403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-05.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-05.01.30 load[0] mem[60/61] mysql[1/10] httpd[1]
              total        used        free      shared  buff/cache   available
Mem:           2363        1362         211          87         790         736
Swap:          1999        1262         737
 01:30:01 up  6:41,  0 users,  load average: 0.09, 0.23, 0.24
## system overview
top - 01:30:01 up  6:41,  0 users,  load average: 0.09, 0.23, 0.24
Tasks: 220 total,   2 running, 217 sleeping,   0 stopped,   1 zombie
%Cpu(s): 55.9 us, 32.4 sy,  0.0 ni, 11.8 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   207372 free,  1402604 used,   810324 buff/cache
KiB Swap:  2047996 total,   754940 free,  1293056 used.   746916 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  3714 mysql     20   0 1458316 271108   3420 S  64.7 11.2   5:19.87 /usr/sbin+
 61123 nigeria   20   0  400652  15932  10220 S  23.5  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44532   3716   1604 S  11.8  0.2   0:36.80 /usr/lib/+
 61143 pactpay   20   0  476724  17112  11408 S  11.8  0.7   0:00.02 /opt/cpan+
     9 root      20   0       0      0      0 S   5.9  0.0   0:20.80 [rcu_sche+
 61193 cloudsms  20   0  400652  15672  10060 R   5.9  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.71 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.20 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.36 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.42 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   103 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:01.82 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.41 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.25 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   3308   2992 S   0.0  0.1   0:13.69 /usr/lib/+
   380 root      20   0   45352    476    328 S   0.0  0.0   0:00.35 /usr/lib/+
   408 root      16  -4   55532    556    424 S   0.0  0.0   0:02.20 /sbin/aud+
   410 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   510 rpc       20   0   69256    288    188 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 dbus      20   0   58720   1528    744 S   0.0  0.1   0:12.28 /usr/bin/+
   522 nscd      20   0 1064132   1636    820 S   0.0  0.1   0:03.77 /usr/sbin+
   542 root      20   0   24760   1372    896 S   0.0  0.1   0:05.46 /usr/lib/+
   544 root      20   0  195208    140    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   21540    496    388 S   0.0  0.0   0:00.57 /usr/sbin+
   548 polkitd   20   0  610540   1008    532 S   0.0  0.0   0:03.19 /usr/lib/+
   551 root      20   0   52852    404    296 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  224144   6352   1252 S   0.0  0.3   0:00.32 queueproc+
   553 root      20   0  152780    312    272 S   0.0  0.0   0:00.01 /usr/sbin+
   565 root      20   0    4388    164    160 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0   24208    184    164 S   0.0  0.0   0:00.00 /usr/sbin+
   573 root      20   0  124480    688    512 S   0.0  0.0   0:00.73 /usr/sbin+
   584 root      20   0  114704    248    248 S   0.0  0.0   0:00.02 /bin/bash
   585 root      20   0  108296    240    236 S   0.0  0.0   0:00.00 /sbin/age+
   593 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   637 mailnull  20   0   89120   4016    984 S   0.0  0.2   0:00.32 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.42 [loop0]
   713 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   714 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  2886 memcach+  20   0  342400    268    268 S   0.0  0.0   0:00.53 /usr/bin/+
  2887 root      20   0  572372   1148    568 S   0.0  0.0   0:02.11 /usr/bin/+
  2888 systuser  20   0  113016   1608      0 S   0.0  0.1   0:00.01 /usr/loca+
  2889 root      20   0   51508    664    500 S   0.0  0.0   0:00.27 /usr/sbin+
  2892 root      20   0  445028   2788   2788 S   0.0  0.1   0:00.06 sw-engine+
  2894 systuser  20   0  114016  15304   2788 S   0.0  0.6   0:05.97 /usr/loca+
  2895 root      20   0  153404    476    392 S   0.0  0.0   0:00.56 pure-ftpd+
  2896 telegraf  20   0 5654048  36848   5896 S   0.0  1.5   0:13.07 /usr/loca+
  2898 systuser  20   0  112524   2072      0 S   0.0  0.1   0:00.01 /usr/loca+
  2900 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  2901 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  2902 root      20   0  111304    604    508 S   0.0  0.0   0:03.56 /usr/sbin+
  2910 root      20   0  386112  10572   5948 S   0.0  0.4   0:00.67 php-fpm: +
  2913 root      20   0  397344  16880   9688 S   0.0  0.7   0:03.91 php-fpm: +
  2914 named     20   0  792648  41616   2004 S   0.0  1.7   0:11.68 /usr/sbin+
  2915 root      20   0  261404   7304   1844 S   0.0  0.3   0:05.46 cpsrvd (S+
  2933 root      20   0  392856  11984   6396 S   0.0  0.5   0:00.67 php-fpm: +
  2934 root      20   0  290128   4104   2908 S   0.0  0.2   0:06.66 /usr/sbin+
  2939 root      20   0  385496  11036   5976 S   0.0  0.5   0:00.76 php-fpm: +
  2946 root      20   0 1763068 264108    564 S   0.0 10.9   0:13.58 /usr/loca+
  2953 root      20   0  436392  24100  16596 S   0.0  1.0   0:00.80 php-fpm: +
  2956 cpanelc+  20   0   10552   3700   2368 S   0.0  0.2   0:17.55 /usr/loca+
  3054 dovenull  20   0   47060   2680   1888 S   0.0  0.1   0:00.34 dovecot/p+
  3055 dovenull  20   0   47544   3044   1828 S   0.0  0.1   0:00.15 dovecot/i+
  3056 dovecot   20   0   10320    336    224 S   0.0  0.0   0:00.03 dovecot/a+
  3057 root      20   0   10452    536    332 S   0.0  0.0   0:00.29 dovecot/l+
  3058 dovenull  20   0   47052   2684   1924 S   0.0  0.1   0:00.47 dovecot/p+
  3059 dovenull  20   0   48008   3628   1996 S   0.0  0.1   0:00.29 dovecot/i+
  3066 root      20   0   24528   2572    548 S   0.0  0.1   0:00.13 dovecot/c+
  3071 dovecot   20   0   13568    592    356 S   0.0  0.0   0:00.04 dovecot/s+
  3130 systuser  20   0  157704   3124   1100 S   0.0  0.1   0:00.12 SonarPush+
  3140 root      20   0  248140 117204    960 S   0.0  4.8   0:05.67 /usr/loca+
  3148 dovecot   20   0   41056   1532   1100 S   0.0  0.1   0:00.29 dovecot/a+
  3150 wp-tool+  20   0  410480  35684   1716 S   0.0  1.5   0:19.48 /usr/bin/+
  3151 wp-tool+  20   0  387556  13308   1704 S   0.0  0.5   0:00.27 /usr/bin/+
  3202 root      20   0  183900   6448   3220 S   0.0  0.3   0:01.46 cpdavd - +
  3203 root      20   0  167452   4196   2828 S   0.0  0.2   0:00.47 dnsadmin +
  3205 root      20   0  210316  13928   2128 S   0.0  0.6   0:03.20 tailwatchd
  3599 root      20   0  299272    896    532 S   0.0  0.0   0:00.67 php-fpm: +
  3640 root      38  18  130416   1508    772 S   0.0  0.1   0:00.06 cpanellog+
  3894 root      20   0  266984  30728   5448 S   0.0  1.3   0:01.05 /usr/sbin+
  6977 root      20   0  261684 126968   1784 S   0.0  5.2   0:02.30 spamd chi+
  6978 root      20   0  248140 116688    504 S   0.0  4.8   0:00.01 spamd chi+
  9045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  9055 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.43 [kworker]
 24647 root      20   0  181628  29136   1748 S   0.0  1.2   0:05.56 lfd - sle+
 41006 root      20   0   12744   1392   1184 S   0.0  0.1   0:00.07 /usr/loca+
 41007 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.05 /usr/loca+
 41008 root      20   0   12756   1396   1180 S   0.0  0.1   0:00.06 /usr/loca+
 41009 root      20   0   53272  11896   2508 S   0.0  0.5   0:00.04 /usr/loca+
 41012 nobody    20   0  277688  36212   4816 S   0.0  1.5   0:00.80 /usr/sbin+
 41013 nobody    20   0  277572  36024   4744 S   0.0  1.5   0:00.78 /usr/sbin+
 41366 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 44852 nobody    20   0  277580  36048   4744 S   0.0  1.5   0:00.64 /usr/sbin+
 46097 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 46443 nobody    20   0  277828  36060   4676 S   0.0  1.5   0:00.62 /usr/sbin+
 47849 nobody    20   0  277748  36036   4596 S   0.0  1.5   0:00.51 /usr/sbin+
 47850 nobody    20   0  277500  35860   4656 S   0.0  1.5   0:00.55 /usr/sbin+
 48108 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 48624 root      20   0  183056   2116   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 48664 root      20   0  113284   1148    968 S   0.0  0.0   0:00.00 /bin/sh -+
 48701 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 5h +
 49881 root      20   0 1276100  11240    596 S   0.0  0.5   0:00.07 /usr/bin/+
 49915 root      20   0 1277312  12048    596 S   0.0  0.5   0:00.07 /usr/bin/+
 52978 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 54289 nobody    20   0  277816  36040   4556 S   0.0  1.5   0:00.41 /usr/sbin+
 54302 nobody    20   0  277516  35680   4464 S   0.0  1.5   0:00.32 /usr/sbin+
 54311 nobody    20   0  277508  35768   4560 S   0.0  1.5   0:00.30 /usr/sbin+
 55258 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 57395 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57401 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 58483 root      20   0  183052   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 58493 root      20   0  178152  26300   2812 S   0.0  1.1   0:00.12 /usr/loca+
 58528 root      20   0  158832  15308   2712 S   0.0  0.6   0:00.08 /usr/loca+
 58541 root      20   0  195332  34676   3172 S   0.0  1.4   0:00.20 /usr/loca+
 58572 root      20   0   76780  17008   3048 S   0.0  0.7   0:00.18 /usr/loca+
 58865 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59131 nobody    20   0  277456  35144   3992 S   0.0  1.5   0:00.07 /usr/sbin+
 59664 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59665 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59668 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59669 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59670 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59671 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59672 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59677 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59684 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59685 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59686 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59687 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59688 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59768 cloudw    20   0  295104  15704  10048 S   0.0  0.6   0:00.78 /opt/cpan+
 60919 root      20   0   41052   2784   2124 S   0.0  0.1   0:00.00 dovecot/a+
 60921 worencom  20   0   38468   3832   2992 S   0.0  0.2   0:00.00 dovecot/i+
 60947 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60958 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 60997 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 60998 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: unk+
 60999 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 61000 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 61001 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 61002 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 61023 nigeria   20   0  397064   9656   2452 S   0.0  0.4   0:00.00 php-fpm: +
 61033 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61034 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61035 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61036 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61038 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61039 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61040 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61041 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61042 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61043 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61044 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61045 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61046 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61047 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61048 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61050 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61057 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 61058 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 61059 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 61080 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 61082 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61083 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61084 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61085 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61086 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61090 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61091 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61092 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61094 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61095 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61096 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 61097 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 61098 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61099 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 61106 root      20   0  188192  11076   5148 S   0.0  0.5   0:00.01 /usr/loca+
 61119 nigeria   20   0   20164    268      0 S   0.0  0.0   0:00.00 jailshell+
 61126 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61132 root      20   0  160224   2384   1636 S   0.0  0.1   0:00.00 top -n 2 +
 61141 root      20   0  160220   2328   1592 R   0.0  0.1   0:00.00 top -bcn1
 61191 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 61192 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 91680 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov04   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov04   0:20  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov04   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov04   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov04   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov04   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [deferwq]
root        103  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov04   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov04   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov04   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ext4-rsv-conver]
root        410  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [xprtiod]
root        593  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov04   0:02  \_ [loop0]
root        713  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [jbd2/loop0-8]
root        714  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ext4-rsv-conver]
root      91680  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kworker/u200:1]
root      41366  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/0:3]
root      46097  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:1]
root      48108  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/0:4]
root      52978  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:0]
root      55258  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:3]
root      57395  0.0  0.0      0     0 ?        S    01:20   0:00  \_ [kworker/1:2]
root      57401  0.0  0.0      0     0 ?        S    01:20   0:00  \_ [kworker/1:4]
root      58865  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:0]
root      59664  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:1]
root      59665  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:0]
root      59668  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:5]
root      59669  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:6]
root      59670  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:7]
root      59671  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:8]
root      59672  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:9]
root      59677  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:2]
root      59684  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:5]
root      59685  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:6]
root      59686  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:7]
root      59687  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:8]
root      59688  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:9]
root          1  0.1  0.1  44532  3716 ?        Ss   Nov04   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  3308 ?        Ss   Nov04   0:13 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   476 ?        Ss   Nov04   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   556 ?        S<sl Nov04   0:02 /sbin/auditd
rpc         510  0.0  0.0  69256   288 ?        Ss   Nov04   0:00 /sbin/rpcbind -w
dbus        517  0.0  0.0  58720  1528 ?        Ss   Nov04   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        522  0.0  0.0 1064132 1636 ?        Ssl  Nov04   0:03 /usr/sbin/nscd
root        542  0.0  0.0  24760  1372 ?        Ss   Nov04   0:05 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208   140 ?        Ssl  Nov04   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0  21540   496 ?        Ss   Nov04   0:00 /usr/sbin/irqbalance --foreground
polkitd     548  0.0  0.0 610540  1008 ?        Ssl  Nov04   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        551  0.0  0.0  52852   404 ?        Ss   Nov04   0:00 /usr/sbin/smartd -n -q never
root        552  0.0  0.2 224144  6352 ?        Ss   Nov04   0:00 queueprocd - waiting up to 60s to process a task
root        553  0.0  0.0 152780   312 ?        Ss   Nov04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        565  0.0  0.0   4388   164 ?        Ss   Nov04   0:00 /usr/sbin/acpid
root        571  0.0  0.0  24208   184 ?        Ss   Nov04   0:00 /usr/sbin/atd -f
root        573  0.0  0.0 124480   688 ?        Ss   Nov04   0:00 /usr/sbin/crond -n
root      48624  0.0  0.0 183056  2116 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48664  0.0  0.0 113284  1148 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48701  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 5h 12m
root      58483  0.0  0.0 183052  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      58493  0.0  1.0 178152 26300 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      58528  0.0  0.6 158832 15308 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      58541  0.0  1.4 195332 34676 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      58572  0.0  0.7  76780 17008 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      61033  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61057  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      61058  0.0  0.0 108052   356 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      61059  0.0  0.0 113288  1520 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      61194  0.0  0.0 153840  2096 ?        R    01:30   0:00  |               \_ ps auxf
root      61034  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61095  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      61035  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61082  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      61036  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61098  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      61038  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61096  0.0  0.0  20164   988 ?        Ss   01:30   0:00  |   \_ jailshell (cloudsms) [61191] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  61191  0.0  0.0      0     0 ?        D    01:30   0:00  |       \_ [jailshell]
root      61039  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61084  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      61040  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61086  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      61041  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61094  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      61042  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61083  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      61043  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61091  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      61044  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61092  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      61045  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61085  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      61046  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61090  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      61047  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61080  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      61106  0.0  0.4 188192 11076 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      61132  0.0  0.0 160224  2384 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root      61048  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61099  0.0  0.0  20164   968 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [61126] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61126  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61143  0.0  0.7 476724 17484 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      61050  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      61097  0.0  0.0  20164   972 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [61119] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61119  0.0  0.0  20164   268 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61123  0.0  0.6 400652 15932 ?        S    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        584  0.0  0.0 114704   248 ttyS0    Ss+  Nov04   0:00 /bin/bash
root        585  0.0  0.0 108296   240 tty1     Ss+  Nov04   0:00 /sbin/agetty --noclear tty1 linux
mailnull    637  0.0  0.1  89120  4016 ?        Ss   Nov04   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+   2886  0.0  0.0 342400   268 ?        Ssl  Nov04   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       2887  0.0  0.0 572372  1148 ?        Ssl  Nov04   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   2888  0.0  0.0 113016  1608 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       2889  0.0  0.0  51508   664 ?        Ss   Nov04   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   3054  0.0  0.1  47060  2680 ?        S    Nov04   0:00  \_ dovecot/pop3-login
dovenull   3055  0.0  0.1  47544  3044 ?        S    Nov04   0:00  \_ dovecot/imap-login
dovecot    3056  0.0  0.0  10320   336 ?        S    Nov04   0:00  \_ dovecot/anvil
root       3057  0.0  0.0  10452   536 ?        S    Nov04   0:00  \_ dovecot/log
dovenull   3058  0.0  0.1  47052  2684 ?        S    Nov04   0:00  \_ dovecot/pop3-login
dovenull   3059  0.0  0.1  48008  3628 ?        S    Nov04   0:00  \_ dovecot/imap-login
root       3066  0.0  0.1  24528  2572 ?        S    Nov04   0:00  \_ dovecot/config
dovecot    3071  0.0  0.0  13568   592 ?        S    Nov04   0:00  \_ dovecot/stats
dovecot    3148  0.0  0.0  41056  1532 ?        S    Nov04   0:00  \_ dovecot/auth
root      60919  0.0  0.1  41052  2784 ?        S    01:29   0:00  \_ dovecot/auth -w
worencom  60921  0.0  0.1  38468  3832 ?        S    01:29   0:00  \_ dovecot/imap
root       2892  0.0  0.1 445028  2788 ?        Ss   Nov04   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   2894  0.0  0.6 114016 15304 ?        Ssl  Nov04   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       2895  0.0  0.0 153404   476 ?        Ss   Nov04   0:00 pure-ftpd (SERVER)
telegraf   2896  0.0  1.5 5654048 36848 ?       SLsl Nov04   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   2898  0.0  0.0 112524  2072 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser   2900  0.0  0.0  10132    44 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   2901  0.0  0.0  14068    44 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       2902  0.0  0.0 111304   604 ?        Ss   Nov04   0:03 /usr/sbin/sshd -D
root      60947  0.0  0.1 111304  4268 ?        Ss   01:29   0:00  \_ sshd: [accepted]
root      60997  0.0  0.2 157100  5072 ?        Ss   01:29   0:00  \_ sshd: unknown [priv]
sshd      60998  0.0  0.1 115644  2624 ?        S    01:29   0:00  |   \_ sshd: unknown [net]
root      60999  0.3  0.2 162436  5828 ?        Ss   01:29   0:00  \_ sshd: root [priv]
sshd      61000  0.0  0.1 115644  2628 ?        S    01:29   0:00  |   \_ sshd: root [net]
root      61001  0.5  0.2 162436  5828 ?        Ss   01:29   0:00  \_ sshd: root [priv]
sshd      61002  0.0  0.1 115644  2632 ?        S    01:29   0:00      \_ sshd: root [net]
root       2910  0.0  0.4 386112 10572 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       2913  0.0  0.6 397344 16880 ?        Ss   Nov04   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   61023  0.0  0.3 397064  9656 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
named      2914  0.0  1.7 792648 41616 ?        Ssl  Nov04   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       2915  0.0  0.3 261404  7304 ?        Ss   Nov04   0:05 cpsrvd (SSL) - waiting for connections                   
root      60958  0.0  0.0      0     0 ?        Z    01:29   0:00  \_ [cpaneld - servi] <defunct>
root       2933  0.0  0.4 392856 11984 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       2934  0.0  0.1 290128  4104 ?        Ssl  Nov04   0:06 /usr/sbin/rsyslogd -n
root       2939  0.0  0.4 385496 11036 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       2946  0.0 10.9 1763068 264108 ?      Ssl  Nov04   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       2953  0.0  0.9 436392 24100 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+   2956  0.0  0.1  10552  3700 ?        Rs   Nov04   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   3130  0.0  0.1 157704  3124 ?        S    Nov04   0:00 SonarPush 0.6.12 [sleeping]
root       3140  0.0  4.8 248140 117204 ?       Ss   Nov04   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6977  0.0  5.2 261684 126968 ?       S    Nov04   0:02  \_ spamd child
root       6978  0.0  4.8 248140 116688 ?       S    Nov04   0:00  \_ spamd child
wp-tool+   3150  0.0  1.4 410480 35684 ?        Ss   Nov04   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   3151  0.0  0.5 387556 13308 ?        Ss   Nov04   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       3202  0.0  0.2 183900  6448 ?        Ss   Nov04   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       3203  0.0  0.1 167452  4196 ?        Ss   Nov04   0:00 dnsadmin - dormant mode
root       3205  0.0  0.5 210316 13928 ?        Ss   Nov04   0:03 tailwatchd
root       3599  0.0  0.0 299272   896 ?        Ss   Nov04   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       3640  0.0  0.0 130416  1508 ?        SN   Nov04   0:00 cpanellogd - sleeping for logs
mysql      3714  1.3 11.2 1458316 271108 ?      Sl   Nov04   5:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       3894  0.0  1.2 266984 30728 ?        Ss   Nov04   0:01 /usr/sbin/httpd -k start
root      41006  0.0  0.0  12744  1392 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      41007  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      41008  0.0  0.0  12756  1396 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      41009  0.0  0.4  53272 11896 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    41012  0.0  1.4 277688 36212 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
nobody    41013  0.0  1.4 277572 36024 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
nobody    44852  0.0  1.4 277580 36048 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    46443  0.0  1.4 277828 36060 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody    47849  0.0  1.4 277748 36036 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    47850  0.0  1.4 277500 35860 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    54289  0.0  1.4 277816 36040 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    54302  0.0  1.4 277516 35680 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    54311  0.0  1.4 277508 35768 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    59131  0.0  1.4 277456 35144 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
oysipao+   9045  0.0  0.0   3148   416 ?        Ss   Nov04   0:00 [kworker]
oysipao+   9055  0.0  0.0   3152   492 ?        S    Nov04   0:00  \_ [kworker]
root      24647  0.1  1.2 181628 29136 ?        Ss   00:00   0:05 lfd - sleeping
root      49881  0.0  0.4 1276100 11240 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      49915  0.0  0.4 1277312 12048 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
cloudw    59768  0.3  0.6 295104 15704 ?        S    01:25   0:00 /opt/cpanel/ea-php74/root/usr/bin/php -f /tmp/httpd.conf
## mysql stats
Uptime: 24102  Threads: 3  Questions: 1956942  Slow queries: 0  Opens: 6905  Flush tables: 1  Open tables: 2000  Queries per second avg: 81.194
*************************** 1. row ***************************
     Id: 25192
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 25194
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 25197
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.140 TIME_WAIT
      1 104.210.140.143 TIME_WAIT
      1 114.119.140.107 TIME_WAIT
      1 192.110.213.58 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.65.168 TIME_WAIT
      1 54.39.136.28 TIME_WAIT
      1 54.39.89.77 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 05-Nov-2025 01:30:01 WAT
   Restart Time: Tuesday, 04-Nov-2025 18:48:25 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 6 hours 41 minutes 36 seconds
   Server load: 0.09 0.23 0.24
   Total accesses: 28773 - Total Traffic: 476.8 MB - Total Duration: 10074840
   CPU Usage: u4.39 s1.66 cu144.13 cs62.52 - .883% CPU load
   1.19 requests/sec - 20.3 kB/second - 17.0 kB/request - 350.149 ms/request
   1 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

_____W_._._...._................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-1  54289 0/195/2352 _ 1.12 0    1   820988  0.0  0.89  40.98 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   1-1  47849 0/172/2152 _ 1.29 1    0   1206673 0.0  3.12  45.86 104.210.140.140 http/1.1 oysipa.oyostate.gov.ng:443 GET /robots.txt HTTP/1.1
   2-1  47850 0/184/2513 _ 1.23 1    0   648472  0.0  1.65  46.45 104.210.140.143 http/1.1 oysipa.oyostate.gov.ng:80  GET /robots.txt HTTP/1.1
   3-1  41012 0/331/1777 _ 1.98 1    7   726898  0.0  2.41  20.26 3.210.223.61    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/images/blog/blog/blog/blo
   4-1  54302 0/112/2544 _ 1.03 0    0   802272  0.0  2.20  44.04 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-1  59131 0/25/2002  W 0.42 0    0   865378  0.0  0.19  51.03 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-1  44852 0/277/2310 _ 1.76 0    1   963381  0.0  1.78  39.13 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   7-1  -     0/0/1899   . 0.00 295  0   467220  0.0  0.00  29.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-1  41013 0/351/2387 _ 1.83 0    0   576609  0.0  2.21  28.09 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   9-1  -     0/0/2218   . 0.00 1126 0   813793  0.0  0.00  34.70 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-1 54311 0/103/1441 _ 0.95 5    4   384558  0.0  1.62  19.46 217.113.194.227 http/1.1 team.cloudware.ng:443      GET /vendor/doctrine/persistence/lib/Doctrine/Persistence/?C=D;
   11-1 -     0/0/715    . 0.00 2112 0   239788  0.0  0.00  8.25  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-1 -     0/0/1142   . 0.00 1127 0   231870  0.0  0.00  13.24 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 -     0/0/638    . 0.00 2110 0   220212  0.0  0.00  6.54  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1 -     0/0/845    . 0.00 1893 0   352577  0.0  0.00  24.49 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 46443 0/213/721  _ 1.95 5    4   505076  0.0  1.62  8.51  3.220.70.171    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/2019elections/2019electio
   16-1 -     0/0/736    . 0.00 1125 0   188594  0.0  0.00  12.78 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/319    . 0.00 2571 5   44563   0.0  0.00  2.87  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   18-0 -     0/0/16     . 0.00 2571 26  8670    0.0  0.00  0.23  116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   19-0 -     0/0/15     . 0.00 2643 0   1692    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/20     . 0.00 2571 3   5483    0.0  0.00  0.61  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   21-0 -     0/0/11     . 0.00 2655 0   62      0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 303
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 33 seconds, (range: 0...124)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 2784
   total entries replaced since starting: 0
   total entries expired since starting: 2480
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 6 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit