403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.02.00.txt
 ## swap threshold exceeded
## server overview
2025-11-11.02.00 load[0] mem[68/57] mysql[4/10] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1572          80          18         710         612
Swap:          1999        1311         688
 02:00:02 up  2:03,  0 users,  load average: 2.38, 1.34, 1.18
## system overview
top - 02:00:03 up  2:03,  0 users,  load average: 2.38, 1.34, 1.18
Tasks: 220 total,   8 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 82.4 us, 14.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    84124 free,  1598552 used,   737624 buff/cache
KiB Swap:  2047996 total,   704764 free,  1343232 used.   637972 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1458324 205068   3764 S 100.0  8.5   2:03.10 /usr/sbin+
 89099 healtho+  20   0  467184  76232   4176 R  31.2  3.1   0:01.70 php-fpm: +
 89549 root      20   0  246852  40252   3156 R  31.2  1.7   0:00.05 /usr/loca+
 89402 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.09 /opt/cpan+
     1 root      20   0   44408   3440   1516 S   0.0  0.1   0:11.02 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.68 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:09.36 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.49 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.98 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.73 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.46 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.43 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39496   4904   4660 S   0.0  0.2   0:03.38 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    272    160 S   0.0  0.0   0:00.52 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    380    288 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24896   1432    800 S   0.0  0.1   0:01.75 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.16 /usr/sbin+
   517 root      20   0  224148   3200    940 S   0.0  0.1   0:00.16 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1324    600 S   0.0  0.1   0:03.94 /usr/bin/+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   522 nscd      20   0  996544   1440    692 S   0.0  0.1   0:05.44 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    776    440 S   0.0  0.0   0:01.04 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    428    296 S   0.0  0.0   0:00.21 /usr/sbin+
   577 root      20   0   24208     32      8 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3736    720 S   0.0  0.2   0:00.12 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  12844   2528 S   0.0  0.5   0:01.86 /usr/loca+
   916 systuser  20   0   14068     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.15 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:00.70 /usr/sbin+
   924 root      20   0   51508    456    296 S   0.0  0.0   0:00.11 /usr/sbin+
   925 root      20   0  572372    720    156 S   0.0  0.0   0:00.74 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33824   5820 S   0.0  1.4   0:04.43 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.16 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  232784   4428   3952 S   0.0  0.2   0:01.74 /usr/sbin+
   946 root      20   0  261292   6440   1732 S   0.0  0.3   0:01.86 cpsrvd (S+
   954 named     20   0  636928  36164   1460 S   0.0  1.5   0:04.45 /usr/sbin+
   965 root      20   0  385496    536    440 S   0.0  0.0   0:00.32 php-fpm: +
   972 cpanelc+  20   0   10452   3380   2316 S   0.0  0.1   0:06.58 /usr/loca+
   973 root      20   0  397344   1932    600 S   0.0  0.1   0:01.35 php-fpm: +
   975 root      20   0  392856    340    160 S   0.0  0.0   0:00.29 php-fpm: +
   979 root      20   0  436392    348    260 S   0.0  0.0   0:00.37 php-fpm: +
   980 root      20   0 1828116 504720    604 S   0.0 20.9   0:29.85 /usr/loca+
   991 root      20   0  386112    492    288 S   0.0  0.0   0:00.29 php-fpm: +
  1070 dovenull  20   0   46912    828    556 S   0.0  0.0   0:00.12 dovecot/p+
  1071 dovenull  20   0   47380   2648   1776 S   0.0  0.1   0:00.12 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.01 dovecot/a+
  1073 root      20   0   10452    588    420 S   0.0  0.0   0:00.08 dovecot/l+
  1074 dovenull  20   0   46912    976    672 S   0.0  0.0   0:00.11 dovecot/p+
  1075 dovenull  20   0   47440   2624   1712 S   0.0  0.1   0:00.09 dovecot/i+
  1078 root      20   0   24396   1860    492 S   0.0  0.1   0:00.06 dovecot/c+
  1084 dovecot   20   0   13568    612    428 S   0.0  0.0   0:00.02 dovecot/s+
  1112 systuser  20   0  157704   2820    836 S   0.0  0.1   0:00.05 SonarPush+
  1127 root      20   0  248312   2732    712 S   0.0  0.1   0:03.73 /usr/loca+
  1152 dovecot   20   0   41056   1448   1012 S   0.0  0.1   0:00.17 dovecot/a+
  1157 wp-tool+  20   0  387556   3284   1420 S   0.0  0.1   0:00.15 /usr/bin/+
  1159 wp-tool+  20   0  410452  27804   1396 S   0.0  1.1   0:06.29 /usr/bin/+
  1210 root      20   0  209268   8844   1912 S   0.0  0.4   0:00.75 tailwatchd
  1211 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.85 cpdavd - +
  1213 root      20   0  167452   4000   2628 S   0.0  0.2   0:00.24 dnsadmin +
  1667 root      20   0  299272    480    320 S   0.0  0.0   0:00.20 php-fpm: +
  1700 root      38  18  130416   1372    692 S   0.0  0.1   0:00.02 cpanellog+
  1945 root      20   0  267016   4792    532 S   0.0  0.2   0:00.63 /usr/sbin+
  1949 root      20   0   12808    324    212 S   0.0  0.0   0:00.85 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:00.71 /usr/loca+
  1951 root      20   0   12836    344    216 S   0.0  0.0   0:00.78 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.14 [kworker]
  5071 root      20   0  181364   7748   1100 S   0.0  0.3   0:05.98 lfd - sle+
  7555 root      20   0  262536  95392   2596 S   0.0  3.9   0:01.12 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 38388 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [kworker/+
 48267 root      20   0  183052   1696   1152 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056    304    228 S   0.0  0.0   0:00.00 sleep 4h +
 48815 root      20   0 1341636  10688    600 S   0.0  0.4   0:00.08 /usr/bin/+
 48851 root      20   0 1277312  11736    596 S   0.0  0.5   0:00.07 /usr/bin/+
 64400 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 65152 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 74495 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 75646 nobody    20   0  277952  20120   4700 S   0.0  0.8   0:01.85 /usr/sbin+
 75648 nobody    20   0  277664  19796   4620 S   0.0  0.8   0:02.01 /usr/sbin+
 75679 nobody    20   0  277732  20112   4648 S   0.0  0.8   0:02.05 /usr/sbin+
 75686 nobody    20   0  277736  19996   4632 S   0.0  0.8   0:01.78 /usr/sbin+
 76234 nobody    20   0  277932  20288   4788 S   0.0  0.8   0:01.83 /usr/sbin+
 76235 nobody    20   0  277736  19800   4664 S   0.0  0.8   0:01.84 /usr/sbin+
 76237 nobody    20   0  277732  20288   4836 S   0.0  0.8   0:01.79 /usr/sbin+
 76568 nobody    20   0  277936  19628   4660 S   0.0  0.8   0:01.79 /usr/sbin+
 78096 nobody    20   0  277740  19620   4568 S   0.0  0.8   0:01.62 /usr/sbin+
 78255 nobody    20   0  277736  19936   4636 S   0.0  0.8   0:01.34 /usr/sbin+
 79282 nobody    20   0  277736  19744   4624 S   0.0  0.8   0:01.57 /usr/sbin+
 80068 nobody    20   0  277644  19380   4444 S   0.0  0.8   0:01.57 /usr/sbin+
 80215 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 80684 worencom  20   0   38484   3940   2976 S   0.0  0.2   0:00.00 dovecot/i+
 80872 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 81791 nobody    20   0  277800  19268   4388 S   0.0  0.8   0:01.01 /usr/sbin+
 83129 nobody    20   0  277604  19088   4416 S   0.0  0.8   0:00.91 /usr/sbin+
 83337 nobody    20   0  277932  19196   4432 S   0.0  0.8   0:00.63 /usr/sbin+
 83702 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84385 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84415 nobody    20   0  277612  18988   4296 S   0.0  0.8   0:00.61 /usr/sbin+
 85007 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85264 worencom  20   0   38380   3664   2872 S   0.0  0.2   0:00.00 dovecot/i+
 86492 nobody    20   0  277568  18584   4316 S   0.0  0.8   0:00.26 /usr/sbin+
 87332 nobody    20   0  277800  18084   3928 S   0.0  0.7   0:00.26 /usr/sbin+
 87919 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 88775 nobody    20   0  277796  17304   3612 S   0.0  0.7   0:00.01 /usr/sbin+
 89085 root      20   0  111304   4444   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 89088 nigeria   20   0  397064   4528   2400 S   0.0  0.2   0:00.00 php-fpm: +
 89277 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 89288 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 89296 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89297 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89298 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89300 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89303 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89306 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89307 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89308 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89309 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89310 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89311 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89312 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89314 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89316 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89319 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89321 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89324 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89335 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 89336 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 89337 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89338 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89339 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89342 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 89343 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89347 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89348 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89349 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89352 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89354 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89356 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 89357 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89361 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89363 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89365 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89367 root      20   0 1277356  11528    600 S   0.0  0.5   0:00.05 /usr/bin/+
 89368 root      20   0 1416224  14512    600 S   0.0  0.6   0:00.06 /usr/bin/+
 89370 root      20   0  113284   1480   1256 S   0.0  0.1   0:00.00 bash /usr+
 89371 root      20   0  188216  11092   5148 S   0.0  0.5   0:00.01 /usr/loca+
 89372 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 89376 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 89387 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 89393 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 89396 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 89401 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 89437 root      20   0  160224   2396   1636 S   0.0  0.1   0:00.01 top -n 2 +
 89530 root      35  15  113284   1356   1176 S   0.0  0.1   0:00.00 /bin/bash+
 89537 cloudw    20   0  350316  16620  10324 R   0.0  0.7   0:00.02 /opt/cpan+
 89541 root      35  15   13116    828    668 R   0.0  0.0   0:00.00 lsmod
 89542 root      35  15  112812    988    852 S   0.0  0.0   0:00.00 grep -E -+
 89543 root      35  15  113644    976    824 S   0.0  0.0   0:00.00 awk {prin+
 89552 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 89557 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 89559 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 89562 cloudsms  20   0  173664   4056   2888 R   0.0  0.2   0:00.00 /opt/cpan+
 89564 root      20   0  113284    228      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov10   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      38388  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/u200:1]
root      64400  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:2]
root      65152  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:2]
root      74495  0.0  0.0      0     0 ?        S    01:39   0:00  \_ [kworker/1:1]
root      80215  0.0  0.0      0     0 ?        S    01:47   0:00  \_ [kworker/0:3]
root      80872  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:4]
root      83702  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:0]
root      84385  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:0]
root      85007  0.0  0.0      0     0 ?        S    01:54   0:00  \_ [kworker/1:3]
root      87919  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44408  3440 ?        Ss   Nov10   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39496  4904 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   272 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   380 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24896  1432 ?        Ss   Nov10   0:01 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3200 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Ss   Nov10   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 996544  1440 ?        Ssl  Nov10   0:05 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   776 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   428 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052  1696 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      89296  0.0  0.0 183052  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89338  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      89367  2.5  0.4 1277356 11528 ?       Sl   02:00   0:00  |       \_ /usr/bin/update_imunify
root      89297  0.0  0.0 183052  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89335  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      89368  3.0  0.5 1416224 14512 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      89298  0.0  0.0 183052  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89357  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      89372  0.0  0.0 113288  1428 ?        SN   02:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      89530  0.0  0.0 113284  1356 ?        SN   02:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      89569  0.0  0.0 113284   180 ?        RN   02:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      89300  0.0  0.0 183052  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89354  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      89370  0.0  0.0 114252  2236 ?        S    02:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      89568  0.0  0.0 114252  1148 ?        R    02:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      89303  0.0  0.0 183052  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89337  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      89376  0.0  0.0 108052   360 ?        S    02:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      89387  0.0  0.0 113288  1520 ?        S    02:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      89565  0.0  0.0 153840  2096 ?        R    02:00   0:00  |               \_ ps auxf
root      89306  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89348  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      89307  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89343  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      89308  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89342  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [89557] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  89557  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  89559  0.0  0.0 113284  1208 ?        S    02:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  89562  0.0  0.6 400652 15668 ?        S    02:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      89309  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89361  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      89310  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89363  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      89311  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89347  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      89312  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89365  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      89314  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89352  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      89316  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89339  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      89319  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89349  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      89371  0.5  0.4 188216 11092 ?        S    02:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      89437  1.0  0.0 160224  2396 ?        S    02:00   0:00  |           \_ top -n 2 -b -c
root      89321  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89356  0.0  0.0  20164   968 ?        Ss   02:00   0:00  |   \_ jailshell (pactpay) [89393] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89393  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89401  1.0  0.7 476724 17480 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      89324  0.0  0.0 183048  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      89336  0.0  0.0  20164   972 ?        Ss   02:00   0:00      \_ jailshell (nigeria) [89396] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89396  0.0  0.0  20164   264 ?        S    02:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89402  4.5  0.6 400652 15936 ?        S    02:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    32 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3736 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.5 114016 12844 ?        Ssl  Nov10   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    24 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    56 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:00 /usr/sbin/sshd -D
root      89085  0.0  0.1 111304  4444 ?        Ss   01:59   0:00  \_ sshd: [accepted]
sshd      89288  0.0  0.1 115644  2628 ?        S    02:00   0:00      \_ sshd: [net]
root        924  0.0  0.0  51508   456 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912   828 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.1  47380  2648 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   588 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912   976 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.1  47440  2624 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24396  1860 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   612 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41056  1448 ?        S    Nov10   0:00  \_ dovecot/auth
worencom  80684  0.0  0.1  38484  3940 ?        S    01:47   0:00  \_ dovecot/imap
worencom  85264  0.0  0.1  38380  3664 ?        S    01:54   0:00  \_ dovecot/imap
root        925  0.0  0.0 572372   720 ?        Ssl  Nov10   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 33824 ?       SLsl Nov10   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.1 232784  4428 ?        Ssl  Nov10   0:01 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261292  6440 ?        Ss   Nov10   0:01 cpsrvd (SSL) - waiting for connections                   
root      89277  0.0  0.0      0     0 ?        Z    01:59   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.4 636928 36164 ?        Ssl  Nov10   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   536 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10452  3380 ?        Rs   Nov10   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1932 ?        Ss   Nov10   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   89088  0.0  0.1 397064  4528 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  89099 43.2  3.2 471280 79516 ?        R    01:59   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root        975  0.0  0.0 392856   340 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   348 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.4 20.8 1828116 504720 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   492 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2820 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2732 ?        Ss   Nov10   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  3.9 262536 95392 ?        S    00:03   0:01  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3284 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 27804 ?        Ss   Nov10   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  8844 ?        Ss   Nov10   0:00 tailwatchd
root       1211  0.0  0.2 183900  6692 ?        Ss   Nov10   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.1 167452  4000 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   480 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1372 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.6  8.4 1458324 205068 ?      Rl   Nov10   2:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4792 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12808   324 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12836   344 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    75646  0.1  0.8 277952 20120 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody    75648  0.1  0.8 277664 19796 ?        S    01:40   0:02  \_ /usr/sbin/httpd -k start
nobody    75679  0.1  0.8 277732 20112 ?        S    01:40   0:02  \_ /usr/sbin/httpd -k start
nobody    75686  0.1  0.8 277736 19996 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody    76234  0.1  0.8 277932 20288 ?        S    01:41   0:01  \_ /usr/sbin/httpd -k start
nobody    76235  0.1  0.8 277736 19800 ?        S    01:41   0:01  \_ /usr/sbin/httpd -k start
nobody    76237  0.1  0.8 277732 20288 ?        S    01:41   0:01  \_ /usr/sbin/httpd -k start
nobody    76568  0.1  0.8 277936 19628 ?        S    01:41   0:01  \_ /usr/sbin/httpd -k start
nobody    78096  0.1  0.8 277740 19620 ?        S    01:44   0:01  \_ /usr/sbin/httpd -k start
nobody    78255  0.1  0.8 277736 19936 ?        S    01:44   0:01  \_ /usr/sbin/httpd -k start
nobody    79282  0.1  0.8 277992 19748 ?        R    01:45   0:01  \_ /usr/sbin/httpd -k start
cloudw    89537  2.0  0.0      0     0 ?        Z    02:00   0:00  |   \_ [php-cgi] <defunct>
nobody    80068  0.1  0.8 277644 19380 ?        S    01:46   0:01  \_ /usr/sbin/httpd -k start
nobody    81791  0.1  0.7 277800 19276 ?        S    01:49   0:01  \_ /usr/sbin/httpd -k start
nobody    89567  0.0  0.6 277800 14880 ?        R    02:00   0:00  |   \_ /usr/sbin/httpd -k start
nobody    83129  0.1  0.7 277604 19088 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody    83337  0.1  0.7 277932 19196 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody    84415  0.1  0.7 277612 18988 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
nobody    86492  0.1  0.7 277568 18584 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody    87332  0.1  0.7 277800 18084 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88775  0.0  0.7 277796 17304 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.3 181364  7748 ?        Ss   00:00   0:05 lfd - sleeping
root      48815  0.0  0.4 1341636 10688 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      48851  0.0  0.4 1277312 11736 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
root      89549  7.0  1.7 253416 42736 ?        R    02:00   0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/backup
## mysql stats
Uptime: 7387  Threads: 4  Questions: 910797  Slow queries: 0  Opens: 3243  Flush tables: 1  Open tables: 2000  Queries per second avg: 123.297
*************************** 1. row ***************************
     Id: 10141
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 10145
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 10157
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 109.107.228.84 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 114.119.154.89 TIME_WAIT
      1 142.44.225.193 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.135.135.57 TIME_WAIT
      1 45.124.84.162 TIME_WAIT
      1 5.255.231.65 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      1 74.7.227.4 TIME_WAIT
      1 95.108.213.236 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 45.134.225.130 TIME_WAIT
      2 51.222.204.143 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 02:00:03 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 3 minutes 1 second
   Server load: 2.38 1.34 1.18
   Total accesses: 35549 - Total Traffic: 964.0 MB - Total Duration: 19721005
   CPU Usage: u18.79 s6.57 cu463.24 cs361.88 - 11.5% CPU load
   4.82 requests/sec - 133.7 kB/second - 27.8 kB/request - 554.755 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_KWW__RKW._KKKK.K.........._.K.........._......K................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req    Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  83129 0/151/1857 _ 4.58 1    0    1001129 0.0   4.64  49.88 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   1-0  76568 2/307/1639 K 7.76 1    319  883243  1.8   10.83 46.71 45.134.225.130 http/1.1 health.oyostate.gov.ng:80  GET / HTTP/1.1
   2-0  81791 0/174/1895 W 4.55 0    0    986768  0.0   4.81  45.45 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3503192800 HTTP/1.1
   3-0  86492 0/54/1807  W 0.89 0    0    940896  0.0   1.27  40.65 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  83337 0/125/1879 _ 2.64 0    269  1426481 0.0   2.91  59.48 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3382739221 HTTP/1.1
   5-0  78096 0/333/1826 _ 6.93 0    0    1031113 0.0   7.46  45.46 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  78255 0/373/1747 R 4.46 58   281  972993  0.0   7.68  44.15 104.240.228.57 http/1.1
   7-0  76234 2/302/1863 K 8.92 1    348  986370  65.5  22.03 57.38 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=3777972794 HTTP/1.1
   8-0  76235 3/315/1816 W 8.24 0    0    980126  95.9  22.41 59.07 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=3677067846 HTTP/1.1
   9-0  -     0/0/1648   . 0.00 9    0    919615  0.0   0.00  41.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 76237 0/302/1609 _ 8.29 0    399  853253  0.0   9.59  40.95 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=1258634 HTTP/1.1
   11-0 84415 3/101/1542 K 2.67 0    1421 859197  80.7  2.78  40.06 45.134.225.130 http/1.1 health.oyostate.gov.ng:443 GET / HTTP/1.1
   12-0 79282 3/311/1354 K 5.59 0    389  727779  100.9 7.92  33.89 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=399606012 HTTP/1.1
   13-0 87332 5/46/976   K 1.36 3    370  534774  162.4 1.16  26.54 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=1937934511 HTTP/1.1
   14-0 88775 1/5/1418   K 0.01 2    348  814259  34.3  0.06  35.44 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=2299437649 HTTP/1.1
   15-0 -     0/0/967    . 0.00 774  0    473983  0.0   0.00  22.80 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 80068 6/288/1490 K 5.62 2    307  850507  190.6 8.36  38.65 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=1308473869 HTTP/1.1
   17-0 -     0/0/1279   . 0.00 759  0    682496  0.0   0.00  34.41 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/584    . 0.00 713  0    318550  0.0   0.00  16.66 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/584    . 0.00 543  0    297977  0.0   0.00  14.62 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/606    . 0.00 1133 0    310352  0.0   0.00  15.18 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/756    . 0.00 1138 0    436467  0.0   0.00  17.83 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/389    . 0.00 1131 0    189528  0.0   0.00  10.15 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/372    . 0.00 1109 0    184826  0.0   0.00  9.47  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/493    . 0.00 1070 0    234804  0.0   0.00  11.14 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/201    . 0.00 1149 0    83585   0.0   0.00  3.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/132    . 0.00 1143 0    63977   0.0   0.00  3.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 75646 0/406/579  _ 6.59 1    7    342719  0.0   9.77  14.20 44.207.69.106  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/blog/blog/blog/polli
   28-0 -     0/0/117    . 0.00 931  0    78945   0.0   0.00  4.86  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 75648 2/346/438  K 9.24 0    423  266044  64.0  9.77  12.33 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=3174698348 HTTP/1.1
   30-0 -     0/0/67     . 0.00 932  0    36690   0.0   0.00  1.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/239    . 0.00 1110 0    99496   0.0   0.00  4.64  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/4      . 0.00 1146 0    178     0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 1147 0    3       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/3      . 0.00 1148 0    4       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/3      . 0.00 1142 0    6       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/13     . 0.00 1103 0    5697    0.0   0.00  0.29  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00 1141 0    236     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/281    . 0.00 362  0    158846  0.0   0.00  19.22 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00 1144 0    264     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 75679 0/375/375  _ 8.02 0    393  252742  0.0   11.70 11.70 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3759738570 HTTP/1.1
   41-0 -     0/0/4      . 0.00 1134 0    1003    0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/63     . 0.00 911  0    33019   0.0   0.00  1.62  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/159    . 0.00 540  0    93527   0.0   0.00  19.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/9      . 0.00 1129 0    4423    0.0   0.00  0.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/18     . 0.00 1073 0    7447    0.0   0.00  0.41  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/13     . 0.00 1099 0    5454    0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 75686 1/420/420  K 5.74 0    442  287012  33.7  8.77  8.77  66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=3737879387 HTTP/1.1
   48-0 -     0/0/6      . 0.00 1136 0    2176    0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 836
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...40)
   index usage: 14%, cache usage: 20%
   total entries stored since starting: 19249
   total entries replaced since starting: 0
   total entries expired since starting: 18397
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 120 miss
   total removes since starting: 16 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit