403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.03.30.txt
 ## swap threshold exceeded
## server overview
2025-11-10.03.30 load[0] mem[65/62] mysql[5/26] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1460         186          45         715         686
Swap:          1999        1322         677
 03:30:02 up  2:36,  0 users,  load average: 0.65, 0.60, 0.61
## system overview
top - 03:30:02 up  2:36,  0 users,  load average: 0.65, 0.60, 0.61
Tasks: 217 total,   6 running, 210 sleeping,   0 stopped,   1 zombie
%Cpu(s): 63.6 us, 24.2 sy,  0.0 ni,  9.1 id,  3.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   174180 free,  1500604 used,   745516 buff/cache
KiB Swap:  2047996 total,   693424 free,  1354572 used.   698408 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1466700 307900   3740 S 100.0 12.7   2:49.83 /usr/sbin+
 93110 nigeria   20   0  400652  15932  10216 S  20.0  0.7   0:00.05 /opt/cpan+
   481 polkitd   20   0  612240    988    592 S   6.7  0.0   0:01.35 /usr/lib/+
 93113 pactpay   20   0  476724  17484  11728 S   6.7  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44420   3492   1556 S   0.0  0.1   0:13.38 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:11.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.40 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.69 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:01.38 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:01.21 [kworker/+
   357 root      20   0   39500   6432   6108 S   0.0  0.3   0:05.11 /usr/lib/+
   385 root      20   0   45352    236    116 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    504    372 S   0.0  0.0   0:00.82 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   482 dbus      20   0   58584   1440    736 S   0.0  0.1   0:05.19 /usr/bin/+
   494 rpc       20   0   69256    156      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    324    232 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    404    296 S   0.0  0.0   0:00.20 /usr/sbin+
   528 root      20   0  224276   7188   1384 S   0.0  0.3   0:00.20 queueproc+
   533 root      20   0  152780    148    104 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1460    824 S   0.0  0.1   0:02.26 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     64     60 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1320    620 S   0.0  0.1   0:04.74 /usr/sbin+
   562 root      20   0   24208     84     60 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    488    320 S   0.0  0.0   0:00.26 /usr/sbin+
   583 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     44     44 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3912    880 S   0.0  0.2   0:00.16 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  36584   5696 S   0.0  1.5   0:05.30 /usr/loca+
   941 root      20   0   51656   1124    736 S   0.0  0.0   0:00.15 /usr/sbin+
   942 root      20   0  153404    320    236 S   0.0  0.0   0:00.20 pure-ftpd+
   943 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    428    324 S   0.0  0.0   0:01.14 /usr/sbin+
   945 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1763112 245584    712 S   0.0 10.1   0:13.93 /usr/loca+
   950 root      20   0  436392  11328  11124 S   0.0  0.5   0:00.40 php-fpm: +
   952 named     20   0  718804  37632   2132 S   0.0  1.6   0:07.19 /usr/sbin+
   960 root      20   0  392856    724    540 S   0.0  0.0   0:00.36 php-fpm: +
   961 root      20   0  240976   5972   5208 S   0.0  0.2   0:02.53 /usr/sbin+
   962 root      20   0  397344   3228    656 S   0.0  0.1   0:01.92 php-fpm: +
   965 root      20   0  261416   6640   1672 S   0.0  0.3   0:02.22 cpsrvd (S+
   967 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   969 memcach+  20   0  342400    120    120 S   0.0  0.0   0:00.20 /usr/bin/+
   970 cpanelc+  20   0   10484   3488   2336 R   0.0  0.1   0:07.57 /usr/loca+
   982 root      20   0  385496    584    484 S   0.0  0.0   0:00.36 php-fpm: +
   985 root      20   0  386112    736    532 S   0.0  0.0   0:00.31 php-fpm: +
   986 systuser  20   0  113272     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 systuser  20   0  114016  13060   2756 S   0.0  0.5   0:02.28 /usr/loca+
   993 root      20   0  572372    804    216 S   0.0  0.0   0:00.89 /usr/bin/+
  1087 dovecot   20   0   10320    468    352 S   0.0  0.0   0:00.03 dovecot/a+
  1168 root      20   0  248160 117772   1232 S   0.0  4.9   0:03.90 /usr/loca+
  1181 systuser  20   0  157704   2892    848 S   0.0  0.1   0:00.06 SonarPush+
  1219 wp-tool+  20   0  410452  36764   1668 S   0.0  1.5   0:07.89 /usr/bin/+
  1220 wp-tool+  20   0  387528  13056   1432 S   0.0  0.5   0:00.16 /usr/bin/+
  1249 root      20   0  209356  11908   2236 S   0.0  0.5   0:00.98 tailwatchd
  1252 root      20   0  183900   6428   3196 S   0.0  0.3   0:00.87 cpdavd - +
  1253 root      20   0  167452   3344   1972 S   0.0  0.1   0:00.24 dnsadmin +
  1749 root      20   0  299272    840    460 S   0.0  0.0   0:00.25 php-fpm: +
  1799 root      38  18  130416   1440    708 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267112  30448   5004 S   0.0  1.3   0:00.97 /usr/sbin+
  2095 root      20   0  181884  10880   1196 S   0.0  0.4   0:08.55 lfd - sle+
  5800 root      20   0  183048   1000    440 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284    380    200 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056     92     20 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152    488      0 S   0.0  0.0   0:00.19 [kworker]
  6471 root      20   0  265416 132660   3592 S   0.0  5.5   0:01.90 spamd chi+
  6472 root      20   0  248160 116960    516 S   0.0  4.8   0:00.00 spamd chi+
 22574 root      20   0   12784   1392   1180 S   0.0  0.1   0:00.69 /usr/loca+
 22575 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.58 /usr/loca+
 22576 root      20   0   12804   1408   1180 S   0.0  0.1   0:00.62 /usr/loca+
 22578 dovenull  20   0   46912   4132   3056 S   0.0  0.2   0:00.11 dovecot/p+
 22579 dovenull  20   0   48028   4992   3244 S   0.0  0.2   0:00.11 dovecot/i+
 22580 root      20   0   10452   1172    800 S   0.0  0.0   0:00.09 dovecot/l+
 22581 dovenull  20   0   46912   4100   3044 S   0.0  0.2   0:00.13 dovecot/p+
 22582 dovenull  20   0   47500   4728   3228 S   0.0  0.2   0:00.11 dovecot/i+
 22583 root      20   0   24528  11748    868 S   0.0  0.5   0:00.06 dovecot/c+
 22584 dovecot   20   0   13572   1276    916 S   0.0  0.1   0:00.01 dovecot/s+
 22588 dovecot   20   0   41056   2296   1528 S   0.0  0.1   0:00.18 dovecot/a+
 22589 root      20   0   53252  10968   1584 S   0.0  0.5   0:00.04 /usr/loca+
 64444 nobody    20   0  278004  36700   4960 S   0.0  1.5   0:03.23 /usr/sbin+
 73506 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75077 nobody    20   0  278020  36500   4904 S   0.0  1.5   0:01.77 /usr/sbin+
 76737 nobody    20   0  277684  36328   4856 S   0.0  1.5   0:01.95 /usr/sbin+
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 77282 root      20   0 1341636  10648    600 S   0.0  0.4   0:00.07 /usr/bin/+
 77322 root      20   0 1277312  11692    596 S   0.0  0.5   0:00.06 /usr/bin/+
 77701 root      20   0  123576    692    460 S   0.0  0.0   0:00.00 /usr/sbin+
 77936 nobody    20   0  277792  36496   4916 S   0.0  1.5   0:01.89 /usr/sbin+
 78152 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 79978 nobody    20   0  277856  36408   4796 S   0.0  1.5   0:01.43 /usr/sbin+
 80610 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 82110 nobody    20   0  277648  36220   4804 S   0.0  1.5   0:01.44 /usr/sbin+
 83792 nobody    20   0  277992  36296   4704 S   0.0  1.5   0:01.07 /usr/sbin+
 84180 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 84184 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 84328 nobody    20   0  277660  35696   4272 S   0.0  1.5   0:00.64 /usr/sbin+
 85348 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 87060 nobody    20   0  277864  35964   4356 S   0.0  1.5   0:00.68 /usr/sbin+
 87077 nobody    20   0  277668  35876   4436 S   0.0  1.5   0:00.92 /usr/sbin+
 87078 nobody    20   0  278004  36004   4420 S   0.0  1.5   0:00.80 /usr/sbin+
 87079 nobody    20   0  277992  36008   4452 S   0.0  1.5   0:00.72 /usr/sbin+
 87318 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 88876 nobody    20   0  277984  35712   4152 S   0.0  1.5   0:00.55 /usr/sbin+
 89887 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89949 nobody    20   0  277856  35884   4284 S   0.0  1.5   0:00.41 /usr/sbin+
 90926 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90988 worencom  20   0   38464   4040   3004 S   0.0  0.2   0:00.00 dovecot/i+
 91392 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92082 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 92401 root      30  10  113284   1488   1276 S   0.0  0.1   0:00.00 /bin/bash+
 92409 root      30  10  132964   4548   1012 S   0.0  0.2   0:00.00 ConfigSer+
 92420 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 8028
 92559 nobody    20   0  277588  35040   3732 S   0.0  1.4   0:00.04 /usr/sbin+
 92605 root      30  10  113284   1500   1256 S   0.0  0.1   0:00.00 bash /etc+
 92606 root      30  10  113644    976    832 S   0.0  0.0   0:00.00 awk -v pr+
 92659 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 228
 92689 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 92690 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 92712 healtho+  20   0  459288  69784   4216 S   0.0  2.9   0:04.98 php-fpm: +
 92792 healtho+  20   0  459288  69784   4212 S   0.0  2.9   0:03.69 php-fpm: +
 92944 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
 92952 nigeria   20   0  397064   5768   2400 S   0.0  0.2   0:00.00 php-fpm: +
 92971 mailnull  20   0   91048   4272   1144 S   0.0  0.2   0:00.00 /usr/sbin+
 92982 nescrow+  20   0  397064   4476   1564 S   0.0  0.2   0:00.00 php-fpm: +
 93009 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 93022 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93023 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93025 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93026 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93027 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93028 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93029 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93030 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93031 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93032 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93033 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93034 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93035 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93036 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93037 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93039 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93049 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 93052 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93053 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93054 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93055 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93057 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93058 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93061 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 93062 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93063 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93064 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 93065 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 93066 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 93067 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93069 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 93071 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93073 root      20   0  188212  11096   5148 S   0.0  0.5   0:00.02 /usr/loca+
 93079 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 93083 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 93102 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 93107 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 93112 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 93120 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 93126 cloudsms  20   0  400652  15148   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 93170 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -n 2 +
 93174 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 93203 cloudw    20   0  350316  16620  10324 R   0.0  0.7   0:00.00 /opt/cpan+
 93206 root      20   0  153408    140      0 R   0.0  0.0   0:00.00 pure-ftpd+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    00:54   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      73506  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:1]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      78152  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/1:3]
root      80610  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:2]
root      84180  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/0:1]
root      84184  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/1:2]
root      85348  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/0:3]
root      87318  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:4]
root      89887  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/0:0]
root      90926  0.0  0.0      0     0 ?        S    03:26   0:00  \_ [kworker/1:0]
root      91392  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44420  3492 ?        Ss   00:54   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  6432 ?        Ss   00:54   0:05 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   236 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   504 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   988 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58584  1440 ?        Ss   00:54   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256   156 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   324 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   404 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224276  7188 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   148 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1460 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    64 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1320 ?        Ssl  00:54   0:04 /usr/sbin/nscd
root        562  0.0  0.0  24208    84 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   488 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048  1000 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284   380 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056    92 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      93022  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93049  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      93079  0.0  0.0 108052   360 ?        S    03:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      93083  0.0  0.0 113288  1520 ?        S    03:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      93207  0.0  0.0 153840  2088 ?        R    03:30   0:00  |               \_ ps auxf
root      93023  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93063  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      93025  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93052  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      93026  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93053  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      93027  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93058  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      93028  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93067  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      93029  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93064  0.0  0.0  20164   812 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      93030  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93062  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      93031  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93061  0.0  0.0  20164   968 ?        Ss   03:30   0:00  |   \_ jailshell (cloudsms) [93112] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  93112  0.0  0.0  20164   264 ?        S    03:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  93120  0.0  0.0 113284  1208 ?        S    03:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  93126  0.0  0.6 400652 15148 ?        S    03:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      93032  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93055  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      93033  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93054  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      93034  0.0  0.0 183044  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93071  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      93035  0.0  0.0 183044  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93057  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      93036  0.0  0.0 183044  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93069  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      93073  0.0  0.4 188212 11096 ?        S    03:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      93170  0.0  0.0 160224  2344 ?        S    03:30   0:00  |           \_ top -n 2 -b -c
root      93037  0.0  0.0 183044  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93065  0.0  0.0  20164   960 ?        Ss   03:30   0:00  |   \_ jailshell (pactpay) [93102] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93102  0.0  0.0  20164   256 ?        S    03:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93113  0.0  0.7 476724 17484 ?        S    03:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      93039  0.0  0.0 183044  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      93066  0.0  0.0  20164   964 ?        Ss   03:30   0:00      \_ jailshell (nigeria) [93107] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93107  0.0  0.0  20164   260 ?        S    03:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93110  0.0  0.6 400652 15932 ?        S    03:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    68 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    44 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3912 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  92971  0.0  0.1  91048  4272 ?        S    03:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.5 5654048 36584 ?       SLsl 00:54   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656  1124 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   468 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.1  46912  4132 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.2  48028  4992 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452  1172 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.1  46912  4100 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47500  4728 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.4  24528 11748 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572  1276 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41056  2296 ?        S    01:28   0:00  \_ dovecot/auth
worencom  90988  0.0  0.1  38464  4040 ?        S    03:26   0:00  \_ dovecot/imap
root      92082  0.0  0.1  60820  4512 ?        S    03:28   0:00  \_ dovecot/lmtp
root      92944  0.0  0.1  41052  2732 ?        S    03:29   0:00  \_ dovecot/auth -w
root        942  0.0  0.0 153404   320 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   428 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root      92689  0.0  0.1 111304  4272 ?        Ss   03:29   0:00  \_ sshd: [accepted]
sshd      92690  0.0  0.1 115644  2632 ?        S    03:29   0:00      \_ sshd: [net]
systuser    945  0.0  0.0  13012    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    72 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.1 10.1 1763112 245584 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.4 436392 11328 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.5 718804 37632 ?        Ssl  00:54   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   724 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.2 240976  5972 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  3228 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  92712 10.8  2.8 459288 69784 ?        S    03:29   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  92792 11.1  2.8 459288 69784 ?        S    03:29   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   92952  0.0  0.2 397064  5768 ?        S    03:29   0:00  \_ php-fpm: pool nigeriadecide_org
nescrow+  92982  0.0  0.1 397064  4476 ?        S    03:29   0:00  \_ php-fpm: pool nescrow_com_ng
root        965  0.0  0.2 261416  6640 ?        Ss   00:54   0:02 cpsrvd (SSL) - waiting for connections                   
root      93009  0.0  0.0      0     0 ?        Z    03:29   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400   120 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3488 ?        Ss   00:54   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   584 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   736 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    80 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.5 114016 13060 ?        Ssl  00:54   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   804 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  4.8 248160 117772 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  5.4 265416 132660 ?       S    01:00   0:01  \_ spamd child
root       6472  0.0  4.8 248160 116960 ?       S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2892 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  1.5 410452 36764 ?        Ss   00:54   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.5 387528 13056 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.4 209356 11908 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  0.2 183900  6428 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.1 167452  3344 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   840 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1440 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8 12.7 1466700 307900 ?      Sl   00:54   2:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  1.2 267112 30448 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12784  1392 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12804  1408 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.4  53252 10968 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    64444  0.1  1.5 278004 36700 ?        S    02:41   0:03  \_ /usr/sbin/httpd -k start
nobody    75077  0.0  1.5 278020 36500 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    76737  0.1  1.5 277684 36328 ?        S    03:00   0:01  \_ /usr/sbin/httpd -k start
nobody    77936  0.1  1.5 277792 36496 ?        S    03:01   0:01  \_ /usr/sbin/httpd -k start
nobody    79978  0.0  1.5 277856 36408 ?        S    03:05   0:01  \_ /usr/sbin/httpd -k start
nobody    82110  0.1  1.4 277648 36220 ?        S    03:08   0:01  \_ /usr/sbin/httpd -k start
cloudw    93203  0.0  0.6 350316 16620 ?        S    03:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    83792  0.0  1.4 277992 36296 ?        S    03:12   0:01  \_ /usr/sbin/httpd -k start
nobody    84328  0.0  1.4 277660 35696 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87060  0.0  1.4 277864 35964 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    87077  0.1  1.4 277668 35876 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    87078  0.1  1.4 278004 36004 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    87079  0.1  1.4 277992 36008 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    88876  0.1  1.4 277984 35712 ?        S    03:22   0:00  \_ /usr/sbin/httpd -k start
nobody    89949  0.1  1.4 277856 35884 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    92559  0.0  1.4 277588 35040 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.4 181884 10880 ?        Ss   00:54   0:08 lfd - sleeping
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   488 ?        S    01:00   0:00  \_ [kworker]
root      77282  0.0  0.4 1341636 10648 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      77322  0.0  0.4 1277312 11692 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      77701  0.0  0.0 123576   692 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      92401  0.0  0.0 113284  1488 ?        SN   03:29   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      92605  0.0  0.0 113284  1500 ?        SN   03:29   0:00      \_ bash /etc/cron.daily/maldet
root      92659  0.0  0.0 108056   360 ?        SN   03:29   0:00      |   \_ sleep 228
root      92606  0.0  0.0 113644   976 ?        SN   03:29   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      92409  0.0  0.1 132964  4548 ?        SN   03:29   0:00 ConfigServer Version Check
root      92420  0.0  0.0 108056   360 ?        SN   03:29   0:00  \_ sleep 8028
## mysql stats
Uptime: 9348  Threads: 3  Questions: 1100896  Slow queries: 0  Opens: 5319  Flush tables: 1  Open tables: 2000  Queries per second avg: 117.768
*************************** 1. row ***************************
     Id: 17263
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 17265
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 17271
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.130 TIME_WAIT
      1 104.210.140.138 TIME_WAIT
      1 114.119.133.34 TIME_WAIT
      1 144.172.94.216 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 180.153.236.122 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.128.123.168 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 35.228.248.94 TIME_WAIT
      6 127.0.0.1 TIME_WAIT
     40 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 03:30:02 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 2 hours 35 minutes 43 seconds
   Server load: 0.65 0.60 0.61
   Total accesses: 38764 - Total Traffic: 748.2 MB - Total Duration: 18068867
   CPU Usage: u13.39 s5.12 cu388.88 cs269.68 - 7.25% CPU load
   4.15 requests/sec - 82.0 kB/second - 19.8 kB/request - 466.125 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K.KK_W_R_..KW_..K.K_._..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn Child  Slot     Client     Protocol              VHost                                          Request
   0-2  89949 2/84/2350  K 1.63  1    405 932534  66.2 1.70  37.01 66.249.70.36   http/1.1 support.cloudware.ng:443        GET /?c=1289309887 HTTP/1.1
   1-2  -     0/0/2325   . 0.00  40   0   1065173 0.0  0.00  41.87 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-2  79978 2/330/2113 K 5.39  3    270 1033285 66.1 5.53  40.06 66.249.70.34   http/1.1 support.cloudware.ng:443        GET /resource/js/json/megadrop_2015new.json HTTP/1.1
   3-2  83792 1/212/2056 K 4.27  1    406 1009818 35.2 4.52  45.11 66.249.70.37   http/1.1 support.cloudware.ng:443        GET /?c=3424095838 HTTP/1.1
   4-2  76737 0/491/2394 _ 7.64  0    8   1006862 0.0  7.61  39.71 54.92.171.106  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/2019elections/blog/2019elections
   5-2  64444 0/782/2306 W 12.96 0    0   1047927 0.0  12.78 40.44 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   6-2  88876 0/118/1847 _ 2.49  0    338 925927  0.0  2.31  41.20 157.20.32.131  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   7-2  92559 0/15/1682  R 0.07  2    2   815469  0.0  0.12  32.26 157.20.32.131  http/1.1
   8-2  77936 0/492/1924 _ 7.13  0    0   1152691 0.0  7.46  53.42 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   9-2  -     0/0/1838   . 0.00  316  0   910231  0.0  0.00  34.92 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-2 -     0/0/1431   . 0.00  225  0   723823  0.0  0.00  28.13 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-2 87060 2/150/1847 K 2.52  3    348 868225  65.1 2.75  33.12 66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=339561392 HTTP/1.1
   12-2 82110 2/284/1519 W 6.28  0    0   704319  67.7 5.71  28.03 66.249.70.38   http/1.1 support.cloudware.ng:443        GET /?c=3424697992 HTTP/1.1
   13-2 84328 0/217/1331 _ 2.04  1    50  620722  0.0  2.32  24.70 144.172.94.216 http/1.1 proxy-subdomains-vhost.localhos GET /inputs.php HTTP/1.1
   14-2 -     0/0/1461   . 0.00  684  0   670836  0.0  0.00  28.14 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-2 -     0/0/1397   . 0.00  380  0   649071  0.0  0.00  28.03 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-2 75077 1/355/1004 K 7.20  0    349 513648  36.8 13.93 25.34 66.249.70.32   http/1.1 support.cloudware.ng:443        GET /resource/js/json/megadrop_2015new.json HTTP/1.1
   17-2 -     0/0/448    . 0.00  581  0   161553  0.0  0.00  7.58  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-2 87077 1/184/847  K 3.75  0    280 430789  34.1 4.09  16.59 66.249.70.35   http/1.1 support.cloudware.ng:443        GET /?c=2254738690 HTTP/1.1
   19-2 87078 0/174/1060 _ 3.13  0    0   529044  0.0  3.28  20.52 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   20-2 -     0/0/1042   . 0.00  634  0   467224  0.0  0.00  20.13 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-2 87079 0/151/1015 _ 3.01  1    343 501361  0.0  9.99  23.95 66.249.70.32   http/1.1 support.cloudware.ng:443        GET /?c=3277532967 HTTP/1.1
   22-2 -     0/0/888    . 0.00  582  0   388174  0.0  0.00  14.29 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-2 -     0/0/617    . 0.00  2242 0   245349  0.0  0.00  9.35  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-2 -     0/0/100    . 0.00  4992 0   37166   0.0  0.00  1.34  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-2 -     0/0/31     . 0.00  4994 0   5168    0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-2 -     0/0/46     . 0.00  4996 0   6117    0.0  0.00  0.25  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-2 -     0/0/47     . 0.00  4997 0   3811    0.0  0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-2 -     0/0/163    . 0.00  4478 0   67061   0.0  0.00  2.53  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-2 -     0/0/26     . 0.00  4990 0   3509    0.0  0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-2 -     0/0/301    . 0.00  4989 0   139777  0.0  0.00  6.21  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-2 -     0/0/57     . 0.00  7053 0   25684   0.0  0.00  0.85  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-2 -     0/0/47     . 0.00  7210 0   16198   0.0  0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-2 -     0/0/39     . 0.00  7208 0   6961    0.0  0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-2 -     0/0/197    . 0.00  6800 0   47049   0.0  0.00  5.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-2 -     0/0/41     . 0.00  7188 0   15983   0.0  0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-2 -     0/0/42     . 0.00  7189 0   10575   0.0  0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-2 -     0/0/316    . 0.00  6368 0   106128  0.0  0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-2 -     0/0/59     . 0.00  7061 0   27054   0.0  0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-2 -     0/0/22     . 0.00  7221 0   1654    0.0  0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-2 -     0/0/149    . 0.00  6893 0   69209   0.0  0.00  2.91  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-2 -     0/0/56     . 0.00  7197 0   11193   0.0  0.00  0.59  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-2 -     0/0/60     . 0.00  7220 0   33165   0.0  0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-2 -     0/0/26     . 0.00  7200 0   1149    0.0  0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-2 -     0/0/36     . 0.00  7219 0   5070    0.0  0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-2 -     0/0/30     . 0.00  7190 0   3132    0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-2 -     0/0/32     . 0.00  7060 0   20691   0.0  0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-1 -     0/0/34     . 0.00  7404 0   9383    0.0  0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-1 -     0/0/8      . 0.00  7478 0   989     0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-1 -     0/0/57     . 0.00  7308 261 20913   0.0  0.00  0.84  66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 630
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...49)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 17305
   total entries replaced since starting: 0
   total entries expired since starting: 16671
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 60 miss
   total removes since starting: 4 hit, 3 miss
Youez - 2016 - github.com/yon3zu
LinuXploit