/home/altere25/.imh/
/home/altere25/.imh
NameSizeModeActions
nginx/-0775rm
.homesize.cache52690644editdlrm
.sizes.cache1840644editdlrm
backups.json7280644editdlrm
du_cphome_cache.json27870644editdlrm
reset_email.json640644editdlrm
str_2018-10-05_09:43:0859830644editdlrm
str_2019-06-24_10:43:21122040644editdlrm
Edit: /home/altere25/.imh/str_2019-06-24_10:43:21 (12204B)
>>> /opt/sharedrads/check_user altere25 --plaintext ################################################################################# INMOTION HOSTING .:: SHARED RADS ::. SHARED RESOURCE ABUSE DETECTION SCRIPTS ################################################################################# Mon Jun 24 10:43:04 PDT 2019 Displaying today's most recent CPU usage data as recorded by process accounting CPU minutes: 158.10cp (1.35%) Actual time: 3148.59re (0.26%) (since my last data poll @ 09:07 PDT altere25 burned another ~69 cp) # of executions for CPU intensive processes that have been spawned by this user today php: 9355 perl: 0 imap: 116 pop3: 0 exim: 0 boxtrap: 0 ftp: 0 cron: 0 CPU minutes used today Historical CPU usage data Most expensive processes 12:00AM PDT :: 0.60cp Jun 23 :: 325.49cp (1.50%) awstats.pl :: 11.69 secs 03:00AM PDT :: 16.2cp Jun 22 :: 283.99cp (1.38%) php-cgi :: 8.38 secs 06:00AM PDT :: 32.3cp Jun 21 :: 251.46cp (1.20%) php-cgi :: 4.72 secs 09:00AM PDT :: 89.7cp Jun 20 :: 211.91cp (0.92%) php-cgi :: 4.54 secs (no data available) Jun 19 :: 204.35cp (0.95%) php-cgi :: 3.58 secs (no data available) Jun 18 :: 252.68cp (0.96%) php-cgi :: 1.96 secs (no data available) Jun 17 :: 312.27cp (0.99%) cpanellogd :: 1.71 secs (no data available) Jun 16 :: 327.06cp (1.28%) php-cgi :: 1.69 secs Displaying top utilization processes for user as recorded by cPanel and dcpumon Top Process %CPU 68.0 /opt/php70/bin/php-cgi /home/altere25/rockymountainlax.com/index.php Top Process %CPU 55.0 /opt/php70/bin/php-cgi /home/altere25/rockymountainlax.com/index.php Top Process %CPU 54.0 /opt/php70/bin/php-cgi /home/altere25/rockymountainlax.com/index.php RADS has detected these custom cron jobs currently enabled for this account MAILTO="ryan@altereddigital.com" 14 21 * * 3 php -d register_argc_argv="1" -qf "/home/altere25/templatemeet.site/wp-content/plugins/boldgrid-backup/boldgrid-backup-cron.php" mode=restore siteurl=http://templatemeet.site id=8a083229 secret=8954dbe02d5b2ccd28fcc311a3e59d55c032c44fd91cc92b83a87ca738be548c archive_key=0 archive_filename=boldgrid-backup-templatemeet.site-8a083229-20190313-035753.zip > /dev/null 2>&1 */5 * * * * php -d register_argc_argv="1" -qf "/home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/run-jobs.php" siteurl=http://rmllproject.altereddigital.com id=2638f41b secret=888ac71d303b8cb09574c4baaed1d3147ca34acaaefa42638299402c060fcb11 > /dev/null 2>&1 22 18 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 23 19 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 24 20 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 25 21 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 26 22 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 27 23 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 28 0 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 29 1 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 30 2 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 31 3 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 32 4 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 33 5 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 34 6 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 35 7 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 36 8 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 37 9 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 38 10 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 39 11 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 40 12 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 41 13 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 42 13 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 43 14 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 44 15 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 45 16 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 46 17 * * * php -d register_argc_argv=1 -qf /home/altere25/rmllproject.altereddigital.com/wp-content/plugins/boldgrid-backup/cron/cron-test.php > /dev/null 2>&1 37 06 * * 5 php -d register_argc_argv="1" -qf "/home/altere25/quintelacrosse.com/wp-content/plugins/boldgrid-backup/boldgrid-backup-cron.php" mode=restore siteurl=http://quintelacrosse.com id=318bf1f5 secret=c8edb7d3570bb57a506f90b754b523507cc4fef1e55944dddd58f06dce6488e2 archive_key=0 archive_filename=boldgrid-backup-quintelacrosse.com-318bf1f5-20190419-132019.zip > /dev/null 2>&1 SHELL="/bin/bash" 0 0 * * * egrep "POST .*wp-login.php" ~/access-logs/rockymountainlax.com | awk '{print $1,$4,$5,$6,$7,substr($0, index($0,$12))}' | awk '{print $1}' | sort -n | uniq -c | sort -n | sed 's/[ ]*//' USER QUERIES TIME LOCKTIME ROWSSENT ROWSRECVD ERROR: Could not locate any bandwidth data for altere25 in /var/cpanel/bandwidth/ >>> /opt/sharedrads/nlp altere25 -p -w 80 --today Using /var/log/apache2/domlogs/altere25/rockymountainlax.altereddigital.com-ssl_log -Hourly hits (24/Jun/2019)------------------------------------------------------ 05: 2561 06: 6069 07: 9590 08: 12607 09: 9347 10: 8829 -HTTP response codes------------------------------------------------------------ 200: 34741 206: 93 301: 32 304: 10050 403: 3 404: 4082 406: 1 500: 1 -Duplicate requests + response codes-------------------------------------------- 768 200 GET / 419 404 GET /css/cursors/cursor_arrow_left.png 419 404 GET /css/cursors/cursor_arrow_right.png 229 404 GET /css/cursors/cursor_arrow_right.cur 226 404 GET /css/cursors/cursor_arrow_left.cur 222 200 GET /wp-content/uploads/2019/06/Raiders-and-Mounties-Minor-Lacrosse- 221 200 GET /wp-content/uploads/2018/11/RMLL-4.png 215 200 GET /wp-content/plugins/post-grid/assets/frontend/css/style-new.css? 213 200 GET /wp-content/plugins/float-to-top-button/images/arrow005.png 212 200 GET /wp-content/themes/boldgrid-uptempo/inc/boldgrid-theme-framework -Requests for non-static content------------------------------------------------ 768 200 GET / 229 404 GET /css/cursors/cursor_arrow_right.cur 226 404 GET /css/cursors/cursor_arrow_left.cur 176 200 GET /junior-b-tier-1/ 150 200 GET /wp-content/plugins/post-grid/assets/frontend/fonts/fontawesome- 113 200 GET /jr-b-t1-standings/ 89 200 GET /senior-b/ 84 200 GET /junior-a/ 80 200 GET /jr-b-t1-schedule/ 77 200 GET /junior-b-tier-2-jim-andrews/ -Top user agents---------------------------------------------------------------- 7275 "Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/605 6487 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 5514 "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like 3808 "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 1841 "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 1706 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 1541 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 1305 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 1008 "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gec 910 "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like -Top IPs with PTR records------------------------------------------------------- 763 208.38.59.162 yield.nssi.telus.com. 570 216.123.207.67 praetor.fortsask.ca. 529 142.229.115.117 No Record Found 525 139.180.28.14 139.180.28.14.cclnetworks.com. 519 167.129.197.41 No Record Found 478 204.209.29.205 h204-209-29-205.axia.com. 448 184.69.199.58 No Record Found 437 131.137.245.209 No Record Found 402 209.89.142.82 No Record Found 401 50.65.240.165 S0106f0f249e1b3a3.lm.shawcable.net. >>> /opt/sharedrads/recent-cp altere25 -b +---------+------------------+------------------+------------------+------------------+ | command | 1m | 5m | 15m | 60m | +---------+------------------+------------------+------------------+------------------+ | imap | 0.00s 0.0% | 0.00s 0.0% | 0.00s 0.0% | 0.06s 0.0% | | tar | 0.01s 0.1% | 0.13s 0.1% | 0.43s 0.1% | 1.82s 0.1% | | zip | 0.01s 0.1% | 0.13s 0.1% | 0.43s 0.1% | 1.82s 0.1% | | sh | 0.02s 0.2% | 0.27s 0.1% | 0.90s 0.1% | 3.70s 0.1% | | php-cgi | 7.41s 99.6% | 217.82s 99.8% | 774.39s 99.8% | 2946.84s 99.7% | +---------+------------------+------------------+------------------+------------------+ | total | 7.44s 100.0% | 218.36s 100.0% | 776.16s 100.0% | 2954.25s 100.0% | +---------+------------------+------------------+------------------+------------------+ s = processs user time in cpu seconds, cp = user time + system time in cpu minutes >>> Running processes prior to suspension USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND altere25 1629483 0.0 0.0 85220 5316 ? S 09:45 0:00 dovecot/imap altere25 2063209 0.0 0.0 85240 5316 ? S 10:08 0:00 dovecot/imap altere25 2172577 0.0 0.0 84872 4948 ? S 10:21 0:00 dovecot/imap altere25 2351875 0.0 0.0 84872 4688 ? S 10:42 0:00 dovecot/imap altere25 2356746 0.0 0.0 422232 36164 ? S 10:43 0:00 /opt/php70/bin/php-cgi /home/altere25/adaptaproject.altereddigital.com/wp-admin/admin-ajax.php