FM / log

/var/log

Name	Size	Mode	Actions
apache2/	-	0711	rm
archive/	-	0700	rm
audit/	-	0700	rm
chrony/	-	0750	rm
cpanel-server-traffic/	-	0700	rm
dcpumon/	-	0700	rm
imunify360/	-	0700	rm
imunify360_user_logs/	-	1777	rm
journal/	-	2755	rm
leapp/	-	0700	rm
named/	-	0755	rm
private/	-	0700	rm
qemu-ga/	-	0755	rm
sa/	-	0755	rm
sw-cp-server/	-	0750	rm
tuned/	-	0755	rm
27140.WHOSTMGR3___FEATURE_SHOWCASE_DO__.c10fc5f6.log	37131	0600	edit dl rm
agent360-install.log	8526	0640	edit dl rm
agent360.log	6908066	0640	edit dl rm
boot.log	0	0600	edit dl rm
boot.log-20260502	13084	0600	edit dl rm
boot.log-20260602	13585	0600	edit dl rm
boot.log-20260617	12998	0600	edit dl rm
boot.log-20260628	13674	0600	edit dl rm
boot.log-20260810	12998	0600	edit dl rm
boot.log-20260901	12994	0600	edit dl rm
boot.log-20260903	25932	0600	edit dl rm
btmp	0	0660	edit dl rm
btmp-20260901	0	0660	edit dl rm
chkservd.log	47455565	0600	edit dl rm
comet_backup_jobs_helper.log	0	0640	edit dl rm
cpanel-install.log	4082110	0644	edit dl rm
cpanel-install.log.1531014179	1699	0644	edit dl rm
cpanel-install.log.1531015656	4080580	0644	edit dl rm
cron	105139143	0600	edit dl rm
cron-20260816	4416856	0600	edit dl rm
cron-20260823	4530469	0600	edit dl rm
cron-20260830	4479682	0600	edit dl rm
cron-20260906	23747784	0600	edit dl rm
dmesg	1050922	0644	edit dl rm
dnf.librepo.log	491135	0644	edit dl rm
dnf.librepo.log.1	1048531	0644	edit dl rm
dnf.librepo.log.2	1048541	0644	edit dl rm
dnf.librepo.log.3	1048509	0644	edit dl rm
dnf.librepo.log.4	1048474	0644	edit dl rm
dnf.log	654960	0644	edit dl rm
dnf.log.1	1048493	0644	edit dl rm
dnf.log.2	1048130	0644	edit dl rm
dnf.log.3	1048552	0644	edit dl rm
dnf.log.4	1048415	0644	edit dl rm
dnf.rpm.log	694026	0644	edit dl rm
dnf.rpm.log.1	1048558	0644	edit dl rm
dnf.rpm.log.2	1048540	0644	edit dl rm
dpkg.log	0	0644	edit dl rm
elevate-cpanel.log	5691710	0644	edit dl rm
exim_mainlog	10546007	0640	edit dl rm
exim_mainlog-20260816.gz	6007076	0640	edit dl rm
exim_mainlog-20260823.gz	5861219	0640	edit dl rm
exim_mainlog-20260830.gz	8247560	0640	edit dl rm
exim_mainlog-20260906.gz	12460473	0640	edit dl rm
exim_paniclog	300	0640	edit dl rm
exim_paniclog-20260816.gz	154	0640	edit dl rm
exim_paniclog-20260823.gz	122	0640	edit dl rm
exim_paniclog-20260830.gz	20	0640	edit dl rm
exim_paniclog-20260906.gz	736	0640	edit dl rm
exim_rejectlog	2538144	0640	edit dl rm
exim_rejectlog-20260816.gz	2257410	0640	edit dl rm
exim_rejectlog-20260823.gz	2351957	0640	edit dl rm
exim_rejectlog-20260830.gz	3231232	0640	edit dl rm
exim_rejectlog-20260906.gz	5238181	0640	edit dl rm
firewalld	0	0644	edit dl rm
grubby	6007243	0600	edit dl rm
grubby_prune_debug	489	0644	edit dl rm
hawkey.log	3540	0644	edit dl rm
hawkey.log-20260816	36021	0644	edit dl rm
hawkey.log-20260823	44700	0644	edit dl rm
hawkey.log-20260830	36360	0644	edit dl rm
hawkey.log-20260906	36120	0644	edit dl rm
imav-deploy.log	73478	0600	edit dl rm
imunify-agent-proxy.log	305679	0644	edit dl rm
lastlog	307184	0664	edit dl rm
lfd.log	2570660	0600	edit dl rm
lfd.log-20211017	68742	0600	edit dl rm
lfd.log-20260906.gz	203425	0600	edit dl rm
lfdold.log	873181	0644	edit dl rm
maillog	701797	0600	edit dl rm
maillog-20260816	5293499	0600	edit dl rm
maillog-20260823	3655843	0600	edit dl rm
maillog-20260830	4012735	0600	edit dl rm
maillog-20260906	3826294	0600	edit dl rm
messages	46396313	0600	edit dl rm
messages-20260816	32475487	0600	edit dl rm
messages-20260823	34390004	0600	edit dl rm
messages-20260830	35052055	0600	edit dl rm
messages-20260906	52456449	0600	edit dl rm
mysqld.log	394720818	0644	edit dl rm
nscd.log	5214	0644	edit dl rm
quota_enable.log	1188	0600	edit dl rm
secure	3538260	0600	edit dl rm
secure-20260816	3989847	0600	edit dl rm
secure-20260823	4313986	0600	edit dl rm
secure-20260830	4155467	0600	edit dl rm
secure-20260906	5317141	0600	edit dl rm
spooler	0	0600	edit dl rm
spooler-20260816	0	0600	edit dl rm
spooler-20260823	0	0600	edit dl rm
spooler-20260830	0	0600	edit dl rm
spooler-20260906	0	0600	edit dl rm
wp-toolkit	-	0	edit dl rm
wtmp	357504	0664	edit dl rm
xferlog.offsetftpsep	1	0644	edit dl rm
yum.log	25515	0600	edit dl rm
yum.log-20240923	31717	0600	edit dl rm
yum.log-20241010	36628	0600	edit dl rm
yum.log-20241114	32198	0600	edit dl rm
yum.log-20241219	35130	0600	edit dl rm

Edit: /var/log/lfdold.log (873181B)

Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/exim_mainlog rotated. Reopening log file
Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/exim_mainlog...
Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/messages rotated. Reopening log file
Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/messages...
Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/secure rotated. Reopening log file
Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/secure...
Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/maillog rotated. Reopening log file
Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/maillog...
Mar 16 04:14:18 instance-1 lfd[1196011]: *User Processing* PID:1196006 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 04:35:20 instance-1 lfd[1202270]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 04:35:20 instance-1 lfd[1202270]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 04:37:19 instance-1 lfd[1202781]: *User Processing* PID:1202772 Kill:0 User:mainpoint VM:606(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 04:37:19 instance-1 lfd[1202781]: *User Processing* PID:1202777 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 04:44:20 instance-1 lfd[1204794]: *User Processing* PID:1204787 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 04:53:20 instance-1 lfd[1207502]: *User Processing* PID:1207484 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 04:53:20 instance-1 lfd[1207502]: *User Processing* PID:1207494 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 05:00:20 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 05:04:20 instance-1 lfd[1210733]: *User Processing* PID:1210724 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 05:35:22 instance-1 lfd[1220020]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 05:35:22 instance-1 lfd[1220020]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 06:00:22 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 06:23:23 instance-1 lfd[1234469]: *User Processing* PID:1234460 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:25:23 instance-1 lfd[1235077]: *User Processing* PID:1235066 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:27:23 instance-1 lfd[1235777]: *User Processing* PID:1235773 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:28:23 instance-1 lfd[1236071]: *User Processing* PID:1235969 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 06:33:23 instance-1 lfd[1237699]: *User Processing* PID:1237687 Kill:0 User:newswinslow VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 16 06:34:23 instance-1 lfd[1237956]: *User Processing* PID:1237952 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:35:24 instance-1 lfd[1238275]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 06:35:24 instance-1 lfd[1238275]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 06:38:23 instance-1 lfd[1239332]: *User Processing* PID:1239327 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:45:24 instance-1 lfd[1241604]: *User Processing* PID:1241596 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:52:24 instance-1 lfd[1244032]: *User Processing* PID:1244025 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:54:24 instance-1 lfd[1244750]: *User Processing* PID:1244741 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:54:24 instance-1 lfd[1244750]: *User Processing* PID:1244742 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 06:58:24 instance-1 lfd[1246106]: *User Processing* PID:1246102 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:00:24 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 07:00:24 instance-1 lfd[1246749]: *User Processing* PID:1246734 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:01:24 instance-1 lfd[1247064]: *User Processing* PID:1247057 Kill:0 User:foster VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:02:24 instance-1 lfd[1247424]: *User Processing* PID:1247417 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:09:24 instance-1 lfd[1249833]: *User Processing* PID:1249823 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 07:09:25 instance-1 lfd[1249833]: *User Processing* PID:1249829 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:16:25 instance-1 lfd[1252094]: *User Processing* PID:1252090 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:18:25 instance-1 lfd[1252697]: *User Processing* PID:1252693 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:24:25 instance-1 lfd[1254815]: *User Processing* PID:1254808 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:26:25 instance-1 lfd[1255429]: *User Processing* PID:1255425 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:27:25 instance-1 lfd[1255757]: *User Processing* PID:1255753 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:28:25 instance-1 lfd[1256037]: *User Processing* PID:1256033 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:35:26 instance-1 lfd[1258465]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 07:35:26 instance-1 lfd[1258465]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 07:44:26 instance-1 lfd[1261497]: *User Processing* PID:1261489 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:46:26 instance-1 lfd[1262215]: *User Processing* PID:1262207 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:50:26 instance-1 lfd[1263719]: *User Processing* PID:1263710 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:54:27 instance-1 lfd[1265212]: *User Processing* PID:1265205 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:54:27 instance-1 lfd[1265212]: *User Processing* PID:1265206 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 07:59:27 instance-1 lfd[1266930]: *User Processing* PID:1266923 Kill:0 User:foster VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:00:27 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 08:02:27 instance-1 lfd[1267941]: *User Processing* PID:1267937 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:03:27 instance-1 lfd[1268245]: *User Processing* PID:1268241 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:07:27 instance-1 lfd[1269609]: *User Processing* PID:1269598 Kill:0 User:foster VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:11:27 instance-1 lfd[1270977]: *User Processing* PID:1270967 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:11:27 instance-1 lfd[1270977]: *User Processing* PID:1270973 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:11:27 instance-1 lfd[1270977]: *User Processing* PID:1270969 Kill:0 User:geneticson VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:13:27 instance-1 lfd[1271693]: *User Processing* PID:1271671 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:16:28 instance-1 lfd[1272768]: *User Processing* PID:1272764 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:18:28 instance-1 lfd[1273352]: *User Processing* PID:1273348 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:19:28 instance-1 lfd[1273770]: *User Processing* PID:1273766 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:21:28 instance-1 lfd[1274402]: *User Processing* PID:1274395 Kill:0 User:foster VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:23:28 instance-1 lfd[1274956]: *User Processing* PID:1274952 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:28:28 instance-1 lfd[1276584]: *User Processing* PID:1276577 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:32:28 instance-1 lfd[1277926]: *User Processing* PID:1277922 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:35:29 instance-1 lfd[1279011]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 08:35:29 instance-1 lfd[1279011]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 08:43:29 instance-1 lfd[1281505]: *User Processing* PID:1281501 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:46:29 instance-1 lfd[1282567]: *User Processing* PID:1282563 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:58:29 instance-1 lfd[1286717]: *User Processing* PID:1286710 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 08:59:29 instance-1 lfd[1287023]: *User Processing* PID:1287019 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:00:29 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 09:00:29 instance-1 lfd[1287577]: *User Processing* PID:1287567 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:02:29 instance-1 lfd[1288223]: *User Processing* PID:1288219 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:05:29 instance-1 lfd[1289311]: *User Processing* PID:1289302 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:11:30 instance-1 lfd[1291208]: *User Processing* PID:1291204 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:14:30 instance-1 lfd[1292059]: *User Processing* PID:1292055 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:20:30 instance-1 lfd[1294155]: *User Processing* PID:1294144 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:24:30 instance-1 lfd[1295292]: *User Processing* PID:1295229 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 09:27:30 instance-1 lfd[1296358]: *User Processing* PID:1296354 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:31:31 instance-1 lfd[1297677]: *User Processing* PID:1297673 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:35:31 instance-1 lfd[1298849]: *User Processing* PID:1298840 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:35:31 instance-1 lfd[1298846]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 09:35:31 instance-1 lfd[1298846]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 09:45:31 instance-1 lfd[1301958]: *User Processing* PID:1301947 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:46:31 instance-1 lfd[1302362]: *User Processing* PID:1302358 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:51:31 instance-1 lfd[1304031]: *User Processing* PID:1304027 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:55:32 instance-1 lfd[1305255]: *User Processing* PID:1305246 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:55:32 instance-1 lfd[1305255]: *User Processing* PID:1305248 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:58:32 instance-1 lfd[1306236]: *User Processing* PID:1306232 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 09:58:32 instance-1 lfd[1306236]: *User Processing* PID:1306208 Kill:0 User:indigenouscivil VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 10:00:32 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 10:00:32 instance-1 lfd[1306880]: *User Processing* PID:1306867 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:03:32 instance-1 lfd[1307952]: *User Processing* PID:1307937 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 10:04:32 instance-1 lfd[1308288]: *User Processing* PID:1308284 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:08:32 instance-1 lfd[1309619]: *User Processing* PID:1309612 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:09:32 instance-1 lfd[1309955]: *User Processing* PID:1309947 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:20:33 instance-1 lfd[1313911]: *User Processing* PID:1313902 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:22:33 instance-1 lfd[1314739]: *User Processing* PID:1314735 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:25:33 instance-1 lfd[1315659]: *User Processing* PID:1315651 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:26:33 instance-1 lfd[1316114]: *User Processing* PID:1316110 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:27:33 instance-1 lfd[1316417]: *User Processing* PID:1316412 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:32:33 instance-1 lfd[1317997]: *User Processing* PID:1317970 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 10:33:33 instance-1 lfd[1318342]: *User Processing* PID:1318338 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:34:33 instance-1 lfd[1318682]: *User Processing* PID:1318678 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:35:33 instance-1 lfd[1319078]: *User Processing* PID:1319069 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:35:34 instance-1 lfd[1319076]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 10:35:34 instance-1 lfd[1319076]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 10:38:33 instance-1 lfd[1320115]: *User Processing* PID:1320110 Kill:0 User:foster VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:39:33 instance-1 lfd[1320426]: *User Processing* PID:1320422 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:44:34 instance-1 lfd[1322074]: *User Processing* PID:1322070 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 10:45:34 instance-1 lfd[1322443]: *User Processing* PID:1322435 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 11:00:34 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 11:03:34 instance-1 lfd[1328397]: *User Processing* PID:1328384 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 11:18:35 instance-1 lfd[1332661]: *User Processing* PID:1332654 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 11:35:36 instance-1 lfd[1337349]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 11:35:36 instance-1 lfd[1337349]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 11:54:36 instance-1 lfd[1342763]: *User Processing* PID:1342759 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 12:00:37 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 12:16:38 instance-1 lfd[1349492]: *User Processing* PID:1349488 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 12:31:38 instance-1 lfd[1353635]: *User Processing* PID:1353585 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 16 12:35:39 instance-1 lfd[1354849]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 12:35:39 instance-1 lfd[1354849]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 12:39:38 instance-1 lfd[1356013]: *User Processing* PID:1356002 Kill:0 User:comphomes VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 12:39:39 instance-1 lfd[1356013]: *User Processing* PID:1356001 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 12:39:39 instance-1 lfd[1356013]: *User Processing* PID:1356008 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 12:42:39 instance-1 lfd[1357080]: *User Processing* PID:1357075 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 12:54:39 instance-1 lfd[1361105]: *User Processing* PID:1361027 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 12:57:39 instance-1 lfd[1362037]: *User Processing* PID:1362027 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 13:00:39 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 13:01:39 instance-1 lfd[1363381]: *User Processing* PID:1363371 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:01:39 instance-1 lfd[1363381]: *User Processing* PID:1363376 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:04:40 instance-1 lfd[1364388]: *User Processing* PID:1364368 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 13:05:40 instance-1 lfd[1364877]: *User Processing* PID:1364868 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:06:40 instance-1 lfd[1365180]: *User Processing* PID:1365176 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:08:40 instance-1 lfd[1365828]: *User Processing* PID:1365824 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:11:40 instance-1 lfd[1366897]: *User Processing* PID:1366890 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:13:40 instance-1 lfd[1367462]: *User Processing* PID:1367457 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:15:40 instance-1 lfd[1368281]: *User Processing* PID:1368269 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:15:40 instance-1 lfd[1368281]: *User Processing* PID:1368270 Kill:0 User:comphomes VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:17:40 instance-1 lfd[1368901]: *User Processing* PID:1368894 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:18:40 instance-1 lfd[1369286]: *User Processing* PID:1369277 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:18:40 instance-1 lfd[1369286]: *User Processing* PID:1369278 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:19:40 instance-1 lfd[1369641]: *User Processing* PID:1369634 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:21:40 instance-1 lfd[1370469]: *User Processing* PID:1370464 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:22:40 instance-1 lfd[1370816]: *User Processing* PID:1370807 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:23:40 instance-1 lfd[1371162]: *User Processing* PID:1371155 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:24:40 instance-1 lfd[1371474]: *User Processing* PID:1371469 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:25:40 instance-1 lfd[1372002]: *User Processing* PID:1371995 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:25:41 instance-1 lfd[1372002]: *User Processing* PID:1371994 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:26:40 instance-1 lfd[1372339]: *User Processing* PID:1372335 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:27:41 instance-1 lfd[1372701]: *User Processing* PID:1372695 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:33:41 instance-1 lfd[1374704]: *User Processing* PID:1374699 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:33:41 instance-1 lfd[1374704]: *User Processing* PID:1374698 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:35:41 instance-1 lfd[1375474]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 13:35:41 instance-1 lfd[1375474]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 13:36:41 instance-1 lfd[1375784]: *User Processing* PID:1375777 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:39:41 instance-1 lfd[1376666]: *User Processing* PID:1376659 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 13:47:42 instance-1 lfd[1379326]: *User Processing* PID:1379320 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:00:42 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 14:02:42 instance-1 lfd[1384400]: *User Processing* PID:1384340 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 14:04:43 instance-1 lfd[1385050]: *User Processing* PID:1385045 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:07:43 instance-1 lfd[1386207]: *User Processing* PID:1386203 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:17:43 instance-1 lfd[1389781]: *User Processing* PID:1389777 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:20:43 instance-1 lfd[1390886]: *User Processing* PID:1390874 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:22:44 instance-1 lfd[1391773]: *User Processing* PID:1391766 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:23:44 instance-1 lfd[1392073]: *User Processing* PID:1392066 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:27:44 instance-1 lfd[1393485]: *User Processing* PID:1393480 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:28:44 instance-1 lfd[1393792]: *User Processing* PID:1393787 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:34:44 instance-1 lfd[1395927]: *User Processing* PID:1395917 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:35:44 instance-1 lfd[1396297]: *User Processing* PID:1396286 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:35:45 instance-1 lfd[1396295]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 14:35:45 instance-1 lfd[1396295]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 14:36:44 instance-1 lfd[1396750]: *User Processing* PID:1396746 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:38:44 instance-1 lfd[1397366]: *User Processing* PID:1397358 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:39:45 instance-1 lfd[1397700]: *User Processing* PID:1397693 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:42:45 instance-1 lfd[1398862]: *User Processing* PID:1398858 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:43:45 instance-1 lfd[1399163]: *User Processing* PID:1399157 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:46:45 instance-1 lfd[1400333]: *User Processing* PID:1400325 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:48:45 instance-1 lfd[1400974]: *User Processing* PID:1400969 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:48:57 instance-1 lfd[1401039]: (smtpauth) Failed SMTP AUTH login from 58.240.2.38 (CN/China/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 16 14:49:45 instance-1 lfd[1401309]: *User Processing* PID:1401300 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:49:45 instance-1 lfd[1401309]: *User Processing* PID:1401301 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:50:45 instance-1 lfd[1401694]: *User Processing* PID:1401682 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:52:45 instance-1 lfd[1402443]: *User Processing* PID:1402427 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:52:45 instance-1 lfd[1402443]: *User Processing* PID:1402431 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 14:52:45 instance-1 lfd[1402443]: *User Processing* PID:1402434 Kill:0 User:geneticson VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:53:45 instance-1 lfd[1402761]: *User Processing* PID:1402751 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 14:57:46 instance-1 lfd[1404243]: *User Processing* PID:1404233 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 14:59:46 instance-1 lfd[1404892]: *User Processing* PID:1404887 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 14:59:46 instance-1 lfd[1404892]: *User Processing* PID:1404886 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:00:46 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 15:00:46 instance-1 lfd[1405264]: *User Processing* PID:1405250 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:01:46 instance-1 lfd[1405718]: *User Processing* PID:1405708 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:01:46 instance-1 lfd[1405718]: *User Processing* PID:1405714 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:04:46 instance-1 lfd[1406762]: *User Processing* PID:1406754 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:05:46 instance-1 lfd[1407149]: *User Processing* PID:1407127 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:05:46 instance-1 lfd[1407149]: *User Processing* PID:1407055 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 16 15:07:46 instance-1 lfd[1407893]: *User Processing* PID:1407883 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:07:46 instance-1 lfd[1407893]: *User Processing* PID:1407889 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:09:46 instance-1 lfd[1408550]: *User Processing* PID:1408534 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:09:46 instance-1 lfd[1408550]: *User Processing* PID:1408535 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:10:46 instance-1 lfd[1408923]: *User Processing* PID:1408906 Kill:0 User:surveyms VM:578(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:10:47 instance-1 lfd[1408923]: *User Processing* PID:1408916 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:11:46 instance-1 lfd[1409382]: *User Processing* PID:1409378 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:12:46 instance-1 lfd[1409686]: *User Processing* PID:1409681 Kill:0 User:tuscomau VM:576(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:13:47 instance-1 lfd[1410012]: *User Processing* PID:1409998 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:13:47 instance-1 lfd[1410012]: *User Processing* PID:1410007 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:15:47 instance-1 lfd[1410715]: *User Processing* PID:1410704 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:17:47 instance-1 lfd[1411498]: *User Processing* PID:1411473 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 15:19:47 instance-1 lfd[1412133]: *User Processing* PID:1412119 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:22:47 instance-1 lfd[1413266]: *User Processing* PID:1413261 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:24:47 instance-1 lfd[1413910]: *User Processing* PID:1413905 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:24:47 instance-1 lfd[1413910]: *User Processing* PID:1413894 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:25:47 instance-1 lfd[1414288]: *User Processing* PID:1414275 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:26:47 instance-1 lfd[1414622]: *User Processing* PID:1414614 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:27:47 instance-1 lfd[1415111]: *User Processing* PID:1415107 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:28:47 instance-1 lfd[1415444]: *User Processing* PID:1415435 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:29:47 instance-1 lfd[1415780]: *User Processing* PID:1415775 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:30:48 instance-1 lfd[1416188]: *User Processing* PID:1416171 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:30:48 instance-1 lfd[1416188]: *User Processing* PID:1416179 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:30:48 instance-1 lfd[1416188]: *User Processing* PID:1416180 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:32:48 instance-1 lfd[1417058]: *User Processing* PID:1417054 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:32:48 instance-1 lfd[1417058]: *User Processing* PID:1417053 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:35:48 instance-1 lfd[1418143]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 15:35:48 instance-1 lfd[1418143]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 15:36:48 instance-1 lfd[1418492]: *User Processing* PID:1418483 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:36:48 instance-1 lfd[1418492]: *User Processing* PID:1418482 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:39:48 instance-1 lfd[1419658]: *User Processing* PID:1419648 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:39:48 instance-1 lfd[1419658]: *User Processing* PID:1419643 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 15:40:48 instance-1 lfd[1420046]: *User Processing* PID:1420034 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:41:48 instance-1 lfd[1420371]: *User Processing* PID:1420363 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:42:48 instance-1 lfd[1420860]: *User Processing* PID:1420850 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:42:49 instance-1 lfd[1420860]: *User Processing* PID:1420851 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:43:48 instance-1 lfd[1421217]: *User Processing* PID:1421213 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:44:48 instance-1 lfd[1421545]: *User Processing* PID:1421540 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:44:49 instance-1 lfd[1421545]: *User Processing* PID:1421539 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:45:49 instance-1 lfd[1421934]: *User Processing* PID:1421919 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:45:49 instance-1 lfd[1421934]: *User Processing* PID:1421920 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:49:49 instance-1 lfd[1423585]: *User Processing* PID:1423574 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:50:49 instance-1 lfd[1424061]: *User Processing* PID:1424046 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:53:49 instance-1 lfd[1425238]: *User Processing* PID:1425233 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:54:49 instance-1 lfd[1425670]: *User Processing* PID:1425661 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:55:49 instance-1 lfd[1426074]: *User Processing* PID:1426062 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:56:49 instance-1 lfd[1426412]: *User Processing* PID:1426408 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:57:49 instance-1 lfd[1426889]: *User Processing* PID:1426885 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 15:58:49 instance-1 lfd[1427253]: *User Processing* PID:1427248 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:00:49 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 16:06:50 instance-1 lfd[1430293]: *User Processing* PID:1430285 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:08:50 instance-1 lfd[1431082]: *User Processing* PID:1431075 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:09:50 instance-1 lfd[1431438]: *User Processing* PID:1431430 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:12:50 instance-1 lfd[1432617]: *User Processing* PID:1432612 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:12:50 instance-1 lfd[1432617]: *User Processing* PID:1432611 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:13:50 instance-1 lfd[1432969]: *User Processing* PID:1432963 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:15:51 instance-1 lfd[1433684]: *User Processing* PID:1433676 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:16:51 instance-1 lfd[1434014]: *User Processing* PID:1434008 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:19:51 instance-1 lfd[1435169]: *User Processing* PID:1435165 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:20:51 instance-1 lfd[1435549]: *User Processing* PID:1435539 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:22:51 instance-1 lfd[1436370]: *User Processing* PID:1436363 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:25:51 instance-1 lfd[1437425]: *User Processing* PID:1437414 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:25:51 instance-1 lfd[1437425]: *User Processing* PID:1437413 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:26:51 instance-1 lfd[1437813]: *User Processing* PID:1437809 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:26:51 instance-1 lfd[1437813]: *User Processing* PID:1437805 Kill:0 User:tuscomau VM:564(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:29:51 instance-1 lfd[1438947]: *User Processing* PID:1438943 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:30:51 instance-1 lfd[1439337]: *User Processing* PID:1439323 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:31:51 instance-1 lfd[1439687]: *User Processing* PID:1439683 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:31:52 instance-1 lfd[1439687]: *User Processing* PID:1439682 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:32:52 instance-1 lfd[1440190]: *User Processing* PID:1440170 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:33:52 instance-1 lfd[1440529]: *User Processing* PID:1440524 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:33:52 instance-1 lfd[1440529]: *User Processing* PID:1440523 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:34:52 instance-1 lfd[1440874]: *User Processing* PID:1440866 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:34:52 instance-1 lfd[1440874]: *User Processing* PID:1440870 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:35:52 instance-1 lfd[1441280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 16:35:52 instance-1 lfd[1441280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 16:38:52 instance-1 lfd[1442388]: *User Processing* PID:1442382 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:43:52 instance-1 lfd[1444271]: *User Processing* PID:1444264 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:44:52 instance-1 lfd[1444612]: *User Processing* PID:1444604 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:45:52 instance-1 lfd[1445057]: *User Processing* PID:1445045 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:46:52 instance-1 lfd[1445396]: *User Processing* PID:1445388 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:47:52 instance-1 lfd[1445728]: *User Processing* PID:1445724 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:48:52 instance-1 lfd[1446232]: *User Processing* PID:1446227 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:49:52 instance-1 lfd[1446550]: *User Processing* PID:1446545 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:50:53 instance-1 lfd[1446945]: *User Processing* PID:1446936 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:56:53 instance-1 lfd[1449352]: *User Processing* PID:1449343 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:56:53 instance-1 lfd[1449352]: *User Processing* PID:1449344 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:57:53 instance-1 lfd[1449700]: *User Processing* PID:1449692 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 16:58:53 instance-1 lfd[1450185]: *User Processing* PID:1450177 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:00:53 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 17:00:53 instance-1 lfd[1450941]: *User Processing* PID:1450932 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:02:53 instance-1 lfd[1451658]: *User Processing* PID:1451650 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:08:54 instance-1 lfd[1453904]: *User Processing* PID:1453900 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:10:54 instance-1 lfd[1454628]: *User Processing* PID:1454621 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:10:54 instance-1 lfd[1454628]: *User Processing* PID:1454615 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:11:54 instance-1 lfd[1454953]: *User Processing* PID:1454942 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:12:54 instance-1 lfd[1455271]: *User Processing* PID:1455261 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:12:54 instance-1 lfd[1455271]: *User Processing* PID:1455263 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:16:54 instance-1 lfd[1456695]: *User Processing* PID:1456687 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:19:55 instance-1 lfd[1457761]: *User Processing* PID:1457745 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:19:55 instance-1 lfd[1457761]: *User Processing* PID:1457749 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:21:55 instance-1 lfd[1458444]: *User Processing* PID:1458435 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:21:55 instance-1 lfd[1458444]: *User Processing* PID:1458430 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:21:55 instance-1 lfd[1458444]: *User Processing* PID:1458436 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:22:55 instance-1 lfd[1458746]: *User Processing* PID:1458741 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:23:55 instance-1 lfd[1459173]: *User Processing* PID:1459166 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:23:55 instance-1 lfd[1459173]: *User Processing* PID:1459168 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:24:55 instance-1 lfd[1459504]: *User Processing* PID:1459500 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:25:55 instance-1 lfd[1459864]: *User Processing* PID:1459855 Kill:0 User:tuscomau VM:567(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:25:55 instance-1 lfd[1459864]: *User Processing* PID:1459849 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:28:55 instance-1 lfd[1460911]: *User Processing* PID:1460902 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:29:55 instance-1 lfd[1461204]: *User Processing* PID:1461197 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:30:55 instance-1 lfd[1461555]: *User Processing* PID:1461544 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:31:55 instance-1 lfd[1461852]: *User Processing* PID:1461842 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:31:55 instance-1 lfd[1461852]: *User Processing* PID:1461847 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:35:55 instance-1 lfd[1463439]: *User Processing* PID:1463427 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:35:56 instance-1 lfd[1463437]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 17:35:56 instance-1 lfd[1463437]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 17:38:56 instance-1 lfd[1464451]: *User Processing* PID:1464446 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:38:56 instance-1 lfd[1464451]: *User Processing* PID:1464441 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:40:56 instance-1 lfd[1465341]: *User Processing* PID:1465326 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:41:57 instance-1 lfd[1465832]: *Excessive Processes* User:winslow Kill:0 Process Count:13
Mar 16 17:41:58 instance-1 lfd[1465832]: *User Processing* PID:1465805 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:42:00 instance-1 lfd[1465832]: *User Processing* PID:1465793 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:42:01 instance-1 lfd[1465832]: *User Processing* PID:1465803 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:42:02 instance-1 lfd[1465832]: *User Processing* PID:1465817 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:42:56 instance-1 lfd[1466396]: *LOAD* 5 minute load average is 8.97, threshold is 6 - email sent
Mar 16 17:42:57 instance-1 lfd[1466397]: *User Processing* PID:1466374 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:42:59 instance-1 lfd[1466397]: *User Processing* PID:1466362 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:43:00 instance-1 lfd[1466397]: *User Processing* PID:1466363 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:43:01 instance-1 lfd[1466397]: *User Processing* PID:1465887 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 17:43:02 instance-1 lfd[1466397]: *User Processing* PID:1466158 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:43:03 instance-1 lfd[1466397]: *User Processing* PID:1466368 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:43:57 instance-1 lfd[1466945]: *User Processing* PID:1466871 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:43:58 instance-1 lfd[1466945]: *User Processing* PID:1466910 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:43:59 instance-1 lfd[1466945]: *User Processing* PID:1466929 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:00 instance-1 lfd[1466945]: *User Processing* PID:1466918 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:57 instance-1 lfd[1467569]: *User Processing* PID:1467560 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:57 instance-1 lfd[1467569]: *User Processing* PID:1467546 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:58 instance-1 lfd[1467569]: *User Processing* PID:1467547 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:58 instance-1 lfd[1467569]: *User Processing* PID:1467552 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:58 instance-1 lfd[1467569]: *User Processing* PID:1467537 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:59 instance-1 lfd[1467569]: *User Processing* PID:1467539 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:44:59 instance-1 lfd[1467569]: *User Processing* PID:1467543 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:45:57 instance-1 lfd[1468146]: *User Processing* PID:1468136 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:46:57 instance-1 lfd[1468619]: *User Processing* PID:1468599 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:46:58 instance-1 lfd[1468619]: *User Processing* PID:1468607 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:46:58 instance-1 lfd[1468619]: *User Processing* PID:1468605 Kill:0 User:eyrescom VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:46:59 instance-1 lfd[1468619]: *User Processing* PID:1468608 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:47:58 instance-1 lfd[1469111]: *User Processing* PID:1469101 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:48:58 instance-1 lfd[1469582]: *User Processing* PID:1469571 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:48:58 instance-1 lfd[1469582]: *User Processing* PID:1469574 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:48:58 instance-1 lfd[1469582]: *User Processing* PID:1469577 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:49:58 instance-1 lfd[1470157]: *User Processing* PID:1470153 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:49:58 instance-1 lfd[1470157]: *User Processing* PID:1470142 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:50:58 instance-1 lfd[1470649]: *User Processing* PID:1470640 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:50:58 instance-1 lfd[1470649]: *User Processing* PID:1470639 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:50:59 instance-1 lfd[1470649]: *User Processing* PID:1470631 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:52:58 instance-1 lfd[1471383]: *User Processing* PID:1471377 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:53:58 instance-1 lfd[1471746]: *User Processing* PID:1471738 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:53:58 instance-1 lfd[1471746]: *User Processing* PID:1471740 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:55:58 instance-1 lfd[1472730]: *User Processing* PID:1472720 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:55:58 instance-1 lfd[1472730]: *User Processing* PID:1472721 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 17:58:58 instance-1 lfd[1473844]: *User Processing* PID:1473839 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:00:53 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 18:00:59 instance-1 lfd[1474717]: *User Processing* PID:1474704 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 18:00:59 instance-1 lfd[1474717]: *User Processing* PID:1474710 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:02:59 instance-1 lfd[1475447]: *User Processing* PID:1475442 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:04:59 instance-1 lfd[1476338]: *User Processing* PID:1476334 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:06:59 instance-1 lfd[1477137]: *User Processing* PID:1477130 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:08:59 instance-1 lfd[1477831]: *User Processing* PID:1477824 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:09:59 instance-1 lfd[1478328]: *User Processing* PID:1478324 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:09:59 instance-1 lfd[1478328]: *User Processing* PID:1478323 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:10:59 instance-1 lfd[1478723]: *User Processing* PID:1478712 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:10:59 instance-1 lfd[1478723]: *User Processing* PID:1478711 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:10:59 instance-1 lfd[1478723]: *User Processing* PID:1478710 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 18:11:59 instance-1 lfd[1479071]: *User Processing* PID:1479063 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:13:59 instance-1 lfd[1479749]: *User Processing* PID:1479742 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:16:00 instance-1 lfd[1480675]: *User Processing* PID:1480667 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:16:00 instance-1 lfd[1480675]: *User Processing* PID:1480666 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:16:00 instance-1 lfd[1480675]: *User Processing* PID:1480665 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:16:59 instance-1 lfd[1481045]: *User Processing* PID:1481041 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:18:00 instance-1 lfd[1481396]: *User Processing* PID:1481393 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:18:00 instance-1 lfd[1481396]: *User Processing* PID:1481392 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:19:00 instance-1 lfd[1481770]: *User Processing* PID:1481761 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:20:00 instance-1 lfd[1482234]: *User Processing* PID:1482229 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:20:00 instance-1 lfd[1482234]: *User Processing* PID:1482225 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:22:00 instance-1 lfd[1482962]: *User Processing* PID:1482955 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:23:00 instance-1 lfd[1483310]: *User Processing* PID:1483301 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:23:00 instance-1 lfd[1483310]: *User Processing* PID:1483304 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:24:00 instance-1 lfd[1483660]: *User Processing* PID:1483655 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:25:00 instance-1 lfd[1484114]: *User Processing* PID:1484111 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:25:00 instance-1 lfd[1484114]: *User Processing* PID:1484076 Kill:0 User:geneticson VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:26:00 instance-1 lfd[1484505]: *User Processing* PID:1484495 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:27:00 instance-1 lfd[1484852]: *User Processing* PID:1484845 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:28:00 instance-1 lfd[1485198]: *User Processing* PID:1485189 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:28:00 instance-1 lfd[1485198]: *User Processing* PID:1485192 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:29:00 instance-1 lfd[1485550]: *User Processing* PID:1485544 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:31:00 instance-1 lfd[1486462]: *User Processing* PID:1486455 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:34:00 instance-1 lfd[1487602]: *User Processing* PID:1487598 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:35:01 instance-1 lfd[1488070]: *User Processing* PID:1488067 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:36:01 instance-1 lfd[1488482]: *User Processing* PID:1488438 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 16 18:36:01 instance-1 lfd[1488482]: *User Processing* PID:1488470 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:36:01 instance-1 lfd[1488481]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 18:36:01 instance-1 lfd[1488481]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 18:38:01 instance-1 lfd[1489364]: *User Processing* PID:1489286 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:38:03 instance-1 lfd[1489364]: *User Processing* PID:1489173 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:38:03 instance-1 lfd[1489364]: *User Processing* PID:1489169 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:38:03 instance-1 lfd[1489364]: *User Processing* PID:1489193 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:39:01 instance-1 lfd[1489755]: *User Processing* PID:1489739 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:43:01 instance-1 lfd[1491164]: *User Processing* PID:1491149 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:44:01 instance-1 lfd[1491474]: *User Processing* PID:1491469 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:45:01 instance-1 lfd[1491949]: *User Processing* PID:1491908 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 18:45:02 instance-1 lfd[1491949]: *User Processing* PID:1491937 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:46:02 instance-1 lfd[1492317]: *User Processing* PID:1492298 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 18:48:02 instance-1 lfd[1492949]: *User Processing* PID:1492928 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:50:02 instance-1 lfd[1493792]: *User Processing* PID:1493773 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:51:02 instance-1 lfd[1494190]: *User Processing* PID:1494180 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 18:59:02 instance-1 lfd[1497008]: *User Processing* PID:1497004 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:00:57 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 19:02:02 instance-1 lfd[1498230]: *User Processing* PID:1498191 Kill:0 User:opthirecomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:02:03 instance-1 lfd[1498230]: *User Processing* PID:1498214 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:04:03 instance-1 lfd[1498918]: *User Processing* PID:1498913 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:06:03 instance-1 lfd[1499751]: *User Processing* PID:1499705 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 19:11:03 instance-1 lfd[1501660]: *User Processing* PID:1501648 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:12:03 instance-1 lfd[1502115]: *User Processing* PID:1502110 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:15:03 instance-1 lfd[1503519]: *User Processing* PID:1503515 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:16:03 instance-1 lfd[1504054]: *User Processing* PID:1504045 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:16:04 instance-1 lfd[1504054]: *User Processing* PID:1504046 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:17:03 instance-1 lfd[1504415]: *User Processing* PID:1504411 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:18:04 instance-1 lfd[1504847]: *User Processing* PID:1504841 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:19:04 instance-1 lfd[1505223]: *User Processing* PID:1505218 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:20:04 instance-1 lfd[1505622]: *User Processing* PID:1505618 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:21:04 instance-1 lfd[1506130]: *User Processing* PID:1506109 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:21:05 instance-1 lfd[1506130]: *User Processing* PID:1506110 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:21:05 instance-1 lfd[1506130]: *User Processing* PID:1506119 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:22:04 instance-1 lfd[1506508]: *User Processing* PID:1506501 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:23:04 instance-1 lfd[1506855]: *User Processing* PID:1506847 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:23:04 instance-1 lfd[1506855]: *User Processing* PID:1506848 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:24:04 instance-1 lfd[1507244]: *User Processing* PID:1507235 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:25:04 instance-1 lfd[1507686]: *User Processing* PID:1507678 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:26:04 instance-1 lfd[1508217]: *User Processing* PID:1508205 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:27:04 instance-1 lfd[1508602]: *User Processing* PID:1508593 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 19:27:04 instance-1 lfd[1508602]: *User Processing* PID:1508594 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:28:04 instance-1 lfd[1509002]: *User Processing* PID:1508994 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:29:04 instance-1 lfd[1509402]: *User Processing* PID:1509389 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:30:05 instance-1 lfd[1509848]: *User Processing* PID:1509842 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:30:05 instance-1 lfd[1509848]: *User Processing* PID:1509843 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510372 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510360 Kill:0 User:geneticson VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510377 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510376 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:33:05 instance-1 lfd[1511226]: *User Processing* PID:1511221 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:35:05 instance-1 lfd[1512008]: *User Processing* PID:1512000 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:36:05 instance-1 lfd[1512508]: *User Processing* PID:1512496 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:36:05 instance-1 lfd[1512508]: *User Processing* PID:1512497 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:36:05 instance-1 lfd[1512506]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 19:36:05 instance-1 lfd[1512506]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 19:37:05 instance-1 lfd[1512859]: *User Processing* PID:1512852 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:38:05 instance-1 lfd[1513205]: *User Processing* PID:1513197 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:40:05 instance-1 lfd[1513950]: *User Processing* PID:1513946 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:41:05 instance-1 lfd[1514454]: *User Processing* PID:1514444 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:42:05 instance-1 lfd[1514814]: *User Processing* PID:1514803 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 19:43:05 instance-1 lfd[1515167]: *User Processing* PID:1515159 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:43:05 instance-1 lfd[1515167]: *User Processing* PID:1515157 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:45:05 instance-1 lfd[1515907]: *User Processing* PID:1515903 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:46:06 instance-1 lfd[1516405]: *User Processing* PID:1516394 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:47:06 instance-1 lfd[1516752]: *User Processing* PID:1516744 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:48:06 instance-1 lfd[1517133]: *User Processing* PID:1517125 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:48:06 instance-1 lfd[1517133]: *User Processing* PID:1517124 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:48:06 instance-1 lfd[1517133]: *User Processing* PID:1517123 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:50:06 instance-1 lfd[1517952]: *User Processing* PID:1517946 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:51:06 instance-1 lfd[1518530]: *User Processing* PID:1518518 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:51:06 instance-1 lfd[1518530]: *User Processing* PID:1518517 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:52:06 instance-1 lfd[1518935]: *User Processing* PID:1518927 Kill:0 User:foster VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:52:06 instance-1 lfd[1518935]: *User Processing* PID:1518924 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:53:06 instance-1 lfd[1519313]: *User Processing* PID:1519305 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:54:06 instance-1 lfd[1519834]: *User Processing* PID:1519828 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:54:07 instance-1 lfd[1519834]: *User Processing* PID:1519571 Kill:0 User:opthirecomau VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:54:07 instance-1 lfd[1519834]: *User Processing* PID:1519822 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:54:07 instance-1 lfd[1519834]: *User Processing* PID:1519830 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:55:06 instance-1 lfd[1520322]: *User Processing* PID:1520313 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:56:06 instance-1 lfd[1520771]: *User Processing* PID:1520628 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 19:57:06 instance-1 lfd[1521321]: *User Processing* PID:1521309 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:57:07 instance-1 lfd[1521321]: *User Processing* PID:1521081 Kill:0 User:nexpavecau VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 16 19:57:07 instance-1 lfd[1521321]: *User Processing* PID:1521310 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:58:07 instance-1 lfd[1521720]: *User Processing* PID:1521711 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 19:59:07 instance-1 lfd[1522103]: *User Processing* PID:1522093 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:00:07 instance-1 lfd[1522528]: *User Processing* PID:1522520 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:00:57 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 20:01:07 instance-1 lfd[1522937]: *User Processing* PID:1522926 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:02:22 instance-1 lfd[1523671]: *WHM/cPanel root access* from 210.56.88.76
Mar 16 20:03:07 instance-1 lfd[1524199]: *User Processing* PID:1524193 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:04:07 instance-1 lfd[1524719]: *User Processing* PID:1524706 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:04:07 instance-1 lfd[1524719]: *User Processing* PID:1524701 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:04:08 instance-1 lfd[1524719]: *User Processing* PID:1524705 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:05:07 instance-1 lfd[1525281]: *User Processing* PID:1525258 Kill:0 User:comphomes VM:634(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:05:08 instance-1 lfd[1525281]: *User Processing* PID:1525264 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:05:08 instance-1 lfd[1525281]: *User Processing* PID:1525267 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:05:08 instance-1 lfd[1525281]: *User Processing* PID:1525266 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:06:07 instance-1 lfd[1525777]: *User Processing* PID:1525762 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:07:08 instance-1 lfd[1526373]: *User Processing* PID:1526364 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:07:08 instance-1 lfd[1526373]: *User Processing* PID:1526363 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:08:08 instance-1 lfd[1526848]: *User Processing* PID:1526838 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:09:08 instance-1 lfd[1527317]: *User Processing* PID:1527304 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:10:08 instance-1 lfd[1527856]: *User Processing* PID:1527843 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:10:08 instance-1 lfd[1527856]: *User Processing* PID:1527842 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:12:08 instance-1 lfd[1528767]: *User Processing* PID:1528758 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:13:08 instance-1 lfd[1529186]: *User Processing* PID:1528943 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:13:08 instance-1 lfd[1529186]: *User Processing* PID:1529178 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:14:09 instance-1 lfd[1529570]: *User Processing* PID:1529561 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:16:09 instance-1 lfd[1530430]: *User Processing* PID:1530418 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:17:09 instance-1 lfd[1530908]: *User Processing* PID:1530904 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:17:09 instance-1 lfd[1530908]: *User Processing* PID:1530903 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:18:09 instance-1 lfd[1531290]: *User Processing* PID:1531283 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:19:09 instance-1 lfd[1531663]: *User Processing* PID:1531658 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:20:09 instance-1 lfd[1532049]: *User Processing* PID:1532044 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:20:09 instance-1 lfd[1532049]: *User Processing* PID:1532043 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:21:09 instance-1 lfd[1532415]: *User Processing* PID:1532406 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:22:09 instance-1 lfd[1532901]: *User Processing* PID:1532893 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:22:09 instance-1 lfd[1532901]: *User Processing* PID:1532892 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:23:09 instance-1 lfd[1533269]: *User Processing* PID:1533261 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:27:09 instance-1 lfd[1534902]: *User Processing* PID:1534898 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:27:09 instance-1 lfd[1534902]: *User Processing* PID:1534897 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:29:09 instance-1 lfd[1535622]: *User Processing* PID:1535614 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:30:10 instance-1 lfd[1536040]: *User Processing* PID:1536035 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:30:10 instance-1 lfd[1536040]: *User Processing* PID:1536036 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:31:10 instance-1 lfd[1536421]: *User Processing* PID:1536413 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:32:10 instance-1 lfd[1536943]: *User Processing* PID:1536937 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:33:10 instance-1 lfd[1537323]: *User Processing* PID:1537314 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:34:10 instance-1 lfd[1537695]: *User Processing* PID:1537688 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:36:10 instance-1 lfd[1538542]: *User Processing* PID:1538476 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 20:36:11 instance-1 lfd[1538542]: *User Processing* PID:1538529 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:36:20 instance-1 lfd[1538540]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 20:36:21 instance-1 lfd[1538540]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 20:37:10 instance-1 lfd[1539038]: *User Processing* PID:1539034 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:40:10 instance-1 lfd[1540114]: *User Processing* PID:1540107 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:41:10 instance-1 lfd[1540478]: *User Processing* PID:1540470 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:42:10 instance-1 lfd[1540974]: *User Processing* PID:1540970 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:43:11 instance-1 lfd[1541350]: *User Processing* PID:1541343 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:45:11 instance-1 lfd[1542084]: *User Processing* PID:1542073 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:45:11 instance-1 lfd[1542084]: *User Processing* PID:1542079 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:46:11 instance-1 lfd[1542456]: *User Processing* PID:1542447 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:46:11 instance-1 lfd[1542456]: *User Processing* PID:1542448 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:47:11 instance-1 lfd[1542991]: *User Processing* PID:1542987 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:48:11 instance-1 lfd[1543351]: *User Processing* PID:1543344 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:49:11 instance-1 lfd[1543701]: *User Processing* PID:1543693 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:49:11 instance-1 lfd[1543701]: *User Processing* PID:1543692 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:50:11 instance-1 lfd[1544098]: *User Processing* PID:1544093 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:50:11 instance-1 lfd[1544098]: *User Processing* PID:1544089 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:51:11 instance-1 lfd[1544470]: *User Processing* PID:1544457 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:54:11 instance-1 lfd[1545789]: *User Processing* PID:1545770 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:56:11 instance-1 lfd[1546555]: *User Processing* PID:1546547 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 20:58:12 instance-1 lfd[1547366]: *User Processing* PID:1547361 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:00:57 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 21:01:12 instance-1 lfd[1548332]: *User Processing* PID:1548321 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:02:12 instance-1 lfd[1548660]: *User Processing* PID:1548653 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:09:12 instance-1 lfd[1551201]: *User Processing* PID:1551178 Kill:0 User:comphomes VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:11:12 instance-1 lfd[1551871]: *User Processing* PID:1551860 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:24:13 instance-1 lfd[1556109]: *User Processing* PID:1556096 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:28:13 instance-1 lfd[1557193]: *User Processing* PID:1557189 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:29:13 instance-1 lfd[1557621]: *User Processing* PID:1557617 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:30:13 instance-1 lfd[1557974]: *User Processing* PID:1557967 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:31:13 instance-1 lfd[1558299]: *User Processing* PID:1558286 Kill:0 User:comphomes VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:34:13 instance-1 lfd[1559374]: *User Processing* PID:1559366 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:35:13 instance-1 lfd[1559718]: *User Processing* PID:1559708 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:43:14 instance-1 lfd[1562139]: *User Processing* PID:1562134 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:46:14 instance-1 lfd[1563212]: *User Processing* PID:1563201 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:49:14 instance-1 lfd[1564078]: *User Processing* PID:1564067 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:51:14 instance-1 lfd[1564915]: *User Processing* PID:1564902 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:51:15 instance-1 lfd[1564912]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 21:51:15 instance-1 lfd[1564912]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 21:52:14 instance-1 lfd[1565220]: *User Processing* PID:1565216 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:54:14 instance-1 lfd[1565880]: *User Processing* PID:1565876 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:55:14 instance-1 lfd[1566324]: *User Processing* PID:1566315 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:57:15 instance-1 lfd[1566926]: *User Processing* PID:1566921 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:58:15 instance-1 lfd[1567257]: *User Processing* PID:1567241 Kill:0 User:trafman VM:570(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 21:58:21 instance-1 lfd[1567292]: (smtpauth) Failed SMTP AUTH login from 185.192.71.30 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 16 21:59:15 instance-1 lfd[1567609]: *User Processing* PID:1567605 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 21:59:52 instance-1 lfd[1109515]: Main Process: TERM
Mar 16 21:59:52 instance-1 lfd[1109515]: daemon stopped
Mar 16 21:59:53 instance-1 lfd[1568022]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 16 21:59:53 instance-1 lfd[1568022]: LF_APACHE_ERRPORT: Set to [2]
Mar 16 21:59:53 instance-1 lfd[1568022]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 16 21:59:53 instance-1 lfd[1568022]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 16 21:59:53 instance-1 lfd[1568022]: CSF Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: IPv6 Enabled...
Mar 16 21:59:53 instance-1 lfd[1568022]: LOAD Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 16 21:59:53 instance-1 lfd[1568022]: Country Code Lookups...
Mar 16 21:59:53 instance-1 lfd[1568022]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 21:59:53 instance-1 lfd[1568022]: System Integrity Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Exploit Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Directory Watching...
Mar 16 21:59:53 instance-1 lfd[1568022]: Email Queue Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: ModSecurity IP D/B Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Email Relay Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Temp to Perm Block Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: System Statistics...
Mar 16 21:59:53 instance-1 lfd[1568022]: Process Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Account Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: SSH Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Webmin Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: SU Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Console Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: WHM Tracking...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/secure...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /usr/local/cpanel/logs/login_log...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/maillog...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/exim_mainlog...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/messages...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /etc/apache2/logs/error_log...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/customlog...
Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /usr/local/cpanel/logs/access_log...
Mar 16 22:03:53 instance-1 lfd[1569523]: *User Processing* PID:1569515 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 22:04:58 instance-1 lfd[1570256]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 16 22:04:58 instance-1 lfd[1570256]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 16 23:01:32 instance-1 lfd[1568022]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 16 23:01:32 instance-1 lfd[1571357]: *LOAD* 5 minute load average is 311.80, threshold is 6 - email sent
Mar 16 23:01:34 instance-1 lfd[1571358]: *Excessive Processes* User:tuscomau Kill:0 Process Count:217
Mar 16 23:01:49 instance-1 lfd[1571358]: *User Processing* PID:1570859 Kill:0 User:tuscomau Time:3358 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:02:05 instance-1 lfd[1571358]: *User Processing* PID:1570793 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:17:12 instance-1 lfd[1571352]: System Integrity check terminated after 370 seconds
Mar 16 23:17:21 instance-1 lfd[1571729]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped
Mar 16 23:17:23 instance-1 lfd[1571352]: LF_INTEGRITY taking 370 seconds, temporarily throttled to run every 5400 seconds
Mar 16 23:17:29 instance-1 lfd[1571356]: Directory Watching terminated after 40 seconds
Mar 16 23:17:29 instance-1 lfd[1571356]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds
Mar 16 23:17:38 instance-1 lfd[1571358]: *User Processing* PID:1570760 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:17:47 instance-1 lfd[1571358]: *User Processing* PID:1570835 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:17:47 instance-1 lfd[1572074]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped
Mar 16 23:17:50 instance-1 lfd[1571358]: *User Processing* PID:1570798 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:17:57 instance-1 lfd[1571358]: *User Processing* PID:1570836 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:03 instance-1 lfd[1571358]: *User Processing* PID:1570849 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:08 instance-1 lfd[1571358]: *User Processing* PID:1570771 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:12 instance-1 lfd[1571358]: *User Processing* PID:1570674 Kill:0 User:winslow Time:3368 EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 16 23:18:18 instance-1 lfd[1571358]: *User Processing* PID:1570804 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:20 instance-1 lfd[1571358]: *User Processing* PID:1570837 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:21 instance-1 lfd[1571358]: *User Processing* PID:1570792 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:24 instance-1 lfd[1571358]: *User Processing* PID:1570785 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:26 instance-1 lfd[1571358]: *User Processing* PID:1570850 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:29 instance-1 lfd[1571358]: *User Processing* PID:1570817 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:31 instance-1 lfd[1571358]: *User Processing* PID:1570816 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:32 instance-1 lfd[1572678]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped
Mar 16 23:18:33 instance-1 lfd[1571358]: *User Processing* PID:1570773 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:35 instance-1 lfd[1571358]: *User Processing* PID:1570840 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:37 instance-1 lfd[1571358]: *User Processing* PID:1570772 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:40 instance-1 lfd[1571358]: *User Processing* PID:1570824 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:42 instance-1 lfd[1571358]: *User Processing* PID:1570791 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:43 instance-1 lfd[1571358]: *User Processing* PID:1570782 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:47 instance-1 lfd[1571358]: *User Processing* PID:1570812 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:50 instance-1 lfd[1571358]: *User Processing* PID:1570829 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:54 instance-1 lfd[1571358]: *User Processing* PID:1570788 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:55 instance-1 lfd[1571358]: *User Processing* PID:1570800 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:57 instance-1 lfd[1571358]: *User Processing* PID:1570831 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:18:59 instance-1 lfd[1571358]: *User Processing* PID:1570764 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:01 instance-1 lfd[1571358]: *User Processing* PID:1570783 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:03 instance-1 lfd[1571358]: *User Processing* PID:1570781 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:04 instance-1 lfd[1571358]: *User Processing* PID:1570844 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:06 instance-1 lfd[1571358]: *User Processing* PID:1570811 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:07 instance-1 lfd[1571358]: *User Processing* PID:1570833 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:09 instance-1 lfd[1571358]: *User Processing* PID:1570820 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:11 instance-1 lfd[1571358]: *User Processing* PID:1570797 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:12 instance-1 lfd[1571358]: *User Processing* PID:1570832 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:15 instance-1 lfd[1571358]: *User Processing* PID:1570838 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:15 instance-1 lfd[1571358]: *User Processing* PID:1570795 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:16 instance-1 lfd[1571358]: *User Processing* PID:1570796 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:18 instance-1 lfd[1571358]: *User Processing* PID:1570841 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:20 instance-1 lfd[1571358]: *User Processing* PID:1570814 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:22 instance-1 lfd[1571358]: *User Processing* PID:1570762 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:23 instance-1 lfd[1571358]: *User Processing* PID:1570827 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:24 instance-1 lfd[1571358]: *User Processing* PID:1570851 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:26 instance-1 lfd[1571358]: *User Processing* PID:1570826 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:27 instance-1 lfd[1571358]: *User Processing* PID:1570825 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:27 instance-1 lfd[1572073]: Directory Watching terminated after 100 seconds
Mar 16 23:19:27 instance-1 lfd[1572073]: LF_DIRWATCH taking 100 seconds, temporarily throttled to run every 2700 seconds
Mar 16 23:19:28 instance-1 lfd[1571358]: *User Processing* PID:1570485 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:28 instance-1 lfd[1571358]: *User Processing* PID:1570485 Kill:0 User:tuscomau Time:3379 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:30 instance-1 lfd[1571358]: *User Processing* PID:1570770 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:31 instance-1 lfd[1571358]: *User Processing* PID:1570842 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:32 instance-1 lfd[1573027]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped
Mar 16 23:19:32 instance-1 lfd[1571358]: *User Processing* PID:1570848 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:33 instance-1 lfd[1571358]: *User Processing* PID:1570799 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:34 instance-1 lfd[1571358]: *User Processing* PID:1570853 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:34 instance-1 lfd[1571358]: *User Processing* PID:1570834 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:35 instance-1 lfd[1571358]: *User Processing* PID:1570852 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:35 instance-1 lfd[1571358]: *User Processing* PID:1570807 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:36 instance-1 lfd[1571358]: *User Processing* PID:1570761 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:37 instance-1 lfd[1571358]: *User Processing* PID:1570843 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:38 instance-1 lfd[1571358]: *User Processing* PID:1570806 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:39 instance-1 lfd[1571358]: *User Processing* PID:1570845 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:40 instance-1 lfd[1571358]: *User Processing* PID:1570846 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:41 instance-1 lfd[1571358]: *User Processing* PID:1570803 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:42 instance-1 lfd[1571358]: *User Processing* PID:1570839 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:43 instance-1 lfd[1571358]: *User Processing* PID:1570847 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:44 instance-1 lfd[1571358]: *User Processing* PID:1570802 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:45 instance-1 lfd[1571358]: *User Processing* PID:1570821 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:45 instance-1 lfd[1571358]: *User Processing* PID:1570794 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:46 instance-1 lfd[1571358]: *User Processing* PID:1570810 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:46 instance-1 lfd[1571358]: *User Processing* PID:1570830 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:47 instance-1 lfd[1571358]: *User Processing* PID:1570823 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:47 instance-1 lfd[1571358]: *User Processing* PID:1570765 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:48 instance-1 lfd[1571358]: *User Processing* PID:1570828 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:48 instance-1 lfd[1571358]: *User Processing* PID:1570822 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:48 instance-1 lfd[1571358]: *User Processing* PID:1570801 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:19:49 instance-1 lfd[1571358]: *User Processing* PID:1570639 Kill:0 User:winslow Time:3370 EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 16 23:23:36 instance-1 lfd[1574807]: *User Processing* PID:1574797 Kill:0 User:mainpoint VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:26:36 instance-1 lfd[1576486]: *Excessive Processes* User:mainpoint Kill:0 Process Count:11
Mar 16 23:26:36 instance-1 lfd[1576486]: *User Processing* PID:1576479 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:27:36 instance-1 lfd[1577057]: *User Processing* PID:1577053 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:29:36 instance-1 lfd[1578557]: *User Processing* PID:1578554 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:30:36 instance-1 lfd[1579045]: *Excessive Processes* User:rgv Kill:0 Process Count:12
Mar 16 23:30:36 instance-1 lfd[1579045]: *User Processing* PID:1579042 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:30:36 instance-1 lfd[1579045]: *User Processing* PID:1578939 Kill:0 User:indigenouscivil VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 23:31:36 instance-1 lfd[1579527]: *User Processing* PID:1579523 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:35:36 instance-1 lfd[1581560]: *User Processing* PID:1581556 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:38:36 instance-1 lfd[1582502]: *User Processing* PID:1582498 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:39:36 instance-1 lfd[1582827]: *User Processing* PID:1582824 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:40:36 instance-1 lfd[1583172]: *User Processing* PID:1583168 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:41:36 instance-1 lfd[1583459]: *User Processing* PID:1583455 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:43:37 instance-1 lfd[1584167]: *User Processing* PID:1584163 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:45:37 instance-1 lfd[1584869]: *User Processing* PID:1584861 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:45:37 instance-1 lfd[1584869]: *User Processing* PID:1584762 Kill:0 User:trafman VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 23:46:37 instance-1 lfd[1585219]: *User Processing* PID:1585171 Kill:0 User:trafman VM:544(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 23:46:37 instance-1 lfd[1585219]: *User Processing* PID:1585212 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:46:37 instance-1 lfd[1585219]: *User Processing* PID:1585213 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:47:37 instance-1 lfd[1585557]: *User Processing* PID:1585467 Kill:0 User:trafman VM:614(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 23:48:37 instance-1 lfd[1586052]: *User Processing* PID:1586031 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 16 23:48:37 instance-1 lfd[1586052]: *User Processing* PID:1586045 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:48:37 instance-1 lfd[1586052]: *User Processing* PID:1586009 Kill:0 User:trafman VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 16 23:49:37 instance-1 lfd[1586403]: *User Processing* PID:1586397 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:49:37 instance-1 lfd[1586403]: *User Processing* PID:1586396 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:50:37 instance-1 lfd[1586795]: *User Processing* PID:1586789 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:51:37 instance-1 lfd[1587150]: *User Processing* PID:1587143 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:55:37 instance-1 lfd[1588724]: *User Processing* PID:1588721 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:56:37 instance-1 lfd[1589009]: *User Processing* PID:1589002 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:58:37 instance-1 lfd[1589745]: *User Processing* PID:1589740 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 16 23:59:37 instance-1 lfd[1590046]: *User Processing* PID:1590042 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:00:03 instance-1 lfd[1568022]: Main Process: TERM
Mar 17 00:00:03 instance-1 lfd[1568022]: daemon stopped
Mar 17 00:00:03 instance-1 lfd[1590255]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 17 00:00:03 instance-1 lfd[1590255]: LF_APACHE_ERRPORT: Set to [2]
Mar 17 00:00:03 instance-1 lfd[1590255]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 17 00:00:03 instance-1 lfd[1590255]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 17 00:00:03 instance-1 lfd[1590255]: CSF Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: IPv6 Enabled...
Mar 17 00:00:03 instance-1 lfd[1590255]: LOAD Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 17 00:00:03 instance-1 lfd[1590255]: Country Code Lookups...
Mar 17 00:00:03 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 00:00:03 instance-1 lfd[1590255]: System Integrity Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: Exploit Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: Directory Watching...
Mar 17 00:00:03 instance-1 lfd[1590255]: Email Queue Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: ModSecurity IP D/B Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: Email Relay Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: Temp to Perm Block Tracking...
Mar 17 00:00:03 instance-1 lfd[1590255]: System Statistics...
Mar 17 00:00:04 instance-1 lfd[1590255]: Process Tracking...
Mar 17 00:00:04 instance-1 lfd[1590255]: Account Tracking...
Mar 17 00:00:04 instance-1 lfd[1590255]: SSH Tracking...
Mar 17 00:00:04 instance-1 lfd[1590255]: Webmin Tracking...
Mar 17 00:00:04 instance-1 lfd[1590255]: SU Tracking...
Mar 17 00:00:04 instance-1 lfd[1590255]: Console Tracking...
Mar 17 00:00:04 instance-1 lfd[1590255]: WHM Tracking...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /usr/local/cpanel/logs/login_log...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/exim_mainlog...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/messages...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /usr/local/cpanel/logs/access_log...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /etc/apache2/logs/error_log...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/maillog...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/secure...
Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/customlog...
Mar 17 00:00:04 instance-1 lfd[1590274]: *User Processing* PID:1590258 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:01:04 instance-1 lfd[1590583]: *User Processing* PID:1590580 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:02:04 instance-1 lfd[1590910]: *User Processing* PID:1590886 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 00:03:04 instance-1 lfd[1591242]: *User Processing* PID:1591234 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:05:37 instance-1 lfd[1592074]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 00:05:37 instance-1 lfd[1592074]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 00:07:04 instance-1 lfd[1592839]: *User Processing* PID:1592831 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:07:04 instance-1 lfd[1592839]: *User Processing* PID:1592832 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:08:04 instance-1 lfd[1593235]: *User Processing* PID:1593221 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:09:04 instance-1 lfd[1593761]: *User Processing* PID:1593756 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:14:04 instance-1 lfd[1595272]: *User Processing* PID:1595263 Kill:0 User:surveyms VM:576(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 00:19:05 instance-1 lfd[1596747]: *User Processing* PID:1596743 Kill:0 User:tekutaro VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 00:20:56 instance-1 lfd[1597214]: (smtpauth) Failed SMTP AUTH login from 42.193.105.109 (CN/China/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 17 00:24:45 instance-1 lfd[1598280]: (smtpauth) Failed SMTP AUTH login from 156.226.23.21 (ZA/South Africa/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 17 00:28:05 instance-1 lfd[1599173]: *User Processing* PID:1599124 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 00:59:06 instance-1 lfd[1608317]: *User Processing* PID:1608310 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:00:06 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 01:01:06 instance-1 lfd[1609011]: *User Processing* PID:1609004 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:03:06 instance-1 lfd[1609533]: *User Processing* PID:1609523 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 01:05:07 instance-1 lfd[1610243]: *User Processing* PID:1610234 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:10:07 instance-1 lfd[1611648]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 01:10:07 instance-1 lfd[1611648]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 01:12:07 instance-1 lfd[1612182]: *User Processing* PID:1612165 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 01:13:07 instance-1 lfd[1612576]: *User Processing* PID:1612384 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:13:07 instance-1 lfd[1612576]: *User Processing* PID:1612348 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:13:08 instance-1 lfd[1612576]: *User Processing* PID:1612563 Kill:0 User:bmswinslow VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:13:08 instance-1 lfd[1612576]: *User Processing* PID:1612565 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:13:08 instance-1 lfd[1612576]: *User Processing* PID:1612526 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:13:09 instance-1 lfd[1612576]: *User Processing* PID:1612547 Kill:0 User:bmswinslow VM:658(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:14:07 instance-1 lfd[1612950]: *User Processing* PID:1612943 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:15:07 instance-1 lfd[1613457]: *User Processing* PID:1613449 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:17:07 instance-1 lfd[1614143]: *User Processing* PID:1614138 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:17:08 instance-1 lfd[1614143]: *User Processing* PID:1614132 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:18:08 instance-1 lfd[1614488]: *User Processing* PID:1614300 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:18:08 instance-1 lfd[1614488]: *User Processing* PID:1614472 Kill:0 User:bmswinslow VM:576(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:18:08 instance-1 lfd[1614488]: *User Processing* PID:1614425 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:18:09 instance-1 lfd[1614488]: *User Processing* PID:1614330 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:18:09 instance-1 lfd[1614488]: *User Processing* PID:1614481 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:18:09 instance-1 lfd[1614488]: *User Processing* PID:1614476 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:20:38 instance-1 lfd[1615431]: *LOAD* 5 minute load average is 6.27, threshold is 6 - email sent
Mar 17 01:21:08 instance-1 lfd[1615574]: *User Processing* PID:1615534 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 01:21:08 instance-1 lfd[1615574]: *User Processing* PID:1615565 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:22:08 instance-1 lfd[1615904]: *User Processing* PID:1615898 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:23:08 instance-1 lfd[1616231]: *User Processing* PID:1616221 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:23:08 instance-1 lfd[1616231]: *User Processing* PID:1616225 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:24:08 instance-1 lfd[1616538]: *User Processing* PID:1616523 Kill:0 User:foster VM:611(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:24:09 instance-1 lfd[1616538]: *User Processing* PID:1616531 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:25:08 instance-1 lfd[1616938]: *User Processing* PID:1616904 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:26:08 instance-1 lfd[1617383]: *User Processing* PID:1617370 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:26:09 instance-1 lfd[1617383]: *User Processing* PID:1617374 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:27:08 instance-1 lfd[1617689]: *User Processing* PID:1617683 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:28:09 instance-1 lfd[1618019]: *User Processing* PID:1618016 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:30:09 instance-1 lfd[1618844]: *User Processing* PID:1618799 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:30:09 instance-1 lfd[1618844]: *User Processing* PID:1618826 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:32:09 instance-1 lfd[1619624]: *User Processing* PID:1619621 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:32:09 instance-1 lfd[1619624]: *User Processing* PID:1619618 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:33:09 instance-1 lfd[1620026]: *User Processing* PID:1620023 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:34:09 instance-1 lfd[1620440]: *User Processing* PID:1620431 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:34:09 instance-1 lfd[1620440]: *User Processing* PID:1620434 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:35:09 instance-1 lfd[1621033]: *User Processing* PID:1621020 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:35:09 instance-1 lfd[1621033]: *User Processing* PID:1621025 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:36:09 instance-1 lfd[1621444]: *User Processing* PID:1621435 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:36:09 instance-1 lfd[1621444]: *User Processing* PID:1621437 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:38:09 instance-1 lfd[1622181]: *User Processing* PID:1622175 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:40:09 instance-1 lfd[1623020]: *User Processing* PID:1623012 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:41:09 instance-1 lfd[1623577]: *User Processing* PID:1623573 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:48:09 instance-1 lfd[1625864]: *User Processing* PID:1625861 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:50:10 instance-1 lfd[1626675]: *User Processing* PID:1626668 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:50:10 instance-1 lfd[1626675]: *User Processing* PID:1626667 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:51:10 instance-1 lfd[1627187]: *User Processing* PID:1627183 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:56:10 instance-1 lfd[1629256]: *User Processing* PID:1629248 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 01:59:10 instance-1 lfd[1630393]: *User Processing* PID:1630389 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:00:10 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 02:01:10 instance-1 lfd[1631522]: *User Processing* PID:1631518 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:10:11 instance-1 lfd[1634280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 02:10:11 instance-1 lfd[1634280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 02:15:11 instance-1 lfd[1635705]: *User Processing* PID:1635594 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 02:30:52 instance-1 lfd[1639957]: Directory Watching terminated after 40 seconds
Mar 17 02:30:52 instance-1 lfd[1639957]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds
Mar 17 02:32:12 instance-1 lfd[1640577]: *User Processing* PID:1640567 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:38:12 instance-1 lfd[1642204]: *User Processing* PID:1642170 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:53:13 instance-1 lfd[1646501]: *User Processing* PID:1646497 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:54:13 instance-1 lfd[1646947]: *User Processing* PID:1646940 Kill:0 User:mainpoint VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:56:14 instance-1 lfd[1647632]: *User Processing* PID:1647627 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:58:14 instance-1 lfd[1648361]: *User Processing* PID:1648357 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 02:59:14 instance-1 lfd[1648686]: *User Processing* PID:1648676 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:00:14 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 03:01:14 instance-1 lfd[1649391]: *User Processing* PID:1649386 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:02:14 instance-1 lfd[1649931]: *User Processing* PID:1649926 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:03:14 instance-1 lfd[1650270]: *User Processing* PID:1650263 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:04:14 instance-1 lfd[1650603]: *User Processing* PID:1650582 Kill:0 User:surveyms VM:580(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 03:08:41 instance-1 lfd[1651914]: (smtpauth) Failed SMTP AUTH login from 185.196.8.222 (CH/Switzerland/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 17 03:13:14 instance-1 lfd[1653224]: *User Processing* PID:1653217 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:15:56 instance-1 lfd[1653886]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 03:15:56 instance-1 lfd[1653886]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 03:16:15 instance-1 lfd[1654202]: *User Processing* PID:1654169 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:17:15 instance-1 lfd[1654610]: *User Processing* PID:1654606 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:20:15 instance-1 lfd[1655511]: *User Processing* PID:1655500 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:21:15 instance-1 lfd[1655812]: *User Processing* PID:1655805 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:25:15 instance-1 lfd[1657195]: *User Processing* PID:1657183 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:28:15 instance-1 lfd[1658256]: *User Processing* PID:1658248 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:28:15 instance-1 lfd[1658256]: *User Processing* PID:1658250 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:29:15 instance-1 lfd[1658562]: *User Processing* PID:1658554 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:35:15 instance-1 lfd[1660617]: *User Processing* PID:1660607 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:36:16 instance-1 lfd[1660897]: *User Processing* PID:1660891 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:37:16 instance-1 lfd[1661176]: *User Processing* PID:1661172 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:42:16 instance-1 lfd[1662764]: *User Processing* PID:1662757 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:42:57 instance-1 lfd[1663240]: (ftpd) Failed FTP login from 82.223.104.73 (ES/Spain/-): 10 in the last 3600 secs - *Blocked in csf* [LF_FTPD]
Mar 17 03:43:16 instance-1 lfd[1663396]: *User Processing* PID:1663324 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 03:44:16 instance-1 lfd[1663729]: *User Processing* PID:1663715 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:44:16 instance-1 lfd[1663729]: *User Processing* PID:1663721 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:47:16 instance-1 lfd[1665091]: *User Processing* PID:1665084 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:48:16 instance-1 lfd[1666098]: *User Processing* PID:1666093 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/eyrescom/public_html/missionmassimo.com theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
Mar 17 03:53:17 instance-1 lfd[1670681]: *LOAD* 5 minute load average is 9.52, threshold is 6 - email sent
Mar 17 03:53:18 instance-1 lfd[1670682]: *Excessive Processes* User:surveyms Kill:0 Process Count:30
Mar 17 03:53:20 instance-1 lfd[1670682]: *User Processing* PID:1670638 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:53:21 instance-1 lfd[1670682]: *User Processing* PID:1670453 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 03:53:23 instance-1 lfd[1670682]: *User Processing* PID:1670375 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 03:53:24 instance-1 lfd[1670682]: *User Processing* PID:1670490 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 03:53:25 instance-1 lfd[1670682]: *User Processing* PID:1670514 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:53:26 instance-1 lfd[1670682]: *User Processing* PID:1670469 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 03:53:27 instance-1 lfd[1670682]: *User Processing* PID:1670368 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 03:53:28 instance-1 lfd[1670682]: *User Processing* PID:1670428 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 03:54:17 instance-1 lfd[1671827]: *User Processing* PID:1671788 Kill:0 User:mainpoint VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html instance info --format=json --check-updates=true
Mar 17 03:55:17 instance-1 lfd[1672804]: *User Processing* PID:1672800 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 03:56:17 instance-1 lfd[1673666]: *User Processing* PID:1673650 Kill:0 User:bmswinslow VM:641(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
Mar 17 03:59:17 instance-1 lfd[1676072]: *User Processing* PID:1676060 Kill:0 User:tuscomau VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/tuscomau/public_html pingbacks is_disabled
Mar 17 03:59:18 instance-1 lfd[1676072]: *User Processing* PID:1676067 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:00:17 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 04:00:17 instance-1 lfd[1677500]: *User Processing* PID:1677490 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:01:17 instance-1 lfd[1677887]: *User Processing* PID:1677882 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:02:17 instance-1 lfd[1678278]: *User Processing* PID:1678275 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:03:17 instance-1 lfd[1678766]: *User Processing* PID:1678762 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:07:18 instance-1 lfd[1680266]: *User Processing* PID:1680263 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:30:28 instance-1 lfd[1687356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 04:30:29 instance-1 lfd[1687356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 04:43:19 instance-1 lfd[1690919]: *User Processing* PID:1690895 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:43:19 instance-1 lfd[1690919]: *User Processing* PID:1690892 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:45:19 instance-1 lfd[1691683]: *User Processing* PID:1691672 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:47:19 instance-1 lfd[1692257]: *User Processing* PID:1692251 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:49:19 instance-1 lfd[1692970]: *User Processing* PID:1692967 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:51:19 instance-1 lfd[1693598]: *User Processing* PID:1693592 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:53:19 instance-1 lfd[1694183]: *User Processing* PID:1694179 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:54:19 instance-1 lfd[1694710]: *User Processing* PID:1694704 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:57:19 instance-1 lfd[1695579]: *User Processing* PID:1695575 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 04:58:19 instance-1 lfd[1695868]: *User Processing* PID:1695860 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:00:20 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 05:00:20 instance-1 lfd[1696649]: *User Processing* PID:1696637 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:01:20 instance-1 lfd[1696955]: *User Processing* PID:1696951 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:02:20 instance-1 lfd[1697275]: *User Processing* PID:1697270 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:04:20 instance-1 lfd[1698012]: *User Processing* PID:1698008 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:05:20 instance-1 lfd[1698343]: *User Processing* PID:1698335 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:08:20 instance-1 lfd[1699192]: *User Processing* PID:1699181 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:09:20 instance-1 lfd[1699631]: *User Processing* PID:1699621 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:10:20 instance-1 lfd[1699996]: *User Processing* PID:1699986 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:11:20 instance-1 lfd[1700280]: *User Processing* PID:1700275 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:15:20 instance-1 lfd[1701635]: *User Processing* PID:1701620 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:22:20 instance-1 lfd[1703835]: *User Processing* PID:1703831 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:23:20 instance-1 lfd[1704112]: *User Processing* PID:1704108 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:27:21 instance-1 lfd[1705408]: *User Processing* PID:1705404 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:28:21 instance-1 lfd[1705685]: *User Processing* PID:1705672 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:28:21 instance-1 lfd[1705685]: *User Processing* PID:1705681 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:32:21 instance-1 lfd[1707099]: *User Processing* PID:1707095 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:33:21 instance-1 lfd[1707421]: *User Processing* PID:1707417 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:34:21 instance-1 lfd[1707723]: *User Processing* PID:1707719 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:36:21 instance-1 lfd[1708496]: *User Processing* PID:1708489 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:37:21 instance-1 lfd[1708808]: *User Processing* PID:1708800 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:38:21 instance-1 lfd[1709133]: *User Processing* PID:1709126 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:39:21 instance-1 lfd[1709456]: *User Processing* PID:1709449 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:42:21 instance-1 lfd[1710510]: *User Processing* PID:1710506 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:43:21 instance-1 lfd[1710791]: *User Processing* PID:1710784 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:45:22 instance-1 lfd[1711570]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 05:45:22 instance-1 lfd[1711570]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 05:47:21 instance-1 lfd[1712205]: *User Processing* PID:1712201 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:49:21 instance-1 lfd[1712915]: *User Processing* PID:1712911 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:50:22 instance-1 lfd[1713394]: *User Processing* PID:1713386 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:52:22 instance-1 lfd[1713965]: *User Processing* PID:1713961 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 05:53:22 instance-1 lfd[1714292]: *User Processing* PID:1714240 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 06:00:22 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 06:01:22 instance-1 lfd[1716781]: *User Processing* PID:1716771 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 06:03:22 instance-1 lfd[1717313]: *User Processing* PID:1717301 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 06:21:23 instance-1 lfd[1722606]: *User Processing* PID:1722601 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 06:23:23 instance-1 lfd[1723159]: *User Processing* PID:1723155 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 06:25:23 instance-1 lfd[1723877]: *User Processing* PID:1723866 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 06:29:23 instance-1 lfd[1724868]: *User Processing* PID:1724864 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 06:32:23 instance-1 lfd[1725925]: *User Processing* PID:1725916 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 06:45:24 instance-1 lfd[1729759]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 06:45:24 instance-1 lfd[1729759]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 06:52:25 instance-1 lfd[1732163]: *LOAD* 5 minute load average is 7.04, threshold is 6 - email sent
Mar 17 06:52:33 instance-1 lfd[1732164]: *Excessive Processes* User:opthirecomau Kill:0 Process Count:15
Mar 17 06:52:38 instance-1 lfd[1732164]: *Excessive Processes* User:nativesp Kill:0 Process Count:15
Mar 17 07:48:20 instance-1 lfd[1711]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 17 07:48:21 instance-1 lfd[1711]: LF_APACHE_ERRPORT: Set to [2]
Mar 17 07:48:21 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 17 07:48:21 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 17 07:48:21 instance-1 lfd[1711]: CSF Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: IPv6 Enabled...
Mar 17 07:48:21 instance-1 lfd[1711]: LOAD Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 17 07:48:21 instance-1 lfd[1711]: Country Code Lookups...
Mar 17 07:48:21 instance-1 lfd[1711]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 07:48:21 instance-1 lfd[1711]: System Integrity Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: Exploit Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: Directory Watching...
Mar 17 07:48:21 instance-1 lfd[1711]: Email Queue Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: ModSecurity IP D/B Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: Email Relay Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: Temp to Perm Block Tracking...
Mar 17 07:48:21 instance-1 lfd[1711]: System Statistics...
Mar 17 07:48:22 instance-1 lfd[1711]: Process Tracking...
Mar 17 07:48:22 instance-1 lfd[1711]: Account Tracking...
Mar 17 07:48:22 instance-1 lfd[1711]: SSH Tracking...
Mar 17 07:48:22 instance-1 lfd[1711]: Webmin Tracking...
Mar 17 07:48:22 instance-1 lfd[1711]: SU Tracking...
Mar 17 07:48:22 instance-1 lfd[1711]: Console Tracking...
Mar 17 07:48:22 instance-1 lfd[1711]: WHM Tracking...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/login_log...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/maillog...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/exim_mainlog...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/secure...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/access_log...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/customlog...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/messages...
Mar 17 07:48:22 instance-1 lfd[1711]: Watching /etc/apache2/logs/error_log...
Mar 17 07:49:22 instance-1 lfd[2133]: *User Processing* PID:2047 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 07:49:22 instance-1 lfd[2133]: *User Processing* PID:2041 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 07:49:22 instance-1 lfd[2133]: *User Processing* PID:2079 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 07:51:22 instance-1 lfd[2867]: *User Processing* PID:2821 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 07:51:22 instance-1 lfd[2867]: *User Processing* PID:2861 Kill:0 User:mainpoint VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 07:52:22 instance-1 lfd[3143]: *User Processing* PID:2998 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 07:53:22 instance-1 lfd[3414]: *User Processing* PID:3393 Kill:0 User:surveyms VM:530(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 07:53:22 instance-1 lfd[3414]: *User Processing* PID:3374 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 07:54:01 instance-1 lfd[3411]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 07:54:01 instance-1 lfd[3411]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 07:59:23 instance-1 lfd[5541]: *Excessive Processes* User:winslow Kill:0 Process Count:13
Mar 17 07:59:24 instance-1 lfd[5541]: *User Processing* PID:5452 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 07:59:27 instance-1 lfd[5541]: *User Processing* PID:5474 Kill:0 User:trafman VM:558(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 07:59:57 instance-1 lfd[6002]: *LOAD* 5 minute load average is 15.24, threshold is 6 - email sent
Mar 17 08:27:39 instance-1 lfd[1726]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 17 08:27:40 instance-1 lfd[1726]: LF_APACHE_ERRPORT: Set to [2]
Mar 17 08:27:40 instance-1 lfd[1726]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 17 08:27:40 instance-1 lfd[1726]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 17 08:27:40 instance-1 lfd[1726]: CSF Tracking...
Mar 17 08:27:40 instance-1 lfd[1726]: IPv6 Enabled...
Mar 17 08:27:40 instance-1 lfd[1726]: LOAD Tracking...
Mar 17 08:27:41 instance-1 lfd[1726]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 17 08:27:41 instance-1 lfd[1726]: Country Code Lookups...
Mar 17 08:27:41 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 08:27:41 instance-1 lfd[1726]: System Integrity Tracking...
Mar 17 08:27:41 instance-1 lfd[1726]: Exploit Tracking...
Mar 17 08:27:41 instance-1 lfd[1726]: Directory Watching...
Mar 17 08:27:41 instance-1 lfd[1726]: Email Queue Tracking...
Mar 17 08:27:41 instance-1 lfd[1726]: ModSecurity IP D/B Tracking...
Mar 17 08:27:41 instance-1 lfd[1726]: Email Relay Tracking...
Mar 17 08:27:41 instance-1 lfd[1726]: Temp to Perm Block Tracking...
Mar 17 08:27:41 instance-1 lfd[1726]: System Statistics...
Mar 17 08:27:42 instance-1 lfd[1726]: Process Tracking...
Mar 17 08:27:42 instance-1 lfd[1726]: Account Tracking...
Mar 17 08:27:42 instance-1 lfd[1726]: SSH Tracking...
Mar 17 08:27:42 instance-1 lfd[1726]: Webmin Tracking...
Mar 17 08:27:42 instance-1 lfd[1726]: SU Tracking...
Mar 17 08:27:42 instance-1 lfd[1726]: Console Tracking...
Mar 17 08:27:42 instance-1 lfd[1726]: WHM Tracking...
Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/customlog...
Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/exim_mainlog...
Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/maillog...
Mar 17 08:27:42 instance-1 lfd[1726]: Watching /usr/local/cpanel/logs/login_log...
Mar 17 08:27:42 instance-1 lfd[1726]: Watching /etc/apache2/logs/error_log...
Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/messages...
Mar 17 08:27:43 instance-1 lfd[1726]: Watching /usr/local/cpanel/logs/access_log...
Mar 17 08:27:43 instance-1 lfd[1726]: Watching /var/log/secure...
Mar 17 08:29:43 instance-1 lfd[2552]: *User Processing* PID:2549 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:31:43 instance-1 lfd[3118]: *User Processing* PID:3111 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:33:19 instance-1 lfd[3412]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 08:33:20 instance-1 lfd[3412]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 08:33:43 instance-1 lfd[3842]: *User Processing* PID:3832 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:33:43 instance-1 lfd[3842]: *User Processing* PID:3833 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:40:43 instance-1 lfd[5948]: *User Processing* PID:5940 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:42:43 instance-1 lfd[6710]: *User Processing* PID:6702 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:43:43 instance-1 lfd[7222]: *User Processing* PID:7134 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:43:43 instance-1 lfd[7222]: *User Processing* PID:7214 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:43:43 instance-1 lfd[7222]: *User Processing* PID:7219 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:46:43 instance-1 lfd[8418]: *User Processing* PID:8412 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:49:43 instance-1 lfd[9481]: *User Processing* PID:9475 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:50:43 instance-1 lfd[9904]: *User Processing* PID:9901 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:54:44 instance-1 lfd[11486]: *User Processing* PID:11450 Kill:0 User:bmswinslow VM:700(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:55:44 instance-1 lfd[11831]: *User Processing* PID:11827 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:56:44 instance-1 lfd[12170]: *User Processing* PID:12167 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:58:44 instance-1 lfd[12938]: *User Processing* PID:12935 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 08:59:44 instance-1 lfd[13276]: *User Processing* PID:13273 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:00:44 instance-1 lfd[13677]: *User Processing* PID:13670 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:02:44 instance-1 lfd[14379]: *User Processing* PID:14364 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 09:02:44 instance-1 lfd[14379]: *User Processing* PID:14371 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:03:44 instance-1 lfd[14881]: *User Processing* PID:14854 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:06:44 instance-1 lfd[15944]: *User Processing* PID:15940 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:07:44 instance-1 lfd[16285]: *User Processing* PID:16273 Kill:0 User:comphomes VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:07:44 instance-1 lfd[16285]: *User Processing* PID:16274 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:09:44 instance-1 lfd[17123]: *User Processing* PID:17110 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 09:11:44 instance-1 lfd[17785]: *User Processing* PID:17778 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:12:44 instance-1 lfd[18150]: *User Processing* PID:18139 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 09:17:44 instance-1 lfd[20128]: *User Processing* PID:20103 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 09:17:44 instance-1 lfd[20128]: *User Processing* PID:20113 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 09:27:44 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 09:37:45 instance-1 lfd[26355]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 09:37:45 instance-1 lfd[26355]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 09:41:45 instance-1 lfd[27738]: *Suspicious Process* PID:3558 PPID:1131 User:turnkey Uptime:4118 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 17 09:41:45 instance-1 lfd[27738]: *User Processing* PID:3558 Kill:0 User:turnkey Time:4118 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 17 09:55:45 instance-1 lfd[32096]: *User Processing* PID:31816 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 10:06:45 instance-1 lfd[35380]: *User Processing* PID:35376 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 10:06:45 instance-1 lfd[35380]: *User Processing* PID:35370 Kill:0 User:yvegroup VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 10:07:45 instance-1 lfd[35696]: *User Processing* PID:35687 Kill:0 User:yvegroup VM:519(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 10:07:46 instance-1 lfd[35696]: *User Processing* PID:35678 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 10:11:45 instance-1 lfd[37030]: *User Processing* PID:36729 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 10:27:46 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 10:31:46 instance-1 lfd[43011]: *User Processing* PID:42803 Kill:0 User:indigenouscivil VM:598(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 10:37:47 instance-1 lfd[44871]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 10:37:47 instance-1 lfd[44871]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 10:39:47 instance-1 lfd[45390]: *User Processing* PID:45341 Kill:0 User:indigenouscivil VM:602(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 10:39:47 instance-1 lfd[45390]: *User Processing* PID:45381 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 10:40:47 instance-1 lfd[45830]: *User Processing* PID:45823 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 10:50:47 instance-1 lfd[48710]: *User Processing* PID:48667 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 10:52:47 instance-1 lfd[49198]: *User Processing* PID:49138 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 11:02:47 instance-1 lfd[52889]: *User Processing* PID:52863 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 11:03:47 instance-1 lfd[53210]: *User Processing* PID:53118 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 11:08:47 instance-1 lfd[54777]: *User Processing* PID:54773 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 11:11:47 instance-1 lfd[55759]: *User Processing* PID:55752 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 11:13:47 instance-1 lfd[56288]: *User Processing* PID:56284 Kill:0 User:yvegroup VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 11:14:47 instance-1 lfd[56563]: *User Processing* PID:56516 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 11:22:48 instance-1 lfd[58917]: *Suspicious Process* PID:3558 PPID:1131 User:turnkey Uptime:10180 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 17 11:22:48 instance-1 lfd[58917]: *User Processing* PID:3558 Kill:0 User:turnkey Time:10180 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 17 11:27:48 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 11:37:48 instance-1 lfd[63366]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 11:37:48 instance-1 lfd[63366]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 11:44:48 instance-1 lfd[65420]: *User Processing* PID:65189 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 11:49:48 instance-1 lfd[66966]: *User Processing* PID:66962 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:02:49 instance-1 lfd[70939]: *User Processing* PID:70930 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 12:07:49 instance-1 lfd[72557]: *User Processing* PID:72546 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:08:49 instance-1 lfd[72945]: *User Processing* PID:72813 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 12:15:49 instance-1 lfd[75265]: *User Processing* PID:75257 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 12:25:49 instance-1 lfd[78393]: *User Processing* PID:78389 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:27:49 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 12:32:49 instance-1 lfd[80818]: *User Processing* PID:80809 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:35:50 instance-1 lfd[81872]: *User Processing* PID:81868 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:37:50 instance-1 lfd[82488]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 12:37:50 instance-1 lfd[82488]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 12:38:50 instance-1 lfd[82825]: *User Processing* PID:82821 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:38:50 instance-1 lfd[82825]: *User Processing* PID:82818 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:41:50 instance-1 lfd[83967]: *User Processing* PID:83960 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:42:50 instance-1 lfd[84313]: *User Processing* PID:84296 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 12:42:50 instance-1 lfd[84313]: *User Processing* PID:84305 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85848 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85842 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85849 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85844 Kill:0 User:geneticson VM:623(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:49:50 instance-1 lfd[87000]: *User Processing* PID:86993 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:53:50 instance-1 lfd[88500]: *User Processing* PID:88492 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:56:50 instance-1 lfd[89708]: *User Processing* PID:89701 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:57:50 instance-1 lfd[90062]: *User Processing* PID:90051 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 12:58:50 instance-1 lfd[90358]: *User Processing* PID:90354 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:01:50 instance-1 lfd[91457]: *User Processing* PID:91453 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:02:50 instance-1 lfd[91817]: *User Processing* PID:91805 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:20:51 instance-1 lfd[97240]: *User Processing* PID:97236 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:27:51 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 13:30:51 instance-1 lfd[100326]: *User Processing* PID:100318 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:33:51 instance-1 lfd[101296]: *User Processing* PID:101292 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:34:51 instance-1 lfd[101545]: *User Processing* PID:101538 Kill:0 User:comphomes VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:37:51 instance-1 lfd[102516]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 13:37:51 instance-1 lfd[102516]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 13:42:51 instance-1 lfd[104004]: *User Processing* PID:103993 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:43:51 instance-1 lfd[104274]: *User Processing* PID:104267 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:49:51 instance-1 lfd[106171]: *User Processing* PID:106167 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:50:51 instance-1 lfd[106548]: *User Processing* PID:106286 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 13:51:51 instance-1 lfd[106902]: *User Processing* PID:106896 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:51:52 instance-1 lfd[106902]: *User Processing* PID:106897 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:52:51 instance-1 lfd[107323]: *User Processing* PID:107312 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:53:51 instance-1 lfd[107818]: *User Processing* PID:107786 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:54:51 instance-1 lfd[108208]: *User Processing* PID:107902 Kill:0 User:newswinslow VM:602(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 13:55:51 instance-1 lfd[108554]: *User Processing* PID:108550 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:56:51 instance-1 lfd[108885]: *User Processing* PID:108879 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 13:57:51 instance-1 lfd[109272]: *User Processing* PID:109064 Kill:0 User:opthirecomau VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:02:52 instance-1 lfd[111049]: *User Processing* PID:111040 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:02:52 instance-1 lfd[111049]: *User Processing* PID:110850 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 14:03:52 instance-1 lfd[111543]: *User Processing* PID:111539 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:06:52 instance-1 lfd[112527]: *User Processing* PID:112520 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:07:52 instance-1 lfd[112830]: *User Processing* PID:112819 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:09:52 instance-1 lfd[113603]: *User Processing* PID:113599 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:12:52 instance-1 lfd[114462]: *User Processing* PID:114405 Kill:0 User:geneticson VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:15:52 instance-1 lfd[115712]: *User Processing* PID:115705 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:16:52 instance-1 lfd[116186]: *User Processing* PID:116179 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:16:52 instance-1 lfd[116186]: *User Processing* PID:116178 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:27:52 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 14:32:52 instance-1 lfd[121843]: *User Processing* PID:121834 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:33:52 instance-1 lfd[122246]: *User Processing* PID:122242 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:35:52 instance-1 lfd[123188]: *User Processing* PID:123180 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:36:52 instance-1 lfd[123600]: *User Processing* PID:123593 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:36:52 instance-1 lfd[123600]: *User Processing* PID:123596 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:36:53 instance-1 lfd[123600]: *User Processing* PID:123519 Kill:0 User:winslow VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 14:36:53 instance-1 lfd[123600]: *User Processing* PID:123327 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 14:37:52 instance-1 lfd[124106]: *User Processing* PID:124097 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:37:53 instance-1 lfd[124103]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 14:37:53 instance-1 lfd[124103]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 14:40:53 instance-1 lfd[125497]: *User Processing* PID:125493 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:41:53 instance-1 lfd[125872]: *User Processing* PID:125866 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:41:53 instance-1 lfd[125872]: *User Processing* PID:125868 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:43:53 instance-1 lfd[126673]: *User Processing* PID:126667 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:44:53 instance-1 lfd[127061]: *User Processing* PID:127057 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:51:53 instance-1 lfd[130103]: *User Processing* PID:130099 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:52:53 instance-1 lfd[130530]: *User Processing* PID:130521 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 14:54:53 instance-1 lfd[131412]: *User Processing* PID:131326 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:01:53 instance-1 lfd[133971]: *User Processing* PID:133967 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:02:53 instance-1 lfd[134331]: *User Processing* PID:134323 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:07:53 instance-1 lfd[136216]: *User Processing* PID:136207 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:09:53 instance-1 lfd[136963]: *User Processing* PID:136959 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:11:53 instance-1 lfd[137741]: *Suspicious Process* PID:3558 PPID:1131 User:turnkey Uptime:23926 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 17 15:11:53 instance-1 lfd[137741]: *User Processing* PID:137737 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:11:53 instance-1 lfd[137741]: *User Processing* PID:3558 Kill:0 User:turnkey Time:23926 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 17 15:14:53 instance-1 lfd[138744]: *User Processing* PID:138737 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:18:53 instance-1 lfd[140149]: *User Processing* PID:140143 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 15:20:54 instance-1 lfd[140792]: *User Processing* PID:140788 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:21:54 instance-1 lfd[141216]: *User Processing* PID:141204 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:21:54 instance-1 lfd[141216]: *User Processing* PID:141208 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:21:54 instance-1 lfd[141216]: *User Processing* PID:141210 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:22:54 instance-1 lfd[141549]: *User Processing* PID:141541 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:24:54 instance-1 lfd[142158]: *User Processing* PID:142153 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:25:54 instance-1 lfd[142505]: *User Processing* PID:142499 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:26:54 instance-1 lfd[142929]: *User Processing* PID:142925 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:26:54 instance-1 lfd[142929]: *User Processing* PID:142923 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:27:54 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 15:27:54 instance-1 lfd[143226]: *User Processing* PID:143215 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:28:54 instance-1 lfd[143522]: *User Processing* PID:143518 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:32:54 instance-1 lfd[144946]: *User Processing* PID:144937 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:33:54 instance-1 lfd[145294]: *User Processing* PID:145286 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:35:54 instance-1 lfd[145969]: *User Processing* PID:145960 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:36:54 instance-1 lfd[146394]: *User Processing* PID:146384 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:36:54 instance-1 lfd[146394]: *User Processing* PID:146390 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:37:54 instance-1 lfd[146767]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 15:37:54 instance-1 lfd[146767]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 15:39:54 instance-1 lfd[147391]: *User Processing* PID:147384 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:41:54 instance-1 lfd[148189]: *User Processing* PID:148185 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:43:54 instance-1 lfd[148838]: *User Processing* PID:148828 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:43:54 instance-1 lfd[148838]: *User Processing* PID:148830 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:44:54 instance-1 lfd[149151]: *User Processing* PID:149144 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:44:54 instance-1 lfd[149151]: *User Processing* PID:149142 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:45:54 instance-1 lfd[149550]: *User Processing* PID:149546 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:46:54 instance-1 lfd[150039]: *User Processing* PID:150030 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:46:54 instance-1 lfd[150039]: *User Processing* PID:150032 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:47:54 instance-1 lfd[150362]: *User Processing* PID:150352 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:47:54 instance-1 lfd[150362]: *User Processing* PID:150309 Kill:0 User:nexpavecau VM:543(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150627 Kill:0 User:nexpavecau VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150610 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150707 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150712 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:49:54 instance-1 lfd[151112]: *User Processing* PID:151108 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:50:54 instance-1 lfd[151487]: *User Processing* PID:151483 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:50:54 instance-1 lfd[151487]: *User Processing* PID:151478 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:51:54 instance-1 lfd[151936]: *User Processing* PID:151929 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:52:54 instance-1 lfd[152257]: *User Processing* PID:152248 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:53:54 instance-1 lfd[152661]: *User Processing* PID:152643 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:53:54 instance-1 lfd[152661]: *User Processing* PID:152614 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:54:54 instance-1 lfd[152969]: *User Processing* PID:152965 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:54:54 instance-1 lfd[152969]: *User Processing* PID:152960 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:56:54 instance-1 lfd[153726]: *User Processing* PID:153643 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:56:55 instance-1 lfd[153726]: *User Processing* PID:153689 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:57:54 instance-1 lfd[154109]: *User Processing* PID:154101 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:58:54 instance-1 lfd[154409]: *User Processing* PID:154401 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:59:54 instance-1 lfd[154714]: *User Processing* PID:154706 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 15:59:55 instance-1 lfd[154714]: *User Processing* PID:154710 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:00:55 instance-1 lfd[155075]: *User Processing* PID:155069 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:00:55 instance-1 lfd[155075]: *User Processing* PID:155071 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:02:55 instance-1 lfd[155830]: *User Processing* PID:155814 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:02:55 instance-1 lfd[155830]: *User Processing* PID:155820 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:03:55 instance-1 lfd[156198]: *User Processing* PID:156194 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:04:55 instance-1 lfd[156537]: *User Processing* PID:156533 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:06:55 instance-1 lfd[157159]: *User Processing* PID:157155 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:06:55 instance-1 lfd[157159]: *User Processing* PID:157150 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:12:55 instance-1 lfd[159325]: *User Processing* PID:159311 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:12:55 instance-1 lfd[159325]: *User Processing* PID:159313 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:13:55 instance-1 lfd[159649]: *User Processing* PID:159642 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:14:55 instance-1 lfd[160016]: *User Processing* PID:160005 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:14:55 instance-1 lfd[160016]: *User Processing* PID:160009 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:14:55 instance-1 lfd[160016]: *User Processing* PID:159829 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:15:55 instance-1 lfd[160397]: *User Processing* PID:160391 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:16:55 instance-1 lfd[160682]: *User Processing* PID:160676 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:16:55 instance-1 lfd[160682]: *User Processing* PID:160678 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:17:55 instance-1 lfd[160974]: *User Processing* PID:160965 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:17:55 instance-1 lfd[160974]: *User Processing* PID:160960 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:18:55 instance-1 lfd[161409]: *User Processing* PID:161405 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:18:55 instance-1 lfd[161409]: *User Processing* PID:161400 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:19:55 instance-1 lfd[161709]: *User Processing* PID:161700 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:19:55 instance-1 lfd[161709]: *User Processing* PID:161702 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:22:55 instance-1 lfd[162680]: *User Processing* PID:162667 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:22:55 instance-1 lfd[162680]: *User Processing* PID:162664 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:24:55 instance-1 lfd[163397]: *User Processing* PID:163387 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:27:55 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 16:27:55 instance-1 lfd[164382]: *User Processing* PID:164368 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:29:55 instance-1 lfd[165073]: *User Processing* PID:165062 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:29:55 instance-1 lfd[165073]: *User Processing* PID:165069 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:32:55 instance-1 lfd[166241]: *User Processing* PID:166226 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:32:56 instance-1 lfd[166241]: *User Processing* PID:166233 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:33:57 instance-1 lfd[166893]: *User Processing* PID:166858 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:33:58 instance-1 lfd[166893]: *User Processing* PID:166876 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:33:58 instance-1 lfd[166893]: *User Processing* PID:166859 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:33:59 instance-1 lfd[166893]: *User Processing* PID:166843 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:34:00 instance-1 lfd[166893]: *User Processing* PID:166873 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:34:02 instance-1 lfd[166893]: *User Processing* PID:166862 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:34:03 instance-1 lfd[166893]: *User Processing* PID:166878 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:34:04 instance-1 lfd[166893]: *User Processing* PID:166793 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 16:34:05 instance-1 lfd[166893]: *User Processing* PID:166877 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:34:26 instance-1 lfd[167267]: *LOAD* 5 minute load average is 6.50, threshold is 6 - email sent
Mar 17 16:34:56 instance-1 lfd[167559]: *Excessive Processes* User:winslow Kill:0 Process Count:13
Mar 17 16:34:57 instance-1 lfd[167559]: *User Processing* PID:167522 Kill:0 User:mainpoint VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:34:58 instance-1 lfd[167559]: *User Processing* PID:167545 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:34:59 instance-1 lfd[167559]: *User Processing* PID:167540 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:00 instance-1 lfd[167559]: *User Processing* PID:167489 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:01 instance-1 lfd[167559]: *User Processing* PID:167505 Kill:0 User:independent VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:01 instance-1 lfd[167559]: *User Processing* PID:167292 Kill:0 User:comphomes VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:56 instance-1 lfd[168208]: *User Processing* PID:168192 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:56 instance-1 lfd[168208]: *User Processing* PID:168194 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:56 instance-1 lfd[168208]: *User Processing* PID:168203 Kill:0 User:independent VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:57 instance-1 lfd[168208]: *User Processing* PID:168197 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:35:57 instance-1 lfd[168208]: *User Processing* PID:168195 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:36:56 instance-1 lfd[168793]: *User Processing* PID:168787 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:36:56 instance-1 lfd[168793]: *User Processing* PID:168783 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:36:57 instance-1 lfd[168793]: *User Processing* PID:168781 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:36:57 instance-1 lfd[168793]: *User Processing* PID:168780 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:36:58 instance-1 lfd[168793]: *User Processing* PID:168785 Kill:0 User:comphomes VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:36:58 instance-1 lfd[168793]: *User Processing* PID:168784 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:37:56 instance-1 lfd[169398]: *User Processing* PID:169383 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:37:57 instance-1 lfd[169398]: *User Processing* PID:169386 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:37:57 instance-1 lfd[169398]: *User Processing* PID:169373 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:37:58 instance-1 lfd[169398]: *User Processing* PID:169338 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:37:58 instance-1 lfd[169398]: *User Processing* PID:169377 Kill:0 User:mainpoint VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:37:59 instance-1 lfd[169398]: *User Processing* PID:169390 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:37:59 instance-1 lfd[169398]: *User Processing* PID:169378 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:38:26 instance-1 lfd[169397]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 16:38:26 instance-1 lfd[169397]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 16:38:56 instance-1 lfd[170147]: *User Processing* PID:170118 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:38:57 instance-1 lfd[170147]: *User Processing* PID:170127 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:38:57 instance-1 lfd[170147]: *User Processing* PID:170136 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:38:58 instance-1 lfd[170147]: *User Processing* PID:170132 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:39:56 instance-1 lfd[170755]: *User Processing* PID:170742 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:39:57 instance-1 lfd[170755]: *User Processing* PID:170735 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:39:57 instance-1 lfd[170755]: *User Processing* PID:170749 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:39:57 instance-1 lfd[170755]: *User Processing* PID:170745 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:40:57 instance-1 lfd[171401]: *User Processing* PID:171394 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:40:57 instance-1 lfd[171401]: *User Processing* PID:171383 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:40:58 instance-1 lfd[171401]: *User Processing* PID:171375 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:40:58 instance-1 lfd[171401]: *User Processing* PID:171395 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:40:59 instance-1 lfd[171401]: *User Processing* PID:171384 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:40:59 instance-1 lfd[171401]: *User Processing* PID:171396 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:40:59 instance-1 lfd[171401]: *User Processing* PID:171373 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:41:57 instance-1 lfd[172005]: *User Processing* PID:172000 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:41:57 instance-1 lfd[172005]: *User Processing* PID:171987 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:41:57 instance-1 lfd[172005]: *User Processing* PID:171984 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:41:58 instance-1 lfd[172005]: *User Processing* PID:171996 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:41:58 instance-1 lfd[172005]: *User Processing* PID:171992 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:41:58 instance-1 lfd[172005]: *User Processing* PID:171998 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:42:57 instance-1 lfd[172609]: *User Processing* PID:172597 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:42:58 instance-1 lfd[172609]: *User Processing* PID:172601 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:42:58 instance-1 lfd[172609]: *User Processing* PID:172579 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:42:58 instance-1 lfd[172609]: *User Processing* PID:172592 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:42:59 instance-1 lfd[172609]: *User Processing* PID:172599 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:42:59 instance-1 lfd[172609]: *User Processing* PID:172578 Kill:0 User:tuscomau VM:567(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:42:59 instance-1 lfd[172609]: *User Processing* PID:172583 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:43:00 instance-1 lfd[172609]: *User Processing* PID:172589 Kill:0 User:independent VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:43:57 instance-1 lfd[173350]: *User Processing* PID:173335 Kill:0 User:eyrescom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:43:58 instance-1 lfd[173350]: *User Processing* PID:173322 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:43:58 instance-1 lfd[173350]: *User Processing* PID:173339 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:43:59 instance-1 lfd[173350]: *User Processing* PID:173306 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:43:59 instance-1 lfd[173350]: *User Processing* PID:173342 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:43:59 instance-1 lfd[173350]: *User Processing* PID:173324 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:44:57 instance-1 lfd[173948]: *User Processing* PID:173918 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:44:58 instance-1 lfd[173948]: *User Processing* PID:173920 Kill:0 User:independent VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:44:58 instance-1 lfd[173948]: *User Processing* PID:173928 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:44:58 instance-1 lfd[173948]: *User Processing* PID:173931 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:44:59 instance-1 lfd[173948]: *User Processing* PID:173933 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:44:59 instance-1 lfd[173948]: *User Processing* PID:173940 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:45:57 instance-1 lfd[174608]: *User Processing* PID:174587 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:45:58 instance-1 lfd[174608]: *User Processing* PID:174601 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:45:58 instance-1 lfd[174608]: *User Processing* PID:174594 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:46:57 instance-1 lfd[175186]: *User Processing* PID:175176 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:46:58 instance-1 lfd[175186]: *User Processing* PID:175170 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:46:58 instance-1 lfd[175186]: *User Processing* PID:175153 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:46:58 instance-1 lfd[175186]: *User Processing* PID:175157 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:46:59 instance-1 lfd[175186]: *User Processing* PID:175175 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:46:59 instance-1 lfd[175186]: *User Processing* PID:175168 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:47:58 instance-1 lfd[175786]: *User Processing* PID:175758 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:47:58 instance-1 lfd[175786]: *User Processing* PID:175777 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:48:58 instance-1 lfd[176514]: *User Processing* PID:176501 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:48:58 instance-1 lfd[176514]: *User Processing* PID:176508 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:48:58 instance-1 lfd[176514]: *User Processing* PID:176498 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:49:58 instance-1 lfd[177096]: *User Processing* PID:177089 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:49:58 instance-1 lfd[177096]: *User Processing* PID:177086 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:49:58 instance-1 lfd[177096]: *User Processing* PID:177090 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:49:59 instance-1 lfd[177096]: *User Processing* PID:177083 Kill:0 User:mainpoint VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:50:58 instance-1 lfd[177735]: *User Processing* PID:177729 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:51:58 instance-1 lfd[178286]: *User Processing* PID:178274 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:51:58 instance-1 lfd[178286]: *User Processing* PID:178279 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:51:58 instance-1 lfd[178286]: *User Processing* PID:178276 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:52:58 instance-1 lfd[178857]: *User Processing* PID:178831 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:52:59 instance-1 lfd[178857]: *User Processing* PID:178848 Kill:0 User:foster VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:52:59 instance-1 lfd[178857]: *User Processing* PID:178859 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:52:59 instance-1 lfd[178857]: *User Processing* PID:178846 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:53:58 instance-1 lfd[179624]: *User Processing* PID:179616 Kill:0 User:mainpoint VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:53:58 instance-1 lfd[179624]: *User Processing* PID:179621 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:54:58 instance-1 lfd[180255]: *User Processing* PID:180244 Kill:0 User:winslow VM:520(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180237 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180240 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180246 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180239 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:55:00 instance-1 lfd[180255]: *User Processing* PID:180247 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:55:58 instance-1 lfd[180901]: *User Processing* PID:180895 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:55:59 instance-1 lfd[180901]: *User Processing* PID:180883 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:56:59 instance-1 lfd[181470]: *User Processing* PID:181447 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:56:59 instance-1 lfd[181470]: *User Processing* PID:181458 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:56:59 instance-1 lfd[181470]: *User Processing* PID:181465 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:57:00 instance-1 lfd[181470]: *User Processing* PID:181455 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:57:59 instance-1 lfd[182079]: *User Processing* PID:182054 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:57:59 instance-1 lfd[182079]: *User Processing* PID:182066 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:57:59 instance-1 lfd[182079]: *User Processing* PID:182062 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:58:00 instance-1 lfd[182079]: *User Processing* PID:182051 Kill:0 User:mainpoint VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:58:59 instance-1 lfd[182811]: *User Processing* PID:182803 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:58:59 instance-1 lfd[182811]: *User Processing* PID:182798 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:58:59 instance-1 lfd[182811]: *User Processing* PID:182801 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:59:00 instance-1 lfd[182811]: *User Processing* PID:182799 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:59:59 instance-1 lfd[183415]: *User Processing* PID:183402 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:59:59 instance-1 lfd[183415]: *User Processing* PID:183404 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 16:59:59 instance-1 lfd[183415]: *User Processing* PID:183401 Kill:0 User:independent VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:00:00 instance-1 lfd[183415]: *User Processing* PID:183406 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:00:00 instance-1 lfd[183415]: *User Processing* PID:183392 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:00:00 instance-1 lfd[183415]: *User Processing* PID:183411 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:00:01 instance-1 lfd[183415]: *User Processing* PID:183405 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:00:59 instance-1 lfd[184082]: *User Processing* PID:184062 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:00:59 instance-1 lfd[184082]: *User Processing* PID:184061 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:00:59 instance-1 lfd[184082]: *User Processing* PID:184066 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:01:59 instance-1 lfd[184686]: *User Processing* PID:184674 Kill:0 User:independent VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:01:59 instance-1 lfd[184686]: *User Processing* PID:184678 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:02:00 instance-1 lfd[184686]: *User Processing* PID:184663 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:02:00 instance-1 lfd[184686]: *User Processing* PID:184677 Kill:0 User:mainpoint VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:02:59 instance-1 lfd[185293]: *User Processing* PID:185282 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:03:00 instance-1 lfd[185293]: *User Processing* PID:185276 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:03:00 instance-1 lfd[185293]: *User Processing* PID:185280 Kill:0 User:foster VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:03:00 instance-1 lfd[185293]: *User Processing* PID:185269 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:03:59 instance-1 lfd[186030]: *User Processing* PID:186018 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:04:00 instance-1 lfd[186030]: *User Processing* PID:186019 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:04:00 instance-1 lfd[186030]: *User Processing* PID:186021 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:04:01 instance-1 lfd[186030]: *User Processing* PID:185652 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 17 17:04:01 instance-1 lfd[186030]: *User Processing* PID:186013 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:04:59 instance-1 lfd[186652]: *User Processing* PID:186642 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:05:00 instance-1 lfd[186652]: *User Processing* PID:186648 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:05:00 instance-1 lfd[186652]: *User Processing* PID:186595 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 17:07:00 instance-1 lfd[187838]: *User Processing* PID:187828 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:07:00 instance-1 lfd[187838]: *User Processing* PID:187829 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:07:00 instance-1 lfd[187838]: *User Processing* PID:187819 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:07:01 instance-1 lfd[187838]: *User Processing* PID:187814 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:07:01 instance-1 lfd[187838]: *User Processing* PID:187831 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:07:01 instance-1 lfd[187838]: *User Processing* PID:187825 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:08:00 instance-1 lfd[188434]: *User Processing* PID:188419 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:08:00 instance-1 lfd[188434]: *User Processing* PID:188421 Kill:0 User:independent VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:08:00 instance-1 lfd[188434]: *User Processing* PID:188422 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:09:00 instance-1 lfd[189103]: *User Processing* PID:189065 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:09:00 instance-1 lfd[189103]: *User Processing* PID:189080 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:09:01 instance-1 lfd[189103]: *User Processing* PID:189060 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:10:00 instance-1 lfd[189729]: *User Processing* PID:189719 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:10:00 instance-1 lfd[189729]: *User Processing* PID:189712 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:10:01 instance-1 lfd[189729]: *User Processing* PID:189721 Kill:0 User:eyrescom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:10:01 instance-1 lfd[189729]: *User Processing* PID:189720 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:11:00 instance-1 lfd[190341]: *User Processing* PID:190333 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190328 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190331 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190330 Kill:0 User:independent VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190332 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:12:00 instance-1 lfd[190921]: *User Processing* PID:190908 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:12:01 instance-1 lfd[190921]: *User Processing* PID:190910 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:12:01 instance-1 lfd[190921]: *User Processing* PID:190911 Kill:0 User:independent VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:13:00 instance-1 lfd[191508]: *User Processing* PID:191496 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:13:01 instance-1 lfd[191508]: *User Processing* PID:191474 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 17:13:01 instance-1 lfd[191508]: *User Processing* PID:191493 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:13:02 instance-1 lfd[191508]: *User Processing* PID:191497 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:13:02 instance-1 lfd[191508]: *User Processing* PID:191485 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:14:01 instance-1 lfd[192092]: *User Processing* PID:192079 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:14:01 instance-1 lfd[192092]: *User Processing* PID:192076 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:14:01 instance-1 lfd[192092]: *User Processing* PID:192020 Kill:0 User:surveyms VM:582(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 17:14:02 instance-1 lfd[192092]: *User Processing* PID:192084 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:14:02 instance-1 lfd[192092]: *User Processing* PID:192085 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:15:01 instance-1 lfd[192828]: *User Processing* PID:192814 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:15:01 instance-1 lfd[192828]: *User Processing* PID:192818 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:15:01 instance-1 lfd[192828]: *User Processing* PID:192819 Kill:0 User:independent VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:15:02 instance-1 lfd[192828]: *User Processing* PID:192817 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:16:01 instance-1 lfd[193468]: *User Processing* PID:193443 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:16:01 instance-1 lfd[193468]: *User Processing* PID:193437 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:17:01 instance-1 lfd[194028]: *User Processing* PID:194015 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:17:01 instance-1 lfd[194028]: *User Processing* PID:194024 Kill:0 User:independent VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194025 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194008 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194014 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194011 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:17:03 instance-1 lfd[194028]: *User Processing* PID:194023 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:18:01 instance-1 lfd[194619]: *User Processing* PID:194608 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:18:01 instance-1 lfd[194619]: *User Processing* PID:194598 Kill:0 User:mainpoint VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:18:02 instance-1 lfd[194619]: *User Processing* PID:194607 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:19:01 instance-1 lfd[195215]: *User Processing* PID:195206 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:19:01 instance-1 lfd[195215]: *User Processing* PID:195208 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:19:02 instance-1 lfd[195215]: *User Processing* PID:195198 Kill:0 User:comphomes VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:20:01 instance-1 lfd[195908]: *User Processing* PID:195898 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:20:02 instance-1 lfd[195908]: *User Processing* PID:195899 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:20:02 instance-1 lfd[195908]: *User Processing* PID:195896 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:21:01 instance-1 lfd[196509]: *User Processing* PID:196493 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:22:01 instance-1 lfd[197064]: *User Processing* PID:197048 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:22:02 instance-1 lfd[197064]: *User Processing* PID:197042 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:22:02 instance-1 lfd[197064]: *User Processing* PID:197046 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:22:02 instance-1 lfd[197064]: *User Processing* PID:197043 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:23:01 instance-1 lfd[197615]: *User Processing* PID:197596 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:23:02 instance-1 lfd[197615]: *User Processing* PID:197600 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:23:02 instance-1 lfd[197615]: *User Processing* PID:197606 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:24:02 instance-1 lfd[198181]: *User Processing* PID:198167 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:24:02 instance-1 lfd[198181]: *User Processing* PID:198168 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:25:02 instance-1 lfd[198854]: *User Processing* PID:198826 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:25:02 instance-1 lfd[198854]: *User Processing* PID:198821 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:25:02 instance-1 lfd[198854]: *User Processing* PID:198820 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:26:02 instance-1 lfd[199425]: *User Processing* PID:199408 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:26:02 instance-1 lfd[199425]: *User Processing* PID:199413 Kill:0 User:comphomes VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:27:02 instance-1 lfd[199957]: *User Processing* PID:199951 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:27:57 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 17:28:02 instance-1 lfd[200526]: *User Processing* PID:200507 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:28:02 instance-1 lfd[200526]: *User Processing* PID:200225 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 17:28:03 instance-1 lfd[200526]: *User Processing* PID:200504 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:28:03 instance-1 lfd[200526]: *User Processing* PID:200506 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:29:02 instance-1 lfd[201085]: *User Processing* PID:201075 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:30:02 instance-1 lfd[201786]: *User Processing* PID:201721 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:30:03 instance-1 lfd[201786]: *User Processing* PID:201765 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:30:03 instance-1 lfd[201786]: *User Processing* PID:201782 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:30:03 instance-1 lfd[201786]: *User Processing* PID:201722 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:31:02 instance-1 lfd[202356]: *User Processing* PID:202348 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:31:02 instance-1 lfd[202356]: *User Processing* PID:202353 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:32:02 instance-1 lfd[202965]: *User Processing* PID:202954 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:32:03 instance-1 lfd[202965]: *User Processing* PID:202930 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:33:03 instance-1 lfd[203537]: *User Processing* PID:203528 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:33:03 instance-1 lfd[203537]: *User Processing* PID:203526 Kill:0 User:comphomes VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:33:03 instance-1 lfd[203537]: *User Processing* PID:203530 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:34:03 instance-1 lfd[204098]: *User Processing* PID:204089 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:34:33 instance-1 lfd[204402]: *LOAD* 5 minute load average is 7.90, threshold is 6 - email sent
Mar 17 17:35:03 instance-1 lfd[204821]: *User Processing* PID:204818 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:36:03 instance-1 lfd[205368]: *User Processing* PID:205363 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:36:03 instance-1 lfd[205368]: *User Processing* PID:205359 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205884 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205890 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205891 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205889 Kill:0 User:comphomes VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:37:04 instance-1 lfd[205898]: *User Processing* PID:205885 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:38:03 instance-1 lfd[206463]: *User Processing* PID:206451 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:38:03 instance-1 lfd[206463]: *User Processing* PID:206453 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:38:04 instance-1 lfd[206463]: *User Processing* PID:206450 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:39:03 instance-1 lfd[207016]: *User Processing* PID:207006 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:40:03 instance-1 lfd[207728]: *User Processing* PID:207721 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:41:03 instance-1 lfd[208262]: *User Processing* PID:208234 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:42:03 instance-1 lfd[208786]: *User Processing* PID:208779 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:43:04 instance-1 lfd[209317]: *User Processing* PID:209302 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:43:04 instance-1 lfd[209317]: *User Processing* PID:209303 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:43:04 instance-1 lfd[209316]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 17:43:05 instance-1 lfd[209316]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 17:44:03 instance-1 lfd[209863]: *User Processing* PID:209846 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:44:04 instance-1 lfd[209863]: *User Processing* PID:209858 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:44:04 instance-1 lfd[209863]: *User Processing* PID:209853 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:45:04 instance-1 lfd[210581]: *User Processing* PID:210577 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:45:04 instance-1 lfd[210581]: *User Processing* PID:210569 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:46:04 instance-1 lfd[211127]: *User Processing* PID:211123 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:47:04 instance-1 lfd[211643]: *User Processing* PID:211633 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:47:04 instance-1 lfd[211643]: *User Processing* PID:211638 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:47:04 instance-1 lfd[211643]: *User Processing* PID:211632 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:48:04 instance-1 lfd[212041]: *User Processing* PID:212030 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:49:04 instance-1 lfd[212352]: *User Processing* PID:212345 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:49:04 instance-1 lfd[212352]: *User Processing* PID:212346 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:50:04 instance-1 lfd[212854]: *User Processing* PID:212848 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:52:04 instance-1 lfd[213452]: *User Processing* PID:213449 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:53:04 instance-1 lfd[213731]: *User Processing* PID:213724 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 17:55:04 instance-1 lfd[214565]: *User Processing* PID:214562 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:00:04 instance-1 lfd[216198]: *User Processing* PID:216195 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:02:04 instance-1 lfd[216766]: *User Processing* PID:216763 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:07:04 instance-1 lfd[218334]: *User Processing* PID:218331 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:08:04 instance-1 lfd[218607]: *User Processing* PID:218599 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:09:04 instance-1 lfd[218896]: *User Processing* PID:218890 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:17:04 instance-1 lfd[221628]: *User Processing* PID:221625 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:18:04 instance-1 lfd[221924]: *User Processing* PID:221916 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:25:05 instance-1 lfd[224154]: *User Processing* PID:224121 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:25:26 instance-1 lfd[224366]: (smtpauth) Failed SMTP AUTH login from 181.26.234.170 (AR/Argentina/181-26-234-170.speedy.com.ar): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 17 18:28:00 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 18:30:05 instance-1 lfd[225700]: *User Processing* PID:225697 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:34:05 instance-1 lfd[226993]: *User Processing* PID:226990 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:38:05 instance-1 lfd[228440]: *User Processing* PID:228429 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:39:05 instance-1 lfd[228748]: *User Processing* PID:228741 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:43:05 instance-1 lfd[230074]: *User Processing* PID:230062 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:43:05 instance-1 lfd[230072]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 18:43:05 instance-1 lfd[230072]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 18:47:05 instance-1 lfd[231420]: *User Processing* PID:231413 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:48:05 instance-1 lfd[231714]: *User Processing* PID:231702 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:49:05 instance-1 lfd[232016]: *User Processing* PID:232012 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:50:05 instance-1 lfd[232437]: *User Processing* PID:232431 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:50:05 instance-1 lfd[232437]: *User Processing* PID:232433 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:51:05 instance-1 lfd[232807]: *User Processing* PID:232803 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 18:58:06 instance-1 lfd[235191]: *User Processing* PID:235180 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:08:06 instance-1 lfd[238579]: *User Processing* PID:238569 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:13:06 instance-1 lfd[240372]: *User Processing* PID:240363 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:14:06 instance-1 lfd[240684]: *User Processing* PID:240677 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:17:06 instance-1 lfd[241657]: *User Processing* PID:241653 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:21:06 instance-1 lfd[243135]: *User Processing* PID:243123 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 19:21:06 instance-1 lfd[243135]: *User Processing* PID:243131 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:22:06 instance-1 lfd[243461]: *User Processing* PID:243449 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 19:22:06 instance-1 lfd[243461]: *User Processing* PID:243453 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:28:02 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 19:28:07 instance-1 lfd[245770]: *User Processing* PID:245761 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:30:07 instance-1 lfd[246449]: *User Processing* PID:246442 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:30:07 instance-1 lfd[246449]: *User Processing* PID:246435 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 19:32:07 instance-1 lfd[247140]: *User Processing* PID:247132 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 19:32:07 instance-1 lfd[247140]: *User Processing* PID:247131 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 19:33:07 instance-1 lfd[247616]: *User Processing* PID:247605 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:35:07 instance-1 lfd[248270]: *User Processing* PID:248265 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:37:07 instance-1 lfd[248877]: *User Processing* PID:248870 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:38:07 instance-1 lfd[249335]: *User Processing* PID:249326 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:40:07 instance-1 lfd[249986]: *User Processing* PID:249980 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:42:07 instance-1 lfd[250681]: *User Processing* PID:250674 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:43:07 instance-1 lfd[251165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 19:43:07 instance-1 lfd[251165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 19:44:07 instance-1 lfd[251509]: *User Processing* PID:251504 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:45:07 instance-1 lfd[251878]: *User Processing* PID:251870 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:46:07 instance-1 lfd[252220]: *User Processing* PID:252211 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 19:47:07 instance-1 lfd[252553]: *User Processing* PID:252536 Kill:0 User:surveyms VM:595(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 19:48:07 instance-1 lfd[253074]: *User Processing* PID:253066 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:50:07 instance-1 lfd[253784]: *User Processing* PID:253780 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:54:08 instance-1 lfd[255241]: *User Processing* PID:255237 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 19:58:08 instance-1 lfd[256431]: *User Processing* PID:256423 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:00:08 instance-1 lfd[257143]: *User Processing* PID:257134 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 20:01:08 instance-1 lfd[257437]: *User Processing* PID:257433 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:03:08 instance-1 lfd[258060]: *User Processing* PID:258049 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:08:08 instance-1 lfd[259747]: *User Processing* PID:259737 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:16:08 instance-1 lfd[262435]: *User Processing* PID:262429 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:24:09 instance-1 lfd[265057]: *User Processing* PID:265052 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:24:09 instance-1 lfd[265057]: *User Processing* PID:265051 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:27:09 instance-1 lfd[266041]: *Excessive Processes* User:rcpacom Kill:0 Process Count:12
Mar 17 20:28:04 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 20:30:09 instance-1 lfd[267117]: *User Processing* PID:267112 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:31:09 instance-1 lfd[267513]: *User Processing* PID:267509 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:36:09 instance-1 lfd[269272]: *User Processing* PID:269265 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:37:09 instance-1 lfd[269693]: *User Processing* PID:269689 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:37:09 instance-1 lfd[269693]: *User Processing* PID:269686 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:38:09 instance-1 lfd[270069]: *User Processing* PID:270056 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:39:09 instance-1 lfd[270548]: *User Processing* PID:270541 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:39:09 instance-1 lfd[270548]: *User Processing* PID:270543 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:42:09 instance-1 lfd[271504]: *User Processing* PID:271386 Kill:0 User:bmswinslow VM:694(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:42:09 instance-1 lfd[271504]: *User Processing* PID:271367 Kill:0 User:bmswinslow VM:608(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:43:09 instance-1 lfd[271855]: *User Processing* PID:271841 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:43:09 instance-1 lfd[271855]: *User Processing* PID:271842 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:43:10 instance-1 lfd[271853]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 20:43:10 instance-1 lfd[271853]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 20:49:09 instance-1 lfd[274170]: *User Processing* PID:274163 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:50:09 instance-1 lfd[274538]: *User Processing* PID:274533 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:52:09 instance-1 lfd[275184]: *User Processing* PID:275177 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:52:10 instance-1 lfd[275184]: *User Processing* PID:275145 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 17 20:54:10 instance-1 lfd[276099]: *User Processing* PID:276093 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:55:10 instance-1 lfd[276432]: *User Processing* PID:276397 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 20:55:10 instance-1 lfd[276432]: *User Processing* PID:276426 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 20:57:10 instance-1 lfd[277078]: *User Processing* PID:277053 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 21:00:10 instance-1 lfd[278163]: *User Processing* PID:278158 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:02:10 instance-1 lfd[278769]: *User Processing* PID:278764 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:04:10 instance-1 lfd[279526]: *User Processing* PID:279522 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:05:10 instance-1 lfd[279855]: *User Processing* PID:279851 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:11:10 instance-1 lfd[281815]: *User Processing* PID:281810 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:11:10 instance-1 lfd[281815]: *User Processing* PID:281734 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:12:10 instance-1 lfd[282133]: *User Processing* PID:282017 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:13:10 instance-1 lfd[282448]: *User Processing* PID:282359 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:14:10 instance-1 lfd[282878]: *User Processing* PID:282677 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:14:10 instance-1 lfd[282878]: *User Processing* PID:282874 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:15:10 instance-1 lfd[283241]: *User Processing* PID:283224 Kill:0 User:bmswinslow VM:654(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:15:10 instance-1 lfd[283241]: *User Processing* PID:283231 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:16:10 instance-1 lfd[283560]: *User Processing* PID:283554 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:16:10 instance-1 lfd[283560]: *User Processing* PID:283550 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 21:21:11 instance-1 lfd[285238]: *User Processing* PID:285234 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:24:11 instance-1 lfd[286064]: *User Processing* PID:286059 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:26:04 instance-1 lfd[1726]: Main Process: TERM
Mar 17 21:26:04 instance-1 lfd[1726]: daemon stopped
Mar 17 21:30:34 instance-1 lfd[1350]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 17 21:30:34 instance-1 lfd[1350]: LF_APACHE_ERRPORT: Set to [2]
Mar 17 21:30:35 instance-1 lfd[1350]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 17 21:30:35 instance-1 lfd[1350]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 17 21:30:35 instance-1 lfd[1350]: CSF Tracking...
Mar 17 21:30:35 instance-1 lfd[1350]: iptables appears to have been flushed - running *csf startup*...
Mar 17 21:30:42 instance-1 lfd[1350]: csf startup completed
Mar 17 21:30:42 instance-1 lfd[1350]: IPv6 Enabled...
Mar 17 21:30:42 instance-1 lfd[1350]: LOAD Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 17 21:30:42 instance-1 lfd[1350]: Country Code Lookups...
Mar 17 21:30:42 instance-1 lfd[1350]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 21:30:42 instance-1 lfd[1350]: System Integrity Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Exploit Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Directory Watching...
Mar 17 21:30:42 instance-1 lfd[1350]: Email Queue Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: ModSecurity IP D/B Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Email Relay Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Temp to Perm Block Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: System Statistics...
Mar 17 21:30:42 instance-1 lfd[1350]: Process Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Account Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: SSH Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Webmin Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: SU Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Console Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: WHM Tracking...
Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/exim_mainlog...
Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/maillog...
Mar 17 21:30:42 instance-1 lfd[1350]: Watching /usr/local/cpanel/logs/login_log...
Mar 17 21:30:42 instance-1 lfd[1350]: Watching /etc/apache2/logs/error_log...
Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/customlog...
Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/secure...
Mar 17 21:30:42 instance-1 lfd[1350]: Watching /usr/local/cpanel/logs/access_log...
Mar 17 21:30:43 instance-1 lfd[1350]: Watching /var/log/messages...
Mar 17 21:31:43 instance-1 lfd[2415]: *User Processing* PID:2411 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:31:43 instance-1 lfd[2415]: *User Processing* PID:2398 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:31:53 instance-1 lfd[2523]: *SU login* from account rgv250(uid=0) to account root: Successful login
Mar 17 21:32:43 instance-1 lfd[2779]: *User Processing* PID:2774 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:32:43 instance-1 lfd[2779]: *User Processing* PID:2733 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:36:17 instance-1 lfd[3651]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 21:36:17 instance-1 lfd[3651]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 21:38:43 instance-1 lfd[4500]: *User Processing* PID:4487 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:41:43 instance-1 lfd[5458]: *User Processing* PID:5424 Kill:0 User:bmswinslow VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 21:45:43 instance-1 lfd[6468]: *User Processing* PID:6450 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 21:47:43 instance-1 lfd[7102]: *User Processing* PID:7093 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 17 22:01:47 instance-1 lfd[12858]: *User Processing* PID:12854 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 22:04:48 instance-1 lfd[13897]: *User Processing* PID:13893 Kill:0 User:mainpoint VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 22:06:48 instance-1 lfd[14687]: *User Processing* PID:14683 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 22:06:48 instance-1 lfd[14687]: *User Processing* PID:14677 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 22:09:48 instance-1 lfd[15460]: *User Processing* PID:15453 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 22:30:43 instance-1 lfd[1350]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 22:40:48 instance-1 lfd[24359]: *User Processing* PID:24319 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 22:40:49 instance-1 lfd[24356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 22:40:49 instance-1 lfd[24356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 22:59:49 instance-1 lfd[30004]: *User Processing* PID:29999 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:05:49 instance-1 lfd[31908]: *User Processing* PID:31899 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:07:49 instance-1 lfd[32643]: *User Processing* PID:32639 Kill:0 User:mainpoint VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:08:49 instance-1 lfd[32950]: *User Processing* PID:32946 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:11:49 instance-1 lfd[34144]: *User Processing* PID:34138 Kill:0 User:mainpoint VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:12:49 instance-1 lfd[34687]: *User Processing* PID:34683 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:17:49 instance-1 lfd[37875]: *User Processing* PID:37871 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:19:49 instance-1 lfd[39249]: *Excessive Processes* User:nativesp Kill:0 Process Count:12
Mar 17 23:22:50 instance-1 lfd[40393]: *User Processing* PID:40386 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 17 23:30:45 instance-1 lfd[1350]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 17 23:36:50 instance-1 lfd[44355]: *User Processing* PID:44351 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:40:50 instance-1 lfd[45542]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 17 23:40:51 instance-1 lfd[45542]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 17 23:46:42 instance-1 lfd[47187]: (smtpauth) Failed SMTP AUTH login from 141.98.11.11 (axon-stall.riddlecamera.net): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 17 23:50:51 instance-1 lfd[48462]: *User Processing* PID:48454 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 17 23:50:51 instance-1 lfd[48462]: *User Processing* PID:48452 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 00:00:02 instance-1 lfd[1350]: Main Process: TERM
Mar 18 00:00:02 instance-1 lfd[1350]: daemon stopped
Mar 18 00:00:02 instance-1 lfd[51177]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 18 00:00:02 instance-1 lfd[51177]: LF_APACHE_ERRPORT: Set to [2]
Mar 18 00:00:03 instance-1 lfd[51177]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 18 00:00:03 instance-1 lfd[51177]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 18 00:00:03 instance-1 lfd[51177]: CSF Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: IPv6 Enabled...
Mar 18 00:00:03 instance-1 lfd[51177]: LOAD Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 18 00:00:03 instance-1 lfd[51177]: Country Code Lookups...
Mar 18 00:00:03 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 00:00:03 instance-1 lfd[51177]: System Integrity Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Exploit Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Directory Watching...
Mar 18 00:00:03 instance-1 lfd[51177]: Email Queue Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: ModSecurity IP D/B Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Email Relay Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Temp to Perm Block Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: System Statistics...
Mar 18 00:00:03 instance-1 lfd[51177]: Process Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Account Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: SSH Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Webmin Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: SU Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Console Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: WHM Tracking...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/messages...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/customlog...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/secure...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/maillog...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /usr/local/cpanel/logs/login_log...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /usr/local/cpanel/logs/access_log...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/exim_mainlog...
Mar 18 00:00:03 instance-1 lfd[51177]: Watching /etc/apache2/logs/error_log...
Mar 18 00:05:03 instance-1 lfd[52644]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 00:05:03 instance-1 lfd[52644]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 00:14:03 instance-1 lfd[55203]: *User Processing* PID:55195 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 00:43:04 instance-1 lfd[63585]: *User Processing* PID:63581 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 01:00:04 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 01:05:05 instance-1 lfd[70439]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 01:05:05 instance-1 lfd[70439]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 01:19:05 instance-1 lfd[74512]: *User Processing* PID:74508 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 01:26:05 instance-1 lfd[78204]: *User Processing* PID:78200 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 01:26:05 instance-1 lfd[78204]: *User Processing* PID:78195 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 01:38:05 instance-1 lfd[81690]: *User Processing* PID:81680 Kill:0 User:newswinslow VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 01:56:06 instance-1 lfd[86871]: *User Processing* PID:86864 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 02:00:06 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 02:05:07 instance-1 lfd[89569]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 02:05:07 instance-1 lfd[89569]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 02:32:07 instance-1 lfd[97348]: *User Processing* PID:97344 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 02:35:07 instance-1 lfd[98211]: *User Processing* PID:97995 Kill:0 User:newswinslow VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 02:49:08 instance-1 lfd[102088]: *User Processing* PID:102079 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 02:51:08 instance-1 lfd[102626]: *User Processing* PID:102619 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 02:51:08 instance-1 lfd[102626]: *User Processing* PID:102617 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 02:54:08 instance-1 lfd[103787]: *User Processing* PID:103759 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 02:59:08 instance-1 lfd[105451]: *User Processing* PID:105442 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:00:08 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 03:04:09 instance-1 lfd[107203]: *Excessive Processes* User:tuscomau Kill:0 Process Count:27
Mar 18 03:04:09 instance-1 lfd[107203]: *User Processing* PID:107120 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:10 instance-1 lfd[107203]: *User Processing* PID:107182 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:10 instance-1 lfd[107203]: *User Processing* PID:107132 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:10 instance-1 lfd[107203]: *User Processing* PID:107147 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:11 instance-1 lfd[107203]: *User Processing* PID:107181 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:11 instance-1 lfd[107203]: *User Processing* PID:107153 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107186 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107185 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107135 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107179 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107178 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107180 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107129 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107184 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107130 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107128 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107175 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107151 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107152 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107155 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107183 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107156 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107133 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107187 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107150 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107149 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:04:14 instance-1 lfd[107203]: *User Processing* PID:107154 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:05:22 instance-1 lfd[107716]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 03:05:22 instance-1 lfd[107716]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 03:21:09 instance-1 lfd[112232]: *User Processing* PID:112226 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:22:09 instance-1 lfd[112677]: *User Processing* PID:112673 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:24:09 instance-1 lfd[113332]: *User Processing* PID:113328 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:25:09 instance-1 lfd[113699]: *User Processing* PID:113690 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:26:09 instance-1 lfd[114027]: *User Processing* PID:114020 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:28:09 instance-1 lfd[114765]: *User Processing* PID:114758 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:30:09 instance-1 lfd[115450]: *User Processing* PID:115433 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:30:09 instance-1 lfd[115450]: *User Processing* PID:115437 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:31:09 instance-1 lfd[115764]: *User Processing* PID:115757 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:33:09 instance-1 lfd[116542]: *User Processing* PID:116366 Kill:0 User:bmswinslow VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:35:09 instance-1 lfd[117139]: *User Processing* PID:117122 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:36:09 instance-1 lfd[117444]: *User Processing* PID:117440 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:37:09 instance-1 lfd[117860]: *User Processing* PID:117856 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:39:10 instance-1 lfd[118511]: *User Processing* PID:118506 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:39:10 instance-1 lfd[118511]: *User Processing* PID:118507 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:49:42 instance-1 lfd[123321]: (smtpauth) Failed SMTP AUTH login from 165.154.252.62 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 18 03:53:10 instance-1 lfd[126492]: *User Processing* PID:126473 Kill:0 User:mainpoint VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html theme list --fields=name,status,version,title,description,update_version --format=json --quiet --skip-plugins=false --skip-themes=false
Mar 18 03:53:10 instance-1 lfd[126492]: *User Processing* PID:126340 Kill:0 User:geneticson VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 03:55:10 instance-1 lfd[128268]: *User Processing* PID:128260 Kill:0 User:bmswinslow VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html theme list --fields=name,status,version,title,description,update_version --format=json --quiet --skip-plugins=false --skip-themes=false
Mar 18 03:56:10 instance-1 lfd[129077]: *User Processing* PID:129061 Kill:0 User:comphomes VM:651(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/comphomes/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
Mar 18 03:58:10 instance-1 lfd[131304]: *User Processing* PID:131300 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 04:00:10 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 04:10:11 instance-1 lfd[134948]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 04:10:11 instance-1 lfd[134948]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 04:31:11 instance-1 lfd[141294]: *User Processing* PID:141290 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 04:32:11 instance-1 lfd[141610]: *User Processing* PID:141606 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 04:43:12 instance-1 lfd[145156]: *User Processing* PID:145152 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 04:45:12 instance-1 lfd[145766]: *User Processing* PID:145753 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 04:47:38 instance-1 lfd[146479]: (smtpauth) Failed SMTP AUTH login from 141.98.11.57 (srv-141-98-11-57.serveroffer.net): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 18 05:00:12 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 05:05:12 instance-1 lfd[152063]: *User Processing* PID:152054 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:06:12 instance-1 lfd[152336]: *User Processing* PID:152332 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:08:12 instance-1 lfd[152920]: *User Processing* PID:152916 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:09:12 instance-1 lfd[153387]: *User Processing* PID:153382 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:10:12 instance-1 lfd[153774]: *User Processing* PID:153765 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:10:13 instance-1 lfd[153771]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 05:10:13 instance-1 lfd[153771]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 05:11:12 instance-1 lfd[154103]: *User Processing* PID:154099 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:12:12 instance-1 lfd[154424]: *User Processing* PID:154420 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:12:12 instance-1 lfd[154424]: *User Processing* PID:154416 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:14:12 instance-1 lfd[155232]: *User Processing* PID:155228 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:20:13 instance-1 lfd[157518]: *User Processing* PID:157508 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:22:13 instance-1 lfd[158156]: *User Processing* PID:158152 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:28:13 instance-1 lfd[160215]: *User Processing* PID:160211 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:30:13 instance-1 lfd[161019]: *User Processing* PID:161011 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:31:13 instance-1 lfd[161375]: *User Processing* PID:161368 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:32:13 instance-1 lfd[161813]: *User Processing* PID:161806 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:33:13 instance-1 lfd[162143]: *User Processing* PID:162135 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:34:13 instance-1 lfd[162481]: *User Processing* PID:162469 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 05:35:13 instance-1 lfd[163002]: *User Processing* PID:162992 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:36:13 instance-1 lfd[163375]: *User Processing* PID:163371 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:36:13 instance-1 lfd[163375]: *User Processing* PID:163370 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:37:13 instance-1 lfd[163749]: *User Processing* PID:163694 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 05:37:13 instance-1 lfd[163749]: *User Processing* PID:163740 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:37:13 instance-1 lfd[163749]: *User Processing* PID:163741 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:39:13 instance-1 lfd[164529]: *User Processing* PID:164525 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:41:13 instance-1 lfd[165440]: *User Processing* PID:165436 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:43:13 instance-1 lfd[166163]: *User Processing* PID:166158 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:43:13 instance-1 lfd[166163]: *User Processing* PID:166159 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:44:13 instance-1 lfd[166553]: *User Processing* PID:166545 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:45:13 instance-1 lfd[167114]: *User Processing* PID:167103 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:46:13 instance-1 lfd[167495]: *User Processing* PID:167488 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:47:13 instance-1 lfd[167878]: *User Processing* PID:167874 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:48:13 instance-1 lfd[168227]: *User Processing* PID:168223 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:49:13 instance-1 lfd[168545]: *User Processing* PID:168541 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:50:13 instance-1 lfd[169037]: *User Processing* PID:169028 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:51:13 instance-1 lfd[169363]: *User Processing* PID:169359 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:52:13 instance-1 lfd[169714]: *User Processing* PID:169710 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:53:13 instance-1 lfd[170081]: *User Processing* PID:170077 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:54:19 instance-1 lfd[170541]: (pop3d) Failed POP3 login from 203.189.158.246 (KH/Cambodia/headquarter.online.com.kh): 10 in the last 3600 secs - *Blocked in csf* [LF_POP3D]
Mar 18 05:57:14 instance-1 lfd[171675]: *User Processing* PID:171669 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:58:14 instance-1 lfd[171995]: *User Processing* PID:171989 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 05:59:14 instance-1 lfd[172322]: *User Processing* PID:172316 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:00:14 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 06:00:14 instance-1 lfd[172885]: *User Processing* PID:172870 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:01:14 instance-1 lfd[173252]: *User Processing* PID:173241 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:01:14 instance-1 lfd[173252]: *User Processing* PID:173237 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:01:14 instance-1 lfd[173252]: *User Processing* PID:173239 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:02:14 instance-1 lfd[173613]: *User Processing* PID:173603 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:05:14 instance-1 lfd[174785]: *User Processing* PID:174772 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:06:14 instance-1 lfd[175124]: *User Processing* PID:175115 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:06:14 instance-1 lfd[175124]: *User Processing* PID:175120 Kill:0 User:comphomes VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:07:14 instance-1 lfd[175455]: *User Processing* PID:175443 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:10:14 instance-1 lfd[176591]: *User Processing* PID:176577 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:10:14 instance-1 lfd[176588]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 06:10:14 instance-1 lfd[176588]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 06:12:14 instance-1 lfd[177233]: *User Processing* PID:177225 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:13:14 instance-1 lfd[177550]: *User Processing* PID:177546 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:14:14 instance-1 lfd[177865]: *User Processing* PID:177854 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:15:14 instance-1 lfd[178411]: *User Processing* PID:178401 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:16:14 instance-1 lfd[178741]: *User Processing* PID:178732 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:17:14 instance-1 lfd[179080]: *User Processing* PID:179076 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:18:14 instance-1 lfd[179453]: *User Processing* PID:179445 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:19:14 instance-1 lfd[179789]: *User Processing* PID:179780 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:30:15 instance-1 lfd[183994]: *User Processing* PID:183983 Kill:0 User:comphomes VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:33:15 instance-1 lfd[184978]: *User Processing* PID:184974 Kill:0 User:yvegroup VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:34:15 instance-1 lfd[185327]: *User Processing* PID:185323 Kill:0 User:yvegroup VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:36:15 instance-1 lfd[186162]: *User Processing* PID:186156 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:38:15 instance-1 lfd[186808]: *User Processing* PID:186801 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:41:15 instance-1 lfd[187802]: *User Processing* PID:187798 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 06:49:15 instance-1 lfd[190118]: *User Processing* PID:190112 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:00:15 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 07:07:15 instance-1 lfd[195887]: *User Processing* PID:195809 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 07:10:16 instance-1 lfd[196746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 07:10:16 instance-1 lfd[196746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 07:11:16 instance-1 lfd[197183]: *User Processing* PID:197153 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 07:16:16 instance-1 lfd[198688]: *User Processing* PID:198684 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:16:16 instance-1 lfd[198688]: *User Processing* PID:198682 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:16:16 instance-1 lfd[198688]: *User Processing* PID:198683 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:28:17 instance-1 lfd[202320]: *User Processing* PID:202283 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:28:17 instance-1 lfd[202320]: *User Processing* PID:202303 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:28:18 instance-1 lfd[202320]: *User Processing* PID:202306 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:28:18 instance-1 lfd[202320]: *User Processing* PID:202287 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:28:19 instance-1 lfd[202320]: *User Processing* PID:202280 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:29:16 instance-1 lfd[202641]: *User Processing* PID:202637 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 07:36:16 instance-1 lfd[204888]: *User Processing* PID:204877 Kill:0 User:newswinslow VM:552(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 07:38:16 instance-1 lfd[205437]: *User Processing* PID:205433 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 07:47:17 instance-1 lfd[208268]: *User Processing* PID:208258 Kill:0 User:surveyms VM:547(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 07:52:17 instance-1 lfd[209834]: *User Processing* PID:209825 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:00:17 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 08:10:17 instance-1 lfd[215525]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 08:10:18 instance-1 lfd[215525]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 08:18:17 instance-1 lfd[218054]: *User Processing* PID:218050 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:24:18 instance-1 lfd[219804]: *User Processing* PID:219800 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:28:18 instance-1 lfd[221019]: *User Processing* PID:221012 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:29:18 instance-1 lfd[221591]: *User Processing* PID:221556 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:30:19 instance-1 lfd[222281]: *User Processing* PID:222271 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:30:19 instance-1 lfd[222281]: *User Processing* PID:222242 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:30:20 instance-1 lfd[222281]: *User Processing* PID:222248 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:30:20 instance-1 lfd[222281]: *User Processing* PID:222009 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 08:30:21 instance-1 lfd[222281]: *User Processing* PID:222259 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:30:21 instance-1 lfd[222281]: *User Processing* PID:222269 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:30:22 instance-1 lfd[222281]: *User Processing* PID:222256 Kill:0 User:mainpoint VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:30:22 instance-1 lfd[222281]: *User Processing* PID:222253 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:31:18 instance-1 lfd[222974]: *LOAD* 5 minute load average is 6.57, threshold is 6 - email sent
Mar 18 08:32:19 instance-1 lfd[223772]: *User Processing* PID:223743 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:32:19 instance-1 lfd[223772]: *User Processing* PID:223745 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:32:19 instance-1 lfd[223772]: *User Processing* PID:223762 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:33:18 instance-1 lfd[224449]: *User Processing* PID:224429 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:33:19 instance-1 lfd[224449]: *User Processing* PID:224439 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:34:18 instance-1 lfd[225099]: *User Processing* PID:225088 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:35:19 instance-1 lfd[225801]: *User Processing* PID:225763 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:35:19 instance-1 lfd[225801]: *User Processing* PID:225782 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:35:19 instance-1 lfd[225801]: *User Processing* PID:225776 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:36:19 instance-1 lfd[226452]: *User Processing* PID:226441 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:36:19 instance-1 lfd[226452]: *User Processing* PID:226436 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:36:20 instance-1 lfd[226452]: *User Processing* PID:226440 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:36:20 instance-1 lfd[226452]: *User Processing* PID:226438 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:36:21 instance-1 lfd[226452]: *User Processing* PID:226392 Kill:0 User:tuscomau VM:639(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:37:19 instance-1 lfd[227249]: *User Processing* PID:227235 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:37:19 instance-1 lfd[227249]: *User Processing* PID:227230 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:38:19 instance-1 lfd[227887]: *User Processing* PID:227857 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:38:19 instance-1 lfd[227887]: *User Processing* PID:227876 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:38:20 instance-1 lfd[227887]: *User Processing* PID:227853 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:39:19 instance-1 lfd[228565]: *User Processing* PID:228553 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:39:20 instance-1 lfd[228565]: *User Processing* PID:228529 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:40:20 instance-1 lfd[229273]: *User Processing* PID:229244 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:40:20 instance-1 lfd[229273]: *User Processing* PID:229257 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:40:20 instance-1 lfd[229273]: *User Processing* PID:229250 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:40:21 instance-1 lfd[229273]: *User Processing* PID:229245 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:41:19 instance-1 lfd[229950]: *User Processing* PID:229939 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:41:20 instance-1 lfd[229950]: *User Processing* PID:229940 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:41:20 instance-1 lfd[229950]: *User Processing* PID:229931 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:41:21 instance-1 lfd[229950]: *User Processing* PID:229930 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:42:20 instance-1 lfd[230658]: *User Processing* PID:230568 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:42:20 instance-1 lfd[230658]: *User Processing* PID:230630 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:42:20 instance-1 lfd[230658]: *User Processing* PID:230624 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:42:21 instance-1 lfd[230658]: *User Processing* PID:230627 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:42:21 instance-1 lfd[230658]: *User Processing* PID:230638 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:42:21 instance-1 lfd[230658]: *User Processing* PID:230609 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:42:22 instance-1 lfd[230658]: *User Processing* PID:230635 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:43:20 instance-1 lfd[231418]: *User Processing* PID:231413 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:43:20 instance-1 lfd[231418]: *User Processing* PID:231411 Kill:0 User:comphomes VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:43:21 instance-1 lfd[231418]: *User Processing* PID:231341 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:43:21 instance-1 lfd[231418]: *User Processing* PID:231410 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:44:20 instance-1 lfd[232087]: *User Processing* PID:232049 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:44:20 instance-1 lfd[232087]: *User Processing* PID:232076 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:44:20 instance-1 lfd[232087]: *User Processing* PID:232078 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:44:21 instance-1 lfd[232087]: *User Processing* PID:232056 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:44:22 instance-1 lfd[232087]: *User Processing* PID:232077 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:44:22 instance-1 lfd[232087]: *User Processing* PID:232069 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:45:20 instance-1 lfd[232830]: *User Processing* PID:232789 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:45:20 instance-1 lfd[232830]: *User Processing* PID:232805 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:46:20 instance-1 lfd[233482]: *User Processing* PID:233474 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:46:21 instance-1 lfd[233482]: *User Processing* PID:233459 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:47:20 instance-1 lfd[234171]: *User Processing* PID:234154 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:47:20 instance-1 lfd[234171]: *User Processing* PID:234146 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:48:20 instance-1 lfd[234926]: *User Processing* PID:234909 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:48:21 instance-1 lfd[234926]: *User Processing* PID:234913 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:48:21 instance-1 lfd[234926]: *User Processing* PID:234915 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:48:21 instance-1 lfd[234926]: *User Processing* PID:234907 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:49:21 instance-1 lfd[235603]: *User Processing* PID:235577 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:49:21 instance-1 lfd[235603]: *User Processing* PID:235569 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:49:21 instance-1 lfd[235603]: *User Processing* PID:235582 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:50:21 instance-1 lfd[236294]: *User Processing* PID:236269 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:50:21 instance-1 lfd[236294]: *User Processing* PID:236249 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:51:20 instance-1 lfd[236940]: *User Processing* PID:236927 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:51:21 instance-1 lfd[236940]: *User Processing* PID:236929 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:52:24 instance-1 lfd[239400]: *User Processing* PID:237088 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:52:26 instance-1 lfd[239400]: *User Processing* PID:239427 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:52:28 instance-1 lfd[239400]: *User Processing* PID:239336 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:52:29 instance-1 lfd[239400]: *User Processing* PID:239116 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:52:31 instance-1 lfd[239400]: *User Processing* PID:239332 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:52:33 instance-1 lfd[239400]: *User Processing* PID:238887 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:52:34 instance-1 lfd[239400]: *User Processing* PID:239383 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:52:36 instance-1 lfd[239400]: *User Processing* PID:239344 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:53:22 instance-1 lfd[242747]: *Suspicious Process* PID:239141 PPID:1697 User:turnkey Uptime:66 secs EXE:/usr/local/cpanel/3rdparty/php/83/sbin/php-fpm CMD:php-fpm: pool user_turnkey
Mar 18 08:53:29 instance-1 lfd[242747]: *Excessive Processes* User:rgv Kill:0 Process Count:30
Mar 18 08:53:34 instance-1 lfd[242747]: *User Processing* PID:242272 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:53:37 instance-1 lfd[242747]: *User Processing* PID:241624 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 08:53:40 instance-1 lfd[242747]: *User Processing* PID:242377 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:53:46 instance-1 lfd[242747]: *User Processing* PID:242357 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:53:53 instance-1 lfd[242747]: *User Processing* PID:241772 Kill:0 User:surveyms VM:592(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 08:53:57 instance-1 lfd[242747]: *User Processing* PID:242373 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:53:59 instance-1 lfd[242747]: *User Processing* PID:242102 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 08:54:01 instance-1 lfd[242747]: *User Processing* PID:242316 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:03 instance-1 lfd[242747]: *User Processing* PID:242302 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:23 instance-1 lfd[243522]: *Suspicious Process* PID:241697 PPID:237212 User:nobody Uptime:83 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:28 instance-1 lfd[243522]: *Suspicious Process* PID:241755 PPID:237213 User:nobody Uptime:82 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:29 instance-1 lfd[243522]: *Suspicious Process* PID:241835 PPID:229190 User:nobody Uptime:81 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:30 instance-1 lfd[243522]: *Suspicious Process* PID:241858 PPID:237211 User:nobody Uptime:80 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:32 instance-1 lfd[243522]: *Suspicious Process* PID:242030 PPID:237453 User:nobody Uptime:77 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:34 instance-1 lfd[243522]: *Suspicious Process* PID:242066 PPID:237171 User:nobody Uptime:77 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:34 instance-1 lfd[243522]: *Suspicious Process* PID:242193 PPID:237141 User:nobody Uptime:75 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:34 instance-1 lfd[243522]: *Suspicious Process* PID:242308 PPID:237194 User:nobody Uptime:73 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:35 instance-1 lfd[243522]: *Suspicious Process* PID:242346 PPID:237193 User:nobody Uptime:72 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:36 instance-1 lfd[243522]: *Suspicious Process* PID:242406 PPID:237189 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:38 instance-1 lfd[243522]: *Suspicious Process* PID:242411 PPID:237172 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:39 instance-1 lfd[243522]: *Suspicious Process* PID:242412 PPID:237938 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:41 instance-1 lfd[243522]: *Suspicious Process* PID:242428 PPID:229808 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:42 instance-1 lfd[243522]: *Suspicious Process* PID:242463 PPID:237208 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:43 instance-1 lfd[243522]: *Suspicious Process* PID:242470 PPID:237209 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:44 instance-1 lfd[243522]: *Suspicious Process* PID:242484 PPID:233436 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:46 instance-1 lfd[243522]: *Suspicious Process* PID:242488 PPID:237166 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:46 instance-1 lfd[243522]: *Suspicious Process* PID:242497 PPID:237164 User:nobody Uptime:69 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:47 instance-1 lfd[243522]: *Suspicious Process* PID:242527 PPID:236819 User:nobody Uptime:69 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:48 instance-1 lfd[243522]: *Suspicious Process* PID:242533 PPID:237145 User:nobody Uptime:68 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:49 instance-1 lfd[243522]: *Suspicious Process* PID:242564 PPID:237162 User:nobody Uptime:67 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:49 instance-1 lfd[243522]: *Suspicious Process* PID:242635 PPID:237165 User:nobody Uptime:65 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:50 instance-1 lfd[243522]: *Suspicious Process* PID:242707 PPID:237522 User:nobody Uptime:63 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:50 instance-1 lfd[243522]: *Suspicious Process* PID:242720 PPID:237202 User:nobody Uptime:63 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:51 instance-1 lfd[243522]: *Suspicious Process* PID:242734 PPID:228767 User:nobody Uptime:62 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:51 instance-1 lfd[243522]: *Suspicious Process* PID:242735 PPID:219485 User:nobody Uptime:62 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi
Mar 18 08:54:52 instance-1 lfd[243522]: *Excessive Processes* User:nativesp Kill:0 Process Count:30
Mar 18 08:54:53 instance-1 lfd[243522]: *User Processing* PID:242723 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:53 instance-1 lfd[243522]: *User Processing* PID:242928 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:54 instance-1 lfd[243522]: *User Processing* PID:243306 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:55 instance-1 lfd[243522]: *User Processing* PID:243515 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:54:56 instance-1 lfd[243522]: *User Processing* PID:242674 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:58 instance-1 lfd[243522]: *User Processing* PID:242689 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:59 instance-1 lfd[243522]: *User Processing* PID:243496 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:54:59 instance-1 lfd[243522]: *User Processing* PID:242836 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:00 instance-1 lfd[243522]: *User Processing* PID:242958 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:55:01 instance-1 lfd[243522]: *User Processing* PID:242769 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:55:02 instance-1 lfd[243522]: *User Processing* PID:243494 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:03 instance-1 lfd[243522]: *User Processing* PID:242972 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:55:04 instance-1 lfd[243522]: *User Processing* PID:242684 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:06 instance-1 lfd[243522]: *User Processing* PID:242751 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:06 instance-1 lfd[243522]: *User Processing* PID:242947 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 08:55:07 instance-1 lfd[243522]: *User Processing* PID:243516 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:07 instance-1 lfd[243522]: *User Processing* PID:243497 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:08 instance-1 lfd[243522]: *User Processing* PID:242923 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:09 instance-1 lfd[243522]: *User Processing* PID:243495 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:09 instance-1 lfd[243522]: *User Processing* PID:242677 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:28 instance-1 lfd[244037]: *User Processing* PID:243754 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:28 instance-1 lfd[244037]: *User Processing* PID:243686 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:29 instance-1 lfd[244037]: *User Processing* PID:243756 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:29 instance-1 lfd[244037]: *User Processing* PID:243755 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:30 instance-1 lfd[244037]: *User Processing* PID:243886 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:31 instance-1 lfd[244037]: *User Processing* PID:243633 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:31 instance-1 lfd[244037]: *User Processing* PID:244029 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 08:55:32 instance-1 lfd[244037]: *User Processing* PID:242387 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 08:56:03 instance-1 lfd[244000]: Directory Watching terminated after 40 seconds
Mar 18 08:56:03 instance-1 lfd[244000]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds
Mar 18 08:58:28 instance-1 lfd[245158]: *User Processing* PID:245155 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:00:18 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 09:00:28 instance-1 lfd[245821]: *User Processing* PID:245782 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 09:01:28 instance-1 lfd[246103]: *User Processing* PID:246057 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:03:28 instance-1 lfd[246813]: *User Processing* PID:246701 Kill:0 User:newswinslow VM:550(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 09:06:28 instance-1 lfd[247727]: *User Processing* PID:247572 Kill:0 User:nexpavecau VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 18 09:10:55 instance-1 lfd[248966]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 09:10:55 instance-1 lfd[248966]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 09:11:28 instance-1 lfd[249257]: *User Processing* PID:249236 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:14:29 instance-1 lfd[250199]: *User Processing* PID:250195 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:18:29 instance-1 lfd[251462]: *User Processing* PID:251459 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:20:29 instance-1 lfd[252055]: *User Processing* PID:252025 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:20:29 instance-1 lfd[252055]: *User Processing* PID:251999 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:24:29 instance-1 lfd[253337]: *User Processing* PID:253333 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:34:29 instance-1 lfd[256857]: *User Processing* PID:256854 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 09:34:29 instance-1 lfd[256857]: *User Processing* PID:256779 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 09:44:30 instance-1 lfd[260312]: *User Processing* PID:260300 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 09:48:30 instance-1 lfd[261557]: *User Processing* PID:261506 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 09:48:30 instance-1 lfd[261557]: *User Processing* PID:261510 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 10:00:20 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 10:07:30 instance-1 lfd[268334]: *User Processing* PID:268278 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 10:10:31 instance-1 lfd[269334]: *User Processing* PID:269331 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:11:31 instance-1 lfd[269617]: *User Processing* PID:269593 Kill:0 User:winslowgroupweb VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:19:31 instance-1 lfd[272478]: *User Processing* PID:272458 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 10:20:31 instance-1 lfd[272878]: *User Processing* PID:272832 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:21:31 instance-1 lfd[273163]: *User Processing* PID:273155 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:22:31 instance-1 lfd[273471]: *User Processing* PID:273465 Kill:0 User:winslowgroupweb VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:24:31 instance-1 lfd[274185]: *User Processing* PID:274127 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:24:31 instance-1 lfd[274185]: *User Processing* PID:274176 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:25:26 instance-1 lfd[274532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 10:25:26 instance-1 lfd[274532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 10:25:31 instance-1 lfd[274581]: *User Processing* PID:274522 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:27:31 instance-1 lfd[275219]: *User Processing* PID:275211 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:28:31 instance-1 lfd[275498]: *User Processing* PID:275490 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:29:31 instance-1 lfd[275924]: *User Processing* PID:275917 Kill:0 User:comphomes VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:31:31 instance-1 lfd[276561]: *User Processing* PID:276484 Kill:0 User:winslow VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 18 10:33:31 instance-1 lfd[277182]: *User Processing* PID:277178 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:34:31 instance-1 lfd[277632]: *User Processing* PID:277629 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:34:31 instance-1 lfd[277632]: *User Processing* PID:277625 Kill:0 User:winslowgroupweb VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 10:45:32 instance-1 lfd[281129]: *User Processing* PID:281120 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 11:00:22 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 11:21:33 instance-1 lfd[294428]: *User Processing* PID:294424 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 11:25:28 instance-1 lfd[295787]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 11:25:29 instance-1 lfd[295787]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 11:25:33 instance-1 lfd[295834]: *User Processing* PID:295828 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 11:25:33 instance-1 lfd[295834]: *User Processing* PID:295827 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 11:29:33 instance-1 lfd[297030]: *User Processing* PID:297024 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 11:41:34 instance-1 lfd[301203]: *User Processing* PID:301200 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 11:41:34 instance-1 lfd[301203]: *User Processing* PID:301198 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 11:46:34 instance-1 lfd[302716]: *Suspicious Process* PID:17559 PPID:12813 User:turnkey Uptime:48571 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 18 11:46:34 instance-1 lfd[302716]: *User Processing* PID:17559 Kill:0 User:turnkey Time:48571 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 18 11:56:34 instance-1 lfd[305820]: *User Processing* PID:305817 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 11:56:34 instance-1 lfd[305820]: *User Processing* PID:305815 Kill:0 User:eyrescom VM:588(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:00:24 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 12:00:35 instance-1 lfd[307156]: *User Processing* PID:307141 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 12:00:35 instance-1 lfd[307156]: *User Processing* PID:307152 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:00:35 instance-1 lfd[307156]: *User Processing* PID:307151 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:10:35 instance-1 lfd[310208]: *User Processing* PID:310202 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:11:35 instance-1 lfd[310643]: *User Processing* PID:310636 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:13:35 instance-1 lfd[311226]: *User Processing* PID:311219 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:14:35 instance-1 lfd[311575]: *User Processing* PID:311303 Kill:0 User:winslowgroupweb VM:590(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:16:35 instance-1 lfd[312345]: *User Processing* PID:312341 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:20:35 instance-1 lfd[313630]: *User Processing* PID:313567 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 12:21:35 instance-1 lfd[313922]: *User Processing* PID:313918 Kill:0 User:winslowgroupweb VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:24:35 instance-1 lfd[314846]: *User Processing* PID:314824 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 12:24:36 instance-1 lfd[314846]: *User Processing* PID:314834 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 12:25:31 instance-1 lfd[315128]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 12:25:31 instance-1 lfd[315128]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 12:27:36 instance-1 lfd[315807]: *User Processing* PID:315804 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:37:36 instance-1 lfd[319597]: *User Processing* PID:319468 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 12:46:36 instance-1 lfd[322531]: *User Processing* PID:322524 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 12:51:37 instance-1 lfd[324606]: *User Processing* PID:324603 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:52:37 instance-1 lfd[325084]: *User Processing* PID:325080 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:52:37 instance-1 lfd[325084]: *User Processing* PID:325079 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:54:37 instance-1 lfd[325832]: *User Processing* PID:325827 Kill:0 User:yvegroup VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:55:37 instance-1 lfd[326200]: *User Processing* PID:326105 Kill:0 User:bmswinslow VM:576(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:57:37 instance-1 lfd[326994]: *User Processing* PID:326987 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:58:37 instance-1 lfd[327358]: *User Processing* PID:327350 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 12:59:37 instance-1 lfd[327648]: *User Processing* PID:327562 Kill:0 User:winslow VM:566(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 18 13:00:27 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 13:02:37 instance-1 lfd[328656]: *User Processing* PID:328653 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 13:15:37 instance-1 lfd[332436]: *User Processing* PID:332433 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 13:20:38 instance-1 lfd[333876]: *User Processing* PID:333868 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 13:25:33 instance-1 lfd[335287]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 13:25:33 instance-1 lfd[335287]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 13:26:38 instance-1 lfd[335614]: *User Processing* PID:335611 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 13:28:38 instance-1 lfd[336523]: *User Processing* PID:336520 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 13:28:38 instance-1 lfd[336523]: *User Processing* PID:336493 Kill:0 User:comphomes VM:686(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 13:31:38 instance-1 lfd[337556]: *User Processing* PID:337354 Kill:0 User:winslowgroupweb VM:590(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 13:45:39 instance-1 lfd[341765]: *User Processing* PID:341676 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 18 13:46:39 instance-1 lfd[342051]: *User Processing* PID:341998 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 13:51:39 instance-1 lfd[343581]: *User Processing* PID:343575 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 13:58:39 instance-1 lfd[345712]: *User Processing* PID:345700 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 14:00:29 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 14:18:40 instance-1 lfd[352314]: *User Processing* PID:352272 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 14:19:47 instance-1 lfd[352732]: (smtpauth) Failed SMTP AUTH login from 165.154.252.166 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 18 14:25:35 instance-1 lfd[354483]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 14:25:35 instance-1 lfd[354483]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 14:27:40 instance-1 lfd[355023]: *User Processing* PID:355017 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 14:27:40 instance-1 lfd[355023]: *User Processing* PID:355016 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 14:28:40 instance-1 lfd[355286]: *User Processing* PID:355283 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 14:38:40 instance-1 lfd[359212]: *User Processing* PID:359031 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 14:39:40 instance-1 lfd[359690]: *User Processing* PID:359472 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 14:42:41 instance-1 lfd[360623]: *User Processing* PID:360613 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 14:49:26 instance-1 lfd[362795]: (smtpauth) Failed SMTP AUTH login from 148.222.203.240 (MX/Mexico/customer.sntochl1.pop.starlinkisp.net): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 18 15:00:31 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 15:04:41 instance-1 lfd[367849]: *User Processing* PID:367845 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 15:19:42 instance-1 lfd[372545]: *User Processing* PID:372542 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 15:22:42 instance-1 lfd[373505]: *User Processing* PID:373494 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 15:25:37 instance-1 lfd[374484]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 15:25:37 instance-1 lfd[374484]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 15:31:42 instance-1 lfd[376245]: *User Processing* PID:376207 Kill:0 User:newswinslow VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 15:32:42 instance-1 lfd[376570]: *User Processing* PID:376566 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 15:37:42 instance-1 lfd[378183]: *User Processing* PID:378179 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 15:38:43 instance-1 lfd[378473]: *User Processing* PID:378468 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 15:40:43 instance-1 lfd[379241]: *User Processing* PID:379238 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 16:00:33 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 16:22:44 instance-1 lfd[392895]: *User Processing* PID:392892 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 16:25:39 instance-1 lfd[393730]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 16:25:39 instance-1 lfd[393730]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 16:36:45 instance-1 lfd[397524]: *User Processing* PID:397520 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 16:49:45 instance-1 lfd[401713]: *User Processing* PID:401704 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 16:50:45 instance-1 lfd[402057]: *User Processing* PID:402046 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:00:35 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 17:02:46 instance-1 lfd[406561]: *User Processing* PID:406540 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 17:07:46 instance-1 lfd[408201]: *User Processing* PID:408181 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:10:46 instance-1 lfd[409125]: *User Processing* PID:409109 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:13:46 instance-1 lfd[410060]: *User Processing* PID:410048 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:19:46 instance-1 lfd[411928]: *User Processing* PID:411919 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:21:46 instance-1 lfd[412543]: *User Processing* PID:412522 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 17:21:47 instance-1 lfd[412543]: *User Processing* PID:412535 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:23:47 instance-1 lfd[413240]: *User Processing* PID:413231 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:25:42 instance-1 lfd[413789]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 17:25:42 instance-1 lfd[413789]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 17:25:47 instance-1 lfd[413837]: *User Processing* PID:413829 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:27:47 instance-1 lfd[414760]: *User Processing* PID:414756 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 17:33:47 instance-1 lfd[416972]: *User Processing* PID:416951 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 17:34:47 instance-1 lfd[417249]: *User Processing* PID:417238 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:39:47 instance-1 lfd[418849]: *User Processing* PID:418840 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:40:47 instance-1 lfd[419192]: *User Processing* PID:419189 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 17:41:47 instance-1 lfd[419455]: *User Processing* PID:419449 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 17:43:47 instance-1 lfd[420153]: *User Processing* PID:420145 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:45:47 instance-1 lfd[420786]: *User Processing* PID:420778 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:48:38 instance-1 lfd[421760]: (smtpauth) Failed SMTP AUTH login from 107.173.189.11 (US/United States/107-173-189-11-host.colocrossing.com): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 18 17:51:48 instance-1 lfd[422711]: *User Processing* PID:422707 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 17:52:48 instance-1 lfd[423044]: *User Processing* PID:423041 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 17:53:48 instance-1 lfd[423469]: *User Processing* PID:423432 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 17:58:48 instance-1 lfd[425129]: *User Processing* PID:425126 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 17:59:48 instance-1 lfd[425452]: *User Processing* PID:425449 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 18:00:38 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 18:02:48 instance-1 lfd[426575]: *User Processing* PID:426567 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 18:04:48 instance-1 lfd[427392]: *User Processing* PID:427384 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 18:07:48 instance-1 lfd[428434]: *User Processing* PID:428423 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 18:10:48 instance-1 lfd[429665]: *User Processing* PID:429617 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 18:14:49 instance-1 lfd[431069]: *User Processing* PID:431065 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 18:25:44 instance-1 lfd[434868]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 18:25:44 instance-1 lfd[434868]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 18:28:49 instance-1 lfd[435894]: *User Processing* PID:435838 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 18:31:15 instance-1 lfd[436629]: (smtpauth) Failed SMTP AUTH login from 165.154.252.200 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 18 18:44:49 instance-1 lfd[440940]: *User Processing* PID:440932 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 18:50:50 instance-1 lfd[443057]: *User Processing* PID:443045 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 18:57:50 instance-1 lfd[445303]: *User Processing* PID:445293 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 18:58:50 instance-1 lfd[445677]: *User Processing* PID:445670 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 18:58:50 instance-1 lfd[445677]: *User Processing* PID:445671 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 18:59:50 instance-1 lfd[446174]: *User Processing* PID:446168 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 19:00:40 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 19:08:50 instance-1 lfd[449320]: *User Processing* PID:449317 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:09:50 instance-1 lfd[449697]: *User Processing* PID:449677 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:10:50 instance-1 lfd[450177]: *Suspicious Process* PID:17560 PPID:12813 User:turnkey Uptime:75227 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 18 19:10:50 instance-1 lfd[450177]: *User Processing* PID:17560 Kill:0 User:turnkey Time:75227 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 18 19:12:50 instance-1 lfd[450892]: *User Processing* PID:450886 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:13:50 instance-1 lfd[451243]: *User Processing* PID:451240 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:14:50 instance-1 lfd[451611]: *User Processing* PID:451608 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:17:50 instance-1 lfd[452928]: *User Processing* PID:452924 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:17:50 instance-1 lfd[452928]: *User Processing* PID:452919 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 19:18:50 instance-1 lfd[453384]: *User Processing* PID:453380 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:19:50 instance-1 lfd[453817]: *User Processing* PID:453809 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:21:50 instance-1 lfd[454835]: *User Processing* PID:454832 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:24:51 instance-1 lfd[455759]: *User Processing* PID:455756 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:25:46 instance-1 lfd[456252]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 19:25:46 instance-1 lfd[456252]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 19:27:51 instance-1 lfd[456896]: *User Processing* PID:456893 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:50:51 instance-1 lfd[464038]: *User Processing* PID:464035 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:50:51 instance-1 lfd[464038]: *User Processing* PID:464032 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 19:59:51 instance-1 lfd[466711]: *User Processing* PID:466708 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 20:00:41 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 20:25:47 instance-1 lfd[475086]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 20:25:47 instance-1 lfd[475086]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 21:00:43 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 21:00:53 instance-1 lfd[485457]: *User Processing* PID:485451 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:02:53 instance-1 lfd[486236]: *User Processing* PID:486233 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:05:53 instance-1 lfd[487375]: *User Processing* PID:487366 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:06:53 instance-1 lfd[487871]: *User Processing* PID:487868 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:06:53 instance-1 lfd[487871]: *User Processing* PID:487864 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:07:53 instance-1 lfd[488254]: *User Processing* PID:488246 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:07:53 instance-1 lfd[488254]: *User Processing* PID:488248 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:11:53 instance-1 lfd[489973]: *User Processing* PID:489970 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:11:53 instance-1 lfd[489973]: *User Processing* PID:489969 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:12:53 instance-1 lfd[490380]: *User Processing* PID:490377 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:13:53 instance-1 lfd[490796]: *User Processing* PID:490793 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:16:54 instance-1 lfd[492139]: *User Processing* PID:492133 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:16:54 instance-1 lfd[492139]: *User Processing* PID:492136 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:17:54 instance-1 lfd[492538]: *User Processing* PID:492529 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 18 21:17:54 instance-1 lfd[492538]: *User Processing* PID:492533 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:19:54 instance-1 lfd[493222]: *User Processing* PID:493219 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:20:54 instance-1 lfd[493612]: *User Processing* PID:493606 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:23:54 instance-1 lfd[494626]: *User Processing* PID:494623 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:24:54 instance-1 lfd[494939]: *User Processing* PID:494936 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:25:49 instance-1 lfd[495301]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 21:25:49 instance-1 lfd[495301]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 21:25:54 instance-1 lfd[495352]: *User Processing* PID:495349 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:25:54 instance-1 lfd[495352]: *User Processing* PID:495348 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:27:54 instance-1 lfd[496362]: *User Processing* PID:496356 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:28:54 instance-1 lfd[496763]: *User Processing* PID:496754 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:29:54 instance-1 lfd[497086]: *User Processing* PID:497080 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:29:54 instance-1 lfd[497086]: *User Processing* PID:497078 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:30:54 instance-1 lfd[497437]: *User Processing* PID:497429 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:30:54 instance-1 lfd[497437]: *User Processing* PID:497431 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:31:54 instance-1 lfd[497745]: *User Processing* PID:497740 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:31:54 instance-1 lfd[497745]: *User Processing* PID:497736 Kill:0 User:geneticson VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:32:54 instance-1 lfd[498239]: *User Processing* PID:498231 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:32:54 instance-1 lfd[498239]: *User Processing* PID:498236 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:33:54 instance-1 lfd[498570]: *User Processing* PID:498564 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:34:54 instance-1 lfd[498875]: *User Processing* PID:498869 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:35:54 instance-1 lfd[499245]: *User Processing* PID:499237 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:35:54 instance-1 lfd[499245]: *User Processing* PID:499239 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:37:54 instance-1 lfd[499986]: *User Processing* PID:499980 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:37:54 instance-1 lfd[499986]: *User Processing* PID:499978 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:38:54 instance-1 lfd[500303]: *User Processing* PID:500295 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:39:54 instance-1 lfd[500673]: *User Processing* PID:500670 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:39:54 instance-1 lfd[500673]: *User Processing* PID:500665 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:40:54 instance-1 lfd[501045]: *User Processing* PID:501037 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:40:54 instance-1 lfd[501045]: *User Processing* PID:501042 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:41:54 instance-1 lfd[501341]: *User Processing* PID:501335 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:42:54 instance-1 lfd[501781]: *User Processing* PID:501778 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:42:54 instance-1 lfd[501781]: *User Processing* PID:501773 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:44:54 instance-1 lfd[502390]: *User Processing* PID:502382 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:44:54 instance-1 lfd[502390]: *User Processing* PID:502387 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:45:54 instance-1 lfd[502772]: *User Processing* PID:502767 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:45:54 instance-1 lfd[502772]: *User Processing* PID:502769 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:46:54 instance-1 lfd[503091]: *User Processing* PID:503082 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:46:55 instance-1 lfd[503091]: *User Processing* PID:503088 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:47:55 instance-1 lfd[503545]: *User Processing* PID:503541 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:49:55 instance-1 lfd[504248]: *User Processing* PID:504239 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:50:55 instance-1 lfd[504646]: *User Processing* PID:504637 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:50:55 instance-1 lfd[504646]: *User Processing* PID:504639 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:52:55 instance-1 lfd[505384]: *User Processing* PID:505379 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:52:55 instance-1 lfd[505384]: *User Processing* PID:505381 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:53:55 instance-1 lfd[505746]: *User Processing* PID:505742 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:53:55 instance-1 lfd[505746]: *User Processing* PID:505725 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:55:55 instance-1 lfd[506463]: *User Processing* PID:506460 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:55:55 instance-1 lfd[506463]: *User Processing* PID:506455 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:56:55 instance-1 lfd[506765]: *User Processing* PID:506757 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:56:55 instance-1 lfd[506765]: *User Processing* PID:506759 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:57:55 instance-1 lfd[507224]: *User Processing* PID:507208 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:57:55 instance-1 lfd[507224]: *User Processing* PID:507214 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:58:55 instance-1 lfd[507560]: *User Processing* PID:507552 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:58:55 instance-1 lfd[507560]: *User Processing* PID:507554 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:59:55 instance-1 lfd[507978]: *User Processing* PID:507975 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 21:59:55 instance-1 lfd[507978]: *User Processing* PID:507970 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:00:45 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 22:00:48 instance-1 lfd[509271]: *System Integrity* has detected modified file(s): /usr/bin/gencat /usr/bin/getconf /usr/bin/getent /usr/bin/gss-client /usr/bin/iconv /usr/bin/ld.so /usr/bin/locale /usr/bin/localedef /usr/bin/makedb /usr/bin/pldd /usr/bin/sim_client /usr/bin/sprof /usr/bin/uuclient /usr/sbin/build-locale-archive /usr/sbin/gss-server /usr/sbin/iconvconfig /usr/sbin/ldconfig /usr/sbin/nscd /usr/sbin/sim_server /usr/sbin/uuserver /usr/sbin/zdump /usr/sbin/zic /bin/gencat /bin/getconf /bin/getent /bin/gss-client /bin/iconv /bin/ld.so /bin/locale /bin/localedef /bin/makedb /bin/pldd /bin/sim_client /bin/sprof /bin/uuclient /sbin/build-locale-archive /sbin/gss-server /sbin/iconvconfig /sbin/ldconfig /sbin/nscd /sbin/sim_server /sbin/uuserver /sbin/zdump /sbin/zic
Mar 18 22:00:55 instance-1 lfd[509683]: *User Processing* PID:508928 Kill:0 User:newswinslow VM:620(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 18 22:01:02 instance-1 lfd[51177]: Main Process: TERM
Mar 18 22:01:02 instance-1 lfd[51177]: daemon stopped
Mar 18 22:01:02 instance-1 lfd[510074]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 18 22:01:02 instance-1 lfd[510074]: LF_APACHE_ERRPORT: Set to [2]
Mar 18 22:01:02 instance-1 lfd[510074]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 18 22:01:02 instance-1 lfd[510074]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 18 22:01:02 instance-1 lfd[510074]: CSF Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: IPv6 Enabled...
Mar 18 22:01:03 instance-1 lfd[510074]: LOAD Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 18 22:01:03 instance-1 lfd[510074]: Country Code Lookups...
Mar 18 22:01:03 instance-1 lfd[510074]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 22:01:03 instance-1 lfd[510074]: System Integrity Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Exploit Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Directory Watching...
Mar 18 22:01:03 instance-1 lfd[510074]: Email Queue Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: ModSecurity IP D/B Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Email Relay Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Temp to Perm Block Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: System Statistics...
Mar 18 22:01:03 instance-1 lfd[510074]: Process Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Account Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: SSH Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Webmin Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: SU Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Console Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: WHM Tracking...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/messages...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/maillog...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /usr/local/cpanel/logs/login_log...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /etc/apache2/logs/error_log...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/exim_mainlog...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /usr/local/cpanel/logs/access_log...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/secure...
Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/customlog...
Mar 18 22:06:03 instance-1 lfd[512450]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 22:06:03 instance-1 lfd[512450]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 22:11:03 instance-1 lfd[513914]: *User Processing* PID:513905 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:14:03 instance-1 lfd[514905]: *User Processing* PID:514890 Kill:0 User:indigenouscivil VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 18 22:14:03 instance-1 lfd[514905]: *User Processing* PID:514891 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:17:03 instance-1 lfd[515807]: *User Processing* PID:515803 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:20:03 instance-1 lfd[517006]: *User Processing* PID:516991 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:28:04 instance-1 lfd[519869]: *User Processing* PID:519861 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:29:04 instance-1 lfd[520255]: *User Processing* PID:520251 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:30:04 instance-1 lfd[520688]: *User Processing* PID:520684 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:33:04 instance-1 lfd[521824]: *User Processing* PID:521820 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:35:04 instance-1 lfd[522441]: *User Processing* PID:522437 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:37:04 instance-1 lfd[523018]: *User Processing* PID:523011 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:40:04 instance-1 lfd[524107]: *User Processing* PID:524103 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:40:04 instance-1 lfd[524107]: *User Processing* PID:524098 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:44:04 instance-1 lfd[525394]: *User Processing* PID:525387 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:51:04 instance-1 lfd[527679]: *User Processing* PID:527667 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:52:04 instance-1 lfd[527953]: *User Processing* PID:527949 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:53:04 instance-1 lfd[528248]: *User Processing* PID:528244 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:55:04 instance-1 lfd[529101]: *User Processing* PID:529095 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 22:56:04 instance-1 lfd[529406]: *User Processing* PID:529398 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 18 23:01:05 instance-1 lfd[510074]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 18 23:01:05 instance-1 lfd[530930]: *Excessive Processes* User:tuscomau Kill:0 Process Count:12
Mar 18 23:06:05 instance-1 lfd[533873]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 18 23:06:05 instance-1 lfd[533873]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 18 23:11:05 instance-1 lfd[536220]: *Excessive Processes* User:surveyms Kill:0 Process Count:12
Mar 18 23:20:05 instance-1 lfd[539225]: *User Processing* PID:539221 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 00:00:02 instance-1 lfd[510074]: Main Process: TERM
Mar 19 00:00:02 instance-1 lfd[510074]: daemon stopped
Mar 19 00:00:02 instance-1 lfd[551650]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 19 00:00:02 instance-1 lfd[551650]: LF_APACHE_ERRPORT: Set to [2]
Mar 19 00:00:02 instance-1 lfd[551650]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 19 00:00:02 instance-1 lfd[551650]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 19 00:00:02 instance-1 lfd[551650]: CSF Tracking...
Mar 19 00:00:02 instance-1 lfd[551650]: IPv6 Enabled...
Mar 19 00:00:02 instance-1 lfd[551650]: LOAD Tracking...
Mar 19 00:00:02 instance-1 lfd[551650]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 19 00:00:02 instance-1 lfd[551650]: Country Code Lookups...
Mar 19 00:00:02 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 00:00:02 instance-1 lfd[551650]: System Integrity Tracking...
Mar 19 00:00:02 instance-1 lfd[551650]: Exploit Tracking...
Mar 19 00:00:02 instance-1 lfd[551650]: Directory Watching...
Mar 19 00:00:02 instance-1 lfd[551650]: Email Queue Tracking...
Mar 19 00:00:02 instance-1 lfd[551650]: ModSecurity IP D/B Tracking...
Mar 19 00:00:02 instance-1 lfd[551650]: Email Relay Tracking...
Mar 19 00:00:02 instance-1 lfd[551650]: Temp to Perm Block Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: System Statistics...
Mar 19 00:00:03 instance-1 lfd[551650]: Process Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: Account Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: SSH Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: Webmin Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: SU Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: Console Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: WHM Tracking...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/exim_mainlog...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /etc/apache2/logs/error_log...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /usr/local/cpanel/logs/login_log...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/customlog...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/messages...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/maillog...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /usr/local/cpanel/logs/access_log...
Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/secure...
Mar 19 00:05:03 instance-1 lfd[553157]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 00:05:03 instance-1 lfd[553157]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 00:14:03 instance-1 lfd[555517]: *User Processing* PID:555508 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 00:50:04 instance-1 lfd[566089]: *User Processing* PID:565979 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 00:51:04 instance-1 lfd[566638]: *User Processing* PID:566633 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 00:53:04 instance-1 lfd[567360]: *User Processing* PID:567356 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 00:53:04 instance-1 lfd[567360]: *User Processing* PID:567344 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 01:00:04 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 01:05:05 instance-1 lfd[570916]: *User Processing* PID:570841 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 01:05:05 instance-1 lfd[570916]: *User Processing* PID:570906 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 01:05:05 instance-1 lfd[570913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 01:05:05 instance-1 lfd[570913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 01:14:05 instance-1 lfd[574202]: *User Processing* PID:574106 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 01:28:05 instance-1 lfd[578297]: *User Processing* PID:578244 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 01:54:06 instance-1 lfd[586341]: *User Processing* PID:586331 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 02:00:06 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 02:05:10 instance-1 lfd[589551]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 02:05:10 instance-1 lfd[589551]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 02:20:07 instance-1 lfd[593767]: *User Processing* PID:593731 Kill:0 User:bmswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 02:51:08 instance-1 lfd[602962]: *User Processing* PID:602958 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 02:55:08 instance-1 lfd[604256]: *User Processing* PID:604242 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 02:58:08 instance-1 lfd[605261]: *User Processing* PID:605257 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 03:00:08 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 03:10:16 instance-1 lfd[608812]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 03:10:16 instance-1 lfd[608812]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 03:34:09 instance-1 lfd[616952]: *User Processing* PID:616948 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 03:34:10 instance-1 lfd[616952]: *User Processing* PID:616939 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 03:37:10 instance-1 lfd[617768]: *User Processing* PID:617754 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 03:39:10 instance-1 lfd[618426]: *User Processing* PID:618414 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 03:40:10 instance-1 lfd[618753]: *User Processing* PID:618703 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 03:41:10 instance-1 lfd[619021]: *User Processing* PID:618993 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 03:50:10 instance-1 lfd[623896]: *User Processing* PID:623875 Kill:0 User:surveyms VM:592(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/surveyms/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
Mar 19 03:52:10 instance-1 lfd[625730]: *User Processing* PID:625719 Kill:0 User:waste2323 VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/waste2323/public_html instance info --format=json --check-updates=true
Mar 19 03:53:10 instance-1 lfd[626735]: *User Processing* PID:626731 Kill:0 User:geneticson VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json
Mar 19 03:54:10 instance-1 lfd[627890]: *User Processing* PID:627883 Kill:0 User:bmswinslow VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html plugin list --fields=name,status,version,title,description,update_version --format=json --quiet --skip-plugins=false --skip-themes=false
Mar 19 03:55:10 instance-1 lfd[628737]: *User Processing* PID:628728 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/comphomes/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
Mar 19 03:56:10 instance-1 lfd[629960]: *User Processing* PID:629956 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html option list --search=jetpack_affiliate_code --field=option_value --format=json --quiet
Mar 19 04:00:10 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 04:02:10 instance-1 lfd[632273]: *User Processing* PID:632177 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 04:03:10 instance-1 lfd[632573]: *User Processing* PID:632463 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 04:15:11 instance-1 lfd[636329]: *User Processing* PID:636222 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 04:15:11 instance-1 lfd[636329]: *User Processing* PID:636317 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 04:15:11 instance-1 lfd[636326]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 04:15:11 instance-1 lfd[636326]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 04:16:11 instance-1 lfd[636637]: *User Processing* PID:636633 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 04:51:12 instance-1 lfd[647367]: *User Processing* PID:647357 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 04:51:12 instance-1 lfd[647367]: *User Processing* PID:647363 Kill:0 User:tuscomau VM:567(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 04:57:12 instance-1 lfd[649251]: *User Processing* PID:649242 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 05:00:12 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 05:15:12 instance-1 lfd[654583]: *User Processing* PID:654569 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 05:15:13 instance-1 lfd[654580]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 05:15:13 instance-1 lfd[654580]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 05:34:13 instance-1 lfd[660076]: *User Processing* PID:660067 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 06:00:13 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 06:03:14 instance-1 lfd[669260]: *User Processing* PID:669255 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:09:14 instance-1 lfd[671365]: *User Processing* PID:671361 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:10:14 instance-1 lfd[671739]: *User Processing* PID:671730 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:11:14 instance-1 lfd[672061]: *User Processing* PID:672052 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:13:14 instance-1 lfd[672825]: *User Processing* PID:672814 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:14:14 instance-1 lfd[673133]: *User Processing* PID:673123 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:15:14 instance-1 lfd[673543]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 06:15:14 instance-1 lfd[673543]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 06:20:14 instance-1 lfd[675293]: *User Processing* PID:675281 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:30:15 instance-1 lfd[678411]: *User Processing* PID:678402 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:31:15 instance-1 lfd[678795]: *User Processing* PID:678791 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:44:15 instance-1 lfd[682932]: *User Processing* PID:682928 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:45:15 instance-1 lfd[683331]: *User Processing* PID:683322 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 06:50:15 instance-1 lfd[684896]: *User Processing* PID:684712 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 06:52:15 instance-1 lfd[685479]: *User Processing* PID:685470 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 07:00:15 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 07:15:16 instance-1 lfd[693129]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 07:15:16 instance-1 lfd[693129]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 07:30:17 instance-1 lfd[697502]: *User Processing* PID:697490 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 07:52:17 instance-1 lfd[704299]: *User Processing* PID:704278 Kill:0 User:tuscomau VM:637(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 07:52:17 instance-1 lfd[704299]: *User Processing* PID:704294 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 07:55:17 instance-1 lfd[705473]: *User Processing* PID:705455 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 07:55:17 instance-1 lfd[705473]: *User Processing* PID:705464 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 07:55:18 instance-1 lfd[705473]: *User Processing* PID:705456 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 08:00:17 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 08:02:18 instance-1 lfd[707947]: *User Processing* PID:707894 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 08:13:18 instance-1 lfd[711501]: *User Processing* PID:711494 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 08:15:18 instance-1 lfd[712289]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 08:15:18 instance-1 lfd[712289]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 08:16:18 instance-1 lfd[712630]: *User Processing* PID:712626 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 08:35:19 instance-1 lfd[719152]: *User Processing* PID:719143 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:00:19 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 09:09:20 instance-1 lfd[729852]: *User Processing* PID:729847 Kill:0 User:rcpacom VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:10:20 instance-1 lfd[730378]: *User Processing* PID:730364 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:11:20 instance-1 lfd[730677]: *User Processing* PID:730668 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:11:20 instance-1 lfd[730677]: *User Processing* PID:730669 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:11:20 instance-1 lfd[730677]: *User Processing* PID:730618 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:15:20 instance-1 lfd[731932]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 09:15:20 instance-1 lfd[731932]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 09:16:20 instance-1 lfd[732215]: *User Processing* PID:732210 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:24:20 instance-1 lfd[734769]: *User Processing* PID:734765 Kill:0 User:comphomes VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:25:20 instance-1 lfd[735294]: *User Processing* PID:735193 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 09:31:20 instance-1 lfd[737092]: *User Processing* PID:737087 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:41:21 instance-1 lfd[740080]: *User Processing* PID:740070 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 09:43:21 instance-1 lfd[740662]: *User Processing* PID:740654 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:43:21 instance-1 lfd[740662]: *User Processing* PID:740652 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 09:54:24 instance-1 lfd[744154]: (smtpauth) Failed SMTP AUTH login from 80.94.92.126 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 19 10:00:21 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 10:07:22 instance-1 lfd[748229]: *User Processing* PID:748137 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 10:11:22 instance-1 lfd[749605]: *User Processing* PID:749598 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:14:22 instance-1 lfd[750478]: *User Processing* PID:750470 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:15:22 instance-1 lfd[750837]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 10:15:22 instance-1 lfd[750837]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 10:16:38 instance-1 lfd[751382]: (smtpauth) Failed SMTP AUTH login from 193.46.255.184 (AT/Austria/hostingmailto094.statics.servermail.org): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 19 10:17:22 instance-1 lfd[751629]: *User Processing* PID:751580 Kill:0 User:comphomes VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:19:22 instance-1 lfd[752381]: *User Processing* PID:752312 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 10:20:22 instance-1 lfd[752864]: *User Processing* PID:752780 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 10:22:22 instance-1 lfd[753900]: *User Processing* PID:753894 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:28:22 instance-1 lfd[756479]: *User Processing* PID:756350 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:28:23 instance-1 lfd[756479]: *User Processing* PID:756473 Kill:0 User:comphomes VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:31:23 instance-1 lfd[757529]: *User Processing* PID:757518 Kill:0 User:yvegroup VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:31:23 instance-1 lfd[757529]: *User Processing* PID:757269 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 10:36:23 instance-1 lfd[759241]: *User Processing* PID:759236 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:36:23 instance-1 lfd[759241]: *User Processing* PID:759234 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 10:56:23 instance-1 lfd[766750]: *User Processing* PID:766745 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 10:56:24 instance-1 lfd[766750]: *User Processing* PID:766738 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:00:24 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 11:01:24 instance-1 lfd[768378]: *User Processing* PID:768374 Kill:0 User:comphomes VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:04:24 instance-1 lfd[769423]: *User Processing* PID:769416 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:12:24 instance-1 lfd[772072]: *User Processing* PID:772064 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:12:24 instance-1 lfd[772072]: *User Processing* PID:771987 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:12:24 instance-1 lfd[772072]: *User Processing* PID:772036 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:14:24 instance-1 lfd[772662]: *User Processing* PID:772652 Kill:0 User:eyrescom VM:588(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:14:24 instance-1 lfd[772662]: *User Processing* PID:772654 Kill:0 User:eyrescom VM:591(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:15:24 instance-1 lfd[773016]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 11:15:25 instance-1 lfd[773016]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 11:16:24 instance-1 lfd[773312]: *User Processing* PID:773307 Kill:0 User:rcpacom VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:17:24 instance-1 lfd[773743]: *User Processing* PID:773738 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:18:24 instance-1 lfd[774080]: *User Processing* PID:774050 Kill:0 User:newswinslow VM:552(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:19:24 instance-1 lfd[774380]: *User Processing* PID:774299 Kill:0 User:newswinslow VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:20:24 instance-1 lfd[774758]: *User Processing* PID:774731 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:20:24 instance-1 lfd[774758]: *User Processing* PID:774598 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:21:24 instance-1 lfd[775114]: *User Processing* PID:775110 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:23:24 instance-1 lfd[775933]: *User Processing* PID:775929 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:24:24 instance-1 lfd[776263]: *User Processing* PID:776184 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:24:24 instance-1 lfd[776263]: *User Processing* PID:776189 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 11:24:25 instance-1 lfd[776263]: *User Processing* PID:776259 Kill:0 User:comphomes VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:24:25 instance-1 lfd[776263]: *User Processing* PID:776255 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:26:24 instance-1 lfd[777035]: *User Processing* PID:777030 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:27:25 instance-1 lfd[777514]: *User Processing* PID:777510 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:29:25 instance-1 lfd[778138]: *User Processing* PID:778132 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:32:25 instance-1 lfd[779411]: *User Processing* PID:779407 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:35:25 instance-1 lfd[780493]: *User Processing* PID:780481 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:36:25 instance-1 lfd[780920]: *User Processing* PID:780911 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:37:25 instance-1 lfd[781463]: *User Processing* PID:781457 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:37:25 instance-1 lfd[781463]: *User Processing* PID:781456 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:39:25 instance-1 lfd[782316]: *User Processing* PID:782312 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783783 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783776 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783779 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783775 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:46:25 instance-1 lfd[785375]: *User Processing* PID:785370 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:47:25 instance-1 lfd[785845]: *User Processing* PID:785835 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:48:25 instance-1 lfd[786238]: *User Processing* PID:786234 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:50:25 instance-1 lfd[787053]: *User Processing* PID:787039 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 11:50:26 instance-1 lfd[787053]: *User Processing* PID:787041 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:50:26 instance-1 lfd[787053]: *User Processing* PID:787038 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:50:26 instance-1 lfd[787053]: *User Processing* PID:787045 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:51:25 instance-1 lfd[787455]: *User Processing* PID:787451 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:52:25 instance-1 lfd[788010]: *User Processing* PID:788005 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:52:26 instance-1 lfd[788010]: *User Processing* PID:788000 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:53:25 instance-1 lfd[788371]: *User Processing* PID:788366 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:54:26 instance-1 lfd[788847]: *User Processing* PID:788842 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:54:26 instance-1 lfd[788847]: *User Processing* PID:788836 Kill:0 User:geneticson VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:56:26 instance-1 lfd[789663]: *User Processing* PID:789659 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:57:26 instance-1 lfd[789972]: *User Processing* PID:789968 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 11:57:26 instance-1 lfd[789972]: *User Processing* PID:789962 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:00:26 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 12:00:26 instance-1 lfd[791180]: *User Processing* PID:791169 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:01:26 instance-1 lfd[791513]: *User Processing* PID:791509 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:01:26 instance-1 lfd[791513]: *User Processing* PID:791508 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:02:26 instance-1 lfd[791882]: *User Processing* PID:791868 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:06:26 instance-1 lfd[793505]: *User Processing* PID:793501 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:07:26 instance-1 lfd[793868]: *User Processing* PID:793864 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:08:26 instance-1 lfd[794338]: *User Processing* PID:794330 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:10:26 instance-1 lfd[795154]: *User Processing* PID:795145 Kill:0 User:comphomes VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:10:27 instance-1 lfd[795154]: *User Processing* PID:795140 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:10:27 instance-1 lfd[795154]: *User Processing* PID:795146 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:11:26 instance-1 lfd[795583]: *User Processing* PID:795579 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:13:26 instance-1 lfd[796428]: *User Processing* PID:796421 Kill:0 User:geneticson VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:14:26 instance-1 lfd[796776]: *User Processing* PID:796771 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:15:26 instance-1 lfd[797207]: *User Processing* PID:797198 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:15:27 instance-1 lfd[797205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 12:15:27 instance-1 lfd[797205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 12:16:26 instance-1 lfd[797621]: *User Processing* PID:797617 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:17:26 instance-1 lfd[797963]: *User Processing* PID:797958 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:18:26 instance-1 lfd[798468]: *User Processing* PID:798463 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:18:27 instance-1 lfd[798468]: *User Processing* PID:798462 Kill:0 User:geneticson VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:19:26 instance-1 lfd[798867]: *User Processing* PID:798862 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:20:27 instance-1 lfd[799284]: *User Processing* PID:799275 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:22:27 instance-1 lfd[799963]: *User Processing* PID:799957 Kill:0 User:geneticson VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:22:27 instance-1 lfd[799963]: *User Processing* PID:799958 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:24:27 instance-1 lfd[800819]: *User Processing* PID:800815 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:25:27 instance-1 lfd[801211]: *User Processing* PID:801141 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 12:25:27 instance-1 lfd[801211]: *User Processing* PID:801199 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:26:27 instance-1 lfd[801572]: *User Processing* PID:801556 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 12:27:27 instance-1 lfd[801932]: *User Processing* PID:801925 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:28:27 instance-1 lfd[802404]: *User Processing* PID:802400 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:30:27 instance-1 lfd[803153]: *User Processing* PID:803142 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:32:27 instance-1 lfd[803886]: *User Processing* PID:803878 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:34:27 instance-1 lfd[804731]: *User Processing* PID:804721 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:36:27 instance-1 lfd[805425]: *User Processing* PID:805414 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:36:27 instance-1 lfd[805425]: *User Processing* PID:805416 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:37:27 instance-1 lfd[805773]: *User Processing* PID:805766 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:38:27 instance-1 lfd[806225]: *User Processing* PID:806221 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:41:27 instance-1 lfd[807296]: *User Processing* PID:807289 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:43:27 instance-1 lfd[808136]: *User Processing* PID:808132 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:44:27 instance-1 lfd[808493]: *User Processing* PID:808489 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:46:27 instance-1 lfd[809249]: *User Processing* PID:809244 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:47:27 instance-1 lfd[809658]: *User Processing* PID:809654 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:48:27 instance-1 lfd[810210]: *User Processing* PID:810206 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:49:28 instance-1 lfd[810641]: *User Processing* PID:810634 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:50:28 instance-1 lfd[811197]: *User Processing* PID:811189 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:51:28 instance-1 lfd[811687]: *User Processing* PID:811682 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:51:28 instance-1 lfd[811687]: *User Processing* PID:811680 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:52:28 instance-1 lfd[812106]: *User Processing* PID:812102 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:28 instance-1 lfd[812570]: *User Processing* PID:812544 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:28 instance-1 lfd[812570]: *User Processing* PID:812504 Kill:0 User:bmswinslow VM:654(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:28 instance-1 lfd[812570]: *User Processing* PID:812560 Kill:0 User:bmswinslow VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:29 instance-1 lfd[812570]: *User Processing* PID:812542 Kill:0 User:geneticson VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:29 instance-1 lfd[812570]: *User Processing* PID:812378 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:29 instance-1 lfd[812570]: *User Processing* PID:812540 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:30 instance-1 lfd[812570]: *User Processing* PID:812334 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:53:30 instance-1 lfd[812570]: *User Processing* PID:812561 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:54:28 instance-1 lfd[813152]: *User Processing* PID:813143 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:54:28 instance-1 lfd[813152]: *User Processing* PID:813142 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:54:29 instance-1 lfd[813152]: *User Processing* PID:813144 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:55:28 instance-1 lfd[813557]: *User Processing* PID:813539 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:55:29 instance-1 lfd[813557]: *User Processing* PID:813546 Kill:0 User:geneticson VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:55:29 instance-1 lfd[813557]: *User Processing* PID:813544 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:56:28 instance-1 lfd[813937]: *User Processing* PID:813927 Kill:0 User:geneticson VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:57:28 instance-1 lfd[814295]: *User Processing* PID:814288 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:57:29 instance-1 lfd[814295]: *User Processing* PID:814286 Kill:0 User:geneticson VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:58:28 instance-1 lfd[814686]: *LOAD* 5 minute load average is 6.04, threshold is 6 - email sent
Mar 19 12:58:29 instance-1 lfd[814687]: *User Processing* PID:814497 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:58:29 instance-1 lfd[814687]: *User Processing* PID:814652 Kill:0 User:geneticson VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:58:29 instance-1 lfd[814687]: *User Processing* PID:814531 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:58:30 instance-1 lfd[814687]: *User Processing* PID:814667 Kill:0 User:bmswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:58:30 instance-1 lfd[814687]: *User Processing* PID:814647 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:59:28 instance-1 lfd[815138]: *User Processing* PID:815129 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 12:59:29 instance-1 lfd[815138]: *User Processing* PID:815128 Kill:0 User:geneticson VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:00:29 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 13:00:29 instance-1 lfd[815505]: *User Processing* PID:815489 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:00:29 instance-1 lfd[815505]: *User Processing* PID:815481 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:00:29 instance-1 lfd[815505]: *User Processing* PID:815490 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:01:29 instance-1 lfd[815838]: *User Processing* PID:815828 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:02:29 instance-1 lfd[816176]: *User Processing* PID:816166 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:02:29 instance-1 lfd[816176]: *User Processing* PID:816162 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:04:29 instance-1 lfd[816996]: *User Processing* PID:816987 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:04:30 instance-1 lfd[816996]: *User Processing* PID:816969 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:04:30 instance-1 lfd[816996]: *User Processing* PID:816982 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:05:29 instance-1 lfd[817371]: *User Processing* PID:817360 Kill:0 User:geneticson VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:05:30 instance-1 lfd[817371]: *User Processing* PID:817361 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:06:29 instance-1 lfd[817697]: *User Processing* PID:817685 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:06:30 instance-1 lfd[817697]: *User Processing* PID:817694 Kill:0 User:geneticson VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:08:29 instance-1 lfd[818360]: *User Processing* PID:818352 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:08:30 instance-1 lfd[818360]: *User Processing* PID:818344 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:09:30 instance-1 lfd[818826]: *User Processing* PID:818822 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:09:30 instance-1 lfd[818826]: *User Processing* PID:818821 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:10:30 instance-1 lfd[819229]: *User Processing* PID:819221 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:11:30 instance-1 lfd[819594]: *User Processing* PID:819587 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:11:30 instance-1 lfd[819594]: *User Processing* PID:819591 Kill:0 User:geneticson VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:12:30 instance-1 lfd[819952]: *User Processing* PID:819947 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:13:30 instance-1 lfd[820318]: *User Processing* PID:820312 Kill:0 User:geneticson VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:13:30 instance-1 lfd[820318]: *User Processing* PID:820311 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:14:30 instance-1 lfd[820812]: *User Processing* PID:820808 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:14:30 instance-1 lfd[820812]: *User Processing* PID:820809 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:15:30 instance-1 lfd[821255]: *User Processing* PID:821248 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:15:30 instance-1 lfd[821255]: *User Processing* PID:821247 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:15:30 instance-1 lfd[821254]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 13:15:30 instance-1 lfd[821254]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 13:16:30 instance-1 lfd[821665]: *User Processing* PID:821519 Kill:0 User:newswinslow VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:16:30 instance-1 lfd[821665]: *User Processing* PID:821658 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:16:30 instance-1 lfd[821665]: *User Processing* PID:821587 Kill:0 User:newswinslow VM:597(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:17:30 instance-1 lfd[822080]: *User Processing* PID:822076 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:17:30 instance-1 lfd[822080]: *User Processing* PID:821930 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:18:30 instance-1 lfd[822464]: *User Processing* PID:822436 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:19:30 instance-1 lfd[822955]: *User Processing* PID:822884 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:20:30 instance-1 lfd[823325]: *User Processing* PID:823318 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:21:30 instance-1 lfd[823696]: *User Processing* PID:823622 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:23:30 instance-1 lfd[824404]: *User Processing* PID:824401 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:23:30 instance-1 lfd[824404]: *User Processing* PID:824394 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:24:30 instance-1 lfd[824893]: *User Processing* PID:824886 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:24:30 instance-1 lfd[824893]: *User Processing* PID:824890 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:24:31 instance-1 lfd[824893]: *User Processing* PID:824646 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 13:25:30 instance-1 lfd[825298]: *User Processing* PID:825287 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:27:30 instance-1 lfd[826011]: *User Processing* PID:826007 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:28:31 instance-1 lfd[826351]: *User Processing* PID:826346 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:28:31 instance-1 lfd[826351]: *User Processing* PID:826345 Kill:0 User:mainpoint VM:604(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:29:31 instance-1 lfd[826854]: *User Processing* PID:826851 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:32:31 instance-1 lfd[827960]: *User Processing* PID:827952 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:34:31 instance-1 lfd[828703]: *User Processing* PID:828699 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:35:31 instance-1 lfd[829287]: *User Processing* PID:829280 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:38:31 instance-1 lfd[830382]: *User Processing* PID:830376 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:38:31 instance-1 lfd[830382]: *User Processing* PID:830375 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:39:31 instance-1 lfd[830823]: *User Processing* PID:830820 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:41:31 instance-1 lfd[831820]: *User Processing* PID:831808 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:41:31 instance-1 lfd[831820]: *User Processing* PID:831809 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:42:31 instance-1 lfd[832212]: *User Processing* PID:832203 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:42:31 instance-1 lfd[832212]: *User Processing* PID:832205 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:43:31 instance-1 lfd[832590]: *User Processing* PID:832583 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:44:31 instance-1 lfd[832973]: *User Processing* PID:832970 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:45:31 instance-1 lfd[833577]: *User Processing* PID:833569 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:47:31 instance-1 lfd[834362]: *User Processing* PID:834356 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:48:31 instance-1 lfd[834751]: *User Processing* PID:834748 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:49:31 instance-1 lfd[835164]: *User Processing* PID:835160 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:49:31 instance-1 lfd[835164]: *User Processing* PID:835161 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:50:31 instance-1 lfd[835742]: *User Processing* PID:835733 Kill:0 User:comphomes VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:50:31 instance-1 lfd[835742]: *User Processing* PID:835734 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:51:31 instance-1 lfd[836094]: *User Processing* PID:836090 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:53:31 instance-1 lfd[836747]: *User Processing* PID:836742 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:53:32 instance-1 lfd[836747]: *User Processing* PID:836743 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:56:32 instance-1 lfd[838032]: *User Processing* PID:838027 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:56:32 instance-1 lfd[838032]: *User Processing* PID:838028 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 13:59:32 instance-1 lfd[839294]: *User Processing* PID:839287 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:00:32 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 14:00:32 instance-1 lfd[839999]: *User Processing* PID:839985 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:01:32 instance-1 lfd[840501]: *User Processing* PID:840494 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:03:32 instance-1 lfd[841480]: *User Processing* PID:841474 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:04:32 instance-1 lfd[841935]: *User Processing* PID:841931 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:05:32 instance-1 lfd[842502]: *User Processing* PID:842490 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:06:32 instance-1 lfd[842886]: *User Processing* PID:842878 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:07:32 instance-1 lfd[843265]: *User Processing* PID:843258 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:08:32 instance-1 lfd[843639]: *User Processing* PID:843631 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:11:32 instance-1 lfd[845006]: *User Processing* PID:845001 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:13:32 instance-1 lfd[845674]: *User Processing* PID:845666 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:15:32 instance-1 lfd[846536]: *User Processing* PID:846528 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:15:33 instance-1 lfd[846534]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 14:15:33 instance-1 lfd[846534]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 14:16:32 instance-1 lfd[846891]: *User Processing* PID:846887 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:17:32 instance-1 lfd[847231]: *User Processing* PID:847226 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:19:32 instance-1 lfd[847928]: *User Processing* PID:847924 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:21:33 instance-1 lfd[848790]: *User Processing* PID:848786 Kill:0 User:comphomes VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:22:33 instance-1 lfd[849142]: *User Processing* PID:849138 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:23:33 instance-1 lfd[849495]: *User Processing* PID:849488 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:26:33 instance-1 lfd[850688]: *User Processing* PID:850684 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:27:33 instance-1 lfd[851047]: *User Processing* PID:851042 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:29:33 instance-1 lfd[851718]: *User Processing* PID:851714 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:29:38 instance-1 lfd[851752]: (smtpauth) Failed SMTP AUTH login from 81.30.107.109 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 19 14:30:33 instance-1 lfd[852283]: *User Processing* PID:852262 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 14:33:33 instance-1 lfd[853332]: *User Processing* PID:853319 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 14:35:33 instance-1 lfd[854185]: *User Processing* PID:854172 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:37:33 instance-1 lfd[854861]: *User Processing* PID:854856 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:38:33 instance-1 lfd[855231]: *User Processing* PID:855227 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:39:33 instance-1 lfd[855603]: *User Processing* PID:855597 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:40:33 instance-1 lfd[856132]: *User Processing* PID:856123 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:41:33 instance-1 lfd[856455]: *User Processing* PID:856451 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:42:33 instance-1 lfd[856815]: *User Processing* PID:856810 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:43:33 instance-1 lfd[857235]: *User Processing* PID:857229 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:44:33 instance-1 lfd[857598]: *User Processing* PID:857472 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 19 14:45:34 instance-1 lfd[858175]: *User Processing* PID:857897 Kill:0 User:winslow VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 19 14:45:34 instance-1 lfd[858175]: *User Processing* PID:858166 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:46:34 instance-1 lfd[858558]: *User Processing* PID:858551 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:47:34 instance-1 lfd[858929]: *User Processing* PID:858924 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:48:34 instance-1 lfd[859316]: *User Processing* PID:859261 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 14:49:34 instance-1 lfd[859668]: *User Processing* PID:859663 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:49:34 instance-1 lfd[859668]: *User Processing* PID:859595 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 14:52:34 instance-1 lfd[860834]: *User Processing* PID:860827 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:55:34 instance-1 lfd[862130]: *User Processing* PID:862118 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:57:34 instance-1 lfd[862808]: *User Processing* PID:862803 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:58:34 instance-1 lfd[863119]: *User Processing* PID:863115 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 14:59:34 instance-1 lfd[863460]: *User Processing* PID:863419 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 14:59:34 instance-1 lfd[863460]: *User Processing* PID:863454 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:00:34 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 15:00:34 instance-1 lfd[863950]: *User Processing* PID:863909 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:02:34 instance-1 lfd[864745]: *User Processing* PID:864739 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:02:34 instance-1 lfd[864745]: *User Processing* PID:864740 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:03:34 instance-1 lfd[865114]: *User Processing* PID:865106 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:03:34 instance-1 lfd[865114]: *User Processing* PID:865105 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:07:34 instance-1 lfd[866750]: *User Processing* PID:866746 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:08:34 instance-1 lfd[867083]: *User Processing* PID:867078 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:11:35 instance-1 lfd[868309]: *User Processing* PID:868305 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:13:35 instance-1 lfd[869012]: *User Processing* PID:869007 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:14:35 instance-1 lfd[869329]: *User Processing* PID:869324 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:15:37 instance-1 lfd[869823]: *Excessive Processes* User:trafman Kill:0 Process Count:31
Mar 19 15:15:38 instance-1 lfd[869823]: *User Processing* PID:869792 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:15:38 instance-1 lfd[869823]: *User Processing* PID:869771 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:15:39 instance-1 lfd[869821]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 15:15:40 instance-1 lfd[869821]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 15:16:35 instance-1 lfd[870378]: *User Processing* PID:870370 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:18:35 instance-1 lfd[871075]: *User Processing* PID:871070 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:19:35 instance-1 lfd[871394]: *User Processing* PID:871387 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:22:35 instance-1 lfd[872575]: *User Processing* PID:872569 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:22:36 instance-1 lfd[872575]: *User Processing* PID:872570 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:23:35 instance-1 lfd[872893]: *User Processing* PID:872889 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:24:36 instance-1 lfd[873212]: *User Processing* PID:873207 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:28:36 instance-1 lfd[874783]: *User Processing* PID:874774 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:28:36 instance-1 lfd[874783]: *User Processing* PID:874778 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:30:36 instance-1 lfd[875574]: *User Processing* PID:875562 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:31:36 instance-1 lfd[876093]: *User Processing* PID:876088 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 15:32:36 instance-1 lfd[876494]: *User Processing* PID:876488 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:33:36 instance-1 lfd[876904]: *User Processing* PID:876900 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:34:36 instance-1 lfd[877231]: *User Processing* PID:877227 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:35:36 instance-1 lfd[877653]: *User Processing* PID:877642 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:36:36 instance-1 lfd[878102]: *User Processing* PID:878095 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:38:36 instance-1 lfd[878758]: *User Processing* PID:878751 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:41:36 instance-1 lfd[879998]: *User Processing* PID:879993 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:42:36 instance-1 lfd[880351]: *User Processing* PID:880335 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 15:42:36 instance-1 lfd[880351]: *User Processing* PID:880343 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:43:36 instance-1 lfd[880725]: *User Processing* PID:880721 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:50:36 instance-1 lfd[883631]: *User Processing* PID:883622 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:51:36 instance-1 lfd[884142]: *User Processing* PID:884138 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:52:36 instance-1 lfd[884497]: *User Processing* PID:884493 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:54:36 instance-1 lfd[885348]: *User Processing* PID:885344 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:55:37 instance-1 lfd[885752]: *User Processing* PID:885743 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:57:37 instance-1 lfd[886551]: *User Processing* PID:886547 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:58:37 instance-1 lfd[886898]: *User Processing* PID:886894 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 15:59:37 instance-1 lfd[887229]: *User Processing* PID:887218 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:00:37 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 16:01:37 instance-1 lfd[888101]: *User Processing* PID:888097 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:02:37 instance-1 lfd[888471]: *User Processing* PID:888444 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 16:02:37 instance-1 lfd[888471]: *User Processing* PID:888467 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:04:37 instance-1 lfd[889151]: *User Processing* PID:889145 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:09:37 instance-1 lfd[891163]: *User Processing* PID:891159 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:11:37 instance-1 lfd[892000]: *User Processing* PID:891993 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:17:37 instance-1 lfd[894276]: *User Processing* PID:894267 Kill:0 User:opthirecomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:17:37 instance-1 lfd[894276]: *User Processing* PID:894272 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:18:37 instance-1 lfd[894679]: *User Processing* PID:894672 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:19:37 instance-1 lfd[895031]: *User Processing* PID:895027 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:20:37 instance-1 lfd[895426]: *User Processing* PID:895417 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:20:37 instance-1 lfd[895423]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 16:20:38 instance-1 lfd[895423]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 16:21:37 instance-1 lfd[895923]: *User Processing* PID:895915 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:23:37 instance-1 lfd[896555]: *User Processing* PID:896551 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:24:37 instance-1 lfd[896892]: *User Processing* PID:896888 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:25:37 instance-1 lfd[897269]: *User Processing* PID:897260 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:26:37 instance-1 lfd[897715]: *User Processing* PID:897705 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:26:38 instance-1 lfd[897715]: *User Processing* PID:897709 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:26:38 instance-1 lfd[897715]: *User Processing* PID:897711 Kill:0 User:comphomes VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:28:37 instance-1 lfd[898424]: *User Processing* PID:898416 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:29:37 instance-1 lfd[898726]: *User Processing* PID:898722 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:32:38 instance-1 lfd[899980]: *User Processing* PID:899975 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:33:38 instance-1 lfd[900381]: *User Processing* PID:900332 Kill:0 User:winslowgroupweb VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:33:38 instance-1 lfd[900381]: *User Processing* PID:900376 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:34:38 instance-1 lfd[900770]: *User Processing* PID:900763 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:34:38 instance-1 lfd[900770]: *User Processing* PID:900578 Kill:0 User:winslowgroupweb VM:590(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:34:38 instance-1 lfd[900770]: *User Processing* PID:900762 Kill:0 User:winslowgroupweb VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:35:38 instance-1 lfd[901208]: *User Processing* PID:901197 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:36:38 instance-1 lfd[901707]: *User Processing* PID:901699 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:36:38 instance-1 lfd[901707]: *User Processing* PID:901700 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:37:38 instance-1 lfd[902067]: *User Processing* PID:902060 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:40:38 instance-1 lfd[903230]: *User Processing* PID:903221 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:41:38 instance-1 lfd[903603]: *User Processing* PID:903599 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:43:38 instance-1 lfd[904454]: *User Processing* PID:904447 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:44:38 instance-1 lfd[904838]: *User Processing* PID:904830 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:45:38 instance-1 lfd[905258]: *User Processing* PID:905250 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:46:38 instance-1 lfd[905625]: *User Processing* PID:905615 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:47:38 instance-1 lfd[906156]: *User Processing* PID:906148 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:47:38 instance-1 lfd[906156]: *User Processing* PID:906149 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:48:38 instance-1 lfd[906610]: *User Processing* PID:906606 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:49:38 instance-1 lfd[907011]: *User Processing* PID:907006 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:49:38 instance-1 lfd[907011]: *User Processing* PID:907007 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:50:38 instance-1 lfd[907464]: *User Processing* PID:907454 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:51:38 instance-1 lfd[907877]: *User Processing* PID:907871 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:51:38 instance-1 lfd[907877]: *User Processing* PID:907818 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 16:53:38 instance-1 lfd[908788]: *User Processing* PID:908781 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:53:38 instance-1 lfd[908788]: *User Processing* PID:908780 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:54:38 instance-1 lfd[909251]: *User Processing* PID:909247 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:55:38 instance-1 lfd[909650]: *User Processing* PID:909642 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:55:38 instance-1 lfd[909650]: *User Processing* PID:909641 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:57:38 instance-1 lfd[910479]: *User Processing* PID:910475 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:58:38 instance-1 lfd[910828]: *User Processing* PID:910824 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:58:38 instance-1 lfd[910828]: *User Processing* PID:910823 Kill:0 User:rcpacom VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:59:38 instance-1 lfd[911179]: *User Processing* PID:911175 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:59:38 instance-1 lfd[911179]: *User Processing* PID:911174 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 16:59:39 instance-1 lfd[911179]: *User Processing* PID:911173 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:00:38 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 17:00:38 instance-1 lfd[911653]: *User Processing* PID:911642 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:00:39 instance-1 lfd[911653]: *User Processing* PID:911569 Kill:0 User:bmswinslow VM:698(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:01:38 instance-1 lfd[912052]: *User Processing* PID:912047 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:02:29 instance-1 lfd[912518]: (smtpauth) Failed SMTP AUTH login from 81.30.107.146 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 19 17:02:38 instance-1 lfd[912603]: *User Processing* PID:912599 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:03:38 instance-1 lfd[912987]: *User Processing* PID:912983 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:03:39 instance-1 lfd[912987]: *User Processing* PID:912974 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 17:04:39 instance-1 lfd[913379]: *User Processing* PID:913375 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:04:39 instance-1 lfd[913379]: *User Processing* PID:913374 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:05:39 instance-1 lfd[913807]: *User Processing* PID:913794 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 17:05:39 instance-1 lfd[913807]: *User Processing* PID:913799 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:07:39 instance-1 lfd[914657]: *User Processing* PID:914653 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:07:39 instance-1 lfd[914657]: *User Processing* PID:914652 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:08:39 instance-1 lfd[915004]: *User Processing* PID:915000 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:09:39 instance-1 lfd[915387]: *User Processing* PID:915382 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:09:39 instance-1 lfd[915387]: *User Processing* PID:915383 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:10:39 instance-1 lfd[915790]: *User Processing* PID:915782 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:11:39 instance-1 lfd[916122]: *User Processing* PID:916118 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:13:39 instance-1 lfd[916977]: *User Processing* PID:916970 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:16:39 instance-1 lfd[918069]: *User Processing* PID:918062 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:17:39 instance-1 lfd[918554]: *User Processing* PID:918549 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:19:39 instance-1 lfd[919389]: *User Processing* PID:919385 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:20:39 instance-1 lfd[919840]: *User Processing* PID:919829 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:20:39 instance-1 lfd[919838]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 17:20:39 instance-1 lfd[919838]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 17:22:39 instance-1 lfd[920774]: *User Processing* PID:920770 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:23:39 instance-1 lfd[921169]: *User Processing* PID:921162 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:25:39 instance-1 lfd[922048]: *User Processing* PID:922036 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:27:39 instance-1 lfd[922905]: *User Processing* PID:922898 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:27:39 instance-1 lfd[922905]: *User Processing* PID:922896 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:27:39 instance-1 lfd[922905]: *User Processing* PID:922897 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:28:39 instance-1 lfd[923277]: *User Processing* PID:923273 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:29:39 instance-1 lfd[923628]: *User Processing* PID:923620 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:29:39 instance-1 lfd[923628]: *User Processing* PID:923619 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:30:39 instance-1 lfd[924042]: *User Processing* PID:924034 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:32:39 instance-1 lfd[924919]: *User Processing* PID:924915 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:34:39 instance-1 lfd[925624]: *User Processing* PID:925619 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:34:39 instance-1 lfd[925624]: *User Processing* PID:925620 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:35:39 instance-1 lfd[926066]: *User Processing* PID:926057 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:36:39 instance-1 lfd[926422]: *User Processing* PID:926418 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:36:39 instance-1 lfd[926422]: *User Processing* PID:926417 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:37:39 instance-1 lfd[926953]: *User Processing* PID:926949 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:39:39 instance-1 lfd[927694]: *User Processing* PID:927690 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:39:40 instance-1 lfd[927694]: *User Processing* PID:927689 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:40:40 instance-1 lfd[928099]: *User Processing* PID:928091 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:41:40 instance-1 lfd[928475]: *User Processing* PID:928471 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:42:40 instance-1 lfd[928872]: *User Processing* PID:928834 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:42:40 instance-1 lfd[928872]: *User Processing* PID:928857 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:43:40 instance-1 lfd[929337]: *User Processing* PID:929333 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:43:40 instance-1 lfd[929337]: *User Processing* PID:929332 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:44:40 instance-1 lfd[929691]: *User Processing* PID:929684 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:44:40 instance-1 lfd[929691]: *User Processing* PID:929683 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:46:40 instance-1 lfd[930483]: *User Processing* PID:930479 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:49:40 instance-1 lfd[931695]: *User Processing* PID:931691 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:50:40 instance-1 lfd[932121]: *User Processing* PID:932105 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:51:40 instance-1 lfd[932474]: *User Processing* PID:932467 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933782 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933780 Kill:0 User:geneticson VM:624(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933781 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933774 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:55:40 instance-1 lfd[934234]: *User Processing* PID:934217 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:55:40 instance-1 lfd[934234]: *User Processing* PID:934218 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:56:40 instance-1 lfd[934596]: *User Processing* PID:934592 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:57:40 instance-1 lfd[934958]: *User Processing* PID:934950 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:57:40 instance-1 lfd[934958]: *User Processing* PID:934954 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:58:40 instance-1 lfd[935467]: *User Processing* PID:935459 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:59:40 instance-1 lfd[935835]: *User Processing* PID:935827 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 17:59:40 instance-1 lfd[935835]: *User Processing* PID:935828 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:00:40 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 18:00:40 instance-1 lfd[936310]: *User Processing* PID:936292 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:01:40 instance-1 lfd[936690]: *User Processing* PID:936681 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:01:40 instance-1 lfd[936690]: *User Processing* PID:936683 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:02:40 instance-1 lfd[937075]: *User Processing* PID:937068 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:03:40 instance-1 lfd[937671]: *User Processing* PID:937666 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:04:40 instance-1 lfd[938146]: *User Processing* PID:938142 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:04:40 instance-1 lfd[938146]: *User Processing* PID:938138 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:04:40 instance-1 lfd[938146]: *User Processing* PID:938136 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:06:40 instance-1 lfd[938969]: *User Processing* PID:938965 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:08:40 instance-1 lfd[939816]: *User Processing* PID:939812 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:09:40 instance-1 lfd[940205]: *User Processing* PID:940201 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:10:40 instance-1 lfd[940618]: *User Processing* PID:940610 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:11:40 instance-1 lfd[940989]: *User Processing* PID:940985 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:12:41 instance-1 lfd[941350]: *User Processing* PID:941346 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:12:41 instance-1 lfd[941350]: *User Processing* PID:941345 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:13:41 instance-1 lfd[941868]: *User Processing* PID:941864 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:14:41 instance-1 lfd[942231]: *User Processing* PID:942227 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:15:41 instance-1 lfd[942694]: *User Processing* PID:942681 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:16:41 instance-1 lfd[943082]: *User Processing* PID:943077 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:16:41 instance-1 lfd[943082]: *User Processing* PID:943078 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:17:41 instance-1 lfd[943466]: *User Processing* PID:943462 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:18:41 instance-1 lfd[944008]: *User Processing* PID:944003 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:19:41 instance-1 lfd[944362]: *User Processing* PID:944355 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:20:41 instance-1 lfd[944779]: *User Processing* PID:944766 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:20:41 instance-1 lfd[944777]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 18:20:41 instance-1 lfd[944777]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 18:21:41 instance-1 lfd[945136]: *User Processing* PID:945128 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:21:41 instance-1 lfd[945136]: *User Processing* PID:945132 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:22:41 instance-1 lfd[945501]: *User Processing* PID:945494 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:22:41 instance-1 lfd[945501]: *User Processing* PID:945493 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:23:41 instance-1 lfd[945990]: *User Processing* PID:945983 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:26:41 instance-1 lfd[947129]: *User Processing* PID:947125 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:27:41 instance-1 lfd[947491]: *User Processing* PID:947487 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:29:41 instance-1 lfd[948366]: *User Processing* PID:948355 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:29:41 instance-1 lfd[948366]: *User Processing* PID:948351 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:29:41 instance-1 lfd[948366]: *User Processing* PID:948352 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:31:41 instance-1 lfd[949162]: *User Processing* PID:949154 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:31:41 instance-1 lfd[949162]: *User Processing* PID:949155 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:32:41 instance-1 lfd[949575]: *User Processing* PID:949567 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:35:41 instance-1 lfd[950828]: *User Processing* PID:950816 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:35:41 instance-1 lfd[950828]: *User Processing* PID:950817 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:36:41 instance-1 lfd[951223]: *User Processing* PID:951219 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:37:41 instance-1 lfd[951586]: *User Processing* PID:951582 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:38:41 instance-1 lfd[951940]: *User Processing* PID:951936 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:41:41 instance-1 lfd[953192]: *User Processing* PID:953181 Kill:0 User:nlph VM:594(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:41:42 instance-1 lfd[953192]: *User Processing* PID:953188 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:44:42 instance-1 lfd[954415]: *User Processing* PID:954410 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:44:42 instance-1 lfd[954415]: *User Processing* PID:954411 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:46:42 instance-1 lfd[955211]: *User Processing* PID:955207 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:46:42 instance-1 lfd[955211]: *User Processing* PID:955075 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 18:48:42 instance-1 lfd[955976]: *User Processing* PID:955972 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:51:42 instance-1 lfd[957490]: *User Processing* PID:957481 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:52:42 instance-1 lfd[957913]: *User Processing* PID:957905 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:52:42 instance-1 lfd[957913]: *User Processing* PID:957906 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:53:42 instance-1 lfd[958319]: *User Processing* PID:958315 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:55:42 instance-1 lfd[959423]: *User Processing* PID:959415 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:56:42 instance-1 lfd[959858]: *User Processing* PID:959852 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:56:42 instance-1 lfd[959858]: *User Processing* PID:959854 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:56:42 instance-1 lfd[959858]: *User Processing* PID:959851 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:58:42 instance-1 lfd[960688]: *User Processing* PID:960680 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:59:42 instance-1 lfd[961257]: *User Processing* PID:961250 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:59:42 instance-1 lfd[961257]: *User Processing* PID:961246 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 18:59:42 instance-1 lfd[961257]: *User Processing* PID:961247 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:00:42 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 19:00:42 instance-1 lfd[961740]: *User Processing* PID:961726 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:01:42 instance-1 lfd[962113]: *User Processing* PID:962106 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:01:42 instance-1 lfd[962113]: *User Processing* PID:962105 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:02:42 instance-1 lfd[962499]: *User Processing* PID:962495 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:04:42 instance-1 lfd[963351]: *User Processing* PID:963347 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:05:42 instance-1 lfd[963808]: *User Processing* PID:963795 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:05:42 instance-1 lfd[963808]: *User Processing* PID:963799 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:05:43 instance-1 lfd[963808]: *User Processing* PID:963794 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:05:43 instance-1 lfd[963808]: *User Processing* PID:963800 Kill:0 User:winslowgroupweb VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:07:42 instance-1 lfd[964680]: *User Processing* PID:964672 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:07:42 instance-1 lfd[964680]: *User Processing* PID:964676 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:08:42 instance-1 lfd[965063]: *User Processing* PID:965058 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:08:42 instance-1 lfd[965063]: *User Processing* PID:965057 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:08:42 instance-1 lfd[965063]: *User Processing* PID:965059 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:09:42 instance-1 lfd[965614]: *User Processing* PID:965610 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:10:42 instance-1 lfd[966069]: *User Processing* PID:966052 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:10:42 instance-1 lfd[966069]: *User Processing* PID:966050 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:11:42 instance-1 lfd[966484]: *User Processing* PID:966480 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:11:42 instance-1 lfd[966484]: *User Processing* PID:966479 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:12:42 instance-1 lfd[966882]: *User Processing* PID:966877 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:12:43 instance-1 lfd[966882]: *User Processing* PID:966874 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:12:43 instance-1 lfd[966882]: *User Processing* PID:966878 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:14:42 instance-1 lfd[967820]: *User Processing* PID:967814 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:14:43 instance-1 lfd[967820]: *User Processing* PID:967815 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:14:43 instance-1 lfd[967820]: *User Processing* PID:967813 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:15:43 instance-1 lfd[968291]: *User Processing* PID:968276 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:16:43 instance-1 lfd[968696]: *User Processing* PID:968692 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:16:43 instance-1 lfd[968696]: *User Processing* PID:968691 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:17:43 instance-1 lfd[969099]: *User Processing* PID:969095 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969958 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969956 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969957 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969955 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:20:43 instance-1 lfd[970641]: *User Processing* PID:970624 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:20:43 instance-1 lfd[970641]: *User Processing* PID:970627 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:20:43 instance-1 lfd[970641]: *User Processing* PID:970625 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:20:43 instance-1 lfd[970639]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 19:20:43 instance-1 lfd[970639]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 19:23:43 instance-1 lfd[972067]: *User Processing* PID:972062 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:24:43 instance-1 lfd[972456]: *User Processing* PID:972452 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:25:43 instance-1 lfd[973062]: *User Processing* PID:973044 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:25:43 instance-1 lfd[973062]: *User Processing* PID:973048 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:29:43 instance-1 lfd[974606]: *User Processing* PID:974597 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:29:43 instance-1 lfd[974606]: *User Processing* PID:974601 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:30:43 instance-1 lfd[975212]: *User Processing* PID:975204 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:30:43 instance-1 lfd[975212]: *User Processing* PID:975199 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:30:43 instance-1 lfd[975212]: *User Processing* PID:975200 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:31:43 instance-1 lfd[975619]: *User Processing* PID:975615 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:32:43 instance-1 lfd[976090]: *User Processing* PID:976086 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:33:43 instance-1 lfd[976499]: *User Processing* PID:976491 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:33:43 instance-1 lfd[976499]: *User Processing* PID:976495 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:34:43 instance-1 lfd[976886]: *User Processing* PID:976882 Kill:0 User:comphomes VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:38:43 instance-1 lfd[978596]: *User Processing* PID:978588 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:38:43 instance-1 lfd[978596]: *User Processing* PID:978592 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:40:43 instance-1 lfd[979573]: *User Processing* PID:979563 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:41:43 instance-1 lfd[979983]: *User Processing* PID:979978 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:41:44 instance-1 lfd[979983]: *User Processing* PID:979979 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:43:43 instance-1 lfd[980770]: *User Processing* PID:980760 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:43:44 instance-1 lfd[980770]: *User Processing* PID:980766 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:43:44 instance-1 lfd[980770]: *User Processing* PID:980764 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:44:43 instance-1 lfd[981164]: *User Processing* PID:981160 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:45:44 instance-1 lfd[981771]: *User Processing* PID:981762 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:46:44 instance-1 lfd[982146]: *User Processing* PID:982142 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:49:44 instance-1 lfd[983240]: *User Processing* PID:983236 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:50:44 instance-1 lfd[983774]: *User Processing* PID:983766 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:51:44 instance-1 lfd[984136]: *User Processing* PID:984128 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:54:44 instance-1 lfd[985293]: *User Processing* PID:985289 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:56:44 instance-1 lfd[986162]: *User Processing* PID:986157 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:56:44 instance-1 lfd[986162]: *User Processing* PID:986158 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:57:44 instance-1 lfd[986528]: *User Processing* PID:986524 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:58:44 instance-1 lfd[986870]: *User Processing* PID:986866 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:58:44 instance-1 lfd[986870]: *User Processing* PID:986862 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 19:59:44 instance-1 lfd[987225]: *User Processing* PID:987218 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:00:44 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 20:00:44 instance-1 lfd[987818]: *User Processing* PID:987804 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:02:44 instance-1 lfd[988619]: *User Processing* PID:988612 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:03:21 instance-1 lfd[988882]: (smtpauth) Failed SMTP AUTH login from 80.94.92.131 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 19 20:03:44 instance-1 lfd[989050]: *User Processing* PID:989046 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:03:44 instance-1 lfd[989050]: *User Processing* PID:989042 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:04:44 instance-1 lfd[989492]: *User Processing* PID:989488 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:05:44 instance-1 lfd[990120]: *User Processing* PID:990110 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:05:44 instance-1 lfd[990120]: *User Processing* PID:990111 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:07:44 instance-1 lfd[990984]: *User Processing* PID:990975 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:07:44 instance-1 lfd[990984]: *User Processing* PID:990922 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 20:07:44 instance-1 lfd[990984]: *User Processing* PID:990980 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:08:44 instance-1 lfd[991414]: *User Processing* PID:991408 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:10:44 instance-1 lfd[992377]: *User Processing* PID:992361 Kill:0 User:newswinslow VM:544(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 20:10:44 instance-1 lfd[992377]: *User Processing* PID:992368 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:11:44 instance-1 lfd[992770]: *User Processing* PID:992766 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:14:44 instance-1 lfd[994049]: *User Processing* PID:994041 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:15:45 instance-1 lfd[994559]: *User Processing* PID:994550 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:15:45 instance-1 lfd[994559]: *User Processing* PID:994551 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:18:45 instance-1 lfd[995829]: *User Processing* PID:995823 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:18:45 instance-1 lfd[995829]: *User Processing* PID:995825 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:19:45 instance-1 lfd[996214]: *User Processing* PID:996209 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:19:45 instance-1 lfd[996214]: *User Processing* PID:996210 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:20:45 instance-1 lfd[996658]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 20:20:45 instance-1 lfd[996658]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 20:22:45 instance-1 lfd[997560]: *User Processing* PID:997553 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:23:45 instance-1 lfd[997930]: *User Processing* PID:997926 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:24:45 instance-1 lfd[998310]: *User Processing* PID:998306 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:25:45 instance-1 lfd[998742]: *User Processing* PID:998733 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:25:45 instance-1 lfd[998742]: *User Processing* PID:998734 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:26:45 instance-1 lfd[999270]: *User Processing* PID:999264 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:29:45 instance-1 lfd[1000611]: *User Processing* PID:1000604 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:30:45 instance-1 lfd[1001131]: *User Processing* PID:1001119 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:30:45 instance-1 lfd[1001131]: *User Processing* PID:1001117 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:31:45 instance-1 lfd[1001710]: *User Processing* PID:1001702 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:31:45 instance-1 lfd[1001710]: *User Processing* PID:1001703 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:32:45 instance-1 lfd[1002178]: *User Processing* PID:1002171 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:34:45 instance-1 lfd[1003012]: *User Processing* PID:1003004 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:34:45 instance-1 lfd[1003012]: *User Processing* PID:1003005 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:35:45 instance-1 lfd[1003458]: *User Processing* PID:1003447 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:36:45 instance-1 lfd[1003964]: *User Processing* PID:1003959 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:36:45 instance-1 lfd[1003964]: *User Processing* PID:1003960 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:37:45 instance-1 lfd[1004341]: *User Processing* PID:1004337 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:38:45 instance-1 lfd[1004754]: *Excessive Processes* User:rcpacom Kill:0 Process Count:12
Mar 19 20:38:45 instance-1 lfd[1004754]: *User Processing* PID:1004702 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 20:38:45 instance-1 lfd[1004754]: *User Processing* PID:1004747 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:39:45 instance-1 lfd[1005165]: *User Processing* PID:1005161 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:40:45 instance-1 lfd[1005585]: *User Processing* PID:1005575 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:40:45 instance-1 lfd[1005585]: *User Processing* PID:1005577 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:42:45 instance-1 lfd[1006487]: *User Processing* PID:1006482 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:42:45 instance-1 lfd[1006487]: *User Processing* PID:1006483 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:43:45 instance-1 lfd[1006969]: *User Processing* PID:1006961 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:44:45 instance-1 lfd[1007448]: *User Processing* PID:1007443 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:45:45 instance-1 lfd[1007974]: *User Processing* PID:1007965 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:47:45 instance-1 lfd[1009005]: *User Processing* PID:1008962 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 20:47:45 instance-1 lfd[1009005]: *User Processing* PID:1009001 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:48:45 instance-1 lfd[1009402]: *User Processing* PID:1009398 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:49:45 instance-1 lfd[1009769]: *User Processing* PID:1009764 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:50:45 instance-1 lfd[1010196]: *User Processing* PID:1010187 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:51:46 instance-1 lfd[1010697]: *User Processing* PID:1010692 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:51:46 instance-1 lfd[1010697]: *User Processing* PID:1010693 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:53:46 instance-1 lfd[1011432]: *User Processing* PID:1011428 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:54:46 instance-1 lfd[1011892]: *User Processing* PID:1011887 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:54:46 instance-1 lfd[1011892]: *User Processing* PID:1011888 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:55:46 instance-1 lfd[1012308]: *User Processing* PID:1012300 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:56:46 instance-1 lfd[1012841]: *User Processing* PID:1012834 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:56:46 instance-1 lfd[1012841]: *User Processing* PID:1012832 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 20:59:46 instance-1 lfd[1013966]: *User Processing* PID:1013959 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:00:46 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 21:00:46 instance-1 lfd[1014397]: *User Processing* PID:1014382 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:00:46 instance-1 lfd[1014397]: *User Processing* PID:1014383 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:01:46 instance-1 lfd[1014987]: *User Processing* PID:1014980 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:01:46 instance-1 lfd[1014987]: *User Processing* PID:1014982 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:02:46 instance-1 lfd[1015444]: *User Processing* PID:1015439 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:04:46 instance-1 lfd[1016331]: *User Processing* PID:1016324 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:06:46 instance-1 lfd[1017388]: *User Processing* PID:1017379 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:06:46 instance-1 lfd[1017388]: *User Processing* PID:1017376 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 21:07:46 instance-1 lfd[1017820]: *User Processing* PID:1017811 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:09:46 instance-1 lfd[1018656]: *User Processing* PID:1018651 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:10:46 instance-1 lfd[1019072]: *User Processing* PID:1019060 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:11:46 instance-1 lfd[1019437]: *User Processing* PID:1019433 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:14:46 instance-1 lfd[1020648]: *User Processing* PID:1020644 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:15:46 instance-1 lfd[1021074]: *User Processing* PID:1021063 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:16:46 instance-1 lfd[1021445]: *User Processing* PID:1021436 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:17:46 instance-1 lfd[1021945]: *User Processing* PID:1021941 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:17:46 instance-1 lfd[1021945]: *User Processing* PID:1021939 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:18:46 instance-1 lfd[1022329]: *User Processing* PID:1022320 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:18:46 instance-1 lfd[1022329]: *User Processing* PID:1022324 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:18:46 instance-1 lfd[1022329]: *User Processing* PID:1022325 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:19:46 instance-1 lfd[1022707]: *User Processing* PID:1022703 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:20:46 instance-1 lfd[1023111]: *User Processing* PID:1023100 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:20:47 instance-1 lfd[1023109]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 21:20:47 instance-1 lfd[1023109]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 21:21:46 instance-1 lfd[1023504]: *User Processing* PID:1023497 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:22:46 instance-1 lfd[1024029]: *User Processing* PID:1024025 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:22:46 instance-1 lfd[1024029]: *User Processing* PID:1024024 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:23:46 instance-1 lfd[1024460]: *User Processing* PID:1024453 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:23:46 instance-1 lfd[1024460]: *User Processing* PID:1024456 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:23:47 instance-1 lfd[1024460]: *User Processing* PID:1024455 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:24:46 instance-1 lfd[1024915]: *User Processing* PID:1024910 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:25:47 instance-1 lfd[1025378]: *User Processing* PID:1025369 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:26:46 instance-1 lfd[1025800]: *User Processing* PID:1025792 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:27:47 instance-1 lfd[1026338]: *User Processing* PID:1026334 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:27:47 instance-1 lfd[1026338]: *User Processing* PID:1026333 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:28:47 instance-1 lfd[1026786]: *User Processing* PID:1026781 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:32:47 instance-1 lfd[1028648]: *User Processing* PID:1028644 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:33:47 instance-1 lfd[1029053]: *User Processing* PID:1029049 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:33:47 instance-1 lfd[1029053]: *User Processing* PID:1029048 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:34:47 instance-1 lfd[1029421]: *User Processing* PID:1029413 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:34:47 instance-1 lfd[1029421]: *User Processing* PID:1029414 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:35:47 instance-1 lfd[1029877]: *User Processing* PID:1029866 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:37:47 instance-1 lfd[1030735]: *User Processing* PID:1030729 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:37:47 instance-1 lfd[1030735]: *User Processing* PID:1030730 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:38:47 instance-1 lfd[1031103]: *User Processing* PID:1031099 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:40:47 instance-1 lfd[1031901]: *User Processing* PID:1031889 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:41:47 instance-1 lfd[1032186]: *User Processing* PID:1032182 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:42:47 instance-1 lfd[1032484]: *User Processing* PID:1032477 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:44:47 instance-1 lfd[1033189]: *User Processing* PID:1033182 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:47:47 instance-1 lfd[1034145]: *User Processing* PID:1034141 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:49:47 instance-1 lfd[1035052]: *User Processing* PID:1035042 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:50:47 instance-1 lfd[1035516]: *User Processing* PID:1035505 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:50:47 instance-1 lfd[1035516]: *User Processing* PID:1035498 Kill:0 User:newswinslow VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 19 21:51:47 instance-1 lfd[1035892]: *User Processing* PID:1035817 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 21:53:47 instance-1 lfd[1036730]: *User Processing* PID:1036726 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:58:47 instance-1 lfd[1038648]: *User Processing* PID:1038644 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 21:59:52 instance-1 lfd[1039354]: *User Processing* PID:1039293 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:00:46 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 22:00:58 instance-1 lfd[1039827]: *System Integrity* has detected modified file(s): /usr/bin/cpapi1 /usr/bin/cpapi2 /usr/bin/cpapi3 /usr/bin/uapi /usr/sbin/whmapi0 /usr/sbin/whmapi1 /bin/cpapi1 /bin/cpapi2 /bin/cpapi3 /bin/uapi /sbin/whmapi0 /sbin/whmapi1 /usr/local/bin/crontab /usr/local/bin/passwd
Mar 19 22:02:52 instance-1 lfd[1041261]: *User Processing* PID:1041251 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:03:21 instance-1 lfd[551650]: Main Process: TERM
Mar 19 22:03:21 instance-1 lfd[551650]: daemon stopped
Mar 19 22:03:22 instance-1 lfd[1041792]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 19 22:03:22 instance-1 lfd[1041792]: LF_APACHE_ERRPORT: Set to [2]
Mar 19 22:03:22 instance-1 lfd[1041792]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 19 22:03:22 instance-1 lfd[1041792]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 19 22:03:22 instance-1 lfd[1041792]: CSF Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: IPv6 Enabled...
Mar 19 22:03:22 instance-1 lfd[1041792]: LOAD Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 19 22:03:22 instance-1 lfd[1041792]: Country Code Lookups...
Mar 19 22:03:22 instance-1 lfd[1041792]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 22:03:22 instance-1 lfd[1041792]: System Integrity Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Exploit Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Directory Watching...
Mar 19 22:03:22 instance-1 lfd[1041792]: Email Queue Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: ModSecurity IP D/B Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Email Relay Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Temp to Perm Block Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: System Statistics...
Mar 19 22:03:22 instance-1 lfd[1041792]: Process Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Account Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: SSH Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Webmin Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: SU Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Console Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: WHM Tracking...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/customlog...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/messages...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/exim_mainlog...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/secure...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /etc/apache2/logs/error_log...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /usr/local/cpanel/logs/access_log...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/maillog...
Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /usr/local/cpanel/logs/login_log...
Mar 19 22:03:23 instance-1 lfd[1041816]: *User Processing* PID:1041812 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:07:23 instance-1 lfd[1044088]: *User Processing* PID:1044083 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:08:23 instance-1 lfd[1044661]: *User Processing* PID:1044653 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:08:26 instance-1 lfd[1044659]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 22:08:26 instance-1 lfd[1044659]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 22:10:23 instance-1 lfd[1045721]: *User Processing* PID:1045710 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 22:11:23 instance-1 lfd[1046198]: *User Processing* PID:1046190 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:12:23 instance-1 lfd[1046603]: *User Processing* PID:1046596 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:15:23 instance-1 lfd[1047940]: *User Processing* PID:1047931 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:18:23 instance-1 lfd[1049119]: *User Processing* PID:1049087 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:19:23 instance-1 lfd[1049518]: *User Processing* PID:1049454 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 22:19:23 instance-1 lfd[1049518]: *User Processing* PID:1049514 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:20:23 instance-1 lfd[1049929]: *User Processing* PID:1049925 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:23:23 instance-1 lfd[1051077]: *User Processing* PID:1051068 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:25:23 instance-1 lfd[1051819]: *User Processing* PID:1051813 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:26:23 instance-1 lfd[1052163]: *User Processing* PID:1052158 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:29:24 instance-1 lfd[1053252]: *User Processing* PID:1053248 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:30:24 instance-1 lfd[1053607]: *User Processing* PID:1053603 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:31:24 instance-1 lfd[1053901]: *User Processing* PID:1053897 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:32:24 instance-1 lfd[1054242]: *User Processing* PID:1054238 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:33:24 instance-1 lfd[1054603]: *User Processing* PID:1054585 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:34:24 instance-1 lfd[1055025]: *User Processing* PID:1055018 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:35:24 instance-1 lfd[1055395]: *User Processing* PID:1055388 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:36:24 instance-1 lfd[1055687]: *User Processing* PID:1055682 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:37:24 instance-1 lfd[1056091]: *User Processing* PID:1056072 Kill:0 User:bmswinslow VM:646(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:37:24 instance-1 lfd[1056091]: *User Processing* PID:1056082 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:38:24 instance-1 lfd[1056454]: *User Processing* PID:1056441 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:40:24 instance-1 lfd[1057562]: *User Processing* PID:1057556 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:43:24 instance-1 lfd[1058994]: *User Processing* PID:1058982 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:44:24 instance-1 lfd[1059547]: *User Processing* PID:1059484 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:44:24 instance-1 lfd[1059547]: *User Processing* PID:1059421 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 22:44:24 instance-1 lfd[1059547]: *User Processing* PID:1059543 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:50:24 instance-1 lfd[1061670]: *User Processing* PID:1061666 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:51:24 instance-1 lfd[1062002]: *User Processing* PID:1061997 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:51:24 instance-1 lfd[1062002]: *User Processing* PID:1061998 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:52:24 instance-1 lfd[1062355]: *User Processing* PID:1062351 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:53:24 instance-1 lfd[1062726]: *User Processing* PID:1062715 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 22:58:24 instance-1 lfd[1064452]: *User Processing* PID:1064443 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 23:00:24 instance-1 lfd[1065260]: *User Processing* PID:1065256 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 23:03:24 instance-1 lfd[1041792]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 19 23:10:25 instance-1 lfd[1068947]: *Excessive Processes* User:tuscomau Kill:0 Process Count:12
Mar 19 23:11:25 instance-1 lfd[1069458]: *Excessive Processes* User:winslow Kill:0 Process Count:13
Mar 19 23:13:25 instance-1 lfd[1070496]: *Excessive Processes* User:opthirecomau Kill:0 Process Count:11
Mar 19 23:13:36 instance-1 lfd[1070493]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 19 23:13:36 instance-1 lfd[1070493]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 19 23:14:25 instance-1 lfd[1070987]: *User Processing* PID:1070955 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 23:15:25 instance-1 lfd[1071631]: *Excessive Processes* User:tekutaro Kill:0 Process Count:11
Mar 19 23:19:25 instance-1 lfd[1073696]: *User Processing* PID:1073558 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 19 23:31:26 instance-1 lfd[1078032]: *User Processing* PID:1078001 Kill:0 User:trafman VM:578(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 23:32:26 instance-1 lfd[1078323]: *User Processing* PID:1078316 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 23:32:26 instance-1 lfd[1078323]: *User Processing* PID:1078244 Kill:0 User:trafman VM:596(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 23:32:26 instance-1 lfd[1078323]: *User Processing* PID:1078313 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 23:33:26 instance-1 lfd[1078628]: *User Processing* PID:1078577 Kill:0 User:trafman VM:614(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 23:34:26 instance-1 lfd[1079008]: *User Processing* PID:1078990 Kill:0 User:trafman VM:613(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 19 23:53:26 instance-1 lfd[1085014]: *User Processing* PID:1085002 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 23:53:26 instance-1 lfd[1085014]: *User Processing* PID:1085001 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 19 23:59:26 instance-1 lfd[1086923]: *User Processing* PID:1086919 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:00:02 instance-1 lfd[1041792]: Main Process: TERM
Mar 20 00:00:02 instance-1 lfd[1041792]: daemon stopped
Mar 20 00:00:02 instance-1 lfd[1087322]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 20 00:00:02 instance-1 lfd[1087322]: LF_APACHE_ERRPORT: Set to [2]
Mar 20 00:00:02 instance-1 lfd[1087322]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 20 00:00:02 instance-1 lfd[1087322]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 20 00:00:02 instance-1 lfd[1087322]: CSF Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: IPv6 Enabled...
Mar 20 00:00:02 instance-1 lfd[1087322]: LOAD Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 20 00:00:02 instance-1 lfd[1087322]: Country Code Lookups...
Mar 20 00:00:02 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 00:00:02 instance-1 lfd[1087322]: System Integrity Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: Exploit Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: Directory Watching...
Mar 20 00:00:02 instance-1 lfd[1087322]: Email Queue Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: ModSecurity IP D/B Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: Email Relay Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: Temp to Perm Block Tracking...
Mar 20 00:00:02 instance-1 lfd[1087322]: System Statistics...
Mar 20 00:00:03 instance-1 lfd[1087322]: Process Tracking...
Mar 20 00:00:03 instance-1 lfd[1087322]: Account Tracking...
Mar 20 00:00:03 instance-1 lfd[1087322]: SSH Tracking...
Mar 20 00:00:03 instance-1 lfd[1087322]: Webmin Tracking...
Mar 20 00:00:03 instance-1 lfd[1087322]: SU Tracking...
Mar 20 00:00:03 instance-1 lfd[1087322]: Console Tracking...
Mar 20 00:00:03 instance-1 lfd[1087322]: WHM Tracking...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/secure...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /etc/apache2/logs/error_log...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /usr/local/cpanel/logs/login_log...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/customlog...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /usr/local/cpanel/logs/access_log...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/exim_mainlog...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/messages...
Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/maillog...
Mar 20 00:01:03 instance-1 lfd[1087698]: *User Processing* PID:1087349 Kill:0 User:winslowgroupweb VM:527(MB) EXE:/home/virtfs/winslowgroupweb/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/winslowgroupweb/public_html/opthire.winslowgroup.com.au/cli/joomla.php akeeba:backup:take
Mar 20 00:05:03 instance-1 lfd[1089187]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 00:05:03 instance-1 lfd[1089187]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 00:10:03 instance-1 lfd[1090799]: *User Processing* PID:1090790 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 00:16:03 instance-1 lfd[1092653]: *User Processing* PID:1092646 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:17:03 instance-1 lfd[1092931]: *User Processing* PID:1092924 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:19:03 instance-1 lfd[1093513]: *User Processing* PID:1093509 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:24:03 instance-1 lfd[1095186]: *User Processing* PID:1095182 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:25:03 instance-1 lfd[1095526]: *User Processing* PID:1095517 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:26:03 instance-1 lfd[1095960]: *User Processing* PID:1095956 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:29:03 instance-1 lfd[1096874]: *User Processing* PID:1096869 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:30:04 instance-1 lfd[1097308]: *User Processing* PID:1097298 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:36:04 instance-1 lfd[1100043]: *User Processing* PID:1100036 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:44:04 instance-1 lfd[1102930]: *User Processing* PID:1102926 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:49:04 instance-1 lfd[1104907]: *User Processing* PID:1104902 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 00:52:04 instance-1 lfd[1106167]: *User Processing* PID:1106163 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 01:00:04 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 01:05:05 instance-1 lfd[1110108]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 01:05:05 instance-1 lfd[1110108]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 01:21:31 instance-1 lfd[1115230]: (smtpauth) Failed SMTP AUTH login from 81.30.107.121 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 01:25:41 instance-1 lfd[1116464]: (smtpauth) Failed SMTP AUTH login from 81.30.107.90 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 01:31:16 instance-1 lfd[1118163]: (smtpauth) Failed SMTP AUTH login from 81.30.107.149 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 01:31:41 instance-1 lfd[1118282]: (smtpauth) Failed SMTP AUTH login from 81.30.107.145 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 01:33:06 instance-1 lfd[1118748]: *User Processing* PID:1118744 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 01:33:56 instance-1 lfd[1118997]: (smtpauth) Failed SMTP AUTH login from 81.30.107.159 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 01:40:21 instance-1 lfd[1121210]: (smtpauth) Failed SMTP AUTH login from 81.30.107.136 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 01:43:06 instance-1 lfd[1122116]: *User Processing* PID:1122112 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 01:44:06 instance-1 lfd[1122444]: *User Processing* PID:1122430 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 01:46:06 instance-1 lfd[1123232]: *User Processing* PID:1123221 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 02:00:07 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 02:00:07 instance-1 lfd[1128042]: *User Processing* PID:1128030 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 02:05:07 instance-1 lfd[1129522]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 02:05:07 instance-1 lfd[1129522]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 02:20:07 instance-1 lfd[1134542]: *User Processing* PID:1134533 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 02:28:07 instance-1 lfd[1137809]: *User Processing* PID:1137804 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 02:39:33 instance-1 lfd[1142069]: (smtpauth) Failed SMTP AUTH login from 182.162.100.146 (KR/Republic of Korea/coson.co.kr): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 03:00:09 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 03:05:09 instance-1 lfd[1149664]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 03:05:09 instance-1 lfd[1149664]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 03:20:09 instance-1 lfd[1154029]: *User Processing* PID:1154009 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 03:20:09 instance-1 lfd[1154029]: *User Processing* PID:1154020 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 03:24:09 instance-1 lfd[1155140]: *User Processing* PID:1155099 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 03:25:10 instance-1 lfd[1155460]: *User Processing* PID:1155440 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 03:26:10 instance-1 lfd[1155746]: *User Processing* PID:1155718 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 03:27:10 instance-1 lfd[1156016]: *User Processing* PID:1155950 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 03:33:10 instance-1 lfd[1157754]: *User Processing* PID:1157679 Kill:0 User:bmswinslow VM:623(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 03:33:10 instance-1 lfd[1157754]: *User Processing* PID:1157660 Kill:0 User:bmswinslow VM:716(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 03:49:10 instance-1 lfd[1164936]: *User Processing* PID:1164911 Kill:0 User:nlph VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nlph/public_html theme auto-updates status --all --enabled-only --field=name --skip-themes=genesis,magazine,twentyeleven,twentyfifteen,twentyfourteen,twentynineteen,twentysixteen,twentythirteen,twentytwelve,twentytwenty,twentytwentyfour,twentytwentyone,twentytwentythree,twentytwentytwo
Mar 20 03:52:11 instance-1 lfd[1167980]: *User Processing* PID:1167972 Kill:0 User:geneticson VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html instance info --format=json --check-updates=true
Mar 20 03:53:11 instance-1 lfd[1169005]: *User Processing* PID:1169001 Kill:0 User:bmswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html instance info --format=json --check-updates=true
Mar 20 03:54:11 instance-1 lfd[1170037]: *User Processing* PID:1170032 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/foster/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json
Mar 20 03:55:11 instance-1 lfd[1171056]: *User Processing* PID:1171032 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 03:55:11 instance-1 lfd[1171056]: *User Processing* PID:1171041 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/tuscomau/public_html wpt-cron event reschedule wp_version_check +2 day
Mar 20 04:00:11 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 04:02:11 instance-1 lfd[1174272]: *User Processing* PID:1174267 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:03:11 instance-1 lfd[1174578]: *User Processing* PID:1174571 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:05:11 instance-1 lfd[1175291]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 04:05:12 instance-1 lfd[1175291]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 04:34:12 instance-1 lfd[1184034]: *User Processing* PID:1184026 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 04:42:12 instance-1 lfd[1186742]: *User Processing* PID:1186737 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:44:12 instance-1 lfd[1187405]: *User Processing* PID:1187401 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:46:13 instance-1 lfd[1188246]: *User Processing* PID:1188242 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:47:13 instance-1 lfd[1188591]: *User Processing* PID:1188587 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:49:13 instance-1 lfd[1189275]: *User Processing* PID:1189271 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:50:13 instance-1 lfd[1189658]: *User Processing* PID:1189646 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 04:50:13 instance-1 lfd[1189658]: *User Processing* PID:1189647 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 05:00:13 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 05:05:13 instance-1 lfd[1194389]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 05:05:14 instance-1 lfd[1194389]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 05:08:13 instance-1 lfd[1195537]: *User Processing* PID:1195532 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 05:46:35 instance-1 lfd[1206953]: (smtpauth) Failed SMTP AUTH login from 81.30.107.89 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 05:53:15 instance-1 lfd[1209208]: *User Processing* PID:1209190 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 05:53:15 instance-1 lfd[1209208]: *User Processing* PID:1209198 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 05:55:15 instance-1 lfd[1210233]: *User Processing* PID:1210223 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 05:56:15 instance-1 lfd[1210644]: *User Processing* PID:1210630 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 05:56:15 instance-1 lfd[1210644]: *User Processing* PID:1210637 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 05:57:21 instance-1 lfd[1210963]: (smtpauth) Failed SMTP AUTH login from 81.30.107.94 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 06:00:15 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 06:05:16 instance-1 lfd[1213462]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 06:05:16 instance-1 lfd[1213462]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 06:42:17 instance-1 lfd[1224044]: *User Processing* PID:1224040 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 06:44:17 instance-1 lfd[1224756]: *User Processing* PID:1224752 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 06:45:17 instance-1 lfd[1225109]: *User Processing* PID:1225100 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 06:46:17 instance-1 lfd[1225414]: *User Processing* PID:1225410 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 07:00:17 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 07:05:18 instance-1 lfd[1231696]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 07:05:18 instance-1 lfd[1231696]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 07:08:18 instance-1 lfd[1232546]: *User Processing* PID:1232542 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 07:17:18 instance-1 lfd[1235563]: *User Processing* PID:1235559 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 07:27:19 instance-1 lfd[1238885]: *User Processing* PID:1238880 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 07:28:19 instance-1 lfd[1239214]: *User Processing* PID:1239210 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:00:20 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 08:01:20 instance-1 lfd[1250539]: *User Processing* PID:1250535 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:02:20 instance-1 lfd[1250939]: *User Processing* PID:1250935 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:03:20 instance-1 lfd[1251346]: *User Processing* PID:1251342 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:05:20 instance-1 lfd[1252133]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 08:05:20 instance-1 lfd[1252133]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 08:06:20 instance-1 lfd[1252638]: *User Processing* PID:1252630 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:08:20 instance-1 lfd[1253370]: *User Processing* PID:1253366 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:09:20 instance-1 lfd[1253772]: *User Processing* PID:1253767 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:09:20 instance-1 lfd[1253772]: *User Processing* PID:1253752 Kill:0 User:comphomes VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:09:20 instance-1 lfd[1253772]: *User Processing* PID:1253763 Kill:0 User:comphomes VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:13:20 instance-1 lfd[1255458]: *User Processing* PID:1255452 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:14:20 instance-1 lfd[1255861]: *User Processing* PID:1255856 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:14:31 instance-1 lfd[1255925]: (smtpauth) Failed SMTP AUTH login from 81.30.107.195 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 08:15:20 instance-1 lfd[1256330]: *User Processing* PID:1256321 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:18:20 instance-1 lfd[1257577]: *User Processing* PID:1257573 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:21:21 instance-1 lfd[1258847]: *User Processing* PID:1258842 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:22:21 instance-1 lfd[1259260]: *User Processing* PID:1259254 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 08:24:11 instance-1 lfd[1259770]: (smtpauth) Failed SMTP AUTH login from 81.30.107.64 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 08:33:06 instance-1 lfd[1262527]: (smtpauth) Failed SMTP AUTH login from 81.30.107.174 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 08:41:42 instance-1 lfd[1265211]: (smtpauth) Failed SMTP AUTH login from 81.30.107.205 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 08:43:21 instance-1 lfd[1265632]: *User Processing* PID:1265567 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 08:45:21 instance-1 lfd[1266210]: *User Processing* PID:1266177 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 08:53:52 instance-1 lfd[1268964]: (smtpauth) Failed SMTP AUTH login from 195.178.110.209 (-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 08:55:27 instance-1 lfd[1269632]: (smtpauth) Failed SMTP AUTH login from 80.94.95.228 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 09:00:22 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 09:03:22 instance-1 lfd[1272301]: *User Processing* PID:1272296 Kill:0 User:rcpacom VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 09:05:23 instance-1 lfd[1272916]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 09:05:23 instance-1 lfd[1272916]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 09:17:23 instance-1 lfd[1276733]: *User Processing* PID:1276709 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 09:32:23 instance-1 lfd[1283141]: *User Processing* PID:1283132 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 09:38:23 instance-1 lfd[1285016]: *User Processing* PID:1284987 Kill:0 User:surveyms VM:597(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 09:38:24 instance-1 lfd[1285016]: *User Processing* PID:1284994 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 09:42:24 instance-1 lfd[1286330]: *User Processing* PID:1286320 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 09:42:24 instance-1 lfd[1286330]: *User Processing* PID:1286322 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 09:54:24 instance-1 lfd[1290828]: *User Processing* PID:1290819 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 09:58:24 instance-1 lfd[1292061]: *User Processing* PID:1292052 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 10:00:24 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 10:00:24 instance-1 lfd[1292863]: *User Processing* PID:1292847 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:01:24 instance-1 lfd[1293210]: *User Processing* PID:1292955 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:02:24 instance-1 lfd[1293546]: *User Processing* PID:1049029 Kill:0 User:turnkey Time:42242 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 20 10:03:24 instance-1 lfd[1293887]: *User Processing* PID:1293787 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:05:24 instance-1 lfd[1294694]: *User Processing* PID:1294661 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:05:25 instance-1 lfd[1294691]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 10:05:25 instance-1 lfd[1294691]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 10:14:25 instance-1 lfd[1297525]: *User Processing* PID:1297492 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:17:25 instance-1 lfd[1298569]: *User Processing* PID:1298475 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 10:20:25 instance-1 lfd[1299699]: *User Processing* PID:1299672 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:32:25 instance-1 lfd[1303520]: *Suspicious Process* PID:1049030 PPID:1043388 User:turnkey Uptime:44043 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 20 10:32:25 instance-1 lfd[1303520]: *User Processing* PID:1049030 Kill:0 User:turnkey Time:44043 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 20 10:34:25 instance-1 lfd[1304115]: *User Processing* PID:1304106 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 10:40:26 instance-1 lfd[1306333]: *User Processing* PID:1306290 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:40:26 instance-1 lfd[1306333]: *User Processing* PID:1306284 Kill:0 User:newswinslow VM:544(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:41:26 instance-1 lfd[1306726]: *User Processing* PID:1306718 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 10:44:26 instance-1 lfd[1307897]: *User Processing* PID:1307893 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 10:45:26 instance-1 lfd[1308416]: *User Processing* PID:1308350 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 10:46:26 instance-1 lfd[1308733]: *User Processing* PID:1308728 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 10:49:26 instance-1 lfd[1309718]: *User Processing* PID:1309711 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 10:50:26 instance-1 lfd[1310238]: *User Processing* PID:1310229 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 10:54:26 instance-1 lfd[1312435]: *User Processing* PID:1312428 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 11:00:26 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 11:01:27 instance-1 lfd[1314762]: *User Processing* PID:1314722 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 11:05:27 instance-1 lfd[1315988]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 11:05:27 instance-1 lfd[1315988]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 11:21:27 instance-1 lfd[1321075]: *User Processing* PID:1321051 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 11:25:27 instance-1 lfd[1322156]: *User Processing* PID:1322113 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 11:30:28 instance-1 lfd[1323676]: *User Processing* PID:1323662 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 11:36:28 instance-1 lfd[1325733]: *User Processing* PID:1325712 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 11:56:29 instance-1 lfd[1332448]: *User Processing* PID:1332436 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 11:56:29 instance-1 lfd[1332448]: *User Processing* PID:1332440 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 12:00:29 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 12:05:29 instance-1 lfd[1335533]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 12:05:29 instance-1 lfd[1335533]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 12:17:29 instance-1 lfd[1339989]: *User Processing* PID:1339935 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 12:21:29 instance-1 lfd[1341461]: *User Processing* PID:1341452 Kill:0 User:mainpoint VM:606(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 12:24:30 instance-1 lfd[1342448]: *User Processing* PID:1342444 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 12:25:30 instance-1 lfd[1342795]: *User Processing* PID:1342784 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 12:25:30 instance-1 lfd[1342795]: *User Processing* PID:1342749 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 12:32:30 instance-1 lfd[1344987]: *User Processing* PID:1344956 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 12:50:30 instance-1 lfd[1350890]: *User Processing* PID:1350861 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 12:50:30 instance-1 lfd[1350890]: *User Processing* PID:1350862 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 12:52:30 instance-1 lfd[1351573]: *User Processing* PID:1351547 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 12:55:30 instance-1 lfd[1352793]: *User Processing* PID:1352588 Kill:0 User:winslow VM:627(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 20 12:56:30 instance-1 lfd[1353134]: *User Processing* PID:1353078 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 12:56:31 instance-1 lfd[1353134]: *User Processing* PID:1353080 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 13:00:31 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 13:01:31 instance-1 lfd[1354886]: *User Processing* PID:1354839 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 13:05:31 instance-1 lfd[1356332]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 13:05:31 instance-1 lfd[1356332]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 13:08:31 instance-1 lfd[1357286]: *User Processing* PID:1357282 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 13:10:31 instance-1 lfd[1357918]: *User Processing* PID:1357896 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 13:12:31 instance-1 lfd[1358454]: *User Processing* PID:1358450 Kill:0 User:rcpacom VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 13:15:31 instance-1 lfd[1359468]: *User Processing* PID:1359453 Kill:0 User:opthirecomau VM:531(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 13:17:31 instance-1 lfd[1360021]: *User Processing* PID:1360005 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 13:21:31 instance-1 lfd[1361221]: *User Processing* PID:1361217 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 13:28:31 instance-1 lfd[1363573]: *User Processing* PID:1363528 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 13:39:32 instance-1 lfd[1367382]: *User Processing* PID:1367337 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 13:47:32 instance-1 lfd[1369993]: *User Processing* PID:1369948 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 13:57:32 instance-1 lfd[1373258]: *User Processing* PID:1373251 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 14:00:32 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 14:05:33 instance-1 lfd[1376205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 14:05:33 instance-1 lfd[1376205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 14:08:32 instance-1 lfd[1377027]: *User Processing* PID:1377016 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 14:09:32 instance-1 lfd[1377318]: *User Processing* PID:1377311 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 14:10:32 instance-1 lfd[1377786]: *User Processing* PID:1377737 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 14:19:33 instance-1 lfd[1380594]: *User Processing* PID:1380586 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 14:49:34 instance-1 lfd[1391499]: *User Processing* PID:1391495 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:49:34 instance-1 lfd[1391499]: *User Processing* PID:1391489 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392675 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392677 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392676 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392673 Kill:0 User:opthirecomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:53:34 instance-1 lfd[1393199]: *User Processing* PID:1393195 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:54:34 instance-1 lfd[1393597]: *User Processing* PID:1393582 Kill:0 User:bmswinslow VM:704(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:58:34 instance-1 lfd[1395523]: *User Processing* PID:1395519 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 14:58:49 instance-1 lfd[1395603]: (smtpauth) Failed SMTP AUTH login from 35.230.150.213 (US/United States/213.150.230.35.bc.googleusercontent.com): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 20 15:00:34 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 15:03:34 instance-1 lfd[1397604]: *User Processing* PID:1397600 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 15:05:34 instance-1 lfd[1398748]: *User Processing* PID:1398740 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:05:35 instance-1 lfd[1398746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 15:05:35 instance-1 lfd[1398746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 15:06:34 instance-1 lfd[1399460]: *User Processing* PID:1399453 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:07:34 instance-1 lfd[1400038]: *User Processing* PID:1400022 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:07:34 instance-1 lfd[1400038]: *User Processing* PID:1400021 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:07:34 instance-1 lfd[1400038]: *User Processing* PID:1400033 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:08:34 instance-1 lfd[1400750]: *User Processing* PID:1400742 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401873 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401856 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401883 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401323 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401879 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401877 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401886 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401885 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:12:34 instance-1 lfd[1403389]: *User Processing* PID:1403384 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:13:34 instance-1 lfd[1403992]: *User Processing* PID:1403983 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:17:35 instance-1 lfd[1406142]: *User Processing* PID:1406133 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:17:35 instance-1 lfd[1406142]: *User Processing* PID:1406134 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:18:35 instance-1 lfd[1406919]: *User Processing* PID:1406703 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:19:35 instance-1 lfd[1407306]: *User Processing* PID:1407285 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 15:21:35 instance-1 lfd[1408148]: *User Processing* PID:1408144 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:36:35 instance-1 lfd[1413043]: *User Processing* PID:1413033 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 15:43:35 instance-1 lfd[1415202]: *User Processing* PID:1415182 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 15:52:36 instance-1 lfd[1418558]: *User Processing* PID:1418554 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 15:59:36 instance-1 lfd[1421179]: *User Processing* PID:1421171 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:00:36 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 16:00:36 instance-1 lfd[1422069]: *User Processing* PID:1421952 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 16:05:37 instance-1 lfd[1424626]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 16:05:37 instance-1 lfd[1424626]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 16:07:36 instance-1 lfd[1425564]: *User Processing* PID:1425546 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 16:07:36 instance-1 lfd[1425564]: *User Processing* PID:1425560 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:07:37 instance-1 lfd[1425564]: *User Processing* PID:1425552 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:08:36 instance-1 lfd[1426046]: *User Processing* PID:1426042 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:08:37 instance-1 lfd[1426046]: *User Processing* PID:1426041 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:09:36 instance-1 lfd[1426476]: *User Processing* PID:1426472 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:10:37 instance-1 lfd[1426913]: *User Processing* PID:1426893 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 16:10:37 instance-1 lfd[1426913]: *User Processing* PID:1426901 Kill:0 User:opthirecomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:11:37 instance-1 lfd[1427452]: *User Processing* PID:1427446 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:13:37 instance-1 lfd[1428594]: *User Processing* PID:1428588 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:15:37 instance-1 lfd[1429833]: *User Processing* PID:1429823 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:16:37 instance-1 lfd[1430348]: *User Processing* PID:1430340 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:17:37 instance-1 lfd[1431296]: *User Processing* PID:1431284 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:17:37 instance-1 lfd[1431296]: *User Processing* PID:1431285 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:17:38 instance-1 lfd[1431296]: *User Processing* PID:1431273 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 16:18:37 instance-1 lfd[1431969]: *User Processing* PID:1431956 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:18:37 instance-1 lfd[1431969]: *User Processing* PID:1431948 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:18:38 instance-1 lfd[1431969]: *User Processing* PID:1431957 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:18:38 instance-1 lfd[1431969]: *User Processing* PID:1431959 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:18:38 instance-1 lfd[1431969]: *User Processing* PID:1431953 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:19:37 instance-1 lfd[1432787]: *User Processing* PID:1432761 Kill:0 User:opthirecomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:20:37 instance-1 lfd[1433446]: *User Processing* PID:1433434 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:20:37 instance-1 lfd[1433446]: *User Processing* PID:1433435 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:21:37 instance-1 lfd[1433929]: *User Processing* PID:1433924 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:21:37 instance-1 lfd[1433929]: *User Processing* PID:1433917 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:21:38 instance-1 lfd[1433929]: *User Processing* PID:1433925 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:23:37 instance-1 lfd[1435545]: *User Processing* PID:1435541 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:24:37 instance-1 lfd[1435959]: *User Processing* PID:1435944 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 16:28:37 instance-1 lfd[1437503]: *User Processing* PID:1437499 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:32:38 instance-1 lfd[1439156]: *User Processing* PID:1439150 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:35:38 instance-1 lfd[1440580]: *User Processing* PID:1440569 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:35:38 instance-1 lfd[1440580]: *User Processing* PID:1440561 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:35:39 instance-1 lfd[1440580]: *User Processing* PID:1440563 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:35:39 instance-1 lfd[1440580]: *User Processing* PID:1440566 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:42:38 instance-1 lfd[1443949]: *User Processing* PID:1443916 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 16:47:38 instance-1 lfd[1446346]: *User Processing* PID:1446340 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:48:38 instance-1 lfd[1446883]: *User Processing* PID:1446879 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 16:58:38 instance-1 lfd[1452126]: *User Processing* PID:1452120 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 17:00:38 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 17:05:39 instance-1 lfd[1454888]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 17:05:39 instance-1 lfd[1454888]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 17:06:39 instance-1 lfd[1455309]: *User Processing* PID:1455304 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 17:06:39 instance-1 lfd[1455309]: *User Processing* PID:1455303 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 17:10:39 instance-1 lfd[1457325]: *User Processing* PID:1457311 Kill:0 User:trafman VM:559(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 17:20:39 instance-1 lfd[1461103]: *User Processing* PID:1461095 Kill:0 User:mainpoint VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 17:38:40 instance-1 lfd[1466834]: *User Processing* PID:1466830 Kill:0 User:independent VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 17:56:40 instance-1 lfd[1472655]: *User Processing* PID:1472575 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 18:00:40 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 18:04:40 instance-1 lfd[1475249]: *User Processing* PID:1475224 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 18:05:41 instance-1 lfd[1475573]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 18:05:41 instance-1 lfd[1475573]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 18:23:41 instance-1 lfd[1482256]: *User Processing* PID:1482232 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 18:25:41 instance-1 lfd[1483523]: *LOAD* 5 minute load average is 6.15, threshold is 6 - email sent
Mar 20 18:25:42 instance-1 lfd[1483524]: *User Processing* PID:1483510 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 18:25:42 instance-1 lfd[1483524]: *User Processing* PID:1483494 Kill:0 User:surveyms VM:518(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 18:25:42 instance-1 lfd[1483524]: *User Processing* PID:1483495 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 18:26:41 instance-1 lfd[1484146]: *User Processing* PID:1484141 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 18:26:42 instance-1 lfd[1484146]: *User Processing* PID:1484120 Kill:0 User:surveyms VM:518(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 18:27:41 instance-1 lfd[1484809]: *User Processing* PID:1484791 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 18:27:42 instance-1 lfd[1484809]: *User Processing* PID:1484804 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 18:29:42 instance-1 lfd[1486022]: *User Processing* PID:1486012 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 18:30:42 instance-1 lfd[1486706]: *User Processing* PID:1486699 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 18:33:42 instance-1 lfd[1487973]: *User Processing* PID:1487969 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 18:37:42 instance-1 lfd[1489652]: *User Processing* PID:1489649 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 18:46:42 instance-1 lfd[1492733]: *User Processing* PID:1492727 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 18:53:42 instance-1 lfd[1495101]: *User Processing* PID:1495095 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 19:00:42 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 19:00:42 instance-1 lfd[1497504]: *User Processing* PID:1497491 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 19:05:43 instance-1 lfd[1499060]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 19:05:43 instance-1 lfd[1499060]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 19:12:43 instance-1 lfd[1501128]: *User Processing* PID:1501097 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 19:22:43 instance-1 lfd[1504265]: *User Processing* PID:1504262 Kill:0 User:independent VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 19:50:44 instance-1 lfd[1512690]: *User Processing* PID:1512681 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:00:44 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516646 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516386 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516353 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516531 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:05:45 instance-1 lfd[1517601]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 20:05:46 instance-1 lfd[1517601]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 20:07:44 instance-1 lfd[1518338]: *User Processing* PID:1518331 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:07:45 instance-1 lfd[1518338]: *User Processing* PID:1518222 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:07:45 instance-1 lfd[1518338]: *User Processing* PID:1518118 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:07:45 instance-1 lfd[1518338]: *User Processing* PID:1518088 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:08:45 instance-1 lfd[1518634]: *User Processing* PID:1518626 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:09:44 instance-1 lfd[1518963]: *LOAD* 5 minute load average is 6.04, threshold is 6 - email sent
Mar 20 20:09:45 instance-1 lfd[1518964]: *User Processing* PID:1518959 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:09:45 instance-1 lfd[1518964]: *User Processing* PID:1518954 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:11:45 instance-1 lfd[1519582]: *User Processing* PID:1519574 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:12:45 instance-1 lfd[1519991]: *User Processing* PID:1519983 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:13:45 instance-1 lfd[1520265]: *User Processing* PID:1520258 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:17:45 instance-1 lfd[1521537]: *User Processing* PID:1521529 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:17:46 instance-1 lfd[1521537]: *User Processing* PID:1521524 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 20:18:45 instance-1 lfd[1521829]: *User Processing* PID:1521823 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:22:45 instance-1 lfd[1523156]: *User Processing* PID:1523153 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:24:45 instance-1 lfd[1523745]: *User Processing* PID:1523737 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:27:45 instance-1 lfd[1524809]: *User Processing* PID:1524795 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 20:29:45 instance-1 lfd[1525480]: *User Processing* PID:1525457 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 20:30:46 instance-1 lfd[1525838]: *User Processing* PID:1525825 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 20:30:46 instance-1 lfd[1525838]: *User Processing* PID:1525830 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:30:46 instance-1 lfd[1525838]: *User Processing* PID:1525790 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 20:31:46 instance-1 lfd[1526149]: *User Processing* PID:1526141 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 20 20:33:46 instance-1 lfd[1526871]: *User Processing* PID:1526868 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:38:46 instance-1 lfd[1528571]: *User Processing* PID:1528565 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:38:46 instance-1 lfd[1528571]: *User Processing* PID:1528564 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:39:46 instance-1 lfd[1528967]: *User Processing* PID:1528958 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 20:40:46 instance-1 lfd[1529383]: *User Processing* PID:1529367 Kill:0 User:surveyms VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 20:40:46 instance-1 lfd[1529383]: *User Processing* PID:1529376 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:48:46 instance-1 lfd[1532200]: *User Processing* PID:1532197 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:51:46 instance-1 lfd[1533143]: *User Processing* PID:1533139 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:52:46 instance-1 lfd[1533434]: *User Processing* PID:1533427 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:53:46 instance-1 lfd[1533892]: *User Processing* PID:1533886 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:54:46 instance-1 lfd[1534285]: *User Processing* PID:1534277 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 20:56:46 instance-1 lfd[1534941]: *User Processing* PID:1534894 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 20:57:46 instance-1 lfd[1535268]: *User Processing* PID:1535259 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 20:57:46 instance-1 lfd[1535268]: *User Processing* PID:1535260 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:00:46 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 21:04:46 instance-1 lfd[1537571]: *User Processing* PID:1537562 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 21:05:46 instance-1 lfd[1537886]: *User Processing* PID:1537875 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 21:05:47 instance-1 lfd[1537885]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 21:05:47 instance-1 lfd[1537885]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 21:12:47 instance-1 lfd[1539778]: *User Processing* PID:1539774 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:13:47 instance-1 lfd[1540275]: *User Processing* PID:1540271 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:13:47 instance-1 lfd[1540275]: *User Processing* PID:1540266 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:14:47 instance-1 lfd[1540647]: *User Processing* PID:1540643 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:22:47 instance-1 lfd[1543112]: *User Processing* PID:1543102 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:32:47 instance-1 lfd[1546149]: *User Processing* PID:1546145 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:35:47 instance-1 lfd[1547438]: *User Processing* PID:1547423 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 21:40:47 instance-1 lfd[1549377]: *User Processing* PID:1549368 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 21:45:47 instance-1 lfd[1550810]: *User Processing* PID:1550802 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 22:00:47 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 22:04:06 instance-1 lfd[1087322]: Main Process: TERM
Mar 20 22:04:06 instance-1 lfd[1087322]: daemon stopped
Mar 20 22:04:07 instance-1 lfd[1556835]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 20 22:04:07 instance-1 lfd[1556835]: LF_APACHE_ERRPORT: Set to [2]
Mar 20 22:04:07 instance-1 lfd[1556835]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 20 22:04:07 instance-1 lfd[1556835]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 20 22:04:07 instance-1 lfd[1556835]: CSF Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: IPv6 Enabled...
Mar 20 22:04:07 instance-1 lfd[1556835]: LOAD Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 20 22:04:07 instance-1 lfd[1556835]: Country Code Lookups...
Mar 20 22:04:07 instance-1 lfd[1556835]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 22:04:07 instance-1 lfd[1556835]: System Integrity Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: Exploit Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: Directory Watching...
Mar 20 22:04:07 instance-1 lfd[1556835]: Email Queue Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: ModSecurity IP D/B Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: Email Relay Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: Temp to Perm Block Tracking...
Mar 20 22:04:07 instance-1 lfd[1556835]: System Statistics...
Mar 20 22:04:08 instance-1 lfd[1556835]: Process Tracking...
Mar 20 22:04:08 instance-1 lfd[1556835]: Account Tracking...
Mar 20 22:04:08 instance-1 lfd[1556835]: SSH Tracking...
Mar 20 22:04:08 instance-1 lfd[1556835]: Webmin Tracking...
Mar 20 22:04:08 instance-1 lfd[1556835]: SU Tracking...
Mar 20 22:04:08 instance-1 lfd[1556835]: Console Tracking...
Mar 20 22:04:08 instance-1 lfd[1556835]: WHM Tracking...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /etc/apache2/logs/error_log...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/messages...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/maillog...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/secure...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/customlog...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /usr/local/cpanel/logs/access_log...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /usr/local/cpanel/logs/login_log...
Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/exim_mainlog...
Mar 20 22:04:08 instance-1 lfd[1556859]: *User Processing* PID:1556848 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 22:04:14 instance-1 lfd[1556851]: *System Integrity* has detected modified file(s): /usr/bin/ea-php74 /usr/bin/ea-php80 /usr/bin/ea-php81 /usr/bin/ea-php82 /usr/bin/ea-php83 /bin/ea-php74 /bin/ea-php80 /bin/ea-php81 /bin/ea-php82 /bin/ea-php83 /usr/local/bin/ea-php74 /usr/local/bin/ea-php80 /usr/local/bin/ea-php81 /usr/local/bin/ea-php82 /usr/local/bin/ea-php83
Mar 20 22:09:09 instance-1 lfd[1558896]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 22:09:09 instance-1 lfd[1558896]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 22:13:08 instance-1 lfd[1560238]: *User Processing* PID:1560234 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 22:39:08 instance-1 lfd[1568295]: *User Processing* PID:1568264 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 20 22:47:09 instance-1 lfd[1570675]: *User Processing* PID:1570671 Kill:0 User:bmswinslow VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 22:47:09 instance-1 lfd[1570675]: *User Processing* PID:1570656 Kill:0 User:bmswinslow VM:696(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 22:52:09 instance-1 lfd[1572193]: *User Processing* PID:1572189 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 22:56:09 instance-1 lfd[1573621]: *User Processing* PID:1573612 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 20 22:57:09 instance-1 lfd[1573890]: *User Processing* PID:1573886 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 23:04:09 instance-1 lfd[1556835]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 20 23:07:09 instance-1 lfd[1578458]: *Excessive Processes* User:civilcon Kill:0 Process Count:11
Mar 20 23:09:10 instance-1 lfd[1579227]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 20 23:09:10 instance-1 lfd[1579227]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 20 23:12:09 instance-1 lfd[1580833]: *User Processing* PID:1580829 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 20 23:21:10 instance-1 lfd[1583951]: *User Processing* PID:1583932 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 00:00:02 instance-1 lfd[1556835]: Main Process: TERM
Mar 21 00:00:02 instance-1 lfd[1556835]: daemon stopped
Mar 21 00:00:02 instance-1 lfd[1595380]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 21 00:00:02 instance-1 lfd[1595380]: LF_APACHE_ERRPORT: Set to [2]
Mar 21 00:00:02 instance-1 lfd[1595380]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 21 00:00:02 instance-1 lfd[1595380]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 21 00:00:02 instance-1 lfd[1595380]: CSF Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: IPv6 Enabled...
Mar 21 00:00:02 instance-1 lfd[1595380]: LOAD Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 21 00:00:02 instance-1 lfd[1595380]: Country Code Lookups...
Mar 21 00:00:02 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 00:00:02 instance-1 lfd[1595380]: System Integrity Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Exploit Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Directory Watching...
Mar 21 00:00:02 instance-1 lfd[1595380]: Email Queue Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: ModSecurity IP D/B Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Email Relay Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Temp to Perm Block Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: System Statistics...
Mar 21 00:00:02 instance-1 lfd[1595380]: Process Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Account Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: SSH Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Webmin Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: SU Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Console Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: WHM Tracking...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/messages...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /etc/apache2/logs/error_log...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /usr/local/cpanel/logs/login_log...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/maillog...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/customlog...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/exim_mainlog...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/secure...
Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /usr/local/cpanel/logs/access_log...
Mar 21 00:02:03 instance-1 lfd[1596059]: *User Processing* PID:1596003 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 00:05:03 instance-1 lfd[1596892]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 00:05:03 instance-1 lfd[1596892]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 00:15:03 instance-1 lfd[1599735]: *User Processing* PID:1599726 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 00:15:03 instance-1 lfd[1599735]: *User Processing* PID:1599721 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 00:20:03 instance-1 lfd[1601171]: *User Processing* PID:1601086 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 00:30:04 instance-1 lfd[1604040]: *User Processing* PID:1604029 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 00:30:04 instance-1 lfd[1604040]: *User Processing* PID:1603881 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 00:50:04 instance-1 lfd[1609838]: *User Processing* PID:1609819 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 00:53:55 instance-1 lfd[1611054]: (smtpauth) Failed SMTP AUTH login from 103.89.137.227 (HK/Hong Kong/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 21 00:59:05 instance-1 lfd[1612543]: *User Processing* PID:1612482 Kill:0 User:indigenouscivil VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 01:00:05 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 01:05:05 instance-1 lfd[1614379]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 01:05:05 instance-1 lfd[1614379]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 01:12:05 instance-1 lfd[1616389]: *User Processing* PID:1616381 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 01:14:05 instance-1 lfd[1617049]: *User Processing* PID:1617045 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 01:46:06 instance-1 lfd[1626359]: *User Processing* PID:1626347 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 02:00:07 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 02:05:17 instance-1 lfd[1632112]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 02:05:17 instance-1 lfd[1632112]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 02:15:08 instance-1 lfd[1635007]: *User Processing* PID:1634998 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 02:15:08 instance-1 lfd[1635007]: *User Processing* PID:1634928 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 02:18:08 instance-1 lfd[1635823]: *User Processing* PID:1635804 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 02:19:08 instance-1 lfd[1636071]: *User Processing* PID:1636021 Kill:0 User:indigenouscivil VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 02:25:08 instance-1 lfd[1637906]: *User Processing* PID:1637887 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 02:29:08 instance-1 lfd[1638892]: *User Processing* PID:1638852 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 02:36:09 instance-1 lfd[1641124]: *User Processing* PID:1641082 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 02:43:09 instance-1 lfd[1643196]: *User Processing* PID:1643192 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 02:45:09 instance-1 lfd[1644058]: *User Processing* PID:1644050 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 02:55:10 instance-1 lfd[1646926]: *User Processing* PID:1646856 Kill:0 User:rcpacom VM:608(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 02:58:10 instance-1 lfd[1647921]: *User Processing* PID:1647904 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 02:59:10 instance-1 lfd[1648259]: *User Processing* PID:1648254 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:00:10 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 03:01:10 instance-1 lfd[1649036]: *User Processing* PID:1649031 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:04:10 instance-1 lfd[1650027]: *User Processing* PID:1650019 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:07:10 instance-1 lfd[1650971]: *User Processing* PID:1650961 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:08:10 instance-1 lfd[1651224]: *User Processing* PID:1651217 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:09:10 instance-1 lfd[1651483]: *User Processing* PID:1651462 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 03:10:24 instance-1 lfd[1651772]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 03:10:24 instance-1 lfd[1651772]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 03:11:10 instance-1 lfd[1652165]: *User Processing* PID:1652156 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:11:11 instance-1 lfd[1652165]: *User Processing* PID:1652154 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:33:12 instance-1 lfd[1658453]: *User Processing* PID:1658434 Kill:0 User:bmswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:35:12 instance-1 lfd[1658987]: *User Processing* PID:1658967 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 03:42:12 instance-1 lfd[1661046]: *User Processing* PID:1660993 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 03:50:12 instance-1 lfd[1665209]: *User Processing* PID:1665184 Kill:0 User:nlph VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nlph/public_html instance info --format=json --check-updates=true
Mar 21 03:53:13 instance-1 lfd[1667587]: *User Processing* PID:1667581 Kill:0 User:yvexcava VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/yvexcava/public_html instance info --format=json --check-updates=true
Mar 21 03:54:13 instance-1 lfd[1668597]: *User Processing* PID:1668592 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json
Mar 21 03:55:13 instance-1 lfd[1669479]: *User Processing* PID:1669455 Kill:0 User:bmswinslow VM:588(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html plugin auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
Mar 21 03:55:13 instance-1 lfd[1669479]: *User Processing* PID:1669404 Kill:0 User:bmswinslow VM:580(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 04:00:13 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 04:06:30 instance-1 lfd[1675126]: (smtpauth) Failed SMTP AUTH login from 165.154.199.124 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 21 04:15:14 instance-1 lfd[1677699]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 04:15:14 instance-1 lfd[1677699]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 04:25:14 instance-1 lfd[1680624]: *User Processing* PID:1680560 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 05:00:15 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 05:02:15 instance-1 lfd[1691506]: *User Processing* PID:1691495 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:03:15 instance-1 lfd[1691834]: *User Processing* PID:1691822 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:05:15 instance-1 lfd[1692488]: *User Processing* PID:1692468 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:06:15 instance-1 lfd[1692787]: *User Processing* PID:1692781 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:08:15 instance-1 lfd[1693520]: *User Processing* PID:1693515 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:10:15 instance-1 lfd[1694209]: *User Processing* PID:1694191 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:11:15 instance-1 lfd[1694500]: *User Processing* PID:1694492 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:12:15 instance-1 lfd[1694935]: *User Processing* PID:1694931 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:13:15 instance-1 lfd[1695234]: *User Processing* PID:1695226 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:14:15 instance-1 lfd[1695548]: *User Processing* PID:1695543 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:15:16 instance-1 lfd[1695917]: *User Processing* PID:1695909 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:15:16 instance-1 lfd[1695915]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 05:15:16 instance-1 lfd[1695915]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 05:16:16 instance-1 lfd[1696258]: *User Processing* PID:1696252 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:18:16 instance-1 lfd[1697056]: *User Processing* PID:1697049 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:19:16 instance-1 lfd[1697359]: *Suspicious Process* PID:1562504 PPID:1558273 User:turnkey Uptime:25185 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 21 05:19:16 instance-1 lfd[1697359]: *User Processing* PID:1562504 Kill:0 User:turnkey Time:25185 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child
Mar 21 05:19:16 instance-1 lfd[1697359]: *User Processing* PID:1697353 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:21:16 instance-1 lfd[1698062]: *User Processing* PID:1698057 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:23:16 instance-1 lfd[1698795]: *User Processing* PID:1698791 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:24:16 instance-1 lfd[1699080]: *User Processing* PID:1699073 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:25:16 instance-1 lfd[1699433]: *User Processing* PID:1699420 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:28:16 instance-1 lfd[1700477]: *User Processing* PID:1700470 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:28:16 instance-1 lfd[1700477]: *User Processing* PID:1700468 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:29:16 instance-1 lfd[1700782]: *User Processing* PID:1700775 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:29:16 instance-1 lfd[1700782]: *User Processing* PID:1700773 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:30:16 instance-1 lfd[1701142]: *User Processing* PID:1701133 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:30:16 instance-1 lfd[1701142]: *User Processing* PID:1701128 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:31:16 instance-1 lfd[1701440]: *User Processing* PID:1701430 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:32:16 instance-1 lfd[1701794]: *User Processing* PID:1701756 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:33:16 instance-1 lfd[1702205]: *User Processing* PID:1702195 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:34:16 instance-1 lfd[1702515]: *User Processing* PID:1702506 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:34:16 instance-1 lfd[1702515]: *User Processing* PID:1702511 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:35:16 instance-1 lfd[1702894]: *User Processing* PID:1702881 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:36:16 instance-1 lfd[1703252]: *User Processing* PID:1703248 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:36:16 instance-1 lfd[1703252]: *User Processing* PID:1703242 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:37:16 instance-1 lfd[1703584]: *User Processing* PID:1703580 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:37:16 instance-1 lfd[1703584]: *User Processing* PID:1703578 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:38:16 instance-1 lfd[1704007]: *User Processing* PID:1704003 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:38:16 instance-1 lfd[1704007]: *User Processing* PID:1703998 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:39:16 instance-1 lfd[1704351]: *User Processing* PID:1704347 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:41:17 instance-1 lfd[1705005]: *User Processing* PID:1705001 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:41:17 instance-1 lfd[1705005]: *User Processing* PID:1704996 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:42:17 instance-1 lfd[1705320]: *User Processing* PID:1705309 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:42:17 instance-1 lfd[1705320]: *User Processing* PID:1705314 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:43:17 instance-1 lfd[1705817]: *User Processing* PID:1705714 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 05:45:17 instance-1 lfd[1706483]: *User Processing* PID:1706424 Kill:0 User:comphomes VM:620(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:45:17 instance-1 lfd[1706483]: *User Processing* PID:1706472 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:46:17 instance-1 lfd[1706890]: *User Processing* PID:1706879 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:46:17 instance-1 lfd[1706890]: *User Processing* PID:1706885 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:46:17 instance-1 lfd[1706890]: *User Processing* PID:1706880 Kill:0 User:comphomes VM:608(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:48:17 instance-1 lfd[1707733]: *User Processing* PID:1707723 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:48:17 instance-1 lfd[1707733]: *User Processing* PID:1707729 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:50:17 instance-1 lfd[1708391]: *User Processing* PID:1708377 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:50:17 instance-1 lfd[1708391]: *User Processing* PID:1708379 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:52:17 instance-1 lfd[1709019]: *User Processing* PID:1709008 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:52:17 instance-1 lfd[1709019]: *User Processing* PID:1709011 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:53:17 instance-1 lfd[1709480]: *User Processing* PID:1709464 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:54:17 instance-1 lfd[1709897]: *User Processing* PID:1709890 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:54:17 instance-1 lfd[1709897]: *User Processing* PID:1709892 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:55:17 instance-1 lfd[1710252]: *User Processing* PID:1710238 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:55:17 instance-1 lfd[1710252]: *User Processing* PID:1710236 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:57:17 instance-1 lfd[1710840]: *User Processing* PID:1710828 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:59:17 instance-1 lfd[1711576]: *User Processing* PID:1711560 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 05:59:17 instance-1 lfd[1711576]: *User Processing* PID:1711564 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 06:00:17 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 06:00:17 instance-1 lfd[1711953]: *User Processing* PID:1711942 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:01:17 instance-1 lfd[1712260]: *User Processing* PID:1712255 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:02:17 instance-1 lfd[1712586]: *User Processing* PID:1712582 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:05:17 instance-1 lfd[1713692]: *User Processing* PID:1713683 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:07:18 instance-1 lfd[1714327]: *User Processing* PID:1714322 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:08:18 instance-1 lfd[1714794]: *User Processing* PID:1714789 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:09:18 instance-1 lfd[1715119]: *User Processing* PID:1715114 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:10:18 instance-1 lfd[1715482]: *User Processing* PID:1715473 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:13:18 instance-1 lfd[1716489]: *User Processing* PID:1716480 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:15:18 instance-1 lfd[1717206]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 06:15:18 instance-1 lfd[1717206]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 06:17:18 instance-1 lfd[1717798]: *User Processing* PID:1717790 Kill:0 User:rcpacom VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 06:29:18 instance-1 lfd[1721492]: *User Processing* PID:1721418 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 06:29:18 instance-1 lfd[1721492]: *User Processing* PID:1721482 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 06:34:19 instance-1 lfd[1723096]: *User Processing* PID:1723060 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 07:00:19 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 07:15:20 instance-1 lfd[1735847]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 07:15:20 instance-1 lfd[1735847]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 07:24:20 instance-1 lfd[1738455]: *User Processing* PID:1738331 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:25:20 instance-1 lfd[1738804]: *User Processing* PID:1738795 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:29:20 instance-1 lfd[1739859]: *User Processing* PID:1739855 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:30:21 instance-1 lfd[1740401]: *User Processing* PID:1740392 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:32:21 instance-1 lfd[1741069]: *User Processing* PID:1741065 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:36:21 instance-1 lfd[1742489]: *User Processing* PID:1742481 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:37:21 instance-1 lfd[1742811]: *User Processing* PID:1742803 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:38:21 instance-1 lfd[1743190]: *User Processing* PID:1743185 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:38:21 instance-1 lfd[1743190]: *User Processing* PID:1743184 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:39:21 instance-1 lfd[1743607]: *User Processing* PID:1743600 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:39:21 instance-1 lfd[1743607]: *User Processing* PID:1743602 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:39:21 instance-1 lfd[1743607]: *User Processing* PID:1743601 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:40:21 instance-1 lfd[1744184]: *User Processing* PID:1744175 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:40:21 instance-1 lfd[1744184]: *User Processing* PID:1744171 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:42:21 instance-1 lfd[1744951]: *User Processing* PID:1744944 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:43:21 instance-1 lfd[1745366]: *User Processing* PID:1745361 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:44:21 instance-1 lfd[1745673]: *User Processing* PID:1745669 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:46:21 instance-1 lfd[1746655]: *User Processing* PID:1746651 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 07:51:21 instance-1 lfd[1748235]: *User Processing* PID:1748179 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 07:59:22 instance-1 lfd[1750691]: *User Processing* PID:1750684 Kill:0 User:bmswinslow VM:627(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 08:00:22 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 08:13:22 instance-1 lfd[1755115]: *User Processing* PID:1755108 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 08:15:22 instance-1 lfd[1755826]: *User Processing* PID:1755814 Kill:0 User:independent VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 08:15:22 instance-1 lfd[1755823]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 08:15:22 instance-1 lfd[1755823]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 08:20:22 instance-1 lfd[1757383]: *User Processing* PID:1757367 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 08:33:23 instance-1 lfd[1761320]: *User Processing* PID:1761278 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 08:38:23 instance-1 lfd[1762921]: *User Processing* PID:1762915 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 09:00:24 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 09:15:24 instance-1 lfd[1774629]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 09:15:24 instance-1 lfd[1774629]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 09:31:25 instance-1 lfd[1779835]: *User Processing* PID:1779831 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 09:31:25 instance-1 lfd[1779835]: *User Processing* PID:1779828 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 09:40:25 instance-1 lfd[1782520]: *User Processing* PID:1782495 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:41:25 instance-1 lfd[1782805]: *User Processing* PID:1782789 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:42:25 instance-1 lfd[1783183]: *User Processing* PID:1783158 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:45:25 instance-1 lfd[1784013]: *User Processing* PID:1784001 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:48:25 instance-1 lfd[1784984]: *User Processing* PID:1784958 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:48:25 instance-1 lfd[1784984]: *User Processing* PID:1784963 Kill:0 User:newswinslow VM:527(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:49:25 instance-1 lfd[1785255]: *User Processing* PID:1785161 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:55:25 instance-1 lfd[1787240]: *User Processing* PID:1787232 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 09:57:25 instance-1 lfd[1788007]: *User Processing* PID:1787971 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:57:25 instance-1 lfd[1788007]: *User Processing* PID:1787886 Kill:0 User:newswinslow VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 09:58:25 instance-1 lfd[1788280]: *User Processing* PID:1788272 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 10:00:25 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 10:06:42 instance-1 lfd[1790879]: (smtpauth) Failed SMTP AUTH login from 45.144.212.163 (-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 21 10:15:26 instance-1 lfd[1793537]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 10:15:26 instance-1 lfd[1793537]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 10:23:26 instance-1 lfd[1795977]: *User Processing* PID:1795967 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 10:23:26 instance-1 lfd[1795977]: *User Processing* PID:1795956 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 10:33:26 instance-1 lfd[1799341]: *User Processing* PID:1799332 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 10:33:26 instance-1 lfd[1799341]: *User Processing* PID:1799334 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 10:35:26 instance-1 lfd[1799996]: *User Processing* PID:1799988 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 10:37:26 instance-1 lfd[1800606]: *User Processing* PID:1800602 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 10:47:26 instance-1 lfd[1803680]: *User Processing* PID:1803667 Kill:0 User:surveyms VM:595(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 10:54:27 instance-1 lfd[1806725]: *User Processing* PID:1806720 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 10:55:27 instance-1 lfd[1807030]: *User Processing* PID:1807022 Kill:0 User:geneticson VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 11:00:27 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 11:04:27 instance-1 lfd[1809839]: *User Processing* PID:1809835 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 11:08:27 instance-1 lfd[1811199]: *User Processing* PID:1811192 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 11:15:27 instance-1 lfd[1813315]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 11:15:28 instance-1 lfd[1813315]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 11:39:28 instance-1 lfd[1820688]: *User Processing* PID:1820659 Kill:0 User:yvegroup VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 11:44:28 instance-1 lfd[1822149]: *User Processing* PID:1822143 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 11:52:28 instance-1 lfd[1824800]: *User Processing* PID:1824796 Kill:0 User:rcpacom VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 11:57:28 instance-1 lfd[1826559]: *User Processing* PID:1826555 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:00:28 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 12:09:29 instance-1 lfd[1830655]: *User Processing* PID:1830649 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:09:29 instance-1 lfd[1830655]: *User Processing* PID:1830647 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:11:29 instance-1 lfd[1831345]: *User Processing* PID:1831341 Kill:0 User:tuscomau VM:564(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:12:29 instance-1 lfd[1831654]: *User Processing* PID:1831650 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:12:29 instance-1 lfd[1831654]: *User Processing* PID:1831645 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:15:29 instance-1 lfd[1832751]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 12:15:29 instance-1 lfd[1832751]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 12:16:29 instance-1 lfd[1833087]: *User Processing* PID:1833045 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 12:18:29 instance-1 lfd[1833685]: *User Processing* PID:1833679 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:20:29 instance-1 lfd[1834401]: *User Processing* PID:1834393 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:25:29 instance-1 lfd[1836010]: *User Processing* PID:1836001 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:26:29 instance-1 lfd[1836305]: *User Processing* PID:1836301 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:27:29 instance-1 lfd[1836579]: *User Processing* PID:1836549 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 12:30:29 instance-1 lfd[1837646]: *User Processing* PID:1837633 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:31:29 instance-1 lfd[1837952]: *User Processing* PID:1837945 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:34:29 instance-1 lfd[1838973]: *User Processing* PID:1838964 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:37:29 instance-1 lfd[1839952]: *User Processing* PID:1839942 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 12:39:29 instance-1 lfd[1840613]: *User Processing* PID:1840603 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:39:30 instance-1 lfd[1840613]: *User Processing* PID:1840609 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:41:29 instance-1 lfd[1841505]: *User Processing* PID:1841499 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:44:29 instance-1 lfd[1842377]: *User Processing* PID:1842340 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 12:47:30 instance-1 lfd[1843448]: *User Processing* PID:1843444 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:52:30 instance-1 lfd[1845280]: *User Processing* PID:1845276 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:53:30 instance-1 lfd[1845557]: *User Processing* PID:1845553 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 12:55:30 instance-1 lfd[1846377]: *User Processing* PID:1846350 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 12:56:30 instance-1 lfd[1846649]: *User Processing* PID:1846562 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 12:59:30 instance-1 lfd[1847479]: *User Processing* PID:1847464 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 12:59:30 instance-1 lfd[1847479]: *User Processing* PID:1847470 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:00:30 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 13:09:30 instance-1 lfd[1850540]: *User Processing* PID:1850536 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:15:30 instance-1 lfd[1852517]: *User Processing* PID:1852509 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:15:31 instance-1 lfd[1852515]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 13:15:31 instance-1 lfd[1852515]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 13:19:30 instance-1 lfd[1853766]: *User Processing* PID:1853762 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:21:30 instance-1 lfd[1854634]: *User Processing* PID:1854502 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:26:30 instance-1 lfd[1856668]: *User Processing* PID:1856664 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:26:31 instance-1 lfd[1856668]: *User Processing* PID:1856663 Kill:0 User:rcpacom VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:31 instance-1 lfd[1857536]: *Excessive Processes* User:opthirecomau Kill:0 Process Count:16
Mar 21 13:28:32 instance-1 lfd[1857536]: *User Processing* PID:1857526 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:33 instance-1 lfd[1857536]: *User Processing* PID:1857515 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:33 instance-1 lfd[1857536]: *User Processing* PID:1857516 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:34 instance-1 lfd[1857536]: *User Processing* PID:1857532 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:35 instance-1 lfd[1857536]: *User Processing* PID:1857514 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:36 instance-1 lfd[1857536]: *User Processing* PID:1857521 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:37 instance-1 lfd[1857536]: *User Processing* PID:1857511 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:39 instance-1 lfd[1857536]: *User Processing* PID:1857518 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:28:41 instance-1 lfd[1857536]: *User Processing* PID:1857527 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:29:01 instance-1 lfd[1858199]: *LOAD* 5 minute load average is 8.25, threshold is 6 - email sent
Mar 21 13:30:31 instance-1 lfd[1859005]: *User Processing* PID:1858997 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:33:31 instance-1 lfd[1860510]: *User Processing* PID:1860504 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:33:31 instance-1 lfd[1860510]: *User Processing* PID:1860505 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:33:31 instance-1 lfd[1860510]: *User Processing* PID:1860506 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:40:31 instance-1 lfd[1864274]: *User Processing* PID:1864267 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:40:32 instance-1 lfd[1864274]: *User Processing* PID:1864266 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:40:32 instance-1 lfd[1864274]: *User Processing* PID:1864265 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 13:42:31 instance-1 lfd[1865238]: *User Processing* PID:1865219 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 14:00:32 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 14:03:32 instance-1 lfd[1872574]: *User Processing* PID:1872437 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 14:04:33 instance-1 lfd[1873041]: *Excessive Processes* User:winslow Kill:0 Process Count:40
Mar 21 14:04:34 instance-1 lfd[1873041]: *User Processing* PID:1872991 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:13:33 instance-1 lfd[1876149]: *User Processing* PID:1876078 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:15:33 instance-1 lfd[1876882]: *User Processing* PID:1876531 Kill:0 User:newswinslow VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:15:33 instance-1 lfd[1876880]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 14:15:33 instance-1 lfd[1876880]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 14:17:33 instance-1 lfd[1877623]: *User Processing* PID:1877362 Kill:0 User:newswinslow VM:546(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:19:33 instance-1 lfd[1878261]: *User Processing* PID:1878062 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:19:33 instance-1 lfd[1878261]: *User Processing* PID:1878119 Kill:0 User:newswinslow VM:529(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:19:33 instance-1 lfd[1878261]: *User Processing* PID:1878123 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878547 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878545 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878546 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878537 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:22:33 instance-1 lfd[1879360]: *User Processing* PID:1879241 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:24:33 instance-1 lfd[1880038]: *User Processing* PID:1879934 Kill:0 User:newswinslow VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:25:33 instance-1 lfd[1880490]: *User Processing* PID:1880084 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:25:33 instance-1 lfd[1880490]: *User Processing* PID:1880083 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:29:33 instance-1 lfd[1882242]: *User Processing* PID:1882210 Kill:0 User:newswinslow VM:527(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:29:33 instance-1 lfd[1882242]: *User Processing* PID:1882235 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:30:33 instance-1 lfd[1882675]: *User Processing* PID:1882540 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:31:33 instance-1 lfd[1883076]: *User Processing* PID:1883072 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:32:33 instance-1 lfd[1883580]: *User Processing* PID:1883516 Kill:0 User:newswinslow VM:523(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:32:33 instance-1 lfd[1883580]: *User Processing* PID:1883576 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:33:33 instance-1 lfd[1883922]: *User Processing* PID:1883891 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884056 Kill:0 User:newswinslow VM:529(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884055 Kill:0 User:newswinslow VM:529(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884058 Kill:0 User:newswinslow VM:599(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884248 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:36:33 instance-1 lfd[1885144]: *User Processing* PID:1884951 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:36:33 instance-1 lfd[1885144]: *User Processing* PID:1884950 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:36:33 instance-1 lfd[1885144]: *User Processing* PID:1885139 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:37:33 instance-1 lfd[1885627]: *User Processing* PID:1885499 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:37:33 instance-1 lfd[1885627]: *User Processing* PID:1885491 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:37:33 instance-1 lfd[1885627]: *User Processing* PID:1885498 Kill:0 User:newswinslow VM:527(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:38:33 instance-1 lfd[1886010]: *User Processing* PID:1885949 Kill:0 User:newswinslow VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:39:33 instance-1 lfd[1886416]: *User Processing* PID:1886258 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 14:40:33 instance-1 lfd[1886890]: *User Processing* PID:1886881 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:41:33 instance-1 lfd[1887279]: *User Processing* PID:1887195 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 14:41:33 instance-1 lfd[1887279]: *User Processing* PID:1887271 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:42:33 instance-1 lfd[1887794]: *User Processing* PID:1887790 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:42:33 instance-1 lfd[1887794]: *User Processing* PID:1887729 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:44:33 instance-1 lfd[1888541]: *User Processing* PID:1888537 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:46:33 instance-1 lfd[1889439]: *User Processing* PID:1889435 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:47:33 instance-1 lfd[1889935]: *User Processing* PID:1889931 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:48:34 instance-1 lfd[1890349]: *User Processing* PID:1890343 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:48:34 instance-1 lfd[1890349]: *User Processing* PID:1890344 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:51:34 instance-1 lfd[1891626]: *User Processing* PID:1891620 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:53:34 instance-1 lfd[1892413]: *User Processing* PID:1892409 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:54:34 instance-1 lfd[1892871]: *User Processing* PID:1892867 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:55:34 instance-1 lfd[1893319]: *User Processing* PID:1893311 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:56:34 instance-1 lfd[1893780]: *User Processing* PID:1893776 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:57:34 instance-1 lfd[1894324]: *User Processing* PID:1894319 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 14:58:34 instance-1 lfd[1894712]: *User Processing* PID:1894703 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:00:34 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 15:00:34 instance-1 lfd[1895490]: *User Processing* PID:1895476 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:02:34 instance-1 lfd[1896272]: *User Processing* PID:1896251 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:03:34 instance-1 lfd[1896737]: *User Processing* PID:1896732 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:04:34 instance-1 lfd[1897057]: *User Processing* PID:1897053 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:04:34 instance-1 lfd[1897057]: *User Processing* PID:1897049 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:05:34 instance-1 lfd[1897449]: *User Processing* PID:1897438 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:07:34 instance-1 lfd[1898279]: *User Processing* PID:1898268 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:08:34 instance-1 lfd[1898808]: *User Processing* PID:1898800 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:09:34 instance-1 lfd[1899278]: *User Processing* PID:1899272 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:09:34 instance-1 lfd[1899278]: *User Processing* PID:1899269 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:15:35 instance-1 lfd[1901923]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 15:15:35 instance-1 lfd[1901923]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 15:16:34 instance-1 lfd[1902250]: *User Processing* PID:1902246 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:25:35 instance-1 lfd[1905509]: *User Processing* PID:1905452 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:28:35 instance-1 lfd[1906633]: *User Processing* PID:1906629 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:34:35 instance-1 lfd[1908498]: *User Processing* PID:1908328 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 21 15:40:35 instance-1 lfd[1910633]: *User Processing* PID:1910473 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 15:40:35 instance-1 lfd[1910633]: *User Processing* PID:1910621 Kill:0 User:opthirecomau VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:43:35 instance-1 lfd[1911555]: *User Processing* PID:1911548 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 15:49:35 instance-1 lfd[1913793]: *User Processing* PID:1913784 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:49:35 instance-1 lfd[1913793]: *User Processing* PID:1913782 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:49:35 instance-1 lfd[1913793]: *User Processing* PID:1913785 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 15:53:35 instance-1 lfd[1915190]: *User Processing* PID:1915182 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 15:53:35 instance-1 lfd[1915190]: *User Processing* PID:1915165 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 16:00:35 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 16:04:35 instance-1 lfd[1919059]: *User Processing* PID:1919051 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 16:05:36 instance-1 lfd[1919429]: *User Processing* PID:1919405 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 16:05:36 instance-1 lfd[1919429]: *User Processing* PID:1919404 Kill:0 User:newswinslow VM:569(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 16:06:36 instance-1 lfd[1919781]: *User Processing* PID:1919611 Kill:0 User:opthirecomau VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 16:07:36 instance-1 lfd[1920078]: *User Processing* PID:1920059 Kill:0 User:winslow VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 16:07:36 instance-1 lfd[1920078]: *User Processing* PID:1920073 Kill:0 User:winslow VM:519(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 16:09:36 instance-1 lfd[1920878]: *User Processing* PID:1920735 Kill:0 User:nativesp VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 21 16:11:36 instance-1 lfd[1921699]: *User Processing* PID:1921619 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 16:12:36 instance-1 lfd[1921995]: *User Processing* PID:1921793 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi
Mar 21 16:13:36 instance-1 lfd[1922290]: *User Processing* PID:1922222 Kill:0 User:indigenouscivil VM:600(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 16:13:36 instance-1 lfd[1922290]: *User Processing* PID:1922151 Kill:0 User:indigenouscivil VM:600(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 16:14:36 instance-1 lfd[1922719]: *User Processing* PID:1922715 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 16:15:36 instance-1 lfd[1923068]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 16:15:36 instance-1 lfd[1923068]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 16:20:36 instance-1 lfd[1924677]: *User Processing* PID:1924666 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 16:40:36 instance-1 lfd[1931334]: *User Processing* PID:1931326 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 16:54:37 instance-1 lfd[1935362]: *User Processing* PID:1935336 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 17:00:37 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 17:04:37 instance-1 lfd[1938327]: *User Processing* PID:1938320 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 17:15:38 instance-1 lfd[1941750]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 17:15:38 instance-1 lfd[1941750]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 17:19:37 instance-1 lfd[1943026]: *User Processing* PID:1942951 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 17:31:38 instance-1 lfd[1946577]: *User Processing* PID:1946573 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 17:31:38 instance-1 lfd[1946577]: *User Processing* PID:1946567 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 17:41:38 instance-1 lfd[1949606]: *User Processing* PID:1949599 Kill:0 User:comphomes VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 17:41:38 instance-1 lfd[1949606]: *User Processing* PID:1949597 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 17:44:38 instance-1 lfd[1950439]: *User Processing* PID:1950432 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 18:00:38 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 18:00:38 instance-1 lfd[1955189]: *User Processing* PID:1955158 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 18:15:39 instance-1 lfd[1959649]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 18:15:39 instance-1 lfd[1959649]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 18:22:39 instance-1 lfd[1961646]: *User Processing* PID:1961618 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 18:29:39 instance-1 lfd[1963596]: *User Processing* PID:1963587 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 18:29:39 instance-1 lfd[1963596]: *User Processing* PID:1963592 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 18:37:39 instance-1 lfd[1966254]: *User Processing* PID:1966250 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 18:48:39 instance-1 lfd[1969615]: *User Processing* PID:1969607 Kill:0 User:surveyms VM:528(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 18:55:40 instance-1 lfd[1971989]: *User Processing* PID:1971980 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 18:55:40 instance-1 lfd[1971989]: *User Processing* PID:1971975 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 19:00:40 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 19:15:40 instance-1 lfd[1978811]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 19:15:41 instance-1 lfd[1978811]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 19:23:42 instance-1 lfd[1981407]: *LOAD* 5 minute load average is 7.21, threshold is 6 - email sent
Mar 21 19:23:44 instance-1 lfd[1981408]: *Excessive Processes* User:surveyms Kill:0 Process Count:20
Mar 21 20:27:14 instance-1 lfd[1711]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 21 20:27:15 instance-1 lfd[1711]: LF_APACHE_ERRPORT: Set to [2]
Mar 21 20:27:16 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 21 20:27:16 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 21 20:27:16 instance-1 lfd[1711]: CSF Tracking...
Mar 21 20:27:16 instance-1 lfd[1711]: IPv6 Enabled...
Mar 21 20:27:16 instance-1 lfd[1711]: LOAD Tracking...
Mar 21 20:27:16 instance-1 lfd[1711]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 21 20:27:16 instance-1 lfd[1711]: Country Code Lookups...
Mar 21 20:27:16 instance-1 lfd[1711]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 20:27:16 instance-1 lfd[1711]: System Integrity Tracking...
Mar 21 20:27:16 instance-1 lfd[1711]: Exploit Tracking...
Mar 21 20:27:16 instance-1 lfd[1711]: Directory Watching...
Mar 21 20:27:16 instance-1 lfd[1711]: Email Queue Tracking...
Mar 21 20:27:16 instance-1 lfd[1711]: ModSecurity IP D/B Tracking...
Mar 21 20:27:16 instance-1 lfd[1711]: Email Relay Tracking...
Mar 21 20:27:17 instance-1 lfd[1711]: Temp to Perm Block Tracking...
Mar 21 20:27:17 instance-1 lfd[1711]: System Statistics...
Mar 21 20:27:18 instance-1 lfd[1711]: Process Tracking...
Mar 21 20:27:18 instance-1 lfd[1711]: Account Tracking...
Mar 21 20:27:18 instance-1 lfd[1711]: SSH Tracking...
Mar 21 20:27:18 instance-1 lfd[1711]: Webmin Tracking...
Mar 21 20:27:18 instance-1 lfd[1711]: SU Tracking...
Mar 21 20:27:18 instance-1 lfd[1711]: Console Tracking...
Mar 21 20:27:18 instance-1 lfd[1711]: WHM Tracking...
Mar 21 20:27:18 instance-1 lfd[1711]: Watching /var/log/customlog...
Mar 21 20:27:18 instance-1 lfd[1711]: Watching /var/log/maillog...
Mar 21 20:27:18 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/access_log...
Mar 21 20:27:18 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/login_log...
Mar 21 20:27:19 instance-1 lfd[1711]: Watching /var/log/exim_mainlog...
Mar 21 20:27:19 instance-1 lfd[1711]: Watching /etc/apache2/logs/error_log...
Mar 21 20:27:19 instance-1 lfd[1711]: Watching /var/log/secure...
Mar 21 20:27:19 instance-1 lfd[1711]: Watching /var/log/messages...
Mar 21 20:29:19 instance-1 lfd[2599]: *User Processing* PID:2530 Kill:0 User:opthirecomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:30:19 instance-1 lfd[2915]: *User Processing* PID:2894 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:31:19 instance-1 lfd[3167]: *User Processing* PID:3062 Kill:0 User:newswinslow VM:554(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 20:32:55 instance-1 lfd[3501]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 20:32:55 instance-1 lfd[3501]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 20:35:19 instance-1 lfd[4818]: *User Processing* PID:4809 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:35:20 instance-1 lfd[4818]: *User Processing* PID:4810 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:35:20 instance-1 lfd[4818]: *User Processing* PID:4796 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:35:21 instance-1 lfd[4818]: *User Processing* PID:4753 Kill:0 User:trafman VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 20:35:21 instance-1 lfd[4818]: *User Processing* PID:4287 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 20:35:21 instance-1 lfd[4818]: *User Processing* PID:4782 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:35:22 instance-1 lfd[4818]: *User Processing* PID:4303 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 20:36:19 instance-1 lfd[5420]: *User Processing* PID:5413 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:36:19 instance-1 lfd[5420]: *User Processing* PID:5415 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:37:19 instance-1 lfd[5929]: *User Processing* PID:5920 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:38:19 instance-1 lfd[6572]: *User Processing* PID:6568 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:39:19 instance-1 lfd[7111]: *User Processing* PID:7104 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:39:19 instance-1 lfd[7111]: *User Processing* PID:7103 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:40:19 instance-1 lfd[7670]: *User Processing* PID:7666 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:40:19 instance-1 lfd[7670]: *User Processing* PID:7665 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:41:19 instance-1 lfd[8186]: *User Processing* PID:8181 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:42:19 instance-1 lfd[8692]: *User Processing* PID:8682 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:42:20 instance-1 lfd[8692]: *User Processing* PID:8683 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:43:19 instance-1 lfd[9301]: *User Processing* PID:9297 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:43:19 instance-1 lfd[9301]: *User Processing* PID:9292 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:47:19 instance-1 lfd[10905]: *User Processing* PID:10897 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:48:19 instance-1 lfd[11411]: *User Processing* PID:11406 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:50:19 instance-1 lfd[12115]: *User Processing* PID:12111 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:53:20 instance-1 lfd[13504]: *User Processing* PID:13500 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:54:20 instance-1 lfd[13969]: *User Processing* PID:13962 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:55:20 instance-1 lfd[14357]: *User Processing* PID:14352 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:56:20 instance-1 lfd[14714]: *User Processing* PID:14710 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 20:59:20 instance-1 lfd[15882]: *User Processing* PID:15878 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:01:20 instance-1 lfd[16672]: *User Processing* PID:16667 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:04:20 instance-1 lfd[17971]: *User Processing* PID:17964 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:06:20 instance-1 lfd[18719]: *User Processing* PID:18714 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:07:20 instance-1 lfd[19081]: *User Processing* PID:19072 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:08:20 instance-1 lfd[19566]: *User Processing* PID:19562 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:09:20 instance-1 lfd[19971]: *User Processing* PID:19945 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:10:20 instance-1 lfd[20471]: *User Processing* PID:20466 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:12:20 instance-1 lfd[21347]: *User Processing* PID:21334 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:14:20 instance-1 lfd[22282]: *User Processing* PID:22215 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 21 21:17:20 instance-1 lfd[23375]: *User Processing* PID:23363 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:18:20 instance-1 lfd[23883]: *User Processing* PID:23874 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:19:20 instance-1 lfd[24230]: *User Processing* PID:24223 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:27:20 instance-1 lfd[1711]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 21:27:20 instance-1 lfd[26897]: *User Processing* PID:26883 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 21:30:21 instance-1 lfd[27846]: *User Processing* PID:27837 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:35:21 instance-1 lfd[29620]: *User Processing* PID:29616 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:37:21 instance-1 lfd[30165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 21:37:21 instance-1 lfd[30165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 21:43:21 instance-1 lfd[32017]: *User Processing* PID:32011 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:43:21 instance-1 lfd[32017]: *User Processing* PID:32013 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:44:21 instance-1 lfd[32456]: *User Processing* PID:32450 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 21:44:21 instance-1 lfd[32456]: *User Processing* PID:32452 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 22:02:21 instance-1 lfd[39940]: cPanel upgrade detected, restarting ConfigServer services...
Mar 21 22:02:21 instance-1 lfd[39940]: cPanel upgrade detected, restarting lfd
Mar 21 22:02:26 instance-1 lfd[1711]: daemon restart requested
Mar 21 22:02:26 instance-1 lfd[39967]: Main Process: HUP
Mar 21 22:02:26 instance-1 lfd[39967]: daemon stopped
Mar 21 22:02:26 instance-1 lfd[39985]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 21 22:02:27 instance-1 lfd[39985]: LF_APACHE_ERRPORT: Set to [2]
Mar 21 22:02:27 instance-1 lfd[39985]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 21 22:02:27 instance-1 lfd[39985]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 21 22:02:27 instance-1 lfd[39985]: CSF Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: IPv6 Enabled...
Mar 21 22:02:27 instance-1 lfd[39985]: LOAD Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 21 22:02:27 instance-1 lfd[39985]: Country Code Lookups...
Mar 21 22:02:27 instance-1 lfd[39985]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 22:02:27 instance-1 lfd[39985]: System Integrity Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Exploit Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Directory Watching...
Mar 21 22:02:27 instance-1 lfd[39985]: Email Queue Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: ModSecurity IP D/B Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Email Relay Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Temp to Perm Block Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: System Statistics...
Mar 21 22:02:27 instance-1 lfd[39985]: Process Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Account Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: SSH Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Webmin Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: SU Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Console Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: WHM Tracking...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/messages...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /etc/apache2/logs/error_log...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/secure...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/maillog...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/exim_mainlog...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /usr/local/cpanel/logs/login_log...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/customlog...
Mar 21 22:02:27 instance-1 lfd[39985]: Watching /usr/local/cpanel/logs/access_log...
Mar 21 22:06:18 instance-1 lfd[41661]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 21 22:06:18 instance-1 lfd[41661]: LF_APACHE_ERRPORT: Set to [2]
Mar 21 22:06:18 instance-1 lfd[41661]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 21 22:06:18 instance-1 lfd[41661]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 21 22:06:18 instance-1 lfd[41661]: CSF Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: IPv6 Enabled...
Mar 21 22:06:18 instance-1 lfd[41661]: LOAD Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 21 22:06:18 instance-1 lfd[41661]: Country Code Lookups...
Mar 21 22:06:18 instance-1 lfd[41661]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 22:06:18 instance-1 lfd[41661]: System Integrity Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Exploit Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Directory Watching...
Mar 21 22:06:18 instance-1 lfd[41661]: Email Queue Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: ModSecurity IP D/B Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Email Relay Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Temp to Perm Block Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: System Statistics...
Mar 21 22:06:18 instance-1 lfd[41661]: Process Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Account Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: SSH Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Webmin Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: SU Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Console Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: WHM Tracking...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/customlog...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/exim_mainlog...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /etc/apache2/logs/error_log...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /usr/local/cpanel/logs/login_log...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/maillog...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /usr/local/cpanel/logs/access_log...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/secure...
Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/messages...
Mar 21 22:09:18 instance-1 lfd[42607]: *User Processing* PID:42556 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 22:11:18 instance-1 lfd[43351]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 22:11:19 instance-1 lfd[43351]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 22:19:18 instance-1 lfd[45689]: *User Processing* PID:45681 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 22:24:18 instance-1 lfd[47223]: *User Processing* PID:47217 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 22:24:18 instance-1 lfd[47223]: *User Processing* PID:47219 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 22:24:19 instance-1 lfd[47223]: *User Processing* PID:47213 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 22:42:19 instance-1 lfd[52955]: *User Processing* PID:52946 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 21 22:59:19 instance-1 lfd[57710]: *User Processing* PID:57468 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 23:01:19 instance-1 lfd[58263]: *User Processing* PID:58255 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 23:01:19 instance-1 lfd[58263]: *User Processing* PID:58250 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 23:06:19 instance-1 lfd[41661]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 21 23:09:20 instance-1 lfd[61133]: *Excessive Processes* User:winslow Kill:0 Process Count:12
Mar 21 23:11:20 instance-1 lfd[62191]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 21 23:11:20 instance-1 lfd[62191]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 21 23:12:20 instance-1 lfd[62838]: *Excessive Processes* User:tekutaro Kill:0 Process Count:11
Mar 21 23:15:20 instance-1 lfd[64434]: *Excessive Processes* User:trafman Kill:0 Process Count:12
Mar 21 23:16:20 instance-1 lfd[65079]: *Excessive Processes* User:private Kill:0 Process Count:12
Mar 21 23:22:20 instance-1 lfd[67508]: *User Processing* PID:67504 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 23:42:20 instance-1 lfd[73272]: *User Processing* PID:73257 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 23:42:20 instance-1 lfd[73272]: *User Processing* PID:73265 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 21 23:58:21 instance-1 lfd[78513]: *User Processing* PID:78506 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 23:59:21 instance-1 lfd[78939]: *User Processing* PID:78934 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 21 23:59:21 instance-1 lfd[78939]: *User Processing* PID:78932 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:00:02 instance-1 lfd[41661]: Main Process: TERM
Mar 22 00:00:02 instance-1 lfd[41661]: daemon stopped
Mar 22 00:00:02 instance-1 lfd[79232]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 22 00:00:02 instance-1 lfd[79232]: LF_APACHE_ERRPORT: Set to [2]
Mar 22 00:00:02 instance-1 lfd[79232]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 22 00:00:02 instance-1 lfd[79232]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 22 00:00:02 instance-1 lfd[79232]: CSF Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: IPv6 Enabled...
Mar 22 00:00:02 instance-1 lfd[79232]: LOAD Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 22 00:00:02 instance-1 lfd[79232]: Country Code Lookups...
Mar 22 00:00:02 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 00:00:02 instance-1 lfd[79232]: System Integrity Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Exploit Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Directory Watching...
Mar 22 00:00:02 instance-1 lfd[79232]: Email Queue Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: ModSecurity IP D/B Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Email Relay Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Temp to Perm Block Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: System Statistics...
Mar 22 00:00:02 instance-1 lfd[79232]: Process Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Account Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: SSH Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Webmin Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: SU Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Console Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: WHM Tracking...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/customlog...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/maillog...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/messages...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /etc/apache2/logs/error_log...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/secure...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /usr/local/cpanel/logs/access_log...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/exim_mainlog...
Mar 22 00:00:02 instance-1 lfd[79232]: Watching /usr/local/cpanel/logs/login_log...
Mar 22 00:01:02 instance-1 lfd[79603]: *User Processing* PID:79599 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:05:03 instance-1 lfd[80860]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 00:05:03 instance-1 lfd[80860]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 00:20:05 instance-1 lfd[85569]: *LOAD* 5 minute load average is 7.13, threshold is 6 - email sent
Mar 22 00:20:08 instance-1 lfd[85570]: *Excessive Processes* User:winslow Kill:0 Process Count:29
Mar 22 00:20:17 instance-1 lfd[85570]: *Excessive Processes* User:surveyms Kill:0 Process Count:20
Mar 22 00:20:20 instance-1 lfd[85570]: *User Processing* PID:85446 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:24 instance-1 lfd[85570]: *User Processing* PID:85427 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:28 instance-1 lfd[85570]: *User Processing* PID:85358 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:31 instance-1 lfd[85570]: *User Processing* PID:85250 Kill:0 User:geneticson VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:35 instance-1 lfd[85570]: *User Processing* PID:85365 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:38 instance-1 lfd[85570]: *User Processing* PID:85022 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 00:20:42 instance-1 lfd[85570]: *User Processing* PID:85242 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:45 instance-1 lfd[85570]: *User Processing* PID:85298 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:50 instance-1 lfd[85570]: *User Processing* PID:85434 Kill:0 User:independent VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 00:20:51 instance-1 lfd[85568]: Directory Watching terminated after 40 seconds
Mar 22 00:20:52 instance-1 lfd[85568]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds
Mar 22 00:21:59 instance-1 lfd[85927]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped
Mar 22 01:20:03 instance-1 lfd[85570]: *User Processing* PID:85406 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:20:11 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 01:20:16 instance-1 lfd[86469]: *LOAD* 5 minute load average is 358.51, threshold is 6 - email sent
Mar 22 01:20:16 instance-1 lfd[86470]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped
Mar 22 01:20:21 instance-1 lfd[85570]: *User Processing* PID:85481 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:20:34 instance-1 lfd[85570]: *User Processing* PID:85449 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:20:39 instance-1 lfd[86582]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped
Mar 22 01:20:43 instance-1 lfd[85570]: *User Processing* PID:85296 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:20:51 instance-1 lfd[85570]: *User Processing* PID:85352 Kill:0 User:independent VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:20:54 instance-1 lfd[85570]: *User Processing* PID:85430 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:02 instance-1 lfd[85570]: *User Processing* PID:85338 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:08 instance-1 lfd[85570]: *User Processing* PID:85341 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:12 instance-1 lfd[85570]: *User Processing* PID:85479 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:21:14 instance-1 lfd[85570]: *User Processing* PID:85429 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:16 instance-1 lfd[85570]: *User Processing* PID:85408 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:20 instance-1 lfd[85570]: *User Processing* PID:85438 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:40 instance-1 lfd[87163]: *User Processing* PID:85022 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:21:40 instance-1 lfd[87163]: *User Processing* PID:85022 Kill:0 User:indigenouscivil Time:3723 EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:21:43 instance-1 lfd[87163]: *User Processing* PID:85179 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 01:21:43 instance-1 lfd[87163]: *User Processing* PID:85179 Kill:0 User:surveyms Time:3715 EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 01:21:44 instance-1 lfd[87163]: *User Processing* PID:85342 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 01:21:44 instance-1 lfd[87163]: *User Processing* PID:85342 Kill:0 User:surveyms Time:3709 EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 01:21:46 instance-1 lfd[87163]: *User Processing* PID:84788 Kill:0 User:turnkey Time:3744 EXE:/usr/local/cpanel/3rdparty/php/83/sbin/php-fpm CMD:php-fpm: pool user_turnkey
Mar 22 01:21:47 instance-1 lfd[87163]: *User Processing* PID:85727 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:21:47 instance-1 lfd[87163]: *User Processing* PID:85727 Kill:0 User:indigenouscivil Time:3672 EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:21:48 instance-1 lfd[87163]: *User Processing* PID:85667 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:21:48 instance-1 lfd[87163]: *User Processing* PID:85667 Kill:0 User:indigenouscivil Time:3683 EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:21:50 instance-1 lfd[87163]: *User Processing* PID:85444 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:50 instance-1 lfd[87163]: *User Processing* PID:85444 Kill:0 User:rcpacom Time:3703 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:21:52 instance-1 lfd[86442]: Directory Watching terminated after 100 seconds
Mar 22 01:21:52 instance-1 lfd[86442]: LF_DIRWATCH taking 100 seconds, temporarily throttled to run every 2700 seconds
Mar 22 01:22:42 instance-1 lfd[87614]: *User Processing* PID:87482 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:22:42 instance-1 lfd[87614]: *User Processing* PID:87479 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:22:42 instance-1 lfd[87614]: *User Processing* PID:87489 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:31:42 instance-1 lfd[90494]: *User Processing* PID:90444 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 01:31:42 instance-1 lfd[90494]: *User Processing* PID:90487 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 01:44:42 instance-1 lfd[93943]: *User Processing* PID:93940 Kill:0 User:mainpoint VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:05:27 instance-1 lfd[100572]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 02:05:27 instance-1 lfd[100572]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 02:16:43 instance-1 lfd[104166]: *User Processing* PID:104161 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:19:38 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 02:20:43 instance-1 lfd[105327]: *User Processing* PID:105286 Kill:0 User:independent VM:599(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:23:43 instance-1 lfd[106078]: *User Processing* PID:106069 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:23:43 instance-1 lfd[106078]: *User Processing* PID:106075 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:28:43 instance-1 lfd[107480]: *User Processing* PID:107477 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:39:44 instance-1 lfd[110607]: *User Processing* PID:110595 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112065 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112043 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112052 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112064 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:49:44 instance-1 lfd[113632]: *User Processing* PID:113623 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:49:44 instance-1 lfd[113632]: *User Processing* PID:113616 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 02:50:44 instance-1 lfd[113932]: *User Processing* PID:113924 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 02:52:44 instance-1 lfd[114607]: *User Processing* PID:114601 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:03:44 instance-1 lfd[117928]: *User Processing* PID:117920 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 03:17:45 instance-1 lfd[122241]: *User Processing* PID:122235 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 03:18:45 instance-1 lfd[122524]: *User Processing* PID:122515 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 03:19:40 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 03:22:45 instance-1 lfd[123780]: *User Processing* PID:123777 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:47 instance-1 lfd[125063]: *User Processing* PID:124506 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:49 instance-1 lfd[125063]: *User Processing* PID:124516 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 03:24:50 instance-1 lfd[125063]: *User Processing* PID:124655 Kill:0 User:surveyms VM:538(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 03:24:52 instance-1 lfd[125063]: *User Processing* PID:124389 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:54 instance-1 lfd[125063]: *User Processing* PID:124408 Kill:0 User:bmswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:55 instance-1 lfd[125063]: *User Processing* PID:125067 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:56 instance-1 lfd[125063]: *User Processing* PID:124942 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 03:24:57 instance-1 lfd[125063]: *User Processing* PID:124928 Kill:0 User:winslowgroupweb VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:57 instance-1 lfd[125063]: *User Processing* PID:124755 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:58 instance-1 lfd[125063]: *User Processing* PID:124738 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 03:24:58 instance-1 lfd[125063]: *User Processing* PID:124936 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:59 instance-1 lfd[125063]: *User Processing* PID:124372 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:24:59 instance-1 lfd[125063]: *User Processing* PID:124561 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:25:00 instance-1 lfd[125063]: *User Processing* PID:124646 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:25:00 instance-1 lfd[125063]: *User Processing* PID:124740 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:25:00 instance-1 lfd[125063]: *User Processing* PID:124975 Kill:0 User:bmswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:25:01 instance-1 lfd[125063]: *User Processing* PID:124852 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:25:01 instance-1 lfd[125637]: *LOAD* 5 minute load average is 6.11, threshold is 6 - email sent
Mar 22 03:25:01 instance-1 lfd[125063]: *User Processing* PID:124733 Kill:0 User:winslowgroupweb VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:25:01 instance-1 lfd[125063]: *User Processing* PID:124386 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 03:28:48 instance-1 lfd[127461]: (smtpauth) Failed SMTP AUTH login from 165.154.203.216 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 22 03:32:46 instance-1 lfd[128664]: *User Processing* PID:128641 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:35:18 instance-1 lfd[129130]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 03:35:18 instance-1 lfd[129130]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 03:49:46 instance-1 lfd[135391]: *User Processing* PID:135369 Kill:0 User:nlph VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nlph/public_html instance info --format=json --check-updates=true
Mar 22 03:50:46 instance-1 lfd[136071]: *User Processing* PID:135901 Kill:0 User:newswinslow VM:552(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 03:51:47 instance-1 lfd[136815]: *User Processing* PID:136806 Kill:0 User:trafman VM:547(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/trafman/public_html instance info --format=json --check-updates=true
Mar 22 03:52:47 instance-1 lfd[138034]: *User Processing* PID:137866 Kill:0 User:mainpoint VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html instance info --format=json --check-updates=true
Mar 22 03:53:47 instance-1 lfd[138997]: *User Processing* PID:138994 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json
Mar 22 03:54:47 instance-1 lfd[139887]: *User Processing* PID:139871 Kill:0 User:bmswinslow VM:721(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=300 --no-header -- --no-color --path=/home/bmswinslow/public_html plugin update gravityforms --format=json --skip-plugins=false --skip-themes=false
Mar 22 03:54:47 instance-1 lfd[139887]: *User Processing* PID:139884 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:55:47 instance-1 lfd[140849]: *User Processing* PID:140846 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 03:55:47 instance-1 lfd[140849]: *User Processing* PID:140844 Kill:0 User:tuscomau VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/tuscomau/public_html instance info --format=json --check-updates=true
Mar 22 04:19:42 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 04:21:47 instance-1 lfd[150092]: *User Processing* PID:150081 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 04:21:48 instance-1 lfd[150092]: *User Processing* PID:149787 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 04:21:48 instance-1 lfd[150092]: *User Processing* PID:150084 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 04:22:47 instance-1 lfd[150652]: *User Processing* PID:150515 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 04:23:48 instance-1 lfd[151189]: *User Processing* PID:151134 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 04:23:48 instance-1 lfd[151189]: *User Processing* PID:151172 Kill:0 User:yvegroup VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 04:24:48 instance-1 lfd[151844]: *User Processing* PID:151831 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 04:24:48 instance-1 lfd[151844]: *User Processing* PID:151785 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 04:24:48 instance-1 lfd[151844]: *User Processing* PID:151841 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 05:04:44 instance-1 lfd[164714]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 05:04:44 instance-1 lfd[164714]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 05:19:44 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 05:38:50 instance-1 lfd[174215]: *User Processing* PID:174189 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 06:03:50 instance-1 lfd[181438]: *User Processing* PID:181433 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 06:11:51 instance-1 lfd[183864]: *User Processing* PID:183859 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 06:13:51 instance-1 lfd[184677]: *User Processing* PID:184673 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 06:19:46 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 06:34:48 instance-1 lfd[191532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 06:34:49 instance-1 lfd[191532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 06:34:52 instance-1 lfd[191566]: *Excessive Processes* User:surveyms Kill:0 Process Count:16
Mar 22 06:34:53 instance-1 lfd[191566]: *User Processing* PID:191437 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 06:34:53 instance-1 lfd[191566]: *User Processing* PID:191488 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 06:34:54 instance-1 lfd[191566]: *User Processing* PID:191433 Kill:0 User:surveyms VM:512(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 06:34:54 instance-1 lfd[191566]: *User Processing* PID:191496 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 06:37:52 instance-1 lfd[192380]: *User Processing* PID:192372 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 06:42:52 instance-1 lfd[193796]: *User Processing* PID:193790 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 06:55:52 instance-1 lfd[197808]: *User Processing* PID:197791 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 07:19:48 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 07:26:54 instance-1 lfd[207526]: *User Processing* PID:207442 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 07:26:54 instance-1 lfd[207526]: *User Processing* PID:207520 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 07:26:54 instance-1 lfd[207526]: *User Processing* PID:207519 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 07:27:54 instance-1 lfd[207963]: *User Processing* PID:207923 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 07:27:54 instance-1 lfd[207963]: *User Processing* PID:207959 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 07:28:54 instance-1 lfd[208360]: *User Processing* PID:208356 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 07:28:54 instance-1 lfd[208360]: *User Processing* PID:208270 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 07:29:54 instance-1 lfd[208812]: *User Processing* PID:208511 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 07:33:54 instance-1 lfd[210360]: *User Processing* PID:210310 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 08:04:52 instance-1 lfd[221592]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 08:04:52 instance-1 lfd[221592]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 08:07:55 instance-1 lfd[222754]: *User Processing* PID:222746 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 08:13:55 instance-1 lfd[224865]: *User Processing* PID:224841 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 08:19:50 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 08:32:56 instance-1 lfd[232254]: *User Processing* PID:232247 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 08:35:56 instance-1 lfd[233521]: *User Processing* PID:233518 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 08:37:56 instance-1 lfd[234609]: *User Processing* PID:234606 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 08:38:56 instance-1 lfd[235011]: *User Processing* PID:235005 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 08:52:57 instance-1 lfd[241087]: *User Processing* PID:241082 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 09:07:58 instance-1 lfd[246272]: *User Processing* PID:246268 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 09:11:58 instance-1 lfd[247644]: *User Processing* PID:247570 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 09:19:53 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 09:34:54 instance-1 lfd[255976]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 09:34:54 instance-1 lfd[255976]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 10:19:55 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 10:36:01 instance-1 lfd[274413]: *User Processing* PID:274410 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 10:41:01 instance-1 lfd[275918]: *User Processing* PID:275911 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 10:45:01 instance-1 lfd[277274]: *User Processing* PID:277254 Kill:0 User:geneticson VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 10:54:01 instance-1 lfd[281006]: *User Processing* PID:280992 Kill:0 User:yvegroup VM:599(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:02:02 instance-1 lfd[283377]: *User Processing* PID:283352 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:03:02 instance-1 lfd[283700]: *User Processing* PID:283694 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:04:57 instance-1 lfd[284319]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 11:04:57 instance-1 lfd[284319]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 11:05:02 instance-1 lfd[284400]: *User Processing* PID:284356 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:19:57 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 11:34:03 instance-1 lfd[293001]: *User Processing* PID:292995 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:35:03 instance-1 lfd[293367]: *User Processing* PID:293359 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:36:03 instance-1 lfd[293686]: *User Processing* PID:293680 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:38:03 instance-1 lfd[294559]: *User Processing* PID:294556 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:39:03 instance-1 lfd[294883]: *User Processing* PID:294877 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:40:03 instance-1 lfd[295254]: *User Processing* PID:295251 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 11:45:03 instance-1 lfd[297046]: *User Processing* PID:297040 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 12:14:04 instance-1 lfd[305504]: *User Processing* PID:305501 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 12:19:59 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 12:28:05 instance-1 lfd[309479]: *User Processing* PID:309441 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 12:35:00 instance-1 lfd[311517]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 12:35:00 instance-1 lfd[311517]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 12:54:06 instance-1 lfd[317087]: *User Processing* PID:317048 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 13:20:02 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 13:44:07 instance-1 lfd[332446]: *User Processing* PID:332407 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 13:47:08 instance-1 lfd[333416]: *User Processing* PID:333412 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 14:01:08 instance-1 lfd[337974]: *User Processing* PID:337971 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 14:02:08 instance-1 lfd[338415]: *User Processing* PID:338404 Kill:0 User:bmswinslow VM:665(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 14:05:04 instance-1 lfd[339230]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 14:05:04 instance-1 lfd[339230]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 14:20:04 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 14:51:10 instance-1 lfd[352582]: *User Processing* PID:352575 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 14:51:10 instance-1 lfd[352582]: *User Processing* PID:352576 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 14:59:10 instance-1 lfd[355158]: *User Processing* PID:355154 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 15:04:10 instance-1 lfd[356914]: *User Processing* PID:356910 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 15:05:10 instance-1 lfd[357269]: *User Processing* PID:357266 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 15:14:11 instance-1 lfd[360374]: *User Processing* PID:360223 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 15:20:06 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 15:35:07 instance-1 lfd[367162]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 15:35:07 instance-1 lfd[367162]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 15:39:12 instance-1 lfd[368323]: *User Processing* PID:368318 Kill:0 User:rcpacom VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 15:44:12 instance-1 lfd[369851]: *User Processing* PID:369838 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 15:44:12 instance-1 lfd[369851]: *User Processing* PID:369845 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 15:46:12 instance-1 lfd[370594]: *User Processing* PID:370577 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 15:52:12 instance-1 lfd[372744]: *User Processing* PID:372740 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 16:03:13 instance-1 lfd[376353]: *User Processing* PID:376350 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 16:13:13 instance-1 lfd[379493]: *User Processing* PID:379452 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 16:20:08 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 16:38:14 instance-1 lfd[387925]: *User Processing* PID:387921 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 16:44:46 instance-1 lfd[390114]: (smtpauth) Failed SMTP AUTH login from 165.154.235.97 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 22 16:57:15 instance-1 lfd[394097]: *User Processing* PID:394094 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 16:58:15 instance-1 lfd[394443]: *User Processing* PID:394440 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 16:59:15 instance-1 lfd[394806]: *User Processing* PID:394802 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:00:15 instance-1 lfd[395217]: *User Processing* PID:395213 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:05:10 instance-1 lfd[397225]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 17:05:11 instance-1 lfd[397225]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 17:05:15 instance-1 lfd[397276]: *User Processing* PID:397273 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:12:15 instance-1 lfd[399861]: *User Processing* PID:399842 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:13:15 instance-1 lfd[400257]: *User Processing* PID:400253 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:14:15 instance-1 lfd[400575]: *User Processing* PID:400572 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:18:16 instance-1 lfd[402201]: *User Processing* PID:402196 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:20:11 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 17:22:16 instance-1 lfd[403738]: *User Processing* PID:403733 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:23:16 instance-1 lfd[404286]: *User Processing* PID:404279 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:23:16 instance-1 lfd[404286]: *User Processing* PID:404280 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:24:16 instance-1 lfd[404688]: *User Processing* PID:404681 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:26:16 instance-1 lfd[405506]: *User Processing* PID:405500 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:28:16 instance-1 lfd[406416]: *User Processing* PID:406413 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:30:16 instance-1 lfd[407031]: *User Processing* PID:407025 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:32:16 instance-1 lfd[407598]: *User Processing* PID:407592 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:32:16 instance-1 lfd[407598]: *User Processing* PID:407590 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:34:16 instance-1 lfd[408320]: *User Processing* PID:408309 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:36:16 instance-1 lfd[408926]: *User Processing* PID:408923 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409197 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409192 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409200 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409191 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:39:16 instance-1 lfd[409906]: *User Processing* PID:409900 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:40:16 instance-1 lfd[410230]: *User Processing* PID:410224 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:40:16 instance-1 lfd[410230]: *User Processing* PID:410222 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:41:16 instance-1 lfd[410495]: *User Processing* PID:410492 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:42:16 instance-1 lfd[410759]: *User Processing* PID:410754 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:43:16 instance-1 lfd[411180]: *User Processing* PID:411177 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:44:16 instance-1 lfd[411448]: *User Processing* PID:411442 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:44:16 instance-1 lfd[411448]: *User Processing* PID:411440 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:45:16 instance-1 lfd[411780]: *User Processing* PID:411777 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:46:16 instance-1 lfd[412047]: *User Processing* PID:412044 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:49:16 instance-1 lfd[413012]: *User Processing* PID:413007 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:49:17 instance-1 lfd[413012]: *User Processing* PID:413006 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:50:17 instance-1 lfd[413361]: *User Processing* PID:413358 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:50:17 instance-1 lfd[413361]: *User Processing* PID:413357 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:51:17 instance-1 lfd[413648]: *User Processing* PID:413640 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:51:17 instance-1 lfd[413648]: *User Processing* PID:413645 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:52:17 instance-1 lfd[413950]: *User Processing* PID:413941 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:52:17 instance-1 lfd[413950]: *User Processing* PID:413946 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:53:17 instance-1 lfd[414234]: *User Processing* PID:414228 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:54:17 instance-1 lfd[414747]: *User Processing* PID:414739 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:54:17 instance-1 lfd[414747]: *User Processing* PID:414744 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:56:17 instance-1 lfd[415370]: *User Processing* PID:415367 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 17:57:17 instance-1 lfd[415669]: *User Processing* PID:415616 Kill:0 User:indigenouscivil VM:597(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 17:58:17 instance-1 lfd[415966]: *User Processing* PID:415962 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:00:17 instance-1 lfd[416764]: *User Processing* PID:416758 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:02:17 instance-1 lfd[417398]: *User Processing* PID:417383 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:05:17 instance-1 lfd[418654]: *User Processing* PID:418647 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:05:17 instance-1 lfd[418654]: *User Processing* PID:418640 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:06:17 instance-1 lfd[419063]: *User Processing* PID:419059 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:07:17 instance-1 lfd[419473]: *User Processing* PID:419470 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:09:17 instance-1 lfd[420305]: *User Processing* PID:420298 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:11:17 instance-1 lfd[421159]: *User Processing* PID:421151 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:12:17 instance-1 lfd[421500]: *User Processing* PID:421493 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:12:17 instance-1 lfd[421500]: *User Processing* PID:421489 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:15:17 instance-1 lfd[422680]: *User Processing* PID:422672 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:15:17 instance-1 lfd[422680]: *User Processing* PID:422670 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:16:18 instance-1 lfd[423065]: *Excessive Processes* User:fccsite Kill:0 Process Count:13
Mar 22 18:16:18 instance-1 lfd[423065]: *User Processing* PID:423056 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:16:19 instance-1 lfd[423065]: *User Processing* PID:423052 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:16:19 instance-1 lfd[423065]: *User Processing* PID:423057 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:18:02 instance-1 lfd[423861]: *LOAD* 5 minute load average is 7.15, threshold is 6 - email sent
Mar 22 18:18:18 instance-1 lfd[423983]: *User Processing* PID:423974 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:18:18 instance-1 lfd[423983]: *User Processing* PID:423971 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:20:13 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 18:21:18 instance-1 lfd[425201]: *User Processing* PID:425198 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:23:18 instance-1 lfd[425850]: *User Processing* PID:425846 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:24:18 instance-1 lfd[426185]: *User Processing* PID:426102 Kill:0 User:newswinslow VM:613(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 18:25:18 instance-1 lfd[426720]: *User Processing* PID:426714 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:27:18 instance-1 lfd[427342]: *User Processing* PID:427336 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:32:18 instance-1 lfd[429177]: *User Processing* PID:429170 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:33:18 instance-1 lfd[429518]: *User Processing* PID:429512 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:35:13 instance-1 lfd[430241]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 18:35:13 instance-1 lfd[430241]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 18:36:18 instance-1 lfd[430830]: *User Processing* PID:430826 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:40:18 instance-1 lfd[432338]: *User Processing* PID:432329 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:41:18 instance-1 lfd[432821]: *User Processing* PID:432818 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:43:18 instance-1 lfd[433546]: *User Processing* PID:433543 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:47:18 instance-1 lfd[435138]: *User Processing* PID:435135 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:48:18 instance-1 lfd[435523]: *User Processing* PID:435520 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:49:18 instance-1 lfd[435891]: *User Processing* PID:435866 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 18:50:18 instance-1 lfd[436412]: *User Processing* PID:436404 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:50:19 instance-1 lfd[436412]: *User Processing* PID:436403 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:50:19 instance-1 lfd[436412]: *User Processing* PID:436408 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:53:19 instance-1 lfd[437833]: *User Processing* PID:437829 Kill:0 User:comphomes VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:53:19 instance-1 lfd[437833]: *User Processing* PID:437830 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:54:19 instance-1 lfd[438357]: *User Processing* PID:438293 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 18:55:19 instance-1 lfd[438835]: *User Processing* PID:438830 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 18:55:19 instance-1 lfd[438835]: *User Processing* PID:438828 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:56:19 instance-1 lfd[439219]: *User Processing* PID:439196 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 18:56:19 instance-1 lfd[439219]: *User Processing* PID:439216 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 18:58:19 instance-1 lfd[439997]: *User Processing* PID:439993 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:05:19 instance-1 lfd[442564]: *User Processing* PID:442561 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au
Mar 22 19:06:19 instance-1 lfd[442951]: *User Processing* PID:442945 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:20:14 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 19:22:19 instance-1 lfd[448886]: *User Processing* PID:448880 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:27:19 instance-1 lfd[450754]: *User Processing* PID:450747 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:28:19 instance-1 lfd[451080]: *User Processing* PID:451077 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:28:19 instance-1 lfd[451080]: *User Processing* PID:451071 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 19:29:19 instance-1 lfd[451554]: *User Processing* PID:451550 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:30:19 instance-1 lfd[451899]: *User Processing* PID:451896 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:36:20 instance-1 lfd[453964]: *User Processing* PID:453957 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:38:20 instance-1 lfd[454596]: *User Processing* PID:454593 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:48:20 instance-1 lfd[458173]: *User Processing* PID:458169 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:50:20 instance-1 lfd[459013]: *User Processing* PID:459006 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 19:55:20 instance-1 lfd[461142]: *User Processing* PID:461138 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 20:05:16 instance-1 lfd[464707]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 20:05:16 instance-1 lfd[464707]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 20:20:16 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 20:27:21 instance-1 lfd[471709]: *User Processing* PID:471706 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 20:51:22 instance-1 lfd[479451]: *User Processing* PID:479448 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:02:22 instance-1 lfd[482861]: *User Processing* PID:482857 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:02:22 instance-1 lfd[482861]: *User Processing* PID:482837 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 21:05:22 instance-1 lfd[483745]: *User Processing* PID:483733 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:15:22 instance-1 lfd[486598]: *User Processing* PID:486594 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:18:22 instance-1 lfd[488259]: *User Processing* PID:488255 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:18:22 instance-1 lfd[488259]: *User Processing* PID:488256 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:19:22 instance-1 lfd[488727]: *User Processing* PID:488723 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:20:17 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 21:20:22 instance-1 lfd[489303]: *User Processing* PID:489299 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:20:23 instance-1 lfd[489303]: *User Processing* PID:489298 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:20:23 instance-1 lfd[489303]: *User Processing* PID:489300 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:22:23 instance-1 lfd[490815]: *User Processing* PID:490805 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:22:23 instance-1 lfd[490815]: *User Processing* PID:490811 Kill:0 User:rcpacom VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:22:23 instance-1 lfd[490815]: *User Processing* PID:490802 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:24:23 instance-1 lfd[491885]: *User Processing* PID:491881 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:25:23 instance-1 lfd[492311]: *User Processing* PID:492308 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:26:23 instance-1 lfd[492746]: *User Processing* PID:492743 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:27:23 instance-1 lfd[493339]: *User Processing* PID:493336 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:28:23 instance-1 lfd[493827]: *User Processing* PID:493818 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:28:23 instance-1 lfd[493827]: *User Processing* PID:493820 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:28:23 instance-1 lfd[493827]: *User Processing* PID:493819 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:29:23 instance-1 lfd[494260]: *User Processing* PID:494254 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:30:23 instance-1 lfd[494692]: *User Processing* PID:494686 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:31:23 instance-1 lfd[495004]: *User Processing* PID:494998 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:32:23 instance-1 lfd[495513]: *User Processing* PID:495482 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:32:23 instance-1 lfd[495513]: *User Processing* PID:495498 Kill:0 User:eyrescom VM:523(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:35:18 instance-1 lfd[496788]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 21:35:18 instance-1 lfd[496788]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 21:35:23 instance-1 lfd[496832]: *User Processing* PID:496829 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:36:23 instance-1 lfd[497155]: *User Processing* PID:497148 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 21:39:23 instance-1 lfd[498384]: *User Processing* PID:498377 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 21:41:23 instance-1 lfd[499092]: *User Processing* PID:499085 Kill:0 User:surveyms VM:518(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 21:42:23 instance-1 lfd[499429]: *User Processing* PID:499421 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 22:12:28 instance-1 lfd[510193]: *User Processing* PID:510185 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 22:20:18 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 22:20:22 instance-1 lfd[512469]: *System Integrity* has detected modified file(s): /usr/bin/centrino-decode /usr/bin/cpupower /usr/bin/gpio-event-mon /usr/bin/gpio-hammer /usr/bin/iio_event_monitor /usr/bin/iio_generic_buffer /usr/bin/intel-speed-select /usr/bin/lsgpio /usr/bin/lsiio /usr/bin/page_owner_sort /usr/bin/powernow-k8-decode /usr/bin/slabinfo /usr/bin/tmon /usr/bin/turbostat /usr/bin/x86_energy_perf_policy /usr/sbin/intel_sdsi /bin/centrino-decode /bin/cpupower /bin/gpio-event-mon /bin/gpio-hammer /bin/iio_event_monitor /bin/iio_generic_buffer /bin/intel-speed-select /bin/lsgpio /bin/lsiio /bin/page_owner_sort /bin/powernow-k8-decode /bin/slabinfo /bin/tmon /bin/turbostat /bin/x86_energy_perf_policy /sbin/intel_sdsi
Mar 22 22:22:29 instance-1 lfd[512975]: *User Processing* PID:512957 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 22:28:29 instance-1 lfd[514657]: *User Processing* PID:514652 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 22:29:29 instance-1 lfd[514947]: *User Processing* PID:514941 Kill:0 User:trafman VM:559(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 22:32:29 instance-1 lfd[516083]: *User Processing* PID:516080 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 22:35:29 instance-1 lfd[517354]: *User Processing* PID:517351 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 22:36:29 instance-1 lfd[517670]: *User Processing* PID:517667 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 22:37:29 instance-1 lfd[517974]: *User Processing* PID:517968 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 22:38:29 instance-1 lfd[518288]: *User Processing* PID:518282 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 22:39:29 instance-1 lfd[518655]: *User Processing* PID:518649 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 22:41:29 instance-1 lfd[519434]: *User Processing* PID:519373 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 22:55:30 instance-1 lfd[523734]: *User Processing* PID:523728 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 23:05:20 instance-1 lfd[526913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 22 23:05:20 instance-1 lfd[526913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 22 23:09:30 instance-1 lfd[529358]: *Excessive Processes* User:fccsite Kill:0 Process Count:11
Mar 22 23:14:30 instance-1 lfd[532036]: *User Processing* PID:532028 Kill:0 User:trafman VM:567(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 23:18:30 instance-1 lfd[533432]: *User Processing* PID:533426 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:20:20 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 22 23:20:30 instance-1 lfd[534070]: *User Processing* PID:534067 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:23:30 instance-1 lfd[534997]: *User Processing* PID:534988 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:27:21 instance-1 lfd[536455]: (smtpauth) Failed SMTP AUTH login from 81.30.107.40 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 22 23:28:30 instance-1 lfd[536829]: *User Processing* PID:536826 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:29:30 instance-1 lfd[537119]: *User Processing* PID:537113 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:32:30 instance-1 lfd[538161]: *User Processing* PID:538158 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:35:31 instance-1 lfd[539352]: *User Processing* PID:539335 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 23:36:31 instance-1 lfd[539732]: *User Processing* PID:539726 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:36:31 instance-1 lfd[539732]: *User Processing* PID:539685 Kill:0 User:trafman VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 23:37:31 instance-1 lfd[540164]: *User Processing* PID:540076 Kill:0 User:trafman VM:624(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 23:38:31 instance-1 lfd[540411]: *User Processing* PID:540362 Kill:0 User:trafman VM:613(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 22 23:48:31 instance-1 lfd[543685]: *User Processing* PID:543681 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 22 23:51:31 instance-1 lfd[544709]: *User Processing* PID:544703 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 22 23:56:31 instance-1 lfd[546838]: *User Processing* PID:546831 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 23 00:00:03 instance-1 lfd[79232]: Main Process: TERM
Mar 23 00:00:03 instance-1 lfd[79232]: daemon stopped
Mar 23 00:00:04 instance-1 lfd[548121]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel)
Mar 23 00:00:05 instance-1 lfd[548121]: LF_APACHE_ERRPORT: Set to [2]
Mar 23 00:00:05 instance-1 lfd[548121]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server)
Mar 23 00:00:05 instance-1 lfd[548121]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity}
Mar 23 00:00:05 instance-1 lfd[548121]: CSF Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: IPv6 Enabled...
Mar 23 00:00:05 instance-1 lfd[548121]: LOAD Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases
Mar 23 00:00:05 instance-1 lfd[548121]: Country Code Lookups...
Mar 23 00:00:05 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 23 00:00:05 instance-1 lfd[548121]: System Integrity Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Exploit Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Directory Watching...
Mar 23 00:00:05 instance-1 lfd[548121]: Email Queue Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: ModSecurity IP D/B Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Email Relay Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Temp to Perm Block Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: System Statistics...
Mar 23 00:00:05 instance-1 lfd[548121]: Process Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Account Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: SSH Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Webmin Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: SU Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Console Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: WHM Tracking...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /usr/local/cpanel/logs/login_log...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/exim_mainlog...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/maillog...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/messages...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/customlog...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /usr/local/cpanel/logs/access_log...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/secure...
Mar 23 00:00:05 instance-1 lfd[548121]: Watching /etc/apache2/logs/error_log...
Mar 23 00:00:05 instance-1 lfd[548149]: *User Processing* PID:548088 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:01:05 instance-1 lfd[548517]: *User Processing* PID:548127 Kill:0 User:yvegroup VM:525(MB) EXE:/home/virtfs/yvegroup/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/yvegroup/public_html/cli/joomla.php akeeba:backup:take
Mar 23 00:01:05 instance-1 lfd[548517]: *User Processing* PID:548179 Kill:0 User:indigenouscivil VM:523(MB) EXE:/home/virtfs/indigenouscivil/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/indigenouscivil/public_html/cli/joomla.php akeeba:backup:take
Mar 23 00:01:06 instance-1 lfd[548517]: *User Processing* PID:548123 Kill:0 User:newswinslow VM:527(MB) EXE:/home/virtfs/newswinslow/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/newswinslow/public_html/cli/joomla.php akeeba:backup:take
Mar 23 00:01:06 instance-1 lfd[548517]: *User Processing* PID:548118 Kill:0 User:opthirecomau VM:523(MB) EXE:/home/virtfs/opthirecomau/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/opthirecomau/public_html/cli/joomla.php akeeba:backup:take
Mar 23 00:01:06 instance-1 lfd[548517]: *User Processing* PID:548513 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:01:07 instance-1 lfd[548517]: *User Processing* PID:548134 Kill:0 User:rcpacom VM:525(MB) EXE:/home/virtfs/rcpacom/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/rcpacom/public_html/cli/joomla.php akeeba:backup:take
Mar 23 00:02:05 instance-1 lfd[548894]: *Suspicious Process* PID:548130 PPID:548128 User:trafman Uptime:120 secs EXE:/home/virtfs/trafman/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php /home/trafman/public_html/wp-content/plugins/akeebabackupwp/app/cli/backup.php
Mar 23 00:02:06 instance-1 lfd[548894]: *User Processing* PID:548890 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:02:06 instance-1 lfd[548894]: *User Processing* PID:548130 Kill:0 User:trafman VM:519(MB) EXE:/home/virtfs/trafman/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php /home/trafman/public_html/wp-content/plugins/akeebabackupwp/app/cli/backup.php
Mar 23 00:03:05 instance-1 lfd[549392]: *User Processing* PID:549380 Kill:0 User:comphomes VM:580(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:03:06 instance-1 lfd[549392]: *User Processing* PID:549388 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:03:06 instance-1 lfd[549392]: *User Processing* PID:549318 Kill:0 User:comphomes VM:649(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:04:05 instance-1 lfd[549729]: *LOAD* 5 minute load average is 6.04, threshold is 6 - email sent
Mar 23 00:04:05 instance-1 lfd[549730]: *User Processing* PID:549726 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:05:06 instance-1 lfd[550084]: *User Processing* PID:550073 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:05:46 instance-1 lfd[550083]: Directory Watching terminated after 40 seconds
Mar 23 00:05:46 instance-1 lfd[550083]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds
Mar 23 00:06:06 instance-1 lfd[550416]: *User Processing* PID:550408 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:07:06 instance-1 lfd[550759]: *User Processing* PID:550756 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:20:23 instance-1 lfd[554350]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 23 00:20:23 instance-1 lfd[554350]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 23 00:41:07 instance-1 lfd[560925]: *User Processing* PID:560919 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:42:07 instance-1 lfd[561411]: *User Processing* PID:561408 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:47:07 instance-1 lfd[563508]: *User Processing* PID:563505 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:50:07 instance-1 lfd[564777]: *User Processing* PID:564769 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:51:07 instance-1 lfd[565113]: *User Processing* PID:565109 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:58:08 instance-1 lfd[567069]: *User Processing* PID:567066 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 00:59:08 instance-1 lfd[567403]: *User Processing* PID:567400 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:00:08 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 23 01:01:08 instance-1 lfd[568471]: *User Processing* PID:568468 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:02:08 instance-1 lfd[568927]: *User Processing* PID:568923 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:06:08 instance-1 lfd[570324]: *User Processing* PID:570319 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:08:08 instance-1 lfd[571353]: *User Processing* PID:571346 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:08:08 instance-1 lfd[571353]: *User Processing* PID:571349 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:09:08 instance-1 lfd[571887]: *User Processing* PID:571883 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:10:08 instance-1 lfd[572319]: *User Processing* PID:572311 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:18:08 instance-1 lfd[575462]: *User Processing* PID:575455 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:19:08 instance-1 lfd[575742]: *User Processing* PID:575735 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:35:09 instance-1 lfd[581037]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 23 01:35:09 instance-1 lfd[581037]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 23 01:45:09 instance-1 lfd[583910]: *User Processing* PID:583898 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 01:49:09 instance-1 lfd[584987]: *User Processing* PID:583856 Kill:0 User:winslow VM:558(MB) EXE:/home/virtfs/winslow/opt/cpanel/ea-php83/root/usr/bin/php CMD:/opt/cpanel/ea-php83/root/usr/bin/php /home/winslow/public_html/cli/joomla.php akeeba:backup:take
Mar 23 02:00:09 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 23 02:17:10 instance-1 lfd[592902]: *User Processing* PID:592897 Kill:0 User:geneticson VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 02:22:10 instance-1 lfd[594450]: *User Processing* PID:594443 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 02:23:10 instance-1 lfd[594758]: *User Processing* PID:594750 Kill:0 User:bmswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 02:23:10 instance-1 lfd[594758]: *User Processing* PID:594742 Kill:0 User:bmswinslow VM:631(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 02:32:10 instance-1 lfd[597439]: *User Processing* PID:597383 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au
Mar 23 02:35:11 instance-1 lfd[598999]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 23 02:35:11 instance-1 lfd[598999]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 23 02:54:11 instance-1 lfd[604645]: *User Processing* PID:604641 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 02:57:11 instance-1 lfd[605429]: *User Processing* PID:605422 Kill:0 User:bmswinslow VM:602(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 03:00:11 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases
Mar 23 03:02:11 instance-1 lfd[606889]: *User Processing* PID:606293 Kill:0 User:winslow VM:553(MB) EXE:/home/virtfs/winslow/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php /home/winslow/public_html/myhubnews.winslow.com.au/cli/joomla.php akeeba:backup:take
Mar 23 03:05:02 instance-1 lfd[608156]: (smtpauth) Failed SMTP AUTH login from 81.30.107.119 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH]
Mar 23 03:10:11 instance-1 lfd[609810]: *User Processing* PID:609803 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 03:32:12 instance-1 lfd[616015]: *User Processing* PID:616000 Kill:0 User:bmswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi
Mar 23 03:35:12 instance-1 lfd[617051]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory
Mar 23 03:35:12 instance-1 lfd[617051]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory
Mar 23 03:36:12 instance-1 lfd[617410]: *User Processing* PID:617402 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi
Mar 23 03:38:32 instance-1 lfd[548121]: /var/log/exim_mainlog rotated. Reopening log file
Mar 23 03:38:32 instance-1 lfd[548121]: Watching /var/log/exim_mainlog...

cmd: