403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /proc/self/root/var/log/loadwatch/
Upload File :
[ Back ]
Current File : /proc/self/root/var/log/loadwatch/2025-11-23.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-23.01.30 load[0] mem[58/76] mysql[4/12] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1311         105          35         946         851
Swap:          1999        1664         335
 01:30:01 up 14:27,  0 users,  load average: 0.19, 0.24, 0.37
## system overview
top - 01:30:01 up 14:27,  0 users,  load average: 0.19, 0.24, 0.37
Tasks: 215 total,   8 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.6 us, 34.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   102516 free,  1343824 used,   973960 buff/cache
KiB Swap:  2047996 total,   343624 free,  1704372 used.   871168 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 222552   3272 S  56.2  9.2  11:36.61 /usr/sbin+
  1304 nigeria   20   0  404052  16136  10380 R  12.5  0.7   0:00.03 /opt/cpan+
  1333 pactpay   20   0  480124  17676  11880 S  12.5  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44508   3236   1464 S   6.2  0.1   1:10.79 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   6.2  0.1   0:26.99 /usr/bin/+
  1368 cloudsms  20   0  404052  15348  10008 S   6.2  0.6   0:00.01 /opt/cpan+
  1399 cloudsms  20   0  399656  10964   7648 R   6.2  0.5   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:02.85 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.06 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:50.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.94 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.52 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.07 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.71 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.70 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   4912   4668 S   0.0  0.2   0:29.94 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    112      0 S   0.0  0.0   0:04.87 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.18 /usr/sbin+
   501 root      20   0   24704   1164    808 S   0.0  0.0   0:11.80 /usr/lib/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3016    788 S   0.0  0.1   0:00.56 queueproc+
   515 polkitd   20   0  610540    840    464 S   0.0  0.0   0:06.84 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    264    176 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1796    616 S   0.0  0.1   0:36.52 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.43 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3572    644 S   0.0  0.1   0:01.01 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   798 root      20   0  159584   5456   4136 S   0.0  0.2   0:00.28 sshd: lwa+
   812 lwadmin+  20   0  159920   2516   1084 S   0.0  0.1   0:00.00 sshd: lwa+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.12 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.75 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.44 /usr/bin/+
   915 root      20   0   51508    420    252 S   0.0  0.0   0:00.76 /usr/sbin+
   916 telegraf  20   0 5654304  35844   5568 S   0.0  1.5   0:27.69 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  11528   2028 S   0.0  0.5   0:12.11 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.37 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.66 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.03 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.13 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    344    252 S   0.0  0.0   0:01.37 php-fpm: +
   938 root      20   0  388892    256    172 S   0.0  0.0   0:01.24 php-fpm: +
   939 root      20   0 1828368 351256    168 S   0.0 14.5   0:30.01 /usr/loca+
   940 root      20   0  331088   5232   4708 S   0.0  0.2   0:14.86 /usr/sbin+
   949 named     20   0 1054796  32348   2188 S   0.0  1.3   0:23.31 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:06.37 php-fpm: +
   962 root      20   0  261692   5948   1344 S   0.0  0.2   0:08.17 cpsrvd (S+
   969 cpanelc+  20   0   10564   3464   2300 S   0.0  0.1   0:41.31 /usr/loca+
   979 root      20   0  396248    296    216 S   0.0  0.0   0:01.31 php-fpm: +
   985 root      20   0  389508    348    256 S   0.0  0.0   0:01.37 php-fpm: +
  1011 nigeria   20   0  400460   5032   2368 S   0.0  0.2   0:00.00 php-fpm: +
  1083 dovenull  20   0   47116   1484    864 S   0.0  0.1   0:01.63 dovecot/p+
  1084 dovenull  20   0   48232   2548   1532 S   0.0  0.1   0:00.58 dovecot/i+
  1085 dovecot   20   0   10320    164     48 S   0.0  0.0   0:00.38 dovecot/a+
  1086 root      20   0   10452    536    348 S   0.0  0.0   0:01.00 dovecot/l+
  1087 dovenull  20   0   47264   1544    916 S   0.0  0.1   0:01.89 dovecot/p+
  1088 dovenull  20   0   48324   1536    644 S   0.0  0.1   0:00.55 dovecot/i+
  1093 root      20   0   24528   1844    436 S   0.0  0.1   0:00.33 dovecot/c+
  1101 dovecot   20   0   13568    532    316 S   0.0  0.0   0:00.13 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:09.00 /usr/loca+
  1161 dovecot   20   0   41320   1544   1000 S   0.0  0.1   0:02.53 dovecot/a+
  1169 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  1175 systuser  20   0  157708   2856    808 S   0.0  0.1   0:00.23 SonarPush+
  1177 wp-tool+  20   0  387556   3312   1380 S   0.0  0.1   0:00.45 /usr/bin/+
  1178 wp-tool+  20   0  412396   9300   1232 S   0.0  0.4   0:16.40 /usr/bin/+
  1200 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
  1202 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
  1203 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  1207 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1209 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1211 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1213 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1215 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1217 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1218 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1219 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1220 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1221 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1222 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1223 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1224 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1226 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1240 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  1242 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  1244 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  1246 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  1248 root      20   0  188208  11104   5148 S   0.0  0.5   0:00.02 /usr/loca+
  1249 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  1257 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  1260 root      20   0  262228  22492   4628 S   0.0  0.9   0:05.55 cpdavd - +
  1261 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  1262 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
  1263 root      20   0  167452   4188   2828 S   0.0  0.2   0:00.84 dnsadmin +
  1264 root      20   0  209648   9492   1844 S   0.0  0.4   0:06.10 tailwatchd
  1265 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1266 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
  1267 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1268 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1269 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1272 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1273 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1275 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  1280 root      20   0  114256   2428   1280 S   0.0  0.1   0:00.00 bash /usr+
  1302 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  1328 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1334 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -n 2 +
  1347 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  1364 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1366 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  1394 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  1397 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
  1398 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
  1401 root      20   0  114256   1148      0 R   0.0  0.0   0:00.00 bash /usr+
  1800 root      20   0  299272    420    260 S   0.0  0.0   0:01.38 php-fpm: +
  1834 root      38  18  130416   1352    680 S   0.0  0.1   0:00.13 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.61 /usr/sbin+
  2050 root      20   0   12900    332    212 S   0.0  0.0   0:05.39 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:04.77 /usr/loca+
  2052 root      20   0   12948    344    216 S   0.0  0.0   0:05.05 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996  58788   1000 S   0.0  2.4   0:06.13 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.65 [kworker/+
 44973 root      20   0  181468   7700   1100 S   0.0  0.3   0:04.67 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     80     40 S   0.0  0.0   0:00.93 [kworker]
 76551 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 79708 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 81298 worencom  20   0   38488   2612   1644 S   0.0  0.1   0:00.00 dovecot/i+
 83419 root      20   0  183044   1664   1108 S   0.0  0.1   0:00.00 /usr/sbin+
 83465 root      20   0       0      0      0 R   0.0  0.0   0:00.13 [kworker/+
 83479 root      20   0  113284    736    556 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 2h +
 86894 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87471 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91654 nobody    20   0  277808  20556   4840 S   0.0  0.8   0:01.42 /usr/sbin+
 92173 nobody    20   0  277848  20576   4856 S   0.0  0.9   0:01.27 /usr/sbin+
 94337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97027 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 97579 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98083 root      20   0  183044   1668   1112 S   0.0  0.1   0:00.00 /usr/sbin+
 98096 root      20   0  178144  26140   2648 S   0.0  1.1   0:00.12 /usr/loca+
 98122 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98123 root      20   0  158832  15216   2624 S   0.0  0.6   0:00.08 /usr/loca+
 98138 root      20   0  195352  34488   2964 S   0.0  1.4   0:00.20 /usr/loca+
 98162 root      20   0   76780  16844   2880 S   0.0  0.7   0:00.19 /usr/loca+
 99856 root      20   0   41052   1832   1164 S   0.0  0.1   0:00.00 dovecot/a+
100294 nobody    20   0  277796  19508   4120 S   0.0  0.8   0:00.45 /usr/sbin+
100296 nobody    20   0  277744  19708   4336 S   0.0  0.8   0:00.30 /usr/sbin+
100298 nobody    20   0  277728  20004   4468 S   0.0  0.8   0:00.27 /usr/sbin+
100321 nobody    20   0  277820  19796   4312 S   0.0  0.8   0:00.20 /usr/sbin+
100330 nobody    20   0  277828  19768   4308 S   0.0  0.8   0:00.26 /usr/sbin+
100846 nobody    20   0  277700  19488   4184 S   0.0  0.8   0:00.23 /usr/sbin+
101789 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101957 nobody    20   0  277784  19156   3852 S   0.0  0.8   0:00.18 /usr/sbin+
101966 nobody    20   0  277520  18616   3584 S   0.0  0.8   0:00.15 /usr/sbin+
101967 nobody    20   0  277908  19144   3904 S   0.0  0.8   0:00.18 /usr/sbin+
101978 nobody    20   0  277528  18380   3440 S   0.0  0.8   0:00.22 /usr/sbin+
101981 nobody    20   0  277956  19516   4100 S   0.0  0.8   0:00.10 /usr/sbin+
102029 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
102069 nobody    20   0  277812  19392   4000 S   0.0  0.8   0:00.08 /usr/sbin+
102073 nobody    20   0  277536  18848   3848 S   0.0  0.8   0:00.03 /usr/sbin+
102074 nobody    20   0  277824  19236   3952 S   0.0  0.8   0:00.10 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:50  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov22   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        R    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      76551  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/u200:2]
root      79708  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:0]
root      83465  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:1]
root      86894  0.0  0.0      0     0 ?        S    01:05   0:00  \_ [kworker/1:0]
root      87471  0.0  0.0      0     0 ?        D    01:06   0:00  \_ [kworker/1:2]
root      94337  0.0  0.0      0     0 ?        S    01:17   0:00  \_ [kworker/1:3]
root      97027  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/0:2]
root      97579  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/0:3]
root      98122  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/1:1]
root     101789  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44508  3236 ?        Rs   Nov22   1:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40240  4912 ?        Ss   Nov22   0:29 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   112 ?        S<sl Nov22   0:04 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1164 ?        Rs   Nov22   0:11 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Rs   Nov22   0:26 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3016 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   840 ?        Ssl  Nov22   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   264 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1796 ?        Ssl  Nov22   0:36 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Rs   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1664 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   736 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      98083  0.0  0.0 183044  1668 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      98096  0.0  1.0 178144 26140 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      98123  0.0  0.6 158832 15216 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      98138  0.0  1.4 195352 34488 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      98162  0.0  0.6  76780 16844 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root       1207  0.0  0.0 183080  2416 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1261  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root       1280  0.0  0.1 114256  2428 ?        S    01:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       1401  0.0  0.0 117036   948 ?        R    01:30   0:00  |           \_ /usr/bin/sed -i -e /^$/d /usr/local/maldetect/ignore_paths /usr/local/maldetect/ignore_sigs /usr/local/maldetect/ignore_inotify /usr/local/maldetect/ignore_file_ext
root       1209  0.0  0.0 183076  2416 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1242  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       1246  0.0  0.0 108052   360 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       1249  0.0  0.0 113288  1520 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       1404  0.0  0.0 153672  1776 ?        R    01:30   0:00  |               \_ ps auxf
root       1211  0.0  0.0      0     0 ?        Z    01:30   0:00  \_ [crond] <defunct>
root       1213  0.0  0.0 183076  2420 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1269  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       1215  0.0  0.0 183076  2420 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1268  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       1217  0.0  0.0 183076  2416 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1273  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       1218  0.0  0.0 183076  2416 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1240  0.0  0.0  20164   988 ?        Ss   01:30   0:00  |   \_ jailshell (cloudsms) [1364] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   1364  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   1366  0.0  0.0 113284  1212 ?        S    01:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   1368  0.0  0.6 404052 15348 ?        S    01:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root       1219  0.0  0.0 183076  2416 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1265  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       1220  0.0  0.1 183072  2476 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1221  0.0  0.0 183076  2412 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1272  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       1222  0.0  0.0 183076  2412 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1267  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       1223  0.0  0.0 183076  2408 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1244  0.0  0.0 113284  1208 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       1248  0.0  0.4 188208 11104 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       1334  0.0  0.0 160224  2352 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root       1224  0.0  0.0 183076  2412 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1257  0.0  0.0  20164   964 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [1328] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1328  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1333  0.0  0.7 480124 17676 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       1226  0.0  0.0 183076  2408 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       1275  0.0  0.0  20164   972 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [1302] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1302  0.0  0.0  20164   264 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1304  0.0  0.6 404052 16136 ?        S    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3572 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   420 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  1484 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2548 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   164 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   536 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  1544 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.0  48324  1536 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1844 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   532 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1544 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2612 ?        S    00:56   0:00  \_ dovecot/imap
root      99856  0.0  0.0  41052  1832 ?        S    01:25   0:00  \_ dovecot/auth -w
root     102029  0.0  0.1  60820  4508 ?        S    01:28   0:00  \_ dovecot/lmtp
telegraf    916  0.0  1.4 5654304 35844 ?       SLsl Nov22   0:27 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.4 114016 11528 ?        Ssl  Nov22   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root        798  0.9  0.2 159584  5456 ?        Ss   01:29   0:00  \_ sshd: lwadmin-78MMSY [priv]
lwadmin+    812  0.0  0.1 159920  2516 ?        S    01:29   0:00  |   \_ sshd: lwadmin-78MMSY@notty
root       1202  0.0  0.1 111304  4444 ?        Ss   01:29   0:00  \_ sshd: [accepted]
sshd       1203  0.0  0.1 115644  2628 ?        S    01:29   0:00      \_ sshd: [net]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   1200  0.0  0.0 445028   320 ?        S    01:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   344 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   256 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0 14.5 1828368 351256 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  5232 ?        Ssl  Nov22   0:14 /usr/sbin/rsyslogd -n
named       949  0.0  1.3 1054796 32348 ?       Ssl  Nov22   0:23 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    1011  0.0  0.2 400460  5032 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  5948 ?        Ss   Nov22   0:08 cpsrvd (SSL) - waiting for connections                   
root       1169  0.0  0.0      0     0 ?        Z    01:29   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3464 ?        Ss   Nov22   0:41 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   296 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   348 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  2.4 271996 58788 ?        S    Nov22   0:06  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2856 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3312 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9300 ?        Ss   Nov22   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.9 262228 22492 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.1 167452  4188 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.3 209648  9492 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   420 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1352 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.1 1478544 222552 ?      Sl   Nov22  11:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12900   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12948   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    91654  0.1  0.8 277808 20556 ?        S    01:13   0:01  \_ /usr/sbin/httpd -k start
nobody    92173  0.1  0.8 277848 20576 ?        S    01:13   0:01  \_ /usr/sbin/httpd -k start
nobody   100294  0.1  0.8 277796 19508 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100296  0.1  0.8 277744 19708 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100298  0.1  0.8 277728 20004 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100321  0.0  0.8 277820 19796 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100330  0.1  0.8 277828 19768 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100846  0.1  0.8 277700 19488 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   101957  0.1  0.7 277784 19156 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody   101966  0.1  0.7 277520 18616 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody   101967  0.1  0.7 277908 19144 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody   101978  0.2  0.7 277528 18380 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody   101981  0.1  0.8 277956 19516 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody   102069  0.0  0.8 277812 19392 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody   102073  0.0  0.7 277536 18848 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody   102074  0.1  0.7 277824 19236 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    80 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  0.3 181468  7700 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 52015  Threads: 3  Questions: 4461812  Slow queries: 0  Opens: 10390  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.779
*************************** 1. row ***************************
     Id: 70014
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 70015
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 70020
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.223.42.31 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 114.119.163.52 TIME_WAIT
      1 167.114.139.79 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.153.96.79 TIME_WAIT
      1 54.39.203.11 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 68.183.81.241 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 01:30:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 26 minutes 51 seconds
   Server load: 0.19 0.24 0.37
   Total accesses: 239810 - Total Traffic: 5.6 GB - Total Duration: 129816462
   CPU Usage: u4.13 s4.92 cu2954.61 cs2309.65 - 10.1% CPU load
   4.61 requests/sec - 113.5 kB/second - 24.6 kB/request - 541.331 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

__.K.K..KK..K..W.._...KK._KK......K........W....................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS    Req    Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  100846 0/42/12833  _ 1.15 0     126   6654875 0.0   0.99  306.45 154.54.249.205 http/1.1 team.cloudware.ng:80   GET /var/cache/prod/pools/2wJoJAFabM/N/1/?C=M;O=A HTTP/1.1
   1-0  101957 0/30/12550  _ 1.06 0     346   6646163 0.0   0.79  307.03 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=503952336 HTTP/1.1
   2-0  -      0/0/12349   . 0.00 68    0     6783673 0.0   0.00  295.26 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  101966 2/22/11967  K 0.89 2     397   6335815 67.1  0.62  296.00 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1145591274 HTTP/1.1
   4-0  -      0/0/12029   . 0.00 89    0     6237141 0.0   0.00  292.79 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  101967 4/29/12376  K 0.79 0     305   6513166 127.2 0.85  323.64 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=3865031957 HTTP/1.1
   6-0  -      0/0/11576   . 0.00 53    0     5862543 0.0   0.00  289.01 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  -      0/0/11904   . 0.00 94    4     6216042 0.0   0.00  289.51 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  91654  2/305/11470 K 6.13 1     263   5866814 63.7  7.87  273.88 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2844564368 HTTP/1.1
   9-0  101978 3/34/10469  K 0.98 3     346   5579707 94.8  1.01  259.95 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=2191353079 HTTP/1.1
   10-0 -      0/0/10790   . 0.00 86    0     5680017 0.0   0.00  254.79 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 -      0/0/10714   . 0.00 96    0     5605844 0.0   0.00  257.74 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 92173  4/265/10698 K 5.64 3     357   5643523 124.7 5.61  268.62 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=3474516101 HTTP/1.1
   13-0 -      0/0/10124   . 0.00 66    0     5252289 0.0   0.00  241.14 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -      0/0/9113    . 0.00 77    0     4755234 0.0   0.00  218.06 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 101981 0/28/7473   W 0.31 0     0     3881384 0.0   0.43  189.61 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   16-0 -      0/0/7814    . 0.00 95    0     4034804 0.0   0.00  181.67 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -      0/0/6951    . 0.00 87    0     3677197 0.0   0.00  171.84 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 102069 0/17/5906   _ 0.33 0     0     3247866 0.0   0.36  139.77 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   19-0 -      0/0/6554    . 0.00 59    0     3308094 0.0   0.00  150.73 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -      0/0/5171    . 0.00 97    0     2904203 0.0   0.00  120.15 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -      0/0/3868    . 0.00 74    0     2378598 0.0   0.00  92.40  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 102073 2/6/3128    K 0.09 4     346   1863196 63.0  0.14  82.99  192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=1861938679 HTTP/1.1
   23-0 100294 68/113/2588 K 2.77 1     27    1431225 456.9 1.47  50.75  5.135.131.86   http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   24-0 -      0/0/1498    . 0.00 85    548   1196002 0.0   0.00  33.93  105.112.219.32 http/1.1
   25-0 100296 0/65/2484   _ 1.18 0     0     1121528 0.0   1.60  55.75  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   26-0 102074 2/18/1574   K 0.38 2     341   1004677 65.8  0.49  37.03  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=3175166870 HTTP/1.1
   27-0 100298 2/52/1230   K 1.24 1     296   804182  67.9  1.13  35.07  192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=425578659 HTTP/1.1
   28-0 -      0/0/1514    . 0.00 84    0     734157  0.0   0.00  31.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -      0/0/1473    . 0.00 219   0     896903  0.0   0.00  31.65  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -      0/0/1294    . 0.00 215   0     796559  0.0   0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -      0/0/535     . 0.00 208   0     418251  0.0   0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/521     . 0.00 221   0     501649  0.0   0.00  10.47  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -      0/0/226     . 0.00 174   0     242996  0.0   0.00  4.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 100321 1/62/647    K 0.61 0     290   415553  35.2  0.97  9.72   192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=4293515745 HTTP/1.1
   35-0 -      0/0/645     . 0.00 225   0     507090  0.0   0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/89      . 0.00 188   0     137985  0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -      0/0/222     . 0.00 93    0     187355  0.0   0.00  4.82   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -      0/0/661     . 0.00 214   0     330279  0.0   0.00  12.67  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -      0/0/582     . 0.00 54    0     506531  0.0   0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -      0/0/227     . 0.00 217   0     280411  0.0   0.00  4.37   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -      0/0/416     . 0.00 211   0     308037  0.0   0.00  9.50   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/144     . 0.00 187   0     280413  0.0   0.00  1.55   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 100330 0/59/132    W 1.48 0     0     263314  0.0   1.24  2.09   192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3112112662 HTTP/1.1
   44-0 -      0/0/292     . 0.00 224   0     301816  0.0   0.00  6.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/198     . 0.00 186   0     141072  0.0   0.00  1.57   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -      0/0/60      . 0.00 8938  0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -      0/0/67      . 0.00 8960  0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -      0/0/203     . 0.00 8951  0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -      0/0/284     . 0.00 8603  0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -      0/0/82      . 0.00 8964  0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -      0/0/8       . 0.00 8924  0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -      0/0/9       . 0.00 8933  0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -      0/0/29      . 0.00 8931  0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -      0/0/536     . 0.00 7048  0     268842  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -      0/0/4       . 0.00 8968  0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -      0/0/9       . 0.00 8927  0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -      0/0/7       . 0.00 8929  0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -      0/0/43      . 0.00 8970  11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80        GET /requirements.txt HTTP/1.1
   59-0 -      0/0/141     . 0.00 8332  0     113874  0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -      0/0/132     . 0.00 8961  0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -      0/0/6       . 0.00 8959  0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -      0/0/204     . 0.00 8519  0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -      0/0/66      . 0.00 8943  0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -      0/0/11      . 0.00 8936  0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -      0/0/9       . 0.00 8956  0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -      0/0/27      . 0.00 10483 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -      0/0/42      . 0.00 10488 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -      0/0/3       . 0.00 10526 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -      0/0/2       . 0.00 10525 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -      0/0/5       . 0.00 10518 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -      0/0/47      . 0.00 10466 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -      0/0/1       . 0.00 10537 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -      0/0/458     . 0.00 9072  0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -      0/0/9       . 0.00 10514 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -      0/0/1       . 0.00 10536 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -      0/0/23      . 0.00 10478 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -      0/0/200     . 0.00 9834  0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -      0/0/63      . 0.00 10338 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1486
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...28)
   index usage: 26%, cache usage: 35%
   total entries stored since starting: 172641
   total entries replaced since starting: 0
   total entries expired since starting: 171092
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 462 miss
   total removes since starting: 65 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit