403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.04.00.txt
 ## mem threshold exceeded
## server overview
2025-11-20.04.00 load[0] mem[82/30] mysql[1/7] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1903          73          20         386         276
Swap:          1999         675        1324
 04:00:01 up 21 min,  0 users,  load average: 0.59, 0.43, 0.41
## system overview
top - 04:00:02 up 21 min,  0 users,  load average: 0.59, 0.43, 0.41
Tasks: 236 total,  10 running, 224 sleeping,   0 stopped,   2 zombie
%Cpu(s): 68.8 us, 28.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,    62304 free,  1956956 used,   401040 buff/cache
KiB Swap:  2047996 total,  1356796 free,   691200 used.   275352 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1461712 190932   3072 S  93.3  7.9   0:16.52 /usr/sbin+
 18298 locatio+  20   0  406668  20344  11240 S  20.0  0.8   0:00.04 /opt/cpan+
     1 root      20   0   44268   3344   1564 S   6.7  0.1   0:02.44 /usr/lib/+
     9 root      20   0       0      0      0 S   6.7  0.0   0:01.25 [rcu_sche+
    36 root      20   0       0      0      0 R   6.7  0.0   0:05.35 [kswapd0]
  4722 nobody    20   0  277892  19996   4556 S   6.7  0.8   0:01.67 /usr/sbin+
 18279 nigeria   20   0  404052  16140  10384 S   6.7  0.7   0:00.04 /opt/cpan+
 18368 cloudw    20   0  366088  16600  10896 S   6.7  0.7   0:00.01 /opt/cpan+
 18369 cloudw    20   0  288176  15952  10472 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:00.26 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.40 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:00.43 [kworker/+
   276 root      20   0       0      0      0 R   0.0  0.0   0:00.07 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39496   5728   5456 S   0.0  0.2   0:00.76 /usr/lib/+
   387 root      20   0   45352    476    332 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    432    320 S   0.0  0.0   0:00.10 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24732   1240    884 S   0.0  0.1   0:00.31 /usr/lib/+
   471 root      20   0   52852    336    332 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58740   1456    740 S   0.0  0.1   0:00.70 /usr/bin/+
   476 rpc       20   0   69256    224    116 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1144    776 S   0.0  0.0   0:00.20 /usr/lib/+
   487 root      20   0   21540    492    380 S   0.0  0.0   0:00.02 /usr/sbin+
   492 root      20   0  152780    264    256 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224148   5688   1004 S   0.0  0.2   0:00.09 queueproc+
   507 nscd      20   0  928956   1344    724 S   0.0  0.1   0:01.01 /usr/sbin+
   515 root      20   0  195208    144    144 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    188    184 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    600    468 S   0.0  0.0   0:00.04 /usr/sbin+
   562 root      20   0  108296    272    268 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    284    284 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   88992   3496    496 S   0.0  0.1   0:00.04 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.34 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    492    412 S   0.0  0.0   0:00.02 pure-ftpd+
   932 root      20   0  572372   1052    588 S   0.0  0.0   0:00.21 /usr/bin/+
   933 systuser  20   0  112268   1880      0 S   0.0  0.1   0:00.00 /usr/loca+
   935 systuser  20   0  114016  15100   2472 S   0.0  0.6   0:00.41 /usr/loca+
   936 root      20   0 1277056  10396    220 S   0.0  0.4   0:21.09 /usr/bin/+
   937 root      20   0  445028   2808   2808 S   0.0  0.1   0:00.05 sw-engine+
   938 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0  111608   1596      0 S   0.0  0.1   0:00.00 /usr/loca+
   942 root      20   0  111304    612    504 S   0.0  0.0   0:00.15 /usr/sbin+
   943 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0 1349832   9540    184 S   0.0  0.4   0:28.01 /usr/bin/+
   945 root      20   0   51508    652    496 S   0.0  0.0   0:00.04 /usr/sbin+
   946 telegraf  20   0 5654304  37628   3468 S   0.0  1.6   0:00.94 /usr/loca+
   947 memcach+  20   0  342400    260    260 S   0.0  0.0   0:00.03 /usr/bin/+
   948 root      20   0 1689580 941184    276 S   0.0 38.9   0:13.40 /usr/loca+
   949 root      20   0  389508    492    408 S   0.0  0.0   0:00.10 php-fpm: +
   950 root      20   0  261028   4620   1036 S   0.0  0.2   0:00.24 cpsrvd (S+
   953 root      20   0  388892    544    460 S   0.0  0.0   0:00.10 php-fpm: +
   958 root      20   0  216400   5544   4392 S   0.0  0.2   0:00.38 /usr/sbin+
   986 root      20   0  396248    556    476 S   0.0  0.0   0:00.09 php-fpm: +
   990 root      20   0  439788  11480  11272 S   0.0  0.5   0:00.14 php-fpm: +
   994 root      20   0  400740   3192    788 S   0.0  0.1   0:00.26 php-fpm: +
   996 named     20   0  564260  25568   1256 S   0.0  1.1   0:01.13 /usr/sbin+
  1013 cpanelc+  20   0    9828   2656   2340 R   0.0  0.1   0:01.00 /usr/loca+
  1093 dovenull  20   0   46772    956    684 S   0.0  0.0   0:00.02 dovecot/p+
  1094 dovenull  20   0   47056   1536    788 S   0.0  0.1   0:00.01 dovecot/i+
  1095 dovecot   20   0   10320    336    224 S   0.0  0.0   0:00.00 dovecot/a+
  1096 root      20   0   10452    540    372 S   0.0  0.0   0:00.01 dovecot/l+
  1097 dovenull  20   0   46772   1096    812 S   0.0  0.0   0:00.02 dovecot/p+
  1098 dovenull  20   0   47056   2836   2088 S   0.0  0.1   0:00.01 dovecot/i+
  1104 root      20   0   24528   2076    536 S   0.0  0.1   0:00.03 dovecot/c+
  1110 dovecot   20   0   13568    752    540 S   0.0  0.0   0:00.00 dovecot/s+
  1145 systuser  20   0  157704   2280    292 S   0.0  0.1   0:00.01 SonarPush+
  1166 root      20   0  248076 119624   2960 S   0.0  4.9   0:02.98 /usr/loca+
  1170 dovecot   20   0   41192   1460   1008 S   0.0  0.1   0:00.04 dovecot/a+
  1175 wp-tool+  20   0  412368  30420   1324 S   0.0  1.3   0:00.63 /usr/bin/+
  1176 wp-tool+  20   0  387528  12180   1520 S   0.0  0.5   0:00.09 /usr/bin/+
  1234 root      20   0  167452   1512    912 S   0.0  0.1   0:00.06 dnsadmin +
  1235 root      20   0  262224  22288   4432 S   0.0  0.9   0:00.26 cpdavd - +
  1237 root      20   0  209216  10160   1568 S   0.0  0.4   0:00.32 tailwatchd
  1669 root      20   0  299272    884    504 S   0.0  0.0   0:00.03 php-fpm: +
  1701 root      38  18  130416   1460    744 S   0.0  0.1   0:00.00 cpanellog+
  1959 root      20   0  266992   8420    856 S   0.0  0.3   0:00.21 /usr/sbin+
  1962 root      20   0   12784    480    388 S   0.0  0.0   0:00.13 /usr/loca+
  1963 root      20   0   12732    436    364 S   0.0  0.0   0:00.12 /usr/loca+
  1964 root      20   0   12800    456    352 S   0.0  0.0   0:00.13 /usr/loca+
  1968 root      20   0   53340    284    284 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  181060  28060   1260 S   0.0  1.2   0:01.39 lfd - sle+
  3908 nobody    20   0  277764  20224   4692 S   0.0  0.8   0:01.63 /usr/sbin+
  4582 nobody    20   0  277760  19968   4536 S   0.0  0.8   0:01.70 /usr/sbin+
  5533 nobody    20   0  277884  20180   4600 S   0.0  0.8   0:01.34 /usr/sbin+
  6778 root      20   0  249212 119120   1280 S   0.0  4.9   0:00.11 spamd chi+
  6779 root      20   0  248076 117408    780 S   0.0  4.9   0:00.00 spamd chi+
  7247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7282 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 10376 nobody    20   0  277760  19740   4324 S   0.0  0.8   0:01.03 /usr/sbin+
 11113 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11544 nobody    20   0  277500  19500   4284 S   0.0  0.8   0:00.85 /usr/sbin+
 11555 nobody    20   0  277892  20036   4472 S   0.0  0.8   0:00.78 /usr/sbin+
 11655 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12004 nobody    20   0  277496  19480   4184 S   0.0  0.8   0:00.94 /usr/sbin+
 13375 nobody    20   0  277892  19692   4316 S   0.0  0.8   0:00.61 /usr/sbin+
 14099 nobody    20   0  277760  19448   4088 S   0.0  0.8   0:00.58 /usr/sbin+
 15161 nobody    20   0  277896  19372   4044 S   0.0  0.8   0:00.41 /usr/sbin+
 15288 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15941 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 15969 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16526 nobody    20   0  277892  19256   3908 S   0.0  0.8   0:00.17 /usr/sbin+
 16543 nobody    20   0  277884  18904   3624 S   0.0  0.8   0:00.20 /usr/sbin+
 16772 nobody    20   0  277760  18888   3572 S   0.0  0.8   0:00.19 /usr/sbin+
 17367 nobody    20   0  277760  18572   3288 S   0.0  0.8   0:00.11 /usr/sbin+
 17555 nobody    20   0  277736  18816   3528 S   0.0  0.8   0:00.03 /usr/sbin+
 17564 nobody    20   0  277904  19132   3836 S   0.0  0.8   0:00.04 /usr/sbin+
 17565 nobody    20   0  277488  18720   3652 S   0.0  0.8   0:00.07 /usr/sbin+
 17595 mailnull  20   0   89332   4808   1712 S   0.0  0.2   0:00.00 /usr/sbin+
 17659 nigeria   20   0  400460   5600   2356 S   0.0  0.2   0:00.00 php-fpm: +
 17662 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 17755 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 17824 mailnull  20   0   89536   5612   2464 S   0.0  0.2   0:00.00 /usr/sbin+
 17870 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 17900 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [dnsadmin+
 17917 cpanelp+  20   0  298280   2316   1472 S   0.0  0.1   0:00.00 php-fpm: +
 17960 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 17961 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 17978 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 18150 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18151 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18152 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18153 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18155 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18157 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18158 root      20   0  183052   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18159 root      20   0  183052   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18160 root      20   0  183052   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18161 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18162 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18163 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18164 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18166 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18167 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18169 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18170 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18171 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18173 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18174 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18177 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18178 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18182 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 18183 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 18184 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 18185 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 18187 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 18189 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18193 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18194 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 18195 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 18196 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18197 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 18198 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 18199 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18200 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 18201 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18203 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18204 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 18206 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 18207 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 18208 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 18211 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 18212 root      20   0   20164   1216    956 S   0.0  0.1   0:00.00 jailshell+
 18213 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 18214 root      20   0 1276844  11372    600 S   0.0  0.5   0:00.05 /usr/bin/+
 18216 root      20   0  188212  11100   5148 S   0.0  0.5   0:00.02 /usr/loca+
 18218 root      20   0 1341084  10104    600 R   0.0  0.4   0:00.05 /usr/bin/+
 18220 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
 18221 root      20   0 1275548  10308    600 S   0.0  0.4   0:00.05 /usr/bin/+
 18225 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 18232 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 18265 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 18266 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 18271 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 18284 locatio+  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 18286 locatio+  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 18294 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 18297 root      20   0  160224   2396   1636 S   0.0  0.1   0:00.00 top -n 2 +
 18303 oysipao+  20   0    3152    632    208 S   0.0  0.0   0:00.00 [kworker]
 18354 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 18357 root      35  15  113284   1356   1176 S   0.0  0.1   0:00.00 /bin/bash+
 18359 root      35  15   13116    832    668 R   0.0  0.0   0:00.00 lsmod
 18360 root      35  15  112812    984    852 S   0.0  0.0   0:00.00 grep -E -+
 18362 root      35  15  113644    980    824 S   0.0  0.0   0:00.00 awk {prin+
 18370 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 18374 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 18376 cloudsms  20   0  399788  11220   7872 R   0.0  0.5   0:00.00 /opt/cpan+
 18380 root      20   0  113284    212      0 R   0.0  0.0   0:00.00 bash /usr+
 18381 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:38   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:38   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/0:1]
root         36  0.4  0.0      0     0 ?        S    03:38   0:05  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:38   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:38   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        R    03:38   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kvm-irqfd-clean]
root        675  0.1  0.0      0     0 ?        S<   03:38   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ext4-rsv-conver]
root       7247  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/0:2]
root       7282  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/1:1]
root      11113  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/1:2]
root      11655  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/0:0]
root      15288  0.0  0.0      0     0 ?        S    03:56   0:00  \_ [kworker/1:3]
root      15941  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/1:4]
root      15969  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44268  3344 ?        Ss   03:38   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39496  5728 ?        Ss   03:38   0:00 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   476 ?        Ss   03:38   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   432 ?        S<sl 03:38   0:00 /sbin/auditd
root        470  0.0  0.0  24732  1240 ?        Ss   03:38   0:00 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   336 ?        Ss   03:38   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58740  1456 ?        Ss   03:38   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   224 ?        Ss   03:38   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1144 ?        Ssl  03:38   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   492 ?        Ss   03:38   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   264 ?        Ss   03:38   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224148  5688 ?        Ss   03:38   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1344 ?        Ssl  03:38   0:01 /usr/sbin/nscd
root        515  0.0  0.0 195208   144 ?        Ssl  03:38   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   188 ?        Ss   03:38   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208    68 ?        Ss   03:38   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   600 ?        Ss   03:38   0:00 /usr/sbin/crond -n
root      18150  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18213  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      18221  5.0  0.4 1275548 10548 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      18151  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18198  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      18214  5.0  0.4 1276844 11372 ?       Sl   04:00   0:00  |       \_ /usr/bin/update_imunify
root      18152  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18206  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      18218  5.0  0.4 1341084 10336 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      18153  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18183  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      18225  0.0  0.0 113288  1428 ?        SN   04:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      18357  0.0  0.0 113284  1356 ?        SN   04:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      18359  0.0  0.0  13116   832 ?        RN   04:00   0:00  |               \_ lsmod
root      18360  0.0  0.0 112812   984 ?        SN   04:00   0:00  |               \_ grep -E -v ^Module
root      18362  0.0  0.0 113644   980 ?        SN   04:00   0:00  |               \_ awk {printf "%s ", $1}
root      18155  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18211  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      18220  0.0  0.0 113284  1468 ?        S    04:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      18157  0.0  0.0 183052  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18194  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      18208  0.0  0.0 108052   356 ?        S    04:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      18232  0.0  0.0 113288  1516 ?        S    04:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      18383  0.0  0.0 153840  2092 ?        R    04:00   0:00  |               \_ ps auxf
root      18158  0.0  0.0 183052  2156 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18201  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      18159  0.0  0.0 183052  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18197  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      18160  0.0  0.0 183052  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18189  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      18161  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18203  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      18162  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18184  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      18163  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18185  0.0  0.0  20164   984 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [18381] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
cloudsms  18381  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
cloudsms  18384  0.0  0.0 113284  1212 ?        S    04:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      18164  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18193  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      18166  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18199  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      18167  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18207  0.0  0.0  20164   984 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [18370] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  18370  0.0  0.0      0     0 ?        D    04:00   0:00  |       \_ [jailshell]
root      18169  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18204  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      18170  0.0  0.0 183048  2160 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18195  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      18171  0.0  0.0 183048  2156 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18196  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      18173  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18200  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      18216  2.0  0.4 188212 11100 ?        S    04:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      18297  0.0  0.0 160224  2396 ?        S    04:00   0:00  |           \_ top -n 2 -b -c
root      18174  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18187  0.0  0.0  20164   972 ?        Ss   04:00   0:00  |   \_ jailshell (pactpay) [18266] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18266  0.0  0.0  20164   264 ?        S    04:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18271  2.0  0.7 480124 17684 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      18177  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18182  0.0  0.0  20164   972 ?        Ss   04:00   0:00  |   \_ jailshell (nigeria) [18265] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   18265  0.0  0.0  20164   264 ?        S    04:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   18279  5.0  0.6 404052 16140 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      18178  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      18212  0.0  0.0  20164  1216 ?        Ss   04:00   0:00      \_ jailshell (locationforms) [18284]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  18284  0.0  0.0  20164   260 ?        S    04:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  18286  0.0  0.0 113284  1212 ?        S    04:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  18298  4.0  0.8 406668 20344 ?        R    04:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        562  0.0  0.0 108296   272 tty1     Ss+  03:38   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   284 ttyS0    Ss+  03:38   0:00 /bin/bash
mailnull    613  0.0  0.1  88992  3496 ?        Ss   03:38   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17595  0.0  0.1  89332  4808 ?        S    03:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17824  0.0  0.2  89536  5612 ?        S    03:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   492 ?        Ss   03:38   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  03:38   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268  1880 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15100 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  1.6  0.4 1277056 10396 ?       Ssl  03:38   0:21 /usr/bin/checkstatus
root        937  0.0  0.1 445028  2808 ?        Ss   03:38   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    938  0.0  0.0  11796    44 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608  1596 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   612 ?        Ss   03:38   0:00 /usr/sbin/sshd -D
root      17662  0.0  0.1 111304  4264 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      17755  0.0  0.1 111304  4264 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      17960  0.0  0.2 157100  5072 ?        Ss   03:59   0:00  \_ sshd: unknown [priv]
sshd      17961  0.0  0.1 115644  2624 ?        S    03:59   0:00      \_ sshd: unknown [net]
systuser    943  0.0  0.0  11348    36 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  2.1  0.3 1349832 9540 ?        Ssl  03:38   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   652 ?        Ss   03:38   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.0  46772   956 ?        S    03:38   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.0  47056  1536 ?        S    03:38   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   336 ?        S    03:38   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   540 ?        S    03:38   0:00  \_ dovecot/log
dovenull   1097  0.0  0.0  46772  1096 ?        S    03:38   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47056  2836 ?        S    03:38   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24528  2076 ?        S    03:38   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   752 ?        S    03:38   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1392 ?        R    03:38   0:00  \_ dovecot/auth
root      17870  0.0  0.1  60820  4508 ?        S    03:59   0:00  \_ dovecot/lmtp
telegraf    946  0.0  1.5 5654304 37628 ?       SLsl 03:38   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   260 ?        Ssl  03:38   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  1.0 38.8 1689580 941184 ?      Ssl  03:38   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   492 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.1 261028  4620 ?        Ss   03:38   0:00 cpsrvd (SSL) - waiting for connections                   
root      17978  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   544 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 216400  5544 ?        Ssl  03:38   0:00 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   556 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.4 439788 11480 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3192 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   17659  0.0  0.2 400460  5600 ?        S    03:59   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.0 564260 25568 ?        Ssl  03:38   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1   9828  2656 ?        Rs   03:38   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.0 157704  2280 ?        S    03:38   0:00 SonarPush 0.6.12 [sleeping]
root       1166  0.2  4.9 248076 119624 ?       Ss   03:38   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6778  0.0  4.9 249212 119120 ?       S    03:44   0:00  \_ spamd child
root       6779  0.0  4.8 248076 117408 ?       S    03:44   0:00  \_ spamd child
wp-tool+   1175  0.0  1.2 412368 30420 ?        Ss   03:38   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.5 387528 12180 ?        Ss   03:38   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1512 ?        Ss   03:38   0:00 dnsadmin - dormant mode
root      17900  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [dnsadmin - dorm] <defunct>
root       1235  0.0  0.9 262224 22288 ?        Ss   03:38   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.4 209216 10160 ?        Ss   03:38   0:00 tailwatchd
root       1669  0.0  0.0 299272   884 ?        Ss   03:38   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  17917  0.0  0.0 298280  2316 ?        S    03:59   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1701  0.0  0.0 130416  1460 ?        SN   03:38   0:00 cpanellogd - sleeping for logs
mysql      1793  1.2  7.8 1461712 191176 ?      Sl   03:38   0:16 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  8420 ?        Ss   03:38   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12784   480 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   436 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12800   456 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   284 ?        S    03:38   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3908  0.1  0.8 277764 20224 ?        S    03:41   0:01  \_ /usr/sbin/httpd -k start
nobody     4582  0.1  0.8 277760 19968 ?        S    03:42   0:01  \_ /usr/sbin/httpd -k start
nobody     4722  0.1  0.8 277892 19996 ?        S    03:42   0:01  \_ /usr/sbin/httpd -k start
cloudw    18368  1.0  0.6 366220 16600 ?        S    04:00   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     5533  0.1  0.8 277884 20180 ?        S    03:42   0:01  \_ /usr/sbin/httpd -k start
nobody    10376  0.1  0.8 277760 19740 ?        S    03:49   0:01  \_ /usr/sbin/httpd -k start
nobody    11544  0.1  0.8 277500 19500 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody    11555  0.1  0.8 277892 20036 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody    12004  0.1  0.8 277496 19480 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    13375  0.1  0.8 277892 19692 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    14099  0.1  0.8 277760 19448 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
cloudw    18369  1.0  0.6 353712 15980 ?        S    04:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    15161  0.1  0.8 277896 19372 ?        S    03:55   0:00  \_ /usr/sbin/httpd -k start
nobody    16526  0.1  0.7 277892 19256 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    16543  0.1  0.7 277884 18904 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    16772  0.1  0.7 277760 18888 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody    17367  0.1  0.7 277760 18572 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    17555  0.0  0.7 277736 18816 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    17564  0.1  0.7 277904 19132 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    17565  0.2  0.7 277488 18720 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.1  1.1 181060 28060 ?        Ss   03:38   0:01 lfd - sleeping
oysipao+  18294  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152   632 ?        S    04:00   0:00  \_ [kworker]
## mysql stats
Uptime: 1286  Threads: 3  Questions: 75655  Slow queries: 0  Opens: 1301  Flush tables: 1  Open tables: 1226  Queries per second avg: 58.829
*************************** 1. row ***************************
     Id: 1273
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 1274
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 1283
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 116.179.37.101 TIME_WAIT
      1 116.179.37.153 TIME_WAIT
      1 116.179.37.229 TIME_WAIT
      1 116.179.37.33 TIME_WAIT
      1 15.235.27.5 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.163.10.187 TIME_WAIT
      1 20.215.214.29 TIME_WAIT
      1 40.77.167.224 TIME_WAIT
      1 74.7.228.4 TIME_WAIT
      1 74.7.243.198 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 04:00:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 21 minutes 21 seconds
   Server load: 0.59 0.43 0.41
   Total accesses: 5507 - Total Traffic: 150.3 MB - Total Duration: 2855685
   CPU Usage: u9.05 s3.5 cu69.3 cs56.74 - 10.8% CPU load
   4.3 requests/sec - 120.1 kB/second - 27.9 kB/request - 518.555 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

WWKKK___W_C_KKR...K....._..W....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol           VHost                                    Request
   0-0  15161 0/66/306  W 1.69 0    0   159728 0.0   1.82  10.05 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  16526 0/31/230  W 0.67 0    0   98214  0.0   0.71  5.75  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=290997876 HTTP/1.1
   2-0  17367 3/16/227  K 0.46 4    300 122166 95.4  0.50  7.30  192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=855621987 HTTP/1.1
   3-0  16543 7/33/293  K 0.87 3    281 162703 217.3 0.95  8.81  192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=788966963 HTTP/1.1
   4-0  11544 2/143/323 K 3.72 4    403 159857 66.1  3.66  7.77  192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=2297125221 HTTP/1.1
   5-0  17555 0/6/126   _ 0.07 0    265 64541  0.0   0.45  3.30  192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=1769712440 HTTP/1.1
   6-0  17564 0/9/216   _ 0.13 0    24  103074 0.0   0.17  5.54  192.178.4.99  http/1.1 team.cloudware.ng:443      GET /w_296/v1468447839/jjbyrpfkszzrmq2rkftj.jpg HTTP/1.1
   7-0  5533  0/232/251 _ 5.70 0    273 125072 0.0   6.42  6.93  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=3944410778 HTTP/1.1
   8-0  14099 1/98/296  W 2.48 0    0   153420 35.5  2.57  8.08  192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=323459898 HTTP/1.1
   9-0  10376 0/171/212 _ 4.38 0    7   123411 0.0   4.65  5.69  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   10-0 16772 1/32/246  C 0.82 6    416 138496 24.4  0.91  6.56  114.8.234.161 http/1.1 health.oyostate.gov.ng:443 GET /mission/ HTTP/1.1
   11-0 11555 0/132/147 _ 3.58 0    0   87754  0.0   3.67  3.98  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 13375 2/100/129 K 2.86 0    369 66590  67.5  2.70  3.30  192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=2716488736 HTTP/1.1
   13-0 17565 8/11/46   K 0.27 3    256 25300  251.2 0.32  1.27  192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=3738400375 HTTP/1.1
   14-0 12004 0/150/159 R 4.04 14   297 91383  0.0   4.12  4.31  114.8.234.161 http/1.1 health.oyostate.gov.ng:443
   15-0 -     0/0/35    . 0.00 1014 0   16451  0.0   0.00  0.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/22    . 0.00 1050 0   12327  0.0   0.00  0.59  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/14    . 0.00 1018 0   12664  0.0   0.00  0.18  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 3908  8/288/288 K 7.22 1    261 142510 246.2 7.08  7.08  192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=1881651302 HTTP/1.1
   19-0 -     0/0/31    . 0.00 1069 0   17465  0.0   0.00  0.86  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/276   . 0.00 54   0   146459 0.0   0.00  7.25  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/24    . 0.00 996  0   13728  0.0   0.00  0.68  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/17    . 0.00 1015 0   9343   0.0   0.00  0.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/87    . 0.00 799  0   47435  0.0   0.00  2.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 4582  0/289/289 _ 6.96 0    293 148096 0.0   7.80  7.80  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=1955790906 HTTP/1.1
   25-0 -     0/0/255   . 0.00 38   0   127827 0.0   0.00  6.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/3     . 0.00 1061 0   1490   0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 4722  0/287/287 W 6.83 0    0   137080 0.0   8.05  8.05  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /list/113888523806 HTTP/1.1
   28-0 -     0/0/12    . 0.00 1009 0   5446   0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/197   . 0.00 314  0   101914 0.0   0.00  6.49  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/4     . 0.00 1063 0   2388   0.0   0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2     . 0.00 1070 0   760    0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/3     . 0.00 1057 0   695    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/3     . 0.00 1056 0   853    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/19    . 0.00 997  0   9074   0.0   0.00  0.45  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/4     . 0.00 1047 0   2048   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/2     . 0.00 1064 0   738    0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/8     . 0.00 1054 0   3463   0.0   0.00  0.19  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4     . 0.00 1048 0   1877   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 1059 0   599    0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6     . 0.00 1053 0   3057   0.0   0.00  0.15  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3     . 0.00 1049 0   840    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/227   . 0.00 155  0   110452 0.0   0.00  5.70  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/9     . 0.00 1052 0   4927   0.0   0.00  0.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/154   . 0.00 530  0   84969  0.0   0.00  4.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/13    . 0.00 1019 0   6975   0.0   0.00  0.32  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 902
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 1...62)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 4096
   total entries replaced since starting: 0
   total entries expired since starting: 3188
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 8 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit