403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.23.00.txt
 ## swap threshold exceeded
## server overview
2025-11-10.23.00 load[0] mem[53/77] mysql[4/10] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1179         145         126        1038         885
Swap:          1999        1627         372
 23:00:02 up 13:15,  0 users,  load average: 0.16, 0.16, 0.16
## system overview
top - 23:00:02 up 13:15,  0 users,  load average: 0.16, 0.16, 0.16
Tasks: 217 total,   3 running, 213 sleeping,   0 stopped,   1 zombie
%Cpu(s): 72.7 us, 18.2 sy,  3.0 ni,  0.0 id,  6.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   159444 free,  1192040 used,  1068816 buff/cache
KiB Swap:  2047996 total,   381436 free,  1666560 used.   922624 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1478216 289128   3264 S 125.0 11.9  10:54.29 /usr/sbin+
     1 root      20   0   44392   3528   1564 S   6.2  0.1   1:09.53 /usr/lib/+
 31676 nigeria   20   0  400652  15940  10220 S   6.2  0.7   0:00.05 /opt/cpan+
 31684 pactpay   20   0  476724  17480  11728 S   6.2  0.7   0:00.02 /opt/cpan+
 31807 root      35  15  138084   5116   2800 R   6.2  0.2   0:00.01 /usr/loca+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.38 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.35 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:50.29 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.61 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   110 root      20   0       0      0      0 S   0.0  0.0   0:01.02 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:02.41 [kworker/+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.07 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:02.31 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40240   7272   7012 S   0.0  0.3   0:25.42 /usr/lib/+
   387 root      20   0   45352    152    148 S   0.0  0.0   0:00.33 /usr/lib/+
   410 root      16  -4   55532    512    384 S   0.0  0.0   0:04.20 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   478 root      20   0   52852    352    244 S   0.0  0.0   0:00.01 /usr/sbin+
   479 root      20   0   21540    384    296 S   0.0  0.0   0:01.09 /usr/sbin+
   482 root      20   0   24692   1204    824 S   0.0  0.0   0:11.10 /usr/lib/+
   491 root      20   0  152780    160    116 S   0.0  0.0   0:00.03 /usr/sbin+
   492 dbus      20   0   58724   1480    724 S   0.0  0.1   0:25.26 /usr/bin/+
   496 nscd      20   0 1197256   1740    804 S   0.0  0.1   0:23.52 /usr/sbin+
   501 rpc       20   0   69256    168    108 S   0.0  0.0   0:00.05 /sbin/rpc+
   516 root      20   0    4388     84     80 S   0.0  0.0   0:00.00 /usr/sbin+
   518 polkitd   20   0  610540   1092    708 S   0.0  0.0   0:06.48 /usr/lib/+
   526 root      20   0  224148   4496   1152 S   0.0  0.2   0:00.51 queueproc+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   549 root      20   0  124476    460    328 S   0.0  0.0   0:01.37 /usr/sbin+
   550 root      20   0   24208     28      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  114704     80     80 S   0.0  0.0   0:00.02 /bin/bash
   565 root      20   0  108296     84     80 S   0.0  0.0   0:00.00 /sbin/age+
   566 mailnull  20   0   89116   3880    932 S   0.0  0.2   0:00.97 /usr/sbin+
   630 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   682 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   691 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   703 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0  153404    340    256 S   0.0  0.0   0:01.06 pure-ftpd+
   928 root      20   0  572372    980    404 S   0.0  0.0   0:04.05 /usr/bin/+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   932 telegraf  20   0 5654048  36444   6140 S   0.0  1.5   0:25.48 /usr/loca+
   934 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   936 root      20   0   51508    684    504 S   0.0  0.0   0:00.57 /usr/sbin+
   937 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   938 root      20   0  111304    448    348 S   0.0  0.0   0:06.40 /usr/sbin+
   940 memcach+  20   0  342400      0      0 S   0.0  0.0   0:01.04 /usr/bin/+
   941 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   942 systuser  20   0  114016  14348   2452 S   0.0  0.6   0:11.27 /usr/loca+
   946 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.02 /usr/loca+
   952 root      20   0  385496    628    528 S   0.0  0.0   0:01.56 php-fpm: +
   971 root      20   0  436392   4084   3996 S   0.0  0.2   0:01.33 php-fpm: +
   979 root      20   0  386112    624    524 S   0.0  0.0   0:01.23 php-fpm: +
   985 root      20   0  392856    668    484 S   0.0  0.0   0:01.27 php-fpm: +
   986 root      20   0  261436   7176   1784 S   0.0  0.3   0:11.95 cpsrvd (S+
   988 root      20   0  397344   2752    672 S   0.0  0.1   0:06.94 php-fpm: +
   992 root      20   0 1763112  91372   1044 S   0.0  3.8   0:14.60 /usr/loca+
   999 named     20   0  711664  39612   1660 S   0.0  1.6   0:24.09 /usr/sbin+
  1007 root      20   0  331088   8104   6792 S   0.0  0.3   0:12.81 /usr/sbin+
  1016 cpanelc+  20   0   10540   3616   2320 S   0.0  0.1   0:39.52 /usr/loca+
  1080 dovenull  20   0   47256   3492   2480 S   0.0  0.1   0:00.74 dovecot/p+
  1081 dovenull  20   0   48672   4596   2432 S   0.0  0.2   0:00.69 dovecot/i+
  1082 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.14 dovecot/a+
  1083 root      20   0   10452    444    268 S   0.0  0.0   0:00.61 dovecot/l+
  1084 dovenull  20   0   47396   3668   2512 S   0.0  0.2   0:01.12 dovecot/p+
  1085 dovenull  20   0   48740   4548   2496 S   0.0  0.2   0:00.55 dovecot/i+
  1091 root      20   0   24564   2596    456 S   0.0  0.1   0:00.29 dovecot/c+
  1092 dovecot   20   0   13568    600    404 S   0.0  0.0   0:00.11 dovecot/s+
  1154 dovecot   20   0   41172   1536   1044 S   0.0  0.1   0:01.15 dovecot/a+
  1155 wp-tool+  20   0  387528  13092   1488 S   0.0  0.5   0:00.41 /usr/bin/+
  1158 wp-tool+  20   0  410452  36716   1692 S   0.0  1.5   0:39.43 /usr/bin/+
  1175 root      20   0  248140  40928   1020 S   0.0  1.7   0:08.43 /usr/loca+
  1193 systuser  20   0  157700   2904    888 S   0.0  0.1   0:00.20 SonarPush+
  1260 root      20   0  209428  10676   2388 S   0.0  0.4   0:04.35 tailwatchd
  1266 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.55 cpdavd - +
  1267 root      20   0  167452   1328    728 S   0.0  0.1   0:00.68 dnsadmin +
  1677 root      20   0  299272    768    388 S   0.0  0.0   0:01.31 php-fpm: +
  1706 root      38  18  130416   1396    712 S   0.0  0.1   0:00.11 cpanellog+
  1994 root      20   0  267016   8468    712 S   0.0  0.3   0:02.58 /usr/sbin+
  1996 nobody    20   0  277852  21684   5060 S   0.0  0.9   0:02.92 /usr/sbin+
  2017 root      20   0   12820    384    264 S   0.0  0.0   0:03.52 /usr/loca+
  2018 root      20   0   12732    324    244 S   0.0  0.0   0:03.07 /usr/loca+
  2019 root      20   0   12852    388    252 S   0.0  0.0   0:03.24 /usr/loca+
  2047 root      20   0   53268    128    128 S   0.0  0.0   0:00.04 /usr/loca+
  2243 root      20   0  185576  14868   1148 S   0.0  0.6   0:45.39 lfd - sle+
  3314 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
  4413 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
  6595 root      20   0  275092 105956   3376 S   0.0  4.4   0:06.58 spamd chi+
  6596 root      20   0  261032  87700   1936 S   0.0  3.6   0:00.22 spamd chi+
  8800 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 11471 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 11472 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.88 [kworker]
 11853 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18610 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19218 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 23743 nobody    20   0  277528  19660   4180 S   0.0  0.8   0:00.66 /usr/sbin+
 23745 nobody    20   0  277640  20200   4484 S   0.0  0.8   0:00.65 /usr/sbin+
 23921 nobody    20   0  277804  20352   4500 S   0.0  0.8   0:00.79 /usr/sbin+
 23931 nobody    20   0  277952  20196   4388 S   0.0  0.8   0:00.79 /usr/sbin+
 24191 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26722 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 26726 nobody    20   0  277804  19936   4176 S   0.0  0.8   0:00.55 /usr/sbin+
 26739 nobody    20   0  277804  19968   4244 S   0.0  0.8   0:00.54 /usr/sbin+
 26750 nobody    20   0  277816  20076   4240 S   0.0  0.8   0:00.41 /usr/sbin+
 26753 nobody    20   0  277936  20144   4356 S   0.0  0.8   0:00.42 /usr/sbin+
 26754 nobody    20   0  277812  19988   4276 S   0.0  0.8   0:00.48 /usr/sbin+
 26755 nobody    20   0  277740  19800   4092 S   0.0  0.8   0:00.51 /usr/sbin+
 27888 nobody    20   0  277532  19484   4064 S   0.0  0.8   0:00.30 /usr/sbin+
 28576 nobody    20   0  277800  19584   3940 S   0.0  0.8   0:00.32 /usr/sbin+
 29107 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29667 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30232 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30263 mailnull  20   0   89512   5876   2580 S   0.0  0.2   0:00.00 /usr/sbin+
 30866 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 30885 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 30890 nobody    20   0  277804  19264   3596 S   0.0  0.8   0:00.07 /usr/sbin+
 31030 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 31236 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 31562 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 31563 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 31564 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 31577 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31578 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31579 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31580 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31584 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31585 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31587 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31588 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31589 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31590 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31591 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31593 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31594 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31595 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31596 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31597 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31598 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31599 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31600 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31603 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31612 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 31614 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31615 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 31618 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 31619 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 31620 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31621 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 31625 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31626 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 31627 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 31628 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31630 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31631 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31632 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31634 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31636 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31637 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31638 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 31639 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31641 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 31643 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 31646 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 31649 root      20   0  188212  11100   5148 S   0.0  0.5   0:00.02 /usr/loca+
 31652 root      20   0 1276956  14396    600 S   0.0  0.6   0:00.05 /usr/bin/+
 31655 root      20   0 1342492  14412    604 S   0.0  0.6   0:00.06 /usr/bin/+
 31657 root      20   0 1277356  11532    600 S   0.0  0.5   0:00.06 /usr/bin/+
 31659 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 31666 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 31667 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 31669 nigeria   20   0  397064   5276   2396 S   0.0  0.2   0:00.00 php-fpm: +
 31704 root      20   0  160224   2372   1636 S   0.0  0.1   0:00.00 top -n 2 +
 31728 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31800 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 31809 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 31810 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 31811 cloudsms  20   0  262604   6512   4544 R   0.0  0.3   0:00.00 /opt/cpan+
 88161 worencom  20   0   38492   3788   2808 S   0.0  0.2   0:00.02 dovecot/i+
 98469 root      20   0 1276100  10736    596 S   0.0  0.4   0:00.09 /usr/bin/+
 98504 root      20   0 1277056  11628    596 S   0.0  0.5   0:00.07 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:44   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:44   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:44   0:50  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:44   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:44   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [deferwq]
root        110  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [kworker/1:1H]
root        251  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_0]
root        252  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_1]
root        253  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ttm_swap]
root        265  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [kworker/0:1H]
root        279  0.0  0.0      0     0 ?        S    09:44   0:02  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [xprtiod]
root        630  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kvm-irqfd-clean]
root        682  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [loop0]
root        691  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [jbd2/loop0-8]
root        703  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root       3314  0.0  0.0      0     0 ?        S    22:13   0:00  \_ [kworker/0:4]
root       4413  0.0  0.0      0     0 ?        S    22:15   0:00  \_ [kworker/u200:2]
root       8800  0.0  0.0      0     0 ?        S    22:23   0:00  \_ [kworker/u200:0]
root      11853  0.0  0.0      0     0 ?        S    22:28   0:00  \_ [kworker/1:1]
root      18610  0.0  0.0      0     0 ?        S    22:39   0:00  \_ [kworker/1:0]
root      19218  0.0  0.0      0     0 ?        S    22:40   0:00  \_ [kworker/0:2]
root      24191  0.0  0.0      0     0 ?        S    22:48   0:00  \_ [kworker/1:3]
root      26722  0.0  0.0      0     0 ?        S    22:52   0:00  \_ [kworker/0:1]
root      29107  0.0  0.0      0     0 ?        S    22:56   0:00  \_ [kworker/1:2]
root      29667  0.0  0.0      0     0 ?        S    22:57   0:00  \_ [kworker/1:4]
root      30232  0.0  0.0      0     0 ?        S    22:58   0:00  \_ [kworker/u200:1]
root      31728  0.0  0.0      0     0 ?        S    23:00   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44392  3528 ?        Ss   09:44   1:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.3  40240  7272 ?        Ss   09:44   0:25 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   152 ?        Ss   09:44   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   512 ?        S<sl 09:44   0:04 /sbin/auditd
root        478  0.0  0.0  52852   352 ?        Ss   09:44   0:00 /usr/sbin/smartd -n -q never
root        479  0.0  0.0  21540   384 ?        Ss   09:44   0:01 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0  24692  1204 ?        Ss   09:44   0:11 /usr/lib/systemd/systemd-logind
root        491  0.0  0.0 152780   160 ?        Ss   09:44   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        492  0.0  0.0  58724  1480 ?        Ss   09:44   0:25 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        496  0.0  0.0 1197256 1740 ?        Ssl  09:44   0:23 /usr/sbin/nscd
rpc         501  0.0  0.0  69256   168 ?        Ss   09:44   0:00 /sbin/rpcbind -w
root        516  0.0  0.0   4388    84 ?        Ss   09:44   0:00 /usr/sbin/acpid
polkitd     518  0.0  0.0 610540  1092 ?        Ssl  09:44   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        526  0.0  0.1 224148  4496 ?        Ss   09:44   0:00 queueprocd - waiting up to 60s to process a task
root        530  0.0  0.0 195208     0 ?        Ssl  09:44   0:00 /usr/sbin/gssproxy -D
root        549  0.0  0.0 124476   460 ?        Ss   09:44   0:01 /usr/sbin/crond -n
root      31577  0.0  0.0 183048  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31619  0.0  0.0 113284  1208 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      31652  0.0  0.5 1276956 14396 ?       Sl   23:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      31578  0.0  0.0 183048  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31643  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      31657  0.0  0.4 1277356 11532 ?       Sl   23:00   0:00  |       \_ /usr/bin/update_imunify
root      31579  0.0  0.0 183048  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31646  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      31655  0.0  0.5 1342492 14412 ?       Sl   23:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      31580  0.0  0.0 183048  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31626  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      31659  0.0  0.0 113288  1428 ?        SN   23:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      31807  0.0  0.2 138084  5116 ?        RN   23:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      31584  0.0  0.0 183048  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31612  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      31618  0.0  0.0 108052   356 ?        S    23:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      31638  0.0  0.0 113288  1520 ?        S    23:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      31812  0.0  0.0 153840  2092 ?        R    23:00   0:00  |               \_ ps auxf
root      31585  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31631  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      31587  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31636  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      31588  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31625  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      31589  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31634  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      31590  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31628  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      31591  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31637  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      31593  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31620  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      31594  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31630  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      31595  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31614  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      31596  0.0  0.0 183044  2152 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31632  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      31598  0.0  0.0 183044  2148 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31639  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      31599  0.0  0.0 183044  2148 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31627  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      31649  0.0  0.4 188212 11100 ?        S    23:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      31704  0.0  0.0 160224  2372 ?        S    23:00   0:00  |           \_ top -n 2 -b -c
root      31600  0.0  0.0 183044  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31641  0.0  0.0  20164   964 ?        Ss   23:00   0:00  |   \_ jailshell (pactpay) [31667] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   31667  0.0  0.0  20164   260 ?        S    23:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   31684  0.0  0.7 476724 17480 ?        S    23:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      31603  0.0  0.0 183044  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      31621  0.0  0.0  20164   968 ?        Ss   23:00   0:00      \_ jailshell (nigeria) [31666] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   31666  0.0  0.0  20164   260 ?        S    23:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   31676  0.0  0.6 400652 15940 ?        R    23:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        550  0.0  0.0  24208    28 ?        Ss   09:44   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 114704    80 ttyS0    Ss+  09:44   0:00 /bin/bash
root        565  0.0  0.0 108296    84 tty1     Ss+  09:44   0:00 /sbin/agetty --noclear tty1 linux
mailnull    566  0.0  0.1  89116  3880 ?        Ss   09:44   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  30263  0.0  0.2  89512  5876 ?        S    22:58   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0 153404   340 ?        Ss   09:44   0:01 pure-ftpd (SERVER)
root        928  0.0  0.0 572372   980 ?        Ssl  09:44   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    930  0.0  0.0  10132    48 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    932  0.0  1.5 5654048 36444 ?       SLsl 09:44   0:25 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    934  0.0  0.0  11348    40 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        936  0.0  0.0  51508   684 ?        Ss   09:44   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47256  3492 ?        S    09:44   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48672  4596 ?        S    09:44   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   420 ?        S    09:44   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   444 ?        S    09:44   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47396  3668 ?        S    09:44   0:01  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  48740  4548 ?        S    09:44   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24564  2596 ?        S    09:44   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   600 ?        S    09:44   0:00  \_ dovecot/stats
dovecot    1154  0.0  0.0  41172  1536 ?        S    09:44   0:01  \_ dovecot/auth
worencom  88161  0.0  0.1  38492  3788 ?        S    21:40   0:00  \_ dovecot/imap
root      31030  0.0  0.1  60820  4512 ?        S    22:59   0:00  \_ dovecot/lmtp
systuser    937  0.0  0.0 113932    72 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 111304   448 ?        Ss   09:44   0:06 /usr/sbin/sshd -D
root      30866  0.0  0.1 111304  4264 ?        Ss   22:59   0:00  \_ sshd: [accepted]
sshd      30885  0.0  0.1 115644  2624 ?        S    22:59   0:00  |   \_ sshd: [net]
root      31236  0.0  0.1 111304  4268 ?        Ss   22:59   0:00  \_ sshd: [accepted]
root      31562  0.0  0.2 157100  5072 ?        Ss   22:59   0:00  \_ sshd: unknown [priv]
sshd      31563  0.0  0.1 115644  2624 ?        S    22:59   0:00      \_ sshd: unknown [net]
memcach+    940  0.0  0.0 342400     0 ?        Ssl  09:44   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        941  0.0  0.0 445028     0 ?        Ss   09:44   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    942  0.0  0.5 114016 14348 ?        Ssl  09:44   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    946  0.0  0.0 111864    76 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        952  0.0  0.0 385496   628 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        971  0.0  0.1 436392  4084 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        979  0.0  0.0 386112   624 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        985  0.0  0.0 392856   668 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        986  0.0  0.2 261436  7176 ?        Ss   09:44   0:11 cpsrvd (SSL) - waiting for connections                   
root      31564  0.0  0.0      0     0 ?        Z    23:00   0:00  \_ [cpaneld - servi] <defunct>
root        988  0.0  0.1 397344  2752 ?        Ss   09:44   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   31669  0.0  0.2 397064  5276 ?        S    23:00   0:00  \_ php-fpm: pool nigeriadecide_org
root        992  0.0  3.7 1763112 91372 ?       Ssl  09:44   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       999  0.0  1.6 711664 39612 ?        Ssl  09:44   0:24 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1007  0.0  0.3 331088  8104 ?        Ssl  09:44   0:12 /usr/sbin/rsyslogd -n
cpanelc+   1016  0.0  0.1  10540  3616 ?        Rs   09:44   0:39 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
wp-tool+   1155  0.0  0.5 387528 13092 ?        Ss   09:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1158  0.0  1.5 410452 36716 ?        Ss   09:44   0:39 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1175  0.0  1.6 248140 40928 ?        Ss   09:44   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6595  0.0  4.3 275092 105956 ?       S    09:51   0:06  \_ spamd child
root       6596  0.0  3.6 261032 87700 ?        S    09:51   0:00  \_ spamd child
systuser   1193  0.0  0.1 157700  2904 ?        S    09:44   0:00 SonarPush 0.6.12 [sleeping]
root       1260  0.0  0.4 209428 10676 ?        Ss   09:44   0:04 tailwatchd
root       1266  0.0  1.0 262224 24616 ?        Ss   09:44   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1267  0.0  0.0 167452  1328 ?        Ss   09:44   0:00 dnsadmin - dormant mode
root       1677  0.0  0.0 299272   768 ?        Ss   09:44   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1706  0.0  0.0 130416  1396 ?        SN   09:44   0:00 cpanellogd - sleeping for logs
mysql      1750  1.3 11.9 1478216 289128 ?      Sl   09:44  10:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1994  0.0  0.3 267016  8468 ?        Ss   09:45   0:02 /usr/sbin/httpd -k start
root       2017  0.0  0.0  12820   384 ?        S    09:45   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2018  0.0  0.0  12732   324 ?        S    09:45   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2019  0.0  0.0  12852   388 ?        S    09:45   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2047  0.0  0.0  53268   128 ?        S    09:45   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1996  0.0  0.8 277852 21684 ?        S    22:10   0:02  \_ /usr/sbin/httpd -k start
nobody    23743  0.0  0.8 277528 19660 ?        S    22:47   0:00  \_ /usr/sbin/httpd -k start
nobody    23745  0.0  0.8 277640 20200 ?        S    22:47   0:00  \_ /usr/sbin/httpd -k start
nobody    23921  0.1  0.8 277804 20352 ?        S    22:47   0:00  \_ /usr/sbin/httpd -k start
nobody    23931  0.1  0.8 277952 20196 ?        S    22:47   0:00  \_ /usr/sbin/httpd -k start
nobody    26726  0.1  0.8 277804 19936 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody    26739  0.1  0.8 277804 19968 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody    26750  0.0  0.8 277816 20076 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody    26753  0.0  0.8 277936 20144 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody    26754  0.1  0.8 277812 19988 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody    26755  0.1  0.8 277740 19800 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody    27888  0.0  0.8 277532 19484 ?        S    22:54   0:00  \_ /usr/sbin/httpd -k start
nobody    28576  0.1  0.8 277800 19584 ?        S    22:55   0:00  \_ /usr/sbin/httpd -k start
nobody    30890  0.1  0.7 277804 19264 ?        S    22:59   0:00  \_ /usr/sbin/httpd -k start
root       2243  0.0  0.6 185576 14868 ?        Ss   09:45   0:45 lfd - sleeping
oysipao+  11471  0.0  0.0   3148   416 ?        Ss   10:00   0:00 [kworker]
oysipao+  11472  0.0  0.0   3152   492 ?        S    10:00   0:00  \_ [kworker]
root      98469  0.0  0.4 1276100 10736 ?       Ssl  22:00   0:00 /usr/bin/cspdaemon
root      98504  0.0  0.4 1277056 11628 ?       Ssl  22:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 47706  Threads: 3  Questions: 3666909  Slow queries: 0  Opens: 13860  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.864
*************************** 1. row ***************************
     Id: 52783
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 52784
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 52793
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.120 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 142.44.233.251 TIME_WAIT
      1 17.241.227.156 TIME_WAIT
      1 17.241.75.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 38.127.127.99 TIME_WAIT
      1 66.249.70.32 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 92.60.40.202 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 51.222.204.143 TIME_WAIT
      3 172.233.156.98 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 23:00:02 WAT
   Restart Time: Monday, 10-Nov-2025 09:45:02 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 15 minutes
   Server load: 0.16 0.16 0.16
   Total accesses: 148826 - Total Traffic: 3.4 GB - Total Duration: 68472989
   CPU Usage: u7.29 s4.7 cu1849.56 cs1370.88 - 6.78% CPU load
   3.12 requests/sec - 73.9 kB/second - 23.7 kB/request - 460.088 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K_KW.K.K..K.W....._.._.W___.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol          VHost                                       Request
   0-0  27888 1/64/9354   K 1.23  1     272 4104932 34.7  1.33  219.60 66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=4098958321 HTTP/1.1
   1-0  28576 0/55/9252   _ 1.49  0     133 4194466 0.0   1.49  209.65 217.113.194.227 http/1.1 team.cloudware.ng:443    GET /var/cache/prod/pools/VV6jqwmg-R/R/S/ HTTP/1.1
   2-0  30890 1/11/8961   K 0.27  3     397 4018894 35.7  0.24  209.21 66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=1570468253 HTTP/1.1
   3-0  23921 0/144/8983  W 4.00  0     0   4032008 0.0   3.57  208.05 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   4-0  -     0/0/8981    . 0.00  236   0   4179376 0.0   0.00  207.27 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   5-0  26726 6/105/8610  K 2.36  2     262 3877193 188.9 2.49  206.77 66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=1794028857 HTTP/1.1
   6-0  -     0/0/8242    . 0.00  456   0   3833992 0.0   0.00  196.54 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   7-0  26739 2/97/7440   K 2.36  2     346 3412229 66.5  2.47  167.82 66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=784466618 HTTP/1.1
   8-0  -     0/0/8002    . 0.00  462   0   4061110 0.0   0.00  184.33 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   9-0  -     0/0/7523    . 0.00  453   0   3259625 0.0   0.00  173.33 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   10-0 23931 7/229/7247  K 3.56  0     414 3171552 223.0 3.20  162.73 66.249.70.37    http/1.1 support.cloudware.ng:443 GET /?c=760263429 HTTP/1.1
   11-0 -     0/0/6181    . 0.00  471   0   2846916 0.0   0.00  140.59 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   12-0 1996  24/552/6834 W 13.12 0     0   2999513 17.1  12.41 158.39 74.7.227.43     http/1.1 support.cloudware.ng:443 GET /?c=3536401785 HTTP/1.1
   13-0 -     0/0/6078    . 0.00  321   0   2793756 0.0   0.00  138.33 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   14-0 -     0/0/4787    . 0.00  474   0   2249380 0.0   0.00  116.11 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   15-0 -     0/0/5130    . 0.00  468   0   2286892 0.0   0.00  118.34 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 -     0/0/5019    . 0.00  469   0   2351203 0.0   0.00  112.37 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   17-0 -     0/0/2850    . 0.00  467   0   1363200 0.0   0.00  73.27  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-0 26750 0/83/4367   _ 1.75  0     0   2159824 0.0   1.84  109.93 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   19-0 -     0/0/2636    . 0.00  470   0   1285301 0.0   0.00  55.80  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   20-0 -     0/0/2123    . 0.00  464   0   916358  0.0   0.00  46.68  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 23743 0/122/901   _ 3.20  2     1   499163  0.0   2.80  20.85  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   22-0 -     0/0/1267    . 0.00  463   0   580659  0.0   0.00  34.68  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 23745 0/125/851   W 3.00  0     0   373214  0.0   2.74  15.50  66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=1590037813 HTTP/1.1
   24-0 26753 0/82/445    _ 1.75  0     0   254411  0.0   1.79  9.00   ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   25-0 26754 0/90/1171   _ 2.49  0     56  461151  0.0   2.09  24.70  34.194.226.74   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/blog/blog/2019elections/assets/c
   26-0 26755 0/89/1657   _ 2.63  2     396 689899  0.0   2.43  32.53  66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=3330766826 HTTP/1.1
   27-0 -     0/0/911     . 0.00  466   0   505229  0.0   0.00  21.21  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/220     . 0.00  630   0   111763  0.0   0.00  5.73   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/6       . 0.00  757   0   7829    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/161     . 0.00  33    0   52444   0.0   0.00  1.28   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/16      . 0.00  729   0   10882   0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/5       . 0.00  29510 0   12312   0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00  29509 0   11260   0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/198     . 0.00  28556 0   107367  0.0   0.00  4.83   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/4       . 0.00  29508 0   11424   0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/7       . 0.00  29516 0   7452    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/4       . 0.00  29511 0   9120    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/761     . 0.00  25638 0   375432  0.0   0.00  22.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/5       . 0.00  29488 0   9470    0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/61      . 0.00  29506 0   36919   0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/111     . 0.00  29504 0   54684   0.0   0.00  2.46   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/211     . 0.00  28501 0   108349  0.0   0.00  5.24   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/4       . 0.00  29507 0   9746    0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/491     . 0.00  29437 0   281109  0.0   0.00  9.62   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/7       . 0.00  45319 0   14062   0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/3       . 0.00  45342 0   11309   0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/131     . 0.00  44451 0   184067  0.0   0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/4       . 0.00  45329 0   12719   0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -     0/0/1       . 0.00  45378 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -     0/0/1       . 0.00  45371 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -     0/0/1       . 0.00  45376 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -     0/0/3       . 0.00  45339 0   33      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -     0/0/4       . 0.00  45337 4   4250    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -     0/0/1       . 0.00  45373 0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -     0/0/3       . 0.00  45352 0   1257    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -     0/0/3       . 0.00  45341 0   962     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -     0/0/2       . 0.00  45357 0   10772   0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -     0/0/2       . 0.00  45351 0   615     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -     0/0/1       . 0.00  45381 3   4       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00  45377 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -     0/0/52      . 0.00  45112 0   37149   0.0   0.00  1.24   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00  45353 0   18      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -     0/0/4       . 0.00  45330 0   1118    0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -     0/0/1       . 0.00  45379 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -     0/0/5       . 0.00  45326 0   1359    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00  45374 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  45367 0   1939    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -     0/0/6       . 0.00  45320 0   3137    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -     0/0/1       . 0.00  45358 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -     0/0/6       . 0.00  45335 0   4135    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00  45372 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -     0/0/2       . 0.00  45355 0   12402   0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -     0/0/5       . 0.00  45317 0   693     0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -     0/0/1       . 0.00  45380 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  45375 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -     0/0/8       . 0.00  45316 0   1269    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -     0/0/441     . 0.00  43640 0   158222  0.0   0.00  9.02   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -     0/0/44      . 0.00  45113 0   32451   0.0   0.00  0.96   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 600
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...54)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 109287
   total entries replaced since starting: 0
   total entries expired since starting: 108636
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 64 hit, 386 miss
   total removes since starting: 51 hit, 197 miss
Youez - 2016 - github.com/yon3zu
LinuXploit