403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-05.19.00.txt
 ## swap threshold exceeded
## server overview
2025-11-05.19.00 load[0] mem[59/65] mysql[4/10] httpd[3]
              total        used        free      shared  buff/cache   available
Mem:           2363        1347         171          86         844         757
Swap:          1999        1381         618
 19:00:02 up  9:10,  0 users,  load average: 0.16, 0.32, 0.33
## system overview
top - 19:00:02 up  9:10,  0 users,  load average: 0.16, 0.32, 0.33
Tasks: 216 total,   5 running, 198 sleeping,   0 stopped,  13 zombie
%Cpu(s): 51.5 us, 30.3 sy,  6.1 ni,  6.1 id,  3.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   177348 free,  1369176 used,   873776 buff/cache
KiB Swap:  2047996 total,   633852 free,  1414144 used.   786716 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  3987 mysql     20   0 1458316 286920   3764 S 106.7 11.9   8:37.84 /usr/sbin+
 14306 nigeria   20   0  400652  15936  10220 R  13.3  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44420   3512   1568 S   6.7  0.1   0:47.33 /usr/lib/+
 14450 cloudsms  20   0  400652  15408  10004 S   6.7  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.38 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:27.41 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.79 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.28 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   103 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kauditd]
   239 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:02.06 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.83 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.86 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   5248   4992 S   0.0  0.2   0:16.17 /usr/lib/+
   378 root      20   0   45356    148    124 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    516    388 S   0.0  0.0   0:02.49 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   477 rpc       20   0   69256    100     40 S   0.0  0.0   0:00.03 /sbin/rpc+
   489 polkitd   20   0  612240    924    532 S   0.0  0.0   0:04.51 /usr/lib/+
   491 root      20   0  152780    164    120 S   0.0  0.0   0:00.01 /usr/sbin+
   493 dbus      20   0   58716   1452    720 S   0.0  0.1   0:17.11 /usr/bin/+
   510 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0   24896   1436    836 S   0.0  0.1   0:07.61 /usr/lib/+
   532 root      20   0   21540    432    344 S   0.0  0.0   0:00.79 /usr/sbin+
   533 root      20   0  224268   4972   1200 S   0.0  0.2   0:00.48 queueproc+
   535 root      20   0   52852    420    308 S   0.0  0.0   0:00.01 /usr/sbin+
   552 nscd      20   0 1342692   2172    824 S   0.0  0.1   0:06.60 /usr/sbin+
   558 root      20   0   25908     96     72 S   0.0  0.0   0:00.00 /usr/sbin+
   560 root      20   0  124480    464    332 S   0.0  0.0   0:00.95 /usr/sbin+
   565 root      20   0    4388     44     40 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root      20   0  114704     60     60 S   0.0  0.0   0:00.02 /bin/bash
   582 root      20   0  108296     80     76 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   90820   3960    920 S   0.0  0.2   0:00.43 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:02.35 [loop0]
   665 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   857 nobody    20   0  277592  21320   4848 S   0.0  0.9   0:00.52 /usr/sbin+
  2487 nobody    20   0  277508  20912   4644 S   0.0  0.9   0:00.51 /usr/sbin+
  2495 nobody    20   0  277460  21060   4732 S   0.0  0.9   0:00.59 /usr/sbin+
  2497 nobody    20   0  277548  21140   4728 S   0.0  0.9   0:00.68 /usr/sbin+
  2505 nobody    20   0  277516  21076   4768 S   0.0  0.9   0:00.53 /usr/sbin+
  2508 nobody    20   0  277560  21248   4748 S   0.0  0.9   0:00.67 /usr/sbin+
  3173 telegraf  20   0 5654048  36232   6204 S   0.0  1.5   0:17.47 /usr/loca+
  3175 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.74 /usr/bin/+
  3176 root      20   0  111304    436    332 S   0.0  0.0   0:03.69 /usr/sbin+
  3177 named     20   0  711724  45572   1936 S   0.0  1.9   0:20.14 /usr/sbin+
  3179 root      20   0 1763068 228272    720 S   0.0  9.4   0:15.77 /usr/loca+
  3188 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.02 /usr/loca+
  3189 root      20   0  153404    332    248 S   0.0  0.0   0:00.76 pure-ftpd+
  3190 root      20   0  397344   3360    668 S   0.0  0.1   0:05.85 php-fpm: +
  3192 root      20   0  572372    976    408 S   0.0  0.0   0:02.88 /usr/bin/+
  3196 root      20   0  392856    732    552 S   0.0  0.0   0:00.88 php-fpm: +
  3198 cpanelc+  20   0   10332   3644   2464 R   0.0  0.2   0:23.33 /usr/loca+
  3199 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.02 /usr/loca+
  3200 systuser  20   0  113932     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  3204 root      20   0   51508    680    492 S   0.0  0.0   0:00.39 /usr/sbin+
  3205 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  3210 systuser  20   0  113016   1616      0 S   0.0  0.1   0:00.01 /usr/loca+
  3211 root      20   0  261280  27496   4796 S   0.0  1.1   0:11.47 cpsrvd (S+
  3222 root      20   0  436392   1304   1216 S   0.0  0.1   0:00.99 php-fpm: +
  3224 root      20   0  306512   6852   4692 S   0.0  0.3   0:08.58 /usr/sbin+
  3226 root      20   0  386112    692    476 S   0.0  0.0   0:00.92 php-fpm: +
  3237 root      20   0  385496    720    504 S   0.0  0.0   0:00.97 php-fpm: +
  3238 systuser  20   0  114016  13464   2596 S   0.0  0.6   0:08.10 /usr/loca+
  3338 dovenull  20   0   47048   2768   1976 S   0.0  0.1   0:00.43 dovecot/p+
  3339 dovenull  20   0   48036   3392   1912 S   0.0  0.1   0:00.47 dovecot/i+
  3340 dovecot   20   0   10320    496    380 S   0.0  0.0   0:00.04 dovecot/a+
  3341 root      20   0   10452    472    284 S   0.0  0.0   0:00.40 dovecot/l+
  3342 dovenull  20   0   47048   2712   1892 S   0.0  0.1   0:00.64 dovecot/p+
  3343 dovenull  20   0   48028   3728   2244 S   0.0  0.2   0:00.27 dovecot/i+
  3347 root      20   0   24564   2544    532 S   0.0  0.1   0:00.19 dovecot/c+
  3355 dovecot   20   0   13568    600    384 S   0.0  0.0   0:00.08 dovecot/s+
  3399 wp-tool+  20   0  410452  35512   1580 S   0.0  1.5   0:27.01 /usr/bin/+
  3400 wp-tool+  20   0  387528  13108   1484 S   0.0  0.5   0:00.32 /usr/bin/+
  3408 dovecot   20   0   41176   1520   1044 S   0.0  0.1   0:00.48 dovecot/a+
  3421 systuser  20   0  157700   3080   1024 S   0.0  0.1   0:00.15 SonarPush+
  3467 root      20   0  209832  21748   3744 S   0.0  0.9   0:04.87 tailwatchd
  3469 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.35 cpdavd - +
  3472 root      20   0  167452   1316    712 S   0.0  0.1   0:00.51 dnsadmin +
  3902 root      20   0  299272    756    376 S   0.0  0.0   0:00.89 php-fpm: +
  3924 root      38  18  130416   1472    736 S   0.0  0.1   0:00.08 cpanellog+
  4182 root      20   0  266984   8908    684 S   0.0  0.4   0:01.43 /usr/sbin+
  4185 root      20   0   12848    452    252 S   0.0  0.0   0:02.04 /usr/loca+
  4186 root      20   0   12732    324    248 S   0.0  0.0   0:01.66 /usr/loca+
  4187 root      20   0   12884    436    252 S   0.0  0.0   0:01.87 /usr/loca+
  4191 root      20   0   53256    112    112 S   0.0  0.0   0:00.04 /usr/loca+
  4241 root      20   0  183672  12688   1148 S   0.0  0.5   0:31.71 lfd - sle+
  5993 worencom  20   0   38468   4020   3068 S   0.0  0.2   0:00.00 dovecot/i+
  6377 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
  9590 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  9594 oysipao+  20   0    3152    516     24 S   0.0  0.0   0:00.62 [kworker]
  9969 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9992 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11066 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 11766 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12654 nobody    20   0  277396  19612   3896 S   0.0  0.8   0:00.08 /usr/sbin+
 12663 nobody    20   0  277780  19996   4100 S   0.0  0.8   0:00.22 /usr/sbin+
 12667 nobody    20   0  277360  19432   3796 S   0.0  0.8   0:00.27 /usr/sbin+
 12669 nobody    20   0  277404  19760   4000 S   0.0  0.8   0:00.07 /usr/sbin+
 13371 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13671 nescrow+  20   0   61800   6208   4472 S   0.0  0.3   0:00.00 dovecot/l+
 13804 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13863 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 13905 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 13931 nigeria   20   0  397064   5888   2404 S   0.0  0.2   0:00.01 php-fpm: +
 14187 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14188 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14190 root      20   0       0      0      0 Z   0.0  0.0   0:00.01 [webmaild+
 14191 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14192 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14193 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14194 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14195 root      20   0       0      0      0 Z   0.0  0.0   0:00.01 [webmaild+
 14196 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14197 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14198 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14199 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14200 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 14216 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14217 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14218 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14222 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14223 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14224 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14225 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14226 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14227 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14229 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14230 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14231 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14233 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14234 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14235 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14236 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14237 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14238 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 14241 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14248 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 14250 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14252 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14253 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 14254 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14256 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 14257 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 14259 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 14260 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 14261 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14263 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 14264 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14266 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 14267 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 14269 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 14272 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 14273 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 14274 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14275 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 14278 root      20   0 1277356  12008    596 S   0.0  0.5   0:00.05 /usr/bin/+
 14285 root      20   0  188212  11092   5148 S   0.0  0.5   0:00.01 /usr/loca+
 14287 root      20   0 1349280  10316    600 R   0.0  0.4   0:00.05 /usr/bin/+
 14288 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 14290 root      20   0 1276060  10720    596 S   0.0  0.4   0:00.05 /usr/bin/+
 14298 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 14300 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 14307 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 14312 pactpay   20   0  476724  17112  11408 S   0.0  0.7   0:00.01 /opt/cpan+
 14338 root      20   0  160224   2376   1636 S   0.0  0.1   0:00.00 top -n 2 +
 14437 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 14448 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 14449 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 27149 root      20   0  248148 120712   4116 S   0.0  5.0   0:06.27 /usr/loca+
 32286 root      20   0  275888 142372   2976 S   0.0  5.9   0:09.68 spamd chi+
 32288 root      20   0  261360 127964   2980 S   0.0  5.3   0:00.28 spamd chi+
 91072 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 93950 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 94258 root      20   0 1341892  11292    600 S   0.0  0.5   0:00.10 /usr/bin/+
 99165 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 99549 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
101330 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:49   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:49   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:49   0:27  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:49   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:49   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:49   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:49   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [deferwq]
root        103  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [kauditd]
root        239  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   09:49   0:02  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   09:49   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    09:49   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:49   0:02  \_ [loop0]
root        665  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [jbd2/loop0-8]
root        666  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ext4-rsv-conver]
root      91072  0.0  0.0      0     0 ?        S    17:51   0:00  \_ [kworker/1:3]
root      93950  0.0  0.0      0     0 ?        S    18:00   0:00  \_ [kworker/u200:1]
root      99165  0.0  0.0      0     0 ?        S    18:15   0:00  \_ [kworker/u200:2]
root      99549  0.0  0.0      0     0 ?        S    18:16   0:00  \_ [kworker/0:0]
root     101330  0.0  0.0      0     0 ?        S    18:21   0:00  \_ [kworker/1:2]
root       6377  0.0  0.0      0     0 ?        S    18:43   0:00  \_ [kworker/0:5]
root       9969  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [kworker/1:0]
root       9992  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [kworker/0:1]
root      11066  0.0  0.0      0     0 ?        S    18:52   0:00  \_ [kworker/0:2]
root      11766  0.0  0.0      0     0 ?        S    18:54   0:00  \_ [kworker/1:1]
root      13371  0.0  0.0      0     0 ?        S    18:58   0:00  \_ [kworker/0:3]
root      13804  0.0  0.0      0     0 ?        S    18:59   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44420  3512 ?        Ss   09:49   0:47 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  5248 ?        Ss   09:49   0:16 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45356   148 ?        Ss   09:49   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   516 ?        S<sl 09:49   0:02 /sbin/auditd
rpc         477  0.0  0.0  69256   100 ?        Ss   09:49   0:00 /sbin/rpcbind -w
polkitd     489  0.0  0.0 612240   924 ?        Ssl  09:49   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        491  0.0  0.0 152780   164 ?        Ss   09:49   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        493  0.0  0.0  58716  1452 ?        Ss   09:49   0:17 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        510  0.0  0.0 195208     0 ?        Ssl  09:49   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0  24896  1436 ?        Ss   09:49   0:07 /usr/lib/systemd/systemd-logind
root        532  0.0  0.0  21540   432 ?        Ss   09:49   0:00 /usr/sbin/irqbalance --foreground
root        533  0.0  0.2 224268  4972 ?        Ss   09:49   0:00 queueprocd - waiting up to 60s to process a task
root        535  0.0  0.0  52852   420 ?        Ss   09:49   0:00 /usr/sbin/smartd -n -q never
nscd        552  0.0  0.0 1342692 2172 ?        Ssl  09:49   0:06 /usr/sbin/nscd
root        558  0.0  0.0  25908    96 ?        Ss   09:49   0:00 /usr/sbin/atd -f
root        560  0.0  0.0 124480   464 ?        Ss   09:49   0:00 /usr/sbin/crond -n
root      14216  0.0  0.0 183048  2144 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14248  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      14287  0.0  0.4 1349280 10316 ?       Sl   19:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      14217  0.0  0.0 183048  2144 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14269  0.0  0.0 113284  1208 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      14278  0.0  0.4 1277356 12008 ?       Sl   19:00   0:00  |       \_ /usr/bin/update_imunify
root      14218  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14259  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      14290  0.0  0.4 1276060 10720 ?       Sl   19:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      14222  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14260  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      14288  0.0  0.0 108052   360 ?        S    19:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      14298  0.0  0.0 113288  1516 ?        S    19:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      14451  0.0  0.0 153840  2100 ?        R    19:00   0:00  |               \_ ps auxf
root      14223  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14264  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      14224  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14273  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      14225  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14252  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      14226  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14263  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      14227  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14254  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      14229  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14266  0.0  0.0  20164   984 ?        Ss   19:00   0:00  |   \_ jailshell (cloudsms) [14448] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  14448  0.0  0.0      0     0 ?        D    19:00   0:00  |       \_ [jailshell]
root      14230  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14253  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      14231  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14257  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      14233  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14274  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      14234  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14275  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      14235  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14250  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      14236  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14261  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      14237  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14256  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      14285  0.0  0.4 188212 11092 ?        S    19:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      14338  0.0  0.0 160224  2376 ?        S    19:00   0:00  |           \_ top -n 2 -b -c
root      14238  0.0  0.0 183048  2144 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14272  0.0  0.0  20164   964 ?        Ss   19:00   0:00  |   \_ jailshell (pactpay) [14307] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   14307  0.0  0.0  20164   256 ?        S    19:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   14312  0.0  0.7 476724 17112 ?        S    19:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      14241  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root      14267  0.0  0.0  20164   972 ?        Ss   19:00   0:00      \_ jailshell (nigeria) [14300] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   14300  0.0  0.0  20164   260 ?        S    19:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   14306  0.0  0.6 400652 15936 ?        S    19:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        565  0.0  0.0   4388    44 ?        Ss   09:49   0:00 /usr/sbin/acpid
root        581  0.0  0.0 114704    60 ttyS0    Ss+  09:49   0:00 /bin/bash
root        582  0.0  0.0 108296    80 tty1     Ss+  09:49   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  90820  3960 ?        Ss   09:49   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf   3173  0.0  1.4 5654048 36232 ?       SLsl 09:49   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+   3175  0.0  0.0 342400     0 ?        Ssl  09:49   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       3176  0.0  0.0 111304   436 ?        Ss   09:49   0:03 /usr/sbin/sshd -D
root      13863  0.0  0.1 111304  4268 ?        Ss   18:59   0:00  \_ sshd: [accepted]
named      3177  0.0  1.8 711724 45572 ?        Ssl  09:49   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       3179  0.0  9.4 1763068 228272 ?      Ssl  09:49   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser   3188  0.0  0.0  10388    52 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root       3189  0.0  0.0 153404   332 ?        Ss   09:49   0:00 pure-ftpd (SERVER)
root       3190  0.0  0.1 397344  3360 ?        Ss   09:49   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   13931  0.0  0.2 397064  5888 ?        S    18:59   0:00  \_ php-fpm: pool nigeriadecide_org
root       3192  0.0  0.0 572372   976 ?        Ssl  09:49   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       3196  0.0  0.0 392856   732 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
cpanelc+   3198  0.0  0.1  10332  3644 ?        Ss   09:49   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   3199  0.0  0.0  12660    60 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   3200  0.0  0.0 113932    76 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       3204  0.0  0.0  51508   680 ?        Ss   09:49   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   3338  0.0  0.1  47048  2768 ?        S    09:49   0:00  \_ dovecot/pop3-login
dovenull   3339  0.0  0.1  48036  3392 ?        S    09:49   0:00  \_ dovecot/imap-login
dovecot    3340  0.0  0.0  10320   496 ?        S    09:49   0:00  \_ dovecot/anvil
root       3341  0.0  0.0  10452   472 ?        S    09:49   0:00  \_ dovecot/log
dovenull   3342  0.0  0.1  47048  2712 ?        S    09:49   0:00  \_ dovecot/pop3-login
dovenull   3343  0.0  0.1  48028  3728 ?        S    09:49   0:00  \_ dovecot/imap-login
root       3347  0.0  0.1  24564  2544 ?        S    09:49   0:00  \_ dovecot/config
dovecot    3355  0.0  0.0  13568   600 ?        S    09:49   0:00  \_ dovecot/stats
dovecot    3408  0.0  0.0  41176  1520 ?        S    09:49   0:00  \_ dovecot/auth
worencom   5993  0.0  0.1  38468  4020 ?        S    18:41   0:00  \_ dovecot/imap
nescrow+  13671  0.0  0.2  61800  6208 ?        S    18:58   0:00  \_ dovecot/lmtp
root      13905  0.0  0.1  41052  2728 ?        S    18:59   0:00  \_ dovecot/auth -w
root       3205  0.0  0.0 445028     0 ?        Ss   09:49   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   3210  0.0  0.0 113016  1616 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       3211  0.0  1.1 261280 27496 ?        Ss   09:49   0:11 cpsrvd (SSL) - waiting for connections                   
root      14187  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14188  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14190  1.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14191  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14192  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14193  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14194  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14195  1.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14196  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14197  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14198  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14199  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root      14200  0.0  0.0      0     0 ?        Z    19:00   0:00  \_ [webmaild - serv] <defunct>
root       3222  0.0  0.0 436392  1304 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       3224  0.0  0.2 306512  6852 ?        Ssl  09:49   0:08 /usr/sbin/rsyslogd -n
root       3226  0.0  0.0 386112   692 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       3237  0.0  0.0 385496   720 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   3238  0.0  0.5 114016 13464 ?        Ssl  09:49   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
wp-tool+   3399  0.0  1.4 410452 35512 ?        Ss   09:49   0:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   3400  0.0  0.5 387528 13108 ?        Ss   09:49   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
systuser   3421  0.0  0.1 157700  3080 ?        S    09:49   0:00 SonarPush 0.6.12 [sleeping]
root       3467  0.0  0.8 209832 21748 ?        Ss   09:49   0:04 tailwatchd
root       3469  0.0  1.0 262224 24616 ?        Ss   09:49   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       3472  0.0  0.0 167452  1316 ?        Ss   09:49   0:00 dnsadmin - dormant mode
root       3902  0.0  0.0 299272   756 ?        Ss   09:49   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       3924  0.0  0.0 130416  1472 ?        SN   09:49   0:00 cpanellogd - sleeping for logs
mysql      3987  1.5 11.8 1458316 286920 ?      Sl   09:49   8:37 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       4182  0.0  0.3 266984  8908 ?        Ss   09:49   0:01 /usr/sbin/httpd -k start
root       4185  0.0  0.0  12848   452 ?        S    09:49   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       4186  0.0  0.0  12732   324 ?        S    09:49   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       4187  0.0  0.0  12884   436 ?        S    09:49   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       4191  0.0  0.0  53256   112 ?        S    09:49   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody      857  0.0  0.8 277592 21320 ?        S    18:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2487  0.0  0.8 277508 20912 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody     2495  0.0  0.8 277460 21060 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody     2497  0.0  0.8 277548 21140 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody     2505  0.0  0.8 277516 21076 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody     2508  0.0  0.8 277560 21248 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody    12654  0.0  0.8 277396 19612 ?        S    18:56   0:00  \_ /usr/sbin/httpd -k start
nobody    12663  0.1  0.8 277780 19996 ?        S    18:56   0:00  \_ /usr/sbin/httpd -k start
nobody    12667  0.1  0.8 277360 19432 ?        S    18:56   0:00  \_ /usr/sbin/httpd -k start
nobody    12669  0.0  0.8 277404 19760 ?        S    18:56   0:00  \_ /usr/sbin/httpd -k start
root       4241  0.0  0.5 183672 12688 ?        Ss   09:49   0:31 lfd - sleeping
oysipao+   9590  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   9594  0.0  0.0   3152   516 ?        S    10:01   0:00  \_ [kworker]
root      27149  0.0  4.9 248148 120712 ?       Ss   10:49   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32286  0.0  5.8 275888 142372 ?       S    11:00   0:09  \_ spamd child
root      32288  0.0  5.2 261360 127964 ?       S    11:00   0:00  \_ spamd child
root      94258  0.0  0.4 1341892 11292 ?       Ssl  18:00   0:00 /usr/bin/cspdaemon
## mysql stats
Uptime: 54741  Threads: 3  Questions: 3140376  Slow queries: 0  Opens: 11451  Flush tables: 1  Open tables: 2000  Queries per second avg: 57.367
*************************** 1. row ***************************
     Id: 42980
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 42981
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `15` WHERE `phone`='2348063572121' LIMIT 1
*************************** 3. row ***************************
     Id: 42990
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.156.84 TIME_WAIT
      1 148.113.130.67 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.95.133 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     15 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 05-Nov-2025 19:00:02 WAT
   Restart Time: Wednesday, 05-Nov-2025 03:47:47 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 hours 12 minutes 15 seconds
   Server load: 0.16 0.32 0.33
   Total accesses: 114491 - Total Traffic: 681.1 MB - Total Duration: 19707302
   CPU Usage: u3.46 s2.11 cu582.74 cs239.15 - 1.51% CPU load
   2.09 requests/sec - 12.7 kB/second - 6.1 kB/request - 172.13 ms/request
   3 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

....____._RW.R......_..._.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  -     0/0/6991   . 0.00 134   0   1322668 0.0  0.00  51.56 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  -     0/0/6654   . 0.00 141   0   1337826 0.0  0.00  52.19 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  -     0/0/6758   . 0.00 159   0   1134083 0.0  0.00  36.40 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  -     0/0/6380   . 0.00 161   0   1327848 0.0  0.00  56.39 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  857   0/208/6215 _ 1.57 0     0   1783370 0.0  3.42  37.83 104.248.90.230 http/1.1 oysipa.oyostate.gov.ng:443 GET /lists/text-tiles/index.html?reloaded&sort=date_asc&page=2\"
   5-0  12654 0/24/5946  _ 0.15 0     0   1227181 0.0  0.32  48.91 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   6-0  12663 0/125/5273 _ 0.94 0     1   1207688 0.0  0.58  35.69 104.248.90.230 http/1.1 oysipa.oyostate.gov.ng:443 GET /lists/elaborate/index.html?reloaded&sort=date_desc&page=2\"
   7-0  12667 0/106/5371 _ 2.31 0     29  1403357 0.0  0.07  43.80 128.140.8.200  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   8-0  -     0/0/5572   . 0.00 158   0   946375  0.0  0.00  45.58 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  12669 0/22/4235  _ 0.12 0     32  769528  0.0  0.22  28.18 116.203.134.67 http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   10-0 2487  0/167/5055 R 1.72 61    24  779973  0.0  3.12  23.77 105.115.6.39   http/1.1
   11-0 2495  0/273/5421 W 1.07 0     0   1168998 0.0  3.59  47.00 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 -     0/0/5395   . 0.00 1765  0   899766  0.0  0.00  40.42 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 2497  0/307/3516 R 2.52 0     0   266389  0.0  2.04  20.55 104.248.90.230 http/1.1 oysipa.oyostate.gov.ng:443 GET /tagebuch/eintraege/index.html?reloaded&page=1\">%3Cscript%3
   14-0 -     0/0/4174   . 0.00 1714  0   512879  0.0  0.00  16.88 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/5206   . 0.00 1768  0   1019197 0.0  0.00  36.83 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/3465   . 0.00 133   0   551688  0.0  0.00  15.37 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/2914   . 0.00 162   0   512165  0.0  0.00  9.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/1259   . 0.00 1766  0   106756  0.0  0.00  1.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/1422   . 0.00 1774  0   85492   0.0  0.00  1.39  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 2505  0/227/1991 _ 2.46 0     0   230689  0.0  1.52  5.81  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-0 -     0/0/1070   . 0.00 1775  0   42962   0.0  0.00  0.69  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1508   . 0.00 1764  0   66314   0.0  0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/1260   . 0.00 1773  0   77413   0.0  0.00  1.47  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 2508  0/309/1559 _ 1.83 0     0   119659  0.0  2.43  3.28  104.248.90.230 http/1.1 oysipa.oyostate.gov.ng:443 GET /advanced-elements/form/index.html?formsubmit=12&formaction
   25-0 -     0/0/1300   . 0.00 1772  0   38426   0.0  0.00  0.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1983   . 0.00 2385  0   441300  0.0  0.00  8.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/847    . 0.00 3109  0   35379   0.0  0.00  0.54  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1263   . 0.00 3905  0   48658   0.0  0.00  1.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/1273   . 0.00 4016  0   56391   0.0  0.00  1.87  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/869    . 0.00 4918  0   65911   0.0  0.00  0.79  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/105    . 0.00 5083  0   465     0.0  0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/201    . 0.00 5064  0   5225    0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/166    . 0.00 5082  0   8165    0.0  0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/633    . 0.00 4956  0   9874    0.0  0.00  0.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/243    . 0.00 5015  0   9042    0.0  0.00  0.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/630    . 0.00 4944  0   24106   0.0  0.00  0.41  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/359    . 0.00 5077  0   63891   0.0  0.00  2.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/3      . 0.00 10184 0   59      0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 10180 0   62      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00 10183 0   63      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 395
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 30 seconds, (range: 3...91)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 42222
   total entries replaced since starting: 0
   total entries expired since starting: 41741
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 347 miss
   total removes since starting: 86 hit, 327 miss
Youez - 2016 - github.com/yon3zu
LinuXploit