=== VPS MAINTENANCE RAW LOG STARTED ON Thu Jun  4 11:18:22 UTC 2026 ===

[*] Phase 1: Running Pre-Checks & Environment Detection
[+] Detected OS: AlmaLinux (Version: 8.10)
[+] Detected cPanel/WHM: 134.0 (build 35)
[+] Created backup directory: /root/backup_maintenance_2026-06-04_111822
[+] Backed up critical configuration files and cron schedules.

[*] Phase 2: Gathering Performance and Resource Utilization Metrics
[+] CPU Load Average: 0.40, 0.47, 2.02 (Cores: 4)
[+] Memory Usage: 3376 MB / 5937 MB (56%)
[+] Disk space usage on all partitions is below critical threshold.
[+] Inode usage on all partitions is healthy.
Top CPU Consuming Processes:
    PID: 1409002 CPU: 3.0   MEM: 8.8   COMMAND: /usr/sbin/mariadbd
    PID: 63     CPU: 0.7   MEM: 0.0   COMMAND: [kswapd0]
    PID: 258146 CPU: 0.5   MEM: 11.8  COMMAND: /usr/lib/jvm/jre-11/bin/java
    PID: 1      CPU: 0.4   MEM: 0.1   COMMAND: /usr/lib/systemd/systemd
    PID: 3130   CPU: 0.3   MEM: 0.3   COMMAND: tailwatchd

[*] Phase 3: Auditing SSH, Firewall, and Service Security Configurations
[!] SSH Default Port 22 is active.
[!] SSH PermitRootLogin is enabled.
[+] CSF (ConfigServer Security & Firewall) is active and running.
[+] Apache ModSecurity module is active.
[!] Imunify360 service is inactive.
[!] Insecure Services Listening: RPCBind (Port 111)
[+] Anonymous FTP access is disabled.

[*] Phase 4: Scanning for Malware, Suspicious PHP Files, and Permissive Permissions
[+] Scanning user public_html folders for suspicious files modified in the last 30 days...
[!] Found 44 suspicious PHP files. First 5 files:
[!] Found 2 world-writable files.
[+] All cron configurations and schedules appear clean.

[*] Phase 5: Auditing Service Health & cPanel License Status
[+] Service 'Apache' is active.
[+] Service 'MySQL/MariaDB' is active.
[+] Service 'Mail Server (Exim)' is active.
[+] Service 'IMAP/POP3 Server (Dovecot)' is active.
[-] Service 'DNS Server (Named)' (named) is INACTIVE!
[-] cPanel license validation failed: Updating cPanel license...Done. Update succeeded.

[*] Running safe cPanel self-repair routines...
[+] Cleaned user php.ini overrides.
[!] cPanel RPM audit reported issues. We will note this in the report for manual resolution.

[*] Phase 6: Auditing System Updates & Security Patches
[!] There are 94 pending OS updates.
[!] A kernel upgrade is available.
[+] User chose not to apply system package updates at this time.
