403Webshell
Server IP : 69.39.225.240  /  Your IP : 216.73.216.138
Web Server : Apache
System : Linux bronze7.serverhost.net 3.10.0-1160.105.1.el7.x86_64 #1 SMP Thu Dec 7 15:39:45 UTC 2023 x86_64
User : reademotions ( 1074)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp//bb.txt
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss   2499:06 /usr/lib/systemd/systemd --system --deserialize 23
    2 ?        S      0:42 [kthreadd]
    4 ?        S<     0:00 [kworker/0:0H]
    6 ?        S    212:46 [ksoftirqd/0]
    7 ?        S     16:33 [migration/0]
    8 ?        S      0:00 [rcu_bh]
    9 ?        S    3866:27 [rcu_sched]
   10 ?        S<     0:00 [lru-add-drain]
   11 ?        S      3:30 [watchdog/0]
   12 ?        S      2:50 [watchdog/1]
   13 ?        S     16:12 [migration/1]
   14 ?        S    207:12 [ksoftirqd/1]
   16 ?        S<     0:00 [kworker/1:0H]
   17 ?        S      2:44 [watchdog/2]
   18 ?        S     15:37 [migration/2]
   19 ?        S    201:09 [ksoftirqd/2]
   21 ?        S<     0:00 [kworker/2:0H]
   22 ?        S      2:46 [watchdog/3]
   23 ?        S     16:04 [migration/3]
   24 ?        S    205:47 [ksoftirqd/3]
   26 ?        S<     0:00 [kworker/3:0H]
   27 ?        S      2:37 [watchdog/4]
   28 ?        S     14:59 [migration/4]
   29 ?        S    201:49 [ksoftirqd/4]
   31 ?        S<     0:00 [kworker/4:0H]
   32 ?        S      2:37 [watchdog/5]
   33 ?        S     15:20 [migration/5]
   34 ?        S    198:45 [ksoftirqd/5]
   36 ?        S<     0:00 [kworker/5:0H]
   37 ?        S      2:51 [watchdog/6]
   38 ?        S     15:37 [migration/6]
   39 ?        S    224:04 [ksoftirqd/6]
   41 ?        S<     0:00 [kworker/6:0H]
   42 ?        S      2:48 [watchdog/7]
   43 ?        S     16:16 [migration/7]
   44 ?        S    234:46 [ksoftirqd/7]
   46 ?        S<     0:00 [kworker/7:0H]
   48 ?        S      0:00 [kdevtmpfs]
   49 ?        S<     3:37 [netns]
   50 ?        S      1:02 [khungtaskd]
   51 ?        S<     0:02 [writeback]
   52 ?        S<     0:00 [kintegrityd]
   53 ?        S<     0:00 [bioset]
   54 ?        S<     0:00 [bioset]
   55 ?        S<     0:00 [bioset]
   56 ?        S<     0:00 [kblockd]
   57 ?        S<     0:00 [md]
   58 ?        S<     0:00 [edac-poller]
   59 ?        S<     0:00 [watchdogd]
   68 ?        S    2406:38 [kswapd0]
   69 ?        SN     0:00 [ksmd]
   70 ?        SN     2:04 [khugepaged]
   71 ?        S<     0:00 [crypto]
   79 ?        S<     0:00 [kthrotld]
   82 ?        S<     0:00 [kmpath_rdacd]
   83 ?        S<     0:00 [kaluad]
   84 ?        S<     0:00 [kpsmoused]
   86 ?        S<     0:00 [ipv6_addrconf]
   99 ?        S<     0:00 [deferwq]
  135 ?        S     16:37 [kauditd]
  276 ?        S      0:00 [scsi_eh_0]
  288 ?        S<     0:00 [ata_sff]
  291 ?        S<     0:00 [scsi_tmf_0]
  295 ?        S      0:16 [aacraid]
  302 ?        S<     0:00 [ttm_swap]
  317 ?        S      0:00 [scsi_eh_1]
  318 ?        S<     0:00 [scsi_tmf_1]
  319 ?        S      0:00 [scsi_eh_2]
  320 ?        S<     0:00 [scsi_tmf_2]
  321 ?        S      0:00 [scsi_eh_3]
  322 ?        S<     0:00 [scsi_tmf_3]
  323 ?        S      0:00 [scsi_eh_4]
  324 ?        S<     0:00 [scsi_tmf_4]
  325 ?        S      0:00 [scsi_eh_5]
  326 ?        S<     0:00 [scsi_tmf_5]
  327 ?        S      0:00 [scsi_eh_6]
  328 ?        S<     0:00 [scsi_tmf_6]
  352 ?        S      4:49 [jbd2/sda1-8]
  353 ?        S<     0:00 [ext4-rsv-conver]
  392 ?        S      6:08 [jbd2/sda6-8]
  393 ?        S<     0:00 [ext4-rsv-conver]
  441 ?        Ss   1548:51 /usr/lib/systemd/systemd-journald
  464 ?        Ss    21:32 /usr/lib/systemd/systemd-udevd
  555 ?        SN     0:00 [kipmi0]
  561 ?        S    214:58 [jbd2/sda2-8]
  563 ?        S<     0:00 [ext4-rsv-conver]
  571 ?        S     84:43 [jbd2/sdb1-8]
  573 ?        S<     0:00 [ext4-rsv-conver]
  574 ?        S     60:02 [jbd2/sda5-8]
  575 ?        S<     0:00 [ext4-rsv-conver]
  577 ?        S<     0:00 [kvm-irqfd-clean]
  583 ?        S    282:51 [jbd2/sda7-8]
  584 ?        S<     0:00 [ext4-rsv-conver]
  659 ?        Ssl  279:47 /usr/lib/polkit-1/polkitd --no-debug
  663 ?        Ss   301:32 /usr/lib/systemd/systemd-logind
  664 ?        Ss     0:48 /usr/sbin/smartd -n -q never
  666 ?        Ss    61:43 /usr/sbin/irqbalance --foreground
  669 ?        Ss   794:22 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
  671 ?        Ss     1:17 /sbin/rpcbind -w
  688 ?        Ss    69:40 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  689 ?        S     70:29 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  690 ?        S     70:10 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  691 ?        S     70:05 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  693 ?        S     70:39 /usr/sbin/saslauthd -m /run/saslauthd -a shadow
  701 ?        Ssl  5545:49 /usr/sbin/NetworkManager --no-daemon
  744 tty1     Ss+    0:00 /sbin/agetty --noclear tty1 linux
  827 ?        S<     2:13 [kworker/7:1H]
  828 ?        S<     2:00 [kworker/4:1H]
  829 ?        S<     2:23 [kworker/3:1H]
  830 ?        S<     2:10 [kworker/0:1H]
 1028 ?        Ss    23:09 /usr/sbin/sshd -D
 1029 ?        Ssl  4245:17 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf
 1035 ?        Ss    12:15 /usr/sbin/sshd -D -f /etc/ssh/sshd_lex
 1039 ?        Ssl  112:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
 1061 ?        Ssl  698:11 /usr/sbin/rsyslogd -n
 1247 ?        S<   2176:56 [hcp_watchdog]
 1257 ?        SNsl 4622:23 /usr/sbin/r1soft/bin/cdp -s -c /usr/sbin/r1soft/conf/agent_config
 1345 ?        S      0:00 dovecot/imap
 1381 ?        S      0:00 dovecot/imap-login
 1386 ?        S      0:00 dovecot/imap
 1399 ?        Sl     0:04 /usr/local/apache/bin/httpd -k start
 1687 ?        Ss     0:14 /usr/bin/perl -T -w /usr/local/bin/spamd -d --pidfile=/var/run/spamassassin.pid
 2154 ?        Ss     0:03 /usr/local/apache/bin/httpd -k start
 2155 ?        S      0:03 /usr/local/apache/bin/httpd -k start
 2156 ?        S      0:00 /usr/local/apache/bin/fcgi- -k start
 2264 ?        S<     2:01 [kworker/2:1H]
 2624 ?        SN     0:00 bash /usr/local/maldetect/maldet -b -r /home?/?/www/,/var/www/html/,/usr/local/apache/htdocs/ 1
 2875 ?        S      0:00 [kworker/1:1]
 3562 ?        S      0:00 [kworker/u16:2]
 3943 ?        S      0:00 [kworker/6:1]
 4021 ?        S<     1:31 [kworker/6:1H]
 4137 ?        Ss    86:16 /home/lexiconn/wusage8.0/wusage -p 2396 -wusage-check-server -home /root/
 4368 ?        S      0:00 sudo su - robinhunt
 4369 ?        S      0:00 su - robinhunt
 4370 ?        S      0:00 -bash
 4416 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4419 ?        S      7:18 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/ext/bb-memory.sh
 4420 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4423 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4427 ?        S      0:00 /bin/sh /home/bb/bb/runbb.sh
 4428 ?        S      7:05 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/bin/bb-local.sh
 4430 ?        S      0:00 pine
 4724 ?        S      7:23 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/ext/bb-top.sh
 4755 ?        S      7:14 /bin/sh /home/bb/bb19a/bin/bbrun /home/bb/bb19a/ext/mq.pl
 5413 ?        S<     2:10 [kworker/1:1H]
 5543 ?        S<     2:11 [kworker/5:1H]
 5811 ?        S      0:00 [kworker/4:2]
 6441 ?        S      3:34 spamd child
 6443 ?        S      0:58 spamd child
 6516 ?        S      0:00 [kworker/7:1]
 6787 ?        Sl     0:04 /usr/local/apache/bin/httpd -k start
 6831 ?        S      0:00 dovecot/imap-login
 6833 ?        S      0:00 dovecot/imap
 6882 ?        Ss     5:46 /bin/bash /usr/local/lexiconn/apache_monitor.sh
 7847 ?        Sl     0:03 /usr/local/apache/bin/httpd -k start
 8044 ?        S      0:00 dovecot/imap-login
 8046 ?        S      0:00 dovecot/imap
 8890 ?        SN     0:02 /usr/local/bin/clamdscan --fdpass --infected --no-summary -f /usr/local/maldetect/tmp/.find.1943
 9096 ?        S      0:00 top -b -c -n 1 -d 0.3
 9249 ?        S      0:00 [kworker/2:2]
 9294 ?        R      4:51 php-fpm: pool reademotions
 9309 ?        R      4:51 php-fpm: pool reademotions
10721 ?        Sl    15:38 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
11563 ?        S      2:23 php-fpm: pool iowa-roofing
12059 ?        Sl     0:04 /usr/local/apache/bin/httpd -k start
12393 ?        S      0:00 [kworker/3:2]
12985 ?        Ss     0:03 php-fpm: master process (/usr/local/php80/etc/php-fpm.conf)
12992 ?        Ss     1:53 php-fpm: master process (/usr/local/php74/etc/php-fpm.conf)
12999 ?        Ss     0:19 php-fpm: master process (/usr/local/php83/etc/php-fpm.conf)
13007 ?        Ss     0:09 php-fpm: master process (/usr/local/etc/php-fpm.conf)
13013 ?        Ss     0:03 php-fpm: master process (/usr/local3/etc/php-fpm.conf)
13036 ?        Ss     0:07 php-fpm: master process (/usr/local/php82/etc/php-fpm.conf)
13056 ?        Ss     0:10 php-fpm: master process (/usr/local/php81/etc/php-fpm.conf)
13294 ?        D      0:00 [kworker/1:2]
13697 ?        S      0:00 dovecot/imap-login
13699 ?        S      0:00 dovecot/imap
13700 ?        S      0:00 dovecot/imap-login
13702 ?        S      0:00 dovecot/imap
13704 ?        S      0:00 dovecot/imap-login
13705 ?        S      0:00 dovecot/imap
14383 ?        R      4:07 php-fpm: pool reademotions
14453 ?        R      3:57 php-fpm: pool reademotions
14465 ?        Sl     0:03 /usr/local/apache/bin/httpd -k start
14534 ?        S      3:55 php-fpm: pool reademotions
14545 ?        R      3:54 php-fpm: pool reademotions
14566 ?        S      0:00 top -b -c -n 1 -d 0.3
14820 ?        S      0:00 [kworker/6:2]
15320 ?        Sl     0:02 /usr/local/apache/bin/httpd -k start
15395 ?        Ssl   21:47 /usr/local/sbin/clamd
16630 ?        S      3:48 php-fpm: pool reademotions
16632 ?        R      3:52 php-fpm: pool reademotions
16635 ?        R      3:50 php-fpm: pool reademotions
16647 ?        R      3:48 php-fpm: pool reademotions
16689 ?        S      0:00 [kworker/3:0]
16808 ?        S      0:00 dovecot/imap-login
16809 ?        S      0:00 dovecot/imap
17160 ?        S      0:00 [kworker/5:0]
17196 ?        S      0:00 [kworker/3:1]
17610 ?        S      0:13 php-fpm: pool aapcia
17712 ?        S      0:00 sudo /usr/bin/mailq
18076 ?        R      0:21 php-fpm: pool iowa-roofing
18317 ?        SN     0:00 ConfigServer Version Check
18326 ?        SN     0:00 sleep 5783
18640 ?        S      0:00 sleep 298
18890 ?        S      0:00 [kworker/u16:0]
19173 ?        S      3:33 php-fpm: pool reademotions
19667 ?        Ss     3:20 /usr/sbin/ntpd -u ntp:ntp -g
20013 ?        S      0:00 dovecot/imap-login
20015 ?        S      0:00 dovecot/imap
20722 ?        S      0:00 [kworker/4:1]
20825 ?        Ss    34:49 /usr/sbin/crond -n
21811 ?        S      0:03 php-fpm: pool cornbelttesting
21970 ?        S      0:05 php-fpm: pool dbconsultants
22122 ?        S      0:00 dovecot/imap-login
22124 ?        S      0:00 dovecot/imap
22203 ?        S      0:04 php-fpm: pool pierrecheesemarket
22327 ?        S      1:48 php-fpm: pool iowa-roofing
22439 ?        S      0:00 sleep 300
22453 ?        Ss     0:15 lfd - sleeping
23541 ?        R      0:07 php-fpm: pool theralife
23544 ?        R      0:09 php-fpm: pool theralife
23574 ?        S      0:00 sleep 299
23686 ?        S      0:00 sendmail: server [120.235.180.229] cmd read
23704 ?        R      0:27 php-fpm: pool securesafetysolutions
23709 ?        Ss     0:00 /usr/lib/systemd/systemd-hostnamed
23895 ?        S      0:06 php-fpm: pool nextphasedev
24012 ?        Sl     0:00 /usr/local/apache/bin/httpd -k start
24152 ?        Sl     0:00 /usr/local/apache/bin/httpd -k start
24272 ?        Ssl  103:48 /usr/sbin/opendkim -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid
24330 ?        S      0:03 php-fpm: pool nextphasedev
24341 ?        Sl     0:04 /usr/local/apache/bin/httpd -k start
24385 ?        S      0:00 dovecot/imap-login
24397 ?        S      0:00 sleep 300
24413 ?        S      0:00 dovecot/imap
24421 ?        S      0:00 dovecot/auth -w
24537 ?        S      0:02 php-fpm: pool midiowainterviewing
24700 ?        S      0:02 php-fpm: pool aapcia
24731 ?        S      0:01 php-fpm: pool theeuropeantouch
24870 ?        S      0:00 php-fpm: pool pierrecheesemarket
24874 ?        S      0:00 sendmail: server [156.238.86.2] cmd read
24890 ?        S      0:00 php-fpm: pool africancrafts
24893 ?        S      0:00 php-fpm: pool sweetenerproducts
24894 ?        S      0:00 php-fpm: pool lhcurated
24895 ?        R      0:00 php-fpm: pool securesafetysolutions
24896 ?        S      0:00 sendmail: server [222.246.240.162] cmd read
24899 ?        S      0:00 php-fpm: pool wrightslaw
24901 ?        S      0:00 php-fpm: pool obgyndm
24903 ?        S      0:01 php-fpm: pool theeuropeantouch
24910 ?        R      0:00 php-fpm: pool theeuropeantouch
24915 ?        S      0:00 dovecot/imap-login
24916 ?        S      0:00 dovecot/imap
24918 ?        S      0:00 sleep 120
24919 ?        R      0:00 php-fpm: pool anecare
24920 ?        S      0:00 php-fpm: pool tuxedosdirect
24922 ?        S      0:00 php-fpm: pool tuxedosdirect
24923 ?        S      0:00 php-fpm: pool securesafetysolutions
24925 ?        R      0:00 php-fpm: pool tuxedosdirect
24926 ?        R      0:00 php-fpm: pool tuxedosdirect
24928 ?        S      0:00 /usr/sbin/CROND -n
24932 ?        S      0:00 /usr/sbin/CROND -n
24937 ?        S      0:00 /usr/sbin/CROND -n
24939 ?        S      0:00 /usr/sbin/CROND -n
24940 ?        S      0:00 /usr/sbin/CROND -n
24941 ?        S      0:00 /usr/sbin/CROND -n
24942 ?        S      0:00 /usr/sbin/CROND -n
24944 ?        S      0:00 /usr/sbin/CROND -n
24947 ?        S      0:00 /usr/sbin/CROND -n
24948 ?        S      0:00 /usr/sbin/CROND -n
24949 ?        S      0:00 /usr/sbin/CROND -n
24950 ?        S      0:00 /usr/sbin/CROND -n
24952 ?        S      0:00 [kworker/2:0]
24954 ?        Ss     0:00 /usr/bin/perl /usr/local/lexiconn/updatemail.lex
24955 ?        Ss     0:00 /bin/sh -c /usr/local/bin/php73 /www/webmail/bin/roundcube schedule:run >/dev/null 2>&1
24957 ?        R      0:00 /usr/local/bin/php73 /www/webmail/bin/roundcube schedule:run
24959 ?        Ss     0:00 /bin/sh -c /usr/local/lexiconn/wordpress_block.pl >/dev/null
24961 ?        S      0:00 /usr/bin/perl /usr/local/lexiconn/wordpress_block.pl
24964 ?        Ss     0:00 /bin/sh -c /usr/local/bin/clamdwatch.pl -q >/dev/null 2>&1 && ( /usr/bin/killall -9 clamd; rm -fr /tmp/clamd; /usr/local/sbin/clamd >/dev/null 2>&1 ) >/dev/null 2>&1
24965 ?        Ss     0:00 /usr/bin/wget -q -O- --no-check-certificate https://sledtrack.com/wp-load.php?import_key=WdQKxR7&import_id=6&action=processing
24968 ?        Ss     0:00 /usr/bin/perl /usr/spc/systemwatch
24971 ?        S      0:00 [kworker/6:0]
24974 ?        R      0:00 /usr/bin/perl /usr/local/bin/clamdwatch.pl -q
24984 ?        Ss     0:00 /bin/sh -c /usr/local/lexiconn/top_senders.pl </var/log/maillog
24986 ?        Ss     0:00 /bin/sh -c /home/tropicoolaccents/www/declinecc/process.php >/dev/null 2>&1
24988 ?        Ss     0:00 /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
24990 ?        Ss     0:00 /bin/sh -c /usr/local/lexiconn/topips_block  >/dev/null
24991 ?        Ss     0:00 /usr/bin/perl /usr/local/lexiconn/check_authid.pl
24992 ?        Ss     0:00 /usr/bin/perl /home/bb/check_bb.pl
24995 ?        S      0:00 /bin/bash /usr/local/lexiconn/topips_block
24996 ?        R      0:00 /usr/bin/perl /usr/local/lexiconn/top_senders.pl
24997 ?        S      0:00 bash /usr/local/maldetect/maldet --mkpubpaths
25000 ?        R      0:00 /usr/local/bin/php -q /home/tropicoolaccents/www/declinecc/process.php
25002 ?        R      0:00 php-fpm: pool sledtrack
25004 ?        S      0:00 /bin/bash /usr/local/lexiconn/topips2 -m 30
25005 ?        S      0:00 grep -E ( IE |googleusercontent)
25006 ?        S      0:00 sed s/  *//g
25007 ?        S      0:00 awk -F | $1 > 200 {print $2}
25008 ?        S      0:00 ifne xargs -L1 /usr/sbin/csf -d
25009 ?        S      0:00 grep -v already in the deny file
25010 ?        R      0:00 ps auxwww
25012 ?        S      0:00 [kworker/4:0]
25014 ?        S      0:00 sh -c ps ax >/tmp/bb.txt
25029 ?        R      0:00 ps ax
25241 ?        S      0:00 [kworker/7:2]
25863 ?        Sl     0:03 /usr/local/apache/bin/httpd -k start
25972 ?        S      0:00 dovecot/imap-login
25974 ?        S      0:00 dovecot/imap
26193 ?        R      2:46 php-fpm: pool reademotions
26344 ?        S      0:00 [kworker/5:1]
26348 ?        S      0:00 [kworker/5:3]
26356 ?        Sl     0:01 /usr/local/apache/bin/httpd -k start
26399 ?        S      0:00 [kworker/1:0]
27104 ?        S      0:00 dovecot/imap-login
27108 ?        S      0:00 dovecot/imap-login
27110 ?        S      0:00 dovecot/imap-login
27113 ?        S      0:00 dovecot/imap-login
27115 ?        S      0:00 dovecot/imap
27116 ?        S      0:00 dovecot/imap
27117 ?        S      0:00 dovecot/imap
27118 ?        S      0:00 dovecot/imap-login
27120 ?        S      0:00 dovecot/imap
27122 ?        S      0:00 dovecot/imap
27410 ?        S      0:00 [kworker/0:2]
27539 ?        S      0:00 [kworker/2:1]
27681 ?        Ss     0:00 sendmail: accepting connections
27746 ?        Ss     0:00 /usr/sbin/xinetd -stayalive -pidfile /var/run/xinetd.pid
27776 ?        S      0:00 top -b -c -n 1 -d 0.3
27778 ?        Ss     0:00 sendmail: Queue runner@01:00:00 for /var/spool/clientmqueue
28784 ?        S      0:00 dovecot/imap-login
28785 ?        S      0:00 dovecot/imap
29017 ?        S      0:00 top -b -c -n 1 -d 0.3
29620 ?        S      0:00 dovecot/imap-login
29623 ?        S      0:00 dovecot/imap
30278 ?        S      0:00 dovecot/imap-login
30288 ?        S      0:00 dovecot/imap
31355 ?        S      0:09 php-fpm: pool fowleragency
31815 ?        S      0:00 top -b -c -n 1 -d 0.3
32016 ?        Ss     2:14 /usr/local/sbin/dovecot -F -c /usr/local/etc/dovecot/dovecot.conf
32021 ?        S      0:50 dovecot/anvil
32022 ?        S      0:57 dovecot/log
32023 ?        S      2:58 dovecot/config
32026 ?        S      1:34 dovecot/stats
32027 ?        S      1:50 dovecot/auth
32079 ?        S     14:16 dovecot/auth -w
32277 ?        S      0:00 dovecot/imap-login
32529 ?        S      0:00 [kworker/0:0]

Youez - 2016 - github.com/yon3zu
LinuXploit