403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.01.00.txt
 ## swap threshold exceeded
## server overview
2025-11-11.01.00 load[0] mem[60/59] mysql[3/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1383         194           6         785         816
Swap:          1999        1387         612
 01:00:02 up  1:03,  0 users,  load average: 0.33, 0.44, 0.50
## system overview
top - 01:00:02 up  1:03,  0 users,  load average: 0.33, 0.44, 0.50
Tasks: 218 total,   5 running, 213 sleeping,   0 stopped,   0 zombie
%Cpu(s): 83.9 us, 16.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   219944 free,  1395232 used,   805124 buff/cache
KiB Swap:  2047996 total,   627256 free,  1420740 used.   858304 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1458324 157624   3508 S 131.2  6.5   0:35.47 /usr/sbin+
 48400 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.07 /opt/cpan+
 48539 cloudsms  20   0  400784  15560  10020 R  12.5  0.6   0:00.02 /opt/cpan+
   519 dbus      20   0   57028   1324    600 S   6.2  0.1   0:02.07 /usr/bin/+
 37294 nobody    20   0  277924   9052   3512 S   6.2  0.4   0:01.55 /usr/sbin+
 48343 root      20   0  114256   2424   1280 S   6.2  0.1   0:00.01 bash /usr+
 48517 root      20   0  160224   2368   1636 S   6.2  0.1   0:00.01 top -n 2 +
     1 root      20   0   44408   3280   1452 S   0.0  0.1   0:06.51 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:04.23 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.75 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.99 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.42 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.15 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40240   4960   4800 S   0.0  0.2   0:02.11 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    272    160 S   0.0  0.0   0:00.34 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852     88      0 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24896   1148    792 S   0.0  0.0   0:00.93 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.08 /usr/sbin+
   517 root      20   0  224148   3040    800 S   0.0  0.1   0:00.12 queueproc+
   518 root      20   0  152780      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   522 nscd      20   0  996544   1080    544 S   0.0  0.0   0:02.86 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    784    448 S   0.0  0.0   0:00.56 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    424    292 S   0.0  0.0   0:00.11 /usr/sbin+
   577 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   88984    552    216 S   0.0  0.0   0:00.08 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  11576   2280 S   0.0  0.5   0:01.06 /usr/loca+
   916 systuser  20   0   14068     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.08 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:00.46 /usr/sbin+
   924 root      20   0   51508    452    296 S   0.0  0.0   0:00.07 /usr/sbin+
   925 root      20   0  572372    724    160 S   0.0  0.0   0:00.43 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  32672   5804 S   0.0  1.3   0:02.44 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.08 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     32      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  224592   4152   3776 S   0.0  0.2   0:01.04 /usr/sbin+
   946 root      20   0  261292   3100    768 S   0.0  0.1   0:01.04 cpsrvd (S+
   954 named     20   0  637932  20664    936 S   0.0  0.9   0:02.13 /usr/sbin+
   965 root      20   0  385496    312    224 S   0.0  0.0   0:00.20 php-fpm: +
   972 cpanelc+  20   0   10096   3100   2304 R   0.0  0.1   0:03.36 /usr/loca+
   973 root      20   0  397344   1816    484 S   0.0  0.1   0:00.64 php-fpm: +
   975 root      20   0  392856    196     16 S   0.0  0.0   0:00.20 php-fpm: +
   979 root      20   0  436392    220    140 S   0.0  0.0   0:00.28 php-fpm: +
   980 root      20   0 1828116 603936    220 S   0.0 25.0   0:29.78 /usr/loca+
   991 root      20   0  386112    336    136 S   0.0  0.0   0:00.19 php-fpm: +
  1070 dovenull  20   0   46912    812    372 S   0.0  0.0   0:00.06 dovecot/p+
  1071 dovenull  20   0   47152   1068    688 S   0.0  0.0   0:00.07 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.00 dovecot/a+
  1073 root      20   0   10452    588    420 S   0.0  0.0   0:00.04 dovecot/l+
  1074 dovenull  20   0   46912    976    516 S   0.0  0.0   0:00.06 dovecot/p+
  1075 dovenull  20   0   47360    132      8 S   0.0  0.0   0:00.04 dovecot/i+
  1078 root      20   0   24528   1880    484 S   0.0  0.1   0:00.04 dovecot/c+
  1084 dovecot   20   0   13568    384    216 S   0.0  0.0   0:00.00 dovecot/s+
  1112 systuser  20   0  157704   2932    988 S   0.0  0.1   0:00.04 SonarPush+
  1127 root      20   0  248312   2736    716 S   0.0  0.1   0:03.30 /usr/loca+
  1152 dovecot   20   0   41056    924    680 S   0.0  0.0   0:00.09 dovecot/a+
  1157 wp-tool+  20   0  387556   2640   1360 S   0.0  0.1   0:00.12 /usr/bin/+
  1159 wp-tool+  20   0  410452  27096   1040 S   0.0  1.1   0:03.35 /usr/bin/+
  1210 root      20   0  209064   5580   1004 S   0.0  0.2   0:00.51 tailwatchd
  1211 root      20   0  183900   3232      0 S   0.0  0.1   0:00.59 cpdavd - +
  1213 root      20   0  167452   1176    636 S   0.0  0.0   0:00.14 dnsadmin +
  1667 root      20   0  299272    396    240 S   0.0  0.0   0:00.10 php-fpm: +
  1700 root      38  18  130416     44      0 S   0.0  0.0   0:00.00 cpanellog+
  1945 root      20   0  267016   4728    468 S   0.0  0.2   0:00.34 /usr/sbin+
  1949 root      20   0   12824    212     96 S   0.0  0.0   0:00.39 /usr/loca+
  1950 root      20   0   12732     68      0 S   0.0  0.0   0:00.33 /usr/loca+
  1951 root      20   0   12848    324    180 S   0.0  0.0   0:00.36 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.08 [kworker]
  5071 root      20   0  181160   5340   1068 S   0.0  0.2   0:03.21 lfd - sle+
  5343 root      20   0 1341636     80      4 S   0.0  0.0   0:00.09 /usr/bin/+
  5380 root      20   0 1277312   2212      8 S   0.0  0.1   0:00.07 /usr/bin/+
  7555 root      20   0  249580  39204   1176 S   0.0  1.6   0:00.37 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 13206 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 14230 nobody    20   0  277736   9968   3748 S   0.0  0.4   0:04.01 /usr/sbin+
 15841 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 18946 worencom  20   0   38492    184     76 S   0.0  0.0   0:00.02 dovecot/i+
 29103 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 34728 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35480 nobody    20   0  277800   9188   3492 S   0.0  0.4   0:01.59 /usr/sbin+
 38359 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38388 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kworker/+
 39447 nobody    20   0  277932   9540   3708 S   0.0  0.4   0:01.29 /usr/sbin+
 39783 nobody    20   0  277800   9556   3732 S   0.0  0.4   0:01.01 /usr/sbin+
 39802 nobody    20   0  277800   9016   3192 S   0.0  0.4   0:01.19 /usr/sbin+
 41241 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42230 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42708 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 42783 nobody    20   0  277932   8972   3460 S   0.0  0.4   0:00.89 /usr/sbin+
 43382 nobody    20   0  277932   9532   3740 S   0.0  0.4   0:00.81 /usr/sbin+
 44045 nobody    20   0  277932   9596   3840 S   0.0  0.4   0:00.70 /usr/sbin+
 45157 nobody    20   0  277804   8316   3036 S   0.0  0.3   0:00.47 /usr/sbin+
 45472 nobody    20   0  277800   9544   3716 S   0.0  0.4   0:00.44 /usr/sbin+
 46375 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46376 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46399 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 46476 nobody    20   0  277800   8944   3320 S   0.0  0.4   0:00.34 /usr/sbin+
 46794 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47360 nobody    20   0  277800  17448   3692 S   0.0  0.7   0:00.12 /usr/sbin+
 47369 nobody    20   0  277924  17704   3708 S   0.0  0.7   0:00.12 /usr/sbin+
 47541 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 47595 nobody    20   0  277932  17520   3632 S   0.0  0.7   0:00.08 /usr/sbin+
 47788 nigeria   20   0  397064   4524   2392 S   0.0  0.2   0:00.00 php-fpm: +
 47927 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 47978 cpanelp+  20   0  298280   2304   1472 S   0.0  0.1   0:00.00 php-fpm: +
 48045 root      20   0  261292   5656   1344 S   0.0  0.2   0:00.00 webmaild +
 48259 root      20   0  261292   5648   1344 S   0.0  0.2   0:00.00 cpaneld -+
 48263 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48264 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48265 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48267 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48268 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48272 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48274 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48275 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48276 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48277 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48279 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48280 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48281 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48282 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48283 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48286 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48287 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48288 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48291 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48302 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 48305 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 48308 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48310 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48311 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48313 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 48314 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 48316 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 48317 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 48318 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 48319 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48320 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 48321 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48322 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 48325 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48326 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48329 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 48330 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48331 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48332 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 48334 root      20   0  108056    360    284 S   0.0  0.0   0:00.00 sleep 4h +
 48337 root      20   0 1342380  10924    600 S   0.0  0.5   0:00.05 /usr/bin/+
 48339 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48346 root      20   0  188200  11084   5148 S   0.0  0.5   0:00.02 /usr/loca+
 48349 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 48351 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 48352 root      20   0 1276956  14596    600 S   0.0  0.6   0:00.06 /usr/bin/+
 48358 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 48378 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48501 cloudw    20   0  350316  16624  10324 S   0.0  0.7   0:00.02 /opt/cpan+
 48507 root      35  15  113284   1360   1176 S   0.0  0.1   0:00.00 /bin/bash+
 48525 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 48536 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48538 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 48540 root      35  15  113284    184      0 R   0.0  0.0   0:00.00 /bin/bash+
 48542 root      20   0  114256   1540    396 R   0.0  0.1   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.4  0.0      0     0 ?        S    Nov10   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      13206  0.0  0.0      0     0 ?        S    00:11   0:00  \_ [kworker/u200:0]
root      15841  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/0:0]
root      29103  0.0  0.0      0     0 ?        S    00:33   0:00  \_ [kworker/0:3]
root      34728  0.0  0.0      0     0 ?        D    00:40   0:00  \_ [kworker/0:1]
root      38359  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/1:1]
root      38388  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/u200:1]
root      41241  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/0:4]
root      42230  0.0  0.0      0     0 ?        S    00:50   0:00  \_ [kworker/1:3]
root      42708  0.0  0.0      0     0 ?        S    00:51   0:00  \_ [kworker/1:4]
root      46375  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/1:0]
root      46376  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/1:2]
root      46399  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/0:2]
root      46794  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44408  3280 ?        Ss   Nov10   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40240  4960 ?        Ss   Nov10   0:02 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   272 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852    88 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24896  1148 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3040 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780     4 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Rs   Nov10   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 996544  1080 ?        Ssl  Nov10   0:02 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   784 ?        Ssl  Nov10   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   424 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48263  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48305  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      48337  5.0  0.4 1342380 10924 ?       Sl   01:00   0:00  |       \_ /usr/bin/update_imunify
root      48264  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48318  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      48352  6.0  0.6 1276956 14596 ?       Sl   01:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      48265  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48314  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      48322  0.0  0.0 113288  1428 ?        SN   01:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      48507  0.0  0.0 113284  1360 ?        SN   01:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      48540  0.0  0.0 108300   616 ?        RN   01:00   0:00  |               \_ chown systuser:root /usr/local/lp/var/sonarpush/kmodlist
root      48267  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   360 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      48272  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48320  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      48351  0.0  0.0 108052   356 ?        S    01:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      48358  0.0  0.0 113288  1512 ?        S    01:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      48543  0.0  0.0 153840  2096 ?        R    01:00   0:00  |               \_ ps auxf
root      48274  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48321  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      48275  0.0  0.0 183044  2212 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48276  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48326  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      48277  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48325  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      48279  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48330  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      48280  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48311  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      48281  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48319  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      48282  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48310  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      48283  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48331  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      48286  0.0  0.0 183048  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48308  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      48287  0.0  0.0 183048  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48332  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      48346  2.0  0.4 188200 11084 ?        S    01:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      48517  0.0  0.0 160224  2368 ?        S    01:00   0:00  |           \_ top -n 2 -b -c
root      48288  0.0  0.0 183048  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48302  0.0  0.0  20164   968 ?        Ss   01:00   0:00  |   \_ jailshell (pactpay) [48339] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48339  0.0  0.0  20164   264 ?        S    01:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48349  2.0  0.7 476724 17484 ?        S    01:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      48291  0.0  0.0 183048  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48313  0.0  0.0  20164   968 ?        Ss   01:00   0:00      \_ jailshell (nigeria) [48378] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48378  0.0  0.0  20164   264 ?        S    01:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48400  0.0  0.6 400652 15940 ?        S    01:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     0 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.0  88984   552 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.4 114016 11576 ?        Ssl  Nov10   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    24 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    56 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:00 /usr/sbin/sshd -D
root      47541  0.0  0.1 111304  4272 ?        Ss   00:59   0:00  \_ sshd: [accepted]
root        924  0.0  0.0  51508   452 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912   812 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  47152  1068 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   588 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912   976 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47360   132 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1880 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   384 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41056   924 ?        S    Nov10   0:00  \_ dovecot/auth
worencom  18946  0.0  0.0  38492   184 ?        S    00:19   0:00  \_ dovecot/imap
root      47927  0.0  0.1  60820  4508 ?        S    00:59   0:00  \_ dovecot/lmtp
root        925  0.0  0.0 572372   724 ?        Ssl  Nov10   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 32672 ?       SLsl Nov10   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    32 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.1 224592  4152 ?        Ssl  Nov10   0:01 /usr/sbin/rsyslogd -n
root        946  0.0  0.1 261292  3100 ?        Ss   Nov10   0:01 cpsrvd (SSL) - waiting for connections                   
root      48045  0.0  0.2 261292  5656 ?        S    00:59   0:00  \_ webmaild - serving 162.142.125.126
root      48259  0.0  0.2 261292  5648 ?        S    01:00   0:00  \_ cpaneld - serving 162.142.125.218
named       954  0.0  0.8 637932 20664 ?        Ssl  Nov10   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   312 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10096  3100 ?        Ss   Nov10   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1816 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   47788  0.0  0.1 397064  4524 ?        S    00:59   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   196 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   220 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.7 24.9 1828116 603936 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   336 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2736 ?        Ss   Nov10   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  1.6 249580 39204 ?        S    00:03   0:00  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  2640 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 27096 ?        Ss   Nov10   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.2 209064  5580 ?        Ss   Nov10   0:00 tailwatchd
root       1211  0.0  0.1 183900  3232 ?        Ss   Nov10   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452  1176 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   396 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  47978  0.0  0.0 298280  2304 ?        S    00:59   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1700  0.0  0.0 130416    44 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  0.9  6.5 1458324 157944 ?      Sl   Nov10   0:35 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4728 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12824   212 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732    68 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12848   324 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    14230  0.1  0.4 277736  9968 ?        S    00:12   0:04  \_ /usr/sbin/httpd -k start
nobody    35480  0.1  0.3 277800  9188 ?        S    00:41   0:01  \_ /usr/sbin/httpd -k start
nobody    37294  0.1  0.3 277924  9052 ?        S    00:43   0:01  \_ /usr/sbin/httpd -k start
nobody    48545  0.0  0.2 277924  5732 ?        R    01:00   0:00  |   \_ /usr/sbin/httpd -k start
nobody    39447  0.1  0.3 277932  9540 ?        S    00:46   0:01  \_ /usr/sbin/httpd -k start
nobody    39783  0.1  0.3 277800  9556 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    39802  0.1  0.3 277800  9016 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    42783  0.1  0.3 277932  8972 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    43382  0.1  0.3 277932  9532 ?        S    00:52   0:00  \_ /usr/sbin/httpd -k start
cloudw    48501  0.0  0.6 350316 16624 ?        S    01:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    44045  0.1  0.3 277932  9596 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
nobody    45157  0.1  0.3 277804  8316 ?        S    00:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45472  0.1  0.3 277800  9544 ?        S    00:55   0:00  \_ /usr/sbin/httpd -k start
nobody    46476  0.1  0.3 277800  8944 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody    47360  0.1  0.7 277800 17448 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    47369  0.1  0.7 277924 17704 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    47595  0.1  0.7 277932 17520 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.2 181160  5340 ?        Ss   00:00   0:03 lfd - sleeping
root       5343  0.0  0.0 1341636   80 ?        Ssl  00:00   0:00 /usr/bin/cspdaemon
root       5380  0.0  0.0 1277312 2212 ?        Ssl  00:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 3786  Threads: 2  Questions: 274048  Slow queries: 0  Opens: 2129  Flush tables: 1  Open tables: 1912  Queries per second avg: 72.384
*************************** 1. row ***************************
     Id: 3452
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 3461
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.48 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 142.44.220.63 TIME_WAIT
      1 172.178.140.157 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 185.191.171.4 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.130 TIME_WAIT
      1 85.208.96.194 TIME_WAIT
      1 87.236.176.253 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 51.222.204.143 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 01:00:02 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 3 minutes 1 second
   Server load: 0.33 0.44 0.50
   Total accesses: 16180 - Total Traffic: 410.5 MB - Total Duration: 8456047
   CPU Usage: u10.54 s4.41 cu224.03 cs177.11 - 11% CPU load
   4.28 requests/sec - 111.2 kB/second - 26.0 kB/request - 522.623 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KK_KKK_KWKKK...W_.......K.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  42783 1/141/938 K 4.25  4   279 480051 35.2  3.96  22.72 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=392998347 HTTP/1.1
   1-0  39783 1/161/750 K 4.63  1   3   404478 17.6  6.85  21.48 66.249.66.167 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/download-manager/assets/css/front.min.c
   2-0  44045 0/113/832 _ 3.23  0   0   396062 0.0   3.03  19.05 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   3-0  43382 1/131/864 K 3.87  0   410 412222 34.8  3.52  19.49 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=1563257498 HTTP/1.1
   4-0  39447 1/209/937 K 5.92  3   300 521441 35.1  5.73  24.63 66.249.70.35  http/1.1 support.cloudware.ng:443   GET /?c=3125506422 HTTP/1.1
   5-0  45472 4/70/873  K 2.16  1   272 472263 126.2 1.82  21.68 66.249.70.36  http/1.1 support.cloudware.ng:443   GET /?c=3659165955 HTTP/1.1
   6-0  45157 0/72/797  _ 2.46  0   0   449065 0.0   2.10  21.30 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  46476 3/51/793  K 1.67  1   352 397925 93.9  1.41  19.06 66.249.70.37  http/1.1 support.cloudware.ng:443   GET /?c=2376536105 HTTP/1.1
   8-0  47360 0/19/877  W 0.47  0   0   430996 0.0   0.50  19.93 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   9-0  39802 1/198/695 K 5.83  0   6   375151 9.8   5.24  17.97 103.120.71.23 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ede+south&state=Osun HTTP/1.
   10-0 47369 5/22/699  K 0.52  3   336 356766 156.4 0.52  17.37 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=3174782918 HTTP/1.1
   11-0 47595 9/15/720  K 0.59  0   355 395296 278.4 0.34  18.65 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=1136199952 HTTP/1.1
   12-0 -     0/0/390   . 0.00  722 0   206499 0.0   0.00  10.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/550   . 0.00  654 0   310108 0.0   0.00  15.48 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -     0/0/669   . 0.00  529 0   374585 0.0   0.00  17.57 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 37294 1/343/551 W 7.07  0   0   253861 35.2  6.58  11.92 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=3059007662 HTTP/1.1
   16-0 14230 0/712/829 _ 18.16 0   838 439038 0.0   17.63 20.60 66.249.66.7   http/1.1 health.oyostate.gov.ng:443 GET /mandate/ HTTP/1.1
   17-0 -     0/0/727   . 0.00  952 0   359681 0.0   0.00  21.85 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/134   . 0.00  893 0   71829  0.0   0.00  3.67  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/279   . 0.00  964 0   130523 0.0   0.00  8.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/421   . 0.00  966 2   215252 0.0   0.00  10.33 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/541   . 0.00  842 0   316980 0.0   0.00  14.49 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/238   . 0.00  777 0   121401 0.0   0.00  6.64  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/267   . 0.00  165 0   128759 0.0   0.00  6.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 35480 3/269/269 K 7.39  0   381 148089 95.0  7.04  7.04  66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=3965649920 HTTP/1.1
   25-0 -     0/0/45    . 0.00  820 0   37676  0.0   0.00  1.29  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/51    . 0.00  841 0   27030  0.0   0.00  1.27  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/144   . 0.00  209 0   78322  0.0   0.00  3.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/5     . 0.00  819 0   4112   0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/63    . 0.00  775 0   38994  0.0   0.00  1.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00  960 0   3973   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/230   . 0.00  124 2   97606  0.0   0.00  4.45  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 704
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...90)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 9530
   total entries replaced since starting: 0
   total entries expired since starting: 8821
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 41 miss
   total removes since starting: 5 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit