403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-11.01.30 load[0] mem[69/57] mysql[4/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1568          88          17         706         613
Swap:          1999        1266         733
 01:30:01 up  1:33,  0 users,  load average: 0.57, 1.09, 1.01
## system overview
top - 01:30:02 up  1:33,  0 users,  load average: 1.25, 1.22, 1.05
Tasks: 218 total,   7 running, 209 sleeping,   0 stopped,   2 zombie
%Cpu(s): 78.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    81308 free,  1615540 used,   723452 buff/cache
KiB Swap:  2047996 total,   751100 free,  1296896 used.   618660 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1458324 199104   3984 S  62.5  8.2   1:12.88 /usr/sbin+
 68403 healtho+  20   0  476940  87796   4180 R  56.2  3.6   0:02.02 php-fpm: +
 68554 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.03 /opt/cpan+
   519 dbus      20   0   57028   1324    600 S   6.2  0.1   0:03.03 /usr/bin/+
 68640 cloudw    20   0  350316  16620  10324 R   6.2  0.7   0:00.01 /opt/cpan+
 68645 cloudsms  20   0       0      0      0 Z   6.2  0.0   0:00.01 [php-cgi]+
     1 root      20   0   44408   3452   1528 S   0.0  0.1   0:08.83 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:06.79 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.12 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.74 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.55 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.29 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40240   1828   1580 S   0.0  0.1   0:02.75 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    272    160 S   0.0  0.0   0:00.42 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    184     92 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24896   1432    800 S   0.0  0.1   0:01.34 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.12 /usr/sbin+
   517 root      20   0  224148   3040    800 S   0.0  0.1   0:00.14 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.00 /usr/sbin+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   522 nscd      20   0  996544   1436    688 S   0.0  0.1   0:04.14 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    784    448 S   0.0  0.0   0:00.80 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    428    296 S   0.0  0.0   0:00.16 /usr/sbin+
   577 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3820    828 S   0.0  0.2   0:00.11 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  12684   2620 S   0.0  0.5   0:01.46 /usr/loca+
   916 systuser  20   0   14068     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.12 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:00.58 /usr/sbin+
   924 root      20   0   51508    456    296 S   0.0  0.0   0:00.09 /usr/sbin+
   925 root      20   0  572372    724    160 S   0.0  0.0   0:00.59 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33800   5956 S   0.0  1.4   0:03.40 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.12 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     32      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  232784   1672   1232 S   0.0  0.1   0:01.39 /usr/sbin+
   946 root      20   0  261292   6340   1724 S   0.0  0.3   0:01.45 cpsrvd (S+
   954 named     20   0  636928  35508   1860 S   0.0  1.5   0:03.23 /usr/sbin+
   965 root      20   0  385496    368    276 S   0.0  0.0   0:00.25 php-fpm: +
   972 cpanelc+  20   0   10324   3264   2316 S   0.0  0.1   0:04.99 /usr/loca+
   973 root      20   0  397344   1924    592 S   0.0  0.1   0:00.95 php-fpm: +
   975 root      20   0  392856    392    212 S   0.0  0.0   0:00.25 php-fpm: +
   979 root      20   0  436392    320    232 S   0.0  0.0   0:00.32 php-fpm: +
   980 root      20   0 1828116 564236    212 S   0.0 23.3   0:29.78 /usr/loca+
   991 root      20   0  386112    524    320 S   0.0  0.0   0:00.24 php-fpm: +
  1070 dovenull  20   0   46912   1040    564 S   0.0  0.0   0:00.09 dovecot/p+
  1071 dovenull  20   0   47244   2448   1708 S   0.0  0.1   0:00.08 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.00 dovecot/a+
  1073 root      20   0   10452    588    420 S   0.0  0.0   0:00.06 dovecot/l+
  1074 dovenull  20   0   46912    976    516 S   0.0  0.0   0:00.08 dovecot/p+
  1075 dovenull  20   0   47360   2256   1608 S   0.0  0.1   0:00.06 dovecot/i+
  1078 root      20   0   24396   1860    492 S   0.0  0.1   0:00.05 dovecot/c+
  1084 dovecot   20   0   13568    636    452 S   0.0  0.0   0:00.01 dovecot/s+
  1112 systuser  20   0  157704   2932    988 S   0.0  0.1   0:00.04 SonarPush+
  1127 root      20   0  248312   2736    716 S   0.0  0.1   0:03.51 /usr/loca+
  1152 dovecot   20   0   41056   1436   1008 S   0.0  0.1   0:00.12 dovecot/a+
  1157 wp-tool+  20   0  387556   3284   1420 S   0.0  0.1   0:00.14 /usr/bin/+
  1159 wp-tool+  20   0  410452  27804   1396 S   0.0  1.1   0:04.82 /usr/bin/+
  1210 root      20   0  209268   8700   1868 S   0.0  0.4   0:00.62 tailwatchd
  1211 root      20   0  262224  24688   6768 S   0.0  1.0   0:00.75 cpdavd - +
  1213 root      20   0  167452   4192   2828 S   0.0  0.2   0:00.21 dnsadmin +
  1667 root      20   0  299272    456    296 S   0.0  0.0   0:00.15 php-fpm: +
  1700 root      38  18  130416   1368    692 S   0.0  0.1   0:00.01 cpanellog+
  1945 root      20   0  267016   4792    532 S   0.0  0.2   0:00.46 /usr/sbin+
  1949 root      20   0   12820    324    212 S   0.0  0.0   0:00.61 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:00.50 /usr/loca+
  1951 root      20   0   12848    344    216 S   0.0  0.0   0:00.56 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.11 [kworker]
  5071 root      20   0  181264   7192   1100 S   0.0  0.3   0:04.58 lfd - sle+
  7555 root      20   0  249580  39308   1160 S   0.0  1.6   0:00.50 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 34728 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 38359 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 38388 root      20   0       0      0      0 D   0.0  0.0   0:00.33 [kworker/+
 39447 nobody    20   0  277932  13644   4680 S   0.0  0.6   0:04.43 /usr/sbin+
 41241 root      20   0       0      0      0 D   0.0  0.0   0:00.05 [kworker/+
 47595 nobody    20   0  277932  20128   4904 S   0.0  0.8   0:02.74 /usr/sbin+
 48267 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 4h +
 48815 root      20   0 1341636  10692    604 S   0.0  0.4   0:00.07 /usr/bin/+
 48851 root      20   0 1277312  11740    600 S   0.0  0.5   0:00.06 /usr/bin/+
 50236 nobody    20   0  277996  20168   4744 S   0.0  0.8   0:02.71 /usr/sbin+
 51035 nobody    20   0  277564  19536   4768 S   0.0  0.8   0:02.66 /usr/sbin+
 53303 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54865 nobody    20   0  277924  19468   4568 S   0.0  0.8   0:02.48 /usr/sbin+
 54875 nobody    20   0  277932  20056   4740 S   0.0  0.8   0:01.78 /usr/sbin+
 58960 nobody    20   0  277544  18344   4260 S   0.0  0.8   0:01.44 /usr/sbin+
 58962 nobody    20   0  277736  19740   4572 S   0.0  0.8   0:01.28 /usr/sbin+
 58964 nobody    20   0  277800  19084   4320 S   0.0  0.8   0:01.71 /usr/sbin+
 58965 nobody    20   0  277800  19092   4340 S   0.0  0.8   0:01.49 /usr/sbin+
 60447 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61786 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62489 nobody    20   0  277796  18848   4348 S   0.0  0.8   0:00.81 /usr/sbin+
 63307 nobody    20   0  277932  18756   4292 S   0.0  0.8   0:00.77 /usr/sbin+
 63646 nobody    20   0  277932  18652   4148 S   0.0  0.8   0:00.72 /usr/sbin+
 63722 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 63728 root      20   0  178148  26272   2784 S   0.0  1.1   0:00.13 /usr/loca+
 63772 root      20   0  158868  15280   2684 S   0.0  0.6   0:00.08 /usr/loca+
 63783 root      20   0  195364  34676   3132 S   0.0  1.4   0:00.20 /usr/loca+
 63810 root      20   0   76780  16996   3024 S   0.0  0.7   0:00.18 /usr/loca+
 64161 nobody    20   0  277800  17760   3852 S   0.0  0.7   0:00.69 /usr/sbin+
 64372 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64400 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64487 nobody    20   0  277932  18360   4088 S   0.0  0.8   0:00.59 /usr/sbin+
 64788 worencom  20   0   38380   3668   2880 S   0.0  0.2   0:00.00 dovecot/i+
 65152 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65239 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 65725 nobody    20   0  277800  17896   3864 S   0.0  0.7   0:00.42 /usr/sbin+
 65961 nobody    20   0  277812  18348   4100 S   0.0  0.8   0:00.37 /usr/sbin+
 66672 nobody    20   0  277800  17676   3728 S   0.0  0.7   0:00.35 /usr/sbin+
 67873 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67914 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68285 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 68291 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 68428 nigeria   20   0  397064   4528   2400 S   0.0  0.2   0:00.00 php-fpm: +
 68462 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 68476 root      20   0  183052   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68479 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68480 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68481 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68482 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68483 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68486 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68488 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68489 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68490 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68491 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68492 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68493 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68494 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68496 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68504 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 68508 root      20   0  114252   2400   1264 S   0.0  0.1   0:00.00 bash /usr+
 68509 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 68510 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68512 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68514 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68515 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 68516 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68517 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68518 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68519 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68520 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 68521 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68522 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 68525 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68527 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 68530 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 68532 root      20   0  188200  11092   5148 S   0.0  0.5   0:00.01 /usr/loca+
 68533 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68541 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 68543 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 68545 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 68546 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 68555 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 68570 cloudw    20   0  350316  16620  10324 S   0.0  0.7   0:00.02 /opt/cpan+
 68591 root      20   0  160224   2360   1636 S   0.0  0.1   0:00.00 top -n 2 +
 68623 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 68641 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 68643 cloudsms  20   0  113284   1212   1036 R   0.0  0.1   0:00.00 /usr/loca+
 68648 root      20   0  114252   1144      0 R   0.0  0.0   0:00.00 bash /usr+
 68650 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      34728  0.0  0.0      0     0 ?        S    00:40   0:00  \_ [kworker/0:1]
root      38359  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/1:1]
root      38388  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/u200:1]
root      41241  0.0  0.0      0     0 ?        D    00:49   0:00  \_ [kworker/0:4]
root      53303  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:3]
root      60447  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:3]
root      61786  0.0  0.0      0     0 ?        S    01:20   0:00  \_ [kworker/1:5]
root      64372  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/0:0]
root      64400  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:2]
root      65152  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:2]
root      65239  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:0]
root      67873  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44408  3452 ?        Ss   Nov10   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40240  1828 ?        Ss   Nov10   0:02 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   272 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   184 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24896  1432 ?        Ss   Nov10   0:01 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3040 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Ss   Nov10   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 996544  1436 ?        Ssl  Nov10   0:04 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   784 ?        Ssl  Nov10   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   428 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      63722  0.0  0.0 183048  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      63728  0.0  1.0 178148 26272 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      63772  0.0  0.6 158868 15280 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      63783  0.0  1.4 195364 34676 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      63810  0.0  0.7  76780 16996 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      68476  0.0  0.0 183052  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68504  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      68508  0.0  0.1 114256  2428 ?        S    01:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      68655  0.0  0.0    244     4 ?        R    01:30   0:00  |           \_ [sed]
root      68479  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68509  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      68530  0.0  0.0 108052   356 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      68543  0.0  0.0 113288  1516 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      68651  0.0  0.0 153840  2100 ?        R    01:30   0:00  |               \_ ps auxf
root      68480  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68521  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      68481  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68514  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      68482  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68517  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      68483  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68518  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      68486  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68512  0.0  0.0  20164   984 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      68654  0.0  0.0  20164   256 ?        R    01:30   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      68488  0.0  0.0 183048  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68510  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      68489  0.0  0.0 183048  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68525  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      68491  0.0  0.0 183048  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68516  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      68492  0.0  0.0 183048  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68519  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      68493  0.0  0.0 183048  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68522  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      68532  1.0  0.4 188200 11092 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      68591  0.0  0.0 160224  2360 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root      68494  0.0  0.0 183048  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68527  0.0  0.0  20164   964 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [68546] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68546  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68555  2.0  0.7 476724 17480 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      68496  0.0  0.0 183048  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      68515  0.0  0.0  20164   964 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [68541] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68541  0.0  0.0  20164   256 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68554  3.0  0.6 400652 15936 ?        R    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     0 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3820 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.5 114016 12684 ?        Ssl  Nov10   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    24 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    56 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:00 /usr/sbin/sshd -D
root      67914  0.0  0.1 111304  4264 ?        Ss   01:29   0:00  \_ sshd: [accepted]
root      68285  0.0  0.1 111304  4264 ?        Ss   01:29   0:00  \_ sshd: [accepted]
sshd      68291  0.0  0.1 115644  2632 ?        S    01:29   0:00  |   \_ sshd: [net]
root      68533  0.0  0.1 111304  4272 ?        Ss   01:30   0:00  \_ sshd: [accepted]
sshd      68545  0.0  0.1 115644  2632 ?        S    01:30   0:00      \_ sshd: [net]
root        924  0.0  0.0  51508   456 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  1040 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.1  47244  2448 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   588 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912   976 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47360  2256 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24396  1860 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   636 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41056  1436 ?        S    Nov10   0:00  \_ dovecot/auth
worencom  64788  0.0  0.1  38380  3668 ?        S    01:24   0:00  \_ dovecot/imap
root        925  0.0  0.0 572372   724 ?        Ssl  Nov10   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 33800 ?       SLsl Nov10   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    32 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.0 232784  1672 ?        Ssl  Nov10   0:01 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261292  6340 ?        Ss   Nov10   0:01 cpsrvd (SSL) - waiting for connections                   
root      68462  0.0  0.0      0     0 ?        Z    01:29   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.4 636928 35508 ?        Ssl  Nov10   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   368 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10324  3264 ?        Rs   Nov10   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1924 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  68403 25.6  3.1 464140 75328 ?        S    01:29   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   68428  0.0  0.1 397064  4528 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   392 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   320 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.5 23.3 1828116 564236 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   524 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2736 ?        Ss   Nov10   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  1.6 249580 39308 ?        S    00:03   0:00  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3284 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 27804 ?        Ss   Nov10   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  8700 ?        Ss   Nov10   0:00 tailwatchd
root       1211  0.0  1.0 262224 24688 ?        Ss   Nov10   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1213  0.0  0.1 167452  4192 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   456 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1368 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.3  8.2 1458324 199104 ?      Sl   Nov10   1:12 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4792 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12820   324 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12848   344 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    39447  0.1  0.5 277932 13644 ?        S    00:46   0:04  \_ /usr/sbin/httpd -k start
nobody    47595  0.1  0.8 277932 20128 ?        S    00:59   0:02  \_ /usr/sbin/httpd -k start
cloudw    68640  0.0  0.6 350316 16620 ?        S    01:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    50236  0.1  0.8 277996 20168 ?        S    01:02   0:02  \_ /usr/sbin/httpd -k start
nobody    51035  0.1  0.8 277564 19536 ?        S    01:03   0:02  \_ /usr/sbin/httpd -k start
nobody    54865  0.2  0.8 277924 19468 ?        S    01:09   0:02  \_ /usr/sbin/httpd -k start
nobody    54875  0.1  0.8 277932 20056 ?        S    01:09   0:01  \_ /usr/sbin/httpd -k start
nobody    58960  0.1  0.7 277544 18344 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
cloudw    68570  2.0  0.6 350316 16884 ?        S    01:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    58962  0.1  0.8 277736 19740 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
nobody    58964  0.1  0.7 277800 19084 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
nobody    58965  0.1  0.7 277800 19092 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
nobody    62489  0.1  0.7 277796 18848 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    63307  0.1  0.7 277932 18756 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    63646  0.1  0.7 277932 18652 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    64161  0.1  0.7 277800 17760 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    64487  0.1  0.7 277932 18360 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    65725  0.1  0.7 277800 17896 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    65961  0.1  0.7 277812 18348 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    66672  0.1  0.7 277800 17676 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.2 181264  7192 ?        Ss   00:00   0:04 lfd - sleeping
root      48815  0.0  0.4 1341636 10692 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      48851  0.0  0.4 1277312 11740 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 5586  Threads: 3  Questions: 531690  Slow queries: 0  Opens: 2666  Flush tables: 1  Open tables: 1976  Queries per second avg: 95.182
*************************** 1. row ***************************
     Id: 6339
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 6341
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 6348
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 ::1 TIME_WAIT
      1 43.130.14.245 TIME_WAIT
      1 51.222.95.109 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 45.134.225.130 TIME_WAIT
      2 51.222.204.143 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 01:30:02 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 33 minutes
   Server load: 1.25 1.22 1.05
   Total accesses: 24951 - Total Traffic: 627.1 MB - Total Duration: 13440547
   CPU Usage: u20.66 s7.25 cu333.22 cs266.49 - 11.2% CPU load
   4.47 requests/sec - 115.1 kB/second - 25.7 kB/request - 538.678 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KKW_W__KKKKWK_K__W..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  51035 9/439/1438 K 13.48 3    344 764632 279.6 11.99 36.38 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=718541444 HTTP/1.1
   1-0  62489 4/165/1167 K 3.59  0    606 613268 28.8  3.58  32.25 45.134.225.130 http/1.1 health.oyostate.gov.ng:80  GET / HTTP/1.1
   2-0  54865 0/442/1400 W 10.13 0    0   747417 0.0   11.56 33.80 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-0  54875 0/467/1457 _ 6.77  2    1   740958 0.0   7.28  29.98 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   4-0  39447 4/852/1580 W 17.67 0    0   931661 124.7 20.55 39.45 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=27166623 HTTP/1.1
   5-0  65725 0/74/1275  _ 1.89  0    405 687080 0.0   1.87  32.16 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=3719521006 HTTP/1.1
   6-0  63307 0/130/1211 _ 3.82  0    0   675408 0.0   3.43  32.58 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  64161 5/182/1373 K 2.61  4    390 743522 157.9 2.99  32.35 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=2302352958 HTTP/1.1
   8-0  63646 3/127/1281 K 3.30  1    305 654808 95.7  3.19  30.89 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=4156666691 HTTP/1.1
   9-0  58960 1/267/1201 K 5.41  0    412 676212 39.7  6.87  31.42 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=1238000554 HTTP/1.1
   10-0 58962 5/216/1104 K 5.75  4    368 567445 157.3 5.58  28.13 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=3071493507 HTTP/1.1
   11-0 47595 7/473/1178 W 12.64 0    0   635157 218.5 12.46 30.77 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=2360932377 HTTP/1.1
   12-0 50236 2/449/839  K 12.62 0    325 456725 69.5  11.88 21.98 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=1943975868 HTTP/1.1
   13-0 64487 0/101/759  _ 2.69  0    0   420257 0.0   2.65  20.77 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   14-0 58964 4/323/1117 K 6.64  0    296 649834 130.3 8.09  28.78 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=1795421623 HTTP/1.1
   15-0 65961 0/64/873   _ 1.68  1    6   422538 0.0   1.67  20.29 23.23.99.55    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/images/b
   16-0 66672 0/69/1065  _ 1.22  2    2   583010 0.0   1.82  26.57 43.130.14.245  http/1.1 nigeriadecide.org:443      GET /register.php HTTP/1.1
   17-0 58965 2/353/1081 W 6.04  0    0   565519 55.7  6.46  28.31 45.134.225.130 http/1.1 health.oyostate.gov.ng:443 GET / HTTP/1.1
   18-0 -     0/0/357    . 0.00  425  0   201374 0.0   0.00  9.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/408    . 0.00  704  0   201927 0.0   0.00  11.67 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/585    . 0.00  187  0   302635 0.0   0.00  14.73 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/712    . 0.00  396  0   416345 0.0   0.00  16.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/292    . 0.00  524  0   146887 0.0   0.00  7.89  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/287    . 0.00  711  0   137354 0.0   0.00  7.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/371    . 0.00  728  0   210844 0.0   0.00  9.60  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/45     . 0.00  2620 0   37676  0.0   0.00  1.29  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/51     . 0.00  2641 0   27030  0.0   0.00  1.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/144    . 0.00  2008 0   78322  0.0   0.00  3.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/5      . 0.00  2619 0   4112   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/63     . 0.00  2575 0   38994  0.0   0.00  1.81  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/2      . 0.00  2760 0   3973   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/230    . 0.00  1924 2   97606  0.0   0.00  4.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 704
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 15 seconds, (range: 0...60)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 14061
   total entries replaced since starting: 0
   total entries expired since starting: 13350
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 44 miss
   total removes since starting: 7 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit