403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.02.00.txt
 ## swap threshold exceeded
## server overview
2025-11-21.02.00 load[0] mem[59/66] mysql[3/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1355          86          99         921         735
Swap:          1999        1397         602
 02:00:01 up  7:10,  0 users,  load average: 0.83, 0.32, 0.26
## system overview
top - 02:00:01 up  7:10,  0 users,  load average: 0.83, 0.32, 0.26
Tasks: 228 total,  12 running, 215 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.6 us, 19.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    97160 free,  1374840 used,   948300 buff/cache
KiB Swap:  2047996 total,   617468 free,  1430528 used.   765800 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 274616   3688 S 122.2 11.3   5:07.94 /usr/sbin+
 30505 root      20   0  224100  28740   3884 R  11.1  1.2   0:00.14 /usr/loca+
 30551 nigeria   20   0  404052  16136  10384 R  11.1  0.7   0:00.06 /opt/cpan+
 30515 root      20   0 1277356  12016    600 S   5.6  0.5   0:00.06 /usr/bin/+
 30524 root      20   0 1276060  10732    560 S   5.6  0.4   0:00.06 /usr/bin/+
     1 root      20   0   44396   3512   1640 S   0.0  0.1   0:36.02 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.47 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:25.56 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.25 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:04.47 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.72 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.88 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.78 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.26 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   5132   4820 S   0.0  0.2   0:13.32 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    600    472 S   0.0  0.0   0:02.14 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.56 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   8432   1808 S   0.0  0.3   0:00.34 queueproc+
   486 dbus      20   0   58728   1528    792 S   0.0  0.1   0:13.63 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    444    332 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:05.99 /usr/lib/+
   522 nscd      20   0 1344744   2304    932 S   0.0  0.1   0:20.85 /usr/sbin+
   523 polkitd   20   0  610540   3220    712 S   0.0  0.1   0:03.49 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.73 /usr/sbin+
   575 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4220   1132 S   0.0  0.2   0:00.67 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.61 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13456   2756 S   0.0  0.6   0:06.22 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:02.99 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.55 pure-ftpd+
   915 root      20   0  445028   2164   2048 S   0.0  0.1   0:01.10 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  10944    276 S   0.0  0.5   0:35.78 /usr/bin/+
   923 root      20   0  396248    684    512 S   0.0  0.0   0:00.65 php-fpm: +
   927 root      20   0  439788  12244  11296 S   0.0  0.5   0:00.73 php-fpm: +
   929 named     20   0 1054792  42508   2232 S   0.0  1.8   0:12.59 /usr/sbin+
   930 root      20   0 1763340 157484   1212 S   0.0  6.5   0:13.91 /usr/loca+
   937 root      20   0  261028   7016   2004 S   0.0  0.3   0:03.58 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51656   1300    960 S   0.0  0.1   0:00.35 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.57 /usr/bin/+
   952 cpanelc+  20   0   10592   3600   2380 S   0.0  0.1   0:21.13 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  290128   5720   4608 S   0.0  0.2   0:06.67 /usr/sbin+
   966 root      20   0  389508    908    692 S   0.0  0.0   0:00.72 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.09 php-fpm: +
   976 telegraf  20   0 5654304  36216   5936 S   0.0  1.5   0:13.97 /usr/loca+
   985 root      20   0  388892    812    604 S   0.0  0.0   0:00.65 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.16 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:02.23 /usr/bin/+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.11 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.87 /usr/loca+
  1156 systuser  20   0  157708   3028   1044 S   0.0  0.1   0:00.11 SonarPush+
  1161 wp-tool+  20   0  387556  13444   1784 S   0.0  0.6   0:00.27 /usr/bin/+
  1162 wp-tool+  20   0  412396  32920   2112 S   0.0  1.4   0:08.25 /usr/bin/+
  1235 root      20   0  262224  24620   6760 S   0.0  1.0   0:02.58 cpdavd - +
  1239 root      20   0  167452   4208   2836 R   0.0  0.2   0:00.47 dnsadmin +
  1241 root      20   0  209680  12616   2524 S   0.0  0.5   0:03.20 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.69 php-fpm: +
  1658 root      38  18  130416   1552    812 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  31032   5712 S   0.0  1.3   0:02.66 /usr/sbin+
  2728 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  2729 dovenull  20   0   46912   4324   3316 S   0.0  0.2   0:00.03 dovecot/p+
  2730 dovenull  20   0   47148   4736   3604 S   0.0  0.2   0:00.01 dovecot/i+
  2731 root      20   0   10452   1520   1148 S   0.0  0.1   0:00.02 dovecot/l+
  2732 dovenull  20   0   46912   4336   3336 S   0.0  0.2   0:00.03 dovecot/p+
  2733 dovenull  20   0   47056   4604   3576 S   0.0  0.2   0:00.01 dovecot/i+
  2734 root      20   0   24564  12412   1416 S   0.0  0.5   0:00.03 dovecot/c+
  2735 dovecot   20   0   13568   1532   1264 S   0.0  0.1   0:00.00 dovecot/s+
  2736 dovecot   20   0   41188   3004   2184 S   0.0  0.1   0:00.06 dovecot/a+
  2737 root      20   0   12816   1400   1196 S   0.0  0.1   0:00.21 /usr/loca+
  2738 root      20   0   12732   1380   1196 S   0.0  0.1   0:00.18 /usr/loca+
  2739 root      20   0   12848   1416   1196 S   0.0  0.1   0:00.20 /usr/loca+
  2740 root      20   0   53252  11908   2524 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263028 130232   3616 S   0.0  5.4   0:03.61 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
  7284 nobody    20   0  277936  36660   4952 S   0.0  1.5   0:02.66 /usr/sbin+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.47 [kworker]
 11223 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 12520 nobody    20   0  277812  36152   4684 S   0.0  1.5   0:01.89 /usr/sbin+
 15604 nobody    20   0  277616  36144   4816 S   0.0  1.5   0:01.53 /usr/sbin+
 15622 nobody    20   0  277616  35912   4592 S   0.0  1.5   0:01.99 /usr/sbin+
 16412 nobody    20   0  277624  36040   4736 S   0.0  1.5   0:01.56 /usr/sbin+
 16752 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19726 nobody    20   0  277616  35780   4484 S   0.0  1.5   0:01.36 /usr/sbin+
 19950 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 21417 nobody    20   0  277932  36144   4720 S   0.0  1.5   0:00.83 /usr/sbin+
 22429 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22637 nobody    20   0  277940  36060   4548 S   0.0  1.5   0:00.93 /usr/sbin+
 23196 nobody    20   0  277932  35840   4420 S   0.0  1.5   0:01.01 /usr/sbin+
 23208 nobody    20   0  277932  35820   4388 S   0.0  1.5   0:00.82 /usr/sbin+
 24358 nobody    20   0  277932  35820   4396 S   0.0  1.5   0:00.69 /usr/sbin+
 24838 nobody    20   0  277556  35400   4168 S   0.0  1.5   0:00.73 /usr/sbin+
 26613 nobody    20   0  277820  35524   4052 S   0.0  1.5   0:00.54 /usr/sbin+
 27317 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 27497 nobody    20   0  277940  35432   4004 S   0.0  1.5   0:00.26 /usr/sbin+
 28487 nobody    20   0  277616  35364   4076 S   0.0  1.5   0:00.19 /usr/sbin+
 28681 nobody    20   0  277940  35456   3900 S   0.0  1.5   0:00.12 /usr/sbin+
 28778 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28878 root      20   0   41052   2808   2144 S   0.0  0.1   0:00.00 dovecot/a+
 28919 mailnull  20   0   91004   5760   2512 S   0.0  0.2   0:00.00 /usr/sbin+
 29294 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 29486 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29506 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29673 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 29803 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 29808 nobody    20   0  277932  35200   3792 S   0.0  1.5   0:00.05 /usr/sbin+
 29818 nobody    20   0  277616  34952   3672 S   0.0  1.4   0:00.06 /usr/sbin+
 29955 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 29985 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 30177 nigeria   20   0  400460   4564   2176 S   0.0  0.2   0:00.00 php-fpm: +
 30254 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 30441 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30442 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30443 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30444 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30446 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30448 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30449 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30450 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30451 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30452 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30453 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30454 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30455 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30456 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30457 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30459 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30460 root      20   0  183040   2208   1636 R   0.0  0.1   0:00.00 /usr/sbin+
 30464 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30465 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30466 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30469 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30479 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 30480 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 30481 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30482 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30484 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 30485 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30486 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 30487 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 30488 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 30493 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 30495 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30496 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30497 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 30498 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30500 root      35  15  113288   1424   1240 S   0.0  0.1   0:00.00 /bin/bash+
 30501 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30502 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 30506 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 30507 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30508 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 30514 root      20   0  188208  11084   5148 S   0.0  0.5   0:00.01 /usr/loca+
 30519 root      20   0 1341596  10752    604 S   0.0  0.4   0:00.05 /usr/bin/+
 30520 root      20   0  113284   1460   1256 S   0.0  0.1   0:00.00 bash /usr+
 30523 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 30529 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 30539 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30543 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30561 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 30589 root      20   0  160224   2396   1636 S   0.0  0.1   0:00.01 top -n 2 +
 30595 cloudw    20   0  353712  15968  10484 R   0.0  0.7   0:00.01 /opt/cpan+
 30608 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 30658 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 30666 root      35  15  113284   1356   1176 S   0.0  0.1   0:00.00 /bin/bash+
 30671 root      35  15   13116    832    668 R   0.0  0.0   0:00.00 lsmod
 30672 root      35  15  112816    940    812 R   0.0  0.0   0:00.00 grep -E -+
 30673 root      35  15  113644    976    820 S   0.0  0.0   0:00.00 awk {prin+
 30678 root      20   0  113284    204      0 R   0.0  0.0   0:00.00 bash /usr+
 40404 root      20   0  181860  29928   2296 S   0.0  1.2   0:06.69 lfd - sle+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 84944 root      20   0  183048   2120   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85029 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 5h +
 92897 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 96689 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:25  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:2]
root      92897  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/1:4]
root      96689  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:0]
root       2728  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:0]
root      11223  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:2]
root      16752  0.0  0.0      0     0 ?        S    01:43   0:00  \_ [kworker/0:3]
root      19950  0.0  0.0      0     0 ?        S    01:47   0:00  \_ [kworker/1:1]
root      22429  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:4]
root      27317  0.0  0.0      0     0 ?        S    01:56   0:00  \_ [kworker/1:0]
root      28778  0.0  0.0      0     0 ?        D    01:58   0:00  \_ [kworker/1:3]
root      29486  0.0  0.0      0     0 ?        S    01:59   0:00  \_ [kworker/u200:1]
root      29506  0.0  0.0      0     0 ?        S    01:59   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44396  3512 ?        Ss   Nov20   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  5132 ?        Ss   Nov20   0:13 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   600 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.3 224288  8432 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1528 ?        Ss   Nov20   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   444 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:05 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2304 ?        Ssl  Nov20   0:20 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2120 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      30441  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30502  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      30524  6.0  0.4 1276060 10732 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      30442  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30487  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      30515  6.0  0.4 1277356 12016 ?       Sl   02:00   0:00  |       \_ /usr/bin/update_imunify
root      30443  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30497  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      30519  5.0  0.4 1341596 10752 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      30444  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30484  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      30500  0.0  0.0 113288  1424 ?        SN   02:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      30666  0.0  0.0 113284  1356 ?        SN   02:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      30671  0.0  0.0  13116   832 ?        RN   02:00   0:00  |               \_ lsmod
root      30672  0.0  0.0 112812   984 ?        SN   02:00   0:00  |               \_ grep -E -v ^Module
root      30673  0.0  0.0 113644   976 ?        SN   02:00   0:00  |               \_ awk {printf "%s ", $1}
root      30446  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30479  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      30520  0.0  0.0 113284  1460 ?        S    02:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      30448  0.0  0.0 183048  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30480  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      30523  0.0  0.0 108052   356 ?        S    02:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      30529  0.0  0.0 113288  1520 ?        S    02:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      30680  0.0  0.0 153840  2096 ?        R    02:00   0:00  |               \_ ps auxf
root      30449  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30506  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      30450  0.0  0.0 183048  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30481  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      30451  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30496  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      30452  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30485  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      30453  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30486  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      30679  0.0  0.0      0     0 ?        R    02:00   0:00  |       \_ [setupvirtfs]
root      30454  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30498  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      30455  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30495  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      30456  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30482  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      30457  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30501  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      30459  0.0  0.0 183044  2152 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30507  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      30464  0.0  0.0 183044  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30488  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      30514  1.0  0.4 188208 11084 ?        S    02:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      30589  1.0  0.0 160224  2396 ?        S    02:00   0:00  |           \_ top -n 2 -b -c
root      30465  0.0  0.0 183044  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30505 14.0  1.1 224508 29000 ?        Rs   02:00   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/backup
root      30466  0.0  0.0 183044  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30508  0.0  0.0  20164   964 ?        Ss   02:00   0:00  |   \_ jailshell (pactpay) [30539] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30539  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30561  2.0  0.7 480124 17668 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      30469  0.0  0.0 183044  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      30493  0.0  0.0  20164   964 ?        Ss   02:00   0:00      \_ jailshell (nigeria) [30543] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30543  0.0  0.0  20164   260 ?        S    02:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30551  7.0  0.6 404052 16136 ?        S    02:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   244 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4220 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  28919  0.0  0.2  91004  5760 ?        S    01:58   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13456 ?        Ssl  Nov20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:02 /usr/sbin/sshd -D
root      29803  0.0  0.1 111304  4268 ?        Ss   01:59   0:00  \_ sshd: [accepted]
root      29955  0.0  0.1 111304  4268 ?        Ss   01:59   0:00  \_ sshd: [accepted]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  2164 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  29985  0.0  0.0 445028   324 ?        S    01:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 10944 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   684 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.5 439788 12244 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 42508 ?       Ssl  Nov20   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 157484 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261028  7016 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root      30254  0.0  0.0      0     0 ?        Z    01:59   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1300 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  4324 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4736 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1520 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  4336 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47056  4604 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.5  24564 12412 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1532 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41188  3004 ?        S    01:25   0:00  \_ dovecot/auth
root      28878  0.0  0.1  41052  2808 ?        S    01:58   0:00  \_ dovecot/auth -w
root      29294  0.0  0.0  28936  2372 ?        S    01:58   0:00  \_ dovecot/quota-status -p postfix
root      29673  0.0  0.1  60820  4508 ?        S    01:59   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3600 ?        Ss   Nov20   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 290128  5720 ?        Ssl  Nov20   0:06 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   908 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   30177  0.0  0.1 400460  4564 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.4 5654304 36216 ?       SLsl Nov20   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   812 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263028 130232 ?       S    Nov20   0:03  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3028 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13444 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32920 ?        Ss   Nov20   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  1.0 262224 24620 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.1 167452  4208 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12616 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1552 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 31032 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12816  1400 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1380 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12848  1416 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11908 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     7284  0.1  1.5 277936 36660 ?        S    01:31   0:02  \_ /usr/sbin/httpd -k start
nobody    12520  0.1  1.4 277812 36152 ?        S    01:37   0:01  \_ /usr/sbin/httpd -k start
cloudw    30608  1.0  0.6 353712 15968 ?        S    02:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    15604  0.1  1.4 277616 36144 ?        S    01:41   0:01  \_ /usr/sbin/httpd -k start
nobody    15622  0.1  1.4 277616 35912 ?        S    01:41   0:01  \_ /usr/sbin/httpd -k start
nobody    16412  0.1  1.4 277624 36040 ?        S    01:42   0:01  \_ /usr/sbin/httpd -k start
nobody    19726  0.1  1.4 277616 35780 ?        S    01:46   0:01  \_ /usr/sbin/httpd -k start
nobody    21417  0.1  1.4 277932 36144 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody    22637  0.1  1.4 277940 36060 ?        S    01:50   0:00  \_ /usr/sbin/httpd -k start
nobody    23196  0.1  1.4 277932 35840 ?        S    01:50   0:01  \_ /usr/sbin/httpd -k start
nobody    23208  0.1  1.4 277932 35820 ?        S    01:50   0:00  \_ /usr/sbin/httpd -k start
nobody    24358  0.1  1.4 277932 35820 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
nobody    24838  0.1  1.4 277556 35400 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
nobody    26613  0.1  1.4 277820 35524 ?        S    01:55   0:00  \_ /usr/sbin/httpd -k start
nobody    27497  0.1  1.4 277940 35432 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody    28487  0.1  1.4 277616 35364 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    28681  0.0  1.4 277940 35456 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    29808  0.1  1.4 277932 35200 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    29818  0.1  1.4 277616 34952 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    30595  1.0  0.6 353712 15968 ?        S    02:00   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
mysql      2435  1.1 11.3 1462240 274616 ?      Sl   Nov20   5:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181860 29928 ?        Ss   00:00   0:06 lfd - sleeping
## mysql stats
Uptime: 25739  Threads: 3  Questions: 1919147  Slow queries: 0  Opens: 6844  Flush tables: 1  Open tables: 2000  Queries per second avg: 74.561
*************************** 1. row ***************************
     Id: 31700
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 31703
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 31713
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.120 TIME_WAIT
      1 148.113.128.172 TIME_WAIT
      1 18.235.251.51 TIME_WAIT
      1 ::1 TIME_WAIT
      1 210.162.49.20 TIME_WAIT
      1 46.185.191.138 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 124.156.225.181 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 02:00:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 9 minutes 44 seconds
   Server load: 0.83 0.32 0.26
   Total accesses: 134008 - Total Traffic: 3.4 GB - Total Duration: 71665819
   CPU Usage: u12.79 s7.11 cu1763.76 cs1420.57 - 12.4% CPU load
   5.2 requests/sec - 136.3 kB/second - 26.2 kB/request - 534.788 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

K__K_KWK__.KKK_KR_.....K........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client      Protocol         VHost                                      Request
   0-1  26613 8/88/6604   K 2.55  1    416 3531575 248.4 2.43  175.12 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=2535688151 HTTP/1.1
   1-1  29808 0/9/6354    _ 0.18  0    0   3294851 0.0   0.21  161.14 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-1  24358 0/121/6026  _ 3.17  2    1   3194183 0.0   2.99  153.83 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   3-1  23196 16/166/6411 K 4.65  1    339 3566222 488.4 4.89  169.84 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=3814220622 HTTP/1.1
   4-1  15604 0/254/6479  _ 6.37  2    5   3325690 0.0   6.65  162.47 148.113.128.172 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Taraba&lga=Zing&ward=Dindi
   5-1  12520 8/314/6075  K 8.47  0    496 3421389 247.9 8.84  159.19 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3334221567 HTTP/1.1
   6-1  22637 0/165/6417  W 4.17  0    0   3475358 0.0   4.14  182.30 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   7-1  7284  1/461/6226  K 11.84 0    341 3389484 34.5  13.25 166.99 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=1125513892 HTTP/1.1
   8-1  27497 0/46/6301   _ 1.31  2    9   3354755 0.0   1.15  157.04 34.236.185.101  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/images/2019electio
   9-1  28487 0/35/5968   _ 0.78  0    0   3017606 0.0   0.84  145.96 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   10-1 -     0/0/6144    . 0.00  37   0   3102840 0.0   0.00  145.60 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-1 23208 7/137/5755  K 3.34  2    359 3021169 214.3 3.82  146.68 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=4177485058 HTTP/1.1
   12-1 29818 7/11/5873   K 0.27  0    573 3116912 216.5 0.32  151.78 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=3709350902 HTTP/1.1
   13-1 24838 4/118/6006  K 3.10  1    343 3079556 127.7 3.29  147.66 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=167613564 HTTP/1.1
   14-1 16412 0/310/5680  _ 7.83  0    393 2907016 0.0   6.00  137.47 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=719803070 HTTP/1.1
   15-1 19726 2/225/5226  K 6.59  2    266 2895793 65.1  6.07  135.38 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=1239192554 HTTP/1.1
   16-1 21417 0/147/4716  R 3.35  59   343 2497172 0.0   4.18  127.72 210.162.49.20   http/1.1
   17-1 28681 0/22/3832   _ 0.73  2    258 2101633 0.0   0.70  94.46  192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=83475079 HTTP/1.1
   18-1 -     0/0/4122    . 0.00  1096 0   2252156 0.0   0.00  101.69 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-1 -     0/0/3751    . 0.00  657  0   2088621 0.0   0.00  99.18  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-1 -     0/0/3429    . 0.00  1103 0   1979130 0.0   0.00  95.31  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-1 -     0/0/2827    . 0.00  1011 0   1507752 0.0   0.00  70.99  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-1 -     0/0/3094    . 0.00  861  0   1607036 0.0   0.00  75.30  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-1 15622 3/323/3048  K 8.64  3    336 1659189 93.3  9.07  78.16  192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=1639032379 HTTP/1.1
   24-1 -     0/0/1899    . 0.00  372  0   953555  0.0   0.00  46.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1018    . 0.00  6622 0   628117  0.0   0.00  27.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/703     . 0.00  5988 0   428614  0.0   0.00  18.18  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/420     . 0.00  6528 0   254505  0.0   0.00  9.65   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/523     . 0.00  6620 0   349352  0.0   0.00  15.17  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/430     . 0.00  6621 0   260468  0.0   0.00  11.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/318     . 0.00  6233 0   200447  0.0   0.00  7.21   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/271     . 0.00  6624 0   193700  0.0   0.00  6.36   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593     . 0.00  6623 0   371705  0.0   0.00  14.42  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301     . 0.00  6163 0   111013  0.0   0.00  5.26   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28      . 0.00  8352 0   15090   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7       . 0.00  8359 0   640     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74      . 0.00  8231 0   36928   0.0   0.00  1.90   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61      . 0.00  8188 0   25914   0.0   0.00  1.45   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65      . 0.00  8281 0   27597   0.0   0.00  1.54   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28      . 0.00  8312 0   13821   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265     . 0.00  7461 0   139506  0.0   0.00  7.31   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00  8368 0   8       0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12      . 0.00  8367 0   4242    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89      . 0.00  8093 0   42251   0.0   0.00  2.07   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10      . 0.00  8356 0   2792    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55      . 0.00  8094 0   25889   0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463     . 0.00  7045 0   190150  0.0   0.00  10.76  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7       . 0.00  8372 0   2404    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 902
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...58)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 6848
   total entries replaced since starting: 0
   total entries expired since starting: 5944
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 6 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit