403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-07.01.30 load[0] mem[64/65] mysql[2/11] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1442         104          81         816         666
Swap:          1999        1356         643
 01:30:02 up  6:40,  0 users,  load average: 0.64, 0.79, 1.20
## system overview
top - 01:30:02 up  6:40,  0 users,  load average: 0.64, 0.79, 1.20
Tasks: 211 total,   7 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 78.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   107096 free,  1476896 used,   836308 buff/cache
KiB Swap:  2047996 total,   659196 free,  1388800 used.   683216 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1759 mysql     20   0 1458584 251428   3356 S  88.2 10.4   8:32.73 /usr/sbin+
 61307 healtho+  20   0  461848  74480   4216 R  52.9  3.1   0:04.89 php-fpm: +
     1 root      20   0   44396   3488   1540 S   5.9  0.1   0:34.24 /usr/lib/+
  1151 wp-tool+  20   0  410480  35692   1740 S   5.9  1.5   0:19.79 /usr/bin/+
 61522 nigeria   20   0  400652  15936  10220 R   5.9  0.7   0:00.04 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.17 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:29.61 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.62 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.82 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:01.83 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.01 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.22 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   5580   5280 S   0.0  0.2   0:13.43 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    500    372 S   0.0  0.0   0:02.27 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 S   0.0  0.1   0:12.31 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.03 /sbin/rpc+
   515 root      20   0   52852    476    368 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4556   1188 S   0.0  0.2   0:00.32 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:03.15 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:05.44 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.56 /usr/sbin+
   526 root      20   0  152780    172    128 S   0.0  0.0   0:00.01 /usr/sbin+
   532 nscd      20   0  861368   1288    688 S   0.0  0.1   0:05.19 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.67 /usr/sbin+
   569 root      20   0   24208     52     28 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3876    840 S   0.0  0.2   0:00.34 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.28 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.28 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13400   2580 S   0.0  0.6   0:05.52 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.52 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:03.39 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  35848   5764 S   0.0  1.5   0:13.15 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.09 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.51 pure-ftpd+
   963 named     20   0  858120  43236   2412 S   0.0  1.8   0:13.45 /usr/sbin+
   965 root      20   0  397344  14944   9688 S   0.0  0.6   0:05.70 php-fpm: +
   970 root      20   0  436392  24184  16684 S   0.0  1.0   0:00.77 php-fpm: +
   983 root      20   0  290128   6076   4976 S   0.0  0.3   0:06.87 /usr/sbin+
   992 root      20   0  392856  11980   6388 S   0.0  0.5   0:00.65 php-fpm: +
   994 root      20   0  261552   7576   1756 S   0.0  0.3   0:07.62 cpsrvd (S+
   995 cpanelc+  20   0   10528   3456   2296 R   0.0  0.1   0:18.94 /usr/loca+
   999 root      20   0  386112  10616   5992 S   0.0  0.4   0:00.68 php-fpm: +
  1000 root      20   0 1763064 184724    468 S   0.0  7.6   0:14.01 /usr/loca+
  1009 root      20   0  385496  10900   5840 S   0.0  0.5   0:00.92 php-fpm: +
  1075 dovenull  20   0   47064   2772   1944 S   0.0  0.1   0:00.46 dovecot/p+
  1076 dovenull  20   0   47472   2992   1812 S   0.0  0.1   0:00.25 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.05 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.29 dovecot/l+
  1079 dovenull  20   0   47048   2196   1436 S   0.0  0.1   0:00.36 dovecot/p+
  1080 dovenull  20   0   47672   3248   1912 S   0.0  0.1   0:00.34 dovecot/i+
  1087 root      20   0   24528   2120    372 S   0.0  0.1   0:00.15 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.05 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.12 SonarPush+
  1150 wp-tool+  20   0  387556  13260   1620 S   0.0  0.5   0:00.26 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.43 dovecot/a+
  1182 root      20   0  248280 116580    800 S   0.0  4.8   0:05.67 /usr/loca+
  1235 root      20   0  167452   4192   2828 S   0.0  0.2   0:00.47 dnsadmin +
  1238 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.24 cpdavd - +
  1239 root      20   0  209916  12916   2180 S   0.0  0.5   0:02.01 tailwatchd
  1684 root      38  18  130416   1400    716 S   0.0  0.1   0:00.05 cpanellog+
  1953 root      20   0  266984  30732   5556 S   0.0  1.3   0:01.45 /usr/sbin+
  2038 root      20   0  299272    560    392 S   0.0  0.0   0:00.67 php-fpm: +
  5242 root      20   0  262088 127808   2640 S   0.0  5.3   0:02.51 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.43 [kworker]
 28586 root      20   0  181360  29328   2220 S   0.0  1.2   0:05.01 lfd - sle+
 34611 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 45429 root      20   0   12836   1380   1180 S   0.0  0.1   0:00.21 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.18 /usr/loca+
 45431 root      20   0   12872   1392   1180 S   0.0  0.1   0:00.20 /usr/loca+
 45432 root      20   0   53252  11840   2460 S   0.0  0.5   0:00.05 /usr/loca+
 46027 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 46045 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 49707 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 50184 root      20   0  183048   2112   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1144    964 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 50313 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50725 root      20   0 1276100  10520    600 S   0.0  0.4   0:00.07 /usr/bin/+
 50761 root      20   0 1277312  11700    600 S   0.0  0.5   0:00.06 /usr/bin/+
 52680 nobody    20   0  277896  36540   4964 S   0.0  1.5   0:01.36 /usr/sbin+
 52997 nobody    20   0  277888  36092   4724 S   0.0  1.5   0:01.19 /usr/sbin+
 53056 nobody    20   0  277888  36340   4872 S   0.0  1.5   0:01.13 /usr/sbin+
 54339 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 54550 nobody    20   0  277888  36232   4744 S   0.0  1.5   0:01.00 /usr/sbin+
 55327 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 55544 nobody    20   0  277876  35912   4596 S   0.0  1.5   0:00.82 /usr/sbin+
 55615 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 56395 nobody    20   0  277572  35464   4260 S   0.0  1.5   0:00.53 /usr/sbin+
 57588 nobody    20   0  277572  35660   4452 S   0.0  1.5   0:00.54 /usr/sbin+
 57589 nobody    20   0  277896  35660   4192 S   0.0  1.5   0:00.49 /usr/sbin+
 57590 nobody    20   0  277568  35640   4392 S   0.0  1.5   0:00.58 /usr/sbin+
 57596 nobody    20   0  277880  35752   4380 S   0.0  1.5   0:00.52 /usr/sbin+
 58952 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 58961 root      20   0  178152  26296   2812 S   0.0  1.1   0:00.12 /usr/loca+
 59007 root      20   0  158872  15292   2700 S   0.0  0.6   0:00.08 /usr/loca+
 59016 root      20   0  195364  34708   3160 S   0.0  1.4   0:00.20 /usr/loca+
 59029 root      20   0   76784  17024   3044 S   0.0  0.7   0:00.18 /usr/loca+
 59350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59715 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 59803 nobody    20   0  277568  35328   4128 S   0.0  1.5   0:00.31 /usr/sbin+
 60167 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60169 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60555 nobody    20   0  277744  35140   3804 S   0.0  1.5   0:00.06 /usr/sbin+
 60702 nobody    20   0  277884  35284   3964 R   0.0  1.5   0:00.15 /usr/sbin+
 60833 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61295 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 61296 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 61378 nigeria   20   0  408544  22228   4012 S   0.0  0.9   0:00.39 php-fpm: +
 61379 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 61386 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 61395 healtho+  20   0  451096  63736   4216 S   0.0  2.6   0:00.98 php-fpm: +
 61404 healtho+  20   0  428568  41148   4180 S   0.0  1.7   0:00.30 php-fpm: +
 61422 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 61426 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61428 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61429 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61430 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61432 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61433 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61434 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61435 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61436 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61437 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61438 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61439 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61440 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61442 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61443 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61445 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61452 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 61453 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 61455 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 61470 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61471 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61472 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61473 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 61475 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61477 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 61478 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 61479 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61480 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61481 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61482 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 61483 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61484 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61485 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61487 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61491 root      20   0  188200  11084   5148 S   0.0  0.5   0:00.02 /usr/loca+
 61498 root      20   0  113284   1480   1256 S   0.0  0.1   0:00.00 bash /usr+
 61502 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61503 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 61510 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 61546 root      20   0  160224   2352   1636 S   0.0  0.1   0:00.00 top -n 2 +
 61560 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 61582 root      20   0  113284    224      0 R   0.0  0.0   0:00.00 bash /usr+
 92578 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      92578  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kworker/u200:1]
root      34611  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/0:0]
root      46027  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:2]
root      46045  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:4]
root      49707  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/0:3]
root      50313  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:0]
root      54339  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/1:1]
root      55327  0.0  0.0      0     0 ?        S    01:13   0:00  \_ [kworker/0:4]
root      55615  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:3]
root      59350  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/1:0]
root      59715  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:1]
root      60167  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/0:2]
root      60169  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/0:5]
root      60833  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44396  3488 ?        Ss   Nov06   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  5580 ?        Ss   Nov06   0:13 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   500 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Ss   Nov06   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   476 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4556 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:05 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   172 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 861368  1288 ?        Ssl  Nov06   0:05 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1144 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      58952  0.0  0.0 183048  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      58961  0.0  1.0 178152 26296 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      59007  0.0  0.6 158872 15292 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      59016  0.0  1.4 195364 34708 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      59029  0.0  0.7  76784 17024 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      61426  0.0  0.0 183048  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61477  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      61498  0.0  0.0 113284  1480 ?        S    01:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      61582  0.0  0.0 113284   604 ?        S    01:30   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      61428  0.0  0.0 183048  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61452  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      61453  0.0  0.0 108052   356 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      61455  0.0  0.0 113288  1520 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      61583  0.0  0.0 153840  2092 ?        R    01:30   0:00  |               \_ ps auxf
root      61429  0.0  0.0 183048  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61470  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      61430  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61483  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      61432  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61480  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      61433  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61475  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      61434  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61485  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      61435  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61479  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      61436  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61487  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      61437  0.0  0.0 183048  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61471  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      61438  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61484  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      61439  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61472  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      61440  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61481  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      61442  0.0  0.0 183048  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61473  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      61491  0.0  0.4 188200 11084 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      61546  0.0  0.0 160224  2352 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root      61443  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61478  0.0  0.0  20164   968 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [61503] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61503  0.0  0.0  20164   264 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61510  0.0  0.7 476724 17484 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      61445  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61482  0.0  0.0  20164   964 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [61502] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61502  0.0  0.0  20164   260 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61522  0.0  0.6 400652 15936 ?        R    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    52 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3876 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2772 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  2992 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47048  2196 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47672  3248 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2120 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13400 ?        Ssl  Nov06   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:03 /usr/sbin/sshd -D
root      61295  0.0  0.1 111304  4260 ?        Ss   01:29   0:00  \_ sshd: [accepted]
sshd      61296  0.0  0.1 115644  2624 ?        S    01:29   0:00  |   \_ sshd: [net]
root      61379  0.0  0.1 111304  4268 ?        Ss   01:29   0:00  \_ sshd: [accepted]
sshd      61386  0.0  0.1 115644  2632 ?        S    01:29   0:00      \_ sshd: [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 35848 ?       SLsl Nov06   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.7 858120 43236 ?        Ssl  Nov06   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.6 397344 14944 ?        Ss   Nov06   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  61307 13.5  3.0 461848 74480 ?        R    01:29   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   61378  3.5  0.9 408544 22228 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  61395 14.0  2.6 451096 63736 ?        S    01:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  61404  7.5  1.7 428568 41148 ?        S    01:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        970  0.0  0.9 436392 24184 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.2 290128  6076 ?        Ssl  Nov06   0:06 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 11980 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7576 ?        Ss   Nov06   0:07 cpsrvd (SSL) - waiting for connections                   
root      61422  0.0  0.0      0     0 ?        Z    01:30   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10528  3456 ?        Ss   Nov06   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10616 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  7.6 1763064 184724 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 10900 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13260 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35692 ?        Ss   Nov06   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116580 ?       Ss   Nov06   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.2 262088 127808 ?       S    Nov06   0:02  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4192 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  0.2 183900  6692 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.5 209916 12916 ?        Ss   Nov06   0:02 tailwatchd
root       1684  0.0  0.0 130416  1400 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.1 10.3 1458584 251428 ?      Sl   Nov06   8:32 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30732 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12836  1380 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12872  1392 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11840 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    52680  0.0  1.5 277896 36540 ?        S    01:05   0:01  \_ /usr/sbin/httpd -k start
nobody    52997  0.0  1.4 277888 36092 ?        S    01:06   0:01  \_ /usr/sbin/httpd -k start
nobody    53056  0.0  1.5 277888 36340 ?        S    01:06   0:01  \_ /usr/sbin/httpd -k start
nobody    54550  0.0  1.4 277888 36232 ?        S    01:10   0:01  \_ /usr/sbin/httpd -k start
nobody    55544  0.0  1.4 277876 35912 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    56395  0.0  1.4 277572 35464 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    57588  0.0  1.4 277572 35660 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    57589  0.0  1.4 277896 35660 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    57590  0.0  1.4 277568 35640 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    57596  0.0  1.4 277880 35752 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    59803  0.1  1.4 277568 35328 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    60555  0.0  1.4 277744 35140 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody    60702  0.1  1.4 277884 35284 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
root      61584  0.0  0.0   6516   412 ?        S    01:30   0:00      \_ /usr/sbin/suexec 1029 1031 ea-php72
root       2038  0.0  0.0 299272   560 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181360 29328 ?        Ss   00:00   0:05 lfd - sleeping
root      50725  0.0  0.4 1276100 10520 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      50761  0.0  0.4 1277312 11700 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 24027  Threads: 3  Questions: 3943504  Slow queries: 0  Opens: 6798  Flush tables: 1  Open tables: 2000  Queries per second avg: 164.128
*************************** 1. row ***************************
     Id: 57562
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 57564
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 57571
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 116.179.32.67 TIME_WAIT
      1 148.113.130.244 TIME_WAIT
      1 15.235.27.106 TIME_WAIT
      1 162.243.162.146 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 195.172.118.209 TIME_WAIT
      1 ::1 TIME_WAIT
      1 220.181.108.84 TIME_WAIT
      1 45.131.216.221 TIME_WAIT
      1 52.167.144.157 TIME_WAIT
      1 66.29.141.145 TIME_WAIT
      1 88.216.102.66 TIME_WAIT
      1 91.208.184.168 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     76 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 01:30:02 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 6 hours 40 minutes 20 seconds
   Server load: 0.64 0.79 1.20
   Total accesses: 73623 - Total Traffic: 885.9 MB - Total Duration: 34086016
   CPU Usage: u7.14 s2.99 cu368.49 cs206.23 - 2.43% CPU load
   3.07 requests/sec - 37.8 kB/second - 12.3 kB/request - 462.981 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

RC_RCR__WWK.....C._.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-1  54550 0/363/5640 R 3.09 1     1   2397236 0.0  4.22  68.65 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   1-1  59803 1/77/5581  C 0.98 1     207 2484481 18.4 1.35  62.26 116.179.32.175  http/1.1 nigeriadecide.org:80       GET /blog/ HTTP/1.1
   2-1  57588 0/159/5574 _ 1.92 0     0   2382132 0.0  9.82  72.70 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-1  56395 0/187/4911 R 1.53 96    274 2156343 0.0  1.68  52.83 103.248.25.138  http/1.1 health.oyostate.gov.ng:443
   4-1  55544 1/251/4899 C 2.27 0     3   2205310 8.7  2.71  55.99 220.181.108.112 http/1.1 nigeriadecide.org:443      GET /2019_Nigeria_general_elections_voters_education.php HTTP/1
   5-1  60555 0/23/4670  R 0.10 1     10  1974180 0.0  0.20  56.87 157.230.45.41   http/1.1
   6-1  52680 0/501/4600 _ 4.06 0     0   2029573 0.0  4.41  53.35 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   7-1  57589 0/169/4607 _ 0.93 0     0   1964585 0.0  1.74  57.12 116.179.32.67   http/1.1 nigeriadecide.org:80       GET /2019_Nigeria_general_elections_voters_education.php HTTP/1
   8-1  52997 0/528/4107 W 2.36 0     0   1863121 0.0  5.73  50.12 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   9-1  60702 0/40/4264  W 0.64 0     0   1906790 0.0  0.46  51.93 66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=3798095408 HTTP/1.1
   10-1 57590 2/170/3307 K 1.73 3     262 1611745 65.9 2.26  42.70 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=2162538924 HTTP/1.1
   11-1 -     0/0/3243   . 0.00 277   0   1660084 0.0  0.00  47.98 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-1 -     0/0/3312   . 0.00 618   0   1458424 0.0  0.00  49.77 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 -     0/0/1501   . 0.00 627   0   844775  0.0  0.00  19.87 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1 -     0/0/1924   . 0.00 628   0   1022072 0.0  0.00  20.78 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/1719   . 0.00 598   0   1090554 0.0  0.00  17.46 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 57596 1/165/2175 C 1.17 0     510 1066137 5.7  1.70  22.51 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-1 -     0/0/1181   . 0.00 892   0   761124  0.0  0.00  12.60 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 53056 0/382/925  _ 3.49 0     346 623804  0.0  3.41  9.78  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   19-0 -     0/0/48     . 0.00 6493  0   31753   0.0  0.00  0.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/542    . 0.00 6502  0   256184  0.0  0.00  5.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/717    . 0.00 6500  0   355802  0.0  0.00  10.38 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1023   . 0.00 4128  0   475279  0.0  0.00  13.16 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/258    . 0.00 6141  0   140369  0.0  0.00  3.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/174    . 0.00 6495  0   87052   0.0  0.00  1.77  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/331    . 0.00 5916  0   117833  0.0  0.00  3.49  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/282    . 0.00 10538 0   128233  0.0  0.00  3.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/490    . 0.00 9631  0   227604  0.0  0.00  3.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179    . 0.00 10526 0   92180   0.0  0.00  1.94  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/156    . 0.00 11025 0   83779   0.0  0.00  1.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00 11704 0   56      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00 10536 0   132085  0.0  0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00 11690 0   1509    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 11711 0   1381    0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00 11693 0   53900   0.0  0.00  1.65  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 11702 0   1494    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00 11049 0   68720   0.0  0.00  1.46  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00 11715 0   157495  0.0  0.00  3.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 11712 4   712     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00 11705 0   1369    0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00 11228 0   43685   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00 11714 0   0       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 11684 0   735     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 11701 0   54      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00 10717 0   124261  0.0  0.00  2.80  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 540
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 16 seconds, (range: 1...93)
   index usage: 9%, cache usage: 12%
   total entries stored since starting: 5670
   total entries replaced since starting: 0
   total entries expired since starting: 5126
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 6 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit