403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.01.24.txt
 ## swap threshold exceeded
## server overview
2025-11-17.01.24 load[0] mem[71/57] mysql[4/8] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1615          80          68         667         512
Swap:          1999        1255         744
 01:24:01 up  2:05,  0 users,  load average: 0.38, 0.36, 0.32
## system overview
top - 01:24:01 up  2:05,  0 users,  load average: 0.38, 0.36, 0.32
Tasks: 215 total,   5 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 28.1 sy,  0.0 ni,  0.0 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    86332 free,  1669628 used,   664340 buff/cache
KiB Swap:  2047996 total,   758012 free,  1289984 used.   510396 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461500 254216   4436 S 118.8 10.5   1:26.12 /usr/sbin+
    36 root      20   0       0      0      0 S  12.5  0.0   0:10.88 [kswapd0]
 11467 nigeria   20   0  404840  10708   3180 R  12.5  0.4   0:00.02 php-fpm: +
   918 named     20   0  923720  35408   2288 S   6.2  1.5   0:04.54 /usr/sbin+
 11543 nigeria   20   0  404052  16132  10380 S   6.2  0.7   0:00.03 /opt/cpan+
 11560 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44400   3480   1612 S   0.0  0.1   0:10.84 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.43 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.13 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.42 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.47 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.32 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.06 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   1960   1656 S   0.0  0.1   0:04.32 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    568    440 S   0.0  0.0   0:00.67 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.00 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.07 /usr/lib/+
   476 root      20   0   24716   1316    940 R   0.0  0.1   0:01.78 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.16 /usr/sbin+
   484 rpc       20   0   69256    176     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    520    424 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 S   0.0  0.1   0:04.00 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1496    864 S   0.0  0.1   0:07.31 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5944   1232 S   0.0  0.2   0:00.16 queueproc+
   545 root      20   0  124480    584    452 S   0.0  0.0   0:00.22 /usr/sbin+
   546 root      20   0   24208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4128   1104 S   0.0  0.2   0:00.13 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:00.96 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  240976   2004   1248 S   0.0  0.1   0:02.11 /usr/sbin+
   919 root      20   0 1763124 354936    580 S   0.0 14.7   0:14.06 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    668    508 S   0.0  0.0   0:00.11 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:00.71 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.25 sw-engine+
   937 root      20   0  439788  11476  11268 S   0.0  0.5   0:00.33 php-fpm: +
   938 systuser  20   0  114016  13656   2440 S   0.0  0.6   0:01.92 /usr/loca+
   939 root      20   0  261296   7540   2068 S   0.0  0.3   0:01.58 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.24 /usr/bin/+
   944 root      20   0 1276356   7880    228 S   0.0  0.3   0:24.78 /usr/bin/+
   947 cpanelc+  20   0   10308   3344   2408 S   0.0  0.1   0:06.35 /usr/loca+
   952 root      20   0  396248    792    608 S   0.0  0.0   0:00.30 php-fpm: +
   957 root      20   0  388892    640    540 S   0.0  0.0   0:00.29 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  32748   2644 S   0.0  1.4   0:04.40 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.15 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:01.24 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.17 /usr/bin/+
   974 root      20   0  389508    816    612 S   0.0  0.0   0:00.26 php-fpm: +
  1080 dovenull  20   0   46912   2184   1552 S   0.0  0.1   0:00.13 dovecot/p+
  1081 dovenull  20   0   47340   3028   2012 S   0.0  0.1   0:00.07 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.01 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.08 dovecot/l+
  1084 dovenull  20   0   46984   2284   1552 S   0.0  0.1   0:00.16 dovecot/p+
  1085 dovenull  20   0   47308   2936   2100 S   0.0  0.1   0:00.05 dovecot/i+
  1091 root      20   0   24528   2300    628 S   0.0  0.1   0:00.06 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.01 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:03.72 /usr/loca+
  1160 dovecot   20   0   41056   1516   1084 S   0.0  0.1   0:00.14 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.05 SonarPush+
  1176 wp-tool+  20   0  387556   5096   1724 S   0.0  0.2   0:00.15 /usr/bin/+
  1177 wp-tool+  20   0  412368  32528   1752 S   0.0  1.3   0:02.56 /usr/bin/+
  1211 root      20   0  209168  11748   2224 S   0.0  0.5   0:00.96 tailwatchd
  1213 root      20   0  183900   6100   2872 S   0.0  0.3   0:00.49 cpdavd - +
  1216 root      20   0  228228  17408   4504 S   0.0  0.7   0:00.22 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    880    540 S   0.0  0.0   0:00.20 php-fpm: +
  1673 root      38  18  130416   1580    812 S   0.0  0.1   0:00.01 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.01 /usr/sbin+
  1932 root      20   0   12836    520    376 S   0.0  0.0   0:00.98 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:00.86 /usr/loca+
  1934 root      20   0   12868    500    348 S   0.0  0.0   0:00.93 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  3229 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  3945 nobody    20   0  277680  19964   4716 S   0.0  0.8   0:00.89 /usr/sbin+
  4346 nobody    20   0  277872  19736   4524 S   0.0  0.8   0:00.87 /usr/sbin+
  5965 nobody    20   0  277488  19304   4384 S   0.0  0.8   0:00.62 /usr/sbin+
  5977 nobody    20   0  277580  19908   4600 S   0.0  0.8   0:00.75 /usr/sbin+
  6512 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6623 nobody    20   0  277744  20032   4480 S   0.0  0.8   0:00.51 /usr/sbin+
  6647 nobody    20   0  277680  19808   4408 S   0.0  0.8   0:00.62 /usr/sbin+
  6661 nobody    20   0  277540  19600   4464 S   0.0  0.8   0:00.51 /usr/sbin+
  6996 root      20   0   84400   6200   3388 S   0.0  0.3   0:00.03 /usr/sbin+
  7135 nobody    20   0  277564  19648   4324 S   0.0  0.8   0:00.50 /usr/sbin+
  7401 nobody    20   0  277828  19588   4368 S   0.0  0.8   0:00.58 /usr/sbin+
  7472 nobody    20   0  277880  19980   4524 S   0.0  0.8   0:00.40 /usr/sbin+
  8312 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8393 root      20   0  263740 127052   1720 S   0.0  5.2   0:00.91 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
  9245 nobody    20   0  277884  19300   4144 S   0.0  0.8   0:00.29 /usr/sbin+
  9260 nobody    20   0  277720  19352   4220 S   0.0  0.8   0:00.21 /usr/sbin+
 10538 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 10584 root      20   0   88344  10392   3608 S   0.0  0.4   0:00.01 /usr/sbin+
 10622 mailnull  20   0   88556   8008   1160 S   0.0  0.3   0:00.00 /usr/sbin+
 10664 nobody    20   0  277868  18900   3852 S   0.0  0.8   0:00.13 /usr/sbin+
 10740 nobody    20   0  277744  18560   3532 S   0.0  0.8   0:00.07 /usr/sbin+
 10756 nobody    20   0  277876  18968   3876 S   0.0  0.8   0:00.08 /usr/sbin+
 10776 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10792 root      20   0  178152  26296   2812 S   0.0  1.1   0:00.13 /usr/loca+
 10830 root      20   0  158816  15304   2712 S   0.0  0.6   0:00.07 /usr/loca+
 10836 root      20   0  195352  34704   3168 S   0.0  1.4   0:00.19 /usr/loca+
 10858 root      20   0   76780  16964   3040 S   0.0  0.7   0:00.11 /usr/loca+
 11152 nobody    20   0  277748  18704   3772 S   0.0  0.8   0:00.02 /usr/sbin+
 11271 nigeria   20   0  401244  11168   5752 S   0.0  0.5   0:00.22 php-fpm: +
 11364 mailnull  20   0   89292   5740   2504 S   0.0  0.2   0:00.00 /usr/sbin+
 11403 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 11446 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 11448 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 11458 cloudw    20   0  523572  59380   6588 S   0.0  2.5   0:00.45 php-fpm: +
 11462 healtho+  20   0  443064  50696   4496 S   0.0  2.1   0:00.41 php-fpm: +
 11465 cloudw    20   0  446108  51960   4224 R   0.0  2.1   0:00.43 php-fpm: +
 11466 nobody    20   0  277732  18532   3616 S   0.0  0.8   0:00.01 /usr/sbin+
 11470 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 11471 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 11478 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11479 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11480 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11481 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11482 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11483 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11485 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11486 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11487 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11488 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11489 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11490 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11492 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11495 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 11496 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 11497 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 11508 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11509 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11510 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 11511 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11512 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11513 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11514 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 11515 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11517 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11518 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 11520 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11521 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11532 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11534 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 11541 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 11556 nobody    20   0  276908  14796    684 S   0.0  0.6   0:00.00 /usr/sbin+
 11557 nobody    20   0  276908  14796    684 S   0.0  0.6   0:00.00 /usr/sbin+
 11559 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 11562 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11563 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 11566 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.09 [kworker]
 40218 root      20   0  181372  28792   1644 S   0.0  1.2   0:05.14 lfd - sle+
 72665 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 82071 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 91557 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 93318 root      20   0  183052   2116   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1116    940 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
 94354 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95484 nobody    20   0  277768  20168   4824 S   0.0  0.8   0:02.02 /usr/sbin+
 99433 nobody    20   0  277876  20464   4740 S   0.0  0.8   0:01.71 /usr/sbin+
100230 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
102093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      72665  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/0:4]
root      82071  0.0  0.0      0     0 ?        S    00:47   0:00  \_ [kworker/1:2]
root      91557  0.0  0.0      0     0 ?        S    00:58   0:00  \_ [kworker/u200:0]
root      94354  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/0:2]
root     100230  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:3]
root     102093  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/0:0]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root       3229  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:0]
root       6512  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:3]
root       8312  0.0  0.0      0     0 ?        S    01:20   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44400  3480 ?        Ss   Nov16   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40244  1960 ?        Ss   Nov16   0:04 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   568 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:01 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   176 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   520 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1496 ?        Ssl  Nov16   0:07 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5944 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   584 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2116 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1116 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      10776  0.0  0.0 183048  2148 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      10792  0.2  1.0 178152 26296 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      10830  0.1  0.6 158816 15304 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      10836  0.3  1.4 195352 34704 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      10858  0.1  0.7  76780 16964 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      11478  0.0  0.0 183048  2156 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11495  0.0  0.0 113284  1208 ?        Ss   01:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      11496  0.0  0.0 108052   360 ?        S    01:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      11497  0.0  0.0 113288  1512 ?        S    01:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      11567  0.0  0.0 153840  2096 ?        R    01:24   0:00  |               \_ ps auxf
root      11479  0.0  0.0 183048  2156 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11513  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      11480  0.0  0.0 183048  2156 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11517  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      11481  0.0  0.0 183048  2156 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11511  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      11482  0.0  0.0 183048  2156 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11508  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      11483  0.0  0.0 183048  2152 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11518  0.0  0.0  20164   984 ?        Ss   01:24   0:00  |   \_ jailshell (cloudsms) [11562] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  11562  0.0  0.0  20164   260 ?        S    01:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  11563  0.0  0.0 113284  1212 ?        S    01:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  11566  0.0  0.1  53924  2568 ?        R    01:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      11485  0.0  0.0 183048  2152 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11521  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      11486  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11520  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      11487  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11509  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      11488  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11515  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      11489  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11512  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      11490  0.0  0.0 183048  2152 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11514  0.0  0.0  20164   968 ?        Ss   01:24   0:00  |   \_ jailshell (pactpay) [11532] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11532  0.0  0.0  20164   260 ?        S    01:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11534  0.0  0.7 480124 17684 ?        S    01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      11492  0.0  0.0 183048  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      11510  0.0  0.0  20164   972 ?        Ss   01:24   0:00      \_ jailshell (nigeria) [11541] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11541  0.0  0.0  20164   264 ?        S    01:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11543  0.0  0.6 404052 16132 ?        S    01:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208    44 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4128 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       6996  0.0  0.2  84400  6200 ?        S    01:18   0:00  \_ /usr/sbin/exim -q
root      10584  0.0  0.4  88344 10392 ?        S    01:22   0:00  |   \_ /usr/sbin/exim -q
mailnull  10622  0.0  0.3  88556  8008 ?        S    01:22   0:00  |       \_ /usr/sbin/exim -q
mailnull  11364  0.0  0.2  89292  5740 ?        S    01:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:00 /usr/sbin/sshd -D
root      11446  0.0  0.2 157100  5068 ?        Ss   01:23   0:00  \_ sshd: unknown [priv]
sshd      11448  0.0  0.1 115644  2624 ?        S    01:23   0:00      \_ sshd: unknown [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.0 240976  2004 ?        Ssl  Nov16   0:02 /usr/sbin/rsyslogd -n
named       918  0.0  1.4 923720 35408 ?        Ssl  Nov16   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 14.6 1763124 354936 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   668 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  2184 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  3028 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984  2284 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  2936 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2300 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41056  1516 ?        S    Nov16   0:00  \_ dovecot/auth
root      10538  0.0  0.1  60820  4512 ?        S    01:22   0:00  \_ dovecot/lmtp
root      11470  0.0  0.1  41052  2724 ?        S    01:23   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  11403  0.0  0.0 445028   312 ?        S    01:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11476 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13656 ?        Ssl  Nov16   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7540 ?        Ss   Nov16   0:01 cpsrvd (SSL) - waiting for connections                   
root      11471  0.0  0.0      0     0 ?        Z    01:23   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        943  0.2  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.3  0.3 1276356 7880 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3344 ?        Rs   Nov16   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   792 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   640 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.3 5654048 32748 ?       SLsl Nov16   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   11271  0.9  0.4 401244 11168 ?        S    01:23   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    11458 22.5  2.4 523572 59380 ?        S    01:23   0:00  \_ php-fpm: pool cloudware_ng
healtho+  11462 41.0  2.0 443064 50696 ?        S    01:23   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    11465 44.0  2.2 448156 53868 ?        R    01:23   0:00  \_ php-fpm: pool cloudware_ng
nigeria   11467  3.0  0.6 408936 15452 ?        R    01:23   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   816 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.2 263740 127052 ?       S    Nov16   0:00  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5096 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32528 ?        Ss   Nov16   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209168 11748 ?        Ss   Nov16   0:00 tailwatchd
root       1213  0.0  0.2 183900  6100 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.7 228228 17408 ?        Ss   Nov16   0:00 dnsadmin - server mode
root       1627  0.0  0.0 299272   880 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1580 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12836   520 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12868   500 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    95484  0.1  0.8 277768 20168 ?        S    01:02   0:02  \_ /usr/sbin/httpd -k start
nobody    99433  0.1  0.8 277876 20464 ?        S    01:07   0:01  \_ /usr/sbin/httpd -k start
nobody     3945  0.1  0.8 277680 19964 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody     4346  0.1  0.8 277872 19736 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody     5965  0.1  0.7 277488 19304 ?        S    01:17   0:00  \_ /usr/sbin/httpd -k start
nobody     5977  0.1  0.8 277580 19908 ?        S    01:17   0:00  \_ /usr/sbin/httpd -k start
nobody     6623  0.1  0.8 277744 20032 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody     6647  0.1  0.8 277680 19808 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody     6661  0.1  0.8 277540 19600 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody     7135  0.1  0.8 277564 19648 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody     7401  0.1  0.8 277828 19588 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody     7472  0.1  0.8 277880 19980 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody     9245  0.1  0.7 277884 19300 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody     9260  0.1  0.7 277720 19352 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    10664  0.1  0.7 277868 18900 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    10740  0.1  0.7 277744 18560 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    10756  0.1  0.7 277876 18968 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    11152  0.0  0.7 277748 18704 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    11466  1.0  0.7 277732 18532 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    11560  0.0  0.6 353712 15976 ?        S    01:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    11556  0.0  0.6 276908 14796 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    11557  0.0  0.6 276908 14796 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.1 10.5 1461500 254216 ?      Sl   Nov16   1:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.1 181372 28792 ?        Ss   00:00   0:05 lfd - sleeping
## mysql stats
Uptime: 7467  Threads: 4  Questions: 537873  Slow queries: 0  Opens: 3340  Flush tables: 1  Open tables: 2000  Queries per second avg: 72.033
*************************** 1. row ***************************
     Id: 8017
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 8020
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 8022
   User: nigeria_wp171
   Host: localhost
     db: nigeria_wp171
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 8025
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 138.226.97.158 TIME_WAIT
      1 167.114.139.29 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 185.170.109.121 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.147 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 42.59.110.44 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.136.43 TIME_WAIT
      1 54.39.203.65 TIME_WAIT
      1 54.39.210.153 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
      2 195.250.21.230 TIME_WAIT
      2 201.46.112.136 TIME_WAIT
      2 202.61.232.214 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 01:24:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 5 minutes 12 seconds
   Server load: 0.38 0.36 0.32
   Total accesses: 44362 - Total Traffic: 1.1 GB - Total Duration: 22977875
   CPU Usage: u7.76 s4.03 cu609.59 cs495.65 - 14.9% CPU load
   5.91 requests/sec - 160.3 kB/second - 27.1 kB/request - 517.963 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

KKKKRKWRKWK__..W.WKKKKKK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req    Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  99433 4/325/2062 K 8.43 2    342  1090715 126.0 7.11  53.55 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=2719819914 HTTP/1.1
   1-0  6623  3/97/1782  K 2.06 1    395  932058  97.3  4.64  52.04 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=1341764443 HTTP/1.1
   2-0  10664 2/21/1810  K 0.80 4    261  959100  65.9  0.61  49.29 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=2555742072 HTTP/1.1
   3-0  7135  2/90/1934  K 2.33 0    349  970233  69.1  2.28  48.02 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=485490655 HTTP/1.1
   4-0  11152 0/7/1817   R 0.09 10   392  910220  0.0   0.06  50.63 147.75.88.38  http/1.1 cloudware.ng:443
   5-0  5965  8/105/1755 K 2.70 0    365  890733  248.9 2.73  48.39 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=102582143 HTTP/1.1
   6-0  9245  0/57/1894  W 1.33 0    0    938646  0.0   1.11  51.08 45.145.106.72 http/1.1 nigeriadecide.org:443      GET /blog/nigeriadecide-org-ekiti-sensitization-across-16-lgas-
   7-0  7401  0/100/1710 R 2.50 9    36   868950  0.0   2.68  43.59 101.53.245.15 http/1.1
   8-0  9260  4/35/1708  K 0.83 2    346  866034  126.4 0.96  44.18 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=2022769718 HTTP/1.1
   9-0  11466 1/2/1656   W 0.01 0    0    865776  35.6  0.04  43.25 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=1312833058 HTTP/1.1
   10-0 5977  1/125/1797 K 3.22 3    272  934272  33.1  3.61  47.46 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=2828873100 HTTP/1.1
   11-0 11556 0/0/1702   _ 0.00 0    0    922268  0.0   0.00  46.05 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 11557 0/0/1530   _ 0.00 0    0    805830  0.0   0.00  39.80 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/1742   . 0.00 53   0    945149  0.0   0.00  46.89 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -     0/0/1524   . 0.00 36   0    812558  0.0   0.00  41.21 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 6647  0/106/1608 W 2.65 0    0    842065  0.0   2.99  43.12 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 -     0/0/1437   . 0.00 38   0    784718  0.0   0.00  38.99 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 10740 1/11/1478  W 0.27 0    0    773811  6.7   0.34  41.70 101.53.245.15 http/1.1 cloudware.ng:443           POST /wp-login.php HTTP/1.1
   18-0 95484 5/375/1279 K 9.52 3    266  654328  156.0 9.27  32.79 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=2043179201 HTTP/1.1
   19-0 6661  3/88/1027  K 2.35 2    392  545597  96.4  2.49  31.32 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=3961006423 HTTP/1.1
   20-0 3945  1/168/1229 K 4.20 1    488  613344  24.0  4.37  30.08 85.254.42.17  http/1.1 health.oyostate.gov.ng:443 GET /download/ministry-of-health-year-2024-annual-grievance-red
   21-0 4346  2/146/1399 K 3.99 4    270  750686  64.0  4.35  38.99 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=359510409 HTTP/1.1
   22-0 10756 9/23/882   K 0.42 0    66   476566  12.0  0.20  22.62 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /3011604459?goodscode=3007658166 HTTP/1.1
   23-0 7472  1/95/982   K 1.99 0    1058 486626  28.9  1.44  24.92 85.204.245.62 http/1.1 nigeriadecide.org:443      GET /United_Democratic_Party.php HTTP/1.1
   24-0 -     0/0/1248   . 0.00 27   0    676301  0.0   0.00  33.48 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/635    . 0.00 529  0    296775  0.0   0.00  16.20 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/333    . 0.00 299  0    158431  0.0   0.00  7.86  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/517    . 0.00 824  0    260228  0.0   0.00  13.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/442    . 0.00 3592 0    227041  0.0   0.00  11.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/70     . 0.00 3606 0    36084   0.0   0.00  1.51  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/274    . 0.00 3012 0    126063  0.0   0.00  6.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/459    . 0.00 2329 0    223052  0.0   0.00  10.36 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/71     . 0.00 3623 0    32316   0.0   0.00  1.29  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00 3618 0    46426   0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00 3611 0    156256  0.0   0.00  7.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00 3605 0    6362    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00 3551 0    85805   0.0   0.00  4.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00 3615 0    7767    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00 3598 0    77733   0.0   0.00  3.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/424    . 0.00 2205 0    220703  0.0   0.00  11.36 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/88     . 0.00 3485 0    19096   0.0   0.00  1.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00 3617 0    3054    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00 3473 0    22487   0.0   0.00  0.98  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00 3616 0    52913   0.0   0.00  2.30  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00 1257 0    366544  0.0   0.00  17.77 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00 3621 0    19040   0.0   0.00  0.83  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00 3594 0    5124    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00 3555 0    7973    0.0   0.00  0.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00 3306 0    40607   0.0   0.00  1.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00 3609 0    18588   0.0   0.00  0.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 3604 0    3381    0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00 3578 0    3457    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 6313 0    1702    0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00 6289 0    2649    0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 6312 0    1806    0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 6234 0    13156   0.0   0.00  0.55  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 5479 0    98784   0.0   0.00  5.53  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 6174 0    19861   0.0   0.00  0.82  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1314
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 2 seconds, (range: 0...6)
   index usage: 23%, cache usage: 31%
   total entries stored since starting: 33681
   total entries replaced since starting: 0
   total entries expired since starting: 32365
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 85 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit