403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.00.00.txt
 ## swap threshold exceeded
## server overview
2025-11-13.00.00 load[0] mem[63/62] mysql[3/8] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1396          71          59         895         739
Swap:          1999        1348         651
 00:00:02 up  3:57,  0 users,  load average: 0.13, 0.20, 0.31
## system overview
top - 00:00:02 up  3:57,  0 users,  load average: 0.13, 0.20, 0.31
Tasks: 224 total,   7 running, 215 sleeping,   0 stopped,   2 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    79760 free,  1433148 used,   907392 buff/cache
KiB Swap:  2047996 total,   667644 free,  1380352 used.   754460 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 252932   3808 S  93.8 10.5   3:33.21 /usr/sbin+
 75945 root      20   0  179948  31216   2880 S  18.8  1.3   0:00.19 /usr/loca+
 75996 nigeria   20   0  400652  15936  10216 R  12.5  0.7   0:00.05 /opt/cpan+
   148 root      20   0       0      0      0 S   6.2  0.0   0:00.30 [kauditd]
 76122 cloudw    20   0  351952  15232  10128 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3480   1548 R   0.0  0.1   0:20.26 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.92 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.64 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:14.20 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.91 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:01.37 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.34 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.65 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   4844   4600 S   0.0  0.2   0:08.05 /usr/lib/+
   382 root      20   0   45360    512    368 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    556    428 S   0.0  0.0   0:01.25 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1528    896 S   0.0  0.1   0:03.22 /usr/lib/+
   500 root      20   0   21540    492    380 S   0.0  0.0   0:00.31 /usr/sbin+
   501 polkitd   20   0  612240   3220    744 S   0.0  0.1   0:01.92 /usr/lib/+
   503 root      20   0  152780    280    236 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   5796   1056 S   0.0  0.2   0:00.22 queueproc+
   507 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1436    712 S   0.0  0.1   0:07.27 /usr/bin/+
   519 nscd      20   0 1062080   1636    840 S   0.0  0.1   0:11.13 /usr/sbin+
   521 rpc       20   0   69256    160     56 S   0.0  0.0   0:00.01 /sbin/rpc+
   529 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    112    112 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    556    424 S   0.0  0.0   0:00.39 /usr/sbin+
   577 root      20   0   24208    212    188 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704    216    216 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296    216    212 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   4032   1008 S   0.0  0.2   0:00.55 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.15 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  14028   2480 S   0.0  0.6   0:03.50 /usr/loca+
   930 root      20   0  153404    440    356 S   0.0  0.0   0:00.30 pure-ftpd+
   931 root      20   0   51508    632    472 S   0.0  0.0   0:00.21 /usr/sbin+
   932 root      20   0  572372   1024    436 S   0.0  0.0   0:01.28 /usr/bin/+
   933 telegraf  20   0 5654048  36924   5728 S   0.0  1.5   0:07.99 /usr/loca+
   935 memcach+  20   0  342400     76     76 S   0.0  0.0   0:00.32 /usr/bin/+
   939 root      20   0  111304    560    460 S   0.0  0.0   0:01.76 /usr/sbin+
   940 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028   2744   2744 S   0.0  0.1   0:00.05 sw-engine+
   950 root      20   0  386112    828    620 S   0.0  0.0   0:00.43 php-fpm: +
   961 named     20   0  637992  33496   1324 S   0.0  1.4   0:07.84 /usr/sbin+
   964 root      20   0  257360   4968   4088 S   0.0  0.2   0:03.75 /usr/sbin+
   981 root      20   0  436392  11232  11144 S   0.0  0.5   0:00.49 php-fpm: +
   984 root      20   0  385496    832    620 S   0.0  0.0   0:00.41 php-fpm: +
   985 root      20   0  261288   6968   1844 S   0.0  0.3   0:02.37 cpsrvd (S+
   989 root      20   0  392856    764    576 S   0.0  0.0   0:00.41 php-fpm: +
   992 root      20   0 1763048 284832    676 S   0.0 11.8   0:15.42 /usr/loca+
  1000 root      20   0  397344   2924    756 S   0.0  0.1   0:01.91 php-fpm: +
  1006 cpanelc+  20   0   10604   3436   2344 R   0.0  0.1   0:11.45 /usr/loca+
  1075 dovenull  20   0   46984   2772   1992 S   0.0  0.1   0:00.31 dovecot/p+
  1076 dovenull  20   0   48324   3540   1984 S   0.0  0.1   0:00.24 dovecot/i+
  1077 dovecot   20   0   10320    508    388 S   0.0  0.0   0:00.08 dovecot/a+
  1078 root      20   0   10452    540    356 S   0.0  0.0   0:00.18 dovecot/l+
  1079 dovenull  20   0   46984   2760   1948 S   0.0  0.1   0:00.22 dovecot/p+
  1080 dovenull  20   0   47680   3184   1952 S   0.0  0.1   0:00.16 dovecot/i+
  1084 root      20   0   24528   2456    512 S   0.0  0.1   0:00.10 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.03 dovecot/s+
  1121 systuser  20   0  157704   2184    176 S   0.0  0.1   0:00.07 SonarPush+
  1166 dovecot   20   0   41260   1616   1044 S   0.0  0.1   0:00.56 dovecot/a+
  1172 root      20   0  248152 118260   1848 S   0.0  4.9   0:04.54 /usr/loca+
  1173 wp-tool+  20   0  387528   3548   1612 S   0.0  0.1   0:00.19 /usr/bin/+
  1174 wp-tool+  20   0  410452  28168   1596 S   0.0  1.2   0:11.81 /usr/bin/+
  1232 root      20   0  209372  11748   1996 S   0.0  0.5   0:01.91 tailwatchd
  1234 root      20   0  167452   1464    864 S   0.0  0.1   0:00.23 dnsadmin +
  1237 root      20   0  262224  23692   5828 S   0.0  1.0   0:00.76 cpdavd - +
  1642 root      20   0  299272    880    508 S   0.0  0.0   0:00.38 php-fpm: +
  1702 root      38  18  130416   1532    800 S   0.0  0.1   0:00.03 cpanellog+
  2059 root      20   0  267036   8576    824 S   0.0  0.4   0:01.10 /usr/sbin+
  2063 root      20   0   12772    576    376 S   0.0  0.0   0:01.63 /usr/loca+
  2064 root      20   0   12732    444    364 S   0.0  0.0   0:01.38 /usr/loca+
  2065 root      20   0   12784    548    368 S   0.0  0.0   0:01.52 /usr/loca+
  2089 root      20   0   53268    264    264 S   0.0  0.0   0:00.05 /usr/loca+
  2226 root      20   0  182888  12044   1244 S   0.0  0.5   0:12.77 lfd - sle+
  7883 root      20   0  306476 169628   2868 S   0.0  7.0   0:02.08 spamd chi+
  7886 root      20   0  248152 116856    480 S   0.0  4.8   0:00.00 spamd chi+
 34084 root      20   0 1341636  10616    600 S   0.0  0.4   0:00.08 /usr/bin/+
 34121 root      20   0 1277312  11468    560 S   0.0  0.5   0:00.07 /usr/bin/+
 36095 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 47111 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.19 [kworker]
 50315 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 52166 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 57528 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 58172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59663 nobody    20   0  277740  19840   4136 S   0.0  0.8   0:01.87 /usr/sbin+
 60307 nobody    20   0  277916  20804   4400 S   0.0  0.9   0:01.92 /usr/sbin+
 60816 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 63535 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65654 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67141 nobody    20   0  277924  20396   4248 S   0.0  0.8   0:01.06 /usr/sbin+
 67749 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 67811 nobody    20   0  277720  19816   4152 S   0.0  0.8   0:01.01 /usr/sbin+
 68146 nobody    20   0  277720  19768   4224 S   0.0  0.8   0:00.98 /usr/sbin+
 68147 nobody    20   0  277676  19952   4096 S   0.0  0.8   0:01.00 /usr/sbin+
 68157 nobody    20   0  277920  20020   4000 S   0.0  0.8   0:00.97 /usr/sbin+
 69128 nobody    20   0  277724  20080   3976 S   0.0  0.8   0:00.72 /usr/sbin+
 69565 nobody    20   0  277784  19672   3992 S   0.0  0.8   0:00.80 /usr/sbin+
 71536 nobody    20   0  277916  19364   3836 S   0.0  0.8   0:00.41 /usr/sbin+
 71989 worencom  20   0   38492   2892   2032 S   0.0  0.1   0:00.00 dovecot/i+
 72268 nobody    20   0  277784  19252   3824 S   0.0  0.8   0:00.41 /usr/sbin+
 72288 nobody    20   0  277720  19152   3736 S   0.0  0.8   0:00.41 /usr/sbin+
 72289 nobody    20   0  277720  19088   3704 S   0.0  0.8   0:00.39 /usr/sbin+
 72471 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72688 nobody    20   0  277784  19340   3796 S   0.0  0.8   0:00.38 /usr/sbin+
 73300 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73400 nobody    20   0  277740  19628   3808 S   0.0  0.8   0:00.27 /usr/sbin+
 73940 nobody    20   0  277724  19308   3636 S   0.0  0.8   0:00.21 /usr/sbin+
 74579 root      20   0   60820   3600   2616 S   0.0  0.1   0:00.00 dovecot/l+
 74990 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75512 nigeria   20   0  397064   5364   2352 S   0.0  0.2   0:00.01 php-fpm: +
 75642 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 75643 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 75859 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 75860 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 75863 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 75873 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 75874 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 75875 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 75878 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 75879 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 75880 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75881 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75882 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75884 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75886 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75887 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75888 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75889 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75890 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75891 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75892 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75893 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75895 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 75896 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75899 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75908 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 75913 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 75915 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 75918 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 75919 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 75921 root      20   0 1276700  14752    596 S   0.0  0.6   0:00.06 /usr/bin/+
 75922 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 75923 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75924 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75926 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75927 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 75928 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75929 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75930 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 75931 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 75932 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75934 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75935 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75937 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75938 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 75940 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 75941 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 75950 root      20   0  188160  11032   5144 S   0.0  0.5   0:00.02 /usr/loca+
 75952 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 75957 root      20   0 1277356  11540    596 S   0.0  0.5   0:00.06 /usr/bin/+
 75963 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 75987 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 75988 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 75994 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 76001 cloudsms  20   0  400652  15148   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 76004 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 76008 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 76010 root      20   0  160224   2404   1636 S   0.0  0.1   0:00.00 top -n 2 +
 76103 root      35  15  128180   3280   2444 R   0.0  0.1   0:00.00 /usr/loca+
 76120 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 76125 cloudsms  20   0   20164    264      0 R   0.0  0.0   0:00.00 jailshell+
 76127 cloudsms  20   0       0      0      0 Z   0.0  0.0   0:00.00 [bash] <d+
 76129 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 76130 root      20   0  134900   1448   1204 S   0.0  0.1   0:00.00 /usr/bin/+
 76131 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 76133 cloudsms  20   0  210148   5496   3868 R   0.0  0.2   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov12   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov12   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      36095  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/u200:2]
root      50315  0.0  0.0      0     0 ?        D    Nov12   0:00  \_ [kworker/u200:1]
root      76136  0.0  0.0      0     0 ?        R    00:00   0:00  |   \_ [kworker/u200:1]
root      52166  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/0:1]
root      57528  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/1:2]
root      58172  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/0:2]
root      60816  0.0  0.0      0     0 ?        D    Nov12   0:00  \_ [kworker/1:4]
root      63535  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/0:0]
root      65654  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/0:4]
root      67749  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/1:0]
root      72471  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/1:1]
root      73300  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/0:3]
root      74990  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44428  3568 ?        Ss   Nov12   0:20 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  4864 ?        Ss   Nov12   0:08 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360   512 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   556 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1528 ?        Ss   Nov12   0:03 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   492 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.1 612240  3220 ?        Ssl  Nov12   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780   280 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.2 224148  5796 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   356 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1436 ?        Ss   Nov12   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1636 ?        Ssl  Nov12   0:11 /usr/sbin/nscd
rpc         521  0.0  0.0  69256   160 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   156 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   112 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   556 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      75873  0.0  0.0 183048  2140 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75938  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      75957  6.0  0.4 1277356 11540 ?       Sl   00:00   0:00  |       \_ /usr/bin/update_imunify
root      75874  0.0  0.0 183048  2136 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75918  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      75921  6.0  0.6 1276700 14752 ?       Sl   00:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      75875  0.0  0.0 183048  2136 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75908  0.0  0.0 113284  1208 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      75919  0.0  0.0 113288  1428 ?        SN   00:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      76103  0.0  0.1 128316  3544 ?        RN   00:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      75878  0.0  0.0 183048  2136 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75931  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/sbin/csf --lfd restart > /dev/null 2>&1
root      75945 19.0  1.2 179948 31216 ?        S    00:00   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf --lfd restart
root      76130  0.0  0.0 134900  1448 ?        S    00:00   0:00  |           \_ /usr/bin/systemctl restart lfd.service
root      75879  0.0  0.0 183048  2136 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75940  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      75952  0.0  0.0 108052   356 ?        S    00:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      75963  0.0  0.0 113288  1516 ?        S    00:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      76134  0.0  0.0 153840  2092 ?        R    00:00   0:00  |               \_ ps auxf
root      75880  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75935  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      75881  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75924  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      75882  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75929  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      75884  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75934  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      75886  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75930  0.0  0.0  20164   984 ?        Ss   00:00   0:00  |   \_ jailshell (cloudsms) [76129] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  76129  0.0  0.0  20164   260 ?        S    00:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  76131  0.0  0.0 113284  1212 ?        S    00:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  76133  0.0  0.6 400652 14884 ?        R    00:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      75887  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75932  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      75888  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75913  0.0  0.0  20164   968 ?        Ss   00:00   0:00  |   \_ jailshell (cloudsms) [75987] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  75987  0.0  0.0  20164   264 ?        S    00:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  75994  0.0  0.0 113284  1212 ?        S    00:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  76001  1.0  0.6 400652 15148 ?        S    00:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      75889  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75937  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      75890  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75926  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      75891  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75923  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      75892  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75928  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      75895  0.0  0.0 183048  2136 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75927  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      75950  2.0  0.4 188160 11032 ?        S    00:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      76010  0.0  0.0 160224  2404 ?        S    00:00   0:00  |           \_ top -n 2 -b -c
root      75896  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75941  0.0  0.0  20164   968 ?        Ss   00:00   0:00  |   \_ jailshell (pactpay) [76004] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76004  0.0  0.0  20164   264 ?        S    00:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76008  2.0  0.7 476724 17484 ?        S    00:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      75899  0.0  0.0 183048  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      75922  0.0  0.0  20164   964 ?        Ss   00:00   0:00      \_ jailshell (nigeria) [75988] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   75988  0.0  0.0  20164   260 ?        S    00:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   75996  5.0  0.6 400652 15936 ?        S    00:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   212 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704   216 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296   216 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  4032 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    76 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068    52 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 14028 ?        Ssl  Nov12   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   440 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   632 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  46984  2772 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  3540 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   508 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   540 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.1  46984  2760 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47680  3184 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.1  24528  2456 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1616 ?        S    Nov12   0:00  \_ dovecot/auth
worencom  71989  0.0  0.1  38492  2892 ?        S    Nov12   0:00  \_ dovecot/imap
root      74579  0.0  0.1  60820  3600 ?        S    Nov12   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372  1024 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.5 5654048 36924 ?       SLsl Nov12   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    76 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   560 ?        Ss   Nov12   0:01 /usr/sbin/sshd -D
root      75642  0.0  0.1 111304  4272 ?        Ss   Nov12   0:00  \_ sshd: [accepted]
sshd      75643  0.0  0.1 115644  2632 ?        S    Nov12   0:00  |   \_ sshd: [net]
root      75859  0.0  0.2 157100  5072 ?        Ss   Nov12   0:00  \_ sshd: unknown [priv]
sshd      75860  0.0  0.1 115644  2628 ?        S    Nov12   0:00  |   \_ sshd: unknown [net]
root      76135  0.0  0.1 110880  3708 ?        Ss   00:00   0:00  \_ /usr/sbin/sshd -D -R
systuser    940  0.0  0.0  10132    48 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    72 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.1 445028  2744 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   828 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 637992 33496 ?        Ssl  Nov12   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 257360  4968 ?        Ssl  Nov12   0:03 /usr/sbin/rsyslogd -n
root        981  0.0  0.4 436392 11232 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   832 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6968 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      75863  0.0  0.0      0     0 ?        Z    00:00   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   764 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 11.7 1763048 284832 ?      Ssl  Nov12   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.1 397344  2924 ?        Ss   Nov12   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   75512  0.0  0.2 397064  5364 ?        S    Nov12   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10604  3436 ?        Ss   Nov12   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.0 157704  2184 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.8 248152 118260 ?       Ss   Nov12   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  7.0 306476 169628 ?       S    Nov12   0:02  \_ spamd child
root       7886  0.0  4.8 248152 116856 ?       S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387528  3548 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410452 28168 ?        Ss   Nov12   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 11748 ?        Ss   Nov12   0:01 tailwatchd
root       1234  0.0  0.0 167452  1464 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.9 262224 23692 ?        Ss   Nov12   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   880 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1532 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4 10.4 1457796 252932 ?      Sl   Nov12   3:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.3 267036  8576 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12772   576 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   444 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12784   548 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268   264 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    59663  0.1  0.8 277740 19840 ?        S    Nov12   0:01  \_ /usr/sbin/httpd -k start
nobody    60307  0.1  0.8 277916 20804 ?        S    Nov12   0:01  \_ /usr/sbin/httpd -k start
nobody    67141  0.1  0.8 277924 20396 ?        S    Nov12   0:01  \_ /usr/sbin/httpd -k start
nobody    67811  0.1  0.8 277720 19816 ?        S    Nov12   0:01  \_ /usr/sbin/httpd -k start
nobody    68146  0.1  0.8 277720 19768 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    68147  0.1  0.8 277676 19952 ?        S    Nov12   0:01  \_ /usr/sbin/httpd -k start
nobody    68157  0.1  0.8 277920 20020 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    69128  0.1  0.8 277724 20080 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    69565  0.1  0.8 277784 19672 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    71536  0.1  0.8 277916 19364 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    72268  0.1  0.7 277784 19252 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    72288  0.1  0.7 277720 19152 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    72289  0.1  0.7 277720 19088 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    72688  0.1  0.7 277784 19340 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    73400  0.1  0.8 277740 19628 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
nobody    73940  0.1  0.7 277724 19308 ?        S    Nov12   0:00  \_ /usr/sbin/httpd -k start
cloudw    76122  0.0  0.6 351952 15232 ?        R    00:00   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
oysipao+  47111  0.0  0.0   3148   416 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152   428 ?        S    Nov12   0:00  \_ [kworker]
root      34084  0.0  0.4 1341636 10616 ?       Ssl  Nov12   0:00 /usr/bin/cspdaemon
root      34121  0.0  0.4 1277312 11468 ?       Ssl  Nov12   0:00 /usr/bin/checkstatus
root      76137  0.0  0.1 131656  2936 ?        Rs   00:00   0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/sbin/lfd
## mysql stats
Uptime: 14223  Threads: 5  Questions: 1227649  Slow queries: 0  Opens: 4938  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.314
*************************** 1. row ***************************
     Id: 17218
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 17221
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 17228
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 17229
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 17231
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.140.107 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 13.219.121.241 TIME_WAIT
      1 15.235.27.66 TIME_WAIT
      1 15.235.98.240 TIME_WAIT
      1 167.114.139.82 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.230.236.57 TIME_WAIT
      1 51.161.37.11 TIME_WAIT
      1 51.161.65.4 TIME_WAIT
      1 87.250.224.14 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 86.109.75.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 00:00:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 56 minutes 58 seconds
   Server load: 0.13 0.20 0.31
   Total accesses: 72443 - Total Traffic: 1.9 GB - Total Duration: 35343029
   CPU Usage: u9.25 s4.66 cu916.78 cs718.89 - 11.6% CPU load
   5.1 requests/sec - 143.2 kB/second - 28.1 kB/request - 487.874 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_WK.WK_K.K._K_KR_.._K...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  71536 0/80/3639   _ 1.78 1     2   1744806 0.0   1.83  90.60  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   1-0  73940 0/33/3632   W 0.91 0     0   1655612 0.0   1.45  89.91  66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2514421795 HTTP/1.1
   2-0  72268 2/73/3567   K 1.77 0     354 1827829 61.9  1.93  107.05 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1630317870 HTTP/1.1
   3-0  -     0/0/3448    . 0.00 2     0   1861600 0.0   0.00  108.38 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  69128 0/129/3394  W 3.04 0     0   1569501 0.0   3.30  84.79  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  69565 5/140/3680  K 3.43 3     276 1851644 148.8 4.24  119.55 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1000897396 HTTP/1.1
   6-0  68146 0/163/3325  _ 4.41 1     2   1696622 0.0   4.86  91.49  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   7-0  72288 4/71/4117   K 1.82 3     353 1834004 123.1 2.11  109.17 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2757106476 HTTP/1.1
   8-0  -     0/0/3016    . 0.00 146   0   1506464 0.0   0.00  77.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  67811 8/173/3196  K 4.44 2     393 1584840 243.9 6.05  85.86  66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=417439803 HTTP/1.1
   10-0 -     0/0/3431    . 0.00 144   0   1619259 0.0   0.00  96.41  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 60307 0/336/3555  _ 8.60 0     0   1757815 0.0   9.79  118.24 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   12-0 72289 2/71/3099   K 1.68 0     375 1434856 61.2  1.98  73.61  66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4020433008 HTTP/1.1
   13-0 67141 0/184/2213  _ 4.67 0     4   951584  0.0   5.25  50.63  3.229.95.193    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/assets/js/assets/css/blog/b
   14-0 72688 1/71/2668   K 1.65 2     339 1329793 30.2  1.73  85.80  66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3261934344 HTTP/1.1
   15-0 68147 0/168/2252  R 4.78 18    7   1077491 0.0   5.13  57.16  103.117.180.206 http/1.1 cloudware.ng:443
   16-0 73400 0/44/3051   _ 1.20 1     280 1487787 0.0   1.40  83.64  66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2008265558 HTTP/1.1
   17-0 -     0/0/3568    . 0.00 237   0   1763775 0.0   0.00  100.76 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/1475    . 0.00 499   0   813271  0.0   0.00  41.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 59663 0/327/2114  _ 8.44 0     0   1104345 0.0   9.46  57.45  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-0 68157 15/167/1078 K 4.24 4     257 556006  463.2 4.47  27.58  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3742893937 HTTP/1.1
   21-0 -     0/0/1284    . 0.00 562   0   670981  0.0   0.00  37.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1331    . 0.00 561   0   718940  0.0   0.00  45.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/580     . 0.00 3570  0   255650  0.0   0.00  10.82  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/1683    . 0.00 1285  0   611754  0.0   0.00  34.76  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/526     . 0.00 3777  0   268229  0.0   0.00  14.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/322     . 0.00 4030  0   179048  0.0   0.00  8.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/132     . 0.00 4031  0   70160   0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1155    . 0.00 1279  0   475534  0.0   0.00  25.42  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/108     . 0.00 3867  0   56057   0.0   0.00  2.71   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/389     . 0.00 3785  0   179917  0.0   0.00  7.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/48      . 0.00 4040  0   31177   0.0   0.00  1.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/4       . 0.00 13667 0   2148    0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/24      . 0.00 13597 0   12272   0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/71      . 0.00 13392 0   43033   0.0   0.00  1.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/2       . 0.00 13673 305 1157    0.0   0.00  0.06   66.249.70.100   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3584359384 HTTP/1.1
   36-0 -     0/0/19      . 0.00 13603 0   12232   0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/69      . 0.00 13394 0   41923   0.0   0.00  1.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/2       . 0.00 13676 0   993     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3       . 0.00 13668 0   910     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1107    . 0.00 9701  0   644340  0.0   0.00  31.91  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3       . 0.00 13675 0   924     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4       . 0.00 13661 0   1967    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41      . 0.00 13545 0   25843   0.0   0.00  1.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18      . 0.00 13602 0   8912    0.0   0.00  0.42   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 411
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 0...116)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 20917
   total entries replaced since starting: 0
   total entries expired since starting: 20497
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 127 miss
   total removes since starting: 9 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit