403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.01.15.txt
 ## swap threshold exceeded
## server overview
2025-11-18.01.15 load[0] mem[56/69] mysql[1/11] httpd[21]
              total        used        free      shared  buff/cache   available
Mem:           2363        1233         144          73         984         875
Swap:          1999        1462         537
 01:15:01 up  6:27,  0 users,  load average: 0.71, 0.43, 0.39
## system overview
top - 01:15:01 up  6:27,  0 users,  load average: 0.71, 0.43, 0.39
Tasks: 214 total,   5 running, 208 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.8 us, 41.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   120172 free,  1292100 used,  1008028 buff/cache
KiB Swap:  2047996 total,   550908 free,  1497088 used.   867764 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264464   3172 S  35.3 10.9   5:20.22 /usr/sbin+
 76281 nigeria   20   0  404052  16144  10384 R  11.8  0.7   0:00.02 /opt/cpan+
 76313 nobody    20   0   82836  11500   4100 R  11.8  0.5   0:00.02 /usr/loca+
   523 dbus      20   0   58704   1412    680 S   5.9  0.1   0:12.15 /usr/bin/+
 70914 nobody    20   0  277744  19484   4484 S   5.9  0.8   0:00.59 /usr/sbin+
 76266 root      20   0  188208  11092   5148 S   5.9  0.5   0:00.01 /usr/loca+
 76277 pactpay   20   0  480124  16792  11088 S   5.9  0.7   0:00.01 /opt/cpan+
 76284 cloudw    20   0  353712  15976  10492 S   5.9  0.7   0:00.01 /opt/cpan+
 76292 cloudsms  20   0  404052  15344  10008 S   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44412   3444   1572 S   0.0  0.1   0:32.06 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.39 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.00 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.46 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.99 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.94 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.71 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.44 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.69 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.30 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   8072   7768 S   0.0  0.3   0:11.32 /usr/lib/+
   391 root      20   0   45424    268    192 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    536    420 S   0.0  0.0   0:01.60 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240   1044    636 S   0.0  0.0   0:03.11 /usr/lib/+
   514 root      20   0  224148   5924   1196 S   0.0  0.2   0:00.30 queueproc+
   516 rpc       20   0   69256     88     28 S   0.0  0.0   0:00.02 /sbin/rpc+
   517 root      20   0   21540    428    340 S   0.0  0.0   0:00.52 /usr/sbin+
   521 root      20   0  152780    216    176 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    360    256 S   0.0  0.0   0:00.01 /usr/sbin+
   532 root      20   0  195208     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1232    876 S   0.0  0.1   0:05.37 /usr/lib/+
   556 root      20   0  126388    520    364 S   0.0  0.0   0:00.75 /usr/sbin+
   558 root      20   0   25908      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1848    792 S   0.0  0.1   0:19.02 /usr/sbin+
   578 root      20   0  114704    120    120 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4068    980 S   0.0  0.2   0:00.49 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.52 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
  1061 root      20   0  153404    384    300 S   0.0  0.0   0:00.50 pure-ftpd+
  1062 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13144   2308 S   0.0  0.5   0:05.53 /usr/loca+
  1067 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.51 /usr/bin/+
  1068 root      20   0 1276356   9180    148 S   0.0  0.4   0:26.95 /usr/bin/+
  1069 telegraf  20   0 5654304  39672   6040 S   0.0  1.6   0:12.53 /usr/loca+
  1071 root      20   0  572372    932    356 S   0.0  0.0   0:02.02 /usr/bin/+
  1072 root      20   0   51508    584    420 S   0.0  0.0   0:00.29 /usr/sbin+
  1076 root      20   0 1277056   9788    144 S   0.0  0.4   0:23.11 /usr/bin/+
  1085 systuser  20   0   12756     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    488    388 S   0.0  0.0   0:02.17 /usr/sbin+
  1087 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1404   1292 S   0.0  0.1   0:00.98 sw-engine+
  1091 root      20   0  389508    768    552 S   0.0  0.0   0:00.67 php-fpm: +
  1098 named     20   0 1055796  39568   1580 S   0.0  1.6   0:12.52 /usr/sbin+
  1109 root      20   0  388892    800    588 S   0.0  0.0   0:00.62 php-fpm: +
  1113 root      20   0  273744   7960   6872 S   0.0  0.3   0:05.65 /usr/sbin+
  1117 root      20   0 1763304 178668   1012 S   0.0  7.4   0:13.84 /usr/loca+
  1123 root      20   0  439788   1056    964 S   0.0  0.0   0:00.70 php-fpm: +
  1131 root      20   0  400740   2092    736 S   0.0  0.1   0:03.36 php-fpm: +
  1134 root      20   0  261152   7092   1992 S   0.0  0.3   0:02.44 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3776   2404 S   0.0  0.2   0:18.54 /usr/loca+
  1149 root      20   0  396248    700    528 S   0.0  0.0   0:00.63 php-fpm: +
  1213 dovenull  20   0   46984   2540   1812 S   0.0  0.1   0:00.37 dovecot/p+
  1214 dovenull  20   0   47936   3496   1956 S   0.0  0.1   0:00.32 dovecot/i+
  1215 dovecot   20   0   10320    396    284 S   0.0  0.0   0:00.06 dovecot/a+
  1216 root      20   0   10452    680    504 S   0.0  0.0   0:00.29 dovecot/l+
  1217 dovenull  20   0   47056   2680   1880 S   0.0  0.1   0:00.50 dovecot/p+
  1218 dovenull  20   0   47752   3240   2060 S   0.0  0.1   0:00.23 dovecot/i+
  1226 root      20   0   24528   2348    488 S   0.0  0.1   0:00.14 dovecot/c+
  1227 dovecot   20   0   13568    564    348 S   0.0  0.0   0:00.05 dovecot/s+
  1292 systuser  20   0  157704   3096   1044 S   0.0  0.1   0:00.11 SonarPush+
  1297 dovecot   20   0   41188   1596   1084 S   0.0  0.1   0:00.50 dovecot/a+
  1300 wp-tool+  20   0  412396  32760   1952 S   0.0  1.4   0:07.48 /usr/bin/+
  1301 wp-tool+  20   0  387556  13596   1936 S   0.0  0.6   0:00.25 /usr/bin/+
  1308 root      20   0  248116 117400   1000 S   0.0  4.9   0:05.56 /usr/loca+
  1409 root      20   0  210048  13440   2396 S   0.0  0.6   0:02.88 tailwatchd
  1412 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.25 cpdavd - +
  1413 root      20   0  167452   4200   2832 S   0.0  0.2   0:00.39 dnsadmin +
  1836 root      20   0  299272    796    416 S   0.0  0.0   0:00.63 php-fpm: +
  1853 root      38  18  130416   1496    764 S   0.0  0.1   0:00.05 cpanellog+
  2063 root      20   0  266984   7772    732 S   0.0  0.3   0:03.26 /usr/sbin+
  2067 root      20   0   12800    400    292 S   0.0  0.0   0:02.53 /usr/loca+
  2068 root      20   0   12732    364    288 S   0.0  0.0   0:02.20 /usr/loca+
  2069 root      20   0   12820    412    292 S   0.0  0.0   0:02.37 /usr/loca+
  2075 root      20   0   53252    188    188 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  264072 127596   2096 S   0.0  5.3   0:02.56 spamd chi+
  7507 root      20   0  248116 116772    416 S   0.0  4.8   0:00.00 spamd chi+
 13053 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.41 [kworker]
 14140 root      20   0  181620  29588   2320 S   0.0  1.2   0:04.53 lfd - sle+
 38740 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 51192 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 51258 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51661 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53670 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55907 nobody    20   0  277744  20404   5000 S   0.0  0.8   0:02.55 /usr/sbin+
 62775 root      20   0  182832   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62833 root      20   0  113284   1200   1024 S   0.0  0.0   0:00.00 /bin/sh -+
 62852 root      20   0  108056    344    272 S   0.0  0.0   0:00.00 sleep 1h +
 63081 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 65830 nobody    20   0  277744  19912   4700 S   0.0  0.8   0:01.32 /usr/sbin+
 66606 nobody    20   0  277680  19736   4672 S   0.0  0.8   0:01.09 /usr/sbin+
 68168 nobody    20   0  277760  19420   4440 S   0.0  0.8   0:01.05 /usr/sbin+
 68172 nobody    20   0  277744  19600   4508 S   0.0  0.8   0:01.01 /usr/sbin+
 68263 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 69018 nobody    20   0  277744  19568   4500 S   0.0  0.8   0:00.76 /usr/sbin+
 69069 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69511 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kworker/+
 70364 nobody    20   0  277660  19436   4412 S   0.0  0.8   0:00.71 /usr/sbin+
 70802 nobody    20   0  277744  19180   4260 S   0.0  0.8   0:00.69 /usr/sbin+
 70803 nobody    20   0  277744  19372   4444 S   0.0  0.8   0:00.65 /usr/sbin+
 70915 nobody    20   0  277744  19304   4312 S   0.0  0.8   0:00.69 /usr/sbin+
 72319 nobody    20   0  277744  19220   4224 S   0.0  0.8   0:00.46 /usr/sbin+
 72384 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72530 nobody    20   0  277744  19064   4148 S   0.0  0.8   0:00.46 /usr/sbin+
 72973 nobody    20   0  277868  19228   4284 S   0.0  0.8   0:00.41 /usr/sbin+
 74468 nobody    20   0  277868  18756   3928 S   0.0  0.8   0:00.26 /usr/sbin+
 74869 root      20   0   41052   2796   2132 S   0.0  0.1   0:00.00 dovecot/a+
 75244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75359 mailnull  20   0   89492   4924   1744 S   0.0  0.2   0:00.00 /usr/sbin+
 75574 nobody    20   0  277744  18168   3372 S   0.0  0.8   0:00.07 /usr/sbin+
 75595 nobody    20   0  277880  18596   3796 S   0.0  0.8   0:00.06 /usr/sbin+
 75597 nobody    20   0  277876  18712   3836 S   0.0  0.8   0:00.06 /usr/sbin+
 75598 nobody    20   0  277912  18332   3464 S   0.0  0.8   0:00.10 /usr/sbin+
 75731 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 75910 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 75911 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 76085 foodcong  20   0  400460   2760   1184 S   0.0  0.1   0:00.00 php-fpm: +
 76120 nobody    20   0  277744  17900   3156 S   0.0  0.7   0:00.01 /usr/sbin+
 76144 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 76146 nobody    20   0  277176  16408   2384 S   0.0  0.7   0:00.00 /usr/sbin+
 76147 nobody    20   0  277264  16460   2324 S   0.0  0.7   0:00.00 /usr/sbin+
 76162 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76164 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76165 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76166 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76167 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76168 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76169 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76170 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76171 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76172 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76173 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76174 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76175 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76176 root      20   0  182832   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76178 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76183 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 76186 root      20   0  114252   2240   1264 S   0.0  0.1   0:00.00 bash /usr+
 76194 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 76196 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 76197 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 76243 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76244 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76245 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76246 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76247 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 76248 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 76251 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76253 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 76254 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76255 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76256 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 76257 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76259 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76273 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 76274 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 76278 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 76280 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 76283 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 76302 root      20   0  160220   2060   1580 S   0.0  0.1   0:00.00 top -n 2 +
 76314 root      20   0  114252   1144      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      69511  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kworker/1:1]
root      38740  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:2]
root      51192  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/0:1]
root      51258  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/1:2]
root      51661  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root      53670  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/0:6]
root      63081  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:0]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root      69069  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:3]
root      72384  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:3]
root      75244  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:0]
root      75248  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44412  3444 ?        Ss   Nov17   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.3  40244  8072 ?        Ss   Nov17   0:11 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   268 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   536 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240  1044 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.2 224148  5924 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256    88 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   428 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   216 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   360 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1412 ?        Ss   Nov17   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    28 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1232 ?        Ss   Nov17   0:05 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126388   520 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      62775  0.0  0.0 182832  2136 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      62833  0.0  0.0 113284  1200 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      62852  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 1h 4m
root      76162  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76183  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      76186  0.0  0.1 114256  2428 ?        S    01:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      76164  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76194  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      76196  0.0  0.0 108052   356 ?        S    01:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      76197  0.0  0.0 113288  1520 ?        S    01:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      76315  0.0  0.0 153840  2092 ?        R    01:15   0:00  |               \_ ps auxf
root      76165  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76254  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      76166  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76259  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      76167  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76255  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      76168  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76251  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      76169  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76244  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      76170  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76247  0.0  0.0  20164   968 ?        Ss   01:15   0:00  |   \_ jailshell (cloudsms) [76280] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  76280  0.0  0.0  20164   264 ?        S    01:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  76283  0.0  0.0 113284  1208 ?        S    01:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  76292  0.0  0.6 404052 15344 ?        S    01:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      76171  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76245  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      76172  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76246  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      76173  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76243  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      76174  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76257  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      76175  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76253  0.0  0.0 113284  1208 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      76266  0.0  0.4 188208 11092 ?        S    01:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      76302  0.0  0.0 160220  2060 ?        S    01:15   0:00  |           \_ top -n 2 -b -c
root      76176  0.0  0.0 182832  2136 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76256  0.0  0.0  20164   964 ?        Ss   01:15   0:00  |   \_ jailshell (pactpay) [76273] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76273  0.0  0.0  20164   260 ?        S    01:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76277  0.0  0.6 480124 16792 ?        S    01:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      76178  0.0  0.0 182832  2132 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      76248  0.0  0.0  20164   968 ?        Ss   01:15   0:00      \_ jailshell (nigeria) [76278] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76278  0.0  0.0  20164   264 ?        S    01:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76281  0.0  0.6 404052 16144 ?        S    01:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908     0 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1848 ?        Ssl  Nov17   0:19 /usr/sbin/nscd
root        578  0.0  0.0 114704   120 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   136 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4068 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  75359  0.0  0.2  89492  4924 ?        S    01:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   384 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13144 ?        Ssl  Nov17   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400    32 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.1  0.3 1276356 9180 ?        Ssl  Nov17   0:26 /usr/bin/cspdaemon
telegraf   1069  0.0  1.6 5654304 39672 ?       SLsl Nov17   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372   932 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   584 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.1  46984  2540 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  3496 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   396 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   680 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2680 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  3240 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2348 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   564 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1596 ?        S    Nov17   0:00  \_ dovecot/auth
root      74869  0.0  0.1  41052  2796 ?        S    01:13   0:00  \_ dovecot/auth -w
root       1076  0.0  0.4 1277056 9788 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    48 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   488 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      75910  0.0  0.1 111304  4276 ?        Ss   01:14   0:00  \_ sshd: [accepted]
sshd      75911  0.0  0.1 115644  2632 ?        S    01:14   0:00      \_ sshd: [net]
systuser   1087  0.0  0.0 111864    76 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1404 ?        Ss   Nov17   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  75731  0.0  0.0 445028   320 ?        S    01:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   768 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.6 1055796 39568 ?       Ssl  Nov17   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   800 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.3 273744  7960 ?        Ssl  Nov17   0:05 /usr/sbin/rsyslogd -n
root       1117  0.0  7.3 1763304 178668 ?      Ssl  Nov17   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788  1056 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2092 ?        Ss   Nov17   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
foodcong  76085  0.0  0.1 400460  2760 ?        S    01:14   0:00  \_ php-fpm: pool foodco_ng
root       1134  0.0  0.2 261152  7092 ?        Ss   Nov17   0:02 cpsrvd (SSL) - waiting for connections                   
root      76144  0.0  0.0      0     0 ?        Z    01:14   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3776 ?        Ss   Nov17   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   700 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  3096 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.3 412396 32760 ?        Ss   Nov17   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.5 387556 13596 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  4.8 248116 117400 ?       Ss   Nov17   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  5.2 264072 127596 ?       S    Nov17   0:02  \_ spamd child
root       7507  0.0  4.8 248116 116772 ?       S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.5 210048 13440 ?        Ss   Nov17   0:02 tailwatchd
root       1412  0.0  0.2 183900  6692 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1413  0.0  0.1 167452  4200 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   796 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1496 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.3 10.9 1458600 264464 ?      Sl   Nov17   5:20 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7772 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12800   400 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   364 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12820   412 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   188 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    55907  0.1  0.8 277744 20404 ?        S    00:51   0:02  \_ /usr/sbin/httpd -k start
nobody    65830  0.1  0.8 277744 19912 ?        S    01:03   0:01  \_ /usr/sbin/httpd -k start
nobody    66606  0.1  0.8 277680 19736 ?        S    01:04   0:01  \_ /usr/sbin/httpd -k start
nobody    68168  0.1  0.8 277760 19420 ?        S    01:06   0:01  \_ /usr/sbin/httpd -k start
nobody    68172  0.1  0.8 277744 19600 ?        S    01:06   0:01  \_ /usr/sbin/httpd -k start
nobody    69018  0.1  0.8 277744 19568 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    70364  0.1  0.8 277660 19436 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70802  0.1  0.7 277744 19180 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70803  0.1  0.8 277744 19372 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70914  0.1  0.8 277744 19484 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70915  0.1  0.7 277744 19304 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    72319  0.1  0.7 277744 19220 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    72530  0.1  0.7 277744 19064 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    72973  0.2  0.7 277868 19228 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
cloudw    76284  0.0  0.6 353712 15976 ?        S    01:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    74468  0.2  0.7 277868 18756 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    75574  0.1  0.7 277744 18168 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    75595  0.1  0.7 277880 18596 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    75597  0.1  0.7 277876 18712 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    75598  0.2  0.7 277912 18332 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    76120  0.5  0.7 277744 17900 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    76146  0.0  0.6 277176 16408 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    76147  0.0  0.6 277264 16628 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148   416 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152   492 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.2 181620 29588 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 23215  Threads: 3  Questions: 2025457  Slow queries: 0  Opens: 7316  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.247
*************************** 1. row ***************************
     Id: 30764
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30766
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30768
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 142.147.191.50 TIME_WAIT
      1 15.235.96.90 TIME_WAIT
      1 154.7.231.85 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 194.55.228.7 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.6.228 TIME_WAIT
      1 54.39.6.252 TIME_WAIT
      1 54.39.89.31 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 85.254.43.112 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 185.241.206.44 TIME_WAIT
      6 172.71.164.38 TIME_WAIT
      7 172.71.164.39 TIME_WAIT
    119 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 01:15:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 26 minutes 49 seconds
   Server load: 0.71 0.43 0.39
   Total accesses: 115686 - Total Traffic: 2.8 GB - Total Duration: 60465670
   CPU Usage: u9.12 s7.14 cu1494.53 cs1184.84 - 11.6% CPU load
   4.98 requests/sec - 124.8 kB/second - 25.0 kB/request - 522.671 ms/request
   20 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

KKKKWKW_.K.KKK.K_.KK.KKKK..K...K................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client     Protocol              VHost                                      Request
   0-0  76120 2/2/5243    K 0.02  1    293 3073468 69.2  0.07  121.79 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=1513885662 HTTP/1.1
   1-0  65830 10/274/5408 K 6.32  4    351 2735941 313.8 5.52  127.58 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=980802232 HTTP/1.1
   2-0  72319 4/182/5116  K 2.39  0    261 2572359 129.9 1.57  121.17 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=908983991 HTTP/1.1
   3-0  72530 1/87/4776   K 2.63  1    251 2507237 34.0  2.03  115.19 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=2870279429 HTTP/1.1
   4-0  72973 3/104/5209  W 2.71  0    0   2560539 96.4  1.43  121.49 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=2295732047 HTTP/1.1
   5-0  69018 1/166/5056  K 4.20  3    257 2531307 34.9  4.24  124.24 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=2328581036 HTTP/1.1
   6-0  76146 0/3/5038    W 0.06  0    0   2585936 0.0   0.02  125.55 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   7-0  76147 0/5/4578    _ 0.02  0    42  2303830 0.0   0.02  116.57 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET /cgi-sys/autodiscover.cgi HTTP/1.1
   8-0  -     0/0/4457    . 0.00  33   0   2185879 0.0   0.00  105.08 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-0  75574 2/13/4497   K 0.37  0    263 2273788 65.1  0.28  111.23 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=1364957537 HTTP/1.1
   10-0 -     0/0/4492    . 0.00  36   0   2244041 0.0   0.00  108.64 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 70364 2/252/4791  K 3.03  0    266 2330943 66.1  2.62  118.72 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=3384154967 HTTP/1.1
   12-0 74468 3/49/3806   K 1.40  3    350 2063627 98.9  1.11  95.95  192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=1642083228 HTTP/1.1
   13-0 70802 7/174/4045  K 3.66  1    276 1944579 215.9 2.71  97.60  192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=3534783904 HTTP/1.1
   14-0 -     0/0/4082    . 0.00  32   0   2132649 0.0   0.00  96.64  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 55907 3/453/4173  K 12.30 2    304 2102175 94.7  10.94 99.40  192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=2677349418 HTTP/1.1
   16-0 70803 0/127/3854  _ 3.72  0    346 2739695 0.0   2.49  106.96 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=4118857768 HTTP/1.1
   17-0 -     0/0/3897    . 0.00  28   0   1910644 0.0   0.00  100.55 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 66606 1/215/3197  K 5.52  2    0   1632755 5.8   4.37  71.91  185.241.206.44 http/1.1 nigeriadecide.org:443           POST /api/send/sms HTTP/1.1
   19-0 75595 1/17/3044   K 0.38  4    320 1495060 37.4  0.19  72.75  192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=2136195962 HTTP/1.1
   20-0 -     0/0/3415    . 0.00  35   0   1704168 0.0   0.00  83.76  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 70914 4/118/2393  K 3.18  0    291 1253824 122.6 4.73  57.78  192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=2259239863 HTTP/1.1
   22-0 75597 4/25/2202   K 0.36  0    43  1088443 2.9   0.19  51.62  212.30.36.103  http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/css/dist/components/about.php HTTP/1.1
   23-0 70915 5/174/2376  K 3.72  2    351 1153410 155.3 2.68  52.00  192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=3229595303 HTTP/1.1
   24-0 75598 14/34/2153  K 0.48  3    356 1237073 430.9 0.44  58.74  192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=2874748209 HTTP/1.1
   25-0 -     0/0/1367    . 0.00  528  0   824943  0.0   0.00  36.18  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/1271    . 0.00  524  0   742077  0.0   0.00  31.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 68168 1/191/1300  K 5.42  2    318 754584  36.3  4.46  30.99  192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=1612248076 HTTP/1.1
   28-0 -     0/0/1199    . 0.00  522  0   667892  0.0   0.00  26.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/1127    . 0.00  463  0   691662  0.0   0.00  29.88  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/924     . 0.00  323  0   538748  0.0   0.00  23.47  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 68172 6/191/1081  K 4.95  2    264 523310  186.5 4.42  24.41  192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=921762802 HTTP/1.1
   32-0 -     0/0/638     . 0.00  3593 0   353573  0.0   0.00  17.97  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/932     . 0.00  3722 0   602731  0.0   0.00  27.29  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/535     . 0.00  3721 0   290281  0.0   0.00  13.80  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/461     . 0.00  3718 0   255827  0.0   0.00  12.63  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/420     . 0.00  3335 0   233407  0.0   0.00  11.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/558     . 0.00  3709 0   311293  0.0   0.00  17.32  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/371     . 0.00  3706 0   197602  0.0   0.00  10.72  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/111     . 0.00  3712 0   55375   0.0   0.00  2.84   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/365     . 0.00  3590 0   203780  0.0   0.00  9.39   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/81      . 0.00  3717 0   39481   0.0   0.00  1.95   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/121     . 0.00  3696 0   63252   0.0   0.00  3.11   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/251     . 0.00  3715 0   94774   0.0   0.00  3.69   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/190     . 0.00  3491 0   101665  0.0   0.00  4.99   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/73      . 0.00  3711 0   39616   0.0   0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/225     . 0.00  3587 0   119013  0.0   0.00  5.41   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/65      . 0.00  3676 0   35063   0.0   0.00  1.48   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/243     . 0.00  3700 0   115638  0.0   0.00  5.61   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/19      . 0.00  3716 0   7927    0.0   0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/52      . 0.00  7780 0   34889   0.0   0.00  1.28   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/70      . 0.00  7862 0   34943   0.0   0.00  1.72   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/33      . 0.00  7838 0   12820   0.0   0.00  0.87   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/22      . 0.00  9131 0   10829   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/121     . 0.00  9042 0   71948   0.0   0.00  3.51   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/72      . 0.00  9097 0   40608   0.0   0.00  2.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/7       . 0.00  9465 0   1321    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00  9457 0   2507    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/9       . 0.00  9474 0   517     0.0   0.00  0.87   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/4       . 0.00  9472 0   12      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/42      . 0.00  9310 0   19606   0.0   0.00  1.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/2       . 0.00  9481 0   821     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/19      . 0.00  9433 0   7935    0.0   0.00  0.50   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1168
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 3 seconds, (range: 0...13)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 84716
   total entries replaced since starting: 0
   total entries expired since starting: 83529
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 203 miss
   total removes since starting: 19 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit