403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.02.45.txt
 ## swap threshold exceeded
## server overview
2025-11-20.02.45 load[1] mem[65/63] mysql[1/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1504         100          51         758         641
Swap:          1999        1361         638
 02:45:01 up  1:50,  0 users,  load average: 1.11, 0.69, 0.71
## system overview
top - 02:45:02 up  1:50,  0 users,  load average: 1.11, 0.69, 0.71
Tasks: 214 total,   4 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.3 us, 38.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   105676 free,  1501988 used,   812636 buff/cache
KiB Swap:  2047996 total,   654332 free,  1393664 used.   696472 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 241164   3524 S  66.7 10.0   2:36.09 /usr/sbin+
 84456 workflo+  20   0  300748  17660  10748 R  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44256   3336   1508 S   6.7  0.1   0:09.34 /usr/lib/+
   267 root       0 -20       0      0      0 S   6.7  0.0   0:00.95 [kworker/+
   359 root      20   0   40244   5456   5132 S   6.7  0.2   0:03.49 /usr/lib/+
 76958 nobody    20   0  277760  19772   4496 S   6.7  0.8   0:00.75 /usr/sbin+
 83266 nobody    20   0  277476  18816   3816 S   6.7  0.8   0:00.03 /usr/sbin+
 84371 nigeria   20   0  404052  16140  10384 S   6.7  0.7   0:00.02 /opt/cpan+
 84407 root      20   0  160224   2372   1636 S   6.7  0.1   0:00.01 top -n 2 +
 84433 cloudw    20   0  353712  15976  10492 S   6.7  0.7   0:00.01 /opt/cpan+
 84440 cloudsms  20   0  404052  15612  10164 S   6.7  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:08.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.20 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.49 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.78 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.82 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.59 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 S   0.0  0.0   0:00.54 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    856    492 S   0.0  0.0   0:00.94 /usr/lib/+
   477 dbus      20   0   58724   1344    624 S   0.0  0.1   0:03.61 /usr/bin/+
   486 rpc       20   0   69256    164     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1164    812 S   0.0  0.0   0:01.59 /usr/lib/+
   499 root      20   0   52852    376    280 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1376    680 S   0.0  0.1   0:04.87 /usr/sbin+
   506 root      20   0  224144   6524    952 S   0.0  0.3   0:00.13 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.14 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.19 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3940    864 S   0.0  0.2   0:00.22 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.75 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.14 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.12 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.14 /usr/bin/+
   927 telegraf  20   0 5654048  38952   5692 S   0.0  1.6   0:03.82 /usr/loca+
   928 systuser  20   0  114016  14820   2648 S   0.0  0.6   0:01.65 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.50 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.25 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  232784   5948   4344 S   0.0  0.2   0:01.75 /usr/sbin+
   935 root      20   0  439788  11416  11208 S   0.0  0.5   0:00.31 php-fpm: +
   936 named     20   0  989260  33396   2284 S   0.0  1.4   0:05.21 /usr/sbin+
   938 root      20   0  261028   7128   2428 S   0.0  0.3   0:00.84 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:01.87 php-fpm: +
   947 root      20   0 1763312 259224    760 S   0.0 10.7   0:14.15 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.70 /usr/sbin+
   972 root      20   0  389508    692    484 S   0.0  0.0   0:00.25 php-fpm: +
   979 cpanelc+  20   0   10480   3280   2316 S   0.0  0.1   0:05.49 /usr/loca+
   982 root      20   0  396248    664    484 S   0.0  0.0   0:00.24 php-fpm: +
   984 root      20   0  388892    620    408 S   0.0  0.0   0:00.23 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.32 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    868    292 S   0.0  0.0   0:00.68 /usr/bin/+
  1116 dovenull  20   0   46912   2052   1428 S   0.0  0.1   0:00.08 dovecot/p+
  1117 dovenull  20   0   47592   2864   1736 S   0.0  0.1   0:00.10 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.02 dovecot/a+
  1119 root      20   0   10452    628    452 S   0.0  0.0   0:00.06 dovecot/l+
  1120 dovenull  20   0   46912   2016   1420 S   0.0  0.1   0:00.12 dovecot/p+
  1121 dovenull  20   0   47336   2792   1820 S   0.0  0.1   0:00.05 dovecot/i+
  1128 root      20   0   24564   2484    520 S   0.0  0.1   0:00.07 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.04 SonarPush+
  1137 dovecot   20   0   13568    688    464 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119764   2872 S   0.0  4.9   0:03.61 /usr/loca+
  1190 dovecot   20   0   41276   1664   1040 S   0.0  0.1   0:00.21 dovecot/a+
  1258 wp-tool+  20   0  412368  32628   1836 S   0.0  1.3   0:02.27 /usr/bin/+
  1259 wp-tool+  20   0  387528  13288   1660 S   0.0  0.5   0:00.15 /usr/bin/+
  1294 root      20   0  167452   4112   2740 S   0.0  0.2   0:00.18 dnsadmin +
  1298 root      20   0  262228  23116   5252 S   0.0  1.0   0:00.36 cpdavd - +
  1300 root      20   0  209492  12124   2252 S   0.0  0.5   0:01.73 tailwatchd
  1692 root      20   0  299272    908    528 S   0.0  0.0   0:00.18 php-fpm: +
  1709 root      38  18  130416   1440    712 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8056    772 S   0.0  0.3   0:00.65 /usr/sbin+
  1945 root      20   0   12840    428    292 S   0.0  0.0   0:00.91 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.79 /usr/loca+
  1947 root      20   0   12864    356    232 S   0.0  0.0   0:00.84 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182096  10772   1192 S   0.0  0.4   0:06.38 lfd - sle+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.11 [kworker]
  7285 root      20   0  265396 129520   2764 S   0.0  5.4   0:01.16 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 57206 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59263 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63882 nobody    20   0  277652  20700   4964 S   0.0  0.9   0:02.50 /usr/sbin+
 67061 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 69368 nobody    20   0  277892  20248   4792 S   0.0  0.8   0:01.95 /usr/sbin+
 69645 nobody    20   0  277708  20648   4724 S   0.0  0.9   0:01.70 /usr/sbin+
 70209 nobody    20   0  277892  20460   4736 S   0.0  0.8   0:01.65 /usr/sbin+
 70225 nobody    20   0  277764  20552   4940 S   0.0  0.8   0:01.72 /usr/sbin+
 70227 nobody    20   0  277760  20304   4640 S   0.0  0.8   0:01.62 /usr/sbin+
 71282 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 71287 nobody    20   0  277652  20280   4820 S   0.0  0.8   0:01.45 /usr/sbin+
 71918 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74225 nobody    20   0  277636  20148   4632 S   0.0  0.8   0:01.13 /usr/sbin+
 74268 nobody    20   0  277764  20344   4812 S   0.0  0.8   0:01.08 /usr/sbin+
 75260 nobody    20   0  277884  19944   4568 S   0.0  0.8   0:00.78 /usr/sbin+
 75461 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76492 nobody    20   0  277892  20208   4564 S   0.0  0.8   0:00.79 /usr/sbin+
 76935 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 77817 nobody    20   0  277704  19848   4380 S   0.0  0.8   0:00.78 /usr/sbin+
 78955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79812 nobody    20   0  277516  19424   4220 S   0.0  0.8   0:00.44 /usr/sbin+
 80017 nobody    20   0  277764  19380   4212 S   0.0  0.8   0:00.32 /usr/sbin+
 80030 nobody    20   0  277764  19780   4292 S   0.0  0.8   0:00.42 /usr/sbin+
 80045 nobody    20   0  277768  19740   4240 S   0.0  0.8   0:00.39 /usr/sbin+
 81092 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82692 wp-tool+  20   0  433492  77732  16936 S   0.0  3.2   0:01.05 /usr/bin/+
 82748 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 82771 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 82884 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 83158 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83599 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 83780 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 83973 healtho+  20   0  460640  67424   4220 S   0.0  2.8   0:02.68 php-fpm: +
 84123 agradio   20   0  420760  37992   4092 S   0.0  1.6   0:00.37 php-fpm: +
 84226 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 84271 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84274 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84275 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84276 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84277 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84278 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84279 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84280 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84281 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84282 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84284 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84285 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84286 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84288 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84290 nigeria   20   0  400460   5176   2188 S   0.0  0.2   0:00.00 php-fpm: +
 84301 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 84303 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 84304 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 84306 root      20   0  114256   2428   1280 S   0.0  0.1   0:00.00 bash /usr+
 84307 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 84314 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 84315 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 84316 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84317 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84318 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84319 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 84320 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 84321 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84322 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84325 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84327 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84328 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84336 root      20   0  188224  11108   5152 S   0.0  0.5   0:00.01 /usr/loca+
 84361 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 84366 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 84372 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 84385 pactpay   20   0  480124  17316  11580 S   0.0  0.7   0:00.01 /opt/cpan+
 84414 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 84416 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 84438 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 84449 wp-tool+  20   0    8632    652    536 S   0.0  0.0   0:00.00 timeout 6+
 84450 workflo+  20   0  752836   2028   1388 S   0.0  0.1   0:00.00 /usr/loca+
 84455 workflo+  20   0    8632    648    536 S   0.0  0.0   0:00.00 /usr/bin/+
 84457 root      20   0  117036    948    800 R   0.0  0.0   0:00.00 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      57206  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/u200:2]
root      59263  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:1]
root      67061  0.0  0.0      0     0 ?        S    02:22   0:00  \_ [kworker/1:5]
root      71282  0.0  0.0      0     0 ?        D    02:28   0:00  \_ [kworker/1:1]
root      71918  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/0:4]
root      75461  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:0]
root      76935  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/1:0]
root      78955  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:3]
root      81092  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:2]
root      83158  0.0  0.0      0     0 ?        D    02:44   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1  44256  3336 ?        Ss   00:54   0:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  5456 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   856 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Ss   00:54   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   164 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1164 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   376 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1376 ?        Ssl  00:54   0:04 /usr/sbin/nscd
root        506  0.0  0.2 224144  6524 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      84271  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [crond] <defunct>
root      84274  0.0  0.0 183048  2156 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84301  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      84304  0.0  0.0 108052   360 ?        S    02:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      84307  0.0  0.0 113288  1520 ?        S    02:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      84458  0.0  0.0 153840  2100 ?        R    02:45   0:00  |               \_ ps auxf
root      84275  0.0  0.0 183048  2160 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84322  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      84276  0.0  0.0 183048  2160 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84328  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      84277  0.0  0.0 183048  2160 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84316  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      84278  0.0  0.0 183048  2160 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84320  0.0  0.0  20164   984 ?        Ss   02:45   0:00  |   \_ jailshell (cloudsms) [84414] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  84414  0.0  0.0  20164   256 ?        S    02:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  84438  0.0  0.0 113284  1212 ?        S    02:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  84440  1.0  0.6 404052 15612 ?        S    02:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      84279  0.0  0.0 183048  2160 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84325  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      84280  0.0  0.0 183048  2156 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84318  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      84281  0.0  0.0 183048  2156 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84317  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      84282  0.0  0.0 183048  2156 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84321  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      84284  0.0  0.0 183048  2152 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84327  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      84285  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84315  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      84336  1.0  0.4 188224 11108 ?        S    02:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      84407  1.0  0.0 160224  2372 ?        S    02:45   0:00  |           \_ top -n 2 -b -c
root      84286  0.0  0.0 183048  2152 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84314  0.0  0.0  20164   964 ?        Ss   02:45   0:00  |   \_ jailshell (pactpay) [84372] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   84372  0.0  0.0  20164   256 ?        S    02:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   84385  2.0  0.7 480124 17688 ?        S    02:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      84288  0.0  0.0 183048  2152 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      84319  0.0  0.0  20164   968 ?        Ss   02:45   0:00      \_ jailshell (nigeria) [84361] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   84361  0.0  0.0  20164   260 ?        S    02:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   84371  3.0  0.6 404052 16140 ?        S    02:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3940 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  2052 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  2864 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   628 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  2016 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  2792 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.1  24564  2484 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   688 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1664 ?        S    00:54   0:00  \_ dovecot/auth
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 38952 ?       SLsl 00:54   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14820 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.4  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.3  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 232784  5948 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11416 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.3 989260 33396 ?        Ssl  00:54   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  7128 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      84226  0.0  0.0      0     0 ?        Z    02:44   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  83973 22.3  2.7 460640 67424 ?        S    02:44   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   84290  0.0  0.2 400460  5176 ?        S    02:45   0:00  \_ php-fpm: pool nigeriadecide_org
root        947  0.2 10.7 1763312 259224 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      82748  0.0  0.1 111304  4260 ?        Ss   02:44   0:00  \_ sshd: [accepted]
sshd      82771  0.0  0.1 115644  2628 ?        S    02:44   0:00  |   \_ sshd: [net]
root      82884  0.0  0.1 111304  4264 ?        Ss   02:44   0:00  \_ sshd: [accepted]
root      83780  0.0  0.1 111304  4268 ?        Ss   02:44   0:00  \_ sshd: [accepted]
root        972  0.0  0.0 389508   692 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio   84123  9.2  1.5 420760 37992 ?        S    02:44   0:00  \_ php-fpm: pool agradio_ng
cpanelc+    979  0.0  0.1  10480  3280 ?        Ss   00:54   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   664 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   620 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  83599  0.0  0.0 445028   320 ?        S    02:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   868 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119764 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 129520 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32628 ?        Ss   00:54   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13288 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+  82692  2.2  3.2 433492 77732 ?        S    02:44   0:01  \_ /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/instances-auto-update.php
wp-tool+  84449  0.0  0.0   8632   652 ?        S    02:45   0:00      \_ timeout 60 /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user workflowmanageme -operation run-wp-cli -work-dir /home/workflowmanageme/blog.workflow-management-software.com -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- wpt-cron event reschedule wp_maybe_auto_update +2 day
workflo+  84450  0.0  0.0 752836  2028 ?        Sl   02:45   0:00          \_ /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user workflowmanageme -operation run-wp-cli -work-dir /home/workflowmanageme/blog.workflow-management-software.com -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- wpt-cron event reschedule wp_maybe_auto_update +2 day
workflo+  84455  0.0  0.0   8632   648 ?        S    02:45   0:00              \_ /usr/bin/timeout 60 /usr/local/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/workflowmanageme/blog.workflow-management-software.com wpt-cron event reschedule wp_maybe_auto_update +2 day
workflo+  84456  0.0  1.0 307072 24784 ?        R    02:45   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/workflowmanageme/blog.workflow-management-software.com wpt-cron event reschedule wp_maybe_auto_update +2 day
root       1294  0.0  0.1 167452  4112 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.9 262228 23116 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.5 209492 12124 ?        Ss   00:54   0:01 tailwatchd
root       1692  0.0  0.0 299272   908 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1440 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.3  9.9 1462280 241164 ?      Sl   00:54   2:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8056 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12840   428 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12864   356 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    63882  0.1  0.8 277652 20700 ?        S    02:17   0:02  \_ /usr/sbin/httpd -k start
nobody    69368  0.1  0.8 277892 20248 ?        S    02:25   0:01  \_ /usr/sbin/httpd -k start
nobody    69645  0.1  0.8 277708 20648 ?        S    02:25   0:01  \_ /usr/sbin/httpd -k start
cloudw    84366  1.0  0.6 353712 16244 ?        S    02:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70209  0.1  0.8 277892 20460 ?        S    02:26   0:01  \_ /usr/sbin/httpd -k start
nobody    70225  0.1  0.8 277764 20552 ?        S    02:26   0:01  \_ /usr/sbin/httpd -k start
nobody    70227  0.1  0.8 277760 20304 ?        S    02:26   0:01  \_ /usr/sbin/httpd -k start
nobody    71287  0.1  0.8 277652 20280 ?        S    02:28   0:01  \_ /usr/sbin/httpd -k start
nobody    74225  0.1  0.8 277636 20148 ?        S    02:32   0:01  \_ /usr/sbin/httpd -k start
nobody    74268  0.1  0.8 277764 20344 ?        S    02:32   0:01  \_ /usr/sbin/httpd -k start
nobody    75260  0.1  0.8 277884 19944 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
nobody    76492  0.1  0.8 277892 20208 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    76958  0.1  0.8 277760 19772 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    77817  0.1  0.8 277704 19848 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    79812  0.1  0.8 277516 19424 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    80017  0.1  0.8 277764 19380 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    80030  0.1  0.8 277764 19780 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    80045  0.1  0.8 277768 19740 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    83266  0.1  0.7 277476 18816 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    84433  1.0  0.6 353712 15976 ?        S    02:45   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
root       2017  0.0  0.4 182096 10772 ?        Ss   00:54   0:06 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 6645  Threads: 6  Questions: 1208767  Slow queries: 0  Opens: 3740  Flush tables: 1  Open tables: 2000  Queries per second avg: 181.906
*************************** 1. row ***************************
     Id: 18287
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 18289
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 3. row ***************************
     Id: 18290
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 18291
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 18292
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 18294
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 114.119.134.79 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 114.119.159.134 TIME_WAIT
      1 148.113.128.205 TIME_WAIT
      1 162.142.125.205 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.219.80.71 TIME_WAIT
      1 34.196.237.236 TIME_WAIT
      1 34.225.138.57 TIME_WAIT
      1 52.167.144.141 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     17 198.98.53.110 TIME_WAIT
     35 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 02:45:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 50 minutes 38 seconds
   Server load: 1.11 0.69 0.71
   Total accesses: 40764 - Total Traffic: 861.4 MB - Total Duration: 23898174
   CPU Usage: u14.47 s5.67 cu421.11 cs314.55 - 11.4% CPU load
   6.14 requests/sec - 132.9 kB/second - 21.6 kB/request - 586.257 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K_WKKKK.K_R.WK_WK.K...W._.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  71287 5/344/1999 K 5.63 0    264 1110944 153.4 6.37  38.30 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2329275
   1-0  76958 0/151/1769 _ 3.38 0    412 1044415 0.0   3.21  38.29 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=3868443196 HTTP/1.1
   2-0  83266 0/6/1723   W 0.06 0    0   983755  0.0   0.14  40.96 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=2767110031 HTTP/1.1
   3-0  76492 1/151/1905 K 3.57 0    358 1110882 35.3  3.38  46.78 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1097084519 HTTP/1.1
   4-0  79812 1/94/1661  K 1.58 0    0   1204517 5.7   1.79  34.97 216.73.216.208 http/1.1 nigeriadecide.org:443      GET /robots.txt HTTP/1.1
   5-0  77817 4/136/1823 K 3.49 1    267 1025893 124.1 3.66  37.54 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=2756617056 HTTP/1.1
   6-0  80017 4/62/1753  K 1.21 3    313 1033971 122.0 1.33  39.35 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=1365042545 HTTP/1.1
   7-0  -     0/0/1579   . 0.00 265  0   859306  0.0   0.00  31.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  74225 5/219/1701 K 4.83 0    394 985129  154.6 4.88  35.06 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=4214717305 HTTP/1.1
   9-0  63882 0/478/1713 _ 9.78 0    0   994024  0.0   10.95 34.71 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   10-0 69368 0/348/1572 R 8.01 2    345 918404  0.0   8.73  33.89 157.15.40.56   http/1.1 health.oyostate.gov.ng:443
   11-0 -     0/0/1700   . 0.00 69   0   1001459 0.0   0.00  37.20 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 74268 0/204/1643 W 4.47 0    0   989745  0.0   7.14  38.75 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=4262828550 HTTP/1.1
   13-0 69645 1/308/1351 K 6.82 0    449 774016  35.0  7.30  28.48 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=604308000 HTTP/1.1
   14-0 80030 0/81/1005  _ 1.97 0    0   569570  0.0   1.82  21.71 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 75260 2/155/1224 W 3.19 0    0   701295  66.8  3.27  21.74 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=1551989280 HTTP/1.1
   16-0 80045 2/77/945   K 1.44 2    300 553449  63.8  1.64  19.69 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=1792694159 HTTP/1.1
   17-0 -     0/0/1158   . 0.00 5    0   658560  0.0   0.00  23.56 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 70209 1/315/1222 K 6.75 0    0   657585  0.8   7.00  24.10 216.73.216.208 http/1.1 nigeriadecide.org:80       GET /robots.txt HTTP/1.1
   19-0 -     0/0/1039   . 0.00 1095 0   609243  0.0   0.00  19.76 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/567    . 0.00 1086 0   318547  0.0   0.00  11.65 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/454    . 0.00 666  0   276672  0.0   0.00  10.32 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 70225 0/497/1108 W 6.19 0    0   622305  0.0   7.67  24.07 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   23-0 -     0/0/1080   . 0.00 1091 0   687318  0.0   0.00  27.87 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 70227 0/308/773  _ 6.69 0    324 404228  0.0   7.14  15.58 45.128.233.90  http/1.1 agradio.ng:443             POST / HTTP/1.1
   25-0 -     0/0/821    . 0.00 1092 0   505859  0.0   0.00  15.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/832    . 0.00 2013 0   485890  0.0   0.00  18.88 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/89     . 0.00 2079 0   74215   0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/685    . 0.00 1013 0   405554  0.0   0.00  13.72 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/406    . 0.00 3540 0   261299  0.0   0.00  5.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/466    . 0.00 2756 0   294580  0.0   0.00  9.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/140    . 0.00 3543 0   78134   0.0   0.00  2.41  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/847    . 0.00 2601 0   527852  0.0   0.00  15.35 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/825    . 0.00 1493 0   461448  0.0   0.00  18.37 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/205    . 0.00 3542 0   134815  0.0   0.00  4.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/157    . 0.00 3546 0   115547  0.0   0.00  4.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/466    . 0.00 3453 0   274598  0.0   0.00  9.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/22     . 0.00 3545 0   10578   0.0   0.00  0.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/23     . 0.00 3479 0   11684   0.0   0.00  0.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00 3480 0   15119   0.0   0.00  0.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/4      . 0.00 3769 0   1340    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/115    . 0.00 3263 0   65290   0.0   0.00  3.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 3777 0   7       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/7      . 0.00 3753 0   2574    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00 3767 0   1141    0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 3776 0   60      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/4      . 0.00 3768 0   244     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/147    . 0.00 3222 0   75011   0.0   0.00  3.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/3      . 0.00 3770 0   77      0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1000
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...30)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 21380
   total entries replaced since starting: 0
   total entries expired since starting: 20365
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 83 miss
   total removes since starting: 15 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit