WHM/cPanel Security Watchdog

Host: cp01.cyberserver.pt · Date: 2026-09-22 16:30:02 WEST

INFO — Server baseline

OS: AlmaLinux release 8.10 (Cerulean Leopard)
cPanel: 138.0 (build 7)
Load:  16:30:02 up 9 min,  0 users,  load average: 1.33, 1.39, 0.87
Disk root: /dev/sda1       493G  170G  299G  37% /

WARNING — Brute force activity

SSH failed attempts in recent log tail: 116\ncPanel failed attempts in recent log tail: 500

OK — Suspicious processes

No known malicious process patterns found.

OK — Known attack indicators

No known IOC files or strings found.

WARNING — Recent executable/web files modified

2026-09-22 15:51:17.1711723330 ricardo:ricardo /home/ricardo/public_html/wp/wp-admin/includes/update-core.php
2026-09-22 15:51:17.7381478560 ricardo:ricardo /home/ricardo/public_html/wp/wp-admin/about.php
2026-09-22 15:51:17.7381478560 ricardo:ricardo /home/ricardo/public_html/wp/wp-includes/template.php
2026-09-22 15:51:17.7391478130 ricardo:ricardo /home/ricardo/public_html/wp/wp-includes/version.php
2026-09-22 16:17:46.5589461220 wclinic:wclinic /home/wclinic/public_html/wp-admin/includes/update-core.php
2026-09-22 16:17:47.1349177060 wclinic:wclinic /home/wclinic/public_html/wp-admin/about.php
2026-09-22 16:17:47.1359176570 wclinic:wclinic /home/wclinic/public_html/wp-includes/template.php
2026-09-22 16:17:47.1369176070 wclinic:wclinic /home/wclinic/public_html/wp-includes/version.php
2026-09-22 16:24:35.0407618970 unitelpower:unitelpower /home/unitelpower/public_html/wp-admin/includes/update-core.php
2026-09-22 16:24:35.6477321300 unitelpower:unitelpower /home/unitelpower/public_html/wp-admin/about.php
2026-09-22 16:24:35.6477321300 unitelpower:unitelpower /home/unitelpower/public_html/wp-includes/template.php
2026-09-22 16:24:35.6487320810 unitelpower:unitelpower /home/unitelpower/public_html/wp-includes/version.php
2026-09-22 16:25:01.6224399090 edukar:edukar /home/edukar/public_html/wp-admin/includes/update-core.php
2026-09-22 16:25:02.3124051800 edukar:edukar /home/edukar/public_html/wp-admin/about.php
2026-09-22 16:25:02.3134051300 edukar:edukar /home/edukar/public_html/wp-includes/template.php
2026-09-22 16:25:02.3144050790 edukar:edukar /home/edukar/public_html/wp-includes/version.php

OK — Cron entries to review

No suspicious cron patterns found.

OK — Ports to review

No unexpected listening TCP ports outside allowlist.

WARNING — Suspicious PHP patterns

/home/lmiranda/www/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/commons/class-ht-ctc-scripts.php
/home/lmiranda/www/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/lmiranda/public_html/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/commons/class-ht-ctc-scripts.php
/home/lmiranda/public_html/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/edukar/www/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/MercurialProcessor.php
/home/edukar/www/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/GitProcessor.php
/home/edukar/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/edukar/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/edukar/www/wp-content/plugins/updraftplus/backup.php
/home/edukar/www/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/edukar/www/antigo.edukar.pt/admin/class.phpmailer.php
/home/edukar/www/antigo.edukar.pt/class.phpmailer.php
/home/edukar/public_html/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/MercurialProcessor.php
/home/edukar/public_html/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Processor/GitProcessor.php
/home/edukar/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/edukar/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/edukar/public_html/wp-content/plugins/updraftplus/backup.php
/home/edukar/public_html/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/edukar/public_html/antigo.edukar.pt/admin/class.phpmailer.php
/home/edukar/public_html/antigo.edukar.pt/class.phpmailer.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/tools/da-installer-extractor.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/installer/dup-installer/classes/class.server.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/ctrls/class.web.services.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.database.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.available.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.installer.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.shellzip.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/class.php.log.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/utilities/class.u.zip.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/utilities/class.u.php
/home/unitelpower/www/wp-content/plugins/duplicator-pro/classes/utilities/class.u.shell.php
/home/unitelpower/www/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Server/SysInfo/SunOs.php
/home/unitelpower/www/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Command/WriteGitRevisionCommand.php
/home/unitelpower/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/unitelpower/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/unitelpower/www/wp-content/plugins/updraftplus/backup.php
/home/unitelpower/www/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/unitelpower/www/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/www/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/unitelpower/www/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/unitelpower/www/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/unitelpower/www/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/unitelpower/www/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/unitelpower/www/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/tools/da-installer-extractor.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/installer/dup-installer/classes/class.server.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/ctrls/class.web.services.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.database.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.available.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.installer.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/package/class.pack.archive.shellzip.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/class.php.log.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/utilities/class.u.zip.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/utilities/class.u.php
/home/unitelpower/public_html/wp-content/plugins/duplicator-pro/classes/utilities/class.u.shell.php
/home/unitelpower/public_html/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Server/SysInfo/SunOs.php
/home/unitelpower/public_html/wp-content/plugins/wp-phpmyadmin-extension/lib/phpMyAdmin_xudZHBvCGfqPJhQn1M80I96/libraries/classes/Command/WriteGitRevisionCommand.php
/home/unitelpower/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/unitelpower/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/unitelpower/public_html/wp-content/plugins/updraftplus/backup.php
/home/unitelpower/public_html/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/unitelpower/public_html/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/unitelpower/public_html/wp-content/plugins/wp-file-manager/lib/php/elFinderConnector.class.php
/home/wacademy/www/wp-content/updraft/plugins-old/updraftplus/class-updraftplus.php
/home/wacademy/www/wp-content/updraft/plugins-old/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/www/wp-content/updraft/plugins-old/updraftplus/backup.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wacademy/www/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wacademy/www/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wacademy/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wacademy/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/www/wp-content/plugins/updraftplus/backup.php
/home/wacademy/www/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wacademy/public_html/wp-content/updraft/plugins-old/updraftplus/class-updraftplus.php
/home/wacademy/public_html/wp-content/updraft/plugins-old/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/public_html/wp-content/updraft/plugins-old/updraftplus/backup.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wacademy/public_html/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wacademy/public_html/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wacademy/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wacademy/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wacademy/public_html/wp-content/plugins/updraftplus/backup.php
/home/wacademy/public_html/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wclinic/www/devsite/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/www/devsite/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/wclinic/www/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wclinic/www/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wclinic/www/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/www/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wclinic/www/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wclinic/www/wp-content/plugins/updraftplus/backup.php
/home/wclinic/www/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wclinic/www/academy/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/www/academy/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/wclinic/public_html/devsite/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/public_html/devsite/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/installer/dup-installer/ctrls/classes/class.ctrl.extraction.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/installer/dup-installer/classes/class.server.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/ctrls/ctrl.tools.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/classes/package/class.pack.database.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.zip.php
/home/wclinic/public_html/devsite/wp-content/plugins/duplicator/classes/utilities/class.u.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/wclinic/public_html/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/wclinic/public_html/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/public_html/wp-content/plugins/updraftplus/class-updraftplus.php
/home/wclinic/public_html/wp-content/plugins/updraftplus/includes/class-partialfileservlet.php
/home/wclinic/public_html/wp-content/plugins/updraftplus/backup.php
/home/wclinic/public_html/wp-content/plugins/wp-rocket/inc/Dependencies/Minify/JS.php
/home/wclinic/public_html/academy/wp-content/plugins/salient-core/includes/salient-studio-templates.php
/home/wclinic/public_html/academy/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/projme/www/wp-content/plugins/litespeed-cache/lib/css_js_min/minify/js.cls.php
/home/projme/www/wp-content/plugins/wc-multivendor-membership/includes/libs/stripe-gateway/build.php
/home/projme/www/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/projme/www/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/projme/www/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/projme/www/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/projme/www/wp-content/plugins/wc-multivendor-marketplace/views/store-lists/wcfmmp-view-store-lists-card.php
/home/projme/www/wp-content/plugins/wc-multivendor-marketplace/views/store/wcfmmp-view-store-banner.php
/home/projme/www/wp-content/plugins/wc-multivendor-marketplace/includes/Stripe/build.php
/home/projme/www/wp-content/plugins/wc-frontend-manager-elementor/includes/widgets/class-wcfmem-widget-storebanner.php
/home/projme/public_html/wp-content/plugins/litespeed-cache/lib/css_js_min/minify/js.cls.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-membership/includes/libs/stripe-gateway/build.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/addons/amazons3addon/vendor-prefixed/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/addons/dropboxaddon/vendor-prefixed/spatie/dropbox-api/src/Client.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/src/Ajax/ServicesSettings.php
/home/projme/public_html/wp-content/plugins/duplicator-pro/src/Libs/Shell/Shell.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-marketplace/views/store-lists/wcfmmp-view-store-lists-card.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-marketplace/views/store/wcfmmp-view-store-banner.php
/home/projme/public_html/wp-content/plugins/wc-multivendor-marketplace/includes/Stripe/build.php
/home/projme/public_html/wp-content/plugins/wc-frontend-manager-elementor/includes/widgets/class-wcfmem-widget-storebanner.php
/home/vlcare/www/wp-content/plugins/redis-cache-pro/src/Console/Commands.php
/home/vlcare/www/wp-content/plugins/mailchimp-for-woocommerce/includes/api/class-mailchimp-woocommerce-tower.php
/home/vlcare/www/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php
/home/vlcare/public_html/wp-content/plugins/redis-cache-pro/src/Console/Commands.php
/home/vlcare/public_html/wp-content/plugins/mailchimp-for-woocommerce/includes/api/class-mailchimp-woocommerce-tower.php
/home/vlcare/public_html/wp-content/plugins/loco-translate/tpl/admin/file/msgcat.php

WARNING — Summary

Critical: 0\nWarnings: 3\nTotal alert sections: 3\nReport path: /home/cyberserver/public_html/security-reports/latest.html

This report is read-only. It does not modify firewall, files, accounts, or services.