403Webshell
Server IP : 69.39.225.240  /  Your IP : 216.73.216.138
Web Server : Apache
System : Linux bronze7.serverhost.net 3.10.0-1160.105.1.el7.x86_64 #1 SMP Thu Dec 7 15:39:45 UTC 2023 x86_64
User : reademotions ( 1074)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /backup/lex.4/tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /backup/lex.4/tmp//bb.txt
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss   2487:45 /usr/lib/systemd/systemd --system --deserialize 23
    2 ?        S      0:42 [kthreadd]
    4 ?        S<     0:00 [kworker/0:0H]
    6 ?        S    212:12 [ksoftirqd/0]
    7 ?        S     16:28 [migration/0]
    8 ?        S      0:00 [rcu_bh]
    9 ?        S    3849:57 [rcu_sched]
   10 ?        S<     0:00 [lru-add-drain]
   11 ?        S      3:30 [watchdog/0]
   12 ?        S      2:50 [watchdog/1]
   13 ?        S     16:07 [migration/1]
   14 ?        S    206:38 [ksoftirqd/1]
   16 ?        S<     0:00 [kworker/1:0H]
   17 ?        S      2:43 [watchdog/2]
   18 ?        S     15:32 [migration/2]
   19 ?        S    200:32 [ksoftirqd/2]
   21 ?        S<     0:00 [kworker/2:0H]
   22 ?        S      2:45 [watchdog/3]
   23 ?        S     15:58 [migration/3]
   24 ?        S    205:12 [ksoftirqd/3]
   26 ?        S<     0:00 [kworker/3:0H]
   27 ?        S      2:37 [watchdog/4]
   28 ?        S     14:54 [migration/4]
   29 ?        S    201:15 [ksoftirqd/4]
   31 ?        S<     0:00 [kworker/4:0H]
   32 ?        S      2:36 [watchdog/5]
   33 ?        S     15:15 [migration/5]
   34 ?        S    198:11 [ksoftirqd/5]
   36 ?        S<     0:00 [kworker/5:0H]
   37 ?        S      2:50 [watchdog/6]
   38 ?        S     15:32 [migration/6]
   39 ?        S    223:09 [ksoftirqd/6]
   41 ?        S<     0:00 [kworker/6:0H]
   42 ?        S      2:47 [watchdog/7]
   43 ?        S     16:11 [migration/7]
   44 ?        S    234:05 [ksoftirqd/7]
   46 ?        S<     0:00 [kworker/7:0H]
   48 ?        S      0:00 [kdevtmpfs]
   49 ?        S<     3:35 [netns]
   50 ?        S      1:02 [khungtaskd]
   51 ?        S<     0:02 [writeback]
   52 ?        S<     0:00 [kintegrityd]
   53 ?        S<     0:00 [bioset]
   54 ?        S<     0:00 [bioset]
   55 ?        S<     0:00 [bioset]
   56 ?        S<     0:00 [kblockd]
   57 ?        S<     0:00 [md]
   58 ?        S<     0:00 [edac-poller]
   59 ?        S<     0:00 [watchdogd]
   68 ?        S    2398:46 [kswapd0]
   69 ?        SN     0:00 [ksmd]
   70 ?        SN     2:03 [khugepaged]
   71 ?        S<     0:00 [crypto]
   79 ?        S<     0:00 [kthrotld]
   82 ?        S<     0:00 [kmpath_rdacd]
   83 ?        S<     0:00 [kaluad]
   84 ?        S<     0:00 [kpsmoused]
   86 ?        S<     0:00 [ipv6_addrconf]
   99 ?        S<     0:00 [deferwq]
  135 ?        S     16:37 [kauditd]
  276 ?        S      0:00 [scsi_eh_0]
  288 ?        S<     0:00 [ata_sff]
  291 ?        S<     0:00 [scsi_tmf_0]
  295 ?        S      0:16 [aacraid]
  302 ?        S<     0:00 [ttm_swap]
  317 ?        S      0:00 [scsi_eh_1]
  318 ?        S<     0:00 [scsi_tmf_1]
  319 ?        S      0:00 [scsi_eh_2]
  320 ?        S<     0:00 [scsi_tmf_2]
  321 ?        S      0:00 [scsi_eh_3]
  322 ?        S<     0:00 [scsi_tmf_3]
  323 ?        S      0:00 [scsi_eh_4]
  324 ?        S<     0:00 [scsi_tmf_4]
  325 ?        S      0:00 [scsi_eh_5]
  326 ?        S<     0:00 [scsi_tmf_5]
  327 ?        S      0:00 [scsi_eh_6]
  328 ?        S<     0:00 [scsi_tmf_6]
  352 ?        S      4:47 [jbd2/sda1-8]
  353 ?        S<     0:00 [ext4-rsv-conver]
  392 ?        S      6:07 [jbd2/sda6-8]
  393 ?        S<     0:00 [ext4-rsv-conver]
  441 ?        Ss   1542:29 /usr/lib/systemd/systemd-journald
  464 ?        Ss    21:27 /usr/lib/systemd/systemd-udevd
  555 ?        SN     0:00 [kipmi0]
  561 ?        S    214:16 [jbd2/sda2-8]
  563 ?        S<     0:00 [ext4-rsv-conver]
  571 ?        S     84:06 [jbd2/sdb1-8]
  573 ?        S<     0:00 [ext4-rsv-conver]
  574 ?        S     59:41 [jbd2/sda5-8]
  575 ?        S<     0:00 [ext4-rsv-conver]
  577 ?        S<     0:00 [kvm-irqfd-clean]
  583 ?        S    281:28 [jbd2/sda7-8]
  584 ?        S<     0:00 [ext4-rsv-conver]
  659 ?        Ssl  278:31 /usr/lib/polkit-1/polkitd --no-debug
  663 ?        Ss   300:12 /usr/lib/systemd/systemd-logind
  664 ?        Ss     0:48 /usr/sbin/smartd -n -q never
  666 ?        Ss    61:27 /usr/sbin/irqbalance --foreground
  669 ?        Ss   790:50 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
  671 ?        Ss     1:17 /sbin/rpcbind -w
  688 ?        Ss    69:21 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  689 ?        S     70:10 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  690 ?        S     69:51 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  691 ?        S     69:46 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  693 ?        S     70:19 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  701 ?        Ssl  5512:28 /usr/sbin/NetworkManager --no-daemon
  744 tty1     Ss+    0:00 /sbin/agetty --noclear tty1 linux
  827 ?        S<     2:12 [kworker/7:1H]
  828 ?        S<     1:58 [kworker/4:1H]
  829 ?        S<     2:22 [kworker/3:1H]
  830 ?        S<     2:08 [kworker/0:1H]
 1028 ?        Ss    23:05 /usr/sbin/sshd -D
 1029 ?        Ssl  4227:15 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf
 1035 ?        Ss    12:12 /usr/sbin/sshd -D -f /etc/ssh/sshd_lex
 1039 ?        Ssl  111:35 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
 1061 ?        Ssl  695:14 /usr/sbin/rsyslogd -n
 1247 ?        S<   2168:46 [hcp_watchdog]
 1257 ?        SNsl 4602:50 /usr/sbin/r1soft/bin/cdp -s -c /usr/sbin/r1soft/conf/agent_config
 1437 ?        S      0:00 [kworker/u16:2]
 1461 ?        S      0:00 sendmail: server syn-035-130-111-098.biz.spectrum.com [35.130.111.98] cmd read
 1694 ?        S      0:04 php-fpm: pool uscommodities
 1696 ?        Sl     0:01 /usr/local/apache/bin/httpd -k start
 1764 ?        S      0:00 dovecot/imap-login
 1766 ?        S      0:00 dovecot/imap
 2264 ?        S<     2:00 [kworker/2:1H]
 2300 ?        S      0:00 dovecot/imap-login
 2305 ?        S      0:00 dovecot/imap
 2407 ?        S      0:00 php-fpm: pool hospitalinnovate
 2561 ?        S      0:00 [kworker/1:0]
 3361 ?        Ss     0:14 lfd - sleeping
 4021 ?        S<     1:30 [kworker/6:1H]
 4137 ?        Ss    85:54 /home/lexiconn/wusage8.0/wusage -p 2396 -wusage-check-server -home /root/
 4217 ?        S      0:00 dovecot/imap-login
 4368 ?        S      0:00 sudo su - robinhunt
 4369 ?        S      0:00 su - robinhunt
 4370 ?        S      0:00 -bash
 4412 ?        S      0:00 dovecot/imap
 4416 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4419 ?        S      7:16 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/ext/bb-memory.sh
 4420 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4423 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4427 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4428 ?        S      7:03 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/bin/bb-local.sh
 4430 ?        S      0:00 pine
 4496 ?        D      0:01 [kworker/u16:1]
 4724 ?        S      7:21 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/ext/bb-top.sh
 4751 ?        Sl     0:03 /usr/local/apache/bin/httpd -k start
 4755 ?        S      7:12 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/ext/mq.pl
 5175 ?        Ss     0:00 sendmail: accepting connections
 5266 ?        Ss     0:00 /usr/sbin/xinetd -stayalive -pidfile /var/run/xinetd.pid
 5301 ?        Ss     0:00 sendmail: Queue runner@01:00:00 for /var/spool/clientmqueue
 5413 ?        S<     2:08 [kworker/1:1H]
 5543 ?        S<     2:10 [kworker/5:1H]
 6012 ?        S      5:00 spamd child
 6882 ?        Ss     5:42 /bin/bash /usr/local/lexiconn/apache_monitor.sh
 7150 ?        S      0:00 dovecot/imap-login
 7151 ?        S      0:00 dovecot/imap-login
 7156 ?        S      0:00 dovecot/imap
 7157 ?        S      0:00 dovecot/imap
 7417 ?        S      0:00 sleep 299
 7484 ?        S      0:03 spamd child
 7503 ?        S      0:04 php-fpm: pool iowa-roofing
 8017 ?        Sl     0:04 /usr/local/apache/bin/httpd -k start
 8043 ?        S      0:00 [kworker/2:1]
 8153 ?        D      2:13 rsync --archive --hard-links --force --ignore-errors --numeric-ids --delete --exclude=/sys --exclude=/proc --exclude=/var/named/chroot/proc --exclude=/home4 --exclude=/home5 --exclude=/backup --exclude=/var/log --exclude=/home/logs --exclude=/home2/logs --exclude=/home2/archive --exclude=/var2/log / /backup/full
 8154 ?        S      1:13 rsync --archive --hard-links --force --ignore-errors --numeric-ids --delete --exclude=/sys --exclude=/proc --exclude=/var/named/chroot/proc --exclude=/home4 --exclude=/home5 --exclude=/backup --exclude=/var/log --exclude=/home/logs --exclude=/home2/logs --exclude=/home2/archive --exclude=/var2/log / /backup/full
 8155 ?        S      1:57 rsync --archive --hard-links --force --ignore-errors --numeric-ids --delete --exclude=/sys --exclude=/proc --exclude=/var/named/chroot/proc --exclude=/home4 --exclude=/home5 --exclude=/backup --exclude=/var/log --exclude=/home/logs --exclude=/home2/logs --exclude=/home2/archive --exclude=/var2/log / /backup/full
 8191 ?        S      0:00 sleep 120
 8240 ?        S      0:00 sleep 300
 8302 ?        S      0:00 sleep 300
 8361 ?        S      0:08 php-fpm: pool theralife
 8450 ?        S      0:00 [kworker/6:2]
 8454 ?        S      0:00 [kworker/4:0]
 9096 ?        S      0:00 top -b -c -n 1 -d 0.3
10218 ?        Ss     0:00 /usr/sbin/anacron -s
10293 ?        S      0:07 php-fpm: pool wrightslaw
10544 ?        S      0:00 php-fpm: pool snacs
10827 ?        Ss     0:02 /usr/local/apache/bin/httpd -k start
10898 ?        S      0:00 dovecot/imap-login
10899 ?        S      0:00 dovecot/imap
11041 ?        S      0:00 [kworker/0:1]
11936 ?        S      0:00 [kworker/3:2]
12503 ?        S      0:01 [kworker/u16:0]
12581 ?        S      0:00 dovecot/imap
12596 ?        S      0:00 sleep 300
12637 ?        Sl     0:00 /usr/local/apache/bin/httpd -k start
12698 ?        S      0:01 php-fpm: pool pierrecheesemarket
12734 ?        S      0:00 sendmail: server [118.194.238.196] cmd read
12747 ?        S      0:03 php-fpm: pool wrightslaw
12749 ?        S      0:00 php-fpm: pool snacs
12751 ?        S      0:02 php-fpm: pool masterpiece-lifestyles
12752 ?        S      0:02 php-fpm: pool wrightslaw
12768 ?        S      0:01 php-fpm: pool lewaf
12771 ?        S      0:00 php-fpm: pool masterpiece-lifestyles
12787 ?        S      0:00 php-fpm: pool southernenclosures
12789 ?        S      0:01 php-fpm: pool lewaf
12792 ?        S      0:00 php-fpm: pool anecare
12795 ?        S      0:00 php-fpm: pool southernenclosures
12797 ?        S      0:00 php-fpm: pool hospitalinnovate
12799 ?        S      0:00 php-fpm: pool hospitalinnovate
12804 ?        S      0:01 php-fpm: pool nextphasedev
12805 ?        S      0:00 php-fpm: pool silverlinkconsulting
12809 ?        S      0:00 php-fpm: pool nextphasedev
12811 ?        S      0:00 php-fpm: pool brunopainting
12814 ?        S      0:00 php-fpm: pool brunopainting
12815 ?        S      0:00 php-fpm: pool dbconsultants
12819 ?        S      0:00 php-fpm: pool aapcia
12821 ?        S      0:01 php-fpm: pool 417hunterroofing
12823 ?        S      0:01 php-fpm: pool 417hunterroofing
12825 ?        S      0:00 sendmail: server [118.122.87.186] cmd read
12826 ?        S      0:01 php-fpm: pool acaomhealthcare
12833 ?        S      0:00 sendmail: server abts-north-static-087.59.160.122.airtelbroadband.in [122.160.59.87] (may be forged) cmd read
12834 ?        S      0:00 php-fpm: pool simardandsons
12838 ?        S      0:00 php-fpm: pool simardandsons
12842 ?        S      0:00 php-fpm: pool theralife
12844 ?        S      0:00 php-fpm: pool scottishritepark
12846 ?        S      0:00 php-fpm: pool scottishritepark
12850 ?        R      0:00 php-fpm: pool cornbelttesting
12851 ?        S      0:00 /usr/sbin/CROND -n
12852 ?        S      0:00 /usr/sbin/CROND -n
12853 ?        S      0:00 /usr/sbin/CROND -n
12856 ?        S      0:00 /usr/sbin/CROND -n
12857 ?        S      0:00 /usr/sbin/CROND -n
12858 ?        S      0:00 /usr/sbin/CROND -n
12859 ?        S      0:00 /usr/sbin/CROND -n
12860 ?        S      0:00 /usr/sbin/CROND -n
12861 ?        S      0:00 /usr/sbin/CROND -n
12862 ?        S      0:00 /usr/sbin/CROND -n
12865 ?        Ss     0:00 /bin/sh -c /usr/local/bin/php73 /www/webmail/bin/roundcube schedule:run >/dev/null 2>&1
12867 ?        Ss     0:00 /bin/sh -c if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi
12868 ?        Ss     0:00 /bin/sh -c /usr/local/bin/clamdwatch.pl -q >/dev/null 2>&1 && ( /usr/bin/killall -9 clamd; rm -fr /tmp/clamd; /usr/local/sbin/clamd >/dev/null 2>&1 ) >/dev/null 2>&1
12869 ?        Ss     0:00 /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
12870 ?        R      0:00 /usr/local/bin/php73 /www/webmail/bin/roundcube schedule:run
12871 ?        Ss     0:00 /bin/sh -c find /tmp/ -name '???????.*.php' -delete > /dev/null 2>&1
12872 ?        Ss     0:00 /bin/sh -c /home/tropicoolaccents/www/declinecc/process.php >/dev/null 2>&1
12873 ?        Ss     0:00 /bin/sh -c /usr/local/lexiconn/wordpress_block.pl >/dev/null
12875 ?        Ss     0:00 /usr/bin/perl /usr/local/lexiconn/admin/check_spam
12876 ?        R      0:00 find /tmp/ -name ???????.*.php -delete
12877 ?        Ss     0:00 /usr/bin/perl /home/bb/check_bb.pl
12878 ?        Rs     0:00 /usr/bin/perl /usr/spc/systemwatch
12879 ?        R      0:00 /usr/local/bin/php -q /home/tropicoolaccents/www/declinecc/process.php
12880 ?        R      0:00 /usr/bin/perl /usr/local/bin/clamdwatch.pl -q
12881 ?        S      0:00 bash /usr/local/maldetect/maldet --mkpubpaths
12883 ?        S      0:00 sh -c ps ax >/tmp/bb.txt
12885 ?        S      0:00 /usr/bin/perl /usr/local/lexiconn/wordpress_block.pl
12886 ?        S      0:00 sh -c ps axw >/tmp/spam.txt
12889 ?        R      0:00 ps axw
12898 ?        R      0:00 ps ax
14130 ?        S      0:00 dovecot/imap-login
14132 ?        S      0:00 dovecot/imap
14566 ?        S      0:00 top -b -c -n 1 -d 0.3
14897 ?        S      0:00 dovecot/imap-login
14898 ?        S      0:00 dovecot/imap
15981 ?        S      0:00 dovecot/imap-login
15987 ?        S      0:00 dovecot/imap
16470 ?        S      0:02 /usr/local/apache/bin/httpd -k start
16471 ?        S      0:00 /usr/local/apache/bin/fcgi- -k start
17071 ?        S      0:00 [kworker/1:1]
17340 ?        S      0:00 [kworker/0:0]
17649 ?        S      0:00 [kworker/6:1]
17712 ?        S      0:00 sudo /usr/bin/mailq
17757 ?        Sl     0:02 /usr/local/apache/bin/httpd -k start
19237 ?        S      0:00 [kworker/4:1]
19667 ?        Ss     3:19 /usr/sbin/ntpd -u ntp:ntp -g
19850 ?        S      0:00 dovecot/imap-login
19851 ?        S      0:00 dovecot/imap
20403 ?        Sl   451:51 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
20825 ?        Ss    34:38 /usr/sbin/crond -n
21646 ?        S      0:00 sendmail: server mangjiang.cn [165.154.182.219] (may be forged) cmd read
21781 ?        S      0:00 [kworker/4:2]
23817 ?        Ss     1:25 php-fpm: master process (/usr/local/php74/etc/php-fpm.conf)
23851 ?        Ss     0:05 php-fpm: master process (/usr/local/php82/etc/php-fpm.conf)
24006 ?        S      0:00 /usr/sbin/CROND -n
24011 ?        Ss     0:00 /usr/bin/perl /usr/spc/lexbackup
24272 ?        Ssl  101:58 /usr/sbin/opendkim -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid
24464 ?        S      0:00 [kworker/5:2]
24961 ?        Ss     0:03 php-fpm: master process (/usr/local/php80/etc/php-fpm.conf)
24976 ?        Ss     0:21 php-fpm: master process (/usr/local/php83/etc/php-fpm.conf)
24983 ?        Ss     0:10 php-fpm: master process (/usr/local/etc/php-fpm.conf)
24990 ?        Ss     0:04 php-fpm: master process (/usr/local3/etc/php-fpm.conf)
25004 ?        Ss     0:11 php-fpm: master process (/usr/local/php81/etc/php-fpm.conf)
25454 ?        Sl     0:04 /usr/local/apache/bin/httpd -k start
25727 ?        S      0:00 dovecot/imap-login
25728 ?        S      0:00 dovecot/imap
26262 ?        S      0:00 dovecot/imap-login
26264 ?        S      0:00 dovecot/imap
26695 ?        S      0:00 [kworker/6:0]
26891 ?        Sl     0:01 /usr/local/apache/bin/httpd -k start
27331 ?        S      0:00 dovecot/imap-login
27337 ?        S      0:00 dovecot/imap
27530 ?        Sl     0:02 /usr/local/apache/bin/httpd -k start
27617 ?        Sl     0:00 /usr/local/apache/bin/httpd -k start
27648 ?        S      0:00 dovecot/imap-login
27649 ?        S      0:00 dovecot/imap
27732 ?        Sl     0:01 /usr/local/apache/bin/httpd -k start
27776 ?        S      0:00 top -b -c -n 1 -d 0.3
28064 ?        Ssl  368:34 /usr/local/sbin/clamd
28181 ?        S      0:00 dovecot/imap-login
28187 ?        S      0:00 dovecot/imap
28399 ?        S      0:00 dovecot/imap-login
28400 ?        S      0:00 dovecot/imap
28654 ?        S      0:00 sendmail: server [152.32.245.44] cmd read
28846 ?        S      0:00 [kworker/2:2]
29017 ?        S      0:00 top -b -c -n 1 -d 0.3
29619 ?        S      0:00 dovecot/imap-login
29621 ?        S      0:00 dovecot/imap
29841 ?        S      0:00 [kworker/7:1]
30157 ?        S      0:00 [kworker/7:3]
30333 ?        S      0:00 dovecot/imap-login
30334 ?        S      0:00 dovecot/imap-login
30335 ?        S      0:00 dovecot/imap-login
30343 ?        S      0:00 dovecot/imap
30361 ?        S      0:00 dovecot/imap
30363 ?        S      0:00 dovecot/imap
30598 ?        S      0:00 dovecot/imap-login
30603 ?        S      0:00 dovecot/imap
30790 ?        S      0:00 [kworker/2:0]
30883 ?        S      0:00 [kworker/1:3]
30935 ?        D      0:00 [kworker/3:0]
30979 ?        S      0:00 [kworker/5:0]
31803 ?        Ss     0:13 /usr/bin/perl -T -w /usr/local/bin/spamd -d --pidfile=/var/run/spamassassin.pid
31815 ?        S      0:00 top -b -c -n 1 -d 0.3
31969 ?        Sl     0:04 /usr/local/apache/bin/httpd -k start
32016 ?        Ss     0:21 /usr/local/sbin/dovecot -F -c /usr/local/etc/dovecot/dovecot.conf
32021 ?        S      0:08 dovecot/anvil
32022 ?        S      0:09 dovecot/log
32023 ?        S      0:28 dovecot/config
32026 ?        S      0:15 dovecot/stats
32027 ?        S      0:18 dovecot/auth
32079 ?        S      2:12 dovecot/auth -w
32737 ?        Sl     0:03 /usr/local/apache/bin/httpd -k start

Youez - 2016 - github.com/yon3zu
LinuXploit