403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-19.04.00.txt
 ## mem threshold exceeded
## server overview
2025-11-19.04.00 load[1] mem[93/11] mysql[1/7] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        2099          66          16         197          96
Swap:          1999         320        1679
 04:00:03 up 2 min,  0 users,  load average: 1.44, 1.16, 0.48
## system overview
top - 04:00:03 up 2 min,  0 users,  load average: 1.44, 1.16, 0.48
Tasks: 214 total,   6 running, 206 sleeping,   0 stopped,   2 zombie
%Cpu(s): 62.5 us, 34.4 sy,  3.1 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    79640 free,  2128388 used,   212272 buff/cache
KiB Swap:  2047996 total,  1720316 free,   327680 used.   120520 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1748 mysql     20   0 1457544 162300   3112 S  68.8  6.7   0:02.04 /usr/sbin+
  3990 cloudw    20   0  435288  40740   3148 R  25.0  1.7   0:00.19 php-fpm: +
    36 root      20   0       0      0      0 S   6.2  0.0   0:01.78 [kswapd0]
  3896 root      20   0 1359140  15040    576 S   6.2  0.6   0:00.10 /usr/bin/+
  3978 nigeria   20   0  404052  14052   8296 S   6.2  0.6   0:00.05 /opt/cpan+
  4091 root      20   0  160224   2372   1636 S   6.2  0.1   0:00.01 top -n 2 +
  4106 root      35  15  138084   5120   2800 R   6.2  0.2   0:00.01 /usr/loca+
     1 root      20   0   44276   3004   1256 S   0.0  0.1   0:01.02 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:00.14 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kauditd]
   108 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   237 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   260 root       0 -20       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   356 root      20   0   39496   2792   2512 S   0.0  0.1   0:00.19 /usr/lib/+
   387 root      20   0   45352    316    172 S   0.0  0.0   0:00.36 /usr/lib/+
   406 root      16  -4   55532    188     80 S   0.0  0.0   0:00.02 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   479 polkitd   20   0  612240   3056    596 S   0.0  0.1   0:00.04 /usr/lib/+
   480 root      20   0   52852    168    164 S   0.0  0.0   0:00.01 /usr/sbin+
   481 root      20   0  152780      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   482 root      20   0  224144   5664    124 S   0.0  0.2   0:00.07 queueproc+
   486 root      20   0   21540    260    148 S   0.0  0.0   0:00.00 /usr/sbin+
   492 dbus      20   0   58724   1368    648 R   0.0  0.1   0:00.12 /usr/bin/+
   495 rpc       20   0   69256    104      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   498 root      20   0    4388    108    104 S   0.0  0.0   0:00.00 /usr/sbin+
   510 root      20   0   24704   1096    732 S   0.0  0.0   0:00.05 /usr/lib/+
   515 nscd      20   0 1371420    868      4 S   0.0  0.0   0:00.06 /usr/sbin+
   521 root      20   0  195208     12     12 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    288    156 S   0.0  0.0   0:00.01 /usr/sbin+
   556 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  114704    104    104 S   0.0  0.0   0:00.02 /bin/bash
   580 root      20   0  108296    144    140 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   90692   3132    144 S   0.0  0.1   0:00.02 /usr/sbin+
   638 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   670 root       0 -20       0      0      0 S   0.0  0.0   0:00.10 [loop0]
   747 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   748 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   910 systuser  20   0   12660     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   911 telegraf  20   0 5654048  31584      0 S   0.0  1.3   0:00.23 /usr/loca+
   913 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   914 root      20   0   51508    208     52 S   0.0  0.0   0:00.03 /usr/sbin+
   915 systuser  20   0  111864   2080      0 S   0.0  0.1   0:00.00 /usr/loca+
   916 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.00 /usr/bin/+
   917 root      20   0  153404    272    184 S   0.0  0.0   0:00.00 pure-ftpd+
   918 systuser  20   0  113676   2080      0 S   0.0  0.1   0:00.00 /usr/loca+
   919 root      20   0  572372    468      0 S   0.0  0.0   0:00.12 /usr/bin/+
   920 systuser  20   0  114016   8832      0 S   0.0  0.4   0:00.08 /usr/loca+
   921 root      20   0  111304    232    136 S   0.0  0.0   0:00.02 /usr/sbin+
   922 root      20   0 1349832  11528    116 S   0.0  0.5   0:26.51 /usr/bin/+
   923 root      20   0  445028   2620   2620 S   0.0  0.1   0:00.06 sw-engine+
   925 root      20   0 1277056  13912    116 S   0.0  0.6   0:29.96 /usr/bin/+
   931 root      20   0  400740   2824    308 S   0.0  0.1   0:00.13 php-fpm: +
   932 root      20   0 1689404   1.2g     52 S   0.0 53.3   0:13.92 /usr/loca+
   939 root      20   0  396248    184     84 S   0.0  0.0   0:00.07 php-fpm: +
   960 root      20   0  388892    256    176 S   0.0  0.0   0:00.06 php-fpm: +
   967 named     20   0 1121200  15256    996 S   0.0  0.6   0:00.30 /usr/sbin+
   970 root      20   0  439788  11164  10896 S   0.0  0.5   0:00.09 php-fpm: +
   979 root      20   0  389508    376    168 S   0.0  0.0   0:00.06 php-fpm: +
   981 root      20   0  261020   4780    164 S   0.0  0.2   0:00.12 cpsrvd (S+
   990 root      20   0  216400   2536   1932 S   0.0  0.1   0:00.08 /usr/sbin+
  1000 cpanelc+  20   0    9568   2400   2188 S   0.0  0.1   0:00.08 /usr/loca+
  1046 dovenull  20   0   46772    284      8 S   0.0  0.0   0:00.00 dovecot/p+
  1047 dovenull  20   0   46924    552    104 S   0.0  0.0   0:00.00 dovecot/i+
  1048 dovecot   20   0   10320    264    152 S   0.0  0.0   0:00.00 dovecot/a+
  1049 root      20   0   10452    168      4 S   0.0  0.0   0:00.00 dovecot/l+
  1050 dovenull  20   0   46772    216      0 S   0.0  0.0   0:00.00 dovecot/p+
  1051 dovenull  20   0   46780    112    112 S   0.0  0.0   0:00.00 dovecot/i+
  1058 root      20   0   24396   1528    144 S   0.0  0.1   0:00.01 dovecot/c+
  1062 dovecot   20   0   13568    184      0 S   0.0  0.0   0:00.00 dovecot/s+
  1089 systuser  20   0  157708   2072    124 S   0.0  0.1   0:00.00 SonarPush+
  1108 dovecot   20   0   41056    312     84 S   0.0  0.0   0:00.00 dovecot/a+
  1148 wp-tool+  20   0  412368  30180   1084 S   0.0  1.2   0:00.29 /usr/bin/+
  1149 wp-tool+  20   0  387528  10656      0 S   0.0  0.4   0:00.07 /usr/bin/+
  1165 root      20   0   25760    568      0 S   0.0  0.0   0:01.47 spamd-dor+
  1235 root      20   0  167452    816    356 S   0.0  0.0   0:00.04 dnsadmin +
  1236 root      20   0  208780   8388    560 S   0.0  0.3   0:00.22 tailwatchd
  1237 root      20   0  183900    164    148 S   0.0  0.0   0:00.08 cpdavd - +
  1705 root      20   0  299272    376    212 S   0.0  0.0   0:00.00 php-fpm: +
  1711 root      38  18  130416    876    140 S   0.0  0.0   0:00.00 cpanellog+
  1966 root      20   0  266992  26100    344 S   0.0  1.1   0:00.09 /usr/sbin+
  1968 root      20   0   12764    288     68 S   0.0  0.0   0:00.00 /usr/loca+
  1969 root      20   0   12732    304    116 S   0.0  0.0   0:00.00 /usr/loca+
  1970 root      20   0   12768    272     44 S   0.0  0.0   0:00.00 /usr/loca+
  1973 root      20   0   53340   9468    152 S   0.0  0.4   0:00.04 /usr/loca+
  1974 nobody    20   0  277496  32032    388 S   0.0  1.3   0:00.08 /usr/sbin+
  1975 nobody    20   0  277416  32092    528 S   0.0  1.3   0:00.07 /usr/sbin+
  1976 nobody    20   0  277388  31692    156 S   0.0  1.3   0:00.04 /usr/sbin+
  1978 nobody    20   0  277364  31564     56 S   0.0  1.3   0:00.03 /usr/sbin+
  1979 root      20   0  180932  27532    736 R   0.0  1.1   0:00.24 lfd - sca+
  2089 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2130 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2160 nobody    20   0  277864  32048    220 S   0.0  1.3   0:00.04 /usr/sbin+
  2163 nobody    20   0  277836  32256    372 S   0.0  1.3   0:00.07 /usr/sbin+
  2164 nobody    20   0  277528  31872    156 S   0.0  1.3   0:00.05 /usr/sbin+
  2169 nobody    20   0  277380  31688    136 S   0.0  1.3   0:00.04 /usr/sbin+
  2171 nobody    20   0  277372  31780    260 S   0.0  1.3   0:00.02 /usr/sbin+
  2172 nobody    20   0  277460  31800    196 S   0.0  1.3   0:00.03 /usr/sbin+
  2209 worencom  20   0   38364    924     92 S   0.0  0.0   0:00.00 dovecot/i+
  2474 root      20   0  222516  15576      8 S   0.0  0.6   0:00.00 /usr/bin/+
  2795 root      20   0  157100   1460    172 S   0.0  0.1   0:00.00 sshd: unk+
  2796 sshd      20   0  115644   1088     20 S   0.0  0.0   0:00.00 sshd: unk+
  2868 root      20   0  111304   1272    256 S   0.0  0.1   0:00.00 sshd: [ac+
  3612 workflo+  20   0  497996  30020   1852 S   0.0  1.2   0:00.29 php-fpm: +
  3613 mailnull  20   0   91060   3240    204 S   0.0  0.1   0:00.00 /usr/sbin+
  3619 workflo+  20   0  497704  30004   1904 S   0.0  1.2   0:00.24 php-fpm: +
  3620 nobody    20   0  277188  31608    296 S   0.0  1.3   0:00.04 /usr/sbin+
  3622 nigeria   20   0  400460   4868    100 S   0.0  0.2   0:00.00 php-fpm: +
  3804 nobody    20   0  277336  31840    440 S   0.0  1.3   0:00.01 /usr/sbin+
  3805 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  3806 nobody    20   0  277056  33036   1824 S   0.0  1.4   0:00.00 /usr/sbin+
  3807 nobody    20   0  276920  31204    116 S   0.0  1.3   0:00.00 /usr/sbin+
  3811 root      20   0  183052    760    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3812 root      20   0  183052    760    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3813 root      20   0  183052    760    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3817 root      20   0  183052    760    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3818 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3819 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3820 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3821 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3822 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3824 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3825 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3826 root      20   0  183048    764    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3829 root      20   0  183048    760    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3833 root      20   0  183048    760    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3834 root      20   0  183048    756    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3837 root      20   0  183048    756    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3839 root      20   0  183048    756    200 S   0.0  0.0   0:00.00 /usr/sbin+
  3864 root      20   0  113284    416    236 S   0.0  0.0   0:00.00 /bin/sh -+
  3866 root      20   0   20164    356    184 S   0.0  0.0   0:00.00 /usr/loca+
  3867 root      20   0  113284    432    252 S   0.0  0.0   0:00.00 /bin/sh -+
  3869 root      20   0   20164    632    380 S   0.0  0.0   0:00.00 jailshell+
  3870 root      20   0   20164    356    184 S   0.0  0.0   0:00.00 /usr/loca+
  3871 root      20   0   20164    360    184 S   0.0  0.0   0:00.00 /usr/loca+
  3872 root      20   0   20164    360    184 S   0.0  0.0   0:00.00 /usr/loca+
  3875 root      20   0   20164    360    184 S   0.0  0.0   0:00.00 /usr/loca+
  3876 root      20   0  113284    428    248 S   0.0  0.0   0:00.00 /bin/sh -+
  3880 root      20   0   20164    616    416 S   0.0  0.0   0:00.00 jailshell+
  3882 root      20   0  113284    432    252 S   0.0  0.0   0:00.00 /bin/sh -+
  3884 root      20   0   20164    500    300 S   0.0  0.0   0:00.00 jailshell+
  3885 root      20   0   20164    500    300 S   0.0  0.0   0:00.00 jailshell+
  3887 root      20   0  113284    432    252 S   0.0  0.0   0:00.00 /bin/sh -+
  3888 root      20   0   20164    356    184 S   0.0  0.0   0:00.00 /usr/loca+
  3892 root      20   0   20164    360    184 S   0.0  0.0   0:00.00 /usr/loca+
  3893 root      20   0   20164    360    184 S   0.0  0.0   0:00.00 /usr/loca+
  3894 root      35  15  113288   1024    836 S   0.0  0.0   0:00.00 /bin/bash+
  3899 root      20   0 1277356  11988    572 S   0.0  0.5   0:00.09 /usr/bin/+
  3900 root      20   0  188216   8872   2928 S   0.0  0.4   0:00.08 /usr/loca+
  3901 root      20   0  108052    408    316 S   0.0  0.0   0:00.00 /usr/bin/+
  3915 root      20   0  113288   1148    932 S   0.0  0.0   0:00.01 /bin/bash+
  3941 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  3946 nigeria   20   0   20164    252      0 S   0.0  0.0   0:00.00 jailshell+
  3954 pactpay   20   0  480124  15600   9808 S   0.0  0.6   0:00.05 /opt/cpan+
  3962 saboakin  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  3973 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  3981 saboakin  20   0  404052  13532   8092 S   0.0  0.6   0:00.03 /opt/cpan+
  3989 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.00 [kworker]
  4014 root      20   0  111304   2744   1720 S   0.0  0.1   0:00.00 sshd: [ac+
  4027 sshd      20   0  115644   2300   1228 S   0.0  0.1   0:00.00 sshd: [ne+
  4037 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  4040 cloudsms  20   0  113284   1200   1024 S   0.0  0.0   0:00.00 /usr/loca+
  4049 cloudsms  20   0  404052  15348  10008 S   0.0  0.6   0:00.02 /opt/cpan+
  4101 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  4113 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [md5sum] +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:57   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/1:1]
root         36  1.2  0.0      0     0 ?        S    03:57   0:01  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:57   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:57   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kauditd]
root        108  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/0:2]
root        237  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/u200:2]
root        249  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [scsi_eh_0]
root        250  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/u200:3]
root        260  0.1  0.0      0     0 ?        S<   03:57   0:00  \_ [kworker/0:1H]
root        265  0.1  0.0      0     0 ?        S<   03:57   0:00  \_ [kworker/1:1H]
root        275  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [ext4-rsv-conver]
root        337  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/1:2]
root        411  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [xprtiod]
root        638  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [kvm-irqfd-clean]
root        670  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [loop0]
root        747  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [jbd2/loop0-8]
root        748  0.0  0.0      0     0 ?        S<   03:57   0:00  \_ [ext4-rsv-conver]
root       2089  0.0  0.0      0     0 ?        S    03:58   0:00  \_ [kworker/1:3]
root       2130  0.0  0.0      0     0 ?        S    03:58   0:00  \_ [kworker/0:3]
root          1  0.6  0.1  44276  3004 ?        Ss   03:57   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.1  0.1  39496  2792 ?        Ss   03:57   0:00 /usr/lib/systemd/systemd-journald
root        387  0.2  0.0  45352   316 ?        Ss   03:57   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   188 ?        S<sl 03:57   0:00 /sbin/auditd
polkitd     479  0.0  0.1 612240  3056 ?        Ssl  03:57   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        480  0.0  0.0  52852   168 ?        Ss   03:57   0:00 /usr/sbin/smartd -n -q never
root        481  0.0  0.0 152780     0 ?        Ss   03:57   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        482  0.0  0.2 224144  5664 ?        Ss   03:57   0:00 queueprocd - waiting up to 60s to process a task
root        486  0.0  0.0  21540   260 ?        Ss   03:57   0:00 /usr/sbin/irqbalance --foreground
dbus        492  0.0  0.0  58724  1368 ?        Ss   03:57   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         495  0.0  0.0  69256   104 ?        Ss   03:57   0:00 /sbin/rpcbind -w
root        498  0.0  0.0   4388   108 ?        Ss   03:57   0:00 /usr/sbin/acpid
root        510  0.0  0.0  24704  1096 ?        Ss   03:57   0:00 /usr/lib/systemd/systemd-logind
nscd        515  0.0  0.0 1371420  868 ?        Ssl  03:57   0:00 /usr/sbin/nscd
root        521  0.0  0.0 195208    12 ?        Ssl  03:57   0:00 /usr/sbin/gssproxy -D
root        552  0.0  0.0 124480   288 ?        Ss   03:57   0:00 /usr/sbin/crond -n
root       3811  0.0  0.0 183052   760 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3887  0.0  0.0 113284   432 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root       3899  4.5  0.4 1277356 11988 ?       Sl   04:00   0:00  |       \_ /usr/bin/update_imunify
root       3812  0.0  0.0 183052   760 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3882  0.0  0.0 113284   432 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root       3896  5.0  0.6 1359140 15040 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root       4117  0.0  0.0 113644   976 ?        S    04:00   0:00  |           \_ awk {print $1}
root       3813  0.0  0.0 183052   760 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3864  0.0  0.0 113284   416 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root       3894  0.0  0.0 113288  1024 ?        SN   04:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root       4106  0.0  0.2 140228  5316 ?        RN   04:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root       3817  0.0  0.0 183052   760 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3876  0.0  0.0 113284   428 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       3901  0.0  0.0 108052   408 ?        S    04:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       3915  0.5  0.0 113288  1148 ?        S    04:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       4118  0.0  0.0 153840  2092 ?        R    04:00   0:00  |               \_ ps auxf
root       3818  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3870  0.0  0.0  20164   356 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       3819  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3872  0.0  0.0  20164   360 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       3820  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3875  0.0  0.0  20164   360 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       3821  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3888  0.0  0.0  20164   356 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       3822  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3866  0.0  0.0  20164   356 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       3824  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3892  0.0  0.0  20164   360 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       3825  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3893  0.0  0.0  20164   360 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       3826  0.0  0.0 183048   764 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3880  0.0  0.0  20164   616 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [4037] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   4037  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   4040  0.0  0.0 113284  1200 ?        S    04:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   4049  2.0  0.6 404052 15348 ?        S    04:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root       3829  0.0  0.0 183048   760 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3871  0.0  0.0  20164   360 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       3833  0.0  0.0 183048   760 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3867  0.0  0.0 113284   432 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       3900  4.0  0.3 188216  8820 ?        S    04:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       4091  0.0  0.0 160224  2372 ?        S    04:00   0:00  |           \_ top -n 2 -b -c
root       3834  0.0  0.0 183048   756 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3885  0.0  0.0  20164   500 ?        Ss   04:00   0:00  |   \_ jailshell (pactpay) [3941] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    3941  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    3954  5.0  0.6 480124 15176 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       3837  0.0  0.0 183048   756 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3869  0.0  0.0  20164   632 ?        Ss   04:00   0:00  |   \_ jailshell (nigeria) [3946] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3946  0.0  0.0  20164   252 ?        S    04:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3978  6.0  0.5 404052 14052 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       3839  0.0  0.0 183048   756 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root       3884  0.0  0.0  20164   500 ?        Ss   04:00   0:00      \_ jailshell (saboakin) [3962] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   3962  0.0  0.0  20164   256 ?        S    04:00   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   3981  3.0  0.5 404052 13532 ?        S    04:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        556  0.0  0.0  24208     0 ?        Ss   03:57   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 114704   104 ttyS0    Ss+  03:57   0:00 /bin/bash
root        580  0.0  0.0 108296   144 tty1     Ss+  03:57   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  90692  3132 ?        Ss   03:57   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   3613  0.0  0.1  91060  3240 ?        S    03:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    910  0.0  0.0  12660    36 ?        Ssl  03:57   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    911  0.1  1.3 5654048 31584 ?       SLsl 03:57   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    913  0.0  0.0  10132    28 ?        Ssl  03:57   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        914  0.0  0.0  51508   208 ?        Ss   03:57   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1046  0.0  0.0  46772   284 ?        S    03:57   0:00  \_ dovecot/pop3-login
dovenull   1047  0.0  0.0  46924   552 ?        S    03:57   0:00  \_ dovecot/imap-login
dovecot    1048  0.0  0.0  10320   264 ?        S    03:57   0:00  \_ dovecot/anvil
root       1049  0.0  0.0  10452   168 ?        S    03:57   0:00  \_ dovecot/log
dovenull   1050  0.0  0.0  46772   216 ?        S    03:57   0:00  \_ dovecot/pop3-login
dovenull   1051  0.0  0.0  46780   112 ?        S    03:57   0:00  \_ dovecot/imap-login
root       1058  0.0  0.0  24396  1528 ?        S    03:57   0:00  \_ dovecot/config
dovecot    1062  0.0  0.0  13568   184 ?        S    03:57   0:00  \_ dovecot/stats
dovecot    1108  0.0  0.0  41056   312 ?        S    03:57   0:00  \_ dovecot/auth
worencom   2209  0.0  0.0  38364   924 ?        S    03:58   0:00  \_ dovecot/imap
systuser    915  0.0  0.0 111864  2080 ?        Ssl  03:57   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
memcach+    916  0.0  0.0 342400     0 ?        Ssl  03:57   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        917  0.0  0.0 153404   272 ?        Ss   03:57   0:00 pure-ftpd (SERVER)
systuser    918  0.0  0.0 113676  2080 ?        Ssl  03:57   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        919  0.0  0.0 572372   468 ?        Ssl  03:57   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    920  0.0  0.3 114016  8832 ?        Ssl  03:57   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        921  0.0  0.0 111304   232 ?        Ss   03:57   0:00 /usr/sbin/sshd -D
root       2795  0.0  0.0 157100  1460 ?        Ss   03:59   0:00  \_ sshd: unknown [priv]
sshd       2796  0.0  0.0 115644  1088 ?        S    03:59   0:00  |   \_ sshd: unknown [net]
root       2868  0.0  0.0 111304  1272 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root       4014  0.0  0.1 111304  2744 ?        Ss   04:00   0:00  \_ sshd: [accepted]
sshd       4027  0.0  0.0 115644  2300 ?        S    04:00   0:00      \_ sshd: [net]
root        922 18.6  0.4 1349832 11528 ?       Ssl  03:57   0:26 /usr/bin/cspdaemon
root        923  0.0  0.1 445028  2620 ?        Ss   03:57   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        925 21.0  0.5 1277056 13912 ?       Ssl  03:57   0:29 /usr/bin/checkstatus
root        931  0.0  0.1 400740  2824 ?        Ss   03:57   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
workflo+   3612  3.6  1.2 497996 29992 ?        S    03:59   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+   3619  3.4  1.2 497704 29980 ?        S    03:59   0:00  \_ php-fpm: pool blog_workflow-management-software_com
nigeria    3622  0.0  0.2 400460  4868 ?        S    03:59   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw     3990 20.0  1.7 437336 42404 ?        D    04:00   0:00  \_ php-fpm: pool cloudware_ng
root        932  9.8 53.2 1689404 1289852 ?     Ssl  03:57   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        939  0.0  0.0 396248   184 ?        Ss   03:57   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        960  0.0  0.0 388892   256 ?        Ss   03:57   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       967  0.2  0.6 1121200 15256 ?       Ssl  03:57   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        970  0.0  0.4 439788 11164 ?        Ss   03:57   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        979  0.0  0.0 389508   376 ?        Ss   03:57   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        981  0.0  0.1 261020  4780 ?        Ss   03:57   0:00 cpsrvd (SSL) - waiting for connections                   
root       3805  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.1 216400  2536 ?        Ssl  03:57   0:00 /usr/sbin/rsyslogd -n
cpanelc+   1000  0.0  0.0   9568  2400 ?        Ss   03:57   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1089  0.0  0.0 157708  2072 ?        S    03:57   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1148  0.2  1.2 412368 30180 ?        Ss   03:57   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1149  0.0  0.4 387528 10656 ?        Ss   03:57   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1165  1.0  0.0  25760   568 ?        Ss   03:57   0:01 spamd-dormant: waiting for connections [5,6] --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5,6
root       1235  0.0  0.0 167452   816 ?        Ss   03:57   0:00 dnsadmin - dormant mode
root       1236  0.1  0.3 208780  8388 ?        Ss   03:57   0:00 tailwatchd
root       1237  0.0  0.0 183900   164 ?        Ss   03:57   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1705  0.0  0.0 299272   376 ?        Ss   03:57   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416   876 ?        SN   03:57   0:00 cpanellogd - sleeping for logs
mysql      1748  1.4  6.7 1457544 162272 ?      Sl   03:57   0:02 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1966  0.0  1.0 266992 26100 ?        Ss   03:57   0:00 /usr/sbin/httpd -k start
root       1968  0.0  0.0  12764   288 ?        S    03:57   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1969  0.0  0.0  12732   304 ?        S    03:57   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1970  0.0  0.0  12768   272 ?        S    03:57   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1973  0.0  0.3  53340  9468 ?        S    03:57   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1974  0.0  1.3 277496 32032 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody     1975  0.0  1.3 277416 32092 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody     1976  0.0  1.3 277388 31692 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody     1978  0.0  1.3 277364 31564 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody     2160  0.0  1.3 277864 32048 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2163  0.0  1.3 277836 32256 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2164  0.0  1.3 277528 31872 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2169  0.0  1.3 277380 31688 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2171  0.0  1.3 277372 31780 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2172  0.0  1.3 277460 31800 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody     3620  0.5  1.3 277188 31608 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody     3804  0.3  1.3 277336 31840 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody     3806  0.0  1.3 277056 33036 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody     3807  0.0  1.2 276920 31204 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
root       1979  0.1  1.1 180932 27600 ?        Ss   03:57   0:00 lfd - sleeping
root       4119  0.0  1.1 180932 26796 ?        R    04:00   0:00  \_ lfd - processing
root       2474  0.0  0.6 222516 15576 ?        S    03:58   0:00 /usr/bin/python3 -m kcarectl.__main__ --smart-update
oysipao+   3973  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+   3989  0.0  0.0   3152   424 ?        S    04:00   0:00  \_ [kworker]
## mysql stats
Uptime: 139  Threads: 6  Questions: 3702  Slow queries: 0  Opens: 290  Flush tables: 1  Open tables: 283  Queries per second avg: 26.633
*************************** 1. row ***************************
     Id: 82
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-19' LIMIT 1
*************************** 2. row ***************************
     Id: 87
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 90
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 96
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.98.21 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.4 TIME_WAIT
      1 43.159.152.187 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.0.66 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 216.218.206.66 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 19-Nov-2025 04:00:03 WAT
   Restart Time: Wednesday, 19-Nov-2025 03:57:52 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 minutes 11 seconds
   Server load: 1.44 1.16 0.48
   Total accesses: 168 - Total Traffic: 2.6 MB - Total Duration: 61293
   CPU Usage: u.39 s.15 cu.2 cs.25 - .756% CPU load
   1.28 requests/sec - 20.0 kB/second - 15.6 kB/request - 364.839 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

R_RWRR_RR_RR_W..................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID    Acc   M CPU  SS Req   Dur  Conn Child Slot     Client     Protocol              VHost                                          Request
   0-0  1974 0/24/24 R 0.14 3  1    6065  0.0  1.08  1.08 102.90.101.3   http/1.1
   1-0  1975 0/16/16 _ 0.18 0  6379 16220 0.0  0.07  0.07 96.30.57.23    http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763521196.07925891876220703125
   2-0  1976 0/17/17 R 0.04 57 61   4268  0.0  0.17  0.17 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue2.php HTTP/1.1
   3-0  3620 0/0/5   W 0.00 1  0    1710  0.0  0.00  0.02 102.90.101.3   http/1.1 cloudware.ng:443                GET / HTTP/1.1
   4-0  1978 0/16/16 R 0.03 58 1    435   0.0  0.29  0.29 102.90.101.3   http/1.1 cloudware.ng:443                GET /wp-content/uploads/2019/08/Cloudware-Air-travel-reservatio
   5-0  2160 0/15/15 R 0.05 57 52   3717  0.0  0.14  0.14 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue1.php HTTP/1.1
   6-0  2163 0/21/21 _ 0.13 0  7008 19921 0.0  0.25  0.25 15.235.98.21   http/1.1 blog.workflow-management-softwa GET /tag/new-sound/feed/ HTTP/1.1
   7-0  2164 0/19/19 R 0.11 37 10   3997  0.0  0.28  0.28 52.205.222.214 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/blog/2019elections/blog/b
   8-0  2169 0/14/14 R 0.08 12 5    461   0.0  0.10  0.10 10.30.9.138    http/1.1 theforge.com.ng:80              GET / HTTP/1.1
   9-0  3804 0/2/3   _ 0.01 0  34   156   0.0  0.02  0.02 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   10-0 2171 0/7/7   R 0.02 53 12   178   0.0  0.07  0.07 54.91.122.193  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/blog/images/blog/blog/polling_un
   11-0 2172 0/10/10 R 0.04 27 9    4106  0.0  0.06  0.06 216.218.206.66 http/1.1
   12-0 3806 0/1/1   _ 0.00 0  27   54    0.0  0.01  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   13-0 3807 0/0/0   W 0.00 0  0    0     0.0  0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 113
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 195 seconds, (range: 170...262)
   index usage: 1%, cache usage: 2%
   total entries stored since starting: 113
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 10 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit