403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.02.00.txt
 ## swap threshold exceeded
## server overview
2025-11-07.02.00 load[0] mem[63/66] mysql[3/11] httpd[5]
              total        used        free      shared  buff/cache   available
Mem:           2363        1435          73          89         855         667
Swap:          1999        1387         612
 02:00:01 up  7:10,  0 users,  load average: 0.55, 0.69, 0.80
## system overview
top - 02:00:02 up  7:10,  0 users,  load average: 0.55, 0.69, 0.80
Tasks: 228 total,   9 running, 217 sleeping,   0 stopped,   2 zombie
%Cpu(s): 73.5 us, 26.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78612 free,  1486996 used,   854692 buff/cache
KiB Swap:  2047996 total,   627708 free,  1420288 used.   665512 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1759 mysql     20   0 1458584 252664   3220 S 106.2 10.4   9:13.54 /usr/sbin+
 72404 root      20   0  220852  27392   3860 R  37.5  1.1   0:00.14 /usr/loca+
 67822 nobody    20   0  277560  35520   4328 S   6.2  1.5   0:00.57 /usr/sbin+
 72526 root      20   0  160224   2376   1636 S   6.2  0.1   0:00.01 top -n 2 +
 72578 cloudw    20   0  284780  16592  10308 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44396   3488   1540 S   0.0  0.1   0:36.42 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.35 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:31.87 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.82 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.30 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:01.88 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.10 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.31 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   2800   2500 S   0.0  0.1   0:14.21 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    500    372 S   0.0  0.0   0:02.39 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 R   0.0  0.1   0:13.20 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.03 /sbin/rpc+
   515 root      20   0   52852    436    328 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4556   1188 S   0.0  0.2   0:00.33 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:03.38 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:05.82 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.60 /usr/sbin+
   526 root      20   0  152780    180    136 S   0.0  0.0   0:00.02 /usr/sbin+
   532 nscd      20   0  861368   1292    692 S   0.0  0.1   0:05.67 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.72 /usr/sbin+
   569 root      20   0   24208     52     28 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3860    824 S   0.0  0.2   0:00.35 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.30 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13376   2548 S   0.0  0.6   0:05.91 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.55 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:03.57 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  36016   5852 S   0.0  1.5   0:14.07 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.24 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.56 pure-ftpd+
   963 named     20   0  858120  44040   2352 S   0.0  1.8   0:14.50 /usr/sbin+
   965 root      20   0  397344  14944   9688 S   0.0  0.6   0:06.14 php-fpm: +
   970 root      20   0  436392  24184  16684 S   0.0  1.0   0:00.80 php-fpm: +
   983 root      20   0  298320   3720   2584 S   0.0  0.2   0:07.28 /usr/sbin+
   992 root      20   0  392856  12044   6452 S   0.0  0.5   0:00.70 php-fpm: +
   994 root      20   0  261552   7532   1712 S   0.0  0.3   0:07.81 cpsrvd (S+
   995 cpanelc+  20   0   10528   3456   2296 S   0.0  0.1   0:20.34 /usr/loca+
   999 root      20   0  386112  10668   6044 S   0.0  0.4   0:00.71 php-fpm: +
  1000 root      20   0 1763064 153880    640 S   0.0  6.4   0:14.01 /usr/loca+
  1009 root      20   0  385496  11076   6012 S   0.0  0.5   0:00.97 php-fpm: +
  1075 dovenull  20   0   47064   2772   1944 S   0.0  0.1   0:00.50 dovecot/p+
  1076 dovenull  20   0   47472   3248   2060 S   0.0  0.1   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.05 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.31 dovecot/l+
  1079 dovenull  20   0   47048   2424   1664 S   0.0  0.1   0:00.38 dovecot/p+
  1080 dovenull  20   0   47672   3240   1904 S   0.0  0.1   0:00.35 dovecot/i+
  1087 root      20   0   24528   2120    372 S   0.0  0.1   0:00.16 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.05 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.12 SonarPush+
  1150 wp-tool+  20   0  387556  13260   1620 S   0.0  0.5   0:00.27 /usr/bin/+
  1151 wp-tool+  20   0  410480  35688   1740 S   0.0  1.5   0:21.26 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.46 dovecot/a+
  1182 root      20   0  248280 116580    800 S   0.0  4.8   0:05.88 /usr/loca+
  1235 root      20   0  167452   4208   2836 S   0.0  0.2   0:00.49 dnsadmin +
  1238 root      20   0  262224  24620   6760 S   0.0  1.0   0:01.33 cpdavd - +
  1239 root      20   0  209916  11768   2528 S   0.0  0.5   0:02.14 tailwatchd
  1684 root      38  18  130416   1400    716 S   0.0  0.1   0:00.07 cpanellog+
  1953 root      20   0  266984  30712   5536 S   0.0  1.3   0:01.53 /usr/sbin+
  2038 root      20   0  299272    560    392 S   0.0  0.0   0:00.72 php-fpm: +
  5242 root      20   0  262088 127808   2640 S   0.0  5.3   0:02.67 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.47 [kworker]
 28586 root      20   0  181464  29448   2220 S   0.0  1.2   0:06.66 lfd - sle+
 45429 root      20   0   12820   1388   1180 S   0.0  0.1   0:00.35 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.30 /usr/loca+
 45431 root      20   0   12844   1396   1180 S   0.0  0.1   0:00.33 /usr/loca+
 45432 root      20   0   53252  11840   2460 S   0.0  0.5   0:00.05 /usr/loca+
 50184 root      20   0  183048   2112   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1144    964 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 50313 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 50725 root      20   0 1349832  10532    604 S   0.0  0.4   0:00.09 /usr/bin/+
 50761 root      20   0 1277312  11700    600 S   0.0  0.5   0:00.07 /usr/bin/+
 54339 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 55327 root      20   0       0      0      0 D   0.0  0.0   0:00.14 [kworker/+
 57589 nobody    20   0  277896  36288   4740 S   0.0  1.5   0:01.92 /usr/sbin+
 57590 nobody    20   0  277568  36172   4924 S   0.0  1.5   0:01.86 /usr/sbin+
 57596 nobody    20   0  277880  36448   4868 S   0.0  1.5   0:02.12 /usr/sbin+
 59715 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 60555 nobody    20   0  277680  36156   4732 S   0.0  1.5   0:01.59 /usr/sbin+
 63724 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 64719 nobody    20   0  277892  35872   4500 S   0.0  1.5   0:01.09 /usr/sbin+
 66144 nobody    20   0  277540  35456   4284 S   0.0  1.5   0:01.07 /usr/sbin+
 66417 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67806 nobody    20   0  277876  35652   4292 S   0.0  1.5   0:00.78 /usr/sbin+
 69339 nobody    20   0  277752  35732   4360 S   0.0  1.5   0:00.55 /usr/sbin+
 69656 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69673 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 70376 nobody    20   0  277896  35308   3976 S   0.0  1.5   0:00.16 /usr/sbin+
 71022 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71497 nobody    20   0  277504  35052   3924 S   0.0  1.4   0:00.13 /usr/sbin+
 71683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71860 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 72059 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 72101 healtho+  20   0  459288  72108   4212 S   0.0  3.0   0:04.93 php-fpm: +
 72112 healtho+  20   0  460476  75020   4688 S   0.0  3.1   0:03.83 php-fpm: +
 72115 healtho+  20   0  459288  72112   4216 S   0.0  3.0   0:03.69 php-fpm: +
 72156 nigeria   20   0  397064   8212   2436 S   0.0  0.3   0:00.00 php-fpm: +
 72179 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 72180 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 72358 cloudw    20   0  405100  18024   3432 S   0.0  0.7   0:00.05 php-fpm: +
 72361 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72362 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72363 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72364 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72366 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72368 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72370 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72371 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72372 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72373 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72374 root      20   0  183044   2204   1632 S   0.0  0.1   0:00.00 /usr/sbin+
 72375 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72376 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72377 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72378 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72380 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72381 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72382 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72384 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72385 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 72386 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72389 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72390 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72397 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 72398 root      20   0 1276700  14312    596 S   0.0  0.6   0:00.05 /usr/bin/+
 72401 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 72402 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 72403 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 72405 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 72406 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 72407 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 72409 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72413 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72414 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72415 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 72416 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72417 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72418 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72419 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72422 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 72423 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72424 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 72426 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72428 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 72429 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72430 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
 72432 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 72435 root      20   0  113284   1464   1256 R   0.0  0.1   0:00.00 bash /usr+
 72438 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 72439 root      20   0 1276700  14564    560 S   0.0  0.6   0:00.05 /usr/bin/+
 72440 root      20   0  188204  11080   5148 S   0.0  0.5   0:00.01 /usr/loca+
 72444 root      20   0 1277356  11540    596 S   0.0  0.5   0:00.05 /usr/bin/+
 72452 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 72463 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 72466 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 72473 nigeria   20   0  400652  15936  10220 R   0.0  0.7   0:00.03 /opt/cpan+
 72495 locatio+  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 72528 locatio+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 72530 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 72538 locatio+  20   0  400848  16684  10532 R   0.0  0.7   0:00.02 /opt/cpan+
 72574 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 72581 root      35  15  113288    196      0 R   0.0  0.0   0:00.00 /bin/bash+
 72583 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 72584 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [bash] <d+
 72585 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 72586 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 92578 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov06   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      92578  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kworker/u200:1]
root      50313  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:0]
root      54339  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/1:1]
root      55327  0.0  0.0      0     0 ?        R    01:13   0:00  \_ [kworker/0:4]
root      59715  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:1]
root      63724  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:4]
root      66417  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/0:2]
root      67248  0.0  0.0      0     0 ?        S    01:46   0:00  \_ [kworker/1:0]
root      69656  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:3]
root      69673  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:2]
root      71022  0.0  0.0      0     0 ?        S    01:56   0:00  \_ [kworker/1:3]
root      71683  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44396  3488 ?        Ss   Nov06   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  40244  2800 ?        Ss   Nov06   0:14 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   500 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Rs   Nov06   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   436 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4556 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:05 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   180 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 861368  1292 ?        Ssl  Nov06   0:05 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1144 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      72361  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72397  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      72398  5.0  0.5 1276700 14312 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      72362  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72402  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      72444  5.0  0.4 1277356 11540 ?       Sl   02:00   0:00  |       \_ /usr/bin/update_imunify
root      72363  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72422  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      72439  5.0  0.6 1276700 14564 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      72364  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72403  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      72430  0.0  0.0 113288  1432 ?        SN   02:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      72581  0.0  0.0 113284  1200 ?        RN   02:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      72588  0.0  0.0 113284   184 ?        RN   02:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      72589  0.0  0.0 113284   184 ?        RN   02:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      72366  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72401  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      72435  0.0  0.0 114252  2240 ?        S    02:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      72368  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72405  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      72432  0.0  0.0 108052   356 ?        S    02:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      72438  0.0  0.0 113288  1516 ?        S    02:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      72590  0.0  0.0 153840  2092 ?        R    02:00   0:00  |               \_ ps auxf
root      72370  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72423  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      72371  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72417  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      72372  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72409  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      72373  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72419  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      72375  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72413  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      72376  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72407  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [72583] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  72583  0.0  0.0      0     0 ?        D    02:00   0:00  |       \_ [jailshell]
root      72377  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72429  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      72378  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72414  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      72380  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72416  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      72381  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72426  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      72382  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72418  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      72384  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72415  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      72440  1.0  0.4 188204 11080 ?        S    02:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      72526  1.0  0.0 160224  2376 ?        S    02:00   0:00  |           \_ top -n 2 -b -c
root      72385  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72404 15.0  1.2 228448 30760 ?        Rs   02:00   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/backup
root      72386  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72406  0.0  0.0  20164   968 ?        Ss   02:00   0:00  |   \_ jailshell (pactpay) [72452] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72452  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72463  2.0  0.7 476724 17480 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      72389  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72424  0.0  0.0  20164   964 ?        Ss   02:00   0:00  |   \_ jailshell (nigeria) [72466] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72466  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72473  4.0  0.6 400652 15936 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      72390  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      72428  0.0  0.0  20164   964 ?        Ss   02:00   0:00      \_ jailshell (locationforms) [72495]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  72495  0.0  0.0  20164   256 ?        S    02:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  72528  0.0  0.0 113284  1212 ?        S    02:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  72538  2.0  0.7 400848 17212 ?        S    02:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        569  0.0  0.0  24208    52 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3860 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2772 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  3248 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.1  47048  2424 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47672  3240 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2120 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
root      71860  0.0  0.1  41052  2724 ?        S    01:58   0:00  \_ dovecot/auth -w
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13376 ?        Ssl  Nov06   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:03 /usr/sbin/sshd -D
root      72059  0.0  0.1 111304  4268 ?        Ss   01:59   0:00  \_ sshd: [accepted]
root      72179  0.0  0.1 111304  4440 ?        Ss   01:59   0:00  \_ sshd: [accepted]
sshd      72180  0.0  0.1 115644  2628 ?        S    01:59   0:00      \_ sshd: [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 35824 ?       SLsl Nov06   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.8 858120 44040 ?        Ssl  Nov06   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.6 397344 14944 ?        Ss   Nov06   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  72101 16.4  2.9 459288 72108 ?        S    01:59   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  72112 14.8  3.0 460476 75020 ?        R    01:59   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  72115 14.7  2.9 459288 72112 ?        S    01:59   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   72156  0.0  0.3 397064  8212 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    72358  5.0  0.7 405100 18024 ?        S    02:00   0:00  \_ php-fpm: pool cloudware_ng
root        970  0.0  0.9 436392 24184 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.1 298320  3720 ?        Ssl  Nov06   0:07 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 12044 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7532 ?        Ss   Nov06   0:07 cpsrvd (SSL) - waiting for connections                   
root      72530  0.0  0.0      0     0 ?        Z    02:00   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10528  3456 ?        Ss   Nov06   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10668 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  6.3 1763064 153880 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 11076 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13260 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35688 ?        Ss   Nov06   0:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116580 ?       Ss   Nov06   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.2 262088 127808 ?       S    Nov06   0:02  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4208 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  1.0 262224 24620 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.4 209916 11768 ?        Ss   Nov06   0:02 tailwatchd
root       1684  0.0  0.0 130416  1400 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.1 10.4 1458584 252664 ?      Sl   Nov06   9:13 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30712 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12820  1388 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12844  1396 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11840 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    57589  0.0  1.4 277896 36288 ?        S    01:19   0:01  \_ /usr/sbin/httpd -k start
nobody    57590  0.0  1.4 277568 36172 ?        S    01:19   0:01  \_ /usr/sbin/httpd -k start
nobody    57596  0.0  1.5 277880 36448 ?        S    01:19   0:02  \_ /usr/sbin/httpd -k start
nobody    60555  0.0  1.4 277680 36156 ?        S    01:27   0:01  \_ /usr/sbin/httpd -k start
nobody    64719  0.0  1.4 277892 35872 ?        S    01:39   0:01  \_ /usr/sbin/httpd -k start
nobody    66144  0.1  1.4 277540 35456 ?        S    01:43   0:01  \_ /usr/sbin/httpd -k start
nobody    67806  0.1  1.4 277876 35652 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    67822  0.0  1.4 277560 35520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
cloudw    72578  0.0  0.6 350316 16616 ?        S    02:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    69339  0.1  1.4 277752 35732 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody    70376  0.0  1.4 277896 35308 ?        S    01:54   0:00  \_ /usr/sbin/httpd -k start
nobody    71497  0.0  1.4 277504 35052 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   560 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181464 29448 ?        Ss   00:00   0:06 lfd - sleeping
root      50725  0.0  0.4 1349832 10532 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      50761  0.0  0.4 1277312 11700 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 25827  Threads: 5  Questions: 4256291  Slow queries: 0  Opens: 7346  Flush tables: 1  Open tables: 2000  Queries per second avg: 164.800
*************************** 1. row ***************************
     Id: 62345
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 62347
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 62355
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 62356
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 62359
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.142.8 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 142.44.233.163 TIME_WAIT
      1 166.0.254.145 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.93.209.23 TIME_WAIT
      1 213.180.203.29 TIME_WAIT
      1 51.161.37.38 TIME_WAIT
      1 54.39.203.128 TIME_WAIT
      1 54.80.185.200 TIME_WAIT
      1 91.208.184.168 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 185.200.240.65 TIME_WAIT
     77 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 02:00:02 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 10 minutes 20 seconds
   Server load: 0.55 0.69 0.80
   Total accesses: 79826 - Total Traffic: 961.6 MB - Total Duration: 36664943
   CPU Usage: u9.54 s3.84 cu411.67 cs228.81 - 2.53% CPU load
   3.09 requests/sec - 38.1 kB/second - 12.3 kB/request - 459.311 ms/request
   5 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

..W_W_WK_K_.._.._...............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                        Request
   0-1  -     0/0/5969   . 0.00  106   0   2516371 0.0  0.00  71.83 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-1  -     0/0/6055   . 0.00  141   0   2652471 0.0  0.00  67.93 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-1  64719 0/421/6134 W 2.46  0     0   2617522 0.0  3.74  77.62 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-1  70376 0/54/5299  _ 0.28  0     0   2339848 0.0  0.51  59.26 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-1  66144 0/406/5431 W 4.37  0     0   2397962 0.0  3.07  60.62 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-1  60555 0/509/5156 _ 4.84  0     1   2182379 0.0  6.03  62.70 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   6-1  67806 0/198/4990 W 6.31  0     0   2196457 0.0  3.14  58.98 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-1  57589 2/630/5068 K 5.68  3     273 2155358 67.6 7.18  62.55 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=425986525 HTTP/1.1
   8-1  71497 0/41/4429  _ 0.19  0     266 2004098 0.0  0.47  54.29 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=1715201808 HTTP/1.1
   9-1  67822 1/197/4588 K 1.75  0     481 2058955 36.2 2.47  55.85 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3473014459 HTTP/1.1
   10-1 57590 0/587/3724 _ 4.90  0     1   1796991 0.0  7.04  47.49 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   11-1 -     0/0/3509   . 0.00  475   0   1778841 0.0  0.00  51.06 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-1 -     0/0/3562   . 0.00  428   0   1561665 0.0  0.00  52.56 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 69339 0/138/1749 _ 1.74  1     54  974321  0.0  2.09  25.78 185.200.240.65 http/1.1 cloudware.ng:443           POST /xmlrpc.php HTTP/1.1
   14-1 -     0/0/1927   . 0.00  1309  4   1022665 0.0  0.00  20.79 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/1902   . 0.00  628   0   1161707 0.0  0.00  19.31 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 57596 0/726/2736 _ 12.29 0     0   1276196 0.0  9.07  29.89 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   17-1 -     0/0/1184   . 0.00  1305  0   761744  0.0  0.00  12.61 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 -     0/0/931    . 0.00  1775  0   625850  0.0  0.00  9.86  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/48     . 0.00  8292  0   31753   0.0  0.00  0.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/542    . 0.00  8301  0   256184  0.0  0.00  5.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/717    . 0.00  8299  0   355802  0.0  0.00  10.38 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1023   . 0.00  5928  0   475279  0.0  0.00  13.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/258    . 0.00  7941  0   140369  0.0  0.00  3.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/174    . 0.00  8294  0   87052   0.0  0.00  1.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/331    . 0.00  7715  0   117833  0.0  0.00  3.49  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/282    . 0.00  12338 0   128233  0.0  0.00  3.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/490    . 0.00  11431 0   227604  0.0  0.00  3.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179    . 0.00  12326 0   92180   0.0  0.00  1.94  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/156    . 0.00  12825 0   83779   0.0  0.00  1.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00  13504 0   56      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00  12336 0   132085  0.0  0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00  13490 0   1509    0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00  13511 0   1381    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00  13493 0   53900   0.0  0.00  1.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00  13502 0   1494    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00  12849 0   68720   0.0  0.00  1.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00  13515 0   157495  0.0  0.00  3.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00  13512 4   712     0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00  13505 0   1369    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00  13028 0   43685   0.0  0.00  1.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00  13514 0   0       0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00  13484 0   735     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00  13501 0   54      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00  12516 0   124261  0.0  0.00  2.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 484
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...36)
   index usage: 8%, cache usage: 11%
   total entries stored since starting: 8541
   total entries replaced since starting: 0
   total entries expired since starting: 8051
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 22 miss
   total removes since starting: 6 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit