403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.02.54.txt
 ## swap threshold exceeded
## server overview
2025-11-20.02.54 load[1] mem[66/64] mysql[1/10] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1435         145          51         782         690
Swap:          1999        1381         618
 02:54:01 up  1:59,  0 users,  load average: 1.37, 0.93, 0.79
## system overview
top - 02:54:01 up  1:59,  0 users,  load average: 1.37, 0.93, 0.79
Tasks: 225 total,   5 running, 220 sleeping,   0 stopped,   0 zombie
%Cpu(s): 57.6 us, 39.4 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   111540 free,  1507328 used,   801432 buff/cache
KiB Swap:  2047996 total,   633596 free,  1414400 used.   670308 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 241132   2824 S  26.7 10.0   2:45.73 /usr/sbin+
 93591 cpanell+  20   0  156516  10680   3520 R  13.3  0.4   0:00.02 /usr/loca+
   410 root      16  -4   55532    496    368 S   6.7  0.0   0:00.60 /sbin/aud+
   933 root      20   0  232784   7328   5704 S   6.7  0.3   0:01.91 /usr/sbin+
 93584 pactpay   20   0  479860  16172  10576 R   6.7  0.7   0:00.01 /opt/cpan+
 93587 nigeria   20   0  404052  16140  10384 S   6.7  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44256   3348   1520 S   0.0  0.1   0:10.12 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.81 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:08.71 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.61 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:10.50 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.88 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.03 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.63 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   6988   6664 S   0.0  0.3   0:03.83 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    852    488 S   0.0  0.0   0:01.04 /usr/lib/+
   477 dbus      20   0   58724   1344    624 S   0.0  0.1   0:04.00 /usr/bin/+
   486 rpc       20   0   69256    164     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1164    812 R   0.0  0.0   0:01.76 /usr/lib/+
   499 root      20   0   52852    376    280 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    124     80 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1372    676 S   0.0  0.1   0:05.37 /usr/sbin+
   506 root      20   0  224144   6536    964 S   0.0  0.3   0:00.15 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.16 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.20 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3768    692 S   0.0  0.2   0:00.22 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:03.32 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.15 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.13 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.15 /usr/bin/+
   927 telegraf  20   0 5654048  36908   3960 S   0.0  1.5   0:04.11 /usr/loca+
   928 systuser  20   0  114016  14648   2396 S   0.0  0.6   0:01.77 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.50 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.26 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   935 root      20   0  439788  11412  11204 S   0.0  0.5   0:00.32 php-fpm: +
   936 named     20   0  989260  33416   1992 S   0.0  1.4   0:05.60 /usr/sbin+
   938 root      20   0  261028   6488   1732 S   0.0  0.3   0:01.12 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:01.95 php-fpm: +
   947 root      20   0 1763312 238380    700 S   0.0  9.8   0:14.15 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.79 /usr/sbin+
   972 root      20   0  389508    640    432 S   0.0  0.0   0:00.27 php-fpm: +
   979 cpanelc+  20   0   10480   3280   2316 S   0.0  0.1   0:05.98 /usr/loca+
   982 root      20   0  396248    660    480 S   0.0  0.0   0:00.24 php-fpm: +
   984 root      20   0  388892    616    404 S   0.0  0.0   0:00.24 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.34 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    864    288 S   0.0  0.0   0:00.73 /usr/bin/+
  1116 dovenull  20   0   46912   1860   1236 S   0.0  0.1   0:00.08 dovecot/p+
  1117 dovenull  20   0   47592   2536   1408 S   0.0  0.1   0:00.10 dovecot/i+
  1118 dovecot   20   0   10320    472    352 S   0.0  0.0   0:00.02 dovecot/a+
  1119 root      20   0   10452    624    448 S   0.0  0.0   0:00.08 dovecot/l+
  1120 dovenull  20   0   46912   2344   1736 S   0.0  0.1   0:00.12 dovecot/p+
  1121 dovenull  20   0   47336   2832   1740 S   0.0  0.1   0:00.06 dovecot/i+
  1128 root      20   0   24564   2392    428 S   0.0  0.1   0:00.07 dovecot/c+
  1133 systuser  20   0  157708   2920    872 S   0.0  0.1   0:00.05 SonarPush+
  1137 dovecot   20   0   13568    644    420 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119696   2804 S   0.0  4.9   0:03.67 /usr/loca+
  1190 dovecot   20   0   41276   1636   1012 S   0.0  0.1   0:00.22 dovecot/a+
  1258 wp-tool+  20   0  412368  32280   1488 S   0.0  1.3   0:02.44 /usr/bin/+
  1259 wp-tool+  20   0  387528  13052   1424 S   0.0  0.5   0:00.15 /usr/bin/+
  1294 root      20   0  167452   3204   1832 S   0.0  0.1   0:00.19 dnsadmin +
  1298 root      20   0  262228  24616   6760 S   0.0  1.0   0:00.73 cpdavd - +
  1300 root      20   0  209492  11240   1368 S   0.0  0.5   0:01.76 tailwatchd
  1692 root      20   0  299272    852    472 S   0.0  0.0   0:00.19 php-fpm: +
  1709 root      38  18  130416   1436    708 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8052    768 S   0.0  0.3   0:00.72 /usr/sbin+
  1945 root      20   0   12792    428    292 S   0.0  0.0   0:00.99 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.86 /usr/loca+
  1947 root      20   0   12816    356    232 S   0.0  0.0   0:00.92 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182096  10840   1188 S   0.0  0.4   0:06.88 lfd - sle+
  6622 root      20   0  183052   1624   1056 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    516     24 S   0.0  0.0   0:00.12 [kworker]
  7285 root      20   0  265396 128684   1820 S   0.0  5.3   0:01.21 spamd chi+
  7286 root      20   0  248320 117500    644 S   0.0  4.9   0:00.00 spamd chi+
 57206 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 59263 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63882 nobody    20   0  277672  20780   4996 S   0.0  0.9   0:03.25 /usr/sbin+
 70227 nobody    20   0  277696  20832   4868 S   0.0  0.9   0:02.55 /usr/sbin+
 71282 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 71918 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75461 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76935 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 78955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80030 nobody    20   0  277636  20356   4784 S   0.0  0.8   0:01.38 /usr/sbin+
 81092 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83158 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 84674 nobody    20   0  277708  20384   4540 S   0.0  0.8   0:00.67 /usr/sbin+
 86456 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 86501 nobody    20   0  277900  20096   4592 S   0.0  0.8   0:00.57 /usr/sbin+
 87171 nobody    20   0  277600  19832   4360 S   0.0  0.8   0:00.70 /usr/sbin+
 87208 nobody    20   0  277756  19724   4256 S   0.0  0.8   0:00.55 /usr/sbin+
 87260 nobody    20   0  277528  19580   4268 S   0.0  0.8   0:00.67 /usr/sbin+
 87262 nobody    20   0  277872  19852   4388 S   0.0  0.8   0:00.59 /usr/sbin+
 87263 nobody    20   0  277636  19688   4320 S   0.0  0.8   0:00.62 /usr/sbin+
 87860 nobody    20   0  277868  19928   4476 S   0.0  0.8   0:00.55 /usr/sbin+
 87973 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88700 nobody    20   0  277768  19860   4300 S   0.0  0.8   0:00.37 /usr/sbin+
 89097 nobody    20   0  277836  20044   4404 S   0.0  0.8   0:00.49 /usr/sbin+
 89243 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 90007 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90441 nobody    20   0  277528  19484   4240 S   0.0  0.8   0:00.32 /usr/sbin+
 90569 nobody    20   0  277760  19508   4060 S   0.0  0.8   0:00.21 /usr/sbin+
 90591 nobody    20   0  277772  19740   4236 S   0.0  0.8   0:00.18 /usr/sbin+
 90592 nobody    20   0  277764  19564   4080 S   0.0  0.8   0:00.23 /usr/sbin+
 91538 nobody    20   0  277904  19608   4164 S   0.0  0.8   0:00.22 /usr/sbin+
 91639 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 91774 nobody    20   0  277892  19280   3896 S   0.0  0.8   0:00.12 /usr/sbin+
 91819 nobody    20   0  277900  19648   4168 S   0.0  0.8   0:00.13 /usr/sbin+
 91866 nobody    20   0  277760  19488   4016 S   0.0  0.8   0:00.14 /usr/sbin+
 92784 nobody    20   0  277908  19140   3804 S   0.0  0.8   0:00.11 /usr/sbin+
 92819 nobody    20   0  277760  18256   3244 S   0.0  0.8   0:00.18 /usr/sbin+
 92875 healtho+  20   0  462688  69520   4236 S   0.0  2.9   0:05.58 php-fpm: +
 92929 healtho+  20   0  465900  73248   4328 S   0.0  3.0   0:05.23 php-fpm: +
 93032 nigeria   20   0  401648   9592   4060 S   0.0  0.4   0:00.60 php-fpm: +
 93062 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 93097 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 93314 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 93463 root      20   0  157100   4888   3608 S   0.0  0.2   0:00.00 sshd: unk+
 93464 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 93467 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 93473 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 93476 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 93480 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 93483 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 93507 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 93508 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 93509 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 93511 nigeria   20   0  400460   2904    572 S   0.0  0.1   0:00.00 php-fpm: +
 93512 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 93514 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93515 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93516 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93517 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93518 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93519 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93520 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93521 root      20   0  183044   2216   1636 S   0.0  0.1   0:00.00 /usr/sbin+
 93522 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93523 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93524 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93525 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93526 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93527 root      20   0  183044   2212   1636 S   0.0  0.1   0:00.00 /usr/sbin+
 93528 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93529 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93530 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 93531 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 93532 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 93554 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 93555 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93556 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93557 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 93559 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93560 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93561 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93562 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93563 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93565 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93566 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 93567 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93568 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 93569 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 93577 saboakin  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 93581 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 93585 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 93588 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 93589 root      20   0  261504  11816   2824 S   0.0  0.5   0:00.00 webmaild +
 93590 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 93592 cloudsms  20   0  404052  15876  10224 S   0.0  0.7   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:03  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      57206  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/u200:2]
root      59263  0.0  0.0      0     0 ?        D    02:11   0:00  \_ [kworker/0:1]
root      71282  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/1:1]
root      71918  0.0  0.0      0     0 ?        D    02:29   0:00  \_ [kworker/0:4]
root      75461  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:0]
root      76935  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/1:0]
root      78955  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:3]
root      81092  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:2]
root      83158  0.0  0.0      0     0 ?        D    02:44   0:00  \_ [kworker/u200:1]
root      86456  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:3]
root      87973  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/0:2]
root      89243  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/1:4]
root      90007  0.0  0.0      0     0 ?        D    02:50   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44256  3348 ?        Ss   00:54   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  6988 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   852 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Rs   00:54   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   164 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1164 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   376 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   124 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1372 ?        Ssl  00:54   0:05 /usr/sbin/nscd
root        506  0.0  0.2 224144  6536 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1624 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      93514  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93530  0.0  0.0 113284  1212 ?        Ss   02:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      93531  0.0  0.0 108052   356 ?        S    02:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      93532  0.0  0.0 113288  1520 ?        S    02:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      93594  0.0  0.0 153840  2100 ?        R    02:54   0:00  |               \_ ps auxf
root      93515  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93565  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      93516  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93561  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      93517  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93562  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      93518  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93567  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      93519  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93560  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      93520  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93555  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      93522  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93559  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      93523  0.0  0.0 183048  2152 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93568  0.0  0.0  20164   960 ?        Ss   02:54   0:00  |   \_ jailshell (cloudsms) [93588] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  93588  0.0  0.0      0     0 ?        D    02:54   0:00  |       \_ [jailshell]
root      93524  0.0  0.0 183048  2152 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93563  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      93525  0.0  0.0 183048  2152 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93556  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      93526  0.0  0.0 183048  2152 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93569  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (pactpay) [93581] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93581  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93584  0.0  0.6 479860 16172 ?        Sl   02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      93528  0.0  0.0 183048  2152 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      93566  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (nigeria) [93585] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93585  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93587  0.0  0.6 404052 16140 ?        S    02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      93529  0.0  0.0 183044  2212 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3768 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  1860 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  2536 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   472 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   624 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  2344 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  2832 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24564  2392 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   644 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1636 ?        S    00:54   0:00  \_ dovecot/auth
root      91639  0.0  0.1  60820  4508 ?        S    02:52   0:00  \_ dovecot/lmtp
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.5 5654048 36908 ?       SLsl 00:54   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14648 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.4  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.3  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.3 232784  7328 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11412 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.3 989260 33416 ?        Ssl  00:54   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  6488 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root      93589  0.0  0.4 261504 11816 ?        S    02:54   0:00  \_ webmaild - serving 127.0.0.1
cpanell+  93591  0.0  0.5 158056 12232 ?        R    02:54   0:00      \_ /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale  docroot /usr/local/cpanel/base
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  92875 10.9  2.8 462688 69520 ?        S    02:53   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  92929 11.3  3.0 465900 73248 ?        S    02:53   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   93032  1.5  0.3 401648  9592 ?        S    02:53   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   93511  0.0  0.1 400460  2904 ?        S    02:54   0:00  \_ php-fpm: pool nigeriadecide_org
root        947  0.1  9.8 1763312 238380 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      93062  0.0  0.1 111304  4272 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      93097  0.0  0.1 115644  2632 ?        S    02:53   0:00  |   \_ sshd: [net]
root      93314  0.0  0.1 111304  4268 ?        Ss   02:53   0:00  \_ sshd: [accepted]
root      93463  0.0  0.2 157100  4888 ?        Ss   02:53   0:00  \_ sshd: unknown [priv]
sshd      93473  0.0  0.1 115644  2628 ?        S    02:53   0:00  |   \_ sshd: unknown [net]
root      93464  0.0  0.1 111304  4268 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      93483  0.0  0.1 115644  2628 ?        S    02:53   0:00  |   \_ sshd: [net]
root      93467  0.0  0.1 111304  4268 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      93476  0.0  0.1 115644  2632 ?        S    02:53   0:00  |   \_ sshd: [net]
root      93507  0.0  0.1 111304  4260 ?        Ss   02:54   0:00  \_ sshd: [accepted]
sshd      93508  0.0  0.1 115644  2632 ?        S    02:54   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   640 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10480  3280 ?        Ss   00:54   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   660 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   616 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  93480  0.0  0.0 445028   320 ?        S    02:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   864 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2920 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119696 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 128684 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117500 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32280 ?        Ss   00:54   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13052 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  3204 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  1.0 262228 24616 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.4 209492 11240 ?        Ss   00:54   0:01 tailwatchd
root       1692  0.0  0.0 299272   852 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1436 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.3  9.9 1462280 241132 ?      Sl   00:54   2:45 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8052 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12792   428 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12816   356 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    63882  0.1  0.8 277672 20780 ?        S    02:17   0:03  \_ /usr/sbin/httpd -k start
nobody    70227  0.1  0.8 277696 20832 ?        S    02:26   0:02  \_ /usr/sbin/httpd -k start
nobody    80030  0.1  0.8 277636 20356 ?        S    02:40   0:01  \_ /usr/sbin/httpd -k start
nobody    84674  0.1  0.8 277708 20384 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    86501  0.1  0.8 277900 20096 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
cloudw    93509  0.0  0.6 353712 15976 ?        R    02:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    87171  0.1  0.8 277600 19832 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87208  0.1  0.8 277756 19724 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87260  0.1  0.8 277528 19580 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87262  0.1  0.8 277872 19852 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87263  0.1  0.8 277636 19688 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87860  0.1  0.8 277868 19928 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    88700  0.1  0.8 277768 19860 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    89097  0.1  0.8 277836 20044 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    90441  0.1  0.8 277528 19484 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    93512  0.0  0.6 353712 15972 ?        S    02:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    90569  0.1  0.8 277760 19508 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    90591  0.0  0.8 277772 19740 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    90592  0.1  0.8 277764 19564 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    91538  0.1  0.8 277904 19608 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    91774  0.1  0.7 277892 19280 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    91819  0.1  0.8 277900 19648 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    91866  0.1  0.8 277760 19488 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    92784  0.1  0.7 277908 19140 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    92819  0.3  0.7 277760 18256 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 182096 10840 ?        Ss   00:54   0:06 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   516 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 7184  Threads: 3  Questions: 1269411  Slow queries: 0  Opens: 4006  Flush tables: 1  Open tables: 2000  Queries per second avg: 176.699
*************************** 1. row ***************************
     Id: 19349
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 19353
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 19356
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.23.209.155 TIME_WAIT
      1 104.23.211.107 TIME_WAIT
      1 104.23.211.187 TIME_WAIT
      1 104.23.213.68 TIME_WAIT
      1 113.179.225.213 TIME_WAIT
      1 114.119.132.202 TIME_WAIT
      1 148.113.130.225 TIME_WAIT
      1 154.13.222.126 TIME_WAIT
      1 172.70.135.207 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 18.214.251.19 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 193.23.205.124 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.206.193.60 TIME_WAIT
      1 44.213.36.21 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 74.7.228.23 TIME_WAIT
      1 84.37.220.70 TIME_WAIT
      1 84.37.24.125 TIME_WAIT
      1 85.254.174.189 TIME_WAIT
      2 104.23.211.186 TIME_WAIT
      3 10.30.9.122 TIME_WAIT
      3 10.30.9.138 TIME_WAIT
      4 127.0.0.1 TIME_WAIT
     45 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 02:54:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 59 minutes 38 seconds
   Server load: 1.37 0.93 0.79
   Total accesses: 45100 - Total Traffic: 935.8 MB - Total Duration: 26036436
   CPU Usage: u10.84 s4.69 cu468.91 cs349.8 - 11.6% CPU load
   6.28 requests/sec - 133.5 kB/second - 21.2 kB/request - 577.305 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KKK_KKWWKW___KWK...K.K.._.K..K._W...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client     Protocol              VHost                                          Request
   0-0  89097 3/103/2194  K 2.12  1    353 1184407 96.4  2.13  41.23 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=1829123498 HTTP/1.1
   1-0  90441 5/63/1948   K 1.75  0    399 1118406 157.4 1.41  41.06 192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=541492572 HTTP/1.1
   2-0  91538 2/45/1913   K 1.41  2    409 1067216 65.3  0.92  44.37 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=707850191 HTTP/1.1
   3-0  90569 0/131/2113  _ 0.88  0    10  1165646 0.0   0.66  49.23 23.226.213.108 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Kano&lga=Ungogo&ward=Bachi
   4-0  86501 3/208/1871  K 1.99  0    372 1256508 93.8  2.28  37.28 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=576042239 HTTP/1.1
   5-0  90591 1/42/1963   K 0.64  3    10  1081037 10.3  3.05  41.76 23.27.76.151   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Kano&lga=Ajingi&ward=Ajing
   6-0  90592 0/48/1918   W 1.15  0    0   1097137 0.0   0.96  41.69 157.15.40.56   http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   7-0  91774 0/68/1705   W 0.40  0    0   1012742 0.0   1.18  33.47 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   8-0  91819 1/30/1832   K 0.68  0    296 1033358 36.2  0.53  36.64 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=1342152254 HTTP/1.1
   9-0  63882 1/636/1871  W 12.88 0    0   1066937 34.9  14.27 38.03 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=3604954442 HTTP/1.1
   10-0 91866 0/40/1666   _ 0.44  0    347 960338  0.0   0.55  35.77 157.15.40.56   http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   11-0 84674 0/156/1856  _ 2.41  1    6   1191197 0.0   4.34  41.55 31.56.252.149  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Delta&lga=Udu&ward=Udu%20%
   12-0 87860 0/102/1801  _ 2.19  0    273 1075334 0.0   2.45  42.70 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=1758660372 HTTP/1.1
   13-0 92784 27/44/1459  K 0.37  0    7   802124  28.2  0.41  29.25 20.1.205.87    http/1.1 proxy-subdomains-vhost.localhos GET /radio.php HTTP/1.1
   14-0 80030 0/376/1300  W 6.13  6    0   655187  0.0   5.33  25.21 36.22.193.64   http/1.1 oysipa.oyostate.gov.ng:443      GET /admin/uploads/INVEST-IN-SOLID-MINERALS-AND-MINING.pdf HTTP
   15-0 92819 8/27/1374   K 0.76  2    367 767905  243.3 0.81  24.49 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=503141829 HTTP/1.1
   16-0 -     0/0/1002    . 0.00  332  0   578412  0.0   0.00  20.90 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/1276    . 0.00  146  0   717546  0.0   0.00  26.25 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -     0/0/1241    . 0.00  297  0   663679  0.0   0.00  24.42 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 87171 11/158/1197 K 3.86  3    303 682804  338.7 2.90  22.67 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=3309671230 HTTP/1.1
   20-0 -     0/0/578     . 0.00  320  0   321861  0.0   0.00  12.08 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 88700 1/92/551    K 1.25  2    354 316249  34.3  1.53  11.87 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=4009022139 HTTP/1.1
   22-0 -     0/0/1162    . 0.00  362  0   647146  0.0   0.00  25.56 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/1153    . 0.00  238  0   707635  0.0   0.00  28.29 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 70227 0/512/977   _ 11.33 0    25  492984  0.0   11.09 19.53 194.247.173.99 http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   25-0 -     0/0/825     . 0.00  369  0   505866  0.0   0.00  15.07 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 87208 1/217/1049  K 2.59  1    396 655987  35.3  3.04  21.92 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=2907122240 HTTP/1.1
   27-0 -     0/0/91      . 0.00  367  0   74231   0.0   0.00  0.91  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/738     . 0.00  314  0   420670  0.0   0.00  13.83 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 87260 1/152/558   K 3.80  3    288 440424  34.4  3.14  8.57  192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=2508775529 HTTP/1.1
   30-0 -     0/0/522     . 0.00  151  0   329214  0.0   0.00  10.69 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 87262 0/132/272   _ 2.61  0    0   135637  0.0   2.60  5.01  ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   32-0 87263 26/191/1038 W 2.30  0    0   616927  355.1 3.79  19.14 20.1.205.87    http/1.1 proxy-subdomains-vhost.localhos GET /radio.php HTTP/1.1
   33-0 -     0/0/845     . 0.00  318  0   471702  0.0   0.00  18.85 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/260     . 0.00  319  0   148688  0.0   0.00  4.15  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/157     . 0.00  4086 0   115547  0.0   0.00  4.68  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/466     . 0.00  3993 0   274598  0.0   0.00  9.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/22      . 0.00  4085 0   10578   0.0   0.00  0.40  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/23      . 0.00  4019 0   11684   0.0   0.00  0.51  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/25      . 0.00  4020 0   15119   0.0   0.00  0.63  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/4       . 0.00  4309 0   1340    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/115     . 0.00  3802 0   65290   0.0   0.00  3.06  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/2       . 0.00  4317 0   7       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/7       . 0.00  4293 0   2574    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/4       . 0.00  4307 0   1141    0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/2       . 0.00  4316 0   60      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/4       . 0.00  4308 0   244     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/147     . 0.00  3762 0   75011   0.0   0.00  3.67  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/3       . 0.00  4310 0   77      0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1046
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...29)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 23318
   total entries replaced since starting: 0
   total entries expired since starting: 22257
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 83 miss
   total removes since starting: 15 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit