403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.01.00.txt
 ## mem threshold exceeded
## server overview
2025-11-10.01.00 load[0] mem[82/23] mysql[2/7] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1915          86          17         361         275
Swap:          1999         515        1484
 01:00:01 up 6 min,  0 users,  load average: 0.53, 0.94, 0.57
## system overview
top - 01:00:02 up 6 min,  0 users,  load average: 0.53, 0.94, 0.57
Tasks: 226 total,  12 running, 213 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.0 us, 22.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.8 si,  0.0 st
KiB Mem :  2420300 total,    70120 free,  1974140 used,   376040 buff/cache
KiB Swap:  2047996 total,  1520560 free,   527436 used.   269488 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  5545 healtho+  20   0  459936  69580   4212 R  64.7  2.9   0:02.89 php-fpm: +
  1851 mysql     20   0 1458076 183284   3612 S  58.8  7.6   0:04.98 /usr/sbin+
  5916 nigeria   20   0  400652  15940  10220 S  11.8  0.7   0:00.04 /opt/cpan+
   970 cpanelc+  20   0    9568   2480   2236 R   5.9  0.1   0:00.27 /usr/loca+
  2136 nobody    20   0  277512  31548   3624 S   5.9  1.3   0:00.36 /usr/sbin+
  5854 root      20   0 1342892  12064    600 S   5.9  0.5   0:00.06 /usr/bin/+
  5966 locatio+  20   0  403272  19616  11036 R   5.9  0.8   0:00.05 /opt/cpan+
  6040 cloudw    20   0  350316  16620  10324 S   5.9  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44264   3232   1412 S   0.0  0.1   0:01.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:00.42 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:02.91 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kauditd]
   227 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.33 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
   357 root      20   0   39496   3264   2956 S   0.0  0.1   0:00.27 /usr/lib/+
   385 root      20   0   45352    264    116 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    124     12 S   0.0  0.0   0:00.03 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   479 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   481 polkitd   20   0  612240    836    496 S   0.0  0.0   0:00.05 /usr/lib/+
   482 dbus      20   0   58712   1400    648 S   0.0  0.1   0:00.23 /usr/bin/+
   494 rpc       20   0   69256    180      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    112    108 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    388    280 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0  224268   5504    804 S   0.0  0.2   0:00.08 queueproc+
   533 root      20   0  152780      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1464    828 S   0.0  0.1   0:00.10 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     64     60 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1216    612 S   0.0  0.1   0:00.15 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    488    320 S   0.0  0.0   0:00.01 /usr/sbin+
   583 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     44     44 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90692   3288    352 S   0.0  0.1   0:00.02 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:00.08 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  38472   5460 S   0.0  1.6   0:00.34 /usr/loca+
   941 root      20   0   51508    496    336 S   0.0  0.0   0:00.03 /usr/sbin+
   942 root      20   0  153404    320    236 S   0.0  0.0   0:00.01 pure-ftpd+
   943 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    428    324 S   0.0  0.0   0:00.03 /usr/sbin+
   945 systuser  20   0   13012     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   946 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.00 /usr/loca+
   949 root      20   0 1689380   1.0g      0 S   0.0 45.2   0:13.72 /usr/loca+
   950 root      20   0  436392  11456  11252 S   0.0  0.5   0:00.12 php-fpm: +
   952 named     20   0  719808  21480   1612 S   0.0  0.9   0:00.53 /usr/sbin+
   960 root      20   0  392856    576    404 S   0.0  0.0   0:00.08 php-fpm: +
   961 root      20   0  216400   2764   2292 S   0.0  0.1   0:00.13 /usr/sbin+
   962 root      20   0  397344   3212    640 S   0.0  0.1   0:00.20 php-fpm: +
   965 root      20   0  261152   3536    808 S   0.0  0.1   0:00.19 cpsrvd (S+
   967 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.00 /usr/bin/+
   982 root      20   0  385496    180     88 S   0.0  0.0   0:00.07 php-fpm: +
   985 root      20   0  386112    268    184 S   0.0  0.0   0:00.07 php-fpm: +
   986 systuser  20   0  113272     76      0 S   0.0  0.0   0:00.00 /usr/loca+
   992 systuser  20   0  114016  12292   2580 S   0.0  0.5   0:00.12 /usr/loca+
   993 root      20   0  572372    768    292 S   0.0  0.0   0:00.13 /usr/bin/+
  1085 dovenull  20   0   46912   1092    480 S   0.0  0.0   0:00.01 dovecot/p+
  1086 dovenull  20   0   47056   1052    344 S   0.0  0.0   0:00.00 dovecot/i+
  1087 dovecot   20   0   10320    308    200 S   0.0  0.0   0:00.00 dovecot/a+
  1088 root      20   0   10452    396    232 S   0.0  0.0   0:00.00 dovecot/l+
  1089 dovenull  20   0   46772    948    680 S   0.0  0.0   0:00.00 dovecot/p+
  1090 dovenull  20   0   46780    148    100 S   0.0  0.0   0:00.00 dovecot/i+
  1095 root      20   0   24396   1868    416 S   0.0  0.1   0:00.01 dovecot/c+
  1097 dovecot   20   0   13568    624    436 S   0.0  0.0   0:00.00 dovecot/s+
  1144 dovecot   20   0   41056    776    536 S   0.0  0.0   0:00.00 dovecot/a+
  1168 root      20   0   25760    568      0 S   0.0  0.0   0:01.46 spamd-dor+
  1181 systuser  20   0  157704   2076     32 S   0.0  0.1   0:00.01 SonarPush+
  1219 wp-tool+  20   0  410452  34528   1084 S   0.0  1.4   0:00.51 /usr/bin/+
  1220 wp-tool+  20   0  387528  12016   1360 S   0.0  0.5   0:00.08 /usr/bin/+
  1249 root      20   0  208792   9268   1108 S   0.0  0.4   0:00.23 tailwatchd
  1252 root      20   0  183900     80     80 S   0.0  0.0   0:00.08 cpdavd - +
  1253 root      20   0  167452    896    444 S   0.0  0.0   0:00.05 dnsadmin +
  1749 root      20   0  299272    304    156 S   0.0  0.0   0:00.00 php-fpm: +
  1799 root      38  18  130416    768     68 S   0.0  0.0   0:00.00 cpanellog+
  1947 root      20   0  266988  22428    596 S   0.0  0.9   0:00.09 /usr/sbin+
  1949 root      20   0   12804    300     40 S   0.0  0.0   0:00.02 /usr/loca+
  1950 root      20   0   12732    188      0 S   0.0  0.0   0:00.02 /usr/loca+
  1951 root      20   0   12828    328     44 S   0.0  0.0   0:00.02 /usr/loca+
  1978 root      20   0   53252   9492    100 S   0.0  0.4   0:00.04 /usr/loca+
  1979 nobody    20   0  277940  31728   3584 S   0.0  1.3   0:00.41 /usr/sbin+
  1980 nobody    20   0  277808  31648   3516 S   0.0  1.3   0:00.46 /usr/sbin+
  1981 nobody    20   0  277940  31736   3604 S   0.0  1.3   0:00.40 /usr/sbin+
  1982 nobody    20   0  277944  31696   3556 S   0.0  1.3   0:00.41 /usr/sbin+
  1983 nobody    20   0  277964  31736   3572 S   0.0  1.3   0:00.60 /usr/sbin+
  2095 root      20   0  180936  28012   1216 S   0.0  1.2   0:00.44 lfd - sle+
  2468 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2471 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2609 root      20   0 1415624  10392     68 S   0.0  0.4   0:00.06 /usr/bin/+
  2650 root      20   0 1416324  13784     68 S   0.0  0.6   0:00.06 /usr/bin/+
  2685 nobody    20   0  277940  31656   3484 S   0.0  1.3   0:00.39 /usr/sbin+
  2783 root      20   0  215812  15020      0 S   0.0  0.6   0:00.00 /usr/bin/+
  3164 nobody    20   0  277932  31676   3504 S   0.0  1.3   0:00.39 /usr/sbin+
  3975 nobody    20   0  277600  31592   3576 S   0.0  1.3   0:00.37 /usr/sbin+
  4123 nobody    20   0  277884  31760   3636 S   0.0  1.3   0:00.26 /usr/sbin+
  4328 nobody    20   0  277892  31724   3592 S   0.0  1.3   0:00.19 /usr/sbin+
  4574 nobody    20   0  277748  31700   3564 S   0.0  1.3   0:00.20 /usr/sbin+
  4614 mailnull  20   0   91236   4564   1416 S   0.0  0.2   0:00.00 /usr/sbin+
  5269 nobody    20   0  277884  31736   3628 S   0.0  1.3   0:00.11 /usr/sbin+
  5573 nigeria   20   0  397064   5768   2400 S   0.0  0.2   0:00.00 php-fpm: +
  5709 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  5789 mailnull  20   0   90988   4280   1236 S   0.0  0.2   0:00.00 /usr/sbin+
  5790 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
  5791 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  5795 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5796 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5797 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5798 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5800 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5801 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5805 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5806 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5807 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5809 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5810 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5811 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5812 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5814 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5815 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5816 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5817 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5819 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5820 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5821 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5824 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5825 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5826 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5831 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 /usr/loca+
  5832 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  5833 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  5834 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  5835 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  5836 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5838 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  5839 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  5840 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  5844 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5847 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  5848 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5849 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  5850 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  5851 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  5853 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  5855 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5856 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5857 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
  5858 root      20   0   20164   1220    956 S   0.0  0.1   0:00.00 jailshell+
  5861 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
  5862 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
  5863 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5864 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
  5866 root      20   0 1276060  10956    596 S   0.0  0.5   0:00.05 /usr/bin/+
  5867 root      20   0  108056    356    284 S   0.0  0.0   0:00.00 sleep 5h +
  5868 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
  5869 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  5870 root      20   0 1414816  10576    600 R   0.0  0.4   0:00.05 /usr/bin/+
  5874 root      20   0  188196  11076   5148 S   0.0  0.5   0:00.02 /usr/loca+
  5883 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  5903 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5905 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5907 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5920 saboakin  20   0  400652  15412  10000 S   0.0  0.6   0:00.01 /opt/cpan+
  5921 pactpay   20   0  476724  17112  11408 S   0.0  0.7   0:00.01 /opt/cpan+
  5923 oysipao+  20   0    3152    628    208 S   0.0  0.0   0:00.00 [kworker]
  5926 locatio+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  5942 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  5946 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  5947 cloudsms  20   0  400652  15140   9844 S   0.0  0.6   0:00.02 /opt/cpan+
  5954 locatio+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  5983 root      20   0  160224   2400   1636 S   0.0  0.1   0:00.01 top -n 2 +
  6028 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  6032 root      35  15  127648   2236   1788 R   0.0  0.1   0:00.00 /usr/loca+
  6044 root      20   0   38648   6504   3040 R   0.0  0.3   0:00.00 /usr/loca+
  6046 root      20   0  113284    216      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:1]
root         36  0.8  0.0      0     0 ?        S    00:54   0:02  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        227  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:2]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        479  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:3]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2468  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/0:3]
root       2471  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/0:4]
root          1  0.3  0.1  44264  3232 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39496  3264 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   264 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   124 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   836 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58712  1400 ?        Ss   00:54   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256   180 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   112 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   388 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224268  5504 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780     0 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1464 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    64 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1216 ?        Ssl  00:54   0:00 /usr/sbin/nscd
root        562  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   488 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5795  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5840  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root       5866  5.0  0.4 1276060 11192 ?       Sl   01:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root       5796  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5839  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root       5854  6.0  0.5 1342892 12308 ?       Sl   01:00   0:00  |       \_ /usr/bin/update_imunify
root       5797  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5853  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root       5870  7.0  0.6 1415968 15436 ?       Sl   01:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root       5798  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5835  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root       5864  0.0  0.0 113288  1432 ?        SN   01:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root       6032  0.0  0.1 127648  2764 ?        RN   01:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root       5800  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056   356 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root       5801  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5847  0.0  0.0 113284  1208 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root       5868  0.0  0.0 113284  1476 ?        S    01:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       6049  0.0  0.0 113284   600 ?        S    01:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       6051  0.0  0.0 113284   220 ?        R    01:00   0:00  |               \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       5805  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5851  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       5869  0.0  0.0 108052   356 ?        S    01:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       5883  0.0  0.0 113288  1516 ?        S    01:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       6048  0.0  0.0 153840  2092 ?        R    01:00   0:00  |               \_ ps auxf
root       5806  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5857  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       5807  0.0  0.0 183044  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5831  0.0  0.0  20164   992 ?        Ss   01:00   0:00  |   \_ jailshell (cloudsms) [6050] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms   6050  0.0  0.0  20164   440 ?        S    01:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       5809  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5848  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       5810  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5836  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       5811  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5856  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       5812  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5855  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       5814  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5832  0.0  0.0  20164   988 ?        Ss   01:00   0:00  |   \_ jailshell (cloudsms) [5942] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   5942  0.0  0.0  20164   256 ?        S    01:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   5946  0.0  0.0 113284  1212 ?        S    01:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   5947  2.0  0.6 400652 15140 ?        S    01:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root       5815  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5861  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       5816  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5844  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       5817  0.0  0.0 183044  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5863  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       5819  0.0  0.0 183044  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5862  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root       5820  0.0  0.0 183044  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5834  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       5874  2.0  0.4 188196 11076 ?        S    01:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       5983  1.0  0.0 160224  2400 ?        S    01:00   0:00  |           \_ top -n 2 -b -c
root       5821  0.0  0.0 183044  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5833  0.0  0.0  20164   968 ?        Ss   01:00   0:00  |   \_ jailshell (pactpay) [5905] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5905  0.0  0.0  20164   260 ?        S    01:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5921  1.0  0.7 476724 17112 ?        S    01:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       5824  0.0  0.0 183044  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5850  0.0  0.0  20164   972 ?        Ss   01:00   0:00  |   \_ jailshell (nigeria) [5907] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5907  0.0  0.0  20164   260 ?        S    01:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5916  5.0  0.6 400652 15940 ?        R    01:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       5825  0.0  0.0 183044  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5858  0.0  0.0  20164  1220 ?        Ss   01:00   0:00  |   \_ jailshell (locationforms) [5926] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+   5926  0.0  0.0  20164   264 ?        S    01:00   0:00  |       \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+   5954  0.0  0.0 113284  1212 ?        S    01:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+   5966  6.0  0.8 403272 20140 ?        S    01:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root       5826  0.0  0.0 183044  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5838  0.0  0.0  20164   968 ?        Ss   01:00   0:00      \_ jailshell (saboakin) [5903] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   5903  0.0  0.0  20164   260 ?        S    01:00   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   5920  1.0  0.6 400652 15412 ?        S    01:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        583  0.0  0.0 108296    68 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    44 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90692  3284 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   4614  0.0  0.1  91236  4564 ?        S    00:57   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   5789  0.0  0.1  90988  4280 ?        S    01:00   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.5 5654048 38460 ?       SLsl 00:54   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51508   496 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1085  0.0  0.0  46912  1092 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1086  0.0  0.0  47056  1052 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1087  0.0  0.0  10320   308 ?        S    00:54   0:00  \_ dovecot/anvil
root       1088  0.0  0.0  10452   396 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1089  0.0  0.0  46772   948 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1090  0.0  0.0  46780   148 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1095  0.0  0.0  24396  1868 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1097  0.0  0.0  13568   624 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1144  0.0  0.0  41056   776 ?        S    00:54   0:00  \_ dovecot/auth
root        942  0.0  0.0 153404   320 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    40 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   428 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root       5790  0.0  0.1 111304  4444 ?        Ss   01:00   0:00  \_ sshd: [accepted]
sshd       5791  0.0  0.1 115644  2628 ?        S    01:00   0:00      \_ sshd: [net]
systuser    945  0.0  0.0  13012    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    68 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  3.8 45.1 1689380 1093828 ?     Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.4 436392 11456 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.1  0.8 719808 21480 ?        Ssl  00:54   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   576 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.1 216400  2764 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  3212 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   5545 20.8  2.8 459936 69844 ?        R    00:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    5573  0.0  0.2 397064  5768 ?        S    00:59   0:00  \_ php-fpm: pool nigeriadecide_org
root        965  0.0  0.1 261152  3536 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root       5709  0.0  0.0      0     0 ?        Z    00:59   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1   9568  2480 ?        Ss   00:54   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   180 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   268 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    76 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.5 114016 12292 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   768 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.4  0.0  25760   568 ?        Ss   00:54   0:01 spamd-dormant: waiting for connections [5,6] --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5,6
systuser   1181  0.0  0.0 157704  2076 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.1  1.4 410452 34528 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.4 387528 12016 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.3 208792  9268 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  0.0 183900    80 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.0 167452   896 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   304 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416   768 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.4  7.5 1458076 183284 ?      Sl   00:54   0:05 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.9 266988 22428 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12804   296 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   188 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12828   328 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1978  0.0  0.3  53252  9492 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1979  0.1  1.3 277940 31728 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     1980  0.1  1.3 277808 31648 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     1981  0.1  1.3 277940 31736 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     1982  0.1  1.3 277944 31696 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     1983  0.1  1.3 277964 31736 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     2136  0.1  1.3 277512 31548 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
cloudw     6040  0.0  0.6 350316 16620 ?        S    01:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     2685  0.1  1.3 277940 31656 ?        S    00:55   0:00  \_ /usr/sbin/httpd -k start
nobody     3164  0.1  1.3 277932 31676 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     3975  0.1  1.3 277600 31592 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     4123  0.1  1.3 277884 31760 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     4328  0.1  1.3 277892 31724 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4574  0.1  1.3 277748 31700 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     5269  0.1  1.3 277884 31736 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.1  1.1 180936 28012 ?        Ss   00:54   0:00 lfd - sleeping
root       2609  0.0  0.4 1415624 10392 ?       Ssl  00:55   0:00 /usr/bin/cspdaemon
root       2650  0.0  0.5 1416324 13784 ?       Ssl  00:55   0:00 /usr/bin/checkstatus
root       2783  0.0  0.6 215812 15020 ?        S    00:55   0:00 /usr/bin/python3 -m kcarectl.__main__ --smart-update
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   628 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 348  Threads: 7  Questions: 30247  Slow queries: 0  Opens: 651  Flush tables: 1  Open tables: 638  Queries per second avg: 86.916
*************************** 1. row ***************************
     Id: 453
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 456
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 3. row ***************************
     Id: 458
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 459
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 460
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 462
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Query
   Time: 0
  State: query end
   Info: delete from pl61_sendprocess where id = 1
*************************** 7. row ***************************
     Id: 465
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.216 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.58 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 80.241.214.201 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 162.241.2.123 TIME_WAIT
      2 173.199.190.174 TIME_WAIT
      2 20.65.194.46 TIME_WAIT
     41 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 01:00:02 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 minutes 43 seconds
   Server load: 0.53 0.94 0.57
   Total accesses: 1475 - Total Traffic: 24.1 MB - Total Duration: 471069
   CPU Usage: u3.27 s1.36 cu7.94 cs5.39 - 5.24% CPU load
   4.3 requests/sec - 71.9 kB/second - 16.7 kB/request - 319.369 ms/request
   7 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

__K__WKWKCK__...................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID     Acc    M CPU  SS Req  Dur  Conn  Child Slot     Client      Protocol           VHost                                        Request
   0-0  1979 0/251/251 _ 0.98 0  0   34454 0.0   1.08  1.08 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  1980 0/166/166 _ 1.55 1  342 58093 0.0   1.61  1.61 157.20.32.131   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-0  1981 3/116/116 K 1.36 2  269 49674 95.4  1.22  1.22 66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=3613652781 HTTP/1.1
   3-0  1982 0/157/157 _ 1.49 0  19  35900 0.0   3.00  3.00 3.218.103.254   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/2019elections/blog/2019elec
   4-0  1983 0/225/225 _ 2.93 0  159 50962 0.0   1.56  1.56 217.113.194.227 http/1.1 team.cloudware.ng:80       GET /vendor/symfony/http-kernel/DependencyInjection/?C=N;O=D HT
   5-0  2136 1/128/128 W 1.18 0  0   37597 34.0  0.84  0.84 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=3821544995 HTTP/1.1
   6-0  2685 1/104/104 K 1.61 0  531 43668 33.3  8.94  8.94 66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=1360147096 HTTP/1.1
   7-0  3164 0/100/100 W 2.34 0  0   37100 0.0   1.33  1.33 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  3975 2/75/75   K 1.51 3  323 39464 66.6  1.43  1.43 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=2260583136 HTTP/1.1
   9-0  4123 1/53/53   C 1.02 0  655 24441 5.7   0.99  0.99 157.20.32.131   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-0 4328 5/43/43   K 0.61 1  398 24714 155.4 0.70  0.70 66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=2250553939 HTTP/1.1
   11-0 4574 0/40/40   _ 0.82 0  2   24335 0.0   0.91  0.91 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   12-0 5269 0/17/17   _ 0.47 0  270 10660 0.0   0.48  0.48 66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=3351048090 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 452
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 31 seconds, (range: 1...103)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 522
   total entries replaced since starting: 0
   total entries expired since starting: 70
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit