403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.04.00.txt
 ## swap threshold exceeded
## server overview
2025-11-10.04.00 load[0] mem[72/63] mysql[4/26] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1595          86          17         681         565
Swap:          1999        1507         492
 04:00:02 up  3:06,  0 users,  load average: 0.40, 0.53, 0.55
## system overview
top - 04:00:02 up  3:06,  0 users,  load average: 0.40, 0.53, 0.55
Tasks: 227 total,  11 running, 215 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    80156 free,  1630928 used,   709216 buff/cache
KiB Swap:  2047996 total,   504088 free,  1543908 used.   582212 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1466700 231972   4376 S  88.2  9.6   3:26.92 /usr/sbin+
  7873 healtho+  20   0  460532  70092   4420 R  35.3  2.9   0:02.76 php-fpm: +
  8269 nigeria   20   0  400652  15932  10216 R  11.8  0.7   0:00.08 /opt/cpan+
  8387 cloudw    20   0  350316  16620  10324 S  11.8  0.7   0:00.02 /opt/cpan+
  8293 locatio+  20   0  403272  20140  11068 S   5.9  0.8   0:00.03 /opt/cpan+
     1 root      20   0   44420   3300   1476 S   0.0  0.1   0:15.65 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.01 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:13.11 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.25 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.75 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.88 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:02.45 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.65 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:02.33 [kworker/+
   357 root      20   0   39500   4288   4044 S   0.0  0.2   0:06.07 /usr/lib/+
   385 root      20   0   45352     56     52 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    208    108 S   0.0  0.0   0:00.98 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    824    552 S   0.0  0.0   0:01.58 /usr/lib/+
   482 dbus      20   0   58716   1352    612 S   0.0  0.1   0:06.14 /usr/bin/+
   494 rpc       20   0   69256     36     32 S   0.0  0.0   0:00.02 /sbin/rpc+
   521 root      20   0   52852    332    248 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    348    264 S   0.0  0.0   0:00.24 /usr/sbin+
   528 root      20   0  224276   3144    860 S   0.0  0.1   0:00.23 queueproc+
   533 root      20   0  152780    112     68 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1160    792 S   0.0  0.0   0:02.67 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1228    644 S   0.0  0.1   0:05.66 /usr/sbin+
   562 root      20   0   24208     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    424    292 S   0.0  0.0   0:00.32 /usr/sbin+
   583 root      20   0  108296     40     36 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820    568    388 S   0.0  0.0   0:00.17 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:04.48 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  34444   5656 S   0.0  1.4   0:06.36 /usr/loca+
   941 root      20   0   51656    492    324 S   0.0  0.0   0:00.17 /usr/sbin+
   942 root      20   0  153404    264    180 S   0.0  0.0   0:00.24 pure-ftpd+
   943 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0  111304    372    268 S   0.0  0.0   0:01.36 /usr/sbin+
   945 systuser  20   0   13012      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1901856 445368    456 S   0.0 18.4   0:35.23 /usr/loca+
   950 root      20   0  436392    340    252 S   0.0  0.0   0:00.51 php-fpm: +
   952 named     20   0  718804  25064   1924 S   0.0  1.0   0:08.46 /usr/sbin+
   960 root      20   0  392856    448    364 S   0.0  0.0   0:00.45 php-fpm: +
   961 root      20   0  249168   3748   3324 S   0.0  0.2   0:03.02 /usr/sbin+
   962 root      20   0  397344   2548    612 S   0.0  0.1   0:02.25 php-fpm: +
   965 root      20   0  261416   6172   1664 S   0.0  0.3   0:02.49 cpsrvd (S+
   967 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.25 /usr/bin/+
   970 cpanelc+  20   0   10484   3472   2312 R   0.0  0.1   0:09.03 /usr/loca+
   982 root      20   0  385496    460    368 S   0.0  0.0   0:00.44 php-fpm: +
   985 root      20   0  386112    424    336 S   0.0  0.0   0:00.40 php-fpm: +
   986 systuser  20   0  113272     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 systuser  20   0  114016   9208   2852 S   0.0  0.4   0:02.72 /usr/loca+
   993 root      20   0  572372    748    276 S   0.0  0.0   0:01.06 /usr/bin/+
  1087 dovecot   20   0   10320    412    300 S   0.0  0.0   0:00.03 dovecot/a+
  1094 nobody    20   0  277792  19740   4424 S   0.0  0.8   0:00.79 /usr/sbin+
  1120 nobody    20   0  277720  19528   4592 S   0.0  0.8   0:00.80 /usr/sbin+
  1168 root      20   0  248160   2780    756 S   0.0  0.1   0:04.14 /usr/loca+
  1181 systuser  20   0  157704   2936    960 S   0.0  0.1   0:00.07 SonarPush+
  1219 wp-tool+  20   0  410452   9328   1160 S   0.0  0.4   0:09.44 /usr/bin/+
  1220 wp-tool+  20   0  387528   2544   1268 S   0.0  0.1   0:00.18 /usr/bin/+
  1249 root      20   0  209356   8240   1892 S   0.0  0.3   0:01.14 tailwatchd
  1252 root      20   0  262228  22428   4568 S   0.0  0.9   0:00.96 cpdavd - +
  1253 root      20   0  167452   1220    672 S   0.0  0.1   0:00.26 dnsadmin +
  1749 root      20   0  299272    508    344 S   0.0  0.0   0:00.29 php-fpm: +
  1799 root      38  18  130416   1364    704 S   0.0  0.1   0:00.03 cpanellog+
  1947 root      20   0  267112   5080    560 S   0.0  0.2   0:01.08 /usr/sbin+
  1998 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2095 root      20   0  182092   7872   1116 R   0.0  0.3   0:10.30 lfd - sle+
  3393 nobody    20   0  277988  18616   4148 S   0.0  0.8   0:00.54 /usr/sbin+
  4900 nobody    20   0  277996  18172   3996 S   0.0  0.8   0:00.34 /usr/sbin+
  5055 nobody    20   0  278004  18676   4280 S   0.0  0.8   0:00.27 /usr/sbin+
  5488 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5800 root      20   0  183048     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.25 [kworker]
  6471 root      20   0  265416  90596   2468 S   0.0  3.7   0:02.38 spamd chi+
  6472 root      20   0  248160   1352    444 S   0.0  0.1   0:00.00 spamd chi+
  6560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6597 nobody    20   0  277596  17716   3868 S   0.0  0.7   0:00.23 /usr/sbin+
  7702 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
  7878 healtho+  20   0  459956  71480   4392 S   0.0  3.0   0:02.45 php-fpm: +
  7912 healtho+  20   0  451292  61444   4296 S   0.0  2.5   0:01.00 php-fpm: +
  7934 nigeria   20   0  397064   5396   2368 S   0.0  0.2   0:00.00 php-fpm: +
  8137 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8141 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.02 sshd: roo+
  8142 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
  8155 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8156 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8157 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8159 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8162 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8165 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8167 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8168 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8169 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8170 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8171 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8172 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8173 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8174 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8175 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8176 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8178 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8179 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8182 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8183 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8193 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8194 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8195 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8201 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8202 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8203 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  8204 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8205 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8206 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8207 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8208 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8210 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  8211 root      20   0 1277356  11536    596 S   0.0  0.5   0:00.05 /usr/bin/+
  8213 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8214 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8215 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8216 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
  8217 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8219 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8220 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
  8221 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8224 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8232 root      20   0 1342236  14768    600 S   0.0  0.6   0:00.06 /usr/bin/+
  8233 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
  8234 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8235 root      20   0  188216  11100   5148 S   0.0  0.5   0:00.01 /usr/loca+
  8236 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
  8248 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  8257 pactpay   20   0  476724  17488  11728 S   0.0  0.7   0:00.01 /opt/cpan+
  8259 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  8270 locatio+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8282 locatio+  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  8301 root      20   0  160224   2392   1636 S   0.0  0.1   0:00.01 top -n 2 +
  8379 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  8388 root      35  15  113284   1356   1176 S   0.0  0.1   0:00.00 /bin/bash+
  8390 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8392 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  8394 root      35  15  113284    376    196 R   0.0  0.0   0:00.00 /bin/bash+
  8395 root      35  15  113284    380    200 R   0.0  0.0   0:00.00 /bin/bash+
  8396 root      35  15  113284    376    196 R   0.0  0.0   0:00.00 /bin/bash+
  8397 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
  8398 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
 22574 root      20   0   12772    328    220 S   0.0  0.0   0:00.86 /usr/loca+
 22575 root      20   0   12732    292    216 S   0.0  0.0   0:00.73 /usr/loca+
 22576 root      20   0   12788    340    224 S   0.0  0.0   0:00.79 /usr/loca+
 22578 dovenull  20   0   46912   1928   1428 S   0.0  0.1   0:00.13 dovecot/p+
 22579 dovenull  20   0   48028   2468   1636 S   0.0  0.1   0:00.12 dovecot/i+
 22580 root      20   0   10452    480    316 S   0.0  0.0   0:00.10 dovecot/l+
 22581 dovenull  20   0   46912    800    560 S   0.0  0.0   0:00.15 dovecot/p+
 22582 dovenull  20   0   47628   2524   1672 S   0.0  0.1   0:00.14 dovecot/i+
 22583 root      20   0   24528   1900    508 S   0.0  0.1   0:00.07 dovecot/c+
 22584 dovecot   20   0   13572    632    440 S   0.0  0.0   0:00.02 dovecot/s+
 22588 dovecot   20   0   41144   1428    984 S   0.0  0.1   0:00.22 dovecot/a+
 22589 root      20   0   53252     68     68 S   0.0  0.0   0:00.04 /usr/loca+
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 77282 root      20   0 1341636    584     44 S   0.0  0.0   0:00.09 /usr/bin/+
 77322 root      20   0 1277312   2248     44 S   0.0  0.1   0:00.07 /usr/bin/+
 84184 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 87079 nobody    20   0  277928  13856   4656 S   0.0  0.6   0:02.71 /usr/sbin+
 90988 worencom  20   0   38464   2384   1688 S   0.0  0.1   0:00.01 dovecot/i+
 91392 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 92409 root      30  10  132964     28     24 S   0.0  0.0   0:00.00 ConfigSer+
 92420 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 8028
 94261 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 95844 nobody    20   0  278000  20696   4876 S   0.0  0.9   0:01.74 /usr/sbin+
 95845 nobody    20   0  277772  20068   4956 S   0.0  0.8   0:01.59 /usr/sbin+
 95973 nobody    20   0  277916  20624   4716 S   0.0  0.9   0:01.71 /usr/sbin+
 95975 nobody    20   0  277848  20656   4892 S   0.0  0.9   0:01.90 /usr/sbin+
 96504 nobody    20   0  277748  20096   4848 S   0.0  0.8   0:01.44 /usr/sbin+
 98393 nobody    20   0  278008  20052   4712 S   0.0  0.8   0:01.82 /usr/sbin+
 98658 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 98696 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 98819 nobody    20   0  277792  20080   4764 S   0.0  0.8   0:01.61 /usr/sbin+
101229 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:54   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:04  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      84184  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/1:2]
root      91392  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:1]
root      94261  0.0  0.0      0     0 ?        S    03:32   0:00  \_ [kworker/0:0]
root      98658  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:3]
root      98696  0.0  0.0      0     0 ?        D    03:39   0:00  \_ [kworker/u200:1]
root     101229  0.0  0.0      0     0 ?        R    03:44   0:00  \_ [kworker/0:4]
root       1998  0.0  0.0      0     0 ?        S    03:49   0:00  \_ [kworker/1:0]
root       5488  0.0  0.0      0     0 ?        S    03:55   0:00  \_ [kworker/0:1]
root       6560  0.0  0.0      0     0 ?        D    03:57   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44420  3300 ?        Ss   00:54   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  4288 ?        Ss   00:54   0:06 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352    56 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   208 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   824 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58716  1352 ?        Ss   00:54   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256    36 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   332 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   348 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.1 224276  3144 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   112 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1160 ?        Rs   00:54   0:02 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    28 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1228 ?        Ssl  00:54   0:05 /usr/sbin/nscd
root        562  0.0  0.0  24208    32 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   424 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048    28 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root       8155  0.0  0.0 183048  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8193  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root       8211  5.0  0.4 1277356 11536 ?       Sl   04:00   0:00  |       \_ /usr/bin/update_imunify
root       8156  0.0  0.0 183048  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8213  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root       8232  6.0  0.6 1342236 14768 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root       8157  0.0  0.0 183048  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8217  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root       8236  0.0  0.0 113288  1428 ?        SN   04:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root       8388  0.0  0.0 113284  1356 ?        SN   04:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root       8394  0.0  0.0  13112   460 ?        RN   04:00   0:00  |               \_ lsmod
root       8395  0.0  0.0   8960   420 ?        RN   04:00   0:00  |               \_ grep -E -v ^Module
root       8396  0.0  0.0 113644   976 ?        SN   04:00   0:00  |               \_ awk {printf "%s ", $1}
root       8159  0.0  0.0 183048  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8219  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root       8233  0.0  0.0 113284  1476 ?        S    04:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       8407  0.0  0.0 113284   220 ?        R    04:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       8162  0.0  0.0 183048  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8205  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8224  0.0  0.0 108052   356 ?        S    04:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8234  0.0  0.0 113288  1520 ?        S    04:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8406  0.0  0.0 153840  2096 ?        R    04:00   0:00  |               \_ ps auxf
root       8165  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8204  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       8167  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8201  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8168  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8214  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       8169  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8194  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       8170  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8203  0.0  0.0  20164   984 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [8390] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   8390  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   8392  0.0  0.0 113284  1212 ?        S    04:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   8397  0.0  0.6 400652 15672 ?        R    04:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root       8171  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8208  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       8172  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8206  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       8173  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8215  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8174  0.0  0.0 183044  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8195  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       8175  0.0  0.0 183044  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8202  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8176  0.0  0.0 183044  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8207  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root       8178  0.0  0.0 183044  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8221  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       8235  1.0  0.4 188216 11100 ?        S    04:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       8301  0.0  0.0 160224  2392 ?        S    04:00   0:00  |           \_ top -n 2 -b -c
root       8179  0.0  0.0 183044  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8220  0.0  0.0  20164   960 ?        Ss   04:00   0:00  |   \_ jailshell (pactpay) [8248] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8248  0.0  0.0  20164   256 ?        S    04:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8257  0.0  0.7 476724 17488 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8182  0.0  0.0 183044  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       8216  0.0  0.0  20164   960 ?        Ss   04:00   0:00      \_ jailshell (nigeria) [8259] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8259  0.0  0.0  20164   256 ?        S    04:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8269  0.0  0.6 400652 15932 ?        S    04:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    40 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704     0 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.0  90820   568 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.4 5654048 34444 ?       SLsl 00:54   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656   492 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   412 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.0  46912  1928 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  48028  2468 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452   480 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.0  46912   800 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47628  2524 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.0  24528  1900 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572   632 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41144  1428 ?        S    01:28   0:00  \_ dovecot/auth
worencom  90988  0.0  0.0  38464  2384 ?        S    03:26   0:00  \_ dovecot/imap
root       7702  0.0  0.1  60820  4508 ?        S    03:59   0:00  \_ dovecot/lmtp
root        942  0.0  0.0 153404   264 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   372 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root       8141  1.0  0.2 162436  5836 ?        Ss   03:59   0:00  \_ sshd: root [priv]
sshd       8142  0.0  0.1 115644  2632 ?        S    03:59   0:00      \_ sshd: root [net]
systuser    945  0.0  0.0  13012     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.3 18.3 1901856 444208 ?      Ssl  00:54   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.0 436392   340 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.0 718804 25064 ?        Ssl  00:54   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   448 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.1 249168  3748 ?        Ssl  00:54   0:03 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  2548 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   7873 15.5  2.9 460532 70356 ?        R    03:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   7878 15.3  2.9 459956 71480 ?        S    03:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   7912  9.0  2.5 451292 61444 ?        S    03:59   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    7934  0.0  0.2 397064  5396 ?        S    03:59   0:00  \_ php-fpm: pool nigeriadecide_org
root        965  0.0  0.2 261416  6172 ?        Ss   00:54   0:02 cpsrvd (SSL) - waiting for connections                   
root       8137  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.0 445028     0 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3472 ?        Ss   00:54   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   460 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   424 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    56 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.3 114016  9208 ?        Ssl  00:54   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   748 ?        Ssl  00:54   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  0.1 248160  2780 ?        Ss   00:54   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  3.7 265416 90596 ?        S    01:00   0:02  \_ spamd child
root       6472  0.0  0.0 248160  1352 ?        S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2936 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  0.3 410452  9328 ?        Ss   00:54   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.1 387528  2544 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.3 209356  8240 ?        Ss   00:54   0:01 tailwatchd
root       1252  0.0  0.9 262228 22428 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1253  0.0  0.0 167452  1220 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   508 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1364 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8  9.5 1466700 232200 ?      Sl   00:54   3:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.2 267112  5080 ?        Ss   00:54   0:01 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12772   328 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732   292 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12788   340 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.0  53252    68 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    87079  0.1  0.5 277928 13856 ?        S    03:18   0:02  \_ /usr/sbin/httpd -k start
nobody    95844  0.1  0.8 278000 20696 ?        S    03:34   0:01  \_ /usr/sbin/httpd -k start
nobody    95845  0.1  0.8 277772 20068 ?        S    03:34   0:01  \_ /usr/sbin/httpd -k start
nobody    95973  0.1  0.8 277916 20624 ?        S    03:34   0:01  \_ /usr/sbin/httpd -k start
nobody    95975  0.1  0.8 277848 20656 ?        S    03:34   0:01  \_ /usr/sbin/httpd -k start
nobody    96504  0.0  0.8 277748 20096 ?        S    03:35   0:01  \_ /usr/sbin/httpd -k start
nobody    98393  0.1  0.8 278008 20052 ?        S    03:38   0:01  \_ /usr/sbin/httpd -k start
cloudw     8387  0.0  0.6 350316 16620 ?        S    04:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    98819  0.1  0.8 277792 20080 ?        S    03:39   0:01  \_ /usr/sbin/httpd -k start
nobody     1094  0.1  0.8 277792 19740 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody     1120  0.1  0.8 277720 19528 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody     3393  0.1  0.7 277988 18616 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody     4900  0.0  0.7 277996 18172 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody     5055  0.0  0.7 278004 18676 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody     6597  0.1  0.7 277596 17716 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.3 182092  7876 ?        Ss   00:54   0:10 lfd - sleeping
root       8400  0.0  0.5 182092 13836 ?        R    04:00   0:00  \_ lfd - (child) closing
root       8401  0.0  0.5 182092 12408 ?        R    04:00   0:00  \_ lfd - (child) closing
root       8402  0.0  0.3 182092  9584 ?        R    04:00   0:00  \_ lfd - (child) closing
root       8404  0.0  0.3 182092  9608 ?        R    04:00   0:00  \_ lfd - (child) closing
root       8405  0.0  0.3 182092  8816 ?        R    04:00   0:00  \_ lfd - (child) closing
oysipao+   5913  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152    36 ?        S    01:00   0:00  \_ [kworker]
root      77282  0.0  0.0 1341636  584 ?        Ssl  03:00   0:00 /usr/bin/cspdaemon
root      77322  0.0  0.0 1277312 2248 ?        Ssl  03:00   0:00 /usr/bin/checkstatus
root      92409  0.0  0.0 132964    28 ?        SN   03:29   0:00 ConfigServer Version Check
root      92420  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 8028
## mysql stats
Uptime: 11148  Threads: 4  Questions: 1331138  Slow queries: 0  Opens: 6298  Flush tables: 1  Open tables: 2000  Queries per second avg: 119.405
*************************** 1. row ***************************
     Id: 20817
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 20822
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 20823
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 20831
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.149.43 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 31.13.115.114 TIME_WAIT
      1 31.13.115.1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.16.39.16 TIME_WAIT
      2 45.43.33.218 TIME_WAIT
      2 95.142.47.113 TIME_WAIT
      3 104.248.90.230 TIME_WAIT
     37 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 04:00:03 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 3 hours 5 minutes 44 seconds
   Server load: 0.40 0.53 0.55
   Total accesses: 46103 - Total Traffic: 913.8 MB - Total Duration: 21575451
   CPU Usage: u13.35 s5.22 cu466.33 cs326.81 - 7.28% CPU load
   4.14 requests/sec - 84.0 kB/second - 20.3 kB/request - 467.984 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KK_K_W.W.__.........WK_..K._....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-2  4900  2/106/2880  K 1.10  3    309 1171400 65.1  6.77  50.79 66.249.70.36  http/1.1 support.cloudware.ng:443   GET /?c=4083927976 HTTP/1.1
   1-2  6597  7/47/2751   K 0.94  2    292 1277390 219.0 0.95  50.38 66.249.70.37  http/1.1 support.cloudware.ng:443   GET /?c=2672325072 HTTP/1.1
   2-2  96504 0/369/2550  _ 5.30  0    0   1226273 0.0   6.23  47.69 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-2  1094  2/189/2325  K 3.16  1    309 1137655 65.5  3.66  50.44 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=3516889478 HTTP/1.1
   4-2  1120  0/179/2674  _ 3.03  0    343 1167717 0.0   4.62  46.04 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=3363241160 HTTP/1.1
   5-2  3393  0/140/2545  W 2.29  0    0   1158632 0.0   3.16  45.38 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-2  -     0/0/2207    . 0.00  167  0   1109482 0.0   0.00  50.14 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-2  98393 1/470/2218  W 8.26  0    0   1040657 33.7  8.06  41.61 66.249.70.35  http/1.1 support.cloudware.ng:443   GET /?c=752728116 HTTP/1.1
   8-2  -     0/0/2272    . 0.00  160  0   1345337 0.0   0.00  60.65 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-2  98819 0/320/2178  _ 7.23  0    263 1103489 0.0   8.90  44.12 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=2894759400 HTTP/1.1
   10-2 5055  0/98/1535   _ 0.71  1    340 749452  0.0   1.08  29.26 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   11-2 -     0/0/1933    . 0.00  54   0   914531  0.0   0.00  35.16 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-2 -     0/0/1564    . 0.00  1527 4   724330  0.0   0.00  28.83 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-2 -     0/0/1421    . 0.00  1486 0   666413  0.0   0.00  26.82 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-2 -     0/0/1678    . 0.00  694  0   785120  0.0   0.00  33.60 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-2 -     0/0/1400    . 0.00  1529 0   649198  0.0   0.00  28.04 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-2 -     0/0/1340    . 0.00  498  0   652013  0.0   0.00  38.87 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-2 -     0/0/452     . 0.00  1531 0   161671  0.0   0.00  7.60  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 -     0/0/912     . 0.00  1522 0   462994  0.0   0.00  17.65 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-2 -     0/0/1134    . 0.00  1525 0   572310  0.0   0.00  22.02 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 95844 0/366/1408  W 7.60  0    0   670146  0.0   9.70  29.83 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-2 87079 18/689/1553 K 11.40 0    23  706225  94.4  17.98 31.94 144.76.19.157 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Osun&lga=Iwo&ward=Gidigbo%
   22-2 95845 0/361/1249  _ 6.18  1    6   559072  0.0   7.09  21.38 34.195.248.30 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/blog/2019elections/p
   23-2 -     0/0/619     . 0.00  1532 0   245356  0.0   0.00  9.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/277     . 0.00  814  0   122059  0.0   0.00  5.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 95973 1/395/426   K 7.37  2    298 221950  34.0  13.33 13.46 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=625114242 HTTP/1.1
   26-2 -     0/0/105     . 0.00  1321 0   33407   0.0   0.00  1.82  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 95975 0/451/498   _ 8.12  0    0   211359  0.0   8.95  9.12  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   28-2 -     0/0/165     . 0.00  1528 0   67071   0.0   0.00  2.55  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/106     . 0.00  1254 0   30007   0.0   0.00  1.77  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/303     . 0.00  1530 0   139786  0.0   0.00  6.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/162     . 0.00  1159 0   84176   0.0   0.00  3.34  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/59      . 0.00  1480 0   18455   0.0   0.00  0.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/39      . 0.00  9008 0   6961    0.0   0.00  0.27  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/197     . 0.00  8600 0   47049   0.0   0.00  5.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/41      . 0.00  8989 0   15983   0.0   0.00  0.73  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/42      . 0.00  8990 0   10575   0.0   0.00  0.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/316     . 0.00  8168 0   106128  0.0   0.00  8.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/59      . 0.00  8862 0   27054   0.0   0.00  0.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/22      . 0.00  9021 0   1654    0.0   0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/149     . 0.00  8694 0   69209   0.0   0.00  2.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/56      . 0.00  8998 0   11193   0.0   0.00  0.59  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/60      . 0.00  9020 0   33165   0.0   0.00  0.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/26      . 0.00  9001 0   1149    0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/36      . 0.00  9019 0   5070    0.0   0.00  0.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/30      . 0.00  8991 0   3132    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/32      . 0.00  8861 0   20691   0.0   0.00  0.65  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/34      . 0.00  9204 0   9383    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/8       . 0.00  9278 0   989     0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/57      . 0.00  9108 261 20913   0.0   0.00  0.84  66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 641
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 16 seconds, (range: 1...62)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 21694
   total entries replaced since starting: 0
   total entries expired since starting: 21047
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 69 miss
   total removes since starting: 6 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit