403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.01.00.txt
 ## swap threshold exceeded
## server overview
2025-11-17.01.00 load[0] mem[68/54] mysql[5/8] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1523         137          60         702         607
Swap:          1999        1193         806
 01:00:02 up  1:41,  0 users,  load average: 0.36, 0.33, 0.32
## system overview
top - 01:00:02 up  1:41,  0 users,  load average: 0.36, 0.33, 0.32
Tasks: 222 total,   7 running, 214 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 18.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   130824 free,  1550368 used,   739108 buff/cache
KiB Swap:  2047996 total,   825852 free,  1222144 used.   631128 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461276 251776   5012 S 160.0 10.4   1:06.69 /usr/sbin+
 93439 nigeria   20   0  404052  16140  10380 S  13.3  0.7   0:00.05 /opt/cpan+
     6 root      20   0       0      0      0 S   6.7  0.0   0:00.41 [ksoftirq+
 93569 cloudsms  20   0  404052  15608  10164 S   6.7  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44400   3480   1612 S   0.0  0.1   0:09.03 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.35 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:06.61 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.34 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:01.18 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.83 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.17 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.92 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   5512   5216 S   0.0  0.2   0:03.70 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    568    440 S   0.0  0.0   0:00.58 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    284    240 S   0.0  0.0   0:00.00 /usr/sbin+
   475 polkitd   20   0  612240   1292    868 S   0.0  0.1   0:00.86 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:01.44 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.13 /usr/sbin+
   484 rpc       20   0   69256    176     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    560    464 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 R   0.0  0.1   0:03.22 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1532    900 S   0.0  0.1   0:05.98 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5776   1064 S   0.0  0.2   0:00.15 queueproc+
   545 root      20   0  124480    584    452 S   0.0  0.0   0:00.18 /usr/sbin+
   546 root      20   0   24208     60     60 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3848    832 S   0.0  0.2   0:00.10 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.15 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:00.85 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   917 root      20   0  232784   5068   4348 S   0.0  0.2   0:01.79 /usr/sbin+
   918 named     20   0  924724  32196   2084 S   0.0  1.3   0:03.70 /usr/sbin+
   919 root      20   0 1763124 425636    600 S   0.0 17.6   0:14.06 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    668    508 S   0.0  0.0   0:00.09 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:00.60 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.20 sw-engine+
   937 root      20   0  439788  11436  11228 S   0.0  0.5   0:00.28 php-fpm: +
   938 systuser  20   0  114016  13848   2536 S   0.0  0.6   0:01.58 /usr/loca+
   939 root      20   0  261296   7568   2140 S   0.0  0.3   0:01.34 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.23 /usr/bin/+
   944 root      20   0 1276356   7880    228 S   0.0  0.3   0:24.77 /usr/bin/+
   947 cpanelc+  20   0   10308   3344   2408 S   0.0  0.1   0:05.15 /usr/loca+
   952 root      20   0  396248    792    608 S   0.0  0.0   0:00.27 php-fpm: +
   957 root      20   0  388892    776    676 S   0.0  0.0   0:00.24 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  36964   5772 S   0.0  1.5   0:03.62 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.12 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:01.00 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.13 /usr/bin/+
   974 root      20   0  389508    816    612 S   0.0  0.0   0:00.22 php-fpm: +
  1080 dovenull  20   0   46912   1716   1084 S   0.0  0.1   0:00.10 dovecot/p+
  1081 dovenull  20   0   47340   2300   1284 S   0.0  0.1   0:00.05 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.00 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.06 dovecot/l+
  1084 dovenull  20   0   46984   2652   1920 S   0.0  0.1   0:00.11 dovecot/p+
  1085 dovenull  20   0   47172   2820   2020 S   0.0  0.1   0:00.04 dovecot/i+
  1091 root      20   0   24396   2296    624 S   0.0  0.1   0:00.05 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.01 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:03.56 /usr/loca+
  1160 dovecot   20   0   41056   1472   1040 S   0.0  0.1   0:00.11 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.04 SonarPush+
  1176 wp-tool+  20   0  387556   5008   1640 S   0.0  0.2   0:00.13 /usr/bin/+
  1177 wp-tool+  20   0  412368  32304   1528 S   0.0  1.3   0:02.10 /usr/bin/+
  1211 root      20   0  209168  11492   1972 S   0.0  0.5   0:00.82 tailwatchd
  1213 root      20   0  262224  20988   3136 S   0.0  0.9   0:00.47 cpdavd - +
  1216 root      20   0  167452   4184   2812 S   0.0  0.2   0:00.17 dnsadmin +
  1627 root      20   0  299272    840    500 S   0.0  0.0   0:00.16 php-fpm: +
  1673 root      38  18  130416   1584    820 S   0.0  0.1   0:00.01 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:00.85 /usr/sbin+
  1932 root      20   0   12756    516    376 S   0.0  0.0   0:00.80 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:00.70 /usr/loca+
  1934 root      20   0   12768    492    348 S   0.0  0.0   0:00.74 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  263740 127112   1780 S   0.0  5.3   0:00.78 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.05 [kworker]
 40218 root      20   0  181272  28712   1648 S   0.0  1.2   0:03.80 lfd - sle+
 51858 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 54816 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59515 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 61800 nobody    20   0  277892  20816   4948 S   0.0  0.9   0:03.30 /usr/sbin+
 62652 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72665 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72707 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77779 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 80883 nobody    20   0  277616  20164   4904 S   0.0  0.8   0:01.27 /usr/sbin+
 81046 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81159 nobody    20   0  277656  19760   4692 S   0.0  0.8   0:01.58 /usr/sbin+
 82071 root      20   0       0      0      0 R   0.0  0.0   0:00.03 [kworker/+
 82191 nobody    20   0  277756  20212   4704 S   0.0  0.8   0:01.25 /usr/sbin+
 82386 nobody    20   0  277672  20120   4804 S   0.0  0.8   0:01.00 /usr/sbin+
 82401 nobody    20   0  277680  20112   4752 S   0.0  0.8   0:01.17 /usr/sbin+
 85245 nobody    20   0  277680  19952   4592 S   0.0  0.8   0:00.94 /usr/sbin+
 85925 nobody    20   0  277680  20004   4732 S   0.0  0.8   0:00.82 /usr/sbin+
 86521 nobody    20   0  277888  20036   4452 S   0.0  0.8   0:00.72 /usr/sbin+
 87540 nobody    20   0  277688  19992   4624 S   0.0  0.8   0:00.52 /usr/sbin+
 87558 nobody    20   0  277744  19716   4348 S   0.0  0.8   0:00.61 /usr/sbin+
 88802 nobody    20   0  277744  19584   4304 S   0.0  0.8   0:00.40 /usr/sbin+
 88823 nobody    20   0  277884  19744   4324 S   0.0  0.8   0:00.46 /usr/sbin+
 88825 nobody    20   0  277744  19612   4264 S   0.0  0.8   0:00.53 /usr/sbin+
 89833 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 89850 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90899 nobody    20   0  277744  19496   4216 S   0.0  0.8   0:00.29 /usr/sbin+
 90913 nobody    20   0  277744  19124   4028 S   0.0  0.8   0:00.37 /usr/sbin+
 91335 nobody    20   0  277884  19024   3880 S   0.0  0.8   0:00.23 /usr/sbin+
 91557 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92660 nobody    20   0  277744  18696   3652 S   0.0  0.8   0:00.10 /usr/sbin+
 92718 nobody    20   0  277744  18632   3556 S   0.0  0.8   0:00.08 /usr/sbin+
 92719 nobody    20   0  277744  19056   4008 S   0.0  0.8   0:00.06 /usr/sbin+
 92761 nobody    20   0  277464  18304   3564 S   0.0  0.8   0:00.03 /usr/sbin+
 92841 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 92994 nigeria   20   0  401180   8868   3916 S   0.0  0.4   0:00.19 php-fpm: +
 93084 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 93252 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 93313 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93314 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93315 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93316 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93318 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93323 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93324 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93326 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93327 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93328 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93329 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93330 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93331 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93332 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93333 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93334 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93335 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93336 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93338 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93339 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93342 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93343 root      20   0  183044   2216   1640 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 93349 root      20   0  108056    360    284 S   0.0  0.0   0:00.00 sleep 4h +
 93350 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 93351 root      20   0 1342492  15644    604 R   0.0  0.6   0:00.06 /usr/bin/+
 93360 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 93363 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 93365 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 93371 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93372 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 93374 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 93375 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93376 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93377 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93379 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93380 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 93383 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93384 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93385 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93386 root      20   0 1276060  10936    600 R   0.0  0.5   0:00.06 /usr/bin/+
 93387 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 93388 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93390 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 93391 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93393 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93397 root      35  15  113288   1444   1248 S   0.0  0.1   0:00.00 /bin/bash+
 93398 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 93401 root      20   0  188212  11092   5148 S   0.0  0.5   0:00.02 /usr/loca+
 93404 root      20   0 1277356  12024    600 S   0.0  0.5   0:00.06 /usr/bin/+
 93409 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 93424 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 93427 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 93435 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 93468 root      20   0  160224   2412   1636 S   0.0  0.1   0:00.01 top -n 2 +
 93557 root      35  15  127916   3024   2320 R   0.0  0.1   0:00.00 /usr/loca+
 93566 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 93567 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 93568 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      51858  0.0  0.0      0     0 ?        S    00:12   0:00  \_ [kworker/u200:2]
root      54816  0.0  0.0      0     0 ?        S    00:16   0:00  \_ [kworker/0:0]
root      59515  0.0  0.0      0     0 ?        S    00:21   0:00  \_ [kworker/1:3]
root      62652  0.0  0.0      0     0 ?        S    00:24   0:00  \_ [kworker/u200:1]
root      72665  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/0:4]
root      72707  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/1:1]
root      77779  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/1:0]
root      81046  0.0  0.0      0     0 ?        D    00:46   0:00  \_ [kworker/0:5]
root      82071  0.0  0.0      0     0 ?        S    00:47   0:00  \_ [kworker/1:2]
root      89833  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/1:4]
root      89850  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/0:1]
root      91557  0.0  0.0      0     0 ?        D    00:58   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44400  3480 ?        Rs   Nov16   0:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39500  5512 ?        Rs   Nov16   0:03 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   568 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   284 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1292 ?        Ssl  Nov16   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:01 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   176 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   560 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Rs   Nov16   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1532 ?        Ssl  Nov16   0:05 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5776 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   584 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93313  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93350  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      93351  6.0  0.6 1342492 15644 ?       Sl   01:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      93314  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93390  0.0  0.0 113284  1208 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      93404  6.0  0.4 1277356 12024 ?       Sl   01:00   0:00  |       \_ /usr/bin/update_imunify
root      93315  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93360  0.0  0.0 113284  1208 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      93386  6.0  0.4 1276316 10936 ?       Sl   01:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      93316  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93363  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      93397  0.0  0.0 113288  1444 ?        SN   01:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      93557  0.0  0.1 127916  3024 ?        RN   01:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      93318  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   360 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      93323  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93365  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      93398  0.0  0.0 108052   356 ?        S    01:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      93409  0.0  0.0 113288  1516 ?        S    01:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      93571  0.0  0.0 153840  2096 ?        R    01:00   0:00  |               \_ ps auxf
root      93324  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93383  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      93326  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93393  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      93327  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93377  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      93328  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93375  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      93329  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93391  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      93330  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93380  0.0  0.0  20164   984 ?        Ss   01:00   0:00  |   \_ jailshell (cloudsms) [93567] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  93567  0.0  0.0  20164   256 ?        S    01:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  93568  0.0  0.0 113284  1212 ?        S    01:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  93569  0.0  0.6 404052 15608 ?        S    01:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      93331  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93379  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      93332  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93376  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      93333  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93384  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      93334  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93385  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      93335  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93371  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      93336  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93388  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      93338  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93387  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      93401  2.0  0.4 188212 11092 ?        S    01:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      93468  0.0  0.0 160224  2412 ?        S    01:00   0:00  |           \_ top -n 2 -b -c
root      93339  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93374  0.0  0.0  20164   968 ?        Ss   01:00   0:00  |   \_ jailshell (pactpay) [93427] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93427  0.0  0.0  20164   264 ?        S    01:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93435  2.0  0.7 480124 17688 ?        S    01:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      93342  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93372  0.0  0.0  20164   960 ?        Ss   01:00   0:00      \_ jailshell (nigeria) [93424] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93424  0.0  0.0  20164   256 ?        S    01:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93439  5.0  0.6 404052 16140 ?        S    01:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208    60 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3848 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:00 /usr/sbin/sshd -D
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 232784  5068 ?        Ssl  Nov16   0:01 /usr/sbin/rsyslogd -n
named       918  0.0  1.3 924724 32196 ?        Ssl  Nov16   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.2 17.5 1763124 425636 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   668 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  1716 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47340  2300 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2652 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47172  2820 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24396  2296 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41056  1472 ?        S    Nov16   0:00  \_ dovecot/auth
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  92841  0.0  0.0 445028   316 ?        S    00:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11436 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13848 ?        Ssl  Nov16   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7568 ?        Ss   Nov16   0:01 cpsrvd (SSL) - waiting for connections                   
root      93252  0.0  0.0      0     0 ?        Z    00:59   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.3  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.4  0.3 1276356 7880 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3344 ?        Ss   Nov16   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   792 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   776 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.5 5654048 36964 ?       SLsl Nov16   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   92994  1.3  0.3 401180  8868 ?        S    00:59   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   93084  0.0  0.1 400460  4420 ?        S    00:59   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   816 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.2 263740 127112 ?       S    Nov16   0:00  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5008 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32304 ?        Ss   Nov16   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209168 11492 ?        Ss   Nov16   0:00 tailwatchd
root       1213  0.0  0.8 262224 20988 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.1 167452  4184 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   840 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1584 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:00 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12756   516 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12768   492 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    61800  0.1  0.8 277892 20816 ?        S    00:23   0:03  \_ /usr/sbin/httpd -k start
nobody    80883  0.1  0.8 277616 20164 ?        S    00:45   0:01  \_ /usr/sbin/httpd -k start
nobody    81159  0.1  0.8 277656 19760 ?        S    00:46   0:01  \_ /usr/sbin/httpd -k start
nobody    82191  0.1  0.8 277756 20212 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    82386  0.1  0.8 277672 20120 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    82401  0.1  0.8 277680 20112 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    85245  0.1  0.8 277680 19952 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    85925  0.1  0.8 277680 20004 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    93572  0.0  0.6 277680 16492 ?        R    01:00   0:00  |   \_ /usr/sbin/httpd -k start
nobody    86521  0.1  0.8 277888 20036 ?        S    00:52   0:00  \_ /usr/sbin/httpd -k start
nobody    87540  0.1  0.8 277688 19992 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
nobody    87558  0.1  0.8 277744 19716 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
nobody    88802  0.1  0.8 277744 19584 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody    88823  0.1  0.8 277884 19744 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody    88825  0.1  0.8 277744 19612 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody    90899  0.1  0.8 277744 19496 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody    90913  0.2  0.7 277744 19124 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody    91335  0.1  0.7 277884 19024 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody    92660  0.2  0.7 277744 18696 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody    92718  0.2  0.7 277744 18632 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody    92719  0.1  0.7 277744 19056 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody    92761  0.0  0.7 277464 18304 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.1 10.4 1461276 251776 ?      Sl   Nov16   1:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.1 181272 28712 ?        Ss   00:00   0:03 lfd - sleeping
## mysql stats
Uptime: 6028  Threads: 5  Questions: 432757  Slow queries: 0  Opens: 2794  Flush tables: 1  Open tables: 1977  Queries per second avg: 71.791
*************************** 1. row ***************************
     Id: 6410
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29_19_05_001' LIMIT 1
*************************** 2. row ***************************
     Id: 6411
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 6420
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 148.113.128.138 TIME_WAIT
      1 148.113.128.15 TIME_WAIT
      1 157.55.39.15 TIME_WAIT
      1 167.99.73.138 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.11.166.192 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.244.66.229 TIME_WAIT
      1 43.164.195.17 TIME_WAIT
      1 51.222.168.16 TIME_WAIT
      1 54.39.0.198 TIME_WAIT
      1 93.174.93.12 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.99 TIME_WAIT
      2 43.164.196.57 TIME_WAIT
      3 173.236.139.190 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 01:00:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 41 minutes 13 seconds
   Server load: 0.36 0.33 0.32
   Total accesses: 35980 - Total Traffic: 955.1 MB - Total Duration: 18506252
   CPU Usage: u11.34 s5.23 cu488.88 cs400.09 - 14.9% CPU load
   5.92 requests/sec - 161.0 kB/second - 27.2 kB/request - 514.348 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_K..KKW___.KK_RR_K._KWK._...................K...................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol            VHost                               Request
   0-0  85245 0/176/1631 _ 4.70  0    0   830842 0.0   3.95  43.56 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80       GET /whm-server-status HTTP/1.0
   1-0  82386 2/169/1429 K 4.10  2    400 760480 67.2  5.30  40.44 192.178.4.99   http/1.1 team.cloudware.ng:443        GET /?l=3743462344 HTTP/1.1
   2-0  -     0/0/1401   . 0.00  18   0   722219 0.0   0.00  38.43 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   3-0  -     0/0/1552   . 0.00  19   0   772248 0.0   0.00  38.19 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   4-0  90899 4/50/1480  K 1.24  3    350 737281 126.4 1.29  41.73 192.178.4.103  http/1.1 team.cloudware.ng:443        GET /?l=638566843 HTTP/1.1
   5-0  90913 8/60/1413  K 1.61  4    259 703462 251.0 1.69  38.41 192.178.4.96   http/1.1 team.cloudware.ng:443        GET /?l=960831718 HTTP/1.1
   6-0  85925 3/144/1514 W 3.51  0    0   741682 99.3  4.17  41.29 192.178.4.100  http/1.1 team.cloudware.ng:443        GET /?l=4267502784 HTTP/1.1
   7-0  91335 0/39/1353  _ 0.96  1    267 694035 0.0   1.11  34.77 192.178.4.105  http/1.1 team.cloudware.ng:443        GET /?l=755439777 HTTP/1.1
   8-0  87540 0/95/1384  _ 2.10  0    1   688558 0.0   2.73  36.05 216.244.66.229 http/1.1 team.cloudware.ng:80         GET /robots.txt HTTP/1.1
   9-0  92660 0/18/1298  _ 0.42  0    8   681405 0.0   0.45  34.59 216.244.66.229 http/1.1 emailservice.cloudware.ng:80 GET /robots.txt HTTP/1.1
   10-0 -     0/0/1400   . 0.00  17   0   728970 0.0   0.00  37.34 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   11-0 80883 1/217/1355 K 6.53  3    396 756608 35.6  6.10  37.06 192.178.4.97   http/1.1 team.cloudware.ng:443        GET /?l=1152295446 HTTP/1.1
   12-0 92718 7/14/1244  K 0.32  3    352 660341 217.9 0.40  32.57 192.178.4.105  http/1.1 team.cloudware.ng:443        GET /?l=546338900 HTTP/1.1
   13-0 92719 0/11/1469  _ 0.21  0    0   779684 0.0   0.27  39.93 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   14-0 88802 0/79/1364  R 1.93  72   259 717019 0.0   1.42  36.62 192.178.4.98   http/1.1 team.cloudware.ng:443        GET /?l=1566632396 HTTP/1.1
   15-0 92761 0/9/1269   R 0.13  4    23  653904 0.0   0.04  34.23 101.53.245.15  http/1.1 cloudware.ng:443
   16-0 81159 0/249/1062 _ 6.75  1    261 580722 0.0   7.45  29.89 192.178.4.97   http/1.1 team.cloudware.ng:443        GET /?l=1819740908 HTTP/1.1
   17-0 86521 2/124/1153 K 3.65  1    24  603977 6.5   4.44  30.80 66.249.70.7    http/1.1 test.cloudware.ng:443        GET /888923039?goodscode=0887758766 HTTP/1.1
   18-0 -     0/0/904    . 0.00  302  0   466578 0.0   0.00  23.52 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   19-0 82401 0/208/779  _ 5.10  1    259 388703 0.0   8.48  23.89 192.178.4.98   http/1.1 team.cloudware.ng:443        GET /?l=2373656555 HTTP/1.1
   20-0 82191 7/216/973  K 5.44  1    396 473429 223.6 5.89  23.34 192.178.4.102  http/1.1 team.cloudware.ng:443        GET /?l=1526028521 HTTP/1.1
   21-0 87558 0/107/1120 W 2.76  0    0   608564 0.0   2.46  31.69 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   22-0 88823 5/82/670   K 1.81  1    345 365354 157.6 1.96  17.25 192.178.4.104  http/1.1 team.cloudware.ng:443        GET /?l=499316336 HTTP/1.1
   23-0 -     0/0/845    . 0.00  148  0   430392 0.0   0.00  22.54 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   24-0 88825 0/88/933   _ 2.23  1    269 499556 0.0   2.53  24.73 192.178.4.98   http/1.1 team.cloudware.ng:443        GET /?l=3883593287 HTTP/1.1
   25-0 -     0/0/487    . 0.00  304  0   219828 0.0   0.00  12.45 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   26-0 -     0/0/154    . 0.00  1194 0   70198  0.0   0.00  3.20  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   27-0 -     0/0/515    . 0.00  892  0   259525 0.0   0.00  13.03 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   28-0 -     0/0/442    . 0.00  2153 0   227041 0.0   0.00  11.06 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   29-0 -     0/0/70     . 0.00  2167 0   36084  0.0   0.00  1.51  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   30-0 -     0/0/274    . 0.00  1573 0   126063 0.0   0.00  6.58  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   31-0 -     0/0/459    . 0.00  889  0   223052 0.0   0.00  10.36 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   32-0 -     0/0/71     . 0.00  2184 0   32316  0.0   0.00  1.29  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00  2179 0   46426  0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00  2172 0   156256 0.0   0.00  7.78  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00  2166 0   6362   0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00  2112 0   85805  0.0   0.00  4.16  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00  2176 0   7767   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00  2159 0   77733  0.0   0.00  3.62  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   39-0 -     0/0/424    . 0.00  766  0   220703 0.0   0.00  11.36 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   40-0 -     0/0/88     . 0.00  2046 0   19096  0.0   0.00  1.31  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  2178 0   3054   0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00  2034 0   22487  0.0   0.00  0.98  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00  2177 0   52913  0.0   0.00  2.30  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   44-0 61800 1/578/605  K 14.64 2    353 331373 34.8  15.71 16.11 192.178.4.100  http/1.1 team.cloudware.ng:443        GET /?l=523983743 HTTP/1.1
   45-0 -     0/0/42     . 0.00  2182 0   19040  0.0   0.00  0.83  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00  2155 0   5124   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00  2116 0   7973   0.0   0.00  0.58  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00  1867 0   40607  0.0   0.00  1.94  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00  2170 0   18588  0.0   0.00  0.72  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00  2165 0   3381   0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00  2139 0   3457   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  4874 0   1702   0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00  4850 0   2649   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  4873 0   1806   0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00  4795 0   13156  0.0   0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00  4040 0   98784  0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  4735 0   19861  0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1324
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...34)
   index usage: 23%, cache usage: 31%
   total entries stored since starting: 27573
   total entries replaced since starting: 0
   total entries expired since starting: 26248
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 65 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit