WHM/cPanel Security Watchdog

Host: cp01.cyberserver.pt · Date: 2026-09-14 01:45:02 WEST

INFO — Server baseline

OS: AlmaLinux release 8.10 (Cerulean Leopard)
cPanel: 136.0 (build 40)
Load:  01:45:02 up 4 min,  0 users,  load average: 1.29, 1.32, 0.64
Disk root: /dev/sda1       493G  166G  302G  36% /

WARNING — Brute force activity

SSH failed attempts in recent log tail: 71\ncPanel failed attempts in recent log tail: 182

OK — Suspicious processes

No known malicious process patterns found.

OK — Known attack indicators

No known IOC files or strings found.

WARNING — Recent executable/web files modified

2026-09-14 01:23:09.8748415990 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/admin.php
2026-09-14 01:23:09.8758415500 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/admin-toolbar.php
2026-09-14 01:23:09.8758415500 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/cache.php
2026-09-14 01:23:09.8768415000 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/cdn.php
2026-09-14 01:23:09.8768415000 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/clearing-specific-pages.php
2026-09-14 01:23:09.8768415000 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/cli.php
2026-09-14 01:23:09.8778414510 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/column.php
2026-09-14 01:23:09.8778414510 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/css-utilities.php
2026-09-14 01:23:09.8788414020 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/js-utilities.php
2026-09-14 01:23:09.8788414020 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/preload.php
2026-09-14 01:23:09.8798413530 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/single-preload.php
2026-09-14 01:23:09.8798413530 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/varnish.php
2026-09-14 01:23:09.8808413040 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/inc/wp-polls.php
2026-09-14 01:23:09.9058400740 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/cache_path.php
2026-09-14 01:23:09.9068400250 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/cdn/cloudflare.php
2026-09-14 01:23:09.9068400250 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/cdn/exclude_sources.php
2026-09-14 01:23:09.9068400250 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/cdn/file_types.php
2026-09-14 01:23:09.9068400250 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/cdn/maxcdn.php
2026-09-14 01:23:09.9078399760 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/cdn/other.php
2026-09-14 01:23:09.9078399760 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/cdn/specify_sources.php
2026-09-14 01:23:09.9078399760 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/clearing_specific_pages.php
2026-09-14 01:23:09.9088399270 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/disable_wp_cron.php
2026-09-14 01:23:09.9088399270 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/exclude.php
2026-09-14 01:23:09.9098398780 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/lazy_load.php
2026-09-14 01:23:09.9098398780 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/newpost.php
2026-09-14 01:23:09.9098398780 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/nginx_gzip.php
2026-09-14 01:23:09.9098398780 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/preload.php
2026-09-14 01:23:09.9108398280 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/timeout.php
2026-09-14 01:23:09.9108398280 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/toolbar_settings.php
2026-09-14 01:23:09.9118397790 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/update_now.php
2026-09-14 01:23:09.9118397790 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/updatepost.php
2026-09-14 01:23:09.9118397790 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/update_success.php
2026-09-14 01:23:09.9128397300 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/templates/varnish.php
2026-09-14 01:23:09.9128397300 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/uninstall.php
2026-09-14 01:23:09.9138396810 edukar:edukar /home/edukar/public_html/wp-content/plugins/wp-fastest-cache/wpFastestCache.php

OK — Cron entries to review

No suspicious cron patterns found.

OK — Ports to review

No unexpected listening TCP ports outside allowlist.

WARNING — Suspicious PHP patterns

/home/lmiranda/www/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/commons/class-ht-ctc-scripts.php
/home/lmiranda/www/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/lmiranda/public_html/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/commons/class-ht-ctc-scripts.php
/home/lmiranda/public_html/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/edukar/www/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/MercurialProcessor.php
/home/edukar/www/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/GitProcessor.php
/home/edukar/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/edukar/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/edukar/www/wp-content/plugins/updraftplus/backup.php
/home/edukar/www/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/edukar/www/antigo.edukar.pt/admin/class.phpmailer.php
/home/edukar/www/antigo.edukar.pt/class.phpmailer.php
/home/edukar/public_html/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/MercurialProcessor.php
/home/edukar/public_html/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/GitProcessor.php
/home/edukar/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/edukar/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/edukar/public_html/wp-content/plugins/updraftplus/backup.php
/home/edukar/public_html/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/edukar/public_html/antigo.edukar.pt/admin/class.phpmailer.php
/home/edukar/public_html/antigo.edukar.pt/class.phpmailer.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/tools/da-installer-extractor.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/installer/dup-installer/classes/class.server.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/ctrls/class.web.services.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.database.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.available.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.installer.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.shellzip.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/class.php.log.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/utilities/class.u.zip.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/utilities/class.u.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/utilities/class.u.shell.php
/home/unitelpower/www/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Server/SysInfo/SunOs.php
/home/unitelpower/www/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Command/WriteGitRevisionCommand.php
/home/unitelpower/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/unitelpower/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/unitelpower/www/wp-content/plugins/updraftplus/backup.php
/home/unitelpower/www/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/unitelpower/www/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/www/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/unitelpower/www/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/unitelpower/www/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/unitelpower/www/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/unitelpower/www/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/unitelpower/www/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/tools/da-installer-extractor.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/installer/dup-installer/classes/class.server.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/ctrls/class.web.services.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.database.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.available.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.installer.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.shellzip.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/class.php.log.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/utilities/class.u.zip.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/utilities/class.u.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/utilities/class.u.shell.php
/home/unitelpower/public_html/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Server/SysInfo/SunOs.php
/home/unitelpower/public_html/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Command/WriteGitRevisionCommand.php
/home/unitelpower/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/unitelpower/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/unitelpower/public_html/wp-content/plugins/updraftplus/backup.php
/home/unitelpower/public_html/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/unitelpower/public_html/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/wacademy/www/wp-content/updraft/plugins-old/updraftplus/class-updraftplus.php
/home/wacademy/www/wp-content/updraft/plugins-old/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/www/wp-content/updraft/plugins-old/updraftplus/backup.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wacademy/www/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wacademy/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wacademy/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/www/wp-content/plugins/updraftplus/backup.php
/home/wacademy/www/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wacademy/public_html/wp-content/updraft/plugins-old/updraftplus/class-updraftplus.php
/home/wacademy/public_html/wp-content/updraft/plugins-old/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/public_html/wp-content/updraft/plugins-old/updraftplus/backup.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wacademy/public_html/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wacademy/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wacademy/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/public_html/wp-content/plugins/updraftplus/backup.php
/home/wacademy/public_html/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wclinic/www/devsite/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/www/devsite/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wclinic/www/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wclinic/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wclinic/www/wp-content/plugins/updraftplus/backup.php
/home/wclinic/www/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wclinic/www/academy/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/www/academy/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/wclinic/public_html/devsite/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/public_html/devsite/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wclinic/public_html/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wclinic/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wclinic/public_html/wp-content/plugins/updraftplus/backup.php
/home/wclinic/public_html/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wclinic/public_html/academy/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/public_html/academy/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/projme/www/wp-content/plugins/litespeed-cache/lib/css_js_min/minify/js.cls.php
/home/projme/www/wp-content/plugins/wc-multivendor-membership/includes/libs/stripe-gateway/build.php
/home/projme/www/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/projme/www/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/projme/www/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/projme/www/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/projme/www/wp-content/plugins/wc-multivendor-marketplace/views/store-lists/wcfmmp-view-store-lists-card.php
/home/projme/www/wp-content/plugins/wc-multivendor-marketplace/views/store/wcfmmp-view-store-banner.php
/home/projme/www/wp-content/plugins/wc-multivendor-marketplace/includes/Stripe/build.php
/home/projme/www/wp-content/plugins/wc-frontend-manager-elementor/includes/widgets/class-wcfmem-widget-storebanner.php
/home/projme/public_html/wp-content/plugins/litespeed-cache/lib/css_js_min/minify/js.cls.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-membership/includes/libs/stripe-gateway/build.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-marketplace/views/store-lists/wcfmmp-view-store-lists-card.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-marketplace/views/store/wcfmmp-view-store-banner.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-marketplace/includes/Stripe/build.php
/home/projme/public_html/wp-content/plugins/wc-frontend-manager-elementor/includes/widgets/class-wcfmem-widget-storebanner.php
/home/vlcare/www/wp-content/plugins/redis-cache-pro/src/Console/Commands.php
/home/vlcare/www/wp-content/plugins/mailchimp-for-woocommerce/includes/api/class-mailchimp-woocommerce-tower.php
/home/vlcare/www/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/vlcare/public_html/wp-content/plugins/redis-cache-pro/src/Console/Commands.php
/home/vlcare/public_html/wp-content/plugins/mailchimp-for-woocommerce/includes/api/class-mailchimp-woocommerce-tower.php
/home/vlcare/public_html/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php

WARNING — Summary

Critical: 0\nWarnings: 3\nTotal alert sections: 3\nReport path: /home/cyberserver/public_html/security-reports/latest.html

This report is read-only. It does not modify firewall, files, accounts, or services.