403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.12.15.txt
 ## swap threshold exceeded
## server overview
2025-11-15.12.15 load[0] mem[61/57] mysql[1/8] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1356         124          43         882         790
Swap:          1999        1237         762
 12:15:01 up  2:43,  0 users,  load average: 0.13, 0.26, 0.26
## system overview
top - 12:15:01 up  2:43,  0 users,  load average: 0.13, 0.26, 0.26
Tasks: 214 total,  14 running, 198 sleeping,   0 stopped,   2 zombie
%Cpu(s): 53.1 us, 46.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    84216 free,  1425440 used,   910644 buff/cache
KiB Swap:  2047996 total,   781308 free,  1266688 used.   773332 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
     1 root      20   0   44424   3568   1684 S   6.7  0.1   0:14.40 /usr/lib/+
  1749 mysql     20   0 1462292 243872   4084 S   6.7 10.1   2:11.12 /usr/sbin+
  2289 root      20   0  133940   5284   2384 R   6.7  0.2   0:00.01 /usr/loca+
  2299 root      20   0  188200  11080   5148 S   6.7  0.5   0:00.01 /usr/loca+
  2303 root      20   0  135972   5348   2460 R   6.7  0.2   0:00.01 /usr/loca+
  2322 pactpay   20   0  479860  16168  10576 R   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.32 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:09.13 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.32 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.37 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.38 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.53 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   8136   7824 S   0.0  0.3   0:05.69 /usr/lib/+
   383 root      20   0   45352    676    528 S   0.0  0.0   0:00.37 /usr/lib/+
   411 root      16  -4   55532    588    460 S   0.0  0.0   0:00.84 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   509 rpc       20   0   69256    324    216 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58716   1688    928 S   0.0  0.1   0:05.14 /usr/bin/+
   525 root      20   0  224280   7556   1768 S   0.0  0.3   0:00.25 queueproc+
   526 root      20   0   24704   1368   1008 R   0.0  0.1   0:02.29 /usr/lib/+
   530 root      20   0   21540    620    508 S   0.0  0.0   0:00.22 /usr/sbin+
   531 root      20   0  152780    492    448 S   0.0  0.0   0:00.02 /usr/sbin+
   533 root      20   0   52852    668    568 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  612240   3388    912 S   0.0  0.1   0:01.39 /usr/lib/+
   538 nscd      20   0  926904   1360    808 S   0.0  0.1   0:05.81 /usr/sbin+
   542 root      20   0    4388    280    276 S   0.0  0.0   0:00.00 /usr/sbin+
   544 root      20   0  195208    292    292 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   572 root      20   0  124480    716    584 S   0.0  0.0   0:00.28 /usr/sbin+
   573 root      20   0   24208    208    208 S   0.0  0.0   0:00.00 /usr/sbin+
   595 root      20   0  108296    376    372 S   0.0  0.0   0:00.00 /sbin/age+
   596 root      20   0  114704    416    416 S   0.0  0.0   0:00.02 /bin/bash
   633 mailnull  20   0   89120   4124   1076 S   0.0  0.2   0:00.22 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.32 [loop0]
   665 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   923 systuser  20   0  114016  10908   2496 S   0.0  0.5   0:02.50 /usr/loca+
   924 systuser  20   0  111608   1608      0 S   0.0  0.1   0:00.00 /usr/loca+
   928 root      20   0 1277312  13296    364 S   0.0  0.5   0:28.67 /usr/bin/+
   929 root      20   0  111304    852    756 S   0.0  0.0   0:01.21 /usr/sbin+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   931 memcach+  20   0  342400    276    276 S   0.0  0.0   0:00.22 /usr/bin/+
   934 root      20   0   51508    956    772 S   0.0  0.0   0:00.14 /usr/sbin+
   937 systuser  20   0  112524   2056      0 S   0.0  0.1   0:00.00 /usr/loca+
   938 root      20   0  572372   1348    764 S   0.0  0.1   0:00.92 /usr/bin/+
   939 root      20   0  261292   7520   2352 S   0.0  0.3   0:02.26 cpsrvd (S+
   940 root      20   0  396248   1028    852 S   0.0  0.0   0:00.31 php-fpm: +
   941 named     20   0 1186868  37836   2376 S   0.0  1.6   0:05.52 /usr/sbin+
   950 root      20   0  439788  11636  11544 S   0.0  0.5   0:00.37 php-fpm: +
   958 root      20   0  400740   3416    972 S   0.0  0.1   0:01.57 php-fpm: +
   962 root      20   0  240976  10368   6724 S   0.0  0.4   0:02.79 /usr/sbin+
   963 root      20   0 1763124 365572   1400 S   0.0 15.1   0:14.12 /usr/loca+
   975 root      20   0  389508   1088    880 S   0.0  0.0   0:00.31 php-fpm: +
   978 root      20   0  153404    712    628 S   0.0  0.0   0:00.24 pure-ftpd+
   985 root      20   0  388892    952    740 S   0.0  0.0   0:00.32 php-fpm: +
   986 root      20   0 1276356   9648    364 S   0.0  0.4   0:23.19 /usr/bin/+
   988 telegraf  20   0 5654048  36460   6040 S   0.0  1.5   0:05.78 /usr/loca+
   998 cpanelc+  20   0   10312   3544   2476 R   0.0  0.1   0:07.47 /usr/loca+
   999 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1000 root      20   0  445028   3044   3044 S   0.0  0.1   0:00.05 sw-engine+
  1076 dovenull  20   0   46912   2824   2148 S   0.0  0.1   0:00.14 dovecot/p+
  1077 dovenull  20   0   47328   3344   2368 S   0.0  0.1   0:00.06 dovecot/i+
  1078 dovecot   20   0   10320    636    524 S   0.0  0.0   0:00.02 dovecot/a+
  1079 root      20   0   10452    600    428 S   0.0  0.0   0:00.11 dovecot/l+
  1080 dovenull  20   0   46912   2972   2260 S   0.0  0.1   0:00.19 dovecot/p+
  1081 dovenull  20   0   47288   3248   2348 S   0.0  0.1   0:00.07 dovecot/i+
  1093 root      20   0   24396   2420    728 S   0.0  0.1   0:00.09 dovecot/c+
  1096 dovecot   20   0   13568    832    608 S   0.0  0.0   0:00.03 dovecot/s+
  1170 systuser  20   0  157708   3204   1156 S   0.0  0.1   0:00.07 SonarPush+
  1175 dovecot   20   0   41056   1620   1188 S   0.0  0.1   0:00.28 dovecot/a+
  1202 wp-tool+  20   0  387528  13484   1860 S   0.0  0.6   0:00.17 /usr/bin/+
  1203 wp-tool+  20   0  410452  37096   2000 S   0.0  1.5   0:08.44 /usr/bin/+
  1214 root      20   0  209436  21284   3756 S   0.0  0.9   0:01.32 tailwatchd
  1216 root      20   0  183900   6080   2852 S   0.0  0.3   0:00.36 cpdavd - +
  1219 root      20   0  167452   1672   1068 S   0.0  0.1   0:00.18 dnsadmin +
  1222 nobody    20   0  277508  20348   3820 S   0.0  0.8   0:00.12 /usr/sbin+
  1291 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1605 root      20   0  299272   1064    680 S   0.0  0.0   0:00.28 php-fpm: +
  1663 root      38  18  130416   1552    820 S   0.0  0.1   0:00.02 cpanellog+
  1870 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  1911 root      20   0  266984   9844    912 S   0.0  0.4   0:00.80 /usr/sbin+
  1912 root      20   0   12844    628    524 S   0.0  0.0   0:00.80 /usr/loca+
  1913 root      20   0   12732    600    520 S   0.0  0.0   0:00.70 /usr/loca+
  1915 root      20   0   12880    604    492 S   0.0  0.0   0:00.77 /usr/loca+
  1922 root      20   0   53340    412    412 S   0.0  0.0   0:00.05 /usr/loca+
  2002 root      20   0  182072  11456   1344 S   0.0  0.5   0:09.21 lfd - sle+
  2152 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  2164 nigeria   20   0  400460   5380   2176 S   0.0  0.2   0:00.00 php-fpm: +
  2221 root      20   0  153408    512    372 R   0.0  0.0   0:00.00 pure-ftpd+
  2222 root      20   0  153408    140      0 S   0.0  0.0   0:00.00 pure-ftpd+
  2223 cloudw    20   0  366220  16592  10896 R   0.0  0.7   0:00.01 /opt/cpan+
  2225 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  2226 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  2227 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  2228 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2229 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2230 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2231 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2232 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2233 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2234 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2235 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2236 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2237 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2238 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  2239 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  2240 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  2241 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2242 root      20   0  183044   2208   1636 S   0.0  0.1   0:00.00 /usr/sbin+
  2243 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  2244 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  2246 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  2248 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  2250 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  2275 root      20   0  160244   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  2276 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  2277 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  2278 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  2279 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  2280 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  2281 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  2282 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  2283 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  2284 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  2285 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  2286 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  2287 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  2288 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  2291 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  2293 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  2294 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  2295 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  2296 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  2298 root      20   0  129824   2148   1712 S   0.0  0.1   0:00.00 /usr/bin/+
  2300 root      20   0  113284   1460   1256 R   0.0  0.1   0:00.00 bash /usr+
  2307 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  2311 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  2312 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  2313 root      20   0  269628   4884   3068 R   0.0  0.2   0:00.00 dig txt k+
  2314 saboakin  20   0  399656  10712   7488 R   0.0  0.4   0:00.00 /opt/cpan+
  2317 nigeria   20   0  403192  14048   9520 R   0.0  0.6   0:00.00 /opt/cpan+
  2318 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  2319 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  2323 cloudsms  20   0  399656  10968   7648 R   0.0  0.5   0:00.00 /opt/cpan+
  2325 root      20   0  160220   2064   1580 S   0.0  0.1   0:00.00 top -n 2 +
  2346 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [bash] <d+
 25822 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 25829 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.15 [kworker]
 55735 root      20   0  248136 121288   4560 S   0.0  5.0   0:03.36 /usr/loca+
 58136 root      20   0  260044 126988   3096 S   0.0  5.2   0:05.66 spamd chi+
 58137 root      20   0  258860 125364   2840 S   0.0  5.2   0:00.37 spamd chi+
 72675 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 77104 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 86362 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 89186 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
 89620 nobody    20   0  277844  21480   4524 S   0.0  0.9   0:01.46 /usr/sbin+
 92083 root      20   0       0      0      0 R   0.0  0.0   0:00.02 [kworker/+
 92736 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 94781 nobody    20   0  277520  21172   4504 S   0.0  0.9   0:01.01 /usr/sbin+
 95418 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95819 nobody    20   0  277636  21324   4512 S   0.0  0.9   0:00.98 /usr/sbin+
 98151 nobody    20   0  277884  21428   4476 S   0.0  0.9   0:00.65 /usr/sbin+
 99380 nobody    20   0  277576  20940   4244 S   0.0  0.9   0:00.49 /usr/sbin+
 99575 nobody    20   0  277608  20936   4168 S   0.0  0.9   0:00.54 /usr/sbin+
 99576 nobody    20   0  277672  21196   4412 S   0.0  0.9   0:00.48 /usr/sbin+
 99585 nobody    20   0  277528  20812   4200 S   0.0  0.9   0:00.52 /usr/sbin+
 99603 nobody    20   0  277508  20736   4164 S   0.0  0.9   0:00.55 /usr/sbin+
 99744 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101082 nobody    20   0  277584  20960   4176 S   0.0  0.9   0:00.31 /usr/sbin+
101494 nobody    20   0  277732  20868   4092 S   0.0  0.9   0:00.38 /usr/sbin+
101672 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101829 nobody    20   0  277508  20672   4100 S   0.0  0.9   0:00.31 /usr/sbin+
102215 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:31   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:31   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    09:31   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:31   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:31   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:31   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        D    09:31   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:31   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:31   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [xprtiod]
root        558  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   09:31   0:02  \_ [loop0]
root        665  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [jbd2/loop0-8]
root        666  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ext4-rsv-conver]
root      72675  0.0  0.0      0     0 ?        S    11:20   0:00  \_ [kworker/u200:0]
root      77104  0.0  0.0      0     0 ?        S    11:28   0:00  \_ [kworker/1:0]
root      86362  0.0  0.0      0     0 ?        S    11:43   0:00  \_ [kworker/0:3]
root      89186  0.0  0.0      0     0 ?        D    11:48   0:00  \_ [kworker/0:1]
root      92083  0.0  0.0      0     0 ?        S    11:53   0:00  \_ [kworker/1:1]
root      92736  0.0  0.0      0     0 ?        S    11:54   0:00  \_ [kworker/0:2]
root      95418  0.0  0.0      0     0 ?        S    11:59   0:00  \_ [kworker/0:4]
root      99744  0.0  0.0      0     0 ?        S    12:06   0:00  \_ [kworker/1:4]
root     101672  0.0  0.0      0     0 ?        S    12:10   0:00  \_ [kworker/0:0]
root     102215  0.0  0.0      0     0 ?        S    12:11   0:00  \_ [kworker/1:2]
root       1291  0.0  0.0      0     0 ?        S    12:13   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44424  3568 ?        Ss   09:31   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  39500  8136 ?        Ss   09:31   0:05 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   676 ?        Ss   09:31   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   588 ?        S<sl 09:31   0:00 /sbin/auditd
rpc         509  0.0  0.0  69256   324 ?        Ss   09:31   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58716  1688 ?        Ss   09:31   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        525  0.0  0.3 224280  7556 ?        Ss   09:31   0:00 queueprocd - waiting up to 60s to process a task
root        526  0.0  0.0  24704  1368 ?        Rs   09:31   0:02 /usr/lib/systemd/systemd-logind
root        530  0.0  0.0  21540   620 ?        Ss   09:31   0:00 /usr/sbin/irqbalance --foreground
root        531  0.0  0.0 152780   492 ?        Ss   09:31   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        533  0.0  0.0  52852   668 ?        Ss   09:31   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.1 612240  3388 ?        Ssl  09:31   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        538  0.0  0.0 926904  1360 ?        Ssl  09:31   0:05 /usr/sbin/nscd
root        542  0.0  0.0   4388   280 ?        Ss   09:31   0:00 /usr/sbin/acpid
root        544  0.0  0.0 195208   292 ?        Ssl  09:31   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124480   716 ?        Ss   09:31   0:00 /usr/sbin/crond -n
root       2225  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2285  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/lp/apps/kernelupdate/lp-kernelupdate.pl > /dev/null 2>&1
root       2298  0.0  0.0 129824  2148 ?        R    12:15   0:00  |       \_ /usr/bin/perl -w /usr/local/lp/apps/kernelupdate/lp-kernelupdate.pl
root       2313  0.0  0.0      0     0 ?        Z    12:15   0:00  |           \_ [dig] <defunct>
root       2226  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2279  0.0  0.0 113284  1208 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root       2300  0.0  0.0 113284  1460 ?        S    12:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       2349  0.0  0.0 113284   208 ?        R    12:15   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       2227  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2246  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       2248  0.0  0.0 108052   356 ?        S    12:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       2250  0.0  0.0 113288  1516 ?        S    12:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       2348  0.0  0.0 153840  2096 ?        R    12:15   0:00  |               \_ ps auxf
root       2228  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2282  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       2229  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2288  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       2230  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2286  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       2231  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2276  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       2232  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2277  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       2233  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2281  0.0  0.0  20164   968 ?        Ss   12:15   0:00  |   \_ jailshell (cloudsms) [2312] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   2312  0.0  0.0  20164   260 ?        S    12:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   2319  0.0  0.0 113284  1212 ?        S    12:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   2323  0.0  0.5 400380 12412 ?        R    12:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root       2234  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2284  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       2235  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2283  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       2236  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2294  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       2237  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2278  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       2238  0.0  0.0 183048  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2293  0.0  0.0 113284  1208 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/bin/dbindex >/dev/null 2>&1
root       2303  0.0  0.2 136108  5348 ?        R    12:15   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/dbindex
root       2239  0.0  0.0 183048  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2280  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       2299  0.0  0.4 188200 11080 ?        S    12:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       2325  0.0  0.0 160220  2064 ?        S    12:15   0:00  |           \_ top -n 2 -b -c
root       2240  0.0  0.0 183048  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2287  0.0  0.0 113284  1208 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
root       2289  0.0  0.2 134340  5800 ?        R    12:15   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/autorepair recoverymgmt
root       2241  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2296  0.0  0.0  20164   968 ?        Ss   12:15   0:00  |   \_ jailshell (pactpay) [2318] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    2318  0.0  0.0  20164   264 ?        S    12:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    2322  0.0  0.6 479860 16168 ?        Rl   12:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       2243  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2295  0.0  0.0  20164   964 ?        Ss   12:15   0:00  |   \_ jailshell (nigeria) [2311] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    2311  0.0  0.0  20164   256 ?        S    12:15   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    2317  0.0  0.5 403192 14048 ?        R    12:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       2244  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root       2291  0.0  0.0  20164   964 ?        Ss   12:15   0:00      \_ jailshell (saboakin) [2307] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   2307  0.0  0.0  20164   260 ?        S    12:15   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   2314  0.0  0.6 404052 15616 ?        R    12:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        573  0.0  0.0  24208   208 ?        Ss   09:31   0:00 /usr/sbin/atd -f
root        595  0.0  0.0 108296   376 tty1     Ss+  09:31   0:00 /sbin/agetty --noclear tty1 linux
root        596  0.0  0.0 114704   416 ttyS0    Ss+  09:31   0:00 /bin/bash
mailnull    633  0.0  0.1  89120  4124 ?        Ss   09:31   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    923  0.0  0.4 114016 10908 ?        Ssl  09:32   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    924  0.0  0.0 111608  1608 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        928  0.2  0.5 1277312 13296 ?       Ssl  09:32   0:28 /usr/bin/checkstatus
root        929  0.0  0.0 111304   852 ?        Ss   09:32   0:01 /usr/sbin/sshd -D
root       1870  0.0  0.1 111304  4264 ?        Ss   12:14   0:00  \_ sshd: [accepted]
systuser    930  0.0  0.0  10132    48 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
memcach+    931  0.0  0.0 342400   276 ?        Ssl  09:32   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        934  0.0  0.0  51508   956 ?        Ss   09:32   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1076  0.0  0.1  46912  2824 ?        S    09:32   0:00  \_ dovecot/pop3-login
dovenull   1077  0.0  0.1  47328  3344 ?        S    09:32   0:00  \_ dovecot/imap-login
dovecot    1078  0.0  0.0  10320   636 ?        S    09:32   0:00  \_ dovecot/anvil
root       1079  0.0  0.0  10452   600 ?        S    09:32   0:00  \_ dovecot/log
dovenull   1080  0.0  0.1  46912  2972 ?        S    09:32   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47288  3248 ?        S    09:32   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24396  2420 ?        S    09:32   0:00  \_ dovecot/config
dovecot    1096  0.0  0.0  13568   832 ?        S    09:32   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41056  1620 ?        S    09:32   0:00  \_ dovecot/auth
systuser    937  0.0  0.0 112524  2056 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 572372  1348 ?        Ssl  09:32   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        939  0.0  0.3 261292  7520 ?        Ss   09:32   0:02 cpsrvd (SSL) - waiting for connections                   
root       2152  0.0  0.0      0     0 ?        Z    12:14   0:00  \_ [cpaneld - servi] <defunct>
root        940  0.0  0.0 396248  1028 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       941  0.0  1.5 1186868 37836 ?       Ssl  09:32   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        950  0.0  0.4 439788 11636 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        958  0.0  0.1 400740  3416 ?        Ss   09:32   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    2164  0.0  0.2 400460  5380 ?        S    12:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.4 240976 10368 ?        Ssl  09:32   0:02 /usr/sbin/rsyslogd -n
root        963  0.1 15.1 1763124 365572 ?      Ssl  09:32   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.0 389508  1088 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        978  0.0  0.0 153404   712 ?        Ss   09:32   0:00 pure-ftpd (SERVER)
root       2221  0.0  0.0 153408   512 ?        S    12:15   0:00  \_ pure-ftpd (IDLE)
root       2222  0.0  0.0 153408   140 ?        S    12:15   0:00      \_ pure-ftpd (PRIV)
root        985  0.0  0.0 388892   952 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.2  0.3 1276356 9648 ?        Ssl  09:32   0:23 /usr/bin/cspdaemon
telegraf    988  0.0  1.5 5654048 36460 ?       SLsl 09:32   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
cpanelc+    998  0.0  0.1  10312  3544 ?        Ss   09:32   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    999  0.0  0.0  14068    48 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1000  0.0  0.1 445028  3044 ?        Ss   09:32   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1170  0.0  0.1 157708  3204 ?        S    09:32   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1202  0.0  0.5 387528 13484 ?        Ss   09:32   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1203  0.0  1.5 410452 37096 ?        Ss   09:32   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1214  0.0  0.8 209436 21284 ?        Ss   09:32   0:01 tailwatchd
root       1216  0.0  0.2 183900  6080 ?        Ss   09:32   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1219  0.0  0.0 167452  1672 ?        Ss   09:32   0:00 dnsadmin - dormant mode
root       1605  0.0  0.0 299272  1064 ?        Ss   09:32   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1663  0.0  0.0 130416  1552 ?        SN   09:32   0:00 cpanellogd - sleeping for logs
mysql      1749  1.3 10.0 1462292 243872 ?      Sl   09:32   2:11 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1911  0.0  0.4 266984  9844 ?        Ss   09:32   0:00 /usr/sbin/httpd -k start
root       1912  0.0  0.0  12844   628 ?        S    09:32   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1913  0.0  0.0  12732   600 ?        S    09:32   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1915  0.0  0.0  12880   604 ?        S    09:32   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1922  0.0  0.0  53340   412 ?        S    09:32   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    89620  0.0  0.8 277844 21480 ?        S    11:48   0:01  \_ /usr/sbin/httpd -k start
cloudw     2223  0.0  0.6 366220 16592 ?        S    12:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    94781  0.0  0.8 277520 21172 ?        S    11:57   0:01  \_ /usr/sbin/httpd -k start
nobody    95819  0.1  0.8 277636 21324 ?        S    11:59   0:00  \_ /usr/sbin/httpd -k start
nobody    98151  0.0  0.8 277884 21428 ?        S    12:03   0:00  \_ /usr/sbin/httpd -k start
nobody    99380  0.0  0.8 277576 20940 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    99575  0.0  0.8 277608 20936 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    99576  0.0  0.8 277672 21196 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    99585  0.0  0.8 277528 20812 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    99603  0.1  0.8 277508 20736 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody   101082  0.0  0.8 277584 20960 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody   101494  0.1  0.8 277732 20868 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody   101829  0.1  0.8 277508 20672 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody     1222  0.0  0.8 277508 20348 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
root       2002  0.0  0.4 182072 11456 ?        Ss   09:32   0:09 lfd - sleeping
oysipao+  25822  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  25829  0.0  0.0   3152   424 ?        S    10:01   0:00  \_ [kworker]
root      55735  0.0  5.0 248136 121288 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      58136  0.1  5.2 260044 126988 ?       S    10:54   0:05  \_ spamd child
root      58137  0.0  5.1 258860 125364 ?       S    10:54   0:00  \_ spamd child
## mysql stats
Uptime: 31490  Threads: 3  Questions: 695618  Slow queries: 0  Opens: 4729  Flush tables: 1  Open tables: 2000  Queries per second avg: 22.090
*************************** 1. row ***************************
     Id: 11267
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 11268
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 3. row ***************************
     Id: 11270
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 4. row ***************************
     Id: 11271
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 11272
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.157.111 TIME_WAIT
      1 142.44.233.134 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 12:15:01 WAT
   Restart Time: Saturday, 15-Nov-2025 03:30:16 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 44 minutes 44 seconds
   Server load: 0.13 0.26 0.26
   Total accesses: 35060 - Total Traffic: 928.4 MB - Total Duration: 60089707
   CPU Usage: u5.61 s2.99 cu466.39 cs341.51 - 2.59% CPU load
   1.11 requests/sec - 30.2 kB/second - 27.1 kB/request - 1713.91 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

WKKRKRK_K..K.....WK......K......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  89620  0/359/1932 W 5.69 0     0   890382   0.0   15.40 57.95 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1094027
   1-0  95819  3/220/2115 K 5.66 0     410 44349690 91.1  3.98  50.98 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=103390
   2-0  101082 1/62/1798  K 1.55 3     410 877990   210.7 2.46  46.43 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /var/cache/dev/pools/AcsHjSlfaz/K/B/ HTTP/1.1
   3-0  101494 0/125/1920 R 2.94 17    25  857452   0.0   2.32  46.98 103.129.24.237 http/1.1
   4-0  101829 1/65/1811  K 1.35 0     433 827859   26.5  1.43  45.07 66.249.70.7    http/1.1 test.cloudware.ng:80       GET /1836995940?goodscode=1834589106 HTTP/1.1
   5-0  98151  0/131/1738 R 2.95 0     7   873291   0.0   3.52  45.62 192.178.4.100  http/1.1 team.cloudware.ng:443
   6-0  99575  9/103/1907 K 3.21 1     27  911109   179.0 2.85  66.00 95.91.110.210  http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   7-0  94781  0/195/1641 _ 4.97 0     0   765677   0.0   6.06  45.22 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   8-0  1222   1/25/1728  K 0.57 1     347 863777   30.1  0.50  44.52 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=214998
   9-0  -      0/0/1808   . 0.00 100   0   804183   0.0   0.00  40.63 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 -      0/0/1686   . 0.00 542   0   938110   0.0   0.00  56.35 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 99576  3/90/1643  K 2.34 2     351 825772   90.6  2.40  42.95 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2002619
   12-0 -      0/0/1907   . 0.00 540   0   744194   0.0   0.00  40.77 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -      0/0/1341   . 0.00 536   0   678503   0.0   0.00  33.66 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -      0/0/1615   . 0.00 535   0   778282   0.0   0.00  43.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -      0/0/1433   . 0.00 530   0   696440   0.0   0.00  35.36 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -      0/0/1097   . 0.00 533   0   513785   0.0   0.00  25.09 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 99380  0/106/1205 W 2.18 0     0   501313   0.0   7.36  30.25 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 99585  1/99/1051  K 2.42 1     289 494532   30.9  7.60  26.87 66.249.70.1    http/1.1 test.cloudware.ng:443      GET /178396573?goodscode=0178163526 HTTP/1.1
   19-0 -      0/0/434    . 0.00 225   0   249011   0.0   0.00  11.96 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -      0/0/360    . 0.00 534   0   198874   0.0   0.00  9.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -      0/0/301    . 0.00 539   0   157698   0.0   0.00  7.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -      0/0/251    . 0.00 537   0   149740   0.0   0.00  6.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/333    . 0.00 544   0   202277   0.0   0.00  17.29 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/204    . 0.00 541   0   135990   0.0   0.00  6.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 99603  2/142/295  K 4.64 2     263 126790   60.0  3.00  6.82  66.249.70.8    http/1.1 test.cloudware.ng:443      GET /?1569391942?goodscode=1567335834 HTTP/1.1
   26-0 -      0/0/276    . 0.00 343   0   129580   0.0   0.00  6.88  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/430    . 0.00 285   0   155199   0.0   0.00  10.40 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/288    . 0.00 503   0   153824   0.0   0.00  10.32 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/102    . 0.00 27449 0   57399    0.0   0.00  2.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/156    . 0.00 27512 19  95777    0.0   0.00  4.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/58     . 0.00 30326 0   26226    0.0   0.00  1.44  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/196    . 0.00 30863 0   58961    0.0   0.00  3.33  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 435
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 3...119)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 18039
   total entries replaced since starting: 0
   total entries expired since starting: 17585
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 98 miss
   total removes since starting: 24 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit