>>> /opt/sharedrads/check_user masair5 --plaintext

#################################################################################
  INMOTION HOSTING  .:: SHARED RADS ::.  SHARED RESOURCE ABUSE DETECTION SCRIPTS
#################################################################################
                       Thu Mar 29 15:43:05 EDT 2018  

    Displaying today's most recent CPU usage data as recorded by process accounting 
       CPU minutes:  71.21cp (0.63%)          Actual time:  4074374.01re (0.11%) 
        (since my last data poll @ 15:07 EDT masair5 burned another ~21 cp) 

  # of executions for CPU intensive processes that have been spawned by this user today 
php:  2651  perl:  0  imap:  224  pop3:  0  exim:  0  boxtrap:  0  ftp:  0  cron:  0  

CPU minutes used today         Historical CPU usage data      Most expensive processes 
12:00AM EDT :: 0.06cp		Mar 28 :: 32.19cp (0.22%)	optipng :: 54.53 secs
03:00AM EDT :: 4.30cp		Mar 27 :: 32.45cp (0.21%)	optipng :: 52.88 secs
06:00AM EDT :: 10.3cp		Mar 26 :: 42.33cp (0.27%)	optipng :: 51.65 secs
09:00AM EDT :: 13.1cp		Mar 25 :: 38.16cp (0.29%)	optipng :: 49.60 secs
12:00PM EDT :: 17.7cp		Mar 24 :: 53.60cp (0.39%)	optipng :: 35.35 secs
03:00PM EDT :: 50.2cp		Mar 23 :: 122.92cp (0.71%)	optipng :: 27.93 secs
06:00PM EDT :: 55.7cp		Mar 22 :: 33.81cp (0.21%)	optipng :: 24.57 secs
09:00PM EDT :: 62.1cp		Mar 21 :: 56.20cp (0.36%)	optipng :: 23.07 secs

  Displaying top utilization processes for user as recorded by cPanel and dcpumon 
  Top Process  %CPU 102  /home/masair5/public_html/andrewtownsend.com/wp-content/ewww/optipng -o2 -quiet -strip all /home/masair5/public_html/andrewtownsend.com/wp-content/uploads/2017/05/adventurers-code5595-390x500@2x.png.tmp.png  
  Top Process  %CPU 98.3  /home/masair5/public_html/andrewtownsend.com/wp-content/ewww/optipng -o2 -quiet -strip all /home/masair5/public_html/andrewtownsend.com/wp-content/uploads/2015/06/borntoinspire-768x576@2x.png.tmp.png  
  Top Process  %CPU 96.0  /home/masair5/public_html/andrewtownsend.com/wp-content/ewww/optipng -o2 -quiet -strip all /home/masair5/public_html/andrewtownsend.com/wp-content/uploads/2017/05/IMG_3713-500x600@2x.png.tmp.png  


 RADS has detected these custom cron jobs currently enabled for this account 


      USER    QUERIES       TIME   LOCKTIME   ROWSSENT  ROWSRECVD

  ERROR: Could not locate any bandwidth data for masair5 in /var/cpanel/bandwidth/   



>>> /opt/sharedrads/nlp masair5 -p -w 80 --today
Using /var/log/apache2/domlogs/masair5/andrewtownsend.masairunning.com

[1;35m-Hourly hits (29/Mar/2018)------------------------------------------------------[0m
08: 14   09: 32   10: 54   11: 52   12: 65   13: 108  14: 868  15: 193  

[1;35m-HTTP response codes------------------------------------------------------------[0m
200: 1265  301: 25    302: 25    304: 62    404: 5     406: 3     500: 1     

[1;35m-Duplicate requests + response codes--------------------------------------------[0m
334   200   POST /wp-admin/admin-ajax.php
48    200   GET /
28    200   GET /robots.txt
19    304   GET /wp-content/plugins/jetpack/_inc/fonts/jetpack/jetpack.woff
19    304   GET /wp-content/plugins/ultimate-social-media-icons/css/fonts/helvet
16    200   GET /wp-content/cache/wpfc-minified/4e06aeff12c016abfbb6365776c18db9
16    301   GET /?author=1
15    200   POST /?ga_action=googleanalytics_get_script
14    200   GET /wp-content/uploads/2017/11/madrid.jpg
14    200   GET /wp-content/uploads/2018/02/bucket_list.jpg

[1;35m-Requests for non-static content------------------------------------------------[0m
334   200   POST /wp-admin/admin-ajax.php
50    200   GET /
19    304   GET /wp-content/plugins/jetpack/_inc/fonts/jetpack/jetpack.woff
19    304   GET /wp-content/plugins/ultimate-social-media-icons/css/fonts/helvet
18    301   GET /
16    200   POST /
11    200   POST /wp-cron.php
11    304   GET /wp-content/plugins/feedburner-alternative-and-rss-redirect/font
9     200   GET /wp-admin/options-general.php
9     200   GET /wp-login.php

[1;35m-Top user agents----------------------------------------------------------------[0m
706   "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML
162   "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ch
60    "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36(KHTML, like Gecko) Chr
49    "-"
32    "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5 Build/MRA58N) AppleWebKit/537.
28    "Mozilla/5.0 (Linux; Android 8.0.0; HTC U11 Build/OPR6.170623.013) AppleWe
27    "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko
26    "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537
26    "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
26    "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Go

[1;35m-Top IPs with PTR records-------------------------------------------------------[0m
706   95.146.148.84     No Record Found
81    168.1.92.52       s487.pingdom.com.
54    5.178.78.78       s489.pingdom.com.
49    196.11.102.218    soteriacloud.net.
28    213.205.198.114   No Record Found
27    173.208.58.138    s438.pingdom.com.
26    128.69.209.208    128-69-209-208.broadband.corbina.ru.
23    54.210.174.113    ec2-54-210-174-113.compute-1.amazonaws.com.
14    198.46.81.173     ecbiz158.inmotionhosting.com.
14    216.244.66.244    Query Timed Out


>>> /opt/sharedrads/recent-cp masair5 -b

[2K+----------+------------------+------------------+------------------+------------------+
| command  |        1m        |        [4m5m[0m        |       15m        |       60m        |
+----------+------------------+------------------+------------------+------------------+
| jpegtran |     0.00s   0.0% |     0.00s   0.0% |     7.46s   1.8% |    62.41s   3.0% |
| gifsicle |     0.00s   0.0% |     0.00s   0.0% |     0.00s   0.0% |     0.01s   0.0% |
| imap     |     0.00s   0.0% |     0.00s   0.0% |     0.00s   0.0% |     0.26s   0.0% |
| nice     |     0.00s   0.0% |     0.02s   0.1% |     0.42s   0.1% |     3.75s   0.2% |
| sh       |     0.00s   0.0% |     0.03s   0.1% |     0.62s   0.1% |     5.32s   0.3% |
| php-cgi  |     2.78s 100.0% |     9.99s  41.2% |    62.94s  15.3% |   420.51s  20.4% |
| optipng  |     0.00s   0.0% |    14.18s  58.6% |   340.47s  82.7% |  1571.31s  76.1% |
+----------+------------------+------------------+------------------+------------------+
| total    |     2.78s 100.0% |    24.22s 100.0% |   411.91s 100.0% |  2063.58s 100.0% |
+----------+------------------+------------------+------------------+------------------+
s = processs user time in cpu seconds, cp = user time + system time in cpu minutes


>>> Running processes prior to suspension
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
masair5   852606  0.0  0.0  52484  4176 ?        S    14:10   0:00 dovecot/imap
masair5   852607  0.0  0.0  52484  4144 ?        S    14:10   0:00 dovecot/imap
masair5   852632  0.0  0.0  52088  3660 ?        S    14:10   0:00 dovecot/imap
masair5   852738  0.0  0.0  51828  3300 ?        S    14:10   0:00 dovecot/imap
masair5   894599  0.0  0.0  51836  3468 ?        S    14:20   0:00 dovecot/imap
masair5   894611  0.0  0.0  51828  3464 ?        S    14:20   0:00 dovecot/imap
