403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.03.33.txt
 ## swap threshold exceeded
## server overview
2025-11-21.03.33 load[0] mem[58/68] mysql[1/26] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1298         148          96         916         796
Swap:          1999        1441         558
 03:33:01 up  8:43,  0 users,  load average: 0.37, 0.39, 0.68
## system overview
top - 03:33:02 up  8:43,  0 users,  load average: 0.37, 0.39, 0.68
Tasks: 221 total,   6 running, 214 sleeping,   0 stopped,   1 zombie
%Cpu(s): 48.4 us, 45.2 sy,  6.5 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   129704 free,  1351748 used,   938848 buff/cache
KiB Swap:  2047996 total,   571772 free,  1476224 used.   792540 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1467840 317664   3992 S  20.0 13.1   6:17.01 /usr/sbin+
     1 root      20   0   44396   3504   1632 S  13.3  0.1   0:43.24 /usr/lib/+
   357 root      20   0   40244   6032   5720 S   6.7  0.2   0:16.43 /usr/lib/+
   486 dbus      20   0   58728   1612    860 R   6.7  0.1   0:16.84 /usr/bin/+
   957 root      20   0  306512   6744   5480 S   6.7  0.3   0:08.23 /usr/sbin+
 70054 nobody    20   0  277616  35392   4136 S   6.7  1.5   0:00.61 /usr/sbin+
 75215 nigeria   20   0  404052  16140  10384 S   6.7  0.7   0:00.01 /opt/cpan+
 75223 saboakin  20   0  404052  15608  10156 S   6.7  0.6   0:00.01 /opt/cpan+
 75232 cloudsms  20   0  400248  11884   8292 R   6.7  0.5   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.80 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.52 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:31.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.49 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:05.35 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.01 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.79 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.64 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:02.19 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.98 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   386 root      20   0   45360    404    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    588    460 S   0.0  0.0   0:02.67 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    528    444 S   0.0  0.0   0:00.69 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   6772   1692 S   0.0  0.3   0:00.38 queueproc+
   496 rpc       20   0   69256    268    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    524    412 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:07.37 /usr/lib/+
   522 nscd      20   0 1344744   2292    928 S   0.0  0.1   0:25.49 /usr/sbin+
   523 polkitd   20   0  610540   1108    708 S   0.0  0.0   0:04.32 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.88 /usr/sbin+
   575 root      20   0   24208    212    192 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   3960   1008 S   0.0  0.2   0:00.85 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.29 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13384   2600 S   0.0  0.6   0:07.53 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.70 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.67 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.34 sw-engine+
   916 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.02 /usr/loca+
   920 root      20   0 1277056   8812    276 S   0.0  0.4   0:35.80 /usr/bin/+
   923 root      20   0  396248    696    524 S   0.0  0.0   0:00.78 php-fpm: +
   927 root      20   0  439788   2228   1280 S   0.0  0.1   0:00.88 php-fpm: +
   929 named     20   0 1054792  43764   2136 S   0.0  1.8   0:16.29 /usr/sbin+
   930 root      20   0 1763340 159036   1124 S   0.0  6.6   0:14.13 /usr/loca+
   937 root      20   0  261160   7504   1996 S   0.0  0.3   0:44.55 cpsrvd (S+
   944 systuser  20   0  113932     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   948 root      20   0   51656   1248    908 S   0.0  0.1   0:00.42 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.69 /usr/bin/+
   952 cpanelc+  20   0   10592   3784   2432 S   0.0  0.2   0:26.77 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   966 root      20   0  389508    896    684 S   0.0  0.0   0:00.85 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.76 php-fpm: +
   976 telegraf  20   0 5654304  36324   6004 S   0.0  1.5   0:17.01 /usr/loca+
   985 root      20   0  388892    952    740 S   0.0  0.0   0:00.82 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.21 /usr/bin/+
   987 root      20   0  572372   1252    676 S   0.0  0.1   0:02.68 /usr/bin/+
  1080 dovecot   20   0   10320    572    456 S   0.0  0.0   0:00.14 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:06.52 /usr/loca+
  1156 systuser  20   0  157708   3148   1148 S   0.0  0.1   0:00.15 SonarPush+
  1161 wp-tool+  20   0  387556  13440   1788 S   0.0  0.6   0:00.32 /usr/bin/+
  1162 wp-tool+  20   0  412396  32792   1984 S   0.0  1.4   0:09.97 /usr/bin/+
  1235 root      20   0  262224  22832   4908 S   0.0  0.9   0:02.90 cpdavd - +
  1239 root      20   0  167452   4100   2728 S   0.0  0.2   0:00.55 dnsadmin +
  1241 root      20   0  209680  12596   2548 S   0.0  0.5   0:03.88 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.85 php-fpm: +
  1658 root      38  18  130416   1552    812 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  30648   5360 S   0.0  1.3   0:03.16 /usr/sbin+
  2729 dovenull  20   0   46912   3992   2944 S   0.0  0.2   0:00.12 dovecot/p+
  2730 dovenull  20   0   47148   4380   3160 S   0.0  0.2   0:00.05 dovecot/i+
  2731 root      20   0   10452   1204    832 S   0.0  0.0   0:00.08 dovecot/l+
  2732 dovenull  20   0   47044   4208   3152 S   0.0  0.2   0:00.15 dovecot/p+
  2733 dovenull  20   0   47184   4332   3140 S   0.0  0.2   0:00.03 dovecot/i+
  2734 root      20   0   24564  11952   1028 S   0.0  0.5   0:00.06 dovecot/c+
  2735 dovecot   20   0   13568   1200    932 S   0.0  0.0   0:00.01 dovecot/s+
  2736 dovecot   20   0   41188   2508   1648 S   0.0  0.1   0:00.22 dovecot/a+
  2737 root      20   0   12812   1388   1180 S   0.0  0.1   0:00.82 /usr/loca+
  2738 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.70 /usr/loca+
  2739 root      20   0   12840   1404   1180 S   0.0  0.1   0:00.76 /usr/loca+
  2740 root      20   0   53252  11804   2420 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263284 129684   2684 S   0.0  5.4   0:05.80 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.57 [kworker]
 31417 nobody    20   0  277752  36480   5036 S   0.0  1.5   0:05.20 /usr/sbin+
 36137 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40404 root      20   0  182768  30780   2284 S   0.0  1.3   0:11.91 lfd - sle+
 51541 root      20   0  123576    728    500 S   0.0  0.0   0:00.00 /usr/sbin+
 51578 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 52998 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 56662 nobody    20   0  277632  36304   5016 S   0.0  1.5   0:02.31 /usr/sbin+
 57883 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60717 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 63594 nobody    20   0  277940  36260   4804 S   0.0  1.5   0:01.44 /usr/sbin+
 65217 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66737 nobody    20   0  277576  35700   4480 S   0.0  1.5   0:01.04 /usr/sbin+
 68110 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68932 nobody    20   0  277612  35660   4404 S   0.0  1.5   0:00.75 /usr/sbin+
 69332 nobody    20   0  277956  35812   4400 S   0.0  1.5   0:00.65 /usr/sbin+
 69399 nobody    20   0  277616  35556   4296 S   0.0  1.5   0:00.71 /usr/sbin+
 69465 nobody    20   0  277940  35624   4224 S   0.0  1.5   0:00.69 /usr/sbin+
 69467 nobody    20   0  277616  35736   4400 S   0.0  1.5   0:00.79 /usr/sbin+
 70724 nobody    20   0  277616  35368   4104 S   0.0  1.5   0:00.51 /usr/sbin+
 71075 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71704 root      30  10  113284   1484   1276 S   0.0  0.1   0:00.00 /bin/bash+
 71764 root      30  10  132964   4552   1012 S   0.0  0.2   0:00.00 ConfigSer+
 71768 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71777 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 4271
 71909 nobody    20   0  277616  34972   3720 S   0.0  1.4   0:00.36 /usr/sbin+
 72008 root      30  10  113284   1500   1256 S   0.0  0.1   0:00.00 bash /etc+
 72009 root      30  10  113644    980    832 S   0.0  0.0   0:00.00 awk -v pr+
 72766 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73118 nobody    20   0  277940  35336   3944 S   0.0  1.5   0:00.23 /usr/sbin+
 73119 nobody    20   0  277568  35100   3884 S   0.0  1.5   0:00.23 /usr/sbin+
 73120 nobody    20   0  277616  35144   3896 S   0.0  1.5   0:00.23 /usr/sbin+
 73121 nobody    20   0  277616  35156   3896 S   0.0  1.5   0:00.23 /usr/sbin+
 73308 nobody    20   0  277940  35200   3808 S   0.0  1.5   0:00.28 /usr/sbin+
 73328 mailnull  20   0   91204   4928   1752 S   0.0  0.2   0:00.00 /usr/sbin+
 73644 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74147 mailnull  20   0   91204   4928   1752 S   0.0  0.2   0:00.00 /usr/sbin+
 74226 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 74433 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 74450 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 74465 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 74680 nigeria   20   0  401380   9620   5052 S   0.0  0.4   0:00.04 php-fpm: +
 74829 wp-tool+  20   0  445028    320    188 S   0.0  0.0   0:00.00 sw-engine+
 75010 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 75025 nobody    20   0  277004  31308    716 S   0.0  1.3   0:00.00 /usr/sbin+
 75030 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 75031 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 75032 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 75035 root      20   0  111304   4444   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 75036 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 75157 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75158 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75159 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75160 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75161 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75162 root      20   0  183040   2204   1632 S   0.0  0.1   0:00.00 /usr/sbin+
 75163 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75164 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75165 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75166 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75167 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75168 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75169 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75170 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75172 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 75173 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 75174 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [kworker/+
 75197 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 75198 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75200 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75201 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75202 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75203 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 75204 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75206 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 75207 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75208 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 75210 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 75212 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75213 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 75214 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 75221 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 75225 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 75226 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 75227 robocal+  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 75229 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 75230 robocal+  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 75231 pactpay   20   0  479860  16168  10572 S   0.0  0.7   0:00.00 /opt/cpan+
 75235 robocal+  20   0  400440  12112   8312 R   0.0  0.5   0:00.00 /opt/cpan+
 75248 root      30  10  114124   2268   1264 R   0.0  0.1   0:00.00 bash /usr+
 84944 root      20   0  183048   1852   1324 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284    724    544 S   0.0  0.0   0:00.00 /bin/sh -+
 85029 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 5h +
 89738 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:03  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        D    00:46   0:01  \_ [kworker/u200:2]
root      75288  0.0  0.0      0     0 ?        R    03:33   0:00  |   \_ [kworker/u200:2]
root      89738  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/u200:0]
root      36137  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:1]
root      51578  0.0  0.0      0     0 ?        D    03:01   0:00  \_ [kworker/1:1]
root      52998  0.0  0.0      0     0 ?        S    03:03   0:00  \_ [kworker/0:4]
root      57883  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/0:2]
root      60717  0.0  0.0      0     0 ?        S    03:14   0:00  \_ [kworker/1:4]
root      65217  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:0]
root      68110  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/0:3]
root      71075  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/1:2]
root      71768  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [kworker/0:0]
root      72766  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      73644  0.0  0.0      0     0 ?        S    03:31   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44396  3504 ?        Ss   Nov20   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  6032 ?        Ss   Nov20   0:16 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   404 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   588 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   528 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224288  6772 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1612 ?        Rs   Nov20   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   268 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   524 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:07 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2292 ?        Ssl  Nov20   0:25 /usr/sbin/nscd
polkitd     523  0.0  0.0 610540  1108 ?        Ssl  Nov20   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  1852 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284   724 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      75157  0.0  0.0 183044  2148 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75172  0.0  0.0 113284  1212 ?        Ss   03:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      75173  0.0  0.0 108052   356 ?        S    03:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      75174  0.0  0.0 113288  1516 ?        S    03:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      75287  0.0  0.0 153840  2096 ?        R    03:33   0:00  |               \_ ps auxf
root      75158  0.0  0.0 183044  2148 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75198  0.0  0.0  20164   808 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      75159  0.0  0.0 183044  2148 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75208  0.0  0.0  20164   968 ?        Ss   03:33   0:00  |   \_ jailshell (cloudsms) [75226] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  75226  0.0  0.0  20164   256 ?        S    03:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  75229  0.0  0.0 113284  1212 ?        S    03:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  75232  0.0  0.6 404376 15096 ?        R    03:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root      75160  0.0  0.0 183044  2148 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75201  0.0  0.0  20164   808 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      75161  0.0  0.0 183044  2144 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75207  0.0  0.0  20164   804 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      75163  0.0  0.0 183044  2144 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75204  0.0  0.0  20164   804 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      75164  0.0  0.0 183044  2140 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75202  0.0  0.0  20164   808 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      75165  0.0  0.0 183044  2140 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75200  0.0  0.0  20164   808 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      75166  0.0  0.0 183044  2140 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75212  0.0  0.0  20164   804 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      75167  0.0  0.0 183044  2144 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75206  0.0  0.0  20164   972 ?        Ss   03:33   0:00  |   \_ jailshell (pactpay) [75225] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   75225  0.0  0.0  20164   264 ?        S    03:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   75231  0.0  0.6 479860 16168 ?        Rl   03:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      75168  0.0  0.0 183044  2144 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75210  0.0  0.0  20164   968 ?        Ss   03:33   0:00  |   \_ jailshell (robocallscloudsm) [75227]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  75227  0.0  0.0  20164   260 ?        S    03:33   0:00  |       \_ jailshell (robocallscloudsm) [init] d /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  75230  0.0  0.0 113284  1208 ?        S    03:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  75235  0.0  0.5 400732 12420 ?        R    03:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php artisan schedule:run
root      75169  0.0  0.0 183044  2140 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75203  0.0  0.0  20164   968 ?        Ss   03:33   0:00  |   \_ jailshell (nigeria) [75214] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   75214  0.0  0.0  20164   260 ?        S    03:33   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   75215  0.0  0.6 404052 16140 ?        S    03:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      75170  0.0  0.0 183044  2144 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      75213  0.0  0.0  20164   972 ?        Ss   03:33   0:00      \_ jailshell (saboakin) [75221] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  75221  0.0  0.0  20164   260 ?        S    03:33   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  75223  0.0  0.6 404052 15608 ?        S    03:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        575  0.0  0.0  24208   212 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  3960 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  73328  0.0  0.2  91204  4928 ?        S    03:30   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  74147  0.0  0.2  91204  4928 ?        S    03:31   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13384 ?        Ssl  Nov20   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      74433  0.0  0.1 111304  4268 ?        Ss   03:32   0:00  \_ sshd: [accepted]
sshd      74450  0.0  0.1 115644  2628 ?        S    03:32   0:00  |   \_ sshd: [net]
root      74465  0.0  0.1 111304  4276 ?        Ss   03:32   0:00  \_ sshd: [accepted]
root      75010  0.0  0.1 111304  4272 ?        Ss   03:32   0:00  \_ sshd: [accepted]
root      75030  0.3  0.2 162436  5832 ?        Ss   03:32   0:00  \_ sshd: root [priv]
sshd      75031  0.0  0.1 115644  2628 ?        S    03:32   0:00  |   \_ sshd: root [net]
root      75035  0.0  0.1 111304  4444 ?        Ss   03:32   0:00  \_ sshd: [accepted]
sshd      75036  0.0  0.1 115644  2628 ?        S    03:32   0:00      \_ sshd: [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  74829  0.0  0.0 445028   320 ?        S    03:32   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.3 1277056 8812 ?        Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   696 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.0 439788  2228 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.8 1054792 43764 ?       Ssl  Nov20   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 159036 ?      Ssl  Nov20   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.1  0.3 261160  7504 ?        Ss   Nov20   0:44 cpsrvd (SSL) - waiting for connections                   
root      75032  0.0  0.0      0     0 ?        Z    03:32   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1248 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   572 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  3992 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4380 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1204 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  47044  4208 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47184  4332 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.4  24564 11952 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1200 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41188  2508 ?        S    01:25   0:00  \_ dovecot/auth
root      74226  0.0  0.1  41052  2728 ?        S    03:31   0:00  \_ dovecot/auth -w
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3784 ?        Ss   Nov20   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 306512  6744 ?        Ssl  Nov20   0:08 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   896 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   74680  0.1  0.3 401380  9620 ?        S    03:32   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.5 5654304 36324 ?       SLsl Nov20   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   952 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1252 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263284 129684 ?       S    Nov20   0:05  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3148 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13440 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32792 ?        Ss   Nov20   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.9 262224 22832 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.1 167452  4100 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12596 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1552 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 30648 ?        Ss   Nov20   0:03 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12812  1388 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1364 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12840  1404 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11804 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31417  0.1  1.5 277752 36480 ?        S    02:36   0:05  \_ /usr/sbin/httpd -k start
nobody    56662  0.1  1.4 277632 36304 ?        S    03:08   0:02  \_ /usr/sbin/httpd -k start
nobody    63594  0.1  1.4 277940 36260 ?        S    03:17   0:01  \_ /usr/sbin/httpd -k start
nobody    66737  0.1  1.4 277576 35700 ?        S    03:22   0:01  \_ /usr/sbin/httpd -k start
nobody    68932  0.1  1.4 277612 35660 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69332  0.1  1.4 277956 35812 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69399  0.1  1.4 277616 35556 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69465  0.1  1.4 277940 35624 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69467  0.1  1.4 277616 35736 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    70054  0.1  1.4 277616 35392 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    70724  0.1  1.4 277616 35368 ?        S    03:27   0:00  \_ /usr/sbin/httpd -k start
nobody    71909  0.1  1.4 277616 34972 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody    73118  0.1  1.4 277940 35336 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
nobody    73119  0.1  1.4 277568 35100 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
nobody    73120  0.1  1.4 277616 35144 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
nobody    73121  0.1  1.4 277616 35156 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
nobody    73308  0.2  1.4 277940 35200 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
nobody    75025  0.0  1.2 277004 31308 ?        S    03:32   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.2 13.1 1467840 317664 ?      Sl   Nov20   6:17 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 182768 30780 ?        Ss   00:00   0:11 lfd - sleeping
root      51541  0.0  0.0 123576   728 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      71704  0.0  0.0 113284  1484 ?        SN   03:29   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      72008  0.0  0.0 113284  1500 ?        SN   03:29   0:00      \_ bash /etc/cron.daily/maldet
root      75248  0.0  0.0 114256  2268 ?        SN   03:33   0:00      |   \_ bash /usr/local/maldetect/maldet -u
root      75289  0.0  0.0 114256  1152 ?        RN   03:33   0:00      |       \_ bash /usr/local/maldetect/maldet -u
root      72009  0.0  0.0 113644   980 ?        SN   03:29   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      71764  0.0  0.1 132964  4552 ?        SN   03:29   0:00 ConfigServer Version Check
root      71777  0.0  0.0 108056   360 ?        SN   03:29   0:00  \_ sleep 4271
## mysql stats
Uptime: 31319  Threads: 3  Questions: 2303594  Slow queries: 0  Opens: 9300  Flush tables: 1  Open tables: 2000  Queries per second avg: 73.552
*************************** 1. row ***************************
     Id: 38388
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 38391
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 38394
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.187 TIME_WAIT
      1 142.44.225.196 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 179.43.189.80 TIME_WAIT
      1 185.150.190.249 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 03:33:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 8 hours 42 minutes 44 seconds
   Server load: 0.37 0.39 0.68
   Total accesses: 160462 - Total Traffic: 4.0 GB - Total Duration: 86772254
   CPU Usage: u12.04 s7.38 cu2123.27 cs1693.51 - 12.2% CPU load
   5.12 requests/sec - 135.3 kB/second - 26.4 kB/request - 540.765 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KWWK_K_K__..K...K_.K.K_KK.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-1  63594 2/238/8003 K 6.49  1     410 4264000 66.4  6.35  208.63 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=2190502334 HTTP/1.1
   1-1  69332 2/119/7787 W 3.08  0     0   4095783 67.7  2.80  199.76 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1734205263 HTTP/1.1
   2-1  70724 0/84/7241  W 2.11  0     0   3900636 0.0   2.25  185.70 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-1  70054 5/100/7648 K 2.52  0     274 4265585 155.1 2.66  200.86 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1649555116 HTTP/1.1
   4-1  71909 0/108/7932 _ 2.75  1     355 4092405 0.0   0.84  206.76 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=4081525566 HTTP/1.1
   5-1  69399 2/124/7391 K 2.84  2     366 4212260 62.7  3.27  193.53 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=2358135361 HTTP/1.1
   6-1  31417 0/959/7842 _ 21.67 1     339 4239972 0.0   22.62 217.62 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1966318491 HTTP/1.1
   7-1  73308 7/49/7445  K 1.28  0     264 4061533 217.7 1.32  196.97 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=232765708 HTTP/1.1
   8-1  68932 0/136/7530 _ 3.24  2     4   4086984 0.0   3.23  192.28 52.54.95.127  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/images/2019electio
   9-1  75025 0/0/7312   _ 0.00  3     0   3803615 0.0   0.00  179.84 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-1 -     0/0/7260   . 0.00  48    0   3730073 0.0   0.00  178.97 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-1 -     0/0/6886   . 0.00  145   0   3693419 0.0   0.00  176.86 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-1 66737 1/169/7220 K 4.39  3     354 3839773 34.0  4.71  184.77 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1494991403 HTTP/1.1
   13-1 -     0/0/7197   . 0.00  155   0   3751680 0.0   0.00  179.45 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-1 -     0/0/6759   . 0.00  149   0   3492203 0.0   0.00  165.31 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-1 -     0/0/6289   . 0.00  146   0   3543016 0.0   0.00  162.61 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-1 56662 7/438/5804 K 9.69  3     348 3072510 214.8 10.24 158.57 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=2752458356 HTTP/1.1
   17-1 69465 0/117/4792 _ 3.12  2     403 2765791 0.0   5.59  122.66 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=2439105489 HTTP/1.1
   18-1 -     0/0/4984   . 0.00  148   0   2768158 0.0   0.00  124.59 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-1 69467 6/137/4477 K 3.41  0     309 2499265 192.9 3.69  131.15 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=1667618480 HTTP/1.1
   20-1 -     0/0/3967   . 0.00  150   0   2294360 0.0   0.00  108.63 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-1 73118 1/42/3151  K 1.71  2     358 1683281 33.7  1.12  80.31  192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=2387571363 HTTP/1.1
   22-1 73119 0/42/4040  _ 0.96  0     0   2182729 0.0   1.03  99.83  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   23-1 73120 2/37/3405  K 0.92  2     262 1886917 64.8  1.02  87.25  192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=1588782038 HTTP/1.1
   24-1 73121 9/45/1973  K 1.05  0     39  981061  64.1  0.99  47.69  79.137.67.84  http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   25-1 -     0/0/1261   . 0.00  4366  0   817594  0.0   0.00  34.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-1 -     0/0/715    . 0.00  5381  0   428654  0.0   0.00  18.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-1 -     0/0/506    . 0.00  5092  0   297127  0.0   0.00  11.85  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-1 -     0/0/543    . 0.00  5293  0   356892  0.0   0.00  15.93  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-1 -     0/0/434    . 0.00  5383  0   260477  0.0   0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-1 -     0/0/332    . 0.00  5370  0   200777  0.0   0.00  7.47   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-1 -     0/0/274    . 0.00  5392  0   193753  0.0   0.00  6.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00  12203 0   371705  0.0   0.00  14.42  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00  11743 0   111013  0.0   0.00  5.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00  13932 0   15090   0.0   0.00  0.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00  13939 0   640     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00  13811 0   36928   0.0   0.00  1.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00  13768 0   25914   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00  13861 0   27597   0.0   0.00  1.54   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00  13892 0   13821   0.0   0.00  1.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00  13041 0   139506  0.0   0.00  7.31   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00  13948 0   8       0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  13947 0   4242    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00  13673 0   42251   0.0   0.00  2.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00  13936 0   2792    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00  13674 0   25889   0.0   0.00  1.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00  12626 0   190150  0.0   0.00  10.76  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00  13952 0   2404    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 920
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...30)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 25693
   total entries replaced since starting: 0
   total entries expired since starting: 24764
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 77 miss
   total removes since starting: 9 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit