403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.04.00.txt
 ## swap threshold exceeded
## server overview
2025-11-11.04.00 load[0] mem[65/64] mysql[4/25] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1471         126           9         765         720
Swap:          1999        1519         480
 04:00:02 up  4:03,  0 users,  load average: 0.06, 0.26, 0.30
## system overview
top - 04:00:02 up  4:03,  0 users,  load average: 0.06, 0.26, 0.30
Tasks: 228 total,   4 running, 223 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.6 us, 33.3 sy,  6.1 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   101420 free,  1519052 used,   799828 buff/cache
KiB Swap:  2047996 total,   492608 free,  1555388 used.   725252 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 231076   4424 S  62.5  9.5   3:49.26 /usr/sbin+
 74056 locatio+  20   0  403272  20140  11068 S  12.5  0.8   0:00.04 /opt/cpan+
   260 root       0 -20       0      0      0 S   6.2  0.0   0:03.24 [kworker/+
 74004 nigeria   20   0  400652  15932  10220 S   6.2  0.7   0:00.04 /opt/cpan+
 74015 pactpay   20   0  476724  17484  11728 S   6.2  0.7   0:00.02 /opt/cpan+
 74071 root      20   0  160224   2392   1636 S   6.2  0.1   0:00.01 top -n 2 +
 74121 root      35  15  140636   5556   2848 R   6.2  0.2   0:00.01 /usr/loca+
 74123 root      20   0  160220   2064   1584 R   6.2  0.1   0:00.01 top -bcn1
 74128 cloudw    20   0  350316  16620  10324 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44408   3316   1484 S   0.0  0.1   0:20.47 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.26 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:17.92 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.58 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.66 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.96 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39496   7112   6948 S   0.0  0.3   0:06.48 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    112      0 S   0.0  0.0   0:01.00 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    308    212 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1188    792 R   0.0  0.0   0:03.48 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.32 /usr/sbin+
   517 root      20   0  224148   4404   1120 S   0.0  0.2   0:00.24 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   519 dbus      20   0   57028   1388    656 S   0.0  0.1   0:07.94 /usr/bin/+
   521 rpc       20   0   69256      8      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1496    768 S   0.0  0.1   0:11.00 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    928    568 S   0.0  0.0   0:02.09 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    424    292 S   0.0  0.0   0:00.42 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116    720    384 S   0.0  0.0   0:00.23 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.57 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016   8988   2880 S   0.0  0.4   0:03.57 /usr/loca+
   916 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.31 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.38 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.19 /usr/sbin+
   925 root      20   0  572372    700    252 S   0.0  0.0   0:01.36 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  34004   6088 S   0.0  1.4   0:08.39 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.32 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  249168   4868   4500 S   0.0  0.2   0:03.39 /usr/sbin+
   946 root      20   0  261824   6388   1728 S   0.0  0.3   0:03.49 cpsrvd (S+
   954 named     20   0  784392  26220   1588 S   0.0  1.1   0:09.68 /usr/sbin+
   965 root      20   0  385496    380    292 S   0.0  0.0   0:00.57 php-fpm: +
   972 cpanelc+  20   0   10564   3492   2304 S   0.0  0.1   0:12.87 /usr/loca+
   973 root      20   0  397344   1872    592 S   0.0  0.1   0:02.36 php-fpm: +
   975 root      20   0  392856    332    252 S   0.0  0.0   0:00.51 php-fpm: +
   979 root      20   0  436392    400    312 S   0.0  0.0   0:00.61 php-fpm: +
   980 root      20   0 1901588 458108   1080 S   0.0 18.9   0:51.01 /usr/loca+
   991 root      20   0  386112    364    280 S   0.0  0.0   0:00.49 php-fpm: +
  1070 dovenull  20   0   46912   2196   1636 S   0.0  0.1   0:00.25 dovecot/p+
  1071 dovenull  20   0   47648   2276   1632 S   0.0  0.1   0:00.22 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.04 dovecot/a+
  1073 root      20   0   10452    508    356 S   0.0  0.0   0:00.16 dovecot/l+
  1074 dovenull  20   0   46912   1964   1460 S   0.0  0.1   0:00.22 dovecot/p+
  1075 dovenull  20   0   47812   2376   1632 S   0.0  0.1   0:00.21 dovecot/i+
  1078 root      20   0   24528   1848    492 S   0.0  0.1   0:00.11 dovecot/c+
  1084 dovecot   20   0   13568    656    452 S   0.0  0.0   0:00.04 dovecot/s+
  1112 systuser  20   0  157704   2932    948 S   0.0  0.1   0:00.09 SonarPush+
  1127 root      20   0  248312   2704    712 S   0.0  0.1   0:04.58 /usr/loca+
  1152 dovecot   20   0   41180   1460   1012 S   0.0  0.1   0:00.35 dovecot/a+
  1157 wp-tool+  20   0  387556   2500   1228 S   0.0  0.1   0:00.20 /usr/bin/+
  1159 wp-tool+  20   0  410452   9380   1084 S   0.0  0.4   0:12.25 /usr/bin/+
  1210 root      20   0  209268   8476   1916 S   0.0  0.4   0:01.35 tailwatchd
  1211 root      20   0  262224  24620   6760 S   0.0  1.0   0:01.48 cpdavd - +
  1213 root      20   0  167452   1216    668 S   0.0  0.1   0:00.34 dnsadmin +
  1667 root      20   0  299272    488    328 S   0.0  0.0   0:00.40 php-fpm: +
  1700 root      38  18  130416   1364    692 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4768    516 S   0.0  0.2   0:01.15 /usr/sbin+
  1949 root      20   0   12844    324    212 S   0.0  0.0   0:01.69 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:01.43 /usr/loca+
  1951 root      20   0   12876    344    216 S   0.0  0.0   0:01.55 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.29 [kworker]
  5071 root      20   0  181900   7660   1100 S   0.0  0.3   0:12.00 lfd - sle+
  7555 root      20   0  269756  94464   2976 S   0.0  3.9   0:04.00 spamd chi+
  7556 root      20   0  248312   1216    340 S   0.0  0.1   0:00.00 spamd chi+
 31614 root      20   0 1275844    572     24 S   0.0  0.0   0:00.09 /usr/bin/+
 31652 root      20   0 1277312   2356     24 S   0.0  0.1   0:00.08 /usr/bin/+
 39472 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 39483 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 129+
 40431 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 43062 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 44563 nobody    20   0  277744  14084   4820 S   0.0  0.6   0:03.46 /usr/sbin+
 45402 nobody    20   0  277716  12832   4628 S   0.0  0.5   0:03.15 /usr/sbin+
 48267 root      20   0  183052      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 48316 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 50391 nobody    20   0  277928  20164   4956 S   0.0  0.8   0:03.10 /usr/sbin+
 50869 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 52128 nobody    20   0  277996  20676   4952 S   0.0  0.9   0:02.76 /usr/sbin+
 53101 nobody    20   0  277756  20352   4984 S   0.0  0.8   0:02.67 /usr/sbin+
 54076 nobody    20   0  277748  20308   4920 S   0.0  0.8   0:02.74 /usr/sbin+
 55990 nobody    20   0  277736  20092   4848 S   0.0  0.8   0:02.15 /usr/sbin+
 59858 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
 62245 nobody    20   0  277876  19696   4664 S   0.0  0.8   0:01.58 /usr/sbin+
 62262 nobody    20   0  277736  19416   4588 S   0.0  0.8   0:01.08 /usr/sbin+
 62263 nobody    20   0  277736  19596   4724 S   0.0  0.8   0:01.41 /usr/sbin+
 64105 nobody    20   0  277636  19528   4472 S   0.0  0.8   0:01.44 /usr/sbin+
 64502 nobody    20   0  277620  19324   4488 S   0.0  0.8   0:00.94 /usr/sbin+
 64785 nobody    20   0  277616  18988   4528 S   0.0  0.8   0:01.08 /usr/sbin+
 65047 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 65806 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 67282 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67427 nobody    20   0  277672  18548   4260 S   0.0  0.8   0:00.93 /usr/sbin+
 67935 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68048 nobody    20   0  277528  18336   4220 S   0.0  0.8   0:00.79 /usr/sbin+
 71107 nobody    20   0  277948  18264   4012 S   0.0  0.8   0:00.28 /usr/sbin+
 72071 nobody    20   0  277660  18128   3976 S   0.0  0.7   0:00.18 /usr/sbin+
 72380 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72394 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72460 nobody    20   0  277800  17832   3824 S   0.0  0.7   0:00.17 /usr/sbin+
 72836 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 73195 nobody    20   0  277800  16944   3224 S   0.0  0.7   0:00.13 /usr/sbin+
 73415 root      20   0   41052   2772   2120 S   0.0  0.1   0:00.00 dovecot/a+
 73548 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73584 nigeria   20   0  397064   4476   2352 S   0.0  0.2   0:00.00 php-fpm: +
 73884 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73899 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73900 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73901 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73902 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73907 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73909 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73911 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73912 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73913 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73914 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73915 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73916 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73917 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73918 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73919 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73920 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73921 root      20   0  183044   2204   1636 S   0.0  0.1   0:00.00 /usr/sbin+
 73923 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73924 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73927 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73928 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73934 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 73936 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73937 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73938 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73940 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73941 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 73942 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
 73946 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73948 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 73950 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73951 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73952 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73953 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 73955 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 73957 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73962 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 73963 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73965 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73966 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73967 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 73969 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 73970 root      20   0 1276844  11120    600 S   0.0  0.5   0:00.05 /usr/bin/+
 73975 root      20   0  188220  11108   5152 S   0.0  0.5   0:00.01 /usr/loca+
 73978 root      20   0 1342492  14428    604 S   0.0  0.6   0:00.06 /usr/bin/+
 73979 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73980 root      20   0 1276700  14660    600 S   0.0  0.6   0:00.06 /usr/bin/+
 73990 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73995 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73999 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 74007 cloudw    20   0  350316  16620  10324 S   0.0  0.7   0:00.01 /opt/cpan+
 74030 locatio+  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74043 locatio+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 74118 mailnull  20   0   89124   1800    932 S   0.0  0.1   0:00.00 /usr/sbin+
 74145 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 74154 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 74161 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 74162 cloudsms  20   0  131852   3316   2388 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:17  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      40431  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:4]
root      43062  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/u200:2]
root      50869  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/0:1]
root      59858  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:2]
root      65047  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/u200:0]
root      65806  0.0  0.0      0     0 ?        S    03:49   0:00  \_ [kworker/1:1]
root      67282  0.0  0.0      0     0 ?        D    03:51   0:00  \_ [kworker/1:4]
root      67935  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:0]
root      72380  0.0  0.0      0     0 ?        S    03:58   0:00  \_ [kworker/0:2]
root      72394  0.0  0.0      0     0 ?        D    03:58   0:00  \_ [kworker/1:0]
root      74166  0.0  0.0      0     0 ?        R    04:00   0:00  \_ [kthreadd]
root          1  0.1  0.1  44408  3316 ?        Ss   Nov10   0:20 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39496  7116 ?        Ss   Nov10   0:06 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   112 ?        S<sl Nov10   0:01 /sbin/auditd
root        505  0.0  0.0  52852   308 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1188 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  4404 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1388 ?        Ss   Nov10   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256     8 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1496 ?        Ssl  Nov10   0:11 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   928 ?        Ssl  Nov10   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   424 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052     0 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      73899  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73967  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      73978  0.0  0.5 1342492 14428 ?       Rl   04:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      73900  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73941  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      73970  0.0  0.4 1276844 11120 ?       Sl   04:00   0:00  |       \_ /usr/bin/update_imunify
root      73901  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73969  0.0  0.0 113284  1208 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      73980  0.0  0.6 1276700 14660 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      73902  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73938  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      73942  0.0  0.0 113288  1432 ?        SN   04:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      74121  0.0  0.2 140900  6016 ?        SN   04:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      74165  0.0  0.0  50120   468 ?        RN   04:00   0:00  |               \_ exim -bpc
root      73907  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73957  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73979  0.0  0.0 108052   360 ?        S    04:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73990  0.0  0.0 113288  1512 ?        S    04:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      74163  0.0  0.0 153840  2096 ?        R    04:00   0:00  |               \_ ps auxf
root      73909  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73952  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      73911  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73948  0.0  0.0  20164   812 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      73912  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73937  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      73913  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73940  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      73914  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73946  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      73915  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73966  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      73916  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73963  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      73918  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73962  0.0  0.0  20164   984 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [74154] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  74154  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  74161  0.0  0.0 113284  1212 ?        S    04:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  74162  0.0  0.4 396400 11428 ?        R    04:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      73919  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73950  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      73920  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73965  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      73923  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73953  0.0  0.0 113284  1208 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      73975  0.0  0.4 188220 11108 ?        S    04:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      74071  0.0  0.0 160224  2392 ?        S    04:00   0:00  |           \_ top -n 2 -b -c
root      73924  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73936  0.0  0.0  20164   964 ?        Ss   04:00   0:00  |   \_ jailshell (pactpay) [73999] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73999  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74015  0.0  0.7 476724 17484 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      73927  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      73955  0.0  0.0  20164   968 ?        Ss   04:00   0:00      \_ jailshell (nigeria) [73995] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73995  0.0  0.0  20164   260 ?        S    04:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74004  0.0  0.6 400652 15932 ?        S    04:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.0  89116   720 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  74118  0.0  0.0  89124  1800 ?        S    04:00   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.3 114016  8988 ?        Ssl  Nov10   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root      73548  0.0  0.1 111304  4272 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  2196 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  47648  2276 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   508 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912  1964 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47812  2376 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1848 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   656 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1460 ?        S    Nov10   0:00  \_ dovecot/auth
root      72836  0.0  0.1  60820  4512 ?        S    03:58   0:00  \_ dovecot/lmtp
root      73415  0.0  0.1  41052  2772 ?        S    03:59   0:00  \_ dovecot/auth -w
root        925  0.0  0.0 572372   700 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.4 5654048 34004 ?       SLsl Nov10   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.2 249168  4868 ?        Ssl  Nov10   0:03 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261824  6388 ?        Ss   Nov10   0:03 cpsrvd (SSL) - waiting for connections                   
root      73884  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.0 784392 26220 ?        Ssl  Nov10   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   380 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3492 ?        Ss   Nov10   0:12 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1872 ?        Ss   Nov10   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   73584  0.0  0.1 397064  4476 ?        S    03:59   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   332 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   400 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.3 18.9 1901588 458108 ?      Ssl  Nov10   0:51 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   364 ?        Rs   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2704 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  3.9 269756 94464 ?        S    00:03   0:04  \_ spamd child
root       7556  0.0  0.0 248312  1216 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  2500 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  0.3 410452  9380 ?        Ss   Nov10   0:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  8476 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  1.0 262224 24620 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1213  0.0  0.0 167452  1216 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   488 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1364 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.5  9.5 1462284 231256 ?      Sl   Nov10   3:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4768 ?        Ss   Nov10   0:01 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12844   324 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12876   344 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    44563  0.1  0.5 277744 14084 ?        S    03:17   0:03  \_ /usr/sbin/httpd -k start
nobody    45402  0.1  0.5 277716 12832 ?        S    03:18   0:03  \_ /usr/sbin/httpd -k start
nobody    50391  0.1  0.8 277928 20164 ?        S    03:26   0:03  \_ /usr/sbin/httpd -k start
nobody    52128  0.1  0.8 277996 20676 ?        S    03:28   0:02  \_ /usr/sbin/httpd -k start
nobody    53101  0.1  0.8 277756 20352 ?        S    03:30   0:02  \_ /usr/sbin/httpd -k start
nobody    54076  0.1  0.8 277748 20308 ?        S    03:31   0:02  \_ /usr/sbin/httpd -k start
nobody    55990  0.1  0.8 277736 20092 ?        S    03:34   0:02  \_ /usr/sbin/httpd -k start
nobody    62245  0.1  0.8 277876 19696 ?        S    03:43   0:01  \_ /usr/sbin/httpd -k start
nobody    62262  0.1  0.8 277736 19416 ?        S    03:43   0:01  \_ /usr/sbin/httpd -k start
nobody    62263  0.1  0.8 277736 19596 ?        S    03:43   0:01  \_ /usr/sbin/httpd -k start
cloudw    74128  0.0  0.6 350316 16620 ?        S    04:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    64105  0.1  0.8 277636 19528 ?        S    03:46   0:01  \_ /usr/sbin/httpd -k start
nobody    64502  0.1  0.7 277620 19324 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody    64785  0.1  0.7 277616 18988 ?        S    03:47   0:01  \_ /usr/sbin/httpd -k start
nobody    67427  0.1  0.7 277672 18548 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    68048  0.1  0.7 277528 18336 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    71107  0.1  0.7 277948 18264 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    72071  0.1  0.7 277660 18128 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    72460  0.1  0.7 277800 17832 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody    73195  0.2  0.7 277800 16944 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.3 181900  7660 ?        Ss   00:00   0:12 lfd - sleeping
root      31614  0.0  0.0 1275844  572 ?        Ssl  03:00   0:00 /usr/bin/cspdaemon
root      31652  0.0  0.0 1277312 2356 ?        Ssl  03:00   0:00 /usr/bin/checkstatus
root      39472  0.0  0.0 132964     4 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056     0 ?        SN   03:11   0:00  \_ sleep 12937
## mysql stats
Uptime: 14586  Threads: 3  Questions: 1472356  Slow queries: 0  Opens: 6836  Flush tables: 1  Open tables: 2000  Queries per second avg: 100.943
*************************** 1. row ***************************
     Id: 19321
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 19325
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 19335
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.187 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 185.220.100.242 TIME_WAIT
      1 185.220.101.160 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.35 TIME_WAIT
      1 54.39.6.215 TIME_WAIT
      1 74.7.35.121 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 51.222.204.143 TIME_WAIT
      3 103.231.202.90 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 04:00:02 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 3 minutes 1 second
   Server load: 0.06 0.26 0.30
   Total accesses: 70895 - Total Traffic: 1.9 GB - Total Duration: 37210491
   CPU Usage: u21.7 s9.5 cu956.25 cs735.95 - 11.8% CPU load
   4.86 requests/sec - 134.4 kB/second - 27.7 kB/request - 524.868 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

__K_KK___K_KKW__K.WK............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client      Protocol          VHost                                       Request
   0-0  64502 0/186/3698  _ 4.26  2    6   1823027 0.0   4.66  92.56  3.90.73.206     http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/blog/assets/js/blog/polling_unit
   1-0  44563 0/725/3759  _ 16.32 2    1   1841476 0.0   15.75 96.41  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   2-0  72460 5/26/3777   K 0.74  3    356 1819681 157.3 0.74  86.95  66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=1696307549 HTTP/1.1
   3-0  71107 0/61/3471   _ 1.42  1    306 1754291 0.0   1.91  82.65  66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=1464652536 HTTP/1.1
   4-0  50391 4/511/3697  K 14.47 0    372 2733045 124.1 17.64 125.95 66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=3480534798 HTTP/1.1
   5-0  52128 7/493/3685  K 13.28 0    379 1927642 215.4 12.88 90.49  66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=1391130094 HTTP/1.1
   6-0  54076 0/475/3536  _ 12.73 1    4   1921362 0.0   13.00 104.65 114.119.154.181 http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Osun&lga=Olorunda&=Owode%2
   7-0  64105 0/243/3816  _ 6.92  0    0   1799619 0.0   6.48  98.65  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   8-0  62245 0/273/3443  _ 7.38  1    4   1795701 0.0   7.26  101.12 34.203.111.15   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/images/images/polling_unit_categ
   9-0  53101 33/598/3488 K 11.88 4    5   1765720 175.7 12.25 83.44  144.76.19.157   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Akwa%20ibom&lga=Nsit%20ata
   10-0 62262 0/196/3406  _ 4.68  0    0   1690085 0.0   6.47  96.69  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   11-0 55990 8/394/3430  K 10.27 0    524 1773064 248.8 11.40 102.53 66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=3830363185 HTTP/1.1
   12-0 62263 1/248/2855  K 6.41  0    338 1555287 36.4  7.16  74.65  66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=1785453105 HTTP/1.1
   13-0 64785 4/182/2445  W 4.87  0    0   1199121 127.8 5.99  66.59  66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=1668901498 HTTP/1.1
   14-0 72071 0/31/2708   _ 0.80  2    1   1448725 0.0   1.32  64.59  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   15-0 67427 0/154/2059  _ 4.37  1    258 1058691 0.0   4.28  49.15  66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=145755867 HTTP/1.1
   16-0 73195 6/20/3051   K 0.61  1    394 1604544 184.9 0.61  75.65  66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=578101241 HTTP/1.1
   17-0 -     0/0/2710    . 0.00  119  0   1424764 0.0   0.00  71.74  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-0 68048 0/134/2008  W 3.67  0    0   1002977 0.0   3.72  52.04  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   19-0 45402 1/558/1954  K 15.83 2    359 964004  34.1  22.75 55.41  66.249.70.37    http/1.1 support.cloudware.ng:443 GET /?c=1879202378 HTTP/1.1
   20-0 -     0/0/1075    . 0.00  365  0   540840  0.0   0.00  25.45  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 -     0/0/1679    . 0.00  179  0   914526  0.0   0.00  43.35  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-0 -     0/0/425     . 0.00  357  0   212119  0.0   0.00  11.13  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/427     . 0.00  4710 0   218307  0.0   0.00  10.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/493     . 0.00  8269 0   234804  0.0   0.00  11.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/201     . 0.00  8348 0   83585   0.0   0.00  3.46   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/132     . 0.00  8342 0   63977   0.0   0.00  3.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/725     . 0.00  6568 0   427451  0.0   0.00  20.36  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/117     . 0.00  8131 0   78945   0.0   0.00  4.86   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/496     . 0.00  6973 0   299300  0.0   0.00  13.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/67      . 0.00  8132 0   36690   0.0   0.00  1.77   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/239     . 0.00  8309 0   99496   0.0   0.00  4.64   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/4       . 0.00  8345 0   178     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/2       . 0.00  8346 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/3       . 0.00  8347 0   4       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/3       . 0.00  8341 0   6       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/13      . 0.00  8302 0   5697    0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00  8340 0   236     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/281     . 0.00  7561 0   158846  0.0   0.00  19.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/4       . 0.00  8343 0   264     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/725     . 0.00  5928 0   450086  0.0   0.00  35.37  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00  8333 0   1003    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/63      . 0.00  8111 0   33019   0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/159     . 0.00  7740 0   93527   0.0   0.00  19.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/9       . 0.00  8328 0   4423    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/18      . 0.00  8272 0   7447    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/13      . 0.00  8298 0   5454    0.0   0.00  0.65   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/513     . 0.00  6894 0   335229  0.0   0.00  11.08  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/6       . 0.00  8335 0   2176    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 911
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 2...56)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 39094
   total entries replaced since starting: 0
   total entries expired since starting: 38156
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 156 miss
   total removes since starting: 28 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit