403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-05.02.00.txt
 ## swap threshold exceeded
## server overview
2025-11-05.02.00 load[0] mem[61/62] mysql[3/10] httpd[3]
              total        used        free      shared  buff/cache   available
Mem:           2363        1367          73          87         922         732
Swap:          1999        1277         722
 02:00:02 up  7:11,  0 users,  load average: 0.16, 0.13, 0.14
## system overview
top - 02:00:02 up  7:11,  0 users,  load average: 0.16, 0.13, 0.14
Tasks: 221 total,   9 running, 210 sleeping,   0 stopped,   2 zombie
%Cpu(s): 85.3 us, 11.8 sy,  2.9 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    71764 free,  1412248 used,   936288 buff/cache
KiB Swap:  2047996 total,   740092 free,  1307904 used.   738172 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  3714 mysql     20   0 1458316 271832   3772 S 143.8 11.2   5:44.76 /usr/sbin+
 72522 nigeria   20   0  400652  15932  10220 S  12.5  0.7   0:00.08 /opt/cpan+
     1 root      20   0   44532   3728   1616 S   0.0  0.2   0:39.12 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.75 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:22.39 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.44 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.75 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   103 root      20   0       0      0      0 S   0.0  0.0   0:00.58 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:01.88 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.48 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.33 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   7092   6776 S   0.0  0.3   0:14.53 /usr/lib/+
   380 root      20   0   45352    476    328 S   0.0  0.0   0:00.35 /usr/lib/+
   408 root      16  -4   55532    556    424 S   0.0  0.0   0:02.32 /sbin/aud+
   410 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   510 rpc       20   0   69256    288    188 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 dbus      20   0   58720   1528    744 S   0.0  0.1   0:13.17 /usr/bin/+
   522 nscd      20   0 1064132   1644    828 S   0.0  0.1   0:04.02 /usr/sbin+
   542 root      20   0   24760   1372    896 S   0.0  0.1   0:05.84 /usr/lib/+
   544 root      20   0  195208    140    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   21540    496    388 S   0.0  0.0   0:00.61 /usr/sbin+
   548 polkitd   20   0  610540   1008    532 S   0.0  0.0   0:03.43 /usr/lib/+
   551 root      20   0   52852    560    448 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  224144   6352   1252 S   0.0  0.3   0:00.33 queueproc+
   553 root      20   0  152780    312    272 S   0.0  0.0   0:00.01 /usr/sbin+
   565 root      20   0    4388    164    160 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0   24208    184    164 S   0.0  0.0   0:00.00 /usr/sbin+
   573 root      20   0  124480    688    512 S   0.0  0.0   0:00.78 /usr/sbin+
   584 root      20   0  114704    248    248 S   0.0  0.0   0:00.02 /bin/bash
   585 root      20   0  108296    240    236 S   0.0  0.0   0:00.00 /sbin/age+
   593 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   637 mailnull  20   0   89120   4008    976 S   0.0  0.2   0:00.33 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.43 [loop0]
   713 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   714 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  2886 memcach+  20   0  342400    268    268 S   0.0  0.0   0:00.58 /usr/bin/+
  2887 root      20   0  572372   1148    568 S   0.0  0.0   0:02.25 /usr/bin/+
  2888 systuser  20   0  113016   1608      0 S   0.0  0.1   0:00.01 /usr/loca+
  2889 root      20   0   51508    664    500 S   0.0  0.0   0:00.29 /usr/sbin+
  2892 root      20   0  445028   2788   2788 S   0.0  0.1   0:00.06 sw-engine+
  2894 systuser  20   0  114016  15316   2784 S   0.0  0.6   0:06.40 /usr/loca+
  2895 root      20   0  153404    476    392 S   0.0  0.0   0:00.61 pure-ftpd+
  2896 telegraf  20   0 5654048  37364   6128 S   0.0  1.5   0:13.98 /usr/loca+
  2898 systuser  20   0  112524   2072      0 S   0.0  0.1   0:00.01 /usr/loca+
  2900 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  2901 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  2902 root      20   0  111304    604    508 S   0.0  0.0   0:03.74 /usr/sbin+
  2910 root      20   0  386112  10572   5948 S   0.0  0.4   0:00.71 php-fpm: +
  2913 root      20   0  397344  16884   9692 S   0.0  0.7   0:04.18 php-fpm: +
  2914 named     20   0  858184  42404   2148 S   0.0  1.8   0:12.64 /usr/sbin+
  2915 root      20   0  261404   7332   1856 S   0.0  0.3   0:05.76 cpsrvd (S+
  2933 root      20   0  392856  11980   6392 S   0.0  0.5   0:00.70 php-fpm: +
  2934 root      20   0  290128   7472   6240 S   0.0  0.3   0:07.10 /usr/sbin+
  2939 root      20   0  385496  11012   5952 S   0.0  0.5   0:00.80 php-fpm: +
  2946 root      20   0 1763068 248632    564 S   0.0 10.3   0:13.58 /usr/loca+
  2953 root      20   0  436392  24100  16596 S   0.0  1.0   0:00.84 php-fpm: +
  2956 cpanelc+  20   0   10552   3700   2368 S   0.0  0.2   0:18.80 /usr/loca+
  3054 dovenull  20   0   47060   2896   2100 S   0.0  0.1   0:00.38 dovecot/p+
  3055 dovenull  20   0   47544   3024   1808 S   0.0  0.1   0:00.17 dovecot/i+
  3056 dovecot   20   0   10320    336    224 S   0.0  0.0   0:00.03 dovecot/a+
  3057 root      20   0   10452    536    332 S   0.0  0.0   0:00.30 dovecot/l+
  3058 dovenull  20   0   47052   2684   1924 S   0.0  0.1   0:00.51 dovecot/p+
  3059 dovenull  20   0   48008   3616   1984 S   0.0  0.1   0:00.29 dovecot/i+
  3066 root      20   0   24528   2572    548 S   0.0  0.1   0:00.14 dovecot/c+
  3071 dovecot   20   0   13568    592    356 S   0.0  0.0   0:00.04 dovecot/s+
  3130 systuser  20   0  157704   3124   1100 S   0.0  0.1   0:00.12 SonarPush+
  3140 root      20   0  248140 117204    960 S   0.0  4.8   0:05.89 /usr/loca+
  3148 dovecot   20   0   41056   1532   1100 S   0.0  0.1   0:00.32 dovecot/a+
  3150 wp-tool+  20   0  410480  35680   1712 S   0.0  1.5   0:20.91 /usr/bin/+
  3151 wp-tool+  20   0  387556  13304   1700 S   0.0  0.5   0:00.28 /usr/bin/+
  3202 root      20   0  183900   6092   2864 S   0.0  0.3   0:01.46 cpdavd - +
  3203 root      20   0  167452   4204   2828 S   0.0  0.2   0:00.50 dnsadmin +
  3205 root      20   0  210316  13976   2172 S   0.0  0.6   0:03.49 tailwatchd
  3599 root      20   0  299272    896    532 R   0.0  0.0   0:00.73 php-fpm: +
  3640 root      38  18  130416   1512    772 S   0.0  0.1   0:00.06 cpanellog+
  3894 root      20   0  266984  30708   5428 S   0.0  1.3   0:01.14 /usr/sbin+
  6977 root      20   0  261684 126968   1784 S   0.0  5.2   0:02.45 spamd chi+
  6978 root      20   0  248140 116688    504 S   0.0  4.8   0:00.01 spamd chi+
  9045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  9055 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.47 [kworker]
 24647 root      20   0  181736  29288   1748 S   0.0  1.2   0:07.27 lfd - sle+
 41006 root      20   0   12812   1388   1180 S   0.0  0.1   0:00.11 /usr/loca+
 41007 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.08 /usr/loca+
 41008 root      20   0   12848   1396   1180 S   0.0  0.1   0:00.10 /usr/loca+
 41009 root      20   0   53272  11892   2504 S   0.0  0.5   0:00.04 /usr/loca+
 48624 root      20   0  183056   2116   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 48664 root      20   0  113284   1148    968 S   0.0  0.0   0:00.00 /bin/sh -+
 48701 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 5h +
 49881 root      20   0 1350088  11504    600 S   0.0  0.5   0:00.09 /usr/bin/+
 49915 root      20   0 1277312  12048    596 S   0.0  0.5   0:00.08 /usr/bin/+
 58865 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 59685 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 59686 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 59768 cloudw    20   0  295104  15436   9780 R   0.0  0.6   0:06.29 /opt/cpan+
 63554 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 63933 nobody    20   0  277508  35672   4460 S   0.0  1.5   0:00.33 /usr/sbin+
 63935 nobody    20   0  277572  35720   4452 S   0.0  1.5   0:00.30 /usr/sbin+
 63940 nobody    20   0  277544  35692   4452 S   0.0  1.5   0:00.36 /usr/sbin+
 63942 nobody    20   0  277508  35688   4484 S   0.0  1.5   0:00.30 /usr/sbin+
 64207 nobody    20   0  277496  35540   4348 S   0.0  1.5   0:00.31 /usr/sbin+
 64220 nobody    20   0  277504  35552   4352 S   0.0  1.5   0:00.36 /usr/sbin+
 64221 nobody    20   0  277500  35596   4400 S   0.0  1.5   0:00.34 /usr/sbin+
 64225 nobody    20   0  277696  35680   4340 S   0.0  1.5   0:00.32 /usr/sbin+
 65025 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 65095 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 65924 nobody    20   0  277496  35444   4252 S   0.0  1.5   0:00.22 /usr/sbin+
 69258 nobody    20   0  277824  35472   4168 S   0.0  1.5   0:00.16 /usr/sbin+
 69917 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72118 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 72195 nigeria   20   0  490140  31124   4716 S   0.0  1.3   0:00.22 php-fpm: +
 72198 mailnull  20   0   90224   6688   2596 S   0.0  0.3   0:00.00 /usr/sbin+
 72397 nigeria   20   0  416212  28932   3936 S   0.0  1.2   0:00.19 php-fpm: +
 72400 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 72401 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 72404 root      20   0  183048   2164   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72405 root      20   0  183048   2164   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72406 root      20   0  183048   2160   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72407 root      20   0  183048   2160   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72409 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72411 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72412 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72413 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72414 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72416 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72417 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72418 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72419 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72420 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72421 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72422 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72423 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72424 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72427 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72428 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72429 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72432 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72435 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 72441 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 72442 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 72443 root      20   0 1276700  15404    596 S   0.0  0.6   0:00.06 /usr/bin/+
 72444 root      20   0 1416224  15040    600 S   0.0  0.6   0:00.06 /usr/bin/+
 72451 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 72452 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 72453 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 72455 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 72456 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72457 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72458 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72459 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72462 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72464 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 72465 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72466 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 72467 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72468 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72469 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72472 root      20   0  224236  28724   3884 R   0.0  1.2   0:00.14 /usr/loca+
 72473 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 72474 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 72475 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72476 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 72480 root      20   0  188192  11076   5148 S   0.0  0.5   0:00.01 /usr/loca+
 72487 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 72491 root      20   0 1277356  12008    596 S   0.0  0.5   0:00.06 /usr/bin/+
 72492 root      20   0  114256   2416   1268 R   0.0  0.1   0:00.00 bash /usr+
 72494 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
 72505 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 72515 nigeria   20   0   20164    268      0 S   0.0  0.0   0:00.00 jailshell+
 72516 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 72527 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 72537 root      20   0  160224   2380   1632 S   0.0  0.1   0:00.01 top -n 2 +
 72589 root      35  15  113284   1388   1204 S   0.0  0.1   0:00.00 /bin/bash+
 72612 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72621 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 72623 cloudsms  20   0   20164    268      0 S   0.0  0.0   0:00.00 jailshell+
 72639 root      20   0   38648   6496   3036 R   0.0  0.3   0:00.00 /usr/loca+
 72640 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 72642 root      35  15  113284    192      0 R   0.0  0.0   0:00.00 /bin/bash+
 72643 cloudsms  20   0  131852   3320   2388 R   0.0  0.1   0:00.00 /usr/loca+
 72645 root      20   0 1416224  15040    600 R   0.0  0.6   0:00.00 /usr/bin/+
 72646 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [chmod] <+
 91680 root      20   0       0      0      0 S   0.0  0.0   0:00.31 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov04   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov04   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov04   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov04   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov04   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov04   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [deferwq]
root        103  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov04   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov04   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov04   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ext4-rsv-conver]
root        410  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [xprtiod]
root        593  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov04   0:02  \_ [loop0]
root        713  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [jbd2/loop0-8]
root        714  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ext4-rsv-conver]
root      91680  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kworker/u200:1]
root      58865  0.0  0.0      0     0 ?        D    01:24   0:00  \_ [kworker/u200:0]
root      59685  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:6]
root      59686  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:7]
root      63554  0.0  0.0      0     0 ?        S    01:37   0:00  \_ [kworker/1:1]
root      65025  0.0  0.0      0     0 ?        S    01:42   0:00  \_ [kworker/0:2]
root      65095  0.0  0.0      0     0 ?        S    01:42   0:00  \_ [kworker/1:2]
root      69917  0.0  0.0      0     0 ?        S    01:51   0:00  \_ [kworker/1:4]
root      71252  0.0  0.0      0     0 ?        S    01:56   0:00  \_ [kworker/1:0]
root      72612  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44532  3704 ?        Ss   Nov04   0:39 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  7092 ?        Ss   Nov04   0:14 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   476 ?        Ss   Nov04   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   556 ?        S<sl Nov04   0:02 /sbin/auditd
rpc         510  0.0  0.0  69256   288 ?        Ss   Nov04   0:00 /sbin/rpcbind -w
dbus        517  0.0  0.0  58720  1528 ?        Ss   Nov04   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        522  0.0  0.0 1064132 1644 ?        Ssl  Nov04   0:04 /usr/sbin/nscd
root        542  0.0  0.0  24760  1372 ?        Ss   Nov04   0:05 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208   140 ?        Ssl  Nov04   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0  21540   496 ?        Ss   Nov04   0:00 /usr/sbin/irqbalance --foreground
polkitd     548  0.0  0.0 610540  1008 ?        Ssl  Nov04   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        551  0.0  0.0  52852   560 ?        Ss   Nov04   0:00 /usr/sbin/smartd -n -q never
root        552  0.0  0.2 224144  6352 ?        Ss   Nov04   0:00 queueprocd - waiting up to 60s to process a task
root        553  0.0  0.0 152780   312 ?        Ss   Nov04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        565  0.0  0.0   4388   164 ?        Ss   Nov04   0:00 /usr/sbin/acpid
root        571  0.0  0.0  24208   184 ?        Ss   Nov04   0:00 /usr/sbin/atd -f
root        573  0.0  0.0 124480   688 ?        Ss   Nov04   0:00 /usr/sbin/crond -n
root      48624  0.0  0.0 183056  2116 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48664  0.0  0.0 113284  1148 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48701  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 5h 12m
root      72404  0.0  0.0 183048  2164 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72442  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      72443  6.0  0.6 1276700 15404 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      72405  0.0  0.0 183048  2164 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72476  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      72491  0.0  0.4 1277356 12008 ?       Sl   02:00   0:00  |       \_ /usr/bin/update_imunify
root      72406  0.0  0.0      0     0 ?        Z    02:00   0:00  \_ [crond] <defunct>
root      72407  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72464  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      72494  0.0  0.0 113288  1432 ?        SN   02:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      72589  0.0  0.0 113284  1388 ?        SN   02:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/sonarpush-watchdog.sh
root      72642  0.0  0.0 112812   680 ?        RN   02:00   0:00  |               \_ grep SonarPush /proc/3130/cmdline
root      72409  0.0  0.0 183048  2156 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72474  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      72492  0.0  0.1 114256  2432 ?        S    02:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      72649  0.0  0.0 114256  1152 ?        R    02:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      72411  0.0  0.0 183048  2156 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72473  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      72487  0.0  0.0 108052   356 ?        S    02:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      72505  0.0  0.0 113288  1516 ?        S    02:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      72648  0.0  0.0 153840  2088 ?        R    02:00   0:00  |               \_ ps auxf
root      72412  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72456  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      72413  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72465  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      72414  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72458  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      72416  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72459  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      72417  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72469  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      72418  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72453  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [72650] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  72650  0.0  0.0  20164   264 ?        S    02:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  72651  0.0  0.0 113284  1212 ?        S    02:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      72419  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72467  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      72420  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72468  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      72421  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72455  0.0  0.0  20164   988 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [72623] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  72623  0.0  0.0  20164   268 ?        S    02:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  72640  0.0  0.0 113284  1212 ?        S    02:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  72643  0.0  0.2 250952  6340 ?        R    02:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      72422  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72475  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      72423  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72457  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      72424  0.0  0.0 183048  2160 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72462  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      72427  0.0  0.0 183048  2156 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72452  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      72480  0.0  0.4 188192 11076 ?        S    02:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      72537  0.0  0.0 160224  2380 ?        S    02:00   0:00  |           \_ top -n 2 -b -c
root      72428  0.0  0.0 183048  2156 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72472  0.0  1.2 228560 30756 ?        Rs   02:00   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/backup
root      72429  0.0  0.0 183048  2156 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72451  0.0  0.0  20164   964 ?        Ss   02:00   0:00  |   \_ jailshell (pactpay) [72516] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72516  0.0  0.0  20164   264 ?        R    02:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72527  0.0  0.0      0     0 ?        Z    02:00   0:00  |           \_ [php-cgi] <defunct>
root      72432  0.0  0.0 183048  2156 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72466  0.0  0.0  20164   968 ?        Ss   02:00   0:00      \_ jailshell (nigeria) [72515] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72515  0.0  0.0  20164   268 ?        S    02:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72522  0.0  0.6 400652 15932 ?        S    02:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        584  0.0  0.0 114704   248 ttyS0    Ss+  Nov04   0:00 /bin/bash
root        585  0.0  0.0 108296   240 tty1     Ss+  Nov04   0:00 /sbin/agetty --noclear tty1 linux
mailnull    637  0.0  0.1  89120  4008 ?        Ss   Nov04   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  72198  0.0  0.2  90224  6688 ?        S    01:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+   2886  0.0  0.0 342400   268 ?        Ssl  Nov04   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       2887  0.0  0.0 572372  1148 ?        Ssl  Nov04   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   2888  0.0  0.0 113016  1608 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       2889  0.0  0.0  51508   664 ?        Ss   Nov04   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   3054  0.0  0.1  47060  2896 ?        S    Nov04   0:00  \_ dovecot/pop3-login
dovenull   3055  0.0  0.1  47544  3024 ?        S    Nov04   0:00  \_ dovecot/imap-login
dovecot    3056  0.0  0.0  10320   336 ?        S    Nov04   0:00  \_ dovecot/anvil
root       3057  0.0  0.0  10452   536 ?        S    Nov04   0:00  \_ dovecot/log
dovenull   3058  0.0  0.1  47052  2684 ?        S    Nov04   0:00  \_ dovecot/pop3-login
dovenull   3059  0.0  0.1  48008  3616 ?        S    Nov04   0:00  \_ dovecot/imap-login
root       3066  0.0  0.1  24528  2572 ?        S    Nov04   0:00  \_ dovecot/config
dovecot    3071  0.0  0.0  13568   592 ?        S    Nov04   0:00  \_ dovecot/stats
dovecot    3148  0.0  0.0  41056  1532 ?        S    Nov04   0:00  \_ dovecot/auth
root      72118  0.0  0.1  41052  2728 ?        S    01:59   0:00  \_ dovecot/auth -w
root       2892  0.0  0.1 445028  2788 ?        Ss   Nov04   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   2894  0.0  0.6 114016 15316 ?        Ssl  Nov04   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       2895  0.0  0.0 153404   476 ?        Ss   Nov04   0:00 pure-ftpd (SERVER)
telegraf   2896  0.0  1.5 5654048 37364 ?       SLsl Nov04   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   2898  0.0  0.0 112524  2072 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser   2900  0.0  0.0  10132    44 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   2901  0.0  0.0  14068    44 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       2902  0.0  0.0 111304   604 ?        Ss   Nov04   0:03 /usr/sbin/sshd -D
root      72400  0.0  0.2 157312  4972 ?        Ss   02:00   0:00  \_ sshd: root [priv]
sshd      72401  0.0  0.1 115644  2628 ?        S    02:00   0:00      \_ sshd: root [net]
root       2910  0.0  0.4 386112 10572 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       2913  0.0  0.6 397344 16884 ?        Ss   Nov04   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   72195  2.2  1.2 490140 31124 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   72397  9.5  1.1 416212 28932 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
named      2914  0.0  1.7 858184 42404 ?        Ssl  Nov04   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       2915  0.0  0.3 261404  7332 ?        Ss   Nov04   0:05 cpsrvd (SSL) - waiting for connections                   
root      72435  0.0  0.0      0     0 ?        Z    02:00   0:00  \_ [cpaneld - servi] <defunct>
root       2933  0.0  0.4 392856 11980 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       2934  0.0  0.3 290128  7472 ?        Ssl  Nov04   0:07 /usr/sbin/rsyslogd -n
root       2939  0.0  0.4 385496 11012 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       2946  0.0 10.2 1763068 248556 ?      Ssl  Nov04   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       2953  0.0  0.9 436392 24100 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+   2956  0.0  0.1  10552  3700 ?        Ss   Nov04   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   3130  0.0  0.1 157704  3124 ?        S    Nov04   0:00 SonarPush 0.6.12 [sleeping]
root       3140  0.0  4.8 248140 117204 ?       Ss   Nov04   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6977  0.0  5.2 261684 126968 ?       S    Nov04   0:02  \_ spamd child
root       6978  0.0  4.8 248140 116688 ?       S    Nov04   0:00  \_ spamd child
wp-tool+   3150  0.0  1.4 410480 35680 ?        Ss   Nov04   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   3151  0.0  0.5 387556 13304 ?        Ss   Nov04   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       3202  0.0  0.2 183900  6092 ?        Ss   Nov04   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       3203  0.0  0.1 167452  4204 ?        Ss   Nov04   0:00 dnsadmin - dormant mode
root       3205  0.0  0.5 210316 13976 ?        Ss   Nov04   0:03 tailwatchd
root       3599  0.0  0.0 299272   896 ?        Ss   Nov04   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       3640  0.0  0.0 130416  1512 ?        SN   Nov04   0:00 cpanellogd - sleeping for logs
mysql      3714  1.3 11.2 1458316 271832 ?      Sl   Nov04   5:44 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       3894  0.0  1.2 266984 30708 ?        Ss   Nov04   0:01 /usr/sbin/httpd -k start
root      41006  0.0  0.0  12812  1388 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      41007  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      41008  0.0  0.0  12848  1396 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      41009  0.0  0.4  53272 11892 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    63933  0.0  1.4 277508 35672 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    63935  0.0  1.4 277572 35720 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    63940  0.0  1.4 277544 35692 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    63942  0.0  1.4 277508 35688 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    64207  0.0  1.4 277496 35540 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    64220  0.0  1.4 277504 35552 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    64221  0.0  1.4 277500 35596 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    64225  0.0  1.4 277696 35680 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    65924  0.0  1.4 277496 35444 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    69258  0.0  1.4 277824 35472 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
oysipao+   9045  0.0  0.0   3148   416 ?        Ss   Nov04   0:00 [kworker]
oysipao+   9055  0.0  0.0   3152   492 ?        S    Nov04   0:00  \_ [kworker]
root      24647  0.1  1.2 181736 29288 ?        Ss   00:00   0:07 lfd - sleeping
root      49881  0.0  0.4 1350088 11504 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      49915  0.0  0.4 1277312 12048 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
cloudw    59768  0.3  0.6 295104 15436 ?        S    01:25   0:06 /opt/cpanel/ea-php74/root/usr/bin/php -f /tmp/httpd.conf
## mysql stats
Uptime: 25903  Threads: 2  Questions: 2113303  Slow queries: 0  Opens: 7448  Flush tables: 1  Open tables: 2000  Queries per second avg: 81.585
*************************** 1. row ***************************
     Id: 26946
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 26957
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 3. row ***************************
     Id: 26958
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 26959
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.139.166 TIME_WAIT
      1 114.119.140.48 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.37.44 TIME_WAIT
      1 51.222.168.124 TIME_WAIT
      1 52.167.144.146 TIME_WAIT
      1 54.39.136.249 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 05-Nov-2025 02:00:03 WAT
   Restart Time: Tuesday, 04-Nov-2025 18:48:25 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 11 minutes 37 seconds
   Server load: 0.16 0.13 0.14
   Total accesses: 30372 - Total Traffic: 495.5 MB - Total Duration: 10430263
   CPU Usage: u2.83 s1.31 cu156.14 cs67.14 - .878% CPU load
   1.17 requests/sec - 19.6 kB/second - 16.7 kB/request - 343.417 ms/request
   3 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

WKK__..._._......._...._._......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot     Client      Protocol         VHost                                      Request
   0-1  64207 0/108/2500 W 0.95 0    0   836519  0.0  0.89  42.69 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   1-1  64220 1/120/2311 K 0.92 1    361 1236510 18.8 1.33  47.59 149.7.16.180    http/1.1 nigeriadecide.org:80   GET /blog/ HTTP/1.1
   2-1  65924 1/94/2651  K 1.45 1    3   698060  0.8  0.72  47.65 207.46.13.168   http/1.1 team.cloudware.ng:80   GET /var/cache/prod/pools/VV6jqwmg-R/P/V/ HTTP/1.1
   3-1  64221 0/109/1927 _ 1.11 1    1   757204  0.0  0.89  21.52 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   4-1  69258 0/59/2644  _ 0.21 0    0   821427  0.0  0.49  45.00 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   5-1  -     0/0/2050   . 0.00 257  0   870000  0.0  0.00  51.47 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-1  -     0/0/2350   . 0.00 1242 0   968795  0.0  0.00  39.89 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-1  -     0/0/1944   . 0.00 813  0   471913  0.0  0.00  29.53 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-1  64225 0/108/2537 _ 0.90 2    8   591864  0.0  0.96  29.51 18.214.238.178  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/assets/css/blog/blog/blog
   9-1  -     0/0/2226   . 0.00 1240 0   813830  0.0  0.00  34.84 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-1 63933 0/107/1591 _ 1.94 1    1   421663  0.0  1.13  23.55 173.199.190.175 http/1.1 nigeriadecide.org:80   POST /blog/wp-cron.php?doing_wp_cron=1762304401.066334009170532
   11-1 -     0/0/719    . 0.00 1285 0   239795  0.0  0.00  8.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-1 -     0/0/1146   . 0.00 1284 0   232954  0.0  0.00  13.33 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-1 -     0/0/642    . 0.00 1283 0   221078  0.0  0.00  6.59  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-1 -     0/0/853    . 0.00 1239 0   352949  0.0  0.00  24.58 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-1 -     0/0/767    . 0.00 1273 0   533324  0.0  0.00  9.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-1 -     0/0/739    . 0.00 1280 0   188601  0.0  0.00  12.81 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-1 -     0/0/321    . 0.00 1278 0   44566   0.0  0.00  2.88  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-1 63935 0/100/116  _ 0.52 3    5   45422   0.0  0.91  1.14  185.191.171.18  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?lga=Akamkpa&state=Cross%20river&
   19-1 -     0/0/72     . 0.00 665  0   13753   0.0  0.00  0.66  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-1 -     0/0/28     . 0.00 1238 4   5857    0.0  0.00  0.73  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-1 -     0/0/15     . 0.00 1277 0   93      0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-1 -     0/0/2      . 0.00 1287 0   23      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-1 63940 0/113/113  _ 1.48 0    0   48892   0.0  1.01  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   24-1 -     0/0/1      . 0.00 1291 0   0       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-1 63942 0/104/104  _ 0.92 1    1   15152   0.0  1.01  1.01  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   26-1 -     0/0/1      . 0.00 1290 0   0       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-1 -     0/0/1      . 0.00 1288 4   4       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-1 -     0/0/1      . 0.00 1289 0   0       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 349
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 23 seconds, (range: 1...68)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 4641
   total entries replaced since starting: 0
   total entries expired since starting: 4289
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 6 miss
   total removes since starting: 5 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit