:00 /usr/bin/php root 6298 0.4 0.0 168424 26836 ? S 01:19 0:00 lfd - (child) (PT) checking user processes 881 6347 0.1 0.0 186636 20492 ? S 01:19 0:00 /usr/bin/php agitae 6348 0.1 0.0 186576 19176 ? S 01:19 0:00 /usr/bin/php root 6352 0.0 0.0 9588 328 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid agitae 6360 0.1 0.0 186580 19184 ? S 01:19 0:00 /usr/bin/php sistemam 6436 0.3 0.0 185888 15132 ? S 01:19 0:00 /usr/bin/php root 6443 0.0 0.0 104492 6848 ? S Apr17 0:08 tailwatchd loppelco 6470 0.1 0.0 186900 18644 ? S 01:19 0:00 /usr/bin/php loppelco 6487 0.1 0.0 186900 18632 ? S 01:19 0:00 /usr/bin/php root 6488 0.4 0.0 241536 17568 ? D 01:19 0:00 /usr/local/cpanel/3rdparty/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/lib/repair2.php 867 6490 0.1 0.0 186840 19640 ? S 01:19 0:00 /usr/bin/php mailnull 6493 0.0 0.0 74272 4076 ? S 01:19 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 867 6512 0.1 0.0 186840 19656 ? S 01:19 0:00 /usr/bin/php mysql 6514 18.4 0.2 6973904 133112 ? Sl Apr17 236:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid 867 6582 0.2 0.0 186840 19660 ? S 01:19 0:00 /usr/bin/php agitae 6594 0.1 0.0 186576 19152 ? S 01:19 0:00 /usr/bin/php agitae 6595 0.1 0.0 186576 19160 ? S 01:19 0:00 /usr/bin/php root 6597 0.0 0.0 27876 3840 ? DN 01:19 0:00 cpanellogd - sleeping for logs agitae 6598 0.1 0.0 186580 19160 ? S 01:19 0:00 /usr/bin/php conhecsc 6601 0.2 0.0 186304 18520 ? S 01:19 0:00 /usr/bin/php agitae 6609 0.2 0.0 186580 19156 ? S 01:19 0:00 /usr/bin/php acinpcdl 6616 0.1 0.0 186580 19164 ? S 01:19 0:00 /usr/bin/php acinpcdl 6617 0.1 0.0 186576 19156 ? S 01:19 0:00 /usr/bin/php 1053 6620 0.2 0.0 187100 20324 ? S 01:19 0:00 /usr/bin/php 1053 6621 0.2 0.0 187104 20332 ? S 01:19 0:00 /usr/bin/php 1053 6623 0.2 0.0 187100 20328 ? S 01:19 0:00 /usr/bin/php 1053 6625 0.2 0.0 187100 20324 ? S 01:19 0:00 /usr/bin/php root 6633 0.0 0.0 0 0 ? S 01:19 0:00 [kworker/10:0] mailnull 6647 0.1 0.0 71032 3384 ? S 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 6648 0.1 0.0 71028 3384 ? S 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 6653 0.0 0.0 74012 1312 ? S 01:19 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid acinpcdl 6678 0.3 0.0 186576 19156 ? S 01:19 0:00 /usr/bin/php acinpcdl 6679 0.3 0.0 186580 19160 ? S 01:19 0:00 /usr/bin/php mailnull 6706 0.0 0.0 0 0 ? Z 01:19 0:00 [exim] root 6707 0.0 0.0 48540 10772 ? S 01:19 0:00 /usr/local/cpanel/bin/update_quota_cache --quiet root 6708 0.0 0.0 101892 21768 ? S 01:19 0:00 cpsrvd (SSL) - check_ses --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 root 6726 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6728 0.0 0.0 142436 1456 ? S 01:20 0:00 CROND root 6731 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6732 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6733 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6734 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6735 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6736 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6737 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6740 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6747 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6751 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6754 0.0 0.0 142436 1456 ? S 01:20 0:00 CROND root 6755 0.0 0.0 142436 1456 ? S 01:20 0:00 CROND root 6756 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6757 0.0 0.0 142436 1456 ? S 01:20 0:00 CROND root 6758 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6759 0.0 0.0 142436 1456 ? S 01:20 0:00 CROND root 6760 0.0 0.0 142436 1456 ? S 01:20 0:00 CROND root 6761 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6762 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6763 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6764 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6765 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6766 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6767 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6768 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6769 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6770 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6771 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6772 0.0 0.0 142436 1448 ? S 01:20 0:00 CROND root 6773 0.0 0.0 142436 1444 ? S 01:20 0:00 CROND root 6774 0.0 0.0 142436 1452 ? S 01:20 0:00 CROND root 6775 0.0 0.0 142436 1524 ? S 01:20 0:00 CROND root 6776 0.0 0.0 103124 6536 ? D 01:20 0:00 /usr/local/cpanel/bin/cpses_tool wannessa 6784 0.5 0.0 186576 19120 ? S 01:20 0:00 /usr/bin/php root 6790 0.0 0.0 4612 920 ? Ss 01:20 0:00 jailshell (inovesocialcom) [14778] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 6791 0.2 0.0 4612 928 ? Ss 01:20 0:00 jailshell (centrapw) [14814] ll -c php -q /home/centrapw/pastasw/crons/pop.php root 6792 0.0 0.0 4612 928 ? Ss 01:20 0:00 jailshell (centralc) [14904] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 6793 0.0 0.0 4612 924 ? Ss 01:20 0:00 jailshell (centralnetstream) [14794] p -q /home/centralnetstream/pastasw/crons/cron.php escalations root 6796 0.0 0.0 4612 924 ? Ss 01:20 0:00 jailshell (zedeveva) [14795] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 root 6797 0.0 0.0 4612 940 ? Ss 01:20 0:00 jailshell (inovesocialcom) [14860] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 6798 0.2 0.0 4612 924 ? Ss 01:20 0:00 jailshell (conectad) [14884] ll -c php -q /home/conectad/public_html/pipe/pipe.php root 6799 0.2 0.0 4612 944 ? Ss 01:20 0:00 jailshell (posaufacom) [15300] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 6800 0.0 0.0 4612 944 ? Ss 01:20 0:00 jailshell (posaufacom) [14872] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 6801 0.1 0.0 4612 924 ? Ss 01:20 0:00 jailshell (centralgib) [14894] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 6802 0.0 0.0 4612 920 ? Ss 01:20 0:00 jailshell (posaufacom) [14779] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 6804 0.1 0.0 4612 940 ? Ss 01:20 0:00 jailshell (centralgib) [15449] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 6807 0.0 0.0 4612 940 ? Ss 01:20 0:00 jailshell (inovesocialcom) [15000] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 6809 0.1 0.0 4612 936 ? Ss 01:20 0:00 jailshell (zedeveva) [14861] ll -c php -q /home/zedeveva/public_html/campanha/app/console mautic:webhooks:process root 6811 0.0 0.0 4612 940 ? Ss 01:20 0:00 jailshell (posaufacom) [15421] -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 6812 0.0 0.0 106120 1188 ? Ss 01:20 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 6815 0.1 0.0 4612 864 ? Ss 01:20 0:00 jailshell (netstreamhost) [15773] GET http://netstreamhost.com.br/conta/admin/cron.php root 6818 0.2 0.0 4612 920 ? Ss 01:20 0:00 jailshell (centralpluginscp) [14812] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 6819 0.1 0.0 4612 940 ? Ss 01:20 0:00 jailshell (centralpluginscp) [14869] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 6820 0.0 0.0 106120 1192 ? Ss 01:20 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 6821 0.0 0.0 4612 940 ? Ss 01:20 0:00 jailshell (inovesocialcom) [15313] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 6822 0.2 0.0 4612 868 ? Ss 01:20 0:00 jailshell (streamhostnet) [14834] php -q /home/streamhostnet/sistema/crons/cron.php root 6823 0.2 0.0 4612 924 ? Ss 01:20 0:00 jailshell (centralagenciaw3) [14886] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 6824 0.0 0.0 106120 1192 ? Ss 01:20 0:00 /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1 root 6825 0.1 0.0 4612 924 ? Ss 01:20 0:00 jailshell (recordho) [14798] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 6826 0.0 0.0 4612 936 ? Ss 01:20 0:00 jailshell (centralagenciaw3) [15377] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 6827 0.0 0.0 106120 1160 ? Ss 01:20 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 6828 0.0 0.0 227796 5792 ? Ds 01:20 0:00 /usr/local/cpanel/3rdparty/bin/php /usr/share/ilabs_antimalware/cron/cronjobs.php root 6829 0.0 0.0 106124 1156 ? Ss 01:20 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 6830 0.1 0.0 4616 944 ? Ss 01:20 0:00 jailshell (conectad) [15396] ll -c php -q /home/conectad/public_html/arearestrita/cron.php root 6831 0.1 0.0 4612 940 ? Ss 01:20 0:00 jailshell (centralc) [15484] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 6832 0.0 0.0 4612 936 ? Ss 01:20 0:00 jailshell (inovesocialcom) [15947] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 6834 0.0 0.0 106120 1192 ? Ss 01:20 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 icowebra 6842 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 404 ? S Apr17 0:00 /usr/bin/php nobody 7514 0.0 0.0 115520 9540 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7565 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 856 ? S 01:13 0:00 CROND root 7584 0.0 0.0 142436 844 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142440 980 ? S 01:13 0:00 CROND nobody 7627 0.0 0.0 114196 8196 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114324 8580 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 8260 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7679 0.0 0.0 114536 11236 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 7020 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7685 0.0 0.0 115520 9768 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 7264 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7696 0.0 0.0 114328 8700 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7702 0.0 0.0 114328 8228 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 114328 8368 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 9912 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7714 0.0 0.0 114456 8864 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 10304 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114500 8728 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7720 0.0 0.0 114516 8952 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7722 0.0 0.0 114192 8272 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114456 8892 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7728 0.0 0.0 114324 8808 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7750 0.0 0.0 106120 912 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7757 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (inovesocialcom) [25067] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7759 0.0 0.0 4612 856 ? Ss 01:13 0:00 jailshell (posaufacom) [25068] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 7760 0.0 0.0 4612 852 ? Ss 01:13 0:00 jailshell (recordho) [25063] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 7806 0.0 0.0 106124 1096 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7879 0.0 0.0 142436 916 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 114192 8120 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74248 3904 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8035 0.0 0.0 114192 7396 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8090 0.0 0.0 106124 772 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 3528 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114192 8712 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114192 8400 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8302 0.0 0.0 106128 536 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 8303 0.0 0.0 106124 536 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 8304 0.0 0.0 106124 536 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 8305 0.0 0.0 106124 536 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 8306 0.0 0.0 100988 576 ? D 01:20 0:00 cat /usr/local/cpanel/logs/access_log root 8307 0.0 0.0 106124 536 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 8308 0.0 0.0 106124 532 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 8309 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.168.170.128 root 8310 0.0 0.0 100988 576 ? D 01:20 0:00 cat /usr/local/cpanel/logs/access_log root 8311 0.0 0.0 100988 572 ? D 01:20 0:00 cat /usr/local/cpanel/logs/access_log root 8312 0.0 0.0 100988 576 ? D 01:20 0:00 cat /usr/local/cpanel/logs/access_log root 8313 0.0 0.0 103360 844 ? S 01:20 0:00 grep user root 8314 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.168.170.128 root 8315 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.130.11.193 root 8316 0.0 0.0 103360 852 ? S 01:20 0:00 grep 144.217.225.172 root 8317 0.0 0.0 100988 576 ? D 01:20 0:00 cat /usr/local/cpanel/logs/access_log root 8318 0.0 0.0 103360 840 ? S 01:20 0:00 grep user root 8319 0.0 0.0 106124 536 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 8320 0.0 0.0 100988 576 ? D 01:20 0:00 cat /usr/local/cpanel/logs/access_log root 8321 0.0 0.0 103360 844 ? S 01:20 0:00 grep user root 8322 0.0 0.0 103360 844 ? S 01:20 0:00 grep user root 8323 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.168.170.128 root 8324 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.168.170.128 root 8325 0.0 0.0 103360 844 ? S 01:20 0:00 grep user root 8326 0.0 0.0 103360 844 ? S 01:20 0:00 grep user root 8327 0.0 0.0 100988 576 ? D 01:20 0:00 cat /usr/local/cpanel/logs/access_log root 8328 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.168.170.128 root 8329 0.0 0.0 103360 844 ? S 01:20 0:00 grep user root 8485 0.0 0.0 106124 1360 ? S 01:20 0:00 /bin/bash /bin/monitora-load.sh nobody 9264 0.0 0.0 114192 8204 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114480 8312 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114480 8208 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9308 0.0 0.0 106120 936 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 142652 14384 ? S 01:14 0:00 php.cgi buffetlu 9577 0.0 0.0 200280 16900 ? S 01:02 0:00 /usr/bin/php root 9743 0.0 0.0 106124 1092 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10317 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/4:2] root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] root 10926 0.0 0.0 4640 204 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 316 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1760 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 224 ? Ss Apr16 0:00 /usr/sbin/sshd root 11198 0.0 0.0 142440 1008 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142440 1008 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 876 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 616 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 1000 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142440 1032 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142440 1020 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142440 1024 ? S 01:15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 288 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 304 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 220 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 884 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 596 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 768 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114192 8220 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11352 0.0 0.0 114192 8468 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 11872 ? D 01:08 0:00 /usr/local/apache/bin/httpd -k start named 11603 0.4 0.0 746072 5872 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11713 0.0 0.0 136204 68 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 532 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 188 ? Ss Apr16 0:00 /usr/sbin/atd queroupa 11862 0.0 0.0 198652 16900 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16904 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 18016 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 528 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12497 0.0 0.0 114328 10776 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12523 0.0 0.0 114192 8376 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12524 0.0 0.0 115532 10020 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114328 10708 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12545 0.0 0.0 106120 936 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12560 0.0 0.0 4108 220 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 224 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 220 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 224 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 220 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 220 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12574 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (centralgib) [25072] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12576 0.0 0.0 4612 852 ? Ss 01:15 0:00 jailshell (centralpluginscp) [25071] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 12583 0.0 0.0 4612 852 ? Ss 01:15 0:00 jailshell (centralagenciaw3) [25196] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12590 0.0 0.0 4612 856 ? Ss 01:15 0:00 jailshell (centralc) [25202] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 12594 0.0 0.0 4612 904 ? Ss 01:15 0:00 jailshell (centralgib) [27234] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4612 900 ? Ss 01:15 0:00 jailshell (centralc) [27223] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations root 12597 0.0 0.0 4612 904 ? Ss 01:15 0:00 jailshell (centralpluginscp) [27248] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations rkembala 12628 0.0 0.0 186792 4060 ? S 01:06 0:00 /usr/bin/php 992 12634 0.0 0.0 187084 7616 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3540 ? S 01:06 0:00 /usr/bin/php root 12645 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12671 0.0 0.0 142436 924 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142440 1084 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 1140 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 12722 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/0:2] nobody 12764 0.0 0.0 114480 8140 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3932 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 712 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5244 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 212 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14250 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/9:0] root 14275 0.0 0.0 106120 1164 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 14276 0.0 0.0 4612 936 ? Ss 01:18 0:00 jailshell (recordho) [27242] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations nobody 14288 0.0 0.0 114196 8488 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start nobody 14289 0.0 0.0 114192 8688 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14293 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (posaufacom) [27358] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 14297 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (posaufacom) [27352] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 14298 0.0 0.0 4612 944 ? Ss 01:18 0:00 jailshell (posaufacom) [27332] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 14305 0.0 0.0 4612 944 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27334] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 14306 0.0 0.0 4612 940 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27360] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 14307 0.0 0.0 4612 944 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27343] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 14365 0.0 0.0 106128 1368 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14411 0.2 0.0 26008 2812 ? S 01:20 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/safe_fetch_repquota 60 root 14425 0.0 0.0 106128 776 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh loppelco 14697 0.8 0.0 186900 18640 ? S 01:20 0:00 /usr/bin/php root 14705 0.0 0.0 106124 1392 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14715 0.0 0.0 106124 608 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14726 0.0 0.0 130572 2476 ? D 01:20 0:00 /usr/local/cpanel/bin/dcpumon root 14728 0.0 0.0 122084 1712 ? D 01:20 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 root 14729 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 14731 0.0 0.0 106120 1416 ? S 01:20 0:00 /bin/bash /bin/malv-block.sh mailnull 14732 1.0 0.0 73968 7692 ? D 01:20 0:00 /usr/sbin/sendmail -f root -t 1125 14778 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 14779 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 14780 0.0 0.0 106120 1140 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 14781 0.0 0.0 106120 1164 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 14782 0.0 0.0 251612 7372 ? D 01:20 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 14783 0.0 0.0 251612 7372 ? D 01:20 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 782 14794 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralnetstream) [init] hp -q /home/centralnetstream/pastasw/crons/cron.php escalations zedeveva 14795 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 782 14796 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/centralnetstream/pastasw/crons/cron.php escalations zedeveva 14797 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:campaigns:trigger --force --batch-limit=100 recordho 14798 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 14799 0.0 0.0 251612 7368 ? D 01:20 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1120 14812 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1120 14813 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations centrapw 14814 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (centrapw) [init] ell -c php -q /home/centrapw/pastasw/crons/pop.php centrapw 14815 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/centrapw/pastasw/crons/pop.php mailnull 14817 2.0 0.0 73968 7668 ? D 01:20 0:00 send-mail -i -- admin@conectadohost.com.br root 14818 1.0 0.0 108344 1188 ? R 01:20 0:00 ps aux mailnull 14830 0.0 0.0 74876 1308 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 788 14834 0.0 0.0 4612 336 ? S 01:20 0:00 jailshell (streamhostnet) [init] c php -q /home/streamhostnet/sistema/crons/cron.php 788 14835 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/streamhostnet/sistema/crons/cron.php 1125 14860 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 zedeveva 14861 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (zedeveva) [init] ell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:webhooks:process 1120 14869 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1125 14870 0.0 0.0 106120 1140 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 zedeveva 14871 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/zedeveva/public_html/campanha/app/console mautic:webhooks:process 861 14872 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 14873 0.0 0.0 251612 7376 ? D 01:20 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 1120 14882 0.0 0.0 251612 7376 ? D 01:20 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 861 14883 0.0 0.0 106120 1152 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 conectad 14884 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (conectad) [init] ell -c php -q /home/conectad/public_html/pipe/pipe.php 861 14885 0.0 0.0 251612 7368 ? D 01:20 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 699 14886 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 1077 14894 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php centralc 14904 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php 1077 14905 0.0 0.0 127452 4352 ? D 01:20 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 699 14906 0.0 0.0 251612 7368 ? D 01:20 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations conectad 14907 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/conectad/public_html/pipe/pipe.php centralc 14908 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/centralc/public_html/pipe/pipe.php 1125 15000 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 15001 0.0 0.0 106120 1192 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 15005 0.0 0.0 136464 3940 ? S 01:20 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] 861 15300 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 15313 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 15314 0.0 0.0 106120 1192 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 15315 0.0 0.0 106120 1192 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 15319 0.0 0.0 251616 7376 ? D 01:20 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 15320 0.0 0.0 251612 7372 ? D 01:20 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php root 15351 0.0 0.0 4264 564 ? D 01:20 0:00 /usr/sbin/repquota -auv root 15373 0.0 0.0 61336 2016 ? S Apr16 0:03 queueprocd - wait to process a task 699 15377 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php conectad 15396 0.0 0.0 4616 396 ? S 01:20 0:00 jailshell (conectad) [init] ell -c php -q /home/conectad/public_html/arearestrita/cron.php 861 15421 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1077 15449 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 699 15480 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php conectad 15481 0.0 0.0 251612 7372 ? D 01:20 0:00 php -q /home/conectad/public_html/arearestrita/cron.php 1077 15482 0.0 0.0 127452 4352 ? D 01:20 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 15483 0.0 0.0 106120 1192 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 centralc 15484 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations centralc 15485 0.0 0.0 251612 7368 ? D 01:20 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations 861 15489 0.0 0.0 251612 7372 ? D 01:20 0:00 php /home/posaufacom/public_html/postador/cron/hid.php root 15606 0.0 0.0 25860 540 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 522 15773 0.0 0.0 4612 328 ? S 01:20 0:00 jailshell (netstreamhost) [init] c GET http://netstreamhost.com.br/conta/admin/cron.php 522 15774 0.0 0.0 122084 1756 ? D 01:20 0:00 /usr/bin/perl -w /usr/bin/GET http://netstreamhost.com.br/conta/admin/cron.php 1125 15947 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 15948 0.0 0.0 106120 1188 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 15952 0.0 0.0 251612 7372 ? D 01:20 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php mailman 16010 0.0 0.0 120748 536 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 992 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1192 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 980 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 980 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 996 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1236 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 972 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 640 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 896 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 880 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 101892 28056 ? S Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 root 17195 0.0 0.0 106124 776 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 17310 0.0 0.0 114196 8532 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 17408 0.0 0.0 114324 8724 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 17485 0.0 0.0 107484 10184 ? D 01:16 0:00 tailwatchd - chkservd root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 1.0 0.0 240980 1960 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1260 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.4 0.0 23760 8796 ? S 00:50 1:36 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 404 ? S 00:48 0:00 /usr/bin/php nobody 20042 0.0 0.0 114456 8960 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20048 0.0 0.0 4612 900 ? Ss 01:16 0:00 jailshell (recordho) [27227] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 20049 0.0 0.0 4616 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27281] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20052 0.0 0.0 4612 908 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27299] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20057 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27324] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20058 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27252] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 nobody 20059 0.0 0.0 114328 8908 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20066 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (posaufacom) [27322] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 1200 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20069 0.0 0.0 106120 968 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27350] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 20072 0.0 0.0 4612 904 ? Ss 01:16 0:00 jailshell (posaufacom) [27314] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 nobody 20083 0.0 0.0 114192 8676 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start nobody 20085 0.0 0.0 114192 8356 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20177 0.0 0.0 106124 1144 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20218 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/8:1] mailnull 20370 0.0 0.0 74248 4068 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 20391 0.0 0.0 52812 4708 ? S 01:17 0:00 dovecot/lmtp nobody 20406 0.0 0.0 114464 9136 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20421 0.0 0.0 114440 9200 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.0 0.0 265704 408 ? S 00:46 0:00 /usr/bin/php root 20478 0.0 0.0 106124 776 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] wwwfacul 20831 0.0 0.0 263164 408 ? S 00:46 0:00 /usr/bin/php root 20874 0.0 0.0 106120 1072 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f pdvxyz 23169 0.0 0.0 185472 2928 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 440 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 2796 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 2812 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] dovecot 23937 0.0 0.0 31880 2012 ? S 01:18 0:00 dovecot/auth root 23946 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/7:1] nobody 24106 0.0 0.0 114500 7312 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] 760 25007 0.0 0.0 142520 15472 ? S 01:18 0:00 php.cgi recordho 25063 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 25067 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 25068 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1120 25071 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25072 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations recordho 25077 0.0 0.0 296212 29396 ? S 01:18 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 25079 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 861 25083 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1120 25085 0.0 0.0 291176 24632 ? S 01:18 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25086 0.0 0.0 244336 20820 ? D 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 861 25163 0.0 0.0 284276 18660 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 25164 0.0 0.0 284788 18844 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 699 25196 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 699 25197 0.0 0.0 291180 24612 ? S 01:18 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php centralc 25202 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php centralc 25203 0.0 0.0 291432 24932 ? S 01:18 0:00 php -q /home/centralc/public_html/pipe/pipe.php suzantol 25425 0.1 0.0 219216 16900 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] 879 26253 0.1 0.0 187024 17356 ? S 01:18 0:00 /usr/bin/php root 26512 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/11:2] maisg647 26560 0.0 0.0 241460 420 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 408 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 412 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 412 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 412 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 412 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 408 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 412 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 300 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 252 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth 879 26991 0.0 0.0 186252 16764 ? S 01:18 0:00 /usr/bin/php root 27087 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/6:1] 879 27210 0.0 0.0 188324 16776 ? S 01:18 0:00 /usr/bin/php iasdcent 27220 0.0 0.0 185224 16172 ? S 01:18 0:00 /usr/bin/php centralc 27223 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations centralc 27224 0.0 0.0 296736 29752 ? S 01:18 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations icowebra 27225 0.0 0.0 185220 14388 ? S 01:18 0:00 /usr/bin/php recordho 27227 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 27233 0.0 0.0 296212 29396 ? S 01:18 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1077 27234 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1077 27235 0.1 0.0 244344 20828 ? D 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php icowebra 27239 0.0 0.0 185220 14380 ? S 01:18 0:00 /usr/bin/php recordho 27242 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations 1120 27248 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 27252 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 recordho 27260 0.0 0.0 296208 29400 ? S 01:18 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1125 27263 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1120 27264 0.0 0.0 296232 29448 ? S 01:18 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1125 27268 0.0 0.0 284792 18840 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php icowebra 27277 0.0 0.0 185220 14384 ? S 01:18 0:00 /usr/bin/php 1125 27281 0.0 0.0 4616 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 27289 0.0 0.0 106120 1176 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 27292 0.0 0.0 284792 19128 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 27299 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27301 0.0 0.0 106120 1180 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27303 0.0 0.0 284276 18668 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 27314 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 27316 0.0 0.0 106120 1168 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 27318 0.0 0.0 284280 18672 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 861 27322 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 27323 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 27324 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27325 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27326 0.0 0.0 136464 4388 ? S 01:18 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 27327 0.0 0.0 284788 18956 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 27332 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 27333 0.0 0.0 106120 1144 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 27334 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27335 0.0 0.0 106120 1180 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 27336 0.0 0.0 283524 16500 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 27337 0.0 0.0 284792 18968 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 27343 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27344 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27346 0.0 0.0 136468 4396 ? S 01:18 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 27350 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27351 0.0 0.0 106120 1148 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 27352 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 27353 0.0 0.0 106120 1152 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 27354 0.0 0.0 284792 18972 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 861 27355 0.0 0.0 284792 18956 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 27358 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 27359 0.0 0.0 106120 1188 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 1125 27360 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27361 0.0 0.0 106120 1192 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 861 27362 0.0 0.0 284276 18672 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/poster.php 1125 27363 0.0 0.0 284276 18660 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php ferre461 27442 0.0 0.0 232664 16900 ? S 01:09 0:00 /usr/bin/php 1125 27447 0.0 0.0 9456 1096 ? S 01:18 0:00 /bin/sh php.cgi 1125 27448 0.0 0.0 9464 1104 ? S 01:18 0:00 /bin/sh php.cgi root 27449 0.0 0.0 31880 1692 ? S 01:18 0:00 dovecot/auth -w 1125 27454 0.0 0.0 142776 17100 ? S 01:18 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 27455 0.0 0.0 142776 17104 ? S 01:18 0:00 /opt/php/php-5.6.26/bin/php-cgi mailnull 27462 0.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27463 0.0 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27464 0.0 0.0 71032 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27465 0.0 0.0 71028 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27468 0.0 0.0 71028 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27472 0.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27473 0.0 0.0 71028 3388 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27475 0.0 0.0 71028 3384 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 879 27489 0.1 0.0 186252 16640 ? S 01:18 0:00 /usr/bin/php 879 27497 0.1 0.0 187024 17696 ? S 01:18 0:00 /usr/bin/php 879 27500 0.0 0.0 186252 16764 ? S 01:18 0:00 /usr/bin/php 879 27510 0.0 0.0 186252 16640 ? S 01:18 0:00 /usr/bin/php 879 27511 0.0 0.0 186252 16648 ? S 01:18 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 16900 ? S 01:09 0:00 /usr/bin/php gfebe 27524 0.0 0.0 185408 16932 ? S 01:18 0:00 /usr/bin/php 879 27525 0.1 0.0 186252 16756 ? S 01:18 0:00 /usr/bin/php 879 27526 0.0 0.0 186256 16652 ? S 01:18 0:00 /usr/bin/php suzantol 27534 0.0 0.0 210508 16916 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] 879 27545 0.1 0.0 186252 16688 ? S 01:18 0:00 /usr/bin/php 879 27546 0.0 0.0 186256 16640 ? S 01:18 0:00 /usr/bin/php 879 27557 0.0 0.0 186252 16644 ? S 01:18 0:00 /usr/bin/php radiosat 27560 0.0 0.0 185600 688 ? S 01:07 0:00 /usr/bin/php nobody 27566 0.0 0.0 119732 9388 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start 879 27578 0.0 0.0 186252 16652 ? S 01:18 0:00 /usr/bin/php 879 27585 0.1 0.0 187020 17352 ? S 01:18 0:00 /usr/bin/php facildia 27623 0.0 0.0 198808 16900 ? S 01:07 0:00 /usr/bin/php pdvxyz 27624 0.0 0.0 185476 13820 ? S 01:19 0:00 /usr/bin/php root 27628 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27631 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27640 0.0 0.0 142436 1456 ? S 01:19 0:00 CROND root 27648 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27651 0.0 0.0 142436 1452 ? S 01:19 0:00 CROND root 27654 0.0 0.0 142440 1448 ? S 01:19 0:00 CROND 879 27720 0.0 0.0 186252 16648 ? S 01:19 0:00 /usr/bin/php icowebra 27723 0.0 0.0 186092 15108 ? S 01:19 0:00 /usr/bin/php 879 27725 0.2 0.0 187020 17360 ? S 01:19 0:00 /usr/bin/php root 27745 0.0 0.0 106120 1192 ? Ss 01:19 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27753 0.0 0.0 4612 944 ? Ss 01:19 0:00 jailshell (posaufacom) [6148] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 27757 0.0 0.0 4612 944 ? Ss 01:19 0:00 jailshell (posaufacom) [6059] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 27759 0.0 0.0 4612 940 ? Ss 01:19 0:00 jailshell (inovesocialcom) [6100] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 27765 0.0 0.0 4612 924 ? Ss 01:19 0:00 jailshell (recordho) [5995] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 27768 0.0 0.0 106124 1392 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27773 0.0 0.0 4612 940 ? Ss 01:19 0:00 jailshell (inovesocialcom) [6010] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 27835 0.0 0.0 106124 608 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27860 0.3 0.0 169920 27212 ? Ds 01:19 0:00 lfd - scanning log files root 27867 0.0 0.0 142436 700 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 464 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 608 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 740 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 18304 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 16904 ? S 01:07 0:00 /usr/bin/php root 28532 0.0 0.0 235524 13188 ? S 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] ecfoto 28919 0.0 0.0 185820 3932 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 7148 ? S 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.0 0.0 215808 16904 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 404 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] root 30851 0.3 0.0 163904 52360 ? Ds Apr16 6:22 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 32262 0.0 0.0 185936 17080 ? S 01:19 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 364 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:19 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 104 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 172 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 348 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 148 ? S Apr16 0:01 dovecot/anvil root 2040 0.0 0.0 142436 604 ? S 01:18 0:00 CROND root 2042 0.0 0.0 142436 604 ? S 01:18 0:00 CROND root 2043 0.0 0.0 142436 604 ? S 01:18 0:00 CROND root 2052 0.0 0.0 142436 604 ? S 01:18 0:00 CROND root 2060 0.0 0.0 142436 604 ? S 01:18 0:00 CROND root 2066 0.0 0.0 142436 712 ? S 01:18 0:00 CROND root 3037 0.0 0.0 142436 112 ? S 00:34 0:00 CROND root 3059 14.2 77.2 58705080 50980144 ? Ds 00:34 6:43 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 115588 7176 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start dovenull 3299 0.0 0.0 42760 184 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 220 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 464 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 560 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 1876 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login root 3583 0.0 0.0 0 0 ? S 01:00 0:00 [kworker/u24:1] root 3717 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/2:0] root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 192 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 352 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 115008 5928 ? D 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 192 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 192 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] nobody 5674 0.0 0.0 112412 176 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 188 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 2952 ? S 01:01 0:00 /usr/bin/php 800 5886 0.0 0.0 142800 9164 ? D 01:19 0:00 php.cgi root 5916 0.0 0.0 167816 25640 ? S 01:19 0:00 lfd - checking system integrity root 5920 0.1 0.0 100988 440 ? D 01:19 0:00 /usr/bin/md5sum --check /var/lib/csf/csf.tempint 1125 6100 0.0 0.0 4612 396 ? S 01:19 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 6101 0.0 0.0 106124 240 ? S 01:19 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 6102 0.0 0.0 136464 1904 ? S 01:19 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 6148 0.0 0.0 4612 392 ? S 01:19 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 6149 0.0 0.0 106120 244 ? S 01:19 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 6150 0.0 0.0 284276 11260 ? S 01:19 0:00 php /home/posaufacom/public_html/postador/cron/stats.php icowebra 6242 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php mailnull 6267 0.0 0.0 71036 1672 ? D 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 6278 0.0 0.0 9460 252 ? S 01:19 0:00 /bin/sh php.cgi 1125 6279 0.0 0.0 142780 10084 ? D 01:19 0:00 /opt/php/php-5.6.26/bin/php-cgi root 6298 0.1 0.0 168424 26432 ? S 01:19 0:00 lfd - (child) (PT) checking user processes root 6352 0.0 0.0 9588 160 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 6456 ? S Apr17 0:08 tailwatchd root 6488 0.3 0.0 241536 11660 ? D 01:19 0:00 /usr/local/cpanel/3rdparty/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/lib/repair2.php mysql 6514 18.4 0.2 6973904 144324 ? Sl Apr17 236:01 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6597 0.1 0.0 38568 7616 ? DN 01:19 0:00 cpanellogd - sleeping for logs root 6633 0.0 0.0 0 0 ? S 01:19 0:00 [kworker/10:0] mailnull 6647 0.0 0.0 71032 1156 ? S 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 6648 0.0 0.0 71028 1156 ? S 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 6653 0.0 0.0 74248 2676 ? S 01:19 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 6708 0.0 0.0 101892 21220 ? S 01:19 0:00 cpsrvd (SSL) - check_ses --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 root 6731 0.0 0.0 142440 572 ? S 01:20 0:00 CROND root 6732 0.0 0.0 142440 596 ? S 01:20 0:00 CROND root 6733 0.0 0.0 142436 600 ? S 01:20 0:00 CROND root 6747 0.0 0.0 142436 604 ? S 01:20 0:00 CROND root 6760 0.0 0.0 142436 604 ? S 01:20 0:00 CROND root 6764 0.0 0.0 142440 596 ? S 01:20 0:00 CROND root 6765 0.0 0.0 142440 592 ? S 01:20 0:00 CROND root 6767 0.0 0.0 142440 592 ? S 01:20 0:00 CROND root 6768 0.0 0.0 142440 592 ? S 01:20 0:00 CROND root 6769 0.0 0.0 142440 596 ? S 01:20 0:00 CROND root 6770 0.0 0.0 142440 584 ? S 01:20 0:00 CROND root 6774 0.0 0.0 142440 592 ? S 01:20 0:00 CROND root 6776 0.0 0.0 109068 17844 ? S 01:20 0:00 /usr/local/cpanel/bin/cpses_tool root 6792 0.0 0.0 4612 492 ? Ss 01:20 0:00 jailshell (centralc) [14904] ll -c php -q /home/centralc/public_html/pipe/pipe.php root 6801 0.0 0.0 4612 492 ? Ss 01:20 0:00 jailshell (centralgib) [14894] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 6802 0.0 0.0 4612 488 ? Ss 01:20 0:00 jailshell (posaufacom) [14779] -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 6804 0.0 0.0 4612 508 ? Ss 01:20 0:00 jailshell (centralgib) [15449] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 6807 0.0 0.0 4612 508 ? Ss 01:20 0:00 jailshell (inovesocialcom) [15000] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 6818 0.0 0.0 4612 488 ? Ss 01:20 0:00 jailshell (centralpluginscp) [14812] p -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations root 6819 0.0 0.0 4612 508 ? Ss 01:20 0:00 jailshell (centralpluginscp) [14869] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 6820 0.0 0.0 106120 264 ? Ss 01:20 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 6823 0.0 0.0 4612 492 ? Ss 01:20 0:00 jailshell (centralagenciaw3) [14886] p -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations root 6825 0.0 0.0 4612 492 ? Ss 01:20 0:00 jailshell (recordho) [14798] ll -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 6826 0.0 0.0 4612 504 ? Ss 01:20 0:00 jailshell (centralagenciaw3) [15377] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 6831 0.0 0.0 4612 504 ? Ss 01:20 0:00 jailshell (centralc) [15484] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations icowebra 6842 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 188 ? S Apr17 0:00 /usr/bin/php nobody 7514 0.0 0.0 115672 9772 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7565 0.0 0.0 142436 556 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 568 ? S 01:13 0:00 CROND root 7590 0.0 0.0 142436 708 ? S 01:13 0:00 CROND nobody 7627 0.0 0.0 114196 8080 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 114324 7256 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7646 0.0 0.0 114196 8304 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7679 0.0 0.0 114536 8548 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 6572 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 6592 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 115536 9924 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115520 8380 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 9784 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7719 0.0 0.0 114500 7760 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114456 7756 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7750 0.0 0.0 106120 236 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7757 0.0 0.0 4612 472 ? Ss 01:13 0:00 jailshell (inovesocialcom) [25067] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 7806 0.0 0.0 106124 392 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7879 0.0 0.0 142436 568 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 115532 9384 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74248 2096 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8035 0.0 0.0 114192 6624 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8090 0.0 0.0 106124 476 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 2976 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114192 7712 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114192 8276 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9264 0.0 0.0 114192 8156 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114480 7064 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114480 6960 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9308 0.0 0.0 106120 260 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 146060 13396 ? D 01:14 0:00 php.cgi buffetlu 9577 0.0 0.0 200280 15552 ? S 01:02 0:00 /usr/bin/php root 9743 0.0 0.0 106124 388 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10317 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/4:2] root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10789 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:5] root 10926 0.0 0.0 4640 96 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 152 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1616 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 112 ? Ss Apr16 0:00 /usr/sbin/sshd root 11198 0.0 0.0 142440 628 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142440 628 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 568 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 372 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 652 ? S 01:15 0:00 CROND root 11233 0.0 0.0 142440 644 ? S 01:15 0:00 CROND root 11234 0.0 0.0 142436 712 ? S 01:15 0:00 CROND root 11237 0.0 0.0 142440 652 ? S 01:15 0:00 CROND root 11238 0.0 0.0 142440 640 ? S 01:15 0:00 CROND root 11239 0.0 0.0 142436 712 ? S 01:15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 184 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 112 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 100 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 768 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 516 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 440 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114192 7944 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 10064 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start named 11603 0.4 0.0 746072 5664 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11713 0.0 0.0 136204 24 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 424 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 52 ? Ss Apr16 0:00 /usr/sbin/atd queroupa 11862 0.0 0.0 198652 16128 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16084 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 17160 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 224 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12497 0.0 0.0 114328 8232 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 114328 8164 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12545 0.0 0.0 106120 232 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12560 0.0 0.0 4108 88 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 92 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 88 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 92 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 88 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 88 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12574 0.0 0.0 4612 476 ? Ss 01:15 0:00 jailshell (centralgib) [25072] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 12576 0.0 0.0 4612 472 ? Ss 01:15 0:00 jailshell (centralpluginscp) [25071] p -q /home/centralpluginscp/public_html/pipe/pipe.php root 12583 0.0 0.0 4612 472 ? Ss 01:15 0:00 jailshell (centralagenciaw3) [25196] p -q /home/centralagenciaw3/public_html/pipe/pipe.php root 12594 0.0 0.0 4612 504 ? Ss 01:15 0:00 jailshell (centralgib) [27234] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php root 12595 0.0 0.0 4612 500 ? Ss 01:15 0:00 jailshell (centralc) [27223] ll -c php -q /home/centralc/public_html/arearestrita/cron.php escalations rkembala 12628 0.0 0.0 186792 3500 ? S 01:06 0:00 /usr/bin/php 992 12634 0.0 0.0 187084 7104 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3180 ? S 01:06 0:00 /usr/bin/php root 12645 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12648 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12651 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12669 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12674 0.0 0.0 142436 712 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 392 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 12764 0.0 0.0 114480 6888 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3564 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 404 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5016 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 116 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14250 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/9:0] root 14275 0.0 0.0 106120 236 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 nobody 14288 0.0 0.0 114196 7960 ? S 01:18 0:00 /usr/local/apache/bin/httpd -k start root 14298 0.0 0.0 4612 512 ? Ss 01:18 0:00 jailshell (posaufacom) [27332] -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 14305 0.0 0.0 4612 512 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27334] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 14306 0.0 0.0 4612 508 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27360] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 14307 0.0 0.0 4612 512 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27343] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 14365 0.0 0.0 106128 392 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14425 0.0 0.0 106128 416 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14705 0.0 0.0 106124 392 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14715 0.0 0.0 106124 580 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh 861 14779 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 14781 0.0 0.0 106120 216 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 861 14782 0.0 0.0 284276 12056 ? S 01:20 0:00 php /home/posaufacom/public_html/postador/cron/poster.php recordho 14798 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (recordho) [init] ell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations recordho 14799 0.0 0.0 288780 14736 ? D 01:20 0:00 php -q /home/recordho/public_html/arearestrita/cron.php escalations 1120 14812 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1120 14813 0.0 0.0 288748 14768 ? D 01:20 0:00 php -q /home/centralpluginscp/public_html/arearestrita/cron.php escalations 1120 14869 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1120 14882 0.0 0.0 288264 14428 ? D 01:20 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 699 14886 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations 1077 14894 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php centralc 14904 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/pipe/pipe.php 1077 14905 0.3 0.0 243568 15380 ? D 01:20 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 699 14906 0.0 0.0 288748 14772 ? D 01:20 0:00 php -q /home/centralagenciaw3/public_html/arearestrita/cron.php escalations centralc 14908 0.0 0.0 288788 15428 ? D 01:20 0:00 php -q /home/centralc/public_html/pipe/pipe.php 1125 15000 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 15001 0.0 0.0 106120 244 ? S 01:20 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 15005 0.0 0.0 136464 1912 ? S 01:20 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] root 15373 0.0 0.0 61336 1928 ? S Apr16 0:03 queueprocd - wait to process a task 699 15377 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 1077 15449 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 699 15480 0.0 0.0 288260 14420 ? D 01:20 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php 1077 15482 0.2 0.0 243512 15368 ? D 01:20 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations centralc 15484 0.0 0.0 4612 396 ? S 01:20 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations centralc 15485 0.0 0.0 289340 15740 ? D 01:20 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations root 15606 0.0 0.0 25860 332 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 140 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 904 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1096 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 896 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 892 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 904 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1124 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 880 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 180 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 712 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 684 ? SN Apr16 0:00 cpanellogd - sleeping for logs root 16733 0.0 0.0 101892 21484 ? S Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 881 16969 0.0 0.0 184960 7036 ? S 01:20 0:00 /usr/bin/php root 17195 0.0 0.0 106124 396 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 17485 0.0 0.0 109984 11424 ? D 01:16 0:00 tailwatchd - chkservd mailnull 17617 0.0 0.0 71028 1152 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 17625 0.0 0.0 71032 1152 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 17626 0.0 0.0 71032 1152 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 17631 0.0 0.0 71032 1156 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 17632 0.0 0.0 71036 1148 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 17635 0.0 0.0 71032 1156 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 17636 0.0 0.0 71032 1148 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 1125 17643 0.0 0.0 9456 244 ? S 01:20 0:00 /bin/sh php.cgi 1125 17644 0.1 0.0 142780 10084 ? D 01:20 0:00 /opt/php/php-5.6.26/bin/php-cgi root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] mailnull 17784 0.0 0.0 74272 3904 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid conhecsc 17794 0.1 0.0 0 0 ? Z 01:20 0:00 [php] mailnull 17831 0.0 0.0 74272 3912 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 867 17832 0.1 0.0 186840 13728 ? S 01:20 0:00 /usr/bin/php conhecsc 17880 0.2 0.0 186048 9500 ? D 01:20 0:00 /usr/bin/php sistemam 17902 0.5 0.0 185888 9064 ? D 01:20 0:00 /usr/bin/php mailnull 17998 0.0 0.0 71032 1156 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 18000 0.0 0.0 71028 1156 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 18015 0.0 0.0 74012 1244 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 18022 0.0 0.0 114060 6744 ? S 01:20 0:00 /usr/local/apache/bin/httpd -k start root 18027 0.0 0.0 106124 392 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18028 0.0 0.0 106124 396 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18029 0.0 0.0 106124 396 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18030 0.0 0.0 106124 396 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18031 0.0 0.0 106128 400 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18032 0.0 0.0 106124 392 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18033 0.0 0.0 106124 540 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18034 0.0 0.0 106124 396 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18035 0.0 0.0 100992 556 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18036 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.168.170.128 root 18037 0.0 0.0 100992 540 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18038 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.198.121.116 root 18039 0.0 0.0 100996 572 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18040 0.0 0.0 103364 852 ? S 01:20 0:00 grep 104.198.121.116 root 18041 0.0 0.0 100992 568 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18042 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.198.121.116 root 18043 0.0 0.0 100992 552 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18044 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.168.170.128 root 18045 0.0 0.0 100992 552 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18046 0.0 0.0 103360 852 ? S 01:20 0:00 grep 144.217.225.173 root 18047 0.0 0.0 100992 552 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18048 0.0 0.0 100992 564 ? D 01:20 0:00 cat /home/minuto-a-minuto/18.04.2017_00-01-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-02-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-03-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-08-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-11-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-12-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-13-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-14-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-15-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-16-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-17-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-18-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-19-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-20-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-21-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-22-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-23-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-24-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-25-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-26-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-27-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-28-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-29-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-30-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-31-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-32-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-33-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-34-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-35-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-36-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-37-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-38-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-39-03-minuto.txt /home/minuto-a-minuto/18.04.2017_00-40-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-41-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-42-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-43-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-44-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-45-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-46-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-47-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-48-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-49-01-minuto.txt /home/minuto-a-minuto/18.04.2017_00-50-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-51-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-02-minuto.txt /home/minuto-a-minuto/18.04.2017_00-54-11-minuto.txt /home/minuto-a-minuto/18.04.2017_00-55-14-minuto.txt /home/minuto-a-minuto/18.04.2017_00-56-35-minuto.txt /home/minuto-a-minuto/18.04.2017_00-57-27-minuto.txt /home/minuto-a-minuto/18.04.2017_00-58-07-minuto.txt /home/minuto-a-minuto/18.04.2017_00-59-21-minuto.txt /home/minuto-a-minuto/18.04.2017_01-00-17-minuto.txt /home/minuto-a-minuto/18.04.2017_01-01-14-minuto.txt /home/minuto-a-minuto/18.04.2017_01-02-03-minuto.txt /home/minuto-a-minuto/18.04.2017_01-03-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-04-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-05-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-06-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-07-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-08-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-09-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-10-02-minuto.txt /home/minuto-a-minuto/18.04.2017_01-11-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-12-01-minuto.txt /home/minuto-a-minuto/18.04.2017_01-15-43-minuto.txt /home/minuto-a-minuto/18.04.2017_01-17-42-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-00-minuto.txt /home/minuto-a-minuto/18.04.2017_01-18-24-minuto.txt /home/minuto-a-minuto/18.04.2017_01-19-09-minuto.txt /home/minuto-a-minuto/18.04.2017_01-20-04-minuto.txt root 18049 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.198.121.116 root 18050 0.0 0.0 103360 852 ? S 01:20 0:00 grep 104.198.121.116 867 18053 0.0 0.0 139932 2024 ? D 01:20 0:00 /usr/bin/php loppelco 18063 0.0 0.0 139932 2064 ? D 01:20 0:00 /usr/bin/php mailnull 18070 0.0 0.0 74012 1304 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 18071 0.0 0.0 74012 1308 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 894 18075 0.1 0.1 222908 97796 ? D 01:20 0:00 spamd child jrferrag 18076 0.1 0.1 222640 97768 ? D 01:20 0:00 spamd child root 18079 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18080 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18081 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18082 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18083 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18084 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18085 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18086 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18087 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18088 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18089 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18091 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18094 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18096 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18098 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18099 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18101 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18102 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18103 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18104 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18105 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18106 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18107 0.0 0.0 142436 1448 ? S 01:21 0:00 CROND root 18108 0.0 0.0 142436 1444 ? S 01:21 0:00 CROND root 18109 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND conhecsc 18110 0.1 0.0 139932 2072 ? D 01:21 0:00 /usr/bin/php fielgui 18111 0.1 0.0 139932 2076 ? D 01:21 0:00 /usr/bin/php root 18121 0.0 0.0 106120 1164 ? Ss 01:21 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 18122 0.0 0.0 106120 1192 ? Ss 01:21 0:00 /bin/sh -c /bin/malv-block.sh > /dev/null 2>&1 root 18123 0.0 0.0 4352 596 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 18124 0.0 0.0 4612 924 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 root 18125 0.0 0.0 4612 920 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://agegames.com.br/index.php/cron root 18127 0.0 0.0 106120 1196 ? Ss 01:21 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 18128 0.0 0.0 4612 920 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/recordho/public_html/arearestrita/cron.php escalations root 18129 0.0 0.0 4352 588 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 18130 0.0 0.0 106120 1184 ? Ss 01:21 0:00 /bin/sh -c /bin/block-malv.sh > /dev/null 2>&1 root 18132 0.0 0.0 106120 1156 ? Ss 01:21 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 18133 0.0 0.0 106120 1156 ? Ss 01:21 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 18134 0.0 0.0 4352 600 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/poster.php >/dev/null 2>&1 root 18136 0.0 0.0 106124 1192 ? Ss 01:21 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 root 18138 0.0 0.0 106120 1184 ? Ss 01:21 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 18139 0.0 0.0 106120 1192 ? Ss 01:21 0:00 /bin/bash -c /usr/local/rtm/bin/rtm 37 > /dev/null 2> /dev/null root 18140 0.0 0.0 4612 924 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/centralnetstream/pastasw/crons/cron.php escalations root 18142 0.0 0.0 4612 920 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php -q /home/zedeveva/public_html/campanha/app/console mautic:emails:send root 18143 0.0 0.0 4612 924 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 18144 0.0 0.0 4616 924 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 18145 0.0 0.0 106120 1164 ? Ss 01:21 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 18146 0.0 0.0 106120 1352 ? S 01:21 0:00 /bin/bash /bin/block-malv.sh root 18148 0.0 0.0 106120 1384 ? S 01:21 0:00 /bin/bash /bin/bloqueia-envio.sh root 18149 0.0 0.0 106120 1176 ? S 01:21 0:00 /bin/bash /bin/corrigir-ips.sh root 18155 0.0 0.0 106120 1388 ? S 01:21 0:00 /bin/bash /bin/malv-block.sh root 18163 0.0 0.0 106124 1392 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18169 0.0 0.0 4352 604 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 18170 0.0 0.0 4356 600 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 18171 0.0 0.0 4612 924 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 18172 0.0 0.0 4352 584 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 18173 0.0 0.0 4352 604 ? Ss 01:21 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 18181 0.0 0.0 106120 504 ? S 01:21 0:00 /bin/bash /bin/corrigir-ips.sh root 18182 0.0 0.0 139264 3564 ? S 01:21 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 18183 0.0 0.0 103360 844 ? S 01:21 0:00 grep sim root 18184 0.0 0.0 100976 656 ? S 01:21 0:00 wc -l mailnull 18185 0.0 0.0 74012 1312 ? S 01:21 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 18186 0.0 0.0 106120 1372 ? S 01:21 0:00 /bin/bash /bin/brut-filtro.sh root 18188 0.0 0.0 106124 1332 ? S 01:21 0:00 /bin/bash /bin/verifica-spf.sh root 18191 0.0 0.0 106124 1360 ? S 01:21 0:00 /bin/bash /bin/monitora-load.sh root 18192 0.0 0.0 139932 2028 ? D 01:21 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 18193 0.0 0.0 121952 1208 ? D 01:21 0:00 /usr/bin/perl /usr/local/rtm/bin/rtm 37 mailnull 18209 1.0 0.0 73964 7696 ? D 01:21 0:00 /usr/sbin/sendmail -f root -t root 18226 0.0 0.0 44164 2720 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs root 18227 0.0 0.0 44164 2700 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs root 18228 0.0 0.0 44164 2712 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs 523 root 18229 0.0 0.0 44164 2724 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs 782 root 18230 0.0 0.0 44164 2716 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs 592 root 18231 0.0 0.0 44164 2708 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs 840 root 18232 0.0 0.0 44164 2688 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs 1088 root 18233 0.0 0.0 44164 2736 ? D 01:21 0:00 /usr/local/cpanel/bin/setupvirtfs 1050 diadiapr 18248 0.0 0.0 139932 2004 ? D 01:21 0:00 /usr/bin/php root 18268 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/0:2] root 18278 0.0 0.0 106124 604 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18296 0.0 0.0 106124 396 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18298 0.0 0.0 100988 576 ? D 01:21 0:00 cat /var/log/exim_mainlog root 18300 0.0 0.0 103360 848 ? S 01:21 0:00 grep 104.130.11.193 root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] mailnull 19055 2.0 0.0 73972 7536 ? D 01:21 0:00 send-mail -i -- admin@conectadohost.com.br root 19060 0.5 0.0 108344 1184 ? R 01:21 0:00 ps aux root 19132 1.0 0.0 240980 1840 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1232 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.3 0.0 23760 8632 ? S 00:50 1:37 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable root 19719 0.0 0.0 106124 568 ? S 01:21 0:00 /bin/bash /bin/verifica-spf.sh postgres 19724 0.0 0.0 216116 1624 ? Ds 01:21 0:00 postgres: autovacuum worker process root 19738 0.0 0.0 106124 516 ? S 01:21 0:00 /bin/bash /bin/verifica-spf.sh root 19739 0.0 0.0 100988 576 ? D 01:21 0:00 cat /etc/userdatadomains root 19740 0.0 0.0 103364 852 ? S 01:21 0:00 grep \babc\b root 19741 0.0 0.0 106004 884 ? S 01:21 0:00 awk -F: {print $1} root 19748 0.0 0.0 106120 652 ? S 01:21 0:00 /bin/bash /bin/brut-filtro.sh root 19749 0.0 0.0 106120 528 ? S 01:21 0:00 /bin/bash /bin/brut-filtro.sh root 19750 0.0 0.0 100988 576 ? D 01:21 0:00 cat /home/pega-log-brut/comp/lista-comp.txt root 19751 0.0 0.0 103360 852 ? S 01:21 0:00 grep 103.9.116.246 root 19752 0.0 0.0 100976 652 ? S 01:21 0:00 wc -l 894 19776 0.0 0.0 186828 188 ? S 00:48 0:00 /usr/bin/php root 20049 0.0 0.0 4616 504 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27281] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20052 0.0 0.0 4612 508 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27299] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 20057 0.0 0.0 4612 504 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27324] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 20058 0.0 0.0 4612 504 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27252] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20066 0.0 0.0 4612 504 ? Ss 01:16 0:00 jailshell (posaufacom) [27322] -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 360 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20069 0.0 0.0 106120 248 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4612 504 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27350] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 nobody 20085 0.0 0.0 114192 6904 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20177 0.0 0.0 106124 388 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 20370 0.0 0.0 74248 2104 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20406 0.0 0.0 114464 7392 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start nobody 20421 0.0 0.0 114440 8584 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.0 0.0 265704 192 ? S 00:46 0:00 /usr/bin/php root 20478 0.0 0.0 106124 504 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] wwwfacul 20831 0.0 0.0 263164 192 ? S 00:46 0:00 /usr/bin/php root 20874 0.0 0.0 106120 212 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f pdvxyz 23169 0.0 0.0 185472 2008 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 172 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 1876 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 1892 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] dovecot 23937 0.0 0.0 31880 800 ? S 01:18 0:00 dovecot/auth root 23946 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/7:1] nobody 24106 0.0 0.0 114504 7432 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] 760 25007 0.0 0.0 142520 8832 ? S 01:18 0:00 php.cgi 1125 25067 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1120 25071 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralpluginscp) [init] hp -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25072 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 25079 0.0 0.0 106120 240 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1120 25085 0.0 0.0 291176 16580 ? S 01:18 0:00 php -q /home/centralpluginscp/public_html/pipe/pipe.php 1077 25086 0.0 0.0 244864 15216 ? D 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 25164 0.0 0.0 284788 10632 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php 699 25196 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralagenciaw3) [init] hp -q /home/centralagenciaw3/public_html/pipe/pipe.php 699 25197 0.0 0.0 291180 16632 ? S 01:18 0:00 php -q /home/centralagenciaw3/public_html/pipe/pipe.php suzantol 25425 0.1 0.0 219216 16072 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] 879 26253 0.0 0.0 187024 9052 ? S 01:18 0:00 /usr/bin/php root 26512 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/11:2] maisg647 26560 0.0 0.0 241460 200 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 192 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 192 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 192 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 192 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 192 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 192 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 192 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 120 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 112 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth 879 26991 0.0 0.0 186252 8460 ? S 01:18 0:00 /usr/bin/php root 27087 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/6:1] 879 27210 0.0 0.0 188324 8408 ? S 01:18 0:00 /usr/bin/php iasdcent 27220 0.0 0.0 185224 8176 ? S 01:18 0:00 /usr/bin/php centralc 27223 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralc) [init] ell -c php -q /home/centralc/public_html/arearestrita/cron.php escalations centralc 27224 0.0 0.0 296736 21668 ? S 01:18 0:00 php -q /home/centralc/public_html/arearestrita/cron.php escalations icowebra 27225 0.0 0.0 185220 6852 ? S 01:18 0:00 /usr/bin/php 1077 27234 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php 1077 27235 0.0 0.0 244872 15224 ? D 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/pop.php icowebra 27239 0.0 0.0 185220 6844 ? S 01:18 0:00 /usr/bin/php 1125 27252 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 27263 0.0 0.0 106120 240 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 27268 0.0 0.0 284792 10628 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php icowebra 27277 0.0 0.0 185220 6848 ? S 01:18 0:00 /usr/bin/php 1125 27281 0.0 0.0 4616 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 27289 0.0 0.0 106120 228 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 27292 0.0 0.0 284792 11144 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 27299 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27301 0.0 0.0 106120 232 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27303 0.0 0.0 284276 10456 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php 861 27322 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 861 27323 0.0 0.0 106120 240 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/misc.php >/dev/null 2>&1 1125 27324 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27325 0.0 0.0 106120 240 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27326 0.0 0.0 136464 1880 ? S 01:18 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 861 27327 0.0 0.0 284788 10996 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/misc.php 861 27332 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (posaufacom) [init] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 861 27333 0.0 0.0 106120 196 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 1125 27334 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27335 0.0 0.0 106120 232 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 861 27336 0.0 0.0 284276 12044 ? S 01:18 0:00 php /home/posaufacom/public_html/postador/cron/stats.php 1125 27337 0.0 0.0 284792 10756 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 27343 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27344 0.0 0.0 106120 244 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 27346 0.0 0.0 136468 1884 ? S 01:18 0:00 wget --spider -O - https://inovesocial.com.br/social/index.php/cron 1125 27350 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27351 0.0 0.0 106120 200 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27354 0.0 0.0 284792 10760 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 27360 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27361 0.0 0.0 106120 244 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 27363 0.0 0.0 284276 10448 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php ferre461 27442 0.0 0.0 232664 15832 ? S 01:09 0:00 /usr/bin/php 1125 27447 0.0 0.0 9456 224 ? S 01:18 0:00 /bin/sh php.cgi 1125 27448 0.0 0.0 9464 232 ? S 01:18 0:00 /bin/sh php.cgi 1125 27454 0.0 0.0 142784 10084 ? D 01:18 0:00 /opt/php/php-5.6.26/bin/php-cgi 1125 27455 0.0 0.0 142784 10088 ? D 01:18 0:00 /opt/php/php-5.6.26/bin/php-cgi mailnull 27462 0.0 0.0 71028 1156 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27463 0.0 0.0 71040 1672 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27464 0.0 0.0 71036 1408 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27465 0.0 0.0 71036 1668 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27468 0.0 0.0 71028 1152 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27472 0.0 0.0 71032 1408 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27473 0.0 0.0 71032 1412 ? D 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 27475 0.0 0.0 71028 1152 ? S 01:18 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 879 27489 0.0 0.0 186252 8336 ? S 01:18 0:00 /usr/bin/php 879 27497 0.0 0.0 187024 9384 ? S 01:18 0:00 /usr/bin/php 879 27500 0.0 0.0 186252 8460 ? S 01:18 0:00 /usr/bin/php 879 27510 0.0 0.0 186252 8336 ? S 01:18 0:00 /usr/bin/php 879 27511 0.0 0.0 186252 8344 ? S 01:18 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 15776 ? S 01:09 0:00 /usr/bin/php gfebe 27524 0.0 0.0 185408 8872 ? S 01:18 0:00 /usr/bin/php 879 27525 0.0 0.0 186252 8452 ? S 01:18 0:00 /usr/bin/php 879 27526 0.0 0.0 186256 8348 ? S 01:18 0:00 /usr/bin/php suzantol 27534 0.0 0.0 210508 16176 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] 879 27545 0.0 0.0 186252 8384 ? S 01:18 0:00 /usr/bin/php 879 27546 0.0 0.0 186256 8336 ? S 01:18 0:00 /usr/bin/php 879 27557 0.0 0.0 186252 8340 ? S 01:18 0:00 /usr/bin/php radiosat 27560 0.0 0.0 185600 384 ? S 01:07 0:00 /usr/bin/php 879 27578 0.0 0.0 186252 8348 ? S 01:18 0:00 /usr/bin/php 879 27585 0.1 0.0 187020 11180 ? S 01:18 0:00 /usr/bin/php facildia 27623 0.0 0.0 198808 16048 ? S 01:07 0:00 /usr/bin/php pdvxyz 27624 0.0 0.0 185476 6512 ? S 01:19 0:00 /usr/bin/php root 27628 0.0 0.0 142436 604 ? S 01:19 0:00 CROND root 27640 0.0 0.0 142436 604 ? S 01:19 0:00 CROND root 27648 0.0 0.0 142436 604 ? S 01:19 0:00 CROND root 27654 0.0 0.0 142436 708 ? S 01:19 0:00 CROND 879 27720 0.0 0.0 186252 8344 ? S 01:19 0:00 /usr/bin/php icowebra 27723 0.0 0.0 186092 7496 ? S 01:19 0:00 /usr/bin/php 879 27725 0.1 0.0 187020 11148 ? S 01:19 0:00 /usr/bin/php root 27745 0.0 0.0 106120 264 ? Ss 01:19 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27753 0.0 0.0 4612 512 ? Ss 01:19 0:00 jailshell (posaufacom) [6148] l -c php /home/posaufacom/public_html/postador/cron/stats.php >/dev/null 2>&1 root 27759 0.0 0.0 4612 508 ? Ss 01:19 0:00 jailshell (inovesocialcom) [6100] wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 root 27768 0.0 0.0 106124 392 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27835 0.0 0.0 106124 452 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27860 0.2 0.0 169920 25964 ? Ss 01:19 0:00 lfd - sleeping root 27867 0.0 0.0 142436 468 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 248 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 376 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 428 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 17228 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 15372 ? S 01:07 0:00 /usr/bin/php root 28532 0.0 0.0 235524 7060 ? S 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] ecfoto 28919 0.0 0.0 185820 3624 ? S 01:03 0:00 /usr/bin/php nobody 29086 0.0 0.0 117036 6884 ? S 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.0 0.0 215808 15824 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] root 30851 0.3 0.1 222220 96516 ? Ss Apr16 6:23 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 32262 0.0 0.0 185936 9020 ? S 01:19 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 364 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:20 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:19 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 104 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 172 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 540 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 388 ? S Apr16 0:01 dovecot/anvil root 2042 0.0 0.0 142436 604 ? S 01:18 0:00 CROND root 2052 0.0 0.0 142436 604 ? S 01:18 0:00 CROND diadiapr 2988 0.8 0.0 187272 22828 ? D 01:22 0:00 /usr/bin/php root 3037 0.0 0.0 142436 112 ? S 00:34 0:00 CROND root 3059 13.9 77.2 58705080 50981848 ? Ds 00:34 6:43 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 116112 9188 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start dovenull 3299 0.0 0.0 42904 2004 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 220 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 464 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 1824 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 2132 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 384 ? S 00:45 0:00 dovecot/imap-login 1125 3539 0.0 0.0 4612 396 ? S 01:22 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 3582 0.0 0.0 106120 1192 ? S 01:22 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 3592 0.3 0.0 284792 18984 ? S 01:22 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 4022 0.0 0.0 4612 396 ? S 01:22 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 4061 0.0 0.0 106120 1188 ? S 01:22 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 4066 0.4 0.0 284796 18856 ? S 01:22 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] ecfoto 4205 0.6 0.0 186208 17140 ? D 01:22 0:00 /usr/bin/php metalma 4212 0.0 0.0 186284 192 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 352 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 115008 5932 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 192 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 192 ? S 00:45 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] mailnull 5498 0.4 0.0 71036 3384 ? D 01:22 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 5672 1.2 0.0 73964 7708 ? D 01:22 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root nobody 5674 0.0 0.0 112412 176 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 188 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 2952 ? S 01:01 0:00 /usr/bin/php 800 5886 0.1 0.0 157764 27052 ? D 01:19 0:00 php.cgi root 5916 0.0 0.0 167816 25640 ? S 01:19 0:00 lfd - checking system integrity mailnull 5918 1.0 0.0 73960 7708 ? D 01:22 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 5920 0.2 0.0 100988 440 ? D 01:19 0:00 /usr/bin/md5sum --check /var/lib/csf/csf.tempint icowebra 6242 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 6265 0.0 0.0 106124 1360 ? S 01:22 0:00 /bin/bash /bin/monitora-load.sh root 6298 0.1 0.0 168424 26432 ? S 01:19 0:00 lfd - (child) (PT) checking user processes mailnull 6346 1.5 0.0 73996 7696 ? D 01:22 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 6352 0.0 0.0 9588 160 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 7040 ? D Apr17 0:08 tailwatchd root 6488 0.3 0.0 241536 11660 ? D 01:19 0:00 /usr/local/cpanel/3rdparty/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/lib/repair2.php mysql 6514 18.4 0.2 6973904 155076 ? Sl Apr17 236:01 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6633 0.0 0.0 0 0 ? S 01:19 0:00 [kworker/10:0] mailnull 6647 0.0 0.0 71032 1156 ? S 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 6648 0.0 0.0 73988 6164 ? S 01:19 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root root 6732 0.0 0.0 142440 596 ? S 01:20 0:00 CROND root 6747 0.0 0.0 142436 604 ? S 01:20 0:00 CROND root 6804 0.0 0.0 4612 508 ? Ss 01:20 0:00 jailshell (centralgib) [15449] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 6820 0.0 0.0 106120 264 ? Ss 01:20 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 icowebra 6842 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 188 ? S Apr17 0:00 /usr/bin/php nobody 7514 0.0 0.0 115672 10056 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start root 7565 0.0 0.0 142436 556 ? S 01:13 0:00 CROND root 7576 0.0 0.0 142436 568 ? S 01:13 0:00 CROND mailnull 7619 1.2 0.0 73992 7692 ? D 01:22 0:00 /usr/sbin/sendmail -f root -t nobody 7628 0.0 0.0 114324 7720 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start root 7646 0.7 0.0 53120 13196 ? D 01:22 0:00 /usr/local/cpanel/scripts/restartsrv_base named --check --notconfigured-ok nobody 7679 0.0 0.0 114536 10248 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 6572 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7687 0.0 0.0 114196 6592 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 115536 12564 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115852 10108 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119696 11440 ? D 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114456 8516 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start mailnull 7745 0.0 0.0 73984 1312 ? S 01:22 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid mailnull 7746 0.0 0.0 74012 1312 ? S 01:22 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7750 0.0 0.0 106120 236 ? Ss 01:13 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 7757 0.0 0.0 4612 472 ? Ss 01:13 0:00 jailshell (inovesocialcom) [25067] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 mailnull 7758 0.0 0.0 70900 3132 ? R 01:22 0:00 send-mail -i -- admin@conectadohost.com.br root 7759 1.0 0.0 108344 1184 ? R 01:22 0:00 ps aux 894 7760 0.0 0.0 18216 3416 ? R 01:22 0:00 /usr/bin/python /usr/bin/pyzor --homedir /etc/mail/spamassassin check root 7806 0.0 0.0 106124 392 ? S 01:13 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 7879 0.0 0.0 142436 568 ? S 01:14 0:00 CROND nobody 7902 0.0 0.0 115532 12444 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start mailnull 7927 0.0 0.0 74248 2688 ? S 01:14 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 8035 0.0 0.0 114192 6624 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 8090 0.0 0.0 106124 580 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh voarloca 8115 0.0 0.0 186044 2976 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114324 8644 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114192 8400 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114480 7064 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114480 6960 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start root 9308 0.0 0.0 106120 260 ? Ss 01:14 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 wdcpubli 9324 0.0 0.0 158392 27732 ? S 01:14 0:00 php.cgi buffetlu 9577 0.0 0.0 200280 15552 ? S 01:02 0:00 /usr/bin/php root 9743 0.0 0.0 106124 388 ? S 01:14 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 10317 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/4:2] root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10926 0.0 0.0 4640 208 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 152 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1720 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 112 ? Ss Apr16 0:00 /usr/sbin/sshd root 11198 0.0 0.0 142436 716 ? S 01:15 0:00 CROND root 11199 0.0 0.0 142440 628 ? S 01:15 0:00 CROND picapau 11209 0.0 0.0 184964 568 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 476 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11216 0.0 0.0 142436 652 ? S 01:15 0:00 CROND root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 184 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 112 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 100 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 768 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 516 ? Ss Apr16 0:08 postgres: stats collector process root 11313 0.0 0.0 106124 576 ? S 01:15 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 11341 0.0 0.0 114324 8168 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 12244 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start named 11603 0.4 0.0 746072 5816 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11713 0.0 0.0 136204 24 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 428 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 52 ? Ss Apr16 0:00 /usr/sbin/atd queroupa 11862 0.0 0.0 198652 16128 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16084 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 17160 ? S 01:08 0:01 /usr/bin/php apkamu 12020 0.0 0.0 185476 224 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12497 0.0 0.0 114328 9880 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 12525 0.0 0.0 115604 11456 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12545 0.0 0.0 106120 232 ? Ss 01:15 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 12560 0.0 0.0 4108 88 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 92 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 88 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 92 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 88 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 88 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 root 12574 0.0 0.0 4612 476 ? Ss 01:15 0:00 jailshell (centralgib) [25072] -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations rkembala 12628 0.0 0.0 186792 3500 ? S 01:06 0:00 /usr/bin/php 992 12634 0.0 0.0 187328 10100 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3180 ? S 01:06 0:00 /usr/bin/php root 12645 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12649 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12650 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12652 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12660 0.0 0.0 142436 532 ? S 01:16 0:00 CROND root 12676 0.0 0.0 106124 392 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh nobody 12764 0.0 0.0 114480 6888 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3564 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 404 ? S 01:02 0:00 /usr/bin/php root 13645 0.0 0.0 114060 5016 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 116 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14250 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/9:0] root 14275 0.0 0.0 106120 236 ? Ss 01:18 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 14305 0.0 0.0 4612 512 ? Ss 01:18 0:00 jailshell (inovesocialcom) [27334] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 14365 0.0 0.0 106128 392 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14425 0.0 0.0 106128 580 ? S 01:18 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14705 0.0 0.0 106124 392 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 14715 0.0 0.0 106124 580 ? S 01:20 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] root 15373 0.0 0.0 61336 1928 ? S Apr16 0:03 queueprocd - wait to process a task 1077 15449 0.0 0.0 4612 392 ? S 01:20 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1077 15482 0.3 0.0 258688 30592 ? S 01:20 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations root 15606 0.0 0.0 25860 332 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 140 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 904 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1096 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 896 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 892 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 904 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1124 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 880 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 180 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 16526 0.0 0.0 26212 712 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1164 ? SN Apr16 0:00 cpanellogd - updating bandwidth root 16733 0.0 0.0 101892 21572 ? S Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 881 16969 0.0 0.0 184960 7036 ? S 01:20 0:00 /usr/bin/php root 17195 0.0 0.0 106124 580 ? S 01:16 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 17485 0.0 0.0 110716 13468 ? S 01:16 0:00 tailwatchd - chkservd - named check root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] mailnull 18000 0.0 0.0 71028 1156 ? S 01:20 0:00 /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root mailnull 18015 0.0 0.0 74248 4340 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 18022 0.0 0.0 115692 10372 ? S 01:20 0:00 /usr/local/apache/bin/httpd -k start mailnull 18071 0.0 0.0 74248 5508 ? S 01:20 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid 894 18075 0.3 0.1 236004 106352 ? S 01:20 0:00 spamd child root 18076 1.8 0.1 235696 106264 ? R 01:20 0:01 spamd child root 18094 0.0 0.0 142436 1452 ? S 01:21 0:00 CROND root 18127 0.0 0.0 106120 1196 ? Ss 01:21 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 18163 0.0 0.0 106124 1392 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18268 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/0:2] root 18278 0.0 0.0 106124 608 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 0.9 0.0 240980 1840 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1232 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.1 0.0 23760 8632 ? S 00:50 1:37 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 188 ? S 00:48 0:00 /usr/bin/php root 20049 0.0 0.0 4616 504 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27281] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 root 20058 0.0 0.0 4612 504 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27252] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 20067 0.0 0.0 106124 360 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh root 20069 0.0 0.0 106120 248 ? Ss 01:16 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 20070 0.0 0.0 4612 504 ? Ss 01:16 0:00 jailshell (inovesocialcom) [27350] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 nobody 20085 0.0 0.0 114192 6904 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start root 20177 0.0 0.0 106124 388 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh mailnull 20370 0.0 0.0 74248 2364 ? S 01:17 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid nobody 20406 0.0 0.0 114464 7392 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.0 0.0 265704 192 ? S 00:46 0:00 /usr/bin/php root 20478 0.0 0.0 106124 504 ? S 01:17 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] wwwfacul 20831 0.0 0.0 263164 192 ? S 00:46 0:00 /usr/bin/php root 20874 0.0 0.0 106120 212 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f pdvxyz 23169 0.0 0.0 185472 2008 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 172 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 1876 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 2580 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] dovecot 23937 0.0 0.0 31880 1260 ? S 01:18 0:00 dovecot/auth root 23946 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/7:1] nobody 24106 0.0 0.0 114504 7708 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] 760 25007 0.1 0.0 159944 28692 ? S 01:18 0:00 php.cgi 1125 25067 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1077 25072 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (centralgib) [init] l -c /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 25079 0.0 0.0 106120 240 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1077 25086 0.1 0.0 258684 30148 ? S 01:18 0:00 /opt/php/php-5.6.27/bin/php -q /home/centralgib/public_html/crons/cron.php do_escalations 1125 25164 0.0 0.0 284788 10632 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php suzantol 25425 0.1 0.0 219216 16072 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] 879 26253 0.0 0.0 187024 9052 ? S 01:18 0:00 /usr/bin/php root 26512 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/11:2] maisg647 26560 0.0 0.0 241460 200 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 192 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 192 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 192 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 192 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 192 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 192 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 192 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 120 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 112 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth 879 26991 0.0 0.0 186252 8460 ? S 01:18 0:00 /usr/bin/php root 27087 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/6:1] 879 27210 0.0 0.0 188324 8408 ? S 01:18 0:00 /usr/bin/php iasdcent 27220 0.0 0.0 185224 8176 ? S 01:18 0:00 /usr/bin/php icowebra 27225 0.0 0.0 185220 6852 ? S 01:18 0:00 /usr/bin/php icowebra 27239 0.0 0.0 185220 6844 ? S 01:18 0:00 /usr/bin/php 1125 27252 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 27263 0.0 0.0 106120 240 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 1125 27268 0.0 0.0 284792 10628 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/stats.php icowebra 27277 0.0 0.0 185220 6848 ? S 01:18 0:00 /usr/bin/php 1125 27281 0.0 0.0 4616 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 27289 0.0 0.0 106120 228 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/poster.php >/dev/null 2>&1 1125 27292 0.0 0.0 284792 11144 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/poster.php 1125 27334 0.0 0.0 4612 392 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27335 0.0 0.0 106120 232 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27337 0.0 0.0 284792 10756 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php 1125 27350 0.0 0.0 4612 396 ? S 01:18 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27351 0.0 0.0 106120 200 ? S 01:18 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 1125 27354 0.0 0.0 284792 11012 ? S 01:18 0:00 php /home/inovesocialcom/public_html/sis/cron/misc.php ferre461 27442 0.0 0.0 232664 15832 ? S 01:09 0:00 /usr/bin/php 879 27489 0.0 0.0 186252 8336 ? S 01:18 0:00 /usr/bin/php 879 27497 0.0 0.0 187024 9384 ? S 01:18 0:00 /usr/bin/php 879 27500 0.0 0.0 186252 8460 ? S 01:18 0:00 /usr/bin/php 879 27510 0.0 0.0 186252 8336 ? S 01:18 0:00 /usr/bin/php 879 27511 0.0 0.0 186252 8344 ? S 01:18 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 15776 ? S 01:09 0:00 /usr/bin/php gfebe 27524 0.0 0.0 185408 8872 ? S 01:18 0:00 /usr/bin/php 879 27525 0.0 0.0 186252 8452 ? S 01:18 0:00 /usr/bin/php 879 27526 0.0 0.0 186256 8348 ? S 01:18 0:00 /usr/bin/php suzantol 27534 0.0 0.0 210508 16176 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] 879 27545 0.0 0.0 186252 8384 ? S 01:18 0:00 /usr/bin/php 879 27546 0.0 0.0 186256 8336 ? S 01:18 0:00 /usr/bin/php 879 27557 0.0 0.0 186252 8340 ? S 01:18 0:00 /usr/bin/php radiosat 27560 0.0 0.0 185600 384 ? S 01:07 0:00 /usr/bin/php 879 27578 0.0 0.0 186252 8348 ? S 01:18 0:00 /usr/bin/php 879 27585 0.1 0.0 187020 11400 ? S 01:18 0:00 /usr/bin/php facildia 27623 0.0 0.0 198808 16048 ? S 01:07 0:00 /usr/bin/php pdvxyz 27624 0.0 0.0 185476 6512 ? S 01:19 0:00 /usr/bin/php root 27640 0.0 0.0 142436 604 ? S 01:19 0:00 CROND 879 27720 0.0 0.0 186252 8344 ? S 01:19 0:00 /usr/bin/php icowebra 27723 0.0 0.0 186092 8720 ? S 01:19 0:00 /usr/bin/php 879 27725 0.1 0.0 187020 11228 ? S 01:19 0:00 /usr/bin/php root 27745 0.0 0.0 106120 264 ? Ss 01:19 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27768 0.0 0.0 106124 392 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27835 0.0 0.0 106124 580 ? S 01:19 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27860 0.2 0.0 169920 26180 ? Ss 01:19 0:00 lfd - sleeping root 27867 0.0 0.0 142436 468 ? S 01:12 0:00 CROND root 27891 0.0 0.0 106120 248 ? Ss 01:12 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 27911 0.0 0.0 106124 376 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 27976 0.0 0.0 106124 576 ? S 01:12 0:00 /bin/bash /bin/liberar-csf-brasil.sh autoesco 28049 0.0 0.0 219724 17228 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 15372 ? S 01:07 0:00 /usr/bin/php root 28135 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/8:1] root 28531 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/2:0] root 28532 0.0 0.0 235524 7060 ? S 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] root 28819 0.4 0.0 66520 21676 ? DN 01:21 0:00 cpanellogd - updating bandwidth ecfoto 28919 0.0 0.0 186316 6992 ? D 01:03 0:00 /usr/bin/php root 28985 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/3:1] sistemam 29014 0.3 0.0 186024 15136 ? D 01:21 0:00 /usr/bin/php 867 29026 0.3 0.0 188120 33684 ? D 01:21 0:00 /usr/bin/php mailnull 29061 0.0 0.0 74280 2524 ? S 01:21 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 29066 0.0 0.0 106124 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29067 0.0 0.0 106128 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29068 0.0 0.0 106124 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29069 0.0 0.0 106124 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29070 0.1 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29071 0.0 0.0 106124 532 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29072 0.1 0.0 103360 852 ? S 01:21 0:00 grep 104.198.121.116 root 29073 0.0 0.0 106124 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29074 0.1 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29075 0.0 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29076 0.1 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29077 0.0 0.0 103360 844 ? S 01:21 0:00 grep user root 29078 0.2 0.0 103360 852 ? S 01:21 0:00 grep 104.198.121.116 root 29079 0.1 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29080 0.0 0.0 106124 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29081 0.0 0.0 106124 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29082 0.0 0.0 106124 536 ? S 01:21 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29083 0.1 0.0 103360 852 ? S 01:21 0:00 grep 104.198.121.116 root 29084 0.1 0.0 103360 852 ? S 01:21 0:00 grep 104.198.121.116 root 29085 0.0 0.0 103360 840 ? S 01:21 0:00 grep user nobody 29086 0.0 0.0 117036 7380 ? D 01:03 0:00 /usr/local/apache/bin/httpd -k start root 29087 0.1 0.0 103364 852 ? S 01:21 0:00 grep 104.168.170.128 root 29088 0.0 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29089 0.0 0.0 103360 844 ? S 01:21 0:00 grep user root 29090 0.0 0.0 103360 844 ? S 01:21 0:00 grep user root 29091 0.0 0.0 103360 844 ? S 01:21 0:00 grep user root 29092 0.2 0.0 103360 848 ? S 01:21 0:00 grep 104.168.170.128 root 29093 0.1 0.0 100992 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29094 0.1 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29095 0.0 0.0 103360 844 ? S 01:21 0:00 grep user root 29096 0.2 0.0 103364 852 ? S 01:21 0:00 grep 104.198.121.116 root 29097 0.2 0.0 103360 852 ? S 01:21 0:00 grep 144.217.225.173 root 29098 0.0 0.0 103360 840 ? S 01:21 0:00 grep user root 29099 0.0 0.0 103360 844 ? S 01:21 0:00 grep user root 29100 0.1 0.0 100988 576 ? D 01:21 0:00 cat /usr/local/cpanel/logs/access_log root 29101 0.2 0.0 103360 848 ? S 01:21 0:00 grep 104.130.11.193 root 29102 0.0 0.0 103360 844 ? S 01:21 0:00 grep user root 29108 0.9 0.1 233176 102932 ? S 01:21 0:00 spamd child 1116 29120 0.1 0.0 185988 16844 ? D 01:21 0:00 /usr/bin/php root 29123 0.0 0.0 13676 1132 ? S 01:21 0:00 dovecot/ssl-params fielgui 29124 0.2 0.0 188348 26132 ? D 01:21 0:00 /usr/bin/php fielgui 29133 0.3 0.0 188348 26368 ? D 01:21 0:00 /usr/bin/php ecfoto 29171 0.1 0.0 185896 17136 ? D 01:21 0:00 /usr/bin/php maisg647 29179 0.1 0.0 185908 15560 ? D 01:21 0:00 /usr/bin/php fielgui 29185 0.4 0.0 188344 26128 ? D 01:21 0:00 /usr/bin/php root 29190 0.5 0.1 222960 97172 ? S 01:21 0:00 spamd child root 29194 0.2 0.0 53084 5268 ? S 01:21 0:00 dovecot/lmtp root 29195 0.0 0.0 31880 2036 ? S 01:21 0:00 dovecot/auth -w root 29208 0.0 0.0 0 0 ? Z 01:21 0:00 [cpsrvd (SSL) - ] root 29215 0.4 0.0 74280 8272 ? Ds 01:21 0:00 /usr/sbin/exim -odi -Mc 1d0KeI-0001jE-Re mailnull 29218 0.0 0.0 0 0 ? Z 01:21 0:00 [exim] root 29219 0.4 0.0 53084 5284 ? S 01:21 0:00 dovecot/lmtp mailnull 29235 0.0 0.0 74012 1312 ? S 01:21 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 29243 0.0 0.0 142436 1448 ? S 01:22 0:00 CROND root 29244 0.0 0.0 142436 1448 ? S 01:22 0:00 CROND root 29245 0.0 0.0 142436 1448 ? S 01:22 0:00 CROND root 29248 0.0 0.0 142436 1456 ? S 01:22 0:00 CROND root 29254 0.0 0.0 142436 1456 ? S 01:22 0:00 CROND root 29270 0.0 0.0 142436 1524 ? S 01:22 0:00 CROND root 29273 0.0 0.0 142436 1524 ? S 01:22 0:00 CROND root 29275 0.0 0.0 142436 1524 ? S 01:22 0:00 CROND root 29276 0.0 0.0 4612 932 ? Ss 01:22 0:00 jailshell (inovesocialcom) [3539] php /home/inovesocialcom/public_html/sis/cron/misc.php >/dev/null 2>&1 root 29277 0.0 0.0 142436 1520 ? S 01:22 0:00 CROND root 29278 0.1 0.0 4612 916 ? Ss 01:22 0:00 jailshell (inovesocialcom) [4022] php /home/inovesocialcom/public_html/sis/cron/stats.php >/dev/null 2>&1 root 29281 0.0 0.0 4612 936 ? Ss 01:22 0:00 jailshell (inovesocialcom) [32611] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 root 29283 0.0 0.0 106120 1192 ? Ss 01:22 0:00 /bin/sh -c /bin/liberar-csf-brasil.sh > /dev/null 2>&1 root 29299 0.0 0.0 106124 1384 ? S 01:22 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29305 0.0 0.0 106120 1164 ? Ss 01:22 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 29399 0.0 0.0 106124 596 ? S 01:22 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] autoesco 29909 0.0 0.0 215808 15824 ? S 01:10 0:00 /usr/bin/php root 29980 0.0 0.0 106124 528 ? S 01:22 0:00 /bin/bash /bin/liberar-csf-brasil.sh root 29982 0.2 0.0 100988 576 ? D 01:22 0:00 cat /usr/local/cpanel/logs/access_log root 29983 0.5 0.0 103360 852 ? S 01:22 0:00 grep 104.130.11.193 root 29986 0.0 0.0 103360 844 ? S 01:22 0:00 grep user root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] root 30851 0.3 0.1 222220 96556 ? Ss Apr16 6:23 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 gfebe 32262 0.0 0.0 185936 9020 ? S 01:19 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1] 1125 32611 0.0 0.0 4612 392 ? S 01:22 0:00 jailshell (inovesocialcom) [init] php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 32613 0.0 0.0 106120 1196 ? S 01:22 0:00 /usr/local/cpanel/bin/jailshell -c php /home/inovesocialcom/public_html/sis/cron/hid.php >/dev/null 2>&1 1125 32617 0.5 0.0 284276 18680 ? S 01:22 0:00 php /home/inovesocialcom/public_html/sis/cron/hid.php USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 19408 596 ? Ss Apr16 0:02 /sbin/init root 2 0.0 0.0 0 0 ? S Apr16 0:00 [kthreadd] root 3 0.4 0.0 0 0 ? S Apr16 13:21 [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/0:0H] root 7 0.1 0.0 0 0 ? S Apr16 4:27 [rcu_sched] root 8 0.0 0.0 0 0 ? S Apr16 0:00 [rcu_bh] root 9 0.0 0.0 0 0 ? S Apr16 1:31 [migration/0] root 10 0.0 0.0 0 0 ? S Apr16 0:09 [migration/1] root 11 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/1] root 13 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/1:0H] root 14 0.0 0.0 0 0 ? S Apr16 0:09 [migration/2] root 15 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/2] root 17 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:0H] root 18 0.0 0.0 0 0 ? S Apr16 0:10 [migration/3] root 19 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/3] root 21 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/3:0H] root 22 0.0 0.0 0 0 ? S Apr16 0:09 [migration/4] root 23 0.0 0.0 0 0 ? S Apr16 0:52 [ksoftirqd/4] root 25 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:0H] root 26 0.0 0.0 0 0 ? S Apr16 0:10 [migration/5] root 27 0.0 0.0 0 0 ? S Apr16 0:51 [ksoftirqd/5] root 29 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/5:0H] root 30 0.0 0.0 0 0 ? S Apr16 0:13 [migration/6] root 31 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/6] root 33 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:0H] root 34 0.0 0.0 0 0 ? S Apr16 0:16 [migration/7] root 35 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/7] root 37 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:0H] root 38 0.0 0.0 0 0 ? S Apr16 0:14 [migration/8] root 39 0.0 0.0 0 0 ? S Apr16 0:42 [ksoftirqd/8] root 41 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:0H] root 42 0.0 0.0 0 0 ? S Apr16 0:14 [migration/9] root 43 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/9] root 45 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:0H] root 46 0.0 0.0 0 0 ? S Apr16 0:15 [migration/10] root 47 0.0 0.0 0 0 ? S Apr16 0:40 [ksoftirqd/10] root 49 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:0H] root 50 0.0 0.0 0 0 ? S Apr16 0:13 [migration/11] root 51 0.0 0.0 0 0 ? S Apr16 0:41 [ksoftirqd/11] root 53 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:0H] root 54 0.0 0.0 0 0 ? S< Apr16 0:00 [khelper] root 55 0.0 0.0 0 0 ? S Apr16 0:00 [kdevtmpfs] root 56 0.0 0.0 0 0 ? S< Apr16 0:00 [netns] root 57 0.0 0.0 0 0 ? S< Apr16 0:00 [writeback] root 58 0.0 0.0 0 0 ? SN Apr16 0:00 [ksmd] root 59 0.0 0.0 0 0 ? S< Apr16 0:00 [kintegrityd] root 60 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 61 0.0 0.0 0 0 ? S< Apr16 0:00 [crypto] root 62 0.0 0.0 0 0 ? S< Apr16 0:00 [kblockd] root 64 0.0 0.0 0 0 ? S< Apr16 0:00 [ata_sff] root 65 0.0 0.0 0 0 ? S Apr16 0:00 [khubd] root 66 0.0 0.0 0 0 ? S< Apr16 0:00 [md] root 67 0.0 0.0 0 0 ? S< Apr16 0:00 [edac-poller] root 68 0.0 0.0 0 0 ? S< Apr16 0:00 [rpciod] root 71 0.0 0.0 0 0 ? S< Apr16 0:00 [kvm-irqfd-clean] root 147 0.1 0.0 0 0 ? S Apr16 4:19 [kswapd0] root 148 0.0 0.0 0 0 ? S Apr16 0:00 [fsnotify_mark] root 149 0.0 0.0 0 0 ? S< Apr16 0:00 [nfsiod] root 150 0.0 0.0 0 0 ? S< Apr16 0:00 [cifsiod] root 151 0.0 0.0 0 0 ? S Apr16 0:00 [jfsIO] root 152 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 153 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 154 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 155 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 156 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 157 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 158 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 159 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 160 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 161 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 162 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 163 0.0 0.0 0 0 ? S Apr16 0:00 [jfsCommit] root 164 0.0 0.0 0 0 ? S Apr16 0:00 [jfsSync] root 165 0.0 0.0 0 0 ? S< Apr16 0:00 [xfsalloc] root 166 0.0 0.0 0 0 ? S< Apr16 0:00 [xfs_mru_cache] root 167 0.0 0.0 0 0 ? S< Apr16 0:00 [xfslogd] root 168 0.0 0.0 0 0 ? S< Apr16 0:00 [ocfs2_wq] root 169 0.0 0.0 0 0 ? S< Apr16 0:00 [user_dlm] root 170 0.0 0.0 0 0 ? S< Apr16 0:00 [glock_workqueue] root 171 0.0 0.0 0 0 ? S< Apr16 0:00 [delete_workqueu] root 172 0.0 0.0 0 0 ? S< Apr16 0:00 [gfs_recovery] root 203 0.0 0.0 0 0 ? S< Apr16 0:00 [kthrotld] root 206 0.0 0.0 0 0 ? S Apr16 0:02 [nvme] root 207 0.0 0.0 0 0 ? S< Apr16 0:00 [nvme] root 208 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 209 0.0 0.0 0 0 ? S< Apr16 0:00 [drbd-reissue] root 213 0.0 0.0 0 0 ? S< Apr16 0:00 [iscsi_eh] root 215 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_0] root 216 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_0] root 217 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_1] root 218 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_1] root 219 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_2] root 220 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_2] root 221 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_3] root 222 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_3] root 223 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_4] root 224 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_4] root 225 0.0 0.0 0 0 ? S Apr16 0:00 [scsi_eh_5] root 226 0.0 0.0 0 0 ? S< Apr16 0:00 [scsi_tmf_5] root 232 0.0 0.0 0 0 ? S< Apr16 0:00 [bond0] root 233 0.0 0.0 0 0 ? S< Apr16 0:00 [bnx2x] root 235 0.0 0.0 0 0 ? S< Apr16 0:00 [ixgbe] root 236 0.0 0.0 0 0 ? S< Apr16 0:00 [mlx4] root 237 0.0 0.0 0 0 ? S< Apr16 0:00 [vfio-irqfd-clea] root 240 0.0 0.0 0 0 ? S< Apr16 0:00 [kpsmoused] root 242 0.0 0.0 0 0 ? S< Apr16 0:00 [raid5wq] root 243 0.0 0.0 0 0 ? S< Apr16 0:00 [bcache] root 244 0.0 0.0 0 0 ? S< Apr16 0:00 [bch_btree_io] root 245 0.0 0.0 0 0 ? S< Apr16 0:00 [dm_bufio_cache] root 246 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpathd] root 247 0.0 0.0 0 0 ? S< Apr16 0:00 [kmpath_handlerd] root 248 0.0 0.0 0 0 ? S< Apr16 0:00 [ipv6_addrconf] root 249 0.0 0.0 0 0 ? S< Apr16 0:00 [ceph-msgr] root 250 0.0 0.0 0 0 ? S< Apr16 0:00 [bioset] root 251 0.0 0.0 0 0 ? S< Apr16 0:00 [deferwq] root 253 0.0 0.0 0 0 ? S< Apr16 0:38 [kworker/0:1H] root 254 0.0 0.0 0 0 ? D Apr16 0:45 [kjournald] root 318 0.0 0.0 10848 104 ? S /dev/null 2>&1 root 1970 0.0 0.0 106124 172 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 1982 0.0 0.0 19360 540 ? Ss Apr16 0:06 /usr/sbin/dovecot dovecot 2007 0.0 0.0 13680 388 ? S Apr16 0:01 dovecot/anvil root 3037 0.0 0.0 142436 112 ? S 00:34 0:00 CROND root 3059 13.7 77.2 58705080 50986044 ? Ds 00:34 6:43 /usr/local/cpanel/bin/autossl_check --all nobody 3115 0.0 0.0 116112 9916 ? S 00:53 0:00 /usr/local/apache/bin/httpd -k start dovenull 3299 0.0 0.0 42904 2004 ? S 00:45 0:00 dovecot/pop3-login dovenull 3300 0.0 0.0 42764 220 ? S 00:45 0:00 dovecot/imap-login root 3301 0.0 0.0 13816 464 ? S 00:45 0:00 dovecot/log dovenull 3307 0.0 0.0 42904 1824 ? S 00:45 0:00 dovecot/pop3-login root 3308 0.0 0.0 33932 2132 ? S 00:45 0:00 dovecot/config dovenull 3309 0.0 0.0 42764 612 ? S 00:45 0:00 dovecot/imap-login root 4127 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/7:1H] metalma 4212 0.0 0.0 186284 192 ? S 00:47 0:00 /usr/bin/php root 4649 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/11:1H] root 4723 0.0 0.0 54580 352 ? S 00:45 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4724 0.0 0.0 115008 5948 ? S 00:45 0:00 /usr/local/apache/bin/httpd -k start progress 4846 0.1 0.0 268336 192 ? S 00:45 0:03 /usr/bin/php progress 4865 0.0 0.0 236324 192 ? S 00:45 0:00 /usr/bin/php diadiapr 4886 0.5 0.0 196056 40580 ? D 01:22 0:00 /usr/bin/php root 5033 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/8:1H] nobody 5159 0.0 0.0 114192 8540 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start root 5168 0.0 0.0 0 0 ? S 01:08 0:00 [kworker/9:2] nobody 5674 0.0 0.0 112412 176 ? S Apr17 0:00 /usr/local/apache/bin/httpd -k start loppelco 5695 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php loppelco 5700 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php loppelco 5702 0.0 0.0 186104 192 ? S Apr17 0:00 /usr/bin/php pdvxyz 5727 0.0 0.0 184960 188 ? S Apr17 0:00 /usr/bin/php voarloca 5876 0.0 0.0 185948 2952 ? S 01:01 0:00 /usr/bin/php root 5916 0.0 0.0 167816 25640 ? S 01:19 0:00 lfd - checking system integrity root 5920 0.2 0.0 100988 440 ? D 01:19 0:00 /usr/bin/md5sum --check /var/lib/csf/csf.tempint icowebra 6242 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 6352 0.0 0.0 9588 160 ? S Apr17 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid root 6443 0.0 0.0 104492 7216 ? S Apr17 0:08 tailwatchd root 6488 0.2 0.0 241536 11660 ? D 01:19 0:00 /usr/local/cpanel/3rdparty/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/lib/repair2.php mysql 6514 18.4 0.2 6973904 167644 ? Sl Apr17 236:02 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --user=mysql --log-error=/var/lib/mysql/server.servidormegaseguro.com.br.err --open-files-limit=32000 --pid-file=/var/lib/mysql/server.servidormegaseguro.com.br.pid nobody 6550 0.0 0.0 114192 8564 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start nobody 6551 0.1 0.0 115520 10056 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start root 6633 0.0 0.0 0 0 ? S 01:19 0:00 [kworker/10:0] icowebra 6842 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php icowebra 6855 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php 992 7038 0.0 0.0 184964 188 ? S Apr17 0:00 /usr/bin/php agitae 7511 0.3 0.0 187668 21816 ? D 01:22 0:00 /usr/bin/php nobody 7514 0.0 0.0 115672 10056 ? S 01:12 0:00 /usr/local/apache/bin/httpd -k start nobody 7628 0.0 0.0 115596 9908 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7679 0.0 0.0 114536 10404 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7681 0.0 0.0 114192 6572 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7710 0.0 0.0 115832 13092 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7711 0.0 0.0 115852 10136 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7718 0.0 0.0 119836 11720 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start nobody 7726 0.0 0.0 114456 9444 ? S 01:13 0:00 /usr/local/apache/bin/httpd -k start mailnull 7746 0.0 0.0 74252 4120 ? D 01:22 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 7774 0.0 0.0 31880 2036 ? S 01:22 0:00 dovecot/auth -w root 7787 0.0 0.0 53692 5788 ? S 01:22 0:00 dovecot/lmtp root 7818 0.0 0.0 52808 5012 ? S 01:22 0:00 dovecot/lmtp nobody 7828 0.0 0.0 114332 8988 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start kadufern 7831 0.2 0.0 0 0 ? Z 01:22 0:00 [php] 1086 7848 0.0 0.0 9460 1120 ? S 01:22 0:00 /bin/sh php.cgi diadiapr 7849 0.2 0.0 0 0 ? Z 01:22 0:00 [php] nobody 7850 0.0 0.0 114464 9664 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start nobody 7851 0.1 0.0 120028 11596 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start 1086 7852 0.6 0.0 165704 40484 ? D 01:22 0:00 /opt/php/php-5.6.26/bin/php-cgi root 7854 0.0 0.0 53252 5376 ? S 01:22 0:00 dovecot/lmtp nobody 7927 0.0 0.0 114196 8288 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start nobody 7932 0.0 0.0 114192 8564 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start nobody 7934 0.1 0.0 115520 9336 ? S 01:22 0:00 /usr/local/apache/bin/httpd -k start voarloca 8115 0.0 0.0 186044 2976 ? S 01:01 0:00 /usr/bin/php nobody 8156 0.0 0.0 114324 8776 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 8162 0.0 0.0 114192 8660 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9276 0.0 0.0 114480 7064 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start nobody 9277 0.0 0.0 114480 6960 ? S 01:14 0:00 /usr/local/apache/bin/httpd -k start wdcpubli 9324 0.1 0.0 191668 60636 ? S 01:14 0:00 php.cgi kadufern 9530 0.4 0.0 187692 29296 ? D 01:22 0:00 /usr/bin/php buffetlu 9577 0.0 0.0 200280 15552 ? S 01:02 0:00 /usr/bin/php root 10317 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/4:2] root 10767 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/6:2] root 10774 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/10:3] root 10776 0.0 0.0 0 0 ? S 01:04 0:00 [kworker/3:3] root 10926 0.0 0.0 4640 208 ? Ss Apr16 0:00 mdadm --monitor --scan -f --pid-file=/var/run/mdadm/mdadm.pid dbus 10957 0.0 0.0 21616 152 ? Ss Apr16 0:00 dbus-daemon --system nscd 11003 0.1 0.0 2789008 1764 ? Ssl Apr16 4:13 /usr/sbin/nscd root 11030 0.0 0.0 64392 112 ? Ss Apr16 0:00 /usr/sbin/sshd picapau 11209 0.0 0.0 184964 568 ? S 01:01 0:00 /usr/bin/php postgres 11213 0.0 0.0 215388 476 ? S Apr16 0:04 /usr/bin/postmaster -p 5432 -D /var/lib/pgsql/data root 11298 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/2:1H] postgres 11299 0.0 0.0 178124 184 ? Ss Apr16 0:03 postgres: logger process root 11301 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/4:1H] postgres 11305 0.0 0.0 215256 112 ? Ss Apr16 0:20 postgres: writer process postgres 11306 0.0 0.0 215256 100 ? Ss Apr16 0:16 postgres: wal writer process postgres 11307 0.0 0.0 215660 768 ? Ss Apr16 0:08 postgres: autovacuum launcher process postgres 11308 0.0 0.0 178668 516 ? Ss Apr16 0:08 postgres: stats collector process nobody 11341 0.0 0.0 114460 9364 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start nobody 11550 0.0 0.0 117088 12244 ? S 01:08 0:00 /usr/local/apache/bin/httpd -k start named 11603 0.3 0.0 746072 7752 ? Ssl 01:10 0:02 /usr/sbin/named -u named -t /var/named/chroot root 11713 0.0 0.0 136204 24 ? Ss Apr16 0:00 /usr/sbin/pure-uploadscript -B -r /usr/share/ilabs_antimalware/pure-ftpd-inspector.php root 11732 0.0 0.0 115148 432 ? Ss Apr16 0:16 crond root 11749 0.0 0.0 19472 52 ? Ss Apr16 0:00 /usr/sbin/atd queroupa 11862 0.0 0.0 198652 16128 ? S 01:08 0:00 /usr/bin/php 828 11898 0.1 0.0 232656 16084 ? S 01:08 0:00 /usr/bin/php 828 11899 0.1 0.0 234724 17160 ? S 01:08 0:01 /usr/bin/php 800 11956 2.5 0.0 187460 63204 ? D 01:22 0:00 php.cgi apkamu 12020 0.0 0.0 185476 224 ? S 01:04 0:00 /usr/bin/php root 12031 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/8:0] fielgui 12330 0.3 0.0 197112 41884 ? D 01:22 0:00 /usr/bin/php root 12411 0.0 0.0 0 0 ? S 01:15 0:00 [kworker/0:1] nobody 12525 0.0 0.0 115604 11648 ? S 01:15 0:00 /usr/local/apache/bin/httpd -k start root 12560 0.0 0.0 4108 88 tty1 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty1 root 12562 0.0 0.0 4108 92 tty2 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty2 root 12564 0.0 0.0 4108 88 tty3 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty3 root 12566 0.0 0.0 4108 92 tty4 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty4 root 12568 0.0 0.0 4108 88 tty5 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty5 root 12570 0.0 0.0 4108 88 tty6 Ss+ Apr16 0:00 /sbin/mingetty /dev/tty6 rkembala 12628 0.0 0.0 186792 3500 ? S 01:06 0:00 /usr/bin/php rkembala 12635 0.0 0.0 186760 3180 ? S 01:06 0:00 /usr/bin/php root 12645 0.0 0.0 142436 532 ? S 01:16 0:00 CROND nobody 12764 0.0 0.0 114480 6888 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start evsinfo 12852 0.0 0.0 185824 3564 ? S 01:02 0:00 /usr/bin/php 1037 12865 0.0 0.0 185684 404 ? S 01:02 0:00 /usr/bin/php root 13603 0.0 0.0 0 0 ? S 01:22 0:00 [kworker/1:2] root 13645 0.0 0.0 114060 5120 ? Ss Apr16 1:35 /usr/local/apache/bin/httpd -k start root 13720 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/2:1] root 13754 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/7:0] root 13821 0.0 0.0 106128 116 ? S Apr17 0:00 /bin/bash /bin/backup-de-segunda.sh root 14250 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/9:0] loppelco 14947 0.4 0.0 187496 20584 ? S 01:22 0:00 /usr/bin/php root 15091 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/3:0] root 15373 0.0 0.0 61336 1928 ? S Apr16 0:03 queueprocd - wait to process a task root 15606 0.0 0.0 25860 332 ? Ss Apr16 0:23 dnsadmin - dormant mode --listen=3 mailman 16010 0.0 0.0 120748 140 ? Ss Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start mailman 16093 0.0 0.0 118440 904 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 16094 0.0 0.0 118636 1096 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 16095 0.0 0.0 118464 896 ? S Apr16 0:11 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 16096 0.0 0.0 118468 892 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 16098 0.0 0.0 118608 904 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 16102 0.0 0.0 118844 1124 ? S Apr16 0:13 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 16103 0.0 0.0 118580 880 ? S Apr16 0:12 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 16104 0.0 0.0 118584 996 ? S Apr16 0:00 /usr/bin/python /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s ecfoto 16123 0.3 0.0 195644 40236 ? D 01:22 0:00 /usr/bin/php fielgui 16171 0.9 0.0 197108 41876 ? D 01:22 0:00 /usr/bin/php root 16526 0.0 0.0 26212 712 ? S Apr16 0:04 cpdavd - accepting connections on 2077, --listen=3,4,5,6 root 16681 0.0 0.0 25856 1164 ? SN Apr16 0:00 cpanellogd - updating bandwidth root 16733 0.0 0.0 101892 21608 ? S Apr16 0:17 cpsrvd (SSL) - waiting f --llu=1492446638 --listen=10,11,3,4,5,6,7,8,9 --accepted=12 881 16969 0.0 0.0 184960 7036 ? S 01:20 0:00 /usr/bin/php root 17485 0.0 0.0 111268 14684 ? D 01:16 0:00 tailwatchd - chkservd - ftpd check root 17760 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/10:1H] nobody 18022 0.0 0.0 115692 10560 ? S 01:20 0:00 /usr/local/apache/bin/httpd -k start root 18075 3.1 0.1 243640 114276 ? S 01:20 0:03 spamd child root 18076 1.1 0.1 235696 106264 ? S 01:20 0:01 spamd child root 18268 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/0:2] root 18725 0.0 0.0 0 0 ? S 01:16 0:00 [kworker/1:0] root 18841 0.0 0.0 0 0 ? S 01:03 0:00 [kworker/9:1] root 19132 0.9 0.0 240980 1840 ? S 00:50 0:18 pkgacct - wgtechcnd - av: 3 - write compressed stream 882 19151 0.1 0.0 243772 1232 ? D 00:50 0:02 pkgacct - wgtechcnd - av: 3 - create tar stream root 19152 5.0 0.0 23760 8632 ? S 00:50 1:37 /usr/local/cpanel/3rdparty/bin/pigz -6 --processes 1 --blocksize 4096 --rsyncable 894 19776 0.0 0.0 186828 188 ? S 00:48 0:00 /usr/bin/php root 20067 0.0 0.0 106124 360 ? Ss 01:16 0:00 /bin/sh /usr/local/installatron/lib/cron.updater.sh nobody 20085 0.0 0.0 114192 6904 ? S 01:16 0:00 /usr/local/apache/bin/httpd -k start loppelco 20227 0.4 0.0 187512 20580 ? D 01:22 0:00 /usr/bin/php kadufern 20240 1.5 0.0 187696 29304 ? D 01:22 0:00 /usr/bin/php taxibhco 20246 0.1 0.0 185484 14000 ? D 01:22 0:00 /usr/bin/php ecfoto 20250 3.1 0.0 195644 40244 ? D 01:22 0:00 /usr/bin/php fielgui 20265 6.3 0.0 196580 41620 ? D 01:22 0:00 /usr/bin/php root 20266 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20267 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20268 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20269 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20270 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20271 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20272 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20273 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20274 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20275 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20276 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20277 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20278 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20279 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20280 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20281 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20282 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20283 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20284 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20285 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20286 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20287 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20288 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20289 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20290 0.0 0.0 4612 924 ? Ss 01:23 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.mgfilmes.top/index.php/cron root 20291 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20292 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20293 0.0 0.0 4612 924 ? Ds 01:23 0:00 /usr/local/cpanel/bin/jailshell -c wget -O - -q -t 1 http://www.pdv2017.xyz/pdv16/index.html/cron root 20294 0.0 0.0 142436 1452 ? S 01:23 0:00 CROND root 20295 0.0 0.0 106120 1188 ? Ss 01:23 0:00 /bin/sh -c /bin/monitora-load.sh > /dev/null 2>&1 root 20296 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20297 0.0 0.0 106120 1196 ? Ss 01:23 0:00 /bin/sh -c /bin/liberar-clientes.sh > /dev/null 2>&1 root 20298 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20299 0.0 0.0 142436 1444 ? S 01:23 0:00 CROND root 20301 0.0 0.0 142436 1448 ? S 01:23 0:00 CROND root 20302 0.0 0.0 106120 1192 ? Ss 01:23 0:00 /bin/sh -c /bin/corrigir-ips.sh > /dev/null 2>&1 root 20303 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20305 0.0 0.0 106120 1192 ? Ss 01:23 0:00 /bin/sh -c /bin/block-cloud.sh > /dev/null 2>&1 root 20306 0.0 0.0 4612 924 ? Ss 01:23 0:00 /usr/local/cpanel/bin/jailshell -c wget --spider -O - https://inovesocial.com.br/social/index.php/cron >/dev/null 2>&1 1125 20307 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20308 0.0 0.0 106120 1192 ? Ss 01:23 0:00 /bin/sh -c /bin/bloqueia-envio.sh > /dev/null 2>&1 root 20310 0.0 0.0 106120 1188 ? Ss 01:23 0:00 /bin/sh -c php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php > /dev/null 2>&1 root 20311 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20312 0.0 0.0 106120 1196 ? Ss 01:23 0:00 /bin/sh -c /bin/verifica-spf.sh > /dev/null 2>&1 861 20313 0.0 0.0 142432 692 ? S 01:23 0:00 CROND 861 20314 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20315 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20316 0.0 0.0 106120 1188 ? Ss 01:23 0:00 /bin/sh -c /bin/brut-filtro.sh > /dev/null 2>&1 root 20317 0.0 0.0 106124 1356 ? S 01:23 0:00 /bin/bash /bin/monitora-load.sh root 20318 0.0 0.0 4612 924 ? Ss 01:23 0:00 /usr/local/cpanel/bin/jailshell -c php /home/posaufacom/public_html/postador/cron/hid.php >/dev/null 2>&1 1125 20319 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20320 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20321 0.0 0.0 142432 692 ? S 01:23 0:00 CROND recordho 20322 0.0 0.0 142432 688 ? S 01:23 0:00 CROND root 20323 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20324 0.0 0.0 106120 1176 ? S 01:23 0:00 /bin/bash /bin/corrigir-ips.sh root 20325 0.0 0.0 106128 1336 ? S 01:23 0:00 /bin/bash /bin/verifica-spf.sh root 20327 0.0 0.0 106120 1176 ? S 01:23 0:00 /bin/bash /bin/liberar-clientes.sh 1125 20328 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20329 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20330 2.0 0.0 0 0 ? X 01:23 0:00 [/usr/local/cpan] zedeveva 20331 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20332 0.0 0.0 106120 1360 ? S 01:23 0:00 /bin/bash /bin/block-cloud.sh 861 20333 0.0 0.0 142432 692 ? S 01:23 0:00 CROND 782 20334 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20335 0.0 0.0 106120 1376 ? S 01:23 0:00 /bin/bash /bin/brut-filtro.sh 1125 20336 0.0 0.0 142432 692 ? S 01:23 0:00 CROND agegames 20337 0.0 0.0 142432 688 ? S 01:23 0:00 CROND root 20339 2.0 0.0 23520 8760 ? R 01:23 0:00 iptables -D INPUT -s 138.94.202.31 -j DROP root 20340 0.0 0.0 100992 576 ? D 01:23 0:00 rm -rf /home/pega-log-brut/1.txt /home/pega-log-brut/brasil.txt /home/pega-log-brut/verificar.txt root 20344 0.0 0.0 100992 576 ? D 01:23 0:00 rm -rf /home/block-cloud/csf.allow.txt root 20345 1.0 0.0 281624 13444 ? R 01:23 0:00 php -q /usr/local/cpanel/whostmgr/docroot/cgi/firewall-anti-ddos/cron.php root 20346 0.0 0.0 142432 692 ? S 01:23 0:00 CROND root 20352 1.0 0.0 46748 10968 ? R 01:23 0:00 /usr/local/cpanel/bin/setupvirtfs 861 root 20356 0.0 0.0 106120 1376 ? S 01:23 0:00 /bin/bash /bin/bloqueia-envio.sh root 20357 1.0 0.0 46752 10972 ? R 01:23 0:00 /usr/local/cpanel/bin/setupvirtfs root 20358 0.0 0.0 106120 500 ? S 01:23 0:00 /bin/bash /bin/corrigir-ips.sh root 20359 1.0 0.0 139260 3308 ? S 01:23 0:00 lynx -source http://testedeip.conectadohost.com.br/ root 20360 0.0 0.0 103360 844 ? S 01:23 0:00 grep sim root 20361 0.0 0.0 100976 652 ? S 01:23 0:00 wc -l mailnull 20362 1.0 0.0 70900 3128 ? R 01:23 0:00 send-mail -i -- admin@conectadohost.com.br root 20363 1.0 0.0 108344 1184 ? R 01:23 0:00 ps aux root 20364 0.0 0.0 100992 576 ? D 01:23 0:00 rm -rf /home/bloqueia-envio/1.txt /home/bloqueia-envio/2.txt /home/bloqueia-envio/3.txt /home/bloqueia-envio/4.txt /home/bloqueia-envio/5.txt /home/bloqueia-envio/6.txt /home/bloqueia-envio/7.txt /home/bloqueia-envio/8.txt /home/bloqueia-envio/9.txt /home/bloqueia-envio/limpando1.txt /home/bloqueia-envio/limpando2.txt /home/bloqueia-envio/limpando3.txt /home/bloqueia-envio/limpando5.txt /home/bloqueia-envio/limpando.txt /home/bloqueia-envio/pode-bloquear1.txt /home/bloqueia-envio/pode-bloquear.txt nobody 20406 0.0 0.0 114464 7936 ? S 01:17 0:00 /usr/local/apache/bin/httpd -k start wwwfacul 20446 0.0 0.0 265704 192 ? S 00:46 0:00 /usr/bin/php root 20533 0.0 0.0 0 0 ? S 00:55 0:00 [kworker/u24:0] wwwfacul 20831 0.0 0.0 263164 192 ? S 00:46 0:00 /usr/bin/php root 20874 0.0 0.0 106120 212 ? S 01:17 0:00 /bin/sh /usr/local/installatron/repair -f pdvxyz 23169 0.0 0.0 185472 2008 ? S 00:57 0:00 /usr/bin/php conect 23182 0.0 0.0 185476 172 ? S 00:57 0:00 /usr/bin/php pdvxyz 23190 0.0 0.0 185472 1876 ? S 00:57 0:00 /usr/bin/php pdvxyz 23192 0.0 0.0 185472 2580 ? S 00:57 0:00 /usr/bin/php root 23288 0.0 0.0 0 0 ? S 00:45 0:00 [kworker/7:3] fielgui 23371 0.4 0.0 196584 41620 ? D 01:22 0:00 /usr/bin/php dovecot 23937 0.0 0.0 32016 1304 ? S 01:18 0:00 dovecot/auth root 23946 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/7:1] nobody 24106 0.0 0.0 114504 8716 ? S 01:11 0:00 /usr/local/apache/bin/httpd -k start root 24174 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/6:1H] root 24229 0.0 0.0 0 0 ? S 01:07 0:00 [kworker/8:2] root 24880 0.0 0.0 0 0 ? S< Apr16 0:00 [kworker/9:1H] 760 25007 0.1 0.0 171812 41304 ? D 01:18 0:00 php.cgi suzantol 25425 0.1 0.0 219216 16072 ? S 01:09 0:01 /usr/bin/php root 26072 0.0 0.0 0 0 ? S 01:02 0:00 [kworker/4:1] 879 26253 0.0 0.0 187024 9052 ? S 01:18 0:00 /usr/bin/php root 26512 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/11:2] maisg647 26560 0.0 0.0 241460 200 ? S Apr17 0:01 /usr/bin/php 881 26566 0.0 0.0 218036 192 ? S Apr17 0:00 /usr/bin/php loppelco 26592 0.0 0.0 187260 192 ? S Apr17 0:00 /usr/bin/php 860 26614 0.0 0.0 186420 192 ? S Apr17 0:00 /usr/bin/php 879 26631 0.0 0.0 186256 192 ? S Apr17 0:00 /usr/bin/php 992 26701 0.0 0.0 187676 192 ? S Apr17 0:00 /usr/bin/php 1037 26715 0.0 0.0 185756 192 ? S Apr17 0:00 /usr/bin/php loppelco 26734 0.0 0.0 187200 192 ? S Apr17 0:00 /usr/bin/php icowebra 26771 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 26871 0.0 0.0 0 0 ? S 00:47 0:00 [kworker/10:1] root 26874 0.0 0.0 136820 120 ? Ss Apr16 0:00 pure-ftpd (SERVER) root 26876 0.0 0.0 39356 112 ? S Apr16 0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth 879 26991 0.0 0.0 186252 8460 ? S 01:18 0:00 /usr/bin/php root 27087 0.0 0.0 0 0 ? S 01:18 0:00 [kworker/6:1] 879 27210 0.0 0.0 188324 8408 ? S 01:18 0:00 /usr/bin/php iasdcent 27220 0.0 0.0 185224 8176 ? S 01:18 0:00 /usr/bin/php icowebra 27225 0.0 0.0 185220 6852 ? S 01:18 0:00 /usr/bin/php icowebra 27239 0.0 0.0 185220 6844 ? S 01:18 0:00 /usr/bin/php icowebra 27277 0.0 0.0 185580 8728 ? S 01:18 0:00 /usr/bin/php ferre461 27442 0.0 0.0 232664 15832 ? S 01:09 0:00 /usr/bin/php 879 27489 0.0 0.0 186252 8336 ? S 01:18 0:00 /usr/bin/php 879 27497 0.0 0.0 187024 9384 ? S 01:18 0:00 /usr/bin/php 879 27500 0.0 0.0 186252 8460 ? S 01:18 0:00 /usr/bin/php 879 27510 0.0 0.0 186252 8336 ? S 01:18 0:00 /usr/bin/php 879 27511 0.0 0.0 186252 8344 ? S 01:18 0:00 /usr/bin/php suzantol 27523 0.0 0.0 217924 15776 ? S 01:09 0:00 /usr/bin/php gfebe 27524 0.0 0.0 185408 8872 ? S 01:18 0:00 /usr/bin/php 879 27525 0.0 0.0 186252 8452 ? S 01:18 0:00 /usr/bin/php 879 27526 0.0 0.0 186256 8348 ? S 01:18 0:00 /usr/bin/php suzantol 27534 0.0 0.0 210508 16176 ? S 01:09 0:00 /usr/bin/php root 27536 0.0 0.0 0 0 ? S 01:11 0:00 [kworker/u24:2] 879 27545 0.0 0.0 186252 8384 ? S 01:18 0:00 /usr/bin/php 879 27546 0.0 0.0 186256 8336 ? S 01:18 0:00 /usr/bin/php 879 27557 0.0 0.0 186252 8340 ? S 01:18 0:00 /usr/bin/php radiosat 27560 0.0 0.0 185600 384 ? S 01:07 0:00 /usr/bin/php 879 27578 0.0 0.0 186252 8348 ? S 01:18 0:00 /usr/bin/php 879 27585 0.1 0.0 187020 11400 ? S 01:18 0:00 /usr/bin/php facildia 27623 0.0 0.0 198808 16048 ? S 01:07 0:00 /usr/bin/php pdvxyz 27624 0.0 0.0 185476 6512 ? S 01:19 0:00 /usr/bin/php 879 27720 0.0 0.0 186252 8344 ? S 01:19 0:00 /usr/bin/php icowebra 27723 0.0 0.0 186092 8748 ? S 01:19 0:00 /usr/bin/php 879 27725 0.1 0.0 187020 11284 ? S 01:19 0:00 /usr/bin/php root 27860 0.2 0.0 169920 26192 ? Ss 01:19 0:00 lfd - sleeping autoesco 28049 0.0 0.0 219724 17228 ? S 01:07 0:00 /usr/bin/php facildia 28070 0.0 0.0 198548 15372 ? S 01:07 0:00 /usr/bin/php root 28135 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/8:1] root 28531 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/2:0] root 28532 0.0 0.0 235524 7060 ? S 01:17 0:00 /usr/local/installatron/bin/php -n -c /usr/local/installatron/etc/php.ini -f /usr/local/installatron/etc/repair -- -f root 28689 0.1 0.0 0 0 ? S 01:10 0:00 [kworker/0:0] root 28819 0.4 0.0 112428 33608 ? SN 01:21 0:00 cpanellogd - processing bandwidth root 28972 0.0 0.0 0 0 ? Z 01:22 0:00 [cpsrvd (SSL) - ] root 28985 0.0 0.0 0 0 ? S 01:21 0:00 [kworker/3:1] root 29123 0.0 0.0 13676 1132 ? S 01:21 0:00 dovecot/ssl-params root 29194 0.1 0.0 60608 9232 ? S 01:21 0:00 dovecot/lmtp root 29195 0.0 0.0 31880 2036 ? S 01:21 0:00 dovecot/auth -w root 29219 0.0 0.0 53316 5452 ? S 01:21 0:00 dovecot/lmtp mailnull 29235 0.0 0.0 74248 5648 ? S 01:21 0:00 /usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid root 29784 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/4:0] root 29839 0.0 0.0 0 0 ? S 00:51 0:00 [kworker/11:1] ecfoto 29841 0.4 0.0 195124 39980 ? D 01:22 0:00 /usr/bin/php autoesco 29909 0.0 0.0 215808 15824 ? S 01:10 0:00 /usr/bin/php root 30033 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/11:0] icowebra 30070 0.0 0.0 192900 188 ? S Apr17 0:00 /usr/bin/php root 30113 0.0 0.0 0 0 ? S 01:10 0:00 [kworker/6:0] root 30133 0.0 0.0 0 0 ? S 01:17 0:00 [kworker/5:1] maisg647 30825 0.4 0.0 190416 35784 ? D 01:22 0:00 /usr/bin/php root 30851 0.3 0.1 222220 96560 ? Ss Apr16 6:23 /usr/local/cpanel/3rdparty/perl/524/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6 sistemam 31578 2.4 0.0 186252 16588 ? S 01:22 0:00 /usr/bin/php gfebe 32262 0.0 0.0 185936 9020 ? S 01:19 0:00 /usr/bin/php root 32565 0.0 0.0 0 0 ? S 00:56 0:00 [kworker/1:1]