MARK=1314123 UNAME=Linux canopus.awedns.com 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 SAPI=litespeed PHP=7.4.33 USER_fn=sathwell UID=1598 GID=1602 CWD=/home/sathwell/sathwell.com/cmaV3/users/doc/userDocs DOC=/home/sathwell/sathwell.com HOME_ENV= DF=exec,shell_exec,passthru,system,proc_open,popen,parse_ini_file,show_source,socket_create_listen,socket_create,syslog OB= putenv=Y mail=Y fsockopen=Y ffi=N imagick=Y ffi.enable= pcntl=N posix=Y posix_euid=1598 euser=sathwell ## /proc/self/status Name: lsphp Umask: 0022 State: R (running) Tgid: 3006349 Ngid: 0 Pid: 3006349 PPid: 3001235 TracerPid: 0 Uid: 1598 1598 1598 1598 Gid: 1602 1602 1602 1602 FDSize: 64 Groups: 1602 NStgid: 3006349 NSpid: 3006349 NSpgid: 3006349 NSsid: 3006349 VmPeak: 257300 kB VmSize: 257292 kB VmLck: 0 kB VmPin: 0 kB VmHWM: 31792 kB VmRSS: 31792 kB RssAnon: 9892 kB RssFile: 19372 kB RssShmem: 2528 kB VmData: 11212 kB VmStk: 132 kB VmExe: 2856 kB VmLib: 37652 kB VmPTE: 248 kB VmSwap: 0 kB HugetlbPages: 0 kB CoreDumping: 0 THP_enabled: 1 untag_mask: 0xffffffffffffffff Threads: 1 SigQ: 0/513121 SigPnd: 0000000000000000 ShdPnd: 0000000000000000 SigBlk: 0000000000000000 SigIgn: 0000000001001000 SigCgt: 0000000004004e6f CapInh: 0000000000000000 CapPrm: 0000000000000000 CapEff: 0000000000000000 CapBnd: 0000000000000000 CapAmb: 0000000000000000 NoNewPrivs: 1 Seccomp: 0 Seccomp_filters: 0 Speculation_Store_Bypass: thread vulnerable SpeculationIndirectBranch: conditional enabled Cpus_allowed: 00ff,ffffffff Cpus_allowed_list: 0-39 Mems_allowed: 00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000003 Mems_allowed_list: 0-1 voluntary_ctxt_switches: 2 nonvoluntary_ctxt_switches: 0 x86_Thread_features: x86_Thread_features_locked: ## /proc/version Linux version 5.14.0-611.49.1.el9_7.x86_64 (mockbuild@x64-builder03.almalinux.org) (gcc (GCC) 11.5.0 20240719 (Red Hat 11.5.0-11), GNU ld version 2.35.2-67.el9_7.1) #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 ## /etc/os-release ## /proc/self/cgroup 13:cpuset:/ 12:devices:/system.slice/lshttpd.service 11:cpu,cpuacct:/lve1598 10:hugetlb:/ 9:net_cls,net_prio:/lve1598 8:pids:/lve1598 7:blkio:/system.slice 6:freezer:/lve1598 5:memory:/lve1598 4:rdma:/ 3:perf_event:/ 2:misc:/ 1:name=systemd:/system.slice/lshttpd.service ## /proc/self/mountinfo head 25526 23098 8:20 /usr/share/cagefs-skeleton / rw,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25527 25526 0:22 / /dev/pts rw,nosuid,relatime - devpts devpts rw,gid=5,mode=620,ptmxmode=000 25528 25526 8:20 /usr/lib /lib ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25532 25526 8:20 /usr/lib64 /lib64 ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25533 25526 8:20 /opt /opt rw,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25535 25533 8:20 /opt/imunify360/lib /opt/imunify360/lib rw,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25867 25533 8:20 /opt/imunify360/proactive /opt/imunify360/proactive rw,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25869 25533 8:20 /usr/share/cagefs/.cagefs.empty /opt/suphp/sbin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25876 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php56/root/usr/bin /opt/cpanel/ea-php56/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25904 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php56/root/etc /opt/cpanel/ea-php56/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25908 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php70/root/usr/bin /opt/cpanel/ea-php70/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25910 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php70/root/etc /opt/cpanel/ea-php70/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25911 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php71/root/usr/bin /opt/cpanel/ea-php71/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25936 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php71/root/etc /opt/cpanel/ea-php71/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25937 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php72/root/usr/bin /opt/cpanel/ea-php72/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25938 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php72/root/etc /opt/cpanel/ea-php72/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 25939 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php73/root/usr/bin /opt/cpanel/ea-php73/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26155 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php73/root/etc /opt/cpanel/ea-php73/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26157 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php74/root/usr/bin /opt/cpanel/ea-php74/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26185 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php74/root/etc /opt/cpanel/ea-php74/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26294 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php80/root/usr/bin /opt/cpanel/ea-php80/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26309 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php80/root/etc /opt/cpanel/ea-php80/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26310 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php81/root/usr/bin /opt/cpanel/ea-php81/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26311 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php81/root/etc /opt/cpanel/ea-php81/root/etc ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota 26439 25533 8:20 /usr/share/cagefs/.cpanel.multiphp/opt/cpanel/ea-php82/root/usr/bin /opt/cpanel/ea-php82/root/usr/bin ro,nosuid,relatime - xfs /dev/sdb4 rw,attr2,inode64,logbufs=8,logbsize=32k,usrquota ## /tmp socks mysql.sock ## /var/tmp .crontab.lock .s.PGSQL.5432 mysql.sock ## KEYFILES YR 701 /home/sathwell/.env YR 596 /home/sathwell/.lastlogin N /home/sathwell/.my.cnf N /home/sathwell/.bash_history YR 658 /home/sathwell/.zshrc YR 1403 /home/sathwell/.cpanel/nvdata.cache N /home/sathwell/.cpanel/caches/config YR 4096 /home/sathwell/.cpanel/datastore YR 3264 /home/sathwell/.softaculous/installations.php YR 914 /home/sathwell/.softaculous/user.php N /home/sathwell/.shadow N /home/sathwell/etc/shadow N /home/sathwell/etc/passwd N /home/sathwell/.ssh/id_rsa YR 1 /home/sathwell/.ssh/authorized_keys N /home/sathwell/.ssh/known_hosts YR 4611 /home/sathwell/public_html/wp-config.php YR 4455 /home/sathwell/public_html/prevail.com.my/wp-config.php YR 454 /home/sathwell/sathwell.com/.htaccess YR 447 /home/sathwell/sathwell.com/php.ini YR 309 /home/sathwell/sathwell.com/.user.ini YR 1369 /etc/passwd N /etc/sudoers N /etc/crontab ## HOME ls D .HttpRequest D .MirrorSearch F .bash_logout F .bash_profile F .bashrc D .cache D .cagefs D .caldav D .cl.selector D .clwpos D .cpan D .cpanel D .cpcpan D .cphorde D .cpobjcache F .env F .forward F .ftpquota D .gnupg D .htpasswds F .imunify_patch_id D .koality F .lastlogin F .myimunify_id F .pearrc D .pki F .procmailrc D .putty D .razor D .sitepad D .softaculous D .spamassassin F .spamassassinboxenable F .spamassassinenable D .ssh D .subaccounts D .trash D .wp-cli D .wp-toolkit F .wp-toolkit-identifier F .zshrc D access-logs D bin F error_log D etc D logs D lscache D lscmData D mail D mysql_backup D perl D perl5 D php D public_ftp D public_html D sathwell.com D sathwell.com.my D site_publisher D softaculous_backups D softaculous_templates D ssl D tmp D wordpress-backups D www ## public_html .htaccess .well-known COPYRIGHT LICENSE.txt api.superwelljuniors.com cgi-bin cmaV3 cmaV3.zip css error_log font-awesome fonts img index.php index.php.bak_l254_20260923234052 index.php.l255bak.20260923232853 js l255_rd.php license.txt meta.json prevail.com.my readme.html sitemap.xml softperms.txt softsql.sql softver.txt sqldump.sql ssV1 ssV1.zip superpulse.superwelljuniors.com superwell superwell.pro superwelljuniors.com wordpress wp-activate.php wp-admin wp-blog-header.php wp-comments-post.php wp-config-sample.php wp-config.php wp-content wp-cron.php wp-includes wp-links-opml.php wp-load.php wp-login.php wp-mail.php wp-settings.php wp-signup.php wp-trackback.php xmlrpc.php ## sathwell.com.my ## .cpanel Cpanel_SSL_DCV_DNS_Mutex caches datastore ea-php-cli email_accounts.json email_accounts_count icals live-engine-connector-Mf_ez4QfiZ.sock live-engine-connector-d_wOf7mL_y.sock nvdata nvdata.cache sitejet vcards ## CONTENT /home/sathwell/.lastlogin 115.164.191.156 # 2026-05-13 17:46:27 +0800 115.164.180.253 # 2026-05-14 12:51:53 +0800 182.62.146.148 # 2026-05-14 15:55:17 +0800 115.164.33.168 # 2026-05-14 22:03:36 +0800 115.164.119.56 # 2026-05-15 17:50:30 +0800 182.62.44.65 # 2026-05-22 10:40:07 +0800 182.62.227.96 # 2026-06-15 18:34:20 +0800 182.62.174.138 # 2026-06-16 00:41:20 +0800 182.62.191.104 # 2026-06-16 14:27:22 +0800 115.164.82.145 # 2026-06-16 22:45:59 +0800 182.62.75.58 # 2026-06-19 12:39:33 +0800 182.62.161.130 # 2026-07-27 14:05:57 +0800 115.164.119.5 # 2026-10-05 15:14:44 +0800 115.164.36.54 # 2026-10-06 13:15:47 +0800 ## CONTENT /home/sathwell/.cpanel/email_accounts.json {"sathwell.com":{"account_count":0,"accounts":{}},"superwell.pro.superwelljuniors.com":{"account_count":0,"accounts":{}},"api.superwelljuniors.com":{"account_count":0,"accounts":{}},"prevail.com.my.superwelljuniors.com":{"account_count":0,"accounts":{}},"superwell.pro":{"disk_mtime":1791987918,"account_count":1,"accounts":{"support":{"suspended_login":0,"UUID":"addcef6e-7db8-4f9d-aa01-c8ccc4b3c7e1","diskmtime":1791987918,"diskused":"92074"}},"shadow_mtime":1792034529},"superwell.superwelljuniors.com":{"account_count":0,"accounts":{}},"superpulse.superwelljuniors.com":{"accounts":{},"account_count":0},"__version":3,"prevail.com.my":{"quota_mtime":1792034529,"account_count":3,"accounts":{"uma":{"diskmtime":1791987918,"diskused":"31076067","disk_mtime":1768281409,"UUID":"ec100060-ed7c-4349-b180-fa3292fe63a9","diskquota":0,"suspended_login":0},"yasvanth":{"diskused":"82162","diskmtime":1791987918,"UUID":"373bb53d-7864-4557-b7c4-dd2194c8306a","suspended_login":0},"chathuka":{"UUID":"1669374d-602e-423c-91fd-82b0fbfa288a","diskused":"82162","diskmtime":1791987918,"suspended_login":0}},"shadow_mtime":1792034529,"disk_mtime":1791987918},"superwelljuniors.com":{"quota_mtime":1792034529,"account_count":14,"accounts":{"sripremraj":{"UUID":"01fad3af-ac44-4d0b-8ecd-f15051feac2c","diskused":"1861735","diskmtime":1791987918,"suspended_login":0},"customer1":{"suspended_login":0,"diskquota":"1073741824","disk_mtime":1778665402,"UUID":"20db7988-905e-4770-bd1a-c0bc40cf0099","diskmtime":1791987918,"diskused":"83428"},"schools":{"diskused":"395995","diskmtime":1791987918,"UUID":"c769b0da-9f3c-4771-8801-3953789ddc4f","suspended_login":0},"marcustan":{"diskquota":"1073741824","suspended_login":0,"diskused":"10523260","diskmtime":1791987918,"UUID":"2d2512de-7d1b-4b34-8354-95be16a8a2af","disk_mtime":1774021877},"support":{"UUID":"760029e6-28eb-412d-bbd1-d587633d028e","diskused":"23288070","diskmtime":1791987918,"suspended_login":0},"developer":{"UUID":"8e11a169-c994-4aac-825d-d45ea8629299","diskmtime":1791987918,"diskused":"756404","suspended_login":0},"jyomerp":{"suspended_login":0,"UUID":"ac0c254f-b94b-4c8f-ac4a-dfc91f44a704","diskused":"84516","diskmtime":1791987918},"puganeswaran":{"suspended_login":0,"UUID":"8949684a-5cc6-4541-a2e5-e6f1f043509c","diskmtime":1791987918,"diskused":"14236977"},"jenniferc":{"UUID":"49d097fe-116c-4112-bd7c-9b57f157308b","diskmtime":1791987918,"diskused":"5435454","suspended_login":0},"christina":{"UUID":"dbda00dd-592b-45ae-af75-aa0fe642fd36","diskused":"5034907","diskmtime":1791987918,"suspended_login":0},"superpulse":{"diskused":"84874","diskmtime":1791987918,"UUID":"2504ed27-eab8-40c7-892d-1d614f3f52bf","disk_mtime":1774022178,"diskquota":"1073741824","suspended_login":0},"umashankari":{"UUID":"5f901c26-7839-48ac-bd5f-24eb649d3ac0","diskmtime":1791987918,"diskused":"24461338","suspended_login":0},"puah":{"suspended_login":0,"UUID":"58c3315a-8a30-48e1-b5b1-493186f3d800","diskmtime":1791987918,"diskused":"2105337"},"info":{"suspended_login":0,"diskused":"97789","diskmtime":1791987918,"UUID":"f53b5013-73af-47ec-af18-289d272430b3"}},"shadow_mtime":1792034529,"disk_mtime":1791987918}} ## mail top .Archive .Junk .chathuka@prevail_com_my .christina@superwelljuniors_com .customer1@superwelljuniors_com .developer@superwelljuniors_com .info@superwelljuniors_com .jenniferc@superwelljuniors_com .jyomerp@superwelljuniors_com .mailbox_format.cpanel .marcustan@superwelljuniors_com .puah@superwelljuniors_com .puganeswaran@superwelljuniors_com .schools@superwelljuniors_com .spam .sripremraj@superwelljuniors_com .superpulse@superwelljuniors_com .support@superwell_pro .support@superwelljuniors_com .uma@prevail_com_my .umashankari@superwelljuniors_com .yasvanth@prevail_com_my dovecot-acl-list dovecot-quota dovecot-uidlist dovecot-uidvalidity dovecot-uidvalidity.651e3a5f dovecot-uidvalidity.651e3a70 dovecot.index.cache dovecot.index.log dovecot.list.index dovecot.list.index.log dovecot.list.index.log.2 dovecot.mailbox.log mailbox_format.cpanel maildirsize prevail.com.my sathwell.com.my subscriptions superwell.pro superwelljuniors.com tmp ## cron dirs DIR /etc/cron.d exists=N writable=N DIR /etc/cron.daily exists=N writable=N DIR /var/spool/cron exists=Y writable=Y root sathwell DIR /var/spool/cron/crontabs exists=N writable=N DIR /home/sathwell/cron exists=N writable=N DIR /home/sathwell/.cagefs/var/spool/cron exists=Y writable=Y root sathwell ## SUID candidates (stat) MISS /usr/bin/sudo MISS /usr/bin/pkexec 100755 /usr/bin/passwd 100755 /usr/bin/find 100755 /usr/bin/python3 100755 /usr/bin/python 100755 /bin/bash 100755 /usr/bin/crontab 100755 /usr/sbin/exim 100755 /usr/local/cpanel/bin/jailshell DONE