403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2026-01-05.03.24.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2026-01-05.03.24 load[7] mem[90/37] mysql[1/26] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        2037          79          61         246          97
Swap:          4047        1640        2407
 03:24:04 up 42 days,  6:12,  0 users,  load average: 7.10, 2.25, 1.03
## system overview
top - 03:24:06 up 42 days,  6:12,  0 users,  load average: 7.10, 2.25, 1.03
Tasks: 231 total,   2 running, 228 sleeping,   0 stopped,   1 zombie
%Cpu(s):  5.9 us, 19.1 sy,  0.0 ni,  0.0 id, 73.5 wa,  0.0 hi,  1.5 si,  0.0 st
KiB Mem :  2420300 total,    59124 free,  2062252 used,   298924 buff/cache
KiB Swap:  4145144 total,  2420424 free,  1724720 used.   106632 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
    36 root      20   0       0      0      0 D   5.9  0.0  64:52.11 [kswapd0]
 46457 root      20   0  111304   4276   3252 S   5.9  0.2   0:00.03 sshd: [ac+
 19908 mysql     20   0 1481756 231700     48 S   2.9  9.6  51:28.78 /usr/sbin+
 46437 cloudsms  20   0  202904   4988   1824 D   2.9  0.2   0:00.04 /opt/cpan+
 46448 root      20   0  111304   4264   3248 S   2.9  0.2   0:00.02 sshd: [ac+
 46453 cloudw    20   0   74144   3804   2872 D   2.9  0.2   0:00.03 /opt/cpan+
 46460 root      20   0   38648   5980   2920 D   2.9  0.2   0:00.01 /usr/loca+
     1 root      20   0  192272   2404    472 D   0.0  0.1 101:28.04 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:05.18 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:53.32 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:44.45 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0  60:58.57 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:10.35 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:10.32 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:57.71 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:14.12 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.32 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.30 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.11 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:03.14 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   8:29.72 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:06.51 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   3:55.46 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   1276   1012 S   0.0  0.1  30:49.26 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    244    112 S   0.0  0.0   4:29.18 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    264    176 S   0.0  0.0   1:33.23 /usr/sbin+
   489 root      20   0   24896    836    456 S   0.0  0.0  16:04.09 /usr/lib/+
   494 polkitd   20   0  610664    916    404 S   0.0  0.0   8:57.96 /usr/lib/+
   496 root      20   0   52852    108     12 S   0.0  0.0   0:00.57 /usr/sbin+
   503 dbus      20   0   58748   1316    560 S   0.0  0.1  35:17.44 /usr/bin/+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:03.80 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.10 /usr/sbin+
   558 root      20   0  124508    280    148 S   0.0  0.0   2:12.15 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:35.68 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:15.60 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   928 systuser  20   0   11540     44      0 S   0.0  0.0   0:02.06 /usr/loca+
   929 systuser  20   0   12756     48      0 S   0.0  0.0   0:02.02 /usr/loca+
   931 systuser  20   0  112524     64      0 S   0.0  0.0   0:01.98 /usr/loca+
   932 systuser  20   0  111608     60      0 S   0.0  0.0   0:01.88 /usr/loca+
   935 root      20   0  572372    708    208 S   0.0  0.0   5:40.54 /usr/bin/+
   937 root      20   0  111304    244    136 S   0.0  0.0   6:38.43 /usr/sbin+
   939 root      20   0 1350728   7516      4 S   0.0  0.3   2:44.04 /usr/bin/+
   952 root      20   0  261164   5280    556 S   0.0  0.2  12:48.15 cpsrvd (S+
   953 root      20   0  331088   2332   1388 S   0.0  0.1  16:35.85 /usr/sbin+
   972 memcach+  20   0  342400     24     24 S   0.0  0.0   1:29.68 /usr/bin/+
   974 root      20   0 1277312   2424      4 S   0.0  0.1   0:39.09 /usr/bin/+
   980 systuser  20   0  114272   8452    140 S   0.0  0.3  18:35.93 /usr/loca+
  1144 systuser  20   0  157704   2132    140 S   0.0  0.1   0:19.43 SonarPush+
  1188 named     20   0 1185868  32144      0 S   0.0  1.3  16:24.99 /usr/sbin+
  1239 root      20   0  167452   1504    132 S   0.0  0.1   1:01.77 dnsadmin +
  1243 root      20   0  210740   9212     16 S   0.0  0.4   7:49.96 tailwatchd
  1244 root      20   0  262224  17940     20 S   0.0  0.7   7:43.81 cpdavd - +
  5604 nobody    20   0  278044  18228   1248 S   0.0  0.8   0:03.42 /usr/sbin+
  9891 nobody    20   0  277868  18244   1284 S   0.0  0.8   0:02.19 /usr/sbin+
  9897 nobody    20   0  277880  17820   1388 S   0.0  0.7   0:02.28 /usr/sbin+
 12995 root      20   0 2500976   1.1g      0 D   0.0 48.2   1:21.47 /usr/loca+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:32.79 [kworker]
 15486 nobody    20   0  277940  17892   1204 S   0.0  0.7   0:02.02 /usr/sbin+
 16217 root      20   0   51508    252     88 S   0.0  0.0   0:00.34 /usr/sbin+
 16224 dovenull  20   0   47188    876      0 S   0.0  0.0   0:00.56 dovecot/p+
 16225 dovenull  20   0   47584   1116     60 S   0.0  0.0   0:00.29 dovecot/i+
 16226 dovecot   20   0   10320    128      8 S   0.0  0.0   0:00.12 dovecot/a+
 16227 root      20   0   10452    248     56 S   0.0  0.0   0:00.33 dovecot/l+
 16228 dovenull  20   0   47252   1084    164 S   0.0  0.0   0:00.41 dovecot/p+
 16229 dovenull  20   0   47696   1424    204 S   0.0  0.1   0:00.41 dovecot/i+
 16230 root      20   0   24528   1652     68 S   0.0  0.1   0:00.13 dovecot/c+
 16231 dovecot   20   0   13568    216      4 S   0.0  0.0   0:00.05 dovecot/s+
 16234 dovecot   20   0   41188    460      0 S   0.0  0.0   0:00.68 dovecot/a+
 16262 mailnull  20   0   89116   3040    104 S   0.0  0.1   0:00.49 /usr/sbin+
 16283 root      20   0  153404    144     60 S   0.0  0.0   0:00.74 pure-ftpd+
 16284 root      20   0  152780     40      0 S   0.0  0.0   0:00.01 /usr/sbin+
 16342 root      20   0  267196   4688    208 S   0.0  0.2   0:00.97 /usr/sbin+
 16343 root      20   0   12828    252     44 S   0.0  0.0   0:00.97 /usr/loca+
 16344 root      20   0   12732     80      0 S   0.0  0.0   0:00.77 /usr/loca+
 16345 root      20   0   12864    256      8 S   0.0  0.0   0:00.92 /usr/loca+
 16346 root      20   0   53268      8      8 S   0.0  0.0   0:00.04 /usr/loca+
 24159 nobody    20   0  278124  17604   1096 S   0.0  0.7   0:01.63 /usr/sbin+
 25264 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 26495 nobody    20   0  278072  17312   1092 S   0.0  0.7   0:01.10 /usr/sbin+
 31911 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33273 nobody    20   0  278064  17264   1044 S   0.0  0.7   0:00.72 /usr/sbin+
 35183 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36987 root      20   0  123576    228      0 S   0.0  0.0   0:00.00 /usr/sbin+
 38634 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 39063 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40200 worencom  20   0   38488    984      0 S   0.0  0.0   0:00.01 dovecot/i+
 41547 nobody    20   0  278080  15768    540 S   0.0  0.7   0:00.35 /usr/sbin+
 42847 nobody    20   0  278104  15784    560 S   0.0  0.7   0:00.25 /usr/sbin+
 42874 nobody    20   0  277664  15540    504 S   0.0  0.6   0:00.16 /usr/sbin+
 42891 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 43446 root      30  10  113284    256     48 S   0.0  0.0   0:00.00 /bin/bash+
 43452 root      30  10  132964   3476      4 S   0.0  0.1   0:00.00 ConfigSer+
 43463 root      30  10  108056     76      0 S   0.0  0.0   0:00.00 sleep 6066
 43485 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 43587 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44186 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44438 nobody    20   0  277620  15236    440 S   0.0  0.6   0:00.19 /usr/sbin+
 45607 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45622 root      20   0   41052    664      0 S   0.0  0.0   0:00.00 dovecot/a+
 46034 root      30  10  114360   1348     52 S   0.0  0.1   0:00.00 bash /usr+
 46136 root      39  19  121112   1304    164 D   0.0  0.1   0:01.25 /bin/find+
 46137 root      30  10  112812    172     28 S   0.0  0.0   0:00.00 grep -E -+
 46138 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46144 root      39  19  113284    220     32 S   0.0  0.0   0:00.00 /bin/sh /+
 46145 root      30  10  113644    148      0 S   0.0  0.0   0:00.00 awk -v pr+
 46150 root      39  19  108880   1196    212 D   0.0  0.0   0:00.74 /usr/bin/+
 46178 nobody    20   0  277516  13684    216 S   0.0  0.6   0:00.04 /usr/sbin+
 46186 root      20   0  111304   1228    248 S   0.0  0.1   0:00.01 sshd: [ac+
 46193 nobody    20   0  277548  13692    244 S   0.0  0.6   0:00.03 /usr/sbin+
 46198 sshd      20   0  115644   1228    208 S   0.0  0.1   0:00.00 sshd: [ne+
 46273 wp-tool+  20   0  445028    280    120 S   0.0  0.0   0:00.00 sw-engine+
 46278 root      20   0   60820   1228    240 S   0.0  0.1   0:00.00 dovecot/l+
 46287 wp-tool+  20   0  445028    136      4 S   0.0  0.0   0:00.00 sw-engine+
 46312 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [dnsadmin+
 46328 cpanelp+  20   0  298280   1024    220 S   0.0  0.0   0:00.00 php-fpm: +
 46352 nobody    20   0  277248  13440    240 S   0.0  0.6   0:00.01 /usr/sbin+
 46361 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46362 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46363 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46364 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46365 root      20   0  183076   1072    512 S   0.0  0.0   0:00.01 /usr/sbin+
 46366 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46367 root      20   0  183076   1072    512 S   0.0  0.0   0:00.01 /usr/sbin+
 46368 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46369 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46370 root      20   0  183076   1072    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46371 root      20   0  183076   1068    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46372 root      20   0  183076   1068    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46373 root      20   0  183076   1064    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46375 root      20   0  183076   1064    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46376 root      20   0  183076   1064    512 S   0.0  0.0   0:00.00 /usr/sbin+
 46378 root      20   0   20164    508    332 S   0.0  0.0   0:00.00 /usr/loca+
 46379 root      20   0   20164    664    464 S   0.0  0.0   0:00.00 /usr/loca+
 46380 root      20   0   20164    504    332 S   0.0  0.0   0:00.00 /usr/loca+
 46381 root      20   0   20164    504    332 S   0.0  0.0   0:00.00 /usr/loca+
 46382 root      20   0   20164    504    332 S   0.0  0.0   0:00.00 /usr/loca+
 46383 root      20   0  113284    508    332 S   0.0  0.0   0:00.00 /bin/sh -+
 46385 root      20   0   20164    640    440 S   0.0  0.0   0:00.06 jailshell+
 46386 root      20   0   20164    640    440 S   0.0  0.0   0:00.02 jailshell+
 46387 root      20   0   20164    624    424 S   0.0  0.0   0:00.00 jailshell+
 46388 root      20   0   20164    648    444 S   0.0  0.0   0:00.00 jailshell+
 46389 root      20   0   20164    508    332 S   0.0  0.0   0:00.00 /usr/loca+
 46390 root      20   0   20164    624    424 S   0.0  0.0   0:00.00 jailshell+
 46392 root      20   0   20164    624    424 S   0.0  0.0   0:00.00 jailshell+
 46393 root      20   0   20164    508    332 S   0.0  0.0   0:00.00 /usr/loca+
 46394 root      20   0   20164    628    424 S   0.0  0.0   0:00.01 jailshell+
 46395 root      20   0  108052    172    100 S   0.0  0.0   0:00.00 /usr/bin/+
 46396 root      20   0  113288    604    392 S   0.0  0.0   0:00.11 /bin/bash+
 46406 salutem   20   0  396240    492    208 S   0.0  0.0   0:00.00 php-fpm: +
 46418 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 46419 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 46421 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 46422 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 46424 saboakin  20   0  404052   6552   1084 S   0.0  0.3   0:00.02 /opt/cpan+
 46425 cloudsms  20   0  113284    484    308 S   0.0  0.0   0:00.00 /usr/loca+
 46426 pactpay   20   0  480124   9740   4000 D   0.0  0.4   0:00.05 /opt/cpan+
 46427 nigeria   20   0  404052   7040   1288 S   0.0  0.3   0:00.03 /opt/cpan+
 46429 cloudsms  20   0  202904   5108   1940 D   0.0  0.2   0:00.05 /opt/cpan+
 46435 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 46436 cloudsms  20   0  113284    484    308 S   0.0  0.0   0:00.03 /usr/loca+
 46442 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 46445 cloudsms  20   0  113284    480    304 S   0.0  0.0   0:00.02 /usr/loca+
 46446 cloudsms  20   0  269120   5424   3384 D   0.0  0.2   0:00.05 /opt/cpan+
 46450 root      20   0  160220   2280   1560 R   0.0  0.1   0:00.01 top -bcn1
 46452 root      20   0  261816  10904   2200 D   0.0  0.5   0:00.01 cpaneld -+
 46458 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.01 jailshell+
 46459 cloudsms  20   0  113284    892    716 S   0.0  0.0   0:00.01 /usr/loca+
 46461 cloudsms  20   0  157752   3396   2544 D   0.0  0.1   0:00.00 /opt/cpan+
 46462 root      20   0     316      4      0 D   0.0  0.0   0:00.00 [systemd-+
 46463 root      20   0  111304   1480    456 D   0.0  0.1   0:00.00 sshd: [ac+
 46464 root      20   0  111304   1472    456 D   0.0  0.1   0:00.00 sshd: [ac+
 63107 root      20   0  181928   9424    628 S   0.0  0.4   0:17.37 lfd - sle+
 72712 root      20   0  445028    296    180 S   0.0  0.0   2:52.33 sw-engine+
 72887 wp-tool+  20   0  412396   3352   1128 D   0.0  0.1  14:18.00 /usr/bin/+
 72891 wp-tool+  20   0  387556   1972      0 S   0.0  0.1   0:23.34 /usr/bin/+
 77741 root      20   0  248852  12560    264 S   0.0  0.5   0:12.61 /usr/loca+
 81125 root      20   0  400740   2828    404 S   0.0  0.1   4:57.67 php-fpm: +
 81130 root      20   0  388892     92      4 S   0.0  0.0   0:49.47 php-fpm: +
 81135 root      20   0  396248    216    124 D   0.0  0.0   0:50.28 php-fpm: +
 81140 root      20   0  389508    120     28 S   0.0  0.0   0:51.21 php-fpm: +
 81145 root      20   0  439788  10260  10168 S   0.0  0.4   0:51.21 php-fpm: +
 82067 root      20   0  263256  89128     48 S   0.0  3.7   0:03.49 spamd chi+
 85330 telegraf  20   0 5654308  22796    100 S   0.0  0.9  25:56.58 /usr/loca+
 87617 root      20   0  183080    560      4 S   0.0  0.0   0:00.00 /usr/sbin+
 87686 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
 87697 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
 91745 root      20   0  224392   3816      0 S   0.0  0.2   0:19.89 queueproc+
 91923 root      20   0  248852  12140      0 S   0.0  0.5   0:00.02 spamd chi+
 92390 cpanelc+  20   0   10868   3844   2168 R   0.0  0.2  17:44.62 /usr/loca+
 92394 root      38  18  130416    724     36 S   0.0  0.0   0:04.20 cpanellog+
 92408 nscd      20   0 1377676   1808      0 S   0.0  0.1   5:32.21 /usr/sbin+
 92476 root      20   0  299272    304    128 S   0.0  0.0   0:55.55 php-fpm: +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:05 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S     2025   5:53  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:44  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S     2025  60:58  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   1:57  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:14  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  64:52  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:03  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   8:29  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        R<    2025   7:06  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        R     2025   3:55  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:35  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:15  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root      25264  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/0:0]
root      31911  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/1:1]
root      35183  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:0]
root      38634  0.0  0.0      0     0 ?        S    03:05   0:00  \_ [kworker/0:3]
root      39063  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/u200:1]
root      42891  0.0  0.0      0     0 ?        S    03:16   0:00  \_ [kworker/0:2]
root      43485  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/u200:2]
root      43587  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/1:3]
root      44186  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:4]
root      45607  0.0  0.0      0     0 ?        S    03:23   0:00  \_ [kworker/0:1]
root      46138  0.0  0.0      0     0 ?        S    03:23   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1 192272  2852 ?        Rs    2025 101:28 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.0  40240  1276 ?        Ss    2025  30:49 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   240 ?        S<sl  2025   4:29 /sbin/auditd
root        487  0.0  0.0  21540   264 ?        Ss    2025   1:33 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896   788 ?        Ss    2025  16:04 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664   916 ?        Ssl   2025   8:57 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   108 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1340 ?        Ss    2025  35:17 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    60 ?        Ss    2025   0:03 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   280 ?        Ss    2025   2:12 /usr/sbin/crond -n
root      87617  0.0  0.0 183080   560 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      87686  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      87697  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 47m
root      46361  0.0  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46383  0.0  0.0 113284   508 ?        Ss   03:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      46395  0.0  0.0 108052   172 ?        S    03:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      46396  2.2  0.0 113288   780 ?        S    03:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      46465  1.0  0.0 153840  2096 ?        R    03:24   0:00  |               \_ ps auxf
root      46362  0.0  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46380  0.0  0.0  20164   504 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      46363  0.0  0.0 183072  1400 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46364  0.0  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46381  0.0  0.0  20164   504 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      46365  0.2  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46379  0.4  0.0  20164   664 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [46467] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  46467  0.0  0.0  20164   260 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  46468  0.0  0.0 113284  1208 ?        S    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      46366  0.0  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46382  0.0  0.0  20164   504 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      46367  0.2  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46378  0.0  0.0  20164   508 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      46368  0.0  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46393  0.2  0.0  20164   696 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      46369  0.0  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46385  1.2  0.0  20164   640 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [46442] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  46442  0.0  0.0  20164   260 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  46445  0.6  0.0 113284   480 ?        S    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  46446  1.6  0.3 388608  9240 ?        R    03:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      46370  0.0  0.0 183076  1072 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46386  0.4  0.0  20164   640 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [46458] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  46458  1.0  0.0  20164   260 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  46459  1.0  0.0 113284   820 ?        S    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  46461  2.0  0.2 248320  5896 ?        D    03:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      46371  0.0  0.0 183076  1068 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46389  0.0  0.0  20164   508 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      46372  0.0  0.0 183072  1392 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46373  0.0  0.0 183076  1064 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46392  0.0  0.0  20164   624 ?        Ss   03:24   0:00  |   \_ jailshell (pactpay) [46422] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46422  0.0  0.0  20164   256 ?        S    03:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46426  1.2  0.3 480124  9680 ?        S    03:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      46375  0.0  0.0 183076  1064 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46394  0.2  0.0  20164   628 ?        Ss   03:24   0:00  |   \_ jailshell (nigeria) [46418] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46418  0.0  0.0  20164   264 ?        S    03:24   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46427  0.7  0.2 404052  7040 ?        S    03:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      46376  0.0  0.0 183076  1064 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      46387  0.0  0.0  20164   624 ?        Ss   03:24   0:00      \_ jailshell (saboakin) [46421] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  46421  0.0  0.0  20164   260 ?        S    03:24   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  46424  0.5  0.2 404052  6552 ?        S    03:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    44 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    48 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    64 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    60 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   500 ?        Ssl   2025   5:40 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   240 ?        Ss    2025   6:38 /usr/sbin/sshd -D
root      46186  0.0  0.0 111304  1228 ?        Ss   03:23   0:00  \_ sshd: [accepted]
sshd      46198  0.0  0.0 115644  1228 ?        S    03:23   0:00  |   \_ sshd: [net]
root      46448  1.0  0.1 111304  3912 ?        Ss   03:24   0:00  \_ sshd: [accepted]
sshd      46464  0.0  0.1 115644  2620 ?        S    03:24   0:00  |   \_ sshd: [net]
root      46457  1.5  0.1 111304  3912 ?        Ss   03:24   0:00  \_ sshd: [accepted]
sshd      46463  0.0  0.1 115644  2624 ?        S    03:24   0:00      \_ sshd: [net]
root        939  0.0  0.3 1350728 7516 ?        Ssl   2025   2:44 /usr/bin/cspdaemon
root        952  0.0  0.2 261164  5280 ?        Ss    2025  12:48 cpsrvd (SSL) - waiting for connections                   
root      46452  1.0  0.0      0     0 ?        Z    03:24   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 331088  2332 ?        Ssl   2025  16:35 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl   2025   1:29 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.1 1277312 2424 ?        Ssl   2025   0:39 /usr/bin/checkstatus
systuser    980  0.0  0.3 114272  8812 ?        Ssl   2025  18:35 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.0 157704  2132 ?        S     2025   0:19 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1504 ?        Ss    2025   1:01 dnsadmin - dormant mode
root      46312  0.0  0.0      0     0 ?        Z    03:23   0:00  \_ [dnsadmin - dorm] <defunct>
root       1243  0.0  0.3 210740  9212 ?        Ss    2025   7:49 tailwatchd
root       1244  0.0  0.7 262224 17940 ?        Ss    2025   7:43 cpdavd - accepting connections on: 2091, 2077, 2078
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    72 ?        S     2025   1:32  \_ [kworker]
telegraf  85330  0.0  0.9 5654308 23000 ?       SLsl  2025  25:56 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028   252 ?        Ds    2025   2:52 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  46273  0.0  0.0 445028   280 ?        S    03:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  46287  0.0  0.0 445028   136 ?        S    03:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  2940 ?        Ss    2025  14:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.0 387556  1972 ?        Ss    2025   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.3 1185868 32184 ?       Ssl   2025  16:24 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.1 400740  2760 ?        Ss    2025   4:57 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
root      81130  0.0  0.0 388892    92 ?        Ss    2025   0:49 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.0 396248   216 ?        Ss    2025   0:50 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
salutem   46406  0.0  0.0 381196  2008 ?        R    03:24   0:00  \_ php-fpm: pool salutem_com_ng
root      81140  0.0  0.0 389508   120 ?        Ss    2025   0:51 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  0.4 439788 10224 ?        Ss    2025   0:51 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.1 224392  3816 ?        Ss    2025   0:19 queueprocd - waiting up to 60s to process a task
cpanelc+  92390  0.0  0.1  10868  3840 ?        Ss    2025  17:44 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416   724 ?        SN    2025   0:04 cpanellogd - sleeping for logs
nscd      92408  0.0  0.0 1377676 1808 ?        Ssl   2025   5:32 /usr/sbin/nscd
root      92476  0.0  0.0 299272   304 ?        Ss    2025   0:55 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  46328  0.0  0.0 298280  1024 ?        S    03:23   0:00  \_ php-fpm: pool cpanelphpmyadmin
root      12995  0.0 48.1 2500976 1166548 ?     Rsl  Jan02   1:21 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.6  9.6 1481756 232604 ?      Sl   Jan02  51:28 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      77741  0.0  0.5 248852 12560 ?        Ss   Jan04   0:12 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      82067  0.0  3.6 263256 89128 ?        S    Jan04   0:03  \_ spamd child
root      91923  0.0  0.5 248852 12140 ?        S    Jan04   0:00  \_ spamd child
root      16217  0.0  0.0  51508   164 ?        Ss   Jan04   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull  16224  0.0  0.0  47188   876 ?        S    Jan04   0:00  \_ dovecot/pop3-login
dovenull  16225  0.0  0.0  47584  1116 ?        S    Jan04   0:00  \_ dovecot/imap-login
dovecot   16226  0.0  0.0  10320   128 ?        S    Jan04   0:00  \_ dovecot/anvil
root      16227  0.0  0.0  10452   248 ?        S    Jan04   0:00  \_ dovecot/log
dovenull  16228  0.0  0.0  47252  1084 ?        S    Jan04   0:00  \_ dovecot/pop3-login
dovenull  16229  0.0  0.0  47696  1424 ?        S    Jan04   0:00  \_ dovecot/imap-login
root      16230  0.0  0.0  24528  1652 ?        S    Jan04   0:00  \_ dovecot/config
dovecot   16231  0.0  0.0  13568   216 ?        S    Jan04   0:00  \_ dovecot/stats
dovecot   16234  0.0  0.0  41188   460 ?        S    Jan04   0:00  \_ dovecot/auth
worencom  40200  0.0  0.0  38488   984 ?        S    03:09   0:00  \_ dovecot/imap
root      45622  0.0  0.0  41052   664 ?        S    03:23   0:00  \_ dovecot/auth -w
root      46278  0.0  0.0  60820  1228 ?        S    03:23   0:00  \_ dovecot/lmtp
mailnull  16262  0.0  0.1  89116  3040 ?        Ss   Jan04   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      16283  0.0  0.0 153404   144 ?        Ss   Jan04   0:00 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780    40 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      16342  0.0  0.1 267196  4652 ?        Ss   Jan04   0:00 /usr/sbin/httpd -k start
root      16343  0.0  0.0  12828   252 ?        S    Jan04   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      16344  0.0  0.0  12732    80 ?        S    Jan04   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      16345  0.0  0.0  12864   256 ?        S    Jan04   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      16346  0.0  0.0  53268     8 ?        S    Jan04   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     5604  0.0  0.7 278044 18228 ?        S    01:50   0:03  \_ /usr/sbin/httpd -k start
nobody     9891  0.0  0.7 277868 18244 ?        S    01:59   0:02  \_ /usr/sbin/httpd -k start
nobody     9897  0.0  0.7 277880 17816 ?        S    01:59   0:02  \_ /usr/sbin/httpd -k start
cloudw    46453  1.5  0.2 141464  5620 ?        R    03:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    15486  0.0  0.7 277940 17892 ?        S    02:11   0:02  \_ /usr/sbin/httpd -k start
nobody    24159  0.0  0.7 278124 17604 ?        S    02:32   0:01  \_ /usr/sbin/httpd -k start
nobody    26495  0.0  0.7 278072 17312 ?        S    02:38   0:01  \_ /usr/sbin/httpd -k start
nobody    33273  0.0  0.7 278064 17264 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    41547  0.0  0.6 278080 15768 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    42847  0.0  0.6 278104 15784 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    42874  0.0  0.6 277664 15540 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    44438  0.0  0.6 277620 15236 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    46178  0.1  0.5 277516 13680 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46193  0.1  0.5 277548 13692 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46352  0.1  0.5 277248 13436 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
root      63107  0.1  0.3 181928  9424 ?        Ss   00:00   0:17 lfd - sleeping
root      36987  0.0  0.0 123576   228 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      43446  0.0  0.0 113284   256 ?        SN   03:18   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      46144  0.0  0.0 113284   220 ?        SN   03:23   0:00      \_ /bin/sh /etc/cron.daily/mlocate
root      46150  1.6  0.0 108880  1196 ?        RN   03:23   0:00      |   \_ /usr/bin/updatedb -f sysfs ramfs bdev proc cgroup cpuset tmpfs devtmpfs debugfs securityfs sockfs dax bpf pipefs configfs devpts hugetlbfs autofs pstore mqueue rpc_pipefs binfmt_misc
root      46145  0.0  0.0 113644   148 ?        SN   03:23   0:00      \_ awk -v progname=/etc/cron.daily/mlocate progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      43452  0.0  0.1 132964  3476 ?        SN   03:18   0:00 ConfigServer Version Check
root      43463  0.0  0.0 108056    76 ?        SN   03:18   0:00  \_ sleep 6066
root      46034  0.0  0.0 114360  1348 ?        SN   03:23   0:00 bash /usr/local/maldetect/maldet -b -r /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ 1
root      46136  2.8  0.0 121112  1304 ?        RN   03:23   0:01  \_ /bin/find /lmd_find/ /home/agradio/public_html/ /home/agvestcapitals/public_html/ /home/cloudsms/public_html/ /home/cloudurl/public_html/ /home/cloudw/public_html/ /home/ebolaprevention/public_html/ /home/ekoemail42/public_html/ /home/ermsstagingclou7/public_html/ /home/foodcong/public_html/ /home/healthoyostate78/public_html/ /home/kaizancom/public_html/ /home/locationforms/public_html/ /home/mediabuycom/public_html/ /home/nescrowcom/public_html/ /home/nigeria/public_html/ /home/oyocovid19/public_html/ /home/oyotechbcovid/public_html/ /home/oyrtmayouthvol78/public_html/ /home/oysipaoygov/public_html/ /home/pactpay/public_html/ /home/robocallscloudsm/public_html/ /home/saboakin/public_html/ /home/salutem/public_html/ /home/stagingcloudware/public_html/ /home/taisolarinlibr43/public_html/ /home/theforgecom/public_html/ /home/w156credit/public_html/ /home/worencom/public_html/ /home/workflowmanageme/public_html/ /home/xtremotors/public_html/ /home/zabymmmd/public_html/ /var/www/ /usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep ( -mtime -1 -o -ctime -1 ) -type f -size +24  -size -6947618  -not -perm 000 -not -uid 0 -not -gid 0
root      46137  0.0  0.0 112812   172 ?        SN   03:23   0:00  \_ grep -E -vf /usr/local/maldetect/ignore_paths
## mysql stats
Uptime: 191290  Threads: 5  Questions: 17747586  Slow queries: 0  Opens: 46474  Flush tables: 1  Open tables: 2000  Queries per second avg: 92.778
*************************** 1. row ***************************
     Id: 258036
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 2
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2026-01-05' LIMIT 1
*************************** 2. row ***************************
     Id: 258037
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 3
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 3. row ***************************
     Id: 258038
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `19` WHERE `phone`='2348143389193' LIMIT 1
*************************** 4. row ***************************
     Id: 258040
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 3
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 258042
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Creating tmp table
   Info: SELECT * FROM `sms_queue` WHERE server='5' GROUP BY `group_id`
*************************** 6. row ***************************
     Id: 258043
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 7. row ***************************
     Id: 258044
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 1
  State: 
   Info: NULL
## network stats
      1 10.30.9.122 TIME_WAIT
      1 10.30.9.138 TIME_WAIT
      1 142.44.220.155 TIME_WAIT
      1 190.143.254.57 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.10 TIME_WAIT
      1 43.166.128.86 TIME_WAIT
      1 47.128.123.23 TIME_WAIT
      1 52.203.65.83 TIME_WAIT
      1 54.39.136.121 TIME_WAIT
      1 54.39.6.48 TIME_WAIT
      1 74.7.175.141 TIME_WAIT
      1 82.23.183.133 TIME_WAIT
      2 114.119.131.163 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 47.128.44.192 TIME_WAIT
      2 74.7.241.52 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 05-Jan-2026 03:24:08 WAT
   Restart Time: Sunday, 04-Jan-2026 22:02:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 22 minutes 7 seconds
   Server load: 8.13 2.54 1.13
   Total accesses: 38198 - Total Traffic: 312.8 MB - Total Duration: 9484045
   CPU Usage: u9.91 s5.4 cu212.77 cs125.39 - 1.83% CPU load
   1.98 requests/sec - 16.6 kB/second - 8.4 kB/request - 248.286 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

RR__W__WR_W_WW..................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req    Dur   Conn Child  Slot     Client     Protocol              VHost                                          Request
   0-0  24159 0/663/3884  R 8.77  114   2    927693  0.0  3.66  34.55 146.185.219.13 http/1.1 workflow-management-software.co
   1-0  15486 0/833/3220  R 8.07  49    1    1042527 0.0  7.01  24.81 47.128.123.23  http/1.1
   2-0  5604  0/1580/3775 _ 18.21 4     109  745070  0.0  13.34 26.82 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  33273 0/268/2456  _ 3.22  6     3098 647685  0.0  1.45  23.21 190.143.254.57 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Ohaukwu&state=ebonyi&ward=Is
   4-0  44438 0/40/3205   W 0.31  0     0    748231  0.0  0.18  19.35 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   5-0  41547 0/126/3440  _ 1.28  7     998  976426  0.0  1.96  28.13 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue2.php HTTP/1.1
   6-0  42847 0/79/2818   _ 1.03  7     904  908755  0.0  0.47  26.63 116.203.134.67 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue4.php HTTP/1.1
   7-0  46178 0/4/2719    W 0.03  3     0    679475  0.0  0.03  23.40 34.225.243.131 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/blog/blog/images/2019elections/2
   8-0  26495 0/382/2619  R 4.62  49    6    770378  0.0  2.35  22.96 47.128.123.23  http/1.1
   9-0  9891  0/815/1681  _ 8.92  4     318  458861  0.0  7.05  17.40 82.23.183.133  http/1.1 nigeriadecide.org:443           GET /monitor_nigeria_2015_general_election.php?election=Preside
   10-0 9897  2/945/1871  W 9.57  4     0    437492  5.8  10.01 20.51 216.73.216.10  http/1.1 projectmanagement.cloudware.ng: GET /644146019.shtm HTTP/1.1
   11-0 42874 0/58/2461   _ 0.72  3     546  469673  0.0  0.25  17.80 104.194.145.47 http/1.1
   12-0 46193 0/3/2448    W 0.02  0     0    433890  0.0  0.01  18.37 18.214.186.220 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/images/blog/images/images
   13-0 46352 0/0/1120    W 0.00  4     0    209008  0.0  0.00  6.29  82.23.183.133  http/1.1 nigeriadecide.org:443           GET /monitor_nigeria_2015_general_election.php?+lower+ijoka=&+l
   14-0 -     0/0/481     . 0.00  14391 0    28876   0.0  0.00  2.58  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 328
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 31 seconds, (range: 1...108)
   index usage: 5%, cache usage: 8%
   total entries stored since starting: 20593
   total entries replaced since starting: 0
   total entries expired since starting: 20259
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 361 miss
   total removes since starting: 6 hit, 11 miss
Youez - 2016 - github.com/yon3zu
LinuXploit