/var/log/
/var/log
NameSizeModeActions
apache2/-0711rm
archive/-0700rm
audit/-0700rm
chrony/-0750rm
cpanel-server-traffic/-0700rm
dcpumon/-0700rm
imunify360/-0700rm
imunify360_user_logs/-1777rm
journal/-2755rm
leapp/-0700rm
named/-0755rm
private/-0700rm
qemu-ga/-0755rm
sa/-0755rm
sw-cp-server/-0750rm
tuned/-0755rm
27140.WHOSTMGR3___FEATURE_SHOWCASE_DO__.c10fc5f6.log371310600editdlrm
agent360-install.log85260640editdlrm
agent360.log69073060640editdlrm
boot.log00600editdlrm
boot.log-20260502130840600editdlrm
boot.log-20260602135850600editdlrm
boot.log-20260617129980600editdlrm
boot.log-20260628136740600editdlrm
boot.log-20260810129980600editdlrm
boot.log-20260901129940600editdlrm
boot.log-20260903259320600editdlrm
btmp00660editdlrm
btmp-2026090100660editdlrm
chkservd.log474139500600editdlrm
comet_backup_jobs_helper.log00640editdlrm
cpanel-install.log40821100644editdlrm
cpanel-install.log.153101417916990644editdlrm
cpanel-install.log.153101565640805800644editdlrm
cron901579740600editdlrm
cron-2026081644168560600editdlrm
cron-2026082345304690600editdlrm
cron-2026083044796820600editdlrm
cron-20260906237477840600editdlrm
dmesg10509220644editdlrm
dnf.librepo.log4566890644editdlrm
dnf.librepo.log.110485310644editdlrm
dnf.librepo.log.210485410644editdlrm
dnf.librepo.log.310485090644editdlrm
dnf.librepo.log.410484740644editdlrm
dnf.log6012540644editdlrm
dnf.log.110484930644editdlrm
dnf.log.210481300644editdlrm
dnf.log.310485520644editdlrm
dnf.log.410484150644editdlrm
dnf.rpm.log6935040644editdlrm
dnf.rpm.log.110485580644editdlrm
dnf.rpm.log.210485400644editdlrm
dpkg.log00644editdlrm
elevate-cpanel.log56788790644editdlrm
exim_mainlog97734620640editdlrm
exim_mainlog-20260816.gz60070760640editdlrm
exim_mainlog-20260823.gz58612190640editdlrm
exim_mainlog-20260830.gz82475600640editdlrm
exim_mainlog-20260906.gz124604730640editdlrm
exim_paniclog3000640editdlrm
exim_paniclog-20260816.gz1540640editdlrm
exim_paniclog-20260823.gz1220640editdlrm
exim_paniclog-20260830.gz200640editdlrm
exim_paniclog-20260906.gz7360640editdlrm
exim_rejectlog24084010640editdlrm
exim_rejectlog-20260816.gz22574100640editdlrm
exim_rejectlog-20260823.gz23519570640editdlrm
exim_rejectlog-20260830.gz32312320640editdlrm
exim_rejectlog-20260906.gz52381810640editdlrm
firewalld00644editdlrm
grubby60072430600editdlrm
grubby_prune_debug4890644editdlrm
hawkey.log25200644editdlrm
hawkey.log-20260816360210644editdlrm
hawkey.log-20260823447000644editdlrm
hawkey.log-20260830363600644editdlrm
hawkey.log-20260906361200644editdlrm
imav-deploy.log734780600editdlrm
imunify-agent-proxy.log3056790644editdlrm
lastlog3071840664editdlrm
lfd.log21576780600editdlrm
lfd.log-20211017687420600editdlrm
lfd.log-20260906.gz2034250600editdlrm
lfdold.log8731810644editdlrm
maillog6282500600editdlrm
maillog-2026081652934990600editdlrm
maillog-2026082336558430600editdlrm
maillog-2026083040127350600editdlrm
maillog-2026090638262940600editdlrm
messages402181160600editdlrm
messages-20260816324754870600editdlrm
messages-20260823343900040600editdlrm
messages-20260830350520550600editdlrm
messages-20260906524564490600editdlrm
mysqld.log3947163880644editdlrm
nscd.log52140644editdlrm
quota_enable.log11880600editdlrm
secure30761530600editdlrm
secure-2026081639898470600editdlrm
secure-2026082343139860600editdlrm
secure-2026083041554670600editdlrm
secure-2026090653171410600editdlrm
spooler00600editdlrm
spooler-2026081600600editdlrm
spooler-2026082300600editdlrm
spooler-2026083000600editdlrm
spooler-2026090600600editdlrm
wp-toolkit-0editdlrm
wtmp3575040664editdlrm
xferlog.offsetftpsep10644editdlrm
yum.log255150600editdlrm
yum.log-20240923317170600editdlrm
yum.log-20241010366280600editdlrm
yum.log-20241114321980600editdlrm
yum.log-20241219351300600editdlrm
Edit: /var/log/lfdold.log (873181B)
Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/exim_mainlog rotated. Reopening log file Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/exim_mainlog... Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/messages rotated. Reopening log file Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/messages... Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/secure rotated. Reopening log file Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/secure... Mar 16 04:05:38 instance-1 lfd[1109515]: /var/log/maillog rotated. Reopening log file Mar 16 04:05:38 instance-1 lfd[1109515]: Watching /var/log/maillog... Mar 16 04:14:18 instance-1 lfd[1196011]: *User Processing* PID:1196006 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 04:35:20 instance-1 lfd[1202270]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 04:35:20 instance-1 lfd[1202270]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 04:37:19 instance-1 lfd[1202781]: *User Processing* PID:1202772 Kill:0 User:mainpoint VM:606(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 04:37:19 instance-1 lfd[1202781]: *User Processing* PID:1202777 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 04:44:20 instance-1 lfd[1204794]: *User Processing* PID:1204787 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 04:53:20 instance-1 lfd[1207502]: *User Processing* PID:1207484 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 04:53:20 instance-1 lfd[1207502]: *User Processing* PID:1207494 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 05:00:20 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 05:04:20 instance-1 lfd[1210733]: *User Processing* PID:1210724 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 05:35:22 instance-1 lfd[1220020]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 05:35:22 instance-1 lfd[1220020]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 06:00:22 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 06:23:23 instance-1 lfd[1234469]: *User Processing* PID:1234460 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:25:23 instance-1 lfd[1235077]: *User Processing* PID:1235066 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:27:23 instance-1 lfd[1235777]: *User Processing* PID:1235773 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:28:23 instance-1 lfd[1236071]: *User Processing* PID:1235969 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 06:33:23 instance-1 lfd[1237699]: *User Processing* PID:1237687 Kill:0 User:newswinslow VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 16 06:34:23 instance-1 lfd[1237956]: *User Processing* PID:1237952 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:35:24 instance-1 lfd[1238275]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 06:35:24 instance-1 lfd[1238275]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 06:38:23 instance-1 lfd[1239332]: *User Processing* PID:1239327 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:45:24 instance-1 lfd[1241604]: *User Processing* PID:1241596 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:52:24 instance-1 lfd[1244032]: *User Processing* PID:1244025 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:54:24 instance-1 lfd[1244750]: *User Processing* PID:1244741 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:54:24 instance-1 lfd[1244750]: *User Processing* PID:1244742 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 06:58:24 instance-1 lfd[1246106]: *User Processing* PID:1246102 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:00:24 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 07:00:24 instance-1 lfd[1246749]: *User Processing* PID:1246734 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:01:24 instance-1 lfd[1247064]: *User Processing* PID:1247057 Kill:0 User:foster VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:02:24 instance-1 lfd[1247424]: *User Processing* PID:1247417 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:09:24 instance-1 lfd[1249833]: *User Processing* PID:1249823 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 07:09:25 instance-1 lfd[1249833]: *User Processing* PID:1249829 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:16:25 instance-1 lfd[1252094]: *User Processing* PID:1252090 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:18:25 instance-1 lfd[1252697]: *User Processing* PID:1252693 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:24:25 instance-1 lfd[1254815]: *User Processing* PID:1254808 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:26:25 instance-1 lfd[1255429]: *User Processing* PID:1255425 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:27:25 instance-1 lfd[1255757]: *User Processing* PID:1255753 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:28:25 instance-1 lfd[1256037]: *User Processing* PID:1256033 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:35:26 instance-1 lfd[1258465]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 07:35:26 instance-1 lfd[1258465]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 07:44:26 instance-1 lfd[1261497]: *User Processing* PID:1261489 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:46:26 instance-1 lfd[1262215]: *User Processing* PID:1262207 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:50:26 instance-1 lfd[1263719]: *User Processing* PID:1263710 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:54:27 instance-1 lfd[1265212]: *User Processing* PID:1265205 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:54:27 instance-1 lfd[1265212]: *User Processing* PID:1265206 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 07:59:27 instance-1 lfd[1266930]: *User Processing* PID:1266923 Kill:0 User:foster VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:00:27 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 08:02:27 instance-1 lfd[1267941]: *User Processing* PID:1267937 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:03:27 instance-1 lfd[1268245]: *User Processing* PID:1268241 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:07:27 instance-1 lfd[1269609]: *User Processing* PID:1269598 Kill:0 User:foster VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:11:27 instance-1 lfd[1270977]: *User Processing* PID:1270967 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:11:27 instance-1 lfd[1270977]: *User Processing* PID:1270973 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:11:27 instance-1 lfd[1270977]: *User Processing* PID:1270969 Kill:0 User:geneticson VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:13:27 instance-1 lfd[1271693]: *User Processing* PID:1271671 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:16:28 instance-1 lfd[1272768]: *User Processing* PID:1272764 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:18:28 instance-1 lfd[1273352]: *User Processing* PID:1273348 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:19:28 instance-1 lfd[1273770]: *User Processing* PID:1273766 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:21:28 instance-1 lfd[1274402]: *User Processing* PID:1274395 Kill:0 User:foster VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:23:28 instance-1 lfd[1274956]: *User Processing* PID:1274952 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:28:28 instance-1 lfd[1276584]: *User Processing* PID:1276577 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:32:28 instance-1 lfd[1277926]: *User Processing* PID:1277922 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:35:29 instance-1 lfd[1279011]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 08:35:29 instance-1 lfd[1279011]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 08:43:29 instance-1 lfd[1281505]: *User Processing* PID:1281501 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:46:29 instance-1 lfd[1282567]: *User Processing* PID:1282563 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:58:29 instance-1 lfd[1286717]: *User Processing* PID:1286710 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 08:59:29 instance-1 lfd[1287023]: *User Processing* PID:1287019 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:00:29 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 09:00:29 instance-1 lfd[1287577]: *User Processing* PID:1287567 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:02:29 instance-1 lfd[1288223]: *User Processing* PID:1288219 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:05:29 instance-1 lfd[1289311]: *User Processing* PID:1289302 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:11:30 instance-1 lfd[1291208]: *User Processing* PID:1291204 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:14:30 instance-1 lfd[1292059]: *User Processing* PID:1292055 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:20:30 instance-1 lfd[1294155]: *User Processing* PID:1294144 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:24:30 instance-1 lfd[1295292]: *User Processing* PID:1295229 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 09:27:30 instance-1 lfd[1296358]: *User Processing* PID:1296354 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:31:31 instance-1 lfd[1297677]: *User Processing* PID:1297673 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:35:31 instance-1 lfd[1298849]: *User Processing* PID:1298840 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:35:31 instance-1 lfd[1298846]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 09:35:31 instance-1 lfd[1298846]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 09:45:31 instance-1 lfd[1301958]: *User Processing* PID:1301947 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:46:31 instance-1 lfd[1302362]: *User Processing* PID:1302358 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:51:31 instance-1 lfd[1304031]: *User Processing* PID:1304027 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:55:32 instance-1 lfd[1305255]: *User Processing* PID:1305246 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:55:32 instance-1 lfd[1305255]: *User Processing* PID:1305248 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:58:32 instance-1 lfd[1306236]: *User Processing* PID:1306232 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 09:58:32 instance-1 lfd[1306236]: *User Processing* PID:1306208 Kill:0 User:indigenouscivil VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 10:00:32 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 10:00:32 instance-1 lfd[1306880]: *User Processing* PID:1306867 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:03:32 instance-1 lfd[1307952]: *User Processing* PID:1307937 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 10:04:32 instance-1 lfd[1308288]: *User Processing* PID:1308284 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:08:32 instance-1 lfd[1309619]: *User Processing* PID:1309612 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:09:32 instance-1 lfd[1309955]: *User Processing* PID:1309947 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:20:33 instance-1 lfd[1313911]: *User Processing* PID:1313902 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:22:33 instance-1 lfd[1314739]: *User Processing* PID:1314735 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:25:33 instance-1 lfd[1315659]: *User Processing* PID:1315651 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:26:33 instance-1 lfd[1316114]: *User Processing* PID:1316110 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:27:33 instance-1 lfd[1316417]: *User Processing* PID:1316412 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:32:33 instance-1 lfd[1317997]: *User Processing* PID:1317970 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 10:33:33 instance-1 lfd[1318342]: *User Processing* PID:1318338 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:34:33 instance-1 lfd[1318682]: *User Processing* PID:1318678 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:35:33 instance-1 lfd[1319078]: *User Processing* PID:1319069 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:35:34 instance-1 lfd[1319076]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 10:35:34 instance-1 lfd[1319076]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 10:38:33 instance-1 lfd[1320115]: *User Processing* PID:1320110 Kill:0 User:foster VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:39:33 instance-1 lfd[1320426]: *User Processing* PID:1320422 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:44:34 instance-1 lfd[1322074]: *User Processing* PID:1322070 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 10:45:34 instance-1 lfd[1322443]: *User Processing* PID:1322435 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 11:00:34 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 11:03:34 instance-1 lfd[1328397]: *User Processing* PID:1328384 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 11:18:35 instance-1 lfd[1332661]: *User Processing* PID:1332654 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 11:35:36 instance-1 lfd[1337349]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 11:35:36 instance-1 lfd[1337349]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 11:54:36 instance-1 lfd[1342763]: *User Processing* PID:1342759 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 12:00:37 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 12:16:38 instance-1 lfd[1349492]: *User Processing* PID:1349488 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 12:31:38 instance-1 lfd[1353635]: *User Processing* PID:1353585 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 16 12:35:39 instance-1 lfd[1354849]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 12:35:39 instance-1 lfd[1354849]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 12:39:38 instance-1 lfd[1356013]: *User Processing* PID:1356002 Kill:0 User:comphomes VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 12:39:39 instance-1 lfd[1356013]: *User Processing* PID:1356001 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 12:39:39 instance-1 lfd[1356013]: *User Processing* PID:1356008 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 12:42:39 instance-1 lfd[1357080]: *User Processing* PID:1357075 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 12:54:39 instance-1 lfd[1361105]: *User Processing* PID:1361027 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 12:57:39 instance-1 lfd[1362037]: *User Processing* PID:1362027 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 13:00:39 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 13:01:39 instance-1 lfd[1363381]: *User Processing* PID:1363371 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:01:39 instance-1 lfd[1363381]: *User Processing* PID:1363376 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:04:40 instance-1 lfd[1364388]: *User Processing* PID:1364368 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 13:05:40 instance-1 lfd[1364877]: *User Processing* PID:1364868 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:06:40 instance-1 lfd[1365180]: *User Processing* PID:1365176 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:08:40 instance-1 lfd[1365828]: *User Processing* PID:1365824 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:11:40 instance-1 lfd[1366897]: *User Processing* PID:1366890 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:13:40 instance-1 lfd[1367462]: *User Processing* PID:1367457 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:15:40 instance-1 lfd[1368281]: *User Processing* PID:1368269 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:15:40 instance-1 lfd[1368281]: *User Processing* PID:1368270 Kill:0 User:comphomes VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:17:40 instance-1 lfd[1368901]: *User Processing* PID:1368894 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:18:40 instance-1 lfd[1369286]: *User Processing* PID:1369277 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:18:40 instance-1 lfd[1369286]: *User Processing* PID:1369278 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:19:40 instance-1 lfd[1369641]: *User Processing* PID:1369634 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:21:40 instance-1 lfd[1370469]: *User Processing* PID:1370464 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:22:40 instance-1 lfd[1370816]: *User Processing* PID:1370807 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:23:40 instance-1 lfd[1371162]: *User Processing* PID:1371155 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:24:40 instance-1 lfd[1371474]: *User Processing* PID:1371469 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:25:40 instance-1 lfd[1372002]: *User Processing* PID:1371995 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:25:41 instance-1 lfd[1372002]: *User Processing* PID:1371994 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:26:40 instance-1 lfd[1372339]: *User Processing* PID:1372335 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:27:41 instance-1 lfd[1372701]: *User Processing* PID:1372695 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:33:41 instance-1 lfd[1374704]: *User Processing* PID:1374699 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:33:41 instance-1 lfd[1374704]: *User Processing* PID:1374698 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:35:41 instance-1 lfd[1375474]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 13:35:41 instance-1 lfd[1375474]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 13:36:41 instance-1 lfd[1375784]: *User Processing* PID:1375777 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:39:41 instance-1 lfd[1376666]: *User Processing* PID:1376659 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 13:47:42 instance-1 lfd[1379326]: *User Processing* PID:1379320 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:00:42 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 14:02:42 instance-1 lfd[1384400]: *User Processing* PID:1384340 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 14:04:43 instance-1 lfd[1385050]: *User Processing* PID:1385045 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:07:43 instance-1 lfd[1386207]: *User Processing* PID:1386203 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:17:43 instance-1 lfd[1389781]: *User Processing* PID:1389777 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:20:43 instance-1 lfd[1390886]: *User Processing* PID:1390874 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:22:44 instance-1 lfd[1391773]: *User Processing* PID:1391766 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:23:44 instance-1 lfd[1392073]: *User Processing* PID:1392066 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:27:44 instance-1 lfd[1393485]: *User Processing* PID:1393480 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:28:44 instance-1 lfd[1393792]: *User Processing* PID:1393787 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:34:44 instance-1 lfd[1395927]: *User Processing* PID:1395917 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:35:44 instance-1 lfd[1396297]: *User Processing* PID:1396286 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:35:45 instance-1 lfd[1396295]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 14:35:45 instance-1 lfd[1396295]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 14:36:44 instance-1 lfd[1396750]: *User Processing* PID:1396746 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:38:44 instance-1 lfd[1397366]: *User Processing* PID:1397358 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:39:45 instance-1 lfd[1397700]: *User Processing* PID:1397693 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:42:45 instance-1 lfd[1398862]: *User Processing* PID:1398858 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:43:45 instance-1 lfd[1399163]: *User Processing* PID:1399157 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:46:45 instance-1 lfd[1400333]: *User Processing* PID:1400325 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:48:45 instance-1 lfd[1400974]: *User Processing* PID:1400969 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:48:57 instance-1 lfd[1401039]: (smtpauth) Failed SMTP AUTH login from 58.240.2.38 (CN/China/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 16 14:49:45 instance-1 lfd[1401309]: *User Processing* PID:1401300 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:49:45 instance-1 lfd[1401309]: *User Processing* PID:1401301 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:50:45 instance-1 lfd[1401694]: *User Processing* PID:1401682 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:52:45 instance-1 lfd[1402443]: *User Processing* PID:1402427 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:52:45 instance-1 lfd[1402443]: *User Processing* PID:1402431 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 14:52:45 instance-1 lfd[1402443]: *User Processing* PID:1402434 Kill:0 User:geneticson VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:53:45 instance-1 lfd[1402761]: *User Processing* PID:1402751 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 14:57:46 instance-1 lfd[1404243]: *User Processing* PID:1404233 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 14:59:46 instance-1 lfd[1404892]: *User Processing* PID:1404887 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 14:59:46 instance-1 lfd[1404892]: *User Processing* PID:1404886 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:00:46 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 15:00:46 instance-1 lfd[1405264]: *User Processing* PID:1405250 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:01:46 instance-1 lfd[1405718]: *User Processing* PID:1405708 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:01:46 instance-1 lfd[1405718]: *User Processing* PID:1405714 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:04:46 instance-1 lfd[1406762]: *User Processing* PID:1406754 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:05:46 instance-1 lfd[1407149]: *User Processing* PID:1407127 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:05:46 instance-1 lfd[1407149]: *User Processing* PID:1407055 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 16 15:07:46 instance-1 lfd[1407893]: *User Processing* PID:1407883 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:07:46 instance-1 lfd[1407893]: *User Processing* PID:1407889 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:09:46 instance-1 lfd[1408550]: *User Processing* PID:1408534 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:09:46 instance-1 lfd[1408550]: *User Processing* PID:1408535 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:10:46 instance-1 lfd[1408923]: *User Processing* PID:1408906 Kill:0 User:surveyms VM:578(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:10:47 instance-1 lfd[1408923]: *User Processing* PID:1408916 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:11:46 instance-1 lfd[1409382]: *User Processing* PID:1409378 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:12:46 instance-1 lfd[1409686]: *User Processing* PID:1409681 Kill:0 User:tuscomau VM:576(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:13:47 instance-1 lfd[1410012]: *User Processing* PID:1409998 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:13:47 instance-1 lfd[1410012]: *User Processing* PID:1410007 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:15:47 instance-1 lfd[1410715]: *User Processing* PID:1410704 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:17:47 instance-1 lfd[1411498]: *User Processing* PID:1411473 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 15:19:47 instance-1 lfd[1412133]: *User Processing* PID:1412119 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:22:47 instance-1 lfd[1413266]: *User Processing* PID:1413261 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:24:47 instance-1 lfd[1413910]: *User Processing* PID:1413905 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:24:47 instance-1 lfd[1413910]: *User Processing* PID:1413894 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:25:47 instance-1 lfd[1414288]: *User Processing* PID:1414275 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:26:47 instance-1 lfd[1414622]: *User Processing* PID:1414614 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:27:47 instance-1 lfd[1415111]: *User Processing* PID:1415107 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:28:47 instance-1 lfd[1415444]: *User Processing* PID:1415435 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:29:47 instance-1 lfd[1415780]: *User Processing* PID:1415775 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:30:48 instance-1 lfd[1416188]: *User Processing* PID:1416171 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:30:48 instance-1 lfd[1416188]: *User Processing* PID:1416179 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:30:48 instance-1 lfd[1416188]: *User Processing* PID:1416180 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:32:48 instance-1 lfd[1417058]: *User Processing* PID:1417054 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:32:48 instance-1 lfd[1417058]: *User Processing* PID:1417053 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:35:48 instance-1 lfd[1418143]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 15:35:48 instance-1 lfd[1418143]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 15:36:48 instance-1 lfd[1418492]: *User Processing* PID:1418483 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:36:48 instance-1 lfd[1418492]: *User Processing* PID:1418482 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:39:48 instance-1 lfd[1419658]: *User Processing* PID:1419648 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:39:48 instance-1 lfd[1419658]: *User Processing* PID:1419643 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 15:40:48 instance-1 lfd[1420046]: *User Processing* PID:1420034 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:41:48 instance-1 lfd[1420371]: *User Processing* PID:1420363 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:42:48 instance-1 lfd[1420860]: *User Processing* PID:1420850 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:42:49 instance-1 lfd[1420860]: *User Processing* PID:1420851 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:43:48 instance-1 lfd[1421217]: *User Processing* PID:1421213 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:44:48 instance-1 lfd[1421545]: *User Processing* PID:1421540 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:44:49 instance-1 lfd[1421545]: *User Processing* PID:1421539 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:45:49 instance-1 lfd[1421934]: *User Processing* PID:1421919 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:45:49 instance-1 lfd[1421934]: *User Processing* PID:1421920 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:49:49 instance-1 lfd[1423585]: *User Processing* PID:1423574 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:50:49 instance-1 lfd[1424061]: *User Processing* PID:1424046 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:53:49 instance-1 lfd[1425238]: *User Processing* PID:1425233 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:54:49 instance-1 lfd[1425670]: *User Processing* PID:1425661 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:55:49 instance-1 lfd[1426074]: *User Processing* PID:1426062 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:56:49 instance-1 lfd[1426412]: *User Processing* PID:1426408 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:57:49 instance-1 lfd[1426889]: *User Processing* PID:1426885 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 15:58:49 instance-1 lfd[1427253]: *User Processing* PID:1427248 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:00:49 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 16:06:50 instance-1 lfd[1430293]: *User Processing* PID:1430285 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:08:50 instance-1 lfd[1431082]: *User Processing* PID:1431075 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:09:50 instance-1 lfd[1431438]: *User Processing* PID:1431430 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:12:50 instance-1 lfd[1432617]: *User Processing* PID:1432612 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:12:50 instance-1 lfd[1432617]: *User Processing* PID:1432611 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:13:50 instance-1 lfd[1432969]: *User Processing* PID:1432963 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:15:51 instance-1 lfd[1433684]: *User Processing* PID:1433676 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:16:51 instance-1 lfd[1434014]: *User Processing* PID:1434008 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:19:51 instance-1 lfd[1435169]: *User Processing* PID:1435165 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:20:51 instance-1 lfd[1435549]: *User Processing* PID:1435539 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:22:51 instance-1 lfd[1436370]: *User Processing* PID:1436363 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:25:51 instance-1 lfd[1437425]: *User Processing* PID:1437414 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:25:51 instance-1 lfd[1437425]: *User Processing* PID:1437413 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:26:51 instance-1 lfd[1437813]: *User Processing* PID:1437809 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:26:51 instance-1 lfd[1437813]: *User Processing* PID:1437805 Kill:0 User:tuscomau VM:564(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:29:51 instance-1 lfd[1438947]: *User Processing* PID:1438943 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:30:51 instance-1 lfd[1439337]: *User Processing* PID:1439323 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:31:51 instance-1 lfd[1439687]: *User Processing* PID:1439683 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:31:52 instance-1 lfd[1439687]: *User Processing* PID:1439682 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:32:52 instance-1 lfd[1440190]: *User Processing* PID:1440170 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:33:52 instance-1 lfd[1440529]: *User Processing* PID:1440524 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:33:52 instance-1 lfd[1440529]: *User Processing* PID:1440523 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:34:52 instance-1 lfd[1440874]: *User Processing* PID:1440866 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:34:52 instance-1 lfd[1440874]: *User Processing* PID:1440870 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:35:52 instance-1 lfd[1441280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 16:35:52 instance-1 lfd[1441280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 16:38:52 instance-1 lfd[1442388]: *User Processing* PID:1442382 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:43:52 instance-1 lfd[1444271]: *User Processing* PID:1444264 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:44:52 instance-1 lfd[1444612]: *User Processing* PID:1444604 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:45:52 instance-1 lfd[1445057]: *User Processing* PID:1445045 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:46:52 instance-1 lfd[1445396]: *User Processing* PID:1445388 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:47:52 instance-1 lfd[1445728]: *User Processing* PID:1445724 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:48:52 instance-1 lfd[1446232]: *User Processing* PID:1446227 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:49:52 instance-1 lfd[1446550]: *User Processing* PID:1446545 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:50:53 instance-1 lfd[1446945]: *User Processing* PID:1446936 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:56:53 instance-1 lfd[1449352]: *User Processing* PID:1449343 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:56:53 instance-1 lfd[1449352]: *User Processing* PID:1449344 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:57:53 instance-1 lfd[1449700]: *User Processing* PID:1449692 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 16:58:53 instance-1 lfd[1450185]: *User Processing* PID:1450177 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:00:53 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 17:00:53 instance-1 lfd[1450941]: *User Processing* PID:1450932 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:02:53 instance-1 lfd[1451658]: *User Processing* PID:1451650 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:08:54 instance-1 lfd[1453904]: *User Processing* PID:1453900 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:10:54 instance-1 lfd[1454628]: *User Processing* PID:1454621 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:10:54 instance-1 lfd[1454628]: *User Processing* PID:1454615 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:11:54 instance-1 lfd[1454953]: *User Processing* PID:1454942 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:12:54 instance-1 lfd[1455271]: *User Processing* PID:1455261 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:12:54 instance-1 lfd[1455271]: *User Processing* PID:1455263 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:16:54 instance-1 lfd[1456695]: *User Processing* PID:1456687 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:19:55 instance-1 lfd[1457761]: *User Processing* PID:1457745 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:19:55 instance-1 lfd[1457761]: *User Processing* PID:1457749 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:21:55 instance-1 lfd[1458444]: *User Processing* PID:1458435 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:21:55 instance-1 lfd[1458444]: *User Processing* PID:1458430 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:21:55 instance-1 lfd[1458444]: *User Processing* PID:1458436 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:22:55 instance-1 lfd[1458746]: *User Processing* PID:1458741 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:23:55 instance-1 lfd[1459173]: *User Processing* PID:1459166 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:23:55 instance-1 lfd[1459173]: *User Processing* PID:1459168 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:24:55 instance-1 lfd[1459504]: *User Processing* PID:1459500 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:25:55 instance-1 lfd[1459864]: *User Processing* PID:1459855 Kill:0 User:tuscomau VM:567(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:25:55 instance-1 lfd[1459864]: *User Processing* PID:1459849 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:28:55 instance-1 lfd[1460911]: *User Processing* PID:1460902 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:29:55 instance-1 lfd[1461204]: *User Processing* PID:1461197 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:30:55 instance-1 lfd[1461555]: *User Processing* PID:1461544 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:31:55 instance-1 lfd[1461852]: *User Processing* PID:1461842 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:31:55 instance-1 lfd[1461852]: *User Processing* PID:1461847 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:35:55 instance-1 lfd[1463439]: *User Processing* PID:1463427 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:35:56 instance-1 lfd[1463437]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 17:35:56 instance-1 lfd[1463437]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 17:38:56 instance-1 lfd[1464451]: *User Processing* PID:1464446 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:38:56 instance-1 lfd[1464451]: *User Processing* PID:1464441 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:40:56 instance-1 lfd[1465341]: *User Processing* PID:1465326 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:41:57 instance-1 lfd[1465832]: *Excessive Processes* User:winslow Kill:0 Process Count:13 Mar 16 17:41:58 instance-1 lfd[1465832]: *User Processing* PID:1465805 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:42:00 instance-1 lfd[1465832]: *User Processing* PID:1465793 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:42:01 instance-1 lfd[1465832]: *User Processing* PID:1465803 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:42:02 instance-1 lfd[1465832]: *User Processing* PID:1465817 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:42:56 instance-1 lfd[1466396]: *LOAD* 5 minute load average is 8.97, threshold is 6 - email sent Mar 16 17:42:57 instance-1 lfd[1466397]: *User Processing* PID:1466374 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:42:59 instance-1 lfd[1466397]: *User Processing* PID:1466362 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:43:00 instance-1 lfd[1466397]: *User Processing* PID:1466363 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:43:01 instance-1 lfd[1466397]: *User Processing* PID:1465887 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 17:43:02 instance-1 lfd[1466397]: *User Processing* PID:1466158 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:43:03 instance-1 lfd[1466397]: *User Processing* PID:1466368 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:43:57 instance-1 lfd[1466945]: *User Processing* PID:1466871 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:43:58 instance-1 lfd[1466945]: *User Processing* PID:1466910 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:43:59 instance-1 lfd[1466945]: *User Processing* PID:1466929 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:00 instance-1 lfd[1466945]: *User Processing* PID:1466918 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:57 instance-1 lfd[1467569]: *User Processing* PID:1467560 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:57 instance-1 lfd[1467569]: *User Processing* PID:1467546 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:58 instance-1 lfd[1467569]: *User Processing* PID:1467547 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:58 instance-1 lfd[1467569]: *User Processing* PID:1467552 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:58 instance-1 lfd[1467569]: *User Processing* PID:1467537 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:59 instance-1 lfd[1467569]: *User Processing* PID:1467539 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:44:59 instance-1 lfd[1467569]: *User Processing* PID:1467543 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:45:57 instance-1 lfd[1468146]: *User Processing* PID:1468136 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:46:57 instance-1 lfd[1468619]: *User Processing* PID:1468599 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:46:58 instance-1 lfd[1468619]: *User Processing* PID:1468607 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:46:58 instance-1 lfd[1468619]: *User Processing* PID:1468605 Kill:0 User:eyrescom VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:46:59 instance-1 lfd[1468619]: *User Processing* PID:1468608 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:47:58 instance-1 lfd[1469111]: *User Processing* PID:1469101 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:48:58 instance-1 lfd[1469582]: *User Processing* PID:1469571 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:48:58 instance-1 lfd[1469582]: *User Processing* PID:1469574 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:48:58 instance-1 lfd[1469582]: *User Processing* PID:1469577 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:49:58 instance-1 lfd[1470157]: *User Processing* PID:1470153 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:49:58 instance-1 lfd[1470157]: *User Processing* PID:1470142 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:50:58 instance-1 lfd[1470649]: *User Processing* PID:1470640 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:50:58 instance-1 lfd[1470649]: *User Processing* PID:1470639 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:50:59 instance-1 lfd[1470649]: *User Processing* PID:1470631 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:52:58 instance-1 lfd[1471383]: *User Processing* PID:1471377 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:53:58 instance-1 lfd[1471746]: *User Processing* PID:1471738 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:53:58 instance-1 lfd[1471746]: *User Processing* PID:1471740 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:55:58 instance-1 lfd[1472730]: *User Processing* PID:1472720 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:55:58 instance-1 lfd[1472730]: *User Processing* PID:1472721 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 17:58:58 instance-1 lfd[1473844]: *User Processing* PID:1473839 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:00:53 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 18:00:59 instance-1 lfd[1474717]: *User Processing* PID:1474704 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 18:00:59 instance-1 lfd[1474717]: *User Processing* PID:1474710 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:02:59 instance-1 lfd[1475447]: *User Processing* PID:1475442 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:04:59 instance-1 lfd[1476338]: *User Processing* PID:1476334 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:06:59 instance-1 lfd[1477137]: *User Processing* PID:1477130 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:08:59 instance-1 lfd[1477831]: *User Processing* PID:1477824 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:09:59 instance-1 lfd[1478328]: *User Processing* PID:1478324 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:09:59 instance-1 lfd[1478328]: *User Processing* PID:1478323 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:10:59 instance-1 lfd[1478723]: *User Processing* PID:1478712 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:10:59 instance-1 lfd[1478723]: *User Processing* PID:1478711 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:10:59 instance-1 lfd[1478723]: *User Processing* PID:1478710 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 18:11:59 instance-1 lfd[1479071]: *User Processing* PID:1479063 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:13:59 instance-1 lfd[1479749]: *User Processing* PID:1479742 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:16:00 instance-1 lfd[1480675]: *User Processing* PID:1480667 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:16:00 instance-1 lfd[1480675]: *User Processing* PID:1480666 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:16:00 instance-1 lfd[1480675]: *User Processing* PID:1480665 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:16:59 instance-1 lfd[1481045]: *User Processing* PID:1481041 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:18:00 instance-1 lfd[1481396]: *User Processing* PID:1481393 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:18:00 instance-1 lfd[1481396]: *User Processing* PID:1481392 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:19:00 instance-1 lfd[1481770]: *User Processing* PID:1481761 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:20:00 instance-1 lfd[1482234]: *User Processing* PID:1482229 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:20:00 instance-1 lfd[1482234]: *User Processing* PID:1482225 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:22:00 instance-1 lfd[1482962]: *User Processing* PID:1482955 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:23:00 instance-1 lfd[1483310]: *User Processing* PID:1483301 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:23:00 instance-1 lfd[1483310]: *User Processing* PID:1483304 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:24:00 instance-1 lfd[1483660]: *User Processing* PID:1483655 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:25:00 instance-1 lfd[1484114]: *User Processing* PID:1484111 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:25:00 instance-1 lfd[1484114]: *User Processing* PID:1484076 Kill:0 User:geneticson VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:26:00 instance-1 lfd[1484505]: *User Processing* PID:1484495 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:27:00 instance-1 lfd[1484852]: *User Processing* PID:1484845 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:28:00 instance-1 lfd[1485198]: *User Processing* PID:1485189 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:28:00 instance-1 lfd[1485198]: *User Processing* PID:1485192 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:29:00 instance-1 lfd[1485550]: *User Processing* PID:1485544 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:31:00 instance-1 lfd[1486462]: *User Processing* PID:1486455 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:34:00 instance-1 lfd[1487602]: *User Processing* PID:1487598 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:35:01 instance-1 lfd[1488070]: *User Processing* PID:1488067 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:36:01 instance-1 lfd[1488482]: *User Processing* PID:1488438 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 16 18:36:01 instance-1 lfd[1488482]: *User Processing* PID:1488470 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:36:01 instance-1 lfd[1488481]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 18:36:01 instance-1 lfd[1488481]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 18:38:01 instance-1 lfd[1489364]: *User Processing* PID:1489286 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:38:03 instance-1 lfd[1489364]: *User Processing* PID:1489173 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:38:03 instance-1 lfd[1489364]: *User Processing* PID:1489169 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:38:03 instance-1 lfd[1489364]: *User Processing* PID:1489193 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:39:01 instance-1 lfd[1489755]: *User Processing* PID:1489739 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:43:01 instance-1 lfd[1491164]: *User Processing* PID:1491149 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:44:01 instance-1 lfd[1491474]: *User Processing* PID:1491469 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:45:01 instance-1 lfd[1491949]: *User Processing* PID:1491908 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 18:45:02 instance-1 lfd[1491949]: *User Processing* PID:1491937 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:46:02 instance-1 lfd[1492317]: *User Processing* PID:1492298 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 18:48:02 instance-1 lfd[1492949]: *User Processing* PID:1492928 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:50:02 instance-1 lfd[1493792]: *User Processing* PID:1493773 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:51:02 instance-1 lfd[1494190]: *User Processing* PID:1494180 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 18:59:02 instance-1 lfd[1497008]: *User Processing* PID:1497004 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:00:57 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 19:02:02 instance-1 lfd[1498230]: *User Processing* PID:1498191 Kill:0 User:opthirecomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:02:03 instance-1 lfd[1498230]: *User Processing* PID:1498214 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:04:03 instance-1 lfd[1498918]: *User Processing* PID:1498913 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:06:03 instance-1 lfd[1499751]: *User Processing* PID:1499705 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 19:11:03 instance-1 lfd[1501660]: *User Processing* PID:1501648 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:12:03 instance-1 lfd[1502115]: *User Processing* PID:1502110 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:15:03 instance-1 lfd[1503519]: *User Processing* PID:1503515 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:16:03 instance-1 lfd[1504054]: *User Processing* PID:1504045 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:16:04 instance-1 lfd[1504054]: *User Processing* PID:1504046 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:17:03 instance-1 lfd[1504415]: *User Processing* PID:1504411 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:18:04 instance-1 lfd[1504847]: *User Processing* PID:1504841 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:19:04 instance-1 lfd[1505223]: *User Processing* PID:1505218 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:20:04 instance-1 lfd[1505622]: *User Processing* PID:1505618 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:21:04 instance-1 lfd[1506130]: *User Processing* PID:1506109 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:21:05 instance-1 lfd[1506130]: *User Processing* PID:1506110 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:21:05 instance-1 lfd[1506130]: *User Processing* PID:1506119 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:22:04 instance-1 lfd[1506508]: *User Processing* PID:1506501 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:23:04 instance-1 lfd[1506855]: *User Processing* PID:1506847 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:23:04 instance-1 lfd[1506855]: *User Processing* PID:1506848 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:24:04 instance-1 lfd[1507244]: *User Processing* PID:1507235 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:25:04 instance-1 lfd[1507686]: *User Processing* PID:1507678 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:26:04 instance-1 lfd[1508217]: *User Processing* PID:1508205 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:27:04 instance-1 lfd[1508602]: *User Processing* PID:1508593 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 19:27:04 instance-1 lfd[1508602]: *User Processing* PID:1508594 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:28:04 instance-1 lfd[1509002]: *User Processing* PID:1508994 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:29:04 instance-1 lfd[1509402]: *User Processing* PID:1509389 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:30:05 instance-1 lfd[1509848]: *User Processing* PID:1509842 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:30:05 instance-1 lfd[1509848]: *User Processing* PID:1509843 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510372 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510360 Kill:0 User:geneticson VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510377 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:31:05 instance-1 lfd[1510385]: *User Processing* PID:1510376 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:33:05 instance-1 lfd[1511226]: *User Processing* PID:1511221 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:35:05 instance-1 lfd[1512008]: *User Processing* PID:1512000 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:36:05 instance-1 lfd[1512508]: *User Processing* PID:1512496 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:36:05 instance-1 lfd[1512508]: *User Processing* PID:1512497 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:36:05 instance-1 lfd[1512506]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 19:36:05 instance-1 lfd[1512506]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 19:37:05 instance-1 lfd[1512859]: *User Processing* PID:1512852 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:38:05 instance-1 lfd[1513205]: *User Processing* PID:1513197 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:40:05 instance-1 lfd[1513950]: *User Processing* PID:1513946 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:41:05 instance-1 lfd[1514454]: *User Processing* PID:1514444 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:42:05 instance-1 lfd[1514814]: *User Processing* PID:1514803 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 19:43:05 instance-1 lfd[1515167]: *User Processing* PID:1515159 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:43:05 instance-1 lfd[1515167]: *User Processing* PID:1515157 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:45:05 instance-1 lfd[1515907]: *User Processing* PID:1515903 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:46:06 instance-1 lfd[1516405]: *User Processing* PID:1516394 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:47:06 instance-1 lfd[1516752]: *User Processing* PID:1516744 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:48:06 instance-1 lfd[1517133]: *User Processing* PID:1517125 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:48:06 instance-1 lfd[1517133]: *User Processing* PID:1517124 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:48:06 instance-1 lfd[1517133]: *User Processing* PID:1517123 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:50:06 instance-1 lfd[1517952]: *User Processing* PID:1517946 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:51:06 instance-1 lfd[1518530]: *User Processing* PID:1518518 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:51:06 instance-1 lfd[1518530]: *User Processing* PID:1518517 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:52:06 instance-1 lfd[1518935]: *User Processing* PID:1518927 Kill:0 User:foster VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:52:06 instance-1 lfd[1518935]: *User Processing* PID:1518924 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:53:06 instance-1 lfd[1519313]: *User Processing* PID:1519305 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:54:06 instance-1 lfd[1519834]: *User Processing* PID:1519828 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:54:07 instance-1 lfd[1519834]: *User Processing* PID:1519571 Kill:0 User:opthirecomau VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:54:07 instance-1 lfd[1519834]: *User Processing* PID:1519822 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:54:07 instance-1 lfd[1519834]: *User Processing* PID:1519830 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:55:06 instance-1 lfd[1520322]: *User Processing* PID:1520313 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:56:06 instance-1 lfd[1520771]: *User Processing* PID:1520628 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 19:57:06 instance-1 lfd[1521321]: *User Processing* PID:1521309 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:57:07 instance-1 lfd[1521321]: *User Processing* PID:1521081 Kill:0 User:nexpavecau VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 16 19:57:07 instance-1 lfd[1521321]: *User Processing* PID:1521310 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:58:07 instance-1 lfd[1521720]: *User Processing* PID:1521711 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 19:59:07 instance-1 lfd[1522103]: *User Processing* PID:1522093 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:00:07 instance-1 lfd[1522528]: *User Processing* PID:1522520 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:00:57 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 20:01:07 instance-1 lfd[1522937]: *User Processing* PID:1522926 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:02:22 instance-1 lfd[1523671]: *WHM/cPanel root access* from 210.56.88.76 Mar 16 20:03:07 instance-1 lfd[1524199]: *User Processing* PID:1524193 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:04:07 instance-1 lfd[1524719]: *User Processing* PID:1524706 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:04:07 instance-1 lfd[1524719]: *User Processing* PID:1524701 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:04:08 instance-1 lfd[1524719]: *User Processing* PID:1524705 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:05:07 instance-1 lfd[1525281]: *User Processing* PID:1525258 Kill:0 User:comphomes VM:634(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:05:08 instance-1 lfd[1525281]: *User Processing* PID:1525264 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:05:08 instance-1 lfd[1525281]: *User Processing* PID:1525267 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:05:08 instance-1 lfd[1525281]: *User Processing* PID:1525266 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:06:07 instance-1 lfd[1525777]: *User Processing* PID:1525762 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:07:08 instance-1 lfd[1526373]: *User Processing* PID:1526364 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:07:08 instance-1 lfd[1526373]: *User Processing* PID:1526363 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:08:08 instance-1 lfd[1526848]: *User Processing* PID:1526838 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:09:08 instance-1 lfd[1527317]: *User Processing* PID:1527304 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:10:08 instance-1 lfd[1527856]: *User Processing* PID:1527843 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:10:08 instance-1 lfd[1527856]: *User Processing* PID:1527842 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:12:08 instance-1 lfd[1528767]: *User Processing* PID:1528758 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:13:08 instance-1 lfd[1529186]: *User Processing* PID:1528943 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:13:08 instance-1 lfd[1529186]: *User Processing* PID:1529178 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:14:09 instance-1 lfd[1529570]: *User Processing* PID:1529561 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:16:09 instance-1 lfd[1530430]: *User Processing* PID:1530418 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:17:09 instance-1 lfd[1530908]: *User Processing* PID:1530904 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:17:09 instance-1 lfd[1530908]: *User Processing* PID:1530903 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:18:09 instance-1 lfd[1531290]: *User Processing* PID:1531283 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:19:09 instance-1 lfd[1531663]: *User Processing* PID:1531658 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:20:09 instance-1 lfd[1532049]: *User Processing* PID:1532044 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:20:09 instance-1 lfd[1532049]: *User Processing* PID:1532043 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:21:09 instance-1 lfd[1532415]: *User Processing* PID:1532406 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:22:09 instance-1 lfd[1532901]: *User Processing* PID:1532893 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:22:09 instance-1 lfd[1532901]: *User Processing* PID:1532892 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:23:09 instance-1 lfd[1533269]: *User Processing* PID:1533261 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:27:09 instance-1 lfd[1534902]: *User Processing* PID:1534898 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:27:09 instance-1 lfd[1534902]: *User Processing* PID:1534897 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:29:09 instance-1 lfd[1535622]: *User Processing* PID:1535614 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:30:10 instance-1 lfd[1536040]: *User Processing* PID:1536035 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:30:10 instance-1 lfd[1536040]: *User Processing* PID:1536036 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:31:10 instance-1 lfd[1536421]: *User Processing* PID:1536413 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:32:10 instance-1 lfd[1536943]: *User Processing* PID:1536937 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:33:10 instance-1 lfd[1537323]: *User Processing* PID:1537314 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:34:10 instance-1 lfd[1537695]: *User Processing* PID:1537688 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:36:10 instance-1 lfd[1538542]: *User Processing* PID:1538476 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 20:36:11 instance-1 lfd[1538542]: *User Processing* PID:1538529 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:36:20 instance-1 lfd[1538540]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 20:36:21 instance-1 lfd[1538540]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 20:37:10 instance-1 lfd[1539038]: *User Processing* PID:1539034 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:40:10 instance-1 lfd[1540114]: *User Processing* PID:1540107 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:41:10 instance-1 lfd[1540478]: *User Processing* PID:1540470 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:42:10 instance-1 lfd[1540974]: *User Processing* PID:1540970 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:43:11 instance-1 lfd[1541350]: *User Processing* PID:1541343 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:45:11 instance-1 lfd[1542084]: *User Processing* PID:1542073 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:45:11 instance-1 lfd[1542084]: *User Processing* PID:1542079 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:46:11 instance-1 lfd[1542456]: *User Processing* PID:1542447 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:46:11 instance-1 lfd[1542456]: *User Processing* PID:1542448 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:47:11 instance-1 lfd[1542991]: *User Processing* PID:1542987 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:48:11 instance-1 lfd[1543351]: *User Processing* PID:1543344 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:49:11 instance-1 lfd[1543701]: *User Processing* PID:1543693 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:49:11 instance-1 lfd[1543701]: *User Processing* PID:1543692 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:50:11 instance-1 lfd[1544098]: *User Processing* PID:1544093 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:50:11 instance-1 lfd[1544098]: *User Processing* PID:1544089 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:51:11 instance-1 lfd[1544470]: *User Processing* PID:1544457 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:54:11 instance-1 lfd[1545789]: *User Processing* PID:1545770 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:56:11 instance-1 lfd[1546555]: *User Processing* PID:1546547 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 20:58:12 instance-1 lfd[1547366]: *User Processing* PID:1547361 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:00:57 instance-1 lfd[1109515]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 21:01:12 instance-1 lfd[1548332]: *User Processing* PID:1548321 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:02:12 instance-1 lfd[1548660]: *User Processing* PID:1548653 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:09:12 instance-1 lfd[1551201]: *User Processing* PID:1551178 Kill:0 User:comphomes VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:11:12 instance-1 lfd[1551871]: *User Processing* PID:1551860 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:24:13 instance-1 lfd[1556109]: *User Processing* PID:1556096 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:28:13 instance-1 lfd[1557193]: *User Processing* PID:1557189 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:29:13 instance-1 lfd[1557621]: *User Processing* PID:1557617 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:30:13 instance-1 lfd[1557974]: *User Processing* PID:1557967 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:31:13 instance-1 lfd[1558299]: *User Processing* PID:1558286 Kill:0 User:comphomes VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:34:13 instance-1 lfd[1559374]: *User Processing* PID:1559366 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:35:13 instance-1 lfd[1559718]: *User Processing* PID:1559708 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:43:14 instance-1 lfd[1562139]: *User Processing* PID:1562134 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:46:14 instance-1 lfd[1563212]: *User Processing* PID:1563201 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:49:14 instance-1 lfd[1564078]: *User Processing* PID:1564067 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:51:14 instance-1 lfd[1564915]: *User Processing* PID:1564902 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:51:15 instance-1 lfd[1564912]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 21:51:15 instance-1 lfd[1564912]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 21:52:14 instance-1 lfd[1565220]: *User Processing* PID:1565216 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:54:14 instance-1 lfd[1565880]: *User Processing* PID:1565876 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:55:14 instance-1 lfd[1566324]: *User Processing* PID:1566315 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:57:15 instance-1 lfd[1566926]: *User Processing* PID:1566921 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:58:15 instance-1 lfd[1567257]: *User Processing* PID:1567241 Kill:0 User:trafman VM:570(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 21:58:21 instance-1 lfd[1567292]: (smtpauth) Failed SMTP AUTH login from 185.192.71.30 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 16 21:59:15 instance-1 lfd[1567609]: *User Processing* PID:1567605 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 21:59:52 instance-1 lfd[1109515]: Main Process: TERM Mar 16 21:59:52 instance-1 lfd[1109515]: daemon stopped Mar 16 21:59:53 instance-1 lfd[1568022]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 16 21:59:53 instance-1 lfd[1568022]: LF_APACHE_ERRPORT: Set to [2] Mar 16 21:59:53 instance-1 lfd[1568022]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 16 21:59:53 instance-1 lfd[1568022]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 16 21:59:53 instance-1 lfd[1568022]: CSF Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: IPv6 Enabled... Mar 16 21:59:53 instance-1 lfd[1568022]: LOAD Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 16 21:59:53 instance-1 lfd[1568022]: Country Code Lookups... Mar 16 21:59:53 instance-1 lfd[1568022]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 21:59:53 instance-1 lfd[1568022]: System Integrity Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Exploit Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Directory Watching... Mar 16 21:59:53 instance-1 lfd[1568022]: Email Queue Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: ModSecurity IP D/B Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Email Relay Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Temp to Perm Block Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: System Statistics... Mar 16 21:59:53 instance-1 lfd[1568022]: Process Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Account Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: SSH Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Webmin Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: SU Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Console Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: WHM Tracking... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/secure... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /usr/local/cpanel/logs/login_log... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/maillog... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/exim_mainlog... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/messages... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /etc/apache2/logs/error_log... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /var/log/customlog... Mar 16 21:59:53 instance-1 lfd[1568022]: Watching /usr/local/cpanel/logs/access_log... Mar 16 22:03:53 instance-1 lfd[1569523]: *User Processing* PID:1569515 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 22:04:58 instance-1 lfd[1570256]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 16 22:04:58 instance-1 lfd[1570256]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 16 23:01:32 instance-1 lfd[1568022]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 16 23:01:32 instance-1 lfd[1571357]: *LOAD* 5 minute load average is 311.80, threshold is 6 - email sent Mar 16 23:01:34 instance-1 lfd[1571358]: *Excessive Processes* User:tuscomau Kill:0 Process Count:217 Mar 16 23:01:49 instance-1 lfd[1571358]: *User Processing* PID:1570859 Kill:0 User:tuscomau Time:3358 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:02:05 instance-1 lfd[1571358]: *User Processing* PID:1570793 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:17:12 instance-1 lfd[1571352]: System Integrity check terminated after 370 seconds Mar 16 23:17:21 instance-1 lfd[1571729]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped Mar 16 23:17:23 instance-1 lfd[1571352]: LF_INTEGRITY taking 370 seconds, temporarily throttled to run every 5400 seconds Mar 16 23:17:29 instance-1 lfd[1571356]: Directory Watching terminated after 40 seconds Mar 16 23:17:29 instance-1 lfd[1571356]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds Mar 16 23:17:38 instance-1 lfd[1571358]: *User Processing* PID:1570760 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:17:47 instance-1 lfd[1571358]: *User Processing* PID:1570835 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:17:47 instance-1 lfd[1572074]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped Mar 16 23:17:50 instance-1 lfd[1571358]: *User Processing* PID:1570798 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:17:57 instance-1 lfd[1571358]: *User Processing* PID:1570836 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:03 instance-1 lfd[1571358]: *User Processing* PID:1570849 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:08 instance-1 lfd[1571358]: *User Processing* PID:1570771 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:12 instance-1 lfd[1571358]: *User Processing* PID:1570674 Kill:0 User:winslow Time:3368 EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 16 23:18:18 instance-1 lfd[1571358]: *User Processing* PID:1570804 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:20 instance-1 lfd[1571358]: *User Processing* PID:1570837 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:21 instance-1 lfd[1571358]: *User Processing* PID:1570792 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:24 instance-1 lfd[1571358]: *User Processing* PID:1570785 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:26 instance-1 lfd[1571358]: *User Processing* PID:1570850 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:29 instance-1 lfd[1571358]: *User Processing* PID:1570817 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:31 instance-1 lfd[1571358]: *User Processing* PID:1570816 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:32 instance-1 lfd[1572678]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped Mar 16 23:18:33 instance-1 lfd[1571358]: *User Processing* PID:1570773 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:35 instance-1 lfd[1571358]: *User Processing* PID:1570840 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:37 instance-1 lfd[1571358]: *User Processing* PID:1570772 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:40 instance-1 lfd[1571358]: *User Processing* PID:1570824 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:42 instance-1 lfd[1571358]: *User Processing* PID:1570791 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:43 instance-1 lfd[1571358]: *User Processing* PID:1570782 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:47 instance-1 lfd[1571358]: *User Processing* PID:1570812 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:50 instance-1 lfd[1571358]: *User Processing* PID:1570829 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:54 instance-1 lfd[1571358]: *User Processing* PID:1570788 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:55 instance-1 lfd[1571358]: *User Processing* PID:1570800 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:57 instance-1 lfd[1571358]: *User Processing* PID:1570831 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:18:59 instance-1 lfd[1571358]: *User Processing* PID:1570764 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:01 instance-1 lfd[1571358]: *User Processing* PID:1570783 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:03 instance-1 lfd[1571358]: *User Processing* PID:1570781 Kill:0 User:tuscomau Time:3362 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:04 instance-1 lfd[1571358]: *User Processing* PID:1570844 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:06 instance-1 lfd[1571358]: *User Processing* PID:1570811 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:07 instance-1 lfd[1571358]: *User Processing* PID:1570833 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:09 instance-1 lfd[1571358]: *User Processing* PID:1570820 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:11 instance-1 lfd[1571358]: *User Processing* PID:1570797 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:12 instance-1 lfd[1571358]: *User Processing* PID:1570832 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:15 instance-1 lfd[1571358]: *User Processing* PID:1570838 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:15 instance-1 lfd[1571358]: *User Processing* PID:1570795 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:16 instance-1 lfd[1571358]: *User Processing* PID:1570796 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:18 instance-1 lfd[1571358]: *User Processing* PID:1570841 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:20 instance-1 lfd[1571358]: *User Processing* PID:1570814 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:22 instance-1 lfd[1571358]: *User Processing* PID:1570762 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:23 instance-1 lfd[1571358]: *User Processing* PID:1570827 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:24 instance-1 lfd[1571358]: *User Processing* PID:1570851 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:26 instance-1 lfd[1571358]: *User Processing* PID:1570826 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:27 instance-1 lfd[1571358]: *User Processing* PID:1570825 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:27 instance-1 lfd[1572073]: Directory Watching terminated after 100 seconds Mar 16 23:19:27 instance-1 lfd[1572073]: LF_DIRWATCH taking 100 seconds, temporarily throttled to run every 2700 seconds Mar 16 23:19:28 instance-1 lfd[1571358]: *User Processing* PID:1570485 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:28 instance-1 lfd[1571358]: *User Processing* PID:1570485 Kill:0 User:tuscomau Time:3379 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:30 instance-1 lfd[1571358]: *User Processing* PID:1570770 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:31 instance-1 lfd[1571358]: *User Processing* PID:1570842 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:32 instance-1 lfd[1573027]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped Mar 16 23:19:32 instance-1 lfd[1571358]: *User Processing* PID:1570848 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:33 instance-1 lfd[1571358]: *User Processing* PID:1570799 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:34 instance-1 lfd[1571358]: *User Processing* PID:1570853 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:34 instance-1 lfd[1571358]: *User Processing* PID:1570834 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:35 instance-1 lfd[1571358]: *User Processing* PID:1570852 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:35 instance-1 lfd[1571358]: *User Processing* PID:1570807 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:36 instance-1 lfd[1571358]: *User Processing* PID:1570761 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:37 instance-1 lfd[1571358]: *User Processing* PID:1570843 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:38 instance-1 lfd[1571358]: *User Processing* PID:1570806 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:39 instance-1 lfd[1571358]: *User Processing* PID:1570845 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:40 instance-1 lfd[1571358]: *User Processing* PID:1570846 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:41 instance-1 lfd[1571358]: *User Processing* PID:1570803 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:42 instance-1 lfd[1571358]: *User Processing* PID:1570839 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:43 instance-1 lfd[1571358]: *User Processing* PID:1570847 Kill:0 User:tuscomau Time:3359 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:44 instance-1 lfd[1571358]: *User Processing* PID:1570802 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:45 instance-1 lfd[1571358]: *User Processing* PID:1570821 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:45 instance-1 lfd[1571358]: *User Processing* PID:1570794 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:46 instance-1 lfd[1571358]: *User Processing* PID:1570810 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:46 instance-1 lfd[1571358]: *User Processing* PID:1570830 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:47 instance-1 lfd[1571358]: *User Processing* PID:1570823 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:47 instance-1 lfd[1571358]: *User Processing* PID:1570765 Kill:0 User:tuscomau Time:3363 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:48 instance-1 lfd[1571358]: *User Processing* PID:1570828 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:48 instance-1 lfd[1571358]: *User Processing* PID:1570822 Kill:0 User:tuscomau Time:3360 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:48 instance-1 lfd[1571358]: *User Processing* PID:1570801 Kill:0 User:tuscomau Time:3361 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:19:49 instance-1 lfd[1571358]: *User Processing* PID:1570639 Kill:0 User:winslow Time:3370 EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 16 23:23:36 instance-1 lfd[1574807]: *User Processing* PID:1574797 Kill:0 User:mainpoint VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:26:36 instance-1 lfd[1576486]: *Excessive Processes* User:mainpoint Kill:0 Process Count:11 Mar 16 23:26:36 instance-1 lfd[1576486]: *User Processing* PID:1576479 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:27:36 instance-1 lfd[1577057]: *User Processing* PID:1577053 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:29:36 instance-1 lfd[1578557]: *User Processing* PID:1578554 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:30:36 instance-1 lfd[1579045]: *Excessive Processes* User:rgv Kill:0 Process Count:12 Mar 16 23:30:36 instance-1 lfd[1579045]: *User Processing* PID:1579042 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:30:36 instance-1 lfd[1579045]: *User Processing* PID:1578939 Kill:0 User:indigenouscivil VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 23:31:36 instance-1 lfd[1579527]: *User Processing* PID:1579523 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:35:36 instance-1 lfd[1581560]: *User Processing* PID:1581556 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:38:36 instance-1 lfd[1582502]: *User Processing* PID:1582498 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:39:36 instance-1 lfd[1582827]: *User Processing* PID:1582824 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:40:36 instance-1 lfd[1583172]: *User Processing* PID:1583168 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:41:36 instance-1 lfd[1583459]: *User Processing* PID:1583455 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:43:37 instance-1 lfd[1584167]: *User Processing* PID:1584163 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:45:37 instance-1 lfd[1584869]: *User Processing* PID:1584861 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:45:37 instance-1 lfd[1584869]: *User Processing* PID:1584762 Kill:0 User:trafman VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 23:46:37 instance-1 lfd[1585219]: *User Processing* PID:1585171 Kill:0 User:trafman VM:544(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 23:46:37 instance-1 lfd[1585219]: *User Processing* PID:1585212 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:46:37 instance-1 lfd[1585219]: *User Processing* PID:1585213 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:47:37 instance-1 lfd[1585557]: *User Processing* PID:1585467 Kill:0 User:trafman VM:614(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 23:48:37 instance-1 lfd[1586052]: *User Processing* PID:1586031 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 16 23:48:37 instance-1 lfd[1586052]: *User Processing* PID:1586045 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:48:37 instance-1 lfd[1586052]: *User Processing* PID:1586009 Kill:0 User:trafman VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 16 23:49:37 instance-1 lfd[1586403]: *User Processing* PID:1586397 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:49:37 instance-1 lfd[1586403]: *User Processing* PID:1586396 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:50:37 instance-1 lfd[1586795]: *User Processing* PID:1586789 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:51:37 instance-1 lfd[1587150]: *User Processing* PID:1587143 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:55:37 instance-1 lfd[1588724]: *User Processing* PID:1588721 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:56:37 instance-1 lfd[1589009]: *User Processing* PID:1589002 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:58:37 instance-1 lfd[1589745]: *User Processing* PID:1589740 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 16 23:59:37 instance-1 lfd[1590046]: *User Processing* PID:1590042 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:00:03 instance-1 lfd[1568022]: Main Process: TERM Mar 17 00:00:03 instance-1 lfd[1568022]: daemon stopped Mar 17 00:00:03 instance-1 lfd[1590255]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 17 00:00:03 instance-1 lfd[1590255]: LF_APACHE_ERRPORT: Set to [2] Mar 17 00:00:03 instance-1 lfd[1590255]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 17 00:00:03 instance-1 lfd[1590255]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 17 00:00:03 instance-1 lfd[1590255]: CSF Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: IPv6 Enabled... Mar 17 00:00:03 instance-1 lfd[1590255]: LOAD Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 17 00:00:03 instance-1 lfd[1590255]: Country Code Lookups... Mar 17 00:00:03 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 00:00:03 instance-1 lfd[1590255]: System Integrity Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: Exploit Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: Directory Watching... Mar 17 00:00:03 instance-1 lfd[1590255]: Email Queue Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: ModSecurity IP D/B Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: Email Relay Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: Temp to Perm Block Tracking... Mar 17 00:00:03 instance-1 lfd[1590255]: System Statistics... Mar 17 00:00:04 instance-1 lfd[1590255]: Process Tracking... Mar 17 00:00:04 instance-1 lfd[1590255]: Account Tracking... Mar 17 00:00:04 instance-1 lfd[1590255]: SSH Tracking... Mar 17 00:00:04 instance-1 lfd[1590255]: Webmin Tracking... Mar 17 00:00:04 instance-1 lfd[1590255]: SU Tracking... Mar 17 00:00:04 instance-1 lfd[1590255]: Console Tracking... Mar 17 00:00:04 instance-1 lfd[1590255]: WHM Tracking... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /usr/local/cpanel/logs/login_log... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/exim_mainlog... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/messages... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /usr/local/cpanel/logs/access_log... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /etc/apache2/logs/error_log... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/maillog... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/secure... Mar 17 00:00:04 instance-1 lfd[1590255]: Watching /var/log/customlog... Mar 17 00:00:04 instance-1 lfd[1590274]: *User Processing* PID:1590258 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:01:04 instance-1 lfd[1590583]: *User Processing* PID:1590580 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:02:04 instance-1 lfd[1590910]: *User Processing* PID:1590886 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 00:03:04 instance-1 lfd[1591242]: *User Processing* PID:1591234 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:05:37 instance-1 lfd[1592074]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 00:05:37 instance-1 lfd[1592074]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 00:07:04 instance-1 lfd[1592839]: *User Processing* PID:1592831 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:07:04 instance-1 lfd[1592839]: *User Processing* PID:1592832 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:08:04 instance-1 lfd[1593235]: *User Processing* PID:1593221 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:09:04 instance-1 lfd[1593761]: *User Processing* PID:1593756 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:14:04 instance-1 lfd[1595272]: *User Processing* PID:1595263 Kill:0 User:surveyms VM:576(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 00:19:05 instance-1 lfd[1596747]: *User Processing* PID:1596743 Kill:0 User:tekutaro VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 00:20:56 instance-1 lfd[1597214]: (smtpauth) Failed SMTP AUTH login from 42.193.105.109 (CN/China/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 17 00:24:45 instance-1 lfd[1598280]: (smtpauth) Failed SMTP AUTH login from 156.226.23.21 (ZA/South Africa/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 17 00:28:05 instance-1 lfd[1599173]: *User Processing* PID:1599124 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 00:59:06 instance-1 lfd[1608317]: *User Processing* PID:1608310 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:00:06 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 01:01:06 instance-1 lfd[1609011]: *User Processing* PID:1609004 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:03:06 instance-1 lfd[1609533]: *User Processing* PID:1609523 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 01:05:07 instance-1 lfd[1610243]: *User Processing* PID:1610234 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:10:07 instance-1 lfd[1611648]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 01:10:07 instance-1 lfd[1611648]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 01:12:07 instance-1 lfd[1612182]: *User Processing* PID:1612165 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 01:13:07 instance-1 lfd[1612576]: *User Processing* PID:1612384 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:13:07 instance-1 lfd[1612576]: *User Processing* PID:1612348 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:13:08 instance-1 lfd[1612576]: *User Processing* PID:1612563 Kill:0 User:bmswinslow VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:13:08 instance-1 lfd[1612576]: *User Processing* PID:1612565 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:13:08 instance-1 lfd[1612576]: *User Processing* PID:1612526 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:13:09 instance-1 lfd[1612576]: *User Processing* PID:1612547 Kill:0 User:bmswinslow VM:658(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:14:07 instance-1 lfd[1612950]: *User Processing* PID:1612943 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:15:07 instance-1 lfd[1613457]: *User Processing* PID:1613449 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:17:07 instance-1 lfd[1614143]: *User Processing* PID:1614138 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:17:08 instance-1 lfd[1614143]: *User Processing* PID:1614132 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:18:08 instance-1 lfd[1614488]: *User Processing* PID:1614300 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:18:08 instance-1 lfd[1614488]: *User Processing* PID:1614472 Kill:0 User:bmswinslow VM:576(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:18:08 instance-1 lfd[1614488]: *User Processing* PID:1614425 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:18:09 instance-1 lfd[1614488]: *User Processing* PID:1614330 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:18:09 instance-1 lfd[1614488]: *User Processing* PID:1614481 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:18:09 instance-1 lfd[1614488]: *User Processing* PID:1614476 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:20:38 instance-1 lfd[1615431]: *LOAD* 5 minute load average is 6.27, threshold is 6 - email sent Mar 17 01:21:08 instance-1 lfd[1615574]: *User Processing* PID:1615534 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 01:21:08 instance-1 lfd[1615574]: *User Processing* PID:1615565 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:22:08 instance-1 lfd[1615904]: *User Processing* PID:1615898 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:23:08 instance-1 lfd[1616231]: *User Processing* PID:1616221 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:23:08 instance-1 lfd[1616231]: *User Processing* PID:1616225 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:24:08 instance-1 lfd[1616538]: *User Processing* PID:1616523 Kill:0 User:foster VM:611(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:24:09 instance-1 lfd[1616538]: *User Processing* PID:1616531 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:25:08 instance-1 lfd[1616938]: *User Processing* PID:1616904 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:26:08 instance-1 lfd[1617383]: *User Processing* PID:1617370 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:26:09 instance-1 lfd[1617383]: *User Processing* PID:1617374 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:27:08 instance-1 lfd[1617689]: *User Processing* PID:1617683 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:28:09 instance-1 lfd[1618019]: *User Processing* PID:1618016 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:30:09 instance-1 lfd[1618844]: *User Processing* PID:1618799 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:30:09 instance-1 lfd[1618844]: *User Processing* PID:1618826 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:32:09 instance-1 lfd[1619624]: *User Processing* PID:1619621 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:32:09 instance-1 lfd[1619624]: *User Processing* PID:1619618 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:33:09 instance-1 lfd[1620026]: *User Processing* PID:1620023 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:34:09 instance-1 lfd[1620440]: *User Processing* PID:1620431 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:34:09 instance-1 lfd[1620440]: *User Processing* PID:1620434 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:35:09 instance-1 lfd[1621033]: *User Processing* PID:1621020 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:35:09 instance-1 lfd[1621033]: *User Processing* PID:1621025 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:36:09 instance-1 lfd[1621444]: *User Processing* PID:1621435 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:36:09 instance-1 lfd[1621444]: *User Processing* PID:1621437 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:38:09 instance-1 lfd[1622181]: *User Processing* PID:1622175 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:40:09 instance-1 lfd[1623020]: *User Processing* PID:1623012 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:41:09 instance-1 lfd[1623577]: *User Processing* PID:1623573 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:48:09 instance-1 lfd[1625864]: *User Processing* PID:1625861 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:50:10 instance-1 lfd[1626675]: *User Processing* PID:1626668 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:50:10 instance-1 lfd[1626675]: *User Processing* PID:1626667 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:51:10 instance-1 lfd[1627187]: *User Processing* PID:1627183 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:56:10 instance-1 lfd[1629256]: *User Processing* PID:1629248 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 01:59:10 instance-1 lfd[1630393]: *User Processing* PID:1630389 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:00:10 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 02:01:10 instance-1 lfd[1631522]: *User Processing* PID:1631518 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:10:11 instance-1 lfd[1634280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 02:10:11 instance-1 lfd[1634280]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 02:15:11 instance-1 lfd[1635705]: *User Processing* PID:1635594 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 02:30:52 instance-1 lfd[1639957]: Directory Watching terminated after 40 seconds Mar 17 02:30:52 instance-1 lfd[1639957]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds Mar 17 02:32:12 instance-1 lfd[1640577]: *User Processing* PID:1640567 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:38:12 instance-1 lfd[1642204]: *User Processing* PID:1642170 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:53:13 instance-1 lfd[1646501]: *User Processing* PID:1646497 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:54:13 instance-1 lfd[1646947]: *User Processing* PID:1646940 Kill:0 User:mainpoint VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:56:14 instance-1 lfd[1647632]: *User Processing* PID:1647627 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:58:14 instance-1 lfd[1648361]: *User Processing* PID:1648357 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 02:59:14 instance-1 lfd[1648686]: *User Processing* PID:1648676 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:00:14 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 03:01:14 instance-1 lfd[1649391]: *User Processing* PID:1649386 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:02:14 instance-1 lfd[1649931]: *User Processing* PID:1649926 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:03:14 instance-1 lfd[1650270]: *User Processing* PID:1650263 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:04:14 instance-1 lfd[1650603]: *User Processing* PID:1650582 Kill:0 User:surveyms VM:580(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 03:08:41 instance-1 lfd[1651914]: (smtpauth) Failed SMTP AUTH login from 185.196.8.222 (CH/Switzerland/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 17 03:13:14 instance-1 lfd[1653224]: *User Processing* PID:1653217 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:15:56 instance-1 lfd[1653886]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 03:15:56 instance-1 lfd[1653886]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 03:16:15 instance-1 lfd[1654202]: *User Processing* PID:1654169 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:17:15 instance-1 lfd[1654610]: *User Processing* PID:1654606 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:20:15 instance-1 lfd[1655511]: *User Processing* PID:1655500 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:21:15 instance-1 lfd[1655812]: *User Processing* PID:1655805 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:25:15 instance-1 lfd[1657195]: *User Processing* PID:1657183 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:28:15 instance-1 lfd[1658256]: *User Processing* PID:1658248 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:28:15 instance-1 lfd[1658256]: *User Processing* PID:1658250 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:29:15 instance-1 lfd[1658562]: *User Processing* PID:1658554 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:35:15 instance-1 lfd[1660617]: *User Processing* PID:1660607 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:36:16 instance-1 lfd[1660897]: *User Processing* PID:1660891 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:37:16 instance-1 lfd[1661176]: *User Processing* PID:1661172 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:42:16 instance-1 lfd[1662764]: *User Processing* PID:1662757 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:42:57 instance-1 lfd[1663240]: (ftpd) Failed FTP login from 82.223.104.73 (ES/Spain/-): 10 in the last 3600 secs - *Blocked in csf* [LF_FTPD] Mar 17 03:43:16 instance-1 lfd[1663396]: *User Processing* PID:1663324 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 03:44:16 instance-1 lfd[1663729]: *User Processing* PID:1663715 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:44:16 instance-1 lfd[1663729]: *User Processing* PID:1663721 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:47:16 instance-1 lfd[1665091]: *User Processing* PID:1665084 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:48:16 instance-1 lfd[1666098]: *User Processing* PID:1666093 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/eyrescom/public_html/missionmassimo.com theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false Mar 17 03:53:17 instance-1 lfd[1670681]: *LOAD* 5 minute load average is 9.52, threshold is 6 - email sent Mar 17 03:53:18 instance-1 lfd[1670682]: *Excessive Processes* User:surveyms Kill:0 Process Count:30 Mar 17 03:53:20 instance-1 lfd[1670682]: *User Processing* PID:1670638 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:53:21 instance-1 lfd[1670682]: *User Processing* PID:1670453 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 03:53:23 instance-1 lfd[1670682]: *User Processing* PID:1670375 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 03:53:24 instance-1 lfd[1670682]: *User Processing* PID:1670490 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 03:53:25 instance-1 lfd[1670682]: *User Processing* PID:1670514 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:53:26 instance-1 lfd[1670682]: *User Processing* PID:1670469 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 03:53:27 instance-1 lfd[1670682]: *User Processing* PID:1670368 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 03:53:28 instance-1 lfd[1670682]: *User Processing* PID:1670428 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 03:54:17 instance-1 lfd[1671827]: *User Processing* PID:1671788 Kill:0 User:mainpoint VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html instance info --format=json --check-updates=true Mar 17 03:55:17 instance-1 lfd[1672804]: *User Processing* PID:1672800 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 03:56:17 instance-1 lfd[1673666]: *User Processing* PID:1673650 Kill:0 User:bmswinslow VM:641(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false Mar 17 03:59:17 instance-1 lfd[1676072]: *User Processing* PID:1676060 Kill:0 User:tuscomau VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/tuscomau/public_html pingbacks is_disabled Mar 17 03:59:18 instance-1 lfd[1676072]: *User Processing* PID:1676067 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:00:17 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 04:00:17 instance-1 lfd[1677500]: *User Processing* PID:1677490 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:01:17 instance-1 lfd[1677887]: *User Processing* PID:1677882 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:02:17 instance-1 lfd[1678278]: *User Processing* PID:1678275 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:03:17 instance-1 lfd[1678766]: *User Processing* PID:1678762 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:07:18 instance-1 lfd[1680266]: *User Processing* PID:1680263 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:30:28 instance-1 lfd[1687356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 04:30:29 instance-1 lfd[1687356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 04:43:19 instance-1 lfd[1690919]: *User Processing* PID:1690895 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:43:19 instance-1 lfd[1690919]: *User Processing* PID:1690892 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:45:19 instance-1 lfd[1691683]: *User Processing* PID:1691672 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:47:19 instance-1 lfd[1692257]: *User Processing* PID:1692251 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:49:19 instance-1 lfd[1692970]: *User Processing* PID:1692967 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:51:19 instance-1 lfd[1693598]: *User Processing* PID:1693592 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:53:19 instance-1 lfd[1694183]: *User Processing* PID:1694179 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:54:19 instance-1 lfd[1694710]: *User Processing* PID:1694704 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:57:19 instance-1 lfd[1695579]: *User Processing* PID:1695575 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 04:58:19 instance-1 lfd[1695868]: *User Processing* PID:1695860 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:00:20 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 05:00:20 instance-1 lfd[1696649]: *User Processing* PID:1696637 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:01:20 instance-1 lfd[1696955]: *User Processing* PID:1696951 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:02:20 instance-1 lfd[1697275]: *User Processing* PID:1697270 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:04:20 instance-1 lfd[1698012]: *User Processing* PID:1698008 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:05:20 instance-1 lfd[1698343]: *User Processing* PID:1698335 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:08:20 instance-1 lfd[1699192]: *User Processing* PID:1699181 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:09:20 instance-1 lfd[1699631]: *User Processing* PID:1699621 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:10:20 instance-1 lfd[1699996]: *User Processing* PID:1699986 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:11:20 instance-1 lfd[1700280]: *User Processing* PID:1700275 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:15:20 instance-1 lfd[1701635]: *User Processing* PID:1701620 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:22:20 instance-1 lfd[1703835]: *User Processing* PID:1703831 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:23:20 instance-1 lfd[1704112]: *User Processing* PID:1704108 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:27:21 instance-1 lfd[1705408]: *User Processing* PID:1705404 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:28:21 instance-1 lfd[1705685]: *User Processing* PID:1705672 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:28:21 instance-1 lfd[1705685]: *User Processing* PID:1705681 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:32:21 instance-1 lfd[1707099]: *User Processing* PID:1707095 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:33:21 instance-1 lfd[1707421]: *User Processing* PID:1707417 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:34:21 instance-1 lfd[1707723]: *User Processing* PID:1707719 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:36:21 instance-1 lfd[1708496]: *User Processing* PID:1708489 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:37:21 instance-1 lfd[1708808]: *User Processing* PID:1708800 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:38:21 instance-1 lfd[1709133]: *User Processing* PID:1709126 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:39:21 instance-1 lfd[1709456]: *User Processing* PID:1709449 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:42:21 instance-1 lfd[1710510]: *User Processing* PID:1710506 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:43:21 instance-1 lfd[1710791]: *User Processing* PID:1710784 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:45:22 instance-1 lfd[1711570]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 05:45:22 instance-1 lfd[1711570]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 05:47:21 instance-1 lfd[1712205]: *User Processing* PID:1712201 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:49:21 instance-1 lfd[1712915]: *User Processing* PID:1712911 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:50:22 instance-1 lfd[1713394]: *User Processing* PID:1713386 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:52:22 instance-1 lfd[1713965]: *User Processing* PID:1713961 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 05:53:22 instance-1 lfd[1714292]: *User Processing* PID:1714240 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 06:00:22 instance-1 lfd[1590255]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 06:01:22 instance-1 lfd[1716781]: *User Processing* PID:1716771 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 06:03:22 instance-1 lfd[1717313]: *User Processing* PID:1717301 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 06:21:23 instance-1 lfd[1722606]: *User Processing* PID:1722601 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 06:23:23 instance-1 lfd[1723159]: *User Processing* PID:1723155 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 06:25:23 instance-1 lfd[1723877]: *User Processing* PID:1723866 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 06:29:23 instance-1 lfd[1724868]: *User Processing* PID:1724864 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 06:32:23 instance-1 lfd[1725925]: *User Processing* PID:1725916 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 06:45:24 instance-1 lfd[1729759]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 06:45:24 instance-1 lfd[1729759]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 06:52:25 instance-1 lfd[1732163]: *LOAD* 5 minute load average is 7.04, threshold is 6 - email sent Mar 17 06:52:33 instance-1 lfd[1732164]: *Excessive Processes* User:opthirecomau Kill:0 Process Count:15 Mar 17 06:52:38 instance-1 lfd[1732164]: *Excessive Processes* User:nativesp Kill:0 Process Count:15 Mar 17 07:48:20 instance-1 lfd[1711]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 17 07:48:21 instance-1 lfd[1711]: LF_APACHE_ERRPORT: Set to [2] Mar 17 07:48:21 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 17 07:48:21 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 17 07:48:21 instance-1 lfd[1711]: CSF Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: IPv6 Enabled... Mar 17 07:48:21 instance-1 lfd[1711]: LOAD Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 17 07:48:21 instance-1 lfd[1711]: Country Code Lookups... Mar 17 07:48:21 instance-1 lfd[1711]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 07:48:21 instance-1 lfd[1711]: System Integrity Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: Exploit Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: Directory Watching... Mar 17 07:48:21 instance-1 lfd[1711]: Email Queue Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: ModSecurity IP D/B Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: Email Relay Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: Temp to Perm Block Tracking... Mar 17 07:48:21 instance-1 lfd[1711]: System Statistics... Mar 17 07:48:22 instance-1 lfd[1711]: Process Tracking... Mar 17 07:48:22 instance-1 lfd[1711]: Account Tracking... Mar 17 07:48:22 instance-1 lfd[1711]: SSH Tracking... Mar 17 07:48:22 instance-1 lfd[1711]: Webmin Tracking... Mar 17 07:48:22 instance-1 lfd[1711]: SU Tracking... Mar 17 07:48:22 instance-1 lfd[1711]: Console Tracking... Mar 17 07:48:22 instance-1 lfd[1711]: WHM Tracking... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/login_log... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/maillog... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/exim_mainlog... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/secure... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/access_log... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/customlog... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /var/log/messages... Mar 17 07:48:22 instance-1 lfd[1711]: Watching /etc/apache2/logs/error_log... Mar 17 07:49:22 instance-1 lfd[2133]: *User Processing* PID:2047 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 07:49:22 instance-1 lfd[2133]: *User Processing* PID:2041 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 07:49:22 instance-1 lfd[2133]: *User Processing* PID:2079 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 07:51:22 instance-1 lfd[2867]: *User Processing* PID:2821 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 07:51:22 instance-1 lfd[2867]: *User Processing* PID:2861 Kill:0 User:mainpoint VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 07:52:22 instance-1 lfd[3143]: *User Processing* PID:2998 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 07:53:22 instance-1 lfd[3414]: *User Processing* PID:3393 Kill:0 User:surveyms VM:530(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 07:53:22 instance-1 lfd[3414]: *User Processing* PID:3374 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 07:54:01 instance-1 lfd[3411]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 07:54:01 instance-1 lfd[3411]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 07:59:23 instance-1 lfd[5541]: *Excessive Processes* User:winslow Kill:0 Process Count:13 Mar 17 07:59:24 instance-1 lfd[5541]: *User Processing* PID:5452 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 07:59:27 instance-1 lfd[5541]: *User Processing* PID:5474 Kill:0 User:trafman VM:558(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 07:59:57 instance-1 lfd[6002]: *LOAD* 5 minute load average is 15.24, threshold is 6 - email sent Mar 17 08:27:39 instance-1 lfd[1726]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 17 08:27:40 instance-1 lfd[1726]: LF_APACHE_ERRPORT: Set to [2] Mar 17 08:27:40 instance-1 lfd[1726]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 17 08:27:40 instance-1 lfd[1726]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 17 08:27:40 instance-1 lfd[1726]: CSF Tracking... Mar 17 08:27:40 instance-1 lfd[1726]: IPv6 Enabled... Mar 17 08:27:40 instance-1 lfd[1726]: LOAD Tracking... Mar 17 08:27:41 instance-1 lfd[1726]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 17 08:27:41 instance-1 lfd[1726]: Country Code Lookups... Mar 17 08:27:41 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 08:27:41 instance-1 lfd[1726]: System Integrity Tracking... Mar 17 08:27:41 instance-1 lfd[1726]: Exploit Tracking... Mar 17 08:27:41 instance-1 lfd[1726]: Directory Watching... Mar 17 08:27:41 instance-1 lfd[1726]: Email Queue Tracking... Mar 17 08:27:41 instance-1 lfd[1726]: ModSecurity IP D/B Tracking... Mar 17 08:27:41 instance-1 lfd[1726]: Email Relay Tracking... Mar 17 08:27:41 instance-1 lfd[1726]: Temp to Perm Block Tracking... Mar 17 08:27:41 instance-1 lfd[1726]: System Statistics... Mar 17 08:27:42 instance-1 lfd[1726]: Process Tracking... Mar 17 08:27:42 instance-1 lfd[1726]: Account Tracking... Mar 17 08:27:42 instance-1 lfd[1726]: SSH Tracking... Mar 17 08:27:42 instance-1 lfd[1726]: Webmin Tracking... Mar 17 08:27:42 instance-1 lfd[1726]: SU Tracking... Mar 17 08:27:42 instance-1 lfd[1726]: Console Tracking... Mar 17 08:27:42 instance-1 lfd[1726]: WHM Tracking... Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/customlog... Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/exim_mainlog... Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/maillog... Mar 17 08:27:42 instance-1 lfd[1726]: Watching /usr/local/cpanel/logs/login_log... Mar 17 08:27:42 instance-1 lfd[1726]: Watching /etc/apache2/logs/error_log... Mar 17 08:27:42 instance-1 lfd[1726]: Watching /var/log/messages... Mar 17 08:27:43 instance-1 lfd[1726]: Watching /usr/local/cpanel/logs/access_log... Mar 17 08:27:43 instance-1 lfd[1726]: Watching /var/log/secure... Mar 17 08:29:43 instance-1 lfd[2552]: *User Processing* PID:2549 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:31:43 instance-1 lfd[3118]: *User Processing* PID:3111 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:33:19 instance-1 lfd[3412]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 08:33:20 instance-1 lfd[3412]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 08:33:43 instance-1 lfd[3842]: *User Processing* PID:3832 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:33:43 instance-1 lfd[3842]: *User Processing* PID:3833 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:40:43 instance-1 lfd[5948]: *User Processing* PID:5940 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:42:43 instance-1 lfd[6710]: *User Processing* PID:6702 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:43:43 instance-1 lfd[7222]: *User Processing* PID:7134 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:43:43 instance-1 lfd[7222]: *User Processing* PID:7214 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:43:43 instance-1 lfd[7222]: *User Processing* PID:7219 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:46:43 instance-1 lfd[8418]: *User Processing* PID:8412 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:49:43 instance-1 lfd[9481]: *User Processing* PID:9475 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:50:43 instance-1 lfd[9904]: *User Processing* PID:9901 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:54:44 instance-1 lfd[11486]: *User Processing* PID:11450 Kill:0 User:bmswinslow VM:700(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:55:44 instance-1 lfd[11831]: *User Processing* PID:11827 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:56:44 instance-1 lfd[12170]: *User Processing* PID:12167 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:58:44 instance-1 lfd[12938]: *User Processing* PID:12935 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 08:59:44 instance-1 lfd[13276]: *User Processing* PID:13273 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:00:44 instance-1 lfd[13677]: *User Processing* PID:13670 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:02:44 instance-1 lfd[14379]: *User Processing* PID:14364 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 09:02:44 instance-1 lfd[14379]: *User Processing* PID:14371 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:03:44 instance-1 lfd[14881]: *User Processing* PID:14854 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:06:44 instance-1 lfd[15944]: *User Processing* PID:15940 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:07:44 instance-1 lfd[16285]: *User Processing* PID:16273 Kill:0 User:comphomes VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:07:44 instance-1 lfd[16285]: *User Processing* PID:16274 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:09:44 instance-1 lfd[17123]: *User Processing* PID:17110 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 09:11:44 instance-1 lfd[17785]: *User Processing* PID:17778 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:12:44 instance-1 lfd[18150]: *User Processing* PID:18139 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 09:17:44 instance-1 lfd[20128]: *User Processing* PID:20103 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 09:17:44 instance-1 lfd[20128]: *User Processing* PID:20113 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 09:27:44 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 09:37:45 instance-1 lfd[26355]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 09:37:45 instance-1 lfd[26355]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 09:41:45 instance-1 lfd[27738]: *Suspicious Process* PID:3558 PPID:1131 User:turnkey Uptime:4118 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 17 09:41:45 instance-1 lfd[27738]: *User Processing* PID:3558 Kill:0 User:turnkey Time:4118 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 17 09:55:45 instance-1 lfd[32096]: *User Processing* PID:31816 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 10:06:45 instance-1 lfd[35380]: *User Processing* PID:35376 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 10:06:45 instance-1 lfd[35380]: *User Processing* PID:35370 Kill:0 User:yvegroup VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 10:07:45 instance-1 lfd[35696]: *User Processing* PID:35687 Kill:0 User:yvegroup VM:519(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 10:07:46 instance-1 lfd[35696]: *User Processing* PID:35678 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 10:11:45 instance-1 lfd[37030]: *User Processing* PID:36729 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 10:27:46 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 10:31:46 instance-1 lfd[43011]: *User Processing* PID:42803 Kill:0 User:indigenouscivil VM:598(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 10:37:47 instance-1 lfd[44871]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 10:37:47 instance-1 lfd[44871]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 10:39:47 instance-1 lfd[45390]: *User Processing* PID:45341 Kill:0 User:indigenouscivil VM:602(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 10:39:47 instance-1 lfd[45390]: *User Processing* PID:45381 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 10:40:47 instance-1 lfd[45830]: *User Processing* PID:45823 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 10:50:47 instance-1 lfd[48710]: *User Processing* PID:48667 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 10:52:47 instance-1 lfd[49198]: *User Processing* PID:49138 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 11:02:47 instance-1 lfd[52889]: *User Processing* PID:52863 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 11:03:47 instance-1 lfd[53210]: *User Processing* PID:53118 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 11:08:47 instance-1 lfd[54777]: *User Processing* PID:54773 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 11:11:47 instance-1 lfd[55759]: *User Processing* PID:55752 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 11:13:47 instance-1 lfd[56288]: *User Processing* PID:56284 Kill:0 User:yvegroup VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 11:14:47 instance-1 lfd[56563]: *User Processing* PID:56516 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 11:22:48 instance-1 lfd[58917]: *Suspicious Process* PID:3558 PPID:1131 User:turnkey Uptime:10180 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 17 11:22:48 instance-1 lfd[58917]: *User Processing* PID:3558 Kill:0 User:turnkey Time:10180 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 17 11:27:48 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 11:37:48 instance-1 lfd[63366]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 11:37:48 instance-1 lfd[63366]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 11:44:48 instance-1 lfd[65420]: *User Processing* PID:65189 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 11:49:48 instance-1 lfd[66966]: *User Processing* PID:66962 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:02:49 instance-1 lfd[70939]: *User Processing* PID:70930 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 12:07:49 instance-1 lfd[72557]: *User Processing* PID:72546 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:08:49 instance-1 lfd[72945]: *User Processing* PID:72813 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 12:15:49 instance-1 lfd[75265]: *User Processing* PID:75257 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 12:25:49 instance-1 lfd[78393]: *User Processing* PID:78389 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:27:49 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 12:32:49 instance-1 lfd[80818]: *User Processing* PID:80809 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:35:50 instance-1 lfd[81872]: *User Processing* PID:81868 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:37:50 instance-1 lfd[82488]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 12:37:50 instance-1 lfd[82488]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 12:38:50 instance-1 lfd[82825]: *User Processing* PID:82821 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:38:50 instance-1 lfd[82825]: *User Processing* PID:82818 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:41:50 instance-1 lfd[83967]: *User Processing* PID:83960 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:42:50 instance-1 lfd[84313]: *User Processing* PID:84296 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 12:42:50 instance-1 lfd[84313]: *User Processing* PID:84305 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85848 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85842 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85849 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:46:50 instance-1 lfd[85854]: *User Processing* PID:85844 Kill:0 User:geneticson VM:623(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:49:50 instance-1 lfd[87000]: *User Processing* PID:86993 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:53:50 instance-1 lfd[88500]: *User Processing* PID:88492 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:56:50 instance-1 lfd[89708]: *User Processing* PID:89701 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:57:50 instance-1 lfd[90062]: *User Processing* PID:90051 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 12:58:50 instance-1 lfd[90358]: *User Processing* PID:90354 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:01:50 instance-1 lfd[91457]: *User Processing* PID:91453 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:02:50 instance-1 lfd[91817]: *User Processing* PID:91805 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:20:51 instance-1 lfd[97240]: *User Processing* PID:97236 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:27:51 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 13:30:51 instance-1 lfd[100326]: *User Processing* PID:100318 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:33:51 instance-1 lfd[101296]: *User Processing* PID:101292 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:34:51 instance-1 lfd[101545]: *User Processing* PID:101538 Kill:0 User:comphomes VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:37:51 instance-1 lfd[102516]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 13:37:51 instance-1 lfd[102516]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 13:42:51 instance-1 lfd[104004]: *User Processing* PID:103993 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:43:51 instance-1 lfd[104274]: *User Processing* PID:104267 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:49:51 instance-1 lfd[106171]: *User Processing* PID:106167 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:50:51 instance-1 lfd[106548]: *User Processing* PID:106286 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 13:51:51 instance-1 lfd[106902]: *User Processing* PID:106896 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:51:52 instance-1 lfd[106902]: *User Processing* PID:106897 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:52:51 instance-1 lfd[107323]: *User Processing* PID:107312 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:53:51 instance-1 lfd[107818]: *User Processing* PID:107786 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:54:51 instance-1 lfd[108208]: *User Processing* PID:107902 Kill:0 User:newswinslow VM:602(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 13:55:51 instance-1 lfd[108554]: *User Processing* PID:108550 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:56:51 instance-1 lfd[108885]: *User Processing* PID:108879 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 13:57:51 instance-1 lfd[109272]: *User Processing* PID:109064 Kill:0 User:opthirecomau VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:02:52 instance-1 lfd[111049]: *User Processing* PID:111040 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:02:52 instance-1 lfd[111049]: *User Processing* PID:110850 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 14:03:52 instance-1 lfd[111543]: *User Processing* PID:111539 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:06:52 instance-1 lfd[112527]: *User Processing* PID:112520 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:07:52 instance-1 lfd[112830]: *User Processing* PID:112819 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:09:52 instance-1 lfd[113603]: *User Processing* PID:113599 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:12:52 instance-1 lfd[114462]: *User Processing* PID:114405 Kill:0 User:geneticson VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:15:52 instance-1 lfd[115712]: *User Processing* PID:115705 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:16:52 instance-1 lfd[116186]: *User Processing* PID:116179 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:16:52 instance-1 lfd[116186]: *User Processing* PID:116178 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:27:52 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 14:32:52 instance-1 lfd[121843]: *User Processing* PID:121834 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:33:52 instance-1 lfd[122246]: *User Processing* PID:122242 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:35:52 instance-1 lfd[123188]: *User Processing* PID:123180 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:36:52 instance-1 lfd[123600]: *User Processing* PID:123593 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:36:52 instance-1 lfd[123600]: *User Processing* PID:123596 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:36:53 instance-1 lfd[123600]: *User Processing* PID:123519 Kill:0 User:winslow VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 14:36:53 instance-1 lfd[123600]: *User Processing* PID:123327 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 14:37:52 instance-1 lfd[124106]: *User Processing* PID:124097 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:37:53 instance-1 lfd[124103]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 14:37:53 instance-1 lfd[124103]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 14:40:53 instance-1 lfd[125497]: *User Processing* PID:125493 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:41:53 instance-1 lfd[125872]: *User Processing* PID:125866 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:41:53 instance-1 lfd[125872]: *User Processing* PID:125868 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:43:53 instance-1 lfd[126673]: *User Processing* PID:126667 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:44:53 instance-1 lfd[127061]: *User Processing* PID:127057 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:51:53 instance-1 lfd[130103]: *User Processing* PID:130099 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:52:53 instance-1 lfd[130530]: *User Processing* PID:130521 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 14:54:53 instance-1 lfd[131412]: *User Processing* PID:131326 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:01:53 instance-1 lfd[133971]: *User Processing* PID:133967 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:02:53 instance-1 lfd[134331]: *User Processing* PID:134323 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:07:53 instance-1 lfd[136216]: *User Processing* PID:136207 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:09:53 instance-1 lfd[136963]: *User Processing* PID:136959 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:11:53 instance-1 lfd[137741]: *Suspicious Process* PID:3558 PPID:1131 User:turnkey Uptime:23926 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 17 15:11:53 instance-1 lfd[137741]: *User Processing* PID:137737 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:11:53 instance-1 lfd[137741]: *User Processing* PID:3558 Kill:0 User:turnkey Time:23926 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 17 15:14:53 instance-1 lfd[138744]: *User Processing* PID:138737 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:18:53 instance-1 lfd[140149]: *User Processing* PID:140143 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 15:20:54 instance-1 lfd[140792]: *User Processing* PID:140788 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:21:54 instance-1 lfd[141216]: *User Processing* PID:141204 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:21:54 instance-1 lfd[141216]: *User Processing* PID:141208 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:21:54 instance-1 lfd[141216]: *User Processing* PID:141210 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:22:54 instance-1 lfd[141549]: *User Processing* PID:141541 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:24:54 instance-1 lfd[142158]: *User Processing* PID:142153 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:25:54 instance-1 lfd[142505]: *User Processing* PID:142499 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:26:54 instance-1 lfd[142929]: *User Processing* PID:142925 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:26:54 instance-1 lfd[142929]: *User Processing* PID:142923 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:27:54 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 15:27:54 instance-1 lfd[143226]: *User Processing* PID:143215 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:28:54 instance-1 lfd[143522]: *User Processing* PID:143518 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:32:54 instance-1 lfd[144946]: *User Processing* PID:144937 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:33:54 instance-1 lfd[145294]: *User Processing* PID:145286 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:35:54 instance-1 lfd[145969]: *User Processing* PID:145960 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:36:54 instance-1 lfd[146394]: *User Processing* PID:146384 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:36:54 instance-1 lfd[146394]: *User Processing* PID:146390 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:37:54 instance-1 lfd[146767]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 15:37:54 instance-1 lfd[146767]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 15:39:54 instance-1 lfd[147391]: *User Processing* PID:147384 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:41:54 instance-1 lfd[148189]: *User Processing* PID:148185 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:43:54 instance-1 lfd[148838]: *User Processing* PID:148828 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:43:54 instance-1 lfd[148838]: *User Processing* PID:148830 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:44:54 instance-1 lfd[149151]: *User Processing* PID:149144 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:44:54 instance-1 lfd[149151]: *User Processing* PID:149142 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:45:54 instance-1 lfd[149550]: *User Processing* PID:149546 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:46:54 instance-1 lfd[150039]: *User Processing* PID:150030 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:46:54 instance-1 lfd[150039]: *User Processing* PID:150032 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:47:54 instance-1 lfd[150362]: *User Processing* PID:150352 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:47:54 instance-1 lfd[150362]: *User Processing* PID:150309 Kill:0 User:nexpavecau VM:543(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150627 Kill:0 User:nexpavecau VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150610 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150707 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:48:54 instance-1 lfd[150716]: *User Processing* PID:150712 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:49:54 instance-1 lfd[151112]: *User Processing* PID:151108 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:50:54 instance-1 lfd[151487]: *User Processing* PID:151483 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:50:54 instance-1 lfd[151487]: *User Processing* PID:151478 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:51:54 instance-1 lfd[151936]: *User Processing* PID:151929 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:52:54 instance-1 lfd[152257]: *User Processing* PID:152248 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:53:54 instance-1 lfd[152661]: *User Processing* PID:152643 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:53:54 instance-1 lfd[152661]: *User Processing* PID:152614 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:54:54 instance-1 lfd[152969]: *User Processing* PID:152965 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:54:54 instance-1 lfd[152969]: *User Processing* PID:152960 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:56:54 instance-1 lfd[153726]: *User Processing* PID:153643 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:56:55 instance-1 lfd[153726]: *User Processing* PID:153689 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:57:54 instance-1 lfd[154109]: *User Processing* PID:154101 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:58:54 instance-1 lfd[154409]: *User Processing* PID:154401 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:59:54 instance-1 lfd[154714]: *User Processing* PID:154706 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 15:59:55 instance-1 lfd[154714]: *User Processing* PID:154710 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:00:55 instance-1 lfd[155075]: *User Processing* PID:155069 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:00:55 instance-1 lfd[155075]: *User Processing* PID:155071 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:02:55 instance-1 lfd[155830]: *User Processing* PID:155814 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:02:55 instance-1 lfd[155830]: *User Processing* PID:155820 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:03:55 instance-1 lfd[156198]: *User Processing* PID:156194 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:04:55 instance-1 lfd[156537]: *User Processing* PID:156533 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:06:55 instance-1 lfd[157159]: *User Processing* PID:157155 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:06:55 instance-1 lfd[157159]: *User Processing* PID:157150 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:12:55 instance-1 lfd[159325]: *User Processing* PID:159311 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:12:55 instance-1 lfd[159325]: *User Processing* PID:159313 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:13:55 instance-1 lfd[159649]: *User Processing* PID:159642 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:14:55 instance-1 lfd[160016]: *User Processing* PID:160005 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:14:55 instance-1 lfd[160016]: *User Processing* PID:160009 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:14:55 instance-1 lfd[160016]: *User Processing* PID:159829 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:15:55 instance-1 lfd[160397]: *User Processing* PID:160391 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:16:55 instance-1 lfd[160682]: *User Processing* PID:160676 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:16:55 instance-1 lfd[160682]: *User Processing* PID:160678 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:17:55 instance-1 lfd[160974]: *User Processing* PID:160965 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:17:55 instance-1 lfd[160974]: *User Processing* PID:160960 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:18:55 instance-1 lfd[161409]: *User Processing* PID:161405 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:18:55 instance-1 lfd[161409]: *User Processing* PID:161400 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:19:55 instance-1 lfd[161709]: *User Processing* PID:161700 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:19:55 instance-1 lfd[161709]: *User Processing* PID:161702 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:22:55 instance-1 lfd[162680]: *User Processing* PID:162667 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:22:55 instance-1 lfd[162680]: *User Processing* PID:162664 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:24:55 instance-1 lfd[163397]: *User Processing* PID:163387 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:27:55 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 16:27:55 instance-1 lfd[164382]: *User Processing* PID:164368 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:29:55 instance-1 lfd[165073]: *User Processing* PID:165062 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:29:55 instance-1 lfd[165073]: *User Processing* PID:165069 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:32:55 instance-1 lfd[166241]: *User Processing* PID:166226 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:32:56 instance-1 lfd[166241]: *User Processing* PID:166233 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:33:57 instance-1 lfd[166893]: *User Processing* PID:166858 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:33:58 instance-1 lfd[166893]: *User Processing* PID:166876 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:33:58 instance-1 lfd[166893]: *User Processing* PID:166859 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:33:59 instance-1 lfd[166893]: *User Processing* PID:166843 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:34:00 instance-1 lfd[166893]: *User Processing* PID:166873 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:34:02 instance-1 lfd[166893]: *User Processing* PID:166862 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:34:03 instance-1 lfd[166893]: *User Processing* PID:166878 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:34:04 instance-1 lfd[166893]: *User Processing* PID:166793 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 16:34:05 instance-1 lfd[166893]: *User Processing* PID:166877 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:34:26 instance-1 lfd[167267]: *LOAD* 5 minute load average is 6.50, threshold is 6 - email sent Mar 17 16:34:56 instance-1 lfd[167559]: *Excessive Processes* User:winslow Kill:0 Process Count:13 Mar 17 16:34:57 instance-1 lfd[167559]: *User Processing* PID:167522 Kill:0 User:mainpoint VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:34:58 instance-1 lfd[167559]: *User Processing* PID:167545 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:34:59 instance-1 lfd[167559]: *User Processing* PID:167540 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:00 instance-1 lfd[167559]: *User Processing* PID:167489 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:01 instance-1 lfd[167559]: *User Processing* PID:167505 Kill:0 User:independent VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:01 instance-1 lfd[167559]: *User Processing* PID:167292 Kill:0 User:comphomes VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:56 instance-1 lfd[168208]: *User Processing* PID:168192 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:56 instance-1 lfd[168208]: *User Processing* PID:168194 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:56 instance-1 lfd[168208]: *User Processing* PID:168203 Kill:0 User:independent VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:57 instance-1 lfd[168208]: *User Processing* PID:168197 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:35:57 instance-1 lfd[168208]: *User Processing* PID:168195 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:36:56 instance-1 lfd[168793]: *User Processing* PID:168787 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:36:56 instance-1 lfd[168793]: *User Processing* PID:168783 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:36:57 instance-1 lfd[168793]: *User Processing* PID:168781 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:36:57 instance-1 lfd[168793]: *User Processing* PID:168780 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:36:58 instance-1 lfd[168793]: *User Processing* PID:168785 Kill:0 User:comphomes VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:36:58 instance-1 lfd[168793]: *User Processing* PID:168784 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:37:56 instance-1 lfd[169398]: *User Processing* PID:169383 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:37:57 instance-1 lfd[169398]: *User Processing* PID:169386 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:37:57 instance-1 lfd[169398]: *User Processing* PID:169373 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:37:58 instance-1 lfd[169398]: *User Processing* PID:169338 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:37:58 instance-1 lfd[169398]: *User Processing* PID:169377 Kill:0 User:mainpoint VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:37:59 instance-1 lfd[169398]: *User Processing* PID:169390 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:37:59 instance-1 lfd[169398]: *User Processing* PID:169378 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:38:26 instance-1 lfd[169397]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 16:38:26 instance-1 lfd[169397]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 16:38:56 instance-1 lfd[170147]: *User Processing* PID:170118 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:38:57 instance-1 lfd[170147]: *User Processing* PID:170127 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:38:57 instance-1 lfd[170147]: *User Processing* PID:170136 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:38:58 instance-1 lfd[170147]: *User Processing* PID:170132 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:39:56 instance-1 lfd[170755]: *User Processing* PID:170742 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:39:57 instance-1 lfd[170755]: *User Processing* PID:170735 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:39:57 instance-1 lfd[170755]: *User Processing* PID:170749 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:39:57 instance-1 lfd[170755]: *User Processing* PID:170745 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:40:57 instance-1 lfd[171401]: *User Processing* PID:171394 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:40:57 instance-1 lfd[171401]: *User Processing* PID:171383 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:40:58 instance-1 lfd[171401]: *User Processing* PID:171375 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:40:58 instance-1 lfd[171401]: *User Processing* PID:171395 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:40:59 instance-1 lfd[171401]: *User Processing* PID:171384 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:40:59 instance-1 lfd[171401]: *User Processing* PID:171396 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:40:59 instance-1 lfd[171401]: *User Processing* PID:171373 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:41:57 instance-1 lfd[172005]: *User Processing* PID:172000 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:41:57 instance-1 lfd[172005]: *User Processing* PID:171987 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:41:57 instance-1 lfd[172005]: *User Processing* PID:171984 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:41:58 instance-1 lfd[172005]: *User Processing* PID:171996 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:41:58 instance-1 lfd[172005]: *User Processing* PID:171992 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:41:58 instance-1 lfd[172005]: *User Processing* PID:171998 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:42:57 instance-1 lfd[172609]: *User Processing* PID:172597 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:42:58 instance-1 lfd[172609]: *User Processing* PID:172601 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:42:58 instance-1 lfd[172609]: *User Processing* PID:172579 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:42:58 instance-1 lfd[172609]: *User Processing* PID:172592 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:42:59 instance-1 lfd[172609]: *User Processing* PID:172599 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:42:59 instance-1 lfd[172609]: *User Processing* PID:172578 Kill:0 User:tuscomau VM:567(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:42:59 instance-1 lfd[172609]: *User Processing* PID:172583 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:43:00 instance-1 lfd[172609]: *User Processing* PID:172589 Kill:0 User:independent VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:43:57 instance-1 lfd[173350]: *User Processing* PID:173335 Kill:0 User:eyrescom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:43:58 instance-1 lfd[173350]: *User Processing* PID:173322 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:43:58 instance-1 lfd[173350]: *User Processing* PID:173339 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:43:59 instance-1 lfd[173350]: *User Processing* PID:173306 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:43:59 instance-1 lfd[173350]: *User Processing* PID:173342 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:43:59 instance-1 lfd[173350]: *User Processing* PID:173324 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:44:57 instance-1 lfd[173948]: *User Processing* PID:173918 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:44:58 instance-1 lfd[173948]: *User Processing* PID:173920 Kill:0 User:independent VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:44:58 instance-1 lfd[173948]: *User Processing* PID:173928 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:44:58 instance-1 lfd[173948]: *User Processing* PID:173931 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:44:59 instance-1 lfd[173948]: *User Processing* PID:173933 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:44:59 instance-1 lfd[173948]: *User Processing* PID:173940 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:45:57 instance-1 lfd[174608]: *User Processing* PID:174587 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:45:58 instance-1 lfd[174608]: *User Processing* PID:174601 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:45:58 instance-1 lfd[174608]: *User Processing* PID:174594 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:46:57 instance-1 lfd[175186]: *User Processing* PID:175176 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:46:58 instance-1 lfd[175186]: *User Processing* PID:175170 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:46:58 instance-1 lfd[175186]: *User Processing* PID:175153 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:46:58 instance-1 lfd[175186]: *User Processing* PID:175157 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:46:59 instance-1 lfd[175186]: *User Processing* PID:175175 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:46:59 instance-1 lfd[175186]: *User Processing* PID:175168 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:47:58 instance-1 lfd[175786]: *User Processing* PID:175758 Kill:0 User:winslow VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:47:58 instance-1 lfd[175786]: *User Processing* PID:175777 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:48:58 instance-1 lfd[176514]: *User Processing* PID:176501 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:48:58 instance-1 lfd[176514]: *User Processing* PID:176508 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:48:58 instance-1 lfd[176514]: *User Processing* PID:176498 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:49:58 instance-1 lfd[177096]: *User Processing* PID:177089 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:49:58 instance-1 lfd[177096]: *User Processing* PID:177086 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:49:58 instance-1 lfd[177096]: *User Processing* PID:177090 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:49:59 instance-1 lfd[177096]: *User Processing* PID:177083 Kill:0 User:mainpoint VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:50:58 instance-1 lfd[177735]: *User Processing* PID:177729 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:51:58 instance-1 lfd[178286]: *User Processing* PID:178274 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:51:58 instance-1 lfd[178286]: *User Processing* PID:178279 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:51:58 instance-1 lfd[178286]: *User Processing* PID:178276 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:52:58 instance-1 lfd[178857]: *User Processing* PID:178831 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:52:59 instance-1 lfd[178857]: *User Processing* PID:178848 Kill:0 User:foster VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:52:59 instance-1 lfd[178857]: *User Processing* PID:178859 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:52:59 instance-1 lfd[178857]: *User Processing* PID:178846 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:53:58 instance-1 lfd[179624]: *User Processing* PID:179616 Kill:0 User:mainpoint VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:53:58 instance-1 lfd[179624]: *User Processing* PID:179621 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:54:58 instance-1 lfd[180255]: *User Processing* PID:180244 Kill:0 User:winslow VM:520(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180237 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180240 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180246 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:54:59 instance-1 lfd[180255]: *User Processing* PID:180239 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:55:00 instance-1 lfd[180255]: *User Processing* PID:180247 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:55:58 instance-1 lfd[180901]: *User Processing* PID:180895 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:55:59 instance-1 lfd[180901]: *User Processing* PID:180883 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:56:59 instance-1 lfd[181470]: *User Processing* PID:181447 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:56:59 instance-1 lfd[181470]: *User Processing* PID:181458 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:56:59 instance-1 lfd[181470]: *User Processing* PID:181465 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:57:00 instance-1 lfd[181470]: *User Processing* PID:181455 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:57:59 instance-1 lfd[182079]: *User Processing* PID:182054 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:57:59 instance-1 lfd[182079]: *User Processing* PID:182066 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:57:59 instance-1 lfd[182079]: *User Processing* PID:182062 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:58:00 instance-1 lfd[182079]: *User Processing* PID:182051 Kill:0 User:mainpoint VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:58:59 instance-1 lfd[182811]: *User Processing* PID:182803 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:58:59 instance-1 lfd[182811]: *User Processing* PID:182798 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:58:59 instance-1 lfd[182811]: *User Processing* PID:182801 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:59:00 instance-1 lfd[182811]: *User Processing* PID:182799 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:59:59 instance-1 lfd[183415]: *User Processing* PID:183402 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:59:59 instance-1 lfd[183415]: *User Processing* PID:183404 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 16:59:59 instance-1 lfd[183415]: *User Processing* PID:183401 Kill:0 User:independent VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:00:00 instance-1 lfd[183415]: *User Processing* PID:183406 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:00:00 instance-1 lfd[183415]: *User Processing* PID:183392 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:00:00 instance-1 lfd[183415]: *User Processing* PID:183411 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:00:01 instance-1 lfd[183415]: *User Processing* PID:183405 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:00:59 instance-1 lfd[184082]: *User Processing* PID:184062 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:00:59 instance-1 lfd[184082]: *User Processing* PID:184061 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:00:59 instance-1 lfd[184082]: *User Processing* PID:184066 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:01:59 instance-1 lfd[184686]: *User Processing* PID:184674 Kill:0 User:independent VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:01:59 instance-1 lfd[184686]: *User Processing* PID:184678 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:02:00 instance-1 lfd[184686]: *User Processing* PID:184663 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:02:00 instance-1 lfd[184686]: *User Processing* PID:184677 Kill:0 User:mainpoint VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:02:59 instance-1 lfd[185293]: *User Processing* PID:185282 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:03:00 instance-1 lfd[185293]: *User Processing* PID:185276 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:03:00 instance-1 lfd[185293]: *User Processing* PID:185280 Kill:0 User:foster VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:03:00 instance-1 lfd[185293]: *User Processing* PID:185269 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:03:59 instance-1 lfd[186030]: *User Processing* PID:186018 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:04:00 instance-1 lfd[186030]: *User Processing* PID:186019 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:04:00 instance-1 lfd[186030]: *User Processing* PID:186021 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:04:01 instance-1 lfd[186030]: *User Processing* PID:185652 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 17 17:04:01 instance-1 lfd[186030]: *User Processing* PID:186013 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:04:59 instance-1 lfd[186652]: *User Processing* PID:186642 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:05:00 instance-1 lfd[186652]: *User Processing* PID:186648 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:05:00 instance-1 lfd[186652]: *User Processing* PID:186595 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 17:07:00 instance-1 lfd[187838]: *User Processing* PID:187828 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:07:00 instance-1 lfd[187838]: *User Processing* PID:187829 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:07:00 instance-1 lfd[187838]: *User Processing* PID:187819 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:07:01 instance-1 lfd[187838]: *User Processing* PID:187814 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:07:01 instance-1 lfd[187838]: *User Processing* PID:187831 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:07:01 instance-1 lfd[187838]: *User Processing* PID:187825 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:08:00 instance-1 lfd[188434]: *User Processing* PID:188419 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:08:00 instance-1 lfd[188434]: *User Processing* PID:188421 Kill:0 User:independent VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:08:00 instance-1 lfd[188434]: *User Processing* PID:188422 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:09:00 instance-1 lfd[189103]: *User Processing* PID:189065 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:09:00 instance-1 lfd[189103]: *User Processing* PID:189080 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:09:01 instance-1 lfd[189103]: *User Processing* PID:189060 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:10:00 instance-1 lfd[189729]: *User Processing* PID:189719 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:10:00 instance-1 lfd[189729]: *User Processing* PID:189712 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:10:01 instance-1 lfd[189729]: *User Processing* PID:189721 Kill:0 User:eyrescom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:10:01 instance-1 lfd[189729]: *User Processing* PID:189720 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:11:00 instance-1 lfd[190341]: *User Processing* PID:190333 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190328 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190331 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190330 Kill:0 User:independent VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:11:01 instance-1 lfd[190341]: *User Processing* PID:190332 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:12:00 instance-1 lfd[190921]: *User Processing* PID:190908 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:12:01 instance-1 lfd[190921]: *User Processing* PID:190910 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:12:01 instance-1 lfd[190921]: *User Processing* PID:190911 Kill:0 User:independent VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:13:00 instance-1 lfd[191508]: *User Processing* PID:191496 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:13:01 instance-1 lfd[191508]: *User Processing* PID:191474 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 17:13:01 instance-1 lfd[191508]: *User Processing* PID:191493 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:13:02 instance-1 lfd[191508]: *User Processing* PID:191497 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:13:02 instance-1 lfd[191508]: *User Processing* PID:191485 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:14:01 instance-1 lfd[192092]: *User Processing* PID:192079 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:14:01 instance-1 lfd[192092]: *User Processing* PID:192076 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:14:01 instance-1 lfd[192092]: *User Processing* PID:192020 Kill:0 User:surveyms VM:582(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 17:14:02 instance-1 lfd[192092]: *User Processing* PID:192084 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:14:02 instance-1 lfd[192092]: *User Processing* PID:192085 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:15:01 instance-1 lfd[192828]: *User Processing* PID:192814 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:15:01 instance-1 lfd[192828]: *User Processing* PID:192818 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:15:01 instance-1 lfd[192828]: *User Processing* PID:192819 Kill:0 User:independent VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:15:02 instance-1 lfd[192828]: *User Processing* PID:192817 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:16:01 instance-1 lfd[193468]: *User Processing* PID:193443 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:16:01 instance-1 lfd[193468]: *User Processing* PID:193437 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:17:01 instance-1 lfd[194028]: *User Processing* PID:194015 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:17:01 instance-1 lfd[194028]: *User Processing* PID:194024 Kill:0 User:independent VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194025 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194008 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194014 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:17:02 instance-1 lfd[194028]: *User Processing* PID:194011 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:17:03 instance-1 lfd[194028]: *User Processing* PID:194023 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:18:01 instance-1 lfd[194619]: *User Processing* PID:194608 Kill:0 User:independent VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:18:01 instance-1 lfd[194619]: *User Processing* PID:194598 Kill:0 User:mainpoint VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:18:02 instance-1 lfd[194619]: *User Processing* PID:194607 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:19:01 instance-1 lfd[195215]: *User Processing* PID:195206 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:19:01 instance-1 lfd[195215]: *User Processing* PID:195208 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:19:02 instance-1 lfd[195215]: *User Processing* PID:195198 Kill:0 User:comphomes VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:20:01 instance-1 lfd[195908]: *User Processing* PID:195898 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:20:02 instance-1 lfd[195908]: *User Processing* PID:195899 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:20:02 instance-1 lfd[195908]: *User Processing* PID:195896 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:21:01 instance-1 lfd[196509]: *User Processing* PID:196493 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:22:01 instance-1 lfd[197064]: *User Processing* PID:197048 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:22:02 instance-1 lfd[197064]: *User Processing* PID:197042 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:22:02 instance-1 lfd[197064]: *User Processing* PID:197046 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:22:02 instance-1 lfd[197064]: *User Processing* PID:197043 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:23:01 instance-1 lfd[197615]: *User Processing* PID:197596 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:23:02 instance-1 lfd[197615]: *User Processing* PID:197600 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:23:02 instance-1 lfd[197615]: *User Processing* PID:197606 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:24:02 instance-1 lfd[198181]: *User Processing* PID:198167 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:24:02 instance-1 lfd[198181]: *User Processing* PID:198168 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:25:02 instance-1 lfd[198854]: *User Processing* PID:198826 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:25:02 instance-1 lfd[198854]: *User Processing* PID:198821 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:25:02 instance-1 lfd[198854]: *User Processing* PID:198820 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:26:02 instance-1 lfd[199425]: *User Processing* PID:199408 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:26:02 instance-1 lfd[199425]: *User Processing* PID:199413 Kill:0 User:comphomes VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:27:02 instance-1 lfd[199957]: *User Processing* PID:199951 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:27:57 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 17:28:02 instance-1 lfd[200526]: *User Processing* PID:200507 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:28:02 instance-1 lfd[200526]: *User Processing* PID:200225 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 17:28:03 instance-1 lfd[200526]: *User Processing* PID:200504 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:28:03 instance-1 lfd[200526]: *User Processing* PID:200506 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:29:02 instance-1 lfd[201085]: *User Processing* PID:201075 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:30:02 instance-1 lfd[201786]: *User Processing* PID:201721 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:30:03 instance-1 lfd[201786]: *User Processing* PID:201765 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:30:03 instance-1 lfd[201786]: *User Processing* PID:201782 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:30:03 instance-1 lfd[201786]: *User Processing* PID:201722 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:31:02 instance-1 lfd[202356]: *User Processing* PID:202348 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:31:02 instance-1 lfd[202356]: *User Processing* PID:202353 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:32:02 instance-1 lfd[202965]: *User Processing* PID:202954 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:32:03 instance-1 lfd[202965]: *User Processing* PID:202930 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:33:03 instance-1 lfd[203537]: *User Processing* PID:203528 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:33:03 instance-1 lfd[203537]: *User Processing* PID:203526 Kill:0 User:comphomes VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:33:03 instance-1 lfd[203537]: *User Processing* PID:203530 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:34:03 instance-1 lfd[204098]: *User Processing* PID:204089 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:34:33 instance-1 lfd[204402]: *LOAD* 5 minute load average is 7.90, threshold is 6 - email sent Mar 17 17:35:03 instance-1 lfd[204821]: *User Processing* PID:204818 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:36:03 instance-1 lfd[205368]: *User Processing* PID:205363 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:36:03 instance-1 lfd[205368]: *User Processing* PID:205359 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205884 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205890 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205891 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:37:03 instance-1 lfd[205898]: *User Processing* PID:205889 Kill:0 User:comphomes VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:37:04 instance-1 lfd[205898]: *User Processing* PID:205885 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:38:03 instance-1 lfd[206463]: *User Processing* PID:206451 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:38:03 instance-1 lfd[206463]: *User Processing* PID:206453 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:38:04 instance-1 lfd[206463]: *User Processing* PID:206450 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:39:03 instance-1 lfd[207016]: *User Processing* PID:207006 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:40:03 instance-1 lfd[207728]: *User Processing* PID:207721 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:41:03 instance-1 lfd[208262]: *User Processing* PID:208234 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:42:03 instance-1 lfd[208786]: *User Processing* PID:208779 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:43:04 instance-1 lfd[209317]: *User Processing* PID:209302 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:43:04 instance-1 lfd[209317]: *User Processing* PID:209303 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:43:04 instance-1 lfd[209316]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 17:43:05 instance-1 lfd[209316]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 17:44:03 instance-1 lfd[209863]: *User Processing* PID:209846 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:44:04 instance-1 lfd[209863]: *User Processing* PID:209858 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:44:04 instance-1 lfd[209863]: *User Processing* PID:209853 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:45:04 instance-1 lfd[210581]: *User Processing* PID:210577 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:45:04 instance-1 lfd[210581]: *User Processing* PID:210569 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:46:04 instance-1 lfd[211127]: *User Processing* PID:211123 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:47:04 instance-1 lfd[211643]: *User Processing* PID:211633 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:47:04 instance-1 lfd[211643]: *User Processing* PID:211638 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:47:04 instance-1 lfd[211643]: *User Processing* PID:211632 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:48:04 instance-1 lfd[212041]: *User Processing* PID:212030 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:49:04 instance-1 lfd[212352]: *User Processing* PID:212345 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:49:04 instance-1 lfd[212352]: *User Processing* PID:212346 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:50:04 instance-1 lfd[212854]: *User Processing* PID:212848 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:52:04 instance-1 lfd[213452]: *User Processing* PID:213449 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:53:04 instance-1 lfd[213731]: *User Processing* PID:213724 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 17:55:04 instance-1 lfd[214565]: *User Processing* PID:214562 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:00:04 instance-1 lfd[216198]: *User Processing* PID:216195 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:02:04 instance-1 lfd[216766]: *User Processing* PID:216763 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:07:04 instance-1 lfd[218334]: *User Processing* PID:218331 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:08:04 instance-1 lfd[218607]: *User Processing* PID:218599 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:09:04 instance-1 lfd[218896]: *User Processing* PID:218890 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:17:04 instance-1 lfd[221628]: *User Processing* PID:221625 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:18:04 instance-1 lfd[221924]: *User Processing* PID:221916 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:25:05 instance-1 lfd[224154]: *User Processing* PID:224121 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:25:26 instance-1 lfd[224366]: (smtpauth) Failed SMTP AUTH login from 181.26.234.170 (AR/Argentina/181-26-234-170.speedy.com.ar): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 17 18:28:00 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 18:30:05 instance-1 lfd[225700]: *User Processing* PID:225697 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:34:05 instance-1 lfd[226993]: *User Processing* PID:226990 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:38:05 instance-1 lfd[228440]: *User Processing* PID:228429 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:39:05 instance-1 lfd[228748]: *User Processing* PID:228741 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:43:05 instance-1 lfd[230074]: *User Processing* PID:230062 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:43:05 instance-1 lfd[230072]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 18:43:05 instance-1 lfd[230072]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 18:47:05 instance-1 lfd[231420]: *User Processing* PID:231413 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:48:05 instance-1 lfd[231714]: *User Processing* PID:231702 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:49:05 instance-1 lfd[232016]: *User Processing* PID:232012 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:50:05 instance-1 lfd[232437]: *User Processing* PID:232431 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:50:05 instance-1 lfd[232437]: *User Processing* PID:232433 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:51:05 instance-1 lfd[232807]: *User Processing* PID:232803 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 18:58:06 instance-1 lfd[235191]: *User Processing* PID:235180 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:08:06 instance-1 lfd[238579]: *User Processing* PID:238569 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:13:06 instance-1 lfd[240372]: *User Processing* PID:240363 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:14:06 instance-1 lfd[240684]: *User Processing* PID:240677 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:17:06 instance-1 lfd[241657]: *User Processing* PID:241653 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:21:06 instance-1 lfd[243135]: *User Processing* PID:243123 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 19:21:06 instance-1 lfd[243135]: *User Processing* PID:243131 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:22:06 instance-1 lfd[243461]: *User Processing* PID:243449 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 19:22:06 instance-1 lfd[243461]: *User Processing* PID:243453 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:28:02 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 19:28:07 instance-1 lfd[245770]: *User Processing* PID:245761 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:30:07 instance-1 lfd[246449]: *User Processing* PID:246442 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:30:07 instance-1 lfd[246449]: *User Processing* PID:246435 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 19:32:07 instance-1 lfd[247140]: *User Processing* PID:247132 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 19:32:07 instance-1 lfd[247140]: *User Processing* PID:247131 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 19:33:07 instance-1 lfd[247616]: *User Processing* PID:247605 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:35:07 instance-1 lfd[248270]: *User Processing* PID:248265 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:37:07 instance-1 lfd[248877]: *User Processing* PID:248870 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:38:07 instance-1 lfd[249335]: *User Processing* PID:249326 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:40:07 instance-1 lfd[249986]: *User Processing* PID:249980 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:42:07 instance-1 lfd[250681]: *User Processing* PID:250674 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:43:07 instance-1 lfd[251165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 19:43:07 instance-1 lfd[251165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 19:44:07 instance-1 lfd[251509]: *User Processing* PID:251504 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:45:07 instance-1 lfd[251878]: *User Processing* PID:251870 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:46:07 instance-1 lfd[252220]: *User Processing* PID:252211 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 19:47:07 instance-1 lfd[252553]: *User Processing* PID:252536 Kill:0 User:surveyms VM:595(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 19:48:07 instance-1 lfd[253074]: *User Processing* PID:253066 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:50:07 instance-1 lfd[253784]: *User Processing* PID:253780 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:54:08 instance-1 lfd[255241]: *User Processing* PID:255237 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 19:58:08 instance-1 lfd[256431]: *User Processing* PID:256423 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:00:08 instance-1 lfd[257143]: *User Processing* PID:257134 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 20:01:08 instance-1 lfd[257437]: *User Processing* PID:257433 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:03:08 instance-1 lfd[258060]: *User Processing* PID:258049 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:08:08 instance-1 lfd[259747]: *User Processing* PID:259737 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:16:08 instance-1 lfd[262435]: *User Processing* PID:262429 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:24:09 instance-1 lfd[265057]: *User Processing* PID:265052 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:24:09 instance-1 lfd[265057]: *User Processing* PID:265051 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:27:09 instance-1 lfd[266041]: *Excessive Processes* User:rcpacom Kill:0 Process Count:12 Mar 17 20:28:04 instance-1 lfd[1726]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 20:30:09 instance-1 lfd[267117]: *User Processing* PID:267112 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:31:09 instance-1 lfd[267513]: *User Processing* PID:267509 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:36:09 instance-1 lfd[269272]: *User Processing* PID:269265 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:37:09 instance-1 lfd[269693]: *User Processing* PID:269689 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:37:09 instance-1 lfd[269693]: *User Processing* PID:269686 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:38:09 instance-1 lfd[270069]: *User Processing* PID:270056 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:39:09 instance-1 lfd[270548]: *User Processing* PID:270541 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:39:09 instance-1 lfd[270548]: *User Processing* PID:270543 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:42:09 instance-1 lfd[271504]: *User Processing* PID:271386 Kill:0 User:bmswinslow VM:694(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:42:09 instance-1 lfd[271504]: *User Processing* PID:271367 Kill:0 User:bmswinslow VM:608(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:43:09 instance-1 lfd[271855]: *User Processing* PID:271841 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:43:09 instance-1 lfd[271855]: *User Processing* PID:271842 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:43:10 instance-1 lfd[271853]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 20:43:10 instance-1 lfd[271853]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 20:49:09 instance-1 lfd[274170]: *User Processing* PID:274163 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:50:09 instance-1 lfd[274538]: *User Processing* PID:274533 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:52:09 instance-1 lfd[275184]: *User Processing* PID:275177 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:52:10 instance-1 lfd[275184]: *User Processing* PID:275145 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 17 20:54:10 instance-1 lfd[276099]: *User Processing* PID:276093 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:55:10 instance-1 lfd[276432]: *User Processing* PID:276397 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 20:55:10 instance-1 lfd[276432]: *User Processing* PID:276426 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 20:57:10 instance-1 lfd[277078]: *User Processing* PID:277053 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 21:00:10 instance-1 lfd[278163]: *User Processing* PID:278158 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:02:10 instance-1 lfd[278769]: *User Processing* PID:278764 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:04:10 instance-1 lfd[279526]: *User Processing* PID:279522 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:05:10 instance-1 lfd[279855]: *User Processing* PID:279851 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:11:10 instance-1 lfd[281815]: *User Processing* PID:281810 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:11:10 instance-1 lfd[281815]: *User Processing* PID:281734 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:12:10 instance-1 lfd[282133]: *User Processing* PID:282017 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:13:10 instance-1 lfd[282448]: *User Processing* PID:282359 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:14:10 instance-1 lfd[282878]: *User Processing* PID:282677 Kill:0 User:bmswinslow VM:723(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:14:10 instance-1 lfd[282878]: *User Processing* PID:282874 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:15:10 instance-1 lfd[283241]: *User Processing* PID:283224 Kill:0 User:bmswinslow VM:654(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:15:10 instance-1 lfd[283241]: *User Processing* PID:283231 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:16:10 instance-1 lfd[283560]: *User Processing* PID:283554 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:16:10 instance-1 lfd[283560]: *User Processing* PID:283550 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 21:21:11 instance-1 lfd[285238]: *User Processing* PID:285234 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:24:11 instance-1 lfd[286064]: *User Processing* PID:286059 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:26:04 instance-1 lfd[1726]: Main Process: TERM Mar 17 21:26:04 instance-1 lfd[1726]: daemon stopped Mar 17 21:30:34 instance-1 lfd[1350]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 17 21:30:34 instance-1 lfd[1350]: LF_APACHE_ERRPORT: Set to [2] Mar 17 21:30:35 instance-1 lfd[1350]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 17 21:30:35 instance-1 lfd[1350]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 17 21:30:35 instance-1 lfd[1350]: CSF Tracking... Mar 17 21:30:35 instance-1 lfd[1350]: iptables appears to have been flushed - running *csf startup*... Mar 17 21:30:42 instance-1 lfd[1350]: csf startup completed Mar 17 21:30:42 instance-1 lfd[1350]: IPv6 Enabled... Mar 17 21:30:42 instance-1 lfd[1350]: LOAD Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 17 21:30:42 instance-1 lfd[1350]: Country Code Lookups... Mar 17 21:30:42 instance-1 lfd[1350]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 21:30:42 instance-1 lfd[1350]: System Integrity Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Exploit Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Directory Watching... Mar 17 21:30:42 instance-1 lfd[1350]: Email Queue Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: ModSecurity IP D/B Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Email Relay Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Temp to Perm Block Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: System Statistics... Mar 17 21:30:42 instance-1 lfd[1350]: Process Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Account Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: SSH Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Webmin Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: SU Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Console Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: WHM Tracking... Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/exim_mainlog... Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/maillog... Mar 17 21:30:42 instance-1 lfd[1350]: Watching /usr/local/cpanel/logs/login_log... Mar 17 21:30:42 instance-1 lfd[1350]: Watching /etc/apache2/logs/error_log... Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/customlog... Mar 17 21:30:42 instance-1 lfd[1350]: Watching /var/log/secure... Mar 17 21:30:42 instance-1 lfd[1350]: Watching /usr/local/cpanel/logs/access_log... Mar 17 21:30:43 instance-1 lfd[1350]: Watching /var/log/messages... Mar 17 21:31:43 instance-1 lfd[2415]: *User Processing* PID:2411 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:31:43 instance-1 lfd[2415]: *User Processing* PID:2398 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:31:53 instance-1 lfd[2523]: *SU login* from account rgv250(uid=0) to account root: Successful login Mar 17 21:32:43 instance-1 lfd[2779]: *User Processing* PID:2774 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:32:43 instance-1 lfd[2779]: *User Processing* PID:2733 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:36:17 instance-1 lfd[3651]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 21:36:17 instance-1 lfd[3651]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 21:38:43 instance-1 lfd[4500]: *User Processing* PID:4487 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:41:43 instance-1 lfd[5458]: *User Processing* PID:5424 Kill:0 User:bmswinslow VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 21:45:43 instance-1 lfd[6468]: *User Processing* PID:6450 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 21:47:43 instance-1 lfd[7102]: *User Processing* PID:7093 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 17 22:01:47 instance-1 lfd[12858]: *User Processing* PID:12854 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 22:04:48 instance-1 lfd[13897]: *User Processing* PID:13893 Kill:0 User:mainpoint VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 22:06:48 instance-1 lfd[14687]: *User Processing* PID:14683 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 22:06:48 instance-1 lfd[14687]: *User Processing* PID:14677 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 22:09:48 instance-1 lfd[15460]: *User Processing* PID:15453 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 22:30:43 instance-1 lfd[1350]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 22:40:48 instance-1 lfd[24359]: *User Processing* PID:24319 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 22:40:49 instance-1 lfd[24356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 22:40:49 instance-1 lfd[24356]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 22:59:49 instance-1 lfd[30004]: *User Processing* PID:29999 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:05:49 instance-1 lfd[31908]: *User Processing* PID:31899 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:07:49 instance-1 lfd[32643]: *User Processing* PID:32639 Kill:0 User:mainpoint VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:08:49 instance-1 lfd[32950]: *User Processing* PID:32946 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:11:49 instance-1 lfd[34144]: *User Processing* PID:34138 Kill:0 User:mainpoint VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:12:49 instance-1 lfd[34687]: *User Processing* PID:34683 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:17:49 instance-1 lfd[37875]: *User Processing* PID:37871 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:19:49 instance-1 lfd[39249]: *Excessive Processes* User:nativesp Kill:0 Process Count:12 Mar 17 23:22:50 instance-1 lfd[40393]: *User Processing* PID:40386 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 17 23:30:45 instance-1 lfd[1350]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 17 23:36:50 instance-1 lfd[44355]: *User Processing* PID:44351 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:40:50 instance-1 lfd[45542]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 17 23:40:51 instance-1 lfd[45542]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 17 23:46:42 instance-1 lfd[47187]: (smtpauth) Failed SMTP AUTH login from 141.98.11.11 (axon-stall.riddlecamera.net): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 17 23:50:51 instance-1 lfd[48462]: *User Processing* PID:48454 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 17 23:50:51 instance-1 lfd[48462]: *User Processing* PID:48452 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 00:00:02 instance-1 lfd[1350]: Main Process: TERM Mar 18 00:00:02 instance-1 lfd[1350]: daemon stopped Mar 18 00:00:02 instance-1 lfd[51177]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 18 00:00:02 instance-1 lfd[51177]: LF_APACHE_ERRPORT: Set to [2] Mar 18 00:00:03 instance-1 lfd[51177]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 18 00:00:03 instance-1 lfd[51177]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 18 00:00:03 instance-1 lfd[51177]: CSF Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: IPv6 Enabled... Mar 18 00:00:03 instance-1 lfd[51177]: LOAD Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 18 00:00:03 instance-1 lfd[51177]: Country Code Lookups... Mar 18 00:00:03 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 00:00:03 instance-1 lfd[51177]: System Integrity Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Exploit Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Directory Watching... Mar 18 00:00:03 instance-1 lfd[51177]: Email Queue Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: ModSecurity IP D/B Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Email Relay Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Temp to Perm Block Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: System Statistics... Mar 18 00:00:03 instance-1 lfd[51177]: Process Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Account Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: SSH Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Webmin Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: SU Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Console Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: WHM Tracking... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/messages... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/customlog... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/secure... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/maillog... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /usr/local/cpanel/logs/login_log... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /usr/local/cpanel/logs/access_log... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /var/log/exim_mainlog... Mar 18 00:00:03 instance-1 lfd[51177]: Watching /etc/apache2/logs/error_log... Mar 18 00:05:03 instance-1 lfd[52644]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 00:05:03 instance-1 lfd[52644]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 00:14:03 instance-1 lfd[55203]: *User Processing* PID:55195 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 00:43:04 instance-1 lfd[63585]: *User Processing* PID:63581 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 01:00:04 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 01:05:05 instance-1 lfd[70439]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 01:05:05 instance-1 lfd[70439]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 01:19:05 instance-1 lfd[74512]: *User Processing* PID:74508 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 01:26:05 instance-1 lfd[78204]: *User Processing* PID:78200 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 01:26:05 instance-1 lfd[78204]: *User Processing* PID:78195 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 01:38:05 instance-1 lfd[81690]: *User Processing* PID:81680 Kill:0 User:newswinslow VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 01:56:06 instance-1 lfd[86871]: *User Processing* PID:86864 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 02:00:06 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 02:05:07 instance-1 lfd[89569]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 02:05:07 instance-1 lfd[89569]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 02:32:07 instance-1 lfd[97348]: *User Processing* PID:97344 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 02:35:07 instance-1 lfd[98211]: *User Processing* PID:97995 Kill:0 User:newswinslow VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 02:49:08 instance-1 lfd[102088]: *User Processing* PID:102079 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 02:51:08 instance-1 lfd[102626]: *User Processing* PID:102619 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 02:51:08 instance-1 lfd[102626]: *User Processing* PID:102617 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 02:54:08 instance-1 lfd[103787]: *User Processing* PID:103759 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 02:59:08 instance-1 lfd[105451]: *User Processing* PID:105442 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:00:08 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 03:04:09 instance-1 lfd[107203]: *Excessive Processes* User:tuscomau Kill:0 Process Count:27 Mar 18 03:04:09 instance-1 lfd[107203]: *User Processing* PID:107120 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:10 instance-1 lfd[107203]: *User Processing* PID:107182 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:10 instance-1 lfd[107203]: *User Processing* PID:107132 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:10 instance-1 lfd[107203]: *User Processing* PID:107147 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:11 instance-1 lfd[107203]: *User Processing* PID:107181 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:11 instance-1 lfd[107203]: *User Processing* PID:107153 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107186 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107185 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107135 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107179 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107178 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107180 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107129 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:12 instance-1 lfd[107203]: *User Processing* PID:107184 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107130 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107128 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107175 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107151 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107152 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107155 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107183 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107156 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107133 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107187 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107150 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:13 instance-1 lfd[107203]: *User Processing* PID:107149 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:04:14 instance-1 lfd[107203]: *User Processing* PID:107154 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:05:22 instance-1 lfd[107716]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 03:05:22 instance-1 lfd[107716]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 03:21:09 instance-1 lfd[112232]: *User Processing* PID:112226 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:22:09 instance-1 lfd[112677]: *User Processing* PID:112673 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:24:09 instance-1 lfd[113332]: *User Processing* PID:113328 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:25:09 instance-1 lfd[113699]: *User Processing* PID:113690 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:26:09 instance-1 lfd[114027]: *User Processing* PID:114020 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:28:09 instance-1 lfd[114765]: *User Processing* PID:114758 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:30:09 instance-1 lfd[115450]: *User Processing* PID:115433 Kill:0 User:yvegroup VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:30:09 instance-1 lfd[115450]: *User Processing* PID:115437 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:31:09 instance-1 lfd[115764]: *User Processing* PID:115757 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:33:09 instance-1 lfd[116542]: *User Processing* PID:116366 Kill:0 User:bmswinslow VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:35:09 instance-1 lfd[117139]: *User Processing* PID:117122 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:36:09 instance-1 lfd[117444]: *User Processing* PID:117440 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:37:09 instance-1 lfd[117860]: *User Processing* PID:117856 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:39:10 instance-1 lfd[118511]: *User Processing* PID:118506 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:39:10 instance-1 lfd[118511]: *User Processing* PID:118507 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:49:42 instance-1 lfd[123321]: (smtpauth) Failed SMTP AUTH login from 165.154.252.62 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 18 03:53:10 instance-1 lfd[126492]: *User Processing* PID:126473 Kill:0 User:mainpoint VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html theme list --fields=name,status,version,title,description,update_version --format=json --quiet --skip-plugins=false --skip-themes=false Mar 18 03:53:10 instance-1 lfd[126492]: *User Processing* PID:126340 Kill:0 User:geneticson VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 03:55:10 instance-1 lfd[128268]: *User Processing* PID:128260 Kill:0 User:bmswinslow VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html theme list --fields=name,status,version,title,description,update_version --format=json --quiet --skip-plugins=false --skip-themes=false Mar 18 03:56:10 instance-1 lfd[129077]: *User Processing* PID:129061 Kill:0 User:comphomes VM:651(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/comphomes/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false Mar 18 03:58:10 instance-1 lfd[131304]: *User Processing* PID:131300 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 04:00:10 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 04:10:11 instance-1 lfd[134948]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 04:10:11 instance-1 lfd[134948]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 04:31:11 instance-1 lfd[141294]: *User Processing* PID:141290 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 04:32:11 instance-1 lfd[141610]: *User Processing* PID:141606 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 04:43:12 instance-1 lfd[145156]: *User Processing* PID:145152 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 04:45:12 instance-1 lfd[145766]: *User Processing* PID:145753 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 04:47:38 instance-1 lfd[146479]: (smtpauth) Failed SMTP AUTH login from 141.98.11.57 (srv-141-98-11-57.serveroffer.net): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 18 05:00:12 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 05:05:12 instance-1 lfd[152063]: *User Processing* PID:152054 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:06:12 instance-1 lfd[152336]: *User Processing* PID:152332 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:08:12 instance-1 lfd[152920]: *User Processing* PID:152916 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:09:12 instance-1 lfd[153387]: *User Processing* PID:153382 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:10:12 instance-1 lfd[153774]: *User Processing* PID:153765 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:10:13 instance-1 lfd[153771]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 05:10:13 instance-1 lfd[153771]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 05:11:12 instance-1 lfd[154103]: *User Processing* PID:154099 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:12:12 instance-1 lfd[154424]: *User Processing* PID:154420 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:12:12 instance-1 lfd[154424]: *User Processing* PID:154416 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:14:12 instance-1 lfd[155232]: *User Processing* PID:155228 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:20:13 instance-1 lfd[157518]: *User Processing* PID:157508 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:22:13 instance-1 lfd[158156]: *User Processing* PID:158152 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:28:13 instance-1 lfd[160215]: *User Processing* PID:160211 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:30:13 instance-1 lfd[161019]: *User Processing* PID:161011 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:31:13 instance-1 lfd[161375]: *User Processing* PID:161368 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:32:13 instance-1 lfd[161813]: *User Processing* PID:161806 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:33:13 instance-1 lfd[162143]: *User Processing* PID:162135 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:34:13 instance-1 lfd[162481]: *User Processing* PID:162469 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 05:35:13 instance-1 lfd[163002]: *User Processing* PID:162992 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:36:13 instance-1 lfd[163375]: *User Processing* PID:163371 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:36:13 instance-1 lfd[163375]: *User Processing* PID:163370 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:37:13 instance-1 lfd[163749]: *User Processing* PID:163694 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 05:37:13 instance-1 lfd[163749]: *User Processing* PID:163740 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:37:13 instance-1 lfd[163749]: *User Processing* PID:163741 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:39:13 instance-1 lfd[164529]: *User Processing* PID:164525 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:41:13 instance-1 lfd[165440]: *User Processing* PID:165436 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:43:13 instance-1 lfd[166163]: *User Processing* PID:166158 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:43:13 instance-1 lfd[166163]: *User Processing* PID:166159 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:44:13 instance-1 lfd[166553]: *User Processing* PID:166545 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:45:13 instance-1 lfd[167114]: *User Processing* PID:167103 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:46:13 instance-1 lfd[167495]: *User Processing* PID:167488 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:47:13 instance-1 lfd[167878]: *User Processing* PID:167874 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:48:13 instance-1 lfd[168227]: *User Processing* PID:168223 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:49:13 instance-1 lfd[168545]: *User Processing* PID:168541 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:50:13 instance-1 lfd[169037]: *User Processing* PID:169028 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:51:13 instance-1 lfd[169363]: *User Processing* PID:169359 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:52:13 instance-1 lfd[169714]: *User Processing* PID:169710 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:53:13 instance-1 lfd[170081]: *User Processing* PID:170077 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:54:19 instance-1 lfd[170541]: (pop3d) Failed POP3 login from 203.189.158.246 (KH/Cambodia/headquarter.online.com.kh): 10 in the last 3600 secs - *Blocked in csf* [LF_POP3D] Mar 18 05:57:14 instance-1 lfd[171675]: *User Processing* PID:171669 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:58:14 instance-1 lfd[171995]: *User Processing* PID:171989 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 05:59:14 instance-1 lfd[172322]: *User Processing* PID:172316 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:00:14 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 06:00:14 instance-1 lfd[172885]: *User Processing* PID:172870 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:01:14 instance-1 lfd[173252]: *User Processing* PID:173241 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:01:14 instance-1 lfd[173252]: *User Processing* PID:173237 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:01:14 instance-1 lfd[173252]: *User Processing* PID:173239 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:02:14 instance-1 lfd[173613]: *User Processing* PID:173603 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:05:14 instance-1 lfd[174785]: *User Processing* PID:174772 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:06:14 instance-1 lfd[175124]: *User Processing* PID:175115 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:06:14 instance-1 lfd[175124]: *User Processing* PID:175120 Kill:0 User:comphomes VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:07:14 instance-1 lfd[175455]: *User Processing* PID:175443 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:10:14 instance-1 lfd[176591]: *User Processing* PID:176577 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:10:14 instance-1 lfd[176588]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 06:10:14 instance-1 lfd[176588]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 06:12:14 instance-1 lfd[177233]: *User Processing* PID:177225 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:13:14 instance-1 lfd[177550]: *User Processing* PID:177546 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:14:14 instance-1 lfd[177865]: *User Processing* PID:177854 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:15:14 instance-1 lfd[178411]: *User Processing* PID:178401 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:16:14 instance-1 lfd[178741]: *User Processing* PID:178732 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:17:14 instance-1 lfd[179080]: *User Processing* PID:179076 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:18:14 instance-1 lfd[179453]: *User Processing* PID:179445 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:19:14 instance-1 lfd[179789]: *User Processing* PID:179780 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:30:15 instance-1 lfd[183994]: *User Processing* PID:183983 Kill:0 User:comphomes VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:33:15 instance-1 lfd[184978]: *User Processing* PID:184974 Kill:0 User:yvegroup VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:34:15 instance-1 lfd[185327]: *User Processing* PID:185323 Kill:0 User:yvegroup VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:36:15 instance-1 lfd[186162]: *User Processing* PID:186156 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:38:15 instance-1 lfd[186808]: *User Processing* PID:186801 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:41:15 instance-1 lfd[187802]: *User Processing* PID:187798 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 06:49:15 instance-1 lfd[190118]: *User Processing* PID:190112 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:00:15 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 07:07:15 instance-1 lfd[195887]: *User Processing* PID:195809 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 07:10:16 instance-1 lfd[196746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 07:10:16 instance-1 lfd[196746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 07:11:16 instance-1 lfd[197183]: *User Processing* PID:197153 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 07:16:16 instance-1 lfd[198688]: *User Processing* PID:198684 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:16:16 instance-1 lfd[198688]: *User Processing* PID:198682 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:16:16 instance-1 lfd[198688]: *User Processing* PID:198683 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:28:17 instance-1 lfd[202320]: *User Processing* PID:202283 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:28:17 instance-1 lfd[202320]: *User Processing* PID:202303 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:28:18 instance-1 lfd[202320]: *User Processing* PID:202306 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:28:18 instance-1 lfd[202320]: *User Processing* PID:202287 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:28:19 instance-1 lfd[202320]: *User Processing* PID:202280 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:29:16 instance-1 lfd[202641]: *User Processing* PID:202637 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 07:36:16 instance-1 lfd[204888]: *User Processing* PID:204877 Kill:0 User:newswinslow VM:552(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 07:38:16 instance-1 lfd[205437]: *User Processing* PID:205433 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 07:47:17 instance-1 lfd[208268]: *User Processing* PID:208258 Kill:0 User:surveyms VM:547(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 07:52:17 instance-1 lfd[209834]: *User Processing* PID:209825 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:00:17 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 08:10:17 instance-1 lfd[215525]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 08:10:18 instance-1 lfd[215525]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 08:18:17 instance-1 lfd[218054]: *User Processing* PID:218050 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:24:18 instance-1 lfd[219804]: *User Processing* PID:219800 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:28:18 instance-1 lfd[221019]: *User Processing* PID:221012 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:29:18 instance-1 lfd[221591]: *User Processing* PID:221556 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:30:19 instance-1 lfd[222281]: *User Processing* PID:222271 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:30:19 instance-1 lfd[222281]: *User Processing* PID:222242 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:30:20 instance-1 lfd[222281]: *User Processing* PID:222248 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:30:20 instance-1 lfd[222281]: *User Processing* PID:222009 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 08:30:21 instance-1 lfd[222281]: *User Processing* PID:222259 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:30:21 instance-1 lfd[222281]: *User Processing* PID:222269 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:30:22 instance-1 lfd[222281]: *User Processing* PID:222256 Kill:0 User:mainpoint VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:30:22 instance-1 lfd[222281]: *User Processing* PID:222253 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:31:18 instance-1 lfd[222974]: *LOAD* 5 minute load average is 6.57, threshold is 6 - email sent Mar 18 08:32:19 instance-1 lfd[223772]: *User Processing* PID:223743 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:32:19 instance-1 lfd[223772]: *User Processing* PID:223745 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:32:19 instance-1 lfd[223772]: *User Processing* PID:223762 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:33:18 instance-1 lfd[224449]: *User Processing* PID:224429 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:33:19 instance-1 lfd[224449]: *User Processing* PID:224439 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:34:18 instance-1 lfd[225099]: *User Processing* PID:225088 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:35:19 instance-1 lfd[225801]: *User Processing* PID:225763 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:35:19 instance-1 lfd[225801]: *User Processing* PID:225782 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:35:19 instance-1 lfd[225801]: *User Processing* PID:225776 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:36:19 instance-1 lfd[226452]: *User Processing* PID:226441 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:36:19 instance-1 lfd[226452]: *User Processing* PID:226436 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:36:20 instance-1 lfd[226452]: *User Processing* PID:226440 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:36:20 instance-1 lfd[226452]: *User Processing* PID:226438 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:36:21 instance-1 lfd[226452]: *User Processing* PID:226392 Kill:0 User:tuscomau VM:639(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:37:19 instance-1 lfd[227249]: *User Processing* PID:227235 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:37:19 instance-1 lfd[227249]: *User Processing* PID:227230 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:38:19 instance-1 lfd[227887]: *User Processing* PID:227857 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:38:19 instance-1 lfd[227887]: *User Processing* PID:227876 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:38:20 instance-1 lfd[227887]: *User Processing* PID:227853 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:39:19 instance-1 lfd[228565]: *User Processing* PID:228553 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:39:20 instance-1 lfd[228565]: *User Processing* PID:228529 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:40:20 instance-1 lfd[229273]: *User Processing* PID:229244 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:40:20 instance-1 lfd[229273]: *User Processing* PID:229257 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:40:20 instance-1 lfd[229273]: *User Processing* PID:229250 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:40:21 instance-1 lfd[229273]: *User Processing* PID:229245 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:41:19 instance-1 lfd[229950]: *User Processing* PID:229939 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:41:20 instance-1 lfd[229950]: *User Processing* PID:229940 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:41:20 instance-1 lfd[229950]: *User Processing* PID:229931 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:41:21 instance-1 lfd[229950]: *User Processing* PID:229930 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:42:20 instance-1 lfd[230658]: *User Processing* PID:230568 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:42:20 instance-1 lfd[230658]: *User Processing* PID:230630 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:42:20 instance-1 lfd[230658]: *User Processing* PID:230624 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:42:21 instance-1 lfd[230658]: *User Processing* PID:230627 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:42:21 instance-1 lfd[230658]: *User Processing* PID:230638 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:42:21 instance-1 lfd[230658]: *User Processing* PID:230609 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:42:22 instance-1 lfd[230658]: *User Processing* PID:230635 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:43:20 instance-1 lfd[231418]: *User Processing* PID:231413 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:43:20 instance-1 lfd[231418]: *User Processing* PID:231411 Kill:0 User:comphomes VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:43:21 instance-1 lfd[231418]: *User Processing* PID:231341 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:43:21 instance-1 lfd[231418]: *User Processing* PID:231410 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:44:20 instance-1 lfd[232087]: *User Processing* PID:232049 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:44:20 instance-1 lfd[232087]: *User Processing* PID:232076 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:44:20 instance-1 lfd[232087]: *User Processing* PID:232078 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:44:21 instance-1 lfd[232087]: *User Processing* PID:232056 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:44:22 instance-1 lfd[232087]: *User Processing* PID:232077 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:44:22 instance-1 lfd[232087]: *User Processing* PID:232069 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:45:20 instance-1 lfd[232830]: *User Processing* PID:232789 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:45:20 instance-1 lfd[232830]: *User Processing* PID:232805 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:46:20 instance-1 lfd[233482]: *User Processing* PID:233474 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:46:21 instance-1 lfd[233482]: *User Processing* PID:233459 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:47:20 instance-1 lfd[234171]: *User Processing* PID:234154 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:47:20 instance-1 lfd[234171]: *User Processing* PID:234146 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:48:20 instance-1 lfd[234926]: *User Processing* PID:234909 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:48:21 instance-1 lfd[234926]: *User Processing* PID:234913 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:48:21 instance-1 lfd[234926]: *User Processing* PID:234915 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:48:21 instance-1 lfd[234926]: *User Processing* PID:234907 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:49:21 instance-1 lfd[235603]: *User Processing* PID:235577 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:49:21 instance-1 lfd[235603]: *User Processing* PID:235569 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:49:21 instance-1 lfd[235603]: *User Processing* PID:235582 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:50:21 instance-1 lfd[236294]: *User Processing* PID:236269 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:50:21 instance-1 lfd[236294]: *User Processing* PID:236249 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:51:20 instance-1 lfd[236940]: *User Processing* PID:236927 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:51:21 instance-1 lfd[236940]: *User Processing* PID:236929 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:52:24 instance-1 lfd[239400]: *User Processing* PID:237088 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:52:26 instance-1 lfd[239400]: *User Processing* PID:239427 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:52:28 instance-1 lfd[239400]: *User Processing* PID:239336 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:52:29 instance-1 lfd[239400]: *User Processing* PID:239116 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:52:31 instance-1 lfd[239400]: *User Processing* PID:239332 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:52:33 instance-1 lfd[239400]: *User Processing* PID:238887 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:52:34 instance-1 lfd[239400]: *User Processing* PID:239383 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:52:36 instance-1 lfd[239400]: *User Processing* PID:239344 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:53:22 instance-1 lfd[242747]: *Suspicious Process* PID:239141 PPID:1697 User:turnkey Uptime:66 secs EXE:/usr/local/cpanel/3rdparty/php/83/sbin/php-fpm CMD:php-fpm: pool user_turnkey Mar 18 08:53:29 instance-1 lfd[242747]: *Excessive Processes* User:rgv Kill:0 Process Count:30 Mar 18 08:53:34 instance-1 lfd[242747]: *User Processing* PID:242272 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:53:37 instance-1 lfd[242747]: *User Processing* PID:241624 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 08:53:40 instance-1 lfd[242747]: *User Processing* PID:242377 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:53:46 instance-1 lfd[242747]: *User Processing* PID:242357 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:53:53 instance-1 lfd[242747]: *User Processing* PID:241772 Kill:0 User:surveyms VM:592(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 08:53:57 instance-1 lfd[242747]: *User Processing* PID:242373 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:53:59 instance-1 lfd[242747]: *User Processing* PID:242102 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 08:54:01 instance-1 lfd[242747]: *User Processing* PID:242316 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:03 instance-1 lfd[242747]: *User Processing* PID:242302 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:23 instance-1 lfd[243522]: *Suspicious Process* PID:241697 PPID:237212 User:nobody Uptime:83 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:28 instance-1 lfd[243522]: *Suspicious Process* PID:241755 PPID:237213 User:nobody Uptime:82 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:29 instance-1 lfd[243522]: *Suspicious Process* PID:241835 PPID:229190 User:nobody Uptime:81 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:30 instance-1 lfd[243522]: *Suspicious Process* PID:241858 PPID:237211 User:nobody Uptime:80 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:32 instance-1 lfd[243522]: *Suspicious Process* PID:242030 PPID:237453 User:nobody Uptime:77 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:34 instance-1 lfd[243522]: *Suspicious Process* PID:242066 PPID:237171 User:nobody Uptime:77 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:34 instance-1 lfd[243522]: *Suspicious Process* PID:242193 PPID:237141 User:nobody Uptime:75 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:34 instance-1 lfd[243522]: *Suspicious Process* PID:242308 PPID:237194 User:nobody Uptime:73 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:35 instance-1 lfd[243522]: *Suspicious Process* PID:242346 PPID:237193 User:nobody Uptime:72 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:36 instance-1 lfd[243522]: *Suspicious Process* PID:242406 PPID:237189 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:38 instance-1 lfd[243522]: *Suspicious Process* PID:242411 PPID:237172 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:39 instance-1 lfd[243522]: *Suspicious Process* PID:242412 PPID:237938 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:41 instance-1 lfd[243522]: *Suspicious Process* PID:242428 PPID:229808 User:nobody Uptime:71 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:42 instance-1 lfd[243522]: *Suspicious Process* PID:242463 PPID:237208 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:43 instance-1 lfd[243522]: *Suspicious Process* PID:242470 PPID:237209 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:44 instance-1 lfd[243522]: *Suspicious Process* PID:242484 PPID:233436 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:46 instance-1 lfd[243522]: *Suspicious Process* PID:242488 PPID:237166 User:nobody Uptime:70 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:46 instance-1 lfd[243522]: *Suspicious Process* PID:242497 PPID:237164 User:nobody Uptime:69 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:47 instance-1 lfd[243522]: *Suspicious Process* PID:242527 PPID:236819 User:nobody Uptime:69 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:48 instance-1 lfd[243522]: *Suspicious Process* PID:242533 PPID:237145 User:nobody Uptime:68 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:49 instance-1 lfd[243522]: *Suspicious Process* PID:242564 PPID:237162 User:nobody Uptime:67 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:49 instance-1 lfd[243522]: *Suspicious Process* PID:242635 PPID:237165 User:nobody Uptime:65 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:50 instance-1 lfd[243522]: *Suspicious Process* PID:242707 PPID:237522 User:nobody Uptime:63 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:50 instance-1 lfd[243522]: *Suspicious Process* PID:242720 PPID:237202 User:nobody Uptime:63 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:51 instance-1 lfd[243522]: *Suspicious Process* PID:242734 PPID:228767 User:nobody Uptime:62 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:51 instance-1 lfd[243522]: *Suspicious Process* PID:242735 PPID:219485 User:nobody Uptime:62 secs EXE:/usr/local/cpanel/cgi-priv/get_local.cgi CMD:/usr/local/cpanel/cgi-priv/get_local.cgi Mar 18 08:54:52 instance-1 lfd[243522]: *Excessive Processes* User:nativesp Kill:0 Process Count:30 Mar 18 08:54:53 instance-1 lfd[243522]: *User Processing* PID:242723 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:53 instance-1 lfd[243522]: *User Processing* PID:242928 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:54 instance-1 lfd[243522]: *User Processing* PID:243306 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:55 instance-1 lfd[243522]: *User Processing* PID:243515 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:54:56 instance-1 lfd[243522]: *User Processing* PID:242674 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:58 instance-1 lfd[243522]: *User Processing* PID:242689 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:59 instance-1 lfd[243522]: *User Processing* PID:243496 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:54:59 instance-1 lfd[243522]: *User Processing* PID:242836 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:00 instance-1 lfd[243522]: *User Processing* PID:242958 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:55:01 instance-1 lfd[243522]: *User Processing* PID:242769 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:55:02 instance-1 lfd[243522]: *User Processing* PID:243494 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:03 instance-1 lfd[243522]: *User Processing* PID:242972 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:55:04 instance-1 lfd[243522]: *User Processing* PID:242684 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:06 instance-1 lfd[243522]: *User Processing* PID:242751 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:06 instance-1 lfd[243522]: *User Processing* PID:242947 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 08:55:07 instance-1 lfd[243522]: *User Processing* PID:243516 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:07 instance-1 lfd[243522]: *User Processing* PID:243497 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:08 instance-1 lfd[243522]: *User Processing* PID:242923 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:09 instance-1 lfd[243522]: *User Processing* PID:243495 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:09 instance-1 lfd[243522]: *User Processing* PID:242677 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:28 instance-1 lfd[244037]: *User Processing* PID:243754 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:28 instance-1 lfd[244037]: *User Processing* PID:243686 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:29 instance-1 lfd[244037]: *User Processing* PID:243756 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:29 instance-1 lfd[244037]: *User Processing* PID:243755 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:30 instance-1 lfd[244037]: *User Processing* PID:243886 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:31 instance-1 lfd[244037]: *User Processing* PID:243633 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:31 instance-1 lfd[244037]: *User Processing* PID:244029 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 08:55:32 instance-1 lfd[244037]: *User Processing* PID:242387 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 08:56:03 instance-1 lfd[244000]: Directory Watching terminated after 40 seconds Mar 18 08:56:03 instance-1 lfd[244000]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds Mar 18 08:58:28 instance-1 lfd[245158]: *User Processing* PID:245155 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:00:18 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 09:00:28 instance-1 lfd[245821]: *User Processing* PID:245782 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 09:01:28 instance-1 lfd[246103]: *User Processing* PID:246057 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:03:28 instance-1 lfd[246813]: *User Processing* PID:246701 Kill:0 User:newswinslow VM:550(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 09:06:28 instance-1 lfd[247727]: *User Processing* PID:247572 Kill:0 User:nexpavecau VM:524(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 18 09:10:55 instance-1 lfd[248966]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 09:10:55 instance-1 lfd[248966]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 09:11:28 instance-1 lfd[249257]: *User Processing* PID:249236 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:14:29 instance-1 lfd[250199]: *User Processing* PID:250195 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:18:29 instance-1 lfd[251462]: *User Processing* PID:251459 Kill:0 User:comphomes VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:20:29 instance-1 lfd[252055]: *User Processing* PID:252025 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:20:29 instance-1 lfd[252055]: *User Processing* PID:251999 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:24:29 instance-1 lfd[253337]: *User Processing* PID:253333 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:34:29 instance-1 lfd[256857]: *User Processing* PID:256854 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 09:34:29 instance-1 lfd[256857]: *User Processing* PID:256779 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 09:44:30 instance-1 lfd[260312]: *User Processing* PID:260300 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 09:48:30 instance-1 lfd[261557]: *User Processing* PID:261506 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 09:48:30 instance-1 lfd[261557]: *User Processing* PID:261510 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 10:00:20 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 10:07:30 instance-1 lfd[268334]: *User Processing* PID:268278 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 10:10:31 instance-1 lfd[269334]: *User Processing* PID:269331 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:11:31 instance-1 lfd[269617]: *User Processing* PID:269593 Kill:0 User:winslowgroupweb VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:19:31 instance-1 lfd[272478]: *User Processing* PID:272458 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 10:20:31 instance-1 lfd[272878]: *User Processing* PID:272832 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:21:31 instance-1 lfd[273163]: *User Processing* PID:273155 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:22:31 instance-1 lfd[273471]: *User Processing* PID:273465 Kill:0 User:winslowgroupweb VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:24:31 instance-1 lfd[274185]: *User Processing* PID:274127 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:24:31 instance-1 lfd[274185]: *User Processing* PID:274176 Kill:0 User:comphomes VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:25:26 instance-1 lfd[274532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 10:25:26 instance-1 lfd[274532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 10:25:31 instance-1 lfd[274581]: *User Processing* PID:274522 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:27:31 instance-1 lfd[275219]: *User Processing* PID:275211 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:28:31 instance-1 lfd[275498]: *User Processing* PID:275490 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:29:31 instance-1 lfd[275924]: *User Processing* PID:275917 Kill:0 User:comphomes VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:31:31 instance-1 lfd[276561]: *User Processing* PID:276484 Kill:0 User:winslow VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 18 10:33:31 instance-1 lfd[277182]: *User Processing* PID:277178 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:34:31 instance-1 lfd[277632]: *User Processing* PID:277629 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:34:31 instance-1 lfd[277632]: *User Processing* PID:277625 Kill:0 User:winslowgroupweb VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 10:45:32 instance-1 lfd[281129]: *User Processing* PID:281120 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 11:00:22 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 11:21:33 instance-1 lfd[294428]: *User Processing* PID:294424 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 11:25:28 instance-1 lfd[295787]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 11:25:29 instance-1 lfd[295787]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 11:25:33 instance-1 lfd[295834]: *User Processing* PID:295828 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 11:25:33 instance-1 lfd[295834]: *User Processing* PID:295827 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 11:29:33 instance-1 lfd[297030]: *User Processing* PID:297024 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 11:41:34 instance-1 lfd[301203]: *User Processing* PID:301200 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 11:41:34 instance-1 lfd[301203]: *User Processing* PID:301198 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 11:46:34 instance-1 lfd[302716]: *Suspicious Process* PID:17559 PPID:12813 User:turnkey Uptime:48571 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 18 11:46:34 instance-1 lfd[302716]: *User Processing* PID:17559 Kill:0 User:turnkey Time:48571 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 18 11:56:34 instance-1 lfd[305820]: *User Processing* PID:305817 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 11:56:34 instance-1 lfd[305820]: *User Processing* PID:305815 Kill:0 User:eyrescom VM:588(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:00:24 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 12:00:35 instance-1 lfd[307156]: *User Processing* PID:307141 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 12:00:35 instance-1 lfd[307156]: *User Processing* PID:307152 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:00:35 instance-1 lfd[307156]: *User Processing* PID:307151 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:10:35 instance-1 lfd[310208]: *User Processing* PID:310202 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:11:35 instance-1 lfd[310643]: *User Processing* PID:310636 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:13:35 instance-1 lfd[311226]: *User Processing* PID:311219 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:14:35 instance-1 lfd[311575]: *User Processing* PID:311303 Kill:0 User:winslowgroupweb VM:590(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:16:35 instance-1 lfd[312345]: *User Processing* PID:312341 Kill:0 User:winslowgroupweb VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:20:35 instance-1 lfd[313630]: *User Processing* PID:313567 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 12:21:35 instance-1 lfd[313922]: *User Processing* PID:313918 Kill:0 User:winslowgroupweb VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:24:35 instance-1 lfd[314846]: *User Processing* PID:314824 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 12:24:36 instance-1 lfd[314846]: *User Processing* PID:314834 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 12:25:31 instance-1 lfd[315128]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 12:25:31 instance-1 lfd[315128]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 12:27:36 instance-1 lfd[315807]: *User Processing* PID:315804 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:37:36 instance-1 lfd[319597]: *User Processing* PID:319468 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 12:46:36 instance-1 lfd[322531]: *User Processing* PID:322524 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 12:51:37 instance-1 lfd[324606]: *User Processing* PID:324603 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:52:37 instance-1 lfd[325084]: *User Processing* PID:325080 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:52:37 instance-1 lfd[325084]: *User Processing* PID:325079 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:54:37 instance-1 lfd[325832]: *User Processing* PID:325827 Kill:0 User:yvegroup VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:55:37 instance-1 lfd[326200]: *User Processing* PID:326105 Kill:0 User:bmswinslow VM:576(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:57:37 instance-1 lfd[326994]: *User Processing* PID:326987 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:58:37 instance-1 lfd[327358]: *User Processing* PID:327350 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 12:59:37 instance-1 lfd[327648]: *User Processing* PID:327562 Kill:0 User:winslow VM:566(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 18 13:00:27 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 13:02:37 instance-1 lfd[328656]: *User Processing* PID:328653 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 13:15:37 instance-1 lfd[332436]: *User Processing* PID:332433 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 13:20:38 instance-1 lfd[333876]: *User Processing* PID:333868 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 13:25:33 instance-1 lfd[335287]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 13:25:33 instance-1 lfd[335287]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 13:26:38 instance-1 lfd[335614]: *User Processing* PID:335611 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 13:28:38 instance-1 lfd[336523]: *User Processing* PID:336520 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 13:28:38 instance-1 lfd[336523]: *User Processing* PID:336493 Kill:0 User:comphomes VM:686(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 13:31:38 instance-1 lfd[337556]: *User Processing* PID:337354 Kill:0 User:winslowgroupweb VM:590(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 13:45:39 instance-1 lfd[341765]: *User Processing* PID:341676 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 18 13:46:39 instance-1 lfd[342051]: *User Processing* PID:341998 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 13:51:39 instance-1 lfd[343581]: *User Processing* PID:343575 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 13:58:39 instance-1 lfd[345712]: *User Processing* PID:345700 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 14:00:29 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 14:18:40 instance-1 lfd[352314]: *User Processing* PID:352272 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 14:19:47 instance-1 lfd[352732]: (smtpauth) Failed SMTP AUTH login from 165.154.252.166 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 18 14:25:35 instance-1 lfd[354483]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 14:25:35 instance-1 lfd[354483]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 14:27:40 instance-1 lfd[355023]: *User Processing* PID:355017 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 14:27:40 instance-1 lfd[355023]: *User Processing* PID:355016 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 14:28:40 instance-1 lfd[355286]: *User Processing* PID:355283 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 14:38:40 instance-1 lfd[359212]: *User Processing* PID:359031 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 14:39:40 instance-1 lfd[359690]: *User Processing* PID:359472 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 14:42:41 instance-1 lfd[360623]: *User Processing* PID:360613 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 14:49:26 instance-1 lfd[362795]: (smtpauth) Failed SMTP AUTH login from 148.222.203.240 (MX/Mexico/customer.sntochl1.pop.starlinkisp.net): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 18 15:00:31 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 15:04:41 instance-1 lfd[367849]: *User Processing* PID:367845 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 15:19:42 instance-1 lfd[372545]: *User Processing* PID:372542 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 15:22:42 instance-1 lfd[373505]: *User Processing* PID:373494 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 15:25:37 instance-1 lfd[374484]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 15:25:37 instance-1 lfd[374484]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 15:31:42 instance-1 lfd[376245]: *User Processing* PID:376207 Kill:0 User:newswinslow VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 15:32:42 instance-1 lfd[376570]: *User Processing* PID:376566 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 15:37:42 instance-1 lfd[378183]: *User Processing* PID:378179 Kill:0 User:mainpoint VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 15:38:43 instance-1 lfd[378473]: *User Processing* PID:378468 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 15:40:43 instance-1 lfd[379241]: *User Processing* PID:379238 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 16:00:33 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 16:22:44 instance-1 lfd[392895]: *User Processing* PID:392892 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 16:25:39 instance-1 lfd[393730]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 16:25:39 instance-1 lfd[393730]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 16:36:45 instance-1 lfd[397524]: *User Processing* PID:397520 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 16:49:45 instance-1 lfd[401713]: *User Processing* PID:401704 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 16:50:45 instance-1 lfd[402057]: *User Processing* PID:402046 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:00:35 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 17:02:46 instance-1 lfd[406561]: *User Processing* PID:406540 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 17:07:46 instance-1 lfd[408201]: *User Processing* PID:408181 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:10:46 instance-1 lfd[409125]: *User Processing* PID:409109 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:13:46 instance-1 lfd[410060]: *User Processing* PID:410048 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:19:46 instance-1 lfd[411928]: *User Processing* PID:411919 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:21:46 instance-1 lfd[412543]: *User Processing* PID:412522 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 17:21:47 instance-1 lfd[412543]: *User Processing* PID:412535 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:23:47 instance-1 lfd[413240]: *User Processing* PID:413231 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:25:42 instance-1 lfd[413789]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 17:25:42 instance-1 lfd[413789]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 17:25:47 instance-1 lfd[413837]: *User Processing* PID:413829 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:27:47 instance-1 lfd[414760]: *User Processing* PID:414756 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 17:33:47 instance-1 lfd[416972]: *User Processing* PID:416951 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 17:34:47 instance-1 lfd[417249]: *User Processing* PID:417238 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:39:47 instance-1 lfd[418849]: *User Processing* PID:418840 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:40:47 instance-1 lfd[419192]: *User Processing* PID:419189 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 17:41:47 instance-1 lfd[419455]: *User Processing* PID:419449 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 17:43:47 instance-1 lfd[420153]: *User Processing* PID:420145 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:45:47 instance-1 lfd[420786]: *User Processing* PID:420778 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:48:38 instance-1 lfd[421760]: (smtpauth) Failed SMTP AUTH login from 107.173.189.11 (US/United States/107-173-189-11-host.colocrossing.com): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 18 17:51:48 instance-1 lfd[422711]: *User Processing* PID:422707 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 17:52:48 instance-1 lfd[423044]: *User Processing* PID:423041 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 17:53:48 instance-1 lfd[423469]: *User Processing* PID:423432 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 17:58:48 instance-1 lfd[425129]: *User Processing* PID:425126 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 17:59:48 instance-1 lfd[425452]: *User Processing* PID:425449 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 18:00:38 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 18:02:48 instance-1 lfd[426575]: *User Processing* PID:426567 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 18:04:48 instance-1 lfd[427392]: *User Processing* PID:427384 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 18:07:48 instance-1 lfd[428434]: *User Processing* PID:428423 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 18:10:48 instance-1 lfd[429665]: *User Processing* PID:429617 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 18:14:49 instance-1 lfd[431069]: *User Processing* PID:431065 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 18:25:44 instance-1 lfd[434868]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 18:25:44 instance-1 lfd[434868]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 18:28:49 instance-1 lfd[435894]: *User Processing* PID:435838 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 18:31:15 instance-1 lfd[436629]: (smtpauth) Failed SMTP AUTH login from 165.154.252.200 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 18 18:44:49 instance-1 lfd[440940]: *User Processing* PID:440932 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 18:50:50 instance-1 lfd[443057]: *User Processing* PID:443045 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 18:57:50 instance-1 lfd[445303]: *User Processing* PID:445293 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 18:58:50 instance-1 lfd[445677]: *User Processing* PID:445670 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 18:58:50 instance-1 lfd[445677]: *User Processing* PID:445671 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 18:59:50 instance-1 lfd[446174]: *User Processing* PID:446168 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 19:00:40 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 19:08:50 instance-1 lfd[449320]: *User Processing* PID:449317 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:09:50 instance-1 lfd[449697]: *User Processing* PID:449677 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:10:50 instance-1 lfd[450177]: *Suspicious Process* PID:17560 PPID:12813 User:turnkey Uptime:75227 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 18 19:10:50 instance-1 lfd[450177]: *User Processing* PID:17560 Kill:0 User:turnkey Time:75227 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 18 19:12:50 instance-1 lfd[450892]: *User Processing* PID:450886 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:13:50 instance-1 lfd[451243]: *User Processing* PID:451240 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:14:50 instance-1 lfd[451611]: *User Processing* PID:451608 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:17:50 instance-1 lfd[452928]: *User Processing* PID:452924 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:17:50 instance-1 lfd[452928]: *User Processing* PID:452919 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 19:18:50 instance-1 lfd[453384]: *User Processing* PID:453380 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:19:50 instance-1 lfd[453817]: *User Processing* PID:453809 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:21:50 instance-1 lfd[454835]: *User Processing* PID:454832 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:24:51 instance-1 lfd[455759]: *User Processing* PID:455756 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:25:46 instance-1 lfd[456252]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 19:25:46 instance-1 lfd[456252]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 19:27:51 instance-1 lfd[456896]: *User Processing* PID:456893 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:50:51 instance-1 lfd[464038]: *User Processing* PID:464035 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:50:51 instance-1 lfd[464038]: *User Processing* PID:464032 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 19:59:51 instance-1 lfd[466711]: *User Processing* PID:466708 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 20:00:41 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 20:25:47 instance-1 lfd[475086]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 20:25:47 instance-1 lfd[475086]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 21:00:43 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 21:00:53 instance-1 lfd[485457]: *User Processing* PID:485451 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:02:53 instance-1 lfd[486236]: *User Processing* PID:486233 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:05:53 instance-1 lfd[487375]: *User Processing* PID:487366 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:06:53 instance-1 lfd[487871]: *User Processing* PID:487868 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:06:53 instance-1 lfd[487871]: *User Processing* PID:487864 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:07:53 instance-1 lfd[488254]: *User Processing* PID:488246 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:07:53 instance-1 lfd[488254]: *User Processing* PID:488248 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:11:53 instance-1 lfd[489973]: *User Processing* PID:489970 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:11:53 instance-1 lfd[489973]: *User Processing* PID:489969 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:12:53 instance-1 lfd[490380]: *User Processing* PID:490377 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:13:53 instance-1 lfd[490796]: *User Processing* PID:490793 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:16:54 instance-1 lfd[492139]: *User Processing* PID:492133 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:16:54 instance-1 lfd[492139]: *User Processing* PID:492136 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:17:54 instance-1 lfd[492538]: *User Processing* PID:492529 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 18 21:17:54 instance-1 lfd[492538]: *User Processing* PID:492533 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:19:54 instance-1 lfd[493222]: *User Processing* PID:493219 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:20:54 instance-1 lfd[493612]: *User Processing* PID:493606 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:23:54 instance-1 lfd[494626]: *User Processing* PID:494623 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:24:54 instance-1 lfd[494939]: *User Processing* PID:494936 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:25:49 instance-1 lfd[495301]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 21:25:49 instance-1 lfd[495301]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 21:25:54 instance-1 lfd[495352]: *User Processing* PID:495349 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:25:54 instance-1 lfd[495352]: *User Processing* PID:495348 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:27:54 instance-1 lfd[496362]: *User Processing* PID:496356 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:28:54 instance-1 lfd[496763]: *User Processing* PID:496754 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:29:54 instance-1 lfd[497086]: *User Processing* PID:497080 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:29:54 instance-1 lfd[497086]: *User Processing* PID:497078 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:30:54 instance-1 lfd[497437]: *User Processing* PID:497429 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:30:54 instance-1 lfd[497437]: *User Processing* PID:497431 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:31:54 instance-1 lfd[497745]: *User Processing* PID:497740 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:31:54 instance-1 lfd[497745]: *User Processing* PID:497736 Kill:0 User:geneticson VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:32:54 instance-1 lfd[498239]: *User Processing* PID:498231 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:32:54 instance-1 lfd[498239]: *User Processing* PID:498236 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:33:54 instance-1 lfd[498570]: *User Processing* PID:498564 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:34:54 instance-1 lfd[498875]: *User Processing* PID:498869 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:35:54 instance-1 lfd[499245]: *User Processing* PID:499237 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:35:54 instance-1 lfd[499245]: *User Processing* PID:499239 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:37:54 instance-1 lfd[499986]: *User Processing* PID:499980 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:37:54 instance-1 lfd[499986]: *User Processing* PID:499978 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:38:54 instance-1 lfd[500303]: *User Processing* PID:500295 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:39:54 instance-1 lfd[500673]: *User Processing* PID:500670 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:39:54 instance-1 lfd[500673]: *User Processing* PID:500665 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:40:54 instance-1 lfd[501045]: *User Processing* PID:501037 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:40:54 instance-1 lfd[501045]: *User Processing* PID:501042 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:41:54 instance-1 lfd[501341]: *User Processing* PID:501335 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:42:54 instance-1 lfd[501781]: *User Processing* PID:501778 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:42:54 instance-1 lfd[501781]: *User Processing* PID:501773 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:44:54 instance-1 lfd[502390]: *User Processing* PID:502382 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:44:54 instance-1 lfd[502390]: *User Processing* PID:502387 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:45:54 instance-1 lfd[502772]: *User Processing* PID:502767 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:45:54 instance-1 lfd[502772]: *User Processing* PID:502769 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:46:54 instance-1 lfd[503091]: *User Processing* PID:503082 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:46:55 instance-1 lfd[503091]: *User Processing* PID:503088 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:47:55 instance-1 lfd[503545]: *User Processing* PID:503541 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:49:55 instance-1 lfd[504248]: *User Processing* PID:504239 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:50:55 instance-1 lfd[504646]: *User Processing* PID:504637 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:50:55 instance-1 lfd[504646]: *User Processing* PID:504639 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:52:55 instance-1 lfd[505384]: *User Processing* PID:505379 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:52:55 instance-1 lfd[505384]: *User Processing* PID:505381 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:53:55 instance-1 lfd[505746]: *User Processing* PID:505742 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:53:55 instance-1 lfd[505746]: *User Processing* PID:505725 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:55:55 instance-1 lfd[506463]: *User Processing* PID:506460 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:55:55 instance-1 lfd[506463]: *User Processing* PID:506455 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:56:55 instance-1 lfd[506765]: *User Processing* PID:506757 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:56:55 instance-1 lfd[506765]: *User Processing* PID:506759 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:57:55 instance-1 lfd[507224]: *User Processing* PID:507208 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:57:55 instance-1 lfd[507224]: *User Processing* PID:507214 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:58:55 instance-1 lfd[507560]: *User Processing* PID:507552 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:58:55 instance-1 lfd[507560]: *User Processing* PID:507554 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:59:55 instance-1 lfd[507978]: *User Processing* PID:507975 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 21:59:55 instance-1 lfd[507978]: *User Processing* PID:507970 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:00:45 instance-1 lfd[51177]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 22:00:48 instance-1 lfd[509271]: *System Integrity* has detected modified file(s): /usr/bin/gencat /usr/bin/getconf /usr/bin/getent /usr/bin/gss-client /usr/bin/iconv /usr/bin/ld.so /usr/bin/locale /usr/bin/localedef /usr/bin/makedb /usr/bin/pldd /usr/bin/sim_client /usr/bin/sprof /usr/bin/uuclient /usr/sbin/build-locale-archive /usr/sbin/gss-server /usr/sbin/iconvconfig /usr/sbin/ldconfig /usr/sbin/nscd /usr/sbin/sim_server /usr/sbin/uuserver /usr/sbin/zdump /usr/sbin/zic /bin/gencat /bin/getconf /bin/getent /bin/gss-client /bin/iconv /bin/ld.so /bin/locale /bin/localedef /bin/makedb /bin/pldd /bin/sim_client /bin/sprof /bin/uuclient /sbin/build-locale-archive /sbin/gss-server /sbin/iconvconfig /sbin/ldconfig /sbin/nscd /sbin/sim_server /sbin/uuserver /sbin/zdump /sbin/zic Mar 18 22:00:55 instance-1 lfd[509683]: *User Processing* PID:508928 Kill:0 User:newswinslow VM:620(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 18 22:01:02 instance-1 lfd[51177]: Main Process: TERM Mar 18 22:01:02 instance-1 lfd[51177]: daemon stopped Mar 18 22:01:02 instance-1 lfd[510074]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 18 22:01:02 instance-1 lfd[510074]: LF_APACHE_ERRPORT: Set to [2] Mar 18 22:01:02 instance-1 lfd[510074]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 18 22:01:02 instance-1 lfd[510074]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 18 22:01:02 instance-1 lfd[510074]: CSF Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: IPv6 Enabled... Mar 18 22:01:03 instance-1 lfd[510074]: LOAD Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 18 22:01:03 instance-1 lfd[510074]: Country Code Lookups... Mar 18 22:01:03 instance-1 lfd[510074]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 22:01:03 instance-1 lfd[510074]: System Integrity Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Exploit Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Directory Watching... Mar 18 22:01:03 instance-1 lfd[510074]: Email Queue Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: ModSecurity IP D/B Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Email Relay Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Temp to Perm Block Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: System Statistics... Mar 18 22:01:03 instance-1 lfd[510074]: Process Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Account Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: SSH Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Webmin Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: SU Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Console Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: WHM Tracking... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/messages... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/maillog... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /usr/local/cpanel/logs/login_log... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /etc/apache2/logs/error_log... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/exim_mainlog... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /usr/local/cpanel/logs/access_log... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/secure... Mar 18 22:01:03 instance-1 lfd[510074]: Watching /var/log/customlog... Mar 18 22:06:03 instance-1 lfd[512450]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 22:06:03 instance-1 lfd[512450]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 22:11:03 instance-1 lfd[513914]: *User Processing* PID:513905 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:14:03 instance-1 lfd[514905]: *User Processing* PID:514890 Kill:0 User:indigenouscivil VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 18 22:14:03 instance-1 lfd[514905]: *User Processing* PID:514891 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:17:03 instance-1 lfd[515807]: *User Processing* PID:515803 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:20:03 instance-1 lfd[517006]: *User Processing* PID:516991 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:28:04 instance-1 lfd[519869]: *User Processing* PID:519861 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:29:04 instance-1 lfd[520255]: *User Processing* PID:520251 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:30:04 instance-1 lfd[520688]: *User Processing* PID:520684 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:33:04 instance-1 lfd[521824]: *User Processing* PID:521820 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:35:04 instance-1 lfd[522441]: *User Processing* PID:522437 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:37:04 instance-1 lfd[523018]: *User Processing* PID:523011 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:40:04 instance-1 lfd[524107]: *User Processing* PID:524103 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:40:04 instance-1 lfd[524107]: *User Processing* PID:524098 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:44:04 instance-1 lfd[525394]: *User Processing* PID:525387 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:51:04 instance-1 lfd[527679]: *User Processing* PID:527667 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:52:04 instance-1 lfd[527953]: *User Processing* PID:527949 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:53:04 instance-1 lfd[528248]: *User Processing* PID:528244 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:55:04 instance-1 lfd[529101]: *User Processing* PID:529095 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 22:56:04 instance-1 lfd[529406]: *User Processing* PID:529398 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 18 23:01:05 instance-1 lfd[510074]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 18 23:01:05 instance-1 lfd[530930]: *Excessive Processes* User:tuscomau Kill:0 Process Count:12 Mar 18 23:06:05 instance-1 lfd[533873]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 18 23:06:05 instance-1 lfd[533873]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 18 23:11:05 instance-1 lfd[536220]: *Excessive Processes* User:surveyms Kill:0 Process Count:12 Mar 18 23:20:05 instance-1 lfd[539225]: *User Processing* PID:539221 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 00:00:02 instance-1 lfd[510074]: Main Process: TERM Mar 19 00:00:02 instance-1 lfd[510074]: daemon stopped Mar 19 00:00:02 instance-1 lfd[551650]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 19 00:00:02 instance-1 lfd[551650]: LF_APACHE_ERRPORT: Set to [2] Mar 19 00:00:02 instance-1 lfd[551650]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 19 00:00:02 instance-1 lfd[551650]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 19 00:00:02 instance-1 lfd[551650]: CSF Tracking... Mar 19 00:00:02 instance-1 lfd[551650]: IPv6 Enabled... Mar 19 00:00:02 instance-1 lfd[551650]: LOAD Tracking... Mar 19 00:00:02 instance-1 lfd[551650]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 19 00:00:02 instance-1 lfd[551650]: Country Code Lookups... Mar 19 00:00:02 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 00:00:02 instance-1 lfd[551650]: System Integrity Tracking... Mar 19 00:00:02 instance-1 lfd[551650]: Exploit Tracking... Mar 19 00:00:02 instance-1 lfd[551650]: Directory Watching... Mar 19 00:00:02 instance-1 lfd[551650]: Email Queue Tracking... Mar 19 00:00:02 instance-1 lfd[551650]: ModSecurity IP D/B Tracking... Mar 19 00:00:02 instance-1 lfd[551650]: Email Relay Tracking... Mar 19 00:00:02 instance-1 lfd[551650]: Temp to Perm Block Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: System Statistics... Mar 19 00:00:03 instance-1 lfd[551650]: Process Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: Account Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: SSH Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: Webmin Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: SU Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: Console Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: WHM Tracking... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/exim_mainlog... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /etc/apache2/logs/error_log... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /usr/local/cpanel/logs/login_log... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/customlog... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/messages... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/maillog... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /usr/local/cpanel/logs/access_log... Mar 19 00:00:03 instance-1 lfd[551650]: Watching /var/log/secure... Mar 19 00:05:03 instance-1 lfd[553157]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 00:05:03 instance-1 lfd[553157]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 00:14:03 instance-1 lfd[555517]: *User Processing* PID:555508 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 00:50:04 instance-1 lfd[566089]: *User Processing* PID:565979 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 00:51:04 instance-1 lfd[566638]: *User Processing* PID:566633 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 00:53:04 instance-1 lfd[567360]: *User Processing* PID:567356 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 00:53:04 instance-1 lfd[567360]: *User Processing* PID:567344 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 01:00:04 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 01:05:05 instance-1 lfd[570916]: *User Processing* PID:570841 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 01:05:05 instance-1 lfd[570916]: *User Processing* PID:570906 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 01:05:05 instance-1 lfd[570913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 01:05:05 instance-1 lfd[570913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 01:14:05 instance-1 lfd[574202]: *User Processing* PID:574106 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 01:28:05 instance-1 lfd[578297]: *User Processing* PID:578244 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 01:54:06 instance-1 lfd[586341]: *User Processing* PID:586331 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 02:00:06 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 02:05:10 instance-1 lfd[589551]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 02:05:10 instance-1 lfd[589551]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 02:20:07 instance-1 lfd[593767]: *User Processing* PID:593731 Kill:0 User:bmswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 02:51:08 instance-1 lfd[602962]: *User Processing* PID:602958 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 02:55:08 instance-1 lfd[604256]: *User Processing* PID:604242 Kill:0 User:independent VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 02:58:08 instance-1 lfd[605261]: *User Processing* PID:605257 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 03:00:08 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 03:10:16 instance-1 lfd[608812]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 03:10:16 instance-1 lfd[608812]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 03:34:09 instance-1 lfd[616952]: *User Processing* PID:616948 Kill:0 User:mainpoint VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 03:34:10 instance-1 lfd[616952]: *User Processing* PID:616939 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 03:37:10 instance-1 lfd[617768]: *User Processing* PID:617754 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 03:39:10 instance-1 lfd[618426]: *User Processing* PID:618414 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 03:40:10 instance-1 lfd[618753]: *User Processing* PID:618703 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 03:41:10 instance-1 lfd[619021]: *User Processing* PID:618993 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 03:50:10 instance-1 lfd[623896]: *User Processing* PID:623875 Kill:0 User:surveyms VM:592(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/surveyms/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false Mar 19 03:52:10 instance-1 lfd[625730]: *User Processing* PID:625719 Kill:0 User:waste2323 VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/waste2323/public_html instance info --format=json --check-updates=true Mar 19 03:53:10 instance-1 lfd[626735]: *User Processing* PID:626731 Kill:0 User:geneticson VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json Mar 19 03:54:10 instance-1 lfd[627890]: *User Processing* PID:627883 Kill:0 User:bmswinslow VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html plugin list --fields=name,status,version,title,description,update_version --format=json --quiet --skip-plugins=false --skip-themes=false Mar 19 03:55:10 instance-1 lfd[628737]: *User Processing* PID:628728 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/comphomes/public_html theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false Mar 19 03:56:10 instance-1 lfd[629960]: *User Processing* PID:629956 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html option list --search=jetpack_affiliate_code --field=option_value --format=json --quiet Mar 19 04:00:10 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 04:02:10 instance-1 lfd[632273]: *User Processing* PID:632177 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 04:03:10 instance-1 lfd[632573]: *User Processing* PID:632463 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 04:15:11 instance-1 lfd[636329]: *User Processing* PID:636222 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 04:15:11 instance-1 lfd[636329]: *User Processing* PID:636317 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 04:15:11 instance-1 lfd[636326]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 04:15:11 instance-1 lfd[636326]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 04:16:11 instance-1 lfd[636637]: *User Processing* PID:636633 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 04:51:12 instance-1 lfd[647367]: *User Processing* PID:647357 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 04:51:12 instance-1 lfd[647367]: *User Processing* PID:647363 Kill:0 User:tuscomau VM:567(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 04:57:12 instance-1 lfd[649251]: *User Processing* PID:649242 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 05:00:12 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 05:15:12 instance-1 lfd[654583]: *User Processing* PID:654569 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 05:15:13 instance-1 lfd[654580]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 05:15:13 instance-1 lfd[654580]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 05:34:13 instance-1 lfd[660076]: *User Processing* PID:660067 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 06:00:13 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 06:03:14 instance-1 lfd[669260]: *User Processing* PID:669255 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:09:14 instance-1 lfd[671365]: *User Processing* PID:671361 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:10:14 instance-1 lfd[671739]: *User Processing* PID:671730 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:11:14 instance-1 lfd[672061]: *User Processing* PID:672052 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:13:14 instance-1 lfd[672825]: *User Processing* PID:672814 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:14:14 instance-1 lfd[673133]: *User Processing* PID:673123 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:15:14 instance-1 lfd[673543]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 06:15:14 instance-1 lfd[673543]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 06:20:14 instance-1 lfd[675293]: *User Processing* PID:675281 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:30:15 instance-1 lfd[678411]: *User Processing* PID:678402 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:31:15 instance-1 lfd[678795]: *User Processing* PID:678791 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:44:15 instance-1 lfd[682932]: *User Processing* PID:682928 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:45:15 instance-1 lfd[683331]: *User Processing* PID:683322 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 06:50:15 instance-1 lfd[684896]: *User Processing* PID:684712 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 06:52:15 instance-1 lfd[685479]: *User Processing* PID:685470 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 07:00:15 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 07:15:16 instance-1 lfd[693129]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 07:15:16 instance-1 lfd[693129]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 07:30:17 instance-1 lfd[697502]: *User Processing* PID:697490 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 07:52:17 instance-1 lfd[704299]: *User Processing* PID:704278 Kill:0 User:tuscomau VM:637(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 07:52:17 instance-1 lfd[704299]: *User Processing* PID:704294 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 07:55:17 instance-1 lfd[705473]: *User Processing* PID:705455 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 07:55:17 instance-1 lfd[705473]: *User Processing* PID:705464 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 07:55:18 instance-1 lfd[705473]: *User Processing* PID:705456 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 08:00:17 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 08:02:18 instance-1 lfd[707947]: *User Processing* PID:707894 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 08:13:18 instance-1 lfd[711501]: *User Processing* PID:711494 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 08:15:18 instance-1 lfd[712289]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 08:15:18 instance-1 lfd[712289]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 08:16:18 instance-1 lfd[712630]: *User Processing* PID:712626 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 08:35:19 instance-1 lfd[719152]: *User Processing* PID:719143 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:00:19 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 09:09:20 instance-1 lfd[729852]: *User Processing* PID:729847 Kill:0 User:rcpacom VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:10:20 instance-1 lfd[730378]: *User Processing* PID:730364 Kill:0 User:tuscomau VM:638(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:11:20 instance-1 lfd[730677]: *User Processing* PID:730668 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:11:20 instance-1 lfd[730677]: *User Processing* PID:730669 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:11:20 instance-1 lfd[730677]: *User Processing* PID:730618 Kill:0 User:rcpacom VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:15:20 instance-1 lfd[731932]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 09:15:20 instance-1 lfd[731932]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 09:16:20 instance-1 lfd[732215]: *User Processing* PID:732210 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:24:20 instance-1 lfd[734769]: *User Processing* PID:734765 Kill:0 User:comphomes VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:25:20 instance-1 lfd[735294]: *User Processing* PID:735193 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 09:31:20 instance-1 lfd[737092]: *User Processing* PID:737087 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:41:21 instance-1 lfd[740080]: *User Processing* PID:740070 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 09:43:21 instance-1 lfd[740662]: *User Processing* PID:740654 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:43:21 instance-1 lfd[740662]: *User Processing* PID:740652 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 09:54:24 instance-1 lfd[744154]: (smtpauth) Failed SMTP AUTH login from 80.94.92.126 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 19 10:00:21 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 10:07:22 instance-1 lfd[748229]: *User Processing* PID:748137 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 10:11:22 instance-1 lfd[749605]: *User Processing* PID:749598 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:14:22 instance-1 lfd[750478]: *User Processing* PID:750470 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:15:22 instance-1 lfd[750837]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 10:15:22 instance-1 lfd[750837]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 10:16:38 instance-1 lfd[751382]: (smtpauth) Failed SMTP AUTH login from 193.46.255.184 (AT/Austria/hostingmailto094.statics.servermail.org): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 19 10:17:22 instance-1 lfd[751629]: *User Processing* PID:751580 Kill:0 User:comphomes VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:19:22 instance-1 lfd[752381]: *User Processing* PID:752312 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 10:20:22 instance-1 lfd[752864]: *User Processing* PID:752780 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 10:22:22 instance-1 lfd[753900]: *User Processing* PID:753894 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:28:22 instance-1 lfd[756479]: *User Processing* PID:756350 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:28:23 instance-1 lfd[756479]: *User Processing* PID:756473 Kill:0 User:comphomes VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:31:23 instance-1 lfd[757529]: *User Processing* PID:757518 Kill:0 User:yvegroup VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:31:23 instance-1 lfd[757529]: *User Processing* PID:757269 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 10:36:23 instance-1 lfd[759241]: *User Processing* PID:759236 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:36:23 instance-1 lfd[759241]: *User Processing* PID:759234 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 10:56:23 instance-1 lfd[766750]: *User Processing* PID:766745 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 10:56:24 instance-1 lfd[766750]: *User Processing* PID:766738 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:00:24 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 11:01:24 instance-1 lfd[768378]: *User Processing* PID:768374 Kill:0 User:comphomes VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:04:24 instance-1 lfd[769423]: *User Processing* PID:769416 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:12:24 instance-1 lfd[772072]: *User Processing* PID:772064 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:12:24 instance-1 lfd[772072]: *User Processing* PID:771987 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:12:24 instance-1 lfd[772072]: *User Processing* PID:772036 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:14:24 instance-1 lfd[772662]: *User Processing* PID:772652 Kill:0 User:eyrescom VM:588(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:14:24 instance-1 lfd[772662]: *User Processing* PID:772654 Kill:0 User:eyrescom VM:591(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:15:24 instance-1 lfd[773016]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 11:15:25 instance-1 lfd[773016]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 11:16:24 instance-1 lfd[773312]: *User Processing* PID:773307 Kill:0 User:rcpacom VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:17:24 instance-1 lfd[773743]: *User Processing* PID:773738 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:18:24 instance-1 lfd[774080]: *User Processing* PID:774050 Kill:0 User:newswinslow VM:552(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:19:24 instance-1 lfd[774380]: *User Processing* PID:774299 Kill:0 User:newswinslow VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:20:24 instance-1 lfd[774758]: *User Processing* PID:774731 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:20:24 instance-1 lfd[774758]: *User Processing* PID:774598 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:21:24 instance-1 lfd[775114]: *User Processing* PID:775110 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:23:24 instance-1 lfd[775933]: *User Processing* PID:775929 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:24:24 instance-1 lfd[776263]: *User Processing* PID:776184 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:24:24 instance-1 lfd[776263]: *User Processing* PID:776189 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 11:24:25 instance-1 lfd[776263]: *User Processing* PID:776259 Kill:0 User:comphomes VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:24:25 instance-1 lfd[776263]: *User Processing* PID:776255 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:26:24 instance-1 lfd[777035]: *User Processing* PID:777030 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:27:25 instance-1 lfd[777514]: *User Processing* PID:777510 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:29:25 instance-1 lfd[778138]: *User Processing* PID:778132 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:32:25 instance-1 lfd[779411]: *User Processing* PID:779407 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:35:25 instance-1 lfd[780493]: *User Processing* PID:780481 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:36:25 instance-1 lfd[780920]: *User Processing* PID:780911 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:37:25 instance-1 lfd[781463]: *User Processing* PID:781457 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:37:25 instance-1 lfd[781463]: *User Processing* PID:781456 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:39:25 instance-1 lfd[782316]: *User Processing* PID:782312 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783783 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783776 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783779 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:42:25 instance-1 lfd[783788]: *User Processing* PID:783775 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:46:25 instance-1 lfd[785375]: *User Processing* PID:785370 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:47:25 instance-1 lfd[785845]: *User Processing* PID:785835 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:48:25 instance-1 lfd[786238]: *User Processing* PID:786234 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:50:25 instance-1 lfd[787053]: *User Processing* PID:787039 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 11:50:26 instance-1 lfd[787053]: *User Processing* PID:787041 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:50:26 instance-1 lfd[787053]: *User Processing* PID:787038 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:50:26 instance-1 lfd[787053]: *User Processing* PID:787045 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:51:25 instance-1 lfd[787455]: *User Processing* PID:787451 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:52:25 instance-1 lfd[788010]: *User Processing* PID:788005 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:52:26 instance-1 lfd[788010]: *User Processing* PID:788000 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:53:25 instance-1 lfd[788371]: *User Processing* PID:788366 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:54:26 instance-1 lfd[788847]: *User Processing* PID:788842 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:54:26 instance-1 lfd[788847]: *User Processing* PID:788836 Kill:0 User:geneticson VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:56:26 instance-1 lfd[789663]: *User Processing* PID:789659 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:57:26 instance-1 lfd[789972]: *User Processing* PID:789968 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 11:57:26 instance-1 lfd[789972]: *User Processing* PID:789962 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:00:26 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 12:00:26 instance-1 lfd[791180]: *User Processing* PID:791169 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:01:26 instance-1 lfd[791513]: *User Processing* PID:791509 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:01:26 instance-1 lfd[791513]: *User Processing* PID:791508 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:02:26 instance-1 lfd[791882]: *User Processing* PID:791868 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:06:26 instance-1 lfd[793505]: *User Processing* PID:793501 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:07:26 instance-1 lfd[793868]: *User Processing* PID:793864 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:08:26 instance-1 lfd[794338]: *User Processing* PID:794330 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:10:26 instance-1 lfd[795154]: *User Processing* PID:795145 Kill:0 User:comphomes VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:10:27 instance-1 lfd[795154]: *User Processing* PID:795140 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:10:27 instance-1 lfd[795154]: *User Processing* PID:795146 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:11:26 instance-1 lfd[795583]: *User Processing* PID:795579 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:13:26 instance-1 lfd[796428]: *User Processing* PID:796421 Kill:0 User:geneticson VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:14:26 instance-1 lfd[796776]: *User Processing* PID:796771 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:15:26 instance-1 lfd[797207]: *User Processing* PID:797198 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:15:27 instance-1 lfd[797205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 12:15:27 instance-1 lfd[797205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 12:16:26 instance-1 lfd[797621]: *User Processing* PID:797617 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:17:26 instance-1 lfd[797963]: *User Processing* PID:797958 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:18:26 instance-1 lfd[798468]: *User Processing* PID:798463 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:18:27 instance-1 lfd[798468]: *User Processing* PID:798462 Kill:0 User:geneticson VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:19:26 instance-1 lfd[798867]: *User Processing* PID:798862 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:20:27 instance-1 lfd[799284]: *User Processing* PID:799275 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:22:27 instance-1 lfd[799963]: *User Processing* PID:799957 Kill:0 User:geneticson VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:22:27 instance-1 lfd[799963]: *User Processing* PID:799958 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:24:27 instance-1 lfd[800819]: *User Processing* PID:800815 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:25:27 instance-1 lfd[801211]: *User Processing* PID:801141 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 12:25:27 instance-1 lfd[801211]: *User Processing* PID:801199 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:26:27 instance-1 lfd[801572]: *User Processing* PID:801556 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 12:27:27 instance-1 lfd[801932]: *User Processing* PID:801925 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:28:27 instance-1 lfd[802404]: *User Processing* PID:802400 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:30:27 instance-1 lfd[803153]: *User Processing* PID:803142 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:32:27 instance-1 lfd[803886]: *User Processing* PID:803878 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:34:27 instance-1 lfd[804731]: *User Processing* PID:804721 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:36:27 instance-1 lfd[805425]: *User Processing* PID:805414 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:36:27 instance-1 lfd[805425]: *User Processing* PID:805416 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:37:27 instance-1 lfd[805773]: *User Processing* PID:805766 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:38:27 instance-1 lfd[806225]: *User Processing* PID:806221 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:41:27 instance-1 lfd[807296]: *User Processing* PID:807289 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:43:27 instance-1 lfd[808136]: *User Processing* PID:808132 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:44:27 instance-1 lfd[808493]: *User Processing* PID:808489 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:46:27 instance-1 lfd[809249]: *User Processing* PID:809244 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:47:27 instance-1 lfd[809658]: *User Processing* PID:809654 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:48:27 instance-1 lfd[810210]: *User Processing* PID:810206 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:49:28 instance-1 lfd[810641]: *User Processing* PID:810634 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:50:28 instance-1 lfd[811197]: *User Processing* PID:811189 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:51:28 instance-1 lfd[811687]: *User Processing* PID:811682 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:51:28 instance-1 lfd[811687]: *User Processing* PID:811680 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:52:28 instance-1 lfd[812106]: *User Processing* PID:812102 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:28 instance-1 lfd[812570]: *User Processing* PID:812544 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:28 instance-1 lfd[812570]: *User Processing* PID:812504 Kill:0 User:bmswinslow VM:654(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:28 instance-1 lfd[812570]: *User Processing* PID:812560 Kill:0 User:bmswinslow VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:29 instance-1 lfd[812570]: *User Processing* PID:812542 Kill:0 User:geneticson VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:29 instance-1 lfd[812570]: *User Processing* PID:812378 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:29 instance-1 lfd[812570]: *User Processing* PID:812540 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:30 instance-1 lfd[812570]: *User Processing* PID:812334 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:53:30 instance-1 lfd[812570]: *User Processing* PID:812561 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:54:28 instance-1 lfd[813152]: *User Processing* PID:813143 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:54:28 instance-1 lfd[813152]: *User Processing* PID:813142 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:54:29 instance-1 lfd[813152]: *User Processing* PID:813144 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:55:28 instance-1 lfd[813557]: *User Processing* PID:813539 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:55:29 instance-1 lfd[813557]: *User Processing* PID:813546 Kill:0 User:geneticson VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:55:29 instance-1 lfd[813557]: *User Processing* PID:813544 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:56:28 instance-1 lfd[813937]: *User Processing* PID:813927 Kill:0 User:geneticson VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:57:28 instance-1 lfd[814295]: *User Processing* PID:814288 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:57:29 instance-1 lfd[814295]: *User Processing* PID:814286 Kill:0 User:geneticson VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:58:28 instance-1 lfd[814686]: *LOAD* 5 minute load average is 6.04, threshold is 6 - email sent Mar 19 12:58:29 instance-1 lfd[814687]: *User Processing* PID:814497 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:58:29 instance-1 lfd[814687]: *User Processing* PID:814652 Kill:0 User:geneticson VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:58:29 instance-1 lfd[814687]: *User Processing* PID:814531 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:58:30 instance-1 lfd[814687]: *User Processing* PID:814667 Kill:0 User:bmswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:58:30 instance-1 lfd[814687]: *User Processing* PID:814647 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:59:28 instance-1 lfd[815138]: *User Processing* PID:815129 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 12:59:29 instance-1 lfd[815138]: *User Processing* PID:815128 Kill:0 User:geneticson VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:00:29 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 13:00:29 instance-1 lfd[815505]: *User Processing* PID:815489 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:00:29 instance-1 lfd[815505]: *User Processing* PID:815481 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:00:29 instance-1 lfd[815505]: *User Processing* PID:815490 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:01:29 instance-1 lfd[815838]: *User Processing* PID:815828 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:02:29 instance-1 lfd[816176]: *User Processing* PID:816166 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:02:29 instance-1 lfd[816176]: *User Processing* PID:816162 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:04:29 instance-1 lfd[816996]: *User Processing* PID:816987 Kill:0 User:comphomes VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:04:30 instance-1 lfd[816996]: *User Processing* PID:816969 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:04:30 instance-1 lfd[816996]: *User Processing* PID:816982 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:05:29 instance-1 lfd[817371]: *User Processing* PID:817360 Kill:0 User:geneticson VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:05:30 instance-1 lfd[817371]: *User Processing* PID:817361 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:06:29 instance-1 lfd[817697]: *User Processing* PID:817685 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:06:30 instance-1 lfd[817697]: *User Processing* PID:817694 Kill:0 User:geneticson VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:08:29 instance-1 lfd[818360]: *User Processing* PID:818352 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:08:30 instance-1 lfd[818360]: *User Processing* PID:818344 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:09:30 instance-1 lfd[818826]: *User Processing* PID:818822 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:09:30 instance-1 lfd[818826]: *User Processing* PID:818821 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:10:30 instance-1 lfd[819229]: *User Processing* PID:819221 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:11:30 instance-1 lfd[819594]: *User Processing* PID:819587 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:11:30 instance-1 lfd[819594]: *User Processing* PID:819591 Kill:0 User:geneticson VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:12:30 instance-1 lfd[819952]: *User Processing* PID:819947 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:13:30 instance-1 lfd[820318]: *User Processing* PID:820312 Kill:0 User:geneticson VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:13:30 instance-1 lfd[820318]: *User Processing* PID:820311 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:14:30 instance-1 lfd[820812]: *User Processing* PID:820808 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:14:30 instance-1 lfd[820812]: *User Processing* PID:820809 Kill:0 User:geneticson VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:15:30 instance-1 lfd[821255]: *User Processing* PID:821248 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:15:30 instance-1 lfd[821255]: *User Processing* PID:821247 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:15:30 instance-1 lfd[821254]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 13:15:30 instance-1 lfd[821254]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 13:16:30 instance-1 lfd[821665]: *User Processing* PID:821519 Kill:0 User:newswinslow VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:16:30 instance-1 lfd[821665]: *User Processing* PID:821658 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:16:30 instance-1 lfd[821665]: *User Processing* PID:821587 Kill:0 User:newswinslow VM:597(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:17:30 instance-1 lfd[822080]: *User Processing* PID:822076 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:17:30 instance-1 lfd[822080]: *User Processing* PID:821930 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:18:30 instance-1 lfd[822464]: *User Processing* PID:822436 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:19:30 instance-1 lfd[822955]: *User Processing* PID:822884 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:20:30 instance-1 lfd[823325]: *User Processing* PID:823318 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:21:30 instance-1 lfd[823696]: *User Processing* PID:823622 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:23:30 instance-1 lfd[824404]: *User Processing* PID:824401 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:23:30 instance-1 lfd[824404]: *User Processing* PID:824394 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:24:30 instance-1 lfd[824893]: *User Processing* PID:824886 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:24:30 instance-1 lfd[824893]: *User Processing* PID:824890 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:24:31 instance-1 lfd[824893]: *User Processing* PID:824646 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 13:25:30 instance-1 lfd[825298]: *User Processing* PID:825287 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:27:30 instance-1 lfd[826011]: *User Processing* PID:826007 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:28:31 instance-1 lfd[826351]: *User Processing* PID:826346 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:28:31 instance-1 lfd[826351]: *User Processing* PID:826345 Kill:0 User:mainpoint VM:604(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:29:31 instance-1 lfd[826854]: *User Processing* PID:826851 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:32:31 instance-1 lfd[827960]: *User Processing* PID:827952 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:34:31 instance-1 lfd[828703]: *User Processing* PID:828699 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:35:31 instance-1 lfd[829287]: *User Processing* PID:829280 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:38:31 instance-1 lfd[830382]: *User Processing* PID:830376 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:38:31 instance-1 lfd[830382]: *User Processing* PID:830375 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:39:31 instance-1 lfd[830823]: *User Processing* PID:830820 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:41:31 instance-1 lfd[831820]: *User Processing* PID:831808 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:41:31 instance-1 lfd[831820]: *User Processing* PID:831809 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:42:31 instance-1 lfd[832212]: *User Processing* PID:832203 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:42:31 instance-1 lfd[832212]: *User Processing* PID:832205 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:43:31 instance-1 lfd[832590]: *User Processing* PID:832583 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:44:31 instance-1 lfd[832973]: *User Processing* PID:832970 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:45:31 instance-1 lfd[833577]: *User Processing* PID:833569 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:47:31 instance-1 lfd[834362]: *User Processing* PID:834356 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:48:31 instance-1 lfd[834751]: *User Processing* PID:834748 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:49:31 instance-1 lfd[835164]: *User Processing* PID:835160 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:49:31 instance-1 lfd[835164]: *User Processing* PID:835161 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:50:31 instance-1 lfd[835742]: *User Processing* PID:835733 Kill:0 User:comphomes VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:50:31 instance-1 lfd[835742]: *User Processing* PID:835734 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:51:31 instance-1 lfd[836094]: *User Processing* PID:836090 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:53:31 instance-1 lfd[836747]: *User Processing* PID:836742 Kill:0 User:comphomes VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:53:32 instance-1 lfd[836747]: *User Processing* PID:836743 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:56:32 instance-1 lfd[838032]: *User Processing* PID:838027 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:56:32 instance-1 lfd[838032]: *User Processing* PID:838028 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 13:59:32 instance-1 lfd[839294]: *User Processing* PID:839287 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:00:32 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 14:00:32 instance-1 lfd[839999]: *User Processing* PID:839985 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:01:32 instance-1 lfd[840501]: *User Processing* PID:840494 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:03:32 instance-1 lfd[841480]: *User Processing* PID:841474 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:04:32 instance-1 lfd[841935]: *User Processing* PID:841931 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:05:32 instance-1 lfd[842502]: *User Processing* PID:842490 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:06:32 instance-1 lfd[842886]: *User Processing* PID:842878 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:07:32 instance-1 lfd[843265]: *User Processing* PID:843258 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:08:32 instance-1 lfd[843639]: *User Processing* PID:843631 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:11:32 instance-1 lfd[845006]: *User Processing* PID:845001 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:13:32 instance-1 lfd[845674]: *User Processing* PID:845666 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:15:32 instance-1 lfd[846536]: *User Processing* PID:846528 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:15:33 instance-1 lfd[846534]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 14:15:33 instance-1 lfd[846534]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 14:16:32 instance-1 lfd[846891]: *User Processing* PID:846887 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:17:32 instance-1 lfd[847231]: *User Processing* PID:847226 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:19:32 instance-1 lfd[847928]: *User Processing* PID:847924 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:21:33 instance-1 lfd[848790]: *User Processing* PID:848786 Kill:0 User:comphomes VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:22:33 instance-1 lfd[849142]: *User Processing* PID:849138 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:23:33 instance-1 lfd[849495]: *User Processing* PID:849488 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:26:33 instance-1 lfd[850688]: *User Processing* PID:850684 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:27:33 instance-1 lfd[851047]: *User Processing* PID:851042 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:29:33 instance-1 lfd[851718]: *User Processing* PID:851714 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:29:38 instance-1 lfd[851752]: (smtpauth) Failed SMTP AUTH login from 81.30.107.109 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 19 14:30:33 instance-1 lfd[852283]: *User Processing* PID:852262 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 14:33:33 instance-1 lfd[853332]: *User Processing* PID:853319 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 14:35:33 instance-1 lfd[854185]: *User Processing* PID:854172 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:37:33 instance-1 lfd[854861]: *User Processing* PID:854856 Kill:0 User:comphomes VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:38:33 instance-1 lfd[855231]: *User Processing* PID:855227 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:39:33 instance-1 lfd[855603]: *User Processing* PID:855597 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:40:33 instance-1 lfd[856132]: *User Processing* PID:856123 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:41:33 instance-1 lfd[856455]: *User Processing* PID:856451 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:42:33 instance-1 lfd[856815]: *User Processing* PID:856810 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:43:33 instance-1 lfd[857235]: *User Processing* PID:857229 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:44:33 instance-1 lfd[857598]: *User Processing* PID:857472 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 19 14:45:34 instance-1 lfd[858175]: *User Processing* PID:857897 Kill:0 User:winslow VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 19 14:45:34 instance-1 lfd[858175]: *User Processing* PID:858166 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:46:34 instance-1 lfd[858558]: *User Processing* PID:858551 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:47:34 instance-1 lfd[858929]: *User Processing* PID:858924 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:48:34 instance-1 lfd[859316]: *User Processing* PID:859261 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 14:49:34 instance-1 lfd[859668]: *User Processing* PID:859663 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:49:34 instance-1 lfd[859668]: *User Processing* PID:859595 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 14:52:34 instance-1 lfd[860834]: *User Processing* PID:860827 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:55:34 instance-1 lfd[862130]: *User Processing* PID:862118 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:57:34 instance-1 lfd[862808]: *User Processing* PID:862803 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:58:34 instance-1 lfd[863119]: *User Processing* PID:863115 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 14:59:34 instance-1 lfd[863460]: *User Processing* PID:863419 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 14:59:34 instance-1 lfd[863460]: *User Processing* PID:863454 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:00:34 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 15:00:34 instance-1 lfd[863950]: *User Processing* PID:863909 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:02:34 instance-1 lfd[864745]: *User Processing* PID:864739 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:02:34 instance-1 lfd[864745]: *User Processing* PID:864740 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:03:34 instance-1 lfd[865114]: *User Processing* PID:865106 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:03:34 instance-1 lfd[865114]: *User Processing* PID:865105 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:07:34 instance-1 lfd[866750]: *User Processing* PID:866746 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:08:34 instance-1 lfd[867083]: *User Processing* PID:867078 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:11:35 instance-1 lfd[868309]: *User Processing* PID:868305 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:13:35 instance-1 lfd[869012]: *User Processing* PID:869007 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:14:35 instance-1 lfd[869329]: *User Processing* PID:869324 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:15:37 instance-1 lfd[869823]: *Excessive Processes* User:trafman Kill:0 Process Count:31 Mar 19 15:15:38 instance-1 lfd[869823]: *User Processing* PID:869792 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:15:38 instance-1 lfd[869823]: *User Processing* PID:869771 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:15:39 instance-1 lfd[869821]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 15:15:40 instance-1 lfd[869821]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 15:16:35 instance-1 lfd[870378]: *User Processing* PID:870370 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:18:35 instance-1 lfd[871075]: *User Processing* PID:871070 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:19:35 instance-1 lfd[871394]: *User Processing* PID:871387 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:22:35 instance-1 lfd[872575]: *User Processing* PID:872569 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:22:36 instance-1 lfd[872575]: *User Processing* PID:872570 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:23:35 instance-1 lfd[872893]: *User Processing* PID:872889 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:24:36 instance-1 lfd[873212]: *User Processing* PID:873207 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:28:36 instance-1 lfd[874783]: *User Processing* PID:874774 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:28:36 instance-1 lfd[874783]: *User Processing* PID:874778 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:30:36 instance-1 lfd[875574]: *User Processing* PID:875562 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:31:36 instance-1 lfd[876093]: *User Processing* PID:876088 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 15:32:36 instance-1 lfd[876494]: *User Processing* PID:876488 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:33:36 instance-1 lfd[876904]: *User Processing* PID:876900 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:34:36 instance-1 lfd[877231]: *User Processing* PID:877227 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:35:36 instance-1 lfd[877653]: *User Processing* PID:877642 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:36:36 instance-1 lfd[878102]: *User Processing* PID:878095 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:38:36 instance-1 lfd[878758]: *User Processing* PID:878751 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:41:36 instance-1 lfd[879998]: *User Processing* PID:879993 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:42:36 instance-1 lfd[880351]: *User Processing* PID:880335 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 15:42:36 instance-1 lfd[880351]: *User Processing* PID:880343 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:43:36 instance-1 lfd[880725]: *User Processing* PID:880721 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:50:36 instance-1 lfd[883631]: *User Processing* PID:883622 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:51:36 instance-1 lfd[884142]: *User Processing* PID:884138 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:52:36 instance-1 lfd[884497]: *User Processing* PID:884493 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:54:36 instance-1 lfd[885348]: *User Processing* PID:885344 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:55:37 instance-1 lfd[885752]: *User Processing* PID:885743 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:57:37 instance-1 lfd[886551]: *User Processing* PID:886547 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:58:37 instance-1 lfd[886898]: *User Processing* PID:886894 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 15:59:37 instance-1 lfd[887229]: *User Processing* PID:887218 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:00:37 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 16:01:37 instance-1 lfd[888101]: *User Processing* PID:888097 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:02:37 instance-1 lfd[888471]: *User Processing* PID:888444 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 16:02:37 instance-1 lfd[888471]: *User Processing* PID:888467 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:04:37 instance-1 lfd[889151]: *User Processing* PID:889145 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:09:37 instance-1 lfd[891163]: *User Processing* PID:891159 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:11:37 instance-1 lfd[892000]: *User Processing* PID:891993 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:17:37 instance-1 lfd[894276]: *User Processing* PID:894267 Kill:0 User:opthirecomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:17:37 instance-1 lfd[894276]: *User Processing* PID:894272 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:18:37 instance-1 lfd[894679]: *User Processing* PID:894672 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:19:37 instance-1 lfd[895031]: *User Processing* PID:895027 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:20:37 instance-1 lfd[895426]: *User Processing* PID:895417 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:20:37 instance-1 lfd[895423]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 16:20:38 instance-1 lfd[895423]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 16:21:37 instance-1 lfd[895923]: *User Processing* PID:895915 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:23:37 instance-1 lfd[896555]: *User Processing* PID:896551 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:24:37 instance-1 lfd[896892]: *User Processing* PID:896888 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:25:37 instance-1 lfd[897269]: *User Processing* PID:897260 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:26:37 instance-1 lfd[897715]: *User Processing* PID:897705 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:26:38 instance-1 lfd[897715]: *User Processing* PID:897709 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:26:38 instance-1 lfd[897715]: *User Processing* PID:897711 Kill:0 User:comphomes VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:28:37 instance-1 lfd[898424]: *User Processing* PID:898416 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:29:37 instance-1 lfd[898726]: *User Processing* PID:898722 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:32:38 instance-1 lfd[899980]: *User Processing* PID:899975 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:33:38 instance-1 lfd[900381]: *User Processing* PID:900332 Kill:0 User:winslowgroupweb VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:33:38 instance-1 lfd[900381]: *User Processing* PID:900376 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:34:38 instance-1 lfd[900770]: *User Processing* PID:900763 Kill:0 User:comphomes VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:34:38 instance-1 lfd[900770]: *User Processing* PID:900578 Kill:0 User:winslowgroupweb VM:590(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:34:38 instance-1 lfd[900770]: *User Processing* PID:900762 Kill:0 User:winslowgroupweb VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:35:38 instance-1 lfd[901208]: *User Processing* PID:901197 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:36:38 instance-1 lfd[901707]: *User Processing* PID:901699 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:36:38 instance-1 lfd[901707]: *User Processing* PID:901700 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:37:38 instance-1 lfd[902067]: *User Processing* PID:902060 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:40:38 instance-1 lfd[903230]: *User Processing* PID:903221 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:41:38 instance-1 lfd[903603]: *User Processing* PID:903599 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:43:38 instance-1 lfd[904454]: *User Processing* PID:904447 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:44:38 instance-1 lfd[904838]: *User Processing* PID:904830 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:45:38 instance-1 lfd[905258]: *User Processing* PID:905250 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:46:38 instance-1 lfd[905625]: *User Processing* PID:905615 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:47:38 instance-1 lfd[906156]: *User Processing* PID:906148 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:47:38 instance-1 lfd[906156]: *User Processing* PID:906149 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:48:38 instance-1 lfd[906610]: *User Processing* PID:906606 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:49:38 instance-1 lfd[907011]: *User Processing* PID:907006 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:49:38 instance-1 lfd[907011]: *User Processing* PID:907007 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:50:38 instance-1 lfd[907464]: *User Processing* PID:907454 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:51:38 instance-1 lfd[907877]: *User Processing* PID:907871 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:51:38 instance-1 lfd[907877]: *User Processing* PID:907818 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 16:53:38 instance-1 lfd[908788]: *User Processing* PID:908781 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:53:38 instance-1 lfd[908788]: *User Processing* PID:908780 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:54:38 instance-1 lfd[909251]: *User Processing* PID:909247 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:55:38 instance-1 lfd[909650]: *User Processing* PID:909642 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:55:38 instance-1 lfd[909650]: *User Processing* PID:909641 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:57:38 instance-1 lfd[910479]: *User Processing* PID:910475 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:58:38 instance-1 lfd[910828]: *User Processing* PID:910824 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:58:38 instance-1 lfd[910828]: *User Processing* PID:910823 Kill:0 User:rcpacom VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:59:38 instance-1 lfd[911179]: *User Processing* PID:911175 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:59:38 instance-1 lfd[911179]: *User Processing* PID:911174 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 16:59:39 instance-1 lfd[911179]: *User Processing* PID:911173 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:00:38 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 17:00:38 instance-1 lfd[911653]: *User Processing* PID:911642 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:00:39 instance-1 lfd[911653]: *User Processing* PID:911569 Kill:0 User:bmswinslow VM:698(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:01:38 instance-1 lfd[912052]: *User Processing* PID:912047 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:02:29 instance-1 lfd[912518]: (smtpauth) Failed SMTP AUTH login from 81.30.107.146 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 19 17:02:38 instance-1 lfd[912603]: *User Processing* PID:912599 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:03:38 instance-1 lfd[912987]: *User Processing* PID:912983 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:03:39 instance-1 lfd[912987]: *User Processing* PID:912974 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 17:04:39 instance-1 lfd[913379]: *User Processing* PID:913375 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:04:39 instance-1 lfd[913379]: *User Processing* PID:913374 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:05:39 instance-1 lfd[913807]: *User Processing* PID:913794 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 17:05:39 instance-1 lfd[913807]: *User Processing* PID:913799 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:07:39 instance-1 lfd[914657]: *User Processing* PID:914653 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:07:39 instance-1 lfd[914657]: *User Processing* PID:914652 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:08:39 instance-1 lfd[915004]: *User Processing* PID:915000 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:09:39 instance-1 lfd[915387]: *User Processing* PID:915382 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:09:39 instance-1 lfd[915387]: *User Processing* PID:915383 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:10:39 instance-1 lfd[915790]: *User Processing* PID:915782 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:11:39 instance-1 lfd[916122]: *User Processing* PID:916118 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:13:39 instance-1 lfd[916977]: *User Processing* PID:916970 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:16:39 instance-1 lfd[918069]: *User Processing* PID:918062 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:17:39 instance-1 lfd[918554]: *User Processing* PID:918549 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:19:39 instance-1 lfd[919389]: *User Processing* PID:919385 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:20:39 instance-1 lfd[919840]: *User Processing* PID:919829 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:20:39 instance-1 lfd[919838]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 17:20:39 instance-1 lfd[919838]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 17:22:39 instance-1 lfd[920774]: *User Processing* PID:920770 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:23:39 instance-1 lfd[921169]: *User Processing* PID:921162 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:25:39 instance-1 lfd[922048]: *User Processing* PID:922036 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:27:39 instance-1 lfd[922905]: *User Processing* PID:922898 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:27:39 instance-1 lfd[922905]: *User Processing* PID:922896 Kill:0 User:comphomes VM:619(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:27:39 instance-1 lfd[922905]: *User Processing* PID:922897 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:28:39 instance-1 lfd[923277]: *User Processing* PID:923273 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:29:39 instance-1 lfd[923628]: *User Processing* PID:923620 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:29:39 instance-1 lfd[923628]: *User Processing* PID:923619 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:30:39 instance-1 lfd[924042]: *User Processing* PID:924034 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:32:39 instance-1 lfd[924919]: *User Processing* PID:924915 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:34:39 instance-1 lfd[925624]: *User Processing* PID:925619 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:34:39 instance-1 lfd[925624]: *User Processing* PID:925620 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:35:39 instance-1 lfd[926066]: *User Processing* PID:926057 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:36:39 instance-1 lfd[926422]: *User Processing* PID:926418 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:36:39 instance-1 lfd[926422]: *User Processing* PID:926417 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:37:39 instance-1 lfd[926953]: *User Processing* PID:926949 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:39:39 instance-1 lfd[927694]: *User Processing* PID:927690 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:39:40 instance-1 lfd[927694]: *User Processing* PID:927689 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:40:40 instance-1 lfd[928099]: *User Processing* PID:928091 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:41:40 instance-1 lfd[928475]: *User Processing* PID:928471 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:42:40 instance-1 lfd[928872]: *User Processing* PID:928834 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:42:40 instance-1 lfd[928872]: *User Processing* PID:928857 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:43:40 instance-1 lfd[929337]: *User Processing* PID:929333 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:43:40 instance-1 lfd[929337]: *User Processing* PID:929332 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:44:40 instance-1 lfd[929691]: *User Processing* PID:929684 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:44:40 instance-1 lfd[929691]: *User Processing* PID:929683 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:46:40 instance-1 lfd[930483]: *User Processing* PID:930479 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:49:40 instance-1 lfd[931695]: *User Processing* PID:931691 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:50:40 instance-1 lfd[932121]: *User Processing* PID:932105 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:51:40 instance-1 lfd[932474]: *User Processing* PID:932467 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933782 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933780 Kill:0 User:geneticson VM:624(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933781 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:54:40 instance-1 lfd[933791]: *User Processing* PID:933774 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:55:40 instance-1 lfd[934234]: *User Processing* PID:934217 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:55:40 instance-1 lfd[934234]: *User Processing* PID:934218 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:56:40 instance-1 lfd[934596]: *User Processing* PID:934592 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:57:40 instance-1 lfd[934958]: *User Processing* PID:934950 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:57:40 instance-1 lfd[934958]: *User Processing* PID:934954 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:58:40 instance-1 lfd[935467]: *User Processing* PID:935459 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:59:40 instance-1 lfd[935835]: *User Processing* PID:935827 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 17:59:40 instance-1 lfd[935835]: *User Processing* PID:935828 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:00:40 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 18:00:40 instance-1 lfd[936310]: *User Processing* PID:936292 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:01:40 instance-1 lfd[936690]: *User Processing* PID:936681 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:01:40 instance-1 lfd[936690]: *User Processing* PID:936683 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:02:40 instance-1 lfd[937075]: *User Processing* PID:937068 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:03:40 instance-1 lfd[937671]: *User Processing* PID:937666 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:04:40 instance-1 lfd[938146]: *User Processing* PID:938142 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:04:40 instance-1 lfd[938146]: *User Processing* PID:938138 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:04:40 instance-1 lfd[938146]: *User Processing* PID:938136 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:06:40 instance-1 lfd[938969]: *User Processing* PID:938965 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:08:40 instance-1 lfd[939816]: *User Processing* PID:939812 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:09:40 instance-1 lfd[940205]: *User Processing* PID:940201 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:10:40 instance-1 lfd[940618]: *User Processing* PID:940610 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:11:40 instance-1 lfd[940989]: *User Processing* PID:940985 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:12:41 instance-1 lfd[941350]: *User Processing* PID:941346 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:12:41 instance-1 lfd[941350]: *User Processing* PID:941345 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:13:41 instance-1 lfd[941868]: *User Processing* PID:941864 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:14:41 instance-1 lfd[942231]: *User Processing* PID:942227 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:15:41 instance-1 lfd[942694]: *User Processing* PID:942681 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:16:41 instance-1 lfd[943082]: *User Processing* PID:943077 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:16:41 instance-1 lfd[943082]: *User Processing* PID:943078 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:17:41 instance-1 lfd[943466]: *User Processing* PID:943462 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:18:41 instance-1 lfd[944008]: *User Processing* PID:944003 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:19:41 instance-1 lfd[944362]: *User Processing* PID:944355 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:20:41 instance-1 lfd[944779]: *User Processing* PID:944766 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:20:41 instance-1 lfd[944777]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 18:20:41 instance-1 lfd[944777]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 18:21:41 instance-1 lfd[945136]: *User Processing* PID:945128 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:21:41 instance-1 lfd[945136]: *User Processing* PID:945132 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:22:41 instance-1 lfd[945501]: *User Processing* PID:945494 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:22:41 instance-1 lfd[945501]: *User Processing* PID:945493 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:23:41 instance-1 lfd[945990]: *User Processing* PID:945983 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:26:41 instance-1 lfd[947129]: *User Processing* PID:947125 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:27:41 instance-1 lfd[947491]: *User Processing* PID:947487 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:29:41 instance-1 lfd[948366]: *User Processing* PID:948355 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:29:41 instance-1 lfd[948366]: *User Processing* PID:948351 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:29:41 instance-1 lfd[948366]: *User Processing* PID:948352 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:31:41 instance-1 lfd[949162]: *User Processing* PID:949154 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:31:41 instance-1 lfd[949162]: *User Processing* PID:949155 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:32:41 instance-1 lfd[949575]: *User Processing* PID:949567 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:35:41 instance-1 lfd[950828]: *User Processing* PID:950816 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:35:41 instance-1 lfd[950828]: *User Processing* PID:950817 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:36:41 instance-1 lfd[951223]: *User Processing* PID:951219 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:37:41 instance-1 lfd[951586]: *User Processing* PID:951582 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:38:41 instance-1 lfd[951940]: *User Processing* PID:951936 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:41:41 instance-1 lfd[953192]: *User Processing* PID:953181 Kill:0 User:nlph VM:594(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:41:42 instance-1 lfd[953192]: *User Processing* PID:953188 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:44:42 instance-1 lfd[954415]: *User Processing* PID:954410 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:44:42 instance-1 lfd[954415]: *User Processing* PID:954411 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:46:42 instance-1 lfd[955211]: *User Processing* PID:955207 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:46:42 instance-1 lfd[955211]: *User Processing* PID:955075 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 18:48:42 instance-1 lfd[955976]: *User Processing* PID:955972 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:51:42 instance-1 lfd[957490]: *User Processing* PID:957481 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:52:42 instance-1 lfd[957913]: *User Processing* PID:957905 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:52:42 instance-1 lfd[957913]: *User Processing* PID:957906 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:53:42 instance-1 lfd[958319]: *User Processing* PID:958315 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:55:42 instance-1 lfd[959423]: *User Processing* PID:959415 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:56:42 instance-1 lfd[959858]: *User Processing* PID:959852 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:56:42 instance-1 lfd[959858]: *User Processing* PID:959854 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:56:42 instance-1 lfd[959858]: *User Processing* PID:959851 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:58:42 instance-1 lfd[960688]: *User Processing* PID:960680 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:59:42 instance-1 lfd[961257]: *User Processing* PID:961250 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:59:42 instance-1 lfd[961257]: *User Processing* PID:961246 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 18:59:42 instance-1 lfd[961257]: *User Processing* PID:961247 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:00:42 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 19:00:42 instance-1 lfd[961740]: *User Processing* PID:961726 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:01:42 instance-1 lfd[962113]: *User Processing* PID:962106 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:01:42 instance-1 lfd[962113]: *User Processing* PID:962105 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:02:42 instance-1 lfd[962499]: *User Processing* PID:962495 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:04:42 instance-1 lfd[963351]: *User Processing* PID:963347 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:05:42 instance-1 lfd[963808]: *User Processing* PID:963795 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:05:42 instance-1 lfd[963808]: *User Processing* PID:963799 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:05:43 instance-1 lfd[963808]: *User Processing* PID:963794 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:05:43 instance-1 lfd[963808]: *User Processing* PID:963800 Kill:0 User:winslowgroupweb VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:07:42 instance-1 lfd[964680]: *User Processing* PID:964672 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:07:42 instance-1 lfd[964680]: *User Processing* PID:964676 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:08:42 instance-1 lfd[965063]: *User Processing* PID:965058 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:08:42 instance-1 lfd[965063]: *User Processing* PID:965057 Kill:0 User:comphomes VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:08:42 instance-1 lfd[965063]: *User Processing* PID:965059 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:09:42 instance-1 lfd[965614]: *User Processing* PID:965610 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:10:42 instance-1 lfd[966069]: *User Processing* PID:966052 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:10:42 instance-1 lfd[966069]: *User Processing* PID:966050 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:11:42 instance-1 lfd[966484]: *User Processing* PID:966480 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:11:42 instance-1 lfd[966484]: *User Processing* PID:966479 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:12:42 instance-1 lfd[966882]: *User Processing* PID:966877 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:12:43 instance-1 lfd[966882]: *User Processing* PID:966874 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:12:43 instance-1 lfd[966882]: *User Processing* PID:966878 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:14:42 instance-1 lfd[967820]: *User Processing* PID:967814 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:14:43 instance-1 lfd[967820]: *User Processing* PID:967815 Kill:0 User:comphomes VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:14:43 instance-1 lfd[967820]: *User Processing* PID:967813 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:15:43 instance-1 lfd[968291]: *User Processing* PID:968276 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:16:43 instance-1 lfd[968696]: *User Processing* PID:968692 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:16:43 instance-1 lfd[968696]: *User Processing* PID:968691 Kill:0 User:comphomes VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:17:43 instance-1 lfd[969099]: *User Processing* PID:969095 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969958 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969956 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969957 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:19:43 instance-1 lfd[969963]: *User Processing* PID:969955 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:20:43 instance-1 lfd[970641]: *User Processing* PID:970624 Kill:0 User:comphomes VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:20:43 instance-1 lfd[970641]: *User Processing* PID:970627 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:20:43 instance-1 lfd[970641]: *User Processing* PID:970625 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:20:43 instance-1 lfd[970639]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 19:20:43 instance-1 lfd[970639]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 19:23:43 instance-1 lfd[972067]: *User Processing* PID:972062 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:24:43 instance-1 lfd[972456]: *User Processing* PID:972452 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:25:43 instance-1 lfd[973062]: *User Processing* PID:973044 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:25:43 instance-1 lfd[973062]: *User Processing* PID:973048 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:29:43 instance-1 lfd[974606]: *User Processing* PID:974597 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:29:43 instance-1 lfd[974606]: *User Processing* PID:974601 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:30:43 instance-1 lfd[975212]: *User Processing* PID:975204 Kill:0 User:comphomes VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:30:43 instance-1 lfd[975212]: *User Processing* PID:975199 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:30:43 instance-1 lfd[975212]: *User Processing* PID:975200 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:31:43 instance-1 lfd[975619]: *User Processing* PID:975615 Kill:0 User:comphomes VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:32:43 instance-1 lfd[976090]: *User Processing* PID:976086 Kill:0 User:comphomes VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:33:43 instance-1 lfd[976499]: *User Processing* PID:976491 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:33:43 instance-1 lfd[976499]: *User Processing* PID:976495 Kill:0 User:comphomes VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:34:43 instance-1 lfd[976886]: *User Processing* PID:976882 Kill:0 User:comphomes VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:38:43 instance-1 lfd[978596]: *User Processing* PID:978588 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:38:43 instance-1 lfd[978596]: *User Processing* PID:978592 Kill:0 User:comphomes VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:40:43 instance-1 lfd[979573]: *User Processing* PID:979563 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:41:43 instance-1 lfd[979983]: *User Processing* PID:979978 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:41:44 instance-1 lfd[979983]: *User Processing* PID:979979 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:43:43 instance-1 lfd[980770]: *User Processing* PID:980760 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:43:44 instance-1 lfd[980770]: *User Processing* PID:980766 Kill:0 User:mainpoint VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:43:44 instance-1 lfd[980770]: *User Processing* PID:980764 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:44:43 instance-1 lfd[981164]: *User Processing* PID:981160 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:45:44 instance-1 lfd[981771]: *User Processing* PID:981762 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:46:44 instance-1 lfd[982146]: *User Processing* PID:982142 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:49:44 instance-1 lfd[983240]: *User Processing* PID:983236 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:50:44 instance-1 lfd[983774]: *User Processing* PID:983766 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:51:44 instance-1 lfd[984136]: *User Processing* PID:984128 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:54:44 instance-1 lfd[985293]: *User Processing* PID:985289 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:56:44 instance-1 lfd[986162]: *User Processing* PID:986157 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:56:44 instance-1 lfd[986162]: *User Processing* PID:986158 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:57:44 instance-1 lfd[986528]: *User Processing* PID:986524 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:58:44 instance-1 lfd[986870]: *User Processing* PID:986866 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:58:44 instance-1 lfd[986870]: *User Processing* PID:986862 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 19:59:44 instance-1 lfd[987225]: *User Processing* PID:987218 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:00:44 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 20:00:44 instance-1 lfd[987818]: *User Processing* PID:987804 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:02:44 instance-1 lfd[988619]: *User Processing* PID:988612 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:03:21 instance-1 lfd[988882]: (smtpauth) Failed SMTP AUTH login from 80.94.92.131 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 19 20:03:44 instance-1 lfd[989050]: *User Processing* PID:989046 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:03:44 instance-1 lfd[989050]: *User Processing* PID:989042 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:04:44 instance-1 lfd[989492]: *User Processing* PID:989488 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:05:44 instance-1 lfd[990120]: *User Processing* PID:990110 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:05:44 instance-1 lfd[990120]: *User Processing* PID:990111 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:07:44 instance-1 lfd[990984]: *User Processing* PID:990975 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:07:44 instance-1 lfd[990984]: *User Processing* PID:990922 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 20:07:44 instance-1 lfd[990984]: *User Processing* PID:990980 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:08:44 instance-1 lfd[991414]: *User Processing* PID:991408 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:10:44 instance-1 lfd[992377]: *User Processing* PID:992361 Kill:0 User:newswinslow VM:544(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 20:10:44 instance-1 lfd[992377]: *User Processing* PID:992368 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:11:44 instance-1 lfd[992770]: *User Processing* PID:992766 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:14:44 instance-1 lfd[994049]: *User Processing* PID:994041 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:15:45 instance-1 lfd[994559]: *User Processing* PID:994550 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:15:45 instance-1 lfd[994559]: *User Processing* PID:994551 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:18:45 instance-1 lfd[995829]: *User Processing* PID:995823 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:18:45 instance-1 lfd[995829]: *User Processing* PID:995825 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:19:45 instance-1 lfd[996214]: *User Processing* PID:996209 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:19:45 instance-1 lfd[996214]: *User Processing* PID:996210 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:20:45 instance-1 lfd[996658]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 20:20:45 instance-1 lfd[996658]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 20:22:45 instance-1 lfd[997560]: *User Processing* PID:997553 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:23:45 instance-1 lfd[997930]: *User Processing* PID:997926 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:24:45 instance-1 lfd[998310]: *User Processing* PID:998306 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:25:45 instance-1 lfd[998742]: *User Processing* PID:998733 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:25:45 instance-1 lfd[998742]: *User Processing* PID:998734 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:26:45 instance-1 lfd[999270]: *User Processing* PID:999264 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:29:45 instance-1 lfd[1000611]: *User Processing* PID:1000604 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:30:45 instance-1 lfd[1001131]: *User Processing* PID:1001119 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:30:45 instance-1 lfd[1001131]: *User Processing* PID:1001117 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:31:45 instance-1 lfd[1001710]: *User Processing* PID:1001702 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:31:45 instance-1 lfd[1001710]: *User Processing* PID:1001703 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:32:45 instance-1 lfd[1002178]: *User Processing* PID:1002171 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:34:45 instance-1 lfd[1003012]: *User Processing* PID:1003004 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:34:45 instance-1 lfd[1003012]: *User Processing* PID:1003005 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:35:45 instance-1 lfd[1003458]: *User Processing* PID:1003447 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:36:45 instance-1 lfd[1003964]: *User Processing* PID:1003959 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:36:45 instance-1 lfd[1003964]: *User Processing* PID:1003960 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:37:45 instance-1 lfd[1004341]: *User Processing* PID:1004337 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:38:45 instance-1 lfd[1004754]: *Excessive Processes* User:rcpacom Kill:0 Process Count:12 Mar 19 20:38:45 instance-1 lfd[1004754]: *User Processing* PID:1004702 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 20:38:45 instance-1 lfd[1004754]: *User Processing* PID:1004747 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:39:45 instance-1 lfd[1005165]: *User Processing* PID:1005161 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:40:45 instance-1 lfd[1005585]: *User Processing* PID:1005575 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:40:45 instance-1 lfd[1005585]: *User Processing* PID:1005577 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:42:45 instance-1 lfd[1006487]: *User Processing* PID:1006482 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:42:45 instance-1 lfd[1006487]: *User Processing* PID:1006483 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:43:45 instance-1 lfd[1006969]: *User Processing* PID:1006961 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:44:45 instance-1 lfd[1007448]: *User Processing* PID:1007443 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:45:45 instance-1 lfd[1007974]: *User Processing* PID:1007965 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:47:45 instance-1 lfd[1009005]: *User Processing* PID:1008962 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 20:47:45 instance-1 lfd[1009005]: *User Processing* PID:1009001 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:48:45 instance-1 lfd[1009402]: *User Processing* PID:1009398 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:49:45 instance-1 lfd[1009769]: *User Processing* PID:1009764 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:50:45 instance-1 lfd[1010196]: *User Processing* PID:1010187 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:51:46 instance-1 lfd[1010697]: *User Processing* PID:1010692 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:51:46 instance-1 lfd[1010697]: *User Processing* PID:1010693 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:53:46 instance-1 lfd[1011432]: *User Processing* PID:1011428 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:54:46 instance-1 lfd[1011892]: *User Processing* PID:1011887 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:54:46 instance-1 lfd[1011892]: *User Processing* PID:1011888 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:55:46 instance-1 lfd[1012308]: *User Processing* PID:1012300 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:56:46 instance-1 lfd[1012841]: *User Processing* PID:1012834 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:56:46 instance-1 lfd[1012841]: *User Processing* PID:1012832 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 20:59:46 instance-1 lfd[1013966]: *User Processing* PID:1013959 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:00:46 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 21:00:46 instance-1 lfd[1014397]: *User Processing* PID:1014382 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:00:46 instance-1 lfd[1014397]: *User Processing* PID:1014383 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:01:46 instance-1 lfd[1014987]: *User Processing* PID:1014980 Kill:0 User:rcpacom VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:01:46 instance-1 lfd[1014987]: *User Processing* PID:1014982 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:02:46 instance-1 lfd[1015444]: *User Processing* PID:1015439 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:04:46 instance-1 lfd[1016331]: *User Processing* PID:1016324 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:06:46 instance-1 lfd[1017388]: *User Processing* PID:1017379 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:06:46 instance-1 lfd[1017388]: *User Processing* PID:1017376 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 21:07:46 instance-1 lfd[1017820]: *User Processing* PID:1017811 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:09:46 instance-1 lfd[1018656]: *User Processing* PID:1018651 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:10:46 instance-1 lfd[1019072]: *User Processing* PID:1019060 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:11:46 instance-1 lfd[1019437]: *User Processing* PID:1019433 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:14:46 instance-1 lfd[1020648]: *User Processing* PID:1020644 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:15:46 instance-1 lfd[1021074]: *User Processing* PID:1021063 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:16:46 instance-1 lfd[1021445]: *User Processing* PID:1021436 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:17:46 instance-1 lfd[1021945]: *User Processing* PID:1021941 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:17:46 instance-1 lfd[1021945]: *User Processing* PID:1021939 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:18:46 instance-1 lfd[1022329]: *User Processing* PID:1022320 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:18:46 instance-1 lfd[1022329]: *User Processing* PID:1022324 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:18:46 instance-1 lfd[1022329]: *User Processing* PID:1022325 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:19:46 instance-1 lfd[1022707]: *User Processing* PID:1022703 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:20:46 instance-1 lfd[1023111]: *User Processing* PID:1023100 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:20:47 instance-1 lfd[1023109]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 21:20:47 instance-1 lfd[1023109]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 21:21:46 instance-1 lfd[1023504]: *User Processing* PID:1023497 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:22:46 instance-1 lfd[1024029]: *User Processing* PID:1024025 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:22:46 instance-1 lfd[1024029]: *User Processing* PID:1024024 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:23:46 instance-1 lfd[1024460]: *User Processing* PID:1024453 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:23:46 instance-1 lfd[1024460]: *User Processing* PID:1024456 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:23:47 instance-1 lfd[1024460]: *User Processing* PID:1024455 Kill:0 User:mainpoint VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:24:46 instance-1 lfd[1024915]: *User Processing* PID:1024910 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:25:47 instance-1 lfd[1025378]: *User Processing* PID:1025369 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:26:46 instance-1 lfd[1025800]: *User Processing* PID:1025792 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:27:47 instance-1 lfd[1026338]: *User Processing* PID:1026334 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:27:47 instance-1 lfd[1026338]: *User Processing* PID:1026333 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:28:47 instance-1 lfd[1026786]: *User Processing* PID:1026781 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:32:47 instance-1 lfd[1028648]: *User Processing* PID:1028644 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:33:47 instance-1 lfd[1029053]: *User Processing* PID:1029049 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:33:47 instance-1 lfd[1029053]: *User Processing* PID:1029048 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:34:47 instance-1 lfd[1029421]: *User Processing* PID:1029413 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:34:47 instance-1 lfd[1029421]: *User Processing* PID:1029414 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:35:47 instance-1 lfd[1029877]: *User Processing* PID:1029866 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:37:47 instance-1 lfd[1030735]: *User Processing* PID:1030729 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:37:47 instance-1 lfd[1030735]: *User Processing* PID:1030730 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:38:47 instance-1 lfd[1031103]: *User Processing* PID:1031099 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:40:47 instance-1 lfd[1031901]: *User Processing* PID:1031889 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:41:47 instance-1 lfd[1032186]: *User Processing* PID:1032182 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:42:47 instance-1 lfd[1032484]: *User Processing* PID:1032477 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:44:47 instance-1 lfd[1033189]: *User Processing* PID:1033182 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:47:47 instance-1 lfd[1034145]: *User Processing* PID:1034141 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:49:47 instance-1 lfd[1035052]: *User Processing* PID:1035042 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:50:47 instance-1 lfd[1035516]: *User Processing* PID:1035505 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:50:47 instance-1 lfd[1035516]: *User Processing* PID:1035498 Kill:0 User:newswinslow VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 19 21:51:47 instance-1 lfd[1035892]: *User Processing* PID:1035817 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 21:53:47 instance-1 lfd[1036730]: *User Processing* PID:1036726 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:58:47 instance-1 lfd[1038648]: *User Processing* PID:1038644 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 21:59:52 instance-1 lfd[1039354]: *User Processing* PID:1039293 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:00:46 instance-1 lfd[551650]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 22:00:58 instance-1 lfd[1039827]: *System Integrity* has detected modified file(s): /usr/bin/cpapi1 /usr/bin/cpapi2 /usr/bin/cpapi3 /usr/bin/uapi /usr/sbin/whmapi0 /usr/sbin/whmapi1 /bin/cpapi1 /bin/cpapi2 /bin/cpapi3 /bin/uapi /sbin/whmapi0 /sbin/whmapi1 /usr/local/bin/crontab /usr/local/bin/passwd Mar 19 22:02:52 instance-1 lfd[1041261]: *User Processing* PID:1041251 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:03:21 instance-1 lfd[551650]: Main Process: TERM Mar 19 22:03:21 instance-1 lfd[551650]: daemon stopped Mar 19 22:03:22 instance-1 lfd[1041792]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 19 22:03:22 instance-1 lfd[1041792]: LF_APACHE_ERRPORT: Set to [2] Mar 19 22:03:22 instance-1 lfd[1041792]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 19 22:03:22 instance-1 lfd[1041792]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 19 22:03:22 instance-1 lfd[1041792]: CSF Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: IPv6 Enabled... Mar 19 22:03:22 instance-1 lfd[1041792]: LOAD Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 19 22:03:22 instance-1 lfd[1041792]: Country Code Lookups... Mar 19 22:03:22 instance-1 lfd[1041792]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 22:03:22 instance-1 lfd[1041792]: System Integrity Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Exploit Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Directory Watching... Mar 19 22:03:22 instance-1 lfd[1041792]: Email Queue Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: ModSecurity IP D/B Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Email Relay Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Temp to Perm Block Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: System Statistics... Mar 19 22:03:22 instance-1 lfd[1041792]: Process Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Account Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: SSH Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Webmin Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: SU Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Console Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: WHM Tracking... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/customlog... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/messages... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/exim_mainlog... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/secure... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /etc/apache2/logs/error_log... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /usr/local/cpanel/logs/access_log... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /var/log/maillog... Mar 19 22:03:22 instance-1 lfd[1041792]: Watching /usr/local/cpanel/logs/login_log... Mar 19 22:03:23 instance-1 lfd[1041816]: *User Processing* PID:1041812 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:07:23 instance-1 lfd[1044088]: *User Processing* PID:1044083 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:08:23 instance-1 lfd[1044661]: *User Processing* PID:1044653 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:08:26 instance-1 lfd[1044659]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 22:08:26 instance-1 lfd[1044659]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 22:10:23 instance-1 lfd[1045721]: *User Processing* PID:1045710 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 22:11:23 instance-1 lfd[1046198]: *User Processing* PID:1046190 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:12:23 instance-1 lfd[1046603]: *User Processing* PID:1046596 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:15:23 instance-1 lfd[1047940]: *User Processing* PID:1047931 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:18:23 instance-1 lfd[1049119]: *User Processing* PID:1049087 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:19:23 instance-1 lfd[1049518]: *User Processing* PID:1049454 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 22:19:23 instance-1 lfd[1049518]: *User Processing* PID:1049514 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:20:23 instance-1 lfd[1049929]: *User Processing* PID:1049925 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:23:23 instance-1 lfd[1051077]: *User Processing* PID:1051068 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:25:23 instance-1 lfd[1051819]: *User Processing* PID:1051813 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:26:23 instance-1 lfd[1052163]: *User Processing* PID:1052158 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:29:24 instance-1 lfd[1053252]: *User Processing* PID:1053248 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:30:24 instance-1 lfd[1053607]: *User Processing* PID:1053603 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:31:24 instance-1 lfd[1053901]: *User Processing* PID:1053897 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:32:24 instance-1 lfd[1054242]: *User Processing* PID:1054238 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:33:24 instance-1 lfd[1054603]: *User Processing* PID:1054585 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:34:24 instance-1 lfd[1055025]: *User Processing* PID:1055018 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:35:24 instance-1 lfd[1055395]: *User Processing* PID:1055388 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:36:24 instance-1 lfd[1055687]: *User Processing* PID:1055682 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:37:24 instance-1 lfd[1056091]: *User Processing* PID:1056072 Kill:0 User:bmswinslow VM:646(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:37:24 instance-1 lfd[1056091]: *User Processing* PID:1056082 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:38:24 instance-1 lfd[1056454]: *User Processing* PID:1056441 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:40:24 instance-1 lfd[1057562]: *User Processing* PID:1057556 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:43:24 instance-1 lfd[1058994]: *User Processing* PID:1058982 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:44:24 instance-1 lfd[1059547]: *User Processing* PID:1059484 Kill:0 User:comphomes VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:44:24 instance-1 lfd[1059547]: *User Processing* PID:1059421 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 22:44:24 instance-1 lfd[1059547]: *User Processing* PID:1059543 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:50:24 instance-1 lfd[1061670]: *User Processing* PID:1061666 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:51:24 instance-1 lfd[1062002]: *User Processing* PID:1061997 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:51:24 instance-1 lfd[1062002]: *User Processing* PID:1061998 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:52:24 instance-1 lfd[1062355]: *User Processing* PID:1062351 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:53:24 instance-1 lfd[1062726]: *User Processing* PID:1062715 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 22:58:24 instance-1 lfd[1064452]: *User Processing* PID:1064443 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 23:00:24 instance-1 lfd[1065260]: *User Processing* PID:1065256 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 23:03:24 instance-1 lfd[1041792]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 19 23:10:25 instance-1 lfd[1068947]: *Excessive Processes* User:tuscomau Kill:0 Process Count:12 Mar 19 23:11:25 instance-1 lfd[1069458]: *Excessive Processes* User:winslow Kill:0 Process Count:13 Mar 19 23:13:25 instance-1 lfd[1070496]: *Excessive Processes* User:opthirecomau Kill:0 Process Count:11 Mar 19 23:13:36 instance-1 lfd[1070493]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 19 23:13:36 instance-1 lfd[1070493]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 19 23:14:25 instance-1 lfd[1070987]: *User Processing* PID:1070955 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 23:15:25 instance-1 lfd[1071631]: *Excessive Processes* User:tekutaro Kill:0 Process Count:11 Mar 19 23:19:25 instance-1 lfd[1073696]: *User Processing* PID:1073558 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 19 23:31:26 instance-1 lfd[1078032]: *User Processing* PID:1078001 Kill:0 User:trafman VM:578(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 23:32:26 instance-1 lfd[1078323]: *User Processing* PID:1078316 Kill:0 User:tuscomau VM:565(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 23:32:26 instance-1 lfd[1078323]: *User Processing* PID:1078244 Kill:0 User:trafman VM:596(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 23:32:26 instance-1 lfd[1078323]: *User Processing* PID:1078313 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 23:33:26 instance-1 lfd[1078628]: *User Processing* PID:1078577 Kill:0 User:trafman VM:614(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 23:34:26 instance-1 lfd[1079008]: *User Processing* PID:1078990 Kill:0 User:trafman VM:613(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 19 23:53:26 instance-1 lfd[1085014]: *User Processing* PID:1085002 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 23:53:26 instance-1 lfd[1085014]: *User Processing* PID:1085001 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 19 23:59:26 instance-1 lfd[1086923]: *User Processing* PID:1086919 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:00:02 instance-1 lfd[1041792]: Main Process: TERM Mar 20 00:00:02 instance-1 lfd[1041792]: daemon stopped Mar 20 00:00:02 instance-1 lfd[1087322]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 20 00:00:02 instance-1 lfd[1087322]: LF_APACHE_ERRPORT: Set to [2] Mar 20 00:00:02 instance-1 lfd[1087322]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 20 00:00:02 instance-1 lfd[1087322]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 20 00:00:02 instance-1 lfd[1087322]: CSF Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: IPv6 Enabled... Mar 20 00:00:02 instance-1 lfd[1087322]: LOAD Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 20 00:00:02 instance-1 lfd[1087322]: Country Code Lookups... Mar 20 00:00:02 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 00:00:02 instance-1 lfd[1087322]: System Integrity Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: Exploit Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: Directory Watching... Mar 20 00:00:02 instance-1 lfd[1087322]: Email Queue Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: ModSecurity IP D/B Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: Email Relay Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: Temp to Perm Block Tracking... Mar 20 00:00:02 instance-1 lfd[1087322]: System Statistics... Mar 20 00:00:03 instance-1 lfd[1087322]: Process Tracking... Mar 20 00:00:03 instance-1 lfd[1087322]: Account Tracking... Mar 20 00:00:03 instance-1 lfd[1087322]: SSH Tracking... Mar 20 00:00:03 instance-1 lfd[1087322]: Webmin Tracking... Mar 20 00:00:03 instance-1 lfd[1087322]: SU Tracking... Mar 20 00:00:03 instance-1 lfd[1087322]: Console Tracking... Mar 20 00:00:03 instance-1 lfd[1087322]: WHM Tracking... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/secure... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /etc/apache2/logs/error_log... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /usr/local/cpanel/logs/login_log... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/customlog... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /usr/local/cpanel/logs/access_log... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/exim_mainlog... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/messages... Mar 20 00:00:03 instance-1 lfd[1087322]: Watching /var/log/maillog... Mar 20 00:01:03 instance-1 lfd[1087698]: *User Processing* PID:1087349 Kill:0 User:winslowgroupweb VM:527(MB) EXE:/home/virtfs/winslowgroupweb/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/winslowgroupweb/public_html/opthire.winslowgroup.com.au/cli/joomla.php akeeba:backup:take Mar 20 00:05:03 instance-1 lfd[1089187]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 00:05:03 instance-1 lfd[1089187]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 00:10:03 instance-1 lfd[1090799]: *User Processing* PID:1090790 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 00:16:03 instance-1 lfd[1092653]: *User Processing* PID:1092646 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:17:03 instance-1 lfd[1092931]: *User Processing* PID:1092924 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:19:03 instance-1 lfd[1093513]: *User Processing* PID:1093509 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:24:03 instance-1 lfd[1095186]: *User Processing* PID:1095182 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:25:03 instance-1 lfd[1095526]: *User Processing* PID:1095517 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:26:03 instance-1 lfd[1095960]: *User Processing* PID:1095956 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:29:03 instance-1 lfd[1096874]: *User Processing* PID:1096869 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:30:04 instance-1 lfd[1097308]: *User Processing* PID:1097298 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:36:04 instance-1 lfd[1100043]: *User Processing* PID:1100036 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:44:04 instance-1 lfd[1102930]: *User Processing* PID:1102926 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:49:04 instance-1 lfd[1104907]: *User Processing* PID:1104902 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 00:52:04 instance-1 lfd[1106167]: *User Processing* PID:1106163 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 01:00:04 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 01:05:05 instance-1 lfd[1110108]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 01:05:05 instance-1 lfd[1110108]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 01:21:31 instance-1 lfd[1115230]: (smtpauth) Failed SMTP AUTH login from 81.30.107.121 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 01:25:41 instance-1 lfd[1116464]: (smtpauth) Failed SMTP AUTH login from 81.30.107.90 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 01:31:16 instance-1 lfd[1118163]: (smtpauth) Failed SMTP AUTH login from 81.30.107.149 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 01:31:41 instance-1 lfd[1118282]: (smtpauth) Failed SMTP AUTH login from 81.30.107.145 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 01:33:06 instance-1 lfd[1118748]: *User Processing* PID:1118744 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 01:33:56 instance-1 lfd[1118997]: (smtpauth) Failed SMTP AUTH login from 81.30.107.159 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 01:40:21 instance-1 lfd[1121210]: (smtpauth) Failed SMTP AUTH login from 81.30.107.136 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 01:43:06 instance-1 lfd[1122116]: *User Processing* PID:1122112 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 01:44:06 instance-1 lfd[1122444]: *User Processing* PID:1122430 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 01:46:06 instance-1 lfd[1123232]: *User Processing* PID:1123221 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 02:00:07 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 02:00:07 instance-1 lfd[1128042]: *User Processing* PID:1128030 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 02:05:07 instance-1 lfd[1129522]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 02:05:07 instance-1 lfd[1129522]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 02:20:07 instance-1 lfd[1134542]: *User Processing* PID:1134533 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 02:28:07 instance-1 lfd[1137809]: *User Processing* PID:1137804 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 02:39:33 instance-1 lfd[1142069]: (smtpauth) Failed SMTP AUTH login from 182.162.100.146 (KR/Republic of Korea/coson.co.kr): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 03:00:09 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 03:05:09 instance-1 lfd[1149664]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 03:05:09 instance-1 lfd[1149664]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 03:20:09 instance-1 lfd[1154029]: *User Processing* PID:1154009 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 03:20:09 instance-1 lfd[1154029]: *User Processing* PID:1154020 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 03:24:09 instance-1 lfd[1155140]: *User Processing* PID:1155099 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 03:25:10 instance-1 lfd[1155460]: *User Processing* PID:1155440 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 03:26:10 instance-1 lfd[1155746]: *User Processing* PID:1155718 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 03:27:10 instance-1 lfd[1156016]: *User Processing* PID:1155950 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 03:33:10 instance-1 lfd[1157754]: *User Processing* PID:1157679 Kill:0 User:bmswinslow VM:623(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 03:33:10 instance-1 lfd[1157754]: *User Processing* PID:1157660 Kill:0 User:bmswinslow VM:716(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 03:49:10 instance-1 lfd[1164936]: *User Processing* PID:1164911 Kill:0 User:nlph VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nlph/public_html theme auto-updates status --all --enabled-only --field=name --skip-themes=genesis,magazine,twentyeleven,twentyfifteen,twentyfourteen,twentynineteen,twentysixteen,twentythirteen,twentytwelve,twentytwenty,twentytwentyfour,twentytwentyone,twentytwentythree,twentytwentytwo Mar 20 03:52:11 instance-1 lfd[1167980]: *User Processing* PID:1167972 Kill:0 User:geneticson VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html instance info --format=json --check-updates=true Mar 20 03:53:11 instance-1 lfd[1169005]: *User Processing* PID:1169001 Kill:0 User:bmswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html instance info --format=json --check-updates=true Mar 20 03:54:11 instance-1 lfd[1170037]: *User Processing* PID:1170032 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/foster/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json Mar 20 03:55:11 instance-1 lfd[1171056]: *User Processing* PID:1171032 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 03:55:11 instance-1 lfd[1171056]: *User Processing* PID:1171041 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/tuscomau/public_html wpt-cron event reschedule wp_version_check +2 day Mar 20 04:00:11 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 04:02:11 instance-1 lfd[1174272]: *User Processing* PID:1174267 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:03:11 instance-1 lfd[1174578]: *User Processing* PID:1174571 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:05:11 instance-1 lfd[1175291]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 04:05:12 instance-1 lfd[1175291]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 04:34:12 instance-1 lfd[1184034]: *User Processing* PID:1184026 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 04:42:12 instance-1 lfd[1186742]: *User Processing* PID:1186737 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:44:12 instance-1 lfd[1187405]: *User Processing* PID:1187401 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:46:13 instance-1 lfd[1188246]: *User Processing* PID:1188242 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:47:13 instance-1 lfd[1188591]: *User Processing* PID:1188587 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:49:13 instance-1 lfd[1189275]: *User Processing* PID:1189271 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:50:13 instance-1 lfd[1189658]: *User Processing* PID:1189646 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 04:50:13 instance-1 lfd[1189658]: *User Processing* PID:1189647 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 05:00:13 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 05:05:13 instance-1 lfd[1194389]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 05:05:14 instance-1 lfd[1194389]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 05:08:13 instance-1 lfd[1195537]: *User Processing* PID:1195532 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 05:46:35 instance-1 lfd[1206953]: (smtpauth) Failed SMTP AUTH login from 81.30.107.89 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 05:53:15 instance-1 lfd[1209208]: *User Processing* PID:1209190 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 05:53:15 instance-1 lfd[1209208]: *User Processing* PID:1209198 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 05:55:15 instance-1 lfd[1210233]: *User Processing* PID:1210223 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 05:56:15 instance-1 lfd[1210644]: *User Processing* PID:1210630 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 05:56:15 instance-1 lfd[1210644]: *User Processing* PID:1210637 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 05:57:21 instance-1 lfd[1210963]: (smtpauth) Failed SMTP AUTH login from 81.30.107.94 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 06:00:15 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 06:05:16 instance-1 lfd[1213462]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 06:05:16 instance-1 lfd[1213462]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 06:42:17 instance-1 lfd[1224044]: *User Processing* PID:1224040 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 06:44:17 instance-1 lfd[1224756]: *User Processing* PID:1224752 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 06:45:17 instance-1 lfd[1225109]: *User Processing* PID:1225100 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 06:46:17 instance-1 lfd[1225414]: *User Processing* PID:1225410 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 07:00:17 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 07:05:18 instance-1 lfd[1231696]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 07:05:18 instance-1 lfd[1231696]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 07:08:18 instance-1 lfd[1232546]: *User Processing* PID:1232542 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 07:17:18 instance-1 lfd[1235563]: *User Processing* PID:1235559 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 07:27:19 instance-1 lfd[1238885]: *User Processing* PID:1238880 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 07:28:19 instance-1 lfd[1239214]: *User Processing* PID:1239210 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:00:20 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 08:01:20 instance-1 lfd[1250539]: *User Processing* PID:1250535 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:02:20 instance-1 lfd[1250939]: *User Processing* PID:1250935 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:03:20 instance-1 lfd[1251346]: *User Processing* PID:1251342 Kill:0 User:foster VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:05:20 instance-1 lfd[1252133]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 08:05:20 instance-1 lfd[1252133]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 08:06:20 instance-1 lfd[1252638]: *User Processing* PID:1252630 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:08:20 instance-1 lfd[1253370]: *User Processing* PID:1253366 Kill:0 User:foster VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:09:20 instance-1 lfd[1253772]: *User Processing* PID:1253767 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:09:20 instance-1 lfd[1253772]: *User Processing* PID:1253752 Kill:0 User:comphomes VM:621(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:09:20 instance-1 lfd[1253772]: *User Processing* PID:1253763 Kill:0 User:comphomes VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:13:20 instance-1 lfd[1255458]: *User Processing* PID:1255452 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:14:20 instance-1 lfd[1255861]: *User Processing* PID:1255856 Kill:0 User:foster VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:14:31 instance-1 lfd[1255925]: (smtpauth) Failed SMTP AUTH login from 81.30.107.195 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 08:15:20 instance-1 lfd[1256330]: *User Processing* PID:1256321 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:18:20 instance-1 lfd[1257577]: *User Processing* PID:1257573 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:21:21 instance-1 lfd[1258847]: *User Processing* PID:1258842 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:22:21 instance-1 lfd[1259260]: *User Processing* PID:1259254 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 08:24:11 instance-1 lfd[1259770]: (smtpauth) Failed SMTP AUTH login from 81.30.107.64 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 08:33:06 instance-1 lfd[1262527]: (smtpauth) Failed SMTP AUTH login from 81.30.107.174 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 08:41:42 instance-1 lfd[1265211]: (smtpauth) Failed SMTP AUTH login from 81.30.107.205 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 08:43:21 instance-1 lfd[1265632]: *User Processing* PID:1265567 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 08:45:21 instance-1 lfd[1266210]: *User Processing* PID:1266177 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 08:53:52 instance-1 lfd[1268964]: (smtpauth) Failed SMTP AUTH login from 195.178.110.209 (-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 08:55:27 instance-1 lfd[1269632]: (smtpauth) Failed SMTP AUTH login from 80.94.95.228 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 09:00:22 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 09:03:22 instance-1 lfd[1272301]: *User Processing* PID:1272296 Kill:0 User:rcpacom VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 09:05:23 instance-1 lfd[1272916]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 09:05:23 instance-1 lfd[1272916]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 09:17:23 instance-1 lfd[1276733]: *User Processing* PID:1276709 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 09:32:23 instance-1 lfd[1283141]: *User Processing* PID:1283132 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 09:38:23 instance-1 lfd[1285016]: *User Processing* PID:1284987 Kill:0 User:surveyms VM:597(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 09:38:24 instance-1 lfd[1285016]: *User Processing* PID:1284994 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 09:42:24 instance-1 lfd[1286330]: *User Processing* PID:1286320 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 09:42:24 instance-1 lfd[1286330]: *User Processing* PID:1286322 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 09:54:24 instance-1 lfd[1290828]: *User Processing* PID:1290819 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 09:58:24 instance-1 lfd[1292061]: *User Processing* PID:1292052 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 10:00:24 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 10:00:24 instance-1 lfd[1292863]: *User Processing* PID:1292847 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:01:24 instance-1 lfd[1293210]: *User Processing* PID:1292955 Kill:0 User:newswinslow VM:542(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:02:24 instance-1 lfd[1293546]: *User Processing* PID:1049029 Kill:0 User:turnkey Time:42242 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 20 10:03:24 instance-1 lfd[1293887]: *User Processing* PID:1293787 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:05:24 instance-1 lfd[1294694]: *User Processing* PID:1294661 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:05:25 instance-1 lfd[1294691]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 10:05:25 instance-1 lfd[1294691]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 10:14:25 instance-1 lfd[1297525]: *User Processing* PID:1297492 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:17:25 instance-1 lfd[1298569]: *User Processing* PID:1298475 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 10:20:25 instance-1 lfd[1299699]: *User Processing* PID:1299672 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:32:25 instance-1 lfd[1303520]: *Suspicious Process* PID:1049030 PPID:1043388 User:turnkey Uptime:44043 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 20 10:32:25 instance-1 lfd[1303520]: *User Processing* PID:1049030 Kill:0 User:turnkey Time:44043 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 20 10:34:25 instance-1 lfd[1304115]: *User Processing* PID:1304106 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 10:40:26 instance-1 lfd[1306333]: *User Processing* PID:1306290 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:40:26 instance-1 lfd[1306333]: *User Processing* PID:1306284 Kill:0 User:newswinslow VM:544(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:41:26 instance-1 lfd[1306726]: *User Processing* PID:1306718 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 10:44:26 instance-1 lfd[1307897]: *User Processing* PID:1307893 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 10:45:26 instance-1 lfd[1308416]: *User Processing* PID:1308350 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 10:46:26 instance-1 lfd[1308733]: *User Processing* PID:1308728 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 10:49:26 instance-1 lfd[1309718]: *User Processing* PID:1309711 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 10:50:26 instance-1 lfd[1310238]: *User Processing* PID:1310229 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 10:54:26 instance-1 lfd[1312435]: *User Processing* PID:1312428 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 11:00:26 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 11:01:27 instance-1 lfd[1314762]: *User Processing* PID:1314722 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 11:05:27 instance-1 lfd[1315988]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 11:05:27 instance-1 lfd[1315988]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 11:21:27 instance-1 lfd[1321075]: *User Processing* PID:1321051 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 11:25:27 instance-1 lfd[1322156]: *User Processing* PID:1322113 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 11:30:28 instance-1 lfd[1323676]: *User Processing* PID:1323662 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 11:36:28 instance-1 lfd[1325733]: *User Processing* PID:1325712 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 11:56:29 instance-1 lfd[1332448]: *User Processing* PID:1332436 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 11:56:29 instance-1 lfd[1332448]: *User Processing* PID:1332440 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 12:00:29 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 12:05:29 instance-1 lfd[1335533]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 12:05:29 instance-1 lfd[1335533]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 12:17:29 instance-1 lfd[1339989]: *User Processing* PID:1339935 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 12:21:29 instance-1 lfd[1341461]: *User Processing* PID:1341452 Kill:0 User:mainpoint VM:606(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 12:24:30 instance-1 lfd[1342448]: *User Processing* PID:1342444 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 12:25:30 instance-1 lfd[1342795]: *User Processing* PID:1342784 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 12:25:30 instance-1 lfd[1342795]: *User Processing* PID:1342749 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 12:32:30 instance-1 lfd[1344987]: *User Processing* PID:1344956 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 12:50:30 instance-1 lfd[1350890]: *User Processing* PID:1350861 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 12:50:30 instance-1 lfd[1350890]: *User Processing* PID:1350862 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 12:52:30 instance-1 lfd[1351573]: *User Processing* PID:1351547 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 12:55:30 instance-1 lfd[1352793]: *User Processing* PID:1352588 Kill:0 User:winslow VM:627(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 20 12:56:30 instance-1 lfd[1353134]: *User Processing* PID:1353078 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 12:56:31 instance-1 lfd[1353134]: *User Processing* PID:1353080 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 13:00:31 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 13:01:31 instance-1 lfd[1354886]: *User Processing* PID:1354839 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 13:05:31 instance-1 lfd[1356332]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 13:05:31 instance-1 lfd[1356332]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 13:08:31 instance-1 lfd[1357286]: *User Processing* PID:1357282 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 13:10:31 instance-1 lfd[1357918]: *User Processing* PID:1357896 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 13:12:31 instance-1 lfd[1358454]: *User Processing* PID:1358450 Kill:0 User:rcpacom VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 13:15:31 instance-1 lfd[1359468]: *User Processing* PID:1359453 Kill:0 User:opthirecomau VM:531(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 13:17:31 instance-1 lfd[1360021]: *User Processing* PID:1360005 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 13:21:31 instance-1 lfd[1361221]: *User Processing* PID:1361217 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 13:28:31 instance-1 lfd[1363573]: *User Processing* PID:1363528 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 13:39:32 instance-1 lfd[1367382]: *User Processing* PID:1367337 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 13:47:32 instance-1 lfd[1369993]: *User Processing* PID:1369948 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 13:57:32 instance-1 lfd[1373258]: *User Processing* PID:1373251 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 14:00:32 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 14:05:33 instance-1 lfd[1376205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 14:05:33 instance-1 lfd[1376205]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 14:08:32 instance-1 lfd[1377027]: *User Processing* PID:1377016 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 14:09:32 instance-1 lfd[1377318]: *User Processing* PID:1377311 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 14:10:32 instance-1 lfd[1377786]: *User Processing* PID:1377737 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 14:19:33 instance-1 lfd[1380594]: *User Processing* PID:1380586 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 14:49:34 instance-1 lfd[1391499]: *User Processing* PID:1391495 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:49:34 instance-1 lfd[1391499]: *User Processing* PID:1391489 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392675 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392677 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392676 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:52:34 instance-1 lfd[1392681]: *User Processing* PID:1392673 Kill:0 User:opthirecomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:53:34 instance-1 lfd[1393199]: *User Processing* PID:1393195 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:54:34 instance-1 lfd[1393597]: *User Processing* PID:1393582 Kill:0 User:bmswinslow VM:704(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:58:34 instance-1 lfd[1395523]: *User Processing* PID:1395519 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 14:58:49 instance-1 lfd[1395603]: (smtpauth) Failed SMTP AUTH login from 35.230.150.213 (US/United States/213.150.230.35.bc.googleusercontent.com): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 20 15:00:34 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 15:03:34 instance-1 lfd[1397604]: *User Processing* PID:1397600 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 15:05:34 instance-1 lfd[1398748]: *User Processing* PID:1398740 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:05:35 instance-1 lfd[1398746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 15:05:35 instance-1 lfd[1398746]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 15:06:34 instance-1 lfd[1399460]: *User Processing* PID:1399453 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:07:34 instance-1 lfd[1400038]: *User Processing* PID:1400022 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:07:34 instance-1 lfd[1400038]: *User Processing* PID:1400021 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:07:34 instance-1 lfd[1400038]: *User Processing* PID:1400033 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:08:34 instance-1 lfd[1400750]: *User Processing* PID:1400742 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401873 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401856 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401883 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:10:35 instance-1 lfd[1401897]: *User Processing* PID:1401323 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401879 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401877 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401886 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:10:36 instance-1 lfd[1401897]: *User Processing* PID:1401885 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:12:34 instance-1 lfd[1403389]: *User Processing* PID:1403384 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:13:34 instance-1 lfd[1403992]: *User Processing* PID:1403983 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:17:35 instance-1 lfd[1406142]: *User Processing* PID:1406133 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:17:35 instance-1 lfd[1406142]: *User Processing* PID:1406134 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:18:35 instance-1 lfd[1406919]: *User Processing* PID:1406703 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:19:35 instance-1 lfd[1407306]: *User Processing* PID:1407285 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 15:21:35 instance-1 lfd[1408148]: *User Processing* PID:1408144 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:36:35 instance-1 lfd[1413043]: *User Processing* PID:1413033 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 15:43:35 instance-1 lfd[1415202]: *User Processing* PID:1415182 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 15:52:36 instance-1 lfd[1418558]: *User Processing* PID:1418554 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 15:59:36 instance-1 lfd[1421179]: *User Processing* PID:1421171 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:00:36 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 16:00:36 instance-1 lfd[1422069]: *User Processing* PID:1421952 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 16:05:37 instance-1 lfd[1424626]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 16:05:37 instance-1 lfd[1424626]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 16:07:36 instance-1 lfd[1425564]: *User Processing* PID:1425546 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 16:07:36 instance-1 lfd[1425564]: *User Processing* PID:1425560 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:07:37 instance-1 lfd[1425564]: *User Processing* PID:1425552 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:08:36 instance-1 lfd[1426046]: *User Processing* PID:1426042 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:08:37 instance-1 lfd[1426046]: *User Processing* PID:1426041 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:09:36 instance-1 lfd[1426476]: *User Processing* PID:1426472 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:10:37 instance-1 lfd[1426913]: *User Processing* PID:1426893 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 16:10:37 instance-1 lfd[1426913]: *User Processing* PID:1426901 Kill:0 User:opthirecomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:11:37 instance-1 lfd[1427452]: *User Processing* PID:1427446 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:13:37 instance-1 lfd[1428594]: *User Processing* PID:1428588 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:15:37 instance-1 lfd[1429833]: *User Processing* PID:1429823 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:16:37 instance-1 lfd[1430348]: *User Processing* PID:1430340 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:17:37 instance-1 lfd[1431296]: *User Processing* PID:1431284 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:17:37 instance-1 lfd[1431296]: *User Processing* PID:1431285 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:17:38 instance-1 lfd[1431296]: *User Processing* PID:1431273 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 16:18:37 instance-1 lfd[1431969]: *User Processing* PID:1431956 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:18:37 instance-1 lfd[1431969]: *User Processing* PID:1431948 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:18:38 instance-1 lfd[1431969]: *User Processing* PID:1431957 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:18:38 instance-1 lfd[1431969]: *User Processing* PID:1431959 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:18:38 instance-1 lfd[1431969]: *User Processing* PID:1431953 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:19:37 instance-1 lfd[1432787]: *User Processing* PID:1432761 Kill:0 User:opthirecomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:20:37 instance-1 lfd[1433446]: *User Processing* PID:1433434 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:20:37 instance-1 lfd[1433446]: *User Processing* PID:1433435 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:21:37 instance-1 lfd[1433929]: *User Processing* PID:1433924 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:21:37 instance-1 lfd[1433929]: *User Processing* PID:1433917 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:21:38 instance-1 lfd[1433929]: *User Processing* PID:1433925 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:23:37 instance-1 lfd[1435545]: *User Processing* PID:1435541 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:24:37 instance-1 lfd[1435959]: *User Processing* PID:1435944 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 16:28:37 instance-1 lfd[1437503]: *User Processing* PID:1437499 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:32:38 instance-1 lfd[1439156]: *User Processing* PID:1439150 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:35:38 instance-1 lfd[1440580]: *User Processing* PID:1440569 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:35:38 instance-1 lfd[1440580]: *User Processing* PID:1440561 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:35:39 instance-1 lfd[1440580]: *User Processing* PID:1440563 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:35:39 instance-1 lfd[1440580]: *User Processing* PID:1440566 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:42:38 instance-1 lfd[1443949]: *User Processing* PID:1443916 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 16:47:38 instance-1 lfd[1446346]: *User Processing* PID:1446340 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:48:38 instance-1 lfd[1446883]: *User Processing* PID:1446879 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 16:58:38 instance-1 lfd[1452126]: *User Processing* PID:1452120 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 17:00:38 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 17:05:39 instance-1 lfd[1454888]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 17:05:39 instance-1 lfd[1454888]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 17:06:39 instance-1 lfd[1455309]: *User Processing* PID:1455304 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 17:06:39 instance-1 lfd[1455309]: *User Processing* PID:1455303 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 17:10:39 instance-1 lfd[1457325]: *User Processing* PID:1457311 Kill:0 User:trafman VM:559(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 17:20:39 instance-1 lfd[1461103]: *User Processing* PID:1461095 Kill:0 User:mainpoint VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 17:38:40 instance-1 lfd[1466834]: *User Processing* PID:1466830 Kill:0 User:independent VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 17:56:40 instance-1 lfd[1472655]: *User Processing* PID:1472575 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 18:00:40 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 18:04:40 instance-1 lfd[1475249]: *User Processing* PID:1475224 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 18:05:41 instance-1 lfd[1475573]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 18:05:41 instance-1 lfd[1475573]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 18:23:41 instance-1 lfd[1482256]: *User Processing* PID:1482232 Kill:0 User:surveyms VM:520(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 18:25:41 instance-1 lfd[1483523]: *LOAD* 5 minute load average is 6.15, threshold is 6 - email sent Mar 20 18:25:42 instance-1 lfd[1483524]: *User Processing* PID:1483510 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 18:25:42 instance-1 lfd[1483524]: *User Processing* PID:1483494 Kill:0 User:surveyms VM:518(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 18:25:42 instance-1 lfd[1483524]: *User Processing* PID:1483495 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 18:26:41 instance-1 lfd[1484146]: *User Processing* PID:1484141 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 18:26:42 instance-1 lfd[1484146]: *User Processing* PID:1484120 Kill:0 User:surveyms VM:518(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 18:27:41 instance-1 lfd[1484809]: *User Processing* PID:1484791 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 18:27:42 instance-1 lfd[1484809]: *User Processing* PID:1484804 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 18:29:42 instance-1 lfd[1486022]: *User Processing* PID:1486012 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 18:30:42 instance-1 lfd[1486706]: *User Processing* PID:1486699 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 18:33:42 instance-1 lfd[1487973]: *User Processing* PID:1487969 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 18:37:42 instance-1 lfd[1489652]: *User Processing* PID:1489649 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 18:46:42 instance-1 lfd[1492733]: *User Processing* PID:1492727 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 18:53:42 instance-1 lfd[1495101]: *User Processing* PID:1495095 Kill:0 User:foster VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 19:00:42 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 19:00:42 instance-1 lfd[1497504]: *User Processing* PID:1497491 Kill:0 User:indigenouscivil VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 19:05:43 instance-1 lfd[1499060]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 19:05:43 instance-1 lfd[1499060]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 19:12:43 instance-1 lfd[1501128]: *User Processing* PID:1501097 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 19:22:43 instance-1 lfd[1504265]: *User Processing* PID:1504262 Kill:0 User:independent VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 19:50:44 instance-1 lfd[1512690]: *User Processing* PID:1512681 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:00:44 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516646 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516386 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516353 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:02:44 instance-1 lfd[1516660]: *User Processing* PID:1516531 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:05:45 instance-1 lfd[1517601]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 20:05:46 instance-1 lfd[1517601]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 20:07:44 instance-1 lfd[1518338]: *User Processing* PID:1518331 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:07:45 instance-1 lfd[1518338]: *User Processing* PID:1518222 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:07:45 instance-1 lfd[1518338]: *User Processing* PID:1518118 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:07:45 instance-1 lfd[1518338]: *User Processing* PID:1518088 Kill:0 User:bmswinslow VM:697(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:08:45 instance-1 lfd[1518634]: *User Processing* PID:1518626 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:09:44 instance-1 lfd[1518963]: *LOAD* 5 minute load average is 6.04, threshold is 6 - email sent Mar 20 20:09:45 instance-1 lfd[1518964]: *User Processing* PID:1518959 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:09:45 instance-1 lfd[1518964]: *User Processing* PID:1518954 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:11:45 instance-1 lfd[1519582]: *User Processing* PID:1519574 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:12:45 instance-1 lfd[1519991]: *User Processing* PID:1519983 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:13:45 instance-1 lfd[1520265]: *User Processing* PID:1520258 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:17:45 instance-1 lfd[1521537]: *User Processing* PID:1521529 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:17:46 instance-1 lfd[1521537]: *User Processing* PID:1521524 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 20:18:45 instance-1 lfd[1521829]: *User Processing* PID:1521823 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:22:45 instance-1 lfd[1523156]: *User Processing* PID:1523153 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:24:45 instance-1 lfd[1523745]: *User Processing* PID:1523737 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:27:45 instance-1 lfd[1524809]: *User Processing* PID:1524795 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 20:29:45 instance-1 lfd[1525480]: *User Processing* PID:1525457 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 20:30:46 instance-1 lfd[1525838]: *User Processing* PID:1525825 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 20:30:46 instance-1 lfd[1525838]: *User Processing* PID:1525830 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:30:46 instance-1 lfd[1525838]: *User Processing* PID:1525790 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 20:31:46 instance-1 lfd[1526149]: *User Processing* PID:1526141 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 20 20:33:46 instance-1 lfd[1526871]: *User Processing* PID:1526868 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:38:46 instance-1 lfd[1528571]: *User Processing* PID:1528565 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:38:46 instance-1 lfd[1528571]: *User Processing* PID:1528564 Kill:0 User:foster VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:39:46 instance-1 lfd[1528967]: *User Processing* PID:1528958 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 20:40:46 instance-1 lfd[1529383]: *User Processing* PID:1529367 Kill:0 User:surveyms VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 20:40:46 instance-1 lfd[1529383]: *User Processing* PID:1529376 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:48:46 instance-1 lfd[1532200]: *User Processing* PID:1532197 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:51:46 instance-1 lfd[1533143]: *User Processing* PID:1533139 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:52:46 instance-1 lfd[1533434]: *User Processing* PID:1533427 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:53:46 instance-1 lfd[1533892]: *User Processing* PID:1533886 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:54:46 instance-1 lfd[1534285]: *User Processing* PID:1534277 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 20:56:46 instance-1 lfd[1534941]: *User Processing* PID:1534894 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 20:57:46 instance-1 lfd[1535268]: *User Processing* PID:1535259 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 20:57:46 instance-1 lfd[1535268]: *User Processing* PID:1535260 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:00:46 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 21:04:46 instance-1 lfd[1537571]: *User Processing* PID:1537562 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 21:05:46 instance-1 lfd[1537886]: *User Processing* PID:1537875 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 21:05:47 instance-1 lfd[1537885]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 21:05:47 instance-1 lfd[1537885]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 21:12:47 instance-1 lfd[1539778]: *User Processing* PID:1539774 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:13:47 instance-1 lfd[1540275]: *User Processing* PID:1540271 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:13:47 instance-1 lfd[1540275]: *User Processing* PID:1540266 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:14:47 instance-1 lfd[1540647]: *User Processing* PID:1540643 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:22:47 instance-1 lfd[1543112]: *User Processing* PID:1543102 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:32:47 instance-1 lfd[1546149]: *User Processing* PID:1546145 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:35:47 instance-1 lfd[1547438]: *User Processing* PID:1547423 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 21:40:47 instance-1 lfd[1549377]: *User Processing* PID:1549368 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 21:45:47 instance-1 lfd[1550810]: *User Processing* PID:1550802 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 22:00:47 instance-1 lfd[1087322]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 22:04:06 instance-1 lfd[1087322]: Main Process: TERM Mar 20 22:04:06 instance-1 lfd[1087322]: daemon stopped Mar 20 22:04:07 instance-1 lfd[1556835]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 20 22:04:07 instance-1 lfd[1556835]: LF_APACHE_ERRPORT: Set to [2] Mar 20 22:04:07 instance-1 lfd[1556835]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 20 22:04:07 instance-1 lfd[1556835]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 20 22:04:07 instance-1 lfd[1556835]: CSF Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: IPv6 Enabled... Mar 20 22:04:07 instance-1 lfd[1556835]: LOAD Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 20 22:04:07 instance-1 lfd[1556835]: Country Code Lookups... Mar 20 22:04:07 instance-1 lfd[1556835]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 22:04:07 instance-1 lfd[1556835]: System Integrity Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: Exploit Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: Directory Watching... Mar 20 22:04:07 instance-1 lfd[1556835]: Email Queue Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: ModSecurity IP D/B Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: Email Relay Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: Temp to Perm Block Tracking... Mar 20 22:04:07 instance-1 lfd[1556835]: System Statistics... Mar 20 22:04:08 instance-1 lfd[1556835]: Process Tracking... Mar 20 22:04:08 instance-1 lfd[1556835]: Account Tracking... Mar 20 22:04:08 instance-1 lfd[1556835]: SSH Tracking... Mar 20 22:04:08 instance-1 lfd[1556835]: Webmin Tracking... Mar 20 22:04:08 instance-1 lfd[1556835]: SU Tracking... Mar 20 22:04:08 instance-1 lfd[1556835]: Console Tracking... Mar 20 22:04:08 instance-1 lfd[1556835]: WHM Tracking... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /etc/apache2/logs/error_log... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/messages... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/maillog... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/secure... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/customlog... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /usr/local/cpanel/logs/access_log... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /usr/local/cpanel/logs/login_log... Mar 20 22:04:08 instance-1 lfd[1556835]: Watching /var/log/exim_mainlog... Mar 20 22:04:08 instance-1 lfd[1556859]: *User Processing* PID:1556848 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 22:04:14 instance-1 lfd[1556851]: *System Integrity* has detected modified file(s): /usr/bin/ea-php74 /usr/bin/ea-php80 /usr/bin/ea-php81 /usr/bin/ea-php82 /usr/bin/ea-php83 /bin/ea-php74 /bin/ea-php80 /bin/ea-php81 /bin/ea-php82 /bin/ea-php83 /usr/local/bin/ea-php74 /usr/local/bin/ea-php80 /usr/local/bin/ea-php81 /usr/local/bin/ea-php82 /usr/local/bin/ea-php83 Mar 20 22:09:09 instance-1 lfd[1558896]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 22:09:09 instance-1 lfd[1558896]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 22:13:08 instance-1 lfd[1560238]: *User Processing* PID:1560234 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 22:39:08 instance-1 lfd[1568295]: *User Processing* PID:1568264 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 20 22:47:09 instance-1 lfd[1570675]: *User Processing* PID:1570671 Kill:0 User:bmswinslow VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 22:47:09 instance-1 lfd[1570675]: *User Processing* PID:1570656 Kill:0 User:bmswinslow VM:696(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 22:52:09 instance-1 lfd[1572193]: *User Processing* PID:1572189 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 22:56:09 instance-1 lfd[1573621]: *User Processing* PID:1573612 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 20 22:57:09 instance-1 lfd[1573890]: *User Processing* PID:1573886 Kill:0 User:foster VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 23:04:09 instance-1 lfd[1556835]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 20 23:07:09 instance-1 lfd[1578458]: *Excessive Processes* User:civilcon Kill:0 Process Count:11 Mar 20 23:09:10 instance-1 lfd[1579227]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 20 23:09:10 instance-1 lfd[1579227]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 20 23:12:09 instance-1 lfd[1580833]: *User Processing* PID:1580829 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 20 23:21:10 instance-1 lfd[1583951]: *User Processing* PID:1583932 Kill:0 User:indigenouscivil VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 00:00:02 instance-1 lfd[1556835]: Main Process: TERM Mar 21 00:00:02 instance-1 lfd[1556835]: daemon stopped Mar 21 00:00:02 instance-1 lfd[1595380]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 21 00:00:02 instance-1 lfd[1595380]: LF_APACHE_ERRPORT: Set to [2] Mar 21 00:00:02 instance-1 lfd[1595380]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 21 00:00:02 instance-1 lfd[1595380]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 21 00:00:02 instance-1 lfd[1595380]: CSF Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: IPv6 Enabled... Mar 21 00:00:02 instance-1 lfd[1595380]: LOAD Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 21 00:00:02 instance-1 lfd[1595380]: Country Code Lookups... Mar 21 00:00:02 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 00:00:02 instance-1 lfd[1595380]: System Integrity Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Exploit Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Directory Watching... Mar 21 00:00:02 instance-1 lfd[1595380]: Email Queue Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: ModSecurity IP D/B Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Email Relay Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Temp to Perm Block Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: System Statistics... Mar 21 00:00:02 instance-1 lfd[1595380]: Process Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Account Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: SSH Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Webmin Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: SU Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Console Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: WHM Tracking... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/messages... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /etc/apache2/logs/error_log... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /usr/local/cpanel/logs/login_log... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/maillog... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/customlog... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/exim_mainlog... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /var/log/secure... Mar 21 00:00:02 instance-1 lfd[1595380]: Watching /usr/local/cpanel/logs/access_log... Mar 21 00:02:03 instance-1 lfd[1596059]: *User Processing* PID:1596003 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 00:05:03 instance-1 lfd[1596892]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 00:05:03 instance-1 lfd[1596892]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 00:15:03 instance-1 lfd[1599735]: *User Processing* PID:1599726 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 00:15:03 instance-1 lfd[1599735]: *User Processing* PID:1599721 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 00:20:03 instance-1 lfd[1601171]: *User Processing* PID:1601086 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 00:30:04 instance-1 lfd[1604040]: *User Processing* PID:1604029 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 00:30:04 instance-1 lfd[1604040]: *User Processing* PID:1603881 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 00:50:04 instance-1 lfd[1609838]: *User Processing* PID:1609819 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 00:53:55 instance-1 lfd[1611054]: (smtpauth) Failed SMTP AUTH login from 103.89.137.227 (HK/Hong Kong/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 21 00:59:05 instance-1 lfd[1612543]: *User Processing* PID:1612482 Kill:0 User:indigenouscivil VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 01:00:05 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 01:05:05 instance-1 lfd[1614379]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 01:05:05 instance-1 lfd[1614379]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 01:12:05 instance-1 lfd[1616389]: *User Processing* PID:1616381 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 01:14:05 instance-1 lfd[1617049]: *User Processing* PID:1617045 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 01:46:06 instance-1 lfd[1626359]: *User Processing* PID:1626347 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 02:00:07 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 02:05:17 instance-1 lfd[1632112]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 02:05:17 instance-1 lfd[1632112]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 02:15:08 instance-1 lfd[1635007]: *User Processing* PID:1634998 Kill:0 User:mainpoint VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 02:15:08 instance-1 lfd[1635007]: *User Processing* PID:1634928 Kill:0 User:mainpoint VM:603(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 02:18:08 instance-1 lfd[1635823]: *User Processing* PID:1635804 Kill:0 User:comphomes VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 02:19:08 instance-1 lfd[1636071]: *User Processing* PID:1636021 Kill:0 User:indigenouscivil VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 02:25:08 instance-1 lfd[1637906]: *User Processing* PID:1637887 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 02:29:08 instance-1 lfd[1638892]: *User Processing* PID:1638852 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 02:36:09 instance-1 lfd[1641124]: *User Processing* PID:1641082 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 02:43:09 instance-1 lfd[1643196]: *User Processing* PID:1643192 Kill:0 User:eyrescom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 02:45:09 instance-1 lfd[1644058]: *User Processing* PID:1644050 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 02:55:10 instance-1 lfd[1646926]: *User Processing* PID:1646856 Kill:0 User:rcpacom VM:608(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 02:58:10 instance-1 lfd[1647921]: *User Processing* PID:1647904 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 02:59:10 instance-1 lfd[1648259]: *User Processing* PID:1648254 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:00:10 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 03:01:10 instance-1 lfd[1649036]: *User Processing* PID:1649031 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:04:10 instance-1 lfd[1650027]: *User Processing* PID:1650019 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:07:10 instance-1 lfd[1650971]: *User Processing* PID:1650961 Kill:0 User:comphomes VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:08:10 instance-1 lfd[1651224]: *User Processing* PID:1651217 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:09:10 instance-1 lfd[1651483]: *User Processing* PID:1651462 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 03:10:24 instance-1 lfd[1651772]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 03:10:24 instance-1 lfd[1651772]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 03:11:10 instance-1 lfd[1652165]: *User Processing* PID:1652156 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:11:11 instance-1 lfd[1652165]: *User Processing* PID:1652154 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:33:12 instance-1 lfd[1658453]: *User Processing* PID:1658434 Kill:0 User:bmswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:35:12 instance-1 lfd[1658987]: *User Processing* PID:1658967 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 03:42:12 instance-1 lfd[1661046]: *User Processing* PID:1660993 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 03:50:12 instance-1 lfd[1665209]: *User Processing* PID:1665184 Kill:0 User:nlph VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nlph/public_html instance info --format=json --check-updates=true Mar 21 03:53:13 instance-1 lfd[1667587]: *User Processing* PID:1667581 Kill:0 User:yvexcava VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/yvexcava/public_html instance info --format=json --check-updates=true Mar 21 03:54:13 instance-1 lfd[1668597]: *User Processing* PID:1668592 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json Mar 21 03:55:13 instance-1 lfd[1669479]: *User Processing* PID:1669455 Kill:0 User:bmswinslow VM:588(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/bmswinslow/public_html plugin auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false Mar 21 03:55:13 instance-1 lfd[1669479]: *User Processing* PID:1669404 Kill:0 User:bmswinslow VM:580(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 04:00:13 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 04:06:30 instance-1 lfd[1675126]: (smtpauth) Failed SMTP AUTH login from 165.154.199.124 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 21 04:15:14 instance-1 lfd[1677699]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 04:15:14 instance-1 lfd[1677699]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 04:25:14 instance-1 lfd[1680624]: *User Processing* PID:1680560 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 05:00:15 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 05:02:15 instance-1 lfd[1691506]: *User Processing* PID:1691495 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:03:15 instance-1 lfd[1691834]: *User Processing* PID:1691822 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:05:15 instance-1 lfd[1692488]: *User Processing* PID:1692468 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:06:15 instance-1 lfd[1692787]: *User Processing* PID:1692781 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:08:15 instance-1 lfd[1693520]: *User Processing* PID:1693515 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:10:15 instance-1 lfd[1694209]: *User Processing* PID:1694191 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:11:15 instance-1 lfd[1694500]: *User Processing* PID:1694492 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:12:15 instance-1 lfd[1694935]: *User Processing* PID:1694931 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:13:15 instance-1 lfd[1695234]: *User Processing* PID:1695226 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:14:15 instance-1 lfd[1695548]: *User Processing* PID:1695543 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:15:16 instance-1 lfd[1695917]: *User Processing* PID:1695909 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:15:16 instance-1 lfd[1695915]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 05:15:16 instance-1 lfd[1695915]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 05:16:16 instance-1 lfd[1696258]: *User Processing* PID:1696252 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:18:16 instance-1 lfd[1697056]: *User Processing* PID:1697049 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:19:16 instance-1 lfd[1697359]: *Suspicious Process* PID:1562504 PPID:1558273 User:turnkey Uptime:25185 secs EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 21 05:19:16 instance-1 lfd[1697359]: *User Processing* PID:1562504 Kill:0 User:turnkey Time:25185 EXE:/usr/local/cpanel/3rdparty/perl/536/bin/perl CMD:spamd child Mar 21 05:19:16 instance-1 lfd[1697359]: *User Processing* PID:1697353 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:21:16 instance-1 lfd[1698062]: *User Processing* PID:1698057 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:23:16 instance-1 lfd[1698795]: *User Processing* PID:1698791 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:24:16 instance-1 lfd[1699080]: *User Processing* PID:1699073 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:25:16 instance-1 lfd[1699433]: *User Processing* PID:1699420 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:28:16 instance-1 lfd[1700477]: *User Processing* PID:1700470 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:28:16 instance-1 lfd[1700477]: *User Processing* PID:1700468 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:29:16 instance-1 lfd[1700782]: *User Processing* PID:1700775 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:29:16 instance-1 lfd[1700782]: *User Processing* PID:1700773 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:30:16 instance-1 lfd[1701142]: *User Processing* PID:1701133 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:30:16 instance-1 lfd[1701142]: *User Processing* PID:1701128 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:31:16 instance-1 lfd[1701440]: *User Processing* PID:1701430 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:32:16 instance-1 lfd[1701794]: *User Processing* PID:1701756 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:33:16 instance-1 lfd[1702205]: *User Processing* PID:1702195 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:34:16 instance-1 lfd[1702515]: *User Processing* PID:1702506 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:34:16 instance-1 lfd[1702515]: *User Processing* PID:1702511 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:35:16 instance-1 lfd[1702894]: *User Processing* PID:1702881 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:36:16 instance-1 lfd[1703252]: *User Processing* PID:1703248 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:36:16 instance-1 lfd[1703252]: *User Processing* PID:1703242 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:37:16 instance-1 lfd[1703584]: *User Processing* PID:1703580 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:37:16 instance-1 lfd[1703584]: *User Processing* PID:1703578 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:38:16 instance-1 lfd[1704007]: *User Processing* PID:1704003 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:38:16 instance-1 lfd[1704007]: *User Processing* PID:1703998 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:39:16 instance-1 lfd[1704351]: *User Processing* PID:1704347 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:41:17 instance-1 lfd[1705005]: *User Processing* PID:1705001 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:41:17 instance-1 lfd[1705005]: *User Processing* PID:1704996 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:42:17 instance-1 lfd[1705320]: *User Processing* PID:1705309 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:42:17 instance-1 lfd[1705320]: *User Processing* PID:1705314 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:43:17 instance-1 lfd[1705817]: *User Processing* PID:1705714 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 05:45:17 instance-1 lfd[1706483]: *User Processing* PID:1706424 Kill:0 User:comphomes VM:620(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:45:17 instance-1 lfd[1706483]: *User Processing* PID:1706472 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:46:17 instance-1 lfd[1706890]: *User Processing* PID:1706879 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:46:17 instance-1 lfd[1706890]: *User Processing* PID:1706885 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:46:17 instance-1 lfd[1706890]: *User Processing* PID:1706880 Kill:0 User:comphomes VM:608(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:48:17 instance-1 lfd[1707733]: *User Processing* PID:1707723 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:48:17 instance-1 lfd[1707733]: *User Processing* PID:1707729 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:50:17 instance-1 lfd[1708391]: *User Processing* PID:1708377 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:50:17 instance-1 lfd[1708391]: *User Processing* PID:1708379 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:52:17 instance-1 lfd[1709019]: *User Processing* PID:1709008 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:52:17 instance-1 lfd[1709019]: *User Processing* PID:1709011 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:53:17 instance-1 lfd[1709480]: *User Processing* PID:1709464 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:54:17 instance-1 lfd[1709897]: *User Processing* PID:1709890 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:54:17 instance-1 lfd[1709897]: *User Processing* PID:1709892 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:55:17 instance-1 lfd[1710252]: *User Processing* PID:1710238 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:55:17 instance-1 lfd[1710252]: *User Processing* PID:1710236 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:57:17 instance-1 lfd[1710840]: *User Processing* PID:1710828 Kill:0 User:tuscomau VM:640(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:59:17 instance-1 lfd[1711576]: *User Processing* PID:1711560 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 05:59:17 instance-1 lfd[1711576]: *User Processing* PID:1711564 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 06:00:17 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 06:00:17 instance-1 lfd[1711953]: *User Processing* PID:1711942 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:01:17 instance-1 lfd[1712260]: *User Processing* PID:1712255 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:02:17 instance-1 lfd[1712586]: *User Processing* PID:1712582 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:05:17 instance-1 lfd[1713692]: *User Processing* PID:1713683 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:07:18 instance-1 lfd[1714327]: *User Processing* PID:1714322 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:08:18 instance-1 lfd[1714794]: *User Processing* PID:1714789 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:09:18 instance-1 lfd[1715119]: *User Processing* PID:1715114 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:10:18 instance-1 lfd[1715482]: *User Processing* PID:1715473 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:13:18 instance-1 lfd[1716489]: *User Processing* PID:1716480 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:15:18 instance-1 lfd[1717206]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 06:15:18 instance-1 lfd[1717206]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 06:17:18 instance-1 lfd[1717798]: *User Processing* PID:1717790 Kill:0 User:rcpacom VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 06:29:18 instance-1 lfd[1721492]: *User Processing* PID:1721418 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 06:29:18 instance-1 lfd[1721492]: *User Processing* PID:1721482 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 06:34:19 instance-1 lfd[1723096]: *User Processing* PID:1723060 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 07:00:19 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 07:15:20 instance-1 lfd[1735847]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 07:15:20 instance-1 lfd[1735847]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 07:24:20 instance-1 lfd[1738455]: *User Processing* PID:1738331 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:25:20 instance-1 lfd[1738804]: *User Processing* PID:1738795 Kill:0 User:mainpoint VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:29:20 instance-1 lfd[1739859]: *User Processing* PID:1739855 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:30:21 instance-1 lfd[1740401]: *User Processing* PID:1740392 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:32:21 instance-1 lfd[1741069]: *User Processing* PID:1741065 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:36:21 instance-1 lfd[1742489]: *User Processing* PID:1742481 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:37:21 instance-1 lfd[1742811]: *User Processing* PID:1742803 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:38:21 instance-1 lfd[1743190]: *User Processing* PID:1743185 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:38:21 instance-1 lfd[1743190]: *User Processing* PID:1743184 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:39:21 instance-1 lfd[1743607]: *User Processing* PID:1743600 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:39:21 instance-1 lfd[1743607]: *User Processing* PID:1743602 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:39:21 instance-1 lfd[1743607]: *User Processing* PID:1743601 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:40:21 instance-1 lfd[1744184]: *User Processing* PID:1744175 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:40:21 instance-1 lfd[1744184]: *User Processing* PID:1744171 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:42:21 instance-1 lfd[1744951]: *User Processing* PID:1744944 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:43:21 instance-1 lfd[1745366]: *User Processing* PID:1745361 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:44:21 instance-1 lfd[1745673]: *User Processing* PID:1745669 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:46:21 instance-1 lfd[1746655]: *User Processing* PID:1746651 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 07:51:21 instance-1 lfd[1748235]: *User Processing* PID:1748179 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 07:59:22 instance-1 lfd[1750691]: *User Processing* PID:1750684 Kill:0 User:bmswinslow VM:627(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 08:00:22 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 08:13:22 instance-1 lfd[1755115]: *User Processing* PID:1755108 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 08:15:22 instance-1 lfd[1755826]: *User Processing* PID:1755814 Kill:0 User:independent VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 08:15:22 instance-1 lfd[1755823]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 08:15:22 instance-1 lfd[1755823]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 08:20:22 instance-1 lfd[1757383]: *User Processing* PID:1757367 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 08:33:23 instance-1 lfd[1761320]: *User Processing* PID:1761278 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 08:38:23 instance-1 lfd[1762921]: *User Processing* PID:1762915 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 09:00:24 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 09:15:24 instance-1 lfd[1774629]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 09:15:24 instance-1 lfd[1774629]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 09:31:25 instance-1 lfd[1779835]: *User Processing* PID:1779831 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 09:31:25 instance-1 lfd[1779835]: *User Processing* PID:1779828 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 09:40:25 instance-1 lfd[1782520]: *User Processing* PID:1782495 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:41:25 instance-1 lfd[1782805]: *User Processing* PID:1782789 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:42:25 instance-1 lfd[1783183]: *User Processing* PID:1783158 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:45:25 instance-1 lfd[1784013]: *User Processing* PID:1784001 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:48:25 instance-1 lfd[1784984]: *User Processing* PID:1784958 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:48:25 instance-1 lfd[1784984]: *User Processing* PID:1784963 Kill:0 User:newswinslow VM:527(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:49:25 instance-1 lfd[1785255]: *User Processing* PID:1785161 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:55:25 instance-1 lfd[1787240]: *User Processing* PID:1787232 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 09:57:25 instance-1 lfd[1788007]: *User Processing* PID:1787971 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:57:25 instance-1 lfd[1788007]: *User Processing* PID:1787886 Kill:0 User:newswinslow VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 09:58:25 instance-1 lfd[1788280]: *User Processing* PID:1788272 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 10:00:25 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 10:06:42 instance-1 lfd[1790879]: (smtpauth) Failed SMTP AUTH login from 45.144.212.163 (-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 21 10:15:26 instance-1 lfd[1793537]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 10:15:26 instance-1 lfd[1793537]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 10:23:26 instance-1 lfd[1795977]: *User Processing* PID:1795967 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 10:23:26 instance-1 lfd[1795977]: *User Processing* PID:1795956 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 10:33:26 instance-1 lfd[1799341]: *User Processing* PID:1799332 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 10:33:26 instance-1 lfd[1799341]: *User Processing* PID:1799334 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 10:35:26 instance-1 lfd[1799996]: *User Processing* PID:1799988 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 10:37:26 instance-1 lfd[1800606]: *User Processing* PID:1800602 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 10:47:26 instance-1 lfd[1803680]: *User Processing* PID:1803667 Kill:0 User:surveyms VM:595(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 10:54:27 instance-1 lfd[1806725]: *User Processing* PID:1806720 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 10:55:27 instance-1 lfd[1807030]: *User Processing* PID:1807022 Kill:0 User:geneticson VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 11:00:27 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 11:04:27 instance-1 lfd[1809839]: *User Processing* PID:1809835 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 11:08:27 instance-1 lfd[1811199]: *User Processing* PID:1811192 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 11:15:27 instance-1 lfd[1813315]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 11:15:28 instance-1 lfd[1813315]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 11:39:28 instance-1 lfd[1820688]: *User Processing* PID:1820659 Kill:0 User:yvegroup VM:585(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 11:44:28 instance-1 lfd[1822149]: *User Processing* PID:1822143 Kill:0 User:rcpacom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 11:52:28 instance-1 lfd[1824800]: *User Processing* PID:1824796 Kill:0 User:rcpacom VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 11:57:28 instance-1 lfd[1826559]: *User Processing* PID:1826555 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:00:28 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 12:09:29 instance-1 lfd[1830655]: *User Processing* PID:1830649 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:09:29 instance-1 lfd[1830655]: *User Processing* PID:1830647 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:11:29 instance-1 lfd[1831345]: *User Processing* PID:1831341 Kill:0 User:tuscomau VM:564(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:12:29 instance-1 lfd[1831654]: *User Processing* PID:1831650 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:12:29 instance-1 lfd[1831654]: *User Processing* PID:1831645 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:15:29 instance-1 lfd[1832751]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 12:15:29 instance-1 lfd[1832751]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 12:16:29 instance-1 lfd[1833087]: *User Processing* PID:1833045 Kill:0 User:newswinslow VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 12:18:29 instance-1 lfd[1833685]: *User Processing* PID:1833679 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:20:29 instance-1 lfd[1834401]: *User Processing* PID:1834393 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:25:29 instance-1 lfd[1836010]: *User Processing* PID:1836001 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:26:29 instance-1 lfd[1836305]: *User Processing* PID:1836301 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:27:29 instance-1 lfd[1836579]: *User Processing* PID:1836549 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 12:30:29 instance-1 lfd[1837646]: *User Processing* PID:1837633 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:31:29 instance-1 lfd[1837952]: *User Processing* PID:1837945 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:34:29 instance-1 lfd[1838973]: *User Processing* PID:1838964 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:37:29 instance-1 lfd[1839952]: *User Processing* PID:1839942 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 12:39:29 instance-1 lfd[1840613]: *User Processing* PID:1840603 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:39:30 instance-1 lfd[1840613]: *User Processing* PID:1840609 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:41:29 instance-1 lfd[1841505]: *User Processing* PID:1841499 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:44:29 instance-1 lfd[1842377]: *User Processing* PID:1842340 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 12:47:30 instance-1 lfd[1843448]: *User Processing* PID:1843444 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:52:30 instance-1 lfd[1845280]: *User Processing* PID:1845276 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:53:30 instance-1 lfd[1845557]: *User Processing* PID:1845553 Kill:0 User:rcpacom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 12:55:30 instance-1 lfd[1846377]: *User Processing* PID:1846350 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 12:56:30 instance-1 lfd[1846649]: *User Processing* PID:1846562 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 12:59:30 instance-1 lfd[1847479]: *User Processing* PID:1847464 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 12:59:30 instance-1 lfd[1847479]: *User Processing* PID:1847470 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:00:30 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 13:09:30 instance-1 lfd[1850540]: *User Processing* PID:1850536 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:15:30 instance-1 lfd[1852517]: *User Processing* PID:1852509 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:15:31 instance-1 lfd[1852515]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 13:15:31 instance-1 lfd[1852515]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 13:19:30 instance-1 lfd[1853766]: *User Processing* PID:1853762 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:21:30 instance-1 lfd[1854634]: *User Processing* PID:1854502 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:26:30 instance-1 lfd[1856668]: *User Processing* PID:1856664 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:26:31 instance-1 lfd[1856668]: *User Processing* PID:1856663 Kill:0 User:rcpacom VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:31 instance-1 lfd[1857536]: *Excessive Processes* User:opthirecomau Kill:0 Process Count:16 Mar 21 13:28:32 instance-1 lfd[1857536]: *User Processing* PID:1857526 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:33 instance-1 lfd[1857536]: *User Processing* PID:1857515 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:33 instance-1 lfd[1857536]: *User Processing* PID:1857516 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:34 instance-1 lfd[1857536]: *User Processing* PID:1857532 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:35 instance-1 lfd[1857536]: *User Processing* PID:1857514 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:36 instance-1 lfd[1857536]: *User Processing* PID:1857521 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:37 instance-1 lfd[1857536]: *User Processing* PID:1857511 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:39 instance-1 lfd[1857536]: *User Processing* PID:1857518 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:28:41 instance-1 lfd[1857536]: *User Processing* PID:1857527 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:29:01 instance-1 lfd[1858199]: *LOAD* 5 minute load average is 8.25, threshold is 6 - email sent Mar 21 13:30:31 instance-1 lfd[1859005]: *User Processing* PID:1858997 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:33:31 instance-1 lfd[1860510]: *User Processing* PID:1860504 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:33:31 instance-1 lfd[1860510]: *User Processing* PID:1860505 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:33:31 instance-1 lfd[1860510]: *User Processing* PID:1860506 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:40:31 instance-1 lfd[1864274]: *User Processing* PID:1864267 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:40:32 instance-1 lfd[1864274]: *User Processing* PID:1864266 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:40:32 instance-1 lfd[1864274]: *User Processing* PID:1864265 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 13:42:31 instance-1 lfd[1865238]: *User Processing* PID:1865219 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 14:00:32 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 14:03:32 instance-1 lfd[1872574]: *User Processing* PID:1872437 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 14:04:33 instance-1 lfd[1873041]: *Excessive Processes* User:winslow Kill:0 Process Count:40 Mar 21 14:04:34 instance-1 lfd[1873041]: *User Processing* PID:1872991 Kill:0 User:rcpacom VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:13:33 instance-1 lfd[1876149]: *User Processing* PID:1876078 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:15:33 instance-1 lfd[1876882]: *User Processing* PID:1876531 Kill:0 User:newswinslow VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:15:33 instance-1 lfd[1876880]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 14:15:33 instance-1 lfd[1876880]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 14:17:33 instance-1 lfd[1877623]: *User Processing* PID:1877362 Kill:0 User:newswinslow VM:546(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:19:33 instance-1 lfd[1878261]: *User Processing* PID:1878062 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:19:33 instance-1 lfd[1878261]: *User Processing* PID:1878119 Kill:0 User:newswinslow VM:529(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:19:33 instance-1 lfd[1878261]: *User Processing* PID:1878123 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878547 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878545 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878546 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:20:33 instance-1 lfd[1878601]: *User Processing* PID:1878537 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:22:33 instance-1 lfd[1879360]: *User Processing* PID:1879241 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:24:33 instance-1 lfd[1880038]: *User Processing* PID:1879934 Kill:0 User:newswinslow VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:25:33 instance-1 lfd[1880490]: *User Processing* PID:1880084 Kill:0 User:newswinslow VM:536(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:25:33 instance-1 lfd[1880490]: *User Processing* PID:1880083 Kill:0 User:newswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:29:33 instance-1 lfd[1882242]: *User Processing* PID:1882210 Kill:0 User:newswinslow VM:527(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:29:33 instance-1 lfd[1882242]: *User Processing* PID:1882235 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:30:33 instance-1 lfd[1882675]: *User Processing* PID:1882540 Kill:0 User:newswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:31:33 instance-1 lfd[1883076]: *User Processing* PID:1883072 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:32:33 instance-1 lfd[1883580]: *User Processing* PID:1883516 Kill:0 User:newswinslow VM:523(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:32:33 instance-1 lfd[1883580]: *User Processing* PID:1883576 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:33:33 instance-1 lfd[1883922]: *User Processing* PID:1883891 Kill:0 User:newswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884056 Kill:0 User:newswinslow VM:529(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884055 Kill:0 User:newswinslow VM:529(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884058 Kill:0 User:newswinslow VM:599(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:34:33 instance-1 lfd[1884255]: *User Processing* PID:1884248 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:36:33 instance-1 lfd[1885144]: *User Processing* PID:1884951 Kill:0 User:newswinslow VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:36:33 instance-1 lfd[1885144]: *User Processing* PID:1884950 Kill:0 User:newswinslow VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:36:33 instance-1 lfd[1885144]: *User Processing* PID:1885139 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:37:33 instance-1 lfd[1885627]: *User Processing* PID:1885499 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:37:33 instance-1 lfd[1885627]: *User Processing* PID:1885491 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:37:33 instance-1 lfd[1885627]: *User Processing* PID:1885498 Kill:0 User:newswinslow VM:527(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:38:33 instance-1 lfd[1886010]: *User Processing* PID:1885949 Kill:0 User:newswinslow VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:39:33 instance-1 lfd[1886416]: *User Processing* PID:1886258 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 14:40:33 instance-1 lfd[1886890]: *User Processing* PID:1886881 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:41:33 instance-1 lfd[1887279]: *User Processing* PID:1887195 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 14:41:33 instance-1 lfd[1887279]: *User Processing* PID:1887271 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:42:33 instance-1 lfd[1887794]: *User Processing* PID:1887790 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:42:33 instance-1 lfd[1887794]: *User Processing* PID:1887729 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:44:33 instance-1 lfd[1888541]: *User Processing* PID:1888537 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:46:33 instance-1 lfd[1889439]: *User Processing* PID:1889435 Kill:0 User:opthirecomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:47:33 instance-1 lfd[1889935]: *User Processing* PID:1889931 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:48:34 instance-1 lfd[1890349]: *User Processing* PID:1890343 Kill:0 User:opthirecomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:48:34 instance-1 lfd[1890349]: *User Processing* PID:1890344 Kill:0 User:opthirecomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:51:34 instance-1 lfd[1891626]: *User Processing* PID:1891620 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:53:34 instance-1 lfd[1892413]: *User Processing* PID:1892409 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:54:34 instance-1 lfd[1892871]: *User Processing* PID:1892867 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:55:34 instance-1 lfd[1893319]: *User Processing* PID:1893311 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:56:34 instance-1 lfd[1893780]: *User Processing* PID:1893776 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:57:34 instance-1 lfd[1894324]: *User Processing* PID:1894319 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 14:58:34 instance-1 lfd[1894712]: *User Processing* PID:1894703 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:00:34 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 15:00:34 instance-1 lfd[1895490]: *User Processing* PID:1895476 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:02:34 instance-1 lfd[1896272]: *User Processing* PID:1896251 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:03:34 instance-1 lfd[1896737]: *User Processing* PID:1896732 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:04:34 instance-1 lfd[1897057]: *User Processing* PID:1897053 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:04:34 instance-1 lfd[1897057]: *User Processing* PID:1897049 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:05:34 instance-1 lfd[1897449]: *User Processing* PID:1897438 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:07:34 instance-1 lfd[1898279]: *User Processing* PID:1898268 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:08:34 instance-1 lfd[1898808]: *User Processing* PID:1898800 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:09:34 instance-1 lfd[1899278]: *User Processing* PID:1899272 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:09:34 instance-1 lfd[1899278]: *User Processing* PID:1899269 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:15:35 instance-1 lfd[1901923]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 15:15:35 instance-1 lfd[1901923]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 15:16:34 instance-1 lfd[1902250]: *User Processing* PID:1902246 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:25:35 instance-1 lfd[1905509]: *User Processing* PID:1905452 Kill:0 User:yvegroup VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:28:35 instance-1 lfd[1906633]: *User Processing* PID:1906629 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:34:35 instance-1 lfd[1908498]: *User Processing* PID:1908328 Kill:0 User:winslow VM:523(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 21 15:40:35 instance-1 lfd[1910633]: *User Processing* PID:1910473 Kill:0 User:ecosph VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 15:40:35 instance-1 lfd[1910633]: *User Processing* PID:1910621 Kill:0 User:opthirecomau VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:43:35 instance-1 lfd[1911555]: *User Processing* PID:1911548 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 15:49:35 instance-1 lfd[1913793]: *User Processing* PID:1913784 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:49:35 instance-1 lfd[1913793]: *User Processing* PID:1913782 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:49:35 instance-1 lfd[1913793]: *User Processing* PID:1913785 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 15:53:35 instance-1 lfd[1915190]: *User Processing* PID:1915182 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 15:53:35 instance-1 lfd[1915190]: *User Processing* PID:1915165 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 16:00:35 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 16:04:35 instance-1 lfd[1919059]: *User Processing* PID:1919051 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 16:05:36 instance-1 lfd[1919429]: *User Processing* PID:1919405 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 16:05:36 instance-1 lfd[1919429]: *User Processing* PID:1919404 Kill:0 User:newswinslow VM:569(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 16:06:36 instance-1 lfd[1919781]: *User Processing* PID:1919611 Kill:0 User:opthirecomau VM:586(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 16:07:36 instance-1 lfd[1920078]: *User Processing* PID:1920059 Kill:0 User:winslow VM:521(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 16:07:36 instance-1 lfd[1920078]: *User Processing* PID:1920073 Kill:0 User:winslow VM:519(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 16:09:36 instance-1 lfd[1920878]: *User Processing* PID:1920735 Kill:0 User:nativesp VM:522(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 21 16:11:36 instance-1 lfd[1921699]: *User Processing* PID:1921619 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 16:12:36 instance-1 lfd[1921995]: *User Processing* PID:1921793 Kill:0 User:nexpavecau VM:526(MB) EXE:/opt/cpanel/ea-php83/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php83/root/usr/bin/php-cgi Mar 21 16:13:36 instance-1 lfd[1922290]: *User Processing* PID:1922222 Kill:0 User:indigenouscivil VM:600(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 16:13:36 instance-1 lfd[1922290]: *User Processing* PID:1922151 Kill:0 User:indigenouscivil VM:600(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 16:14:36 instance-1 lfd[1922719]: *User Processing* PID:1922715 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 16:15:36 instance-1 lfd[1923068]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 16:15:36 instance-1 lfd[1923068]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 16:20:36 instance-1 lfd[1924677]: *User Processing* PID:1924666 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 16:40:36 instance-1 lfd[1931334]: *User Processing* PID:1931326 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 16:54:37 instance-1 lfd[1935362]: *User Processing* PID:1935336 Kill:0 User:indigenouscivil VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 17:00:37 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 17:04:37 instance-1 lfd[1938327]: *User Processing* PID:1938320 Kill:0 User:opthirecomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 17:15:38 instance-1 lfd[1941750]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 17:15:38 instance-1 lfd[1941750]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 17:19:37 instance-1 lfd[1943026]: *User Processing* PID:1942951 Kill:0 User:newswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 17:31:38 instance-1 lfd[1946577]: *User Processing* PID:1946573 Kill:0 User:rcpacom VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 17:31:38 instance-1 lfd[1946577]: *User Processing* PID:1946567 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 17:41:38 instance-1 lfd[1949606]: *User Processing* PID:1949599 Kill:0 User:comphomes VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 17:41:38 instance-1 lfd[1949606]: *User Processing* PID:1949597 Kill:0 User:comphomes VM:635(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 17:44:38 instance-1 lfd[1950439]: *User Processing* PID:1950432 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 18:00:38 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 18:00:38 instance-1 lfd[1955189]: *User Processing* PID:1955158 Kill:0 User:newswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 18:15:39 instance-1 lfd[1959649]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 18:15:39 instance-1 lfd[1959649]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 18:22:39 instance-1 lfd[1961646]: *User Processing* PID:1961618 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 18:29:39 instance-1 lfd[1963596]: *User Processing* PID:1963587 Kill:0 User:geneticson VM:622(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 18:29:39 instance-1 lfd[1963596]: *User Processing* PID:1963592 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 18:37:39 instance-1 lfd[1966254]: *User Processing* PID:1966250 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 18:48:39 instance-1 lfd[1969615]: *User Processing* PID:1969607 Kill:0 User:surveyms VM:528(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 18:55:40 instance-1 lfd[1971989]: *User Processing* PID:1971980 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 18:55:40 instance-1 lfd[1971989]: *User Processing* PID:1971975 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 19:00:40 instance-1 lfd[1595380]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 19:15:40 instance-1 lfd[1978811]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 19:15:41 instance-1 lfd[1978811]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 19:23:42 instance-1 lfd[1981407]: *LOAD* 5 minute load average is 7.21, threshold is 6 - email sent Mar 21 19:23:44 instance-1 lfd[1981408]: *Excessive Processes* User:surveyms Kill:0 Process Count:20 Mar 21 20:27:14 instance-1 lfd[1711]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 21 20:27:15 instance-1 lfd[1711]: LF_APACHE_ERRPORT: Set to [2] Mar 21 20:27:16 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 21 20:27:16 instance-1 lfd[1711]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 21 20:27:16 instance-1 lfd[1711]: CSF Tracking... Mar 21 20:27:16 instance-1 lfd[1711]: IPv6 Enabled... Mar 21 20:27:16 instance-1 lfd[1711]: LOAD Tracking... Mar 21 20:27:16 instance-1 lfd[1711]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 21 20:27:16 instance-1 lfd[1711]: Country Code Lookups... Mar 21 20:27:16 instance-1 lfd[1711]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 20:27:16 instance-1 lfd[1711]: System Integrity Tracking... Mar 21 20:27:16 instance-1 lfd[1711]: Exploit Tracking... Mar 21 20:27:16 instance-1 lfd[1711]: Directory Watching... Mar 21 20:27:16 instance-1 lfd[1711]: Email Queue Tracking... Mar 21 20:27:16 instance-1 lfd[1711]: ModSecurity IP D/B Tracking... Mar 21 20:27:16 instance-1 lfd[1711]: Email Relay Tracking... Mar 21 20:27:17 instance-1 lfd[1711]: Temp to Perm Block Tracking... Mar 21 20:27:17 instance-1 lfd[1711]: System Statistics... Mar 21 20:27:18 instance-1 lfd[1711]: Process Tracking... Mar 21 20:27:18 instance-1 lfd[1711]: Account Tracking... Mar 21 20:27:18 instance-1 lfd[1711]: SSH Tracking... Mar 21 20:27:18 instance-1 lfd[1711]: Webmin Tracking... Mar 21 20:27:18 instance-1 lfd[1711]: SU Tracking... Mar 21 20:27:18 instance-1 lfd[1711]: Console Tracking... Mar 21 20:27:18 instance-1 lfd[1711]: WHM Tracking... Mar 21 20:27:18 instance-1 lfd[1711]: Watching /var/log/customlog... Mar 21 20:27:18 instance-1 lfd[1711]: Watching /var/log/maillog... Mar 21 20:27:18 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/access_log... Mar 21 20:27:18 instance-1 lfd[1711]: Watching /usr/local/cpanel/logs/login_log... Mar 21 20:27:19 instance-1 lfd[1711]: Watching /var/log/exim_mainlog... Mar 21 20:27:19 instance-1 lfd[1711]: Watching /etc/apache2/logs/error_log... Mar 21 20:27:19 instance-1 lfd[1711]: Watching /var/log/secure... Mar 21 20:27:19 instance-1 lfd[1711]: Watching /var/log/messages... Mar 21 20:29:19 instance-1 lfd[2599]: *User Processing* PID:2530 Kill:0 User:opthirecomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:30:19 instance-1 lfd[2915]: *User Processing* PID:2894 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:31:19 instance-1 lfd[3167]: *User Processing* PID:3062 Kill:0 User:newswinslow VM:554(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 20:32:55 instance-1 lfd[3501]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 20:32:55 instance-1 lfd[3501]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 20:35:19 instance-1 lfd[4818]: *User Processing* PID:4809 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:35:20 instance-1 lfd[4818]: *User Processing* PID:4810 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:35:20 instance-1 lfd[4818]: *User Processing* PID:4796 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:35:21 instance-1 lfd[4818]: *User Processing* PID:4753 Kill:0 User:trafman VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 20:35:21 instance-1 lfd[4818]: *User Processing* PID:4287 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 20:35:21 instance-1 lfd[4818]: *User Processing* PID:4782 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:35:22 instance-1 lfd[4818]: *User Processing* PID:4303 Kill:0 User:surveyms VM:575(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 20:36:19 instance-1 lfd[5420]: *User Processing* PID:5413 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:36:19 instance-1 lfd[5420]: *User Processing* PID:5415 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:37:19 instance-1 lfd[5929]: *User Processing* PID:5920 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:38:19 instance-1 lfd[6572]: *User Processing* PID:6568 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:39:19 instance-1 lfd[7111]: *User Processing* PID:7104 Kill:0 User:foster VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:39:19 instance-1 lfd[7111]: *User Processing* PID:7103 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:40:19 instance-1 lfd[7670]: *User Processing* PID:7666 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:40:19 instance-1 lfd[7670]: *User Processing* PID:7665 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:41:19 instance-1 lfd[8186]: *User Processing* PID:8181 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:42:19 instance-1 lfd[8692]: *User Processing* PID:8682 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:42:20 instance-1 lfd[8692]: *User Processing* PID:8683 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:43:19 instance-1 lfd[9301]: *User Processing* PID:9297 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:43:19 instance-1 lfd[9301]: *User Processing* PID:9292 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:47:19 instance-1 lfd[10905]: *User Processing* PID:10897 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:48:19 instance-1 lfd[11411]: *User Processing* PID:11406 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:50:19 instance-1 lfd[12115]: *User Processing* PID:12111 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:53:20 instance-1 lfd[13504]: *User Processing* PID:13500 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:54:20 instance-1 lfd[13969]: *User Processing* PID:13962 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:55:20 instance-1 lfd[14357]: *User Processing* PID:14352 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:56:20 instance-1 lfd[14714]: *User Processing* PID:14710 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 20:59:20 instance-1 lfd[15882]: *User Processing* PID:15878 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:01:20 instance-1 lfd[16672]: *User Processing* PID:16667 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:04:20 instance-1 lfd[17971]: *User Processing* PID:17964 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:06:20 instance-1 lfd[18719]: *User Processing* PID:18714 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:07:20 instance-1 lfd[19081]: *User Processing* PID:19072 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:08:20 instance-1 lfd[19566]: *User Processing* PID:19562 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:09:20 instance-1 lfd[19971]: *User Processing* PID:19945 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:10:20 instance-1 lfd[20471]: *User Processing* PID:20466 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:12:20 instance-1 lfd[21347]: *User Processing* PID:21334 Kill:0 User:tuscomau VM:574(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:14:20 instance-1 lfd[22282]: *User Processing* PID:22215 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 21 21:17:20 instance-1 lfd[23375]: *User Processing* PID:23363 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:18:20 instance-1 lfd[23883]: *User Processing* PID:23874 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:19:20 instance-1 lfd[24230]: *User Processing* PID:24223 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:27:20 instance-1 lfd[1711]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 21:27:20 instance-1 lfd[26897]: *User Processing* PID:26883 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 21:30:21 instance-1 lfd[27846]: *User Processing* PID:27837 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:35:21 instance-1 lfd[29620]: *User Processing* PID:29616 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:37:21 instance-1 lfd[30165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 21:37:21 instance-1 lfd[30165]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 21:43:21 instance-1 lfd[32017]: *User Processing* PID:32011 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:43:21 instance-1 lfd[32017]: *User Processing* PID:32013 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:44:21 instance-1 lfd[32456]: *User Processing* PID:32450 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 21:44:21 instance-1 lfd[32456]: *User Processing* PID:32452 Kill:0 User:tuscomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 22:02:21 instance-1 lfd[39940]: cPanel upgrade detected, restarting ConfigServer services... Mar 21 22:02:21 instance-1 lfd[39940]: cPanel upgrade detected, restarting lfd Mar 21 22:02:26 instance-1 lfd[1711]: daemon restart requested Mar 21 22:02:26 instance-1 lfd[39967]: Main Process: HUP Mar 21 22:02:26 instance-1 lfd[39967]: daemon stopped Mar 21 22:02:26 instance-1 lfd[39985]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 21 22:02:27 instance-1 lfd[39985]: LF_APACHE_ERRPORT: Set to [2] Mar 21 22:02:27 instance-1 lfd[39985]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 21 22:02:27 instance-1 lfd[39985]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 21 22:02:27 instance-1 lfd[39985]: CSF Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: IPv6 Enabled... Mar 21 22:02:27 instance-1 lfd[39985]: LOAD Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 21 22:02:27 instance-1 lfd[39985]: Country Code Lookups... Mar 21 22:02:27 instance-1 lfd[39985]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 22:02:27 instance-1 lfd[39985]: System Integrity Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Exploit Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Directory Watching... Mar 21 22:02:27 instance-1 lfd[39985]: Email Queue Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: ModSecurity IP D/B Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Email Relay Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Temp to Perm Block Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: System Statistics... Mar 21 22:02:27 instance-1 lfd[39985]: Process Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Account Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: SSH Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Webmin Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: SU Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Console Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: WHM Tracking... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/messages... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /etc/apache2/logs/error_log... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/secure... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/maillog... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/exim_mainlog... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /usr/local/cpanel/logs/login_log... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /var/log/customlog... Mar 21 22:02:27 instance-1 lfd[39985]: Watching /usr/local/cpanel/logs/access_log... Mar 21 22:06:18 instance-1 lfd[41661]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 21 22:06:18 instance-1 lfd[41661]: LF_APACHE_ERRPORT: Set to [2] Mar 21 22:06:18 instance-1 lfd[41661]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 21 22:06:18 instance-1 lfd[41661]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 21 22:06:18 instance-1 lfd[41661]: CSF Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: IPv6 Enabled... Mar 21 22:06:18 instance-1 lfd[41661]: LOAD Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 21 22:06:18 instance-1 lfd[41661]: Country Code Lookups... Mar 21 22:06:18 instance-1 lfd[41661]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 22:06:18 instance-1 lfd[41661]: System Integrity Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Exploit Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Directory Watching... Mar 21 22:06:18 instance-1 lfd[41661]: Email Queue Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: ModSecurity IP D/B Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Email Relay Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Temp to Perm Block Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: System Statistics... Mar 21 22:06:18 instance-1 lfd[41661]: Process Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Account Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: SSH Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Webmin Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: SU Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Console Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: WHM Tracking... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/customlog... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/exim_mainlog... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /etc/apache2/logs/error_log... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /usr/local/cpanel/logs/login_log... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/maillog... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /usr/local/cpanel/logs/access_log... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/secure... Mar 21 22:06:18 instance-1 lfd[41661]: Watching /var/log/messages... Mar 21 22:09:18 instance-1 lfd[42607]: *User Processing* PID:42556 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 22:11:18 instance-1 lfd[43351]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 22:11:19 instance-1 lfd[43351]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 22:19:18 instance-1 lfd[45689]: *User Processing* PID:45681 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 22:24:18 instance-1 lfd[47223]: *User Processing* PID:47217 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 22:24:18 instance-1 lfd[47223]: *User Processing* PID:47219 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 22:24:19 instance-1 lfd[47223]: *User Processing* PID:47213 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 22:42:19 instance-1 lfd[52955]: *User Processing* PID:52946 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 21 22:59:19 instance-1 lfd[57710]: *User Processing* PID:57468 Kill:0 User:bmswinslow VM:630(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 23:01:19 instance-1 lfd[58263]: *User Processing* PID:58255 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 23:01:19 instance-1 lfd[58263]: *User Processing* PID:58250 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 23:06:19 instance-1 lfd[41661]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 21 23:09:20 instance-1 lfd[61133]: *Excessive Processes* User:winslow Kill:0 Process Count:12 Mar 21 23:11:20 instance-1 lfd[62191]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 21 23:11:20 instance-1 lfd[62191]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 21 23:12:20 instance-1 lfd[62838]: *Excessive Processes* User:tekutaro Kill:0 Process Count:11 Mar 21 23:15:20 instance-1 lfd[64434]: *Excessive Processes* User:trafman Kill:0 Process Count:12 Mar 21 23:16:20 instance-1 lfd[65079]: *Excessive Processes* User:private Kill:0 Process Count:12 Mar 21 23:22:20 instance-1 lfd[67508]: *User Processing* PID:67504 Kill:0 User:opthirecomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 23:42:20 instance-1 lfd[73272]: *User Processing* PID:73257 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 23:42:20 instance-1 lfd[73272]: *User Processing* PID:73265 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 21 23:58:21 instance-1 lfd[78513]: *User Processing* PID:78506 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 23:59:21 instance-1 lfd[78939]: *User Processing* PID:78934 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 21 23:59:21 instance-1 lfd[78939]: *User Processing* PID:78932 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:00:02 instance-1 lfd[41661]: Main Process: TERM Mar 22 00:00:02 instance-1 lfd[41661]: daemon stopped Mar 22 00:00:02 instance-1 lfd[79232]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 22 00:00:02 instance-1 lfd[79232]: LF_APACHE_ERRPORT: Set to [2] Mar 22 00:00:02 instance-1 lfd[79232]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 22 00:00:02 instance-1 lfd[79232]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 22 00:00:02 instance-1 lfd[79232]: CSF Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: IPv6 Enabled... Mar 22 00:00:02 instance-1 lfd[79232]: LOAD Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 22 00:00:02 instance-1 lfd[79232]: Country Code Lookups... Mar 22 00:00:02 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 00:00:02 instance-1 lfd[79232]: System Integrity Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Exploit Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Directory Watching... Mar 22 00:00:02 instance-1 lfd[79232]: Email Queue Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: ModSecurity IP D/B Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Email Relay Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Temp to Perm Block Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: System Statistics... Mar 22 00:00:02 instance-1 lfd[79232]: Process Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Account Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: SSH Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Webmin Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: SU Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Console Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: WHM Tracking... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/customlog... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/maillog... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/messages... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /etc/apache2/logs/error_log... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/secure... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /usr/local/cpanel/logs/access_log... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /var/log/exim_mainlog... Mar 22 00:00:02 instance-1 lfd[79232]: Watching /usr/local/cpanel/logs/login_log... Mar 22 00:01:02 instance-1 lfd[79603]: *User Processing* PID:79599 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:05:03 instance-1 lfd[80860]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 00:05:03 instance-1 lfd[80860]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 00:20:05 instance-1 lfd[85569]: *LOAD* 5 minute load average is 7.13, threshold is 6 - email sent Mar 22 00:20:08 instance-1 lfd[85570]: *Excessive Processes* User:winslow Kill:0 Process Count:29 Mar 22 00:20:17 instance-1 lfd[85570]: *Excessive Processes* User:surveyms Kill:0 Process Count:20 Mar 22 00:20:20 instance-1 lfd[85570]: *User Processing* PID:85446 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:24 instance-1 lfd[85570]: *User Processing* PID:85427 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:28 instance-1 lfd[85570]: *User Processing* PID:85358 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:31 instance-1 lfd[85570]: *User Processing* PID:85250 Kill:0 User:geneticson VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:35 instance-1 lfd[85570]: *User Processing* PID:85365 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:38 instance-1 lfd[85570]: *User Processing* PID:85022 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 00:20:42 instance-1 lfd[85570]: *User Processing* PID:85242 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:45 instance-1 lfd[85570]: *User Processing* PID:85298 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:50 instance-1 lfd[85570]: *User Processing* PID:85434 Kill:0 User:independent VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 00:20:51 instance-1 lfd[85568]: Directory Watching terminated after 40 seconds Mar 22 00:20:52 instance-1 lfd[85568]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds Mar 22 00:21:59 instance-1 lfd[85927]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped Mar 22 01:20:03 instance-1 lfd[85570]: *User Processing* PID:85406 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:20:11 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 01:20:16 instance-1 lfd[86469]: *LOAD* 5 minute load average is 358.51, threshold is 6 - email sent Mar 22 01:20:16 instance-1 lfd[86470]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped Mar 22 01:20:21 instance-1 lfd[85570]: *User Processing* PID:85481 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:20:34 instance-1 lfd[85570]: *User Processing* PID:85449 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:20:39 instance-1 lfd[86582]: Child : *Lock Error* [PT_INTERVAL] still active - section skipped Mar 22 01:20:43 instance-1 lfd[85570]: *User Processing* PID:85296 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:20:51 instance-1 lfd[85570]: *User Processing* PID:85352 Kill:0 User:independent VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:20:54 instance-1 lfd[85570]: *User Processing* PID:85430 Kill:0 User:foster VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:02 instance-1 lfd[85570]: *User Processing* PID:85338 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:08 instance-1 lfd[85570]: *User Processing* PID:85341 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:12 instance-1 lfd[85570]: *User Processing* PID:85479 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:21:14 instance-1 lfd[85570]: *User Processing* PID:85429 Kill:0 User:mainpoint VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:16 instance-1 lfd[85570]: *User Processing* PID:85408 Kill:0 User:yvegroup VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:20 instance-1 lfd[85570]: *User Processing* PID:85438 Kill:0 User:geneticson VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:40 instance-1 lfd[87163]: *User Processing* PID:85022 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:21:40 instance-1 lfd[87163]: *User Processing* PID:85022 Kill:0 User:indigenouscivil Time:3723 EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:21:43 instance-1 lfd[87163]: *User Processing* PID:85179 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 01:21:43 instance-1 lfd[87163]: *User Processing* PID:85179 Kill:0 User:surveyms Time:3715 EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 01:21:44 instance-1 lfd[87163]: *User Processing* PID:85342 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 01:21:44 instance-1 lfd[87163]: *User Processing* PID:85342 Kill:0 User:surveyms Time:3709 EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 01:21:46 instance-1 lfd[87163]: *User Processing* PID:84788 Kill:0 User:turnkey Time:3744 EXE:/usr/local/cpanel/3rdparty/php/83/sbin/php-fpm CMD:php-fpm: pool user_turnkey Mar 22 01:21:47 instance-1 lfd[87163]: *User Processing* PID:85727 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:21:47 instance-1 lfd[87163]: *User Processing* PID:85727 Kill:0 User:indigenouscivil Time:3672 EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:21:48 instance-1 lfd[87163]: *User Processing* PID:85667 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:21:48 instance-1 lfd[87163]: *User Processing* PID:85667 Kill:0 User:indigenouscivil Time:3683 EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:21:50 instance-1 lfd[87163]: *User Processing* PID:85444 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:50 instance-1 lfd[87163]: *User Processing* PID:85444 Kill:0 User:rcpacom Time:3703 EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:21:52 instance-1 lfd[86442]: Directory Watching terminated after 100 seconds Mar 22 01:21:52 instance-1 lfd[86442]: LF_DIRWATCH taking 100 seconds, temporarily throttled to run every 2700 seconds Mar 22 01:22:42 instance-1 lfd[87614]: *User Processing* PID:87482 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:22:42 instance-1 lfd[87614]: *User Processing* PID:87479 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:22:42 instance-1 lfd[87614]: *User Processing* PID:87489 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:31:42 instance-1 lfd[90494]: *User Processing* PID:90444 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 01:31:42 instance-1 lfd[90494]: *User Processing* PID:90487 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 01:44:42 instance-1 lfd[93943]: *User Processing* PID:93940 Kill:0 User:mainpoint VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:05:27 instance-1 lfd[100572]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 02:05:27 instance-1 lfd[100572]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 02:16:43 instance-1 lfd[104166]: *User Processing* PID:104161 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:19:38 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 02:20:43 instance-1 lfd[105327]: *User Processing* PID:105286 Kill:0 User:independent VM:599(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:23:43 instance-1 lfd[106078]: *User Processing* PID:106069 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:23:43 instance-1 lfd[106078]: *User Processing* PID:106075 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:28:43 instance-1 lfd[107480]: *User Processing* PID:107477 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:39:44 instance-1 lfd[110607]: *User Processing* PID:110595 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112065 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112043 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112052 Kill:0 User:foster VM:609(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:44:44 instance-1 lfd[112071]: *User Processing* PID:112064 Kill:0 User:foster VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:49:44 instance-1 lfd[113632]: *User Processing* PID:113623 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:49:44 instance-1 lfd[113632]: *User Processing* PID:113616 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 02:50:44 instance-1 lfd[113932]: *User Processing* PID:113924 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 02:52:44 instance-1 lfd[114607]: *User Processing* PID:114601 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:03:44 instance-1 lfd[117928]: *User Processing* PID:117920 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 03:17:45 instance-1 lfd[122241]: *User Processing* PID:122235 Kill:0 User:surveyms VM:573(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 03:18:45 instance-1 lfd[122524]: *User Processing* PID:122515 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 03:19:40 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 03:22:45 instance-1 lfd[123780]: *User Processing* PID:123777 Kill:0 User:foster VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:47 instance-1 lfd[125063]: *User Processing* PID:124506 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:49 instance-1 lfd[125063]: *User Processing* PID:124516 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 03:24:50 instance-1 lfd[125063]: *User Processing* PID:124655 Kill:0 User:surveyms VM:538(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 03:24:52 instance-1 lfd[125063]: *User Processing* PID:124389 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:54 instance-1 lfd[125063]: *User Processing* PID:124408 Kill:0 User:bmswinslow VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:55 instance-1 lfd[125063]: *User Processing* PID:125067 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:56 instance-1 lfd[125063]: *User Processing* PID:124942 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 03:24:57 instance-1 lfd[125063]: *User Processing* PID:124928 Kill:0 User:winslowgroupweb VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:57 instance-1 lfd[125063]: *User Processing* PID:124755 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:58 instance-1 lfd[125063]: *User Processing* PID:124738 Kill:0 User:newswinslow VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 03:24:58 instance-1 lfd[125063]: *User Processing* PID:124936 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:59 instance-1 lfd[125063]: *User Processing* PID:124372 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:24:59 instance-1 lfd[125063]: *User Processing* PID:124561 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:25:00 instance-1 lfd[125063]: *User Processing* PID:124646 Kill:0 User:bmswinslow VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:25:00 instance-1 lfd[125063]: *User Processing* PID:124740 Kill:0 User:winslowgroupweb VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:25:00 instance-1 lfd[125063]: *User Processing* PID:124975 Kill:0 User:bmswinslow VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:25:01 instance-1 lfd[125063]: *User Processing* PID:124852 Kill:0 User:geneticson VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:25:01 instance-1 lfd[125637]: *LOAD* 5 minute load average is 6.11, threshold is 6 - email sent Mar 22 03:25:01 instance-1 lfd[125063]: *User Processing* PID:124733 Kill:0 User:winslowgroupweb VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:25:01 instance-1 lfd[125063]: *User Processing* PID:124386 Kill:0 User:newswinslow VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 03:28:48 instance-1 lfd[127461]: (smtpauth) Failed SMTP AUTH login from 165.154.203.216 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 22 03:32:46 instance-1 lfd[128664]: *User Processing* PID:128641 Kill:0 User:yvegroup VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:35:18 instance-1 lfd[129130]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 03:35:18 instance-1 lfd[129130]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 03:49:46 instance-1 lfd[135391]: *User Processing* PID:135369 Kill:0 User:nlph VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nlph/public_html instance info --format=json --check-updates=true Mar 22 03:50:46 instance-1 lfd[136071]: *User Processing* PID:135901 Kill:0 User:newswinslow VM:552(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 03:51:47 instance-1 lfd[136815]: *User Processing* PID:136806 Kill:0 User:trafman VM:547(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/trafman/public_html instance info --format=json --check-updates=true Mar 22 03:52:47 instance-1 lfd[138034]: *User Processing* PID:137866 Kill:0 User:mainpoint VM:616(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/mainpoint/public_html instance info --format=json --check-updates=true Mar 22 03:53:47 instance-1 lfd[138997]: *User Processing* PID:138994 Kill:0 User:geneticson VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/geneticson/public_html config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX --format=json Mar 22 03:54:47 instance-1 lfd[139887]: *User Processing* PID:139871 Kill:0 User:bmswinslow VM:721(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=300 --no-header -- --no-color --path=/home/bmswinslow/public_html plugin update gravityforms --format=json --skip-plugins=false --skip-themes=false Mar 22 03:54:47 instance-1 lfd[139887]: *User Processing* PID:139884 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:55:47 instance-1 lfd[140849]: *User Processing* PID:140846 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 03:55:47 instance-1 lfd[140849]: *User Processing* PID:140844 Kill:0 User:tuscomau VM:612(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/tuscomau/public_html instance info --format=json --check-updates=true Mar 22 04:19:42 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 04:21:47 instance-1 lfd[150092]: *User Processing* PID:150081 Kill:0 User:yvegroup VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 04:21:48 instance-1 lfd[150092]: *User Processing* PID:149787 Kill:0 User:indigenouscivil VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 04:21:48 instance-1 lfd[150092]: *User Processing* PID:150084 Kill:0 User:foster VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 04:22:47 instance-1 lfd[150652]: *User Processing* PID:150515 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 04:23:48 instance-1 lfd[151189]: *User Processing* PID:151134 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 04:23:48 instance-1 lfd[151189]: *User Processing* PID:151172 Kill:0 User:yvegroup VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 04:24:48 instance-1 lfd[151844]: *User Processing* PID:151831 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 04:24:48 instance-1 lfd[151844]: *User Processing* PID:151785 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 04:24:48 instance-1 lfd[151844]: *User Processing* PID:151841 Kill:0 User:yvegroup VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 05:04:44 instance-1 lfd[164714]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 05:04:44 instance-1 lfd[164714]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 05:19:44 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 05:38:50 instance-1 lfd[174215]: *User Processing* PID:174189 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 06:03:50 instance-1 lfd[181438]: *User Processing* PID:181433 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 06:11:51 instance-1 lfd[183864]: *User Processing* PID:183859 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 06:13:51 instance-1 lfd[184677]: *User Processing* PID:184673 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 06:19:46 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 06:34:48 instance-1 lfd[191532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 06:34:49 instance-1 lfd[191532]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 06:34:52 instance-1 lfd[191566]: *Excessive Processes* User:surveyms Kill:0 Process Count:16 Mar 22 06:34:53 instance-1 lfd[191566]: *User Processing* PID:191437 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 06:34:53 instance-1 lfd[191566]: *User Processing* PID:191488 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 06:34:54 instance-1 lfd[191566]: *User Processing* PID:191433 Kill:0 User:surveyms VM:512(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 06:34:54 instance-1 lfd[191566]: *User Processing* PID:191496 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 06:37:52 instance-1 lfd[192380]: *User Processing* PID:192372 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 06:42:52 instance-1 lfd[193796]: *User Processing* PID:193790 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 06:55:52 instance-1 lfd[197808]: *User Processing* PID:197791 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 07:19:48 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 07:26:54 instance-1 lfd[207526]: *User Processing* PID:207442 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 07:26:54 instance-1 lfd[207526]: *User Processing* PID:207520 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 07:26:54 instance-1 lfd[207526]: *User Processing* PID:207519 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 07:27:54 instance-1 lfd[207963]: *User Processing* PID:207923 Kill:0 User:newswinslow VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 07:27:54 instance-1 lfd[207963]: *User Processing* PID:207959 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 07:28:54 instance-1 lfd[208360]: *User Processing* PID:208356 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 07:28:54 instance-1 lfd[208360]: *User Processing* PID:208270 Kill:0 User:newswinslow VM:534(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 07:29:54 instance-1 lfd[208812]: *User Processing* PID:208511 Kill:0 User:newswinslow VM:540(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 07:33:54 instance-1 lfd[210360]: *User Processing* PID:210310 Kill:0 User:newswinslow VM:562(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 08:04:52 instance-1 lfd[221592]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 08:04:52 instance-1 lfd[221592]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 08:07:55 instance-1 lfd[222754]: *User Processing* PID:222746 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 08:13:55 instance-1 lfd[224865]: *User Processing* PID:224841 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 08:19:50 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 08:32:56 instance-1 lfd[232254]: *User Processing* PID:232247 Kill:0 User:rcpacom VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 08:35:56 instance-1 lfd[233521]: *User Processing* PID:233518 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 08:37:56 instance-1 lfd[234609]: *User Processing* PID:234606 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 08:38:56 instance-1 lfd[235011]: *User Processing* PID:235005 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 08:52:57 instance-1 lfd[241087]: *User Processing* PID:241082 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 09:07:58 instance-1 lfd[246272]: *User Processing* PID:246268 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 09:11:58 instance-1 lfd[247644]: *User Processing* PID:247570 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 09:19:53 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 09:34:54 instance-1 lfd[255976]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 09:34:54 instance-1 lfd[255976]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 10:19:55 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 10:36:01 instance-1 lfd[274413]: *User Processing* PID:274410 Kill:0 User:eyrescom VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 10:41:01 instance-1 lfd[275918]: *User Processing* PID:275911 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 10:45:01 instance-1 lfd[277274]: *User Processing* PID:277254 Kill:0 User:geneticson VM:533(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 10:54:01 instance-1 lfd[281006]: *User Processing* PID:280992 Kill:0 User:yvegroup VM:599(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:02:02 instance-1 lfd[283377]: *User Processing* PID:283352 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:03:02 instance-1 lfd[283700]: *User Processing* PID:283694 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:04:57 instance-1 lfd[284319]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 11:04:57 instance-1 lfd[284319]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 11:05:02 instance-1 lfd[284400]: *User Processing* PID:284356 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:19:57 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 11:34:03 instance-1 lfd[293001]: *User Processing* PID:292995 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:35:03 instance-1 lfd[293367]: *User Processing* PID:293359 Kill:0 User:tuscomau VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:36:03 instance-1 lfd[293686]: *User Processing* PID:293680 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:38:03 instance-1 lfd[294559]: *User Processing* PID:294556 Kill:0 User:rcpacom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:39:03 instance-1 lfd[294883]: *User Processing* PID:294877 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:40:03 instance-1 lfd[295254]: *User Processing* PID:295251 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 11:45:03 instance-1 lfd[297046]: *User Processing* PID:297040 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 12:14:04 instance-1 lfd[305504]: *User Processing* PID:305501 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 12:19:59 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 12:28:05 instance-1 lfd[309479]: *User Processing* PID:309441 Kill:0 User:newswinslow VM:543(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 12:35:00 instance-1 lfd[311517]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 12:35:00 instance-1 lfd[311517]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 12:54:06 instance-1 lfd[317087]: *User Processing* PID:317048 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 13:20:02 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 13:44:07 instance-1 lfd[332446]: *User Processing* PID:332407 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 13:47:08 instance-1 lfd[333416]: *User Processing* PID:333412 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 14:01:08 instance-1 lfd[337974]: *User Processing* PID:337971 Kill:0 User:mainpoint VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 14:02:08 instance-1 lfd[338415]: *User Processing* PID:338404 Kill:0 User:bmswinslow VM:665(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 14:05:04 instance-1 lfd[339230]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 14:05:04 instance-1 lfd[339230]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 14:20:04 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 14:51:10 instance-1 lfd[352582]: *User Processing* PID:352575 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 14:51:10 instance-1 lfd[352582]: *User Processing* PID:352576 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 14:59:10 instance-1 lfd[355158]: *User Processing* PID:355154 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 15:04:10 instance-1 lfd[356914]: *User Processing* PID:356910 Kill:0 User:yvegroup VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 15:05:10 instance-1 lfd[357269]: *User Processing* PID:357266 Kill:0 User:yvegroup VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 15:14:11 instance-1 lfd[360374]: *User Processing* PID:360223 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 15:20:06 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 15:35:07 instance-1 lfd[367162]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 15:35:07 instance-1 lfd[367162]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 15:39:12 instance-1 lfd[368323]: *User Processing* PID:368318 Kill:0 User:rcpacom VM:601(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 15:44:12 instance-1 lfd[369851]: *User Processing* PID:369838 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 15:44:12 instance-1 lfd[369851]: *User Processing* PID:369845 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 15:46:12 instance-1 lfd[370594]: *User Processing* PID:370577 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 15:52:12 instance-1 lfd[372744]: *User Processing* PID:372740 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 16:03:13 instance-1 lfd[376353]: *User Processing* PID:376350 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 16:13:13 instance-1 lfd[379493]: *User Processing* PID:379452 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 16:20:08 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 16:38:14 instance-1 lfd[387925]: *User Processing* PID:387921 Kill:0 User:yvegroup VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 16:44:46 instance-1 lfd[390114]: (smtpauth) Failed SMTP AUTH login from 165.154.235.97 (CA/Canada/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 22 16:57:15 instance-1 lfd[394097]: *User Processing* PID:394094 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 16:58:15 instance-1 lfd[394443]: *User Processing* PID:394440 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 16:59:15 instance-1 lfd[394806]: *User Processing* PID:394802 Kill:0 User:eyrescom VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:00:15 instance-1 lfd[395217]: *User Processing* PID:395213 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:05:10 instance-1 lfd[397225]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 17:05:11 instance-1 lfd[397225]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 17:05:15 instance-1 lfd[397276]: *User Processing* PID:397273 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:12:15 instance-1 lfd[399861]: *User Processing* PID:399842 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:13:15 instance-1 lfd[400257]: *User Processing* PID:400253 Kill:0 User:mainpoint VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:14:15 instance-1 lfd[400575]: *User Processing* PID:400572 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:18:16 instance-1 lfd[402201]: *User Processing* PID:402196 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:20:11 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 17:22:16 instance-1 lfd[403738]: *User Processing* PID:403733 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:23:16 instance-1 lfd[404286]: *User Processing* PID:404279 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:23:16 instance-1 lfd[404286]: *User Processing* PID:404280 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:24:16 instance-1 lfd[404688]: *User Processing* PID:404681 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:26:16 instance-1 lfd[405506]: *User Processing* PID:405500 Kill:0 User:eyrescom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:28:16 instance-1 lfd[406416]: *User Processing* PID:406413 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:30:16 instance-1 lfd[407031]: *User Processing* PID:407025 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:32:16 instance-1 lfd[407598]: *User Processing* PID:407592 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:32:16 instance-1 lfd[407598]: *User Processing* PID:407590 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:34:16 instance-1 lfd[408320]: *User Processing* PID:408309 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:36:16 instance-1 lfd[408926]: *User Processing* PID:408923 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409197 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409192 Kill:0 User:foster VM:610(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409200 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:37:16 instance-1 lfd[409203]: *User Processing* PID:409191 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:39:16 instance-1 lfd[409906]: *User Processing* PID:409900 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:40:16 instance-1 lfd[410230]: *User Processing* PID:410224 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:40:16 instance-1 lfd[410230]: *User Processing* PID:410222 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:41:16 instance-1 lfd[410495]: *User Processing* PID:410492 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:42:16 instance-1 lfd[410759]: *User Processing* PID:410754 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:43:16 instance-1 lfd[411180]: *User Processing* PID:411177 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:44:16 instance-1 lfd[411448]: *User Processing* PID:411442 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:44:16 instance-1 lfd[411448]: *User Processing* PID:411440 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:45:16 instance-1 lfd[411780]: *User Processing* PID:411777 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:46:16 instance-1 lfd[412047]: *User Processing* PID:412044 Kill:0 User:tuscomau VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:49:16 instance-1 lfd[413012]: *User Processing* PID:413007 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:49:17 instance-1 lfd[413012]: *User Processing* PID:413006 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:50:17 instance-1 lfd[413361]: *User Processing* PID:413358 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:50:17 instance-1 lfd[413361]: *User Processing* PID:413357 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:51:17 instance-1 lfd[413648]: *User Processing* PID:413640 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:51:17 instance-1 lfd[413648]: *User Processing* PID:413645 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:52:17 instance-1 lfd[413950]: *User Processing* PID:413941 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:52:17 instance-1 lfd[413950]: *User Processing* PID:413946 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:53:17 instance-1 lfd[414234]: *User Processing* PID:414228 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:54:17 instance-1 lfd[414747]: *User Processing* PID:414739 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:54:17 instance-1 lfd[414747]: *User Processing* PID:414744 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:56:17 instance-1 lfd[415370]: *User Processing* PID:415367 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 17:57:17 instance-1 lfd[415669]: *User Processing* PID:415616 Kill:0 User:indigenouscivil VM:597(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 17:58:17 instance-1 lfd[415966]: *User Processing* PID:415962 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:00:17 instance-1 lfd[416764]: *User Processing* PID:416758 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:02:17 instance-1 lfd[417398]: *User Processing* PID:417383 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:05:17 instance-1 lfd[418654]: *User Processing* PID:418647 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:05:17 instance-1 lfd[418654]: *User Processing* PID:418640 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:06:17 instance-1 lfd[419063]: *User Processing* PID:419059 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:07:17 instance-1 lfd[419473]: *User Processing* PID:419470 Kill:0 User:eyrescom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:09:17 instance-1 lfd[420305]: *User Processing* PID:420298 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:11:17 instance-1 lfd[421159]: *User Processing* PID:421151 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:12:17 instance-1 lfd[421500]: *User Processing* PID:421493 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:12:17 instance-1 lfd[421500]: *User Processing* PID:421489 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:15:17 instance-1 lfd[422680]: *User Processing* PID:422672 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:15:17 instance-1 lfd[422680]: *User Processing* PID:422670 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:16:18 instance-1 lfd[423065]: *Excessive Processes* User:fccsite Kill:0 Process Count:13 Mar 22 18:16:18 instance-1 lfd[423065]: *User Processing* PID:423056 Kill:0 User:opthirecomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:16:19 instance-1 lfd[423065]: *User Processing* PID:423052 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:16:19 instance-1 lfd[423065]: *User Processing* PID:423057 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:18:02 instance-1 lfd[423861]: *LOAD* 5 minute load average is 7.15, threshold is 6 - email sent Mar 22 18:18:18 instance-1 lfd[423983]: *User Processing* PID:423974 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:18:18 instance-1 lfd[423983]: *User Processing* PID:423971 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:20:13 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 18:21:18 instance-1 lfd[425201]: *User Processing* PID:425198 Kill:0 User:mainpoint VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:23:18 instance-1 lfd[425850]: *User Processing* PID:425846 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:24:18 instance-1 lfd[426185]: *User Processing* PID:426102 Kill:0 User:newswinslow VM:613(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 18:25:18 instance-1 lfd[426720]: *User Processing* PID:426714 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:27:18 instance-1 lfd[427342]: *User Processing* PID:427336 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:32:18 instance-1 lfd[429177]: *User Processing* PID:429170 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:33:18 instance-1 lfd[429518]: *User Processing* PID:429512 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:35:13 instance-1 lfd[430241]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 18:35:13 instance-1 lfd[430241]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 18:36:18 instance-1 lfd[430830]: *User Processing* PID:430826 Kill:0 User:foster VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:40:18 instance-1 lfd[432338]: *User Processing* PID:432329 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:41:18 instance-1 lfd[432821]: *User Processing* PID:432818 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:43:18 instance-1 lfd[433546]: *User Processing* PID:433543 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:47:18 instance-1 lfd[435138]: *User Processing* PID:435135 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:48:18 instance-1 lfd[435523]: *User Processing* PID:435520 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:49:18 instance-1 lfd[435891]: *User Processing* PID:435866 Kill:0 User:indigenouscivil VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 18:50:18 instance-1 lfd[436412]: *User Processing* PID:436404 Kill:0 User:comphomes VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:50:19 instance-1 lfd[436412]: *User Processing* PID:436403 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:50:19 instance-1 lfd[436412]: *User Processing* PID:436408 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:53:19 instance-1 lfd[437833]: *User Processing* PID:437829 Kill:0 User:comphomes VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:53:19 instance-1 lfd[437833]: *User Processing* PID:437830 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:54:19 instance-1 lfd[438357]: *User Processing* PID:438293 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 18:55:19 instance-1 lfd[438835]: *User Processing* PID:438830 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 18:55:19 instance-1 lfd[438835]: *User Processing* PID:438828 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:56:19 instance-1 lfd[439219]: *User Processing* PID:439196 Kill:0 User:indigenouscivil VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 18:56:19 instance-1 lfd[439219]: *User Processing* PID:439216 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 18:58:19 instance-1 lfd[439997]: *User Processing* PID:439993 Kill:0 User:tuscomau VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:05:19 instance-1 lfd[442564]: *User Processing* PID:442561 Kill:0 User:newswinslow VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool news_winslow_com_au Mar 22 19:06:19 instance-1 lfd[442951]: *User Processing* PID:442945 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:20:14 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 19:22:19 instance-1 lfd[448886]: *User Processing* PID:448880 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:27:19 instance-1 lfd[450754]: *User Processing* PID:450747 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:28:19 instance-1 lfd[451080]: *User Processing* PID:451077 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:28:19 instance-1 lfd[451080]: *User Processing* PID:451071 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 19:29:19 instance-1 lfd[451554]: *User Processing* PID:451550 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:30:19 instance-1 lfd[451899]: *User Processing* PID:451896 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:36:20 instance-1 lfd[453964]: *User Processing* PID:453957 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:38:20 instance-1 lfd[454596]: *User Processing* PID:454593 Kill:0 User:opthirecomau VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:48:20 instance-1 lfd[458173]: *User Processing* PID:458169 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:50:20 instance-1 lfd[459013]: *User Processing* PID:459006 Kill:0 User:tuscomau VM:559(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 19:55:20 instance-1 lfd[461142]: *User Processing* PID:461138 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 20:05:16 instance-1 lfd[464707]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 20:05:16 instance-1 lfd[464707]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 20:20:16 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 20:27:21 instance-1 lfd[471709]: *User Processing* PID:471706 Kill:0 User:rcpacom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 20:51:22 instance-1 lfd[479451]: *User Processing* PID:479448 Kill:0 User:eyrescom VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:02:22 instance-1 lfd[482861]: *User Processing* PID:482857 Kill:0 User:rcpacom VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:02:22 instance-1 lfd[482861]: *User Processing* PID:482837 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 21:05:22 instance-1 lfd[483745]: *User Processing* PID:483733 Kill:0 User:tuscomau VM:636(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:15:22 instance-1 lfd[486598]: *User Processing* PID:486594 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:18:22 instance-1 lfd[488259]: *User Processing* PID:488255 Kill:0 User:tuscomau VM:555(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:18:22 instance-1 lfd[488259]: *User Processing* PID:488256 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:19:22 instance-1 lfd[488727]: *User Processing* PID:488723 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:20:17 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 21:20:22 instance-1 lfd[489303]: *User Processing* PID:489299 Kill:0 User:foster VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:20:23 instance-1 lfd[489303]: *User Processing* PID:489298 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:20:23 instance-1 lfd[489303]: *User Processing* PID:489300 Kill:0 User:rcpacom VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:22:23 instance-1 lfd[490815]: *User Processing* PID:490805 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:22:23 instance-1 lfd[490815]: *User Processing* PID:490811 Kill:0 User:rcpacom VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:22:23 instance-1 lfd[490815]: *User Processing* PID:490802 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:24:23 instance-1 lfd[491885]: *User Processing* PID:491881 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:25:23 instance-1 lfd[492311]: *User Processing* PID:492308 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:26:23 instance-1 lfd[492746]: *User Processing* PID:492743 Kill:0 User:foster VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:27:23 instance-1 lfd[493339]: *User Processing* PID:493336 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:28:23 instance-1 lfd[493827]: *User Processing* PID:493818 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:28:23 instance-1 lfd[493827]: *User Processing* PID:493820 Kill:0 User:independent VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:28:23 instance-1 lfd[493827]: *User Processing* PID:493819 Kill:0 User:foster VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:29:23 instance-1 lfd[494260]: *User Processing* PID:494254 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:30:23 instance-1 lfd[494692]: *User Processing* PID:494686 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:31:23 instance-1 lfd[495004]: *User Processing* PID:494998 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:32:23 instance-1 lfd[495513]: *User Processing* PID:495482 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:32:23 instance-1 lfd[495513]: *User Processing* PID:495498 Kill:0 User:eyrescom VM:523(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:35:18 instance-1 lfd[496788]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 21:35:18 instance-1 lfd[496788]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 21:35:23 instance-1 lfd[496832]: *User Processing* PID:496829 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:36:23 instance-1 lfd[497155]: *User Processing* PID:497148 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 21:39:23 instance-1 lfd[498384]: *User Processing* PID:498377 Kill:0 User:surveyms VM:516(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 21:41:23 instance-1 lfd[499092]: *User Processing* PID:499085 Kill:0 User:surveyms VM:518(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 21:42:23 instance-1 lfd[499429]: *User Processing* PID:499421 Kill:0 User:surveyms VM:522(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 22:12:28 instance-1 lfd[510193]: *User Processing* PID:510185 Kill:0 User:surveyms VM:574(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 22:20:18 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 22:20:22 instance-1 lfd[512469]: *System Integrity* has detected modified file(s): /usr/bin/centrino-decode /usr/bin/cpupower /usr/bin/gpio-event-mon /usr/bin/gpio-hammer /usr/bin/iio_event_monitor /usr/bin/iio_generic_buffer /usr/bin/intel-speed-select /usr/bin/lsgpio /usr/bin/lsiio /usr/bin/page_owner_sort /usr/bin/powernow-k8-decode /usr/bin/slabinfo /usr/bin/tmon /usr/bin/turbostat /usr/bin/x86_energy_perf_policy /usr/sbin/intel_sdsi /bin/centrino-decode /bin/cpupower /bin/gpio-event-mon /bin/gpio-hammer /bin/iio_event_monitor /bin/iio_generic_buffer /bin/intel-speed-select /bin/lsgpio /bin/lsiio /bin/page_owner_sort /bin/powernow-k8-decode /bin/slabinfo /bin/tmon /bin/turbostat /bin/x86_energy_perf_policy /sbin/intel_sdsi Mar 22 22:22:29 instance-1 lfd[512975]: *User Processing* PID:512957 Kill:0 User:indigenouscivil VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 22:28:29 instance-1 lfd[514657]: *User Processing* PID:514652 Kill:0 User:trafman VM:569(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 22:29:29 instance-1 lfd[514947]: *User Processing* PID:514941 Kill:0 User:trafman VM:559(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 22:32:29 instance-1 lfd[516083]: *User Processing* PID:516080 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 22:35:29 instance-1 lfd[517354]: *User Processing* PID:517351 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 22:36:29 instance-1 lfd[517670]: *User Processing* PID:517667 Kill:0 User:tuscomau VM:526(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 22:37:29 instance-1 lfd[517974]: *User Processing* PID:517968 Kill:0 User:tuscomau VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 22:38:29 instance-1 lfd[518288]: *User Processing* PID:518282 Kill:0 User:tuscomau VM:572(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 22:39:29 instance-1 lfd[518655]: *User Processing* PID:518649 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 22:41:29 instance-1 lfd[519434]: *User Processing* PID:519373 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 22:55:30 instance-1 lfd[523734]: *User Processing* PID:523728 Kill:0 User:surveyms VM:526(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 23:05:20 instance-1 lfd[526913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 22 23:05:20 instance-1 lfd[526913]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 22 23:09:30 instance-1 lfd[529358]: *Excessive Processes* User:fccsite Kill:0 Process Count:11 Mar 22 23:14:30 instance-1 lfd[532036]: *User Processing* PID:532028 Kill:0 User:trafman VM:567(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 23:18:30 instance-1 lfd[533432]: *User Processing* PID:533426 Kill:0 User:tuscomau VM:566(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:20:20 instance-1 lfd[79232]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 22 23:20:30 instance-1 lfd[534070]: *User Processing* PID:534067 Kill:0 User:tuscomau VM:532(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:23:30 instance-1 lfd[534997]: *User Processing* PID:534988 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:27:21 instance-1 lfd[536455]: (smtpauth) Failed SMTP AUTH login from 81.30.107.40 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 22 23:28:30 instance-1 lfd[536829]: *User Processing* PID:536826 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:29:30 instance-1 lfd[537119]: *User Processing* PID:537113 Kill:0 User:tuscomau VM:570(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:32:30 instance-1 lfd[538161]: *User Processing* PID:538158 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:35:31 instance-1 lfd[539352]: *User Processing* PID:539335 Kill:0 User:trafman VM:572(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 23:36:31 instance-1 lfd[539732]: *User Processing* PID:539726 Kill:0 User:comphomes VM:549(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:36:31 instance-1 lfd[539732]: *User Processing* PID:539685 Kill:0 User:trafman VM:594(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 23:37:31 instance-1 lfd[540164]: *User Processing* PID:540076 Kill:0 User:trafman VM:624(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 23:38:31 instance-1 lfd[540411]: *User Processing* PID:540362 Kill:0 User:trafman VM:613(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 22 23:48:31 instance-1 lfd[543685]: *User Processing* PID:543681 Kill:0 User:indigenouscivil VM:516(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 22 23:51:31 instance-1 lfd[544709]: *User Processing* PID:544703 Kill:0 User:tuscomau VM:547(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 22 23:56:31 instance-1 lfd[546838]: *User Processing* PID:546831 Kill:0 User:surveyms VM:514(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 23 00:00:03 instance-1 lfd[79232]: Main Process: TERM Mar 23 00:00:03 instance-1 lfd[79232]: daemon stopped Mar 23 00:00:04 instance-1 lfd[548121]: daemon started on instance-1.c.tekutaro-cloud-platform.internal - csf v14.24 (cPanel) Mar 23 00:00:05 instance-1 lfd[548121]: LF_APACHE_ERRPORT: Set to [2] Mar 23 00:00:05 instance-1 lfd[548121]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log (Web Server) Mar 23 00:00:05 instance-1 lfd[548121]: EasyApache4, using /etc/apache2/logs/error_log instead of /usr/local/apache/logs/error_log {ModSecurity} Mar 23 00:00:05 instance-1 lfd[548121]: CSF Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: IPv6 Enabled... Mar 23 00:00:05 instance-1 lfd[548121]: LOAD Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: *ERROR*: Country Code Lookups setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue updating the MaxMind databases Mar 23 00:00:05 instance-1 lfd[548121]: Country Code Lookups... Mar 23 00:00:05 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 23 00:00:05 instance-1 lfd[548121]: System Integrity Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Exploit Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Directory Watching... Mar 23 00:00:05 instance-1 lfd[548121]: Email Queue Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: ModSecurity IP D/B Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Email Relay Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Temp to Perm Block Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: System Statistics... Mar 23 00:00:05 instance-1 lfd[548121]: Process Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Account Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: SSH Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Webmin Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: SU Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Console Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: WHM Tracking... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /usr/local/cpanel/logs/login_log... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/exim_mainlog... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/maillog... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/messages... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/customlog... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /usr/local/cpanel/logs/access_log... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /var/log/secure... Mar 23 00:00:05 instance-1 lfd[548121]: Watching /etc/apache2/logs/error_log... Mar 23 00:00:05 instance-1 lfd[548149]: *User Processing* PID:548088 Kill:0 User:tuscomau VM:568(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:01:05 instance-1 lfd[548517]: *User Processing* PID:548127 Kill:0 User:yvegroup VM:525(MB) EXE:/home/virtfs/yvegroup/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/yvegroup/public_html/cli/joomla.php akeeba:backup:take Mar 23 00:01:05 instance-1 lfd[548517]: *User Processing* PID:548179 Kill:0 User:indigenouscivil VM:523(MB) EXE:/home/virtfs/indigenouscivil/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/indigenouscivil/public_html/cli/joomla.php akeeba:backup:take Mar 23 00:01:06 instance-1 lfd[548517]: *User Processing* PID:548123 Kill:0 User:newswinslow VM:527(MB) EXE:/home/virtfs/newswinslow/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/newswinslow/public_html/cli/joomla.php akeeba:backup:take Mar 23 00:01:06 instance-1 lfd[548517]: *User Processing* PID:548118 Kill:0 User:opthirecomau VM:523(MB) EXE:/home/virtfs/opthirecomau/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/opthirecomau/public_html/cli/joomla.php akeeba:backup:take Mar 23 00:01:06 instance-1 lfd[548517]: *User Processing* PID:548513 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:01:07 instance-1 lfd[548517]: *User Processing* PID:548134 Kill:0 User:rcpacom VM:525(MB) EXE:/home/virtfs/rcpacom/opt/cpanel/ea-php81/root/usr/bin/php CMD:/opt/cpanel/ea-php81/root/usr/bin/php /home/rcpacom/public_html/cli/joomla.php akeeba:backup:take Mar 23 00:02:05 instance-1 lfd[548894]: *Suspicious Process* PID:548130 PPID:548128 User:trafman Uptime:120 secs EXE:/home/virtfs/trafman/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php /home/trafman/public_html/wp-content/plugins/akeebabackupwp/app/cli/backup.php Mar 23 00:02:06 instance-1 lfd[548894]: *User Processing* PID:548890 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:02:06 instance-1 lfd[548894]: *User Processing* PID:548130 Kill:0 User:trafman VM:519(MB) EXE:/home/virtfs/trafman/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php /home/trafman/public_html/wp-content/plugins/akeebabackupwp/app/cli/backup.php Mar 23 00:03:05 instance-1 lfd[549392]: *User Processing* PID:549380 Kill:0 User:comphomes VM:580(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:03:06 instance-1 lfd[549392]: *User Processing* PID:549388 Kill:0 User:tuscomau VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:03:06 instance-1 lfd[549392]: *User Processing* PID:549318 Kill:0 User:comphomes VM:649(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:04:05 instance-1 lfd[549729]: *LOAD* 5 minute load average is 6.04, threshold is 6 - email sent Mar 23 00:04:05 instance-1 lfd[549730]: *User Processing* PID:549726 Kill:0 User:tuscomau VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:05:06 instance-1 lfd[550084]: *User Processing* PID:550073 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:05:46 instance-1 lfd[550083]: Directory Watching terminated after 40 seconds Mar 23 00:05:46 instance-1 lfd[550083]: LF_DIRWATCH taking 40 seconds, temporarily throttled to run every 900 seconds Mar 23 00:06:06 instance-1 lfd[550416]: *User Processing* PID:550408 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:07:06 instance-1 lfd[550759]: *User Processing* PID:550756 Kill:0 User:tuscomau VM:514(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:20:23 instance-1 lfd[554350]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 23 00:20:23 instance-1 lfd[554350]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 23 00:41:07 instance-1 lfd[560925]: *User Processing* PID:560919 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:42:07 instance-1 lfd[561411]: *User Processing* PID:561408 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:47:07 instance-1 lfd[563508]: *User Processing* PID:563505 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:50:07 instance-1 lfd[564777]: *User Processing* PID:564769 Kill:0 User:tuscomau VM:545(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:51:07 instance-1 lfd[565113]: *User Processing* PID:565109 Kill:0 User:eyrescom VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:58:08 instance-1 lfd[567069]: *User Processing* PID:567066 Kill:0 User:tuscomau VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 00:59:08 instance-1 lfd[567403]: *User Processing* PID:567400 Kill:0 User:tuscomau VM:537(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:00:08 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 23 01:01:08 instance-1 lfd[568471]: *User Processing* PID:568468 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:02:08 instance-1 lfd[568927]: *User Processing* PID:568923 Kill:0 User:tuscomau VM:512(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:06:08 instance-1 lfd[570324]: *User Processing* PID:570319 Kill:0 User:tuscomau VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:08:08 instance-1 lfd[571353]: *User Processing* PID:571346 Kill:0 User:tuscomau VM:561(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:08:08 instance-1 lfd[571353]: *User Processing* PID:571349 Kill:0 User:yvegroup VM:520(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:09:08 instance-1 lfd[571887]: *User Processing* PID:571883 Kill:0 User:tuscomau VM:563(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:10:08 instance-1 lfd[572319]: *User Processing* PID:572311 Kill:0 User:tuscomau VM:530(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:18:08 instance-1 lfd[575462]: *User Processing* PID:575455 Kill:0 User:tuscomau VM:557(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:19:08 instance-1 lfd[575742]: *User Processing* PID:575735 Kill:0 User:tuscomau VM:553(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:35:09 instance-1 lfd[581037]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 23 01:35:09 instance-1 lfd[581037]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 23 01:45:09 instance-1 lfd[583910]: *User Processing* PID:583898 Kill:0 User:tuscomau VM:528(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 01:49:09 instance-1 lfd[584987]: *User Processing* PID:583856 Kill:0 User:winslow VM:558(MB) EXE:/home/virtfs/winslow/opt/cpanel/ea-php83/root/usr/bin/php CMD:/opt/cpanel/ea-php83/root/usr/bin/php /home/winslow/public_html/cli/joomla.php akeeba:backup:take Mar 23 02:00:09 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 23 02:17:10 instance-1 lfd[592902]: *User Processing* PID:592897 Kill:0 User:geneticson VM:518(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 02:22:10 instance-1 lfd[594450]: *User Processing* PID:594443 Kill:0 User:yvegroup VM:522(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 02:23:10 instance-1 lfd[594758]: *User Processing* PID:594750 Kill:0 User:bmswinslow VM:541(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 02:23:10 instance-1 lfd[594758]: *User Processing* PID:594742 Kill:0 User:bmswinslow VM:631(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 02:32:10 instance-1 lfd[597439]: *User Processing* PID:597383 Kill:0 User:indigenouscivil VM:524(MB) EXE:/opt/cpanel/ea-php81/root/usr/sbin/php-fpm CMD:php-fpm: pool indigenouscivilgroup_com_au Mar 23 02:35:11 instance-1 lfd[598999]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 23 02:35:11 instance-1 lfd[598999]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 23 02:54:11 instance-1 lfd[604645]: *User Processing* PID:604641 Kill:0 User:tuscomau VM:551(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 02:57:11 instance-1 lfd[605429]: *User Processing* PID:605422 Kill:0 User:bmswinslow VM:602(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 03:00:11 instance-1 lfd[548121]: CC Error: Country Code Filters setting MM_LICENSE_KEY must be set in /etc/csf/csf.conf to continue using the MaxMind databases Mar 23 03:02:11 instance-1 lfd[606889]: *User Processing* PID:606293 Kill:0 User:winslow VM:553(MB) EXE:/home/virtfs/winslow/opt/cpanel/ea-php82/root/usr/bin/php CMD:/opt/cpanel/ea-php82/root/usr/bin/php /home/winslow/public_html/myhubnews.winslow.com.au/cli/joomla.php akeeba:backup:take Mar 23 03:05:02 instance-1 lfd[608156]: (smtpauth) Failed SMTP AUTH login from 81.30.107.119 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SMTPAUTH] Mar 23 03:10:11 instance-1 lfd[609810]: *User Processing* PID:609803 Kill:0 User:tuscomau VM:539(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 03:32:12 instance-1 lfd[616015]: *User Processing* PID:616000 Kill:0 User:bmswinslow VM:535(MB) EXE:/opt/cpanel/ea-php81/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php81/root/usr/bin/php-cgi Mar 23 03:35:12 instance-1 lfd[617051]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp [nobody:nobody (99:99)] - Suspicious directory Mar 23 03:35:12 instance-1 lfd[617051]: *Suspicious File* /tmp/.spamassassin5585oxfaoltmp/.spamassassin [nobody:nobody (99:99)] - Suspicious directory Mar 23 03:36:12 instance-1 lfd[617410]: *User Processing* PID:617402 Kill:0 User:surveyms VM:524(MB) EXE:/opt/cpanel/ea-php82/root/usr/bin/php-cgi CMD:/opt/cpanel/ea-php82/root/usr/bin/php-cgi Mar 23 03:38:32 instance-1 lfd[548121]: /var/log/exim_mainlog rotated. Reopening log file Mar 23 03:38:32 instance-1 lfd[548121]: Watching /var/log/exim_mainlog...