403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.01.00.txt
 ## swap threshold exceeded
## server overview
2025-11-20.01.00 load[2] mem[77/32] mysql[3/7] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1801          73          17         488         393
Swap:          1999         685        1314
 01:00:02 up 5 min,  0 users,  load average: 2.31, 1.50, 0.77
## system overview
top - 01:00:02 up 5 min,  0 users,  load average: 2.31, 1.50, 0.77
Tasks: 234 total,   7 running, 226 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.3 us, 35.5 sy,  3.2 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    65772 free,  1843644 used,   510884 buff/cache
KiB Swap:  2047996 total,  1346300 free,   701696 used.   397432 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1458976 192452   4296 S  75.0  8.0   0:05.70 /usr/sbin+
  6865 cloudsms  20   0  404052  15616  10128 S  12.5  0.6   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 R   6.2  0.0   0:02.92 [kswapd0]
  6679 root      35  15  140888   6028   2904 S   6.2  0.2   0:00.01 /usr/loca+
  6758 nigeria   20   0  404052  16136  10380 R   6.2  0.7   0:00.03 /opt/cpan+
  6809 locatio+  20   0  406668  20344  11240 S   6.2  0.8   0:00.03 /opt/cpan+
  6851 root      20   0  160220   2064   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44256   3164   1408 S   0.0  0.1   0:01.21 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   230 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.27 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   3436   3140 S   0.0  0.1   0:00.32 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    312    200 S   0.0  0.0   0:00.03 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    904    568 S   0.0  0.0   0:00.06 /usr/lib/+
   477 dbus      20   0   58724   1324    624 S   0.0  0.1   0:00.21 /usr/bin/+
   486 rpc       20   0   69256    176     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24700   1160    812 S   0.0  0.0   0:00.09 /usr/lib/+
   499 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1320    672 S   0.0  0.1   0:00.24 /usr/sbin+
   506 root      20   0  224144   6364    788 S   0.0  0.3   0:00.07 queueproc+
   508 root      20   0   21540    424    312 S   0.0  0.0   0:00.00 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.01 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   88988   3428    432 S   0.0  0.1   0:00.03 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:00.07 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    316    224 S   0.0  0.0   0:00.01 pure-ftpd+
   921 systuser  20   0   10388     32      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    464    308 S   0.0  0.0   0:00.04 /usr/sbin+
   925 systuser  20   0  113676   2080      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.00 /usr/bin/+
   927 telegraf  20   0 5654048  40480   7168 S   0.0  1.7   0:00.33 /usr/loca+
   928 systuser  20   0  114016  12968   2432 S   0.0  0.5   0:00.12 /usr/loca+
   929 root      20   0 1276100   9312     12 S   0.0  0.4   0:30.43 /usr/bin/+
   930 root      20   0 1277312  12716     52 S   0.0  0.5   0:23.22 /usr/bin/+
   931 systuser  20   0   12660     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  216400   3996   2568 S   0.0  0.2   0:00.16 /usr/sbin+
   935 root      20   0  439788  11416  11208 S   0.0  0.5   0:00.11 php-fpm: +
   936 named     20   0  637996  19064   1584 S   0.0  0.8   0:00.47 /usr/sbin+
   938 root      20   0  261028   2912    840 S   0.0  0.1   0:00.14 cpsrvd (S+
   942 root      20   0  400740   2880    644 S   0.0  0.1   0:00.19 php-fpm: +
   947 root      20   0 1689580 933464      0 S   0.0 38.6   0:13.57 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.04 /usr/sbin+
   972 root      20   0  389508    288    200 S   0.0  0.0   0:00.07 php-fpm: +
   979 cpanelc+  20   0    9700   2424   2204 S   0.0  0.1   0:00.27 /usr/loca+
   982 root      20   0  396248    248    168 S   0.0  0.0   0:00.08 php-fpm: +
   984 root      20   0  388892    228    144 S   0.0  0.0   0:00.07 php-fpm: +
   985 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.07 sw-engine+
   986 systuser  20   0  113272   2084      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    816    348 S   0.0  0.0   0:00.16 /usr/bin/+
  1116 dovenull  20   0   46912   2740   2156 S   0.0  0.1   0:00.01 dovecot/p+
  1117 dovenull  20   0   46780     40     40 S   0.0  0.0   0:00.00 dovecot/i+
  1118 dovecot   20   0   10320    308    196 S   0.0  0.0   0:00.00 dovecot/a+
  1119 root      20   0   10452    580    432 S   0.0  0.0   0:00.00 dovecot/l+
  1120 dovenull  20   0   46912   2672   2100 S   0.0  0.1   0:00.01 dovecot/p+
  1121 dovenull  20   0   46780     40     40 S   0.0  0.0   0:00.00 dovecot/i+
  1128 root      20   0   24396   1744    496 S   0.0  0.1   0:00.01 dovecot/c+
  1133 systuser  20   0  157708   2864    824 S   0.0  0.1   0:00.01 SonarPush+
  1137 dovecot   20   0   13568    428    256 S   0.0  0.0   0:00.00 dovecot/s+
  1172 root      20   0   25760    568      0 S   0.0  0.0   0:01.47 spamd-dor+
  1190 dovecot   20   0   41056    908    696 S   0.0  0.0   0:00.01 dovecot/a+
  1258 wp-tool+  20   0  412368  30200   1104 S   0.0  1.2   0:00.35 /usr/bin/+
  1259 wp-tool+  20   0  387528  12056   1396 S   0.0  0.5   0:00.09 /usr/bin/+
  1294 root      20   0  167452    884    428 S   0.0  0.0   0:00.04 dnsadmin +
  1298 root      20   0  183900     72     72 S   0.0  0.0   0:00.09 cpdavd - +
  1300 root      20   0  209032   9876   1292 S   0.0  0.4   0:00.36 tailwatchd
  1692 root      20   0  299272    368    220 S   0.0  0.0   0:00.01 php-fpm: +
  1709 root      38  18  130416    708     72 S   0.0  0.0   0:00.00 cpanellog+
  1943 root      20   0  266992  17316    796 S   0.0  0.7   0:00.12 /usr/sbin+
  1945 root      20   0   12788    428    212 S   0.0  0.0   0:00.03 /usr/loca+
  1946 root      20   0   12732    184      0 S   0.0  0.0   0:00.02 /usr/loca+
  1947 root      20   0   12800    432    212 S   0.0  0.0   0:00.03 /usr/loca+
  1952 root      20   0   53268   9476     92 S   0.0  0.4   0:00.04 /usr/loca+
  1955 nobody    20   0  277852  27132   3772 S   0.0  1.1   0:00.46 /usr/sbin+
  2017 root      20   0  181100  28040   1216 S   0.0  1.2   0:00.45 lfd - sle+
  2273 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  2552 root      20   0  222516  15568      0 S   0.0  0.6   0:00.00 /usr/bin/+
  2870 nobody    20   0  277904  27316   3880 S   0.0  1.1   0:00.32 /usr/sbin+
  2872 nobody    20   0  277652  27244   3852 S   0.0  1.1   0:00.26 /usr/sbin+
  2875 nobody    20   0  277892  27568   3996 S   0.0  1.1   0:00.45 /usr/sbin+
  2877 nobody    20   0  277912  27528   4088 S   0.0  1.1   0:00.36 /usr/sbin+
  2878 nobody    20   0  277908  27492   4040 S   0.0  1.1   0:00.41 /usr/sbin+
  3866 nobody    20   0  277892  27284   3876 S   0.0  1.1   0:00.33 /usr/sbin+
  3922 nobody    20   0  277784  27508   4056 S   0.0  1.1   0:00.30 /usr/sbin+
  4034 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4195 nobody    20   0  277760  27416   3988 S   0.0  1.1   0:00.34 /usr/sbin+
  4214 nobody    20   0  277760  27132   3644 S   0.0  1.1   0:00.34 /usr/sbin+
  4502 nobody    20   0  277760  27544   4104 S   0.0  1.1   0:00.29 /usr/sbin+
  4530 nobody    20   0  277504  27192   3972 S   0.0  1.1   0:00.23 /usr/sbin+
  4787 nobody    20   0  277760  27492   4060 S   0.0  1.1   0:00.23 /usr/sbin+
  4809 nobody    20   0  277760  26996   3588 S   0.0  1.1   0:00.17 /usr/sbin+
  4823 nobody    20   0  277896  27416   3996 S   0.0  1.1   0:00.24 /usr/sbin+
  4824 nobody    20   0  277760  27456   4028 S   0.0  1.1   0:00.14 /usr/sbin+
  5661 nobody    20   0  277760  27144   3724 S   0.0  1.1   0:00.15 /usr/sbin+
  6131 nobody    20   0  277900  27084   3700 S   0.0  1.1   0:00.06 /usr/sbin+
  6304 nobody    20   0  277912  27224   3808 S   0.0  1.1   0:00.04 /usr/sbin+
  6354 mailnull  20   0   89532   5592   2444 S   0.0  0.2   0:00.00 /usr/sbin+
  6368 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
  6400 mailnull  20   0   89532   5592   2444 S   0.0  0.2   0:00.00 /usr/sbin+
  6427 healtho+  20   0  451564  59280   4096 S   0.0  2.4   0:00.67 php-fpm: +
  6610 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
  6617 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6618 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6619 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6620 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6622 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6623 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6626 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6627 root      20   0  183052   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6628 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6629 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6631 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6632 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6633 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6634 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6635 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6636 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6637 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6638 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6640 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6641 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6642 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6645 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6646 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  6651 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  6652 root      35  15  113288   1424   1240 S   0.0  0.1   0:00.00 /bin/bash+
  6672 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  6676 root      20   0 1342380  11640    600 S   0.0  0.5   0:00.06 /usr/bin/+
  6684 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6685 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  6687 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6688 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
  6689 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  6692 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  6693 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
  6695 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  6697 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6698 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6699 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  6701 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  6702 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6703 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  6704 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6705 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  6706 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  6708 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6709 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  6710 root      20   0   20164   1220    956 S   0.0  0.1   0:00.00 jailshell+
  6712 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6713 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  6715 root      20   0 1276060  10944    596 S   0.0  0.5   0:00.05 /usr/bin/+
  6716 root      20   0  188200  11076   5148 S   0.0  0.5   0:00.02 /usr/loca+
  6717 root      20   0 1349280  10540    600 S   0.0  0.4   0:00.05 /usr/bin/+
  6722 root      20   0  108056    356    284 S   0.0  0.0   0:00.00 sleep 2h +
  6723 root      20   0  114252   2408   1268 S   0.0  0.1   0:00.00 bash /usr+
  6727 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  6740 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6744 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
  6757 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    636    212 S   0.0  0.0   0:00.00 [kworker]
  6790 locatio+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  6799 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  6800 locatio+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  6811 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  6817 cloudsms  20   0  404052  15348  10008 S   0.0  0.6   0:00.01 /opt/cpan+
  6844 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
  6861 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6864 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
  6871 root      35  15   47592    452    272 R   0.0  0.0   0:00.00 exim -bpc
  6874 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6875 root      20   0  114252   1140      0 R   0.0  0.0   0:00.00 bash /usr+
  6876 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  6877 cloudsms  20   0  178068   4060   2880 R   0.0  0.2   0:00.00 /opt/cpan+
  6878 nobody    20   0  277760  23428      0 R   0.0  1.0   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:1]
root         36  0.8  0.0      0     0 ?        S    00:54   0:02  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        104  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        230  0.0  0.0      0     0 ?        D    00:54   0:00  \_ [kworker/1:2]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:3]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2273  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/1:3]
root       4034  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/0:3]
root          1  0.3  0.1  44256  3164 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39496  3436 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   312 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   904 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1324 ?        Ss   00:54   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   176 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24700  1160 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   104 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780     0 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1320 ?        Ssl  00:54   0:00 /usr/sbin/nscd
root        506  0.0  0.2 224144  6364 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   424 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6617  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6695  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root       6715  5.0  0.4 1276060 10944 ?       Sl   01:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root       6618  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6672  0.0  0.0 113284  1208 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root       6676  6.0  0.4 1342380 11640 ?       Sl   01:00   0:00  |       \_ /usr/bin/update_imunify
root       6619  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6701  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root       6717  5.0  0.4 1349280 10540 ?       Sl   01:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root       6620  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6651  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root       6652  0.0  0.0 113288  1424 ?        SN   01:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root       6679  1.0  0.2 140888  6028 ?        SN   01:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root       6871  0.0  0.1  81744  2860 ?        SN   01:00   0:00  |               \_ exim -bpc
root       6622  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   356 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root       6623  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6699  0.0  0.0 113284  1208 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root       6723  0.0  0.0 114256  2408 ?        S    01:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       6881  0.0  0.0 114256  1144 ?        R    01:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       6626  0.0  0.0 183052  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6689  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       6713  0.0  0.0 108052   360 ?        S    01:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       6727  0.0  0.0 113288  1516 ?        S    01:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       6879  0.0  0.0 153840  2092 ?        R    01:00   0:00  |               \_ ps auxf
root       6627  0.0  0.0 183052  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6704  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       6629  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6693  0.0  0.0  20164   812 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       6631  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6702  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       6632  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6698  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       6633  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6687  0.0  0.0  20164   804 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       6634  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6692  0.0  0.0  20164   984 ?        Ss   01:00   0:00  |   \_ jailshell (cloudsms) [6874] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   6874  0.0  0.0  20164   260 ?        S    01:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   6876  0.0  0.0 113284  1212 ?        S    01:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   6877  0.0  0.6 404052 15876 ?        S    01:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root       6635  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6688  0.0  0.0  20164   988 ?        Ss   01:00   0:00  |   \_ jailshell (cloudsms) [6799] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   6799  0.0  0.0  20164   264 ?        S    01:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   6811  0.0  0.0 113284  1212 ?        S    01:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   6817  0.0  0.6 404052 15348 ?        S    01:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root       6636  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6712  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       6637  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6684  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       6638  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6697  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       6640  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6708  0.0  0.0  20164   808 ?        Ss   01:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root       6641  0.0  0.0 183048  2152 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6709  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       6716  2.0  0.4 188200 11076 ?        S    01:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       6844  0.0  0.0 160224  2368 ?        S    01:00   0:00  |           \_ top -n 2 -b -c
root       6642  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6703  0.0  0.0  20164   964 ?        Ss   01:00   0:00  |   \_ jailshell (pactpay) [6740] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6740  0.0  0.0  20164   260 ?        S    01:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6744  0.0  0.7 480124 17688 ?        S    01:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       6645  0.0  0.0 183048  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6705  0.0  0.0  20164   964 ?        Ss   01:00   0:00  |   \_ jailshell (nigeria) [6757] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6757  0.0  0.0  20164   260 ?        S    01:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6758  0.0  0.6 404052 16136 ?        S    01:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       6646  0.0  0.0 183048  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6710  0.0  0.0  20164  1220 ?        Ss   01:00   0:00      \_ jailshell (locationforms) [6790] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+   6790  0.0  0.0  20164   264 ?        S    01:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+   6800  0.0  0.0 113284  1212 ?        S    01:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+   6809  0.0  0.8 406668 20344 ?        S    01:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  88988  3428 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   6354  0.0  0.2  89532  5592 ?        S    00:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   6400  0.0  0.2  89532  5592 ?        S    00:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   316 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    32 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   464 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.1  46912  2740 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.0  46780    40 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   308 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   580 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.1  46912  2672 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.0  46780    40 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24396  1744 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   428 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41056   908 ?        S    00:54   0:00  \_ dovecot/auth
root       6368  0.0  0.1  41052  2724 ?        S    00:59   0:00  \_ dovecot/auth -w
systuser    925  0.0  0.0 113676  2080 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 40480 ?       SLsl 00:54   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.5 114016 12968 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  8.7  0.3 1276100 9312 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  6.6  0.5 1277312 12716 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.1 216400  3996 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11416 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.1  0.7 637996 19064 ?        Ssl  00:54   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.1 261028  2912 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root       6610  0.0  0.0      0     0 ?        Z    01:00   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        942  0.0  0.1 400740  2880 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   6427 22.3  2.4 451564 59280 ?        S    00:59   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        947  3.8 38.5 1689580 933464 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root        972  0.0  0.0 389508   288 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1   9700  2424 ?        Ss   00:54   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   248 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   228 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    986  0.0  0.0 113272  2084 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   816 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2864 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.4  0.0  25760   568 ?        Ss   00:54   0:01 spamd-dormant: waiting for connections [5,6] --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5,6
wp-tool+   1258  0.1  1.2 412368 30200 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.4 387528 12056 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.0 167452   884 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.0 183900    72 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.1  0.4 209032  9876 ?        Ss   00:54   0:00 tailwatchd
root       1692  0.0  0.0 299272   368 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416   708 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  1.6  7.9 1458976 192540 ?      Sl   00:54   0:05 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.7 266992 17316 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12788   428 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   184 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12800   432 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.3  53268  9476 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1955  0.1  1.1 277852 27132 ?        R    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     2870  0.1  1.1 277904 27316 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     2872  0.1  1.1 277652 27244 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     2875  0.1  1.1 277892 27568 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     2877  0.1  1.1 277912 27528 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     2878  0.1  1.1 277908 27492 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     3866  0.1  1.1 277892 27284 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     3922  0.1  1.1 277784 27508 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     4195  0.1  1.1 277760 27416 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
cloudw     6878  0.0  0.2 155556  6216 ?        R    01:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     4214  0.1  1.1 277760 27132 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4502  0.1  1.1 277760 27544 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4530  0.1  1.1 277504 27192 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4787  0.1  1.1 277760 27492 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4809  0.1  1.1 277760 26996 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4823  0.1  1.1 277896 27416 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4824  0.0  1.1 277760 27456 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     5661  0.2  1.1 277760 27144 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody     6131  0.1  1.1 277900 27084 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     6304  0.2  1.1 277912 27224 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.1  1.1 181100 28040 ?        Ss   00:54   0:00 lfd - sleeping
root       2552  0.0  0.6 222516 15568 ?        S    00:55   0:00 /usr/bin/python3 -m kcarectl.__main__ --smart-update
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   636 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 345  Threads: 3  Questions: 35180  Slow queries: 0  Opens: 832  Flush tables: 1  Open tables: 810  Queries per second avg: 101.971
*************************** 1. row ***************************
     Id: 598
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 600
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 609
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.195.244.176 TIME_WAIT
      1 51.222.168.5 TIME_WAIT
      1 74.7.242.30 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 01:00:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 minutes 39 seconds
   Server load: 2.31 1.50 0.77
   Total accesses: 1524 - Total Traffic: 34.6 MB - Total Duration: 816069
   CPU Usage: u3.81 s1.42 cu12.78 cs11.09 - 8.58% CPU load
   4.5 requests/sec - 104.4 kB/second - 23.2 kB/request - 535.478 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KWW_K......_KKW.KKRW_.WKRKR.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID    Acc   M CPU  SS  Req  Dur  Conn  Child Slot     Client     Protocol              VHost                                          Request
   0-0  5661 2/27/57 K 0.58 0   341 28006 63.9  0.65  1.08 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=2258533911 HTTP/1.1
   1-0  6131 0/15/53 W 0.22 0   0   30781 0.0   0.26  0.92 44.217.177.142 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/blog/assets/css/polling_u
   2-0  1955 1/81/81 W 1.69 0   0   44285 34.5  2.02  2.02 192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=2493542104 HTTP/1.1
   3-0  6304 0/8/61  _ 0.12 0   0   33383 0.0   0.17  1.38 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   4-0  3866 1/61/76 K 1.34 1   338 38076 33.9  1.46  1.58 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=2458761821 HTTP/1.1
   5-0  -    0/0/145 . 0.00 106 0   96503 0.0   0.00  1.63 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   6-0  -    0/0/27  . 0.00 112 0   17651 0.0   0.00  0.62 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-0  -    0/0/23  . 0.00 134 0   17881 0.0   0.00  0.40 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  -    0/0/116 . 0.00 135 0   69912 0.0   0.00  0.89 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-0  -    0/0/35  . 0.00 99  0   22957 0.0   0.00  0.88 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-0 -    0/0/32  . 0.00 105 0   20753 0.0   0.00  0.80 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 2870 0/62/62 _ 1.26 0   0   27207 0.0   2.73  2.73 165.227.173.41 http/1.1 oysipa.oyostate.gov.ng:443      GET /swagger-ui.html HTTP/1.1
   12-0 3922 1/53/57 K 1.24 1   347 30906 34.0  1.50  1.52 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=4034921334 HTTP/1.1
   13-0 2872 2/53/53 K 0.94 2   420 27288 67.5  1.37  1.37 66.249.70.32   http/1.1 support.cloudware.ng:443        GET /odr/order/apiGetCartItems/ HTTP/1.1
   14-0 4195 1/59/60 W 1.35 0   0   31732 34.7  1.49  1.49 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=2039973794 HTTP/1.1
   15-0 -    0/0/15  . 0.00 133 0   7464  0.0   0.00  0.33 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 2875 2/76/76 K 1.94 0   133 41914 10.5  2.12  2.12 109.105.210.60 http/1.1 horizon.staging.cloudware.ng:44 GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   17-0 4214 8/56/58 K 1.44 4   259 30370 249.8 1.50  1.50 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=3230564896 HTTP/1.1
   18-0 2877 0/62/62 R 1.72 3   5   30812 0.0   1.60  1.60 102.91.4.76    http/1.1
   19-0 2878 0/75/75 W 1.67 0   0   40061 0.0   1.81  1.81 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   20-0 4502 0/51/52 _ 1.21 0   13  27937 0.0   1.33  1.33 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   21-0 -    0/0/33  . 0.00 41  0   17184 0.0   0.00  0.89 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 4530 4/43/43 W 0.87 0   0   21958 126.5 2.31  2.31 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=1749542673 HTTP/1.1
   23-0 4787 1/38/38 K 0.86 1   348 20559 33.5  0.98  0.98 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=3343800240 HTTP/1.1
   24-0 4809 0/64/64 R 0.46 1   5   9403  0.0   0.68  0.68 165.227.173.41 http/1.1 oysipa.oyostate.gov.ng:443
   25-0 4823 3/47/47 K 0.93 3   405 20849 96.7  1.04  1.04 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=3620076808 HTTP/1.1
   26-0 4824 0/23/23 R 0.51 36  0   10226 0.0   0.66  0.66 182.3.50.86    http/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1026
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 27 seconds, (range: 0...102)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 1055
   total entries replaced since starting: 0
   total entries expired since starting: 29
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit