403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.03.42.txt
 ## swap threshold exceeded
## server overview
2025-11-07.03.42 load[0] mem[56/71] mysql[2/11] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1230         104          99        1028         850
Swap:          1999        1460         539
 03:42:01 up  8:52,  0 users,  load average: 0.94, 0.87, 0.82
## system overview
top - 03:42:01 up  8:52,  0 users,  load average: 0.94, 0.87, 0.82
Tasks: 218 total,   7 running, 210 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.8 us, 24.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    76640 free,  1290616 used,  1053044 buff/cache
KiB Swap:  2047996 total,   552056 free,  1495940 used.   840160 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 15755 healtho+  20   0  461848  73956   4216 R  56.2  3.1   0:04.09 php-fpm: +
 15732 healtho+  20   0  460392  73728   4308 R  31.2  3.0   0:04.68 php-fpm: +
  1759 mysql     20   0 1458584 255544   3388 R  18.8 10.6  11:43.09 /usr/sbin+
 15885 pactpay   20   0  476460  15968  10408 S  12.5  0.7   0:00.02 /opt/cpan+
 15887 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.02 /opt/cpan+
 15889 cloudsms  20   0  400652  15404  10000 S   6.2  0.6   0:00.01 /opt/cpan+
 15899 saboakin  20   0  400652  15404  10000 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44396   3516   1564 S   0.0  0.1   0:44.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.98 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.30 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:39.11 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.58 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.34 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.67 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:02.13 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.45 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.68 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   6748   6448 S   0.0  0.3   0:17.84 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    512    384 S   0.0  0.0   0:03.02 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1488    740 S   0.0  0.1   0:16.55 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.04 /sbin/rpc+
   515 root      20   0   52852    316    208 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4384   1016 S   0.0  0.2   0:00.40 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:04.23 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:07.25 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.73 /usr/sbin+
   526 root      20   0  152780    180    136 S   0.0  0.0   0:00.02 /usr/sbin+
   532 nscd      20   0  926904   1332    712 S   0.0  0.1   0:07.53 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.89 /usr/sbin+
   569 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   614 nobody    20   0  277884  36348   4868 S   0.0  1.5   0:02.17 /usr/sbin+
   616 mailnull  20   0   89116   3956    916 S   0.0  0.2   0:00.42 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.92 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.37 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13408   2508 S   0.0  0.6   0:07.28 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.70 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:04.53 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  36284   5948 S   0.0  1.5   0:17.37 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.75 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.68 pure-ftpd+
   963 named     20   0  858120  45580   2336 S   0.0  1.9   0:18.47 /usr/sbin+
   965 root      20   0  397344  13304   8048 S   0.0  0.5   0:07.84 php-fpm: +
   970 root      20   0  436392  24068  16608 S   0.0  1.0   0:00.96 php-fpm: +
   983 root      20   0  314704   7600   6320 S   0.0  0.3   0:09.19 /usr/sbin+
   992 root      20   0  392856  10980   5388 S   0.0  0.5   0:00.83 php-fpm: +
   994 root      20   0  261552   7580   1744 S   0.0  0.3   0:08.42 cpsrvd (S+
   995 cpanelc+  20   0   10572   3616   2324 S   0.0  0.1   0:25.11 /usr/loca+
   999 root      20   0  386112  10648   6064 S   0.0  0.4   0:00.86 php-fpm: +
  1000 root      20   0 1763064  83628   1284 S   0.0  3.5   0:14.07 /usr/loca+
  1009 root      20   0  385496  11132   6068 S   0.0  0.5   0:01.11 php-fpm: +
  1075 dovenull  20   0   47064   2736   1908 S   0.0  0.1   0:00.62 dovecot/p+
  1076 dovenull  20   0   47580   3376   2124 S   0.0  0.1   0:00.30 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.07 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.38 dovecot/l+
  1079 dovenull  20   0   47048   2160   1400 S   0.0  0.1   0:00.47 dovecot/p+
  1080 dovenull  20   0   47960   3424   2008 S   0.0  0.1   0:00.42 dovecot/i+
  1087 root      20   0   24528   2324    540 S   0.0  0.1   0:00.19 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.07 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.15 SonarPush+
  1150 wp-tool+  20   0  387556  13260   1620 S   0.0  0.5   0:00.32 /usr/bin/+
  1151 wp-tool+  20   0  410480  35812   1820 S   0.0  1.5   0:26.27 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.59 dovecot/a+
  1182 root      20   0  248280 116576    796 S   0.0  4.8   0:06.60 /usr/loca+
  1235 root      20   0  167452   4156   2784 S   0.0  0.2   0:00.57 dnsadmin +
  1238 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.20 cpdavd - +
  1239 root      20   0  209916  11520   2288 S   0.0  0.5   0:02.58 tailwatchd
  1436 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  1684 root      38  18  130416   1396    716 S   0.0  0.1   0:00.08 cpanellog+
  1830 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  1953 root      20   0  266984  30416   5340 S   0.0  1.3   0:01.87 /usr/sbin+
  2038 root      20   0  299272    560    392 S   0.0  0.0   0:00.89 php-fpm: +
  2235 nobody    20   0  277620  36108   4940 S   0.0  1.5   0:01.89 /usr/sbin+
  4801 nobody    20   0  277896  36052   4736 S   0.0  1.5   0:01.52 /usr/sbin+
  5242 root      20   0  266248 132952   3524 S   0.0  5.5   0:03.78 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  5375 worencom  20   0   38468   4000   3048 S   0.0  0.2   0:00.01 dovecot/i+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.58 [kworker]
  7158 nobody    20   0  277540  35820   4668 S   0.0  1.5   0:01.29 /usr/sbin+
  7422 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  9564 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 10588 nobody    20   0  277744  35692   4372 S   0.0  1.5   0:00.72 /usr/sbin+
 11102 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 11786 nobody    20   0  277744  35736   4408 S   0.0  1.5   0:00.57 /usr/sbin+
 12488 nobody    20   0  277568  35332   4220 S   0.0  1.5   0:00.35 /usr/sbin+
 12957 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 13022 nobody    20   0  277752  35584   4312 S   0.0  1.5   0:00.23 /usr/sbin+
 13334 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13761 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 14325 nobody    20   0  277488  35200   4168 S   0.0  1.5   0:00.22 /usr/sbin+
 14330 nobody    20   0  277880  35444   4208 S   0.0  1.5   0:00.17 /usr/sbin+
 14340 nobody    20   0  277492  35112   4072 S   0.0  1.5   0:00.24 /usr/sbin+
 14342 nobody    20   0  277876  35216   3992 S   0.0  1.5   0:00.15 /usr/sbin+
 14635 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15266 nobody    20   0  277884  34936   3700 S   0.0  1.4   0:00.09 /usr/sbin+
 15614 nobody    20   0  277876  34928   3776 S   0.0  1.4   0:00.04 /usr/sbin+
 15658 nigeria   20   0  397064   8212   2436 S   0.0  0.3   0:00.01 php-fpm: +
 15731 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 15784 nobody    20   0  277324  34336   3604 S   0.0  1.4   0:00.00 /usr/sbin+
 15797 nobody    20   0  277184  33728   3096 S   0.0  1.4   0:00.00 /usr/sbin+
 15799 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 15800 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 15803 root      30  10  113284   1484   1276 S   0.0  0.1   0:00.00 /bin/bash+
 15809 root      30  10  132964   4548   1012 S   0.0  0.2   0:00.00 ConfigSer+
 15820 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 115+
 15824 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15825 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15826 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15827 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15828 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15829 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15830 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15831 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15832 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15833 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15834 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15835 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15836 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 15837 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 15838 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15839 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 15840 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 15841 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 15842 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 15863 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 15864 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15865 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 15866 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 15867 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15868 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15869 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15870 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15871 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15872 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15873 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15874 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 15875 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 15876 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15877 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 15882 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 15883 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 15884 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 15886 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 15888 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 15891 root      30  10  113284    208      0 R   0.0  0.0   0:00.00 /bin/bash+
 15894 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 15896 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 15897 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 15898 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 15900 robocal+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 15901 cloudsms  20   0  131852   3316   2384 R   0.0  0.1   0:00.00 /usr/loca+
 15902 robocal+  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 15903 robocal+  20   0  131852   3320   2384 R   0.0  0.1   0:00.00 /usr/loca+
 28586 root      20   0  182176  30188   2212 S   0.0  1.2   0:12.70 lfd - sle+
 45429 root      20   0   12828   1388   1180 S   0.0  0.1   0:00.86 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.74 /usr/loca+
 45431 root      20   0   12860   1404   1180 S   0.0  0.1   0:00.81 /usr/loca+
 45432 root      20   0   53252  11720   2380 S   0.0  0.5   0:00.05 /usr/loca+
 50184 root      20   0  183048   2104   1544 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1104    924 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 99597 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
100079 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
100944 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
101064 root      20   0 1415368  10688    600 S   0.0  0.4   0:00.07 /usr/bin/+
101101 root      20   0 1277312  11588    596 S   0.0  0.5   0:00.07 /usr/bin/+
101363 root      20   0  123576    732    504 S   0.0  0.0   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:39  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      99597  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:1]
root     100079  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/1:2]
root     100944  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root       1436  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/u200:2]
root       1830  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/1:5]
root       7422  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:4]
root       9564  0.0  0.0      0     0 ?        S    03:26   0:00  \_ [kworker/0:0]
root      11102  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/0:3]
root      12957  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:0]
root      13334  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/1:1]
root      13761  0.0  0.0      0     0 ?        S    03:37   0:00  \_ [kworker/0:2]
root      14635  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1  44396  3516 ?        Ss   Nov06   0:44 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  6748 ?        Ss   Nov06   0:17 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   512 ?        S<sl Nov06   0:03 /sbin/auditd
dbus        490  0.0  0.0  58752  1488 ?        Ss   Nov06   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   316 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4384 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:07 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   180 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 926904  1332 ?        Ssl  Nov06   0:07 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2104 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1104 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      15824  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15840  0.0  0.0 113284  1212 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      15841  0.0  0.0 108052   360 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      15842  0.0  0.0 113288  1516 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      15904  0.0  0.0 153840  2092 ?        R    03:42   0:00  |               \_ ps auxf
root      15825  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15876  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      15826  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15871  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      15827  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15872  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      15828  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15873  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      15829  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15867  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      15830  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15875  0.0  0.0  20164   964 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [15886] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  15886  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  15888  0.0  0.0 113284  1212 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  15889  0.0  0.6 400652 15404 ?        R    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      15831  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15868  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      15832  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15870  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      15833  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15866  0.0  0.0  20164   960 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [15896] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  15896  0.0  0.0  20164   256 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  15898  0.0  0.0 113284  1212 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  15901  0.0  0.4 396988 11948 ?        R    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      15834  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15869  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      15835  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15864  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      15836  0.0  0.0 183048  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15877  0.0  0.0  20164   964 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [15883] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   15883  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   15885  0.0  0.6 476460 16056 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      15837  0.0  0.0 183048  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15863  0.0  0.0  20164   968 ?        Ss   03:42   0:00  |   \_ jailshell (robocallscloudsm) [15900]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  15900  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (robocallscloudsm) [init] d /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  15902  0.0  0.0 113284  1208 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  15903  0.0  0.4 396784 11652 ?        R    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php artisan schedule:run
root      15838  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15874  0.0  0.0  20164   968 ?        Ss   03:42   0:00  |   \_ jailshell (nigeria) [15884] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   15884  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   15887  0.0  0.6 400652 15936 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      15839  0.0  0.0 183048  2152 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      15865  0.0  0.0  20164   968 ?        Ss   03:42   0:00      \_ jailshell (saboakin) [15897] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  15897  0.0  0.0  20164   260 ?        S    03:42   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  15899  0.0  0.6 400652 15404 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        569  0.0  0.0  24208    24 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3956 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2736 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47580  3376 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47048  2160 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47960  3424 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2324 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
worencom   5375  0.0  0.1  38468  4000 ?        S    03:15   0:00  \_ dovecot/imap
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13408 ?        Ssl  Nov06   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:04 /usr/sbin/sshd -D
root      15731  0.0  0.1 111304  4260 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root      15799  0.0  0.1 111304  4440 ?        Ss   03:41   0:00  \_ sshd: [accepted]
sshd      15800  0.0  0.1 115644  2628 ?        S    03:41   0:00      \_ sshd: [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 36284 ?       SLsl Nov06   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.8 858120 45580 ?        Ssl  Nov06   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.5 397344 13304 ?        Ss   Nov06   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   15658  0.0  0.3 397064  8212 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  15732 20.3  3.0 460392 73728 ?        R    03:41   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  15755 24.1  3.0 461848 74220 ?        R    03:41   0:04  \_ php-fpm: pool health_oyostate_gov_ng
root        970  0.0  0.9 436392 24068 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.3 314704  7600 ?        Ssl  Nov06   0:09 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 10980 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7580 ?        Ss   Nov06   0:08 cpsrvd (SSL) - waiting for connections                   
root      15894  0.0  0.0      0     0 ?        Z    03:42   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10572  3616 ?        Ss   Nov06   0:25 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10648 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  3.4 1763064 83628 ?       Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 11132 ?        Ss   Nov06   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13260 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35812 ?        Ss   Nov06   0:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116576 ?       Ss   Nov06   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.4 266248 132952 ?       S    Nov06   0:03  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4156 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  0.2 183900  6692 ?        Ss   Nov06   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209916 11520 ?        Ss   Nov06   0:02 tailwatchd
root       1684  0.0  0.0 130416  1396 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.2 10.5 1458584 255544 ?      Sl   Nov06  11:43 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30416 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12828  1388 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12860  1404 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11720 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody      614  0.0  1.5 277884 36348 ?        S    03:04   0:02  \_ /usr/sbin/httpd -k start
nobody     2235  0.0  1.4 277620 36108 ?        S    03:08   0:01  \_ /usr/sbin/httpd -k start
nobody     4801  0.0  1.4 277896 36052 ?        S    03:14   0:01  \_ /usr/sbin/httpd -k start
nobody     7158  0.0  1.4 277540 35820 ?        S    03:20   0:01  \_ /usr/sbin/httpd -k start
nobody    10588  0.0  1.4 277744 35692 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody    11786  0.0  1.4 277744 35736 ?        S    03:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12488  0.0  1.4 277568 35332 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    13022  0.0  1.4 277752 35584 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    14325  0.1  1.4 277488 35200 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    14330  0.0  1.4 277880 35444 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    14340  0.1  1.4 277492 35112 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    14342  0.0  1.4 277876 35216 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    15266  0.0  1.4 277884 34936 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody    15614  0.0  1.4 277876 34928 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    15784  0.0  1.4 277324 34336 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    15797  0.0  1.3 277184 33728 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   560 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 182176 30188 ?        Ss   00:00   0:12 lfd - sleeping
root     101064  0.0  0.4 1415368 10688 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root     101101  0.0  0.4 1277312 11588 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root     101363  0.0  0.0 123576   732 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      15803  0.0  0.0 113284  1484 ?        SN   03:42   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      15905  0.0  0.0 113284   208 ?        RN   03:42   0:00      \_ /bin/bash /bin/run-parts /etc/cron.daily
root      15809  0.0  0.1 132964  4548 ?        SN   03:42   0:00 ConfigServer Version Check
root      15820  0.0  0.0 108056   356 ?        SN   03:42   0:00  \_ sleep 11573
## mysql stats
Uptime: 31946  Threads: 8  Questions: 5422148  Slow queries: 0  Opens: 9160  Flush tables: 1  Open tables: 2000  Queries per second avg: 169.728
*************************** 1. row ***************************
     Id: 78895
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 78898
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 78899
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 78900
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 78902
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 6. row ***************************
     Id: 78904
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 78907
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 142.44.220.105 TIME_WAIT
      1 15.235.98.111 TIME_WAIT
      1 185.180.141.67 TIME_WAIT
      1 185.180.141.69 TIME_WAIT
      1 185.180.141.70 TIME_WAIT
      1 ::1 TIME_WAIT
      1 217.182.195.126 TIME_WAIT
      1 43.173.174.81 TIME_WAIT
      1 43.173.175.175 TIME_WAIT
      1 43.173.177.213 TIME_WAIT
      1 43.173.178.68 TIME_WAIT
      1 43.173.180.177 TIME_WAIT
      1 43.173.181.153 TIME_WAIT
      1 43.173.182.208 TIME_WAIT
      1 51.222.168.205 TIME_WAIT
      1 66.249.70.33 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.180.141.68 TIME_WAIT
     76 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 03:42:02 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 8 hours 52 minutes 19 seconds
   Server load: 0.94 0.87 0.82
   Total accesses: 102229 - Total Traffic: 1.2 GB - Total Duration: 48077652
   CPU Usage: u7.56 s3.96 cu583.39 cs310.44 - 2.83% CPU load
   3.2 requests/sec - 39.2 kB/second - 12.2 kB/request - 470.294 ms/request
   7 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

K___KR_CW__W_...K._._...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-1  10588 1/274/7486 K 1.78 3     340 3248012 34.7 3.84  91.02 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=351290043 HTTP/1.1
   1-1  4801  0/445/7296 _ 6.36 0     6   3265777 0.0  6.38  84.69 102.89.85.181   http/1.1 cloudsms.com.ng:443        GET /images/skype.png HTTP/1.1
   2-1  614   0/674/7764 _ 8.24 0     1   3363469 0.0  7.55  93.80 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   3-1  2235  0/624/7050 _ 5.92 0     4   3064601 0.0  7.68  78.05 102.89.85.181   http/1.1 cloudsms.com.ng:443        GET /images/facebook.png HTTP/1.1
   4-1  11786 6/180/6788 K 2.89 2     25  3127181 44.3 1.58  75.18 217.182.195.126 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   5-1  14325 0/136/6505 R 0.95 88    284 2798348 0.0  0.73  75.13 103.118.16.85   http/1.1 health.oyostate.gov.ng:443
   6-1  7158  0/443/6371 _ 4.37 0     1   2867251 0.0  5.02  73.42 102.89.85.181   http/1.1 cloudsms.com.ng:443        GET /images/cloudsms.png HTTP/1.1
   7-1  15266 1/30/6667  C 0.18 0     509 2794809 5.7  0.28  78.14 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   8-1  14330 0/54/5610  W 0.48 0     0   2645656 0.0  0.61  66.22 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-1  15614 0/15/5841  _ 0.10 0     7   2730275 0.0  0.12  71.85 102.89.85.181   http/1.1 cloudsms.com.ng:443        GET /images/wordpress.png HTTP/1.1
   10-1 15784 0/4/5186   _ 0.00 0     0   2590110 0.0  0.04  64.40 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-1 15797 0/1/4110   W 0.00 0     0   2131766 0.0  0.01  56.78 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-1 12488 0/105/4186 _ 0.92 0     1   1903483 0.0  1.33  59.17 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   13-1 -     0/0/2500   . 0.00 118   0   1359213 0.0  0.00  32.77 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1 -     0/0/2595   . 0.00 144   0   1418020 0.0  0.00  43.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/2515   . 0.00 204   0   1459513 0.0  0.00  25.17 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 13022 2/84/3277  K 0.51 1     274 1664136 66.5 0.91  35.49 66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=3861752676 HTTP/1.1
   17-1 -     0/0/1448   . 0.00 201   0   995927  0.0  0.00  14.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 14340 0/146/1388 _ 0.45 0     10  870339  0.0  0.55  20.88 102.89.85.181   http/1.1 cloudsms.com.ng:443        GET /images/google.png HTTP/1.1
   19-1 -     0/0/173    . 0.00 198   0   161579  0.0  0.00  1.28  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-1 14342 0/52/1195  _ 0.39 0     10  632042  0.0  0.61  11.74 102.89.85.181   http/1.1 cloudsms.com.ng:443        GET /images/msg.png HTTP/1.1
   21-1 -     0/0/937    . 0.00 4242  0   516242  0.0  0.00  12.17 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-1 -     0/0/1049   . 0.00 4596  0   501502  0.0  0.00  13.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-1 -     0/0/393    . 0.00 4216  0   198868  0.0  0.00  4.56  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 -     0/0/436    . 0.00 4007  0   228232  0.0  0.00  3.54  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1 -     0/0/367    . 0.00 4609  0   132533  0.0  0.00  4.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-1 -     0/0/905    . 0.00 2458  0   386647  0.0  0.00  10.40 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1 -     0/0/513    . 0.00 4618  0   237087  0.0  0.00  3.99  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1 -     0/0/208    . 0.00 4615  0   104363  0.0  0.00  2.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-1 -     0/0/175    . 0.00 4631  0   89634   0.0  0.00  1.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 -     0/0/15     . 0.00 4619  0   3618    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00 18456 0   132085  0.0  0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00 19609 0   1509    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 19630 0   1381    0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00 19612 0   53900   0.0  0.00  1.65  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 19621 0   1494    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00 18969 0   68720   0.0  0.00  1.46  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00 19634 0   157495  0.0  0.00  3.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 19631 4   712     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00 19624 0   1369    0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00 19148 0   43685   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00 19633 0   0       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 19603 0   735     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 19620 0   54      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00 18636 0   124261  0.0  0.00  2.80  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 881
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 3...89)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 20137
   total entries replaced since starting: 0
   total entries expired since starting: 19246
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 3 hit, 59 miss
   total removes since starting: 10 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit